@arbiterforge/ca-pi 0.17.10 → 0.18.0

package/README.md

@@ -10,7 +10,7 @@ and durable project context. You decide. codeArbiter enforces.
 <img alt="Claude Code plugin" src="https://img.shields.io/badge/Claude_Code-plugin-d97757">
 <img alt="Codex plugin" src="https://img.shields.io/badge/OpenAI_Codex-plugin-10a37f">
 <img alt="Pi Feature Forge preview" src="https://img.shields.io/badge/ca--pi-Feature_Forge_preview-d97757">
-<img alt="version 2.25.9" src="https://img.shields.io/badge/version-2.25.9-2b7489">
+<img alt="version 2.26.0" src="https://img.shields.io/badge/version-2.26.0-2b7489">
 <img alt="core lanes" src="https://img.shields.io/badge/core_lanes-18-555">
 <img alt="skills" src="https://img.shields.io/badge/skills-22-555">
 <img alt="agents" src="https://img.shields.io/badge/agents-20-555">

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.17.10",
+  "version": "0.18.0",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",

package/plugins/ca-pi/CHANGELOG.md

@@ -4,6 +4,26 @@ All notable changes to `ca-pi` are documented in this file.
 
 ## [Unreleased]
 
+## [0.18.0] - 2026-10-10
+
+### Changed
+
+- Identify verification inputs by ship-set membership (ADR-0042): git index
+  entries present on disk plus untracked non-ignored files within the plan roots,
+  minus excludes. Outside git, membership comes from the filesystem; a failed git
+  probe fails closed with `INPUT_MEMBERSHIP_UNAVAILABLE`, and an unmerged index
+  fails closed until resolved.
+- Exempt exactly `.codearbiter/gate-events.log` from snapshots. It is never
+  counted and stays tracked as the audit trail; every other `.codearbiter` path,
+  including `overrides.log`, still counts.
+- Advance the verification-input manifest to `codearbiter.verification-inputs/0.2.0`.
+  Receipts bound to a 0.1.0 manifest read as stale and must be re-verified.
+- Open snapshot files through bounded handle opens and validate each evidence
+  object at most once per operation. Raw reads are reused only up to a 64 MiB
+  per-operation retained-byte budget, so past it an object can be read again;
+  validation still happens once.
+- Raise the `prompt-submit` hook timeout to 600 seconds so a long snapshot no
+  longer times out the prompt seam (#931).
 ## [0.17.10] - 2026-10-12
 
