codecartographer-pi 0.17.0 → 0.17.1

package/dist/core/pipeline.js

@@ -2,6 +2,7 @@
 import { readFile } from "node:fs/promises";
 import { basename, join } from "node:path";
 import { pathExists } from "./utils.js";
+import { crossCheckFindings, findingsPairingGateActive } from "./findings.js";
 export const PIPELINE_ALIASES = {
     "full-with-audit": "workflow/pipeline-full-with-audit.yaml",
     "full-with-deep-audit": "workflow/pipeline-full-with-deep-audit.yaml",
@@ -155,6 +156,16 @@ export async function validatePhaseOutput(state, phaseId) {
         errors.push("One or more validation criteria are marked FAIL.");
         overall = "FAIL";
     }
+    // Findings cross-checks (#122): the validation table says whether criteria
+    // were met; these read what the findings' own evidence and action cells
+    // say. Deterministic on two cells the model wrote, so the pairing rule can
+    // gate — on a scaffold that offers `verify at runtime`. Older scaffolds warn.
+    const crossCheck = crossCheckFindings(content, { gate: findingsPairingGateActive(state.scaffoldVersion) });
+    if (crossCheck.errors.length > 0) {
+        errors.push(...crossCheck.errors);
+        overall = "FAIL";
+    }
+    const warnings = crossCheck.warnings;
     if (overall === "FAIL" && errors.length === 0) {
         errors.push("Validation overall result is FAIL.");
     }
@@ -169,6 +180,7 @@ export async function validatePhaseOutput(state, phaseId) {
         gaps,
         errors,
         secondaryOutputs,
+        ...(warnings.length > 0 && { warnings }),
     };
 }
 export function buildValidationSummary(validation) {
@@ -184,6 +196,9 @@ export function buildValidationSummary(validation) {
     if (validation.errors.length > 0) {
         lines.push(...validation.errors.slice(0, 3));
     }
+    for (const warning of validation.warnings ?? []) {
+        lines.push(`NOTE: ${warning} Non-gating.`);
+    }
     const missingSecondary = (validation.secondaryOutputs ?? []).filter((output) => !output.exists);
     if (missingSecondary.length > 0) {
         lines.push(`NOTE: ${missingSecondary.length} declared secondary output(s) not written: ${missingSecondary.map((output) => `.codecarto/${output.path}`).join(", ")} — write each, or account for it in Coverage and limits / a routed handoff entry. Non-gating.`);

package/dist/core/prompts.js

@@ -33,7 +33,7 @@ async function buildOrchestratorDuties(state, phase, auto) {
         }
     }
     if (retriage.length > 0) {
-        lines.push("- Re-triage these open questions' kind labels — a label is a claim needing its own evidence; re-test whether each is now answerable by reading before accepting it:");
+        lines.push("- Re-triage these open questions' kind labels — a label is a claim needing its own evidence; re-test whether each is now answerable by reading before accepting it. If one still needs a runtime test, no finding in this phase may assert one of its candidate answers with a settled action (fix before porting / fix now): the finding inherits the question's uncertainty as `verify at runtime` until runtime evidence closes the question:");
         for (const label of retriage.slice(0, RETRIAGE_LIST_LIMIT))
             lines.push(`  - ${label}`);
         if (retriage.length > RETRIAGE_LIST_LIMIT)

