gh-inari 0.10.2 → 0.11.0

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "inari",
-  "version": "0.10.2",
+  "version": "0.11.0",
   "description": "Governed GitHub Issue/PR/template workflows via the inari CLI. Prefer inari over raw gh for operations it owns; use inari skill for operational playbooks.",
   "skills": "skills/inari"
 }

package/README.md

@@ -174,6 +174,10 @@ inari issue normalize <number> [--dry-run]
 inari pr normalize <number> [--dry-run]
 inari issue sync <number> --from desired.json [--dry-run]
 inari pr sync <number> --from desired.json [--dry-run]
+inari change issue <number> [--repository <owner/name>] --json
+inari change show <number> [--repository <owner/name>] --json
+inari change ready <number> [--repository <owner/name>] --json
+inari change abort <number> [--repository <owner/name>] --json
 ```
 
 `--from -` reads JSON from stdin. Create input uses an envelope when mutation metadata is needed:
@@ -195,6 +199,13 @@ and a valid `syncInput.minimalExample`.
 `issue sync --from` overlays supplied semantic fields and metadata onto the
 current artifact, preserving values omitted from the input.
 
+Change commands use the semantic Change contract and return bounded JSON
+projections. Mutation commands request a configured remote executor; workflow
+names, dispatch inputs, Actions jobs, and privileged App credentials are not
+CLI inputs. `change show` is read-only. Existing Issue/PR artifact-level
+commands remain available as explicit migration-compatible direct mutation
+paths while the Change workflow is rolled out.
+
 Schema and validation output is JSON. `--json` makes render and create output JSON as well. Validation failures return exit status `2`; usage errors return `1`; GitHub/transport failures return `3`. Error objects contain stable `code`, `path` where applicable, and ordered `violations`.
 
 `issue get` and `pr get` are canonical-only v1 reads. They resolve the target

package/branch-naming-authority.d.mts

@@ -0,0 +1,8 @@
+export interface BranchNameParts {
+  readonly type: string;
+  readonly issueNumber: number;
+  readonly slug: string;
+}
+
+export function validateBranchName(branch: string): readonly string[];
+export function deriveBranchName(parts: BranchNameParts): string;

package/branch-naming-authority.mjs

@@ -0,0 +1,28 @@
+// Shared executable authority for repository branch naming.
+// Consumers validate or assemble names through this module instead of
+// reimplementing the repository's branch grammar.
+
+const BRANCH_PATTERN = /^(feat|fix|docs|refactor|test|chore)\/\d+-[a-z0-9-]+$/;
+const EXEMPT_BRANCHES = new Set(["main"]);
+
+export function validateBranchName(branch) {
+  if (EXEMPT_BRANCHES.has(branch)) return [];
+  if (BRANCH_PATTERN.test(branch)) return [];
+  return [
+    `branch name "${branch}" does not match <type>/<issue-number>-<slug>` +
+      ' (e.g. "feat/42-add-init-command"); type must be one of feat, fix, docs, refactor, test, chore',
+  ];
+}
+
+export function deriveBranchName({ type, issueNumber, slug }) {
+  if (typeof type !== "string" || type.length === 0) throw new TypeError("Branch type must be a non-empty string.");
+  if (!Number.isSafeInteger(issueNumber) || issueNumber < 1) {
+    throw new TypeError("Branch issue number must be a positive safe integer.");
+  }
+  if (typeof slug !== "string" || slug.length === 0) throw new TypeError("Branch slug must be a non-empty string.");
+
+  const branch = `${type}/${issueNumber}-${slug}`;
+  const errors = validateBranchName(branch);
+  if (errors.length > 0) throw new TypeError(errors[0]);
+  return branch;
+}

package/dist/artifact-contract-governance.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Repository Canon resolution for the Semantic Artifact pipeline.