 ### Fixed

package/plugins/ca-pi/helpers/artifacts/release.json

@@ -6,43 +6,43 @@
   "binaries": {
     "darwin/amd64": {
       "file": "ca-artifact-darwin-amd64",
-      "sha256": "23755f26d1c1706e674b584f18b9a42e3f270e0dbbae9f78d9969633f3518797",
+      "sha256": "e35e21caa147a5e6c9d04fd400b5b4fcdb2d1d9cec9119d70249fcb80aeb3512",
       "native_tested": true
     },
     "darwin/arm64": {
       "file": "ca-artifact-darwin-arm64",
-      "sha256": "a3e8a3e294c3b4c89998ee6039bd5821598b134f8de4dff99e214250fa482083",
+      "sha256": "dc9157c6ecf48fe05c20351b276ef8c2037847eaedee9dfb88b4f8d0b685b51e",
       "native_tested": true
     },
     "linux/amd64": {
       "file": "ca-artifact-linux-amd64",
-      "sha256": "3831da75adc43ae8cd9a1b7586d12a6951657859101cb2a469bea791e009a071",
+      "sha256": "6fbd763c319d423291832f796515a4c8202d04e8785ea9ce178a495d917049d6",
       "native_tested": true
     },
     "linux/arm64": {
       "file": "ca-artifact-linux-arm64",
-      "sha256": "0853464b56cb264a9949e36cfd2882c901afd585b6dd16899e7540e818bef34e",
+      "sha256": "2b623d4329665513fb11a99e866e30c579a47172ffd16f6faaae21bf21fda83d",
       "native_tested": true
     },
     "windows/amd64": {
       "file": "ca-artifact-windows-amd64.exe",
-      "sha256": "c7a507c63e97a9b7b03d681dded80b90bcb8009ffb65bcdb74f8a585a9a46014",
+      "sha256": "44003f24b77a5cd51b63fe991a8775462619e2b2130c1162d36450a0570970d8",
       "native_tested": true
     },
     "windows/arm64": {
       "file": "ca-artifact-windows-arm64.exe",
-      "sha256": "34e84e6a629ed0a86525d41fc88c1db783e0f028b35a18ca8a13a49eac9b245d",
+      "sha256": "37efc98301beec7c0bf465dee6f4bb48152abef515ae55aa37bff628e969e5bd",
       "native_tested": true
     }
   },
   "context_qualification": {
     "darwin/amd64": {
-      "source_commit": "d547f82777111bc20001a977719307d3d68fc13e",
+      "source_commit": "54471947e1622fa35233a0fdc16ab42d05267ecb",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "38236271307",
-      "binary_sha256": "23755f26d1c1706e674b584f18b9a42e3f270e0dbbae9f78d9969633f3518797",
-      "observation_sha256": "2e234bae928c90a16f5673505fad5f634a80296f6dfcc022fa075ae63c8d9f59",
-      "module_sha256": "409b54287da99561d7c44e5618e5e4bb22a087bb1bd6da1bda3f4b8d1491aff1",
+      "run_id": "38250134924",
+      "binary_sha256": "e35e21caa147a5e6c9d04fd400b5b4fcdb2d1d9cec9119d70249fcb80aeb3512",
+      "observation_sha256": "36cbcb4c398592e658bc2e3d249ade3ff650c1aece503aea9f218ad80679e5db",
+      "module_sha256": "05b0359c108baf52bd3884c36969febc3f98e53786cf80da757115bee5ac9dc2",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -53,12 +53,12 @@
       ]
     },
     "darwin/arm64": {
-      "source_commit": "d547f82777111bc20001a977719307d3d68fc13e",
+      "source_commit": "54471947e1622fa35233a0fdc16ab42d05267ecb",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "38236271307",
-      "binary_sha256": "a3e8a3e294c3b4c89998ee6039bd5821598b134f8de4dff99e214250fa482083",
-      "observation_sha256": "3a7fe364f16f3c7785fd00d70b3328f6f559aacb12173c324e2f25b565a0ed4f",
-      "module_sha256": "409b54287da99561d7c44e5618e5e4bb22a087bb1bd6da1bda3f4b8d1491aff1",
+      "run_id": "38250134924",
+      "binary_sha256": "dc9157c6ecf48fe05c20351b276ef8c2037847eaedee9dfb88b4f8d0b685b51e",
+      "observation_sha256": "b4f9a083e3772d3296826a40ad8364c4faf046d21af0b7bea7e152eb0bda54df",
+      "module_sha256": "05b0359c108baf52bd3884c36969febc3f98e53786cf80da757115bee5ac9dc2",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -69,12 +69,12 @@
       ]
     },
     "linux/amd64": {
-      "source_commit": "d547f82777111bc20001a977719307d3d68fc13e",
+      "source_commit": "54471947e1622fa35233a0fdc16ab42d05267ecb",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "38236271307",
-      "binary_sha256": "3831da75adc43ae8cd9a1b7586d12a6951657859101cb2a469bea791e009a071",
-      "observation_sha256": "117d44acb470b9b4d06f41cb53c38a68d7f52a37164a92f512f181970f7270da",
-      "module_sha256": "409b54287da99561d7c44e5618e5e4bb22a087bb1bd6da1bda3f4b8d1491aff1",
+      "run_id": "38250134924",
+      "binary_sha256": "6fbd763c319d423291832f796515a4c8202d04e8785ea9ce178a495d917049d6",
+      "observation_sha256": "9b040d91f1775fda353b53130c557882ac3be4b7eeed55ebc83fe39d508ff269",
+      "module_sha256": "05b0359c108baf52bd3884c36969febc3f98e53786cf80da757115bee5ac9dc2",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -85,12 +85,12 @@
       ]
     },
     "linux/arm64": {
-      "source_commit": "d547f82777111bc20001a977719307d3d68fc13e",
+      "source_commit": "54471947e1622fa35233a0fdc16ab42d05267ecb",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "38236271307",
-      "binary_sha256": "0853464b56cb264a9949e36cfd2882c901afd585b6dd16899e7540e818bef34e",
-      "observation_sha256": "6ca2c5dabb2e9a02b90a1d4d2025e3731df84ed2da1a7e0d2ebb3ca96e711db7",
-      "module_sha256": "409b54287da99561d7c44e5618e5e4bb22a087bb1bd6da1bda3f4b8d1491aff1",
+      "run_id": "38250134924",
+      "binary_sha256": "2b623d4329665513fb11a99e866e30c579a47172ffd16f6faaae21bf21fda83d",
+      "observation_sha256": "c723a04d24d46eb6f95d5665485bd3cc11d2379be2ebad328b3afc4f66ec6be3",
+      "module_sha256": "05b0359c108baf52bd3884c36969febc3f98e53786cf80da757115bee5ac9dc2",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -101,12 +101,12 @@
       ]
     },
     "windows/amd64": {
-      "source_commit": "d547f82777111bc20001a977719307d3d68fc13e",
+      "source_commit": "54471947e1622fa35233a0fdc16ab42d05267ecb",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "38236271307",
-      "binary_sha256": "c7a507c63e97a9b7b03d681dded80b90bcb8009ffb65bcdb74f8a585a9a46014",
-      "observation_sha256": "b5fbcd0e0be73a7dfc8eee13ea000721819561f4307b9b59abd920a093f3004d",
-      "module_sha256": "409b54287da99561d7c44e5618e5e4bb22a087bb1bd6da1bda3f4b8d1491aff1",
+      "run_id": "38250134924",
+      "binary_sha256": "44003f24b77a5cd51b63fe991a8775462619e2b2130c1162d36450a0570970d8",
+      "observation_sha256": "1bbcf5fe0c13648e81c643c976a5f456cd2a3c3bbfe7c9a7642a6cdf8e71c68b",
+      "module_sha256": "05b0359c108baf52bd3884c36969febc3f98e53786cf80da757115bee5ac9dc2",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -117,12 +117,12 @@
       ]
     },
     "windows/arm64": {
-      "source_commit": "d547f82777111bc20001a977719307d3d68fc13e",
+      "source_commit": "54471947e1622fa35233a0fdc16ab42d05267ecb",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "38236271307",
-      "binary_sha256": "34e84e6a629ed0a86525d41fc88c1db783e0f028b35a18ca8a13a49eac9b245d",
-      "observation_sha256": "4c4fe691b5ce1fdb3664917c1afd247e9fb8779b96d85c1d7e42fc1e6a2c7d71",
-      "module_sha256": "409b54287da99561d7c44e5618e5e4bb22a087bb1bd6da1bda3f4b8d1491aff1",
+      "run_id": "38250134924",
+      "binary_sha256": "37efc98301beec7c0bf465dee6f4bb48152abef515ae55aa37bff628e969e5bd",
+      "observation_sha256": "78f3c133923c66945b84e1b4a9f02a6edbfb357e1be4f7d2e1b8e3123b2b17e2",
+      "module_sha256": "05b0359c108baf52bd3884c36969febc3f98e53786cf80da757115bee5ac9dc2",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",

package/plugins/ca-pi/hooks/_host.py

@@ -11,7 +11,7 @@ import hostapi  # noqa: E402
 class PiHost(hostapi.Host):
     name = "pi"
     adapter_name = "@arbiterforge/ca-pi"
-    adapter_version = "0.17.10"
+    adapter_version = "0.18.0"
     update_target = "ca-pi"
     update_tag_prefix = "ca-pi-v"
     update_command = "pi update npm:@arbiterforge/ca-pi"

package/plugins/ca-pi/hooks/hostapi.py

@@ -313,7 +313,7 @@ class Host:
 
     name = "claude"
     adapter_name = "ca"
-    adapter_version = "2.25.9"
+    adapter_version = "2.26.0"
 
     # Update-notifier descriptor. Each independently versioned host overrides
     # these three values in its per-plugin _host.py. Keeping the target,

package/plugins/ca-pi/includes/artifacts.md

@@ -88,7 +88,10 @@ executable/workspace binding and fresh named-result evidence remain required.
 repository-relative paths. Exclusions are directory paths, not globs or basename
 matches and not relative to an individual root. For root `site`, a generated
 dependency exclusion is `site/node_modules`, not `node_modules`. Review each
-excluded output directory explicitly; `.gitignore` does not define this policy.
+excluded output directory explicitly: the plan's roots and exclusions narrow
+the ship set. In a git work tree `.gitignore` already keeps untracked ignored
+files out of it; outside git nothing is filtered, so exclude generated
+directories explicitly.
 An exclusion outside all selected roots is rejected as ineffective. Overlapping
 roots cannot reinclude an excluded directory. Roots must exist before execution;
 use an existing containing directory for a planned new file so its creation
@@ -96,6 +99,21 @@ changes the snapshot. An oversized included file is reported with its path and
 the 32 MiB per-file limit; revise the explicit policy rather than increasing the
 limit or excluding source/test/governance inputs needed for the task.
 
+Snapshot input identity is ship-set membership. In a git work tree the members
+are the git index entries present on disk, plus untracked non-ignored files
+within the plan's roots, minus its excludes. The one fixed exemption is
+`.codearbiter/gate-events.log`: it is never counted, whatever the plan says, and
+stays tracked as the audit trail; every other `.codearbiter` path still counts.
+Outside git, membership is read from the filesystem (`membership: filesystem`);
+the root must be the top level of its work tree, so a subdirectory root counts as
+outside git. A failed git probe fails closed with `INPUT_MEMBERSHIP_UNAVAILABLE`. An unmerged
+git index (conflicted paths) makes a snapshot fail closed until it is resolved.
+The manifest format is `codearbiter.verification-inputs/0.2.0`; receipts bound to
+a 0.1.0 manifest read as stale. Each evidence object is validated at most once
+per operation and scans are bounded; raw reads are reused only up to a 64 MiB
+per-operation retained-byte budget, past which an object can be read again, but
+validation is never skipped.
+
 The existing user, SMARTS, reviewer, or verification boundary must first persist
 its actual policy-owned workflow event as canonical JSON in the reserved
 content-addressed authority-source store. Interactive prompt approval currently

package/plugins/ca-pi/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.17.10",
+  "version": "0.18.0",
   "private": true,
   "license": "AGPL-3.0-only",
   "type": "module",