Repository navigation
fix(logger): pass messages to gum after an end-of-options marker - #311
Merged
Merged
Conversation
Add a data-only matrix (src/agents/client-capabilities.ts) that classifies packaging, skill discovery, hooks, plugin MCP, standalone MCP, rules and UI for Codex, Claude Code, Cursor and standalone consumers. Each cell records status, evidence class, evidence ref, observed client version, source SHA and host label. The rendered reference doc carries companion-package layout and model-policy ownership decisions. Tests enforce that every cell is classified, verified cells cite an existing fixture-strength test, manifest or listing evidence never verifies loading, and manifest-declared components agree with the matrix. The plugin generation test gains a negative-controlled scan of plugins/hack and examples/basic for model, permission and output-style settings and non-primer hooks, plus a skill inventory check against the generator and docs/integrations.md, which now names all four shipped skills. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
hack.project.run built `run <flags> <service> <cmd...>`, so hack's own
parser consumed child flags: `node --version` printed hack's version and
`--branch other` retargeted the instance. Run now emits
`run <flags> -- <service> <cmd...>` and every option value is fused as
`--opt=value` across all tools.
- Validate service, services, branch, profiles, logs service and open
target against a compose-identifier pattern (no leading '-', no empty
value; branches may also contain '/').
- tail, maxEvents, maxMs and timeoutMs are positive integers with hard
ceilings (provisional F27 settings); effective limits are echoed in
data.limits.
- Every tool carries annotations (readOnly for list/status/logs/open,
destructive for down/run/init, openWorld false).
- Refusals return error{code, message} with existing codes (E_USAGE,
E_PROJECT_NOT_FOUND) and spawned:false. A typed tools/call dispatcher
validates before any handler runs, so refused calls leave no argv
entry and no audit line.
- Children spawn with HACK_NO_INTERACTIVE=1 on a copy of the frozen
session env.
Refs HACK-1133, HACK-1134
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Legacy project env key reads (checkout-local, shared common-dir and inherited primary keys) now use the same lstat, O_NOFOLLOW, size-bound and stable-descriptor discipline as the native reader, extracted into src/lib/private-file.ts. Key priority is unchanged. A symlinked, dangling, oversized or non-regular key file is refused with a fixed message. New key files are created with open(O_CREAT|O_EXCL|O_NOFOLLOW|O_WRONLY, 0600), fchmod 0600 and fsync, so an existing entry or dangling symlink is never followed or replaced. A concurrent creator's key is adopted. Encryption (env add --secret and the legacy migration) refuses a git-tracked selected or inherited key with a fixed, value-free message before any key copy. Decryption with a tracked key stays allowed for v4 compatibility. Legacy v1 values and the encrypted_file store now require canonical base64, a 12-byte IV, a 16-byte tag (authTagLength pinned) and a bounded ciphertext; all parse, tamper and wrong-key failures use fixed redacted errors. The envelope format, key derivation and v1 decryptability are unchanged. Refs HACK-1127 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…nfig Address verifier findings on the agent-client capability matrix: - Move the matrix renderer into scripts/generate-agent-client-capabilities.ts and add `bun run docs:agent-client-capabilities` (with `--check`), which rewrites only the generated section. The test compares the committed section with the rendered one and covers marker failures with closed codes. - Scope the model/permission policy scan to generated guidance surfaces (plugins/hack, .claude-plugin, .cursor-plugin, .agents through its skill symlinks, and the example agent configuration) instead of example compose files. Parse YAML and markdown frontmatter as YAML, fail closed on structured-config formats the scan cannot parse, and count a file as scanned only when it was parsed. - Treat reasoning-effort keys (reasoning_effort, model_reasoning_effort, frontmatter `effort`, nested effort/reasoning keys) as forbidden model settings, with negative controls. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Every pre-spawn refusal now comes from a closed catalogue (MCP_REFUSALS):
error {code, reason, message} uses an existing code, a closed reason and a
fixed message, and stderr repeats that message. Project names, ids, paths
and registry values are no longer echoed. Schema refusals name only keys
of the tool's own input schema.
