@arbiterforge/ca-pi 0.21.0 → 0.21.2

package/README.md

@@ -10,7 +10,7 @@ and durable project context. You decide. codeArbiter enforces.
 <img alt="Claude Code plugin" src="https://img.shields.io/badge/Claude_Code-plugin-d97757">
 <img alt="Codex plugin" src="https://img.shields.io/badge/OpenAI_Codex-plugin-10a37f">
 <img alt="Pi Feature Forge preview" src="https://img.shields.io/badge/ca--pi-Feature_Forge_preview-d97757">
-<img alt="version 3.2.0" src="https://img.shields.io/badge/version-3.2.0-2b7489">
+<img alt="version 3.2.2" src="https://img.shields.io/badge/version-3.2.2-2b7489">
 <img alt="core lanes" src="https://img.shields.io/badge/core_lanes-18-555">
 <img alt="skills" src="https://img.shields.io/badge/skills-22-555">
 <img alt="agents" src="https://img.shields.io/badge/agents-20-555">

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.21.0",
+  "version": "0.21.2",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",

package/plugins/ca-pi/CHANGELOG.md

@@ -4,6 +4,19 @@ All notable changes to `ca-pi` are documented in this file.
 
 ## [Unreleased]
 
+## [0.21.2] - 2026-10-18
+
+### Fixed
+
+- On Windows, verification through an npm workspace intermittently failed with `UNSUPPORTED_EXECUTABLE: nested npm launch qualification failed`. The qualification probe ran npm with a minimal environment, so a fresh npm profile also made a registry update check, which could exceed the probe's 15-second limit or print a notice. The probe now disables npm's update notifier and stays offline.
+
+## [0.21.1] - 2026-10-18
+
+### Fixed
+
+- A plan could claim verification coverage for a task path under `.git/`, although the evidence snapshot never hashes `.git`. Such paths now report `UNCOVERED_INPUT` (#908).
+- On Windows, a directory junction inside the repository was not refused by the store's link checks, because current Go reports junctions as irregular files rather than symlinks. Junctions are now refused like symlinks (#909).
+
 ## [0.21.0] - 2026-10-18
 
 ### Added

package/plugins/ca-pi/helpers/artifacts/release.json

@@ -6,43 +6,43 @@
   "binaries": {
     "darwin/amd64": {
       "file": "ca-artifact-darwin-amd64",
-      "sha256": "882fefc23bd4b07dcf8f954a2e3cdaecffe210d8bd95e190d2864d9eb77aa339",
+      "sha256": "bde0e781a7119541e1325def15c329b8cc3114358e2fdc54e416f675e57b1d0a",
       "native_tested": true
     },
     "darwin/arm64": {
       "file": "ca-artifact-darwin-arm64",
-      "sha256": "8f51bd9848e4b0441eea50c8f4e2da9892164be0488ca3959a8dc900dc295020",
+      "sha256": "c267724fc38d0e952e501bbc6e4820b88bcdeb19eb2aa8aad964d5330af80d60",
       "native_tested": true
     },
     "linux/amd64": {
       "file": "ca-artifact-linux-amd64",
-      "sha256": "0f24a4f79a2554c37deabf9ec81d6dfbceb45030f4bea3cfabc33dc51ed1d582",
+      "sha256": "a680c8dfaf3da2938ba847b194bc412e62e6e29d0cb389888a01e8fd09af642b",
       "native_tested": true
     },
     "linux/arm64": {
       "file": "ca-artifact-linux-arm64",
-      "sha256": "c7cb1e636b3abd3284a7fbc3354bdc556414aec2aacc92665431118f723a86b0",
+      "sha256": "830407027be16846bad137ec752e1f7c8f82c1573abb3ccf0518bb725360c0ee",
       "native_tested": true
     },
     "windows/amd64": {
       "file": "ca-artifact-windows-amd64.exe",
-      "sha256": "7bfdc9a86320e38932d84ee3fef6d088d548809b16dfc17dd648f64e4105471b",
+      "sha256": "e20696157edee640b24fffed031aa5e8b242cc5ba8123d16bc7a8b88a5d0cdd4",
       "native_tested": true
     },
     "windows/arm64": {
       "file": "ca-artifact-windows-arm64.exe",
-      "sha256": "095bf92bca707c0027c54e929b1d08c62cb97b0b2888cfbe07a3ea49ea0fb8b3",
+      "sha256": "cda09717df58c45cbc982df48748870cb34af6be9ed1036d5c8e6ef8323b7974",
       "native_tested": true
     }
   },
   "context_qualification": {
     "darwin/amd64": {
-      "source_commit": "020f67947c4c0fb299a9e9d77a9b9354e3ff2ed4",
+      "source_commit": "2208aad373face7bf8888ff37973fe6a5e32254e",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "39186858332",
-      "binary_sha256": "882fefc23bd4b07dcf8f954a2e3cdaecffe210d8bd95e190d2864d9eb77aa339",
-      "observation_sha256": "fdeac588d567329a64b6315456d8c47e060c70dbe9355d76be3c07ec40bd8705",
-      "module_sha256": "b39a694ff5283a97c62d532a8abc25a8a47101baa7dfc025bffc90c1da9d9144",
+      "run_id": "39203172407",
+      "binary_sha256": "bde0e781a7119541e1325def15c329b8cc3114358e2fdc54e416f675e57b1d0a",
+      "observation_sha256": "f1653c18deca394017558c4332aec7aed5a53b5d213713feaafb6a2bfcee24db",
+      "module_sha256": "65001c9fedd9085c9d0c4f62a6768fd2528d222e0a495812c24890b44b896c2a",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -53,12 +53,12 @@
       ]
     },
     "darwin/arm64": {
-      "source_commit": "020f67947c4c0fb299a9e9d77a9b9354e3ff2ed4",
+      "source_commit": "2208aad373face7bf8888ff37973fe6a5e32254e",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "39186858332",
-      "binary_sha256": "8f51bd9848e4b0441eea50c8f4e2da9892164be0488ca3959a8dc900dc295020",
-      "observation_sha256": "f4b6ff84048f95a0c36ba839caad39a15ac493305b7212b5597333ed6e59c9f0",
-      "module_sha256": "b39a694ff5283a97c62d532a8abc25a8a47101baa7dfc025bffc90c1da9d9144",
+      "run_id": "39203172407",
+      "binary_sha256": "c267724fc38d0e952e501bbc6e4820b88bcdeb19eb2aa8aad964d5330af80d60",
+      "observation_sha256": "f8bb354ccf8fc5c902e78b2a541017ba5e53665b0c471026053d4dfbf5d11c47",
+      "module_sha256": "65001c9fedd9085c9d0c4f62a6768fd2528d222e0a495812c24890b44b896c2a",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -69,12 +69,12 @@
       ]
     },
     "linux/amd64": {
-      "source_commit": "020f67947c4c0fb299a9e9d77a9b9354e3ff2ed4",
+      "source_commit": "2208aad373face7bf8888ff37973fe6a5e32254e",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "39186858332",
-      "binary_sha256": "0f24a4f79a2554c37deabf9ec81d6dfbceb45030f4bea3cfabc33dc51ed1d582",
-      "observation_sha256": "15afed41ddcddfccecc0a49875e5f7b1b8a69e80311f06b5f351e4e0dc02db7d",
-      "module_sha256": "b39a694ff5283a97c62d532a8abc25a8a47101baa7dfc025bffc90c1da9d9144",
+      "run_id": "39203172407",
+      "binary_sha256": "a680c8dfaf3da2938ba847b194bc412e62e6e29d0cb389888a01e8fd09af642b",
+      "observation_sha256": "93ce3ee5b82f86a749f96791fb5a44a5878564ebc12eed275f32c79ec611ce7c",
+      "module_sha256": "65001c9fedd9085c9d0c4f62a6768fd2528d222e0a495812c24890b44b896c2a",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -85,12 +85,12 @@
       ]
     },
     "linux/arm64": {
-      "source_commit": "020f67947c4c0fb299a9e9d77a9b9354e3ff2ed4",
+      "source_commit": "2208aad373face7bf8888ff37973fe6a5e32254e",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "39186858332",
-      "binary_sha256": "c7cb1e636b3abd3284a7fbc3354bdc556414aec2aacc92665431118f723a86b0",
-      "observation_sha256": "5a6a057bcd8a1a194d890a24c570a21d37029e418bcc856b66acf5b69357ba9f",
-      "module_sha256": "b39a694ff5283a97c62d532a8abc25a8a47101baa7dfc025bffc90c1da9d9144",
+      "run_id": "39203172407",
+      "binary_sha256": "830407027be16846bad137ec752e1f7c8f82c1573abb3ccf0518bb725360c0ee",
+      "observation_sha256": "4d0abea75dc6987812f90d82c2c7453d7dcc05f194b44bd095f0d92c68f0233a",
+      "module_sha256": "65001c9fedd9085c9d0c4f62a6768fd2528d222e0a495812c24890b44b896c2a",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -101,12 +101,12 @@
       ]
     },
     "windows/amd64": {
-      "source_commit": "020f67947c4c0fb299a9e9d77a9b9354e3ff2ed4",
+      "source_commit": "2208aad373face7bf8888ff37973fe6a5e32254e",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "39186858332",
-      "binary_sha256": "7bfdc9a86320e38932d84ee3fef6d088d548809b16dfc17dd648f64e4105471b",
-      "observation_sha256": "fc8ec82f4212b5f35e3ed2ef59691f3542facfca9482c44daaeb2a79ffe06e57",
-      "module_sha256": "b39a694ff5283a97c62d532a8abc25a8a47101baa7dfc025bffc90c1da9d9144",
+      "run_id": "39203172407",
+      "binary_sha256": "e20696157edee640b24fffed031aa5e8b242cc5ba8123d16bc7a8b88a5d0cdd4",
+      "observation_sha256": "d5c94cbe63ccc4e02f4fd576c65ad5bd5cb1381bdb75eaf8fbe22299a71ade68",
+      "module_sha256": "65001c9fedd9085c9d0c4f62a6768fd2528d222e0a495812c24890b44b896c2a",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",
@@ -117,12 +117,12 @@
       ]
     },
     "windows/arm64": {
-      "source_commit": "020f67947c4c0fb299a9e9d77a9b9354e3ff2ed4",
+      "source_commit": "2208aad373face7bf8888ff37973fe6a5e32254e",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "39186858332",
-      "binary_sha256": "095bf92bca707c0027c54e929b1d08c62cb97b0b2888cfbe07a3ea49ea0fb8b3",
-      "observation_sha256": "60a3b695097d8be6dee2c61e452e31b624a393526675bfd16f092222dee87bf6",
-      "module_sha256": "b39a694ff5283a97c62d532a8abc25a8a47101baa7dfc025bffc90c1da9d9144",
+      "run_id": "39203172407",
+      "binary_sha256": "cda09717df58c45cbc982df48748870cb34af6be9ed1036d5c8e6ef8323b7974",
+      "observation_sha256": "c7da7ff3cb244e3e065c50deec6d664bd076195cd351017d5e2a7e9f0d44abd2",
+      "module_sha256": "65001c9fedd9085c9d0c4f62a6768fd2528d222e0a495812c24890b44b896c2a",
       "native_cases": [
         "TestContextBoundedRender",
         "TestContextDocumentContract",

package/plugins/ca-pi/hooks/_artifactauthoritylib.py

@@ -2007,6 +2007,10 @@ def _validate_nested_npm_launch(executable: Path, cwd: Path) -> list[dict[str, s
     except (OSError, AuthorityError) as exc:
         raise AuthorityError("UNSUPPORTED_EXECUTABLE", "nested npm prefix helper is unavailable") from exc
     environment, _environment_digest = _minimal_environment()
+    # The probes only read local configuration. Without this, a fresh npm
+    # profile also runs the registry update check, which can outlast the
+    # probe's bound on a slow network and print a notice to stderr.
+    environment = {**environment, "npm_config_update_notifier": "false"}
 
     def probe(arguments: list[str]) -> list[str]:
         try:

package/plugins/ca-pi/hooks/_host.py

@@ -11,7 +11,7 @@ import hostapi  # noqa: E402
 class PiHost(hostapi.Host):
     name = "pi"
     adapter_name = "@arbiterforge/ca-pi"
-    adapter_version = "0.21.0"
+    adapter_version = "0.21.2"
     update_target = "ca-pi"
     update_tag_prefix = "ca-pi-v"
     update_command = "pi update npm:@arbiterforge/ca-pi"

package/plugins/ca-pi/hooks/hostapi.py

@@ -313,7 +313,7 @@ class Host:
 
     name = "claude"
     adapter_name = "ca"
-    adapter_version = "3.2.0"
+    adapter_version = "3.2.2"
 
     # Update-notifier descriptor. Each independently versioned host overrides
     # these three values in its per-plugin _host.py. Keeping the target,

package/plugins/ca-pi/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.21.0",
+  "version": "0.21.2",
   "private": true,
   "license": "AGPL-3.0-only",
   "type": "module",