+ *
+ * This module is the repository-facing Core adapter boundary. It resolves an
+ * Artifact Contract Canon from the authoritative default branch and compiles
+ * it through the shared Effective Artifact Contract compiler. It
+ * does not select semantic values, derive identities, or project GitHub
+ * representations, and it does not define its own Canon location or
+ * selector policy: discovery and template-resolution precedence are
+ * delegated to the same repository governance authority every other
+ * governed artifact uses (`governance.ts`, `template-resolver.ts`).
+ */
+import { type EffectiveArtifactContract } from "./contract/index.js";
+import { GitHubAdapter } from "./github/index.js";
+export type RepositoryEffectiveArtifactKind = "issue" | "branch" | "pull_request";
+export type ArtifactContractResolutionErrorCode = "ARTIFACT_CONTRACT_NOT_FOUND" | "ARTIFACT_CONTRACT_SELECTOR_AMBIGUOUS" | "ARTIFACT_CONTRACT_SOURCE_INVALID" | "ARTIFACT_CONTRACT_KIND_INVALID";
+export interface ArtifactContractResolutionDiagnostic {
+    readonly code: ArtifactContractResolutionErrorCode;
+    readonly path: string;
+    readonly message: string;
+}
+/** Stable machine-readable failure for repository Canon resolution. */
+export declare class ArtifactContractResolutionError extends Error {
+    readonly code: ArtifactContractResolutionErrorCode;
+    readonly path: string;
+    readonly diagnostics: readonly unknown[];
+    readonly details?: Readonly<Record<string, unknown>>;
+    constructor(code: ArtifactContractResolutionErrorCode, path: string, message: string, details?: Readonly<Record<string, unknown>>, diagnostics?: readonly unknown[]);
+}
+export interface RepositoryEffectiveArtifactContractOptions {
+    readonly capabilities?: readonly string[];
+}
+/**
+ * Resolve the authoritative Artifact Contract Canon and compile its Effective
+ * Artifact Contract. All repository identity and generation fields come from
+ * the adapter's default-branch/tree/blob reads.
+ */
+export declare function compileRepositoryEffectiveArtifactContract(adapter: GitHubAdapter, kind: RepositoryEffectiveArtifactKind, selector?: string, options?: RepositoryEffectiveArtifactContractOptions): Promise<EffectiveArtifactContract>;
+/** Resolve and compile a pull-request Artifact Contract from the repository Canon. */
+export declare function compileRepositoryEffectivePullRequestContract(adapter: GitHubAdapter, selector?: string, options?: RepositoryEffectiveArtifactContractOptions): Promise<EffectiveArtifactContract>;
+/** Resolve and compile an Issue Artifact Contract from the repository Canon. */
+export declare function compileRepositoryEffectiveIssueContract(adapter: GitHubAdapter, selector?: string, options?: RepositoryEffectiveArtifactContractOptions): Promise<EffectiveArtifactContract>;
+/** Resolve and compile a Branch Artifact Contract from the repository Canon. */
+export declare function compileRepositoryEffectiveBranchContract(adapter: GitHubAdapter, selector?: string, options?: RepositoryEffectiveArtifactContractOptions): Promise<EffectiveArtifactContract>;

package/dist/artifact-contract-governance.js

@@ -0,0 +1,138 @@
+/**
+ * Repository Canon resolution for the Semantic Artifact pipeline.
+ *
+ * This module is the repository-facing Core adapter boundary. It resolves an
+ * Artifact Contract Canon from the authoritative default branch and compiles
+ * it through the shared Effective Artifact Contract compiler. It
+ * does not select semantic values, derive identities, or project GitHub
+ * representations, and it does not define its own Canon location or
+ * selector policy: discovery and template-resolution precedence are
+ * delegated to the same repository governance authority every other
+ * governed artifact uses (`governance.ts`, `template-resolver.ts`).
