@arbiterforge/ca-pi 0.17.9 → 0.18.0

package/README.md

@@ -10,7 +10,7 @@ and durable project context. You decide. codeArbiter enforces.
 <img alt="Claude Code plugin" src="https://img.shields.io/badge/Claude_Code-plugin-d97757">
 <img alt="Codex plugin" src="https://img.shields.io/badge/OpenAI_Codex-plugin-10a37f">
 <img alt="Pi Feature Forge preview" src="https://img.shields.io/badge/ca--pi-Feature_Forge_preview-d97757">
-<img alt="version 2.25.8" src="https://img.shields.io/badge/version-2.25.8-2b7489">
+<img alt="version 2.26.0" src="https://img.shields.io/badge/version-2.26.0-2b7489">
 <img alt="core lanes" src="https://img.shields.io/badge/core_lanes-18-555">
 <img alt="skills" src="https://img.shields.io/badge/skills-22-555">
 <img alt="agents" src="https://img.shields.io/badge/agents-20-555">

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.17.9",
+  "version": "0.18.0",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",

package/plugins/ca-pi/CHANGELOG.md

@@ -4,6 +4,32 @@ All notable changes to `ca-pi` are documented in this file.
 
 ## [Unreleased]
 
+## [0.18.0] - 2026-10-10
+
+### Changed
+
+- Identify verification inputs by ship-set membership (ADR-0042): git index
+  entries present on disk plus untracked non-ignored files within the plan roots,
+  minus excludes. Outside git, membership comes from the filesystem; a failed git
+  probe fails closed with `INPUT_MEMBERSHIP_UNAVAILABLE`, and an unmerged index
+  fails closed until resolved.
+- Exempt exactly `.codearbiter/gate-events.log` from snapshots. It is never
+  counted and stays tracked as the audit trail; every other `.codearbiter` path,
+  including `overrides.log`, still counts.
+- Advance the verification-input manifest to `codearbiter.verification-inputs/0.2.0`.
+  Receipts bound to a 0.1.0 manifest read as stale and must be re-verified.
+- Open snapshot files through bounded handle opens and validate each evidence
+  object at most once per operation. Raw reads are reused only up to a 64 MiB
+  per-operation retained-byte budget, so past it an object can be read again;
+  validation still happens once.
+- Raise the `prompt-submit` hook timeout to 600 seconds so a long snapshot no
+  longer times out the prompt seam (#931).
+## [0.17.10] - 2026-10-12
+
+### Fixed
+
+- Carry the shared native engine draft-pair rebinding repair and generated workflow guidance. This payload update does not enable Pi verification or review authority.
+
 ## [0.17.9] - 2026-10-12
 
 ### Fixed

package/plugins/ca-pi/SPRINT.md

@@ -82,7 +82,9 @@ explicit delegation terms. The installed private pair adapter in
 1. Finish the spec as a ready draft. Let `writing-plans` use `_preflight_plan_authoring` with
    `draft_for_pair: true` only for this full-lane initial sprint. Populate the same-slug plan as
    `draft_preview`, validate both, and review their complete criteria, paths, tests and checkpoints.
-   Neither draft has execution authority. Do not separately approve or `plan-bind` this pair.
+   Neither draft has execution authority. Do not separately approve this pair or bind it to an
+   approved source. If review changes the draft spec, use only the explicit `draft_preview`
+   rebind described in `includes/artifacts.md`, then revalidate both current drafts before arming.
 2. Arm both exact identities with `arm-sprint`. Include `--delegate-methods` only when the presented
    terms explicitly ask the user to delegate existing task-method revisions. Present the exact returned reply;
    it names both artifacts and `delegate-methods` or `approve-only`, not an ambiguous generic yes.

