terminalhire 0.42.8 → 0.42.9

package/dist/bin/jpi-claim.js

@@ -24825,10 +24825,8 @@ var init_repo_policy_semantic = __esm({
 // src/repo-policy.ts
 var repo_policy_exports = {};
 __export(repo_policy_exports, {
-  FOUNDER_DECLARATION_SOURCE: () => FOUNDER_DECLARATION_SOURCE,
   POLICY_RULESET_VERSION: () => POLICY_RULESET_VERSION,
   auditContent: () => auditContent,
-  auditDeclaredPolicy: () => auditDeclaredPolicy,
   checkRepoPolicy: () => checkRepoPolicy,
   ghHeaders: () => ghHeaders2
 });
@@ -25034,40 +25032,7 @@ async function checkRepoPolicy(repoFullName, opts = {}) {
     files
   };
 }
-function auditDeclaredPolicy(declaration) {
-  const text = typeof declaration === "string" ? declaration.trim() : "";
-  if (text === "") {
-    return {
-      status: "unavailable",
-      verdict: "unavailable",
-      hits: [],
-      requirements: [],
-      assignment: "none",
-      rulesetVersion: POLICY_RULESET_VERSION,
-      contentHash: null,
-      scanComplete: false,
-      files: []
-    };
-  }
-  const files = [{ file: FOUNDER_DECLARATION_SOURCE, content: text }];
-  const { hits, requirements, verdict, assignment } = auditContent(files);
-  return {
-    // Same status rule as a scanned repo: any classified hit → 'flagged' (the
-    // verdict says how severe), no hit → 'clean'. The declaration is one short
-    // text that was read in full, so the incomplete-scan precedence above can
-    // never apply here.
-    status: hits.length > 0 ? "flagged" : "clean",
-    verdict,
-    hits,
-    requirements,
-    assignment,
-    rulesetVersion: POLICY_RULESET_VERSION,
-    contentHash: hashFiles(files),
-    scanComplete: true,
-    files
-  };
-}
-var GH_API, GH_API_ORIGIN, GH_HEADERS, MAX_REQUESTS, POLICY_RULESET_VERSION, AI_SIGNAL_PATTERNS, AI_TERM, PROHIBITED_PATTERNS, DISCLOSURE_PATTERNS, DISCLOSURE_ENFORCEMENT_PATTERNS, REQUIREMENT_PATTERNS, CANDIDATE_GROUPS, VERDICT_SEVERITY, FOUNDER_DECLARATION_SOURCE;
+var GH_API, GH_API_ORIGIN, GH_HEADERS, MAX_REQUESTS, POLICY_RULESET_VERSION, AI_SIGNAL_PATTERNS, AI_TERM, PROHIBITED_PATTERNS, DISCLOSURE_PATTERNS, DISCLOSURE_ENFORCEMENT_PATTERNS, REQUIREMENT_PATTERNS, CANDIDATE_GROUPS, VERDICT_SEVERITY;
 var init_repo_policy = __esm({
   "src/repo-policy.ts"() {
     "use strict";
@@ -25151,7 +25116,6 @@ var init_repo_policy = __esm({
       "disclosure-required": 2,
       prohibited: 3
     };
-    FOUNDER_DECLARATION_SOURCE = "founder-declaration";
   }
 });
 
@@ -26710,8 +26674,7 @@ function buildSubmitBody(issueNumber, opts = {}) {
   return `${closesLine}${main}${AI_DISCLOSURE_NOTE}`;
 }
 function printPolicySection(policy) {
-  const declared = policy.provenance === "founder-declaration";
-  const subject = declared ? "this posting's declared policy" : "this repo";
+  const subject = "this repo";
   const verdict = policy.verdict ?? (policy.status === "flagged" ? "ai-mentioned" : policy.status);
   if (verdict === "prohibited") {
     console.log(
@@ -26729,11 +26692,7 @@ function printPolicySection(policy) {
     );
   } else if (policy.status === "unavailable") {
     console.log(
-      declared ? "\n  POLICY: the founder declared no AI-assistance policy on this posting \u2014 there is nothing to read; acknowledging means working without a stated policy." : "\n  POLICY: could not read this repo's CONTRIBUTING/PR-template/AGENTS docs (rate-limited or unreachable) \u2014 read them yourself before working."
-    );
-  } else if (declared) {
-    console.log(
-      "  policy: no AI-assistance restriction in the founder's declared policy (shown above verbatim when flagged)"
+      "\n  POLICY: could not read this repo's CONTRIBUTING/PR-template/AGENTS docs (rate-limited or unreachable) \u2014 read them yourself before working."
     );
   } else if (policy.semantic?.status === "not-configured" && (policy.files?.length ?? 0) > 0) {
     console.log(
@@ -26952,8 +26911,7 @@ function extractClaimableFields(job) {
       openPRsAtDiscovery: c.openPRsAtDiscovery,
       // A contribute issue is never first-party founder supply.
       founderPosting: false,
-      claimMode: "open",
-      aiDeclaration: null
+      claimMode: "open"
     };
   }
   const b = job.bounty ?? {};
@@ -26966,15 +26924,13 @@ function extractClaimableFields(job) {
     source: "bounty",
     // Bounties carry no discovery-time PR proof — always live-count (unchanged).
     openPRsAtDiscovery: void 0,
-    // TERM-142 — first-party founder supply drives a different record path: Gate 0
-    // reads the DECLARED policy below (there is no repo to scan — `repoFullName`
+    // TERM-142 — first-party founder supply drives a different record path: no
+    // policy step at all (TERM-625 — there is no repo to scan either, `repoFullName`
     // here is the posting's opaque handle, V-9), and recording registers the claim
-    // server-side (Decision 4). Both fields follow the index row's absent-means-
-    // default conventions: claimMode absent = open, aiDeclaration absent = the
-    // founder declared nothing.
+    // server-side (Decision 4). `claimMode` follows the index row's absent-means-
+    // default convention: absent = open.
     founderPosting: b.bountySource === "founder",
-    claimMode: b.claimMode === "approval-only" ? "approval-only" : "open",
-    aiDeclaration: typeof b.aiDeclaration === "string" && b.aiDeclaration.trim() !== "" ? b.aiDeclaration : null
+    claimMode: b.claimMode === "approval-only" ? "approval-only" : "open"
   };
 }
 function parseGitHubUrl(url) {
@@ -27142,6 +27098,7 @@ async function hasPriorAssignmentRequest(repoFullName, issueNumber, login, marke
   }
 }
 function shouldRequestAssignment(claim, flags = {}) {
+  if (claim && claim.approval) return { post: Boolean(flags.assign), takeBot: false };
   const expectation = claim && claim.policy ? claim.policy.assignment : void 0;
   const post = Boolean(flags.assign) || expectation === void 0 || expectation === "required" || expectation === "take-bot";
   return { post, takeBot: expectation === "take-bot" };
@@ -27398,7 +27355,6 @@ async function resolveBounty(arg) {
   let bountyId, title, repoFullName, issueUrl, amountUSD, source, openPRsAtDiscovery, indexNativeId;
   let founderPosting = false;
   let claimMode = "open";
-  let aiDeclaration = null;
   let job = findClaimableInCache(arg) ?? (looksLikeShortRef(arg) ? findClaimableByShortRef(arg) : null);
   let freshPool;
   if (!job && looksLikeShortRef(arg)) {
@@ -27415,8 +27371,7 @@ async function resolveBounty(arg) {
       source,
       openPRsAtDiscovery,
       founderPosting,
-      claimMode,
-      aiDeclaration
+      claimMode
     } = extractClaimableFields(job));
     indexNativeId = bountyId;
   } else {
@@ -27482,13 +27437,12 @@ async function resolveBounty(arg) {
     // `openPRs`, which may be the discovery-time snapshot used for display.
     openPRsLive,
     issueNumber: ghIssue ? ghIssue.number : null,
-    // TERM-142 — founder-posting facts for cmdRecord's declared-policy gate and
-    // registration call. The URL tier can never resolve a founder posting (its
-    // claimUrl is a docs page, not a GitHub issue), so the defaults above are
-    // correct there: a URL-tier claim is never treated as founder supply.
+    // TERM-142 — founder-posting facts for cmdRecord's registration call. The URL
+    // tier can never resolve a founder posting (its claimUrl is a docs page, not a
+    // GitHub issue), so the defaults above are correct there: a URL-tier claim is
+    // never treated as founder supply.
     founderPosting,
-    claimMode,
-    aiDeclaration
+    claimMode
   };
 }
 function fmtOpenPRsLine(b) {
@@ -27905,21 +27859,14 @@ ${contestedWarning}`);
       process.exit(1);
     }
   }
-  const { applySemanticPolicyGate: applySemanticPolicyGate2 } = await Promise.resolve().then(() => (init_repo_policy_semantic(), repo_policy_semantic_exports));
-  let policy;
-  if (b.founderPosting) {
-    const { auditDeclaredPolicy: auditDeclaredPolicy2 } = await Promise.resolve().then(() => (init_repo_policy(), repo_policy_exports));
-    const declared = await applySemanticPolicyGate2(
-      b.repoFullName,
-      auditDeclaredPolicy2(b.aiDeclaration)
-    );
-    policy = { ...declared, provenance: "founder-declaration" };
-  } else {
+  let policy = null;
+  if (!b.founderPosting) {
+    const { applySemanticPolicyGate: applySemanticPolicyGate2 } = await Promise.resolve().then(() => (init_repo_policy_semantic(), repo_policy_semantic_exports));
     const { checkRepoPolicy: checkRepoPolicy2 } = await Promise.resolve().then(() => (init_repo_policy(), repo_policy_exports));
     const keywordPolicy = await checkRepoPolicy2(b.repoFullName, { token: await policyScanToken() });
     policy = await applySemanticPolicyGate2(b.repoFullName, keywordPolicy);
+    printPolicySection(policy);
   }
-  printPolicySection(policy);
   if (process.stdout.isTTY) {
     try {
       const { getRepoEntry: getRepoEntry2, briefingLines: briefingLines2 } = await Promise.resolve().then(() => (init_repo_experience(), repo_experience_exports));
@@ -27934,20 +27881,19 @@ ${contestedWarning}`);
     } catch {
     }
   }
-  const policySubject = policy.provenance === "founder-declaration" ? "this founder posting" : b.repoFullName;
   let ackedAt = null;
-  if (policy.verdict === "prohibited") {
+  if (!policy) {
+  } else if (policy.verdict === "prohibited") {
     let acked = Boolean(flags["ack-policy-prohibited"]);
     if (!acked && process.stdin.isTTY) {
       acked = await confirm(
-        `
-  ${policy.provenance === "founder-declaration" ? "This posting's declared policy" : "This repo"} PROHIBITS AI-generated contributions \u2014 continuing means everything you submit must be hand-written by you. Continue? (y/N) `
+        "\n  This repo PROHIBITS AI-generated contributions \u2014 continuing means everything you submit must be hand-written by you. Continue? (y/N) "
       );
     }
     if (!acked) {
       console.error(
         `
-terminalhire claim: refusing to record \u2014 ${policySubject} prohibits AI-generated contributions.
+terminalhire claim: refusing to record \u2014 ${b.repoFullName} prohibits AI-generated contributions.
   Read the excerpts above. If you will hand-write the work yourself, re-run with
   --ack-policy-prohibited (or confirm interactively). --ack-policy is not enough here.`
       );
@@ -27963,8 +27909,7 @@ terminalhire claim: refusing to record \u2014 ${policySubject} prohibits AI-gene
       );
       ackedAt = prior.ackedAt;
     } else {
-      const declaredProvenance = policy.provenance === "founder-declaration";
-      const reason = policy.status === "flagged" ? declaredProvenance ? "This posting's declared policy has AI-assistance language" : "This repo has AI-assistance policy language" : (policy.hits?.length ?? 0) > 0 ? "This repo's policy scan was cut short \u2014 AI-policy language was found in what WAS read, and other governing docs went unread" : declaredProvenance ? "The founder declared no AI-assistance policy on this posting" : "This repo's contribution policy could not be checked";
+      const reason = policy.status === "flagged" ? "This repo has AI-assistance policy language" : (policy.hits?.length ?? 0) > 0 ? "This repo's policy scan was cut short \u2014 AI-policy language was found in what WAS read, and other governing docs went unread" : "This repo's contribution policy could not be checked";
       let acked = Boolean(flags["ack-policy"]);
       if (!acked && process.stdin.isTTY) {
         acked = await confirm(
@@ -27974,9 +27919,7 @@ terminalhire claim: refusing to record \u2014 ${policySubject} prohibits AI-gene
       }
       if (!acked) {
         console.error(
-          declaredProvenance ? `
-terminalhire claim: refusing to record. ${reason}.
-  Re-run with --ack-policy to acknowledge and proceed (or confirm interactively).` : `
+          `
 terminalhire claim: refusing to record \u2014 read ${b.repoFullName}'s contribution policy first.
   Re-run with --ack-policy once you have (or confirm interactively).`
         );
@@ -28034,17 +27977,22 @@ terminalhire claim: refusing to record \u2014 read ${b.repoFullName}'s contribut
       // start` can drive the assignment decision from it and `claim audit` can
       // show what ruleset the dev acknowledged. Excerpts are NOT persisted —
       // the record stores the conclusion; the docs stay the source of truth.
-      policy: {
-        status: policy.status,
-        verdict: policy.verdict,
-        assignment: policy.assignment,
-        requirements: (policy.requirements ?? []).map((r) => r.kind),
-        rulesetVersion: policy.rulesetVersion,
-        ackedAt,
-        // TERM-142 provenance marker — 'founder-declaration' when this policy came
-        // from the founder's declared text rather than scanned repo docs.
-        ...policy.provenance ? { provenance: policy.provenance } : {}
-      },
+      //
+      // TERM-625: a founder posting has no audit, so the key is OMITTED rather
+      // than filled with a manufactured 'clean'. Absent means "never scanned";
+      // a stored verdict would claim we read something. `shouldRequestAssignment`
+      // reads an absent policy as the legacy-claim branch, which is the right
+      // answer here — there is no third-party assignment convention to honour.
+      ...policy ? {
+        policy: {
+          status: policy.status,
+          verdict: policy.verdict,
+          assignment: policy.assignment,
+          requirements: (policy.requirements ?? []).map((r) => r.kind),
+          rulesetVersion: policy.rulesetVersion,
+          ackedAt
+        }
+      } : {},
       // Registration receipt + approval wait (founder postings only; see claims.ts).
       ...approval ? { approval } : {}
     });
@@ -28052,10 +28000,12 @@ terminalhire claim: refusing to record \u2014 read ${b.repoFullName}'s contribut
     console.error(`terminalhire claim: ${err.message ?? err}`);
     process.exit(1);
   }
-  try {
-    const { recordPolicySnapshot: recordPolicySnapshot2 } = await Promise.resolve().then(() => (init_repo_experience(), repo_experience_exports));
-    await recordPolicySnapshot2(b.repoFullName, policy);
-  } catch {
+  if (policy) {
+    try {
+      const { recordPolicySnapshot: recordPolicySnapshot2 } = await Promise.resolve().then(() => (init_repo_experience(), repo_experience_exports));
+      await recordPolicySnapshot2(b.repoFullName, policy);
+    } catch {
+    }
   }
   try {
     const { markStatus: markStatus2 } = await Promise.resolve().then(() => (init_job_status_store(), job_status_store_exports));
@@ -28147,8 +28097,11 @@ async function cmdPreview(arg, { json } = {}) {
     console.error("  Run `terminalhire bounties` to populate the cache, or pass a full issue URL.");
     process.exit(1);
   }
-  const { checkRepoPolicy: checkRepoPolicy2 } = await Promise.resolve().then(() => (init_repo_policy(), repo_policy_exports));
-  const policy = await checkRepoPolicy2(b.repoFullName, { token: await policyScanToken() });
+  let policy = null;
+  if (!b.founderPosting) {
+    const { checkRepoPolicy: checkRepoPolicy2 } = await Promise.resolve().then(() => (init_repo_policy(), repo_policy_exports));
+    policy = await checkRepoPolicy2(b.repoFullName, { token: await policyScanToken() });
+  }
   if (json) {
     process.stdout.write(
       JSON.stringify({
@@ -28161,14 +28114,18 @@ async function cmdPreview(arg, { json } = {}) {
         openPRs: b.openPRs,
         assignees: b.assignees,
         contested: isContested(b),
-        policy: {
-          status: policy.status,
-          verdict: policy.verdict,
-          assignment: policy.assignment,
-          rulesetVersion: policy.rulesetVersion,
-          hits: policy.hits,
-          requirements: policy.requirements
-        }
+        // Absent on a founder posting — see the scan above. A consumer must read
+        // "no policy key" as "no policy step exists here", never as "clean".
+        ...policy ? {
+          policy: {
+            status: policy.status,
+            verdict: policy.verdict,
+            assignment: policy.assignment,
+            rulesetVersion: policy.rulesetVersion,
+            hits: policy.hits,
+            requirements: policy.requirements
+          }
+        } : {}
       }) + "\n"
     );
     return;
@@ -28187,7 +28144,7 @@ async function cmdPreview(arg, { json } = {}) {
   console.log(fmtOpenPRsLine(b));
   const previewContested = fmtContestedWarning(b);
   if (previewContested) console.log(previewContested);
-  printPolicySection(policy);
+  if (policy) printPolicySection(policy);
   if (process.stdout.isTTY) {
     try {
       const { getRepoEntry: getRepoEntry2, briefingLines: briefingLines2 } = await Promise.resolve().then(() => (init_repo_experience(), repo_experience_exports));
@@ -29173,7 +29130,15 @@ async function requireReadPushToken(what) {
 }
 async function cmdSlice(id, flags = {}) {
   const claims = await Promise.resolve().then(() => (init_claims(), claims_exports));
-  const claim = requireFounderLoopClaim(claims, id, "slice");
+  if (!id) {
+    console.error("Usage: terminalhire claim slice <id>");
+    process.exit(1);
+  }
+  const local = claims.findClaim(id) ?? null;
+  if (local) {
+    requireFounderLoopClaim(claims, id, "slice");
+  }
+  const bountyId = local ? founderPostingIdOf(local) : String(id).replace(/^bounty:founder:/, "");
   const pushToken = await requireReadPushToken("fetching your granted slice");
   let res;
   try {
@@ -29181,8 +29146,11 @@ async function cmdSlice(id, flags = {}) {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
-        bountyId: founderPostingIdOf(claim),
-        claimId: claim.approval.claimId,
+        bountyId,
+        // Sent only when we hold one. Omitted, the server resolves the caller's single
+        // claim on this posting; sent, it is matched EXACTLY, so a stale local id still
+        // fails closed instead of being redirected to a different claim.
+        ...local ? { claimId: local.approval.claimId } : {},
         pushToken
       }),
       signal: AbortSignal.timeout(3e4)
@@ -29210,6 +29178,40 @@ async function cmdSlice(id, flags = {}) {
     );
     process.exit(1);
   }
+  let claim = local;
+  if (!claim) {
+    try {
+      claim = claims.recordClaim({
+        id,
+        bountyId: body.bountyId ?? bountyId,
+        title: body.title ?? null,
+        repoFullName: null,
+        issueUrl: null,
+        amountUSD: null,
+        openPRsAtClaim: null,
+        kind: "bounty",
+        policy: null,
+        approval: {
+          mode: body.claimMode ?? "open",
+          // Granted, not pending: the server only delivers a slice to an approved
+          // claimant. Recording 'pending' here would make `claim start` render a wait
+          // for approval that has already happened.
+          state: "granted",
+          claimId: body.claimId,
+          claimantLogin: null,
+          registeredAt: (/* @__PURE__ */ new Date()).toISOString(),
+          // So a later reader can tell this record was rebuilt from a slice delivery
+          // rather than written by `claim record` — it is deliberately thinner.
+          hydratedFrom: "slice"
+        }
+      });
+    } catch (err) {
+      console.error(
+        `terminalhire claim: the slice was delivered but the local record could not be written (${err?.message ?? err}) \u2014 nothing was written to disk.`
+      );
+      process.exit(1);
+    }
+  }
   let dest = flags.dir ? pathResolve(String(flags.dir)) : sliceWorkDirFor(claim.id);
   if (existsSync8(dest) && readdirSync2(dest).length > 0) {
     console.error(
@@ -30153,6 +30155,15 @@ async function cmdPush({ keepUpdated = false } = {}) {
     lastPushedAt: consentedAt,
     lastSnapshotHash: computeSnapshotHash(pushed)
   });
+  const omitted = Number(syncBody?.skipped ?? 0);
+  if (omitted > 0) {
+    console.log(
+      `
+  ${omitted} claim${omitted === 1 ? "" : "s"} could not be shown on your dashboard \u2014 ${omitted === 1 ? "it names" : "they name"} no repository.`
+    );
+    console.log("    A posting claimed on the web withholds its repo until work starts.");
+    console.log("    Everything else in this push is on your dashboard.");
+  }
   if (pushToken) {
     try {
       if (autoConsent) {