+ */
+import { createHash } from "node:crypto";
+import { ArtifactContractValidationError, parseArtifactContract, compileEffectiveArtifactContract, } from "./contract/index.js";
+import { resolveRemoteArtifactContractIdentity } from "./governance.js";
+import { TemplateResolutionError } from "./template-resolver.js";
+/** Stable machine-readable failure for repository Canon resolution. */
+export class ArtifactContractResolutionError extends Error {
+    code;
+    path;
+    diagnostics;
+    details;
+    constructor(code, path, message, details, diagnostics = [{ code, path, message }]) {
+        super(message);
+        this.name = "ArtifactContractResolutionError";
+        this.code = code;
+        this.path = path;
+        this.diagnostics = Object.freeze([...diagnostics]);
+        this.details = details;
+    }
+}
+/**
+ * Resolve the authoritative Artifact Contract Canon identity using the same
+ * repository governance discovery and template-resolution precedence as every
+ * other governed artifact. This module does not read arbitrary repository
+ * files.
+ */
+async function selectCanonIdentity(tree, kind, selector, context, ref) {
+    try {
+        return await resolveRemoteArtifactContractIdentity(tree, kind, selector);
+    }
+    catch (error) {
+        if (!(error instanceof TemplateResolutionError))
+            throw error;
+        throw artifactContractResolutionErrorFromTemplateResolution(error, context, ref);
+    }
+}
+function artifactContractResolutionErrorFromTemplateResolution(error, context, ref) {
+    const details = { repository: context.nameWithOwner, ref, ...error.details };
+    switch (error.code) {
+        case "TEMPLATE_RESOLUTION_SELECTOR_AMBIGUOUS":
+        case "TEMPLATE_RESOLUTION_DEFAULT_AMBIGUOUS":
+        case "TEMPLATE_RESOLUTION_AMBIGUOUS":
+            return new ArtifactContractResolutionError("ARTIFACT_CONTRACT_SELECTOR_AMBIGUOUS", "$.selector", error.message, details);
+        default:
+            return new ArtifactContractResolutionError("ARTIFACT_CONTRACT_NOT_FOUND", "$.selector", error.message, details);
+    }
+}
+function findCanonEntry(tree, identity, context, ref) {
+    const entry = tree.find((candidate) => candidate.path === identity.sourcePath && candidate.type === "blob");
+    if (entry === undefined) {
+        throw new ArtifactContractResolutionError("ARTIFACT_CONTRACT_NOT_FOUND", "$.source", `Artifact Contract Canon "${identity.sourcePath}" was not found for ${context.nameWithOwner} at ref "${ref}".`, { repository: context.nameWithOwner, ref, path: identity.sourcePath });
+    }
+    return entry;
+}
+function sourceProvenance(context, ref, treeSha, entry, source) {
+    return {
+        authority: "repository-default-branch",
+        repository: {
+            host: context.hostname,
+            owner: context.owner,
+            name: context.name,
+            nameWithOwner: context.nameWithOwner,
+            ...(context.repositoryId === undefined ? {} : { repositoryId: context.repositoryId }),
+        },
+        ref,
+        treeSha,
+        source: {
+            path: entry.path,
+            ref,
+            sha: entry.sha,
+            digest: createHash("sha256").update(source, "utf8").digest("hex"),
+        },
+    };
+}
+function parseCanonSource(source, path, kind) {
+    let raw;
+    try {
+        raw = JSON.parse(source);
+    }
+    catch (error) {
+        throw new ArtifactContractResolutionError("ARTIFACT_CONTRACT_SOURCE_INVALID", path, `Artifact Contract Canon "${path}" is not valid JSON.`, { reason: error instanceof Error ? error.message : "invalid JSON" });
+    }
+    try {
+        const contract = parseArtifactContract(raw);
+        if (contract.kind !== kind) {
+            throw new ArtifactContractResolutionError("ARTIFACT_CONTRACT_KIND_INVALID", "$.kind", `Artifact Contract Canon "${path}" must declare kind "${kind}".`, { kind: contract.kind });
+        }
+        return contract;
+    }
+    catch (error) {
+        if (error instanceof ArtifactContractResolutionError)
+            throw error;
+        if (error instanceof ArtifactContractValidationError) {
+            throw new ArtifactContractResolutionError("ARTIFACT_CONTRACT_SOURCE_INVALID", path, `Artifact Contract Canon "${path}" failed Core validation.`, { violations: error.violations }, error.violations);
+        }
+        throw new ArtifactContractResolutionError("ARTIFACT_CONTRACT_SOURCE_INVALID", path, `Artifact Contract Canon "${path}" failed Core validation.`, { reason: error instanceof Error ? error.message : "invalid contract" });
+    }
+}
+/**
+ * Resolve the authoritative Artifact Contract Canon and compile its Effective
+ * Artifact Contract. All repository identity and generation fields come from
+ * the adapter's default-branch/tree/blob reads.
