@outcomeeng/spx 0.6.19 → 0.6.20

package/README.md

@@ -2,6 +2,8 @@
 
 Developer CLI for code validation and session management.
 
+Current release: 0.6.20
+
 ## What is spx?
 
 `spx` is a command-line interface (CLI) tool that provides code validation and session management for projects that implement the spec-as-source methodology named [Outcome Engineering](https://outcome.engineering). The `spx` CLI works hand-in-hand with the **Claude Code** and **Codex** [plugin marketplace for Outcome Engineering](https://github.com/outcomeeng/plugins).
@@ -103,6 +105,18 @@ Sessions are stored in `.spx/sessions/` with priority-based ordering (high > med
 
 The `spx spec` CLI provides deterministic inspection and evidence-projection commands such as `status`, `next`, and `context`. Spec authoring and tree-management workflows live in the **spec-tree** Claude Code plugin, available at [`outcomeeng/plugins`](https://github.com/outcomeeng/plugins). The plugin provides skills for understanding, authoring, decomposing, contextualizing, testing, refactoring, and aligning specification trees.
 
+### Release Preparation
+
+Prepare release artifacts after updating the package version:
+
+```bash
+# Generate release notes from product history
+spx release notes
+
+# Update configured release documentation for the current package version
+spx release docs sync
+```
+
 ## Development
 
 ### Setup

package/dist/cli.js

@@ -10055,12 +10055,17 @@ var AGENT_RUN_TOOLS = {
   WRITE: "Write",
   EDIT: "Edit"
 };
+var AGENT_FILE_TOOLS = [
+  AGENT_RUN_TOOLS.READ,
+  AGENT_RUN_TOOLS.WRITE,
+  AGENT_RUN_TOOLS.EDIT
+];
 var AGENT_TOOL_PERMISSION_BEHAVIOR = {
   ALLOW: "allow",
   DENY: "deny"
 };
 function authorizeAgentFileToolPath(workingDirectory, tool, filePath) {
-  return (tool === AGENT_RUN_TOOLS.WRITE || tool === AGENT_RUN_TOOLS.EDIT) && filePath.length > 0 && isPathContained(workingDirectory, filePath) ? AGENT_TOOL_PERMISSION_BEHAVIOR.ALLOW : AGENT_TOOL_PERMISSION_BEHAVIOR.DENY;
+  return AGENT_FILE_TOOLS.includes(tool) && filePath.length > 0 && isPathContained(workingDirectory, filePath) ? AGENT_TOOL_PERMISSION_BEHAVIOR.ALLOW : AGENT_TOOL_PERMISSION_BEHAVIOR.DENY;
 }
 var AGENT_PERMISSION_MODES = {
   DONT_ASK: "dontAsk"
@@ -10068,6 +10073,7 @@ var AGENT_PERMISSION_MODES = {
 
