@arbiterforge/ca-pi 0.16.3 → 0.16.5

package/README.md

@@ -10,7 +10,7 @@ and durable project context. You decide. codeArbiter enforces.
 <img alt="Claude Code plugin" src="https://img.shields.io/badge/Claude_Code-plugin-d97757">
 <img alt="Codex plugin" src="https://img.shields.io/badge/OpenAI_Codex-plugin-10a37f">
 <img alt="Pi Feature Forge preview" src="https://img.shields.io/badge/ca--pi-Feature_Forge_preview-d97757">
-<img alt="version 2.24.3" src="https://img.shields.io/badge/version-2.24.3-2b7489">
+<img alt="version 2.24.4" src="https://img.shields.io/badge/version-2.24.4-2b7489">
 <img alt="core lanes" src="https://img.shields.io/badge/core_lanes-18-555">
 <img alt="skills" src="https://img.shields.io/badge/skills-22-555">
 <img alt="agents" src="https://img.shields.io/badge/agents-20-555">
@@ -183,7 +183,7 @@ Replace `<version>` with the numeric suffix from the chosen tag while retaining
 it is a partial install that cannot author typed HTML specs and plans; use the npm channel for
 that.
 
-Pi 1.0.0 is the supported host for this release line. Generated aliases use `/ca-*`;
+Pi 1.0.2 is the supported host for this release line. Generated aliases use `/ca-*`;
 `/skill:ca-*` is the host-native fallback. Every `ca-pi-v*` tag is also published to npm as
 `npm:@arbiterforge/ca-pi` with provenance (ADR-0029); the pinned Git tag remains the reproducible
 install. The [Pi runbook](./docs/pi-parity-testing.md) covers isolated install, trust, verification,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.16.3",
+  "version": "0.16.5",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",

package/plugins/ca-pi/CHANGELOG.md

@@ -4,6 +4,22 @@ All notable changes to `ca-pi` are documented in this file.
 
 ## [Unreleased]
 
+## [0.16.5] - 2026-10-05
+
+### Changed
+
+- Promote the tested Pi host window through exact Pi 1.0.2 with a reviewed
+  managed-install lock, clearing the three brace-expansion advisories.
+
+## [0.16.4] - 2026-10-05
+
+### Fixed
+
+- Carry the shared feature-context fix for valid native artifact IDs without
+  mandatory `SPEC-` and `PLAN-` prefixes.
+- Carry native typed record reordering with preserved identities and history;
+  changed plan content retains its normal approval requirement.
+
 ## [0.16.3] - 2026-10-05
 
 ### Fixed

package/plugins/ca-pi/extensions/codearbiter-child.js

@@ -629,7 +629,7 @@ function resolvePythonCommand(platform = process.platform, probe = systemPythonP
 }
 
 // src/compatibility.ts
-var SUPPORTED_PI_VERSIONS = /* @__PURE__ */ new Set(["1.0.0"]);
+var SUPPORTED_PI_VERSIONS = /* @__PURE__ */ new Set(["1.0.2"]);
 var MINIMUM_NODE = [22, 19, 0];
 var SEMVER_PREFIX = /^(\d+)\.(\d+)\.(\d+)(?:$|[-+])/u;
 function atLeast(version, minimum) {
@@ -644,7 +644,7 @@ function atLeast(version, minimum) {
 }
 function compatibilityDirection(input) {
   if (!SUPPORTED_PI_VERSIONS.has(input.piVersion)) {
-    return "codeArbiter requires Pi 1.0.0; install a supported Pi version and run /ca-doctor.";
+    return "codeArbiter requires Pi 1.0.2; install a supported Pi version and run /ca-doctor.";
   }
   if (!atLeast(input.nodeVersion, MINIMUM_NODE)) {
     return "codeArbiter requires Node >=22.19.0 for Pi; upgrade Node and run /ca-doctor.";

package/plugins/ca-pi/extensions/codearbiter.js

@@ -2,7 +2,7 @@
 var define_CODEARBITER_PI_PERMISSION_POLICY_SURFACES_default = { "ca-plan": "planning-write", codearbiter_background_bash: "background-launch" };
 
 // <define:__CODEARBITER_PI_SKILL_EXPANSION_FINGERPRINTS__>
-var define_CODEARBITER_PI_SKILL_EXPANSION_FINGERPRINTS_default = { "1.0.0": "12632f365440b07d5183cff871d889b796a3c711b6b49df20f95d9bc198d6c51" };
+var define_CODEARBITER_PI_SKILL_EXPANSION_FINGERPRINTS_default = { "1.0.2": "12632f365440b07d5183cff871d889b796a3c711b6b49df20f95d9bc198d6c51" };
 
 // <define:__CODEARBITER_PI_TOOL_CLASSES__>
 var define_CODEARBITER_PI_TOOL_CLASSES_default = { bash: "EXEC", codearbiter_background_bash: "EXEC", codearbiter_dispatch: "EXEC", codearbiter_farm_preview: "EXEC", write: "WRITE", edit: "EDIT", read: "READ" };
@@ -16,7 +16,7 @@ import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL2 } from
 import { types as utilTypes9 } from "node:util";
 
 // src/compatibility.ts
-var SUPPORTED_PI_VERSIONS = /* @__PURE__ */ new Set(["1.0.0"]);
+var SUPPORTED_PI_VERSIONS = /* @__PURE__ */ new Set(["1.0.2"]);
 var MINIMUM_NODE = [22, 19, 0];
 var SEMVER_PREFIX = /^(\d+)\.(\d+)\.(\d+)(?:$|[-+])/u;
 function atLeast(version, minimum) {
@@ -31,7 +31,7 @@ function atLeast(version, minimum) {
 }
 function compatibilityDirection(input) {
   if (!SUPPORTED_PI_VERSIONS.has(input.piVersion)) {
-    return "codeArbiter requires Pi 1.0.0; install a supported Pi version and run /ca-doctor.";
+    return "codeArbiter requires Pi 1.0.2; install a supported Pi version and run /ca-doctor.";
   }
   if (!atLeast(input.nodeVersion, MINIMUM_NODE)) {
     return "codeArbiter requires Node >=22.19.0 for Pi; upgrade Node and run /ca-doctor.";
@@ -6881,10 +6881,10 @@ async function collectPiDoctorInput(dependencies) {
 var REMEDIATION = {
   package: "Reinstall ca-pi from the approved pinned Git tag, then restart Pi.",
   trust: "Run /trust in Pi, inspect the project, grant trust only if you accept it, then start a new session.",
-  version: "Upgrade Pi to 1.0.0 and Node to >=22.19.0, then restart Pi.",
+  version: "Upgrade Pi to 1.0.2 and Node to >=22.19.0, then restart Pi.",
   python: "Upgrade or install Python 3, then run /ca-doctor again.",
   core: "Reinstall ca-pi to restore the generated shared core, then run /ca-doctor again.",
-  commands: "Remove conflicting command owners or run Pi 1.0.0, then restart Pi and run /ca-doctor.",
+  commands: "Remove conflicting command owners or run Pi 1.0.2, then restart Pi and run /ca-doctor.",
   bridge: "Reinstall ca-pi and Python 3, then run /ca-doctor again.",
   child: "Reinstall ca-pi if the hardened child artifact is missing or tampered, then run /ca-doctor again.",
   "ambient-marker": "Remove CODEARBITER_SUBAGENT from the parent environment and restart Pi.",
@@ -6913,7 +6913,7 @@ function diagnosePi(input) {
   const packageHealthy = input.package.declared && input.package.name === "@arbiterforge/ca-pi" && existsSync(input.package.root) && existsSync(input.package.extensionPath) && samePath2(input.package.extensionPath, expectedExtension) && canonicallyInside(input.package.extensionPath, input.package.root);
   const trustHealthy = input.trust.inspected && (!input.trust.required || input.trust.projectTrusted);
   const waitingForTrust = input.trust.required && !input.trust.projectTrusted;
-  const versionHealthy = input.runtime.piVersion === "1.0.0" && atLeast(input.runtime.nodeVersion, [22, 19, 0]);
+  const versionHealthy = input.runtime.piVersion === "1.0.2" && atLeast(input.runtime.nodeVersion, [22, 19, 0]);
   const piBelowMinimum = !atLeast(input.runtime.piVersion, [0, 80, 5]);
   const supportedExpansion = input.commands.expansionVerifiedVersions.includes(input.runtime.piVersion);
   const expectedDoctorSkill = resolve9(input.package.root, "skills", "ca-doctor", "SKILL.md");
@@ -7034,7 +7034,7 @@ function diagnosePi(input) {
     {
       id: "active-dispatch",
       state: "degraded",
-      message: "Supported Pi 1.0.0 public extension APIs cannot submit this deterministic self-test through the active dispatcher; the wrapper self-test does not exercise active dispatch.",
+      message: "Supported Pi 1.0.2 public extension APIs cannot submit this deterministic self-test through the active dispatcher; the wrapper self-test does not exercise active dispatch.",
       remediation: REMEDIATION["active-dispatch"]
     }
   ];
@@ -10598,7 +10598,7 @@ async function codeArbiterPi(pi) {
         activeTools: pi.getActiveTools(),
         allTools: pi.getAllTools(),
         expansionFingerprints,
-        childFingerprint: "86a08a0d5c29aa6693a07065f4ab2d6ad1d43293c65277cee944389886363d67"
+        childFingerprint: "cc75f11e8eb1df2ab70c4ae0d8c510c61fcf178d905db29a734842d8c5905752"
       });
       const wrapperSelfTest = await runPiWrapperSelfTest({
         enabled: enabledForDoctor,

package/plugins/ca-pi/helpers/artifacts/release.json

@@ -6,43 +6,43 @@
   "binaries": {
     "darwin/amd64": {
       "file": "ca-artifact-darwin-amd64",
-      "sha256": "7be518b4a391add87ca6a9868092a5befa76adbc72d17049e00322e3db4df022",
+      "sha256": "5670d20116a3c846f539b82e8db49a68509016c3dda4a147126c0d85e63e484a",
       "native_tested": true
     },
     "darwin/arm64": {
       "file": "ca-artifact-darwin-arm64",
-      "sha256": "6d657844af52d232b7378712c6335ab5fa406639c96ef1e837e938f38c6e247d",
+      "sha256": "dbc911004289993da4d720113906baba12f1afa510894f850a042869c9af918b",
       "native_tested": true
     },
     "linux/amd64": {
       "file": "ca-artifact-linux-amd64",
-      "sha256": "4bfc06b98163e499f5091a88d7455c741c824595437c6349f3cf87d4600a9218",
+      "sha256": "9e13efce9499ea895a60fe7461a6234e258ac1ad836f1e9272cce7dfc88bb0d4",
       "native_tested": true
     },
     "linux/arm64": {
       "file": "ca-artifact-linux-arm64",
-      "sha256": "d1c78c0ccafe0bb623ec658dba95dac55943a5812670f9b4c91396ab6ab99f4e",
+      "sha256": "e527ac09363a15c2c70cfe92b1a051ee645c3ce528cafccdfc5349e16bcf34e8",
       "native_tested": true
     },
     "windows/amd64": {
       "file": "ca-artifact-windows-amd64.exe",
-      "sha256": "fcc35c97fcc92a562c3dc1d28c9055902bfa02e4d4f8cac12660cdb0ffa7269b",
+      "sha256": "c545c16d9aad8968e6616a5749500ee56e7907bab97fc9aefa7e02204162e2cb",
       "native_tested": true
     },
     "windows/arm64": {
       "file": "ca-artifact-windows-arm64.exe",
-      "sha256": "73f0cba47de7ace285230e4fd351ca406c4b8da78081b88e7bba4a137b665218",
+      "sha256": "0bc2c45ab2eff641ae2f493016f2a0828d2757c9670be645b2c7366d3a86c9f3",
       "native_tested": true
     }
   },
   "context_qualification": {
     "darwin/amd64": {
-      "source_commit": "7e0961c0c6d7ea0b583e9f2c475ba626dfe715a1",
+      "source_commit": "cd5b0a0e21ddbc97183c079106ce6418bc1cf7b1",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37269292503",
-      "binary_sha256": "7be518b4a391add87ca6a9868092a5befa76adbc72d17049e00322e3db4df022",
-      "observation_sha256": "22c99450e6fc2176178f03ff5b4bb6c58430dad1827e3805f70abf5b53f02b99",
-      "module_sha256": "60003ac7a66fe3156707440ee84be933b41dca594aa4f3fd96585d26dc8e28b8",
+      "run_id": "37284472605",
+      "binary_sha256": "5670d20116a3c846f539b82e8db49a68509016c3dda4a147126c0d85e63e484a",
+      "observation_sha256": "d417fcff8ea37dbed3719ceafc0fe188f15a07aeacf8cb317bc13c46e5951b14",
+      "module_sha256": "f4b15732c8d1066be412718753670f3aeedc9ac668447919bb903db2eedace10",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -53,12 +53,12 @@
       ]
     },
     "darwin/arm64": {
-      "source_commit": "7e0961c0c6d7ea0b583e9f2c475ba626dfe715a1",
+      "source_commit": "cd5b0a0e21ddbc97183c079106ce6418bc1cf7b1",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37269292503",
-      "binary_sha256": "6d657844af52d232b7378712c6335ab5fa406639c96ef1e837e938f38c6e247d",
-      "observation_sha256": "60c04af245d8b8f19945f3eca41b1b42b882d886336d2ecd77fa06a53758c4e9",
-      "module_sha256": "60003ac7a66fe3156707440ee84be933b41dca594aa4f3fd96585d26dc8e28b8",
+      "run_id": "37284472605",
+      "binary_sha256": "dbc911004289993da4d720113906baba12f1afa510894f850a042869c9af918b",
+      "observation_sha256": "cd69f360e69729fbb4165cce3f53772bed227b42780584373cb8fff1f63f73ad",
+      "module_sha256": "f4b15732c8d1066be412718753670f3aeedc9ac668447919bb903db2eedace10",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -69,12 +69,12 @@
       ]
     },
