@c4a/context-cli 0.6.0-beta.3 → 0.6.0-beta.4

package/cli.js

@@ -49728,8 +49728,15 @@ function extractPhaseSourceFingerprint(input) {
     ref: source3.record.git.ref,
     ...source3.status.head !== undefined ? { head: source3.status.head } : {},
     ...source3.record.subpath !== undefined ? { subpath: source3.record.subpath } : {},
+    scopeHash: source3.status.scopeHash ?? "unknown",
     materializedAt: source3.status.materializedAt
   })).sort((left, right) => left.name.localeCompare(right.name));
+  const freshnessSources = sources.map((source3) => ({
+    name: source3.name,
+    ...source3.subpath !== undefined ? { subpath: source3.subpath } : {},
+    scopeHash: source3.scopeHash,
+    materializedAt: source3.materializedAt
+  }));
   const fingerprint = stableHash({
     phase: {
       id: input.phase.id,
@@ -49743,7 +49750,7 @@ function extractPhaseSourceFingerprint(input) {
       exportedOnly: input.phase.exportedOnly,
       transform: transformFingerprint(input.phase)
     },
-    sources
+    sources: freshnessSources
   });
   return {
     phaseId: input.phase.id,
@@ -50510,12 +50517,19 @@ async function normalizeInputRef(input) {
   }
   return resolved.toLowerCase();
 }
-function refMatchesHead(head, ref2, diagnostics) {
+async function gitTreeHash(input) {
+  if (input.ref === undefined || !isFullCommitSha(input.ref))
+    return;
+  const treeish = input.subpath === undefined ? `${input.ref}^{tree}` : `${input.ref}:${input.subpath}`;
+  const hash2 = await gitOutput(input.gitRoot, ["rev-parse", "--verify", treeish]);
+  return hash2 !== null && /^[0-9a-f]{40}$/iu.test(hash2) ? hash2.toLowerCase() : undefined;
+}
+function validPinnedRef(ref2, diagnostics) {
   if (!isFullCommitSha(ref2)) {
     diagnostics.push(`registry ref must be a full 40-character commit sha: ${ref2}`);
     return false;
   }
-  return head === ref2;
+  return true;
 }
 async function normalizeAddInput(input, existing) {
   const originalLocal = input.local ?? existing?.local;
@@ -50569,6 +50583,49 @@ async function normalizeAddInput(input, existing) {
     }
   };
 }
+async function inspectRepoCheckout(input) {
+  if (input.localAbs === null) {
+    input.diagnostics.push("local path is not declared");
+    input.agentHints.push("Ask the user for a local checkout path before running extraction.");
+    return { gitRepo: false };
+  }
+  if (!input.localExists) {
+    input.diagnostics.push(`local path is missing: ${input.source.local}`);
+    input.agentHints.push(`Ask the user before cloning ${input.source.git.remote} at ${input.source.git.ref}; the CLI will not clone automatically.`);
+    return { gitRepo: false };
+  }
+  const gitRoot = await resolveGitRoot(input.localAbs);
+  if (gitRoot === null) {
+    input.diagnostics.push(`local path is not a git repository: ${input.source.local}`);
+    return { gitRepo: false };
+  }
+  if (!input.scopeExists || input.scopedAbs === null) {
+    input.diagnostics.push(`source subpath is missing: ${input.subpath ?? "."}`);
+    return { gitRepo: true };
+  }
+  const head = await readGitHead(gitRoot) ?? await gitOutput(gitRoot, ["rev-parse", "HEAD"]) ?? undefined;
+  if (!validPinnedRef(input.source.git.ref, input.diagnostics)) {
+    return { gitRepo: true, ...head !== undefined ? { head } : {}, scopedAbs: input.scopedAbs };
+  }
+  const [pinnedScopeHash, scopeHash] = await Promise.all([
+    gitTreeHash({ gitRoot, ref: input.source.git.ref, subpath: input.subpath }),
+    gitTreeHash({ gitRoot, ref: head, subpath: input.subpath })
+  ]);
+  if (pinnedScopeHash === undefined) {
+    input.diagnostics.push(`source boundary ${input.subpath ?? "."} is missing at pinned ref ${input.source.git.ref}`);
+    input.agentHints.push("Ask the user to confirm a valid pinned source commit before updating the ref; the CLI will not change the source repository.");
+  }
+  if (scopeHash === undefined) {
+    input.diagnostics.push(`source boundary ${input.subpath ?? "."} is missing at HEAD ${head ?? "<unknown>"}`);
+  }
+  return {
+    gitRepo: true,
+    ...head !== undefined ? { head } : {},
+    ...pinnedScopeHash !== undefined ? { pinnedScopeHash } : {},
+    ...scopeHash !== undefined ? { scopeHash } : {},
+    scopedAbs: input.scopedAbs
+  };
+}
 async function inspectRepoSource(input) {
   const source3 = input.source;
   const materializedAt = source3.materializedAt ?? defaultMaterializedAt(source3.name);
@@ -50579,43 +50636,36 @@ async function inspectRepoSource(input) {
   const subpath = normalizeSubpath(source3.subpath);
   const scopedAbs = localAbs === null ? null : scopedLocalPath(localAbs, subpath);
   const scopeExists = scopedAbs !== null && existsSync9(scopedAbs);
-  let gitRepo = false;
-  let head;
   let materialized = existsSync9(join13(input.projectRoot, materializedAt));
-  if (!localAbs) {
-    diagnostics.push("local path is not declared");
-    agent_hints.push("Ask the user for a local checkout path before running extraction.");
-  } else if (!localExists) {
-    diagnostics.push(`local path is missing: ${source3.local}`);
-    agent_hints.push(`Ask the user before cloning ${source3.git.remote} at ${source3.git.ref}; the CLI will not clone automatically.`);
-  } else {
-    const gitRoot = await resolveGitRoot(localAbs);
-    gitRepo = gitRoot !== null;
-    if (gitRoot === null) {
-      diagnostics.push(`local path is not a git repository: ${source3.local}`);
-    } else if (!scopeExists || scopedAbs === null) {
-      diagnostics.push(`source subpath is missing: ${subpath ?? "."}`);
-    } else {
-      head = await readGitHead(gitRoot) ?? await gitOutput(gitRoot, ["rev-parse", "HEAD"]) ?? undefined;
