@arbiterforge/ca-pi 0.16.4 → 0.16.5

package/README.md

@@ -183,7 +183,7 @@ Replace `<version>` with the numeric suffix from the chosen tag while retaining
 it is a partial install that cannot author typed HTML specs and plans; use the npm channel for
 that.
 
-Pi 1.0.0 is the supported host for this release line. Generated aliases use `/ca-*`;
+Pi 1.0.2 is the supported host for this release line. Generated aliases use `/ca-*`;
 `/skill:ca-*` is the host-native fallback. Every `ca-pi-v*` tag is also published to npm as
 `npm:@arbiterforge/ca-pi` with provenance (ADR-0029); the pinned Git tag remains the reproducible
 install. The [Pi runbook](./docs/pi-parity-testing.md) covers isolated install, trust, verification,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.16.4",
+  "version": "0.16.5",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",

package/plugins/ca-pi/CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to `ca-pi` are documented in this file.
 
 ## [Unreleased]
 
+## [0.16.5] - 2026-10-05
+
+### Changed
+
+- Promote the tested Pi host window through exact Pi 1.0.2 with a reviewed
+  managed-install lock, clearing the three brace-expansion advisories.
+
 ## [0.16.4] - 2026-10-05
 
 ### Fixed

package/plugins/ca-pi/extensions/codearbiter-child.js

@@ -629,7 +629,7 @@ function resolvePythonCommand(platform = process.platform, probe = systemPythonP
 }
 
 // src/compatibility.ts
-var SUPPORTED_PI_VERSIONS = /* @__PURE__ */ new Set(["1.0.0"]);
+var SUPPORTED_PI_VERSIONS = /* @__PURE__ */ new Set(["1.0.2"]);
 var MINIMUM_NODE = [22, 19, 0];
 var SEMVER_PREFIX = /^(\d+)\.(\d+)\.(\d+)(?:$|[-+])/u;
 function atLeast(version, minimum) {
@@ -644,7 +644,7 @@ function atLeast(version, minimum) {
 }
 function compatibilityDirection(input) {
   if (!SUPPORTED_PI_VERSIONS.has(input.piVersion)) {
-    return "codeArbiter requires Pi 1.0.0; install a supported Pi version and run /ca-doctor.";
+    return "codeArbiter requires Pi 1.0.2; install a supported Pi version and run /ca-doctor.";
   }
   if (!atLeast(input.nodeVersion, MINIMUM_NODE)) {
     return "codeArbiter requires Node >=22.19.0 for Pi; upgrade Node and run /ca-doctor.";

package/plugins/ca-pi/extensions/codearbiter.js

@@ -2,7 +2,7 @@
 var define_CODEARBITER_PI_PERMISSION_POLICY_SURFACES_default = { "ca-plan": "planning-write", codearbiter_background_bash: "background-launch" };
 
 // <define:__CODEARBITER_PI_SKILL_EXPANSION_FINGERPRINTS__>
-var define_CODEARBITER_PI_SKILL_EXPANSION_FINGERPRINTS_default = { "1.0.0": "12632f365440b07d5183cff871d889b796a3c711b6b49df20f95d9bc198d6c51" };
+var define_CODEARBITER_PI_SKILL_EXPANSION_FINGERPRINTS_default = { "1.0.2": "12632f365440b07d5183cff871d889b796a3c711b6b49df20f95d9bc198d6c51" };
 
 // <define:__CODEARBITER_PI_TOOL_CLASSES__>
 var define_CODEARBITER_PI_TOOL_CLASSES_default = { bash: "EXEC", codearbiter_background_bash: "EXEC", codearbiter_dispatch: "EXEC", codearbiter_farm_preview: "EXEC", write: "WRITE", edit: "EDIT", read: "READ" };
@@ -16,7 +16,7 @@ import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL2 } from
 import { types as utilTypes9 } from "node:util";
 
