@yagni-app/code-staging 1.2.6-staging.1918.1 → 1.2.6-staging.1932.1

package/dist/extension/pipeline/verify.js

@@ -244,7 +244,9 @@ function pickScript(pkgDir, readFile, pm) {
  */
 export function detectVerifyCommands(cwd, opts = {}) {
     const readFile = opts.readFile ?? ((p) => readFileSync(p, "utf8"));
-    const override = opts.allowRepoOverride ? tryRead(readFile, join(cwd, ".yagni-code", "verify")) : null;
+    const override = opts.allowRepoOverride
+        ? tryRead(readFile, join(cwd, ".yagni-code", "verify"))
+        : null;
     if (override) {
         for (const raw of override.split("\n")) {
             const line = raw.trim();
@@ -380,13 +382,22 @@ export function classifyVerifyInfraFailure(output, exitCode) {
  * the failure parsers and, past those, to fail-open UNCERTAIN.
  */
 const TEST_INFRA_PATTERNS = [
-    [/\bECONNREFUSED\b|\bconnection refused\b/i, "connection refused (is the test's DB/service running?)"],
+    [
+        /\bECONNREFUSED\b|\bconnection refused\b/i,
+        "connection refused (is the test's DB/service running?)",
+    ],
     [/\bECONNRESET\b/, "connection reset by the test's DB/service"],
     [/\bENOTFOUND\b|\bEAI_AGAIN\b/, "DNS/host resolution failed for a test dependency"],
     [/\bEADDRINUSE\b/, "a port the tests need is already in use"],
     [/\bETIMEDOUT\b|\bconnect(?:ion)? timed out\b/i, "connection to a test dependency timed out"],
-    [/\bmissing (?:required )?env(?:ironment)? (?:var(?:iable)?s?)\b/i, "missing environment variable"],
-    [/\benvironment variable\b[^\n]{0,80}\b(?:is )?(?:not set|missing|required|must be set)\b/i, "missing environment variable"],
+    [
+        /\bmissing (?:required )?env(?:ironment)? (?:var(?:iable)?s?)\b/i,
+        "missing environment variable",
+    ],
+    [
+        /\benvironment variable\b[^\n]{0,80}\b(?:is )?(?:not set|missing|required|must be set)\b/i,
+        "missing environment variable",
+    ],
     [/\bprocess\.env\.[A-Z0-9_]+ is (?:undefined|not set)\b/, "missing environment variable"],
     [/\bSASL\b|\bSCRAM-SERVER\b/, "database auth failed (missing DB credentials?)"],
     [/\bpassword authentication failed\b/i, "database auth failed"],
@@ -395,6 +406,14 @@ const TEST_INFRA_PATTERNS = [
     [/\brelation "[^"]*" does not exist\b/i, "database schema missing (migrations not run?)"],
     [/\bauthentication (?:failed|error)\b/i, "authentication against a test dependency failed"],
     [/\b401 Unauthorized\b|\b403 Forbidden\b/i, "authorization against a test dependency failed"],
+    // A container image that would not come down is the registry, not the
+    // change (NMT-71: ghcr.io answered EOF to supabase start).
+    [
+        /\bfailed to pull (?:docker )?image\b|\bError response from daemon: (?:Get|Head|pull|manifest)\b|\bpull access denied\b|\btoomanyrequests\b/i,
+        "a container image could not be pulled (registry unreachable or rate-limited)",
+    ],
+    [/\bCannot connect to the Docker daemon\b/i, "Docker is not running"],
+    [/\bno space left on device\b/i, "the disk is full"],
 ];
 /** Strip a trailing `(4 ms)` / `(0.82ms)` duration off a failing-test name. */
 function stripDuration(name) {
@@ -507,7 +526,11 @@ export function classifyTestFailure(output, exitCode) {
         return {
             kind: "failures",
             findings: failures.map((f) => {
-                const finding = { severity: "critical", lens: VERIFY_LENS, message: `verify: test failed: ${f.message}` };
+                const finding = {
+                    severity: "critical",
+                    lens: VERIFY_LENS,
+                    message: `verify: test failed: ${f.message}`,
+                };
                 if (f.file)
                     finding.file = f.file;
                 if (f.line)
@@ -564,7 +587,13 @@ export function parseVerifyFailures(output, exitCode, label) {
         if (seen.has(key))
             continue;
         seen.add(key);
-        located.push({ severity: "critical", lens: VERIFY_LENS, message: `verify: ${message}`, file, line: lineNo });
+        located.push({
+            severity: "critical",
+            lens: VERIFY_LENS,
+            message: `verify: ${message}`,
+            file,
+            line: lineNo,
+        });
         if (located.length >= MAX_LOCATED_FINDINGS)
             break;
     }
@@ -720,7 +749,7 @@ export function newTreeEntries(before, after) {
 }
 function runGitQuiet(args, cwd) {
     return new Promise((resolve, reject) => {
-        execFile("git", args, { cwd, maxBuffer: 1024 * 1024 }, (err) => (err ? reject(err) : resolve()));
+        execFile("git", args, { cwd, maxBuffer: 1024 * 1024 }, (err) => err ? reject(err) : resolve());
     });
 }
 /** Undo what the repository checks wrote: an untracked path is removed, a tracked one restored. */
@@ -797,7 +826,10 @@ const defaultExec = makeDefaultExec();
  */
 export function resolveClaimDirs(repoRoot, claims, readFile) {
     const probes = claims
-        .map((c) => c.trim().replace(/^\.\/+/, "").replace(/\/+$/, ""))
+        .map((c) => c
+        .trim()
+        .replace(/^\.\/+/, "")
+        .replace(/\/+$/, ""))
         .filter((c) => c.length > 0 && c !== ".")
