gh-inari 0.9.0 → 0.11.0

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "inari",
-  "version": "0.9.0",
+  "version": "0.11.0",
   "description": "Governed GitHub Issue/PR/template workflows via the inari CLI. Prefer inari over raw gh for operations it owns; use inari skill for operational playbooks.",
   "skills": "skills/inari"
 }

package/README.md

@@ -90,8 +90,10 @@ recovery command. The current capability identifiers are
 `canonical-invocation`, `machine-readable-version`, `capability-diagnostics`,
 and `extension-bootstrap`.
 
-The `inari`, `gh-inari`, and `gh inari` invocation forms are behaviorally
-identical:
+The `inari` executable is canonical. The direct package executable
+`gh-inari` and the `gh inari` extension form are compatibility paths with the
+same governed command semantics; prefer `inari` for agent and human-facing
+commands:
 
 ```bash
 inari issue schema feature --json
@@ -172,6 +174,10 @@ inari issue normalize <number> [--dry-run]
 inari pr normalize <number> [--dry-run]
 inari issue sync <number> --from desired.json [--dry-run]
 inari pr sync <number> --from desired.json [--dry-run]
+inari change issue <number> [--repository <owner/name>] --json
+inari change show <number> [--repository <owner/name>] --json
+inari change ready <number> [--repository <owner/name>] --json
+inari change abort <number> [--repository <owner/name>] --json
 ```
 
 `--from -` reads JSON from stdin. Create input uses an envelope when mutation metadata is needed:
@@ -193,6 +199,13 @@ and a valid `syncInput.minimalExample`.
 `issue sync --from` overlays supplied semantic fields and metadata onto the
 current artifact, preserving values omitted from the input.
 
+Change commands use the semantic Change contract and return bounded JSON
+projections. Mutation commands request a configured remote executor; workflow
+names, dispatch inputs, Actions jobs, and privileged App credentials are not
+CLI inputs. `change show` is read-only. Existing Issue/PR artifact-level
+commands remain available as explicit migration-compatible direct mutation
+paths while the Change workflow is rolled out.
+
 Schema and validation output is JSON. `--json` makes render and create output JSON as well. Validation failures return exit status `2`; usage errors return `1`; GitHub/transport failures return `3`. Error objects contain stable `code`, `path` where applicable, and ordered `violations`.
 
 `issue get` and `pr get` are canonical-only v1 reads. They resolve the target
@@ -260,6 +273,22 @@ templates:
 
 Template and section bindings are deterministic. Stale, unknown, or ambiguous template/section references fail closed. `linkedIssue: true` means that the field contains a GitHub closing reference: `close`, `closes`, `closed`, `fix`, `fixes`, `fixed`, `resolve`, `resolves`, or `resolved`, followed by `#ISSUE-NUMBER` or `OWNER/REPOSITORY#ISSUE-NUMBER`, with an optional colon and case-insensitive keyword. This validates syntax only; GitHub applies automatic linking/closure only under its own contextual rules, including the target default branch.
 
+When `issue create` or `pr create` omits `--template`, the shared resolver uses
+the repository's optional `.github/inari/template-resolution.yml` authority:
+
+```yaml
+version: 1
+defaults:
+  issue: feature
+  pr: default
+```
+
+The precedence is explicit selector, configured default, sole candidate,
+interactive TTY selection, then bounded failure. Non-interactive execution never
+guesses among multiple candidates. An invalid or unavailable configured default
+also fails closed. Candidate identifiers and an explicit `--template` recovery
+action are included in structured ambiguity diagnostics.
+
 Issue Form top-level `title` is a fixed native prefix for create validation, but it does not satisfy the caller's required title metadata by itself. An explicit caller title is used as supplied without inferred prefix concatenation or automatic generation. Top-level `labels` are repository-governed defaults and are always retained; caller-supplied labels are appended in order with duplicates removed. Top-level `assignees`, `projects`, and `type`, and upload fields remain unsupported and fail closed rather than being approximated.
 
