@pourkit/cli 0.0.0-next-20260531183322 → 0.0.0-next-20260531213458

package/dist/cli.js

@@ -745,8 +745,7 @@ function getVerificationCommands(target) {
 }
 async function loadRepoConfig(repoRoot2, configFileName = "pourkit.config.ts") {
   const { existsSync: existsSync10 } = await import("fs");
-  const { readFile: readFile5, writeFile: writeFile3, rm } = await import("fs/promises");
-  const { tmpdir } = await import("os");
+  const { mkdir: mkdir5, writeFile: writeFile3, rm } = await import("fs/promises");
   const { join: pjoin, basename } = await import("path");
   const { pathToFileURL: pathToFileURL2 } = await import("url");
   const { build } = await import("esbuild");
@@ -756,8 +755,10 @@ async function loadRepoConfig(repoRoot2, configFileName = "pourkit.config.ts") {
       `No config file found at ${configPath}. Create a ${configFileName} that exports a default PourkitConfig.`
     );
   }
+  const tmpDir = pjoin(repoRoot2, ".pourkit", ".tmp", "config");
+  await mkdir5(tmpDir, { recursive: true });
   const tmpFile = pjoin(
-    tmpdir(),
+    tmpDir,
     `pourkit-config-${Date.now()}-${Math.random().toString(36).slice(2, 8)}.mjs`
   );
   try {
@@ -1295,6 +1296,30 @@ var RecoveryArtifactInvalid = class extends Error {
     this.reason = args.reason;
   }
 };
+var ConfigFailure = class extends Error {
+  _tag = "ConfigFailure";
+  configKey;
+  expectedType;
+  message;
+  constructor(args) {
+    super(args.message);
+    this.name = "ConfigFailure";
+    this.configKey = args.configKey;
+    this.expectedType = args.expectedType;
+    this.message = args.message;
+  }
+};
+var SafetyFailure = class extends Error {
+  _tag = "SafetyFailure";
+  sensitivityKind;
+  message;
+  constructor(args) {
+    super(args.message);
+    this.name = "SafetyFailure";
+    this.sensitivityKind = args.sensitivityKind;
+    this.message = args.message;
+  }
+};
 var SUPPORTED_DECISIONS = /* @__PURE__ */ new Set([
   "RETRY_STAGE",
   "HANDOFF_TO_HUMAN",
@@ -1875,7 +1900,7 @@ import { join as join6 } from "path";
 
