devlyn-cli 4.3.13 → 4.3.14

package/bin/devlyn.js

@@ -2067,13 +2067,17 @@ function cleanupDeliver(scope, items, current) {
   if (!python) return { error: cleanupReason('requirement-missing', { name: 'Python 3.11' }) };
   const run = (args, cwd) => spawnSync(python, ['-B', helper, ...args], { cwd, encoding: 'utf8', env: { ...process.env, PYTHONDONTWRITEBYTECODE: '1' } });
   const lastJson = (text) => { try { return JSON.parse(text.trim().split('\n').at(-1)); } catch { return null; } };
+  const failureCode = (reason) => /\b(authentication|unauthorized|gh auth login|could not read Username|HTTP 40[13])\b/i.test(reason) ? 'auth-failed' : 'delivery-failed';
   const short = crypto.randomBytes(4).toString('hex');
   const branch = `devlyn/cleanup-${short}`;
   const worktree = path.join(path.dirname(scope.root), `${path.basename(scope.root)}.devlyn.noindex`, `devlyn-cleanup-${short}`);
   const allocated = lastJson(run(['allocate', '--repo', scope.root, '--task', `devlyn-cli ${PKG.version} legacy cleanup`,
     '--branch', branch, '--worktree', worktree, '--repository', scope.remote.repository,
     '--remote', 'origin', '--base', scope.remote.base], scope.root).stdout);
-  if (allocated?.status !== 'ALLOCATED') return { error: cleanupReason('delivery-failed', { detail: allocated?.reason || 'allocation failed' }) };
+  if (allocated?.status !== 'ALLOCATED') {
+    const reason = allocated?.reason || 'allocation failed';
+    return { error: cleanupReason(failureCode(reason), { detail: reason }) };
+  }
   const release = (error = null) => {
     for (const args of [['worktree', 'remove', '--force', worktree], ['branch', '-D', branch]]) {
       const result = cleanupGit(scope.root, args);
@@ -2108,8 +2112,7 @@ function cleanupDeliver(scope, items, current) {
   if (status === 'COMPLETE' || status === 'MERGED') return { ...cleanupUpdateCheckout(scope), delivery: { state: 'merged', url: completed.pr || null } };
   if (completed?.pr) return { delivery: { state: 'pr-open', url: completed.pr } };
   const reason = completed?.reason || 'delivery did not complete';
-  const auth = /\b(authentication|unauthorized|gh auth login|could not read Username|HTTP 40[13])\b/i.test(reason);
-  return { error: cleanupReason(auth ? 'auth-failed' : 'delivery-failed', { detail: reason, ...(completed?.resume ? { resume: completed.resume } : {}) }) };
+  return { error: cleanupReason(failureCode(reason), { detail: reason, ...(completed?.resume ? { resume: completed.resume } : {}) }) };
 }
 
 // With no fresh counterpart, the base settled an item only if it changed the path's content or

package/bin/skill-history.json

@@ -52,6 +52,7 @@
       "40f50f3c3c0d030d1efeb6955c0c6f32f518e737d8dd3bec6610ff02badebbdb",
       "430d156eb8c62c7edba3d660050f90b267f928976c3a3688e95d54f00dc34747",
       "450d578ef177a9e8f0b693940ad64b41c1d9719975ba6305f62a7c82ac3a892f",
+      "45ef27af9ec27089e2861c13b882521fc6bf073dc6b7a356b326b4a27c5e6e24",
       "4685be6a94ad5587ce53785c14a60cccf9a852d9d23391dba0a5bcd0c64931cf",
       "484db9dd2635de5f5acbcf692e2f329f33c0a483951e27bcd77bcbafbc052e19",
       "4ecb004b24a8adfe41c7416c3fa24e62cf76baa3b276ae1ce5091caef77e57b8",
@@ -769,6 +770,7 @@
     "4.3.11",
     "4.3.12",
     "4.3.13",
+    "4.3.14",
     "4.3.2",
     "4.3.3",
     "4.3.4",

package/config/skills/_shared/task-complete.py

@@ -324,10 +324,12 @@ def allocate(args, *, exclude_receipts=(), warnings=None):
     if local:
         receipt["local_only"] = True  # Local work needs no remote: nothing is fetched or pushed.
     else:
-        require(args.repository and args.base, "a remote allocation needs --repository <owner/repo> and --base <branch>; allocate local work with --local-base or --from-receipt")
+        if args.repository is None:
+            receipt["repository"] = repository_from_url(gref(receipt, "remote", "get-url", "--all", args.remote))
         policy(receipt, None)
         receipt["remote_url"] = remote_url(receipt)
         require("\n" not in receipt["remote_url"]["push"] and receipt["remote_url"]["push"] == receipt["remote_url"]["fetch"], "split/multiple remote URLs are unsupported")
+        repo_policy(receipt, allocating=True)
     target = Path(args.worktree).resolve()  # A relative, `..` or symlinked (macOS /tmp) path names its real location.
     require(not target.exists() and all(not target.is_relative_to(p) and not p.is_relative_to(target) for p in map(Path, registrations(receipt))), "linked worktree must be an absent path disjoint from every registered worktree")
     receipt["worktree"] = str(target)
@@ -541,9 +543,17 @@ def repository_info(repository):
     return info
 
 
-def repo_policy(receipt):
+def repo_policy(receipt, *, allocating=False):
     info = repository_info(receipt["repository"])
-    require(info["defaultBranchRef"]["name"] == receipt["base"] and receipt["branch"] != info["defaultBranchRef"]["name"], "base/default branch changed; retain resources")
+    default = info["defaultBranchRef"]["name"]
+    if allocating:
+        if receipt["base"] is None:
+            gref(receipt, "check-ref-format", "refs/heads/" + default)
+            receipt["base"] = default
+        require(receipt["branch"] != receipt["base"], "cannot own a base/default branch")
+    require(default == receipt["base"] and receipt["branch"] != default,
+            f"base {receipt['base']!r} differs from default branch {default!r}; the helper delivers only to the default branch; use a local allocation with --local-base for other bases"
+            if allocating else "base/default branch changed; retain resources")
     return info
 
