@maycombhq/atticus 2.0.0-beta.21 → 2.0.0-beta.23

package/dist/bin.js

@@ -6,7 +6,7 @@ var __atticusUrl = (p) => new URL("./" + p, import.meta.url).href;
 var __atticusPath = (p) => __atticusFileURLToPath(__atticusUrl(p));
 import {
   VERSION
-} from "./chunk-VUVGX5L2.js";
+} from "./chunk-JFFKHIM6.js";
 import "./chunk-TV45EUGM.js";
 
 // packages/cli/dist/bin.js
@@ -25,7 +25,7 @@ else if ((await import("./chunk-QBNWF5ZU.js")).nodeTooOld(process.versions.node)
   process.exitCode = 1;
 } else {
   if (process.env.ATTICUS_MAX_OLD_SPACE) {
-    const { reExecForMemory } = await import("./chunk-JAABT3DA.js");
+    const { reExecForMemory } = await import("./chunk-ZJGCGKA4.js");
     const again = reExecForMemory(process.env, process.execArgv);
     if (again) {
       const { spawnSync } = await import("node:child_process");
@@ -33,11 +33,16 @@ else if ((await import("./chunk-QBNWF5ZU.js")).nodeTooOld(process.versions.node)
       process.exit(r.status ?? 1);
     }
   }
-  const { main } = await import("./chunk-7FHNFCHK.js");
-  await main(argv, {
-    out: (line) => process.stdout.write(line + "\n"),
-    err: (line) => process.stderr.write(line + "\n")
-  }).then((code) => {
+  const { main } = await import("./chunk-QAVRDONY.js");
+  await main(
+    argv,
+    {
+      out: (line) => process.stdout.write(line + "\n"),
+      err: (line) => process.stderr.write(line + "\n")
+    },
+    // ADR 0187: a long command keeps what it prints for the app's Console.
+    { record: true }
+  ).then((code) => {
     process.exitCode = code;
   }, (err) => {
     const message = err instanceof Error ? err.message : String(err);

package/dist/{chunk-BXBCMGIQ.js → chunk-24OXGB3P.js}

@@ -70,7 +70,7 @@ function aliasArgv(argv, positions) {
     out.splice(first, 1, "estate", "join");
   else if (word === "stories")
     out.splice(first, 1, "plan", "stories");
-  else if (word === "task" && second !== "run" && second !== "context")
+  else if (word === "task" && !["run", "context", "run-ready"].includes(second ?? ""))
     out.splice(first + 1, 0, "run");
   return out;
 }

