@arbiterforge/ca-pi 0.16.4 → 0.16.6

package/README.md

@@ -10,7 +10,7 @@ and durable project context. You decide. codeArbiter enforces.
 <img alt="Claude Code plugin" src="https://img.shields.io/badge/Claude_Code-plugin-d97757">
 <img alt="Codex plugin" src="https://img.shields.io/badge/OpenAI_Codex-plugin-10a37f">
 <img alt="Pi Feature Forge preview" src="https://img.shields.io/badge/ca--pi-Feature_Forge_preview-d97757">
-<img alt="version 2.24.4" src="https://img.shields.io/badge/version-2.24.4-2b7489">
+<img alt="version 2.24.5" src="https://img.shields.io/badge/version-2.24.5-2b7489">
 <img alt="core lanes" src="https://img.shields.io/badge/core_lanes-18-555">
 <img alt="skills" src="https://img.shields.io/badge/skills-22-555">
 <img alt="agents" src="https://img.shields.io/badge/agents-20-555">
@@ -183,7 +183,7 @@ Replace `<version>` with the numeric suffix from the chosen tag while retaining
 it is a partial install that cannot author typed HTML specs and plans; use the npm channel for
 that.
 
-Pi 1.0.0 is the supported host for this release line. Generated aliases use `/ca-*`;
+Pi 1.0.2 is the supported host for this release line. Generated aliases use `/ca-*`;
 `/skill:ca-*` is the host-native fallback. Every `ca-pi-v*` tag is also published to npm as
 `npm:@arbiterforge/ca-pi` with provenance (ADR-0029); the pinned Git tag remains the reproducible
 install. The [Pi runbook](./docs/pi-parity-testing.md) covers isolated install, trust, verification,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.16.4",
+  "version": "0.16.6",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",

package/plugins/ca-pi/CHANGELOG.md

@@ -4,6 +4,23 @@ All notable changes to `ca-pi` are documented in this file.
 
 ## [Unreleased]
 
+## [0.16.6] - 2026-10-05
+
+### Fixed
+
+- Publish a review whose reply contains non-ASCII text (an em dash, accented or emoji
+  characters). The authority adapter hashed the observation payload and producer
+  result as ASCII-escaped JSON while the engine hashes raw UTF-8, so such a review
+  failed with `OBSERVATION_UNVERIFIED`. Observation digests now use the engine's
+  canonical form.
+
+## [0.16.5] - 2026-10-05
+
+### Changed
+
+- Promote the tested Pi host window through exact Pi 1.0.2 with a reviewed
+  managed-install lock, clearing the three brace-expansion advisories.
+
 ## [0.16.4] - 2026-10-05
 
 ### Fixed

package/plugins/ca-pi/extensions/codearbiter-child.js

@@ -629,7 +629,7 @@ function resolvePythonCommand(platform = process.platform, probe = systemPythonP
 }
 
 // src/compatibility.ts
-var SUPPORTED_PI_VERSIONS = /* @__PURE__ */ new Set(["1.0.0"]);
+var SUPPORTED_PI_VERSIONS = /* @__PURE__ */ new Set(["1.0.2"]);
 var MINIMUM_NODE = [22, 19, 0];
 var SEMVER_PREFIX = /^(\d+)\.(\d+)\.(\d+)(?:$|[-+])/u;
 function atLeast(version, minimum) {
@@ -644,7 +644,7 @@ function atLeast(version, minimum) {
 }
 function compatibilityDirection(input) {
   if (!SUPPORTED_PI_VERSIONS.has(input.piVersion)) {
-    return "codeArbiter requires Pi 1.0.0; install a supported Pi version and run /ca-doctor.";
+    return "codeArbiter requires Pi 1.0.2; install a supported Pi version and run /ca-doctor.";
   }
   if (!atLeast(input.nodeVersion, MINIMUM_NODE)) {
     return "codeArbiter requires Node >=22.19.0 for Pi; upgrade Node and run /ca-doctor.";

package/plugins/ca-pi/extensions/codearbiter.js

@@ -2,7 +2,7 @@
 var define_CODEARBITER_PI_PERMISSION_POLICY_SURFACES_default = { "ca-plan": "planning-write", codearbiter_background_bash: "background-launch" };
 