 ## Scope

package/branch-naming-authority.d.mts

@@ -0,0 +1,8 @@
+export interface BranchNameParts {
+  readonly type: string;
+  readonly issueNumber: number;
+  readonly slug: string;
+}
+
+export function validateBranchName(branch: string): readonly string[];
+export function deriveBranchName(parts: BranchNameParts): string;

package/branch-naming-authority.mjs

@@ -0,0 +1,28 @@
+// Shared executable authority for repository branch naming.
+// Consumers validate or assemble names through this module instead of
+// reimplementing the repository's branch grammar.
+
+const BRANCH_PATTERN = /^(feat|fix|docs|refactor|test|chore)\/\d+-[a-z0-9-]+$/;
+const EXEMPT_BRANCHES = new Set(["main"]);
+
+export function validateBranchName(branch) {
+  if (EXEMPT_BRANCHES.has(branch)) return [];
+  if (BRANCH_PATTERN.test(branch)) return [];
+  return [
+    `branch name "${branch}" does not match <type>/<issue-number>-<slug>` +
+      ' (e.g. "feat/42-add-init-command"); type must be one of feat, fix, docs, refactor, test, chore',
+  ];
+}
+
+export function deriveBranchName({ type, issueNumber, slug }) {
+  if (typeof type !== "string" || type.length === 0) throw new TypeError("Branch type must be a non-empty string.");
+  if (!Number.isSafeInteger(issueNumber) || issueNumber < 1) {
+    throw new TypeError("Branch issue number must be a positive safe integer.");
+  }
+  if (typeof slug !== "string" || slug.length === 0) throw new TypeError("Branch slug must be a non-empty string.");
+
+  const branch = `${type}/${issueNumber}-${slug}`;
+  const errors = validateBranchName(branch);
+  if (errors.length > 0) throw new TypeError(errors[0]);
+  return branch;
+}

package/dist/artifact-contract-governance.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Repository Canon resolution for the Semantic Artifact pipeline.
+ *
+ * This module is the repository-facing Core adapter boundary. It resolves an
+ * Artifact Contract Canon from the authoritative default branch and compiles
+ * it through the shared Effective Artifact Contract compiler. It
+ * does not select semantic values, derive identities, or project GitHub
+ * representations, and it does not define its own Canon location or
+ * selector policy: discovery and template-resolution precedence are
+ * delegated to the same repository governance authority every other
+ * governed artifact uses (`governance.ts`, `template-resolver.ts`).
+ */
+import { type EffectiveArtifactContract } from "./contract/index.js";
+import { GitHubAdapter } from "./github/index.js";
+export type RepositoryEffectiveArtifactKind = "issue" | "branch" | "pull_request";
+export type ArtifactContractResolutionErrorCode = "ARTIFACT_CONTRACT_NOT_FOUND" | "ARTIFACT_CONTRACT_SELECTOR_AMBIGUOUS" | "ARTIFACT_CONTRACT_SOURCE_INVALID" | "ARTIFACT_CONTRACT_KIND_INVALID";
+export interface ArtifactContractResolutionDiagnostic {
+    readonly code: ArtifactContractResolutionErrorCode;
+    readonly path: string;
+    readonly message: string;
+}
+/** Stable machine-readable failure for repository Canon resolution. */
+export declare class ArtifactContractResolutionError extends Error {
+    readonly code: ArtifactContractResolutionErrorCode;
+    readonly path: string;
+    readonly diagnostics: readonly unknown[];
+    readonly details?: Readonly<Record<string, unknown>>;
+    constructor(code: ArtifactContractResolutionErrorCode, path: string, message: string, details?: Readonly<Record<string, unknown>>, diagnostics?: readonly unknown[]);
+}
+export interface RepositoryEffectiveArtifactContractOptions {
+    readonly capabilities?: readonly string[];
+}
+/**
+ * Resolve the authoritative Artifact Contract Canon and compile its Effective
+ * Artifact Contract. All repository identity and generation fields come from
+ * the adapter's default-branch/tree/blob reads.
+ */
+export declare function compileRepositoryEffectiveArtifactContract(adapter: GitHubAdapter, kind: RepositoryEffectiveArtifactKind, selector?: string, options?: RepositoryEffectiveArtifactContractOptions): Promise<EffectiveArtifactContract>;
+/** Resolve and compile a pull-request Artifact Contract from the repository Canon. */
+export declare function compileRepositoryEffectivePullRequestContract(adapter: GitHubAdapter, selector?: string, options?: RepositoryEffectiveArtifactContractOptions): Promise<EffectiveArtifactContract>;
+/** Resolve and compile an Issue Artifact Contract from the repository Canon. */
+export declare function compileRepositoryEffectiveIssueContract(adapter: GitHubAdapter, selector?: string, options?: RepositoryEffectiveArtifactContractOptions): Promise<EffectiveArtifactContract>;
+/** Resolve and compile a Branch Artifact Contract from the repository Canon. */
+export declare function compileRepositoryEffectiveBranchContract(adapter: GitHubAdapter, selector?: string, options?: RepositoryEffectiveArtifactContractOptions): Promise<EffectiveArtifactContract>;

