coderifts 5.0.0 → 5.0.1

package/dist/cli.js

@@ -3028,7 +3028,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "coderifts",
-      version: "5.0.0",
+      version: "5.0.1",
       description: "Detect breaking API changes from the command line. Works locally or with the CodeRifts cloud API.",
       author: "CodeRifts <hello@coderifts.com>",
       license: "MIT",
@@ -3073,7 +3073,7 @@ var require_package = __commonJS({
         test: "node --test test/*.test.js"
       },
       dependencies: {
-        "@coderifts/agent-guard": "^11.0.0",
+        "@coderifts/agent-guard": "^12.0.0",
         chalk: "^4.1.2",
         "cli-table3": "^0.6.4",
         commander: "^12.0.0",
@@ -66357,7 +66357,7 @@ var require_execution_time_fingerprint = __commonJS({
     exports2.authorizedFingerprintFromEnvelope = authorizedFingerprintFromEnvelope;
     exports2.checkExecutionTimeFingerprint = checkExecutionTimeFingerprint;
     var node_crypto_1 = require("node:crypto");
-    var NUL = "";
+    var US = "";
     var BUNDLE_FP_DOMAIN = "crbundle.v1";
     function sha256hex(s) {
       return (0, node_crypto_1.createHash)("sha256").update(s, "utf8").digest("hex");
@@ -66372,13 +66372,13 @@ var require_execution_time_fingerprint = __commonJS({
     }
     function computeCanonicalBundleFingerprint(artifacts, context) {
       const sorted = artifacts.slice().sort((x, y) => {
-        const kx = `${x.type}${NUL}${x.id}`;
-        const ky = `${y.type}${NUL}${y.id}`;
+        const kx = `${x.type}${US}${x.id}`;
+        const ky = `${y.type}${US}${y.id}`;
         return kx < ky ? -1 : kx > ky ? 1 : 0;
       });
       const parts = [BUNDLE_FP_DOMAIN, String(artifacts.length)];
       for (const a of sorted) {
-        parts.push([a.type, a.id, sha256hex(specStr(a.before)), sha256hex(specStr(a.after))].join(NUL));
+        parts.push([a.type, a.id, sha256hex(specStr(a.before)), sha256hex(specStr(a.after))].join(US));
       }
       const ctx = context || {};
       parts.push([
@@ -66388,8 +66388,8 @@ var require_execution_time_fingerprint = __commonJS({
         scalar(ctx.branch),
         scalar(ctx.pull_request),
         scalar(ctx.policy_profile)
-      ].join(NUL));
-      return `sha256:${sha256hex(parts.join(NUL))}`;
+      ].join(US));
+      return `sha256:${sha256hex(parts.join(US))}`;
     }
     exports2.EXECUTION_TIME_FP_REASONS = Object.freeze({
       MATCH: "match",
@@ -66485,7 +66485,7 @@ var require_enforcement_gate = __commonJS({
     function isAction(v) {
       return v === "CONTINUE" || v === "CONTINUE_WITH_MONITORING" || v === "REQUEST_APPROVAL" || v === "STOP";
     }
-    var NUL = "";
+    var US = "";
     function sha256hex(s) {
       return (0, node_crypto_1.createHash)("sha256").update(s).digest("hex");
     }
@@ -66493,7 +66493,7 @@ var require_enforcement_gate = __commonJS({
       return v == null ? "" : typeof v === "string" ? v : JSON.stringify(v);
     }
     function computeArtifactDigest(artifacts) {
-      const preimage = artifacts.slice().sort((a, b) => `${a.type}${NUL}${a.id}` < `${b.type}${NUL}${b.id}` ? -1 : 1).map((a) => `${sha256hex(specStr(a.before))}${sha256hex(specStr(a.after))}`).join(NUL);
+      const preimage = artifacts.slice().sort((a, b) => `${a.type}${US}${a.id}` < `${b.type}${US}${b.id}` ? -1 : 1).map((a) => `${sha256hex(specStr(a.before))}${sha256hex(specStr(a.after))}`).join(US);
       return `sha256:${sha256hex(preimage)}`;
     }
     function computeBundleFingerprint(artifacts, context) {
@@ -66699,7 +66699,8 @@ var require_execution_proof = __commonJS({
         if (input.preflighted !== true || input.receiptVerified !== true) {
           throw new Error("@coderifts/agent-guard: enforced:true without receiptVerified+preflighted (runtime invariant)");
         }
-        if (input.requireConditionalWrite === true && input.writeStyle === true) {
+        const mutating = input.mutating === void 0 ? input.writeStyle === true : input.mutating === true;
+        if (input.requireConditionalWrite === true && mutating) {
           if (input.conditionalWrite !== true) {
             throw new Error("@coderifts/agent-guard: enforced:true without conditional_write:true under requireConditionalWrite (runtime invariant)");
           }
@@ -66763,6 +66764,7 @@ var require_execution_proof = __commonJS({
         receiptVerified,
         requireConditionalWrite: cwb?.require_conditional_write,
         writeStyle: cwb?.write_style,
+        mutating: cwb?.mutating,
         conditionalWrite: cwb?.conditional_write
       });
       const env = envelopeOf(input.verdict);
@@ -66854,6 +66856,7 @@ var require_freshness = __commonJS({
     exports2.assessWriteStylePrior = assessWriteStylePrior;
     exports2.freshnessAllowsEnforce = freshnessAllowsEnforce;
     exports2.isWriteStyleCall = isWriteStyleCall;
+    exports2.isMutatingCall = isMutatingCall;
     exports2.artifactIdsForResolve = artifactIdsForResolve;
     exports2.collectFreshnessCallContext = collectFreshnessCallContext;
     exports2.buildFreshnessBasis = buildFreshnessBasis;
@@ -66987,6 +66990,24 @@ var require_freshness = __commonJS({
       }
       return false;
     }
+    function isMutatingCall(call) {
+      const arts = call.artifacts;
+      if (Array.isArray(arts)) {
+        for (const a of arts) {
+          if (a && typeof a.after === "string" && a.after.length > 0)
+            return true;
+        }
+      }
+      const args = call.arguments && typeof call.arguments === "object" ? call.arguments : {};
+      for (const k of ["contents", "content", "new_string", "old_string", "patch"]) {
+        const v = args[k];
+        if (typeof v === "string" && v.length > 0)
+          return true;
+      }
+      if (Array.isArray(args.edits) && args.edits.length > 0)
+        return true;
+      return false;
+    }
     function artifactIdsForResolve(call) {
       const ids = [];
       if (Array.isArray(call.artifacts)) {
@@ -67159,12 +67180,14 @@ var require_conditional_write = __commonJS({
     function buildConditionalWriteBasis(input) {
       const require_conditional_write2 = input.requireConditionalWrite === true;
       const write_style = input.writeStyle === true;
+      const mutating = input.mutating === void 0 ? write_style : input.mutating === true;
       const ctx = input.ctx && typeof input.ctx === "object" ? input.ctx : {};
       const conditional_write = normalizeReport(ctx.conditional_write);
       const basis = {
         conditional_write,
         require_conditional_write: require_conditional_write2,
-        write_style
+        write_style,
+        mutating
       };
       if (conditional_write === true) {
         if (typeof ctx.conditioned_on_token === "string") {
@@ -67175,7 +67198,7 @@ var require_conditional_write = __commonJS({
           basis.conditioned_on_token = null;
         }
       }
-      if (write_style && require_conditional_write2 && conditional_write !== true) {
+      if (mutating && require_conditional_write2 && conditional_write !== true) {
         return { basis, blockCause: "CONDITIONAL_WRITE_REQUIRED" };
       }
       return { basis };
@@ -67184,7 +67207,8 @@ var require_conditional_write = __commonJS({
     function conditionalWriteResidual(input) {
       if (input.requireConditionalWrite !== true)
         return null;
-      if (input.writeStyle !== true)
+      const mutating = input.mutating === void 0 ? input.writeStyle === true : input.mutating === true;
+      if (!mutating)
         return null;
       if (input.conditionalWrite === true)
         return null;
@@ -70303,9 +70327,11 @@ var require_guard = __commonJS({
         allowStaleContext: config.allowStaleContext
       });
     }
-    function conditionalWriteFor(config, redacted, ctx) {
+    function conditionalWriteFor(config, redacted, ctx, detectedArts) {
+      const mutating = (0, freshness_js_1.isMutatingCall)(redacted) || Array.isArray(detectedArts) && (0, freshness_js_1.isMutatingCall)({ artifacts: detectedArts });
       return (0, conditional_write_js_1.buildConditionalWriteBasis)({
         writeStyle: (0, freshness_js_1.isWriteStyleCall)(redacted),
+        mutating,
         requireConditionalWrite: config.requireConditionalWrite === true,
         ctx
       });
@@ -70377,7 +70403,7 @@ var require_guard = __commonJS({
         }
       }
       {
-        const { blockCause } = conditionalWriteFor(config, redacted, cwctx);
+        const { blockCause } = conditionalWriteFor(config, redacted, cwctx, detection.artifacts);
         if (blockCause === "CONDITIONAL_WRITE_REQUIRED") {
           breakerRecord(config);
           return closedIntegrity(config, blockCause, failPolicy, fctx, cwctx, redacted, detection.artifacts);
@@ -70388,7 +70414,7 @@ var require_guard = __commonJS({
         const count = breakers.get(config)?.fails.length ?? 0;
         const v = unavailableVerdict({ cause: "MISSING_ARTIFACT_CONTENT", failPolicy, resolution: "CLOSED", action: "STOP" }, count);
         const { basis } = freshnessFor(config, redacted, fctx, detection.artifacts);
-        const { basis: cw } = conditionalWriteFor(config, redacted, cwctx);
