@whittlelabs/sifter 0.25.0 → 0.27.0

package/bin.js

@@ -15399,9 +15399,26 @@ var require_client = __commonJS({
       async getJobPool(poolId) {
         return this.request("GET", `/api/job-pools/${poolId}`);
       }
+      /**
+       * Resolve a pool by exact name. Names are unique per OWNER, not globally
+       * (whittlelabs#763), and this method lists without a principal filter, so
+       * the same name can legitimately come back under several owners. That
+       * reference is inherently ambiguous — and silently picking one (the old
+       * behavior took the server's newest-first ordering) is exactly the
+       * capture vector the per-owner constraint closed, re-opened cross-owner.
+       * So it refuses instead: reference the pool by id, or list with explicit
+       * principal filters, when more than one owner holds the name.
+       */
       async resolveJobPoolByName(name) {
         const pools = await this.listJobPools({ name });
-        return pools.find((p) => p.name === name);
+        const matches = pools.filter((p) => p.name === name);
+        const owners = new Set(matches.map((p) => `${p.principalClass ?? ""}/${p.principalId ?? ""}`));
+        if (owners.size > 1) {
+          const error = new Error(`Job pool name "${name}" is ambiguous: ${matches.length} pools under ${owners.size} different owners hold it. Reference the pool by id, or resolve it with explicit principal filters (listJobPools).`);
+          error.code = "JOB_POOL_NAME_AMBIGUOUS";
+          throw error;
+        }
+        return matches[0];
       }
       /** Internal: resolve a `PoolRef` to a pool id. */
       async resolvePoolRef(ref) {
@@ -19502,10 +19519,45 @@ var require_output_gates = __commonJS({
   "../../packages/shuttle/dist/executors/output-gates.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.isSanctionedPaint = isSanctionedPaint;
+    exports2.unsanctionedPaints = unsanctionedPaints;
     exports2.resolvePath = resolvePath;
     exports2.evaluateOutputGates = evaluateOutputGates;
     exports2.renderRepairPrompt = renderRepairPrompt;
     var INPUT_REF = "input:";
+    var COLOR_BEARING = ["fill", "stroke", "color", "stop-color", "flood-color", "lighting-color"];
+    var INERT = /* @__PURE__ */ new Set(["none", "inherit", "initial", "unset", "transparent", "currentcolor"]);
+    function isSanctionedPaint(raw) {
+      const value = raw.trim().toLowerCase();
+      if (value === "")
+        return true;
+      if (INERT.has(value))
+        return true;
+      if (/^url\(\s*['"]?#[^)'"]+['"]?\s*\)$/.test(value))
+        return true;
+      const varMatch = /^var\(\s*(--[a-z0-9-]+)\s*(?:,([\s\S]*))?\)$/.exec(value);
+      if (!varMatch)
+        return false;
+      const [, name, fallback] = varMatch;
+      if (!name.startsWith("--color-"))
+        return false;
+      return fallback === void 0 || isSanctionedPaint(fallback);
+    }
+    function unsanctionedPaints(source) {
+      const found = [];
+      const attrs = COLOR_BEARING.join("|");
+      const attribute = new RegExp(`\\b(?:${attrs})\\s*=\\s*(['"])([\\s\\S]*?)\\1`, "gi");
+      const declaration = new RegExp(`\\b(?:${attrs})\\s*:\\s*([^;"'}\\n]+)`, "gi");
+      for (const [, , value] of source.matchAll(attribute)) {
+        if (!isSanctionedPaint(value))
+          found.push(value.trim());
+      }
+      for (const [, value] of source.matchAll(declaration)) {
+        if (!isSanctionedPaint(value))
+          found.push(value.trim());
+      }
+      return found;
+    }
     function resolvePath(root, path) {
       let ctx = root;
       for (const seg of path.split(".")) {
@@ -19593,6 +19645,33 @@ var require_output_gates = __commonJS({
         return [
           `'${path}' must be a non-empty array${cond}; it was ${Array.isArray(value) ? "empty" : "absent"}.`
         ];
+      },
+      /**
+       * `bounded_palette` — every colour in the sources at `path` must be named
+       * by role rather than written as a value. Params:
+       * `{ path: <output path>, roles?: <role names for the repair turn> }`.
+       *
+       * A drawing the model authors is markup the house did not write, and a
+       * literal in it is a colour outside the consuming palette: unproved
+       * against the colours beside it, unchecked for contrast on the ground it
+       * lands on, and fixed to one theme. The consumer strips such a paint at
+       * render, so an artifact that carries one silently loses it. Catching it
+       * HERE is what makes that a repair the model can make while it still has
+       * the drawing in hand, instead of a defect nobody sees until the picture
+       * comes out plain.
+       */
+      bounded_palette(params, output) {
+        const path = String(params.path);
+        const value = resolvePath(output, path);
+        const sources = (Array.isArray(value) ? value : [value]).filter((v) => typeof v === "string" && v.length > 0);
+        const offenders = [...new Set(sources.flatMap(unsanctionedPaints))];
+        if (offenders.length === 0)
+          return [];
+        const roles = Array.isArray(params.roles) ? params.roles.map(String) : [];
+        const vocabulary = roles.length > 0 ? ` Use one of: ${roles.join(", ")}.` : "";
+        return [
+          `'${path}' states ${offenders.length} colour value${offenders.length === 1 ? "" : "s"} directly (${offenders.slice(0, 8).join(", ")}${offenders.length > 8 ? ", \u2026" : ""}). Every colour must be named by role \u2014 var(--color-\u2026), currentColor, or none \u2014 never as a hex, rgb(), hsl() or colour name, because a value cannot adapt to the reader's theme and was never checked against the colours beside it.${vocabulary} Redraw with roles and return the whole output again.`
+        ];
       }
     };
     function evaluateOutputGates(gates, output, inputs) {
@@ -22371,7 +22450,7 @@ var import_path = require("path");
 var import_promises = require("fs/promises");
 var import_yaml = __toESM(require_dist());
 var import_shuttle = __toESM(require_dist5());
-var buildVersion = true ? "0.25.0" : pkg.version;
+var buildVersion = true ? "0.27.0" : pkg.version;
 var sifterBrand = {
   product: {
     id: "sifter",