+ */
+export async function compileRepositoryEffectiveArtifactContract(adapter, kind, selector, options = {}) {
+    const context = await adapter.resolveRepositoryContext();
+    const ref = await adapter.getRepositoryDefaultBranch();
+    const tree = await adapter.getRepositoryTree(ref);
+    const identity = await selectCanonIdentity(tree.entries, kind, selector, context, ref);
+    const entry = findCanonEntry(tree.entries, identity, context, ref);
+    const source = await adapter.getRepositoryBlob(entry.sha);
+    const contract = parseCanonSource(source, entry.path, kind);
+    const provenance = sourceProvenance(context, ref, tree.sha, entry, source);
+    return compileEffectiveArtifactContract(contract, { provenance, capabilities: options.capabilities });
+}
+/** Resolve and compile a pull-request Artifact Contract from the repository Canon. */
+export async function compileRepositoryEffectivePullRequestContract(adapter, selector, options = {}) {
+    return compileRepositoryEffectiveArtifactContract(adapter, "pull_request", selector, options);
+}
+/** Resolve and compile an Issue Artifact Contract from the repository Canon. */
+export async function compileRepositoryEffectiveIssueContract(adapter, selector, options = {}) {
+    return compileRepositoryEffectiveArtifactContract(adapter, "issue", selector, options);
+}
+/** Resolve and compile a Branch Artifact Contract from the repository Canon. */
+export async function compileRepositoryEffectiveBranchContract(adapter, selector, options = {}) {
+    return compileRepositoryEffectiveArtifactContract(adapter, "branch", selector, options);
+}
+//# sourceMappingURL=artifact-contract-governance.js.map

package/dist/artifact-contract-governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-contract-governance.js","sourceRoot":"","sources":["../src/artifact-contract-governance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,+BAA+B,EAC/B,qBAAqB,EAErB,gCAAgC,GAGjC,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,qCAAqC,EAA2C,MAAM,iBAAiB,CAAC;AACjH,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAgBjE,uEAAuE;AACvE,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IAC/C,IAAI,CAAsC;IAC1C,IAAI,CAAS;IACb,WAAW,CAAqB;IAChC,OAAO,CAAqC;IAErD,YACE,IAAyC,EACzC,IAAY,EACZ,OAAe,EACf,OAA2C,EAC3C,cAAkC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAE3D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAMD;;;;;GAKG;AACH,KAAK,UAAU,mBAAmB,CAChC,IAAoC,EACpC,IAAqC,EACrC,QAA4B,EAC5B,OAA0B,EAC1B,GAAW;IAEX,IAAI,CAAC;QACH,OAAO,MAAM,qCAAqC,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,KAAK,YAAY,uBAAuB,CAAC;YAAE,MAAM,KAAK,CAAC;QAC7D,MAAM,qDAAqD,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,SAAS,qDAAqD,CAC5D,KAA8B,EAC9B,OAA0B,EAC1B,GAAW;IAEX,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;IAC7E,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,wCAAwC,CAAC;QAC9C,KAAK,uCAAuC,CAAC;QAC7C,KAAK,+BAA+B;YAClC,OAAO,IAAI,+BAA+B,CACxC,sCAAsC,EACtC,YAAY,EACZ,KAAK,CAAC,OAAO,EACb,OAAO,CACR,CAAC;QACJ;YACE,OAAO,IAAI,+BAA+B,CAAC,6BAA6B,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpH,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,IAAoC,EACpC,QAA4C,EAC5C,OAA0B,EAC1B,GAAW;IAEX,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,UAAU,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IAC5G,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,+BAA+B,CACvC,6BAA6B,EAC7B,UAAU,EACV,4BAA4B,QAAQ,CAAC,UAAU,uBAAuB,OAAO,CAAC,aAAa,YAAY,GAAG,IAAI,EAC9G,EAAE,UAAU,EAAE,OAAO,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CACvB,OAA0B,EAC1B,GAAW,EACX,OAAe,EACf,KAA0B,EAC1B,MAAc;IAEd,OAAO;QACL,