+        const { basis: cw } = conditionalWriteFor(config, redacted, cwctx, detection.artifacts);
         return blocked(config, v, false, basis, cw);
       }
       if (failPolicy === "lkg" && !config.lkg) {
@@ -70425,7 +70451,7 @@ var require_guard = __commonJS({
         breakerRecord(config);
         const count = breakers.get(config)?.fails.length ?? 1;
         const { basis } = freshnessFor(config, redacted, fctx, detection.artifacts);
-        const { basis: cw } = conditionalWriteFor(config, redacted, cwctx);
+        const { basis: cw } = conditionalWriteFor(config, redacted, cwctx, detection.artifacts);
         if (pf.integrity) {
           emit(config, { type: "breaker_tripped", at: iso(), cause: pf.cause });
           const v2 = unavailableVerdict({ cause: pf.cause, failPolicy, resolution: "CLOSED", action: "STOP" }, count);
@@ -70493,7 +70519,7 @@ var require_guard = __commonJS({
       }
       if (gate.verdict === "block-strict") {
         const { basis } = freshnessFor(config, redacted, fctx, detection.artifacts);
-        const { basis: cw } = conditionalWriteFor(config, redacted, cwctx);
+        const { basis: cw } = conditionalWriteFor(config, redacted, cwctx, detection.artifacts);
         return gate.decision === "BLOCK" ? blocked(config, { kind: "BLOCK", action: "STOP", envelope, receiptVerified }, true, basis, cw, void 0, void 0, grantObs) : blocked(config, { kind: "APPROVAL", action: "REQUEST_APPROVAL", envelope, receiptVerified }, true, basis, cw, void 0, void 0, grantObs);
       }
       const kind = gate.kind;
@@ -70564,7 +70590,7 @@ var require_guard = __commonJS({
         breakerRecord(config);
         return closedIntegrity(config, freshBlock, failPolicy, fctx, cwctx, redacted, detection.artifacts, void 0, void 0, grantObs);
       }
-      const { basis: cwBasis, blockCause: cwBlock } = conditionalWriteFor(config, redacted, cwctx);
+      const { basis: cwBasis, blockCause: cwBlock } = conditionalWriteFor(config, redacted, cwctx, detection.artifacts);
       if (cwBlock === "CONDITIONAL_WRITE_REQUIRED") {
         breakerRecord(config);
         return closedIntegrity(config, cwBlock, failPolicy, fctx, cwctx, redacted, detection.artifacts, void 0, void 0, grantObs);
@@ -70639,7 +70665,7 @@ var require_guard = __commonJS({
       emit(config, { type: "breaker_tripped", at: iso(), cause });
       const v = unavailableVerdict({ cause, failPolicy, resolution: "CLOSED", action: "STOP" }, count);
       const { basis } = freshnessFor(config, redacted, fctx, arts);
-      const { basis: cw } = conditionalWriteFor(config, redacted, cwctx);
+      const { basis: cw } = conditionalWriteFor(config, redacted, cwctx, arts);
       return blocked(config, v, false, basis, cw, monitoring_delivery, monitoring_attestation, grantObs);
     }
     function isExpired(envelope) {
@@ -74818,7 +74844,8 @@ var require_execute_tool_call = __commonJS({
     var CW_NOT_REPORTED = Object.freeze({
       conditional_write: "not_reported",
       require_conditional_write: false,
-      write_style: false
+      write_style: false,
+      mutating: false
     });
     function notObserved() {
       return {
@@ -75271,9 +75298,9 @@ var require_cjs4 = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.monitorAttestSigningInput = exports2.kidFromMonitoringAttestation = exports2.tryIssueMonitoringAttestation = exports2.DEFAULT_MONITORING_SINK_TIMEOUT_MS = exports2.ackBytes = exports2.verifyAckHmac = exports2.monitoringDeliveryFailClosed = exports2.formatMonitoringDeliveryLine = exports2.deliverMonitoring = exports2.hashObservedContent = exports2.observeCommit = exports2.deriveKeySignal = exports2.pathClass = exports2.classifyCommand = exports2.projectState = exports2.emptySessionState = exports2.computeTainted = exports2.evaluate = exports2.updateSession = exports2.SESSION_TAINT_VERSION = exports2.SessionTaintTracker = exports2.readDecision = exports2.EXECUTION_TIME_FP_REASONS = exports2.EXECUTION_STATE_UNMEASURABLE_NOTE = exports2.isUnmeasurableExecutionStateReason = exports2.computeCanonicalBundleFingerprint = exports2.authorizedFingerprintFromEnvelope = exports2.checkExecutionTimeFingerprint = exports2.computeBundleFingerprint = exports2.computeArtifactDigest = exports2.evaluateEnvelope = exports2.RECEIPT_PREV_NULL = exports2.decodeReceiptBodyPrev = exports2.previousReceiptCommitment = exports2.verifyReceiptChainLinkage = exports2.canonicalJson = exports2.computeBodyHash = exports2.bindReceiptToEnvelope = exports2.DETECTOR_VERSION = exports2.builtinDetector = exports2.resetPolicyWarnForTests = exports2.warnPolicyAbsentOnce = exports2.observePolicyPresence = exports2.detectPolicyPresence = exports2.policyPresenceOf = exports2.withPolicy = exports2.POLICY_ABSENT_WARN = exports2.POLICY_MARKER = exports2.CODERIFTS_POLICY = exports2.guardToolCall = void 0;
