@outerlayer/cli 0.18.0 → 0.19.1

package/dist/{chunk-W5VPCONO.js → chunk-EAEELQVQ.js}

@@ -1,19 +1,18 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { readPin, pinExists, readBuildHold, readContextManifest, manifestFilesPresent, writeDegraded, writeSourceCache, SOURCE_CACHE_TTL_RETRY_MS, touchLastCheck, SOURCE_CACHE_TTL_SUCCESS_MS, readDegraded, writeContextManifest, writePinIfChanged, readSourceCache, isSourceCacheFresh, clearDegraded } from './chunk-LXAY4A2G.js';
-import { removeRetiredSkills } from './chunk-T4Y6SCG3.js';
-import { defaultFetch } from './chunk-ZRL6HKBY.js';
-import { resolveGatewayCredentials } from './chunk-52NC2FIU.js';
-import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-MNTSH4CL.js';
-import { normalizeRepoName, parseOuterlayerConfig, classifyTree, emitTree } from './chunk-X5N6KC6V.js';
-import { withTokenHeader } from './chunk-BQXFBI7T.js';
-import { ensureContextExcludes, ensurePreCommitGuardHook } from './chunk-XCCLFVXM.js';
+import { removeRetiredSkills } from './chunk-7UWVLZXD.js';
+import { defaultFetch } from './chunk-FVMYKL6L.js';
+import { resolveGatewayCredentials } from './chunk-NTRCK4NH.js';
 import { appendContextProvenance } from './chunk-ZJSNLVCE.js';
+import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-NNLA7LLQ.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
+import { writeDegraded, writeSourceCache, SOURCE_CACHE_TTL_RETRY_MS, writeContextManifest, SOURCE_CACHE_TTL_SUCCESS_MS, readSourceCache, isSourceCacheFresh, clearDegraded } from './chunk-YQR6E6OV.js';
+import { normalizeRepoName, parseOuterlayerConfig, classifyTree, emitTree } from './chunk-WFSUUUAN.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
+import { withTokenHeader } from './chunk-BQXFBI7T.js';
 import { execFileSync } from 'child_process';
-import { lstatSync, existsSync, mkdirSync, writeFileSync, chmodSync, unlinkSync, readdirSync, rmSync, readFileSync, copyFileSync } from 'fs';
-import { join, isAbsolute, dirname, relative } from 'path';
+import { existsSync, mkdirSync, writeFileSync, chmodSync, lstatSync, readFileSync, copyFileSync } from 'fs';
+import { isAbsolute, join, dirname } from 'path';
 
 createRequire(import.meta.url);
 var CONFIG_PATH = ".outerlayer/config.json";
@@ -93,29 +92,15 @@ function gitText(git, cwd, args, timeoutMs) {
   return result.ok ? result.stdout.toString("utf8").trim() : void 0;
 }
 var GATEWAY_TOO_OLD_MESSAGE = "the OuterLayer this machine talks to is too old to name the control plane \u2014 ask whoever runs it to upgrade; context written earlier is kept";
-var NOT_GOVERNED_MESSAGE = "this repository's control plane no longer governs it";
-var ADOPTION_MESSAGE = "committed context files shadow the control plane \u2014 remove them in a commit";
 var CANNOT_IDENTIFY_MESSAGE = "this repository is governed, but the control plane cannot be identified \u2014 check OuterLayer connectivity/config";
 function designationAuthRejectedMessage(credential) {
   return credential.startsWith("olu_") ? `the OuterLayer login was rejected (401/403) \u2014 run \`${cliInvocation()} login\` to sign in again` : "the OuterLayer API key was rejected (401/403) \u2014 check apiKey in ~/.outerlayer/config.json";
 }
-var PARTIAL_WRITE_MESSAGE = "control-plane content could not be fully written \u2014 running on previous context";
-var OVERLAY_FAILED_MESSAGE = "control-plane content was written but the maintained skills could not be refreshed \u2014 retrying next session";