 
@@ -1409,7 +1419,8 @@ class CompletionTests(unittest.TestCase):
         from unittest.mock import patch
         target = self.root / "absent" / "new"
         exists = Path.exists
-        with patch.object(Path, "exists", lambda path: False if path == target or path in target.parents else exists(path)), \
+        with patch.dict(os.environ, self.env), \
+                patch.object(Path, "exists", lambda path: False if path == target or path in target.parents else exists(path)), \
                 patch.object(shutil, "disk_usage") as usage:
             with self.assertRaisesRegex(CompletionError, f"no existing ancestor of {re.escape(str(target))} to measure free space"):
                 allocate(self.allocation_args("new", target))
@@ -1677,6 +1688,62 @@ class CompletionTests(unittest.TestCase):
             self.g("--no-literal-pathspecs", "check-ignore", "-q", "--", record, work=self.task)
         self.assertEqual(self.g("status", "--porcelain", "--untracked-files=all", work=self.task), "")
 
+    def test_allocate_derives_repository(self):
+        result, _ = self.cli("allocate", "--repo", self.work, "--task", "fixture",
+            "--branch", "task/fixture", "--base", "main", "--worktree", self.root / "linked")
+        self.assertEqual(result["status"], "ALLOCATED")
+        self.assertEqual(read_json(Path(result["receipt"]))["repository"], "test/project")
+
+    def test_allocate_derives_default_base(self):
+        self.g("push", "origin", "main:refs/heads/release")
+        self.configure(default_branch="release")
+        for name, flags in (("explicit", ["--repository", "test/project"]), ("derived", [])):
+            with self.subTest(name=name):
+                result, _ = self.cli("allocate", "--repo", self.work, "--task", name,
+                    "--branch", "task/" + name, "--worktree", self.root / name, *flags)
+                self.assertEqual(result["status"], "ALLOCATED")
+                receipt = read_json(Path(result["receipt"]))
+                self.assertEqual((receipt["repository"], receipt["base"]), ("test/project", "release"))
+                self.assertEqual(self.g("rev-parse", "HEAD", work=Path(result["worktree"])), receipt["baseline"])
+
+    def test_allocate_rejects_nondefault_base_before_resources(self):
+        self.configure(default_branch="release")
+        self.g("update-ref", "-d", "refs/remotes/origin/main")
+        refs, worktrees = self.g("show-ref"), self.g("worktree", "list", "--porcelain")
+        result, process = self.cli("allocate", "--repo", self.work, "--task", "fixture",
+            "--branch", "task/fixture", "--repository", "test/project", "--base", "main",
+            "--worktree", self.root / "linked", success=False)
+        self.assertNotEqual(process.returncode, 0)
+        self.assertEqual(result["status"], "BLOCKED")
+        for text in ("main", "release", "only to the default branch", "--local-base"):
+            self.assertIn(text, result["reason"])
+        self.assertEqual(self.g("show-ref"), refs)
+        self.assertEqual(self.g("worktree", "list", "--porcelain"), worktrees)
+        self.assertFalse((self.work / ".git/devlyn-completion").exists())
+        self.assertFalse((self.root / "linked").exists())
+
+    def test_allocate_rejects_derived_base_as_task_branch(self):
+        self.configure(default_branch="release")
+        refs = self.g("show-ref")
+        result, process = self.cli("allocate", "--repo", self.work, "--task", "fixture",
+            "--branch", "release", "--worktree", self.root / "linked", success=False)
+        self.assertNotEqual(process.returncode, 0)
+        self.assertEqual(result["status"], "BLOCKED")
+        self.assertIn("cannot own a base/default branch", result["reason"])
+        self.assertEqual(self.g("show-ref"), refs)
+        self.assertEqual(self.g("branch", "--list", "release"), "")
+        self.assertFalse((self.work / ".git/devlyn-completion").exists())
+        self.assertFalse((self.root / "linked").exists())
+
+    def test_allocate_rejects_explicit_repository_mismatch(self):
+        result, process = self.cli("allocate", "--repo", self.work, "--task", "fixture",
+            "--branch", "task/fixture", "--repository", "test/other", "--base", "main",
+            "--worktree", self.root / "linked", success=False)
+        self.assertNotEqual(process.returncode, 0)
+        self.assertEqual(result, {"status": "BLOCKED", "reason": "repository differs from remote"})
+        self.assertFalse((self.work / ".git/devlyn-completion").exists())
+        self.assertFalse((self.root / "linked").exists())
+
     def test_allocate_base_with_same_named_tag(self):
         self.g("tag", "main")
         result = self.allocate()
@@ -1687,6 +1754,7 @@ class CompletionTests(unittest.TestCase):
         base = "main\u00a0"
         self.g("switch", "-c", base)
         self.g("push", "origin", "HEAD:refs/heads/"+base)
+        self.configure(default_branch=base)
         result = self.allocate(base=base)
         self.assertEqual(result["status"], "ALLOCATED")
         self.assertEqual(json.loads(self.receipt.read_text(encoding="utf-8"))["base"], base)
@@ -1711,6 +1779,7 @@ class CompletionTests(unittest.TestCase):
     def test_allocate_rejects_short_base_alias(self):
         self.g("branch", "heads/main")
         self.g("tag", "main")
+        self.configure(default_branch="heads/main")
         self.assert_base_identity_rejected("main", "heads/main")
 