package/dist/core/status.js

@@ -274,36 +274,44 @@ export function applyHandoff(status, handoff) {
             }
         }
     }
-    // Now merge into the current phase: overwrite by id or append new
+    // Now merge into the current phase: overwrite by id or append new. An entry
+    // with neither id nor description has no key to merge on; it is kept as-is
+    // rather than lost when the array is rebuilt from the map (#134).
     const localOqMap = new Map();
+    const unkeyedOpenQuestions = [];
     for (const entry of phase.open_questions) {
         const key = entry.id || entry.description || "";
         if (key)
             localOqMap.set(key, entry);
+        else
+            unkeyedOpenQuestions.push(entry);
     }
     for (const entry of handoff.open_questions) {
         const key = entry.id || entry.description || "";
         if (key)
             localOqMap.set(key, entry);
         else
-            phase.open_questions.push(entry);
+            unkeyedOpenQuestions.push(entry);
     }
-    phase.open_questions = [...localOqMap.values()];
-    // Merge carry_forward: overwrite by id or append new
+    phase.open_questions = [...localOqMap.values(), ...unkeyedOpenQuestions];
+    // Merge carry_forward: overwrite by id or append new, same unkeyed rule
     const cfMap = new Map();
+    const unkeyedCarryForward = [];
     for (const entry of phase.carry_forward) {
         const key = entry.id || entry.description || "";
         if (key)
             cfMap.set(key, entry);
+        else
+            unkeyedCarryForward.push(entry);
     }
     for (const entry of handoff.carry_forward) {
         const key = entry.id || entry.description || "";
         if (key)
             cfMap.set(key, entry);
         else
-            phase.carry_forward.push(entry);
+            unkeyedCarryForward.push(entry);
     }
-    phase.carry_forward = [...cfMap.values()];
+    phase.carry_forward = [...cfMap.values(), ...unkeyedCarryForward];
     // Apply closures: remove carry_forward entries from ALL phases by id
     for (const closureId of handoff.carry_forward_closures) {
         if (!closureId)

package/dist/core/types.d.ts

@@ -94,6 +94,12 @@ export type ValidationResult = {
         path: string;
         exists: boolean;
     }>;
+    /**
+     * Non-gating observations from the findings cross-checks (issue #122):
+     * contradictions worth the reader's attention that must not stop an
+     * --auto run. Rendered as NOTE lines by buildValidationSummary.
+     */
+    warnings?: string[];
 };
 /**
  * One convention a phase proposes for promotion. Completion stages these in

package/dist/core/utils.d.ts

@@ -15,6 +15,14 @@ export declare function isWithinPathResolved(path: string, root: string): Promis
 export declare function isPlainObject(value: unknown): value is Record<string, unknown>;
 export declare function uniqueStrings(items: string[]): string[];
 export declare function dateOnly(timestamp: string): string;
+/**
+ * The separator to put before a line appended to file content `current` so
+ * the line starts at column 0. A file whose last line lacks a trailing newline
+ * (a hand-edited THREAD_LOG.md, an editor that strips final newlines) would
+ * otherwise have the appended entry glued onto that line (#134). Empty or
+ * absent content needs no separator.
+ */
+export declare function newlineIfUnterminated(current: string): string;
 /**
  * Expand a leading `~` or `~/` to the user's home directory. Node's `path`
  * module deliberately doesn't do this (it's a shell convention, not a path
@@ -36,3 +44,9 @@ export declare function formatTokenCount(count: number): string;
  * dashboard renderer can reuse without crossing the core/extensions boundary.
  */
 export declare function formatMillis(ms: number): string;
+/**
+ * Compare two dotted `major.minor.patch` versions. Returns -1, 0, or 1, or
+ * null when either side is not a plain three-part version (pre-release tags,
+ * hand-edited markers) so callers can fall back to string equality.
+ */
+export declare function compareDottedVersions(a: string, b: string): number | null;

package/dist/core/utils.js

@@ -72,6 +72,16 @@ export function uniqueStrings(items) {
 export function dateOnly(timestamp) {
     return timestamp.slice(0, 10);
 }
+/**
+ * The separator to put before a line appended to file content `current` so
+ * the line starts at column 0. A file whose last line lacks a trailing newline
+ * (a hand-edited THREAD_LOG.md, an editor that strips final newlines) would
+ * otherwise have the appended entry glued onto that line (#134). Empty or
+ * absent content needs no separator.
+ */
+export function newlineIfUnterminated(current) {
+    return current === "" || current.endsWith("\n") ? "" : "\n";
+}
 /**
  * Expand a leading `~` or `~/` to the user's home directory. Node's `path`
  * module deliberately doesn't do this (it's a shell convention, not a path
@@ -114,3 +124,23 @@ export function formatMillis(ms) {
     const seconds = Math.floor((ms % 60_000) / 1000);
     return `${minutes}m${seconds.toString().padStart(2, "0")}s`;
 }
+/**
+ * Compare two dotted `major.minor.patch` versions. Returns -1, 0, or 1, or
+ * null when either side is not a plain three-part version (pre-release tags,
+ * hand-edited markers) so callers can fall back to string equality.
+ */
+export function compareDottedVersions(a, b) {
+    const parse = (version) => {
+        const match = /^(\d+)\.(\d+)\.(\d+)$/.exec(version.trim());
+        return match ? [Number(match[1]), Number(match[2]), Number(match[3])] : null;
+    };
+    const left = parse(a);
+    const right = parse(b);
+    if (!left || !right)
+        return null;
+    for (let i = 0; i < 3; i++) {
+        if (left[i] !== right[i])
+            return left[i] < right[i] ? -1 : 1;
+    }
+    return 0;
+}