package/plugins/ca-pi/helpers/artifacts/release.json

@@ -6,43 +6,43 @@
   "binaries": {
     "darwin/amd64": {
       "file": "ca-artifact-darwin-amd64",
-      "sha256": "5214e1062e49aa39cd73868cd9792e7e296a865bb6e86230b17c19dda1ba3b71",
+      "sha256": "e35e21caa147a5e6c9d04fd400b5b4fcdb2d1d9cec9119d70249fcb80aeb3512",
       "native_tested": true
     },
     "darwin/arm64": {
       "file": "ca-artifact-darwin-arm64",
-      "sha256": "dde6deb178a0e725f8a88b1b30fa6980622b8af3b13fb73261aaaea47eb75a38",
+      "sha256": "dc9157c6ecf48fe05c20351b276ef8c2037847eaedee9dfb88b4f8d0b685b51e",
       "native_tested": true
     },
     "linux/amd64": {
       "file": "ca-artifact-linux-amd64",
-      "sha256": "ca2d5e0fecac0c99c45dc7576fff7d56af63dbd85decb4cfc54f81621ac90901",
+      "sha256": "6fbd763c319d423291832f796515a4c8202d04e8785ea9ce178a495d917049d6",
       "native_tested": true
     },
     "linux/arm64": {
       "file": "ca-artifact-linux-arm64",
-      "sha256": "de18df4c499814f6ccfc69efa6bfb6f4bbcd37c2af5dd091727233f1aaf91a39",
+      "sha256": "2b623d4329665513fb11a99e866e30c579a47172ffd16f6faaae21bf21fda83d",
       "native_tested": true
     },
     "windows/amd64": {
       "file": "ca-artifact-windows-amd64.exe",
-      "sha256": "ddab696f02b946400feac527f747a020b76dbb9e5dd444b0b7d464acbcd3888e",
+      "sha256": "44003f24b77a5cd51b63fe991a8775462619e2b2130c1162d36450a0570970d8",
       "native_tested": true
     },
     "windows/arm64": {
       "file": "ca-artifact-windows-arm64.exe",
-      "sha256": "23689eaa4df71f95bde58b18bc32fab8d4ae709495250ddfd13192fc0427a813",
+      "sha256": "37efc98301beec7c0bf465dee6f4bb48152abef515ae55aa37bff628e969e5bd",
       "native_tested": true
     }
   },
   "context_qualification": {
     "darwin/amd64": {
-      "source_commit": "b93987795456370149d84ac184e350bfbe05b464",
+      "source_commit": "54471947e1622fa35233a0fdc16ab42d05267ecb",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "38229898869",
-      "binary_sha256": "5214e1062e49aa39cd73868cd9792e7e296a865bb6e86230b17c19dda1ba3b71",
-      "observation_sha256": "a3370601b8e4814392371b8e0adebb01341cf5477e9d58d4259aa6534984f792",
-      "module_sha256": "1aea76bc4dc8b54b368dccc80c3a1133b403b5915018fdcb6018f1a3913fe66c",
+      "run_id": "38250134924",
+      "binary_sha256": "e35e21caa147a5e6c9d04fd400b5b4fcdb2d1d9cec9119d70249fcb80aeb3512",
+      "observation_sha256": "36cbcb4c398592e658bc2e3d249ade3ff650c1aece503aea9f218ad80679e5db",
+      "module_sha256": "05b0359c108baf52bd3884c36969febc3f98e53786cf80da757115bee5ac9dc2",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -53,12 +53,12 @@
       ]
     },
     "darwin/arm64": {
-      "source_commit": "b93987795456370149d84ac184e350bfbe05b464",
+      "source_commit": "54471947e1622fa35233a0fdc16ab42d05267ecb",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "38229898869",
-      "binary_sha256": "dde6deb178a0e725f8a88b1b30fa6980622b8af3b13fb73261aaaea47eb75a38",
-      "observation_sha256": "0ad1f8fa8f4fc99e84432391c438d3d2b6b0fa00ef2869e9f2dacfbbed858575",
-      "module_sha256": "1aea76bc4dc8b54b368dccc80c3a1133b403b5915018fdcb6018f1a3913fe66c",
+      "run_id": "38250134924",
+      "binary_sha256": "dc9157c6ecf48fe05c20351b276ef8c2037847eaedee9dfb88b4f8d0b685b51e",
+      "observation_sha256": "b4f9a083e3772d3296826a40ad8364c4faf046d21af0b7bea7e152eb0bda54df",
+      "module_sha256": "05b0359c108baf52bd3884c36969febc3f98e53786cf80da757115bee5ac9dc2",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -69,12 +69,12 @@
       ]
     },
     "linux/amd64": {
-      "source_commit": "b93987795456370149d84ac184e350bfbe05b464",
+      "source_commit": "54471947e1622fa35233a0fdc16ab42d05267ecb",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "38229898869",
-      "binary_sha256": "ca2d5e0fecac0c99c45dc7576fff7d56af63dbd85decb4cfc54f81621ac90901",
-      "observation_sha256": "abf1c99d5f6a6991bb6c19127c6ec7481d1fc1f21a77190af377efbbfa33f413",
-      "module_sha256": "1aea76bc4dc8b54b368dccc80c3a1133b403b5915018fdcb6018f1a3913fe66c",
+      "run_id": "38250134924",
+      "binary_sha256": "6fbd763c319d423291832f796515a4c8202d04e8785ea9ce178a495d917049d6",
+      "observation_sha256": "9b040d91f1775fda353b53130c557882ac3be4b7eeed55ebc83fe39d508ff269",
+      "module_sha256": "05b0359c108baf52bd3884c36969febc3f98e53786cf80da757115bee5ac9dc2",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -85,12 +85,12 @@
       ]
     },
     "linux/arm64": {
-      "source_commit": "b93987795456370149d84ac184e350bfbe05b464",
+      "source_commit": "54471947e1622fa35233a0fdc16ab42d05267ecb",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "38229898869",
-      "binary_sha256": "de18df4c499814f6ccfc69efa6bfb6f4bbcd37c2af5dd091727233f1aaf91a39",
-      "observation_sha256": "82716162a25f21001578b59bb479fe6ab9d8e786324b6378ee3e63ba273320b3",
-      "module_sha256": "1aea76bc4dc8b54b368dccc80c3a1133b403b5915018fdcb6018f1a3913fe66c",
+      "run_id": "38250134924",
+      "binary_sha256": "2b623d4329665513fb11a99e866e30c579a47172ffd16f6faaae21bf21fda83d",
+      "observation_sha256": "c723a04d24d46eb6f95d5665485bd3cc11d2379be2ebad328b3afc4f66ec6be3",
+      "module_sha256": "05b0359c108baf52bd3884c36969febc3f98e53786cf80da757115bee5ac9dc2",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -101,12 +101,12 @@
       ]
     },
     "windows/amd64": {
-      "source_commit": "b93987795456370149d84ac184e350bfbe05b464",
+      "source_commit": "54471947e1622fa35233a0fdc16ab42d05267ecb",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "38229898869",
-      "binary_sha256": "ddab696f02b946400feac527f747a020b76dbb9e5dd444b0b7d464acbcd3888e",
-      "observation_sha256": "fa811f878b9b700f119712ebe778d4fe31784c201d9df7d27f10a16f61777e49",
-      "module_sha256": "1aea76bc4dc8b54b368dccc80c3a1133b403b5915018fdcb6018f1a3913fe66c",
+      "run_id": "38250134924",
+      "binary_sha256": "44003f24b77a5cd51b63fe991a8775462619e2b2130c1162d36450a0570970d8",
+      "observation_sha256": "1bbcf5fe0c13648e81c643c976a5f456cd2a3c3bbfe7c9a7642a6cdf8e71c68b",
+      "module_sha256": "05b0359c108baf52bd3884c36969febc3f98e53786cf80da757115bee5ac9dc2",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -117,12 +117,12 @@
       ]
     },
     "windows/arm64": {
-      "source_commit": "b93987795456370149d84ac184e350bfbe05b464",
+      "source_commit": "54471947e1622fa35233a0fdc16ab42d05267ecb",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "38229898869",
-      "binary_sha256": "23689eaa4df71f95bde58b18bc32fab8d4ae709495250ddfd13192fc0427a813",
-      "observation_sha256": "668d99a5a660282a02854602220925c3f0d5aca22857f55701d57af2d1703fc6",
-      "module_sha256": "1aea76bc4dc8b54b368dccc80c3a1133b403b5915018fdcb6018f1a3913fe66c",
+      "run_id": "38250134924",
+      "binary_sha256": "37efc98301beec7c0bf465dee6f4bb48152abef515ae55aa37bff628e969e5bd",
+      "observation_sha256": "78f3c133923c66945b84e1b4a9f02a6edbfb357e1be4f7d2e1b8e3123b2b17e2",
+      "module_sha256": "05b0359c108baf52bd3884c36969febc3f98e53786cf80da757115bee5ac9dc2",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",