     def test_allocate_uses_remote_base_with_dirty_foreign_anchor(self):
@@ -2295,7 +2364,8 @@ ctypes.CDLL(None).pthread_exit(None)
         self.merge_pr()
         receipt, task = self.receipt, self.task
         self.configure(default_branch="changed")
-        result = self.allocate("next")
+        self.g("push", "origin", "main:refs/heads/changed")
+        result = self.allocate("next", base="changed")
         self.assertEqual([(row["receipt"], row["status"]) for row in result["reconciled"]], [(str(receipt), "RETAINED")])
         self.assertIn("base/default branch changed", result["reconciled"][0]["reason"])
         self.assertTrue(task.exists())
@@ -2398,12 +2468,13 @@ ctypes.CDLL(None).pthread_exit(None)
         self.assertEqual(self.g("branch", "--list", "task/fixture"), "")
         self.assertEqual(self.g("ls-remote", "origin", "refs/heads/task/fixture"), "")
         self.configure(default_branch="changed")
+        self.g("push", "origin", "main:refs/heads/changed")
         server = json.loads(self.data.read_text())
-        result = self.allocate("retry")
+        result = self.allocate("retry", base="changed")
         self.assertEqual([(row["receipt"], row["status"]) for row in result["reconciled"]], [(str(receipt), "COMPLETE")])
         self.assertFalse(any(scratch.iterdir()))
         self.assertEqual(json.loads(self.data.read_text()), server)
-        self.assertEqual(self.allocate("later")["reconciled"], [])
+        self.assertEqual(self.allocate("later", base="changed")["reconciled"], [])
 
     def test_reconcile_retries_unattempted_scratch_cleanup(self):
         scratch = Path(self.allocate()["scratch"])
@@ -3158,14 +3229,10 @@ ctypes.CDLL(None).pthread_exit(None)
         self.assertFalse((self.root / "next").exists())
 
     def test_local_allocation_needs_no_repository(self):
-        """E4. Prediction: without --repository, a remote allocation is refused naming it, with nothing created, while a
-        local allocation, here beside an origin that is not GitHub, is ALLOCATED and its local-only completion returns
-        LOCAL_ONLY with nothing pushed. Before: argparse required --repository, so both failed as an argparse error."""
+        """A local allocation beside a non-GitHub origin needs no repository and completes without publication."""
         args = ["allocate", "--repo", self.work, "--base", "main"]
-        refused, _ = self.cli(*args, "--task", "next", "--branch", "task/next", "--worktree", self.root / "next", success=False)
-        self.assertIn("--repository", refused["reason"])
-        self.assertEqual((self.g("branch", "--list", "task/next"), (self.root / "next").exists()), ("", False))
         self.g("remote", "set-url", "origin", "https://gitlab.com/team/project.git")
+        (self.bin / "gh").write_text("#!/bin/sh\nexit 1\n", encoding="utf-8")
         result, _ = self.cli(*args, "--task", "fixture", "--branch", "task/fixture", "--worktree", self.root / "linked",
                              "--local-base", self.g("rev-parse", "HEAD"))
         self.assertEqual(result["status"], "ALLOCATED")
@@ -3175,13 +3242,8 @@ ctypes.CDLL(None).pthread_exit(None)
         self.assertEqual(json.loads(self.data.read_text(encoding="utf-8")).get("pushs", 0), 0)
 
     def test_local_allocation_needs_no_base(self):
-        """P4-2. Prediction: a local allocation with --local-base and no --base, the form agents wrote in 3 of 3 timed
-        runs, is ALLOCATED and completes LOCAL_ONLY, while a remote allocation without --base is refused naming it, with
-        nothing created."""
+        """A local allocation with --local-base and no --base is ALLOCATED and completes LOCAL_ONLY."""
         args = ["allocate", "--repo", self.work, "--task", "fixture", "--branch", "task/fixture", "--worktree", self.root / "linked"]
-        refused, _ = self.cli(*args, "--repository", "test/project", success=False)
-        self.assertIn("--base", refused["reason"])
-        self.assertEqual((self.g("branch", "--list", "task/fixture"), (self.root / "linked").exists()), ("", False))
         result, _ = self.cli(*args, "--local-base", self.g("rev-parse", "HEAD"))
         self.assertEqual(result["status"], "ALLOCATED")
         self.receipt, self.task = Path(result["receipt"]), Path(result["worktree"])

