@pourkit/cli 0.0.0-next-20260617195445 → 0.0.0-next-20260617223106

package/dist/.sandcastle/Dockerfile

@@ -0,0 +1,61 @@
+FROM node:22-trixie
+
+# Install system dependencies
+RUN apt-get update && apt-get install -y \
+  git \
+  curl \
+  jq \
+  ca-certificates \
+  python3 \
+  python3-venv \
+  build-essential \
+  ripgrep \
+  && rm -rf /var/lib/apt/lists/*
+
+# Install GitHub CLI
+RUN curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \
+  | dd of=/usr/share/keyrings/githubcli-archive-keyring.gpg \
+  && echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \
+  | tee /etc/apt/sources.list.d/github-cli.list > /dev/null \
+  && apt-get update && apt-get install -y gh \
+  && rm -rf /var/lib/apt/lists/*
+
+# Rename the base image's "node" user (UID 1000) to "agent".
+# This keeps UID 1000 so that --userns=keep-id (Podman) and
+# --user 1000:1000 (Docker) map to the correct home directory owner.
+RUN usermod -d /home/agent -m -l agent node
+
+# Install OpenCode CLI (run as root before USER agent)
+RUN npm install -g opencode-ai@latest
+
+# Install Pourkit CLI for agent-executed validation/verification
+RUN npm install -g @pourkit/cli@next
+
+# Install opensrc so agents can inspect dependency source code
+RUN npm install -g opensrc
+
+# Pre-create writable XDG directories so bind mounts do not leave
+# parent paths root-owned inside the container.
+RUN mkdir -p \
+  /home/agent/.local/bin \
+  /home/agent/.local/share \
+  /home/agent/.local/state \
+  /home/agent/.config \
+  /home/agent/.cache \
+  && chown -R agent:node /home/agent/.local /home/agent/.config /home/agent/.cache
+
+USER agent
+
+WORKDIR /home/agent
+
+ENV PATH="/home/agent/.local/bin:${PATH}"
+
+# Install RTK
+RUN curl -fsSL https://raw.githubusercontent.com/rtk-ai/rtk/refs/heads/master/install.sh | sh
+RUN rtk init -g --opencode
+
+# Install Vera CLI
+# In worktree sandbox mode, Sandcastle bind-mounts the git worktree at ${SANDBOX_REPO_DIR}
+# and overrides the working directory to ${SANDBOX_REPO_DIR} at container start.
+# Structure your Dockerfile so that ${SANDBOX_REPO_DIR} can serve as the project root.
+ENTRYPOINT ["sleep", "infinity"]

package/dist/cli.js

@@ -12089,7 +12089,15 @@ function getWorkflowPackCatalog() {
 function buildOpenCodeSkillProjectionContent(managedSourcePath, sourceContent) {
   const generatedNotice = `Generated from ${managedSourcePath}. Do not edit directly.`;
   if (managedSourcePath.endsWith(".md") || managedSourcePath.endsWith(".mdx")) {
-    return `<!-- ${generatedNotice} -->
+    const comment = `<!-- ${generatedNotice} -->`;
+    const frontmatter = sourceContent.match(
+      /^---\r?\n[\s\S]*?\r?\n---[ \t]*(?:\r?\n|$)/
+    );
+    if (frontmatter) {
+      return `${frontmatter[0]}${comment}
+${sourceContent.slice(frontmatter[0].length)}`;
+    }
+    return `${comment}
 ${sourceContent}`;
   }
   if (managedSourcePath.endsWith(".sh") || managedSourcePath.endsWith(".bash") || managedSourcePath.endsWith(".zsh") || managedSourcePath.endsWith(".py") || managedSourcePath.endsWith(".rb") || managedSourcePath.endsWith(".yml") || managedSourcePath.endsWith(".yaml") || managedSourcePath.endsWith(".toml")) {
@@ -12132,8 +12140,13 @@ function resolvePackagedSourceRoot() {
   return path5.resolve(__dirname2, "..");
 }
 function resolveSourceAssetPath(sourceRoot, ...segments) {
-  const packagedPath = path5.join(sourceRoot, ...segments);
-  if (existsSync18(packagedPath)) return packagedPath;
+  const candidatePaths = [
+    path5.join(sourceRoot, ...segments),
+    path5.join(sourceRoot, "dist", ...segments)
+  ];
+  for (const candidatePath of candidatePaths) {
+    if (existsSync18(candidatePath)) return candidatePath;
+  }
   return path5.join(sourceRoot, "pourkit", ...segments);
 }
 var BASELINE_SKILL_NAMES = [
@@ -12516,14 +12529,31 @@ Use \`fd\` for file discovery, \`rg\` for text search, and direct file reads for
 
 Follow the project's domain docs and conventions documented in \`.pourkit/managed/docs/agents/*\`.
 
-### Managed operating docs
+## Pourkit Workflow Routes
+
+### Issue Tracker
+
+When using Pourkit issue workflows, see \`.pourkit/managed/docs/agents/issue-tracker.md\`.
+
+### Triage Labels
+
+Pourkit workflows use the default triage labels described in \`.pourkit/managed/docs/agents/triage-labels.md\`.
+
+### Domain Docs
+
+Follow the repository domain-documentation layout in \`.pourkit/managed/docs/agents/domain.md\`.
+
+### Issue Naming
+
+PRDs and child issues must follow the naming convention in \`.pourkit/managed/docs/agents/naming.md\`.
+
+### Git Workflow
 
-- \`.pourkit/managed/docs/agents/issue-tracker.md\`
-- \`.pourkit/managed/docs/agents/triage-labels.md\`
-- \`.pourkit/managed/docs/agents/naming.md\`
-- \`.pourkit/managed/docs/agents/git-workflow.md\`
-- \`.pourkit/managed/docs/agents/commit-style.md\`
-- \`.pourkit/managed/docs/agents/domain.md\`
+Branch naming and PR creation guidance lives in \`.pourkit/managed/docs/agents/git-workflow.md\`.
+
+### Commit Style
+
+Agents must write readable conventional commits with bullet-list bodies for non-trivial changes. See \`.pourkit/managed/docs/agents/commit-style.md\`.
 
 ### Project-owned context
 
@@ -13306,7 +13336,7 @@ Do not edit this file.
           });
         }
       }
-      const srcSandboxDockerfile = path5.join(
+      const srcSandboxDockerfile = resolveSourceAssetPath(
         sourceRoot,
         ".sandcastle",
         "Dockerfile"
@@ -14279,11 +14309,11 @@ async function runInitCommand(options) {
     };
     promptLabels = promptResult.labels;
   }
-  const conflictPolicy = options.fromLocal ? {
+  const conflictPolicy = {
     docsMigration: options.docsMigration ?? "copy",
     agentFile: options.agentFile ?? "both",
     yes: options.yes ?? false
-  } : void 0;
+  };
   const planLabels = isInteractive ? promptLabels ?? DEFAULT_RUNNER_LABELS : DEFAULT_RUNNER_LABELS;
   const plan = await planInit({
     targetRoot,
@@ -15312,16 +15342,31 @@ function generateManagedBlockContent() {
   return [
     "This repository uses Pourkit.",
     "",
-    "## Managed operating docs",
+    "## Pourkit Workflow Routes",
+    "",
+    "### Issue Tracker",
+    "",
+    "When using Pourkit issue workflows, see `.pourkit/managed/docs/agents/issue-tracker.md`.",
+    "",
+    "### Triage Labels",
+    "",
+    "Pourkit workflows use the default triage labels described in `.pourkit/managed/docs/agents/triage-labels.md`.",
+    "",
+    "### Domain Docs",
+    "",
+    "Follow the repository domain-documentation layout in `.pourkit/managed/docs/agents/domain.md`.",
+    "",
+    "### Issue Naming",
+    "",
+    "PRDs and child issues must follow the naming convention in `.pourkit/managed/docs/agents/naming.md`.",
+    "",
+    "### Git Workflow",
+    "",
+    "Branch naming and PR creation guidance lives in `.pourkit/managed/docs/agents/git-workflow.md`.",
     "",
-    "Follow the managed operating docs under `.pourkit/managed/docs/agents/*`:",
+    "### Commit Style",
     "",
-    "- `.pourkit/managed/docs/agents/issue-tracker.md`",
-    "- `.pourkit/managed/docs/agents/triage-labels.md`",
-    "- `.pourkit/managed/docs/agents/naming.md`",
-    "- `.pourkit/managed/docs/agents/git-workflow.md`",
-    "- `.pourkit/managed/docs/agents/commit-style.md`",
-    "- `.pourkit/managed/docs/agents/domain.md`",
+    "Agents must write readable conventional commits with bullet-list bodies for non-trivial changes. See `.pourkit/managed/docs/agents/commit-style.md`.",
     "",
     "### Project-owned context",
     "",
@@ -17386,11 +17431,11 @@ function createCliProgram(version) {
   return program;
 }
 async function resolveCliVersion() {
-  if (isPackageVersion("0.0.0-next-20260617195445")) {
-    return "0.0.0-next-20260617195445";
+  if (isPackageVersion("0.0.0-next-20260617223106")) {
+    return "0.0.0-next-20260617223106";
   }
-  if (isReleaseVersion("0.0.0-next-20260617195445")) {
-    return "0.0.0-next-20260617195445";
+  if (isReleaseVersion("0.0.0-next-20260617223106")) {
+    return "0.0.0-next-20260617223106";
   }
   try {
     const root = repoRoot();