package/dist/artifact-contract-governance.js

@@ -0,0 +1,138 @@
+/**
+ * Repository Canon resolution for the Semantic Artifact pipeline.
+ *
+ * This module is the repository-facing Core adapter boundary. It resolves an
+ * Artifact Contract Canon from the authoritative default branch and compiles
+ * it through the shared Effective Artifact Contract compiler. It
+ * does not select semantic values, derive identities, or project GitHub
+ * representations, and it does not define its own Canon location or
+ * selector policy: discovery and template-resolution precedence are
+ * delegated to the same repository governance authority every other
+ * governed artifact uses (`governance.ts`, `template-resolver.ts`).
+ */
+import { createHash } from "node:crypto";
+import { ArtifactContractValidationError, parseArtifactContract, compileEffectiveArtifactContract, } from "./contract/index.js";
+import { resolveRemoteArtifactContractIdentity } from "./governance.js";
+import { TemplateResolutionError } from "./template-resolver.js";
+/** Stable machine-readable failure for repository Canon resolution. */
+export class ArtifactContractResolutionError extends Error {
+    code;
+    path;
+    diagnostics;
+    details;
+    constructor(code, path, message, details, diagnostics = [{ code, path, message }]) {
+        super(message);
+        this.name = "ArtifactContractResolutionError";
+        this.code = code;
+        this.path = path;
+        this.diagnostics = Object.freeze([...diagnostics]);
+        this.details = details;
+    }
+}
+/**
+ * Resolve the authoritative Artifact Contract Canon identity using the same
+ * repository governance discovery and template-resolution precedence as every
+ * other governed artifact. This module does not read arbitrary repository
+ * files.
+ */
+async function selectCanonIdentity(tree, kind, selector, context, ref) {
+    try {
+        return await resolveRemoteArtifactContractIdentity(tree, kind, selector);
+    }
+    catch (error) {
+        if (!(error instanceof TemplateResolutionError))
+            throw error;
+        throw artifactContractResolutionErrorFromTemplateResolution(error, context, ref);
+    }
+}
+function artifactContractResolutionErrorFromTemplateResolution(error, context, ref) {
+    const details = { repository: context.nameWithOwner, ref, ...error.details };
+    switch (error.code) {
+        case "TEMPLATE_RESOLUTION_SELECTOR_AMBIGUOUS":
+        case "TEMPLATE_RESOLUTION_DEFAULT_AMBIGUOUS":
+        case "TEMPLATE_RESOLUTION_AMBIGUOUS":
+            return new ArtifactContractResolutionError("ARTIFACT_CONTRACT_SELECTOR_AMBIGUOUS", "$.selector", error.message, details);
+        default:
+            return new ArtifactContractResolutionError("ARTIFACT_CONTRACT_NOT_FOUND", "$.selector", error.message, details);
+    }
+}
+function findCanonEntry(tree, identity, context, ref) {
+    const entry = tree.find((candidate) => candidate.path === identity.sourcePath && candidate.type === "blob");
+    if (entry === undefined) {
+        throw new ArtifactContractResolutionError("ARTIFACT_CONTRACT_NOT_FOUND", "$.source", `Artifact Contract Canon "${identity.sourcePath}" was not found for ${context.nameWithOwner} at ref "${ref}".`, { repository: context.nameWithOwner, ref, path: identity.sourcePath });
+    }
+    return entry;
+}
+function sourceProvenance(context, ref, treeSha, entry, source) {
+    return {
+        authority: "repository-default-branch",
+        repository: {
+            host: context.hostname,
+            owner: context.owner,
+            name: context.name,