+var PARTIAL_WRITE_MESSAGE = "control-plane content could not be fully written";
+var OVERLAY_FAILED_MESSAGE = "control-plane content was written but the maintained skills could not be refreshed";
 function isStagingWriteFault(message) {
   return message === PARTIAL_WRITE_MESSAGE || message === OVERLAY_FAILED_MESSAGE;
 }
-var COMMIT_GUARD_FOREIGN_NOT_INSTALLED_MESSAGE = `the materialized-context commit guard is NOT installed \u2014 a pre-commit hook this clone did not write occupies that slot \u2014 resolve the conflict or run \`${cliInvocation()} hooks install-git\``;
-var COMMIT_GUARD_HOOKSPATH_NOT_INSTALLED_MESSAGE = `the materialized-context commit guard is NOT installed \u2014 hooks are managed via core.hooksPath, which this clone never writes to automatically \u2014 adopt it yourself: \`${cliInvocation()} hooks install-git --print\``;
-function guardNotInstalledMessage(guard) {
-  if (guard.adopted) return void 0;
-  if (guard.status === "skipped-foreign") return COMMIT_GUARD_FOREIGN_NOT_INSTALLED_MESSAGE;
-  if (guard.status === "skipped-custom-hooks-path") return COMMIT_GUARD_HOOKSPATH_NOT_INSTALLED_MESSAGE;
-  return void 0;
-}
-var FAILURE_DEBOUNCE_MS = 2 * 60 * 1e3;
-function hasGovernedEvidence(hasPin, manifest) {
-  return hasPin || manifest !== void 0;
-}
 function hasSymlinkComponent(root, relPath) {
   let current = root;
   for (const segment of relPath.split("/")) {
@@ -130,13 +115,11 @@ function hasSymlinkComponent(root, relPath) {
   }
   return false;
 }
-function unreachableMessage(lastGoodSha) {
-  return lastGoodSha ? `could not verify the control plane \u2014 running on previously materialized context at \`${lastGoodSha.slice(0, 7)}\` (it may have moved)` : "this repository is governed but its context has never been materialized and the control plane is unreachable \u2014 running without governed context";
+function unreachableMessage() {
+  return "the control plane is unreachable";
 }
-function noAccessMessage(lastGoodSha) {
-  const base = "you do not have access to the control plane";
-  const remedy = " \u2014 check your git credentials (SSH key or token) and org/SSO access, then retry";
-  return lastGoodSha ? `${base}; running on previously materialized context at \`${lastGoodSha.slice(0, 7)}\`${remedy}` : `${base}; running with repository defaults${remedy}`;
+function noAccessMessage() {
+  return "you do not have access to the control plane \u2014 check your git credentials (SSH key or token) and org/SSO access, then retry";
 }
 function classifyGitFailure(stderr) {
   if (/authentication failed|permission denied \(publickey\)|\b403\b|saml sso|access denied/i.test(stderr)) {
@@ -157,38 +140,17 @@ async function materializeContext(deps) {
   if (gitCommonDir === void 0) {
     return { status: "not-a-repo", sha: null, verification: "none" };
   }
-  const pin = readPin(repoRoot);
-  const hasPin = pin !== void 0 || pinExists(repoRoot);
   const record = (sha2, verification, repository2, ref2) => {
+    if (deps.sessionId === void 0) return;
     appendContextProvenance(
       { t: new Date(now()).toISOString(), sessionId: deps.sessionId, repoRoot, repository: repository2, ref: ref2, sha: sha2, verification },
       home
     );
   };
   const selfOutcome = () => {
-    if (hasPin) {
-      writeDegraded(gitCommonDir, { at: new Date(now()).toISOString(), kind: "not-governed", message: NOT_GOVERNED_MESSAGE });
