sentinelayer-cli 0.46.5 → 0.48.0

package/src/audit/persona-loop.js

@@ -1,5 +1,6 @@
 import { randomUUID } from "node:crypto";
 import path from "node:path";
+import { requireOutputFileSystem } from "../config/output-filesystem.js";
 
 import { createMultiProviderApiClient } from "../ai/client.js";
 import { serializeProxyError } from "../ai/proxy.js";
@@ -376,6 +377,7 @@ export function createIsolatedPersonaContext({
   runId = "",
   rootPath = ".",
   artifactDir = "",
+  outputFs,
   provider = null,
   budget = {},
   onEvent = null,
@@ -384,6 +386,7 @@ export function createIsolatedPersonaContext({
   isolation = DEFAULT_ISOLATION_MODE,
   eventContext = null,
 } = {}) {
+  if (artifactDir) requireOutputFileSystem(outputFs);
   const normalizedAgent = normalizeAuditPersona(agent || {});
   const resolvedRootPath = path.resolve(String(rootPath || "."));
   const resolvedRunId =
@@ -399,6 +402,7 @@ export function createIsolatedPersonaContext({
     budget: loopBudget,
     runId: resolvedRunId,
     artifactDir,
+    outputFs,
     onEvent,
   });
   const emitter = (event, payload = {}) => {
@@ -701,6 +705,7 @@ async function runSinglePersonaAgenticLoop({
   sharedContext = null,
   hybridContext = null,
   artifactDir = "",
+  outputFs,
   provider = null,
   budget = {},
   maxTurns = null,
@@ -722,6 +727,7 @@ async function runSinglePersonaAgenticLoop({
     runId: requestedRunId,
     rootPath: resolvedRootPath,
     artifactDir,
+    outputFs,
     provider,
     budget,
     onEvent,
@@ -1053,6 +1059,7 @@ function summarizeSwarmStatus(results = []) {
 }
 
 export async function runPersonaAgenticLoop(options = {}) {
+  if (options.artifactDir) requireOutputFileSystem(options.outputFs);
   const {
     agent,
     rootPath,

package/src/audit/replay.js

@@ -1,4 +1,4 @@
-import fsp from "node:fs/promises";
+import { requireOutputFileSystem } from "../config/output-filesystem.js";
 import path from "node:path";
 
 function normalizeString(value) {
@@ -87,15 +87,17 @@ export function compareAuditReports(baseReport = {}, candidateReport = {}) {
 }
 
 export async function writeAuditComparisonArtifact({
+  outputFs,
   baseReport = {},
   candidateReport = {},
   outputDirectory = "",
 } = {}) {
+  requireOutputFileSystem(outputFs);
   const resolvedOutputDirectory = path.resolve(String(outputDirectory || "."));
   const comparison = compareAuditReports(baseReport, candidateReport);
   const fileName = `AUDIT_COMPARISON_${comparison.baseRunId}_vs_${comparison.candidateRunId}.json`;
   const outputPath = path.join(resolvedOutputDirectory, fileName);
-  await fsp.writeFile(outputPath, `${JSON.stringify(comparison, null, 2)}\n`, "utf-8");
+  await outputFs.writeFile(outputPath, `${JSON.stringify(comparison, null, 2)}\n`, "utf-8");
   return {
     comparison,
     outputPath,

package/src/auth/gate.js

@@ -17,6 +17,8 @@ import { isAuthenticated } from "./credential-destinations.js";
  * - auth login, auth status, auth --help
  * - --help, --version, -h, -v
  * - config (read-only config inspection)
+ * - skills install/list (local packaged files only)
+ * - judge check (validates a local verdict file; sends nothing)
  *
  * All other commands require a valid session.
  * If not authenticated, prints instructions and exits.
@@ -31,7 +33,7 @@ const AUTH_BYPASS_COMMANDS = new Set([
   "-v",
 ]);
 