-      materialized = input.materialize ? await ensureMaterializedSymlink({
-        projectRoot: input.projectRoot,
-        materializedAt,
-        localAbs: scopedAbs,
-        diagnostics
-      }) : await diagnoseMaterializedSymlink({
-        projectRoot: input.projectRoot,
-        materializedAt,
-        localAbs: scopedAbs,
-        diagnostics,
-        agent_hints,
-        sourceName: source3.name
-      });
-    }
+  const checkout = await inspectRepoCheckout({
+    source: source3,
+    localAbs,
+    localExists,
+    subpath,
+    scopeExists,
+    scopedAbs,
+    diagnostics,
+    agentHints: agent_hints
+  });
+  if (checkout.scopedAbs !== undefined) {
+    materialized = input.materialize ? await ensureMaterializedSymlink({
+      projectRoot: input.projectRoot,
+      materializedAt,
+      localAbs: checkout.scopedAbs,
+      diagnostics
+    }) : await diagnoseMaterializedSymlink({
+      projectRoot: input.projectRoot,
+      materializedAt,
+      localAbs: checkout.scopedAbs,
+      diagnostics,
+      agent_hints,
+      sourceName: source3.name
+    });
   }
-  const refMatches = refMatchesHead(head, source3.git.ref, diagnostics);
-  if (gitRepo && !refMatches) {
-    diagnostics.push(`HEAD ${head ?? "<unknown>"} does not match pinned ref ${source3.git.ref}`);
-    agent_hints.push("Ask the user before running git checkout/reset; the CLI will not change the source repository.");
+  const scopeMatches = checkout.pinnedScopeHash !== undefined && checkout.scopeHash !== undefined && checkout.pinnedScopeHash === checkout.scopeHash;
+  if (checkout.gitRepo && checkout.pinnedScopeHash !== undefined && checkout.scopeHash !== undefined && !scopeMatches) {
+    diagnostics.push(`source boundary ${subpath ?? "."} hash ${checkout.scopeHash} at HEAD ${checkout.head ?? "<unknown>"} does not match pinned ref ${source3.git.ref} hash ${checkout.pinnedScopeHash}`);
+    agent_hints.push("Ask the user to confirm the changed source boundary before updating its pinned ref; the CLI will not change the source repository.");
   }
   return {
     name: source3.name,
@@ -50627,10 +50677,12 @@ async function inspectRepoSource(input) {
     materialized,
     localExists,
     ...subpath !== undefined ? { scopeExists } : {},
-    gitRepo,
-    ...head !== undefined ? { head } : {},
-    refMatches,
-    ready: localExists && scopeExists && gitRepo && refMatches && materialized && diagnostics.length === 0,
+    gitRepo: checkout.gitRepo,
+    ...checkout.head !== undefined ? { head: checkout.head } : {},
+    ...checkout.pinnedScopeHash !== undefined ? { pinnedScopeHash: checkout.pinnedScopeHash } : {},
+    ...checkout.scopeHash !== undefined ? { scopeHash: checkout.scopeHash } : {},
+    scopeMatches,
+    ready: localExists && scopeExists && checkout.gitRepo && scopeMatches && materialized && diagnostics.length === 0,
     diagnostics,
     agent_hints
   };
@@ -51216,6 +51268,7 @@ async function previewExtractTsPhase(input) {
       name: source3.record.name,
       ref: source3.record.git.ref,
       ...source3.status.head !== undefined ? { head: source3.status.head } : {},
+      scopeHash: source3.status.scopeHash ?? "unknown",
       materializedAt: source3.status.materializedAt,
       modules,
       moduleErrors
@@ -56886,6 +56939,7 @@ function selectedSourcesForExtractPhase(input) {
       record: source3,
       status: {
         ...sourceStatus?.head !== undefined ? { head: sourceStatus.head } : {},
+        ...sourceStatus?.scopeHash !== undefined ? { scopeHash: sourceStatus.scopeHash } : {},
         materializedAt: sourceStatus?.materializedAt ?? defaultMaterializedAt2(source3)
       }
     };
@@ -68758,6 +68812,9 @@ async function loadConfirmedStructure(input) {
       approvedStructureRestore: true
     });
     if (validated2.payload === undefined || !validated2.result.valid) {
+      if ((input.allowInvalidStructureForReadOnly === true || input.allowInvalidApprovedStructureForReadOnly === true) && validated2.payload !== undefined) {
+        return validated2.payload;
+      }
       throw workspaceError2("knowledge/structure.yaml is not valid for compile", {
         path: APPROVED_STRUCTURE_FILE,
         diagnostics: validated2.result.diagnostics,
@@ -68847,7 +68904,8 @@ async function loadCompileInput(input) {
     projectRoot: input.projectRoot,
     phase: input.phase,
     evidence,
-    ...input.allowInvalidStructureForReadOnly === true ? { allowInvalidStructureForReadOnly: true } : {}
+    ...input.allowInvalidStructureForReadOnly === true ? { allowInvalidStructureForReadOnly: true } : {},
+    ...input.allowInvalidApprovedStructureForReadOnly === true ? { allowInvalidApprovedStructureForReadOnly: true } : {}
   });
   if (input.allowInvalidStructureForReadOnly === true) {
     return { evidence, structure };
@@ -69519,7 +69577,7 @@ async function runCompileProsePhase(input) {
   const view = input.options.schema === true ? "schema" : input.options.view ?? (input.options.validate || input.options.stage ? undefined : "read-plan");
   const { evidence, structure } = await loadCompileInput({
     ...input,
-    ...(view === "blockers" || view === "schema") && input.options.validate !== true && input.options.stage !== true ? { allowInvalidStructureForReadOnly: true } : {}
+    ...(view === "blockers" || view === "schema") && input.options.validate !== true && input.options.stage !== true ? { allowInvalidStructureForReadOnly: true } : view !== undefined && input.options.validate !== true && input.options.stage !== true ? { allowInvalidApprovedStructureForReadOnly: true } : {}
   });
   if (input.options.validate !== true && input.options.stage !== true) {
     return await runCompileViewRequest({