-    exports2.createRegistryVersionToken = exports2.DB_ABSENT_TOKEN = exports2.DB_VERSION_TOKEN_PREFIX = exports2.dbTokenRaw = exports2.writeDbIfUnchanged = exports2.createDbVersionToken = exports2.API_ABSENT_TOKEN = exports2.API_VERSION_TOKEN_PREFIX = exports2.apiTokenRaw = exports2.writeApiIfUnchanged = exports2.createApiVersionToken = exports2.FS_ABSENT_TOKEN = exports2.FS_VERSION_TOKEN_PREFIX = exports2.fsTokenContentHash = exports2.createFsPriorContentResolver = exports2.writeFileIfUnchanged = exports2.readVersionedFile = exports2.createFsVersionToken = exports2.StaleVersionTokenAbort = exports2.executeIfUnchanged = exports2.RESIDUAL_UNCONDITIONAL_WRITE = exports2.conditionalWriteResidual = exports2.tokensEqual = exports2.buildConditionalWriteBasis = exports2.buildFreshnessBasis = exports2.collectFreshnessCallContext = exports2.artifactIdsForResolve = exports2.isWriteStyleCall = exports2.freshnessAllowsEnforce = exports2.computePathSetTreeHash = exports2.contentByteIdentical = exports2.assessWriteStylePrior = exports2.assessFreshness = exports2.deriveProofBanner = exports2.attachProofToAgentResponse = exports2.renderFinalAnswerProof = exports2.EXECUTION_PROOF_SPEC = exports2.assertEnforcedReceiptInvariant = exports2.hashExecutionResult = exports2.buildExecutionProof = exports2.COVERAGE_ATTEST_ENVELOPE_TAG = exports2.COVERAGE_ATTEST_SIGNING_PREFIX = exports2.COVERAGE_ATTEST_VERSION = exports2.coverageAttestSigningInput = exports2.kidFromCoverageAttestation = exports2.tryIssueCoverageAttestation = exports2.MONITOR_ATTEST_ENVELOPE_TAG = exports2.MONITOR_ATTEST_SIGNING_PREFIX = exports2.MONITOR_ATTEST_VERSION = exports2.receiptDigestOfToken = void 0;
-    exports2.formatCoverageObservedLine = exports2.freezeCoverageObserved = exports2.createCoverageObserver = exports2.readExecutionGrantToken = exports2.isExecutionGrantEnabled = exports2.guardedFractionAmongRoutes = exports2.foldTableSettledCalls = exports2.withCodeRifts = exports2.AUTO_DERIVE_READ_TIMEOUT_MS = exports2.AUTO_DERIVE_SOURCE = exports2.defaultFsReader = exports2.normalizeAutoDerive = exports2.runAutoDerive = exports2.AUTO_RECHECK_MAX_CAP = exports2.clampMaxAttempts = exports2.normalizeAutoRecheck = exports2.runAutoRecheckLoop = exports2.coverageReport = exports2.DEPLOY_REPAIRABLE_REASONS = exports2.bindDeploy = exports2.verifyDeployReceiptToken = exports2.DEPLOY_RECEIPT_VIEW_SPEC = exports2.isVerifiedDeployReceiptView = exports2.asVerifiedDeployReceiptView = exports2.deployGate = exports2.gateDecision = exports2.RegistryConstructionError = exports2.guardToolRegistry = exports2.globToRegExp = exports2.matchGlob = exports2.blobMapKey = exports2.classifyByName = exports2.resolveArtifacts = exports2.REMEDIATION_LOOP_ATTESTATION_SPEC = exports2.isCasAttestation = exports2.readPriorBlockRemediation = exports2.readRemediationTransaction = exports2.buildRemediationLoopAttestation = exports2.COMMIT_EVIDENCE_MISSING = exports2.CAS_ATTESTATION_SPEC = exports2.strictCommitObservation = exports2.extractExecutorAttestationToken = exports2.evaluateCasEvidence = exports2.isExecuteIfUnchangedOutcome = exports2.isGuardExecutionProof = exports2.buildCasAttestation = exports2.REGISTRY_ABSENT_TOKEN = exports2.REGISTRY_VERSION_TOKEN_PREFIX = exports2.registryTokenRaw = exports2.writeRegistryIfUnchanged = void 0;
-    exports2.kidFromToolsetAttestation = exports2.tryIssueToolsetAttestation = exports2.toolsetAttestSigningInput = exports2.declarationEntriesFromTools = exports2.computeToolsetDigest = exports2.TOOLSET_ATTEST_STATEMENT = exports2.TOOLSET_ATTEST_ENVELOPE_TAG = exports2.TOOLSET_ATTEST_SIGNING_PREFIX = exports2.TOOLSET_ATTEST_VERSION = exports2.surfaceEnvelopeFields = exports2.isGuardOutcome = exports2.executeLangGraphToolCall = exports2.executeGeminiToolCall = exports2.executeAnthropicToolCall = exports2.executeOpenAIToolCall = exports2.executeProtectedTool = exports2.defaultSerializeGeminiToolResult = exports2.bindGeminiGuardOutcome = exports2.protectedToolToFunctionDeclaration = exports2.toGeminiTools = exports2.geminiToolAdapter = exports2.withCodeRiftsGemini = exports2.wrapWriteWithFsCas = exports2.inferFullFileWriteContent = exports2.inferFsPathFromArgs = exports2.FRESHNESS_RESOLVER_FIX = exports2.freshnessRefusalTeaching = exports2.formatGateRefusalBody = exports2.defaultSerializeLangGraphToolResult = exports2.bindLangGraphGuardOutcome = exports2.LangGraphToolsNotStructuredError = exports2.isLangGraphReactAgentTool = exports2.bindLangGraphTools = exports2.protectedToolToLangGraph = exports2.toLangGraphTools = exports2.langGraphToolAdapter = exports2.withCodeRiftsLangGraph = exports2.defaultSerializeAnthropicToolResult = exports2.bindAnthropicGuardOutcome = exports2.protectedToolToAnthropic = exports2.toAnthropicTools = exports2.anthropicToolAdapter = exports2.withCodeRiftsAnthropic = exports2.defaultSerializeOpenAIToolResult = exports2.bindOpenAIGuardOutcome = exports2.protectedToolToOpenAI = exports2.toOpenAITools = exports2.openAIToolAdapter = exports2.withCodeRiftsOpenAI = void 0;
