@mc-and-his-agents/loom-installer 0.1.12 → 0.1.14

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mc-and-his-agents/loom-installer",
-  "version": "0.1.12",
+  "version": "0.1.14",
   "description": "Node installer for Loom plugin and single-skill installation surfaces.",
   "type": "module",
   "bin": {

package/payload/manifest.json

@@ -2,9 +2,9 @@
   "schema_version": "loom-installer-payload/v1",
   "loom_version": "0.4.0",
   "source_repository": "https://github.com/MC-and-his-Agents/Loom",
-  "source_commit": "f11f0f24401eca30d21786c41e39a74be05bf342",
+  "source_commit": "7f500dab49df607146abae440b849dad8f90cf27",
   "source_ref": "main",
-  "built_at": "2026-04-25T11:57:32+08:00",
+  "built_at": "2026-04-25T12:49:57+08:00",
   "runtime": {
     "python_minimum": "3.10",
     "python_recommended": "3.11+"
@@ -628,13 +628,13 @@
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_check.py",
-      "bytes": 256345,
-      "sha256": "5a515322557bf66f21c37e138e3e0302be450842abdf5b42a5c9b94a62012b95"
+      "bytes": 265359,
+      "sha256": "8d94670aca94c6166294e145d497eb9f9ba6bb1345258d131ea8722cb071d786"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_flow.py",
-      "bytes": 260571,
-      "sha256": "47c0437b00572be5cf84125fd5ccde1449afb41c93c493942e6c4c1dbf3462cb"
+      "bytes": 274468,
+      "sha256": "95a417012fce9a5c628d1e6e6d1428c875d2a9f483174ca93a5ad9944d09c398"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_init.py",
@@ -1213,13 +1213,13 @@
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 256345,
-      "sha256": "5a515322557bf66f21c37e138e3e0302be450842abdf5b42a5c9b94a62012b95"
+      "bytes": 265359,
+      "sha256": "8d94670aca94c6166294e145d497eb9f9ba6bb1345258d131ea8722cb071d786"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 260571,
-      "sha256": "47c0437b00572be5cf84125fd5ccde1449afb41c93c493942e6c4c1dbf3462cb"
+      "bytes": 274468,
+      "sha256": "95a417012fce9a5c628d1e6e6d1428c875d2a9f483174ca93a5ad9944d09c398"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_init.py",
@@ -1828,13 +1828,13 @@
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 256345,
-      "sha256": "5a515322557bf66f21c37e138e3e0302be450842abdf5b42a5c9b94a62012b95"
+      "bytes": 265359,
+      "sha256": "8d94670aca94c6166294e145d497eb9f9ba6bb1345258d131ea8722cb071d786"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 260571,
-      "sha256": "47c0437b00572be5cf84125fd5ccde1449afb41c93c493942e6c4c1dbf3462cb"
+      "bytes": 274468,
+      "sha256": "95a417012fce9a5c628d1e6e6d1428c875d2a9f483174ca93a5ad9944d09c398"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_init.py",
@@ -2443,13 +2443,13 @@
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 256345,
-      "sha256": "5a515322557bf66f21c37e138e3e0302be450842abdf5b42a5c9b94a62012b95"
+      "bytes": 265359,
+      "sha256": "8d94670aca94c6166294e145d497eb9f9ba6bb1345258d131ea8722cb071d786"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 260571,
-      "sha256": "47c0437b00572be5cf84125fd5ccde1449afb41c93c493942e6c4c1dbf3462cb"
+      "bytes": 274468,
+      "sha256": "95a417012fce9a5c628d1e6e6d1428c875d2a9f483174ca93a5ad9944d09c398"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_init.py",
@@ -3063,13 +3063,13 @@
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 256345,
-      "sha256": "5a515322557bf66f21c37e138e3e0302be450842abdf5b42a5c9b94a62012b95"
+      "bytes": 265359,
+      "sha256": "8d94670aca94c6166294e145d497eb9f9ba6bb1345258d131ea8722cb071d786"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 260571,
-      "sha256": "47c0437b00572be5cf84125fd5ccde1449afb41c93c493942e6c4c1dbf3462cb"
+      "bytes": 274468,
+      "sha256": "95a417012fce9a5c628d1e6e6d1428c875d2a9f483174ca93a5ad9944d09c398"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_init.py",
@@ -3678,13 +3678,13 @@
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 256345,
-      "sha256": "5a515322557bf66f21c37e138e3e0302be450842abdf5b42a5c9b94a62012b95"
+      "bytes": 265359,
+      "sha256": "8d94670aca94c6166294e145d497eb9f9ba6bb1345258d131ea8722cb071d786"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 260571,
-      "sha256": "47c0437b00572be5cf84125fd5ccde1449afb41c93c493942e6c4c1dbf3462cb"
+      "bytes": 274468,
+      "sha256": "95a417012fce9a5c628d1e6e6d1428c875d2a9f483174ca93a5ad9944d09c398"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -4293,13 +4293,13 @@
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 256345,
-      "sha256": "5a515322557bf66f21c37e138e3e0302be450842abdf5b42a5c9b94a62012b95"
+      "bytes": 265359,
+      "sha256": "8d94670aca94c6166294e145d497eb9f9ba6bb1345258d131ea8722cb071d786"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 260571,
-      "sha256": "47c0437b00572be5cf84125fd5ccde1449afb41c93c493942e6c4c1dbf3462cb"
+      "bytes": 274468,
+      "sha256": "95a417012fce9a5c628d1e6e6d1428c875d2a9f483174ca93a5ad9944d09c398"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_init.py",
@@ -4908,13 +4908,13 @@
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 256345,
-      "sha256": "5a515322557bf66f21c37e138e3e0302be450842abdf5b42a5c9b94a62012b95"
+      "bytes": 265359,
+      "sha256": "8d94670aca94c6166294e145d497eb9f9ba6bb1345258d131ea8722cb071d786"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 260571,
-      "sha256": "47c0437b00572be5cf84125fd5ccde1449afb41c93c493942e6c4c1dbf3462cb"
+      "bytes": 274468,
+      "sha256": "95a417012fce9a5c628d1e6e6d1428c875d2a9f483174ca93a5ad9944d09c398"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_init.py",
@@ -5523,13 +5523,13 @@
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 256345,
-      "sha256": "5a515322557bf66f21c37e138e3e0302be450842abdf5b42a5c9b94a62012b95"
+      "bytes": 265359,
+      "sha256": "8d94670aca94c6166294e145d497eb9f9ba6bb1345258d131ea8722cb071d786"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 260571,
-      "sha256": "47c0437b00572be5cf84125fd5ccde1449afb41c93c493942e6c4c1dbf3462cb"
+      "bytes": 274468,
+      "sha256": "95a417012fce9a5c628d1e6e6d1428c875d2a9f483174ca93a5ad9944d09c398"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -6138,13 +6138,13 @@
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 256345,
-      "sha256": "5a515322557bf66f21c37e138e3e0302be450842abdf5b42a5c9b94a62012b95"
+      "bytes": 265359,
+      "sha256": "8d94670aca94c6166294e145d497eb9f9ba6bb1345258d131ea8722cb071d786"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 260571,
-      "sha256": "47c0437b00572be5cf84125fd5ccde1449afb41c93c493942e6c4c1dbf3462cb"
+      "bytes": 274468,
+      "sha256": "95a417012fce9a5c628d1e6e6d1428c875d2a9f483174ca93a5ad9944d09c398"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_init.py",

