@outerlayer/cli 0.8.2 → 0.8.4

package/dist/{chunk-CMFCCIQN.js → chunk-NKU5OPYP.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RESERVED_EMIT_NAMES } from './chunk-YNJEOGDL.js';
+import { RESERVED_EMIT_NAMES, ARTIFACT_KINDS, ArtifactCriterionIdSchema } from './chunk-PK5NANMT.js';
 import { __commonJS, __require, __toESM } from './chunk-Z5GEFMRW.js';
 
 createRequire(import.meta.url);
@@ -7287,8 +7287,8 @@ function classifyOnePath(rawPath) {
   const segs = path.split("/");
   const outerlayerIndex = segs.indexOf(OUTERLAYER_DIR);
   if (outerlayerIndex === -1) {
-    const base2 = segs[segs.length - 1];
-    if (base2 === "AGENTS.md" || base2 === "CLAUDE.md") {
+    const base = segs[segs.length - 1];
+    if (base === "AGENTS.md" || base === "CLAUDE.md") {
       const scopePath2 = segs.slice(0, -1).join("/");
       return { type: "entry", entry: { path, kind: "external-instructions", scopePath: scopePath2 } };
     }
@@ -7975,26 +7975,9 @@ function normalizeRepoName(repo) {
 }
 var CONTEXT_PIN_FILENAME = ".outerlayer-pin.json";
 var CONTEXT_PIN_SCHEMA_VERSION = 1;
-var base = {
-  whenPaths: null,
-  whenIssueType: null,
-  whenIssueLabels: null,
-  needs: [],
-  declaresEmit: null,
-  level: "warn"
-};
-var REGISTRY_VALIDATORS = [
-  {
-    ...base,
-    id: "code-review-ran",
-    name: "Code review report",
-    row: "A code review report is attached to this change",
-    requireAny: [{ type: "artifact", kind: "report", for: "code-review-ran" }]
-  }
-];
 var MAX_COMMAND_LENGTH = 2e3;
-var RECOMMENDED_EXTENDS = "outerlayer:recommended@v1";
-var FREED_BUILTINS = /* @__PURE__ */ new Set(["ci-passed", "acceptance-criteria"]);
+var EXTENDS_PROBLEM = '"extends" is not a policy key \u2014 every check is a file in .outerlayer/validators/. Run outerlayer init --template default to write .outerlayer/validators/code-review.yaml, then delete the extends line';
+var FREED_BUILTINS = /* @__PURE__ */ new Set(["ci-passed", "acceptance-criteria", "code-review-ran"]);
 var RETIRED_BUILTINS = /* @__PURE__ */ new Set([
   "red-then-green",
   "no-test-tampering",
@@ -8024,7 +8007,7 @@ function parseLevel(value) {
   return value === "warn" || value === "info" || value === "off" ? value : null;
 }
 function parseMergeGate(value) {
-  return value === "none" || value === "on-flag" || value === "on-unverifiable" ? value : null;
+  return value === "none" || value === "on-flag" ? value : null;
 }
 function parseReview(value) {
   return value === "required" || value === "optional" ? value : null;
@@ -8033,7 +8016,7 @@ function parsePolicyFile(file) {
   const problems = [];
   const fail = (problem) => {
     problems.push({ file: file.path, problem });
-    return { extendsOk: false, overrides: {}, mergeGate: null, review: null, testProof: null, criteriaMissing: null, problems };
+    return { overrides: {}, mergeGate: null, review: null, testProof: null, criteriaMissing: null, problems };
   };
   let root;
   try {
@@ -8041,9 +8024,11 @@ function parsePolicyFile(file) {
   } catch (error) {
     return fail(`not valid YAML \u2014 ${error instanceof Error ? error.message : String(error)}`);
   }
+  if (root === null) root = {};
   if (!isRecord(root)) return fail("must be a YAML mapping");
+  if (root["extends"] !== void 0) return fail(EXTENDS_PROBLEM);
   for (const key of Object.keys(root)) {
-    if (key !== "extends" && key !== "validators" && key !== "merge_gate" && key !== "review" && key !== "build" && key !== "criteria") {
+    if (key !== "validators" && key !== "merge_gate" && key !== "review" && key !== "build" && key !== "criteria") {
       return fail(`unknown key "${inlineText(key)}"`);
     }
   }
@@ -8093,7 +8078,7 @@ function parsePolicyFile(file) {
     mergeGate = parseMergeGate(root["merge_gate"]);
     if (mergeGate === null) {
       return fail(
