@mc-and-his-agents/loom-installer 0.1.13 → 0.1.15

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mc-and-his-agents/loom-installer",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "description": "Node installer for Loom plugin and single-skill installation surfaces.",
   "type": "module",
   "bin": {

package/payload/manifest.json

@@ -2,9 +2,9 @@
   "schema_version": "loom-installer-payload/v1",
   "loom_version": "0.4.0",
   "source_repository": "https://github.com/MC-and-his-Agents/Loom",
-  "source_commit": "b07d54d4963a674da0ff2397f4ad244cb3028584",
+  "source_commit": "3e2a33cf1cb7e519d321cb2617b874e285815c5b",
   "source_ref": "main",
-  "built_at": "2026-04-25T12:04:56+08:00",
+  "built_at": "2026-04-25T13:01:36+08:00",
   "runtime": {
     "python_minimum": "3.10",
     "python_recommended": "3.11+"
@@ -628,13 +628,13 @@
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_check.py",
-      "bytes": 260856,
-      "sha256": "9f9b145158d659764c853f7234dfb7308c96e78031f43741e431905b91a6b7fc"
+      "bytes": 265994,
+      "sha256": "77334371c586c5e7247e6b781758cbf656594d4d5b8cff33f16b967b43f7811c"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_flow.py",
-      "bytes": 262117,
-      "sha256": "ec49996bbebb9a59fee0f906d301c2c66e13e17ec548ef762f2b0e33e9abbe32"
+      "bytes": 279330,
+      "sha256": "ad6d6376a665cdfcd9de2316957e8f36e1ec087de59f29cebe6a6496ac0a555e"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_init.py",
@@ -1213,13 +1213,13 @@
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 260856,
-      "sha256": "9f9b145158d659764c853f7234dfb7308c96e78031f43741e431905b91a6b7fc"
+      "bytes": 265994,
+      "sha256": "77334371c586c5e7247e6b781758cbf656594d4d5b8cff33f16b967b43f7811c"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 262117,
-      "sha256": "ec49996bbebb9a59fee0f906d301c2c66e13e17ec548ef762f2b0e33e9abbe32"
+      "bytes": 279330,
+      "sha256": "ad6d6376a665cdfcd9de2316957e8f36e1ec087de59f29cebe6a6496ac0a555e"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_init.py",
@@ -1828,13 +1828,13 @@
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 260856,
-      "sha256": "9f9b145158d659764c853f7234dfb7308c96e78031f43741e431905b91a6b7fc"
+      "bytes": 265994,
+      "sha256": "77334371c586c5e7247e6b781758cbf656594d4d5b8cff33f16b967b43f7811c"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 262117,
-      "sha256": "ec49996bbebb9a59fee0f906d301c2c66e13e17ec548ef762f2b0e33e9abbe32"
+      "bytes": 279330,
+      "sha256": "ad6d6376a665cdfcd9de2316957e8f36e1ec087de59f29cebe6a6496ac0a555e"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_init.py",
@@ -2443,13 +2443,13 @@
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 260856,
-      "sha256": "9f9b145158d659764c853f7234dfb7308c96e78031f43741e431905b91a6b7fc"
+      "bytes": 265994,
+      "sha256": "77334371c586c5e7247e6b781758cbf656594d4d5b8cff33f16b967b43f7811c"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 262117,
-      "sha256": "ec49996bbebb9a59fee0f906d301c2c66e13e17ec548ef762f2b0e33e9abbe32"
+      "bytes": 279330,
+      "sha256": "ad6d6376a665cdfcd9de2316957e8f36e1ec087de59f29cebe6a6496ac0a555e"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_init.py",
@@ -3063,13 +3063,13 @@
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 260856,
-      "sha256": "9f9b145158d659764c853f7234dfb7308c96e78031f43741e431905b91a6b7fc"
+      "bytes": 265994,
+      "sha256": "77334371c586c5e7247e6b781758cbf656594d4d5b8cff33f16b967b43f7811c"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 262117,
-      "sha256": "ec49996bbebb9a59fee0f906d301c2c66e13e17ec548ef762f2b0e33e9abbe32"
+      "bytes": 279330,
+      "sha256": "ad6d6376a665cdfcd9de2316957e8f36e1ec087de59f29cebe6a6496ac0a555e"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_init.py",
@@ -3678,13 +3678,13 @@
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 260856,
-      "sha256": "9f9b145158d659764c853f7234dfb7308c96e78031f43741e431905b91a6b7fc"
+      "bytes": 265994,
+      "sha256": "77334371c586c5e7247e6b781758cbf656594d4d5b8cff33f16b967b43f7811c"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 262117,
-      "sha256": "ec49996bbebb9a59fee0f906d301c2c66e13e17ec548ef762f2b0e33e9abbe32"
+      "bytes": 279330,
+      "sha256": "ad6d6376a665cdfcd9de2316957e8f36e1ec087de59f29cebe6a6496ac0a555e"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -4293,13 +4293,13 @@
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 260856,
-      "sha256": "9f9b145158d659764c853f7234dfb7308c96e78031f43741e431905b91a6b7fc"
+      "bytes": 265994,
+      "sha256": "77334371c586c5e7247e6b781758cbf656594d4d5b8cff33f16b967b43f7811c"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 262117,
-      "sha256": "ec49996bbebb9a59fee0f906d301c2c66e13e17ec548ef762f2b0e33e9abbe32"
+      "bytes": 279330,
+      "sha256": "ad6d6376a665cdfcd9de2316957e8f36e1ec087de59f29cebe6a6496ac0a555e"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_init.py",
@@ -4908,13 +4908,13 @@
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 260856,
-      "sha256": "9f9b145158d659764c853f7234dfb7308c96e78031f43741e431905b91a6b7fc"
+      "bytes": 265994,
+      "sha256": "77334371c586c5e7247e6b781758cbf656594d4d5b8cff33f16b967b43f7811c"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 262117,
-      "sha256": "ec49996bbebb9a59fee0f906d301c2c66e13e17ec548ef762f2b0e33e9abbe32"
+      "bytes": 279330,
+      "sha256": "ad6d6376a665cdfcd9de2316957e8f36e1ec087de59f29cebe6a6496ac0a555e"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_init.py",
@@ -5523,13 +5523,13 @@
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 260856,
-      "sha256": "9f9b145158d659764c853f7234dfb7308c96e78031f43741e431905b91a6b7fc"
+      "bytes": 265994,
+      "sha256": "77334371c586c5e7247e6b781758cbf656594d4d5b8cff33f16b967b43f7811c"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 262117,
-      "sha256": "ec49996bbebb9a59fee0f906d301c2c66e13e17ec548ef762f2b0e33e9abbe32"
+      "bytes": 279330,
+      "sha256": "ad6d6376a665cdfcd9de2316957e8f36e1ec087de59f29cebe6a6496ac0a555e"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -6138,13 +6138,13 @@
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 260856,
-      "sha256": "9f9b145158d659764c853f7234dfb7308c96e78031f43741e431905b91a6b7fc"
+      "bytes": 265994,
+      "sha256": "77334371c586c5e7247e6b781758cbf656594d4d5b8cff33f16b967b43f7811c"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 262117,
-      "sha256": "ec49996bbebb9a59fee0f906d301c2c66e13e17ec548ef762f2b0e33e9abbe32"
+      "bytes": 279330,
+      "sha256": "ad6d6376a665cdfcd9de2316957e8f36e1ec087de59f29cebe6a6496ac0a555e"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_init.py",