-      return { status: "not-governed", message: NOT_GOVERNED_MESSAGE, sha: null, verification: "none" };
-    }
     clearDegraded(gitCommonDir);
     return { status: "self", sha: null, verification: "none" };
   };
-  const hold = readBuildHold(gitCommonDir);
-  if (hold !== void 0) {
-    const heldManifest = readContextManifest(gitCommonDir);
-    if (heldManifest !== void 0 && heldManifest.sha === hold.sha && pin?.sha === hold.sha && manifestFilesPresent(repoRoot, heldManifest)) {
-      ensureContextExcludes(gitCommonDir);
-      recordMaintainedOverlay(repoRoot, gitCommonDir, heldManifest);
-      const guardMessage2 = guardNotInstalledMessage(ensurePreCommitGuardHook(repoRoot, gitCommonDir));
-      record(hold.sha, "verified", hold.repository, hold.ref);
-      return {
-        status: "debounced",
-        sha: hold.sha,
-        verification: "verified",
-        ...guardMessage2 ? { message: guardMessage2 } : {}
-      };
-    }
-  }
   const ownRepoName = deriveOwnRepoName(git, repoRoot);
   if (ownRepoName === void 0) {
     return selfOutcome();
@@ -196,7 +158,7 @@ async function materializeContext(deps) {
   const designation = deps.pinnedSource === void 0 ? await resolveDesignation({ git, fetchImpl, home, cloud: deps.cloud, now, gitCommonDir, ownRepoName, repoRoot, lookup: deps.designationLookup ?? { timeoutMs: 2e3, attempts: 1 } }) : deps.pinnedSource === null ? { status: "self" } : { status: "governed", ...deps.pinnedSource };
   const answered = { designation: "answered" };
   if (designation.status === "self") {
-    if (designation.unanswered !== void 0 && !hasPin) {
+    if (designation.unanswered !== void 0) {
       const { authRejected, gatewayTooOld } = designation.unanswered;
       const message = authRejected ?? (gatewayTooOld ? GATEWAY_TOO_OLD_MESSAGE : void 0);
       if (message !== void 0) {
@@ -215,11 +177,6 @@ async function materializeContext(deps) {
   }
   if (designation.status === "unknown") {
     const message = designation.authRejected ?? (designation.gatewayTooOld ? GATEWAY_TOO_OLD_MESSAGE : CANNOT_IDENTIFY_MESSAGE);
-    if (hasPin) {
-      writeDegraded(gitCommonDir, { at: new Date(now()).toISOString(), kind: "designation-unverified", message });
-      record(null, "none");
-      return { status: "designation-unverified", message, sha: null, verification: "none", designation: "unknown" };
-    }
     if (designation.authRejected || designation.gatewayTooOld) {
       writeDegraded(gitCommonDir, { at: new Date(now()).toISOString(), kind: "designation-unverified", message });
     }
@@ -246,8 +203,6 @@ async function materializeContext(deps) {
   const ref = designation.ref;
   const unverifiedIdentity = designation.unverifiedIdentity;
   const storedSha = designation.sha;
-  const manifest = readContextManifest(gitCommonDir);
-  const evidenced = hasGovernedEvidence(hasPin, manifest) || !unverifiedIdentity;
   const clearOrFlagIdentity = () => {
     if (unverifiedIdentity) {
       writeDegraded(gitCommonDir, {
@@ -261,39 +216,6 @@ async function materializeContext(deps) {
       clearDegraded(gitCommonDir);
     }
   };
-  if (manifest !== void 0 && manifest.sha === storedSha && pin?.sha === storedSha && manifestFilesPresent(repoRoot, manifest)) {
-    touchLastCheck(gitCommonDir, now());
-    clearOrFlagIdentity();
-    ensureContextExcludes(gitCommonDir);
-    recordMaintainedOverlay(repoRoot, gitCommonDir, manifest);