-// Commands that work without auth (read-only, no API calls)
+// Commands that work without auth (local only, no API calls)
 const NO_AUTH_REQUIRED = new Set([
   "config",    // local config inspection
 ]);
@@ -331,6 +333,25 @@ function isAuthenticatedSessionValid(session) {
   return true;
 }
 
+/**
+ * A help request a newcomer can make before signing in (`sl session --help`, `sl session say --help`): the help flag
+ * is the LAST argument and every argument before it is a plain word (command, subcommand, positional). Then no option
+ * can take "--help" as its value (`--message-file --help` stays gated), so Commander prints help and runs nothing.
+ * The caller applies it only to Commander-dispatched commands. Tokens are judged exactly as Commander will see them,
+ * never trimmed: `" --help"` is message text to Commander, so it must not skip the gate either.
+ *
+ * @param {string[]} args - CLI arguments (after normalization)
+ * @returns {boolean}
+ */
+export function isHelpOnlyInvocation(args = []) {
+  const list = Array.isArray(args) ? args : [];
+  const last = list[list.length - 1];
+  if (last !== "--help" && last !== "-h") {
+    return false;
+  }
+  return list.slice(0, -1).every((arg) => typeof arg === "string" && arg !== "" && !arg.startsWith("-"));
+}
+
 /**
  * Check if the current command requires authentication.
  * Returns true if auth is required but user is not logged in.
@@ -349,6 +370,16 @@ export async function checkAuthGate(args) {
     return { authenticated: true, session: null, bypassReason: "no_auth_required", failureReason: null };
   }
 
+  // These two commands only inspect/copy packaged files. Future skills subcommands stay gated.
+  if (args[0] === "skills" && (args[1] === "install" || args[1] === "list")) {
+    return { authenticated: true, session: null, bypassReason: "local_skills", failureReason: null };
+  }
+
+  // Validating a verdict file is local; `judge verdict` sends, so it stays gated.
+  if (args[0] === "judge" && args[1] === "check") {
+    return { authenticated: true, session: null, bypassReason: "local_judge_check", failureReason: null };
+  }
+
   if (isSessionNoAuthCommand(args)) {
     return { authenticated: true, session: null, bypassReason: "session_no_auth_required", failureReason: null };
   }

package/src/auth/session-store.js

@@ -19,6 +19,19 @@ const SESSION_WARNING_ALLOWED_FIELDS = new Set([
 ]);
 const emittedSessionWarningKeys = new Set();
 let keytarClientOverrideForTests;
+let sessionOperationTail = Promise.resolve();
+
+// A store operation spans metadata, keyring and file publication/cleanup. Reads
+// can migrate plaintext too. Keep that transaction in order within this module;
+// serializing only rename would still permit stale migrations and logout races.
+// One queue also covers path aliases and keyring accounts shared across homes.
+// Other processes still rely on the existing key publication and bounded retries.
+function runSessionOperation(operation) {
+  const result = sessionOperationTail.then(operation);
+  // A failed operation must not poison the queue or retain returned credentials.
+  sessionOperationTail = result.then(() => undefined, () => undefined);
+  return result;
+}
 