package/dist/{chunk-PRW3HXM3.js → chunk-27AJAKX7.js}

@@ -6,12 +6,14 @@ var __atticusPath = (p) => __atticusFileURLToPath(__atticusUrl(p));
 import {
   RuntimeConfigError,
   RuntimeError,
-  estimateTokens,
   registerModelProvider
-} from "./chunk-QHJJMZLX.js";
+} from "./chunk-3424TLIJ.js";
+import {
+  estimateTokens
+} from "./chunk-FPBUTZI5.js";
 import {
   redactText
-} from "./chunk-ODMBPDDV.js";
+} from "./chunk-B4AEL3RF.js";
 import {
   __commonJS,
   __require,
@@ -26302,6 +26304,7 @@ var copy = {
   literalKey: (provider, name) => `adapters.model.settings.${name} for the ${provider} model provider looks like a key or token itself. A key never goes in runtime.yaml: put it in an environment variable and give that variable's name as keyEnv (for example keyEnv: ATTICUS_MODEL_KEY).`,
   keyEnvName: (provider) => `adapters.model.settings.keyEnv for the ${provider} model provider must be the name of an environment variable (letters, digits and _, for example ATTICUS_MODEL_KEY), not the key.`,
   keyEnvUnset: (provider, keyEnv) => `The ${provider} model provider reads its key from ${keyEnv}, which is set neither in the environment nor in this machine's credential store. Keep it there with atticus secret set ${keyEnv} (or the AI tab's "Set the key on this machine"), or set the environment variable; the key never goes in runtime.yaml.`,
+  keyEnvNotRead: (provider, keyEnv) => `The ${provider} model provider's keyEnv is ${keyEnv}, which isn't read from the environment: only a variable starting ATTICUS_ (such as ATTICUS_MODEL_KEY) or a model provider's own (such as ANTHROPIC_API_KEY or OPENAI_API_KEY) is, so a runtime.yaml can't send another secret (a Git or pipeline token, cloud credentials) to the model's address. Name one of those in keyEnv, or keep the key with atticus secret set ${keyEnv}.`,
   plainHttp: (provider, url) => `The ${provider} model provider only calls https:// addresses (prompts carry your organisation's material), and ${url} isn't one. Plain http:// is accepted only for this machine (localhost or 127.0.0.1).`,
   awsUnset: (missing) => `AWS Bedrock reads its credentials from the standard AWS environment variables, and ${missing.join(" and ")} ${missing.length === 1 ? "isn't" : "aren't"} set. Set AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY (and AWS_SESSION_TOKEN for temporary credentials) in the environment that runs Atticus.`,
   awsNoRegion: () => "AWS Bedrock needs a region: set adapters.model.settings.region in runtime.yaml (for example region: us-east-1), or AWS_REGION in the environment.",
@@ -26498,6 +26501,24 @@ function looksLikeKey(v) {
   return false;
 }
 var ENV_NAME = /^[A-Za-z_][A-Za-z0-9_]{0,127}$/;
+var PROVIDER_KEY_ENVS = [
+  "ANTHROPIC_API_KEY",
+  "OPENAI_API_KEY",
+  "AZURE_OPENAI_API_KEY",
+  "AZURE_OPENAI_KEY",
+  "GEMINI_API_KEY",
+  "MISTRAL_API_KEY",
+  "COHERE_API_KEY",
+  "GROQ_API_KEY",
+  "OPENROUTER_API_KEY",
+  "TOGETHER_API_KEY",
+  "DEEPSEEK_API_KEY",
+  "XAI_API_KEY",
+  "FIREWORKS_API_KEY"
+];
+function keyEnvFromEnvironment(name) {
+  return /^ATTICUS_[A-Z0-9_]+$/.test(name) || PROVIDER_KEY_ENVS.includes(name);
+}
 var SettingsReader = class {
   provider;
   raw;
@@ -26574,9 +26595,10 @@ var SettingsReader = class {
   }
 };
 function readKey(provider, keyEnv, env, store = defaultKeyStore()) {
-  const v = env[keyEnv]?.trim() || store.get(keyEnv)?.trim();
+  const fromEnv = keyEnvFromEnvironment(keyEnv);
+  const v = (fromEnv ? env[keyEnv]?.trim() : void 0) || store.get(keyEnv)?.trim();
   if (!v)
-    throw new ModelProviderConfigError(copy.keyEnvUnset(provider, keyEnv));
+    throw new ModelProviderConfigError(fromEnv ? copy.keyEnvUnset(provider, keyEnv) : copy.keyEnvNotRead(provider, keyEnv));
   return v;
 }
 
@@ -27771,6 +27793,8 @@ export {
   ModelProviderConfigError,
   ModelProviderError,
   looksLikeKey,
+  PROVIDER_KEY_ENVS,
+  keyEnvFromEnvironment,
   SettingsReader,
   readKey,
   TransportError,

package/dist/{chunk-PQH56YF6.js → chunk-2QPJ4E4Z.js}

@@ -10,12 +10,14 @@ import {
 import {
   eolOf,
   inEol,
-  orgPackDirOf,
-  require_dist
-} from "./chunk-PAINMSID.js";
+  orgPackDirOf
+} from "./chunk-FPBUTZI5.js";
 import {
   writeFileIfUnchanged
-} from "./chunk-ODMBPDDV.js";
+} from "./chunk-B4AEL3RF.js";
+import {
+  require_dist
+} from "./chunk-BQGDB6ZL.js";
 import {
   __toESM
 } from "./chunk-TV45EUGM.js";

