Skip to content

fix(logger): pass messages to gum after an end-of-options marker - #311

Merged
roodboi merged 49 commits into
nextfrom
wf/c6-gum-dash-b7
Oct 12, 2026
Merged

roodboi merged 49 commits into
nextfrom
wf/c6-gum-dash-b7

Conversation

@roodboi

@roodboi roodboi commented Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

Problem

The gum-backed logger (src/ui/logger.ts → tryGumLog in src/ui/gum.ts, chosen by HACK_LOGGER or by detecting gum) passed the log message to gum as a bare argument. When a message started with - or --, gum's kong parser read it as a flag. It printed gum: error: unknown flag ... and the gum log usage to stderr, and then the logger fell back to clack. gum style and gum join had the same problem with dash-leading text.

Change

  • Every gum call in src/ui/gum.ts that takes free text now puts it after --. This covers log messages and structured fields, style/join text, the confirm prompt, choose/filter options, the file path, pager content, format templates, the wrapped spin command and the version-check constraint.
  • Flags that take a value (--header, --placeholder, --prompt, --value, --title, --affirmative, --negative, --cursor, delimiters, and the rest) are now passed as one token, --flag=value. In the two-token form kong rejects a value that starts with -.
  • All gum calls now go through a small GumRunner boundary with a setGumRunnerForTests seam, so tests can check argv without gum installed. The real runner still uses Bun.spawn / Bun.spawnSync with the same stdio and env as before.
  • tests/fixtures/gum now skips a leading -- for version-check.

How gum handles -- (checked with gum v0.17.0, the bundled version)

  • gum log --level info -- "--value-stdin requires x" prints the message and exits 0. Without -- it prints the usage and unknown flag.
  • style, join and format accept -- and print dash-leading text as-is. version-check -- '>=0.1' exits 0.
  • spin --title=--weird -- true exits 0. In spin --show-output -- echo -- hi, gum removes the first -- and the wrapped command gets -- hi.
  • confirm, choose, filter, input, write, pager and file, called with --flag=-value and -- -positional, all parse cleanly and stop only when they try to open the missing TTY. None printed a usage error.
  • gum style --border-foreground -x hi (two-token form) prints the usage. --margin=-1 is accepted.

Validation

  • New tests/gum-end-of-options.test.ts (12 tests) injects a recording runner and checks the argv for every call site, including logger.error/logger.success with the gum backend selected. It does not need gum installed and spawns no process.
  • Mutation checks (each one breaks the code on purpose; every new test failed under at least one):
    • Removing the -- marker: 9 tests fail.
    • Going back to two-token flag values: 10 tests fail.
    • Negative control: the old tryGumLog argv, which puts --value-stdin requires --env before any marker, fails the 3 log/logger tests.
    • Moving style text, the confirm prompt, the spin command or choose options back before the flags: 1 test fails each time.
  • Manual check against the real gum binary: on the old module, log, style and join print gum: error: unknown flag --value-stdin requires --env and return failure. On the new module, all three render the text and succeed, and format and version-check succeed too.
  • bun test passes 129/129 across gum.test.ts, the new test file, output-hygiene, display, control-plane-extensions, project-up-startup-state, global-command, project-run-command, lifecycle-json, integration-ownership and agent-plugin-generation.
  • bun run --cwd packages/cli typecheck passes. bun run --cwd packages/cli check reports 0 errors. Its warnings are existing ones and none are in the changed files.

Gaps

  • The interactive commands (confirm, choose, filter, input, write, pager, file) were checked only up to argument parsing. No TTY session was run.
  • The full bun run test suite and hosted CI have not run yet.

🤖 Generated with Claude Code


View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.

roodboi and others added 30 commits October 11, 2026 21:28
Add a data-only matrix (src/agents/client-capabilities.ts) that classifies
packaging, skill discovery, hooks, plugin MCP, standalone MCP, rules and UI
for Codex, Claude Code, Cursor and standalone consumers. Each cell records
status, evidence class, evidence ref, observed client version, source SHA
and host label. The rendered reference doc carries companion-package layout
and model-policy ownership decisions.