 // <define:__CODEARBITER_PI_SKILL_EXPANSION_FINGERPRINTS__>
-var define_CODEARBITER_PI_SKILL_EXPANSION_FINGERPRINTS_default = { "1.0.0": "12632f365440b07d5183cff871d889b796a3c711b6b49df20f95d9bc198d6c51" };
+var define_CODEARBITER_PI_SKILL_EXPANSION_FINGERPRINTS_default = { "1.0.2": "12632f365440b07d5183cff871d889b796a3c711b6b49df20f95d9bc198d6c51" };
 
 // <define:__CODEARBITER_PI_TOOL_CLASSES__>
 var define_CODEARBITER_PI_TOOL_CLASSES_default = { bash: "EXEC", codearbiter_background_bash: "EXEC", codearbiter_dispatch: "EXEC", codearbiter_farm_preview: "EXEC", write: "WRITE", edit: "EDIT", read: "READ" };
@@ -16,7 +16,7 @@ import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL2 } from
 import { types as utilTypes9 } from "node:util";
 
 // src/compatibility.ts
-var SUPPORTED_PI_VERSIONS = /* @__PURE__ */ new Set(["1.0.0"]);
+var SUPPORTED_PI_VERSIONS = /* @__PURE__ */ new Set(["1.0.2"]);
 var MINIMUM_NODE = [22, 19, 0];
 var SEMVER_PREFIX = /^(\d+)\.(\d+)\.(\d+)(?:$|[-+])/u;
 function atLeast(version, minimum) {
@@ -31,7 +31,7 @@ function atLeast(version, minimum) {
 }
 function compatibilityDirection(input) {
   if (!SUPPORTED_PI_VERSIONS.has(input.piVersion)) {
-    return "codeArbiter requires Pi 1.0.0; install a supported Pi version and run /ca-doctor.";
+    return "codeArbiter requires Pi 1.0.2; install a supported Pi version and run /ca-doctor.";
   }
   if (!atLeast(input.nodeVersion, MINIMUM_NODE)) {
     return "codeArbiter requires Node >=22.19.0 for Pi; upgrade Node and run /ca-doctor.";
@@ -6881,10 +6881,10 @@ async function collectPiDoctorInput(dependencies) {
 var REMEDIATION = {
   package: "Reinstall ca-pi from the approved pinned Git tag, then restart Pi.",
   trust: "Run /trust in Pi, inspect the project, grant trust only if you accept it, then start a new session.",
-  version: "Upgrade Pi to 1.0.0 and Node to >=22.19.0, then restart Pi.",
+  version: "Upgrade Pi to 1.0.2 and Node to >=22.19.0, then restart Pi.",
   python: "Upgrade or install Python 3, then run /ca-doctor again.",
   core: "Reinstall ca-pi to restore the generated shared core, then run /ca-doctor again.",
-  commands: "Remove conflicting command owners or run Pi 1.0.0, then restart Pi and run /ca-doctor.",
+  commands: "Remove conflicting command owners or run Pi 1.0.2, then restart Pi and run /ca-doctor.",
   bridge: "Reinstall ca-pi and Python 3, then run /ca-doctor again.",
   child: "Reinstall ca-pi if the hardened child artifact is missing or tampered, then run /ca-doctor again.",
   "ambient-marker": "Remove CODEARBITER_SUBAGENT from the parent environment and restart Pi.",
@@ -6913,7 +6913,7 @@ function diagnosePi(input) {
   const packageHealthy = input.package.declared && input.package.name === "@arbiterforge/ca-pi" && existsSync(input.package.root) && existsSync(input.package.extensionPath) && samePath2(input.package.extensionPath, expectedExtension) && canonicallyInside(input.package.extensionPath, input.package.root);
   const trustHealthy = input.trust.inspected && (!input.trust.required || input.trust.projectTrusted);
   const waitingForTrust = input.trust.required && !input.trust.projectTrusted;
-  const versionHealthy = input.runtime.piVersion === "1.0.0" && atLeast(input.runtime.nodeVersion, [22, 19, 0]);
+  const versionHealthy = input.runtime.piVersion === "1.0.2" && atLeast(input.runtime.nodeVersion, [22, 19, 0]);
   const piBelowMinimum = !atLeast(input.runtime.piVersion, [0, 80, 5]);
   const supportedExpansion = input.commands.expansionVerifiedVersions.includes(input.runtime.piVersion);
   const expectedDoctorSkill = resolve9(input.package.root, "skills", "ca-doctor", "SKILL.md");
@@ -7034,7 +7034,7 @@ function diagnosePi(input) {
     {
       id: "active-dispatch",
       state: "degraded",
-      message: "Supported Pi 1.0.0 public extension APIs cannot submit this deterministic self-test through the active dispatcher; the wrapper self-test does not exercise active dispatch.",
+      message: "Supported Pi 1.0.2 public extension APIs cannot submit this deterministic self-test through the active dispatcher; the wrapper self-test does not exercise active dispatch.",
       remediation: REMEDIATION["active-dispatch"]
     }
   ];
@@ -10598,7 +10598,7 @@ async function codeArbiterPi(pi) {
         activeTools: pi.getActiveTools(),
         allTools: pi.getAllTools(),
         expansionFingerprints,
-        childFingerprint: "86a08a0d5c29aa6693a07065f4ab2d6ad1d43293c65277cee944389886363d67"
+        childFingerprint: "cc75f11e8eb1df2ab70c4ae0d8c510c61fcf178d905db29a734842d8c5905752"
       });
       const wrapperSelfTest = await runPiWrapperSelfTest({
         enabled: enabledForDoctor,