SAAS,EAAE,2BAA2B;QACtC,UAAU,EAAE;YACV,IAAI,EAAE,OAAO,CAAC,QAAQ;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;SACtF;QACD,GAAG;QACH,OAAO;QACP,MAAM,EAAE;YACN,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG;YACH,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAClE;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,IAAY,EAAE,IAAqC;IAC3F,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAY,CAAC;IACtC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,IAAI,+BAA+B,CACvC,kCAAkC,EAClC,IAAI,EACJ,4BAA4B,IAAI,sBAAsB,EACtD,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,+BAA+B,CACvC,gCAAgC,EAChC,QAAQ,EACR,4BAA4B,IAAI,wBAAwB,IAAI,IAAI,EAChE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CACxB,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,YAAY,+BAA+B;YAAE,MAAM,KAAK,CAAC;QAClE,IAAI,KAAK,YAAY,+BAA+B,EAAE,CAAC;YACrD,MAAM,IAAI,+BAA+B,CACvC,kCAAkC,EAClC,IAAI,EACJ,4BAA4B,IAAI,2BAA2B,EAC3D,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EAChC,KAAK,CAAC,UAAU,CACjB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,+BAA+B,CACvC,kCAAkC,EAClC,IAAI,EACJ,4BAA4B,IAAI,2BAA2B,EAC3D,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,EAAE,CACxE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0CAA0C,CAC9D,OAAsB,EACtB,IAAqC,EACrC,QAAiB,EACjB,UAAsD,EAAE;IAExD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,wBAAwB,EAAE,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,0BAA0B,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3E,OAAO,gCAAgC,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,6CAA6C,CACjE,OAAsB,EACtB,QAAiB,EACjB,UAAsD,EAAE;IAExD,OAAO,0CAA0C,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAChG,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,OAAsB,EACtB,QAAiB,EACjB,UAAsD,EAAE;IAExD,OAAO,0CAA0C,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AACzF,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,OAAsB,EACtB,QAAiB,EACjB,UAAsD,EAAE;IAExD,OAAO,0CAA0C,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC1F,CAAC"}

package/dist/artifact.d.ts

@@ -3,6 +3,8 @@ import { type ArtifactDiagnostic, type ArtifactDiagnosticReport } from "./diagno
 import { type ArtifactKind, type CanonicalContract } from "./contract/ir.js";
 import { type IssueDependencies, type IssueReference } from "./contract/issue-reference.js";
 import { type ValidatedRenderedIssueArtifact, type ValidatedRenderedPullRequestArtifact } from "./github/types.js";
+export { artifactContractFromLegacyCanonical, compileLegacyEffectiveArtifactContract, convergeLegacyArtifactInput, mapLegacyArtifactCandidate, materializeLegacyArtifact, tryMaterializeLegacyArtifact, validateLegacyBranchProjection, } from "./legacy-artifact-convergence.js";
+export type { LegacyArtifactCompatibilitySource, LegacyArtifactConvergenceCode, LegacyArtifactConvergenceDiagnostic, LegacyArtifactConvergenceOptions, LegacyArtifactConvergenceResult, LegacyLinkedIssueRepository, LegacySemanticArtifactMaterializationResult, } from "./legacy-artifact-convergence.js";
 export interface ArtifactInputMetadata {
     readonly title?: string;
     readonly labels?: readonly string[];
@@ -163,6 +165,8 @@ export interface IssueDependencyMarkerExtraction {
     /** Body with a recognized trailing dependency marker removed. */
     readonly body: string;
 }
+/** Render the bounded compatibility marker used for Issue dependency projections. */
+export declare function renderIssueDependencyMarker(dependencies: IssueDependencies): string;
 /**
  * Read only the reserved trailing dependency marker emitted by Inari.  No
  * ordinary Markdown is interpreted as a relationship declaration.