-    const guardMessage2 = guardNotInstalledMessage(ensurePreCommitGuardHook(repoRoot, gitCommonDir));
-    writeSourceCache(gitCommonDir, {
-      checkedAt: new Date(now()).toISOString(),
-      status: "governed",
-      repository,
-      ref,
-      sha: storedSha,
-      ttlMs: SOURCE_CACHE_TTL_SUCCESS_MS
-    });
-    const verification = unverifiedIdentity ? "unverified" : "verified";
-    record(storedSha, verification, repository, ref);
-    return {
-      status: "debounced",
-      sha: storedSha,
-      verification,
-      ...guardMessage2 ? { message: guardMessage2 } : {}
-    };
-  }
-  const recentFailure = readDegraded(gitCommonDir);
-  if (recentFailure && (recentFailure.kind === "unreachable" || recentFailure.kind === "no-access") && recentFailure.repository === repository && recentFailure.ref === ref && now() - Date.parse(recentFailure.at) < FAILURE_DEBOUNCE_MS) {
-    const lastGood = manifest?.sha ?? null;
-    const verification = lastGood ? "unverified" : "none";
-    if (evidenced) {
-      record(lastGood, verification, repository, ref);
-      return { status: recentFailure.kind, message: recentFailure.message, sha: lastGood, verification };
-    }
-    return { status: recentFailure.kind, sha: null, verification: "none" };
-  }
   const remoteUrl = deps.resolveControlPlaneUrl ? deps.resolveControlPlaneUrl(repository, ref, repoRoot) : buildControlPlaneUrl(git, repoRoot, repository);
   const cacheHost = parseRemoteHost(remoteUrl).host || "unknown-host";
   const cacheRepoDir = ensureBareCache(git, home, repository, cacheHost);
@@ -309,52 +231,25 @@ async function materializeContext(deps) {
   const commitNote = (message) => `could not fetch commit \`${storedSha.slice(0, 7)}\` of ${repository}; ${message}`;
   if (!fetchResult.ok) {
     const kind = classifyGitFailure(fetchResult.stderr);
-    const lastGood = manifest?.sha ?? null;
-    const verification = lastGood ? "unverified" : "none";
-    const doctorMessage = commitNote(kind === "no-access" ? noAccessMessage(lastGood) : unreachableMessage(lastGood));
-    writeDegraded(gitCommonDir, { at: new Date(now()).toISOString(), kind, message: doctorMessage, repository, ref, lastGoodSha: lastGood ?? void 0 });
-    if (evidenced) {
-      record(lastGood, verification, repository, ref);
-      return { status: kind, message: doctorMessage, sha: lastGood, verification };
-    }
-    return { status: kind, sha: null, verification: "none" };
+    const doctorMessage = commitNote(kind === "no-access" ? noAccessMessage() : unreachableMessage());
+    writeDegraded(gitCommonDir, { at: new Date(now()).toISOString(), kind, message: doctorMessage, repository, ref });
+    record(null, "none", repository, ref);
+    return { status: kind, message: doctorMessage, sha: null, verification: "none" };
   }
   const fetchedSha = gitText(git, cacheRepoDir, ["rev-parse", localRef], 2e3);
   if (fetchedSha !== storedSha) {
-    const lastGood = manifest?.sha ?? null;
-    const verification = lastGood ? "unverified" : "none";
-    const doctorMessage = commitNote(unreachableMessage(lastGood));
-    writeDegraded(gitCommonDir, { at: new Date(now()).toISOString(), kind: "unreachable", message: doctorMessage, repository, ref, lastGoodSha: lastGood ?? void 0 });
-    if (evidenced) {
-      record(lastGood, verification, repository, ref);
-      return { status: "unreachable", message: doctorMessage, sha: lastGood, verification };
-    }