     "linux/amd64": {
-      "source_commit": "7e0961c0c6d7ea0b583e9f2c475ba626dfe715a1",
+      "source_commit": "cd5b0a0e21ddbc97183c079106ce6418bc1cf7b1",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37269292503",
-      "binary_sha256": "4bfc06b98163e499f5091a88d7455c741c824595437c6349f3cf87d4600a9218",
-      "observation_sha256": "2226ab249ef00285e54ba4c74703b5439ceefe2f563964798b4282e06ac684ab",
-      "module_sha256": "60003ac7a66fe3156707440ee84be933b41dca594aa4f3fd96585d26dc8e28b8",
+      "run_id": "37284472605",
+      "binary_sha256": "9e13efce9499ea895a60fe7461a6234e258ac1ad836f1e9272cce7dfc88bb0d4",
+      "observation_sha256": "fa83068cfee6f8c8d2bb6b675c2e3e65b223301718cc7265468d8a46d120aa1d",
+      "module_sha256": "f4b15732c8d1066be412718753670f3aeedc9ac668447919bb903db2eedace10",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -85,12 +85,12 @@
       ]
     },
     "linux/arm64": {
-      "source_commit": "7e0961c0c6d7ea0b583e9f2c475ba626dfe715a1",
+      "source_commit": "cd5b0a0e21ddbc97183c079106ce6418bc1cf7b1",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37269292503",
-      "binary_sha256": "d1c78c0ccafe0bb623ec658dba95dac55943a5812670f9b4c91396ab6ab99f4e",
-      "observation_sha256": "d0c5820f0040d9174e594413355ad5484e1f0adcb72a9ca03f0c50facddef0f8",
-      "module_sha256": "60003ac7a66fe3156707440ee84be933b41dca594aa4f3fd96585d26dc8e28b8",
+      "run_id": "37284472605",
+      "binary_sha256": "e527ac09363a15c2c70cfe92b1a051ee645c3ce528cafccdfc5349e16bcf34e8",
+      "observation_sha256": "324ee82fdcb905b75d6b47fd86e26c2fd38f2be40f3f10dbd77aa774034ef8a0",
+      "module_sha256": "f4b15732c8d1066be412718753670f3aeedc9ac668447919bb903db2eedace10",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -101,12 +101,12 @@
       ]
     },
     "windows/amd64": {
-      "source_commit": "7e0961c0c6d7ea0b583e9f2c475ba626dfe715a1",
+      "source_commit": "cd5b0a0e21ddbc97183c079106ce6418bc1cf7b1",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37269292503",
-      "binary_sha256": "fcc35c97fcc92a562c3dc1d28c9055902bfa02e4d4f8cac12660cdb0ffa7269b",
-      "observation_sha256": "aa01a90f4d9dca1b847d0a49cae1780c7263cffb6162c762dd7b318603880ce6",
-      "module_sha256": "60003ac7a66fe3156707440ee84be933b41dca594aa4f3fd96585d26dc8e28b8",
+      "run_id": "37284472605",
+      "binary_sha256": "c545c16d9aad8968e6616a5749500ee56e7907bab97fc9aefa7e02204162e2cb",
+      "observation_sha256": "00d758222e539a54708ca7fbfda23f17d5e4e4d4ea15503a8b5e19af84a49828",
+      "module_sha256": "f4b15732c8d1066be412718753670f3aeedc9ac668447919bb903db2eedace10",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -117,12 +117,12 @@
       ]
     },
     "windows/arm64": {
-      "source_commit": "7e0961c0c6d7ea0b583e9f2c475ba626dfe715a1",
+      "source_commit": "cd5b0a0e21ddbc97183c079106ce6418bc1cf7b1",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37269292503",
-      "binary_sha256": "73f0cba47de7ace285230e4fd351ca406c4b8da78081b88e7bba4a137b665218",
-      "observation_sha256": "1c1a651a369ee463cab627a94d2537ad058bd2588a85f3fd472f2d625f0f4fe6",
-      "module_sha256": "60003ac7a66fe3156707440ee84be933b41dca594aa4f3fd96585d26dc8e28b8",
+      "run_id": "37284472605",
+      "binary_sha256": "0bc2c45ab2eff641ae2f493016f2a0828d2757c9670be645b2c7366d3a86c9f3",
+      "observation_sha256": "53a83992644fc0223e9c1acf66c8611fe4647a5f93d3b5014b209f37c782e99b",
+      "module_sha256": "f4b15732c8d1066be412718753670f3aeedc9ac668447919bb903db2eedace10",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",