 function nowIso() {
   return new Date().toISOString();
@@ -600,6 +613,11 @@ async function tryDecryptFileToken({ metadata, homeDir }) {
  * }>}
  */
 export async function readStoredSession({ homeDir } = {}) {
+  const options = { homeDir: resolveHomeDir(homeDir) };
+  return runSessionOperation(() => readStoredSessionUnlocked(options));
+}
+
+async function readStoredSessionUnlocked({ homeDir } = {}) {
   const { filePath, metadata } = await readMetadata({ homeDir });
   if (!metadata) {
     return null;
@@ -711,6 +729,11 @@ export async function readStoredSession({ homeDir } = {}) {
  * }>}
  */
 export async function readStoredSessionMetadata({ homeDir } = {}) {
+  const options = { homeDir: resolveHomeDir(homeDir) };
+  return runSessionOperation(() => readStoredSessionMetadataUnlocked(options));
+}
+
+async function readStoredSessionMetadataUnlocked({ homeDir } = {}) {
   const { filePath, metadata } = await readMetadata({ homeDir });
   if (!metadata) {
     return null;
@@ -776,6 +799,15 @@ export async function writeStoredSession(
     aidenid = null,
   } = {},
   { homeDir } = {}
+) {
+  const session = { apiUrl, token, tokenId, tokenPrefix, tokenExpiresAt, user, aidenid };
+  const options = { homeDir: resolveHomeDir(homeDir) };
+  return runSessionOperation(() => writeStoredSessionUnlocked(session, options));
+}
+
+async function writeStoredSessionUnlocked(
+  { apiUrl, token, tokenId, tokenPrefix, tokenExpiresAt, user, aidenid },
+  { homeDir }
 ) {
   const normalizedApiUrl = String(apiUrl || "").trim();
   const normalizedToken = String(token || "").trim();
@@ -838,6 +870,11 @@ export async function writeStoredSession(
  * @returns {Promise<{ filePath: string, hadSession: boolean }>}
  */
 export async function clearStoredSession({ homeDir } = {}) {
+  const options = { homeDir: resolveHomeDir(homeDir) };
+  return runSessionOperation(() => clearStoredSessionUnlocked(options));
+}
+
+async function clearStoredSessionUnlocked({ homeDir } = {}) {
   const { filePath, metadata } = await readMetadata({ homeDir });
   if (metadata && metadata.storage === "keyring") {
     const keytar = await loadKeytarClient({ allowImplicit: true });

package/src/board/evidence-resolvers.js

@@ -30,7 +30,7 @@
  * refused with an Error, which the gate reports as cannot-verify.
  */
 
-import { ghCommitSha, ghRefSegment, ghRepoSlug } from "../net/gh-api-path.js";
+import { ghCheckRunsApiPath, ghCompareApiPath, ghRepoSlug } from "../net/gh-api-path.js";
 
 /** Shape a resolver must return. Anything else is treated as indeterminate. */
 const YES = true;
@@ -74,8 +74,7 @@ export function createEvidenceResolver({ run, probeDeployedSha } = {}) {
   }
 
   async function shaOnBranch({ repo, sha, branch }) {
-    const basehead = `${ghRefSegment(branch, { label: "branch" })}...${ghCommitSha(sha)}`;
-    const res = await run(["api", `repos/${ghRepoSlug(repo)}/compare/${basehead}`, "--jq", ".status"]);
+    const res = await run(["api", ghCompareApiPath({ repo, branch, sha }), "--jq", ".status"]);
     if (!res || !res.ok) return UNKNOWN;
     const status = String(res.stdout ?? "").trim();
     // GitHub's compare status, base=branch head=sha:
@@ -87,7 +86,7 @@ export function createEvidenceResolver({ run, probeDeployedSha } = {}) {
   }
 
   async function checkConclusive({ repo, ref, check }) {
-    const res = await run(["api", `repos/${ghRepoSlug(repo)}/commits/${ghRefSegment(ref)}/check-runs`, "--jq", ".check_runs"]);
+    const res = await run(["api", ghCheckRunsApiPath({ repo, ref }), "--jq", ".check_runs"]);
     if (!res || !res.ok) return UNKNOWN;
     const runs = parseJson(res.stdout);
     if (!Array.isArray(runs)) return UNKNOWN;

package/src/cli.js

@@ -5,6 +5,16 @@ import { CLI_VERSION, runLegacyCliWithErrorHandling } from "./legacy-cli.js";
 import { restrictProgramLookupToPath } from "./program-lookup.js";
 
 const COMMAND_REGISTRARS = {
+  skills: {
+    loader: () => import("./commands/skills.js"),
+    exportName: "registerSkillsCommand",
+    needsLegacy: false,
+  },
+  judge: {
+    loader: () => import("./commands/judge.js"),
+    exportName: "registerJudgeCommand",
+    needsLegacy: false,
+  },
   init: {
     loader: () => import("./commands/init.js"),
     exportName: "registerInitCommand",
@@ -262,9 +272,11 @@ export async function runCli(rawArgs = process.argv.slice(2)) {
   // Normalize slash commands (/omargate → omargate, /audit → audit, etc.)
   const normalizedArgs = normalizeSlashArgs(rawArgs);
 