An unknown tool name returns the SDK's in-band isError text result again
instead of a JSON-RPC -32602 protocol error, with a fixed message that
omits the requested name.
A canary test drives every refusal reason and the unknown-tool path and
asserts the canary never appears in the result, with no spawn or audit line.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…ting tests Seal authentic envelopes with 8- and 16-byte IVs and with ciphertext one byte over each parser bound, so only the parser guards can refuse them, and assert through a createDecipheriv spy that structural refusals happen before any decipher and that successful opens pass authTagLength 16. Covers the legacy project env, encrypted_file store and native env value parsers, with at-bound 12-byte-IV controls. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Interactive `hack init` now prints a non-mutating note that points at the optional Hack plugin and `hack agent onboard`. Repository-local export of Cursor rules, Claude hooks, Codex skills, AGENTS.md/CLAUDE.md sections and project MCP config is a separate opt-in whose confirm defaults to no and whose target list starts empty. The decision moves out of project.ts into src/agents/init-agent-integrations.ts. Doctor and the agent-prime freshness inventory now treat absent optional integrations as current. Doctor flags a path only when it exists and lacks the current revision marker (AGENTS.md/CLAUDE.md only when they carry a Hack-managed section). integration-sync counts only stale or errored checks; user-owned docs without a Hack section are not drift; retired legacy artifacts still are. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
config plan and config validate only treated the literal "base" as the base selection, so `--env default` (and DEFAULT/none) reached the native compiler as an overlay named "default" while env get, env list and the runtime commands selected base layers. Every CLI command that accepts --env now resolves it through one shared resolver (src/cli/env-selection.ts): omitted keeps the configured default overlay, base/default/none in any case select base layers, other names are normalized, and a non-empty value with no usable name characters is refused with the fixed "Invalid --env value." usage error instead of silently selecting base. Authored native dispatch uses the same resolver, and session workspace names stay env-base. docs/env.md gains a command and delivery matrix with one row per CLI_SPEC command that accepts --env; tests/env-command-matrix.test.ts keeps the rows and selector flags in sync with CLI_SPEC. The canonical agent guidance gains an env-composition section linking to the matrix; the content revision, plugin bundle, repository examples and CLI reference are regenerated. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Address the W10 verifier findings so integration sync and doctor agree: - checkAgentDocs marks a doc `unmanaged` only when it has neither the Hack start nor end marker. A doc with exactly one marker is a corrupted managed section and now reports a malformed-marker error, which sync counts as drift. Doctor treats the same doc as stale. - Add readOptionalTextFile, which uses lstat before reading so callers can tell "absent" from "present but unreadable". The Cursor rules, Codex skill, shared skill, hack-init skill and agent-doc checks now report an unreadable existing file as `error` (drift) instead of `missing` (optional, current). Doctor uses the same helper. - Add regression tests for start-only and end-only docs, plus mode-000 Hack-owned files and docs in fixture HOME/project roots, for both sync and doctor. Default `hack init` still writes no repository files. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The env add --secret refusal tests asserted the refusal text on stderr, but the default logger backend depends on the host: gum (stderr) when installed, clack (stdout) otherwise. Hosted macOS runners have no gum, so the refusal reached stdout and stderr was empty only in CI. Pin HACK_LOGGER=console in the CLI helper, matching the other CLI-spawning tests, so the stderr assertions hold on every host. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The project-name boundary suite still expected the old value-echoing "Ambiguous project name/ID" stderr from MCP. Assert the closed MCP_REFUSALS contract instead: exact code, reason and fixed message, spawned: false, no argv, and none of the duplicated names, registry ids or fixture root anywhere in the serialized result. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Temporary measurement only; reverted before the final commit. Writes closed labels and durations per native command to a per-scenario JSONL file and prints a summary in the docker-e2e job. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