package/dist/{chunk-7CZHUZBL.js → chunk-2UMSHYCB.js}

@@ -5,44 +5,55 @@ var __atticusUrl = (p) => new URL("./" + p, import.meta.url).href;
 var __atticusPath = (p) => __atticusFileURLToPath(__atticusUrl(p));
 import {
   estimateOf
-} from "./chunk-WFU77T3A.js";
+} from "./chunk-3MYBT62N.js";
 import {
   changeMapBody,
   changeMapOf
-} from "./chunk-GNWAOVFQ.js";
-import "./chunk-36RY7ZXM.js";
-import "./chunk-2V2ZPQQU.js";
-import "./chunk-5QUOPNLN.js";
-import "./chunk-EZIN5E5B.js";
-import "./chunk-3LZ6P5EP.js";
+} from "./chunk-FMJYKLDY.js";
+import "./chunk-LPDTDFKA.js";
+import "./chunk-2WUTCPPJ.js";
+import "./chunk-XGO74QWR.js";
+import "./chunk-EMVZIOOD.js";
+import "./chunk-MUWDB4R4.js";
 import {
   knowledgeAppliesMarkdown,
   readKnowledgeApplies
-} from "./chunk-BEPCKDCP.js";
-import "./chunk-HWD4JPU7.js";
-import "./chunk-5WERBKLE.js";
+} from "./chunk-MLGWSBF4.js";
+import "./chunk-CA3DKO4D.js";
 import {
   readRound,
   reviewedGates,
   roundsOf
-} from "./chunk-K332XW7K.js";
-import "./chunk-HSZMPH5T.js";
-import "./chunk-D2WSW4GU.js";
-import "./chunk-4KNOJC6J.js";
-import "./chunk-4SLBCEPD.js";
-import "./chunk-64AADMTW.js";
-import "./chunk-JYMIB5XY.js";
-import "./chunk-CPK7QSBG.js";
-import "./chunk-YO2PKTXT.js";
-import "./chunk-TWQRPM76.js";
-import "./chunk-XOL3GFW2.js";
-import "./chunk-QHJJMZLX.js";
-import "./chunk-7AB6OWTV.js";
-import "./chunk-PAINMSID.js";
-import "./chunk-ODMBPDDV.js";
+} from "./chunk-D6BVLTDV.js";
+import "./chunk-RCG5IAAT.js";
+import "./chunk-WZYM5M4U.js";
+import "./chunk-NC755EKE.js";
+import "./chunk-FL344WQD.js";
+import "./chunk-IKAW2KJU.js";
+import "./chunk-CZ2ZS7AT.js";
+import "./chunk-4GAB5ZOZ.js";
+import "./chunk-A4JXVO5O.js";
+import "./chunk-TDSCKP3V.js";
+import "./chunk-G6EFXTUO.js";
+import "./chunk-PQQKZPBU.js";
+import "./chunk-3EWKO457.js";
+import "./chunk-3424TLIJ.js";
+import "./chunk-QA4O2GGC.js";
+import {
+  redactSecrets
+} from "./chunk-FPBUTZI5.js";
+import "./chunk-B4AEL3RF.js";
+import "./chunk-BQGDB6ZL.js";
 import "./chunk-TV45EUGM.js";
 