         .map((c) => `${c}/.claim`);
     return resolvePackageDirs(repoRoot, probes, readFile);
@@ -832,8 +864,10 @@ function tagFinding(finding, name) {
  * and produces no findings.
  */
 export function makeWorkstreamCheck(opts = {}) {
-    const claimDirs = opts.claimDirs ?? ((cwd, claims) => resolveClaimDirs(cwd, claims, (p) => readFileSync(p, "utf8")));
-    const detect = opts.detect ?? ((cwd, dirs) => detectVerifyCommands(cwd, { changedDirs: dirs }));
+    const claimDirs = opts.claimDirs ??
+        ((cwd, claims) => resolveClaimDirs(cwd, claims, (p) => readFileSync(p, "utf8")));
+    const detect = opts.detect ??
+        ((cwd, dirs) => detectVerifyCommands(cwd, { changedDirs: dirs }));
     const exec = opts.exec ?? defaultExec;
     const timeoutMs = opts.timeoutMs ?? VERIFY_TIMEOUT_MS;
     return async function runWorkstreamCheck(cwd, targets, signal) {
@@ -923,7 +957,8 @@ export function makeRunVerify(opts = {}) {
             allowRepoOverride: process.env.YAGNI_CODE_ALLOW_VERIFY_OVERRIDE === "1",
             changedDirs,
         }));
-    const detectTests = opts.detectTests ?? ((cwd, changedDirs) => detectVerifyTestCommands(cwd, { changedDirs }));
+    const detectTests = opts.detectTests ??
+        ((cwd, changedDirs) => detectVerifyTestCommands(cwd, { changedDirs }));
     const changedDirs = opts.changedDirs ??
         (async (cwd, signal, baselinePaths) => {
             const snapshot = await snapshotWorkspace(cwd, signal);
@@ -951,7 +986,8 @@ export function makeRunVerify(opts = {}) {
             const path = process.env.YAGNI_TOOLCHAIN_FILE?.trim();
             return path ? readToolchainFile(path) : null;
         });
-    const treeStatus = opts.treeStatus ?? (async (cwd, signal) => (await snapshotWorkspace(cwd, signal)).status);
+    const treeStatus = opts.treeStatus ??
+        (async (cwd, signal) => (await snapshotWorkspace(cwd, signal)).status);
     const undoTreeWrites = opts.undoTreeWrites ?? defaultUndoTreeWrites;
     // Across the whole build: the half's time spent, and each CI step's failure
     // keys from the last call it failed in.
