@calcit/procs 0.13.60 → 0.13.62

package/editing-history/202608291249-host-capability-boundary.md

@@ -0,0 +1,6 @@
+# Host capability ownership boundary
+
+- Added the architecture rule that separates Calcit core, pure/typed libraries, host adapters, `calcit_native_ffi`, and macros.
+- Documented the current native/Node/browser/WASM capability matrix and canonical JSON, `FsPath`, clock, and typed FFI capability surfaces.
+- Defined required backend evidence, explicit unavailable behavior, macro expansion permissions, module migration order, and the review checklist for new effects.
+- Linked the new architecture document from the installation hub and native FFI reference.

package/editing-history/202608291811-snapshot-mutation-version-guard.md

@@ -0,0 +1,24 @@
+# Snapshot mutation toolchain guard
+
+## Context
+
+Calcit 0.13.60 writes canonical symbol keys for Snapshot namespaces and definitions. A globally installed newer CLI could therefore rewrite a project whose `deps.cirru` and CI still pin an older reader, leaving the project unreadable to its declared toolchain.
+
+## Change
+
+- Added a shared preflight that reads the `deps.cirru` adjacent to the selected Snapshot.
+- Snapshot-writing `edit`, `tree`, `config`, and cursor operations now reject an exact `:calcit-version` mismatch before loading or writing the target file.
+- Read-only commands, dry-runs, cursor navigation, projects without `deps.cirru`, and legacy manifests without `:calcit-version` remain usable.
+- Invalid non-string or non-semver declarations fail with a manifest-specific diagnostic.
+- The failure explains both safe paths: use the pinned Calcit release, or explicitly upgrade the project with `caps <deps-file> upgrade --all`.
+
+## Verification
+
+- Unit coverage for matching, absent, mismatched, and invalid declarations.
+- Real-project smoke confirmed `config show` remains readable while `edit format` is blocked without changing the Snapshot hash.
+- `cargo fmt --check`
+- `cargo clippy --all-targets -- -D warnings`
+- `cargo test`
+- `yarn compile`
+- `yarn check-agent-interface` (17/17)
+- `yarn check-all` (Calcit core 223/223, JS/IR/WASM and performance checks)

package/editing-history/202608291814-caps-manifest-argument-order.md

@@ -0,0 +1,3 @@
+# Preserve `caps` manifest argument order in mutation guidance
+
+The custom `deps.cirru` path is a top-level `caps` positional argument. Guidance must use `caps <deps-file> upgrade --all`; placing the path after `upgrade --all` makes argh parse it as a dependency package name. The mismatch regression test now locks the correct ordering.

package/editing-history/202608291822-quote-mutation-guard-path.md

@@ -0,0 +1,3 @@
+# Quote the manifest path in mutation guidance
+
+The Snapshot toolchain guard now renders the adjacent `deps.cirru` path with the existing shell quoting helper. A regression fixture uses a directory containing whitespace and verifies the suggested `caps '<deps-file>' upgrade --all` command remains a single shell argument. The fixture identity also combines a timestamp with an atomic sequence so parallel tests cannot share a manifest.

package/editing-history/202608291827-release-0.13.61.md

@@ -0,0 +1,3 @@
+# Release 0.13.61
+
+Patch release for the Snapshot mutation toolchain guard from PR #517. Snapshot-writing CLI commands now reject a mismatch with adjacent `deps.cirru :calcit-version` before any write, while read-only and dry-run workflows remain available. Diagnostics preserve custom manifest paths, argument order, and shell quoting.

package/editing-history/202608291857-caps-clone-outside-metadata-lock.md

@@ -0,0 +1,18 @@
+# Keep network work outside the caps metadata lock
+
+## Context
+
+`caps` resolves independent modules in parallel. A cache miss previously acquired the global `.metadata.lock` before cloning a repository and held the lock for the entire network operation. A clone lasting longer than the lock retry window caused otherwise independent workers to fail with a misleading lock timeout.
+
+## Change
+
+- Keep the first cache lookup and metadata refresh under a short lock.
+- Clone a missing repository into its process-unique temporary path without holding the global lock.
+- Reacquire the lock only to resolve an installation race, atomically rename the clone into the content-addressed store, and update metadata.
+- Preserve validation when another process installs the same commit first.
+
+## Verification
+
+- Rust tests and strict Clippy pass.
+- TypeScript compilation and the 17/17 agent-interface suite pass.
+- A real cold-cache `caps --strict --ci` run over calcium-workflow's dependency graph cloned concurrent modules without a metadata-lock timeout.

package/editing-history/202608291903-release-0.13.62.md

@@ -0,0 +1,4 @@
+# Release 0.13.62
+
+- Publish the `caps` cold-cache concurrency fix so dependency upgrades do not hold the global metadata lock during network clones.
+- Keep the Cargo and npm package versions aligned at 0.13.62.

package/lib/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@calcit/procs",
-    "version": "0.13.60",
+    "version": "0.13.62",
     "main": "./lib/calcit.procs.mjs",
     "devDependencies": {
         "@types/node": "^25.7.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@calcit/procs",
-  "version": "0.13.60",
+  "version": "0.13.62",
   "main": "./lib/calcit.procs.mjs",
   "devDependencies": {
     "@types/node": "^25.7.0",