valent-pipeline 0.19.26 → 0.19.27

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "valent-pipeline",
-  "version": "0.19.26",
+  "version": "0.19.27",
   "description": "v3 multi-agent AI pipeline for software development lifecycle",
   "type": "module",
   "bin": {

package/src/commands/evidence.js

@@ -17,7 +17,7 @@ import { randomBytes } from 'crypto';
 import { parse as parseYaml } from 'yaml';
 import {
   runEvidence, pinGate, formatRunTrailer, formatRunDigest, resolveRoot, evidenceDir, latestRun, latestPins,
-  verifyIntegrity, assertRules, assertRedRules, snapshotFiles, buildProof, utcCompact,
+  verifyIntegrity, assertRules, assertRedRules, pinSourceDelta, snapshotFiles, buildProof, utcCompact,
   latestAssert, collectFailingCases, authenticateBaseline, verifyShipEvidence, sha256Hex,
   validStoryId, recordStageResults,
 } from '../lib/evidence.js';
@@ -342,6 +342,19 @@ export async function evidenceAssertCmd(options) {
     .map((s) => s.trim())
     .filter(Boolean);
 
+  // Pin coherence v3 (2026-06-17): a pin/tested SHA mismatch is incoherent only if SOURCE moved
+  // between the pin and the tested commit — compute the per-gate source delta here (git IO) so
+  // assertRules stays pure. A bookkeeping-only commit (start-story snapshot, board/run state, a
+  // re-pin) leaves the reviewed code intact and keeps the pin coherent.
+  const pinsForCheck = latestPins(evDir);
+  const pinDelta = {};
+  for (const gate of requirePins) {
+    const pin = pinsForCheck instanceof Map ? pinsForCheck.get(gate) : pinsForCheck?.[gate];
+    if (pin && run.record.git && pin.sha !== run.record.git.sha) {
+      pinDelta[gate] = pinSourceDelta({ root, fromSha: pin.sha, toSha: run.record.git.sha });
+    }
+  }
+
   const result = assertRules({
     record: run.record,
     parsedReports,
@@ -349,11 +362,12 @@ export async function evidenceAssertCmd(options) {
     manifestCases,
     baseline,
     baselineAuth,
-    pins: latestPins(evDir),
+    pins: pinsForCheck,
     requirePins,
     allowDirty: !options.strictDirty,
     redBaseline,
     frozenSpecForced: !!options.redBaseline,
+    pinDelta,
   });
 
   const verdictRecord = {

package/src/lib/git-flow.js

@@ -177,6 +177,11 @@ const STATE_EXCLUDE_PATTERNS = [
   // is refused ("local changes would be overwritten"). A transient local pointer has no business in
   // git history; keep it on disk, out of git. (Root cause of a 3rd Sprint-1 zero-ship, 2026-06-13.)
   '.valent-pipeline/run-state.json',
+  // Resolve snapshots + scratch the orchestrator/skills drop next to a run. start-story's pre-branch
+  // snapshot used to sweep these onto the integration branch, creating no-source-delta commits that
+  // false-rejected pin coherence AND contaminated the next story's base (2026-06-17). Off git.
+  '.resolve-snapshot.json',
+  'scratch/',
 ];
 
 /**

package/src/lib/spec-conformance.js

@@ -73,8 +73,10 @@ function stripLineComment(line) {
 }
 
 /**
- * Scan one story test file for un-waived skip/only/todo markers. A waiver is `// valent-waiver: ...`
- * on the same line or the line immediately above the marker.
+ * Scan one story test file for un-waived skip/only/todo markers. A waiver is `valent-waiver:` on the
+ * marker's own line (including embedded in an it.skip/describe.skip title) or in the comment/decorator
+ * block immediately preceding it (up to 3 lines up — multi-line reasons, a wrapped decorator). Waivers
+ * sit on or above the marker by convention, so the window only looks back, never forward.
  * @returns {Array<{kind:'unwaived-skip', file:string, line:number, detail:string}>}
  */
 function scanSkips(file) {
@@ -86,7 +88,7 @@ function scanSkips(file) {
     SKIP_MARKER.lastIndex = 0;
     const m = code.match(SKIP_MARKER);
     if (!m) continue;
-    const waived = WAIVER_RE.test(raw) || (i > 0 && WAIVER_RE.test(lines[i - 1]));
+    const waived = WAIVER_RE.test(raw) || lines.slice(Math.max(0, i - 3), i).some((l) => WAIVER_RE.test(l));
     if (waived) continue;
     out.push({
       kind: 'unwaived-skip',