package/plugins/ca-pi/hooks/_artifactpromptlib.py

@@ -8,6 +8,7 @@ import hashlib
 import json
 import os
 from pathlib import Path
+import re
 import stat
 import tempfile
 
@@ -28,6 +29,8 @@ _FEATURE_ACTORS = frozenset({
     "auth-crypto-reviewer", "dependency-reviewer", "migration-reviewer",
     "coverage-auditor",
 })
+# Match the native artifact protocol's idType; kind is separate from identity.
+_ARTIFACT_ID_RE = re.compile(r"[A-Z][A-Z0-9-]{1,79}")
 
 
 def compose_feature_actor_input(*, actor: str, brief: str,
@@ -60,9 +63,8 @@ def compose_feature_actor_input(*, actor: str, brief: str,
             raise PromptRouteError(f"feature {label} is invalid")
     if confirmed_mini_spec is None:
         if (type(spec_id) is not str or type(plan_id) is not str or
-                not spec_id.startswith("SPEC-") or
-                not plan_id.startswith("PLAN-") or
-                len(spec_id) > 128 or len(plan_id) > 128):
+                _ARTIFACT_ID_RE.fullmatch(spec_id) is None or
+                _ARTIFACT_ID_RE.fullmatch(plan_id) is None):
             raise PromptRouteError("feature artifact identity is invalid")
     elif (spec_id is not None or plan_id is not None or
           type(confirmed_mini_spec) is not str or

package/plugins/ca-pi/hooks/_host.py

@@ -11,7 +11,7 @@ import hostapi  # noqa: E402
 class PiHost(hostapi.Host):
     name = "pi"
     adapter_name = "@arbiterforge/ca-pi"
-    adapter_version = "0.16.3"
+    adapter_version = "0.16.5"
     update_target = "ca-pi"
     update_tag_prefix = "ca-pi-v"
     update_command = "pi update npm:@arbiterforge/ca-pi"

package/plugins/ca-pi/hooks/hostapi.py

@@ -313,7 +313,7 @@ class Host:
 
     name = "claude"
     adapter_name = "ca"
-    adapter_version = "2.24.3"
+    adapter_version = "2.24.4"
 
     # Update-notifier descriptor. Each independently versioned host overrides
     # these three values in its per-plugin _host.py. Keeping the target,

package/plugins/ca-pi/includes/pi-host-notes.md

@@ -87,7 +87,7 @@ file maps those actions to Pi's extension API.
   operator-launched Pi CLI, imported module, package root, and reported version.
   It does not prove publisher authenticity. Verify the source separately with
   `pi list` and `pi config`.
-- The supported promotion target is exact Pi 1.0.0. The package is
+- The supported promotion target is exact Pi 1.0.2. The package is
   published as `npm:@arbiterforge/ca-pi` on every `ca-pi-v*` tag (ADR-0029);
   the pinned Git tag remains the reproducible install. A Pi-native embedded
   farm worker is a future spike, not an installed dependency.

package/plugins/ca-pi/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.16.3",
+  "version": "0.16.5",
   "private": true,
   "license": "AGPL-3.0-only",
   "type": "module",

package/plugins/ca-pi/skills/ca-doctor/SKILL.md

@@ -32,7 +32,7 @@ repository binary, mutate an artifact, or silently fall back to Markdown.
    Pi bash wrapper. The exact shared-core `[H-03]` block is healthy and cannot stage files; execution
    or a different block is unhealthy. This self-test does not traverse Pi's active dispatcher. Do not
    rerun or respell it.
-4. Its `active-dispatch` row remains degraded because supported Pi 1.0.0 public extension
+4. Its `active-dispatch` row remains degraded because supported Pi 1.0.2 public extension
    APIs cannot submit that deterministic call through the active dispatcher. PI-AC-28 remains blocked
    until supported-version real-host promotion/CI evidence closes the gap.
 5. Resolve Python once, run `<plugin-root>/hooks/doctor.py`, and present its mechanical report