 // src/agent/claude-agent-runner.ts
 var AGENT_FILE_TOOL_PATH_INPUT_FIELD = "file_path";
+var AGENT_PRE_TOOL_USE_HOOK_EVENT = "PreToolUse";
 var AGENT_FILE_TOOL_PERMISSION_DENIED_MESSAGE = "Agent file tool target is outside its working directory";
 var ClaudeAgentRunner = class {
   async run(request) {
@@ -10096,41 +10102,54 @@ function createAgentRunOptions(request) {
     cwd: request.workingDirectory,
     settingSources: [],
     tools: [...request.tools],
-    allowedTools: autoAllowedAgentTools(request.allowedTools),
-    canUseTool: createAgentToolPermission(request),
+    allowedTools: [...request.allowedTools],
+    hooks: {
+      PreToolUse: [{ hooks: [createAgentFileToolPermissionHook(request)] }]
+    },
     permissionMode: request.permissionMode,
     maxTurns: request.maxTurns
   };
 }
-function autoAllowedAgentTools(allowedTools) {
-  return allowedTools.filter((tool) => !isAgentFileMutationTool(tool));
-}
-function createAgentToolPermission(request) {
-  return async (toolName, input) => {
-    if (!isAgentRunTool(toolName) || !request.allowedTools.includes(toolName)) {
-      return deniedAgentToolPermission();
+function createAgentFileToolPermissionHook(request) {
+  return async (input) => {
+    if (input.hook_event_name !== AGENT_PRE_TOOL_USE_HOOK_EVENT || !isAgentRunTool(input.tool_name) || !request.allowedTools.includes(input.tool_name) || !isRecord8(input.tool_input)) {
+      return deniedAgentFileToolPermission();
     }
-    if (!isAgentFileMutationTool(toolName)) {
-      return { behavior: AGENT_TOOL_PERMISSION_BEHAVIOR.ALLOW, updatedInput: input };
+    if (!isAgentFileTool(input.tool_name)) {
+      return allowedAgentFileToolPermission();
     }
-    const filePath = input[AGENT_FILE_TOOL_PATH_INPUT_FIELD];
-    if (typeof filePath !== "string" || authorizeAgentFileToolPath(request.workingDirectory, toolName, filePath) === AGENT_TOOL_PERMISSION_BEHAVIOR.DENY) {
-      return deniedAgentToolPermission();
+    const filePath = input.tool_input[AGENT_FILE_TOOL_PATH_INPUT_FIELD];
+    if (typeof filePath !== "string" || authorizeAgentFileToolPath(request.workingDirectory, input.tool_name, filePath) === AGENT_TOOL_PERMISSION_BEHAVIOR.DENY) {
+      return deniedAgentFileToolPermission();
     }
-    return { behavior: AGENT_TOOL_PERMISSION_BEHAVIOR.ALLOW, updatedInput: input };
+    return allowedAgentFileToolPermission();
   };
 }
-function deniedAgentToolPermission() {
+function allowedAgentFileToolPermission() {
   return {
-    behavior: AGENT_TOOL_PERMISSION_BEHAVIOR.DENY,
-    message: AGENT_FILE_TOOL_PERMISSION_DENIED_MESSAGE
+    hookSpecificOutput: {
+      hookEventName: AGENT_PRE_TOOL_USE_HOOK_EVENT,
+      permissionDecision: AGENT_TOOL_PERMISSION_BEHAVIOR.ALLOW
+    }
   };
 }
+function deniedAgentFileToolPermission() {
+  return {
+    hookSpecificOutput: {
+      hookEventName: AGENT_PRE_TOOL_USE_HOOK_EVENT,
+      permissionDecision: AGENT_TOOL_PERMISSION_BEHAVIOR.DENY,
+      permissionDecisionReason: AGENT_FILE_TOOL_PERMISSION_DENIED_MESSAGE
+    }
+  };
+}
+function isRecord8(input) {
+  return typeof input === "object" && input !== null;
+}
 function isAgentRunTool(toolName) {
   return Object.values(AGENT_RUN_TOOLS).some((tool) => tool === toolName);
 }
-function isAgentFileMutationTool(tool) {
-  return tool === AGENT_RUN_TOOLS.WRITE || tool === AGENT_RUN_TOOLS.EDIT;
+function isAgentFileTool(tool) {
+  return AGENT_FILE_TOOLS.includes(tool);
 }
 async function runClaudeQuery(prompt, options) {
   let result;
@@ -10302,7 +10321,9 @@ function toComponent(value) {
 }
 
 // src/domains/release/documentation-sync.ts
-var DOCUMENTATION_SYNC_PROMPT_INSTRUCTION = "Update every staged documentation file so it contains the released version and its version references and behavior descriptions match the supplied release data, including when no previous release exists.";
+var DOCUMENTATION_SYNC_PROMPT_INSTRUCTION = "Edit every staged documentation file so its version references and behavior descriptions match the supplied release data.";
+var DOCUMENTATION_SYNC_RELEASE_VERSION_INSTRUCTION = "The exact released version every staged document must contain is";
+var DOCUMENTATION_SYNC_VERSIONLESS_INSTRUCTION = "Replace every standalone previous product release-version reference. When a staged document has no such reference, add a concise current-release reference using the exact released version above.";
 var DOCUMENTATION_SYNC_PROMPT_DATA_BLOCK_OPEN = "<documentation-sync-input>";
 var DOCUMENTATION_SYNC_PROMPT_DATA_BLOCK_CLOSE = "</documentation-sync-input>";
 var DOCUMENTATION_SYNC_AGENT_TOOLS = [
@@ -10315,11 +10336,15 @@ var DOCUMENTATION_SYNC_AGENT_MAX_TURNS = 10;
 var DOCUMENTATION_SYNC_AUDIT_MAX_TURNS = 3;
 var DOCUMENTATION_SYNC_AUDIT_APPROVED = "APPROVED";
 var DOCUMENTATION_SYNC_AUDIT_REJECTED = "REJECTED";
+var DOCUMENTATION_SYNC_AUDIT_VERSIONLESS_INSTRUCTION = "When an original document has no previous-release reference, adding a concise current-release reference using the exact released version is a supported release update.";
 var REGEXP_SPECIAL_CHARACTER_PATTERN = /[.*+?^${}()|[\]\\]/gu;
 var REGEXP_ESCAPE_REPLACEMENT = String.raw`\$&`;
 var VERSION_REFERENCE_NON_WHITESPACE_PATTERN = String.raw`\S`;
 function buildDocumentationSyncPrompt(input) {
+  const encodedVersion = encodeReleasePromptData(input.releaseData.version).slice(1, -1);
   return `${DOCUMENTATION_SYNC_PROMPT_INSTRUCTION}
+${DOCUMENTATION_SYNC_RELEASE_VERSION_INSTRUCTION} ${encodedVersion}.
+${DOCUMENTATION_SYNC_VERSIONLESS_INSTRUCTION}
 