Tests enforce that every cell is classified, verified cells cite an existing
fixture-strength test, manifest or listing evidence never verifies loading,
and manifest-declared components agree with the matrix. The plugin
generation test gains a negative-controlled scan of plugins/hack and
examples/basic for model, permission and output-style settings and
non-primer hooks, plus a skill inventory check against the generator and
docs/integrations.md, which now names all four shipped skills.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
hack.project.run built `run <flags> <service> <cmd...>`, so hack's own
parser consumed child flags: `node --version` printed hack's version and
`--branch other` retargeted the instance. Run now emits
`run <flags> -- <service> <cmd...>` and every option value is fused as
`--opt=value` across all tools.

- Validate service, services, branch, profiles, logs service and open
  target against a compose-identifier pattern (no leading '-', no empty
  value; branches may also contain '/').
- tail, maxEvents, maxMs and timeoutMs are positive integers with hard
  ceilings (provisional F27 settings); effective limits are echoed in
  data.limits.
- Every tool carries annotations (readOnly for list/status/logs/open,
  destructive for down/run/init, openWorld false).
- Refusals return error{code, message} with existing codes (E_USAGE,
  E_PROJECT_NOT_FOUND) and spawned:false. A typed tools/call dispatcher
  validates before any handler runs, so refused calls leave no argv
  entry and no audit line.
- Children spawn with HACK_NO_INTERACTIVE=1 on a copy of the frozen
  session env.

Refs HACK-1133, HACK-1134

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Legacy project env key reads (checkout-local, shared common-dir and
inherited primary keys) now use the same lstat, O_NOFOLLOW, size-bound and
stable-descriptor discipline as the native reader, extracted into
src/lib/private-file.ts. Key priority is unchanged. A symlinked, dangling,
oversized or non-regular key file is refused with a fixed message.

New key files are created with open(O_CREAT|O_EXCL|O_NOFOLLOW|O_WRONLY,
0600), fchmod 0600 and fsync, so an existing entry or dangling symlink is
never followed or replaced. A concurrent creator's key is adopted.

Encryption (env add --secret and the legacy migration) refuses a git-tracked
selected or inherited key with a fixed, value-free message before any key
copy. Decryption with a tracked key stays allowed for v4 compatibility.

Legacy v1 values and the encrypted_file store now require canonical base64,
a 12-byte IV, a 16-byte tag (authTagLength pinned) and a bounded ciphertext;
all parse, tamper and wrong-key failures use fixed redacted errors. The
envelope format, key derivation and v1 decryptability are unchanged.

Refs HACK-1127

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…nfig

Address verifier findings on the agent-client capability matrix:

- Move the matrix renderer into scripts/generate-agent-client-capabilities.ts
  and add `bun run docs:agent-client-capabilities` (with `--check`), which
  rewrites only the generated section. The test compares the committed
  section with the rendered one and covers marker failures with closed codes.
- Scope the model/permission policy scan to generated guidance surfaces
  (plugins/hack, .claude-plugin, .cursor-plugin, .agents through its skill
  symlinks, and the example agent configuration) instead of example compose
  files. Parse YAML and markdown frontmatter as YAML, fail closed on
  structured-config formats the scan cannot parse, and count a file as
  scanned only when it was parsed.
- Treat reasoning-effort keys (reasoning_effort, model_reasoning_effort,
  frontmatter `effort`, nested effort/reasoning keys) as forbidden model
  settings, with negative controls.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Every pre-spawn refusal now comes from a closed catalogue (MCP_REFUSALS):
error {code, reason, message} uses an existing code, a closed reason and a
fixed message, and stderr repeats that message. Project names, ids, paths
and registry values are no longer echoed. Schema refusals name only keys
of the tool's own input schema.

An unknown tool name returns the SDK's in-band isError text result again
instead of a JSON-RPC -32602 protocol error, with a fixed message that
omits the requested name.

A canary test drives every refusal reason and the unknown-tool path and
asserts the canary never appears in the result, with no spawn or audit line.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…ting tests

Seal authentic envelopes with 8- and 16-byte IVs and with ciphertext one
byte over each parser bound, so only the parser guards can refuse them, and
assert through a createDecipheriv spy that structural refusals happen before
any decipher and that successful opens pass authTagLength 16. Covers the
legacy project env, encrypted_file store and native env value parsers, with
at-bound 12-byte-IV controls.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Interactive `hack init` now prints a non-mutating note that points at the
optional Hack plugin and `hack agent onboard`. Repository-local export of
Cursor rules, Claude hooks, Codex skills, AGENTS.md/CLAUDE.md sections and
project MCP config is a separate opt-in whose confirm defaults to no and
whose target list starts empty. The decision moves out of project.ts into
src/agents/init-agent-integrations.ts.