@@ -992,19 +1028,29 @@ export function makeRunVerify(opts = {}) {
                 continue;
             failedJobs.set(job, job.steps.length > 0
                 ? { name: job.failedCheck.name, status: "not_reached" }
-                : { name: job.failedCheck.name, status: "cannot_run", reason: job.cannotRun[0]?.reason ?? "none of its steps can run in the sandbox" });
+                : {
+                    name: job.failedCheck.name,
+                    status: "cannot_run",
+                    reason: job.cannotRun[0]?.reason ?? "none of its steps can run in the sandbox",
+                });
         }
         const report = () => {
             if (failedJobs.size === 0 && !file.failedChecksCannotRun?.length)
                 return;
             opts.onFailedChecks?.([
                 ...failedJobs.values(),
-                ...(file.failedChecksCannotRun ?? []).map((failed) => ({ name: failed.name, status: "cannot_run", reason: failed.reason })),
+                ...(file.failedChecksCannotRun ?? []).map((failed) => ({
+                    name: failed.name,
+                    status: "cannot_run",
+                    reason: failed.reason,
+                })),
             ]);
         };
         if (cannotRun.length > 0) {
             const named = cannotRun.slice(0, MAX_NAMED_CANNOT_RUN).join("; ");
-            const more = cannotRun.length > MAX_NAMED_CANNOT_RUN ? `; and ${cannotRun.length - MAX_NAMED_CANNOT_RUN} more` : "";
+            const more = cannotRun.length > MAX_NAMED_CANNOT_RUN
+                ? `; and ${cannotRun.length - MAX_NAMED_CANNOT_RUN} more`
+                : "";
             reasons.push(`could not run in the sandbox: ${named}${more}`);
         }
         const approved = file.checks.filter((check) => check.status !== "cannot_run");
@@ -1091,8 +1137,13 @@ export function makeRunVerify(opts = {}) {
     /** A failure's findings, located from the folder the command ran in and prefixed with what ran. */
     function repoFailureFindings(run, failure, label, prefix, dir) {
         const cls = classifyTestFailure(failure.output, failure.code);
-        const parsed = cls.kind === "failures" ? cls.findings : parseVerifyFailures(failure.output, failure.code, label);
-        return parsed.map((f) => ({ ...liftFinding(f, run.cwd, dir), message: `${prefix}: ${f.message}` }));
+        const parsed = cls.kind === "failures"
+            ? cls.findings
+            : parseVerifyFailures(failure.output, failure.code, label);
+        return parsed.map((f) => ({
+            ...liftFinding(f, run.cwd, dir),
+            message: `${prefix}: ${f.message}`,
+        }));
     }
     const findingRoom = (run) => Math.max(0, MAX_LOCATED_FINDINGS - run.findings.length);
     /**
@@ -1171,7 +1222,9 @@ export function makeRunVerify(opts = {}) {
             }
             const where = `CI ${job.name}, step "${step.name}"`;
             const key = `${job.workflow}\u0000${job.job}\u0000${step.name}\u0000${step.run}`;
-            const dir = step.workingDirectory ? join(run.cwd, step.workingDirectory.replace(/^\.\/+/, "")) : run.cwd;
+            const dir = step.workingDirectory
+                ? join(run.cwd, step.workingDirectory.replace(/^\.\/+/, ""))
+                : run.cwd;
             const verdict = await runRepoCommand(run, step.run, dir, step.env);
             if (verdict.kind === "passed") {
                 lastCiFailure.delete(key);
@@ -1211,7 +1264,12 @@ export function makeRunVerify(opts = {}) {
         // choice of how to verify, so an override never takes them out of the loop.
         const repoFile = opts.repoChecks?.() ?? null;
         if (commands.length === 0 && testCommands.length === 0 && !repoFile) {
-            return { ran: false, ok: true, reason: "verify skipped: no verify command detected", findings: [] };
+            return {
+                ran: false,
+                ok: true,
+                reason: "verify skipped: no verify command detected",
+                findings: [],
+            };
         }
         const findings = [];
         const reasons = [];
@@ -1306,7 +1364,13 @@ export function makeRunVerify(opts = {}) {
                 reasons.push("approved checks and CI steps skipped: the typecheck half failed; a later round runs them");
             }
             else {
-                const repo = await runRepoChecks({ file: repoFile, cwd, signal, baselinePaths, callStartedAt });
+                const repo = await runRepoChecks({
+                    file: repoFile,
+                    cwd,
+                    signal,
+                    baselinePaths,
+                    callStartedAt,
+                });
                 reasons.push(...repo.reasons);
                 repoLabels.push(...repo.labels);
                 if (repo.labels.length > 0)
@@ -1317,9 +1381,19 @@ export function makeRunVerify(opts = {}) {
         // The command labels list only what produced a verdict — on every half —
         // so the FINISH trailer's `passed (<cmds>)` never claims a check that was
         // infra-skipped or threw (invariant §0.1).
-        const command = [...new Set(typecheckLabels), ...new Set(testLabels), ...new Set(repoLabels)].join(", ");
+        const command = [
+            ...new Set(typecheckLabels),
+            ...new Set(testLabels),
+            ...new Set(repoLabels),
+        ].join(", ");
         if (!anyRan) {
-            return { ran: false, ok: true, command, reason: reasons.join("; ") || "verify skipped", findings: [] };
+            return {
+                ran: false,
+                ok: true,
+                command,
+                reason: reasons.join("; ") || "verify skipped",
+                findings: [],
+            };
         }
         return {
             ran: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yagni-app/code-staging",
-  "version": "1.2.6-staging.1918.1",
+  "version": "1.2.6-staging.1932.1",
   "description": "YAGNI Code: a terminal coding agent that already knows your company. One YAGNI login routes the model and grounds the agent in your team's context.",
   "license": "SEE LICENSE IN LICENSE.md",
   "author": "YAGNI, Inc. <jack@yagni.app> (https://yagni.app)",
@@ -58,5 +58,5 @@
     "turndown": "^7.2.4",
     "typebox": "^1.3.15"
   },
-  "yagniSourceSha": "569bc8a477a2b04062d6422d40cd28bd5a09f182"
+  "yagniSourceSha": "15297691a28134646f9295adea6f7744d70e392f"
 }