 // src/compatibility.ts
-var SUPPORTED_PI_VERSIONS = /* @__PURE__ */ new Set(["1.0.0"]);
+var SUPPORTED_PI_VERSIONS = /* @__PURE__ */ new Set(["1.0.2"]);
 var MINIMUM_NODE = [22, 19, 0];
 var SEMVER_PREFIX = /^(\d+)\.(\d+)\.(\d+)(?:$|[-+])/u;
 function atLeast(version, minimum) {
@@ -31,7 +31,7 @@ function atLeast(version, minimum) {
 }
 function compatibilityDirection(input) {
   if (!SUPPORTED_PI_VERSIONS.has(input.piVersion)) {
-    return "codeArbiter requires Pi 1.0.0; install a supported Pi version and run /ca-doctor.";
+    return "codeArbiter requires Pi 1.0.2; install a supported Pi version and run /ca-doctor.";
   }
   if (!atLeast(input.nodeVersion, MINIMUM_NODE)) {
     return "codeArbiter requires Node >=22.19.0 for Pi; upgrade Node and run /ca-doctor.";
@@ -6881,10 +6881,10 @@ async function collectPiDoctorInput(dependencies) {
 var REMEDIATION = {
   package: "Reinstall ca-pi from the approved pinned Git tag, then restart Pi.",
   trust: "Run /trust in Pi, inspect the project, grant trust only if you accept it, then start a new session.",
-  version: "Upgrade Pi to 1.0.0 and Node to >=22.19.0, then restart Pi.",
+  version: "Upgrade Pi to 1.0.2 and Node to >=22.19.0, then restart Pi.",
   python: "Upgrade or install Python 3, then run /ca-doctor again.",
   core: "Reinstall ca-pi to restore the generated shared core, then run /ca-doctor again.",
-  commands: "Remove conflicting command owners or run Pi 1.0.0, then restart Pi and run /ca-doctor.",
+  commands: "Remove conflicting command owners or run Pi 1.0.2, then restart Pi and run /ca-doctor.",
   bridge: "Reinstall ca-pi and Python 3, then run /ca-doctor again.",
   child: "Reinstall ca-pi if the hardened child artifact is missing or tampered, then run /ca-doctor again.",
   "ambient-marker": "Remove CODEARBITER_SUBAGENT from the parent environment and restart Pi.",
@@ -6913,7 +6913,7 @@ function diagnosePi(input) {
   const packageHealthy = input.package.declared && input.package.name === "@arbiterforge/ca-pi" && existsSync(input.package.root) && existsSync(input.package.extensionPath) && samePath2(input.package.extensionPath, expectedExtension) && canonicallyInside(input.package.extensionPath, input.package.root);
   const trustHealthy = input.trust.inspected && (!input.trust.required || input.trust.projectTrusted);
   const waitingForTrust = input.trust.required && !input.trust.projectTrusted;
-  const versionHealthy = input.runtime.piVersion === "1.0.0" && atLeast(input.runtime.nodeVersion, [22, 19, 0]);
+  const versionHealthy = input.runtime.piVersion === "1.0.2" && atLeast(input.runtime.nodeVersion, [22, 19, 0]);
   const piBelowMinimum = !atLeast(input.runtime.piVersion, [0, 80, 5]);
   const supportedExpansion = input.commands.expansionVerifiedVersions.includes(input.runtime.piVersion);
   const expectedDoctorSkill = resolve9(input.package.root, "skills", "ca-doctor", "SKILL.md");
@@ -7034,7 +7034,7 @@ function diagnosePi(input) {
     {
       id: "active-dispatch",
       state: "degraded",
-      message: "Supported Pi 1.0.0 public extension APIs cannot submit this deterministic self-test through the active dispatcher; the wrapper self-test does not exercise active dispatch.",
+      message: "Supported Pi 1.0.2 public extension APIs cannot submit this deterministic self-test through the active dispatcher; the wrapper self-test does not exercise active dispatch.",
       remediation: REMEDIATION["active-dispatch"]
     }
   ];
@@ -10598,7 +10598,7 @@ async function codeArbiterPi(pi) {
         activeTools: pi.getActiveTools(),
         allTools: pi.getAllTools(),
         expansionFingerprints,
-        childFingerprint: "86a08a0d5c29aa6693a07065f4ab2d6ad1d43293c65277cee944389886363d67"
+        childFingerprint: "cc75f11e8eb1df2ab70c4ae0d8c510c61fcf178d905db29a734842d8c5905752"
       });
       const wrapperSelfTest = await runPiWrapperSelfTest({
         enabled: enabledForDoctor,