package/config/skills/_shared/task-completion.md

@@ -55,9 +55,11 @@ not write to the shared checkout.
 python3 "$DEVLYN_SHARED_DIR/task-complete.py" allocate --repo . \
   --task '<task identity>' --branch '<absent task branch>' \
   --worktree '<repo parent>/.devlyn-worktrees/<repo name>/<task directory>' \
-  --repository '<owner/repo>' --remote origin --base main
+  --remote origin
 ```
 
+The repository comes from the remote's GitHub URL and the base from the repository's default branch; passing either flag checks it instead.
+A non-default base is refused at allocation.
 Every delivery allocation owns a linked worktree; `--worktree` is required and
 must name an absent path.
 Cleanup removes empty parents through the exact per-repo root shown above or its legacy `.devlyn.noindex`/`.devlyn` root, keeping the shared `.devlyn-worktrees` container. Allocation also sweeps empty legacy roots for this repo.

package/native/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "devlyn",
-  "version": "4.3.13",
+  "version": "4.3.14",
   "description": "Devlyn harness skills",
   "skills": "./skills/"
 }

package/native/claude/skills/_shared/task-complete.py

@@ -324,10 +324,12 @@ def allocate(args, *, exclude_receipts=(), warnings=None):
     if local:
         receipt["local_only"] = True  # Local work needs no remote: nothing is fetched or pushed.
     else:
-        require(args.repository and args.base, "a remote allocation needs --repository <owner/repo> and --base <branch>; allocate local work with --local-base or --from-receipt")
+        if args.repository is None:
+            receipt["repository"] = repository_from_url(gref(receipt, "remote", "get-url", "--all", args.remote))
         policy(receipt, None)
         receipt["remote_url"] = remote_url(receipt)
         require("\n" not in receipt["remote_url"]["push"] and receipt["remote_url"]["push"] == receipt["remote_url"]["fetch"], "split/multiple remote URLs are unsupported")
+        repo_policy(receipt, allocating=True)
     target = Path(args.worktree).resolve()  # A relative, `..` or symlinked (macOS /tmp) path names its real location.
     require(not target.exists() and all(not target.is_relative_to(p) and not p.is_relative_to(target) for p in map(Path, registrations(receipt))), "linked worktree must be an absent path disjoint from every registered worktree")
     receipt["worktree"] = str(target)
@@ -541,9 +543,17 @@ def repository_info(repository):
     return info
 
 
-def repo_policy(receipt):
+def repo_policy(receipt, *, allocating=False):
     info = repository_info(receipt["repository"])
-    require(info["defaultBranchRef"]["name"] == receipt["base"] and receipt["branch"] != info["defaultBranchRef"]["name"], "base/default branch changed; retain resources")
+    default = info["defaultBranchRef"]["name"]
+    if allocating:
+        if receipt["base"] is None:
+            gref(receipt, "check-ref-format", "refs/heads/" + default)
+            receipt["base"] = default
+        require(receipt["branch"] != receipt["base"], "cannot own a base/default branch")
+    require(default == receipt["base"] and receipt["branch"] != default,
+            f"base {receipt['base']!r} differs from default branch {default!r}; the helper delivers only to the default branch; use a local allocation with --local-base for other bases"
+            if allocating else "base/default branch changed; retain resources")
     return info
 
 
@@ -1409,7 +1419,8 @@ class CompletionTests(unittest.TestCase):
         from unittest.mock import patch
         target = self.root / "absent" / "new"
         exists = Path.exists
-        with patch.object(Path, "exists", lambda path: False if path == target or path in target.parents else exists(path)), \
+        with patch.dict(os.environ, self.env), \
+                patch.object(Path, "exists", lambda path: False if path == target or path in target.parents else exists(path)), \
                 patch.object(shutil, "disk_usage") as usage:
             with self.assertRaisesRegex(CompletionError, f"no existing ancestor of {re.escape(str(target))} to measure free space"):
                 allocate(self.allocation_args("new", target))
@@ -1677,6 +1688,62 @@ class CompletionTests(unittest.TestCase):
             self.g("--no-literal-pathspecs", "check-ignore", "-q", "--", record, work=self.task)
         self.assertEqual(self.g("status", "--porcelain", "--untracked-files=all", work=self.task), "")
 
+    def test_allocate_derives_repository(self):
+        result, _ = self.cli("allocate", "--repo", self.work, "--task", "fixture",
+            "--branch", "task/fixture", "--base", "main", "--worktree", self.root / "linked")
+        self.assertEqual(result["status"], "ALLOCATED")
+        self.assertEqual(read_json(Path(result["receipt"]))["repository"], "test/project")
+
+    def test_allocate_derives_default_base(self):
+        self.g("push", "origin", "main:refs/heads/release")
+        self.configure(default_branch="release")
+        for name, flags in (("explicit", ["--repository", "test/project"]), ("derived", [])):
+            with self.subTest(name=name):
+                result, _ = self.cli("allocate", "--repo", self.work, "--task", name,
+                    "--branch", "task/" + name, "--worktree", self.root / name, *flags)
+                self.assertEqual(result["status"], "ALLOCATED")
+                receipt = read_json(Path(result["receipt"]))
+                self.assertEqual((receipt["repository"], receipt["base"]), ("test/project", "release"))
+                self.assertEqual(self.g("rev-parse", "HEAD", work=Path(result["worktree"])), receipt["baseline"])
+
+    def test_allocate_rejects_nondefault_base_before_resources(self):
+        self.configure(default_branch="release")
+        self.g("update-ref", "-d", "refs/remotes/origin/main")
+        refs, worktrees = self.g("show-ref"), self.g("worktree", "list", "--porcelain")
+        result, process = self.cli("allocate", "--repo", self.work, "--task", "fixture",
+            "--branch", "task/fixture", "--repository", "test/project", "--base", "main",
+            "--worktree", self.root / "linked", success=False)
+        self.assertNotEqual(process.returncode, 0)
+        self.assertEqual(result["status"], "BLOCKED")
+        for text in ("main", "release", "only to the default branch", "--local-base"):
+            self.assertIn(text, result["reason"])
+        self.assertEqual(self.g("show-ref"), refs)
+        self.assertEqual(self.g("worktree", "list", "--porcelain"), worktrees)
+        self.assertFalse((self.work / ".git/devlyn-completion").exists())
+        self.assertFalse((self.root / "linked").exists())
+
+    def test_allocate_rejects_derived_base_as_task_branch(self):
+        self.configure(default_branch="release")
