@outerlayer/cli 0.34.0-next.20261024180339 → 0.34.0-next.20261024231715

package/dist/{work-stop-cmd-HL6FZL5X.js → work-stop-cmd-UJ45EV3A.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { resolveCredentials, postJson, WorkCommandError } from './chunk-HIGP4WOC.js';
+import { resolveCredentials, postJson, WorkCommandError } from './chunk-Z4KWHSO4.js';
 import './chunk-IP7BIBXJ.js';
-import './chunk-OHJDH5GV.js';
-import './chunk-NVDPSH72.js';
+import './chunk-6NUPXDAA.js';
+import './chunk-EE2ZZGQV.js';
 import './chunk-MECW77XP.js';
 import './chunk-6ZFY2L2T.js';
-import './chunk-TIRHZC2M.js';
+import './chunk-NKOM4JKY.js';
 import './chunk-Y5YCX6AL.js';
 import './chunk-G2JWZDFA.js';
 import './chunk-ANPNT6PM.js';
@@ -16,13 +16,13 @@ import './chunk-SOI6K5DY.js';
 import './chunk-PA6CK6WQ.js';
 import './chunk-BALIE3BA.js';
 import './chunk-BJ3KTMDH.js';
-import './chunk-ZGB4ZJ5E.js';
+import './chunk-ZQSANKS4.js';
 import './chunk-5BHIBJDA.js';
 import './chunk-CDDED64E.js';
 import './chunk-RA3O54FC.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import './chunk-CRB3POP4.js';
-import './chunk-CQRPR4WZ.js';
+import './chunk-FGXT5OXS.js';
 import './chunk-EOTMDIYC.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-HACGUL52.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@outerlayer/cli",
-  "version": "0.34.0-next.20261024180339",
+  "version": "0.34.0-next.20261024231715",
   "description": "OuterLayer CLI — commands: init, claude, connect, doctor, login, logout, sync, daemon (alias: watch), emit, findings, work, spec, runner, hooks, mcp, context. Capture and sync coding-agent sessions, and record proof of factory work.",
   "license": "Apache-2.0",
   "author": "Magu Studios, Inc.",
@@ -56,6 +56,7 @@
     "@types/pngjs": "^6.0.5",
     "commander": "^15.0.0",
     "http-message-sig": "0.3.0",
+    "minimatch": "^10.2.3",
     "pngjs": "^7.0.0",
     "structured-headers": "2.1.1",
     "tsup": "^8.5.0",

package/skill-pack/maintained/outerlayer-amend/SKILL.md

@@ -113,8 +113,7 @@ repository. Commit and push in each checkout you change, to its own branch only.
      `outerlayer work comment --item "$OUTERLAYER_WORK" [--criterion <criterion>] --body "<what changed>" --ready`.
      Omit `--criterion` on the general thread.
 6. **Record the proofs again** before you watch CI: the evidence check waits
-   on them. Push any recipe edit (`.outerlayer/proofs/<item key>.yaml`) first.
-   Run `outerlayer work proofs --record --comment --pr <prNumber>` in each
+   on them. Run `outerlayer work proofs --record --comment --pr <prNumber>` in each
    checkout you pushed.
 7. **Watch CI.** Skip this step when you pushed nothing. Run
    `gh pr checks <prNumber> --repo <repository> --watch` on each pull request

package/skill-pack/maintained/outerlayer-build/SKILL.md

@@ -342,9 +342,10 @@ Run them in order.
    same time, as release.md's "Watch CI" says: CI never reads the proofs.
 6. **Evidence.** Run `outerlayer emit step "Evidence" --item "$OUTERLAYER_WORK"`,
    then apply the team's changes for this phase. Read [references/evidence.md](references/evidence.md)
-   when the pull request opens, and run it. Write and commit the proof recipe
-   (`outerlayer work proofs --init`), then capture each proof with
-   `outerlayer work proofs --record`. Check the proofs with
+   when the pull request opens, and run it. Write and commit the demo test and the
+   file-proof tests. Each test names the id of the criterion it proves. When the
+   repository has no `.outerlayer-proofs.yaml`, write and commit one. Then
+   capture each proof with `outerlayer work proofs --record`. Check the proofs with
    `outerlayer work proofs`, as that file says.
 
 Optional steps a team may turn off: the manual test and screenshots in the

package/skill-pack/maintained/outerlayer-build/references/agent-briefs.md

@@ -264,36 +264,41 @@ Record each criterion that declares `proof: screenshot` as a chapter of the same
 demo, with a `demo.screenshot()` call where the result shows. The frame then
 comes from the committed test, so a later session records it again at the new head.
 