+            nameWithOwner: context.nameWithOwner,
+            ...(context.repositoryId === undefined ? {} : { repositoryId: context.repositoryId }),
+        },
+        ref,
+        treeSha,
+        source: {
+            path: entry.path,
+            ref,
+            sha: entry.sha,
+            digest: createHash("sha256").update(source, "utf8").digest("hex"),
+        },
+    };
+}
+function parseCanonSource(source, path, kind) {
+    let raw;
+    try {
+        raw = JSON.parse(source);
+    }
+    catch (error) {
+        throw new ArtifactContractResolutionError("ARTIFACT_CONTRACT_SOURCE_INVALID", path, `Artifact Contract Canon "${path}" is not valid JSON.`, { reason: error instanceof Error ? error.message : "invalid JSON" });
+    }
+    try {
+        const contract = parseArtifactContract(raw);
+        if (contract.kind !== kind) {
+            throw new ArtifactContractResolutionError("ARTIFACT_CONTRACT_KIND_INVALID", "$.kind", `Artifact Contract Canon "${path}" must declare kind "${kind}".`, { kind: contract.kind });
+        }
+        return contract;
+    }
+    catch (error) {
+        if (error instanceof ArtifactContractResolutionError)
+            throw error;
+        if (error instanceof ArtifactContractValidationError) {
+            throw new ArtifactContractResolutionError("ARTIFACT_CONTRACT_SOURCE_INVALID", path, `Artifact Contract Canon "${path}" failed Core validation.`, { violations: error.violations }, error.violations);
+        }
+        throw new ArtifactContractResolutionError("ARTIFACT_CONTRACT_SOURCE_INVALID", path, `Artifact Contract Canon "${path}" failed Core validation.`, { reason: error instanceof Error ? error.message : "invalid contract" });
+    }
+}
+/**
+ * Resolve the authoritative Artifact Contract Canon and compile its Effective
+ * Artifact Contract. All repository identity and generation fields come from
+ * the adapter's default-branch/tree/blob reads.
+ */
+export async function compileRepositoryEffectiveArtifactContract(adapter, kind, selector, options = {}) {
+    const context = await adapter.resolveRepositoryContext();
+    const ref = await adapter.getRepositoryDefaultBranch();
+    const tree = await adapter.getRepositoryTree(ref);
+    const identity = await selectCanonIdentity(tree.entries, kind, selector, context, ref);
+    const entry = findCanonEntry(tree.entries, identity, context, ref);
+    const source = await adapter.getRepositoryBlob(entry.sha);
+    const contract = parseCanonSource(source, entry.path, kind);
+    const provenance = sourceProvenance(context, ref, tree.sha, entry, source);
+    return compileEffectiveArtifactContract(contract, { provenance, capabilities: options.capabilities });
+}
+/** Resolve and compile a pull-request Artifact Contract from the repository Canon. */
+export async function compileRepositoryEffectivePullRequestContract(adapter, selector, options = {}) {
+    return compileRepositoryEffectiveArtifactContract(adapter, "pull_request", selector, options);
+}
+/** Resolve and compile an Issue Artifact Contract from the repository Canon. */
+export async function compileRepositoryEffectiveIssueContract(adapter, selector, options = {}) {
+    return compileRepositoryEffectiveArtifactContract(adapter, "issue", selector, options);
+}
+/** Resolve and compile a Branch Artifact Contract from the repository Canon. */
+export async function compileRepositoryEffectiveBranchContract(adapter, selector, options = {}) {
+    return compileRepositoryEffectiveArtifactContract(adapter, "branch", selector, options);
+}
+//# sourceMappingURL=artifact-contract-governance.js.map