+    exports2.DB_ABSENT_TOKEN = exports2.DB_VERSION_TOKEN_PREFIX = exports2.dbTokenRaw = exports2.writeDbIfUnchanged = exports2.createDbVersionToken = exports2.API_ABSENT_TOKEN = exports2.API_VERSION_TOKEN_PREFIX = exports2.apiTokenRaw = exports2.writeApiIfUnchanged = exports2.createApiVersionToken = exports2.FS_ABSENT_TOKEN = exports2.FS_VERSION_TOKEN_PREFIX = exports2.fsTokenContentHash = exports2.createFsPriorContentResolver = exports2.writeFileIfUnchanged = exports2.readVersionedFile = exports2.createFsVersionToken = exports2.StaleVersionTokenAbort = exports2.executeIfUnchanged = exports2.RESIDUAL_UNCONDITIONAL_WRITE = exports2.conditionalWriteResidual = exports2.tokensEqual = exports2.buildConditionalWriteBasis = exports2.buildFreshnessBasis = exports2.collectFreshnessCallContext = exports2.artifactIdsForResolve = exports2.isMutatingCall = exports2.isWriteStyleCall = exports2.freshnessAllowsEnforce = exports2.computePathSetTreeHash = exports2.contentByteIdentical = exports2.assessWriteStylePrior = exports2.assessFreshness = exports2.deriveProofBanner = exports2.attachProofToAgentResponse = exports2.renderFinalAnswerProof = exports2.EXECUTION_PROOF_SPEC = exports2.assertEnforcedReceiptInvariant = exports2.hashExecutionResult = exports2.buildExecutionProof = exports2.COVERAGE_ATTEST_ENVELOPE_TAG = exports2.COVERAGE_ATTEST_SIGNING_PREFIX = exports2.COVERAGE_ATTEST_VERSION = exports2.coverageAttestSigningInput = exports2.kidFromCoverageAttestation = exports2.tryIssueCoverageAttestation = exports2.MONITOR_ATTEST_ENVELOPE_TAG = exports2.MONITOR_ATTEST_SIGNING_PREFIX = exports2.MONITOR_ATTEST_VERSION = exports2.receiptDigestOfToken = void 0;
+    exports2.freezeCoverageObserved = exports2.createCoverageObserver = exports2.readExecutionGrantToken = exports2.isExecutionGrantEnabled = exports2.guardedFractionAmongRoutes = exports2.foldTableSettledCalls = exports2.withCodeRifts = exports2.AUTO_DERIVE_READ_TIMEOUT_MS = exports2.AUTO_DERIVE_SOURCE = exports2.defaultFsReader = exports2.normalizeAutoDerive = exports2.runAutoDerive = exports2.AUTO_RECHECK_MAX_CAP = exports2.clampMaxAttempts = exports2.normalizeAutoRecheck = exports2.runAutoRecheckLoop = exports2.coverageReport = exports2.DEPLOY_REPAIRABLE_REASONS = exports2.bindDeploy = exports2.verifyDeployReceiptToken = exports2.DEPLOY_RECEIPT_VIEW_SPEC = exports2.isVerifiedDeployReceiptView = exports2.asVerifiedDeployReceiptView = exports2.deployGate = exports2.gateDecision = exports2.RegistryConstructionError = exports2.guardToolRegistry = exports2.globToRegExp = exports2.matchGlob = exports2.blobMapKey = exports2.classifyByName = exports2.resolveArtifacts = exports2.REMEDIATION_LOOP_ATTESTATION_SPEC = exports2.isCasAttestation = exports2.readPriorBlockRemediation = exports2.readRemediationTransaction = exports2.buildRemediationLoopAttestation = exports2.COMMIT_EVIDENCE_MISSING = exports2.CAS_ATTESTATION_SPEC = exports2.strictCommitObservation = exports2.extractExecutorAttestationToken = exports2.evaluateCasEvidence = exports2.isExecuteIfUnchangedOutcome = exports2.isGuardExecutionProof = exports2.buildCasAttestation = exports2.REGISTRY_ABSENT_TOKEN = exports2.REGISTRY_VERSION_TOKEN_PREFIX = exports2.registryTokenRaw = exports2.writeRegistryIfUnchanged = exports2.createRegistryVersionToken = void 0;
