halfcycle 0.3.8 → 0.3.10

package/.claude-plugin/plugin.json

@@ -1,16 +1,43 @@
 {
   "name": "halfcycle",
-  "version": "0.3.8",
+  "version": "0.3.10",
   "description": "Halfcycle Method bundle — resolution-stub slash commands, remote method-delivery registration, and governance-hook wiring for a Halfcycle engagement repo. It ships NO worker role files: a project's roles are authored from that project's own recorded decisions at orchestration kickoff (FX-2, W3-F-27).",
   "commands": [
-    { "name": "halfcycle-setup", "path": "../commands/halfcycle-setup.md" },
-    { "name": "halfcycle-design", "path": "../commands/halfcycle-design.md" },
-    { "name": "write-spec", "path": "../commands/write-spec.md" },
-    { "name": "consistency-check", "path": "../commands/consistency-check.md" },
-    { "name": "task-graph", "path": "../commands/task-graph.md" },
-    { "name": "context-update", "path": "../commands/context-update.md" },
-    { "name": "agent-teams-orchestration", "path": "../commands/agent-teams-orchestration.md" },
-    { "name": "task-execution", "path": "../commands/task-execution.md" },
-    { "name": "stack-assembly-worker", "path": "../commands/stack-assembly-worker.md" }
+    {
+      "name": "halfcycle-setup",
+      "path": "../commands/halfcycle-setup.md"
+    },
+    {
+      "name": "halfcycle-design",
+      "path": "../commands/halfcycle-design.md"
+    },
+    {
+      "name": "write-spec",
+      "path": "../commands/write-spec.md"
+    },
+    {
+      "name": "consistency-check",
+      "path": "../commands/consistency-check.md"
+    },
+    {
+      "name": "task-graph",
+      "path": "../commands/task-graph.md"
+    },
+    {
+      "name": "context-update",
+      "path": "../commands/context-update.md"
+    },
+    {
+      "name": "agent-teams-orchestration",
+      "path": "../commands/agent-teams-orchestration.md"
+    },
+    {
+      "name": "task-execution",
+      "path": "../commands/task-execution.md"
+    },
+    {
+      "name": "stack-assembly-worker",
+      "path": "../commands/stack-assembly-worker.md"
+    }
   ]
 }

package/README.md

@@ -8,6 +8,8 @@ npx halfcycle
 
 That is the whole install. One command, in the repo you want to work in.
 
+**Where it connects.** That command talks to Halfcycle at `https://control.halfcycle.ai`, to sign you in through your browser and to create the engagement your work is recorded against. It is the same address for everybody and it ships in the CLI, so there is nothing to configure, nothing to look up, and no value anyone has to give you first; the addresses for your board and for the checks come back from there too. If it cannot be reached, the install stops and writes nothing rather than setting your repository up without cover.
+
 ---
 
 ## What it is

package/bin/bin.bundle.mjs

@@ -5,6 +5,15 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// dist/guard-origin.js
+var DEFAULT_GUARD_ORIGIN = "https://guard.halfcycle.ai";
+function resolveGuardOrigin(env) {
+  const configured = env["GUARD_SERVICE_URL"]?.trim();
+  if (configured)
+    return { origin: configured.replace(/\/+$/, ""), source: "environment" };
+  return { origin: DEFAULT_GUARD_ORIGIN, source: "default" };
+}
+
 // dist/config.js
 var EXCERPT_DEFAULTS = {
   maxCharsPerExcerpt: 200,
@@ -12,12 +21,10 @@ var EXCERPT_DEFAULTS = {
   maxExcerptsPerChangeSet: 20
 };
 function readConfig() {
-  const guardServiceUrl = process.env["GUARD_SERVICE_URL"];
+  const guardServiceUrl = resolveGuardOrigin(process.env).origin;
   const guardServiceToken = process.env["GUARD_SERVICE_TOKEN"];
   const guardEngagementId = process.env["GUARD_ENGAGEMENT_ID"];
   const missing = [];
-  if (!guardServiceUrl)
-    missing.push("GUARD_SERVICE_URL");
   if (!guardServiceToken)
     missing.push("GUARD_SERVICE_TOKEN");
   if (!guardEngagementId)
@@ -16027,6 +16034,15 @@ function emitInfraWarning(message) {
   process.stdout.write(`[Halfcycle] WARNING: Guard service unavailable \u2014 ${message}. Session continues (fail-open).
 `);
 }
+function emitLocalFault(message) {
+  process.stdout.write(`[Halfcycle] WARNING: Local fault \u2014 ${message}. The guard service was not contacted. Session continues (fail-open).
+`);
+}
+function emitContractFault(message) {
+  process.stdout.write(`[Halfcycle] WARNING: Guard response could not be understood \u2014 ${message}
+This is not a service outage: the guard service answered. The suspect is this repository's own installed halfcycle runner, which is out of date with what the service now sends. Update it: run "npx halfcycle" in this repository, then retry. Session continues (fail-open).
+`);
+}
 var UNCONFIGURED_EXIT_TOOL_USE = 2;
 var UNCONFIGURED_EXIT_STOP_FAMILY = 1;
 function emitNeverConfigured(missing, exitCode) {
@@ -16238,7 +16254,7 @@ async function runPostToolUse() {
     return;
   const repoRootResult = getRepoRoot(process.cwd());
   if (!repoRootResult.ok) {
-    emitInfraWarning(`Could not find git repo root: ${repoRootResult.message}`);
+    emitLocalFault(`Could not find git repo root: ${repoRootResult.message}`);
     return;
   }
   const repoRoot = repoRootResult.value;
@@ -16274,6 +16290,10 @@ async function runPostToolUse() {
       emitCredentialRejected(failure.statusCode, failure.message, CREDENTIAL_REJECTED_EXIT_TOOL_USE);
       return;
     }
+    if (failure.kind === "contract") {
+      emitContractFault(failure.message);
+      return;
+    }
     emitInfraWarning(failure.reason);
     return;
   }
@@ -16477,7 +16497,7 @@ function collectDiff(repoRoot, base) {
 async function runSessionDiff(input, kind) {
   const repoRootResult = getRepoRoot(process.cwd());
   if (!repoRootResult.ok) {
-    emitInfraWarning(`Could not find git repo root: ${repoRootResult.message}`);
+    emitLocalFault(`Could not find git repo root: ${repoRootResult.message}`);
     return;
   }
   const repoRoot = repoRootResult.value;
@@ -16487,7 +16507,7 @@ async function runSessionDiff(input, kind) {
   const diffBase = base.kind;
   const collected = collectDiff(repoRoot, base);
   if (!collected.ok) {
-    emitInfraWarning(`Could not get session diff: ${collected.message}`);
+    emitLocalFault(`Could not get session diff: ${collected.message}`);
     return;
   }
   const { files: changedFiles, getDiff } = collected;
@@ -16531,6 +16551,10 @@ async function runSessionDiff(input, kind) {
       emitCredentialRejected(failure.statusCode, failure.message, CREDENTIAL_REJECTED_EXIT_STOP_FAMILY);
       return;
     }
+    if (failure.kind === "contract") {
+      emitContractFault(failure.message);
+      return;
+    }
     emitInfraWarning(failure.reason);
     return;
   }