package/dist/core/workspace.js

@@ -7,7 +7,7 @@ import { appendFile, copyFile, cp, mkdir, readFile, readdir, rename, writeFile }
 import { basename, dirname, join, relative } from "node:path";
 import { fileURLToPath } from "node:url";
 import { acquireLock, applyHandoff, createEmptyStatus, normalizeStatus, parseHandoff } from "./status.js";
-import { pathExists } from "./utils.js";
+import { compareDottedVersions, newlineIfUnterminated, pathExists } from "./utils.js";
 import { loadYamlFile, stringifySimpleYaml } from "./yaml.js";
 // Walk up from the current file to find the package root. Needed because the
 // source lives at <root>/core/workspace.ts (one level below the package root)
@@ -245,7 +245,15 @@ export async function refreshScaffold(cwd) {
         await copyFile(join(packagedWorkspaceDir, relativePath), target);
     }
     const entry = `- ${new Date().toISOString().slice(0, 10)} — scaffold-refresh — Refreshed ${files.length} framework-owned file(s) from the packaged template (${scaffoldVersionBefore ?? "unversioned"} → ${PACKAGE_VERSION}); project state, user config, and session outputs untouched.`;
-    await appendFile(join(state.workspaceDir, "THREAD_LOG.md"), `${entry}\n`, "utf8");
+    const threadLogPath = join(state.workspaceDir, "THREAD_LOG.md");
+    let currentLog = "";
+    try {
+        currentLog = await readFile(threadLogPath, "utf8");
+    }
+    catch {
+        // Created by the append when absent (pre-template scaffolds).
+    }
+    await appendFile(threadLogPath, `${newlineIfUnterminated(currentLog)}${entry}\n`, "utf8");
     return {
         written: files,
         ...(scaffoldVersionBefore !== undefined && { scaffoldVersionBefore }),
@@ -253,21 +261,6 @@ export async function refreshScaffold(cwd) {
     };
 }
 // Numeric x.y.z comparison; null when either side is not a plain dotted triple.
-function compareDottedVersions(a, b) {
-    const parse = (version) => {
-        const match = /^(\d+)\.(\d+)\.(\d+)$/.exec(version.trim());
-        return match ? [Number(match[1]), Number(match[2]), Number(match[3])] : null;
-    };
-    const left = parse(a);
-    const right = parse(b);
-    if (!left || !right)
-        return null;
-    for (let i = 0; i < 3; i++) {
-        if (left[i] !== right[i])
-            return left[i] < right[i] ? -1 : 1;
-    }
-    return 0;
-}
 /**
  * Human-readable staleness notice for the workspace's .codecarto/ scaffold,
  * or null when the scaffold matches the running framework. A missing marker
@@ -329,7 +322,7 @@ export async function updateStatusAtomically(cwd, updater) {
             const normalizedEntry = result.threadLogEntry.trim();
             const isDuplicate = logEntries.some((line) => line.trim() === normalizedEntry);
             if (!isDuplicate) {
-                await appendFile(threadLogPath, result.threadLogEntry, "utf8");
+                await appendFile(threadLogPath, `${newlineIfUnterminated(currentLog)}${normalizedEntry}\n`, "utf8");
             }
         }
         return nextState;