+    exports2.kidFromToolsetAttestation = exports2.tryIssueToolsetAttestation = exports2.toolsetAttestSigningInput = exports2.declarationEntriesFromTools = exports2.computeToolsetDigest = exports2.TOOLSET_ATTEST_STATEMENT = exports2.TOOLSET_ATTEST_ENVELOPE_TAG = exports2.TOOLSET_ATTEST_SIGNING_PREFIX = exports2.TOOLSET_ATTEST_VERSION = exports2.surfaceEnvelopeFields = exports2.isGuardOutcome = exports2.executeLangGraphToolCall = exports2.executeGeminiToolCall = exports2.executeAnthropicToolCall = exports2.executeOpenAIToolCall = exports2.executeProtectedTool = exports2.defaultSerializeGeminiToolResult = exports2.bindGeminiGuardOutcome = exports2.protectedToolToFunctionDeclaration = exports2.toGeminiTools = exports2.geminiToolAdapter = exports2.withCodeRiftsGemini = exports2.wrapWriteWithFsCas = exports2.inferFullFileWriteContent = exports2.inferFsPathFromArgs = exports2.FRESHNESS_RESOLVER_FIX = exports2.freshnessRefusalTeaching = exports2.formatGateRefusalBody = exports2.defaultSerializeLangGraphToolResult = exports2.bindLangGraphGuardOutcome = exports2.LangGraphToolsNotStructuredError = exports2.isLangGraphReactAgentTool = exports2.bindLangGraphTools = exports2.protectedToolToLangGraph = exports2.toLangGraphTools = exports2.langGraphToolAdapter = exports2.withCodeRiftsLangGraph = exports2.defaultSerializeAnthropicToolResult = exports2.bindAnthropicGuardOutcome = exports2.protectedToolToAnthropic = exports2.toAnthropicTools = exports2.anthropicToolAdapter = exports2.withCodeRiftsAnthropic = exports2.defaultSerializeOpenAIToolResult = exports2.bindOpenAIGuardOutcome = exports2.protectedToolToOpenAI = exports2.toOpenAITools = exports2.openAIToolAdapter = exports2.withCodeRiftsOpenAI = exports2.formatCoverageObservedLine = void 0;
     var guard_js_1 = require_guard();
     Object.defineProperty(exports2, "guardToolCall", { enumerable: true, get: function() {
       return guard_js_1.guardToolCall;
@@ -75509,6 +75536,9 @@ var require_cjs4 = __commonJS({
     Object.defineProperty(exports2, "isWriteStyleCall", { enumerable: true, get: function() {
       return freshness_js_1.isWriteStyleCall;
     } });
+    Object.defineProperty(exports2, "isMutatingCall", { enumerable: true, get: function() {
+      return freshness_js_1.isMutatingCall;
+    } });
     Object.defineProperty(exports2, "artifactIdsForResolve", { enumerable: true, get: function() {
       return freshness_js_1.artifactIdsForResolve;
     } });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coderifts",
-  "version": "5.0.0",
+  "version": "5.0.1",
   "description": "Detect breaking API changes from the command line. Works locally or with the CodeRifts cloud API.",
   "author": "CodeRifts <hello@coderifts.com>",
   "license": "MIT",
@@ -45,7 +45,7 @@
     "test": "node --test test/*.test.js"
   },
   "dependencies": {
-    "@coderifts/agent-guard": "^11.0.0",
+    "@coderifts/agent-guard": "^12.0.0",
     "chalk": "^4.1.2",
     "cli-table3": "^0.6.4",
     "commander": "^12.0.0",

package/scripts/assert-guard-major.js

@@ -25,13 +25,33 @@
  *   rises anyway, because a semantics floor is about what the CLI may RUN against, not about what
  *   it happens to import today — a fingerprint that disagrees with the server is exactly the class
  *   of difference this gate exists to refuse.)
+ * 5.0.0: floor raised to 12 (requireConditionalWrite now FIRES on an ordinary mutation. Through
+ *   11.0.1 the policy gated on isWriteStyleCall, which answers "did the caller supply a both-sides
+ *   snapshot" — the right question for FRESHNESS, which it was written for, and the wrong one for
+ *   atomicity. So a mutation carrying artifacts[] with non-empty before AND after classified as
+ *   not-write-style and the demand never fired: reproduced against the published 11.0.1 tarball,
+ *   where the side effect RAN with enforced:true and conditional_write:"not_reported". It bites on
+ *   the NORMAL path, not an exotic config, because the tool-registry defaultBinder lifts
+ *   old_string/new_string and edits[] into exactly that shape — so an agent editing a contract
+ *   artifact under ENFORCING_STRICT wrote unconditionally. 12.0.0 adds isMutatingCall and gates on
+ *   it; ConditionalWriteBasis gains a required `mutating` field. COST MEASURED AS ZERO, the same
+ *   way the 11-raise was: the CLI imports only deployGate, asVerifiedDeployReceiptView,
+ *   DEPLOY_RECEIPT_VIEW_SPEC and matchGlob, whose implementing modules (deploy-gate.js,
+ *   resolver-glob.js, deploy-receipt-token.js) are BYTE-IDENTICAL 11.0.1 -> 12.0.0; the CLI
+ *   constructs no ConditionalWriteBasis and never sets requireConditionalWrite, so the one
+ *   type-level break cannot reach it — it is JS besides. Suite on 12.0.0: 556/554/2, identical to
+ *   11.0.0 with a byte-identical failure set; the only edits the raise needed were this gate's own
+ *   two value-pins in assert-guard-major-coverage.test.js, which exist to move with each recorded
+ *   raise, and no product code. The floor rises anyway, because a semantics floor is about
+ *   what the CLI may RUN against: a guard that silently skips the atomicity demand on an ordinary
+ *   edit is exactly the class of difference this gate exists to refuse.)