+        refs = self.g("show-ref")
+        result, process = self.cli("allocate", "--repo", self.work, "--task", "fixture",
+            "--branch", "release", "--worktree", self.root / "linked", success=False)
+        self.assertNotEqual(process.returncode, 0)
+        self.assertEqual(result["status"], "BLOCKED")
+        self.assertIn("cannot own a base/default branch", result["reason"])
+        self.assertEqual(self.g("show-ref"), refs)
+        self.assertEqual(self.g("branch", "--list", "release"), "")
+        self.assertFalse((self.work / ".git/devlyn-completion").exists())
+        self.assertFalse((self.root / "linked").exists())
+
+    def test_allocate_rejects_explicit_repository_mismatch(self):
+        result, process = self.cli("allocate", "--repo", self.work, "--task", "fixture",
+            "--branch", "task/fixture", "--repository", "test/other", "--base", "main",
+            "--worktree", self.root / "linked", success=False)
+        self.assertNotEqual(process.returncode, 0)
+        self.assertEqual(result, {"status": "BLOCKED", "reason": "repository differs from remote"})
+        self.assertFalse((self.work / ".git/devlyn-completion").exists())
+        self.assertFalse((self.root / "linked").exists())
+
     def test_allocate_base_with_same_named_tag(self):
         self.g("tag", "main")
         result = self.allocate()
@@ -1687,6 +1754,7 @@ class CompletionTests(unittest.TestCase):
         base = "main\u00a0"
         self.g("switch", "-c", base)
         self.g("push", "origin", "HEAD:refs/heads/"+base)
+        self.configure(default_branch=base)
         result = self.allocate(base=base)
         self.assertEqual(result["status"], "ALLOCATED")
         self.assertEqual(json.loads(self.receipt.read_text(encoding="utf-8"))["base"], base)
@@ -1711,6 +1779,7 @@ class CompletionTests(unittest.TestCase):
     def test_allocate_rejects_short_base_alias(self):
         self.g("branch", "heads/main")
         self.g("tag", "main")
+        self.configure(default_branch="heads/main")
         self.assert_base_identity_rejected("main", "heads/main")
 
     def test_allocate_uses_remote_base_with_dirty_foreign_anchor(self):
@@ -2295,7 +2364,8 @@ ctypes.CDLL(None).pthread_exit(None)
         self.merge_pr()
         receipt, task = self.receipt, self.task
         self.configure(default_branch="changed")
-        result = self.allocate("next")
+        self.g("push", "origin", "main:refs/heads/changed")
+        result = self.allocate("next", base="changed")
         self.assertEqual([(row["receipt"], row["status"]) for row in result["reconciled"]], [(str(receipt), "RETAINED")])
         self.assertIn("base/default branch changed", result["reconciled"][0]["reason"])
         self.assertTrue(task.exists())
@@ -2398,12 +2468,13 @@ ctypes.CDLL(None).pthread_exit(None)
         self.assertEqual(self.g("branch", "--list", "task/fixture"), "")
         self.assertEqual(self.g("ls-remote", "origin", "refs/heads/task/fixture"), "")
         self.configure(default_branch="changed")
+        self.g("push", "origin", "main:refs/heads/changed")
         server = json.loads(self.data.read_text())
-        result = self.allocate("retry")
+        result = self.allocate("retry", base="changed")
         self.assertEqual([(row["receipt"], row["status"]) for row in result["reconciled"]], [(str(receipt), "COMPLETE")])
         self.assertFalse(any(scratch.iterdir()))
         self.assertEqual(json.loads(self.data.read_text()), server)
-        self.assertEqual(self.allocate("later")["reconciled"], [])
+        self.assertEqual(self.allocate("later", base="changed")["reconciled"], [])
 
     def test_reconcile_retries_unattempted_scratch_cleanup(self):
         scratch = Path(self.allocate()["scratch"])
@@ -3158,14 +3229,10 @@ ctypes.CDLL(None).pthread_exit(None)
         self.assertFalse((self.root / "next").exists())
 
     def test_local_allocation_needs_no_repository(self):
-        """E4. Prediction: without --repository, a remote allocation is refused naming it, with nothing created, while a
-        local allocation, here beside an origin that is not GitHub, is ALLOCATED and its local-only completion returns
-        LOCAL_ONLY with nothing pushed. Before: argparse required --repository, so both failed as an argparse error."""
+        """A local allocation beside a non-GitHub origin needs no repository and completes without publication."""
         args = ["allocate", "--repo", self.work, "--base", "main"]
-        refused, _ = self.cli(*args, "--task", "next", "--branch", "task/next", "--worktree", self.root / "next", success=False)
-        self.assertIn("--repository", refused["reason"])
-        self.assertEqual((self.g("branch", "--list", "task/next"), (self.root / "next").exists()), ("", False))
         self.g("remote", "set-url", "origin", "https://gitlab.com/team/project.git")
+        (self.bin / "gh").write_text("#!/bin/sh\nexit 1\n", encoding="utf-8")
         result, _ = self.cli(*args, "--task", "fixture", "--branch", "task/fixture", "--worktree", self.root / "linked",
                              "--local-base", self.g("rev-parse", "HEAD"))
         self.assertEqual(result["status"], "ALLOCATED")
@@ -3175,13 +3242,8 @@ ctypes.CDLL(None).pthread_exit(None)
         self.assertEqual(json.loads(self.data.read_text(encoding="utf-8")).get("pushs", 0), 0)
 
     def test_local_allocation_needs_no_base(self):
-        """P4-2. Prediction: a local allocation with --local-base and no --base, the form agents wrote in 3 of 3 timed
-        runs, is ALLOCATED and completes LOCAL_ONLY, while a remote allocation without --base is refused naming it, with
-        nothing created."""
+        """A local allocation with --local-base and no --base is ALLOCATED and completes LOCAL_ONLY."""
         args = ["allocate", "--repo", self.work, "--task", "fixture", "--branch", "task/fixture", "--worktree", self.root / "linked"]
-        refused, _ = self.cli(*args, "--repository", "test/project", success=False)
-        self.assertIn("--base", refused["reason"])
-        self.assertEqual((self.g("branch", "--list", "task/fixture"), (self.root / "linked").exists()), ("", False))
         result, _ = self.cli(*args, "--local-base", self.g("rev-parse", "HEAD"))
         self.assertEqual(result["status"], "ALLOCATED")
         self.receipt, self.task = Path(result["receipt"]), Path(result["worktree"])

package/native/claude/skills/_shared/task-completion.md

@@ -55,9 +55,11 @@ not write to the shared checkout.
 python3 "$DEVLYN_SHARED_DIR/task-complete.py" allocate --repo . \
   --task '<task identity>' --branch '<absent task branch>' \
   --worktree '<repo parent>/.devlyn-worktrees/<repo name>/<task directory>' \
-  --repository '<owner/repo>' --remote origin --base main
+  --remote origin
 ```
 