package/payload/plugin/loom/skills/shared/scripts/loom_check.py

@@ -93,6 +93,8 @@ CORE_DOCS = (
     "docs/evidence/extraction-ledger.md",
     "docs/evidence/landing-map.md",
     "docs/evidence/validations/validation-closeout-reconciliation-blocking-gate.md",
+    "docs/evidence/validations/validation-github-profile-binding-orchestration.md",
+    "docs/evidence/validations/validation-github-profile-drift-reconciliation.md",
     "docs/evidence/validations/validation-loom-core-runtime-parity.md",
     "docs/evidence/validations/validation-shadow-parity-blocking-gate.md",
     "docs/evidence/validations/validation-syvert-strong-governance-parity.md",
@@ -1137,7 +1139,7 @@ def require_reconciliation_payload(
             continue
         if finding.get("category") not in {"drift", "gate_failure"}:
             failures.append(Failure(category, f"{context} reconciliation finding category must stay within the stable taxonomy"))
-        if finding.get("kind") not in {"merged_but_open", "absorbed_but_open", "parent_drift", "project_drift", "host_signal_drift"}:
+        if finding.get("kind") not in {"merged_but_open", "absorbed_but_open", "parent_drift", "project_drift", "host_signal_drift", "binding_failure", "merge_signal_drift"}:
             failures.append(Failure(category, f"{context} reconciliation finding kind must stay within the stable contract"))
         if finding.get("severity") not in {"warn", "fix-needed", "block"}:
             failures.append(Failure(category, f"{context} reconciliation finding severity must stay within the stable contract"))
@@ -1149,6 +1151,12 @@ def require_reconciliation_payload(
             failures.append(Failure(category, f"{context} reconciliation findings must include `evidence`"))
         if not isinstance(finding.get("recommended_action"), str) or not finding.get("recommended_action"):
             failures.append(Failure(category, f"{context} reconciliation findings must include non-empty `recommended_action`"))
+    binding = payload.get("binding")
+    if binding is not None:
+        if not isinstance(binding, dict):
+            failures.append(Failure(category, f"{context} binding must be an object when present"))
+        elif binding.get("schema_version") != "loom-github-binding/v1":
+            failures.append(Failure(category, f"{context} binding must use `loom-github-binding/v1`"))
 
 
 def require_closeout_reconciliation_contract(
@@ -1246,6 +1254,78 @@ def require_runtime_parity_payload(
             failures.append(Failure(category, f"{context} check `{check.get('name')}` must include `evidence`"))
 