A storage-bearing saved exec ran three full witness proofs (nine helper carriers) and a warm up/restart seven. Within one command and one mutation lease, an adjacent repeat with only read-only checks between it and the previous proof now reuses that completed kernel proof instead of three new helper carriers: - saved exec: the pre-spawn check reuses the preparation proof; the proof after the process stays fresh (3 -> 2 proofs); - up/restart without build, routing or file material: the first pre-spawn guard reuses the enrollment proof (warm 7 -> 6, cold seed path 6 -> 5). Reuse requires the same lease authority, engine, generation and reference and a byte-identical opening material binding to the one that opened and closed the recorded proof. Every host check (anchors, expectation, completion, binding, carrier artifact and lifetime) still runs; any verification consumes the record first, so a failure or binding change forces a fresh proof. Ordinary verification always proves. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Reverts the hosted measurement commit (closed-label cost trace, phase-trace routing, per-scenario summary step and artifact) now that the per-phase and per-call attribution is recorded in the pull request. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The networks scenario took 3409 s on next with three proofs per storage exec and ran 2275 s on the hosted engine with the coalesced proofs, so the 80 min budget raise from the witness recovery change returns to 60 min. The budget bounds a hung engine; no assertion or command deadline changes. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Storage witness proofs keep every fence; three exact costs are cut: - Engine-ID fences: for an explicit DOCKER_HOST=unix:///... selection, the first fence of a command under one exact binding (selection, docker executable, client config and socket identities) still uses `docker info` and must equal one direct GET /info on that socket; only then do later fences under that unchanged binding each make one fresh direct request instead of a CLI process that lists every client plugin. A refused admission keeps the CLI, a moved binding re-admits through the CLI, and an admitted direct failure refuses without fallback. Two exact back-to-back ID reads with nothing between them are collapsed (holder observation into carrier inspect; provision fence into the target observation). - Recorded command executables: the content digest is cached for one command by canonical path and complete stat identity (dev, ino, size, mtime and ctime in ns, mode, uid); every identity check still runs, any change re-reads, and racily fresh files are never cached. - Target observations: the witness's closing re-observation of a deferred-finish verify invocation is answered by the carrier's own closing observation of the same query when the rechecked material binding is unchanged and only reads ran between (one observation per proof). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Temporary measurement only; reverted before the final commit. Re-applies the X01 closed-label trace (reverting eb9a678) and adds point events for direct engine-ID reads and admissions, cached executable digests, target observations and reused closing observations, plus a shard 1 identity fence benchmark. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
An admitted direct engine-ID read that fails because the caller cancelled or its probe deadline expired now reports the CLI probe's existing closed cancel/timeout classification; that probe refuses before spawning anything. Every other admitted direct failure still refuses without CLI fallback. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- Per command on the synthetic engine: 81 of 86 engine-ID fences and 20 of 21 target observations per proof, with every proof kept; an admitted explicit Unix selection uses one CLI fence per command. - A changed daemon ID between two admitted fences refuses before any helper, workload or state change; a refused admission keeps every fence on the CLI. - A target change right after the verify carrier's closing observation is refused by the next remaining observation. - Admission, re-admission, no-fallback and cancellation controls on a real Unix server; executable digest reuse, replacement, same-size tamper, mode, racy-fresh and mid-command replacement controls. - Reference docs describe the three cuts and their limits. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Measurement is complete; the hosted trace run was 38211327829. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