-  // Auth gate — require login for all commands except auth/help/version/config
-  const { checkAuthGate, printAuthRequired } = await import("./auth/gate.js");
-  const authResult = await checkAuthGate(normalizedArgs);
+  // Auth gate — require login for all commands except auth/help/version/config. Help for a Commander command prints
+  // without login too: Commander prints it and runs nothing (a newcomer reads `sl session --help` first).
+  const { checkAuthGate, isHelpOnlyInvocation, printAuthRequired } = await import("./auth/gate.js");
+  const helpOnly = !shouldBypassCommander(normalizedArgs) && isHelpOnlyInvocation(normalizedArgs);
+  const authResult = helpOnly ? { authenticated: true } : await checkAuthGate(normalizedArgs);
   if (!authResult.authenticated) {
     printAuthRequired(authResult.failureReason);
     return;
@@ -272,6 +284,14 @@ export async function runCli(rawArgs = process.argv.slice(2)) {
 
   if (shouldBypassCommander(normalizedArgs)) {
     await runLegacyCliWithErrorHandling(normalizedArgs);
+    if (["--help", "-h", "help"].includes(normalizedArgs[0])) {
+      console.log("\nAgent Skills:");
+      console.log("  sl skills install [names...] [--dir <path>] [--force] [--json]  Install bundled Senti skills (all, or the named ones)");
+      console.log("  sl skills list [--dir <path>] [--json]  Show bundled and installed versions/hashes");
+      console.log("\nJudge Loop:");
+      console.log("  sl judge check --file <verdict.json> [--json]  Validate a verdict offline and preview the message");
+      console.log("  sl judge verdict <sessionId> --agent <id> --file <verdict.json>  Send the verdict to the coder");
+    }
     return;
   }
 

package/src/commands/ai/identity-lifecycle.js

@@ -22,7 +22,7 @@ import {
   recordProvisionedIdentity,
   updateIdentityStatus,
 } from "../../ai/identity-store.js";
-import { resolveOutputRoot } from "../../config/service.js";
+import { resolveOutputRoot, resolveOutputContext } from "../../config/service.js";
 import {
   delay,
   hasExtractionSignal,
@@ -145,7 +145,7 @@ legalHold
   .action(async (identityId, options, command) => {
     const emitJson = shouldEmitJson(options, command);
     const targetPath = path.resolve(process.cwd(), String(options.path || "."));
-    const outputRoot = await resolveOutputRoot({
+    const { outputRoot, outputFs } = await resolveOutputContext({
       cwd: targetPath,
       outputDirOverride: options.outputDir,
       env: process.env,
@@ -172,7 +172,7 @@ legalHold
       status,
       underHold,
       identity: identityRecord,
-    });
+    }, outputFs);
 
     const payload = {
       command: "ai identity legal-hold status",
@@ -204,7 +204,7 @@ identity
   .action(async (options, command) => {
     const emitJson = shouldEmitJson(options, command);
     const targetPath = path.resolve(process.cwd(), String(options.path || "."));
-    const outputRoot = await resolveOutputRoot({
+    const { outputRoot, outputFs } = await resolveOutputContext({
       cwd: targetPath,
       outputDirOverride: options.outputDir,
       env: process.env,
@@ -223,7 +223,7 @@ identity
       staleCount: staleScan.stale.length,
       totalCount: staleScan.identities.length,
       identities,
-    });
+    }, outputFs);
 