package/plugins/ca-pi/helpers/artifacts/release.json

@@ -37,11 +37,11 @@
   },
   "context_qualification": {
     "darwin/amd64": {
-      "source_commit": "8bcb71a5edb74fa0196b7a844b23b5c1772b2d2c",
+      "source_commit": "49aed5b5c4f78d3e8fcf359c2b9e43472068ebb1",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37278290441",
+      "run_id": "37623035385",
       "binary_sha256": "5670d20116a3c846f539b82e8db49a68509016c3dda4a147126c0d85e63e484a",
-      "observation_sha256": "ee7dfb6049a9aa6a96a96dc8e7b8c2f38ed9767252809ef3c0e5cda66cbe8495",
+      "observation_sha256": "2329112713771cc95c19bad6b0350b0a37eeebf067ab2d9c14fa6c03c2f3121b",
       "module_sha256": "f4b15732c8d1066be412718753670f3aeedc9ac668447919bb903db2eedace10",
       "native_cases": [
         "TestContextBoundedRender",
@@ -53,11 +53,11 @@
       ]
     },
     "darwin/arm64": {
-      "source_commit": "8bcb71a5edb74fa0196b7a844b23b5c1772b2d2c",
+      "source_commit": "49aed5b5c4f78d3e8fcf359c2b9e43472068ebb1",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37278290441",
+      "run_id": "37623035385",
       "binary_sha256": "dbc911004289993da4d720113906baba12f1afa510894f850a042869c9af918b",
-      "observation_sha256": "c1b24d33f08be3bc9226755b589ad8b649454686972f5b5dfd23945a034735e8",
+      "observation_sha256": "1bb537709ab07417e7d0a1c61527d426bf9e583db7ea939523e88c9e2b7cc97d",
       "module_sha256": "f4b15732c8d1066be412718753670f3aeedc9ac668447919bb903db2eedace10",
       "native_cases": [
         "TestContextBoundedRender",
@@ -69,11 +69,11 @@
       ]
     },
     "linux/amd64": {
-      "source_commit": "8bcb71a5edb74fa0196b7a844b23b5c1772b2d2c",
+      "source_commit": "49aed5b5c4f78d3e8fcf359c2b9e43472068ebb1",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37278290441",
+      "run_id": "37623035385",
       "binary_sha256": "9e13efce9499ea895a60fe7461a6234e258ac1ad836f1e9272cce7dfc88bb0d4",
-      "observation_sha256": "13fcb615b208702392ea689a2560e9d307c883e270a774255abf097ff03826fc",
+      "observation_sha256": "6f295c8569f441a8bdfc02492b2962f182be62561d6911be7e5819c114aa7a78",
       "module_sha256": "f4b15732c8d1066be412718753670f3aeedc9ac668447919bb903db2eedace10",
       "native_cases": [
         "TestContextBoundedRender",
@@ -85,11 +85,11 @@
       ]
     },
     "linux/arm64": {
-      "source_commit": "8bcb71a5edb74fa0196b7a844b23b5c1772b2d2c",
+      "source_commit": "49aed5b5c4f78d3e8fcf359c2b9e43472068ebb1",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37278290441",
+      "run_id": "37623035385",
       "binary_sha256": "e527ac09363a15c2c70cfe92b1a051ee645c3ce528cafccdfc5349e16bcf34e8",
-      "observation_sha256": "47afbbf8cfb3a2cc41c2234e1f4ac250aa7e244d5cbfcac3eb61299c85209f4a",
+      "observation_sha256": "7b0b251ac87d6ae31c1d9fe6622f6f316474ccde2ebbce153e380e296cb02097",
       "module_sha256": "f4b15732c8d1066be412718753670f3aeedc9ac668447919bb903db2eedace10",
       "native_cases": [
         "TestContextBoundedRender",
@@ -101,11 +101,11 @@
       ]
     },
     "windows/amd64": {
-      "source_commit": "8bcb71a5edb74fa0196b7a844b23b5c1772b2d2c",
+      "source_commit": "49aed5b5c4f78d3e8fcf359c2b9e43472068ebb1",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37278290441",
+      "run_id": "37623035385",
       "binary_sha256": "c545c16d9aad8968e6616a5749500ee56e7907bab97fc9aefa7e02204162e2cb",
-      "observation_sha256": "0664828bb79c53a36b351fe971a0dad1a17d7e0b29b92b207d49487b270103c5",
+      "observation_sha256": "531460c5014621590d9e5afd3c455cb66c88e5d32a137b8c8c92559c29a8523e",
       "module_sha256": "f4b15732c8d1066be412718753670f3aeedc9ac668447919bb903db2eedace10",
       "native_cases": [
         "TestContextBoundedRender",
@@ -117,11 +117,11 @@
       ]
     },
     "windows/arm64": {
-      "source_commit": "8bcb71a5edb74fa0196b7a844b23b5c1772b2d2c",
+      "source_commit": "49aed5b5c4f78d3e8fcf359c2b9e43472068ebb1",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37278290441",
+      "run_id": "37623035385",
       "binary_sha256": "0bc2c45ab2eff641ae2f493016f2a0828d2757c9670be645b2c7366d3a86c9f3",
-      "observation_sha256": "2b662148f2fac408ec6d81cef69e4e54edda2163f2577ecb8a0aafdabe80a544",
+      "observation_sha256": "020ff24e68e25f62d65151c8d476a3abb8a2aba5bb01fc0558e526c777461bf3",
       "module_sha256": "f4b15732c8d1066be412718753670f3aeedc9ac668447919bb903db2eedace10",
       "native_cases": [
         "TestContextBoundedRender",

