@arbiterforge/ca-pi 0.10.6 → 0.10.7

package/README.md

@@ -10,7 +10,7 @@ project context. You decide. codeArbiter enforces.
 <img alt="Claude Code plugin" src="https://img.shields.io/badge/Claude_Code-plugin-d97757">
 <img alt="Codex plugin" src="https://img.shields.io/badge/OpenAI_Codex-plugin-10a37f">
 <img alt="Pi Feature Forge preview" src="https://img.shields.io/badge/ca--pi-Feature_Forge_preview-d97757">
-<img alt="version 2.17.5" src="https://img.shields.io/badge/version-2.17.5-2b7489">
+<img alt="version 2.17.6" src="https://img.shields.io/badge/version-2.17.6-2b7489">
 <img alt="core lanes" src="https://img.shields.io/badge/core_lanes-18-555">
 <img alt="skills" src="https://img.shields.io/badge/skills-23-555">
 <img alt="agents" src="https://img.shields.io/badge/agents-19-555">
@@ -117,7 +117,7 @@ Approve the normal plugin trust prompt, open the target repository, and continue
 
 ### Codex CLI
 
-The public GitHub-slug flow is **available now**. The repository currently ships `ca-codex 0.9.5`;
+The public GitHub-slug flow is **available now**. The repository currently ships `ca-codex 0.9.6`;
 the dated end-to-end public-install record discovered `ca-codex 0.2.4` from release `v2.8.13`.
 Current packaging and shared-core parity are continuously verified, while that dated live-install
 record stays labeled rather than being silently promoted to evidence for a newer adapter:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.10.6",
+  "version": "0.10.7",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",

package/plugins/ca-pi/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to `ca-pi` are documented in this file.
 
 ## [Unreleased]
 
+## [0.10.7] - 2026-09-06
+
+### Fixed
+
+- Recover an unsettled mode-enter audit row on a repeated request instead of reporting an ineffective posture as a no-op.
+
 ## [0.10.6] - 2026-09-06
 
 ### Changed

package/plugins/ca-pi/hooks/_host.py

@@ -11,7 +11,7 @@ import hostapi  # noqa: E402
 class PiHost(hostapi.Host):
     name = "pi"
     adapter_name = "@arbiterforge/ca-pi"
-    adapter_version = "0.10.6"
+    adapter_version = "0.10.7"
     update_target = "ca-pi"
     update_tag_prefix = "ca-pi-v"
     update_command = "pi update npm:@arbiterforge/ca-pi"

package/plugins/ca-pi/hooks/_modelib.py

@@ -353,13 +353,14 @@ def flip(session_id, mode, root=None, payload=None, host_name=None, now=None):
     """Attempt to set `session_id`'s mode to `mode`. Returns one of
     FLIP_FLIPPED / FLIP_NOOP / FLIP_FAILED. Never raises.
 
-    AC-6: a flip TO THE ALREADY-ACTIVE mode is a no-op — no write is even
-    attempted and no audit row is appended, so `overrides.log` is left
-    byte-identical. This is also the mechanism behind T-14's fail-direction
-    asymmetry: once a failed flip has left the session's resolved mode
-    unchanged, any LATER flip back to that same resolved mode is a no-op
-    under ANY filesystem state — including a markers directory that cannot
-    be written to at all — because a no-op never touches disk.
+    AC-6: a flip TO AN ALREADY-ACTIVE, LEDGER-BACKED mode is a no-op — no
+    write is attempted and no audit row is appended, so `overrides.log` is
+    left byte-identical. The default arbiter posture needs no authorizing row.
+    If a prior non-arbiter write landed but its staged enter row did not, a
+    repeat request retries settlement: success reports the effective flip,
+    while another failure stays explicit instead of claiming the posture is
+    already active. This preserves T-14's fail direction because an unbacked
+    non-arbiter marker still cannot authorize persona composition.
 
     On a genuine transition the order is deliberate: write first, audit row
     ONLY on a confirmed write. AC-11's `ledger_backs` exists to catch exactly
@@ -369,7 +370,12 @@ def flip(session_id, mode, root=None, payload=None, host_name=None, now=None):
     root = root if root is not None else marker_root(payload)
     current, _diag = current_mode(session_id, root=root, payload=payload)
     if current == mode:
-        return FLIP_NOOP
+        if mode == MODES[0] or ledger_backs(root, mode, session_id=session_id):
+            return FLIP_NOOP
+        _settle_dev_close(root, host_name=host_name)
+        return (FLIP_FLIPPED
+                if ledger_backs(root, mode, session_id=session_id)
+                else FLIP_FAILED)
     if not write_mode(session_id, mode, root=root, payload=payload):
         return FLIP_FAILED
     # ADR-0030 position 4: EVERY transition row is staged through the #396

package/plugins/ca-pi/hooks/hostapi.py

@@ -313,7 +313,7 @@ class Host:
 
     name = "claude"
     adapter_name = "ca"
-    adapter_version = "2.17.5"
+    adapter_version = "2.17.6"
 
     # Update-notifier descriptor. Each independently versioned host overrides
     # these three values in its per-plugin _host.py. Keeping the target,