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@c4a/context-cli",
-  "version": "0.6.0-beta.3",
+  "version": "0.6.0-beta.4",
   "type": "module",
   "bin": {
     "context": "./cli.js"
   },
   "dependencies": {
-    "@c4a/context": "0.6.0-beta.3",
+    "@c4a/context": "0.6.0-beta.4",
     "commander": "^11.0.0",
     "handlebars": "^4.7.8",
     "ink": "^5.0.0",

package/plugins/VERSION

@@ -1 +1 @@
-0.6.0-beta.3
+0.6.0-beta.4

package/plugins/claude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "context",
   "description": "Maintain a project-local knowledge workspace through init and next-step agent guidance.",
-  "version": "0.6.0-beta.3",
+  "version": "0.6.0-beta.4",
   "author": {
     "name": "c4a"
   },

package/plugins/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "context",
-  "version": "0.6.0-beta.3",
+  "version": "0.6.0-beta.4",
   "description": "Maintain a project-local knowledge workspace through init and next-step agent guidance.",
   "author": {
     "name": "c4a"
@@ -18,7 +18,7 @@
   "skills": "./skills/",
   "interface": {
     "displayName": "C4A Context",
-    "shortDescription": "Initialize and advance a local, source-linked project knowledge workspace.\nv0.6.0-beta.3",
+    "shortDescription": "Initialize and advance a local, source-linked project knowledge workspace.\nv0.6.0-beta.4",
     "longDescription": "Create a Context workspace and use agent-guided next steps to register sources, run extraction, review candidates, build package outputs, and verify health without silently mutating source repositories.",
     "developerName": "c4a",
     "category": "Productivity",

package/plugins/cursor/.cursor-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "context",
   "displayName": "C4A Context",
-  "version": "0.6.0-beta.3",
+  "version": "0.6.0-beta.4",
   "description": "Maintain a project-local knowledge workspace through init and next-step agent guidance.",
   "author": {
     "name": "Context4AI",