 // failure-resolution/recovery-policy.ts
 function isSecuritySensitiveFailure(failure) {
-  return failure instanceof PublishedHistoryRisk;
+  return failure instanceof PublishedHistoryRisk || failure instanceof SafetyFailure;
 }
 async function evaluateRecoveryPolicy(params) {
   if (isSecuritySensitiveFailure(params.failure)) {
@@ -1884,6 +1909,14 @@ async function evaluateRecoveryPolicy(params) {
       reason: "Security-sensitive failure \u2014 AI recovery bypassed"
     };
   }
+  if (params.failure instanceof ConfigFailure) {
+    if (params.agentRecommendedDecision !== "FAIL_RUN" && params.agentRecommendedDecision !== "HANDOFF_TO_HUMAN") {
+      return {
+        decision: "HANDOFF_TO_HUMAN",
+        reason: `ConfigFailure \u2014 agent recommended ${params.agentRecommendedDecision} but config errors are not AI-repairable`
+      };
+    }
+  }
   const budget = recoveryBudgetForFailure(
     params.worktreePath,
     params.fingerprint,
@@ -1913,13 +1946,13 @@ async function evaluateRecoveryPolicy(params) {
 // failure-resolution/failure-resolution-agent.ts
 function constructFailureResolutionPacket(failure, context) {
   return {
-    failureType: "RebaseConflict",
+    failureType: failure._tag,
     stageName: context.stageName,
     attemptNumber: context.attemptNumber,
     worktreePath: context.worktreePath,
     branchName: context.branchName,
     baseBranch: context.baseBranch,
-    conflictedPaths: failure.conflictedPaths,
+    conflictedPaths: failure instanceof RebaseConflict ? failure.conflictedPaths : void 0,
     failureSummary: failure.message,
     maxAttempts: context.maxAttempts,
     allowedDecisions: context.allowedDecisions,
@@ -1940,10 +1973,7 @@ async function runFailureResolutionAgent(options) {
   const frConfig = target.strategy.failureResolution;
   const artifactPath = packet.artifactTarget;
   const fullArtifactPath = join6(worktreePath, artifactPath);
-  const fingerprint = computeFailureFingerprint(
-    "baseRefresh",
-    "RebaseConflict"
-  );
+  const fingerprint = computeFailureFingerprint(packet.stageName, failure._tag);
   const prompt = [
     `# Failure Resolution: ${packet.failureType}`,
     "",
@@ -1982,7 +2012,8 @@ async function runFailureResolutionAgent(options) {
       fingerprint,
       `Agent execution failed: ${executionResult.error}`,
       void 0,
-      "HANDOFF_TO_HUMAN"
+      "HANDOFF_TO_HUMAN",
+      packet.stageName
     );
     return {
       status: "handoff",
@@ -1997,7 +2028,8 @@ async function runFailureResolutionAgent(options) {
       fingerprint,
       "Agent did not write artifact",
       void 0,
-      "HANDOFF_TO_HUMAN"
+      "HANDOFF_TO_HUMAN",
+      packet.stageName
     );
     return {
       status: "handoff",
@@ -2017,7 +2049,8 @@ async function runFailureResolutionAgent(options) {
       fingerprint,
       reason,
       void 0,
-      "HANDOFF_TO_HUMAN"
+      "HANDOFF_TO_HUMAN",
+      packet.stageName
     );
     return { status: "handoff", decision: "HANDOFF_TO_HUMAN", reason };
   }
@@ -2032,7 +2065,8 @@ async function runFailureResolutionAgent(options) {
       fingerprint,
       validation.reason,
       void 0,
-      "HANDOFF_TO_HUMAN"
+      "HANDOFF_TO_HUMAN",
+      packet.stageName
     );
     return {
       status: "handoff",
@@ -2054,7 +2088,8 @@ async function runFailureResolutionAgent(options) {
     fingerprint,
     policyResult.reason,
     artifactPath,
-    policyResult.decision
+    policyResult.decision,
+    packet.stageName
   );
   if (policyResult.decision === "HANDOFF_TO_HUMAN") {
     return {
@@ -2076,12 +2111,12 @@ async function runFailureResolutionAgent(options) {
     artifact
   };
 }
-async function writeRecoveryAttempt(worktreePath, outcome, fingerprint, summary, artifactRef, decision) {
+async function writeRecoveryAttempt(worktreePath, outcome, fingerprint, summary, artifactRef, decision, stageName = "baseRefresh") {
   writeAttemptLog(worktreePath, {
     attemptType: "recovery",
     fingerprint,
     timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-    stage: "baseRefresh",
+    stage: stageName,
     outcome,
     artifactRef,
     decision: decision ?? (outcome === "handoff" ? "HANDOFF_TO_HUMAN" : outcome === "success" ? "RETRY_STAGE" : void 0)
@@ -9041,11 +9076,11 @@ function createCliProgram(version) {
   return program;
 }
 async function resolveCliVersion() {
-  if (isPackageVersion("0.0.0-next-20260531183322")) {
-    return "0.0.0-next-20260531183322";
+  if (isPackageVersion("0.0.0-next-20260531213458")) {
+    return "0.0.0-next-20260531213458";
   }
-  if (isReleaseVersion("0.0.0-next-20260531183322")) {
-    return "0.0.0-next-20260531183322";
+  if (isReleaseVersion("0.0.0-next-20260531213458")) {
+    return "0.0.0-next-20260531213458";
   }
   try {
     const root = repoRoot();