runcastle 1.2.11 → 1.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (17) hide show
  1. package/README.md +8 -0
  2. package/bin/runcastle.js +50392 -1334
  3. package/drizzle/0034_funny_doctor_octopus.sql +2 -0
  4. package/drizzle/0034_hard_killraven.sql +1 -0
  5. package/drizzle/0034_review_evidence_stamps.sql +5 -0
  6. package/drizzle/meta/0034_snapshot.json +1085 -0
  7. package/drizzle/meta/0035_snapshot.json +1099 -0
  8. package/drizzle/meta/_journal.json +14 -0
  9. package/index.js +50371 -1313
  10. package/package.json +2 -2
  11. package/skills/burner/review-ticket.md +1 -1
  12. package/skills/burner/verify-fixes.md +39 -0
  13. package/web/assets/index-B3y-IsQV.css +1 -0
  14. package/web/assets/index-DQG90elX.js +145 -0
  15. package/web/index.html +2 -2
  16. package/web/assets/index-CcFZnrux.js +0 -143
  17. package/web/assets/index-jOHWTE5S.css +0 -1
package/README.md CHANGED
@@ -25,6 +25,14 @@ self-contained package under `build/`:
25
25
  Every real dependency (node-pty, simple-git, hono, drizzle, …) stays external
26
26
  so it installs normally and keeps its prebuilds — the tarball's dependency tree
27
27
  carries no `workspace:*`.
28
+ - **Patched dependencies are bundled in too.** A workspace `patchedDependencies`
29
+ patch never reaches a user's install, so a patched dep must either be inlined
30
+ (`BUNDLED_DEPENDENCIES` in `scripts/publish-manifest.ts` — sandcastle, with
31
+ its own runtime deps folded into the manifest) or be listed as external with a
32
+ written reason the patch is unnecessary there (`PATCHED_EXTERNAL_DEPENDENCIES`
33
+ — node-pty). The build fails on any patch with neither fate, and checks the
34
+ emitted bundle for the patch's code so a registry copy cannot slip in
35
+ (ADR-0011; this is how v1.2.11's burns all died).
28
36
  - **Runtime assets ship as real files.** The drizzle migrations, the hook client
29
37
  (spawned by `bun`), the PTY sidecar host (spawned by `node`), the skills pack +
30
38
  burner prompts, and the built SPA are copied beside the bin — they can't live