… catalogue Plugin skills can now ship references at skills/<skill>/references/*.md from a typed registry (src/agents/skill-references.ts). The generator writes each reference with a recomputable content revision, removes stale ones, and links them from the plugin SKILL.md. Standalone hack-cli installs ship no references, so their render (and ownership fingerprint) is unchanged. The first reference is the hack-cli pattern catalogue, rendered from the typed register of all twelve HACK-P cards with dispositions, owners, missing contracts and value-free provenance. Tests check completeness, CLI_SPEC command resolution, a banned-recipe scan outside negative-example blocks, and an offline link contract over every packaged skill markdown file. External URLs in hack-install and hack-remote move under "Further reading". docs/agent-guidance.md records the reference contract and the promote/defer decision for the lifecycle, cleanup, checks, sessions, hack-run and hack-feedback skill candidates. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Seed an isolated HOME with sentinel Claude, Codex, Cursor and shared-skill config (including stale hack-cli copies) and two fixtures with customized AGENTS.md, CLAUDE.md, rules, skill copies, settings.local.json and .mcp.json. Run init --auto, init --auto --with codex, agent prime, agent prime --check, agent onboard, agent patterns, doctor --json, doctor --fix --no-interactive and setup sync --check twice each with HOME and HACK_HOME overridden, and require byte-identical hashes, no new client entries, git status changes only under .hack/, and each command's expected exit code. An explicit setup agents --agents-md is the positive control and must change exactly AGENTS.md. Docker is pointed at a missing socket and Mutagen at a stub so doctor --fix stays free of Docker and network effects; the hackd it starts is stopped. The scenario is registered in ALL_SCENARIOS and shard.ts places it in exactly one docker-e2e shard via the default duration hint. Refs: HACK-1124, HACK-1132, HACK-1155 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
HACK-1211 needs a matched, bounded way to reproduce the intermittent Bun crash and a repeatable record of crashes per hosted run. This adds the instruments only; it changes no test, timeout, assertion or pin. - bun-crash-experiment.yml runs only on workflow_dispatch or when the bun-crash-experiment label is added to a pull request. A labeled pull request runs the matched pair (1.3.9 baseline, 1.4.2 candidate) on its head; a dispatch runs one version at a chosen revision. It uses blacksmith-6vcpu-macos-15, contents: read, and timeout = budget + 15. The instrument comes from the workflow's commit, so older revisions can be measured. - scripts/bun-crash-loop.ts alternates the native HTTPS owner test with the full bun test. It never starts an iteration whose estimate (its initial guess or longest observed run) ends past the budget, and records a run still going at the deadline as overrun, not a crash. It writes a closed summary and keeps logs plus bun*.ips reports for a 7-day artifact. It never opens crash-report links. - scripts/ci-bun-crash-census.ts reads every attempt's test job through the caller's gh, downloads only failed-job logs into an owned temp dir that it removes, and prints per-version counts and crashing ids only. - Both use scripts/lib/bun-crash-classify.ts. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…tions Storage-witness engine-ID admissions now resolve the Docker CLI's endpoint selection the way the CLI does: a nonempty DOCKER_HOST, then DOCKER_CONTEXT, then the client config's currentContext, then the default context at unix:///var/run/docker.sock. A named context is read from its contexts/meta/<sha256>/meta.json through a no-follow binding; only a plain unix:/// docker endpoint with no TLS option, no unknown or duplicate field and no entry at the context's TLS path is eligible. TLS material is checked for absence by name and never opened. Missing, malformed, linked, TCP, SSH, TLS or header-bearing contexts, and DOCKER_HOST with DOCKER_CONTEXT, keep the CLI. Admission is unchanged: the first fence under a binding is the CLI read and must equal one direct GET /info on the resolved socket. The binding now also pins the context store entry and the absent TLS path, so a changed config, context entry, socket or executable is admitted through the CLI again. The ingress and VM-file observers, trusted without a CLI comparison, still accept only an explicit Unix DOCKER_HOST. Tests that run commands against a synthetic docker now pin an isolated client config naming a missing context, so they never read the contributor's Docker config or dial a real engine socket. A new opt-in test (HACK_TEST_DOCKER_CLI=1, run on docker-e2e shard 4) runs the real Docker CLI against two fake Unix engines for every selection. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Temporary measurement only; reverted before the final commit. Re-applies the X03 closed-label trace (6a4e118) without its identity benchmark, labels each engine-ID admission with its selection kind (host, default or context), counts direct reads as trace leaves, and prints the runner's Docker client selection. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Measurement is complete; the hosted trace run was 38225752202. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
… skill links Add a temp-root regression test proving generateAgentPlugins writes every registered references/*.md byte for byte and prunes stale reference markdown while keeping non-markdown and out-of-directory files. Extend the offline skill link contract to check Markdown reference-style definitions and HTML href/src attributes, with fixtures proving links into repository docs/ or external hosts are refused and in-plugin targets pass. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The executeWithLog test made a real Bun child kill itself with SIGSEGV, so every run wrote a bun-*.ips into the user's DiagnosticReports. In labeled mode the experiment's own full-suite iterations would also have counted those self-induced reports. - The real child now ends itself with SIGTERM, a non-crash signal that still exercises the "signal the harness did not send" path. - A pure classifier test feeds the exact Bun.spawn signal shapes (SIGSEGV, SIGABRT, SIGBUS, SIGILL, SIGTRAP, SIGTERM, SIGKILL). - A fake-executor loop test checks that signal deaths are recorded as crash/signal with a closed signal name. - The real-child test records the bun*.ips listing before and after and asserts it is unchanged. The experiment workflow's concurrency group now contends only for experiment events: a dispatch or a bun-crash-experiment label shares a group, and any other label gets a group keyed by its run id, so it can no longer replace or cancel a pending experiment run. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Conflicts resolved: none (clean merge of origin/next 6e9b6d9). generate:agent-plugins and docs:cli-reference produced no drift; no integration-ownership fingerprint change was required. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Conflicts resolved: - src/agents/integration-revision.ts: both sides recomputed the content revision (PR c262dbc28ebc, next d4ad1423585c from #282). The merged INSTRUCTION_SECTIONS (next's #282 canonical corrections plus this PR's env-composition section, which merged cleanly) hash to 3cb1b0eabdea. - .codex/skills/hack-cli/SKILL.md, .cursor/rules/hack.mdc, examples/basic/AGENTS.md, examples/basic/CLAUDE.md, plugins/hack/rules/hack.mdc, plugins/hack/skills/hack-cli/SKILL.md: only the "Content revision" line conflicted; set to 3cb1b0eabdea. All other lines from both sides are kept. generate:agent-plugins and docs:cli-reference produce no further changes; the codex skill and cursor rules match their renderer output. Also: appended the merged render fingerprints to KNOWN_RENDER_FINGERPRINTS (hack-cli-skill 6449442a8f230412d4e5f9e7, cursor-rules cf0a31e197f9034485413674) as tests/integration-ownership.test.ts requires. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Conflicts resolved (import blocks only): - src/agents/codex-skill.ts, src/agents/cursor.ts, src/agents/hack-init-skill.ts, src/agents/shared-skill.ts: next (#286) moved install/remove writes into integration-ownership.ts and reduced the fs import to readTextFile; this PR switched the check functions to readOptionalTextFile. Kept next's ownership-based install/remove bodies and the PR's unreadable-aware checks, so the fs import is now only readOptionalTextFile (ensureDir, pathExists and writeTextFileIfChanged are unused after #286; readTextFile is unused after this PR's check rewrite). src/commands/doctor.ts auto-merged: next's #283 Caddy-root inventory and this PR's inspectDoctorAgentIntegrations changes touch separate functions. No regenerated plugin/CLI reference diff; no new ownership fingerprint. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Conflicts resolved: none (clean automatic merge). Brings in next through 6e9b6d9, including #293, which records the current hack-cli-skill renders in KNOWN_RENDER_FINGERPRINTS and clears the hosted integration-ownership failure. No fingerprint append was needed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The env-composition section linked the command and delivery matrix by a bare GitHub URL. Packaged skills must work offline (#295), and that test fails once both changes land. Point at docs/env.md in words instead, bump the content revision, re-render the checked-in surfaces, and append the new hack-cli-skill and cursor-rules render fingerprints. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The gum-backed logger passed the log message as a bare argument, so a message starting with "-" or "--" (for example "--value-stdin requires ...") was parsed by gum's kong CLI as an unknown flag. gum printed its usage and "gum: error: unknown flag" to stderr before the logger fell back to clack. Every gum call site in src/ui/gum.ts now places free text (log message and structured fields, style/join text, confirm prompt, choose/filter options, file path, pager content, format template, spin command, version-check constraint) after "--", and binds valued flags such as --header, --placeholder, --prompt, --value, --title and --affirmative in single-token --flag=value form so a dash-leading value cannot be read as an option. gum invocations now go through a small GumRunner boundary so tests can assert argv without gum installed or any process being spawned. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Re-parents onto next after the queued PRs squashed in; no content change. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This comment has been minimized.