package/plugins/ca-pi/helpers/artifacts/release.json

@@ -37,11 +37,11 @@
   },
   "context_qualification": {
     "darwin/amd64": {
-      "source_commit": "8bcb71a5edb74fa0196b7a844b23b5c1772b2d2c",
+      "source_commit": "cd5b0a0e21ddbc97183c079106ce6418bc1cf7b1",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37278290441",
+      "run_id": "37284472605",
       "binary_sha256": "5670d20116a3c846f539b82e8db49a68509016c3dda4a147126c0d85e63e484a",
-      "observation_sha256": "ee7dfb6049a9aa6a96a96dc8e7b8c2f38ed9767252809ef3c0e5cda66cbe8495",
+      "observation_sha256": "d417fcff8ea37dbed3719ceafc0fe188f15a07aeacf8cb317bc13c46e5951b14",
       "module_sha256": "f4b15732c8d1066be412718753670f3aeedc9ac668447919bb903db2eedace10",
       "native_cases": [
         "TestContextBoundedRender",
@@ -53,11 +53,11 @@
       ]
     },
     "darwin/arm64": {
-      "source_commit": "8bcb71a5edb74fa0196b7a844b23b5c1772b2d2c",
+      "source_commit": "cd5b0a0e21ddbc97183c079106ce6418bc1cf7b1",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37278290441",
+      "run_id": "37284472605",
       "binary_sha256": "dbc911004289993da4d720113906baba12f1afa510894f850a042869c9af918b",
-      "observation_sha256": "c1b24d33f08be3bc9226755b589ad8b649454686972f5b5dfd23945a034735e8",
+      "observation_sha256": "cd69f360e69729fbb4165cce3f53772bed227b42780584373cb8fff1f63f73ad",
       "module_sha256": "f4b15732c8d1066be412718753670f3aeedc9ac668447919bb903db2eedace10",
       "native_cases": [
         "TestContextBoundedRender",
@@ -69,11 +69,11 @@
       ]
     },
     "linux/amd64": {
-      "source_commit": "8bcb71a5edb74fa0196b7a844b23b5c1772b2d2c",
+      "source_commit": "cd5b0a0e21ddbc97183c079106ce6418bc1cf7b1",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37278290441",
+      "run_id": "37284472605",
       "binary_sha256": "9e13efce9499ea895a60fe7461a6234e258ac1ad836f1e9272cce7dfc88bb0d4",
-      "observation_sha256": "13fcb615b208702392ea689a2560e9d307c883e270a774255abf097ff03826fc",
+      "observation_sha256": "fa83068cfee6f8c8d2bb6b675c2e3e65b223301718cc7265468d8a46d120aa1d",
       "module_sha256": "f4b15732c8d1066be412718753670f3aeedc9ac668447919bb903db2eedace10",
       "native_cases": [
         "TestContextBoundedRender",
@@ -85,11 +85,11 @@
       ]
     },
     "linux/arm64": {
-      "source_commit": "8bcb71a5edb74fa0196b7a844b23b5c1772b2d2c",
+      "source_commit": "cd5b0a0e21ddbc97183c079106ce6418bc1cf7b1",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37278290441",
+      "run_id": "37284472605",
       "binary_sha256": "e527ac09363a15c2c70cfe92b1a051ee645c3ce528cafccdfc5349e16bcf34e8",
-      "observation_sha256": "47afbbf8cfb3a2cc41c2234e1f4ac250aa7e244d5cbfcac3eb61299c85209f4a",
+      "observation_sha256": "324ee82fdcb905b75d6b47fd86e26c2fd38f2be40f3f10dbd77aa774034ef8a0",
       "module_sha256": "f4b15732c8d1066be412718753670f3aeedc9ac668447919bb903db2eedace10",
       "native_cases": [
         "TestContextBoundedRender",
@@ -101,11 +101,11 @@
       ]
     },
     "windows/amd64": {
-      "source_commit": "8bcb71a5edb74fa0196b7a844b23b5c1772b2d2c",
+      "source_commit": "cd5b0a0e21ddbc97183c079106ce6418bc1cf7b1",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37278290441",
+      "run_id": "37284472605",
       "binary_sha256": "c545c16d9aad8968e6616a5749500ee56e7907bab97fc9aefa7e02204162e2cb",
-      "observation_sha256": "0664828bb79c53a36b351fe971a0dad1a17d7e0b29b92b207d49487b270103c5",
+      "observation_sha256": "00d758222e539a54708ca7fbfda23f17d5e4e4d4ea15503a8b5e19af84a49828",
       "module_sha256": "f4b15732c8d1066be412718753670f3aeedc9ac668447919bb903db2eedace10",
       "native_cases": [
         "TestContextBoundedRender",
@@ -117,11 +117,11 @@
       ]
     },
     "windows/arm64": {
-      "source_commit": "8bcb71a5edb74fa0196b7a844b23b5c1772b2d2c",
+      "source_commit": "cd5b0a0e21ddbc97183c079106ce6418bc1cf7b1",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37278290441",
+      "run_id": "37284472605",
       "binary_sha256": "0bc2c45ab2eff641ae2f493016f2a0828d2757c9670be645b2c7366d3a86c9f3",
-      "observation_sha256": "2b662148f2fac408ec6d81cef69e4e54edda2163f2577ecb8a0aafdabe80a544",
+      "observation_sha256": "53a83992644fc0223e9c1acf66c8611fe4647a5f93d3b5014b209f37c782e99b",
       "module_sha256": "f4b15732c8d1066be412718753670f3aeedc9ac668447919bb903db2eedace10",
       "native_cases": [
         "TestContextBoundedRender",

