@logic-joe/fleek 0.2.16 → 0.2.17

package/dist/fleek.mjs

@@ -4653,7 +4653,7 @@ var require_setup_session = __commonJS({
     exports.SETUP_SESSION_TTL_MINUTES = 30;
     exports.SETUP_SESSION_OPEN_MAX = 10;
     exports.SETUP_SESSION_CLAIM_LIMIT = 10;
-    exports.FLEEK_CLI_SETUP_VERSION_DEFAULT = "0.2.16";
+    exports.FLEEK_CLI_SETUP_VERSION_DEFAULT = "0.2.17";
     exports.FLEEK_CLI_PACKAGE = "@logic-joe/fleek";
     exports.FLEEK_CANONICAL_SERVER = "https://api.onfleek.app";
     exports.SETUP_CLIENT_APPS = ["claude-code", "codex", "orca", "cursor", "other"];
@@ -31681,7 +31681,7 @@ var require_secret_shape = __commonJS({
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.SECRET_SHAPE_LIMITS = void 0;
     exports.validUrlHost = validUrlHost;
-    exports.detectSecretShape = detectSecretShape;
+    exports.detectSecretShape = detectSecretShape2;
     exports.SECRET_SHAPE_LIMITS = { highEntropyMinRun: 32, highEntropyMinBits: 4.2, highEntropyMinSwitchRate: 0.35 };
     var TOKEN_PREFIXES = [
       ["ghp_", 30],
@@ -31983,7 +31983,7 @@ var require_secret_shape = __commonJS({
       }
       return -1;
     }
-    function detectSecretShape(text6) {
+    function detectSecretShape2(text6) {
       if (text6.length === 0)
         return null;
       if (text6.includes("-----BEGIN "))
@@ -32670,7 +32670,7 @@ var require_knowledge_skeleton = __commonJS({
   "../validation/dist/agent-platform/knowledge-skeleton.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
-    exports.PROJECT_CORE_PAGES = exports.DEVELOPMENT_PROFILE_KEYS = void 0;
+    exports.PROJECT_CORE_PAGES = exports.DEVELOPMENT_PROFILE_KEYS = exports.AGENT_GIT_KEYS = exports.AGENT_GIT_DEFAULTS = void 0;
     exports.exampleProfileSchema = exampleProfileSchema;
     exports.withMissingExampleFields = withMissingExampleFields;
     exports.skeletonLabels = skeletonLabels;
@@ -32694,7 +32694,8 @@ var require_knowledge_skeleton = __commonJS({
           // `fleek_get_project_brief` (never guessed; forms written as examples, without angle brackets: the agent reads them through
           // the text owner). Env files only by name, never credentials.
           ...DEVELOPMENT_FIELDS.map(([key, de, en, type]) => developmentField(key, t(L(de, en)), type)),
-          // "Agenten dürfen (Git)": true = without asking; empty / false = ask first (strict default - never pre-set to true)
+          // "Agenten dürfen (Git)": true = without asking; false = ask first. Empty = the code default `AGENT_GIT_DEFAULTS` (bundle R A8;
+          // the brief returns the effective value with its source) - the profile field is never pre-set
           ...AGENT_GIT_FIELDS.map(([key, de, en]) => ({ key, label: t(L(de, en)), type: "bool" }))
         ]
       };
@@ -32731,6 +32732,17 @@ var require_knowledge_skeleton = __commonJS({
       ["agent_git_delete_remote", "Agenten dürfen Remote-Branch löschen", "Agents may delete the remote branch"],
       ["agent_git_stop_servers", "Agenten dürfen fremde Server stoppen", "Agents may stop other servers"]
     ];
+    exports.AGENT_GIT_DEFAULTS = Object.freeze({
+      agent_git_commit: true,
+      agent_git_push: true,
+      // own feature branch only
+      agent_git_open_mr: true,
+      agent_git_merge: false,
+      agent_git_delete_local: false,
+      agent_git_delete_remote: false,
+      agent_git_stop_servers: false
+    });
+    exports.AGENT_GIT_KEYS = AGENT_GIT_FIELDS.map(([key]) => key);
     exports.DEVELOPMENT_PROFILE_KEYS = [...DEVELOPMENT_FIELDS.map(([key]) => key), ...AGENT_GIT_FIELDS.map(([key]) => key)];
     function developmentField(key, label, type) {
       switch (type) {
@@ -36153,7 +36165,7 @@ var require_agent_error_details = __commonJS({
       CLAIMED_BY_OTHER: { holderLabel: string4, expiresAt: string4, holderRef: personRef },