Doctor and the agent-prime freshness inventory now treat absent optional
integrations as current. Doctor flags a path only when it exists and lacks
the current revision marker (AGENTS.md/CLAUDE.md only when they carry a
Hack-managed section). integration-sync counts only stale or errored
checks; user-owned docs without a Hack section are not drift; retired
legacy artifacts still are.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
config plan and config validate only treated the literal "base" as the
base selection, so `--env default` (and DEFAULT/none) reached the native
compiler as an overlay named "default" while env get, env list and the
runtime commands selected base layers.

Every CLI command that accepts --env now resolves it through one shared
resolver (src/cli/env-selection.ts): omitted keeps the configured default
overlay, base/default/none in any case select base layers, other names are
normalized, and a non-empty value with no usable name characters is refused
with the fixed "Invalid --env value." usage error instead of silently
selecting base. Authored native dispatch uses the same resolver, and
session workspace names stay env-base.

docs/env.md gains a command and delivery matrix with one row per CLI_SPEC
command that accepts --env; tests/env-command-matrix.test.ts keeps the rows
and selector flags in sync with CLI_SPEC. The canonical agent guidance gains
an env-composition section linking to the matrix; the content revision,
plugin bundle, repository examples and CLI reference are regenerated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Address the W10 verifier findings so integration sync and doctor agree:

- checkAgentDocs marks a doc `unmanaged` only when it has neither the
  Hack start nor end marker. A doc with exactly one marker is a corrupted
  managed section and now reports a malformed-marker error, which sync
  counts as drift. Doctor treats the same doc as stale.
- Add readOptionalTextFile, which uses lstat before reading so callers
  can tell "absent" from "present but unreadable". The Cursor rules,
  Codex skill, shared skill, hack-init skill and agent-doc checks now
  report an unreadable existing file as `error` (drift) instead of
  `missing` (optional, current). Doctor uses the same helper.
- Add regression tests for start-only and end-only docs, plus mode-000
  Hack-owned files and docs in fixture HOME/project roots, for both
  sync and doctor.

Default `hack init` still writes no repository files.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The env add --secret refusal tests asserted the refusal text on stderr, but
the default logger backend depends on the host: gum (stderr) when installed,
clack (stdout) otherwise. Hosted macOS runners have no gum, so the refusal
reached stdout and stderr was empty only in CI. Pin HACK_LOGGER=console in
the CLI helper, matching the other CLI-spawning tests, so the stderr
assertions hold on every host.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The project-name boundary suite still expected the old value-echoing
"Ambiguous project name/ID" stderr from MCP. Assert the closed
MCP_REFUSALS contract instead: exact code, reason and fixed message,
spawned: false, no argv, and none of the duplicated names, registry ids
or fixture root anywhere in the serialized result.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Temporary measurement only; reverted before the final commit. Writes closed
labels and durations per native command to a per-scenario JSONL file and
prints a summary in the docker-e2e job.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
A storage-bearing saved exec ran three full witness proofs (nine helper
carriers) and a warm up/restart seven. Within one command and one mutation
lease, an adjacent repeat with only read-only checks between it and the
previous proof now reuses that completed kernel proof instead of three new
helper carriers:

- saved exec: the pre-spawn check reuses the preparation proof; the proof
  after the process stays fresh (3 -> 2 proofs);
- up/restart without build, routing or file material: the first pre-spawn
  guard reuses the enrollment proof (warm 7 -> 6, cold seed path 6 -> 5).

Reuse requires the same lease authority, engine, generation and reference
and a byte-identical opening material binding to the one that opened and
closed the recorded proof. Every host check (anchors, expectation,
completion, binding, carrier artifact and lifetime) still runs; any
verification consumes the record first, so a failure or binding change
forces a fresh proof. Ordinary verification always proves.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Reverts the hosted measurement commit (closed-label cost trace, phase-trace
routing, per-scenario summary step and artifact) now that the per-phase and
per-call attribution is recorded in the pull request.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The networks scenario took 3409 s on next with three proofs per storage exec
and ran 2275 s on the hosted engine with the coalesced proofs, so the 80 min
budget raise from the witness recovery change returns to 60 min. The budget
bounds a hung engine; no assertion or command deadline changes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Storage witness proofs keep every fence; three exact costs are cut:

- Engine-ID fences: for an explicit DOCKER_HOST=unix:///... selection, the
  first fence of a command under one exact binding (selection, docker
  executable, client config and socket identities) still uses `docker info`
  and must equal one direct GET /info on that socket; only then do later
  fences under that unchanged binding each make one fresh direct request
  instead of a CLI process that lists every client plugin. A refused
  admission keeps the CLI, a moved binding re-admits through the CLI, and an
  admitted direct failure refuses without fallback. Two exact back-to-back
  ID reads with nothing between them are collapsed (holder observation into
  carrier inspect; provision fence into the target observation).
- Recorded command executables: the content digest is cached for one command
  by canonical path and complete stat identity (dev, ino, size, mtime and
  ctime in ns, mode, uid); every identity check still runs, any change
  re-reads, and racily fresh files are never cached.
- Target observations: the witness's closing re-observation of a
  deferred-finish verify invocation is answered by the carrier's own closing
  observation of the same query when the rechecked material binding is
  unchanged and only reads ran between (one observation per proof).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Temporary measurement only; reverted before the final commit. Re-applies the
X01 closed-label trace (reverting eb9a678) and adds point events for direct
engine-ID reads and admissions, cached executable digests, target observations
and reused closing observations, plus a shard 1 identity fence benchmark.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
An admitted direct engine-ID read that fails because the caller cancelled or
its probe deadline expired now reports the CLI probe's existing closed
cancel/timeout classification; that probe refuses before spawning anything.
Every other admitted direct failure still refuses without CLI fallback.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- Per command on the synthetic engine: 81 of 86 engine-ID fences and 20 of 21
  target observations per proof, with every proof kept; an admitted explicit
  Unix selection uses one CLI fence per command.
- A changed daemon ID between two admitted fences refuses before any helper,
  workload or state change; a refused admission keeps every fence on the CLI.
- A target change right after the verify carrier's closing observation is
  refused by the next remaining observation.
- Admission, re-admission, no-fallback and cancellation controls on a real
  Unix server; executable digest reuse, replacement, same-size tamper, mode,
  racy-fresh and mid-command replacement controls.
- Reference docs describe the three cuts and their limits.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Measurement is complete; the hosted trace run was 38211327829.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
… catalogue

Plugin skills can now ship references at skills/<skill>/references/*.md from
a typed registry (src/agents/skill-references.ts). The generator writes each
reference with a recomputable content revision, removes stale ones, and links
them from the plugin SKILL.md. Standalone hack-cli installs ship no
references, so their render (and ownership fingerprint) is unchanged.

The first reference is the hack-cli pattern catalogue, rendered from the typed
register of all twelve HACK-P cards with dispositions, owners, missing
contracts and value-free provenance. Tests check completeness, CLI_SPEC
command resolution, a banned-recipe scan outside negative-example blocks, and
an offline link contract over every packaged skill markdown file. External
URLs in hack-install and hack-remote move under "Further reading".

docs/agent-guidance.md records the reference contract and the promote/defer
decision for the lifecycle, cleanup, checks, sessions, hack-run and
hack-feedback skill candidates.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Seed an isolated HOME with sentinel Claude, Codex, Cursor and shared-skill
config (including stale hack-cli copies) and two fixtures with customized
AGENTS.md, CLAUDE.md, rules, skill copies, settings.local.json and .mcp.json.
Run init --auto, init --auto --with codex, agent prime, agent prime --check,
agent onboard, agent patterns, doctor --json, doctor --fix --no-interactive
and setup sync --check twice each with HOME and HACK_HOME overridden, and
require byte-identical hashes, no new client entries, git status changes only
under .hack/, and each command's expected exit code. An explicit
setup agents --agents-md is the positive control and must change exactly
AGENTS.md.

Docker is pointed at a missing socket and Mutagen at a stub so doctor --fix
stays free of Docker and network effects; the hackd it starts is stopped.
The scenario is registered in ALL_SCENARIOS and shard.ts places it in
exactly one docker-e2e shard via the default duration hint.

Refs: HACK-1124, HACK-1132, HACK-1155

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
HACK-1211 needs a matched, bounded way to reproduce the intermittent Bun
crash and a repeatable record of crashes per hosted run. This adds the
instruments only; it changes no test, timeout, assertion or pin.