package/dist/core/yaml.js

@@ -3,6 +3,18 @@
 // Round-trips structured carry_forward/open_questions entries.
 import { readFile } from "node:fs/promises";
 import { isPlainObject } from "./utils.js";
+/**
+ * True when the double quote at `index` is escaped, i.e. preceded by an odd
+ * run of backslashes. Checking only the single previous character read `\\"`
+ * (an escaped backslash, then the closing quote) as an escaped quote, so the
+ * scalar never closed and a trailing ` # comment` leaked into the value (#134).
+ */
+function isEscapedQuote(text, index) {
+    let backslashes = 0;
+    for (let i = index - 1; i >= 0 && text[i] === "\\"; i--)
+        backslashes++;
+    return backslashes % 2 === 1;
+}
 export function stripYamlComment(value) {
     let inSingle = false;
     let inDouble = false;
@@ -12,7 +24,7 @@ export function stripYamlComment(value) {
             inSingle = !inSingle;
             continue;
         }
-        if (char === '"' && !inSingle && value[i - 1] !== "\\") {
+        if (char === '"' && !inSingle && !isEscapedQuote(value, i)) {
             inDouble = !inDouble;
             continue;
         }
@@ -49,7 +61,7 @@ function findKeySeparator(text) {
             inSingle = !inSingle;
             continue;
         }
-        if (char === '"' && !inSingle && text[i - 1] !== "\\") {
+        if (char === '"' && !inSingle && !isEscapedQuote(text, i)) {
             inDouble = !inDouble;
             continue;
         }
@@ -77,7 +89,10 @@ export function parseYamlScalar(rawValue) {
         return Number.parseInt(trimmed, 10);
     if (/^-?\d+\.\d+$/.test(trimmed))
         return Number.parseFloat(trimmed);
-    if (trimmed.startsWith('"') && trimmed.endsWith('"')) {
+    // A quoted scalar needs at least its two quotes: a lone quote character
+    // satisfied startsWith and endsWith at once and was sliced to "" (#134).
+    const canBeQuoted = trimmed.length >= 2;
+    if (canBeQuoted && trimmed.startsWith('"') && trimmed.endsWith('"')) {
         try {
             return JSON.parse(trimmed);
         }
@@ -85,7 +100,7 @@ export function parseYamlScalar(rawValue) {
             return trimmed.slice(1, -1);
         }
     }
-    if (trimmed.startsWith("'") && trimmed.endsWith("'")) {
+    if (canBeQuoted && trimmed.startsWith("'") && trimmed.endsWith("'")) {
         return trimmed.slice(1, -1).replace(/''/g, "'");
     }
     return trimmed;

package/dist/extensions/codecarto/auto-runner.d.ts

@@ -41,6 +41,8 @@ export declare function isPhaseRunning(phaseId: string): boolean;
 export interface AutoCompleteResult {
     updatedState: WorkspaceState;
     closeoutNotice?: string;
+    /** Non-gating closure-integrity notes from completion (#122). */
+    warnings: string[];
 }
 export declare function autoCompletePhase(ctx: ExtensionContext, validation: ValidationResult): Promise<AutoCompleteResult>;
 export type AutoOutcome = "complete" | "stopped" | "aborted";

package/dist/extensions/codecarto/broadside-flags.d.ts

@@ -4,7 +4,12 @@ export interface BroadsideFlags {
     action: BroadsideAction;
     /** Empty means "the repository's default lens set". */
     lenses: BroadsideLensId[];
-    incremental: boolean;
+    /**
+     * Undefined means "use the repository's config default". --incremental sets
+     * true and --no-incremental sets false, so a config-set `incremental: true`
+     * can be overridden back to a full scan for one run (#163).
+     */
+    incremental?: boolean;
     includeSynthesis?: boolean;
     includeTriage?: boolean;
     retryTruncated?: boolean;
@@ -17,5 +22,5 @@ export interface BroadsideFlags {
     error?: string;
 }
 /** Every token the completer offers, in the order it offers them. */
-export declare const KNOWN_BROADSIDE_TOKENS: readonly ["submit", "collect", "status", "models", "architecture", "api", "security", "defect", "conventions", "porting", "--incremental", "--max-cost=", "--wait=", "--no-synthesis", "--no-triage", "--no-retry-truncated", "--benchmarks"];
+export declare const KNOWN_BROADSIDE_TOKENS: readonly ["submit", "collect", "status", "models", "architecture", "api", "security", "defect", "conventions", "porting", "--incremental", "--no-incremental", "--max-cost=", "--wait=", "--no-synthesis", "--no-triage", "--no-retry-truncated", "--benchmarks"];
 export declare function parseBroadsideFlags(args: string): BroadsideFlags;