-        `merge_gate has value "${inlineText(String(root["merge_gate"]))}" \u2014 use none, on-flag, or on-unverifiable`
+        `merge_gate has value "${inlineText(String(root["merge_gate"]))}" \u2014 use none or on-flag`
       );
     }
   }
@@ -8104,14 +8089,6 @@ function parsePolicyFile(file) {
       return fail(`review has value "${inlineText(String(root["review"]))}" \u2014 use required or optional`);
     }
   }
-  if (root["extends"] === void 0) {
-    return fail(`missing "extends" \u2014 adopt the registry with extends: ${RECOMMENDED_EXTENDS}`);
-  }
-  if (root["extends"] !== RECOMMENDED_EXTENDS) {
-    return fail(
-      `unknown extends "${inlineText(String(root["extends"]))}" \u2014 the only supported registry is ${RECOMMENDED_EXTENDS}`
-    );
-  }
   const overrides = {};
   const validators = root["validators"];
   if (validators !== void 0) {
@@ -8124,7 +8101,7 @@ function parsePolicyFile(file) {
       overrides[id] = level;
     }
   }
-  return { extendsOk: true, overrides, mergeGate, review, testProof, criteriaMissing, problems };
+  return { overrides, mergeGate, review, testProof, criteriaMissing, problems };
 }
 function parseSessionRan(value, file, problems) {
   var _a;
@@ -8150,6 +8127,24 @@ function parseSessionRan(value, file, problems) {
   }
   return { type: "session-ran", command: command.trim(), status };
 }
+function parseArtifactRequirement(value, file, problems) {
+  const fail = (problem) => {
+    problems.push({ file, problem });
+    return null;
+  };
+  if (!isRecord(value) || Object.keys(value).some((key) => key !== "kind" && key !== "for")) {
+    return fail(`"artifact" must be a mapping of "kind" and "for"`);
+  }
+  const kind = ARTIFACT_KINDS.find((known) => known === value["kind"]);
+  if (kind === void 0) {
+    return fail(`"artifact" kind must be one of ${ARTIFACT_KINDS.join(", ")}`);
+  }
+  const boundTo = ArtifactCriterionIdSchema.safeParse(value["for"]);
+  if (!boundTo.success) {
+    return fail(`"artifact" for must name the id the artifact is emitted --for`);
+  }
+  return { type: "artifact", kind, for: boundTo.data };
+}
 function parseRequirementAlt(value, file, problems) {
   if (!isRecord(value)) {
     problems.push({ file, problem: `each requirement must be a single-key mapping` });
@@ -8159,7 +8154,7 @@ function parseRequirementAlt(value, file, problems) {
   if (keys.length !== 1) {
     problems.push({
       file,
-      problem: `a requirement names exactly one of session.ran, validator, emitted`
+      problem: `a requirement names exactly one of session.ran, validator, emitted, artifact`
     });
     return null;
   }
@@ -8181,6 +8176,7 @@ function parseRequirementAlt(value, file, problems) {
     }
     return { type: "emitted", name };
   }
+  if (key === "artifact") return parseArtifactRequirement(value[key], file, problems);
   problems.push({ file, problem: `unknown requirement "${key}"` });
   return null;
 }
@@ -8456,7 +8452,6 @@ function parsePolicy(policyFile, validatorFiles) {
   var _a, _b, _c, _d, _e;
   const problems = [];
   const policy = policyFile ? parsePolicyFile(policyFile) : {
-    extendsOk: true,
     overrides: {},
     mergeGate: null,
     review: null,
@@ -8503,8 +8498,7 @@ function parsePolicy(policyFile, validatorFiles) {
     return false;
   });
   const resolved = resolveReferences(deduped, signalIds, problems);
-  const registry = policyFile !== null && policy.extendsOk ? REGISTRY_VALIDATORS.filter((def) => !seenIds.has(def.id)) : [];
-  const sorted = [...resolved.map((p) => p.def), ...registry].sort((a, b) => a.id < b.id ? -1 : 1);
+  const sorted = resolved.map((p) => p.def).sort((a, b) => a.id < b.id ? -1 : 1);
   const levels = {};
   for (const custom of sorted) levels[custom.id] = custom.level;
   for (const [id, level] of Object.entries(policy.overrides)) {