 
+def require_github_binding_payload(
+    failures: list[Failure],
+    *,
+    category: str,
+    context: str,
+    payload: object,
+) -> None:
+    if not isinstance(payload, dict):
+        failures.append(Failure(category, f"{context} must be an object"))
+        return
+    if payload.get("command") != "governance-profile":
+        failures.append(Failure(category, f"{context} must report `command: governance-profile`"))
+    if payload.get("operation") != "binding":
+        failures.append(Failure(category, f"{context} must report `operation: binding`"))
+    if payload.get("schema_version") != "loom-github-binding/v1":
+        failures.append(Failure(category, f"{context} schema_version must be `loom-github-binding/v1`"))
+    if payload.get("result") not in {"pass", "block"}:
+        failures.append(Failure(category, f"{context} result must be pass/block"))
+    if payload.get("fallback_to") not in {None, "github-profile-binding"}:
+        failures.append(Failure(category, f"{context} fallback_to must be null or `github-profile-binding`"))
+    if not isinstance(payload.get("missing_inputs"), list):
+        failures.append(Failure(category, f"{context} missing_inputs must be a list"))
+    binding = payload.get("binding")
+    if not isinstance(binding, dict):
+        failures.append(Failure(category, f"{context} must include `binding` as an object"))
+        return
+    if binding.get("schema_version") != "loom-github-binding/v1":
+        failures.append(Failure(category, f"{context}.binding schema_version must be `loom-github-binding/v1`"))
+    objects = binding.get("objects")
+    expected_objects = {"phase", "fr", "work_item", "branch", "implementation_pr", "merge_commit", "target_branch"}
+    if not isinstance(objects, dict) or set(objects) != expected_objects:
+        failures.append(Failure(category, f"{context}.binding.objects must expose the stable GitHub binding object set"))
+    chain = binding.get("chain")
+    expected_chain = [
+        ("phase", "fr"),
+        ("fr", "work_item"),
+        ("work_item", "implementation_pr"),
+        ("implementation_pr", "merge_commit"),
+        ("merge_commit", "target_branch"),
+    ]
+    if not isinstance(chain, list):
+        failures.append(Failure(category, f"{context}.binding.chain must be a list"))
+    else:
+        actual_chain = [
+            (entry.get("from"), entry.get("to"))
+            for entry in chain
+            if isinstance(entry, dict)
+        ]
+        if actual_chain != expected_chain:
+            failures.append(Failure(category, f"{context}.binding.chain must preserve Phase -> FR -> Work Item -> PR -> merge commit -> target branch order"))
+        for entry in chain:
+            if not isinstance(entry, dict):
+                failures.append(Failure(category, f"{context}.binding.chain entries must be objects"))
+                continue
+            if entry.get("status") not in {"present", "missing"}:
+                failures.append(Failure(category, f"{context}.binding.chain statuses must be present/missing"))
+    findings = binding.get("findings")
+    if not isinstance(findings, list):
+        failures.append(Failure(category, f"{context}.binding.findings must be a list"))
+        return
+    for finding in findings:
+        if not isinstance(finding, dict):
+            failures.append(Failure(category, f"{context}.binding.findings entries must be objects"))
+            continue
+        if finding.get("category") not in {"stale", "drift", "gate_failure"}:
+            failures.append(Failure(category, f"{context}.binding findings must use stable taxonomy categories"))
+        if finding.get("kind") != "binding_failure":
+            failures.append(Failure(category, f"{context}.binding findings must use `binding_failure` for orchestration gaps"))
+        if finding.get("fallback_to") != "github-profile-binding":
+            failures.append(Failure(category, f"{context}.binding findings must fallback to `github-profile-binding`"))
+
+
 def require_review_record_contract(
     failures: list[Failure],
     *,
@@ -2232,6 +2312,11 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
             ["python3", "tools/loom_flow.py", "governance-profile", "upgrade-plan", "--target", "examples/new-project"],
             {"pass", "block"},
         ),
+        (
+            "governance-profile-binding",
+            ["python3", "tools/loom_flow.py", "governance-profile", "binding", "--target", "."],
+            {"block"},
+        ),
         (
             "flow-pre-review",
             [
@@ -2479,6 +2564,13 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
                 context=f"`{label}` governance_control_plane",
                 payload=control_plane,
             )
+        if label == "governance-profile-binding":
+            require_github_binding_payload(
+                failures,
+                category="daily-execution-cli",
+                context="`governance-profile binding`",
+                payload=payload,
+            )
         if label == "flow-pre-review":
             require_runtime_state_payload(
                 failures,
@@ -4739,6 +4831,8 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
         ("merged_but_open", "fix-needed", "reconciliation-sync"),
         ("absorbed_but_open", "fix-needed", "reconciliation-sync"),
         ("parent_drift", "block", "manual-reconciliation"),
+        ("binding_failure", "block", "manual-reconciliation"),
+        ("merge_signal_drift", "block", "manual-reconciliation"),
         ("host_signal_drift", "block", "manual-reconciliation"),
     ]
     for kind, reconciliation_result_value, fallback_to in valid_reconciliation_samples: