Repository navigation
feat(jelly): a truthful declaration (step 2) — #2, the CLI sign-in row - #10
Merged
Merged
Conversation
…on a fresh machine
… and home folders too)
Version 0.0.3 in package.json and the lockfile, the CHANGELOG's Unreleased section released as 0.0.3 (with the logo and "private": true since v0.0.2), and every install spec at #v0.0.3; the upgrade example removes #v0.0.2.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Step 2 of the owner's brief for boxd: a truthful declaration and the audit's boxd items.
boxd_harvestaccepts a work that never had a prompt: no transcript to import, the guest's git state is recorded and the proof is fresh, soboxd_dropapplies its usual guard (a clean tree drops; untracked, ignored or uncommitted files still refuse). The misleadingNOT_OURS→boxd_ensureanswer is gone. A resume of such a work no longer claims a transcript came back. Tests pin both directions. Closes A work that never had a session can't be harvested or dropped (NOT_OURS, then NOT_PROVEN) #2./boxd-statusstarts with boxd CLI: signed in when the CLI answered themachine liststatus already makes (no new boxd call), or not signed in / not reachable with the CLI's reason; then the next step isboxd auth login.boxd_statusreturnscli, the RPCsignedInandsignInError. The Account row folds into it.boxd machine new, removed again) reports OpenCode 1.19.5, so the README's first-run text is right;docs/architecture.mdrecords the check.docs/jelly.mdno longer says a declaredallowchanges nothing in Jelly; it says Jelly appliesaccessitself from each tool'sreadOnly(jelly mastereffectOfAccess), counts the tools (9 declared, 2 read-only) and says where the CLI sign-in shows. The shared "allow"/unknown-key block is not written (waits on jelly's wording).test/support/jelly-kit.ts, byte-identical to the family copy (sha256ab599abc…), pinned inscripts/check-copies.mjs;jelly.test.tsrunsdeclarationProblemsanddocProblems.The declaration itself is unchanged (9 tools, all
allow; no MCP server, so no capture applies). It validates against jelly masterPluginDeclarationSchemaat97e7fcaabde6bd5568bab66196be971d3ac72d03. No release prep (the lead adds it).npm run checkpassed locally.