This comment has been minimized.
roodboi
marked this pull request as ready for review
October 12, 2026 19:02
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Problem
The gum-backed logger (
src/ui/logger.ts→tryGumLoginsrc/ui/gum.ts, chosen byHACK_LOGGERor by detecting gum) passed the log message to gum as a bare argument. When a message started with-or--, gum's kong parser read it as a flag. It printedgum: error: unknown flag ...and thegum logusage to stderr, and then the logger fell back to clack.gum styleandgum joinhad the same problem with dash-leading text.Change
src/ui/gum.tsthat takes free text now puts it after--. This covers log messages and structured fields, style/join text, the confirm prompt, choose/filter options, the file path, pager content, format templates, the wrapped spin command and the version-check constraint.--header,--placeholder,--prompt,--value,--title,--affirmative,--negative,--cursor, delimiters, and the rest) are now passed as one token,--flag=value. In the two-token form kong rejects a value that starts with-.GumRunnerboundary with asetGumRunnerForTestsseam, so tests can check argv without gum installed. The real runner still usesBun.spawn/Bun.spawnSyncwith the same stdio and env as before.tests/fixtures/gumnow skips a leading--forversion-check.How gum handles
--(checked with gum v0.17.0, the bundled version)gum log --level info -- "--value-stdin requires x"prints the message and exits 0. Without--it prints the usage andunknown flag.style,joinandformataccept--and print dash-leading text as-is.version-check -- '>=0.1'exits 0.spin --title=--weird -- trueexits 0. Inspin --show-output -- echo -- hi, gum removes the first--and the wrapped command gets-- hi.confirm,choose,filter,input,write,pagerandfile, called with--flag=-valueand-- -positional, all parse cleanly and stop only when they try to open the missing TTY. None printed a usage error.gum style --border-foreground -x hi(two-token form) prints the usage.--margin=-1is accepted.Validation
tests/gum-end-of-options.test.ts(12 tests) injects a recording runner and checks the argv for every call site, includinglogger.error/logger.successwith the gum backend selected. It does not need gum installed and spawns no process.--marker: 9 tests fail.tryGumLogargv, which puts--value-stdin requires --envbefore any marker, fails the 3 log/logger tests.log,styleandjoinprintgum: error: unknown flag --value-stdin requires --envand return failure. On the new module, all three render the text and succeed, andformatandversion-checksucceed too.bun testpasses 129/129 acrossgum.test.ts, the new test file,output-hygiene,display,control-plane-extensions,project-up-startup-state,global-command,project-run-command,lifecycle-json,integration-ownershipandagent-plugin-generation.bun run --cwd packages/cli typecheckpasses.bun run --cwd packages/cli checkreports 0 errors. Its warnings are existing ones and none are in the changed files.Gaps
confirm,choose,filter,input,write,pager,file) were checked only up to argument parsing. No TTY session was run.bun run testsuite and hosted CI have not run yet.🤖 Generated with Claude Code
Need help on this PR? Tag
@codesmith-botwith what you need. Autofix is disabled.