package/plugins/ca-pi/hooks/_artifactauthoritylib.py

@@ -141,7 +141,7 @@ def _canonical(value: Any) -> bytes:
         raise AuthorityError("INVALID_AUTHORITY_STATE", "state is not finite JSON") from exc
 
 
-def _native_context_canonical(value: Any) -> bytes:
+def _native_context_canonical(value: Any, code: str = "INVALID_EVIDENCE_CONTEXT") -> bytes:
     """Match the artifact engine's safe-integer, UTF-16-key-order JSON bytes."""
     def ordered(item: Any, depth: int) -> Any:
         if depth > 64:
@@ -172,7 +172,13 @@ def _native_context_canonical(value: Any) -> bytes:
             raise ValueError("context exceeds native byte limit")
         return raw
     except (TypeError, ValueError, UnicodeError, RecursionError) as exc:
-        raise AuthorityError("INVALID_EVIDENCE_CONTEXT", "context is outside native canonical JSON") from exc
+        raise AuthorityError(code, "value is outside native canonical JSON") from exc
+
+
+def _engine_digest(value: Any) -> str:
+    """Digest a value exactly as the engine's canonical.Hash does: raw UTF-8,
+    never ASCII-escaped, so non-ASCII text binds to the same digest."""
+    return _digest(_native_context_canonical(value, "INVALID_AUTHORITY_STATE"))
 
 
 def _digest(data: bytes) -> str:
@@ -2106,11 +2112,11 @@ def _closed_observation(
         "subject": request["context"]["subject"],
         "context_ref": request["context_ref"],
         "context_sha256": request["context_sha256"],
-        "payload_sha256": _digest(_canonical(payload)),
+        "payload_sha256": _engine_digest(payload),
         "producer_profile": producer_profile,
         "producer_run_id": producer_run_id,
         "producer_result": producer_result,
-        "producer_result_sha256": _digest(_canonical(producer_result)),
+        "producer_result_sha256": _engine_digest(producer_result),
     }
 