package/plugins/ca-pi/hooks/_host.py

@@ -11,7 +11,7 @@ import hostapi  # noqa: E402
 class PiHost(hostapi.Host):
     name = "pi"
     adapter_name = "@arbiterforge/ca-pi"
-    adapter_version = "0.16.4"
+    adapter_version = "0.16.5"
     update_target = "ca-pi"
     update_tag_prefix = "ca-pi-v"
     update_command = "pi update npm:@arbiterforge/ca-pi"

package/plugins/ca-pi/includes/pi-host-notes.md

@@ -87,7 +87,7 @@ file maps those actions to Pi's extension API.
   operator-launched Pi CLI, imported module, package root, and reported version.
   It does not prove publisher authenticity. Verify the source separately with
   `pi list` and `pi config`.
-- The supported promotion target is exact Pi 1.0.0. The package is
+- The supported promotion target is exact Pi 1.0.2. The package is
   published as `npm:@arbiterforge/ca-pi` on every `ca-pi-v*` tag (ADR-0029);
   the pinned Git tag remains the reproducible install. A Pi-native embedded
   farm worker is a future spike, not an installed dependency.

package/plugins/ca-pi/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.16.4",
+  "version": "0.16.5",
   "private": true,
   "license": "AGPL-3.0-only",
   "type": "module",

package/plugins/ca-pi/skills/ca-doctor/SKILL.md

@@ -32,7 +32,7 @@ repository binary, mutate an artifact, or silently fall back to Markdown.
    Pi bash wrapper. The exact shared-core `[H-03]` block is healthy and cannot stage files; execution
    or a different block is unhealthy. This self-test does not traverse Pi's active dispatcher. Do not
    rerun or respell it.
-4. Its `active-dispatch` row remains degraded because supported Pi 1.0.0 public extension
+4. Its `active-dispatch` row remains degraded because supported Pi 1.0.2 public extension
    APIs cannot submit that deterministic call through the active dispatcher. PI-AC-28 remains blocked
    until supported-version real-host promotion/CI evidence closes the gap.
 5. Resolve Python once, run `<plugin-root>/hooks/doctor.py`, and present its mechanical report