- bun-crash-experiment.yml runs only on workflow_dispatch or when the
  bun-crash-experiment label is added to a pull request. A labeled pull
  request runs the matched pair (1.3.9 baseline, 1.4.2 candidate) on its
  head; a dispatch runs one version at a chosen revision. It uses
  blacksmith-6vcpu-macos-15, contents: read, and timeout = budget + 15.
  The instrument comes from the workflow's commit, so older revisions
  can be measured.
- scripts/bun-crash-loop.ts alternates the native HTTPS owner test with
  the full bun test. It never starts an iteration whose estimate (its
  initial guess or longest observed run) ends past the budget, and
  records a run still going at the deadline as overrun, not a crash. It
  writes a closed summary and keeps logs plus bun*.ips reports for a
  7-day artifact. It never opens crash-report links.
- scripts/ci-bun-crash-census.ts reads every attempt's test job through
  the caller's gh, downloads only failed-job logs into an owned temp dir
  that it removes, and prints per-version counts and crashing ids only.
- Both use scripts/lib/bun-crash-classify.ts.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…tions

Storage-witness engine-ID admissions now resolve the Docker CLI's endpoint
selection the way the CLI does: a nonempty DOCKER_HOST, then DOCKER_CONTEXT,
then the client config's currentContext, then the default context at
unix:///var/run/docker.sock. A named context is read from its
contexts/meta/<sha256>/meta.json through a no-follow binding; only a plain
unix:/// docker endpoint with no TLS option, no unknown or duplicate field and
no entry at the context's TLS path is eligible. TLS material is checked for
absence by name and never opened. Missing, malformed, linked, TCP, SSH, TLS or
header-bearing contexts, and DOCKER_HOST with DOCKER_CONTEXT, keep the CLI.

Admission is unchanged: the first fence under a binding is the CLI read and
must equal one direct GET /info on the resolved socket. The binding now also
pins the context store entry and the absent TLS path, so a changed config,
context entry, socket or executable is admitted through the CLI again. The
ingress and VM-file observers, trusted without a CLI comparison, still accept
only an explicit Unix DOCKER_HOST.

Tests that run commands against a synthetic docker now pin an isolated client
config naming a missing context, so they never read the contributor's Docker
config or dial a real engine socket. A new opt-in test (HACK_TEST_DOCKER_CLI=1,
run on docker-e2e shard 4) runs the real Docker CLI against two fake Unix
engines for every selection.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Temporary measurement only; reverted before the final commit. Re-applies the
X03 closed-label trace (6a4e118) without its identity benchmark, labels each
engine-ID admission with its selection kind (host, default or context), counts
direct reads as trace leaves, and prints the runner's Docker client selection.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Measurement is complete; the hosted trace run was 38225752202.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
roodboi and others added 19 commits October 12, 2026 06:15
… skill links

Add a temp-root regression test proving generateAgentPlugins writes every
registered references/*.md byte for byte and prunes stale reference markdown
while keeping non-markdown and out-of-directory files.

Extend the offline skill link contract to check Markdown reference-style
definitions and HTML href/src attributes, with fixtures proving links into
repository docs/ or external hosts are refused and in-plugin targets pass.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The executeWithLog test made a real Bun child kill itself with SIGSEGV, so
every run wrote a bun-*.ips into the user's DiagnosticReports. In labeled
mode the experiment's own full-suite iterations would also have counted
those self-induced reports.

- The real child now ends itself with SIGTERM, a non-crash signal that
  still exercises the "signal the harness did not send" path.
- A pure classifier test feeds the exact Bun.spawn signal shapes
  (SIGSEGV, SIGABRT, SIGBUS, SIGILL, SIGTRAP, SIGTERM, SIGKILL).
- A fake-executor loop test checks that signal deaths are recorded as
  crash/signal with a closed signal name.
- The real-child test records the bun*.ips listing before and after and
  asserts it is unchanged.