-Every proof comes from a recipe that you commit with the change. Run
-`outerlayer work proofs --init --pr <number>`. It writes
-`.outerlayer/proofs/<item key>.yaml` and, when absent, `.outerlayer/proofs/setup.yaml`.
-Fill them in:
-
-- `setup.yaml` lists the commands that seed and start the app (`setup`) and
-  stop it (`teardown`). Each setup command must return once the app is ready.
-- The one `emit: demo` entry holds the command that runs the demo test. Write
-  the test with `@outerlayer/playwright`, one chapter for each criterion in the
-  criteria's order, as the outerlayer-evidence skill's "Record a demo" says. The
-  test writes its manifest where `OUTERLAYER_PROOF_OUT` names. The entry covers
-  every screenshot and video criterion that no other entry names.
-- Every other proof is a command entry: a `command` that writes one file, the
-  repository-relative `emit` path of that file, and `for`, the criterion id.
-  The kind of the file must be the kind the criterion declares. Write the file
-  to a folder that `.gitignore` ignores, such as `out/`, and add the folder to
-  `.gitignore` when it is not there. The proof is uploaded, never committed.
-- A proof that only a person can capture goes under `manual` with a `reason`.
-  Name each criterion in one place only.
-
-Commit the recipe, the setup file and the demo test. Then run
-`outerlayer work proofs --record` from the committed checkout. It runs only
-what is committed at HEAD, and emits each proof at HEAD. Never emit by hand a
-proof that a recipe entry can record, and never keep a capture script outside
-the recipe. Always pass `--pr <number>` when the item links more than one pull
-request in the repository. Record again after every later commit. It skips an
-entry whose proofs are current.
+Every proof comes from a test that you commit with the change. The test names
+the id of the criterion it proves, for example `demo.chapter("AC-7-02", ...)`
+or a comment `// proves AC-7-02`. `outerlayer work proofs --record` finds the
+tests at HEAD that hold the id of each proof that is not current, and runs them.
+
+- The repository has one `.outerlayer-proofs.yaml` at its root. When it is
+  missing, write it and commit it. `setup` lists the commands that seed and start
+  the app. Each setup command must return once the app is ready. `teardown`
+  lists the commands that stop it. Each entry in `runners` has a `files` glob of
+  test files and a `command` that runs them, with `{files}` where the matched
+  files go.
+- A demo test uses `@outerlayer/playwright`, one chapter for each screenshot or
+  video criterion in the criteria's order, as the outerlayer-evidence skill's
+  "Record a demo" says. The fixture writes the manifest where
+  `OUTERLAYER_PROOF_OUT` names.
+- A report, log or file proof is a test, in any language, that writes
+  `$OUTERLAYER_PROOF_OUT/<criterion id>.<ext>`. The kind of the file must be the
+  kind the criterion declares. The test writes outside the repository, so there is
+  nothing to ignore or commit.
+- A proof that no test can make stays without a test. Give the reason in
+  `build-reports/evidence.md`.
+
+Commit the setup file and every test. Then run
+`outerlayer work proofs --record` from the committed checkout. It stops when a
+tracked file differs from HEAD. It runs only what is committed at HEAD, and
+emits each proof at HEAD. It skips a proof that is current. Never emit by hand
+a proof that a test can make. Always pass `--pr <number>` when the item links
+more than one pull request in the repository.
+
+The output names each proof that is still not current, with the reason. Fix
+that test, commit it and record again. Do not record again only because the
+head moved. Each run starts the app again. The orchestrator records once, at
+the run's last head.
 
 Run `outerlayer sync`, then `outerlayer work proofs --item "$OUTERLAYER_WORK"`.
-For each proof it lists as out of date or missing, fix its entry and record again.
 
 Write `build-reports/evidence.md` naming every criterion with its artifact, or
 with the reason none could be produced. A criterion you could not evidence is

package/skill-pack/maintained/outerlayer-build/references/evidence.md

@@ -21,26 +21,28 @@ state no demo test can reach. One that declares `proof: video` needs a video: it
 item's one demo. A screenshot never satisfies `proof: video`. A criterion with no proof form is proven by its
 test, and needs no artifact.
 
-The evidence agent captures every proof from a recipe it commits with the
-change: `outerlayer work proofs --init` writes it, and
-`outerlayer work proofs --record` runs it at HEAD and emits each proof. A
-capture script outside the recipe is not allowed, because no later session can
-run it again.
-
-After the evidence agent returns, and after every later commit, run
-`outerlayer sync`, then `outerlayer work proofs --item "$OUTERLAYER_WORK"`. It
-lists each declared proof as current, out of date or missing at the checkout's
-head. Commit the work, then run `outerlayer work proofs --record`: it records
-each proof that is not current and skips the rest. Run the list command once
-more before the run ends. A criterion still listed goes in
-`build-reports/evidence.md` with the reason. The command leaves out criteria
-that declare a test proof.
-
-When a commit lands on the branch after the evidence agent captured, run
-`outerlayer work proofs --record` again. It records every proof that is not
-current at the new head. The final report names the commit and the proofs it
-recorded again. A commit that lands after this call reopens it. Never drive the
-browser yourself.
+The evidence agent captures every proof from tests it commits with the
+change. Each test names the id of its criterion. `outerlayer work proofs --record`
+finds those tests at HEAD, runs them through `.outerlayer-proofs.yaml`, and emits
+each proof. A capture script outside the tests is not allowed, because no later
+session can run it again.
+
+After the evidence agent returns, run `outerlayer sync`, then
+`outerlayer work proofs --item "$OUTERLAYER_WORK"`. It lists each declared proof
+as current, out of date or missing at the checkout's head. The command leaves
+out criteria that declare a test proof.
+
+A commit makes every proof out of date, and each `--record` run starts the app
+again. So record only at the run's last head. First make every commit the run
+still needs, such as a CI fix or a merge of the base branch. Push the last
+commit, then run `outerlayer work proofs --record` once. It records each
+proof that is not current and skips the rest. If a commit lands after that,
+record once more after it. The final report names that head and the proofs
+recorded there.
+
+Run the list command once more before the run ends. A criterion still listed
+goes in `build-reports/evidence.md` with the reason. Never drive the browser
+yourself.
 
 Re-read the pull request's evidence comment. Resolve or escalate every row that
 needs attention. A row is resolved when a re-read shows it, not when the fixing

package/skill-pack/maintained/outerlayer-evidence/SKILL.md

@@ -97,7 +97,7 @@ for each criterion:
       });
     });
 
-Commit the test: an amend runs it again.
+Commit the test: `work proofs --record` finds it by its chapter ids.
 
 Record each `proof: screenshot` criterion as a chapter too. Call `await
 demo.screenshot()` inside it, right after the `expect` that shows the result.