package/plugins/ca-pi/hooks/_host.py

@@ -11,7 +11,7 @@ import hostapi  # noqa: E402
 class PiHost(hostapi.Host):
     name = "pi"
     adapter_name = "@arbiterforge/ca-pi"
-    adapter_version = "0.17.9"
+    adapter_version = "0.18.0"
     update_target = "ca-pi"
     update_tag_prefix = "ca-pi-v"
     update_command = "pi update npm:@arbiterforge/ca-pi"

package/plugins/ca-pi/hooks/hostapi.py

@@ -313,7 +313,7 @@ class Host:
 
     name = "claude"
     adapter_name = "ca"
-    adapter_version = "2.25.8"
+    adapter_version = "2.26.0"
 
     # Update-notifier descriptor. Each independently versioned host overrides
     # these three values in its per-plugin _host.py. Keeping the target,

package/plugins/ca-pi/includes/artifacts.md

@@ -88,7 +88,10 @@ executable/workspace binding and fresh named-result evidence remain required.
 repository-relative paths. Exclusions are directory paths, not globs or basename
 matches and not relative to an individual root. For root `site`, a generated
 dependency exclusion is `site/node_modules`, not `node_modules`. Review each
-excluded output directory explicitly; `.gitignore` does not define this policy.
+excluded output directory explicitly: the plan's roots and exclusions narrow
+the ship set. In a git work tree `.gitignore` already keeps untracked ignored
+files out of it; outside git nothing is filtered, so exclude generated
+directories explicitly.
 An exclusion outside all selected roots is rejected as ineffective. Overlapping
 roots cannot reinclude an excluded directory. Roots must exist before execution;
 use an existing containing directory for a planned new file so its creation
@@ -96,6 +99,21 @@ changes the snapshot. An oversized included file is reported with its path and
 the 32 MiB per-file limit; revise the explicit policy rather than increasing the
 limit or excluding source/test/governance inputs needed for the task.
 
+Snapshot input identity is ship-set membership. In a git work tree the members
+are the git index entries present on disk, plus untracked non-ignored files
+within the plan's roots, minus its excludes. The one fixed exemption is
+`.codearbiter/gate-events.log`: it is never counted, whatever the plan says, and
+stays tracked as the audit trail; every other `.codearbiter` path still counts.
+Outside git, membership is read from the filesystem (`membership: filesystem`);
+the root must be the top level of its work tree, so a subdirectory root counts as
+outside git. A failed git probe fails closed with `INPUT_MEMBERSHIP_UNAVAILABLE`. An unmerged
+git index (conflicted paths) makes a snapshot fail closed until it is resolved.
+The manifest format is `codearbiter.verification-inputs/0.2.0`; receipts bound to
+a 0.1.0 manifest read as stale. Each evidence object is validated at most once
+per operation and scans are bounded; raw reads are reused only up to a 64 MiB
+per-operation retained-byte budget, past which an object can be read again, but
+validation is never skipped.
+
 The existing user, SMARTS, reviewer, or verification boundary must first persist
 its actual policy-owned workflow event as canonical JSON in the reserved
 content-addressed authority-source store. Interactive prompt approval currently
@@ -149,6 +167,19 @@ combined HTML sprint review uses the explicit paired path below instead of separ
 A normative change invalidates its approval. Rebinding is explicit and preserves
 history; it does not waive coverage or permit silent reinterpretation.
 
+When adversarial review revises a ready initial draft spec after its draft plan exists,
+query both current identities. The installed engine's explicit `plan-bind` request with
+`binding_mode: draft_preview` requires the plan's existing `expected` CAS and the spec's
+`spec_expected` revision/model CAS. It rebinds only that same-ID, same-slug initial pair:
+both artifacts must remain unapproved drafts, tasks pending and unevidenced, prerequisites
+unsatisfied and unevidenced, and scopes empty. Optional typed plan corrections must leave
+both drafts fully ready. The binding remains `draft_preview`; this operation grants no
+approval, delegation, prerequisite satisfaction, execution or acceptance. Revalidate both
+current drafts, repeat the affected review and arm the exact combined approval afterward.
+Inspect the installed operation schema first. An engine without this explicit draft
+request reports a capability gap; never edit HTML, recreate the pair, substitute sequential
+approval or use ordinary approved-source `plan-bind` to repair it.
+
 ## Initial sprint pair and delegated methods
 
 Only when preparing initial combined approval, replaying an observed reply, or revising a task's

package/plugins/ca-pi/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.17.9",
+  "version": "0.18.0",
   "private": true,
   "license": "AGPL-3.0-only",
   "type": "module",