The experiment workflow's concurrency group now contends only for
experiment events: a dispatch or a bun-crash-experiment label shares a
group, and any other label gets a group keyed by its run id, so it can no
longer replace or cancel a pending experiment run.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Conflicts resolved: none (clean merge of origin/next 6e9b6d9).
generate:agent-plugins and docs:cli-reference produced no drift; no
integration-ownership fingerprint change was required.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
No conflicts: git merged origin/next (6e9b6d9) cleanly.
docs/integrations.md auto-merged: next's standalone install/remove
ownership paragraph (#286) and this PR's four-skill plugin wording
and capability-matrix link are both kept.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Conflicts resolved:
- src/agents/integration-revision.ts: both sides recomputed the content
  revision (PR c262dbc28ebc, next d4ad1423585c from #282). The merged
  INSTRUCTION_SECTIONS (next's #282 canonical corrections plus this PR's
  env-composition section, which merged cleanly) hash to 3cb1b0eabdea.
- .codex/skills/hack-cli/SKILL.md, .cursor/rules/hack.mdc,
  examples/basic/AGENTS.md, examples/basic/CLAUDE.md,
  plugins/hack/rules/hack.mdc, plugins/hack/skills/hack-cli/SKILL.md:
  only the "Content revision" line conflicted; set to 3cb1b0eabdea. All
  other lines from both sides are kept. generate:agent-plugins and
  docs:cli-reference produce no further changes; the codex skill and
  cursor rules match their renderer output.

Also: appended the merged render fingerprints to KNOWN_RENDER_FINGERPRINTS
(hack-cli-skill 6449442a8f230412d4e5f9e7, cursor-rules
cf0a31e197f9034485413674) as tests/integration-ownership.test.ts requires.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Conflicts resolved (import blocks only):
- src/agents/codex-skill.ts, src/agents/cursor.ts,
  src/agents/hack-init-skill.ts, src/agents/shared-skill.ts:
  next (#286) moved install/remove writes into integration-ownership.ts
  and reduced the fs import to readTextFile; this PR switched the check
  functions to readOptionalTextFile. Kept next's ownership-based
  install/remove bodies and the PR's unreadable-aware checks, so the
  fs import is now only readOptionalTextFile (ensureDir, pathExists and
  writeTextFileIfChanged are unused after #286; readTextFile is unused
  after this PR's check rewrite).

src/commands/doctor.ts auto-merged: next's #283 Caddy-root inventory and
this PR's inspectDoctorAgentIntegrations changes touch separate functions.
No regenerated plugin/CLI reference diff; no new ownership fingerprint.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Conflicts resolved: none (clean automatic merge).

Brings in next through 6e9b6d9, including #293, which records the
current hack-cli-skill renders in KNOWN_RENDER_FINGERPRINTS and clears the
hosted integration-ownership failure. No fingerprint append was needed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The env-composition section linked the command and delivery matrix by a
bare GitHub URL. Packaged skills must work offline (#295), and that test
fails once both changes land. Point at docs/env.md in words instead,
bump the content revision, re-render the checked-in surfaces, and append
the new hack-cli-skill and cursor-rules render fingerprints.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The gum-backed logger passed the log message as a bare argument, so a
message starting with "-" or "--" (for example "--value-stdin requires
...") was parsed by gum's kong CLI as an unknown flag. gum printed its
usage and "gum: error: unknown flag" to stderr before the logger fell
back to clack.

Every gum call site in src/ui/gum.ts now places free text (log message
and structured fields, style/join text, confirm prompt, choose/filter
options, file path, pager content, format template, spin command,
version-check constraint) after "--", and binds valued flags such as
--header, --placeholder, --prompt, --value, --title and --affirmative
in single-token --flag=value form so a dash-leading value cannot be
read as an option.

gum invocations now go through a small GumRunner boundary so tests can
assert argv without gum installed or any process being spawned.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Re-parents onto next after the queued PRs squashed in; no content change.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@roodboi
roodboi changed the base branch from train/queue-preview to next October 12, 2026 14:10
roodboi added a commit that referenced this pull request Oct 12, 2026
Stack PR #302 on PR #311.

Conflicted files: none. The two change sets are disjoint (#302:
env-file and secret-store hygiene; #311: src/ui/gum.ts with its tests
and fixture), so git merged them cleanly. No generated files changed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@blacksmith-sh

This comment has been minimized.

@roodboi roodboi added the bun-crash-experiment Runs the HACK-1211 Bun crash experiment (hosted macOS minutes) label Oct 12, 2026
@roodboi
roodboi marked this pull request as ready for review October 12, 2026 19:02
@roodboi
roodboi merged commit 4416d32 into next Oct 12, 2026
49 of 51 checks passed
@roodboi
roodboi deleted the wf/c6-gum-dash-b7 branch October 12, 2026 19:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bun-crash-experiment Runs the HACK-1211 Bun crash experiment (hosted macOS minutes)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant