orizu 0.5.19 → 0.5.21

package/requirements/README.md

@@ -0,0 +1,138 @@
+# Skilled-proposer dependency lock
+
+`skilled-proposer.lock` is the customer-install artifact for the opt-in
+skilled proposer. It has 60 active, fully transitive `==` pins on Python 3.10
+and 58 on Python 3.11–3.14. There are 61 records in the file: `rpds-py` is
+`0.30.0` on Python 3.10 and `2026.6.3` on Python 3.11–3.14, while Python 3.10
+alone needs `async-timeout==5.0.1` and `exceptiongroup==1.3.1`.
+
+Those Python 3.10 additions were measured with a real CPython 3.10 install and
+`pip check`, not inferred from the CPython 3.14 freeze. The downloaded primary
+wheel metadata declares `aiohttp`'s `async-timeout` edge and `anyio`'s
+`exceptiongroup` edge for `python_version < "3.11"`; `rpds-py==2026.6.3`
+declares `Requires-Python: >=3.11`.
+
+Every hash is the SHA-256 of an actual wheel selected by pip. Source archives
+are deliberately absent. The recorded wheel matrix is:
+
+- CPython 3.10, 3.11, 3.12, 3.13, and 3.14;
+- macOS 15 or newer on arm64; and
+- glibc-based Linux on x86_64 when it accepts the selected manylinux 2.28 and
+  manylinux2014 tags.
+
+Windows, macOS x86_64, Linux arm64, musl Linux, macOS older than the selected
+wheel floor, PyPy, and any other Python/platform combination are not covered.
+The managed installer must reject a target for which pip cannot select one of
+the hashed wheels; it must never fall back to an sdist.
+
+## Regeneration
+
+Regeneration is an attended dependency update, not an install-time operation.
+Start from a clean disposable wheel root and a bootstrap CPython with pip. The
+bootstrap interpreter only runs pip; `--python-version`, `--implementation`,
+`--abi`, and `--platform` select each target wheel set.
+
+1. Resolve `skilled-proposer==0.1.2` afresh on each admitted Python minor,
+   inspect `pip freeze`, `pip check`, and upstream wheel `METADATA`, and update
+   `skilled-proposer.in` only after reconciling the complete transitive graph.
+   Do not derive expected pins from the refresh script's output.
+2. Download and hash the target wheels into a new temporary directory:
+
+   ```sh
+   wheel_root="$(mktemp -d)/wheels"
+   node packages/cli/scripts/refresh-skilled-proposer-lock.mjs \
+     --download \
+     --python .scratch-deps/venv/bin/python \
+     --wheel-root "$wheel_root"
+   ```
+
+3. Review the lock diff and verify all ten target slices locally. For example,
+   with the current interpreter's matching wheelhouse:
+
+   ```sh
+   .scratch-deps/venv/bin/python -m pip install \
+     --dry-run --ignore-installed --no-index \
+     --find-links .scratch-deps/wheels/macos-arm64-py314 \
+     --require-hashes --only-binary=:all: \
+     --requirement packages/cli/requirements/skilled-proposer.lock
+   ```
+
+   Repeat from the matching CPython for every admitted minor and both target
+   platforms. A cross-target `pip download` proves artifact selection, not that
+   a foreign native wheel imports on the bootstrap machine.
+4. Preserve the reviewed wheelhouses long enough to reproduce the file and
+   check that it is byte-for-byte current:
+
+   ```sh
+   node packages/cli/scripts/refresh-skilled-proposer-lock.mjs \
+     --check --wheel-root "$wheel_root"
+   ```
+
+The refresh script refuses missing, extra, duplicate, or version-mismatched
+wheels. Publication still requires native import/constructor and `pip check`
+validation on each actual target; those runtime results cannot be inferred
+from cross-platform wheel downloads.
+
+## Managed-venv lifecycle notes
+
+The manager takes a per-publish-key POSIX advisory lock through the selected
+CPython's `fcntl.flock`. The lock-holder forks a guardian that inherits the
+same locked file description: loss of the leader cannot expose the still-live
+Node/Bun builder, and the guardian exits when that parent finishes or dies.
+The 20-minute waiter bound exceeds the longest bounded repair path: two-minute
+existing-cache validation, two-minute venv creation, ten-minute install, and
+two-minute staged validation, with time left for cleanup, publication, and
+release. The guardian has its own 25-minute fail-safe bound.
+
+`executedPipArgv` means the exact pip command executed by the reporting manager
+process. It is an array only for the process that built the published venv and
+is `null` on cache hits and lock waiters that reused another process's result.
+The advisory lock file itself is persistent, contains no ownership claim, and
+is safe to encounter after an interrupted process.
+
+Staged directories for the current publish key are removed while holding that
+key's lock. Manager-shaped stages for other keys are removed only after 24
+hours, well beyond the maximum admitted builder/guardian lifetime. Published
+venvs are retained indefinitely; automated published-venv GC is intentionally
+deferred, so operators may remove the whole regenerable skilled-proposer cache
+when disk reclamation is required.
+
+An inherited non-empty `SSL_CERT_FILE` is passed through unchanged. Otherwise
+the manager tries Python's default CA locations and common system paths. If no
+file resolves, installation continues without setting `SSL_CERT_FILE` because
+pip uses its bundled trust store; the JSON report includes the warning code
+`ALI_1505_SSL_CERT_FILE_UNRESOLVED`. Provider traffic may still require the
+operator to set the organization's PEM bundle explicitly.
+
+Static lock syntax errors use `ALI_1505_LOCK_FORMAT_INVALID`; an artifact whose
+bytes disagree with a syntactically valid locked digest uses
+`ALI_1505_ARTIFACT_HASH_MISMATCH`. `ALI_1505_LOCK_UNHASHED_REQUIREMENT` remains
+the diagnostic for a missing exact pin or missing hash.
+
+The lifecycle fault-injection variables are test-only. None of
+`ORIZU_ALI1505_TEST_INTERRUPT_AFTER`,
+`ORIZU_ALI1505_TEST_KILL_PUBLISH_LOCK_LEADER`, or
+`ORIZU_ALI1505_TEST_START_BARRIER` is honored unless the test process also sets
+`ORIZU_ALI1505_TEST_HOOKS=1`.
+The CA warning boundary test additionally uses the master-gated
+`ORIZU_ALI1505_TEST_FORCE_CA_UNRESOLVED=1`; it is not a customer setting.
+
+## Manager guard mutation proof
+
+On 2026-08-20 each production guard below was changed in isolation with a
+behavioral mutation, its named test was run, and the production guard was then
+restored. These were source mutations, not syntax errors or mutations of test
+fakes.
+
+| Production mutant | Test that went red | Observed failure |
+| --- | --- | --- |
+| Remove `--require-hashes` from the actual pip argv | `publishes a content-addressed venv with hardened pip and launch reporting` | Exact-argv assertion showed the missing flag. |
+| Bypass `acquirePublishLock` so both callers build | `the CI boundary lock fake permits exactly one concurrent builder` | One of the two manager processes exited 1 instead of both exiting 0; the real-lock companion is the local dependency E2E. |
+| Replace the production interpreter preflight with an admitted hard-coded identity | `rejects unsupported CPython before cache or python -m mutation` | The selected fake reached cache/lock mutation and reported `ALI_1505_PUBLISH_LOCK_FAILED` instead of the required early `ALI_1505_UNSUPPORTED_CPYTHON`. |
+| Remove published-venv `pip check` revalidation | `revalidates pip consistency and imports before reusing a published environment` | The deliberately inconsistent cached venv was reused (`publishedVenv: false`) instead of rebuilt. |
+| Ignore unmatched malformed `--hash` tokens after one valid hash | `rejects missing, unhashed, and malformed-hash locks before cache mutation` | A record ending in a bare `--hash=` was accepted and the manager exited 0. |
+| Make the forked guardian close its inherited lock immediately | Real `DependencyE2E.test_concurrent_first_use_publishes_one_complete_keyed_venv` with both leaders killed | Both real installers built; one failed atomic publication with `ALI_1505_VENV_PUBLISH_FAILED`/`ENOTEMPTY`. |
+| Report malformed static hash syntax as an artifact mismatch | `rejects missing, unhashed, and malformed-hash locks before cache mutation` | Expected `ALI_1505_LOCK_FORMAT_INVALID`, received `ALI_1505_ARTIFACT_HASH_MISMATCH`. |
+| Report pip's real digest refusal as a static lock-format defect | `distinguishes a pip artifact digest mismatch from a static lock-format defect` | Expected `ALI_1505_ARTIFACT_HASH_MISMATCH`, received `ALI_1505_LOCK_FORMAT_INVALID`. |
+| Ignore the `ORIZU_ALI1505_TEST_HOOKS=1` master gate | `test-only lifecycle hooks require the explicit master switch` | The unmastered interrupt hook activated and the manager exited 1. |
+| Disable aged cross-key stage collection | `first use prunes only aged abandoned stages belonging to other publish keys` | The two-day-old foreign-key stage remained present. |

package/requirements/skilled-proposer.in

@@ -0,0 +1,66 @@
+# Fully transitive skilled-proposer dependency pins.
+#
+# This file is the human-reviewed input to refresh-skilled-proposer-lock.mjs.
+# Do not install from it: the customer path installs skilled-proposer.lock with
+# --require-hashes and --only-binary=:all:.
+aiohappyeyeballs==2.7.1
+aiohttp==3.14.3
+aiosignal==1.4.0
+annotated-types==0.8.0
+anyio==4.14.2
+async-timeout==5.0.1 ; python_version == "3.10"
+attrs==26.1.0
+cachetools==7.1.7
+certifi==2026.7.22
+charset-normalizer==3.5.1
+click==8.4.2
+cloudpickle==3.1.2
+diskcache==5.6.3
+distro==1.9.0
+dspy==3.3.0
+exceptiongroup==1.3.1 ; python_version == "3.10"
+fastuuid==0.14.0
+filelock==3.32.3
+frozenlist==1.8.0
+fsspec==2026.7.0
+gepa==0.1.1
+h11==0.16.0
+hf-xet==1.6.0
+httpcore==1.0.9
+httpx==0.28.1
+huggingface-hub==1.28.0
+idna==3.19
+importlib-metadata==8.9.0
+jinja2==3.1.6
+jiter==0.16.0
+json-repair==0.63.3
+jsonschema==4.26.0
+jsonschema-specifications==2025.9.1
+litellm==1.97.0
+markupsafe==3.0.3
+multidict==6.7.1
+openai==2.54.0
+orjson==3.12.0
+packaging==26.3
+propcache==0.5.2
+pydantic==2.13.4
+pydantic-core==2.46.4
+pydantic-settings==2.15.0
+python-dotenv==1.2.3
+pyyaml==6.0.3
+referencing==0.37.0
+regex==2026.7.19
+requests==2.34.2
+rpds-py==0.30.0 ; python_version == "3.10"
+rpds-py==2026.6.3 ; python_version >= "3.11" and python_version < "3.15"
+skilled-proposer==0.1.2
+sniffio==1.3.1
+tenacity==9.1.4
+tiktoken==0.14.0
+tokenizers==0.23.1
+tqdm==4.70.0
+typing-extensions==4.16.0
+typing-inspection==0.4.4
+urllib3==2.7.0
+yarl==1.24.5
+zipp==4.1.0

package/requirements/skilled-proposer.lock

@@ -0,0 +1,265 @@
+# Generated by packages/cli/scripts/refresh-skilled-proposer-lock.mjs.
