agentloopkit 0.24.0 → 0.24.2

package/README.md

@@ -39,26 +39,23 @@ Coding agents often move fast but leave reviewers with weak evidence: unclear sc
 
 ## Install
 
-Use it with `npx` inside an existing repository:
+Use it with `npx` from the root of the repository you want to configure:
 
 ```bash
-npx agentloopkit init
+cd /path/to/your/repo
 npx agentloopkit init --dry-run
+npx agentloopkit init
 ```
 
-Latest GitHub release: `v0.24.0`. npm still serves `0.1.1`: the next npm publish should catch up once to `0.24.0`; after that, releases return to normal sequential semver. Local `npm whoami` currently returns `E401`, so npm publish is blocked from this shell.
-
-See [docs/release-status.md](docs/release-status.md) for the current GitHub/npm status and update rules.
+`init` writes files into the current directory. Do not run it from `~` unless you intend to configure your home directory. `--dry-run` previews the file changes without writing them.
 
-Until npm catches up, run the current GitHub release tarball directly:
+Pin the current version when you need repeatable CI or team setup:
 
 ```bash
-npx --yes --package https://github.com/abhiyoheswaran1/AgentLoopKit/releases/download/v0.24.0/agentloopkit-0.24.0.tgz agentloop version
-npx --yes --package https://github.com/abhiyoheswaran1/AgentLoopKit/releases/download/v0.24.0/agentloopkit-0.24.0.tgz agentloop init
+npx --yes agentloopkit@0.24.2 version
+npx --yes agentloopkit@0.24.2 init
 ```
 
-The npm version jump has one reason: GitHub releases already exist for the intermediate AgentLoopKit versions between the npm-published `0.1.1` package and the current `v0.24.0` source line. Publishing older numbers from current `main` would create npm packages that do not match their GitHub tags. Once npm authentication or trusted publishing works, the next npm publish should ship `0.24.0`; future releases should then continue with normal sequential semver.
-
 Run the CLI after install:
 
 ```bash
@@ -93,7 +90,7 @@ npx agentloopkit completion powershell
   <img src="https://raw.githubusercontent.com/abhiyoheswaran1/AgentLoopKit/main/docs/assets/readme/agentloopkit-cli.gif" alt="Terminal demo running AgentLoopKit init, task contracts, active task status, task-linked verify, handoff, reports, badges, release notes, gates, and task archive commands" width="100%">
 </p>
 
-The VHS demo runs the local built CLI so the command flow matches this repository even when npm is behind.
+The VHS demo is generated from committed sources in this repository.
 
 Pinned team usage:
 
@@ -118,6 +115,7 @@ pnpm build
 | --------------------------------------- | ------------------------------------------------------------------------------ |
 | `agentloop init`                        | Generate the repo harness and config                                           |
 | `agentloop init --dry-run`              | Preview generated files without writing them                                   |
+| `agentloop init --force`                | Allow initialization when the current directory is your home directory          |
 | `agentloop doctor`                      | Check setup health, template version, commands, git state, and risk categories |
 | `agentloop create-task`                 | Create a task contract in `.agentloop/tasks/`                                  |
 | `agentloop task list`                   | List task contracts and show the pinned active task                            |
@@ -138,7 +136,7 @@ pnpm build
 | `agentloop badge`                       | Write a local SVG evidence badge                                               |
 | `agentloop ci-summary`                  | Summarize CI context and local AgentLoop evidence                              |
 | `agentloop release-notes`               | Draft local release notes from changelog, git, task, and verification evidence |
-| `agentloop npm-status`                  | Check npm registry catch-up status without publishing                          |
+| `agentloop npm-status`                  | Check npm registry status without publishing                                   |
 | `agentloop policy list`                 | List local safety policy files                                                 |
 | `agentloop policy show <policy>`        | Print a local safety policy without mutating files                             |
 | `agentloop policy status`               | Compare local policy files with bundled templates                              |
@@ -386,7 +384,7 @@ See `docs/ci-summary.md`.
 ```bash
 agentloop release-notes
 agentloop release-notes --from v0.19.0 --to HEAD
-agentloop release-notes --release-version 0.24.0
+agentloop release-notes --release-version 0.24.2
 agentloop release-notes --json
 agentloop release-notes --write
 ```
@@ -452,7 +450,7 @@ Use `agentloop check-gates --strict` as a review-evidence gate in pull request C
 
 CI-generated verification reports include GitHub Actions provenance when available, so reviewers can trace an artifact back to the workflow run that created it.
 
-See `docs/github-actions.md`, `examples/github-actions/`, `examples/gitlab-ci/`, and `examples/buildkite/` for copy-pasteable workflows. Until npm catches up, the examples pin the latest public GitHub release tarball. Current source moves to a new tarball when the next GitHub release is cut.
+See `docs/github-actions.md`, `examples/github-actions/`, `examples/gitlab-ci/`, and `examples/buildkite/` for copy-pasteable workflows. Pin `agentloopkit@0.24.2` or a newer vetted release when reproducibility matters.
 
 ## PR Summaries
 
@@ -529,18 +527,6 @@ See `docs/stack-recipes.md` for Next.js, React/Vite, Remix, SvelteKit, Node API,
 
 See `ROADMAP.md`.
 
-## Publishing Status
-
-AgentLoopKit is published on npm as `agentloopkit`, but npm currently serves `0.1.1`. GitHub release `v0.24.0` carries task-linked verification reports, failed-verification summaries, the guarded `--task` path behavior, refreshed README visuals, PowerShell shell completions, and the read-only `npm-status` catch-up check. npm still needs account authentication or trusted-publishing repair before a catch-up release lands.
-
-Do not publish stale older versions from current `main`. If `CHANGELOG.md` has real entries under `Unreleased`, the prepublish guard blocks npm publish until release metadata is prepared.
-
-The npm version jump is intentional. The skipped npm numbers already exist as public GitHub release candidates while npm publishing was blocked, so the next npm publish should ship the current release line rather than backfilling old source snapshots.
-
-The repository includes a GitHub Actions publish workflow for npm trusted publishing after the package is configured on npm. The workflow runs checks before `npm publish` and skips publish when the version already exists.
-
-See `docs/launch-checklist.md` before publishing. See `docs/npm-status.md`, `docs/release-checklist-example.md`, and `examples/release-checklist/` for registry checks and compact maintainer handoffs when GitHub is current but npm is still behind.
-
 ## Contributing
 
 See `CONTRIBUTING.md` for local setup and PR expectations. Maintainers can use `docs/contributor-playbook.md` for copyable good-first issue examples.

package/dist/cli/index.js

@@ -9,6 +9,7 @@ import { Command } from "commander";
 // src/core/init.ts
 import path6 from "path";
 import { readdir as readdir3 } from "fs/promises";
+import { homedir } from "os";
 
 // src/core/constants.ts
 var PACKAGE_NAME = "agentloopkit";
@@ -196,14 +197,20 @@ async function listFilesRecursive(root, options = {}) {
     options.ignore ?? [".git", ".agentloop", "node_modules", "dist", "coverage"]
   );
   const files = [];
-  async function walk(current) {
+  let inspectedEntries = 0;
+  async function walk(current, depth) {
     if (!await pathExists(current)) return;
-    const entries = await readdir(current, { withFileTypes: true });
+    if (options.maxEntries !== void 0 && inspectedEntries >= options.maxEntries) return;
+    const entries = await readdir(current, { withFileTypes: true }).catch(() => []);
     for (const entry of entries) {
+      if (options.maxEntries !== void 0 && inspectedEntries >= options.maxEntries) break;
+      inspectedEntries += 1;
       if (ignore.has(entry.name)) continue;
       const absolute = path2.join(current, entry.name);
       if (entry.isDirectory()) {
-        await walk(absolute);
+        if (options.maxDepth === void 0 || depth < options.maxDepth) {
+          await walk(absolute, depth + 1);
+        }
       } else if (entry.isFile()) {
         files.push(absolute);
       }
@@ -211,7 +218,7 @@ async function listFilesRecursive(root, options = {}) {
   }
   const rootStat = await stat(root).catch(() => void 0);
   if (!rootStat?.isDirectory()) return [];
-  await walk(root);
+  await walk(root, 0);
   return files;
 }
 
@@ -247,6 +254,8 @@ var MONOREPO_FILE_MARKERS = [
   "lerna.json",
   "rush.json"
 ];
+var FALLBACK_PROJECT_DETECTION_MAX_DEPTH = 2;
+var FALLBACK_PROJECT_DETECTION_MAX_ENTRIES = 500;
 async function readPackageJson(cwd) {
   const filePath = path4.join(cwd, "package.json");
   if (!await pathExists(filePath)) return void 0;
@@ -267,7 +276,10 @@ async function detectProjectType(cwd) {
   if (await pathExists(path4.join(cwd, "pyproject.toml")) || await pathExists(path4.join(cwd, "requirements.txt"))) {
     return "python";
   }
-  const files = await listFilesRecursive(cwd);
+  const files = await listFilesRecursive(cwd, {
+    maxDepth: FALLBACK_PROJECT_DETECTION_MAX_DEPTH,
+    maxEntries: FALLBACK_PROJECT_DETECTION_MAX_ENTRIES
+  });
   const relativeFiles = files.map((file) => path4.relative(cwd, file));
   const hasCode = relativeFiles.some(
     (file) => /\.(ts|tsx|js|jsx|py|go|rs|java|rb|php|cs)$/.test(file)
@@ -391,6 +403,12 @@ async function initializeAgentLoop(options) {
     dryRun: Boolean(options.dryRun)
   };
   const cwd = options.cwd;
+  const homeDirectory = options.homeDirectory ?? homedir();
+  if (!options.dryRun && !options.force && path6.resolve(cwd) === path6.resolve(homeDirectory)) {
+    throw new Error(
+      "Refusing to initialize your home directory. Run this inside a project repository, or pass --force if you intentionally want AgentLoopKit files in your home directory."
+    );
+  }
   const packageManager = await detectPackageManager(cwd);
   const projectType = await detectProjectType(cwd);
   const projectName = await detectProjectName(cwd);
@@ -473,8 +491,12 @@ var consoleLogger = {
 
 // src/cli/commands/init.ts
 function initCommand() {
-  return new Command("init").description("Initialize AgentLoopKit in the current repository").option("--dry-run", "show planned changes without writing files").option("--json", "print machine-readable output").action(async (options) => {
-    const result = await initializeAgentLoop({ cwd: process.cwd(), dryRun: options.dryRun });
+  return new Command("init").description("Initialize AgentLoopKit in the current repository").option("--dry-run", "show planned changes without writing files").option("--json", "print machine-readable output").option("--force", "allow initialization when the current directory is your home directory").action(async (options) => {
+    const result = await initializeAgentLoop({
+      cwd: process.cwd(),
+      dryRun: options.dryRun,
+      force: options.force
+    });
     if (options.json) {
       consoleLogger.info(JSON.stringify(result, null, 2));
       return;