     const payload = {
       command: "ai identity audit",
@@ -269,7 +269,7 @@ identity
       throw new Error("At least one tag is required via --tags.");
     }
     const targetPath = path.resolve(process.cwd(), String(options.path || "."));
-    const outputRoot = await resolveOutputRoot({
+    const { outputRoot, outputFs } = await resolveOutputContext({
       cwd: targetPath,
       outputDirOverride: options.outputDir,
       env: process.env,
@@ -293,7 +293,7 @@ identity
       candidateIdentityIds: candidates.map((item) => item.identityId),
       blockedIdentityIds: blocked.map((item) => item.identityId),
       eligibleIdentityIds: eligible.map((item) => item.identityId),
-    });
+    }, outputFs);
 
     if (!options.execute) {
       const payload = {
@@ -345,6 +345,7 @@ identity
         revokeResponse = revokeExecution.response || null;
       }
       const updated = await updateIdentityStatus({
+        outputFs,
         outputRoot,
         identityId: identityRecord.identityId,
         status: "SQUASHED",
@@ -379,7 +380,7 @@ identity
       updated: updates,
       apiCalled: canCallApi,
       credentialsMissing: resolvedCredentials.missing,
-    });
+    }, outputFs);
 
     const payload = {
       command: "ai identity kill-all",
@@ -426,7 +427,7 @@ identity
   .action(async (identityId, options, command) => {
     const emitJson = shouldEmitJson(options, command);
     const targetPath = path.resolve(process.cwd(), String(options.path || "."));
-    const outputRoot = await resolveOutputRoot({
+    const { outputRoot, outputFs } = await resolveOutputContext({
       cwd: targetPath,
       outputDirOverride: options.outputDir,
       env: process.env,
@@ -441,7 +442,7 @@ identity
       apiUrl,
       idempotencyKey,
       identityId,
-    });
+    }, outputFs);
 
     const { registryPath, identity: trackedIdentity } = await getIdentityById({
       outputRoot,
@@ -472,7 +473,7 @@ identity
         credentialsMissing: resolvedCredentials.missing,
         trackedIdentity,
         curlPreview: [
-          `curl -X POST ${apiUrl}/v1/identities/${urlPathSegment(identityId, { label: "identityId" })}/revoke \\`,
+          `curl -X POST ${apiUrl}/v1/identities/${urlPathSegment(identityId, { label: "identityId" })}/squash \\`,
           `  -H \"Authorization: Bearer $AIDENID_API_KEY\" \\`,
           `  -H \"X-Org-Id: $AIDENID_ORG_ID\" \\`,
           `  -H \"X-Project-Id: $AIDENID_PROJECT_ID\" \\`,
@@ -517,10 +518,11 @@ identity
       apiUrl,
       idempotencyKey,
       response: execution.response,
-    });
+    }, outputFs);
 
     const revokedAt = String(execution.response?.revokedAt || "").trim() || new Date().toISOString();
     const updated = await updateIdentityStatus({
+      outputFs,
       outputRoot,
       identityId,
       status: String(execution.response?.status || "REVOKED"),
@@ -576,7 +578,7 @@ identity
   .action(async (parentIdentityId, options, command) => {
     const emitJson = shouldEmitJson(options, command);
     const targetPath = path.resolve(process.cwd(), String(options.path || "."));
-    const outputRoot = await resolveOutputRoot({
+    const { outputRoot, outputFs } = await resolveOutputContext({
       cwd: targetPath,
       outputDirOverride: options.outputDir,
       env: process.env,
@@ -617,7 +619,7 @@ identity
       idempotencyKey,
       parentIdentityId,
       payload,
-    });
+    }, outputFs);
 
     const resolvedCredentials = await resolveAidenIdCredentials({
       apiKey: options.apiKey,
@@ -695,9 +697,10 @@ identity
       idempotencyKey,
       parentIdentityId,
       response: execution.response,
-    });
+    }, outputFs);
 