+# Do not edit by hand; see packages/cli/requirements/README.md.
+#
+# Wheel-only coverage: CPython 3.10-3.14 on macOS 15+ arm64 and
+# glibc-based Linux x86_64 compatible with the locked manylinux wheels.
+# Other OS/architecture/libc combinations are intentionally not covered.
+aiohappyeyeballs==2.7.1 \
+    --hash=sha256:9243213661e29250eb41368e5daa826fc017156c3b8a11440826b2e3ed376472
+aiohttp==3.14.3 \
+    --hash=sha256:11fb37ef075669eee52ab1928fbf6e1741fada40409fa309ebde9607a962aebf \
+    --hash=sha256:18cb43369747b2ae007bd2655fb8e63a099c2ff1d207962943636dac989b3147 \
+    --hash=sha256:21c016079415ed3fd676963e9793700a566d85dbbd6bfc564b9b2d209147dcc8 \
+    --hash=sha256:48d67b87db6279c044760787eb01f6413032c2e6f3ba1cafaa492b1c8e578479 \
+    --hash=sha256:53e7b4ce82b54a8bcc71b3b67a5cbd177ca1d7f592cbc92cd38b7349f73482db \
+    --hash=sha256:543906c127fb1d929b95076db19b83fa2d46751006ff1e23b093aa5ac4d8db42 \
+    --hash=sha256:617105e2c3018ee38d0c8ce5ee3c84f621a6d8b9f723202aacaff28449ca91ee \
+    --hash=sha256:d7d2deec16eeedf55f2c7cf75b521ea3856a5177e123844f8fd0f114ce252cb5 \
+    --hash=sha256:db332af25642007330fca8be5c4d194caf2bea7a7fc84415aff3497af5dfee6b \
+    --hash=sha256:fd51ebf9d3a00c074df4ede271023f4d2dba289bcc740b88191872716014e3c5
+aiosignal==1.4.0 \
+    --hash=sha256:053243f8b92b990551949e63930a839ff0cf0b0ebbe0597b0f3fb19e1a0fe82e
+annotated-types==0.8.0 \
+    --hash=sha256:f072f4d804ea359e4eaf198b1af7a8b0943881a87f31bb764f8bf219bb9419e0
+anyio==4.14.2 \
+    --hash=sha256:9f505dda5ac9f0c8309b5e8bd445a8c2bf7246f3ce950121e45ea15bc41d1494
+async-timeout==5.0.1 ; python_version == "3.10" \
+    --hash=sha256:39e3809566ff85354557ec2398b55e096c8364bacac9405a7a1fa429e77fe76c
+attrs==26.1.0 \
+    --hash=sha256:c647aa4a12dfbad9333ca4e71fe62ddc36f4e63b2d260a37a8b83d2f043ac309
+cachetools==7.1.7 \
+    --hash=sha256:ef98ef375ad188819ef2f9b3645e3987f4b8c5b7550e436ad998c2de78296df0
+certifi==2026.7.22 \
+    --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775
+charset-normalizer==3.5.1 \
+    --hash=sha256:15f024313246a4ed976c60f440bb8d257815513a681d212ff74fd46f7d715a90 \
+    --hash=sha256:5b6d1386bf0096d26d3a863dc0a487a5b4eb9aa93cf5ba69683d29dde6b9d60f \
+    --hash=sha256:62b55f6722735a6c472f88361cde6640608773d9443cebdbb51abf436a1fcdd3 \
+    --hash=sha256:96eefc178f8636b9c760c5829345307fd81cfae9ab1e80997dbddeb0f54ee9a3 \
+    --hash=sha256:b9af956078716df40d985fb0dfeb2c2120c5ca92ba4ff4b388acfd01cdc14d08 \
+    --hash=sha256:c428c6c31eb5f4277d7f8eccaf767fbd548ddd5ce3c8b4f4cbbfab3d96b5904c \
+    --hash=sha256:c7b742bf31c88566b4bb6335a7f393bb322e580b6bb98df7bd0c25e6e3519ce8 \
+    --hash=sha256:d1ee1e296209fdce05b81b663250eefa02213a2da7b41bf26f7829b8ba3545aa \
+    --hash=sha256:e90251c0c7bdd54a100a0dce3c07b7e637278c93af29dbf78ebb89a58c4bac7d \
+    --hash=sha256:eda059b6bc8bc0812d626fd91a7ce01bf583df0a61296eff390fd94141a34e30
+click==8.4.2 \
+    --hash=sha256:e6f9f66136c816745b9d65817da91d61d957fb16e02e4dcd0552553c5a197b76
+cloudpickle==3.1.2 \
+    --hash=sha256:9acb47f6afd73f60dc1df93bb801b472f05ff42fa6c84167d25cb206be1fbf4a
+diskcache==5.6.3 \
+    --hash=sha256:5e31b2d5fbad117cc363ebaf6b689474db18a1f6438bc82358b024abd4c2ca19
+distro==1.9.0 \
+    --hash=sha256:7bffd925d65168f85027d8da9af6bddab658135b840670a223589bc0c8ef02b2
+dspy==3.3.0 \
+    --hash=sha256:358cbfb15d13246dc4a289bb2350c0ee602260c8a3869f7f63a48a9d2233e48c
+exceptiongroup==1.3.1 ; python_version == "3.10" \
+    --hash=sha256:a7a39a3bd276781e98394987d3a5701d0c4edffb633bb7a5144577f82c773598
+fastuuid==0.14.0 \
+    --hash=sha256:05a8dde1f395e0c9b4be515b7a521403d1e8349443e7641761af07c7ad1624b1 \
+    --hash=sha256:1ca61b592120cf314cfd66e662a5b54a578c5a15b26305e1b8b618a6f22df714 \
+    --hash=sha256:33e678459cf4addaedd9936bbb038e35b3f6b2061330fd8f2f6a1d80414c0f87 \
+    --hash=sha256:808527f2407f58a76c916d6aa15d58692a4a019fdf8d4c32ac7ff303b7d7af09 \
+    --hash=sha256:83cffc144dc93eb604b87b179837f2ce2af44871a7b323f2bfed40e8acb40ba8 \
+    --hash=sha256:a8a0dfea3972200f72d4c7df02c8ac70bad1bb4c58d7e0ec1e6f341679073a7f \
+    --hash=sha256:ac60fc860cdf3c3f327374db87ab8e064c86566ca8c49d2e30df15eda1b0c2d5 \
+    --hash=sha256:b2fdd48b5e4236df145a149d7125badb28e0a383372add3fbaac9a6b7a394470 \
+    --hash=sha256:bbb0c4b15d66b435d2538f3827f05e44e2baafcc003dd7d8472dc67807ab8fd8 \
+    --hash=sha256:d23ef06f9e67163be38cece704170486715b177f6baae338110983f99a72c070
+filelock==3.32.3 \
+    --hash=sha256:7f0ca4bcc0e181c60dbbd8aa9ab5b120ebb99e4e064e83636340056f833a1f09
+frozenlist==1.8.0 \
+    --hash=sha256:2552f44204b744fba866e573be4c1f9048d6a324dfe14475103fd51613eb1d1f \
+    --hash=sha256:494a5952b1c597ba44e0e78113a7266e656b9794eec897b19ead706bd7074383 \
+    --hash=sha256:4970ece02dbc8c3a92fcc5228e36a3e933a01a999f7094ff7c23fbd2beeaa67c \
+    --hash=sha256:a88f062f072d1589b7b46e951698950e7da00442fc1cacbe17e19e025dc327ad \
+    --hash=sha256:cba69cb73723c3f329622e34bdbf5ce1f80c21c290ff04256cff1cd3c2036ed2 \
+    --hash=sha256:f21f00a91358803399890ab167098c131ec2ddd5f8f5fd5fe9c9f2c6fcd91e40 \
+    --hash=sha256:f57fb59d9f385710aa7060e89410aeb5058b99e62f4d16b08b91986b9a2140c2 \
+    --hash=sha256:f833670942247a14eafbb675458b4e61c82e002a148f49e68257b79296e865c4 \
+    --hash=sha256:fa47e444b8ba08fffd1c18e8cdb9a75db1b6a27f17507522834ad13ed5922b93 \
+    --hash=sha256:fb30f9626572a76dfe4293c7194a09fb1fe93ba94c7d4f720dfae3b646b45027
+fsspec==2026.7.0 \
+    --hash=sha256:b57ddbafedfaef7018c1ecab32aa200a9d7ca26b77965f64e48b70061249d279
+gepa==0.1.1 \
+    --hash=sha256:71ead7c591eafcc727b83509cdc4182f20264800a6ddf8520d61419daeb47466
+h11==0.16.0 \
+    --hash=sha256:63cf8bbe7522de3bf65932fda1d9c2772064ffb3dae62d55932da54b31cb6c86
+hf-xet==1.6.0 \
+    --hash=sha256:d62671bb130879cef0ee4c9ebe47a14af6c66ec53e6d84dc15936e5ffdfac82f \
+    --hash=sha256:f0906082d9932ae0c0057fa194041c22b4e2cdb46b2592ef3b91f020d62a081a
+httpcore==1.0.9 \
+    --hash=sha256:2d400746a40668fc9dec9810239072b40b4484b640a8c38fd654a024c7a1bf55
+httpx==0.28.1 \
+    --hash=sha256:d909fcccc110f8c7faf814ca82a9a4d816bc5a6dbfea25d6591d6985b8ba59ad
+huggingface-hub==1.28.0 \
+    --hash=sha256:58a8bacb03072edfc38067065e9dc24bbb34805410fcd36a1632de0b329660bb
+idna==3.19 \
+    --hash=sha256:815e7be7a7806d54abb586dc943addc79e8b2ee16915059658cbeff4b1b43bf4
+importlib-metadata==8.9.0 \
+    --hash=sha256:e0f761b6ea91ced3b0844c14c9d955224d538105921f8e6754c00f6ca79fba7f
+jinja2==3.1.6 \
+    --hash=sha256:85ece4451f492d0c13c5dd7c13a64681a86afae63a5f347908daf103ce6d2f67
+jiter==0.16.0 \
+    --hash=sha256:46add52f4ad47a08bfb1219f3e673da972191489a33016edefdb5ea55bfa8c48 \
+    --hash=sha256:49060fd70737fad59d33ba9dcc0d83247dc9e77187de26053a19c16c9f32bd69 \
+    --hash=sha256:5a71d0d2014c3275043e1170bf3d4e771493cb0dcf07be54c567155f4d8ee64b \
+    --hash=sha256:5af7780e4a26bd7d0d989592bf9ef12ebf806b74ab709223ecca37c749872ea9 \
+    --hash=sha256:63efadc657488f45db1c676d81e704cac2abf3fdb892def1faea61db053127e2 \