package/payload/plugin/loom/skills/shared/scripts/loom_check.py

@@ -93,7 +93,9 @@ CORE_DOCS = (
     "docs/evidence/extraction-ledger.md",
     "docs/evidence/landing-map.md",
     "docs/evidence/validations/validation-closeout-reconciliation-blocking-gate.md",
+    "docs/evidence/validations/validation-github-profile-binding-orchestration.md",
     "docs/evidence/validations/validation-loom-core-runtime-parity.md",
+    "docs/evidence/validations/validation-shadow-parity-blocking-gate.md",
     "docs/evidence/validations/validation-syvert-strong-governance-parity.md",
     "docs/adoption/rationale.md",
     "docs/adoption/routing-and-checkpoints.md",
@@ -969,10 +971,17 @@ def require_shadow_parity_payload(
         return
     if payload.get("command") != "shadow-parity":
         failures.append(Failure(category, f"{context} must report `command: shadow-parity`"))
-    if payload.get("result") not in {"pass", "warn"}:
-        failures.append(Failure(category, f"{context} result must be `pass` or `warn`"))
-    if payload.get("fallback_to") is not None:
-        failures.append(Failure(category, f"{context} fallback_to must remain `null`"))
+    mode = payload.get("mode", "validation-only")
+    if mode not in {"validation-only", "blocking"}:
+        failures.append(Failure(category, f"{context} mode must be `validation-only` or `blocking`"))
+    if payload.get("blocking") != (mode == "blocking"):
+        failures.append(Failure(category, f"{context} blocking flag must match mode"))
+    allowed_results = {"pass", "block"} if mode == "blocking" else {"pass", "warn"}
+    if payload.get("result") not in allowed_results:
+        failures.append(Failure(category, f"{context} result must stay within the stable mode-specific contract"))
+    expected_fallbacks = {"manual-reconciliation"} if payload.get("result") == "block" else {None}
+    if payload.get("fallback_to") not in expected_fallbacks:
+        failures.append(Failure(category, f"{context} fallback_to must match the shadow parity enforcement mode"))
     if not isinstance(payload.get("summary"), str) or not payload.get("summary"):
         failures.append(Failure(category, f"{context} must include non-empty `summary`"))
     if not isinstance(payload.get("missing_inputs"), list):
@@ -1008,6 +1017,14 @@ def require_shadow_parity_payload(
             failures.append(Failure(category, f"{context} reports[{index}] must declare a known surface"))
         if report.get("result") not in {"match", "mismatch", "unreadable"}:
             failures.append(Failure(category, f"{context} reports[{index}] result must stay within the stable contract"))
+        if report.get("classification") not in {None, "drift", "gate_failure"}:
+            failures.append(Failure(category, f"{context} reports[{index}] classification must stay within the stable contract"))
+        if not isinstance(report.get("blocking"), bool):
+            failures.append(Failure(category, f"{context} reports[{index}] must include boolean `blocking`"))
+        if not isinstance(report.get("recommended_action"), str) or not report.get("recommended_action"):
+            failures.append(Failure(category, f"{context} reports[{index}] must include non-empty `recommended_action`"))
+        if mode == "blocking" and report.get("result") != "match" and report.get("blocking") is not True:
+            failures.append(Failure(category, f"{context} reports[{index}] must block non-matching reports in blocking mode"))
         if not isinstance(report.get("summary"), str) or not report.get("summary"):
             failures.append(Failure(category, f"{context} reports[{index}] must include non-empty `summary`"))
         if not isinstance(report.get("missing_inputs"), list):
@@ -1230,6 +1247,78 @@ def require_runtime_parity_payload(
             failures.append(Failure(category, f"{context} check `{check.get('name')}` must include `evidence`"))
 