 ${DOCUMENTATION_SYNC_PROMPT_DATA_BLOCK_OPEN}
 ${encodeReleasePromptData(input)}
@@ -10407,6 +10432,7 @@ function containsReleaseVersionReference(content, version2) {
 function buildDocumentationFaithfulnessAuditPrompt(input) {
   return [
     "Audit whether every original-to-updated documentation transformation faithfully applies the supplied release data, including updating each previous-release reference rather than deleting it.",
+    DOCUMENTATION_SYNC_AUDIT_VERSIONLESS_INSTRUCTION,
     `Return exactly ${DOCUMENTATION_SYNC_AUDIT_APPROVED} when every changed claim is supported and every previous-release reference remains represented by the released version.`,
     `Return ${DOCUMENTATION_SYNC_AUDIT_REJECTED} followed by a concise reason for any unsupported claim, deleted previous-release reference, or omitted release update.`,
     DOCUMENTATION_SYNC_PROMPT_DATA_BLOCK_OPEN,
@@ -16084,7 +16110,7 @@ async function readTestRunStatePath(runFilePath, fs4) {
   return { ok: true, value: validated.value };
 }
 function validateTestRunState(value) {
-  if (!isRecord8(value)) return { ok: false, error: "testing run state must be an object" };
+  if (!isRecord9(value)) return { ok: false, error: "testing run state must be an object" };
   const branchName = readString2(value, TEST_RUN_STATE_FIELDS.BRANCH_NAME);
   if (!branchName.ok) return branchName;
   const headSha = readString2(value, TEST_RUN_STATE_FIELDS.HEAD_SHA);
@@ -16127,7 +16153,7 @@ function readRunnerOutcomes(raw) {
   }
   const outcomes = [];
   for (const entry of raw) {
-    if (!isRecord8(entry)) {
+    if (!isRecord9(entry)) {
       return { ok: false, error: `${TEST_RUN_STATE_FIELDS.RUNNER_OUTCOMES} entries must be objects` };
     }
     const runnerId = readString2(entry, TEST_RUNNER_OUTCOME_FIELDS.RUNNER_ID);
@@ -16148,7 +16174,7 @@ function readProductInputDigests(raw) {
   }
   const digests = [];
   for (const entry of raw) {
-    if (!isRecord8(entry)) {
+    if (!isRecord9(entry)) {
       return { ok: false, error: `${TEST_RUN_STATE_FIELDS.PRODUCT_INPUT_DIGESTS} entries must be objects` };
     }
     const descriptorId = readString2(entry, PRODUCT_INPUT_DIGEST_FIELDS.DESCRIPTOR_ID);
@@ -16210,7 +16236,7 @@ function testingWriteError(error) {
 function withDomainErrorDetail(domainError, detail) {
   return detail === void 0 ? domainError : `${domainError}: ${detail}`;
 }
-function isRecord8(value) {
+function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function sha256Hex2(value) {
@@ -17349,7 +17375,7 @@ function importSpecifiers(sourceText, testPath) {
   }
   return specifiers;
 }
-function isRecord9(value) {
+function isRecord10(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function hasErrorCode3(error, code) {
@@ -17384,11 +17410,11 @@ function pathMappingFromTsconfigPath(pathAlias, targets) {
   };
 }
 function pathMappingsFromTsconfig(config) {
-  if (!isRecord9(config)) return [];
+  if (!isRecord10(config)) return [];
   const compilerOptions = config[TSCONFIG_COMPILER_OPTIONS_KEY];
-  if (!isRecord9(compilerOptions)) return [];
+  if (!isRecord10(compilerOptions)) return [];
   const paths = compilerOptions[TSCONFIG_PATHS_KEY];
-  if (!isRecord9(paths)) return [];
+  if (!isRecord10(paths)) return [];
   return Object.entries(paths).flatMap(([pathAlias, targets]) => {
     const mapping = pathMappingFromTsconfigPath(pathAlias, targets);
     return mapping === null ? [] : [mapping];