 // packages/cli/dist/handoff-review.js
+function inlineCode(text) {
+  const s = redactSecrets(text.replace(/\s+/g, " ").trim());
+  const longest = Math.max(0, ...[...s.matchAll(/`+/g)].map((m) => m[0].length));
+  const tick = "`".repeat(longest + 1);
+  const pad = s.startsWith("`") || s.endsWith("`") ? " " : "";
+  return `${tick}${pad}${s}${pad}${tick}`;
+}
 var days = (d) => `${d.p20}\u2013${d.p80} days (most likely ${d.p50})`;
 async function handoffReview(root, change) {
   const lines = [];
@@ -55,7 +66,7 @@ async function handoffReview(root, change) {
     lines.push("No target flows yet: the architecture stage writes them.", "");
   const applies = await readKnowledgeApplies(root, change).catch(() => void 0);
   if (applies)
-    lines.push(knowledgeAppliesMarkdown(applies).trimEnd(), "");
+    lines.push(knowledgeAppliesMarkdown(applies, { text: inlineCode }).trimEnd(), "");
   lines.push("### Estimate", "");
   const est = await estimateOf(root, change).catch(() => void 0);
   if (est?.effort) {
@@ -109,7 +120,7 @@ async function handoffReview(root, change) {
   else {
     const order = ["blocking", "gap", "risk", "idea"];
     for (const f of open.sort((a, b) => order.indexOf(a.severity) - order.indexOf(b.severity)))
-      lines.push(`- **${f.severity}** (${f.gate}): ${f.summary} \`${f.id}\``);
+      lines.push(`- **${f.severity}** (${f.gate}): ${inlineCode(f.summary)} ${inlineCode(f.id)}`);
     lines.push("");
   }
   return lines.join("\n");

package/dist/{chunk-2V2ZPQQU.js → chunk-2WUTCPPJ.js}

@@ -5,17 +5,17 @@ var __atticusUrl = (p) => new URL("./" + p, import.meta.url).href;
 var __atticusPath = (p) => __atticusFileURLToPath(__atticusUrl(p));
 import {
   changeStore
-} from "./chunk-HSZMPH5T.js";
+} from "./chunk-WZYM5M4U.js";
 import {
   ManualNotifier,
   fileStepStore
-} from "./chunk-4KNOJC6J.js";
+} from "./chunk-FL344WQD.js";
 import {
   readCatalog
-} from "./chunk-4SLBCEPD.js";
+} from "./chunk-IKAW2KJU.js";
 import {
   readServiceRequestExports
-} from "./chunk-CPK7QSBG.js";
+} from "./chunk-A4JXVO5O.js";
 import {
   Initiative,
   IsoDate,
@@ -28,15 +28,17 @@ import {
   orgPackDirOf,
   parseRecord,
   recordPath,
-  require_dist,
   serializeRecord,
   stateDirOf,
   toCanonicalYaml
-} from "./chunk-PAINMSID.js";
+} from "./chunk-FPBUTZI5.js";
 import {
   SCHEMA_VERSION,
   renameRetrying
-} from "./chunk-ODMBPDDV.js";
+} from "./chunk-B4AEL3RF.js";
+import {
+  require_dist
+} from "./chunk-BQGDB6ZL.js";
 import {
   __toESM
 } from "./chunk-TV45EUGM.js";