 
+def require_github_binding_payload(
+    failures: list[Failure],
+    *,
+    category: str,
+    context: str,
+    payload: object,
+) -> None:
+    if not isinstance(payload, dict):
+        failures.append(Failure(category, f"{context} must be an object"))
+        return
+    if payload.get("command") != "governance-profile":
+        failures.append(Failure(category, f"{context} must report `command: governance-profile`"))
+    if payload.get("operation") != "binding":
+        failures.append(Failure(category, f"{context} must report `operation: binding`"))
+    if payload.get("schema_version") != "loom-github-binding/v1":
+        failures.append(Failure(category, f"{context} schema_version must be `loom-github-binding/v1`"))
+    if payload.get("result") not in {"pass", "block"}:
+        failures.append(Failure(category, f"{context} result must be pass/block"))
+    if payload.get("fallback_to") not in {None, "github-profile-binding"}:
+        failures.append(Failure(category, f"{context} fallback_to must be null or `github-profile-binding`"))
+    if not isinstance(payload.get("missing_inputs"), list):
+        failures.append(Failure(category, f"{context} missing_inputs must be a list"))
+    binding = payload.get("binding")
+    if not isinstance(binding, dict):
+        failures.append(Failure(category, f"{context} must include `binding` as an object"))
+        return
+    if binding.get("schema_version") != "loom-github-binding/v1":
+        failures.append(Failure(category, f"{context}.binding schema_version must be `loom-github-binding/v1`"))
+    objects = binding.get("objects")
+    expected_objects = {"phase", "fr", "work_item", "branch", "implementation_pr", "merge_commit", "target_branch"}
+    if not isinstance(objects, dict) or set(objects) != expected_objects:
+        failures.append(Failure(category, f"{context}.binding.objects must expose the stable GitHub binding object set"))
+    chain = binding.get("chain")
+    expected_chain = [
+        ("phase", "fr"),
+        ("fr", "work_item"),
+        ("work_item", "implementation_pr"),
+        ("implementation_pr", "merge_commit"),
+        ("merge_commit", "target_branch"),
+    ]
+    if not isinstance(chain, list):
+        failures.append(Failure(category, f"{context}.binding.chain must be a list"))
+    else:
+        actual_chain = [
+            (entry.get("from"), entry.get("to"))
+            for entry in chain
+            if isinstance(entry, dict)
+        ]
+        if actual_chain != expected_chain:
+            failures.append(Failure(category, f"{context}.binding.chain must preserve Phase -> FR -> Work Item -> PR -> merge commit -> target branch order"))
+        for entry in chain:
+            if not isinstance(entry, dict):
+                failures.append(Failure(category, f"{context}.binding.chain entries must be objects"))
+                continue
+            if entry.get("status") not in {"present", "missing"}:
+                failures.append(Failure(category, f"{context}.binding.chain statuses must be present/missing"))
+    findings = binding.get("findings")
+    if not isinstance(findings, list):
+        failures.append(Failure(category, f"{context}.binding.findings must be a list"))
+        return
+    for finding in findings:
+        if not isinstance(finding, dict):
+            failures.append(Failure(category, f"{context}.binding.findings entries must be objects"))
+            continue
+        if finding.get("category") not in {"stale", "drift", "gate_failure"}:
+            failures.append(Failure(category, f"{context}.binding findings must use stable taxonomy categories"))
+        if finding.get("kind") != "binding_failure":
+            failures.append(Failure(category, f"{context}.binding findings must use `binding_failure` for orchestration gaps"))
+        if finding.get("fallback_to") != "github-profile-binding":
+            failures.append(Failure(category, f"{context}.binding findings must fallback to `github-profile-binding`"))
+
+
 def require_review_record_contract(
     failures: list[Failure],
     *,
@@ -2216,6 +2305,11 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
             ["python3", "tools/loom_flow.py", "governance-profile", "upgrade-plan", "--target", "examples/new-project"],
             {"pass", "block"},
         ),
+        (
+            "governance-profile-binding",
+            ["python3", "tools/loom_flow.py", "governance-profile", "binding", "--target", "."],
+            {"block"},
+        ),
         (
             "flow-pre-review",
             [
@@ -2463,6 +2557,13 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
                 context=f"`{label}` governance_control_plane",
                 payload=control_plane,
             )
+        if label == "governance-profile-binding":
+            require_github_binding_payload(
+                failures,
+                category="daily-execution-cli",
+                context="`governance-profile binding`",
+                payload=payload,
+            )
         if label == "flow-pre-review":
             require_runtime_state_payload(
                 failures,
@@ -5301,6 +5402,23 @@ def check_repo_interop_contracts(root: Path) -> list[Failure]:
             if parity_payload.get("result") != "pass":
                 failures.append(Failure("repo-interop", "`shadow-parity` must pass when all declared surfaces match"))
 