package/dist/chunk-RT6VNM3S.js

@@ -1,148 +0,0 @@
-#!/usr/bin/env node
-import { createRequire } from 'node:module';
-import { liveHead, resolveProofsItem, classifyProofsAt } from './chunk-3KT2IWV3.js';
-import { WorkCommandError, resolveCredentials, getJson } from './chunk-HIGP4WOC.js';
-import { resolveRepoIdentity } from './chunk-6ZFY2L2T.js';
-import { defaultFetch } from './chunk-6RKD7YZ6.js';
-import { renderProofRecipe, renderProofSetup } from './chunk-CQRPR4WZ.js';
-import { inferArtifactKind, mediaTypeForArtifactPath, WORK_ITEM_COMMENT_MAX_BODY_LENGTH } from './chunk-EOTMDIYC.js';
-import { realpathSync, existsSync, mkdirSync, writeFileSync } from 'fs';
-import { join, isAbsolute, resolve, relative } from 'path';
-import { createHash } from 'crypto';
-
-createRequire(import.meta.url);
-var DEMO_PROOFS = /* @__PURE__ */ new Set(["screenshot", "video"]);
-var KEY_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
-function recipeKeyFor(trackerKey) {
-  const hash = trackerKey.lastIndexOf("#");
-  const key = hash === -1 ? trackerKey : trackerKey.slice(hash + 1);
-  return KEY_PATTERN.test(key) ? key : void 0;
-}
-function buildRecipe(entries) {
-  const run = [];
-  if (entries.some((entry) => DEMO_PROOFS.has(entry.proof))) run.push({ command: "", emit: "demo" });
-  for (const entry of entries) {
-    if (!DEMO_PROOFS.has(entry.proof)) run.push({ command: "", emit: "", for: entry.id });
-  }
-  return { run, manual: [] };
-}
-function planEntries(recipe, states) {
-  const stateOf = new Map(states.map((state) => [state.id, state.state]));
-  const named = /* @__PURE__ */ new Set([...recipe.run.flatMap((entry) => entry.for === void 0 ? [] : [entry.for]), ...recipe.manual.map((entry) => entry.criterion)]);
-  return recipe.run.map((entry) => {
-    const criteria = entry.emit === "demo" ? states.filter((state) => DEMO_PROOFS.has(state.proof) && !named.has(state.id)).map((state) => state.id) : [entry.for];
-    if (criteria.length === 0) return { entry, criteria, skip: "empty" };
-    const current = criteria.every((id) => stateOf.get(id) === "current");
-    return { entry, criteria, skip: current ? "current" : null };
-  });
-}
-function checkEmitPath(root, emit) {
-  if (emit === "") return { ok: false, reason: "the entry has no emit path" };
-  if (isAbsolute(emit)) return { ok: false, reason: `the emit path "${emit}" is outside the repository: it is absolute` };
-  const path = resolve(root, emit);
-  const from = relative(root, path);
-  if (from === "" || from === ".." || from.startsWith("../") || isAbsolute(from)) {
-    return { ok: false, reason: `the emit path "${emit}" is outside the repository` };
-  }
-  return { ok: true, path };
-}
-function insideRoot(root, path) {
-  try {
-    const from = relative(realpathSync(root), realpathSync(path));
-    return from !== "" && from !== ".." && !from.startsWith("../") && !isAbsolute(from);
-  } catch {
-    return false;
-  }
-}
-function kindProblem(declared, file) {
-  if (declared === null) return void 0;
-  if (declared === "test") return "a test proof is recorded by CI, not by a recipe";
-  const kind = inferArtifactKind(mediaTypeForArtifactPath(file));
-  return kind === declared ? void 0 : `the file is a ${kind}, but the criterion declares a ${declared} proof`;
-}
-function proofsCommentBody(head, lines) {
-  const header = `These proofs are not current at ${head.slice(0, 7)}:`;
-  const rows = lines.map((line) => `- ${line.id} (${line.proof}): ${line.reason}`);
-  const fits = (count2) => {
-    const left = rows.length - count2;
-    return [header, ...rows.slice(0, count2), ...left > 0 ? [`and ${left} more.`] : []].join("\n");
-  };
-  let count = rows.length;
-  while (count > 0 && fits(count).length > WORK_ITEM_COMMENT_MAX_BODY_LENGTH) count -= 1;
-  return fits(count);
-}
-function proofsCommentId(item, head, lines) {
-  const list = [...lines].sort((a, b) => a.id < b.id ? -1 : a.id > b.id ? 1 : 0).map((line) => [line.id, line.proof, line.reason]);
-  const digest = createHash("sha256").update(JSON.stringify([item, head.toLowerCase(), list])).digest("hex");
-  return `proofs-${digest.slice(0, 32)}`;
-}
-function repositoryName(repository) {
-  return repository.replace(/\.git$/, "").split("/").filter((part) => part !== "").slice(-2).join("/").toLowerCase();
-}
-function ownPullRequest(pullRequests, requested, checkoutRepository) {
-  if (requested !== void 0) return { pr: requested };
-  const here = checkoutRepository === void 0 ? void 0 : repositoryName(checkoutRepository);
-  const open = pullRequests.filter(
-    (pr) => pr.state === "open" && typeof pr.prNumber === "number" && (here === void 0 || repositoryName(pr.repository ?? "") === here)
-  );
-  if (open.length > 1) return { ambiguous: open.map((pr) => pr.prNumber) };
-  return { pr: open[0]?.prNumber };
-}
-
-// src/work-proofs-init.ts
-var PROOFS_DIR = join(".outerlayer", "proofs");
-var SETUP_FILE = "setup.yaml";
-function repositoryName2(repository) {
-  return repository.replace(/\.git$/, "").split("/").filter((part) => part !== "").slice(-2).join("/").toLowerCase();
-}
-function otherPullRequestHeads(pullRequests, ownPr, checkoutRepository) {
-  const here = checkoutRepository === void 0 ? void 0 : repositoryName2(checkoutRepository);
-  const heads = /* @__PURE__ */ new Set();
-  for (const pr of pullRequests) {
-    const head = liveHead(pr);
-    if (head === void 0) continue;
-    const isOwn = ownPr !== void 0 && pr.prNumber === ownPr && (here === void 0 || repositoryName2(pr.repository ?? "") === here);
-    if (!isOwn) heads.add(head);
-  }
-  return heads;
-}
-function writeOnce(path, text) {
-  if (existsSync(path)) return false;
-  mkdirSync(join(path, ".."), { recursive: true });
-  writeFileSync(path, text, { flag: "wx" });
-  return true;
-}
-async function runWorkProofsInit(opts) {
-  const item = resolveProofsItem(opts);
-  const cwd = opts.cwd ?? process.cwd();
-  const identity = resolveRepoIdentity(cwd);
-  if (identity.repoRoot === void 0) throw new WorkCommandError("this is not a git checkout. Run this inside the repository.");
-  const root = identity.repoRoot;
-  const creds = resolveCredentials(opts);
-  const { data } = await getJson(creds.url, `/v1/work-items/${item}`, creds.apiKey, creds.appId, opts.fetchImpl ?? defaultFetch);
-  const body = data;
-  const key = recipeKeyFor(body.trackerKey ?? "");
-  if (key === void 0) {
-    throw new WorkCommandError(`the item's tracker key "${body.trackerKey ?? ""}" cannot name a recipe file. Name the file by hand in ${PROOFS_DIR}.`);
-  }
-  const pullRequests = body.pullRequests ?? [];
-  const own = ownPullRequest(pullRequests, opts.pr, identity.gitRepo);
-  if ("ambiguous" in own) {
-    throw new WorkCommandError(`the item links several open pull requests (${own.ambiguous.map((n) => `#${n}`).join(", ")}). Pass --pr <number> to name this checkout's.`);
-  }
-  const otherHeads = otherPullRequestHeads(pullRequests, own.pr, identity.gitRepo);
-  const todo = classifyProofsAt(body, otherHeads).filter((entry) => entry.state !== "current");
-  const recipePath = join(root, PROOFS_DIR, `${key}.yaml`);
-  const shown = relative(root, recipePath);
-  const recipeWritten = writeOnce(recipePath, renderProofRecipe(buildRecipe(todo)));
-  const setupWritten = writeOnce(join(root, PROOFS_DIR, SETUP_FILE), renderProofSetup({ setup: [] }));
-  const lines = [
-    recipeWritten ? `Wrote ${shown} with ${todo.length} proof${todo.length === 1 ? "" : "s"} to record. Fill in each command and emit path, then commit it.` : `Kept ${shown}: it exists, so it is unchanged.`,
-    setupWritten ? `Wrote ${join(PROOFS_DIR, SETUP_FILE)} with an empty setup. Add the commands that start the app, then commit it.` : `Kept ${join(PROOFS_DIR, SETUP_FILE)}: it exists.`
-  ];
-  const output = lines.join("\n");
-  if (!opts.quiet) process.stdout.write(output + "\n");
-  return { output, recipePath, recipe: recipeWritten ? "written" : "kept", setup: setupWritten ? "written" : "kept" };
-}
-
-export { PROOFS_DIR, SETUP_FILE, checkEmitPath, insideRoot, kindProblem, otherPullRequestHeads, ownPullRequest, planEntries, proofsCommentBody, proofsCommentId, recipeKeyFor, runWorkProofsInit };

package/dist/work-proofs-init-GNGI7PZU.js

@@ -1,35 +0,0 @@
-#!/usr/bin/env node
-import { createRequire } from 'node:module';
-export { PROOFS_DIR, SETUP_FILE, otherPullRequestHeads, runWorkProofsInit } from './chunk-RT6VNM3S.js';
-import './chunk-3KT2IWV3.js';
-import './chunk-HIGP4WOC.js';
-import './chunk-IP7BIBXJ.js';
-import './chunk-OHJDH5GV.js';
-import './chunk-NVDPSH72.js';
-import './chunk-MECW77XP.js';
-import './chunk-6ZFY2L2T.js';
-import './chunk-TIRHZC2M.js';
-import './chunk-Y5YCX6AL.js';
-import './chunk-G2JWZDFA.js';
-import './chunk-ANPNT6PM.js';
-import './chunk-6RKD7YZ6.js';
-import './chunk-PJDQPF5N.js';
-import './chunk-SOI6K5DY.js';
-import './chunk-PA6CK6WQ.js';
-import './chunk-BALIE3BA.js';
-import './chunk-BJ3KTMDH.js';
-import './chunk-ZGB4ZJ5E.js';
-import './chunk-5BHIBJDA.js';
-import './chunk-CDDED64E.js';
-import './chunk-RA3O54FC.js';
-import './chunk-T2Q7ISPE.js';
-import './chunk-WZBHBH3J.js';
-import './chunk-CRB3POP4.js';
-import './chunk-CQRPR4WZ.js';
-import './chunk-EOTMDIYC.js';
-import './chunk-VNVZDWO3.js';
-import './chunk-HACGUL52.js';
-import './chunk-MESOOLF4.js';
-import './chunk-Z5GEFMRW.js';
-
-createRequire(import.meta.url);