@@ -266,6 +270,24 @@ export declare function validateExistingIssueFromAdapter(reader: ExistingIssueRe
 export declare function validateExistingPullRequestFromAdapter(reader: ExistingPullRequestReader, contract: unknown, pullRequestNumber: number): Promise<FetchedExistingArtifact>;
 /** @internal Validate the canonical Issue metadata handoff before mutation. */
 export declare function verifyIssueMetadataRoundTrip(expected: Readonly<Record<string, unknown>>, artifact: ValidatedRenderedIssueArtifact): void;
-/** Escape only Markdown constructs that could change the canonical section structure. */
+/**
+ * Escape only Markdown constructs that can change the compiled canonical
+ * structure when a field value is spliced verbatim into a rendered body:
+ *
+ * - a heading line would be mistaken for the next section boundary
+ *   (`isHeading` / `headingBlocks` scan headings only to find where a
+ *   field's content ends);
+ * - a fence marker would shift the fence-tracking state those same scans use
+ *   to skip over heading-look-alikes inside embedded code;
+ * - a line matching the reserved `<!-- inari:... -->` marker prefix could be
+ *   read back as the trailing template-identity/dependency marker.
+ *
+ * Task-list (`- [ ]`) and blockquote (`>`) prefixes are not used by any
+ * section/field boundary detection in this file, so they are left as
+ * intentional Markdown rather than escaped merely because they resemble a
+ * construct (see #275). Checklist item labels get their own additional
+ * escape in `escapeChecklistLabel` because those *are* line-delimited by a
+ * task-list prefix during parsing.
+ */
 export declare function escapeMarkdownValue(value: string): string;
 export declare function removeHtmlComments(value: string): string;

package/dist/artifact.js

@@ -3,6 +3,10 @@ import { createArtifactDiagnostic, createArtifactDiagnosticReport, createFieldEv
 import { assertCanonicalContract, } from "./contract/ir.js";
 import { EMPTY_ISSUE_DEPENDENCIES, validateIssueDependencies, } from "./contract/issue-reference.js";
 import { createValidatedRenderedIssueArtifact, createValidatedRenderedPullRequestArtifact, } from "./github/capability.js";
+// v1 artifact APIs remain available during migration. Their explicit
+// convergence adapter is re-exported here so callers do not need a second
+// legacy-specific package entrypoint.