package/dist/artifact-contract-governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-contract-governance.js","sourceRoot":"","sources":["../src/artifact-contract-governance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,+BAA+B,EAC/B,qBAAqB,EAErB,gCAAgC,GAGjC,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,qCAAqC,EAA2C,MAAM,iBAAiB,CAAC;AACjH,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAgBjE,uEAAuE;AACvE,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IAC/C,IAAI,CAAsC;IAC1C,IAAI,CAAS;IACb,WAAW,CAAqB;IAChC,OAAO,CAAqC;IAErD,YACE,IAAyC,EACzC,IAAY,EACZ,OAAe,EACf,OAA2C,EAC3C,cAAkC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAE3D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAMD;;;;;GAKG;AACH,KAAK,UAAU,mBAAmB,CAChC,IAAoC,EACpC,IAAqC,EACrC,QAA4B,EAC5B,OAA0B,EAC1B,GAAW;IAEX,IAAI,CAAC;QACH,OAAO,MAAM,qCAAqC,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,KAAK,YAAY,uBAAuB,CAAC;YAAE,MAAM,KAAK,CAAC;QAC7D,MAAM,qDAAqD,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,SAAS,qDAAqD,CAC5D,KAA8B,EAC9B,OAA0B,EAC1B,GAAW;IAEX,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;IAC7E,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,wCAAwC,CAAC;QAC9C,KAAK,uCAAuC,CAAC;QAC7C,KAAK,+BAA+B;YAClC,OAAO,IAAI,+BAA+B,CACxC,sCAAsC,EACtC,YAAY,EACZ,KAAK,CAAC,OAAO,EACb,OAAO,CACR,CAAC;QACJ;YACE,OAAO,IAAI,+BAA+B,CAAC,6BAA6B,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpH,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,IAAoC,EACpC,QAA4C,EAC5C,OAA0B,EAC1B,GAAW;IAEX,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,UAAU,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IAC5G,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,+BAA+B,CACvC,6BAA6B,EAC7B,UAAU,EACV,4BAA4B,QAAQ,CAAC,UAAU,uBAAuB,OAAO,CAAC,aAAa,YAAY,GAAG,IAAI,EAC9G,EAAE,UAAU,EAAE,OAAO,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CACvB,OAA0B,EAC1B,GAAW,EACX,OAAe,EACf,KAA0B,EAC1B,MAAc;IAEd,OAAO;QACL,SAAS,EAAE,2BAA2B;QACtC,UAAU,EAAE;YACV,IAAI,EAAE,OAAO,CAAC,QAAQ;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;SACtF;QACD,GAAG;QACH,OAAO;QACP,MAAM,EAAE;YACN,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG;YACH,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAClE;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,IAAY,EAAE,IAAqC;IAC3F,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAY,CAAC;IACtC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,IAAI,+BAA+B,CACvC,kCAAkC,EAClC,IAAI,EACJ,4BAA4B,IAAI,sBAAsB,EACtD,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,+BAA+B,CACvC,gCAAgC,EAChC,QAAQ,EACR,4BAA4B,IAAI,wBAAwB,IAAI,IAAI,EAChE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CACxB,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,YAAY,+BAA+B;YAAE,MAAM,KAAK,CAAC;QAClE,IAAI,KAAK,YAAY,+BAA+B,EAAE,CAAC;YACrD,MAAM,IAAI,+BAA+B,CACvC,kCAAkC,EAClC,IAAI,EACJ,4BAA4B,IAAI,2BAA2B,EAC3D,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EAChC,KAAK,CAAC,UAAU,CACjB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,+BAA+B,CACvC,kCAAkC,EAClC,IAAI,EACJ,4BAA4B,IAAI,2BAA2B,EAC3D,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,EAAE,CACxE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0CAA0C,CAC9D,OAAsB,EACtB,IAAqC,EACrC,QAAiB,EACjB,UAAsD,EAAE;IAExD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,wBAAwB,EAAE,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,0BAA0B,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3E,OAAO,gCAAgC,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,6CAA6C,CACjE,OAAsB,EACtB,QAAiB,EACjB,UAAsD,EAAE;IAExD,OAAO,0CAA0C,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAChG,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,OAAsB,EACtB,QAAiB,EACjB,UAAsD,EAAE;IAExD,OAAO,0CAA0C,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AACzF,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,OAAsB,EACtB,QAAiB,EACjB,UAAsD,EAAE;IAExD,OAAO,0CAA0C,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC1F,CAAC"}