  */
 
 const fs = require('fs');
 const path = require('path');
 
 /** Minimum acceptable major for @coderifts/agent-guard in THIS package (the CLI). */
-const MIN_GUARD_MAJOR = 11;
+const MIN_GUARD_MAJOR = 12;
 const DEP = '@coderifts/agent-guard';
 
 /**
@@ -91,6 +111,18 @@ const CHECKOUTS = [
      * 11 makes the bump neither easier nor harder — the blocker is unchanged and the deferral still
      * holds for exactly the reason above, not for a residual shape that moved.
      *
+     *
+     * WHAT THE RESOLVED-RANGE CHECK SAYS ABOUT THIS ENTRY: NOTHING, and that is the correct
+     * answer rather than a lucky one. The check added for the 5.0.0 finding grades whether the
+     * DECLARED range and the RESOLVED install AGREE. The root declares ^3.0.0 and resolves 3.0.0,
+     * so they agree exactly and it reports "in range". The root's gap is not drift between its
+     * manifest and its tree — it is a deliberately LOW FLOOR, and a floor is a human decision this
+     * gate records rather than derives. That decision lives in `floor: 3` and the reason above.
+     *
+     * A check that DID flag it — "resolved major must equal the newest published major" — was
+     * considered and rejected: it would force exactly the bump the paragraphs above say must not
+     * be forced before the residual-precedence reconciliation. The gate must not legislate a
+     * decision it is only supposed to remember.
      * WHAT THE BUMP ROUND MUST DECIDE: whether the guard should emit all holding residuals (then
      * the app consumes gateOut.residuals and collectBindingResiduals is deleted), or whether the
      * single-slot shape is deliberate (then the app keeps its collector and the duplication is
@@ -148,6 +180,94 @@ function resolvedVersionFor(startDir) {
   return null;
 }
 
+/**
+ * RESOLVED-VERSION GRADING — the half the floor check cannot do.
+ *
+ * WHY THIS EXISTS. coderifts@5.0.0 published declaring `@coderifts/agent-guard: ^11.0.0` while
+ * guard 12.0.0 was already out carrying a semantics break (requireConditionalWrite began firing on
+ * ordinary mutations). This gate PASSED, and it was not wrong to: it graded the declared floor
+ * (11 >= 11) and the resolved version (11.0.0 >= 11) against a constant a human maintains by hand.
+ * Both facts were true. Both were stale. A gate that can only compare against the last floor
+ * someone remembered to raise cannot notice a major it has never been told about.
+ *
+ * So the constant is not the whole gate. What CAN be checked without a registry call is whether
+ * the tree and the manifest AGREE — and they must agree in both directions:
+ *
+ *   · resolved BELOW the declared range  → a stale install. The suite measured an older guard than
+ *     the one we ship against, so every "cost measured as zero" conclusion is about the wrong
+ *     package.
+ *   · resolved ABOVE the declared range  → the more dangerous direction, and the one that produced
+ *     this finding's shape. Staging a NEWER guard into node_modules to measure a raise, then
+ *     publishing with the old range, means the suite proved something adopters never receive: they
+ *     resolve the range, not our node_modules. A green suite over a version we do not declare is a
+ *     false confidence, not a measurement.
+ *
+ * NOT RESOLVED IS A FAILURE, not a pass. The previous code returned a success line reading
+ * "not resolved in tree" — "we could not look" recorded as "we looked and it is fine", which is
+ * the exact fail-open class this repository refuses elsewhere (a 404 on the source_ref anchor is
+ * deliberately on the FAIL side for the same reason). A publish gate that verifies nothing must
+ * say so by failing.
+ *
+ * WHAT THIS STILL CANNOT DO, named rather than implied: it makes no network call, so it cannot
+ * know that a newer major exists. Raising the floor stays a human act with a recorded reason. This
+ * check only guarantees that what we measured is what we declare.
+ */
+
+/** Parse "1.2.3" (ignoring any prerelease/build suffix) to [1,2,3], or null. */
+function parseVersion(v) {
+  const m = /^(\d+)\.(\d+)\.(\d+)/.exec(String(v || '').trim());
+  return m ? [parseInt(m[1], 10), parseInt(m[2], 10), parseInt(m[3], 10)] : null;
+}
+
+/** -1 / 0 / 1 over [maj,min,pat] triples. */
+function compareVersions(a, b) {
+  for (let i = 0; i < 3; i += 1) {
+    if (a[i] !== b[i]) return a[i] < b[i] ? -1 : 1;
+  }
+  return 0;
+}
+
+/**
+ * Inclusive lower bound and EXCLUSIVE upper bound for the range forms this gate already accepts.
+ * Deliberately dependency-free — the rest of this file is, and a publish gate that needs an
+ * install to run is a gate that stops running.
+ *
+ * ^1.2.3 -> [1.2.3, 2.0.0)   ~1.2.3 -> [1.2.3, 1.3.0)   >=1.2.3 -> [1.2.3, inf)
+ * 1.2.3  -> [1.2.3, 1.2.4)   1.x    -> [1.0.0, 2.0.0)
+ * Anything else -> null (caller treats an unparseable range as unverifiable, never as satisfied).