+        blocking_match_payload, error = load_command_json(
+            root,
+            ["python3", "tools/loom_flow.py", "shadow-parity", "--target", str(present_target), "--blocking"],
+        )
+        if error:
+            failures.append(Failure("repo-interop", f"`shadow-parity --blocking` match sample failed: {error}"))
+        else:
+            require_shadow_parity_payload(
+                failures,
+                category="repo-interop",
+                context="`shadow-parity --blocking` match sample",
+                payload=blocking_match_payload,
+                expected_reports=4,
+            )
+            if blocking_match_payload.get("result") != "pass":
+                failures.append(Failure("repo-interop", "`shadow-parity --blocking` must pass when all declared surfaces match"))
+
         mismatch_target = base / "mismatch"
         shutil.copytree(present_target, mismatch_target)
         write_json(mismatch_target / ".loom/shadow/review-repo.json", {"decision": "block"})
@@ -5322,6 +5440,62 @@ def check_repo_interop_contracts(root: Path) -> list[Failure]:
             if not isinstance(reports, list) or not reports or reports[0].get("result") != "mismatch":
                 failures.append(Failure("repo-interop", "`shadow-parity` mismatch sample must report `mismatch`"))
 
+        blocking_mismatch_payload, error = load_command_json(
+            root,
+            [
+                "python3",
+                "tools/loom_flow.py",
+                "shadow-parity",
+                "--target",
+                str(mismatch_target),
+                "--surface",
+                "review",
+                "--mode",
+                "blocking",
+            ],
+        )
+        if error:
+            failures.append(Failure("repo-interop", f"`shadow-parity --mode blocking` mismatch sample failed: {error}"))
+        else:
+            require_shadow_parity_payload(
+                failures,
+                category="repo-interop",
+                context="`shadow-parity --mode blocking` mismatch sample",
+                payload=blocking_mismatch_payload,
+                expected_reports=1,
+            )
+            if blocking_mismatch_payload.get("result") != "block":
+                failures.append(Failure("repo-interop", "`shadow-parity --mode blocking` must block mismatches"))
+
+        unreadable_target = base / "unreadable"
+        shutil.copytree(present_target, unreadable_target)
+        (unreadable_target / ".loom/shadow/closeout-repo.json").unlink()
+        blocking_unreadable_payload, error = load_command_json(
+            root,
+            [
+                "python3",
+                "tools/loom_flow.py",
+                "shadow-parity",
+                "--target",
+                str(unreadable_target),
+                "--surface",
+                "closeout",
+                "--blocking",
+            ],
+        )
+        if error:
+            failures.append(Failure("repo-interop", f"`shadow-parity --blocking` unreadable sample failed: {error}"))
+        else:
+            require_shadow_parity_payload(
+                failures,
+                category="repo-interop",
+                context="`shadow-parity --blocking` unreadable sample",
+                payload=blocking_unreadable_payload,
+                expected_reports=1,
+            )
+            if blocking_unreadable_payload.get("result") != "block":
+                failures.append(Failure("repo-interop", "`shadow-parity --blocking` must block unreadable surfaces"))
+
     return failures