-    return { status: "unreachable", sha: null, verification: "none" };
+    const doctorMessage = commitNote(unreachableMessage());
+    writeDegraded(gitCommonDir, { at: new Date(now()).toISOString(), kind: "unreachable", message: doctorMessage, repository, ref });
+    record(null, "none", repository, ref);
+    return { status: "unreachable", message: doctorMessage, sha: null, verification: "none" };
   }
   const sha = fetchedSha;
-  const tracked = git(["ls-files", "-z", "--", "AGENTS.md", ".claude", ".outerlayer"], { cwd: repoRoot, timeoutMs: 2e3 });
-  if (tracked.ok && tracked.stdout.length > 0) {
-    writeDegraded(gitCommonDir, { at: new Date(now()).toISOString(), kind: "adoption-conflict", message: ADOPTION_MESSAGE, repository, ref });
-    const lastGood = manifest?.sha ?? null;
-    record(lastGood, lastGood ? "unverified" : "none", repository, ref);
-    return { status: "adoption-conflict", message: ADOPTION_MESSAGE, sha: lastGood, verification: lastGood ? "unverified" : "none" };
-  }
   const files = listMaterializedFiles(git, cacheRepoDir, sha);
   const writeResult = writeFilesVerbatim(git, cacheRepoDir, files, repoRoot);
   const partialWrite = () => {
-    const lastGood = manifest?.sha ?? null;
-    const verification = lastGood ? "unverified" : "none";
-    writeDegraded(gitCommonDir, {
-      at: new Date(now()).toISOString(),
-      kind: "unreachable",
-      message: PARTIAL_WRITE_MESSAGE,
-      repository,
-      ref,
-      lastGoodSha: lastGood ?? void 0
-    });
-    if (!evidenced) return { status: "unreachable", sha: null, verification: "none" };
-    record(lastGood, verification, repository, ref);
-    return { status: "unreachable", message: PARTIAL_WRITE_MESSAGE, sha: lastGood, verification };
+    writeDegraded(gitCommonDir, { at: new Date(now()).toISOString(), kind: "unreachable", message: PARTIAL_WRITE_MESSAGE, repository, ref });
+    record(null, "none", repository, ref);
+    return { status: "unreachable", message: PARTIAL_WRITE_MESSAGE, sha: null, verification: "none" };
   };
   if (!writeResult.ok) {
     return partialWrite();
@@ -369,35 +264,12 @@ async function materializeContext(deps) {
     overlayFailed = true;
   }
   const writtenPaths = [.../* @__PURE__ */ new Set([...writeResult.writtenPaths, ...overlayPaths])].filter((path) => !retiredPaths.has(path));
-  const deleteResult = manifest ? deleteRemovedFiles(repoRoot, manifest.files, writtenPaths) : { skipped: [] };
-  if (overlayFailed && deleteResult.skipped.length === 0) {
-    writeContextManifest(gitCommonDir, { schemaVersion: 1, sha, files: writtenPaths, materializedAt: new Date(now()).toISOString() });
-    writeDegraded(gitCommonDir, {
-      at: new Date(now()).toISOString(),
-      kind: "unreachable",
-      message: OVERLAY_FAILED_MESSAGE,
-      repository,
-      ref,
-      lastGoodSha: sha
-    });
-    if (!evidenced) return { status: "unreachable", sha: null, verification: "none" };
+  if (overlayFailed) {
+    writeDegraded(gitCommonDir, { at: new Date(now()).toISOString(), kind: "unreachable", message: OVERLAY_FAILED_MESSAGE, repository, ref });
     record(sha, "unverified", repository, ref);
     return { status: "unreachable", message: OVERLAY_FAILED_MESSAGE, sha, verification: "unverified" };
   }
-  if (deleteResult.skipped.length > 0) {
-    return partialWrite();
-  }
-  const newManifest = {
-    schemaVersion: 1,
-    sha,
-    files: writtenPaths,