package/dist/extensions/codecarto/broadside-flags.js

@@ -10,9 +10,14 @@
 // Flags mirror the codecarto_broadside tool parameters, with the negative
 // forms spelled out because a slash command has no place to pass `false`:
 //   --incremental          --no-synthesis
-//   --max-cost=N           --no-triage
-//   --wait=SECONDS         --no-retry-truncated
-//   --benchmarks (models only)
+//   --no-incremental       --no-triage
+//   --max-cost=N           --no-retry-truncated
+//   --wait=SECONDS         --benchmarks (models only)
+//
+// --incremental has a spelled-out negative because the value is tri-state:
+// absent defers to config.yaml, so a repository that set `incremental: true`
+// can still ask for a one-off full scan (#163), exactly as an MCP caller can
+// with `incremental: false`.
 //
 // The parser never throws. index.ts decides how to surface unknown tokens and
 // invalid combinations, matching parseNextFlags.
@@ -26,6 +31,7 @@ export const KNOWN_BROADSIDE_TOKENS = [
     "models",
     ...BROADSIDE_LENS_IDS,
     "--incremental",
+    "--no-incremental",
     "--max-cost=",
     "--wait=",
     "--no-synthesis",
@@ -50,7 +56,6 @@ export function parseBroadsideFlags(args) {
     const result = {
         action: "submit",
         lenses: [],
-        incremental: false,
         benchmarks: false,
         unknown: [],
     };
@@ -67,8 +72,14 @@ export function parseBroadsideFlags(args) {
                 result.lenses.push(token);
             continue;
         }
-        if (token === "--incremental") {
-            result.incremental = true;
+        if (token === "--incremental" || token === "--no-incremental") {
+            const value = token === "--incremental";
+            // Last-one-wins would be a silent tiebreak on a command that spends
+            // money; a contradiction is an error.
+            if (result.incremental !== undefined && result.incremental !== value) {
+                result.error ??= "--incremental and --no-incremental contradict each other; pass one or neither.";
+            }
+            result.incremental = value;
             continue;
         }
         if (token === "--no-synthesis") {
@@ -99,12 +110,14 @@ export function parseBroadsideFlags(args) {
     }
     // Flags that only mean something for one action are refused rather than
     // ignored: silently dropping --incremental on a collect would read as
-    // "collected incrementally", which is not a thing.
+    // "collected incrementally", which is not a thing (and --no-incremental
+    // would read as a full re-collect, which is not one either).
     if (result.lenses.length > 0 && result.action !== "submit") {
         result.error ??= `Lens names are only meaningful for submit (got action "${result.action}").`;
     }
-    if (result.incremental && result.action !== "submit") {
-        result.error ??= `--incremental is only meaningful for submit (got action "${result.action}").`;
+    if (result.incremental !== undefined && result.action !== "submit") {
+        const flag = result.incremental ? "--incremental" : "--no-incremental";
+        result.error ??= `${flag} is only meaningful for submit (got action "${result.action}").`;
     }
     if (result.benchmarks && result.action !== "models") {
         result.error ??= `--benchmarks is only meaningful for models (got action "${result.action}").`;

package/dist/extensions/codecarto/dashboard-narrator.js

@@ -66,7 +66,7 @@ async function readRecentCloseouts(workspaceDir) {
         return m ? { date: m[1], phaseOrModule: m[2], fileName: name } : null;
     })
         .filter((x) => x !== null)
-        .sort((a, b) => (a.date < b.date ? 1 : -1))
+        .sort((a, b) => (a.date < b.date ? 1 : a.date > b.date ? -1 : 0))
         .slice(0, MAX_CLOSEOUTS);
     const out = [];
     for (const entry of matched) {

package/dist/extensions/codecarto/index.js

@@ -9,7 +9,7 @@ import { writeDashboard } from "./dashboard-writer.js";
 import { parseBroadsideFlags, KNOWN_BROADSIDE_TOKENS } from "./broadside-flags.js";
 import { parseNextFlags } from "./next-flags.js";
 import { phaseCompactionExtension } from "./phase-compaction.js";
-import { buildPhasePrompt, buildSkillPrompt, buildValidationSummary, canonicalPath, copyPackagedWorkspace, computePerPhaseTotals, computeTotals, createEmptyStatus, DEFAULT_PIPELINE_PATH, describeScaffoldStaleness, deriveSlug, discoverLibrary, getNextEligiblePhase, getPipelineLabel, getWorkspaceState, isWithinPathResolved, BROADSIDE_LENS_IDS, BROADSIDE_SKILL_NAME, BroadsideCancelledError, broadsideDirFor, collectResultText, estimateSubmitText, getLens, listBatchModels, listSkillNames, loadBroadsideConfig, modelsText, runBroadsideCollect, runBroadsideStatus, runBroadsideSubmit, statusText, loadCodecartoConfig, loadUsage, loadYamlFile, normalizeForComparison, packagedWorkspaceDir, pathExists, PACKAGE_VERSION, readBroadsideSkill, PhasePreflightError, PIPELINE_ALIASES, publishEntry, resolvePhase, resolvePipelineChoice, runPhasePreflight, seedOrchestratorFiles, stringifySimpleYaml, switchPipeline, validatePhaseOutput, writeLibraryConfig, } from "../../core/index.js";
+import { buildPhasePrompt, buildSkillPrompt, buildValidationSummary, canonicalPath, copyPackagedWorkspace, computePerPhaseTotals, computeTotals, ConfidentialityMismatchError, createEmptyStatus, DEFAULT_PIPELINE_PATH, describeScaffoldStaleness, deriveSlug, discoverLibrary, getNextEligiblePhase, getPipelineLabel, getWorkspaceState, isWithinPathResolved, BROADSIDE_LENS_IDS, BROADSIDE_SKILL_NAME, BroadsideCancelledError, broadsideDirFor, collectResultText, estimateSubmitText, getLens, listBatchModels, listSkillNames, loadBroadsideConfig, modelsText, runBroadsideCollect, runBroadsideStatus, runBroadsideSubmit, statusText, loadCodecartoConfig, loadUsage, loadYamlFile, normalizeForComparison, packagedWorkspaceDir, pathExists, PACKAGE_VERSION, readBroadsideSkill, PhasePreflightError, PIPELINE_ALIASES, publishEntry, resolvePhase, resolvePipelineChoice, runPhasePreflight, seedOrchestratorFiles, stringifySimpleYaml, switchPipeline, validatePhaseOutput, writeLibraryConfig, } from "../../core/index.js";
 import { initLibrary } from "../../core/library.js";
 import { resolveUserConfigPath } from "../../core/orchestrator-config.js";
 const STATUS_WIDGET_ID = "codecarto-widget";
@@ -618,7 +618,7 @@ export default function codeCartographerExtension(pi) {
                 ctx.ui.notify(`Cannot complete ${validation.phaseId}: ${validation.overall}`, "error");
                 return;
             }
-            const { updatedState, closeoutNotice } = await autoCompletePhase(ctx, validation);
+            const { updatedState, closeoutNotice, warnings } = await autoCompletePhase(ctx, validation);
             lastFeedbackLines = [
                 `Completed phase: ${validation.phaseId}`,
                 `Validation: ${validation.overall}`,
@@ -626,10 +626,15 @@ export default function codeCartographerExtension(pi) {
             ];
             if (closeoutNotice)
                 lastFeedbackLines.push(closeoutNotice);
+            const notes = [...(validation.warnings ?? []), ...warnings];
+            for (const note of notes)
+                lastFeedbackLines.push(`NOTE: ${note} Non-gating.`);
             setUiState(ctx, updatedState, lastFeedbackLines);
-            ctx.ui.notify(`Marked ${validation.phaseId} complete`, validation.overall === "PASS WITH GAPS" ? "warning" : "info");
+            ctx.ui.notify(`Marked ${validation.phaseId} complete`, validation.overall === "PASS WITH GAPS" || notes.length > 0 ? "warning" : "info");
             if (closeoutNotice)
                 ctx.ui.notify(closeoutNotice, "info");
+            for (const note of notes)
+                ctx.ui.notify(note, "warning");
         },
     });
     pi.registerCommand("codecarto-skill", {
@@ -786,7 +791,9 @@ export default function codeCartographerExtension(pi) {
                         lenses,
                         model: config.model,
                         maxCost: flags.maxCost ?? config.maxCost,