+    --hash=sha256:8597d23c87f59294f83bcb6229b9ed1fccee13dbba967b46930d2f1759466fee \
+    --hash=sha256:c682bea068a90b764577bdb78a60a4c1d1606daf9cd4c893832a37c7cc9d9026 \
+    --hash=sha256:c90c0f63df322be920eda6ce622e3083d8906ba267f8220fe7873213b8b4430e \
+    --hash=sha256:d28bb3c26762358dadf3e5bf0bccd29ae987d65e6988d2e6f49829c76b003c09 \
+    --hash=sha256:fb08c276dd02dac3a284acdd02cacc630d2e3cd6572a4b85519f35cbd133c3de
+json-repair==0.63.3 \
+    --hash=sha256:3681cc25e44f17749d6d440ae69d7c4275609a75092bcde03c6bacc3f3c8475e
+jsonschema-specifications==2025.9.1 \
+    --hash=sha256:98802fee3a11ee76ecaca44429fda8a41bff98b00a0f2838151b113f210cc6fe
+jsonschema==4.26.0 \
+    --hash=sha256:d489f15263b8d200f8387e64b4c3a75f06629559fb73deb8fdfb525f2dab50ce
+litellm==1.97.0 \
+    --hash=sha256:2983b40ed5d8b1bcbbfbc0d66fefa21b04db91b87c05dd680ae77cba74e561ef \
+    --hash=sha256:5b56dce7df44a6a9e6caf5379de2578a8cb82831ceabd3d71cc99b370a1015e7
+markupsafe==3.0.3 \
+    --hash=sha256:0bf2a864d67e76e5c9a34dc26ec616a66b9888e25e7b9460e1c76d3293bd9dbf \
+    --hash=sha256:116bb52f642a37c115f517494ea5feb03889e04df47eeff5b130b1808ce7c219 \
+    --hash=sha256:1872df69a4de6aead3491198eaf13810b565bdbeec3ae2dc8780f14458ec73ce \
+    --hash=sha256:457a69a9577064c05a97c41f4e65148652db078a3a509039e64d3467b9e7ef97 \
+    --hash=sha256:4bd4cd07944443f5a265608cc6aab442e4f74dff8088b0dfc8238647b8f6ae9a \
+    --hash=sha256:c47a551199eb8eb2121d4f0f15ae0f923d31350ab9280078d1e5f12b249e0026 \
+    --hash=sha256:ccfcd093f13f0f0b7fdd0f198b90053bf7b2f02a3927a30e63f3ccc9df56b676 \
+    --hash=sha256:d6dd0be5b5b189d31db7cda48b91d7e0a9795f31430b7f271219ab30f1d3ac9d \
+    --hash=sha256:e1c1493fb6e50ab01d20a22826e57520f1284df32f2d8601fdd90b6304601419 \
+    --hash=sha256:f42d0984e947b8adf7dd6dde396e720934d12c506ce84eea8476409563607591
+multidict==6.7.1 \
+    --hash=sha256:0e161ddf326db5577c3a4cc2d8648f81456e8a20d40415541587a71620d7a7d1 \
+    --hash=sha256:439cbebd499f92e9aa6793016a8acaa161dfa749ae86d20960189f5398a19144 \
+    --hash=sha256:7eee46ccb30ff48a1e35bb818cc90846c6be2b68240e42a78599166722cea709 \
+    --hash=sha256:935434b9853c7c112eee7ac891bc4cb86455aa631269ae35442cb316790c1445 \
+    --hash=sha256:9b0d9b91d1aa44db9c1f1ecd0d9d2ae610b2f4f856448664e01a3b35899f3f92 \
+    --hash=sha256:9d624335fd4fa1c08a53f8b4be7676ebde19cd092b3895c421045ca87895b429 \
+    --hash=sha256:b0fa96985700739c4c7853a43c0b3e169360d6855780021bfc6d0f1ce7c123e7 \
+    --hash=sha256:bfde23ef6ed9db7eaee6c37dcec08524cb43903c60b285b172b6c094711b3961 \
+    --hash=sha256:cdea2e7b2456cfb6694fb113066fd0ec7ea4d67e3a35e1f4cbeea0b448bf5872 \
+    --hash=sha256:f2a0a924d4c2e9afcd7ec64f9de35fcd96915149b2216e1cb2c10a56df483855
+openai==2.54.0 \
+    --hash=sha256:89089789197ccdb87f173a03145ed1598d00795220c93e96cf712b1cbf5e5f2b
+orjson==3.12.0 \
+    --hash=sha256:1192a7021b6d071aaf909864f6e924d6a2675ca360485b972b8401749311750b \
+    --hash=sha256:11edb4660a6680abee9788a3a9072208a2c96538cc1322bd79542065229d8e54 \
+    --hash=sha256:1c680706fc8396d95e7c4c1f9482563f552137aef91b57237a3ad5aaf64629df \
+    --hash=sha256:747843254519dd43b93eee3153a19e5a509334320c4d2f823ec879232db5c796 \
+    --hash=sha256:8c3bb86dd10f39b3fbf434b7d5dc7cac77d6fc8ac572ae30a10731ede2c4b647 \
+    --hash=sha256:9caf3d09f47c3c70c4451ada20ef9bc4a4cdffa26f49862cf0a253b329aae2d5 \
+    --hash=sha256:a696529ec96a90d9a5f9570207efe403c8b08f8e4aa2783ee3403511e2fdfa10 \