-    materializedAt: new Date(now()).toISOString()
-  };
-  writeContextManifest(gitCommonDir, newManifest);
-  ensureContextExcludes(gitCommonDir);
-  const guardMessage = guardNotInstalledMessage(ensurePreCommitGuardHook(repoRoot, gitCommonDir));
-  writePinIfChanged(repoRoot, sha);
-  touchLastCheck(gitCommonDir, now());
+  writeContextManifest(gitCommonDir, { schemaVersion: 1, sha, files: writtenPaths, materializedAt: new Date(now()).toISOString() });
   clearOrFlagIdentity();
   writeSourceCache(gitCommonDir, {
     checkedAt: new Date(now()).toISOString(),
@@ -408,27 +280,7 @@ async function materializeContext(deps) {
     ttlMs: SOURCE_CACHE_TTL_SUCCESS_MS
   });
   record(sha, "verified", repository, ref);
-  return {
-    status: "materialized",
-    sha,
-    verification: "verified",
-    ...guardMessage ? { message: guardMessage } : {}
-  };
-}
-function recordMaintainedOverlay(repoRoot, gitCommonDir, manifest) {
-  let overlayPaths;
-  let retired;
-  try {
-    retired = new Set(removeRetiredSkills(repoRoot, (rel) => hasSymlinkComponent(repoRoot, rel)));
-    overlayPaths = overlayMaintainedSkills(repoRoot, (rel) => hasSymlinkComponent(repoRoot, rel));
-  } catch {
-    return;
-  }
-  const known = new Set(manifest.files);
-  const added = overlayPaths.filter((path) => !known.has(path));
-  if (added.length > 0 || retired.size > 0) {
-    writeContextManifest(gitCommonDir, { ...manifest, files: [...manifest.files.filter((path) => !retired.has(path)), ...added] });
-  }
+  return { status: "materialized", sha, verification: "verified" };
 }
 async function resolveDesignation(ctx) {
   const cache = readSourceCache(ctx.gitCommonDir);
@@ -646,51 +498,5 @@ function writeFilesVerbatim(git, cacheRepoDir, files, workpieceRoot) {
   }
   return { writtenPaths, ok: !anySkipped };
 }
-function isDeletableManifestPath(rel) {
-  if (isAbsolute(rel)) return false;
-  if (rel.split("/").some((segment) => segment === "..")) return false;
-  return rel === "AGENTS.md" || rel.startsWith(".claude/") || rel.startsWith(".outerlayer/");
-}
-function deleteRemovedFiles(workpieceRoot, oldFiles, newFiles) {
-  const keep = new Set(newFiles);
-  const dirsToPrune = /* @__PURE__ */ new Set();
-  const skipped = [];
-  for (const rel of oldFiles) {
-    if (keep.has(rel)) continue;
-    if (!isDeletableManifestPath(rel)) continue;
-    if (hasSymlinkComponent(workpieceRoot, rel)) {
-      skipped.push(rel);
-      continue;
-    }
-    const abs = join(workpieceRoot, rel);
-    try {
-      unlinkSync(abs);
-      dirsToPrune.add(dirname(abs));
-    } catch {
-    }
-  }
-  for (const dir of dirsToPrune) {
-    pruneEmptyDirs(dir, workpieceRoot);
-  }
-  return { skipped };
-}
-function pruneEmptyDirs(dir, stopAt) {
-  let current = dir;
-  while (current !== stopAt && current.startsWith(stopAt) && relative(stopAt, current) !== "") {
-    let entries;
-    try {
-      entries = readdirSync(current);
-    } catch {
-      return;
-    }
-    if (entries.length > 0) return;
-    try {
-      rmSync(current, { recursive: false });
-    } catch {
-      return;
-    }
-    current = dirname(current);
-  }
-}
 
-export { defaultGitRunner, hasSymlinkComponent, isStagingWriteFault, lookupGoverningSource, materializeContext, parseOwnerRepo, parseRemoteHost, resolveGitCommonDir };
+export { defaultGitRunner, isStagingWriteFault, lookupGoverningSource, materializeContext, parseOwnerRepo, resolveGitCommonDir };