package/dist/artifact.d.ts

@@ -3,6 +3,8 @@ import { type ArtifactDiagnostic, type ArtifactDiagnosticReport } from "./diagno
 import { type ArtifactKind, type CanonicalContract } from "./contract/ir.js";
 import { type IssueDependencies, type IssueReference } from "./contract/issue-reference.js";
 import { type ValidatedRenderedIssueArtifact, type ValidatedRenderedPullRequestArtifact } from "./github/types.js";
+export { artifactContractFromLegacyCanonical, compileLegacyEffectiveArtifactContract, convergeLegacyArtifactInput, mapLegacyArtifactCandidate, materializeLegacyArtifact, tryMaterializeLegacyArtifact, validateLegacyBranchProjection, } from "./legacy-artifact-convergence.js";
+export type { LegacyArtifactCompatibilitySource, LegacyArtifactConvergenceCode, LegacyArtifactConvergenceDiagnostic, LegacyArtifactConvergenceOptions, LegacyArtifactConvergenceResult, LegacyLinkedIssueRepository, LegacySemanticArtifactMaterializationResult, } from "./legacy-artifact-convergence.js";
 export interface ArtifactInputMetadata {
     readonly title?: string;
     readonly labels?: readonly string[];
@@ -163,6 +165,8 @@ export interface IssueDependencyMarkerExtraction {
     /** Body with a recognized trailing dependency marker removed. */
     readonly body: string;
 }
+/** Render the bounded compatibility marker used for Issue dependency projections. */
+export declare function renderIssueDependencyMarker(dependencies: IssueDependencies): string;
 /**
  * Read only the reserved trailing dependency marker emitted by Inari.  No
  * ordinary Markdown is interpreted as a relationship declaration.
@@ -266,6 +270,24 @@ export declare function validateExistingIssueFromAdapter(reader: ExistingIssueRe
 export declare function validateExistingPullRequestFromAdapter(reader: ExistingPullRequestReader, contract: unknown, pullRequestNumber: number): Promise<FetchedExistingArtifact>;
 /** @internal Validate the canonical Issue metadata handoff before mutation. */
 export declare function verifyIssueMetadataRoundTrip(expected: Readonly<Record<string, unknown>>, artifact: ValidatedRenderedIssueArtifact): void;
-/** Escape only Markdown constructs that could change the canonical section structure. */
+/**
+ * Escape only Markdown constructs that can change the compiled canonical
+ * structure when a field value is spliced verbatim into a rendered body:
+ *
+ * - a heading line would be mistaken for the next section boundary
+ *   (`isHeading` / `headingBlocks` scan headings only to find where a
+ *   field's content ends);
+ * - a fence marker would shift the fence-tracking state those same scans use
+ *   to skip over heading-look-alikes inside embedded code;
+ * - a line matching the reserved `<!-- inari:... -->` marker prefix could be
+ *   read back as the trailing template-identity/dependency marker.
+ *
+ * Task-list (`- [ ]`) and blockquote (`>`) prefixes are not used by any
+ * section/field boundary detection in this file, so they are left as
+ * intentional Markdown rather than escaped merely because they resemble a
+ * construct (see #275). Checklist item labels get their own additional
+ * escape in `escapeChecklistLabel` because those *are* line-delimited by a
+ * task-list prefix during parsing.
+ */
 export declare function escapeMarkdownValue(value: string): string;
 export declare function removeHtmlComments(value: string): string;