 
@@ -2163,11 +2169,11 @@ def capture_user_prompt(
         "subject": subject,
         "context_ref": context_ref,
         "context_sha256": context_sha256,
-        "payload_sha256": _digest(_canonical(event.get("payload"))),
+        "payload_sha256": _engine_digest(event.get("payload")),
         "producer_profile": "host-user-prompt/0.1.0",
         "producer_run_id": producer_run_id,
         "producer_result": producer_result,
-        "producer_result_sha256": _digest(_canonical(producer_result)),
+        "producer_result_sha256": _engine_digest(producer_result),
     }
     observation_raw = _canonical(observation)
     observation_sha256 = _digest(observation_raw)
@@ -2213,12 +2219,12 @@ def _context_preview_context(root: Path, client: Any, preview: dict[str, Any], p
                "record_id": "CONTEXT-" + preview["document_id"].upper(),
                "normative_sha256": binding}
     if (
-        _digest(raw) != context_hash or raw != _canonical(context)
+        _digest(raw) != context_hash or raw != _native_context_canonical(context, "INVALID_CONTEXT_AUTHORITY")
         or context.get("activity") != CONTEXT_ROUTE
         or context.get("preview") != preview
         or context.get("subject") != subject
         or context.get("record") != {"preview_binding_sha256": binding}
-        or context.get("record_sha256") != _digest(_canonical(context.get("record")))
+        or context.get("record_sha256") != _engine_digest(context.get("record"))
         or context.get("input_sha256") != binding
         or context.get("prompt_sha256") != _digest(prompt.encode("utf-8"))
         or result.get("subject") != subject
@@ -2302,9 +2308,9 @@ def capture_context_preview(root: str | Path, client: Any, prompt: str, *, host:
     observation = {
         "format": OBSERVATION_FORMAT, "kind": CONTEXT_ROUTE,
         "subject": context["subject"], "context_ref": context_ref,
-        "context_sha256": context_hash, "payload_sha256": _digest(_canonical(payload)),
+        "context_sha256": context_hash, "payload_sha256": _engine_digest(payload),
         "producer_profile": "host-user-context-preview/0.1.0", "producer_run_id": producer_run_id,
-        "producer_result": producer_result, "producer_result_sha256": _digest(_canonical(producer_result)),
+        "producer_result": producer_result, "producer_result_sha256": _engine_digest(producer_result),
     }
     observation_raw = _canonical(observation)
     observation_hash = _digest(observation_raw)

package/plugins/ca-pi/hooks/_host.py

@@ -11,7 +11,7 @@ import hostapi  # noqa: E402
 class PiHost(hostapi.Host):
     name = "pi"
     adapter_name = "@arbiterforge/ca-pi"
-    adapter_version = "0.16.4"
+    adapter_version = "0.16.6"
     update_target = "ca-pi"
     update_tag_prefix = "ca-pi-v"
     update_command = "pi update npm:@arbiterforge/ca-pi"

package/plugins/ca-pi/hooks/hostapi.py

@@ -313,7 +313,7 @@ class Host:
 
     name = "claude"
     adapter_name = "ca"
-    adapter_version = "2.24.4"
+    adapter_version = "2.24.5"
 
     # Update-notifier descriptor. Each independently versioned host overrides
     # these three values in its per-plugin _host.py. Keeping the target,

package/plugins/ca-pi/includes/pi-host-notes.md

@@ -87,7 +87,7 @@ file maps those actions to Pi's extension API.
   operator-launched Pi CLI, imported module, package root, and reported version.
   It does not prove publisher authenticity. Verify the source separately with
   `pi list` and `pi config`.
-- The supported promotion target is exact Pi 1.0.0. The package is
+- The supported promotion target is exact Pi 1.0.2. The package is
   published as `npm:@arbiterforge/ca-pi` on every `ca-pi-v*` tag (ADR-0029);
   the pinned Git tag remains the reproducible install. A Pi-native embedded
   farm worker is a future spike, not an installed dependency.

package/plugins/ca-pi/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.16.4",
+  "version": "0.16.6",
   "private": true,
   "license": "AGPL-3.0-only",
   "type": "module",

package/plugins/ca-pi/skills/ca-doctor/SKILL.md

@@ -32,7 +32,7 @@ repository binary, mutate an artifact, or silently fall back to Markdown.
    Pi bash wrapper. The exact shared-core `[H-03]` block is healthy and cannot stage files; execution
    or a different block is unhealthy. This self-test does not traverse Pi's active dispatcher. Do not
    rerun or respell it.
-4. Its `active-dispatch` row remains degraded because supported Pi 1.0.0 public extension
+4. Its `active-dispatch` row remains degraded because supported Pi 1.0.2 public extension
    APIs cannot submit that deterministic call through the active dispatcher. PI-AC-28 remains blocked
    until supported-version real-host promotion/CI evidence closes the gap.
 5. Resolve Python once, run `<plugin-root>/hooks/doctor.py`, and present its mechanical report