arcane-cli 0.33.0 → 0.33.1

package/dist/assets/.github/instructions/agent-output.instructions.md

@@ -61,8 +61,8 @@ stale number is invisible until someone tries.
 - **Spell prompts and instructions this framework ships**
   (`.github/prompts/*.prompt.md`, `.github/instructions/*.md`): **plain text only —
   cite the bare ID, no link at all** (`ARC-035`, not `[ARC-035](...)`). A full
-  canonical URL is *also* unsafe here, not just a same-repo link: it bakes
-  `github.com/codemagicianhq/arcane` — this project's own org and repo name — into
+  canonical URL is *also* unsafe here, not just a same-repo link: it bakes a literal
+  `github.com/{GITHUB_ORG}/{REPO_NAME}` — this project's own org and repo name — into
   content the org-token portability gate (`scripts/org-token-lint.ts`, D2 in
   `spell-authoring-standards.md`) exists specifically to keep out of distributed
   spells. **Confirmed live 2026-08-31 (BC-06):** the build's `Org-token lint` failed
@@ -90,8 +90,8 @@ missing one. The first fix replaced it with a same-repo wiki-link to this repo's
 `DECISIONS.md` — itself the exact cross-repo defect this section warns about
 (`DECISIONS.md` doesn't ship). The second fix replaced that with a full canonical
 URL, which held up locally but failed the build's org-token portability gate: a
-`github.com/codemagicianhq/arcane` URL bakes this project's own org into a file the
-gate treats as distributed content (see Doc-ID Link Format above). Settled on the
+literal `github.com/{GITHUB_ORG}/{REPO_NAME}` URL bakes this project's own org into a
+file the gate treats as distributed content (see Doc-ID Link Format above). Settled on the
 bare ID — the gate's own documented safe form.
 
 When completing a PR via `az repos pr update`, do **not** pass `--squash true`. The correct command:

package/dist/index.js

@@ -2287,6 +2287,29 @@ async function isHookInstalled(cwd, hookName, body) {
 async function isHookEnforced(cwd) {
   return isHookInstalled(cwd, "pre-push", PRE_PUSH_HOOK_BODY);
 }
+var CLOSED_PR_WARNING_HOOK_BODY = `#!/bin/sh
+# Installed by Arcane (ARC-035 decision 4): warns when the branch being
+# pushed already has a closed or merged PR, instead of accepting the push
+# into a void with no signal at all. Never blocks -- pushing to a branch
+# behind a closed PR is sometimes intentional.
+remote_url="$2"
+case "$remote_url" in
+  *github.com*) ;;
+  *) exit 0 ;;
+esac
+command -v gh >/dev/null 2>&1 || exit 0
+branch=$(git rev-parse --abbrev-ref HEAD 2>/dev/null) || exit 0
+state=$(gh pr view "$branch" --json state --jq .state 2>/dev/null) || exit 0
+case "$state" in
+  CLOSED|MERGED)
+    echo "arcane: WARNING -- the PR for branch '$branch' is already $state. Pushing anyway (not blocked)." >&2
+    ;;
+esac
+exit 0
+`;
+async function installClosedPrWarningHook(cwd) {
+  return installHook(cwd, "pre-push", CLOSED_PR_WARNING_HOOK_BODY);
+}
 async function defaultHooks(cwd) {
   let hooksDir;
   try {
@@ -2980,6 +3003,15 @@ async function runInit(options, targetDir, assetsDir, packageVersion) {
       );
     }
   }
+  if (push_policy !== "blocked") {
+    try {
+      const hook = await installClosedPrWarningHook(targetDir);
+      if (hook.status === "installed") {
+        printInfo("Installed a pre-push hook that warns when the current branch's PR is already closed or merged.");
+      }
+    } catch {
+    }
+  }
   try {
     const hook = await installSecretsPrecommitHook(targetDir);
     if (hook.status === "installed") {