+    --hash=sha256:ad0422b92d5195443a39f80c3bcf731cc2e00f153bd32063a47b73b057bd0f03 \
+    --hash=sha256:c6b11be792c3d2c6a4be2af4ebf97a68d0bf5f580aca6e86a418a354f6cc846a \
+    --hash=sha256:e9683ee9ea0659da64f36574ef675b8a86330c34c19ea75db1fb93c3ff99e0ef
+packaging==26.3 \
+    --hash=sha256:d7193f7c8e4e93f444fde0262bf90af30e16fa0ad0ad44cb553c87339b23cd1c
+propcache==0.5.2 \
+    --hash=sha256:4db0ba63d693afd40d249bd93f842b5f144f8fcbb83de05660373bcf30517b1d \
+    --hash=sha256:5aaa2b923c1944ac8febd6609cb373540a5563e7cbcb0fd770f75dace2eb817b \
+    --hash=sha256:6bf3be92233808fcd338eba0fb4d0b59ec5772af4f4ecfcec450d1bfc0f8b5eb \
+    --hash=sha256:6f328175a2cde1f0ff2c4ed8ce968b9dcfb55f3a7153f39e2957ed994da13476 \
+    --hash=sha256:97797ebb098e670a2f92dd66f32897e30d7615b14e7f59711de23e30a9072539 \
+    --hash=sha256:b96db7141a592cbc968daf1feea83a118e6ab378af4abbc72b248c895414c22d \
+    --hash=sha256:c6844ba6364fb12f403928a82cfd295ab103a2b315c77c747b2dbe4a41894ea7 \
+    --hash=sha256:e00820e192c8dbebcafb383ebbf99030895f09905e7a0eb2e0340a0bcc2bc825 \
+    --hash=sha256:e5cbfac9f61484f7e9f3597775500cd3ebe8274e9b050c38f9525c77c97520bf \
+    --hash=sha256:fc299c129490f55f254cd90be0deca4764e36e9a7c08b4aa588479a3bbed3098
+pydantic-core==2.46.4 \
+    --hash=sha256:23ace664830ee0bfe014a0c7bc248b1f7f25ed7ad103852c317624a1083af462 \
+    --hash=sha256:395aebd9183f9d112f569aeb5b2214d1a10a33bec8456447f7fbdfa51d38d4cd \
+    --hash=sha256:7a5f930472650a82629163023e630d160863fce524c616f4e5186e5de9d9a49b \
+    --hash=sha256:926c9541b14b12b1681dca8a0b75feb510b06c6341b70a8e500c2fdcff837cce \
+    --hash=sha256:9551187363ffc0de2a00b2e47c25aeaeb1020b69b668762966df15fc5659dd5a \
+    --hash=sha256:962ccbab7b642487b1d8b7df90ef677e03134cf1fd8880bf698649b22a69371f \
+    --hash=sha256:c94f0688e7b8d0a67abf40e57a7eaaecd17cc9586706a31b76c031f63df052b4 \
+    --hash=sha256:da4b951fe36dc7c3a1ccb4e3cd1747c3542b8c9ceede8fc86cae054e764485f5 \
+    --hash=sha256:e0d65b8c354be7fb5f720c3caa8bc940bc2d20ce749c8e06135f07f8ed95dd7c \
+    --hash=sha256:f9fa868638bf362d3d138ea55829cefb3d5f4b0d7f142234382a15e2485dbec4
+pydantic-settings==2.15.0 \
+    --hash=sha256:0ba092c291c94baceb5eff768aa0d56400a457585bc0175925a5a5510303da42
+pydantic==2.13.4 \
+    --hash=sha256:45a282cde31d808236fd7ea9d919b128653c8b38b393d1c4ab335c62924d9aba
+python-dotenv==1.2.3 \
+    --hash=sha256:904552145e8bfed22162c09dab1c2b9b54fefa7b23ba780f4f26ca0316b0f0d9
+pyyaml==6.0.3 \
+    --hash=sha256:02ea2dfa234451bbb8772601d7b8e426c2bfa197136796224e50e35a78777956 \
+    --hash=sha256:0f29edc409a6392443abf94b9cf89ce99889a1dd5376d94316ae5145dfedd5d6 \
+    --hash=sha256:2283a07e2c21a2aa78d9c4442724ec1eb15f5e42a723b99cb3d822d48f5f7ad1 \
+    --hash=sha256:34d5fcd24b8445fadc33f9cf348c1047101756fd760b4dacb5c3e99755703310 \
+    --hash=sha256:652cb6edd41e718550aad172851962662ff2681490a8a711af6a4d288dd96824 \
+    --hash=sha256:9c7708761fccb9397fe64bbc0395abcae8c4bf7b0eac081e12b809bf47700d0b \
+    --hash=sha256:b8bb0864c5a28024fac8a632c443c87c5aa6f215c0b126c449ae1a150412f31d \
+    --hash=sha256:ba1cc08a7ccde2d2ec775841541641e4548226580ab850948cbfda66a1befcdc \
+    --hash=sha256:c458b6d084f9b935061bc36216e8a69a7e293a2f1e68bf956dcd9e6cbcd143f5 \
+    --hash=sha256:fc09d0aa354569bc501d4e787133afc08552722d3ab34836a80547331bb5d4a0
+referencing==0.37.0 \
+    --hash=sha256:381329a9f99628c9069361716891d34ad94af76e461dcb0335825aecc7692231
+regex==2026.7.19 \
+    --hash=sha256:09f3e5287f94f17b709dc9a9e70865855feee835c861613be144218ce4ca82cc \
+    --hash=sha256:40b34dd88658e4fedd2fddbf0275ac970d00614b731357f425722a3ed1983d11 \
+    --hash=sha256:5ebee1ee89c39c953baac6924fcde08c5bb427c4057510862f9d7c7bdb3d8665 \
+    --hash=sha256:60be8693a1dadc210bbcbc0db3e26da5f7d01d1d5a3da594e99b4fa42df404f5 \
+    --hash=sha256:7322ec6cc9fba9d49ab888bb82d67ac5625627aa168f0165139b17018df3fb8a \
+    --hash=sha256:90c633e7e8d6bf4e992b8b36ce69e018f834b641dd6de8cea6d78c06ffa119c5 \
+    --hash=sha256:98c6ac18480fcdb33f35439183f1d2e79760ab41930309c6d951cb1f8e46694c \
+    --hash=sha256:9dce8ec9695f531a1b8a6f314fd4b393adcccf2ea861db480cdf97a301d01a68 \
+    --hash=sha256:c0d702548d89d572b2929879bc883bb7a4c4709efafe4512cadee56c55c9bd15 \
+    --hash=sha256:d7da47a0f248977f08e2cb659ff3c17ddc13a4d39b3a7baa0a81bf5b415430f6
+requests==2.34.2 \
+    --hash=sha256:2a0d60c172f83ac6ab31e4554906c0f3b3588d37b5cb939b1c061f4907e278e0
+rpds-py==0.30.0 ; python_version == "3.10" \
+    --hash=sha256:0c0e95f6819a19965ff420f65578bacb0b00f251fefe2c8b23347c37174271f3 \
+    --hash=sha256:4cc2206b76b4f576934f0ed374b10d7ca5f457858b157ca52064bdfc26b9fc00
+rpds-py==2026.6.3 ; python_version >= "3.11" and python_version < "3.15" \
+    --hash=sha256:538949e262e46caa31ac01bdb3c1e8f642622922cacbabbae6a8445d9dc33eaf \
+    --hash=sha256:9c1255b302953c86a486b81d330d5ee1d5bd937691ce271b6be0ef0e299eaab7 \
+    --hash=sha256:acac386b453c2516111b50985d60ce46e7fadb5ea71ae7b25f4c946935bf27cf \
+    --hash=sha256:d7469697dce35be237db177d42e2a2ee26e6dcc5fc052078a6fefabd288c6edd \
+    --hash=sha256:db08f45aecde626498fb3df07bcf6d2ec040af42e859a4f5040d79c200342911 \
+    --hash=sha256:dc319e5a1de4b6913aac94bf6a2f9e847371e0a140a43dd4991db1a09bc2d504 \
+    --hash=sha256:ecabd69db66de867690f9797f2f8fa27ba501bbc24540cbdbdc649cd15888ba6 \
+    --hash=sha256:f4d78253f6996be4901669ad25319f842f740eccf4d58e3c7f3dd39e6dde1d8f
+skilled-proposer==0.1.2 \
+    --hash=sha256:271f704928afa15f7ff60d44ccd2e0f2260b829d3202abd7978042e65c5e9fc4
+sniffio==1.3.1 \
+    --hash=sha256:2f6da418d1f1e0fddd844478f41680e794e6051915791a034ff65e5f100525a2
+tenacity==9.1.4 \
+    --hash=sha256:6095a360c919085f28c6527de529e76a06ad89b23659fa881ae0649b867a9d55
+tiktoken==0.14.0 \
+    --hash=sha256:18a1b651c4b032004bf7b4f1713391a54b2a341a52c6e8a2b59acae9d16e13c7 \
+    --hash=sha256:26e60f6a956ee171ab728b37b8439905d7ea1db435c30f9822f291e9861c861d \
+    --hash=sha256:7896eea257fe497a2b7134474d909156c6744ce8da35bce88011a960e008aa0d \
+    --hash=sha256:94f77b60a8ab23580db19ae822744c9716c1720020d2179ca5605112d12326f1 \
+    --hash=sha256:cbe2cc3bba939bcdaf103e03df9d5039d33887080b315624be28ec69059e5f94 \
+    --hash=sha256:cd8ca1305c1c902fe42c486165f2e4808d9997625c98ffb05b9e0366d99d3948 \
+    --hash=sha256:d6cebe67765569df3dafac8474e4eccf5c19d24140492567a5e58a11445732a4 \
+    --hash=sha256:e3442bbb2f0c588cec876061e37ae67b455b9df9978b003c8fe30e45f2ef5b42 \
+    --hash=sha256:f2af4a336ea56d6c14f27741a0e1d8294a35dd0b038bcf990d232ebb54eb994b \
+    --hash=sha256:f5e7665f6624e052e5e7f6a36919ab69279decdc976d7b16b4fa15e1897d0513
+tokenizers==0.23.1 \
+    --hash=sha256:5075b405006415ea148a992d093699c66eb01952bf59f4d5727089a98bda45a4 \
+    --hash=sha256:e0948bbb1ac1d7cdfc9fb6d62c596e3b7550036ad60ecd654a66ad273326324e
+tqdm==4.70.0 \
+    --hash=sha256:7f585706bfddbdebf89daac705b2dfcc16890130727d3197ca62c732b4310953
+typing-extensions==4.16.0 \
+    --hash=sha256:481caa481374e813c1b176ada14e97f1f67a4539ce9cfeb3f350d78d6370c2e8
+typing-inspection==0.4.4 \
+    --hash=sha256:65b8397ba37ccbce054456aaccddfc91e6e3083c92824df348d96ca832f3f147
+urllib3==2.7.0 \
+    --hash=sha256:9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897
+yarl==1.24.5 \
+    --hash=sha256:0ebfaffe1a16cb72141c8e09f18cc76856dbe58639f393a4f2b26e474b96b871 \
+    --hash=sha256:570fec8fbd22b032733625f03f10b7ff023bc399213db15e72a7acaef28c2f4e \
+    --hash=sha256:66410eb6345d467151934b49bfa70fb32f5b35a6140baa40ad97d6436abea2e9 \
+    --hash=sha256:709f1efed56c4a145793c046cd4939f9959bcd818979a787b77d8e09c57a0840 \
+    --hash=sha256:7fa5e51397466ea7e98de493fa2ff1b8193cfef8a7b0f9b4842f92d342df0dba \
+    --hash=sha256:92ab3e11448f2ff7bf53c5a26eff0edc086898ec8b21fb154b85839ce1d88075 \
+    --hash=sha256:9d399bdcfb4a0f659b9b3788bbc89babe63d9a6a65aacdf4d4e7065ff2e6316c \
+    --hash=sha256:d46b86567dd4e248c6c159fcbcdcce01e0a5c8a7cd2334a0fff759d0fa075b16 \
+    --hash=sha256:e42d75862735da90e7fc5a7b23db0c976f737113a54b3c9777a9b665e9cbff75 \
+    --hash=sha256:f08c7513ecef5aad65687bfdf6bc601ae9fccd04a42904501f8f7141abad9eb9
+zipp==4.1.0 \
+    --hash=sha256:25ad4e16390cd314347dd8f1de67a2ac538ae658ed4ab9db16029c07c188e97f

package/scripts/build-cli-dist.mjs

@@ -0,0 +1,30 @@
+import { existsSync, rmSync } from 'node:fs'
+import { spawnSync } from 'node:child_process'
+import { dirname, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+import { isOrizuSourceCheckout } from './orizu-source-checkout.mjs'
+
+const scriptDir = dirname(fileURLToPath(import.meta.url))
+const cliRoot = resolve(scriptDir, '..')
+const repoRoot = resolve(cliRoot, '..', '..')
+const packedEntrypoint = resolve(cliRoot, 'dist', 'index.js')
+
+// A source checkout has the compiler and must always rebuild before packing so
+// ignored dist cannot carry an old CLI. A published tarball has no dev compiler;
+// it may be repacked only when it already carries the built entrypoint.
+if (!isOrizuSourceCheckout(resolve(repoRoot, 'package.json'))) {
+  if (!existsSync(packedEntrypoint)) {
+    throw new Error('Unable to pack CLI: published package is missing dist/index.js')
+  }
+  process.exit(0)
+}
+
+const npm = process.platform === 'win32' ? 'npm.cmd' : 'npm'
+// Delete old compiler output first: npm pack must never retain a module whose
+// TypeScript source was renamed or removed since the previous build.
+rmSync(resolve(cliRoot, 'dist'), { recursive: true, force: true })
+const result = spawnSync(npm, ['run', 'build'], { cwd: cliRoot, stdio: 'inherit' })
+if (result.status !== 0) {
+  throw new Error(`Unable to build CLI dist before packing: ${result.error?.message || 'npm run build failed'}`)
+}

package/scripts/ensure-skilled-proposer-venv.mjs

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+
+import { runManagerCli } from '../src/skilled-proposer-venv-manager.mjs'
+
+process.exitCode = await runManagerCli(process.argv.slice(2))

package/scripts/orizu-source-checkout.d.mts

@@ -0,0 +1 @@
+export function isOrizuSourceCheckout(packageJsonPath: string): boolean

package/scripts/orizu-source-checkout.mjs

@@ -0,0 +1,10 @@
+import { readFileSync } from 'node:fs'
+
+/** True only for the Orizu monorepo, never merely for a consumer Git checkout. */
+export function isOrizuSourceCheckout(packageJsonPath) {
+  try {
+    return JSON.parse(readFileSync(packageJsonPath, 'utf8')).name === 'orizu'
+  } catch {
+    return false
+  }
+}