     const registryUpdate = await recordProvisionedIdentity({
+      outputFs,
       outputRoot,
       response: execution.response || {},
       context: {
@@ -758,7 +761,7 @@ identity
   .action(async (identityId, options, command) => {
     const emitJson = shouldEmitJson(options, command);
     const targetPath = path.resolve(process.cwd(), String(options.path || "."));
-    const outputRoot = await resolveOutputRoot({
+    const { outputRoot, outputFs } = await resolveOutputContext({
       cwd: targetPath,
       outputDirOverride: options.outputDir,
       env: process.env,
@@ -796,7 +799,7 @@ identity
       generatedAt: new Date().toISOString(),
       identityId,
       response: execution.response,
-    });
+    }, outputFs);
 
     const rows = renderLineageRows({
       nodes: execution.nodes,
@@ -843,7 +846,7 @@ identity
   .action(async (identityId, options, command) => {
     const emitJson = shouldEmitJson(options, command);
     const targetPath = path.resolve(process.cwd(), String(options.path || "."));
-    const outputRoot = await resolveOutputRoot({
+    const { outputRoot, outputFs } = await resolveOutputContext({
       cwd: targetPath,
       outputDirOverride: options.outputDir,
       env: process.env,
@@ -865,7 +868,7 @@ identity
       apiUrl,
       idempotencyKey,
       identityId,
-    });
+    }, outputFs);
 
     const resolvedCredentials = await resolveAidenIdCredentials({
       apiKey: options.apiKey,
@@ -937,12 +940,13 @@ identity
       idempotencyKey,
       identityId,
       response: execution.response,
-    });
+    }, outputFs);
 
     const updateResults = await Promise.all(
       execution.revokedIdentityIds.map(async (revokedIdentityId) => {
         try {
           const updated = await updateIdentityStatus({
+            outputFs,
             outputRoot,
             identityId: revokedIdentityId,
             status: "SQUASHED",
@@ -1003,7 +1007,7 @@ identity
   .action(async (identityId, options, command) => {
     const emitJson = shouldEmitJson(options, command);
     const targetPath = path.resolve(process.cwd(), String(options.path || "."));
-    const outputRoot = await resolveOutputRoot({
+    const { outputRoot, outputFs } = await resolveOutputContext({
       cwd: targetPath,
       outputDirOverride: options.outputDir,
       env: process.env,
@@ -1048,7 +1052,7 @@ identity
       cursor: String(options.cursor || "").trim() || null,
       limit,
       response: execution.response,
-    });
+    }, outputFs);
 
     const payload = {
       command: "ai identity events",
@@ -1096,7 +1100,7 @@ identity
   .action(async (identityId, options, command) => {
     const emitJson = shouldEmitJson(options, command);
     const targetPath = path.resolve(process.cwd(), String(options.path || "."));
-    const outputRoot = await resolveOutputRoot({
+    const { outputRoot, outputFs } = await resolveOutputContext({
       cwd: targetPath,
       outputDirOverride: options.outputDir,
       env: process.env,
@@ -1149,7 +1153,7 @@ identity
       latestEvent,
       extraction: latestExtraction.extraction,
       extractionResponse: latestExtraction.response,
-    });
+    }, outputFs);
 
     const payload = {
       command: "ai identity latest",
@@ -1207,7 +1211,7 @@ identity
   .action(async (identityId, options, command) => {
     const emitJson = shouldEmitJson(options, command);
     const targetPath = path.resolve(process.cwd(), String(options.path || "."));
-    const outputRoot = await resolveOutputRoot({
+    const { outputRoot, outputFs } = await resolveOutputContext({
       cwd: targetPath,
       outputDirOverride: options.outputDir,
       env: process.env,
@@ -1309,7 +1313,7 @@ identity
             extraction: lastExtraction,
           },
     };
-    await writeArtifact(outputPath, artifactPayload);
+    await writeArtifact(outputPath, artifactPayload, outputFs);
 
     if (!success) {
       throw new Error(