+ */
+function rangeBounds(range) {
+  const s = String(range || '').trim();
+  const m = /^(\^|~|>=|=)?\s*(\d+)(?:\.(\d+|x|\*))?(?:\.(\d+|x|\*))?/.exec(s);
+  if (!m) return null;
+  const op = m[1] || '';
+  const maj = parseInt(m[2], 10);
+  const minRaw = m[3];
+  const patRaw = m[4];
+  const wild = (t) => t === undefined || t === 'x' || t === '*';
+  const min = wild(minRaw) ? 0 : parseInt(minRaw, 10);
+  const pat = wild(patRaw) ? 0 : parseInt(patRaw, 10);
+  const lower = [maj, min, pat];
+  if (wild(minRaw)) return { lower, upper: [maj + 1, 0, 0] };      // 1.x
+  if (op === '^') return { lower, upper: [maj + 1, 0, 0] };
+  if (op === '~') return { lower, upper: [maj, min + 1, 0] };
+  if (op === '>=') return { lower, upper: null };
+  if (wild(patRaw)) return { lower, upper: [maj, min + 1, 0] };    // 1.2.x
+  return { lower, upper: [maj, min, pat + 1] };                    // exact
+}
+
+/**
+ * @returns {'in'|'below'|'above'|'unknown'} where `version` sits relative to `range`.
+ */
+function versionVsRange(version, range) {
+  const v = parseVersion(version);
+  const b = rangeBounds(range);
+  if (!v || !b) return 'unknown';
+  if (compareVersions(v, b.lower) < 0) return 'below';
+  if (b.upper && compareVersions(v, b.upper) >= 0) return 'above';
+  return 'in';
+}
+
 /** Check ONE checkout. Returns a line for the summary; calls fail() and exits on a violation. */
 function checkCheckout(c) {
   if (!fs.existsSync(c.pkgPath)) {
@@ -173,7 +293,15 @@ function checkCheckout(c) {
 
   const resolved = resolvedVersionFor(path.dirname(c.pkgPath));
   if (!resolved) {
-    return `${c.label}: declared ${range} (floor ${floor} >= ${c.floor}); not resolved in tree`;
+    // FAIL-CLOSED, with NO opt-out. An `allowUnresolved` flag was written and then removed on
+    // purpose: the first time this fires in CI the cheapest response is to set the flag, and the
+    // hole is back with a config line to justify it. If a checkout ever legitimately ships
+    // uninstalled, add the exemption THEN, with the measurement that earned it.
+    fail(
+      `${c.label}: ${DEP} is declared ${JSON.stringify(range)} but is NOT RESOLVABLE from `
+      + `${path.dirname(c.pkgPath)}. This gate cannot verify what will ship, and an unverified `
+      + 'publish is not a verified one. Install dependencies for this checkout and re-run.',
+    );
   }
   const rm = /^(\d+)/.exec(resolved);
   const rMajor = rm ? parseInt(rm[1], 10) : null;
@@ -183,7 +311,32 @@ function checkCheckout(c) {
   if (rMajor < floor) {
     fail(`${c.label}: resolved ${DEP}@${resolved} major ${rMajor} is below declared range floor ${floor}`);
   }
-  return `${c.label}: declared ${range} (floor ${floor} >= ${c.floor}); resolved ${resolved}`;
+
+  // THE DECLARED RANGE AND THE INSTALLED TREE MUST AGREE — both directions, full precision.
+  const where = versionVsRange(resolved, range);
+  if (where === 'below') {
+    fail(
+      `${c.label}: resolved ${DEP}@${resolved} is BELOW the declared range ${JSON.stringify(range)} `
+      + '— a stale install. Every cost measured against this tree describes an older guard than the '
+      + 'one this package declares. Run npm install for this checkout and re-measure.',
+    );
+  }
+  if (where === 'above') {
+    fail(
+      `${c.label}: resolved ${DEP}@${resolved} is ABOVE the declared range ${JSON.stringify(range)}. `
+      + 'The tree runs a guard this package does not declare, so the suite measured a version '
+      + 'adopters will never receive — they resolve the range, not our node_modules. Either raise '
+      + `the declared range to admit ${resolved} (and record WHY in the history block), or remove `
+      + 'the staged install.',
+    );
+  }
+  if (where === 'unknown') {
+    fail(
+      `${c.label}: cannot decide whether resolved ${DEP}@${resolved} satisfies declared range `
+      + `${JSON.stringify(range)} — unparseable. A range this gate cannot grade must not ship.`,
+    );
+  }
+  return `${c.label}: declared ${range} (floor ${floor} >= ${c.floor}); resolved ${resolved} (in range)`;
 }
 
 function main() {
@@ -206,4 +359,7 @@ function main() {
 // floorMajorFromRange without triggering a process.exit.
 if (require.main === module) main();
 
-module.exports = { CHECKOUTS, floorMajorFromRange, MIN_GUARD_MAJOR, DEP };
+module.exports = {
+  CHECKOUTS, floorMajorFromRange, MIN_GUARD_MAJOR, DEP,
+  parseVersion, compareVersions, rangeBounds, versionVsRange, resolvedVersionFor,
+};