       CLAIM_REQUIRED: { issueIds: list2, requiredPurpose: oneOf3(["work"]), providedPurpose: oneOf3(["review"]) },
       RENEW_LIMIT: { hardExpiresAt: string4 },
-      NOT_READY: { readySelector: string4 },
+      NOT_READY: { readySelector: string4, reason: oneOf3(["restricted_person", "not_own_agent"]) },
       REVISION_CONFLICT: { currentRevision: integer },
       STATE_CONFLICT: { currentStateVersion: integer },
       TYPED_COMMENT_IMMUTABLE: { kind: string4 },
@@ -37954,6 +37966,7 @@ var EN = {
   "init.manualBoundary": "You start the agent yourself: the file selection is only a recommendation, the agent may read more on your machine.",
   "init.outputTimeout": "{app}: no output file in time.",
   "init.outputInvalid": "{app}: the output file is not valid ({field}).",
+  "init.outputInvalidValue": '{app}: the output file is not valid ({field}: "{value}" is not allowed).',
   "init.unusable": "{app}: the analysis contains something that looks like a credential in a required field - nothing sent.",
   "init.removed": "{count} value(s) removed: looks like a credential or a forbidden path ({paths}).",
   "init.preview": "{app}: {sections} section(s), {components} component(s), {hints} review hint(s), {environments} environment(s), {warnings} hint(s) for the reviewer.",
@@ -38339,7 +38352,7 @@ var DE = {
     "           fleek work complete <claim> --outcome done|partial|handed_off --summary <text>",
     "           fleek work progress <claim> --summary <text>",
     "Fragen:    fleek ask <ticket> --text <frage> | fleek answer <frage> --text <antwort>",
-    "Abwicklung: fleek route <ticket> <schlüssel> [--claim <id>] | fleek route <ticket> --default",
+    "Auftragsart: fleek route <ticket> <schlüssel> [--claim <id>] | fleek route <ticket> --default",
     "Kontext:   fleek context <ticket> | fleek inbox | fleek wait [--cursor <c>] [--seconds <n>]",
     "Ereignisse: fleek listen --exec <programm> [args...] [--name <n>] [--timeout <1..3600>] [--concurrency <1|2>] [--quiet-children] [--from-now]",
     "MCP:       fleek mcp proxy [--profile <schlüssel|workspace>] [--app claude-code|codex|orca] [--label <text>]  (stdio-MCP über diese Anmeldung)",
@@ -38742,6 +38755,7 @@ var DE = {
   "init.manualBoundary": "Du startest den Agenten selbst: Die Dateiauswahl ist nur eine Empfehlung, der Agent kann auf deinem Rechner mehr lesen.",
   "init.outputTimeout": "{app}: keine Ausgabedatei innerhalb der Frist.",
   "init.outputInvalid": "{app}: Die Ausgabedatei ist ungültig ({field}).",
+  "init.outputInvalidValue": "{app}: Die Ausgabedatei ist ungültig ({field}: „{value}“ ist nicht erlaubt).",
   "init.unusable": "{app}: Die Analyse enthält in einem Pflichtfeld etwas, das wie ein Zugangsschlüssel aussieht - nichts gesendet.",
   "init.removed": "{count} Angabe(n) entfernt: sieht aus wie ein Zugangsschlüssel oder ein verbotener Pfad ({paths}).",
   "init.preview": "{app}: {sections} Abschnitt(e), {components} Komponente(n), {hints} Prüfhinweis(e), {environments} Umgebung(en), {warnings} Hinweis(e) für die Prüfung.",
@@ -57492,9 +57506,43 @@ function instructions2(ctx, app, facts) {
     }, null, 2),
     "```",
     "",
+    ...allowedValueLines(de),
     de ? `Grenzen: Abschnitte ≤ ${import_validation3.PROJECT_INIT_LIMITS.section} Zeichen, Hinweise ≤ ${import_validation3.PROJECT_INIT_LIMITS.reviewHints}, Datei ≤ 64 KiB. Einfacher Text mit Absätzen und Spiegelstrichen.` : `Bounds: sections <= ${import_validation3.PROJECT_INIT_LIMITS.section} characters, hints <= ${import_validation3.PROJECT_INIT_LIMITS.reviewHints}, file <= 64 KiB. Plain text with paragraphs and bullets.`
   ].join("\n");
 }
+var INIT_AGENT_ENUM_FIELDS = [
+  ["cms.items[].kind", import_validation3.PROJECT_INIT_CMS_ITEM_KINDS],
+  ["integrations[].kind", import_validation3.PROJECT_INIT_INTEGRATION_KINDS],
+  ["integrations[].direction", import_validation3.PROJECT_INIT_DIRECTIONS],
+  ["environments[].label", import_validation3.PROJECT_INIT_ENVIRONMENTS],
+  ["reviewHints[].topic", import_validation3.PROJECT_INIT_HINT_TOPICS],
+  ["statementChecks[].result", import_validation3.PROJECT_INIT_STATEMENT_RESULTS]
+];
+function allowedValueLines(de) {
+  return [
+    de ? "## Erlaubte Werte" : "## Allowed values",
+    de ? "- Diese Felder nehmen genau einen der genannten Werte; jeder andere Wert macht die ganze Ausgabe ungültig. Passt keiner, nimm `other`, wo es ihn gibt." : "- These fields take exactly one of the listed values; any other value invalidates the whole output. If none fits, use `other` where it exists.",
+    ...INIT_AGENT_ENUM_FIELDS.map(([field, values]) => `- \`${field}\`: ${values.map((value) => `\`${value}\``).join(", ")}`),
+    ""
+  ];
+}
+function rejectedEnumValue(root, issue) {
+  if (!issue || issue.reason !== "invalid_enum_value") return null;
+  let current2 = root;
+  for (const [, index, key] of issue.path.matchAll(/\[(\d+)\]|([^.[\]]+)/g)) {
+    if (current2 === null || typeof current2 !== "object") return null;
+    const step = index !== void 0 ? Number(index) : key;
+    if (!Object.prototype.hasOwnProperty.call(current2, step)) return null;
+    current2 = current2[step];
+  }
+  if (typeof current2 !== "string" || current2.length === 0 || current2.length > 40 || !/^[\p{L}\p{N} _.\-/]+$/u.test(current2)) return null;
+  return (0, import_validation3.detectSecretShape)(current2) ? null : current2;
+}
+function outputInvalidLine(ctx, app, root, issue) {
+  const field = issue?.path || "-";
+  const value = rejectedEnumValue(root, issue);
+  return value === null ? ctx.t("init.outputInvalid", { app, field }) : ctx.t("init.outputInvalidValue", { app, field, value });
+}
 function projectFactLines(de, facts) {
   const matched = projectFactsForStack(facts.stack.map((item2) => item2.product));
   if (!matched.length) return [];
@@ -57975,7 +58023,7 @@ async function runApplication(ctx, client, values, checkout, context, app, appli
   const agentOutput = raw === void 0 ? null : (0, import_validation3.parseProjectInitAgentOutput)(raw);
   if (!agentOutput?.ok) {
     emit(ctx, { event: "error", app: app.key, code: "output_invalid" });
-    if (!ctx.json) ctx.out.error(ctx.out.style.fail(ctx.t("init.outputInvalid", { app: app.key, field: agentOutput && !agentOutput.ok ? agentOutput.issues[0]?.path || "-" : "-" })));
+    if (!ctx.json) ctx.out.error(ctx.out.style.fail(outputInvalidLine(ctx, app.key, raw, agentOutput && !agentOutput.ok ? agentOutput.issues[0] : void 0)));
     return "failed";
   }
   const composed = (0, import_validation3.composeProjectInitSummary)({
@@ -57987,7 +58035,7 @@ async function runApplication(ctx, client, values, checkout, context, app, appli
   const parsed = (0, import_validation3.parseProjectInitSummary)(composed);
   if (!parsed.ok) {
     emit(ctx, { event: "error", app: app.key, code: "output_invalid" });
-    if (!ctx.json) ctx.out.error(ctx.out.style.fail(ctx.t("init.outputInvalid", { app: app.key, field: parsed.issues[0]?.path || "-" })));
+    if (!ctx.json) ctx.out.error(ctx.out.style.fail(outputInvalidLine(ctx, app.key, composed, parsed.issues[0])));
     return "failed";
   }
   const findings = (0, import_validation3.scanProjectInit)(parsed.value);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logic-joe/fleek",
-  "version": "0.2.16",
+  "version": "0.2.17",
   "description": "fleek - command line client for the Fleek agent hub (MCP over OAuth, OS keychain, signed role/project kits)",
   "license": "Apache-2.0",
   "type": "module",