+The repository comes from the remote's GitHub URL and the base from the repository's default branch; passing either flag checks it instead.
+A non-default base is refused at allocation.
 Every delivery allocation owns a linked worktree; `--worktree` is required and
 must name an absent path.
 Cleanup removes empty parents through the exact per-repo root shown above or its legacy `.devlyn.noindex`/`.devlyn` root, keeping the shared `.devlyn-worktrees` container. Allocation also sweeps empty legacy roots for this repo.

package/native/codex/.agents/plugins/marketplace.json

@@ -1,5 +1,5 @@
 {
-  "name": "devlyn-harness-v4-3-13",
+  "name": "devlyn-harness-v4-3-14",
   "plugins": [
     {
       "name": "devlyn",

package/native/codex/plugins/devlyn/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "devlyn",
-  "version": "4.3.13",
+  "version": "4.3.14",
   "description": "Devlyn harness skills",
   "skills": "./skills/"
 }

package/native/codex/plugins/devlyn/skills/_shared/task-complete.py

@@ -324,10 +324,12 @@ def allocate(args, *, exclude_receipts=(), warnings=None):
     if local:
         receipt["local_only"] = True  # Local work needs no remote: nothing is fetched or pushed.
     else:
-        require(args.repository and args.base, "a remote allocation needs --repository <owner/repo> and --base <branch>; allocate local work with --local-base or --from-receipt")
+        if args.repository is None:
+            receipt["repository"] = repository_from_url(gref(receipt, "remote", "get-url", "--all", args.remote))
         policy(receipt, None)
         receipt["remote_url"] = remote_url(receipt)
         require("\n" not in receipt["remote_url"]["push"] and receipt["remote_url"]["push"] == receipt["remote_url"]["fetch"], "split/multiple remote URLs are unsupported")
+        repo_policy(receipt, allocating=True)
     target = Path(args.worktree).resolve()  # A relative, `..` or symlinked (macOS /tmp) path names its real location.
     require(not target.exists() and all(not target.is_relative_to(p) and not p.is_relative_to(target) for p in map(Path, registrations(receipt))), "linked worktree must be an absent path disjoint from every registered worktree")
     receipt["worktree"] = str(target)
@@ -541,9 +543,17 @@ def repository_info(repository):
     return info
 
 
-def repo_policy(receipt):
+def repo_policy(receipt, *, allocating=False):
     info = repository_info(receipt["repository"])
-    require(info["defaultBranchRef"]["name"] == receipt["base"] and receipt["branch"] != info["defaultBranchRef"]["name"], "base/default branch changed; retain resources")
+    default = info["defaultBranchRef"]["name"]
+    if allocating:
+        if receipt["base"] is None:
+            gref(receipt, "check-ref-format", "refs/heads/" + default)
+            receipt["base"] = default
+        require(receipt["branch"] != receipt["base"], "cannot own a base/default branch")
+    require(default == receipt["base"] and receipt["branch"] != default,
+            f"base {receipt['base']!r} differs from default branch {default!r}; the helper delivers only to the default branch; use a local allocation with --local-base for other bases"
+            if allocating else "base/default branch changed; retain resources")
     return info
 
 
@@ -1409,7 +1419,8 @@ class CompletionTests(unittest.TestCase):
         from unittest.mock import patch
         target = self.root / "absent" / "new"
         exists = Path.exists
-        with patch.object(Path, "exists", lambda path: False if path == target or path in target.parents else exists(path)), \
+        with patch.dict(os.environ, self.env), \
+                patch.object(Path, "exists", lambda path: False if path == target or path in target.parents else exists(path)), \
                 patch.object(shutil, "disk_usage") as usage:
             with self.assertRaisesRegex(CompletionError, f"no existing ancestor of {re.escape(str(target))} to measure free space"):
                 allocate(self.allocation_args("new", target))
@@ -1677,6 +1688,62 @@ class CompletionTests(unittest.TestCase):
             self.g("--no-literal-pathspecs", "check-ignore", "-q", "--", record, work=self.task)
         self.assertEqual(self.g("status", "--porcelain", "--untracked-files=all", work=self.task), "")
 
+    def test_allocate_derives_repository(self):
+        result, _ = self.cli("allocate", "--repo", self.work, "--task", "fixture",
+            "--branch", "task/fixture", "--base", "main", "--worktree", self.root / "linked")
+        self.assertEqual(result["status"], "ALLOCATED")
+        self.assertEqual(read_json(Path(result["receipt"]))["repository"], "test/project")
+
+    def test_allocate_derives_default_base(self):
+        self.g("push", "origin", "main:refs/heads/release")
+        self.configure(default_branch="release")
+        for name, flags in (("explicit", ["--repository", "test/project"]), ("derived", [])):
+            with self.subTest(name=name):
+                result, _ = self.cli("allocate", "--repo", self.work, "--task", name,
+                    "--branch", "task/" + name, "--worktree", self.root / name, *flags)
+                self.assertEqual(result["status"], "ALLOCATED")
+                receipt = read_json(Path(result["receipt"]))
+                self.assertEqual((receipt["repository"], receipt["base"]), ("test/project", "release"))
+                self.assertEqual(self.g("rev-parse", "HEAD", work=Path(result["worktree"])), receipt["baseline"])
+
+    def test_allocate_rejects_nondefault_base_before_resources(self):
+        self.configure(default_branch="release")
+        self.g("update-ref", "-d", "refs/remotes/origin/main")
+        refs, worktrees = self.g("show-ref"), self.g("worktree", "list", "--porcelain")
+        result, process = self.cli("allocate", "--repo", self.work, "--task", "fixture",
+            "--branch", "task/fixture", "--repository", "test/project", "--base", "main",
+            "--worktree", self.root / "linked", success=False)
+        self.assertNotEqual(process.returncode, 0)
+        self.assertEqual(result["status"], "BLOCKED")
+        for text in ("main", "release", "only to the default branch", "--local-base"):
+            self.assertIn(text, result["reason"])
+        self.assertEqual(self.g("show-ref"), refs)
+        self.assertEqual(self.g("worktree", "list", "--porcelain"), worktrees)
+        self.assertFalse((self.work / ".git/devlyn-completion").exists())
+        self.assertFalse((self.root / "linked").exists())
+
+    def test_allocate_rejects_derived_base_as_task_branch(self):
+        self.configure(default_branch="release")
+        refs = self.g("show-ref")
+        result, process = self.cli("allocate", "--repo", self.work, "--task", "fixture",
+            "--branch", "release", "--worktree", self.root / "linked", success=False)
+        self.assertNotEqual(process.returncode, 0)
+        self.assertEqual(result["status"], "BLOCKED")
+        self.assertIn("cannot own a base/default branch", result["reason"])
+        self.assertEqual(self.g("show-ref"), refs)
+        self.assertEqual(self.g("branch", "--list", "release"), "")
+        self.assertFalse((self.work / ".git/devlyn-completion").exists())
+        self.assertFalse((self.root / "linked").exists())
+
+    def test_allocate_rejects_explicit_repository_mismatch(self):
+        result, process = self.cli("allocate", "--repo", self.work, "--task", "fixture",
+            "--branch", "task/fixture", "--repository", "test/other", "--base", "main",
+            "--worktree", self.root / "linked", success=False)
+        self.assertNotEqual(process.returncode, 0)
+        self.assertEqual(result, {"status": "BLOCKED", "reason": "repository differs from remote"})
+        self.assertFalse((self.work / ".git/devlyn-completion").exists())
+        self.assertFalse((self.root / "linked").exists())
+
     def test_allocate_base_with_same_named_tag(self):
         self.g("tag", "main")
         result = self.allocate()
@@ -1687,6 +1754,7 @@ class CompletionTests(unittest.TestCase):
         base = "main\u00a0"
         self.g("switch", "-c", base)
         self.g("push", "origin", "HEAD:refs/heads/"+base)
+        self.configure(default_branch=base)
         result = self.allocate(base=base)
         self.assertEqual(result["status"], "ALLOCATED")
         self.assertEqual(json.loads(self.receipt.read_text(encoding="utf-8"))["base"], base)
@@ -1711,6 +1779,7 @@ class CompletionTests(unittest.TestCase):
     def test_allocate_rejects_short_base_alias(self):
         self.g("branch", "heads/main")
         self.g("tag", "main")
+        self.configure(default_branch="heads/main")
         self.assert_base_identity_rejected("main", "heads/main")
 