package/dist/{chunk-YF5DZCPN.js → chunk-2YSD6E6V.js}

@@ -7,49 +7,50 @@ import {
   copilotAcpAllowed,
   copilotAcpByDefault,
   readWrites
-} from "./chunk-LIJJCBQI.js";
+} from "./chunk-66AQ2JIU.js";
 import {
   mapCommand,
   mapStateOf
-} from "./chunk-26Z7OGQW.js";
+} from "./chunk-L3RCQWVQ.js";
 import {
   factsRepos,
   verifyCommand
-} from "./chunk-LN77DXBM.js";
-import "./chunk-L4CESDPB.js";
+} from "./chunk-T6MX7WXM.js";
+import "./chunk-EHXDB3SA.js";
+import "./chunk-IMZFOMVX.js";
 import {
   plannedTopUp,
   recordRulesNow,
   ruleSetsOfFiles
-} from "./chunk-U3NBK4EU.js";
-import "./chunk-455SYIIE.js";
+} from "./chunk-VJFXQISZ.js";
+import "./chunk-CT6NINGR.js";
 import {
   estateFreshness
-} from "./chunk-LWDNKE4X.js";
+} from "./chunk-6ZFF7XSL.js";
 import {
   onboardingQueue
-} from "./chunk-HE3HRDNZ.js";
-import "./chunk-3J5I7ZOU.js";
-import "./chunk-4FOAYLI4.js";
-import "./chunk-GX74YWR7.js";
-import "./chunk-G6IQYM25.js";
-import "./chunk-LPV6T362.js";
+} from "./chunk-XF6TSZW2.js";
+import "./chunk-K4RNVDR4.js";
+import "./chunk-7K5OH45X.js";
+import "./chunk-XFDDJQT7.js";
+import "./chunk-6R5VHR3N.js";
 import {
   rulesLackingAll
-} from "./chunk-GIFMBCTW.js";
+} from "./chunk-ZLQEQR3D.js";
 import {
   loadReadPlan,
   partUnaccounted,
   readPlanProgress
-} from "./chunk-MD7KUEJ3.js";
+} from "./chunk-OPWGPQ2N.js";
 import {
   checkoutOf,
   conventionsAt,
   excludesOf,
   headOf
-} from "./chunk-Q46QDDMF.js";
-import "./chunk-TGVVUKTG.js";
-import "./chunk-TQ4TG57V.js";
+} from "./chunk-73GFVW2L.js";
+import "./chunk-XOMEQVLK.js";
+import "./chunk-C6ORPLCN.js";
+import "./chunk-NROSSWMS.js";
 import {
   isMetarepo,
   notMetarepo
@@ -58,30 +59,31 @@ import {
   ASSISTANT_FORMATS,
   assistantTier,
   readProbes
-} from "./chunk-3AQ2R5NL.js";
+} from "./chunk-J4CPHJUL.js";
 import "./chunk-VOGCSYOI.js";
 import {
   estateRepos,
   productionRepos
-} from "./chunk-4SLBCEPD.js";
-import "./chunk-64AADMTW.js";
+} from "./chunk-IKAW2KJU.js";
 import {
   dirSource,
   sameCommit,
   sessionTokensFor
-} from "./chunk-JYMIB5XY.js";
-import "./chunk-CPK7QSBG.js";
-import "./chunk-YO2PKTXT.js";
-import "./chunk-TWQRPM76.js";
-import "./chunk-VUVGX5L2.js";
-import "./chunk-API5TOUB.js";
-import "./chunk-XOL3GFW2.js";
+} from "./chunk-CZ2ZS7AT.js";
+import "./chunk-4GAB5ZOZ.js";
+import "./chunk-A4JXVO5O.js";
+import "./chunk-TDSCKP3V.js";
+import "./chunk-G6EFXTUO.js";
+import "./chunk-PQQKZPBU.js";
+import "./chunk-JFFKHIM6.js";
+import "./chunk-RRQUQAXP.js";
+import "./chunk-3EWKO457.js";
 import {
   AcpSetupError,
   AcpSignInError,
   currentPromptLimit
-} from "./chunk-QHJJMZLX.js";
-import "./chunk-7AB6OWTV.js";
+} from "./chunk-3424TLIJ.js";
+import "./chunk-QA4O2GGC.js";
 import {
   factsDirOf,
   factsRelOf,
@@ -89,13 +91,15 @@ import {
   listQuestions,
   loadOrgPack,
   orgPackDirOf,
-  parseFacts,
-  require_dist
-} from "./chunk-PAINMSID.js";
+  parseFacts
+} from "./chunk-FPBUTZI5.js";
 import {
   ensureLocalIgnore,
   writeFileAtomic
-} from "./chunk-ODMBPDDV.js";
+} from "./chunk-B4AEL3RF.js";
+import {
+  require_dist
+} from "./chunk-BQGDB6ZL.js";
 import {
   __toESM
 } from "./chunk-TV45EUGM.js";