package/dist/{chunk-YNJEOGDL.js → chunk-PK5NANMT.js}

@@ -22431,4 +22431,4 @@ xmlchars/xmlns/1.0/ed3.js:
    *)
 */
 
-export { ARTIFACT_MAX_CAPTION_LENGTH, ARTIFACT_MAX_FILENAME_LENGTH, ARTIFACT_MAX_REPLACES_TARGETS, ArtifactCriterionIdSchema, ArtifactSpoolRecordSchema, ArtifactTombstoneRecordSchema, BUCKET_MODEL_MAX_LENGTH, CAPTURE_TIERS, CriteriaListSchema, EMITTED_RESULTS, EMITTED_RESULT_MAX_BODY_LENGTH, EMITTED_RESULT_MAX_LINK_LENGTH, EVENT_TYPES, EmittedNameSchema, FindingBatchSchema, RESERVED_EMIT_NAMES, SCHEMA_VERSION, SPEED_MAX_LENGTH, bannedPathsForTier, bindTests, downconvertSession, inferArtifactKind, inputBandOf, isHumanUserTurn, mediaTypeForArtifactPath, parseAgentSession, parseJunit, parseTestSelector, turnCountBound };
+export { ARTIFACT_KINDS, ARTIFACT_MAX_CAPTION_LENGTH, ARTIFACT_MAX_FILENAME_LENGTH, ARTIFACT_MAX_REPLACES_TARGETS, ArtifactCriterionIdSchema, ArtifactSpoolRecordSchema, ArtifactTombstoneRecordSchema, BUCKET_MODEL_MAX_LENGTH, CAPTURE_TIERS, CriteriaListSchema, EMITTED_RESULTS, EMITTED_RESULT_MAX_BODY_LENGTH, EMITTED_RESULT_MAX_LINK_LENGTH, EVENT_TYPES, EmittedNameSchema, FindingBatchSchema, RESERVED_EMIT_NAMES, SCHEMA_VERSION, SPEED_MAX_LENGTH, bannedPathsForTier, bindTests, downconvertSession, inferArtifactKind, inputBandOf, isHumanUserTurn, mediaTypeForArtifactPath, parseAgentSession, parseJunit, parseTestSelector, turnCountBound };

package/dist/{chunk-33GOCSRO.js → chunk-PVC36MFI.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { autoConnect } from './chunk-WMPO3SKK.js';
+import { autoConnect } from './chunk-MSV44EB5.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import { resolveRepoIdentity } from './chunk-HN2JBGSI.js';
+import { resolveRepoIdentity } from './chunk-CDISNKM4.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { defaultFetch } from './chunk-YO4PSLVB.js';
 import { unauthorizedMessage, resolveGatewayCredentials } from './chunk-PLMTLGYH.js';
@@ -38,7 +38,7 @@ async function runWorkPr(opts) {
   const cwd = opts.cwd ?? process.cwd();
   const env = opts.env ?? process.env;
   const home = opts.home ?? homeFromEnv(env);
-  const refusal = await autoConnect(opts);
+  const refusal = await autoConnect({ ...opts, repository: opts.repo });
   if (refusal !== void 0) throw new WorkPrCommandError(refusal);
   const creds = resolveCredentials(opts);
   const prNumber = resolvePrNumber(opts.number);

package/dist/{chunk-QJPO42VI.js → chunk-SWGQAURM.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isPlaceholderCommand } from './chunk-MJLUWGUD.js';
-import { describeCallFailure } from './chunk-EQG7L6LM.js';
-import { WorkCommandError, getJson } from './chunk-R5SPFO6F.js';
-import { sanitizeTerminal } from './chunk-ZYHKJKSU.js';
+import { isPlaceholderCommand } from './chunk-IOG6LPEI.js';
+import { describeCallFailure } from './chunk-GJ3OWUFO.js';
+import { WorkCommandError, getJson } from './chunk-TY7EZC7U.js';
+import { sanitizeTerminal } from './chunk-BL63NBJZ.js';
 import { builtinKind } from './chunk-7KI224YS.js';
 import { CLAUDE_CREDENTIAL_VARIABLES, claudeCredential } from './chunk-2FWL7CE2.js';
 import { signerFor } from './chunk-V7NIVOFD.js';

package/dist/{chunk-EWBM2USM.js → chunk-TFJGK4UB.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { sanitizeTerminal } from './chunk-ZYHKJKSU.js';
-import { remoteLookupFailed } from './chunk-HN2JBGSI.js';
+import { sanitizeTerminal } from './chunk-BL63NBJZ.js';
+import { remoteLookupFailed } from './chunk-CDISNKM4.js';
 import { DEFAULT_DASHBOARD } from './chunk-USO2DKBD.js';
 import { resolveGatewayCredentials } from './chunk-PLMTLGYH.js';
 import { readCloudConfig } from './chunk-EABW6AJQ.js';
@@ -168,6 +168,9 @@ function saveFactoryConnection(gitCommonDir, saved, factory, now) {
 function connectedLine(repository, factory, reason) {
   return `Connected ${repository} to factory "${factory.displayName}" in ${factory.organization.displayName} (${REASON_TEXT[reason]}).`;
 }
+function autoConnectedLine(repository, factory, reason) {
+  return `Using factory "${factory.displayName}" in ${factory.organization.displayName} for ${repository} (${REASON_TEXT[reason]}); saved for this checkout.`;
+}
 async function choose(flags, deps, factories, saved, repository) {
   if (flags.factory !== void 0) {
     const wanted = flags.factory.toLowerCase();
@@ -289,4 +292,4 @@ async function runConnectCommand(flags, deps, out) {
   return r.code;
 }
 
-export { connectedLine, fetchFactories, isLinkedRepository, promptOnTerminal, realConnectDeps, runConnect, runConnectCommand, saveFactoryConnection, selectFactory };
+export { autoConnectedLine, fetchFactories, isLinkedRepository, promptOnTerminal, realConnectDeps, runConnect, runConnectCommand, saveFactoryConnection, selectFactory };

package/dist/{chunk-R5SPFO6F.js → chunk-TY7EZC7U.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { autoConnect } from './chunk-WMPO3SKK.js';
+import { autoConnect } from './chunk-MSV44EB5.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import { sanitizeTerminal } from './chunk-ZYHKJKSU.js';
-import { resolveRepoIdentity } from './chunk-HN2JBGSI.js';
+import { sanitizeTerminal } from './chunk-BL63NBJZ.js';
+import { resolveRepoIdentity } from './chunk-CDISNKM4.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { defaultFetch } from './chunk-YO4PSLVB.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-PLMTLGYH.js';
@@ -81,7 +81,7 @@ function resolveCredentials(opts) {
   return { url: resolved.url, apiKey: resolved.credential, appId: resolved.appId };
 }
 async function connectIfOneFits(opts) {
-  const refusal = await autoConnect(opts);
+  const refusal = await autoConnect({ ...opts, repository: opts.repo });
   if (refusal !== void 0) throw new WorkCommandError(refusal);
 }
 function resolveRepository(repoFlag, cwd) {
@@ -347,7 +347,7 @@ async function runWorkLinkSession(opts) {
     return await linkSession(opts);
   } catch (err) {
     if (opts.logFailures) {
-      const { logHookError } = await import('./hook-fast-OCHVQZTU.js');
+      const { logHookError } = await import('./hook-fast-CFLLVMSV.js');
       const reason = err instanceof Error ? err.message : String(err);
       logHookError(opts.home ?? homeFromEnv(opts.env ?? process.env), new Error(`work link-session #${opts.number} failed: ${reason}`));
     }

package/dist/{chunk-NPBLDMSD.js → chunk-WGLWDX5J.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { RecipeError } from './chunk-QOZKPLVJ.js';
-import { trackImageBuild, isOutOfMemory, ensureBuilder } from './chunk-CLURXEWV.js';
+import { trackImageBuild, isOutOfMemory, ensureBuilder } from './chunk-DE4GLH3P.js';
 import { spawn } from 'child_process';
 import { existsSync, mkdirSync, createWriteStream, rmSync, readFileSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-JXH6LEEH.js → chunk-WLV4KCAW.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { splitRawFile } from './chunk-CMFCCIQN.js';
+import { splitRawFile } from './chunk-NKU5OPYP.js';
 import { resolvePackageVersion } from './chunk-RA3O54FC.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, readdirSync } from 'fs';
 import { join, dirname } from 'path';