     def test_allocate_uses_remote_base_with_dirty_foreign_anchor(self):
@@ -2295,7 +2364,8 @@ ctypes.CDLL(None).pthread_exit(None)
         self.merge_pr()
         receipt, task = self.receipt, self.task
         self.configure(default_branch="changed")
-        result = self.allocate("next")
+        self.g("push", "origin", "main:refs/heads/changed")
+        result = self.allocate("next", base="changed")
         self.assertEqual([(row["receipt"], row["status"]) for row in result["reconciled"]], [(str(receipt), "RETAINED")])
         self.assertIn("base/default branch changed", result["reconciled"][0]["reason"])
         self.assertTrue(task.exists())
@@ -2398,12 +2468,13 @@ ctypes.CDLL(None).pthread_exit(None)
         self.assertEqual(self.g("branch", "--list", "task/fixture"), "")
         self.assertEqual(self.g("ls-remote", "origin", "refs/heads/task/fixture"), "")
         self.configure(default_branch="changed")
+        self.g("push", "origin", "main:refs/heads/changed")
         server = json.loads(self.data.read_text())
-        result = self.allocate("retry")
+        result = self.allocate("retry", base="changed")
         self.assertEqual([(row["receipt"], row["status"]) for row in result["reconciled"]], [(str(receipt), "COMPLETE")])
         self.assertFalse(any(scratch.iterdir()))
         self.assertEqual(json.loads(self.data.read_text()), server)
-        self.assertEqual(self.allocate("later")["reconciled"], [])
+        self.assertEqual(self.allocate("later", base="changed")["reconciled"], [])
 
     def test_reconcile_retries_unattempted_scratch_cleanup(self):
         scratch = Path(self.allocate()["scratch"])
@@ -3158,14 +3229,10 @@ ctypes.CDLL(None).pthread_exit(None)
         self.assertFalse((self.root / "next").exists())
 
     def test_local_allocation_needs_no_repository(self):
-        """E4. Prediction: without --repository, a remote allocation is refused naming it, with nothing created, while a
-        local allocation, here beside an origin that is not GitHub, is ALLOCATED and its local-only completion returns
-        LOCAL_ONLY with nothing pushed. Before: argparse required --repository, so both failed as an argparse error."""
+        """A local allocation beside a non-GitHub origin needs no repository and completes without publication."""
         args = ["allocate", "--repo", self.work, "--base", "main"]
-        refused, _ = self.cli(*args, "--task", "next", "--branch", "task/next", "--worktree", self.root / "next", success=False)
-        self.assertIn("--repository", refused["reason"])
-        self.assertEqual((self.g("branch", "--list", "task/next"), (self.root / "next").exists()), ("", False))
         self.g("remote", "set-url", "origin", "https://gitlab.com/team/project.git")
+        (self.bin / "gh").write_text("#!/bin/sh\nexit 1\n", encoding="utf-8")
         result, _ = self.cli(*args, "--task", "fixture", "--branch", "task/fixture", "--worktree", self.root / "linked",
                              "--local-base", self.g("rev-parse", "HEAD"))
         self.assertEqual(result["status"], "ALLOCATED")
@@ -3175,13 +3242,8 @@ ctypes.CDLL(None).pthread_exit(None)
         self.assertEqual(json.loads(self.data.read_text(encoding="utf-8")).get("pushs", 0), 0)
 
     def test_local_allocation_needs_no_base(self):
-        """P4-2. Prediction: a local allocation with --local-base and no --base, the form agents wrote in 3 of 3 timed
-        runs, is ALLOCATED and completes LOCAL_ONLY, while a remote allocation without --base is refused naming it, with
-        nothing created."""
+        """A local allocation with --local-base and no --base is ALLOCATED and completes LOCAL_ONLY."""
         args = ["allocate", "--repo", self.work, "--task", "fixture", "--branch", "task/fixture", "--worktree", self.root / "linked"]
-        refused, _ = self.cli(*args, "--repository", "test/project", success=False)
-        self.assertIn("--base", refused["reason"])
-        self.assertEqual((self.g("branch", "--list", "task/fixture"), (self.root / "linked").exists()), ("", False))
         result, _ = self.cli(*args, "--local-base", self.g("rev-parse", "HEAD"))
         self.assertEqual(result["status"], "ALLOCATED")
         self.receipt, self.task = Path(result["receipt"]), Path(result["worktree"])