package/dist/artifact.js

@@ -3,6 +3,10 @@ import { createArtifactDiagnostic, createArtifactDiagnosticReport, createFieldEv
 import { assertCanonicalContract, } from "./contract/ir.js";
 import { EMPTY_ISSUE_DEPENDENCIES, validateIssueDependencies, } from "./contract/issue-reference.js";
 import { createValidatedRenderedIssueArtifact, createValidatedRenderedPullRequestArtifact, } from "./github/capability.js";
+// v1 artifact APIs remain available during migration. Their explicit
+// convergence adapter is re-exported here so callers do not need a second
+// legacy-specific package entrypoint.
+export { artifactContractFromLegacyCanonical, compileLegacyEffectiveArtifactContract, convergeLegacyArtifactInput, mapLegacyArtifactCandidate, materializeLegacyArtifact, tryMaterializeLegacyArtifact, validateLegacyBranchProjection, } from "./legacy-artifact-convergence.js";
 export class ArtifactInputError extends Error {
     code;
     path;
@@ -55,7 +59,8 @@ function renderTemplateIdentityMarker(contract) {
     };
     return `${TEMPLATE_IDENTITY_MARKER_PREFIX}${JSON.stringify(marker)}${TEMPLATE_IDENTITY_MARKER_SUFFIX}`;
 }
-function renderIssueDependencyMarker(dependencies) {
+/** Render the bounded compatibility marker used for Issue dependency projections. */
+export function renderIssueDependencyMarker(dependencies) {
     return `${ISSUE_DEPENDENCY_MARKER_PREFIX}${JSON.stringify({
         version: ISSUE_DEPENDENCY_MARKER_VERSION,
         dependencies,
@@ -1048,7 +1053,7 @@ function renderFieldValue(field, value, kind) {
     }
     const selected = new Set(Array.isArray(value) ? value.filter((entry) => typeof entry === "string") : []);
     const placeholder = kind === "pull_request" ? field.nativeMetadata.placeholder : undefined;
-    const lines = field.items.map((item) => `- [${selected.has(item.id) ? "x" : " "}] ${escapeMarkdownValue(item.label)}`);
+    const lines = field.items.map((item) => `- [${selected.has(item.id) ? "x" : " "}] ${escapeChecklistLabel(item.label)}`);
     return [placeholder === undefined ? "" : placeholder, lines.join("\n")].filter(Boolean).join("\n\n");
 }
 /** Map canonical Issue semantic values to the labels shown by GitHub Issue Forms. */
@@ -1410,25 +1415,55 @@ function stringArray(value, key) {
 function escapeHeading(value) {
     return value.replace(/[\r\n]+/gu, " ").trim();
 }
-/** Escape only Markdown constructs that could change the canonical section structure. */
+/**
+ * Escape only Markdown constructs that can change the compiled canonical
+ * structure when a field value is spliced verbatim into a rendered body:
+ *
+ * - a heading line would be mistaken for the next section boundary
+ *   (`isHeading` / `headingBlocks` scan headings only to find where a
+ *   field's content ends);
+ * - a fence marker would shift the fence-tracking state those same scans use
+ *   to skip over heading-look-alikes inside embedded code;
+ * - a line matching the reserved `<!-- inari:... -->` marker prefix could be
+ *   read back as the trailing template-identity/dependency marker.
+ *
+ * Task-list (`- [ ]`) and blockquote (`>`) prefixes are not used by any
+ * section/field boundary detection in this file, so they are left as
+ * intentional Markdown rather than escaped merely because they resemble a
+ * construct (see #275). Checklist item labels get their own additional
+ * escape in `escapeChecklistLabel` because those *are* line-delimited by a
+ * task-list prefix during parsing.
+ */
 export function escapeMarkdownValue(value) {
     return normalizeSource(value)
         .split("\n")
         .map((line) => {
         if (/^ {0,3}(?:#{1,6})(?:[ \t]+|$)/u.test(line))
             return line.replace(/^( {0,3})(#)/u, "$1\\$2");
-        if (/^ {0,3}(?:[-+*]|\d+[.)])[ \t]+\[[ xX]\]/u.test(line))
-            return line.replace(/^( {0,3})([-+*]|\d+[.)])/u, "$1\\$2");
         if (/^ {0,3}(?:```|~~~)/u.test(line))
             return line.replace(/^([ \t]{0,3})([`~])/u, "$1\\$2");
-        if (/^ {0,3}>[ \t]?/u.test(line))
-            return line.replace(/^( {0,3})(>)/u, "$1\\$2");
         if (/^ {0,3}<!--/u.test(line))
             return line.replace(/^( {0,3})(<!--)/u, "$1\\$2");
         return line;
     })
         .join("\n");
 }
+/**
+ * Checklist item labels are rendered one-per-line under a shared `- [ ] `/
+ * `- [x] ` prefix, and parsing re-splits that same block back into items by
+ * matching the task-list prefix on each line. An embedded, unescaped
+ * task-list-look-alike line inside a label would therefore be read back as a
+ * separate checklist entry, so (unlike free-form string/array fields) the
+ * task-list prefix is structural here and must stay escaped.
+ */
+function escapeChecklistLabel(value) {
+    return escapeMarkdownValue(value)
+        .split("\n")
+        .map((line) => /^ {0,3}(?:[-+*]|\d+[.)])[ \t]+\[[ xX]\]/u.test(line)
+        ? line.replace(/^( {0,3})([-+*]|\d+[.)])/u, "$1\\$2")
+        : line)
+        .join("\n");
+}
 function unescapeMarkdownValue(value) {
     return normalizeSource(value)
         .split("\n")