+export { artifactContractFromLegacyCanonical, compileLegacyEffectiveArtifactContract, convergeLegacyArtifactInput, mapLegacyArtifactCandidate, materializeLegacyArtifact, tryMaterializeLegacyArtifact, validateLegacyBranchProjection, } from "./legacy-artifact-convergence.js";
 export class ArtifactInputError extends Error {
     code;
     path;
@@ -55,7 +59,8 @@ function renderTemplateIdentityMarker(contract) {
     };
     return `${TEMPLATE_IDENTITY_MARKER_PREFIX}${JSON.stringify(marker)}${TEMPLATE_IDENTITY_MARKER_SUFFIX}`;
 }
-function renderIssueDependencyMarker(dependencies) {
+/** Render the bounded compatibility marker used for Issue dependency projections. */
+export function renderIssueDependencyMarker(dependencies) {
     return `${ISSUE_DEPENDENCY_MARKER_PREFIX}${JSON.stringify({
         version: ISSUE_DEPENDENCY_MARKER_VERSION,
         dependencies,
@@ -1048,7 +1053,7 @@ function renderFieldValue(field, value, kind) {
     }
     const selected = new Set(Array.isArray(value) ? value.filter((entry) => typeof entry === "string") : []);
     const placeholder = kind === "pull_request" ? field.nativeMetadata.placeholder : undefined;
-    const lines = field.items.map((item) => `- [${selected.has(item.id) ? "x" : " "}] ${escapeMarkdownValue(item.label)}`);
+    const lines = field.items.map((item) => `- [${selected.has(item.id) ? "x" : " "}] ${escapeChecklistLabel(item.label)}`);
     return [placeholder === undefined ? "" : placeholder, lines.join("\n")].filter(Boolean).join("\n\n");
 }
 /** Map canonical Issue semantic values to the labels shown by GitHub Issue Forms. */
@@ -1410,25 +1415,55 @@ function stringArray(value, key) {
 function escapeHeading(value) {
     return value.replace(/[\r\n]+/gu, " ").trim();
 }
-/** Escape only Markdown constructs that could change the canonical section structure. */
+/**
+ * Escape only Markdown constructs that can change the compiled canonical
+ * structure when a field value is spliced verbatim into a rendered body:
+ *
+ * - a heading line would be mistaken for the next section boundary
+ *   (`isHeading` / `headingBlocks` scan headings only to find where a
+ *   field's content ends);
+ * - a fence marker would shift the fence-tracking state those same scans use
+ *   to skip over heading-look-alikes inside embedded code;
+ * - a line matching the reserved `<!-- inari:... -->` marker prefix could be
+ *   read back as the trailing template-identity/dependency marker.
+ *
+ * Task-list (`- [ ]`) and blockquote (`>`) prefixes are not used by any
+ * section/field boundary detection in this file, so they are left as
+ * intentional Markdown rather than escaped merely because they resemble a
+ * construct (see #275). Checklist item labels get their own additional
+ * escape in `escapeChecklistLabel` because those *are* line-delimited by a
+ * task-list prefix during parsing.
+ */
 export function escapeMarkdownValue(value) {
     return normalizeSource(value)
         .split("\n")
         .map((line) => {
         if (/^ {0,3}(?:#{1,6})(?:[ \t]+|$)/u.test(line))
             return line.replace(/^( {0,3})(#)/u, "$1\\$2");
-        if (/^ {0,3}(?:[-+*]|\d+[.)])[ \t]+\[[ xX]\]/u.test(line))
-            return line.replace(/^( {0,3})([-+*]|\d+[.)])/u, "$1\\$2");
         if (/^ {0,3}(?:```|~~~)/u.test(line))
             return line.replace(/^([ \t]{0,3})([`~])/u, "$1\\$2");
-        if (/^ {0,3}>[ \t]?/u.test(line))
-            return line.replace(/^( {0,3})(>)/u, "$1\\$2");
         if (/^ {0,3}<!--/u.test(line))
             return line.replace(/^( {0,3})(<!--)/u, "$1\\$2");
         return line;
     })
         .join("\n");
 }
+/**
+ * Checklist item labels are rendered one-per-line under a shared `- [ ] `/
+ * `- [x] ` prefix, and parsing re-splits that same block back into items by
+ * matching the task-list prefix on each line. An embedded, unescaped
+ * task-list-look-alike line inside a label would therefore be read back as a
+ * separate checklist entry, so (unlike free-form string/array fields) the
+ * task-list prefix is structural here and must stay escaped.
+ */
+function escapeChecklistLabel(value) {
+    return escapeMarkdownValue(value)
+        .split("\n")
+        .map((line) => /^ {0,3}(?:[-+*]|\d+[.)])[ \t]+\[[ xX]\]/u.test(line)
+        ? line.replace(/^( {0,3})([-+*]|\d+[.)])/u, "$1\\$2")
+        : line)
+        .join("\n");
+}
 function unescapeMarkdownValue(value) {
     return normalizeSource(value)
         .split("\n")