package/native/codex/plugins/devlyn/skills/_shared/task-completion.md

@@ -55,9 +55,11 @@ not write to the shared checkout.
 python3 "$DEVLYN_SHARED_DIR/task-complete.py" allocate --repo . \
   --task '<task identity>' --branch '<absent task branch>' \
   --worktree '<repo parent>/.devlyn-worktrees/<repo name>/<task directory>' \
-  --repository '<owner/repo>' --remote origin --base main
+  --remote origin
 ```
 
+The repository comes from the remote's GitHub URL and the base from the repository's default branch; passing either flag checks it instead.
+A non-default base is refused at allocation.
 Every delivery allocation owns a linked worktree; `--worktree` is required and
 must name an absent path.
 Cleanup removes empty parents through the exact per-repo root shown above or its legacy `.devlyn.noindex`/`.devlyn` root, keeping the shared `.devlyn-worktrees` container. Allocation also sweeps empty legacy roots for this repo.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "devlyn-cli",
-  "version": "4.3.13",
+  "version": "4.3.14",
   "description": "Loop & harness engineering for AI coding agents (Claude Code, Codex, and any AGENTS.md-driven agent) — core engineering principles for CLAUDE.md/AGENTS.md and a loop designer that splits one intent into tasks agents drain hands-free",
   "homepage": "https://github.com/fysoul17/devlyn-cli#readme",
   "bin": {

package/release.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "package": "devlyn-cli",
-  "version": "4.3.13",
+  "version": "4.3.14",
   "principles": {
     "defaults": "config/skills/_shared/runtime-principles.md",
     "memory": {
@@ -129,7 +129,7 @@
     },
     {
       "path": "bin/devlyn.js",
-      "sha256": "b702d9ef857644536a9ad39cec1079ee0dff916f4de821652fbb20fdcb290e16",
+      "sha256": "bbf2a2ee5309eab804cc3e03fd4c9bd0e0c71db67cfacc764c2f5e611968b4bf",
       "executable": true
     },
     {
@@ -164,7 +164,7 @@
     },
     {
       "path": "bin/skill-history.json",
-      "sha256": "b02b70036ae0c32abe63659af2bc35ee97da907c7abf9961a3d6fe77bfc13d08",
+      "sha256": "eb54a16283da49f9817a7b306f3be3c26bb0a01b8372a8377ee68461789ae43a",
       "executable": false
     },
     {
@@ -244,12 +244,12 @@
     },
     {
       "path": "config/skills/_shared/task-complete.py",
-      "sha256": "4938b56189b20b320ed50e275b7d7febab6858ec74ba39f3069ea3ef13309a73",
+      "sha256": "f9709f6855f511401205788aecf8aa59e268855b7673b84ed617adee56a245dc",
       "executable": false
     },
     {
       "path": "config/skills/_shared/task-completion.md",
-      "sha256": "d4e0b9803334812a3c541e9e92393bf5e712a481c09284f767a72f7209445ba9",
+      "sha256": "8b9a8706ab912165f2eef66bc39f2261f88df2b1b682d8d90d7f05f6014e965e",
       "executable": false
     },
     {
@@ -309,7 +309,7 @@
     },
     {
       "path": "native/claude/.claude-plugin/plugin.json",
-      "sha256": "1b295e8072b6b433a4881b51de2f4c357954e554a521a569476271da60278ad9",
+      "sha256": "69ae38cdcbcd7e7c695bf44241103657690be50e971baba15ec592b3e29c71df",
       "executable": false
     },
     {
@@ -384,12 +384,12 @@
     },
     {
       "path": "native/claude/skills/_shared/task-complete.py",
-      "sha256": "4938b56189b20b320ed50e275b7d7febab6858ec74ba39f3069ea3ef13309a73",
+      "sha256": "f9709f6855f511401205788aecf8aa59e268855b7673b84ed617adee56a245dc",
       "executable": false
     },
     {
       "path": "native/claude/skills/_shared/task-completion.md",
-      "sha256": "d4e0b9803334812a3c541e9e92393bf5e712a481c09284f767a72f7209445ba9",
+      "sha256": "8b9a8706ab912165f2eef66bc39f2261f88df2b1b682d8d90d7f05f6014e965e",
       "executable": false
     },
     {
@@ -439,12 +439,12 @@
     },
     {
       "path": "native/codex/.agents/plugins/marketplace.json",
-      "sha256": "6309fa2c98e6634eb270bc627fddc96bcec3d684773758106466dc516dde7617",
+      "sha256": "9cd5c06de1b20c1fec885ad85ee1409505c4d03e74e60ca6774247aa93269b8d",
       "executable": false
     },
     {
       "path": "native/codex/plugins/devlyn/.codex-plugin/plugin.json",
-      "sha256": "1b295e8072b6b433a4881b51de2f4c357954e554a521a569476271da60278ad9",
+      "sha256": "69ae38cdcbcd7e7c695bf44241103657690be50e971baba15ec592b3e29c71df",
       "executable": false
     },
     {
@@ -519,12 +519,12 @@
     },
     {
       "path": "native/codex/plugins/devlyn/skills/_shared/task-complete.py",
-      "sha256": "4938b56189b20b320ed50e275b7d7febab6858ec74ba39f3069ea3ef13309a73",
+      "sha256": "f9709f6855f511401205788aecf8aa59e268855b7673b84ed617adee56a245dc",
       "executable": false
     },
     {
       "path": "native/codex/plugins/devlyn/skills/_shared/task-completion.md",
-      "sha256": "d4e0b9803334812a3c541e9e92393bf5e712a481c09284f767a72f7209445ba9",
+      "sha256": "8b9a8706ab912165f2eef66bc39f2261f88df2b1b682d8d90d7f05f6014e965e",
       "executable": false
     },
     {
@@ -1714,12 +1714,12 @@
     },
     {
       "path": "package.json",
-      "sha256": "ef560ee79cc756a40b8ce1b590a3f3b1944027f435c5d9821c0aef91f064b966",
+      "sha256": "bac25159f616f9a0583452dbf8eb902d2d746d095f2f70526792efa6e34fac0f",
       "executable": false
     }
   ],
   "digest": {
     "algorithm": "sha256",
-    "value": "5fddf59395abd5dd015567d1184ef98ad970f987ee0573b6e1f5732171115573"
+    "value": "4f420dc3d285818f7e5ed5bc007c4a718a2d2ed690c862321cc84fc14b907b2f"
   }
 }