-                        incremental: flags.incremental || config.incremental,
+                        // `??`, not `||`: --no-incremental parses to false and must beat a
+                        // config-set true, exactly as MCP's `incremental: false` does (#163).
+                        incremental: flags.incremental ?? config.incremental,
                         // Pi can ask, so it asks instead of refusing over max_cost the
                         // way MCP has to. An approval here IS the force flag.
                         confirm: (estimate) => ctx.ui.confirm(`Broad-Side will spend about $${estimate.totalCost.toFixed(4)}`, describeBroadsideEstimate(estimate)),
@@ -895,19 +902,36 @@ export default function codeCartographerExtension(pi) {
             ].join("\n");
             if (config.library.publish_confirm && !(await ctx.ui.confirm("Publish reimplementation spec", preview)))
                 return;
+            const input = {
+                slug,
+                namespace,
+                source_repo: ctx.cwd,
+                analyzed_at: new Date().toISOString(),
+                pipeline: state.status.pipeline,
+                codecarto_version: PACKAGE_VERSION,
+                headline,
+                tags: [],
+                capabilities: [],
+                generation: piGeneration(ctx),
+            };
             try {
-                const result = await publishEntry(config.library.path, spec, {
-                    slug,
-                    namespace,
-                    source_repo: ctx.cwd,
-                    analyzed_at: new Date().toISOString(),
-                    pipeline: state.status.pipeline,
-                    codecarto_version: PACKAGE_VERSION,
-                    headline,
-                    tags: [],
-                    capabilities: [],
-                    generation: piGeneration(ctx),
-                });
+                let result;
+                try {
+                    result = await publishEntry(config.library.path, spec, input);
+                }
+                catch (error) {
+                    if (!(error instanceof ConfidentialityMismatchError))
+                        throw error;
+                    // Nothing was written. Pi declares no confidentiality, so the entry
+                    // sits at the internal default; whether it may go into a wider
+                    // library is the user's call, and a yes is the override.
+                    const publishAnyway = await ctx.ui.confirm("Confidentiality mismatch — publish anyway?", `This spec's confidentiality is "${error.entryConfidentiality}" (CodeCartographer's default; /codecarto-publish declares none), but the library "${marker.name}" has visibility "${error.libraryVisibility}". Publishing would expose it to everyone that library reaches. Publish anyway?`);
+                    if (!publishAnyway) {
+                        ctx.ui.notify("Publish cancelled. Nothing was written.", "info");
+                        return;
+                    }
+                    result = await publishEntry(config.library.path, spec, input, { allowConfidentialityMismatch: true });
+                }
                 lastFeedbackLines = [`Published ${result.namespace ? `${result.namespace}/` : ""}${result.slug} v${result.version}`, result.isNewVersion ? "New content version." : "Metadata-only update (content unchanged)."];
                 await writeDashboard(ctx.cwd, PACKAGE_VERSION);
                 await refreshWorkspaceUi(ctx, lastFeedbackLines);

package/dist/extensions/codecarto/phase-compaction.js

@@ -81,6 +81,10 @@ export function phaseCompactionExtension(pi) {
             return undefined;
         try {
             const state = await getWorkspaceState(ctx.cwd);
+            // No workspace under this cwd: nothing phase-aware to add, so the host
+            // default applies — not a failure worth a warning (#134).
+            if (!state)
+                return undefined;
             const phase = state.pipeline.phases.find((candidate) => candidate.id === phaseId);
             const auth = await ctx.modelRegistry.getApiKeyAndHeaders(ctx.model);
             if (!auth.ok || !auth.apiKey)