agentbundle 0.53.1__tar.gz → 0.57.0__tar.gz

{agentbundle-0.53.1/agentbundle.egg-info → agentbundle-0.57.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentbundle
-Version: 0.53.1
+Version: 0.57.0
 Summary: npm for your coding agent. Install packs of skills, subagents, and hooks into any repo, for every major agent.
 Author-email: eugenelim <eugenelim@users.noreply.github.com>
 License-Expression: Apache-2.0 OR MIT
@@ -35,6 +35,43 @@ python -m pip install agentbundle
 
 Requires Python 3.11+. Runs on macOS, Linux, and Windows.
 
+## What's new in 0.57.0
+
+`install` and `upgrade` now print the steps to move to a renamed pack when the
+catalogue renamed the one you asked for. The governance pack is now
+`repo-governance`. CLIs older than 0.57.0 print plain "not found", so the steps
+are also in the `repo-governance` pack README and the changelog.
+
+## What's new in 0.56.0
+
+`agentbundle --version` and `catalogue contracts list` now report the catalogue
+specification version. **Breaking:** `catalogue contracts list --format json`
+now prints an object, `{"catalogue_specification": "<version>", "contracts":
+[...]}`, instead of a bare array. Read the `contracts` key for the rows.
+
+## What's new in 0.55.0
+
+A new bundled contract, `catalogue-manifest.schema.json`, describes the shape
+of the release archive manifest, and `catalogue contracts list`, `show`, and
+`export` expose it. It checks shape only and is not evidence of integrity or
+origin. `catalogue verify` now rejects a boolean `schema` value in
+`catalogue-manifest.json` with `CAT-V-ARC-011`. The archive guide states what
+proves where an archive came from.
+
+## What's new in 0.54.0
+
+Every contract now loads from the copy bundled with `agentbundle`. A
+`contracts/` folder in or above a catalogue no longer overrides
+`target-vocab.toml` or `adapter.toml`, and a missing or unparsable bundled
+contract fails closed. `catalogue lint` now reports a missing pack schema as a
+`CAT-L006` error instead of a warning that skipped validation.
+
+## What's new in 0.53.2
+
+Error messages from `install` and from `.adapt-discovery.toml` loading state
+their rule directly instead of citing internal design records. The legacy
+layout notices now say `legacy dist-tree`. Exit codes are unchanged.
+
 ## What's new in 0.53.1
 
 `agentbundle catalogue init` now writes a root `AGENTS.md` and a `CLAUDE.md`, so

{agentbundle-0.53.1 → agentbundle-0.57.0}/README-pypi.md

@@ -14,6 +14,43 @@ python -m pip install agentbundle
 
 Requires Python 3.11+. Runs on macOS, Linux, and Windows.
 
+## What's new in 0.57.0
+
+`install` and `upgrade` now print the steps to move to a renamed pack when the
+catalogue renamed the one you asked for. The governance pack is now
+`repo-governance`. CLIs older than 0.57.0 print plain "not found", so the steps
+are also in the `repo-governance` pack README and the changelog.
+
+## What's new in 0.56.0
+
+`agentbundle --version` and `catalogue contracts list` now report the catalogue
+specification version. **Breaking:** `catalogue contracts list --format json`
+now prints an object, `{"catalogue_specification": "<version>", "contracts":
+[...]}`, instead of a bare array. Read the `contracts` key for the rows.
+
+## What's new in 0.55.0
+
+A new bundled contract, `catalogue-manifest.schema.json`, describes the shape
+of the release archive manifest, and `catalogue contracts list`, `show`, and
+`export` expose it. It checks shape only and is not evidence of integrity or
+origin. `catalogue verify` now rejects a boolean `schema` value in
+`catalogue-manifest.json` with `CAT-V-ARC-011`. The archive guide states what
+proves where an archive came from.
+
+## What's new in 0.54.0
+
+Every contract now loads from the copy bundled with `agentbundle`. A
+`contracts/` folder in or above a catalogue no longer overrides
+`target-vocab.toml` or `adapter.toml`, and a missing or unparsable bundled
+contract fails closed. `catalogue lint` now reports a missing pack schema as a
+`CAT-L006` error instead of a warning that skipped validation.
+
+## What's new in 0.53.2
+
+Error messages from `install` and from `.adapt-discovery.toml` loading state
+their rule directly instead of citing internal design records. The legacy
+layout notices now say `legacy dist-tree`. Exit codes are unchanged.
+
 ## What's new in 0.53.1
 
 `agentbundle catalogue init` now writes a root `AGENTS.md` and a `CLAUDE.md`, so

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/_data/adapter.schema.json

@@ -1,4 +1,6 @@
 {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://eugenelim.github.io/agent-ready-repo/docs/spec/catalogue/0.1/adapter.schema.json",
   "x-spec": "docs/specs/distribution-route-contract",
   "type": "object",
   "required": ["contract", "primitive", "adapter"],

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/_data/catalogue-index.schema.json

@@ -1,7 +1,7 @@
 {
   "x-spec": "docs/specs/catalogue-wave4-semantic-contracts-index",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "catalogue-index.schema.json",
+  "$id": "https://eugenelim.github.io/agent-ready-repo/docs/spec/catalogue/0.1/catalogue-index.schema.json",
   "title": "Neutral catalogue index",
   "type": "object",
   "additionalProperties": false,

agentbundle-0.57.0/agentbundle/_data/catalogue-manifest.schema.json

@@ -0,0 +1,62 @@
+{
+  "x-spec": "docs/specs/catalogue-manifest-schema",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://eugenelim.github.io/agent-ready-repo/docs/spec/catalogue/0.1/catalogue-manifest.schema.json",
+  "title": "Catalogue archive manifest",
+  "description": "Shape of the catalogue-manifest.json that `agentbundle catalogue package` writes into a catalogue archive. This schema describes shape only. A manifest that is valid against it is neither archive verification (the archive's bytes, digests and members are checked by `agentbundle catalogue verify`) nor evidence of who published the archive. Origin is established only by `catalogue verify --sha256-file` with a sidecar, or by a signature, obtained through a separately authenticated channel. Objects stay open: extra keys are allowed. The writer also emits keys this schema does not type because the verifier does not check them: source_revision, minimum_agentbundle_version, catalogue_name, catalogue_display_name and marketplace_digest (each may be null or a string), adapter_contract_version and pack_schema_version.",
+  "type": "object",
+  "required": ["schema", "bundle", "release", "generated_at", "files", "packs"],
+  "properties": {
+    "schema": {
+      "description": "Manifest schema version, 1 or 2. The package's validator rejects an integer-valued number such as 1.0 that standard JSON Schema validators and `catalogue verify` accept.",
+      "type": "integer",
+      "enum": [1, 2]
+    },
+    "bundle": {"type": "string"},
+    "release": {"type": "string"},
+    "generated_at": {"type": "string"},
+    "files": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["path", "sha256"],
+        "properties": {
+          "path": {"type": "string"},
+          "sha256": {"type": "string"}
+        }
+      }
+    },
+    "packs": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["name", "version"],
+        "properties": {
+          "name": {"type": "string"},
+          "version": {"type": "string"},
+          "path": {"type": "string"},
+          "digest": {"type": "string"}
+        },
+        "if": {"required": ["digest"]},
+        "then": {"required": ["path"]}
+      }
+    },
+    "profiles": {
+      "type": "array",
+      "items": {
+        "if": {"type": "string"},
+        "else": {
+          "type": "object",
+          "required": ["name"],
+          "properties": {
+            "name": {"type": "string"},
+            "path": {"type": "string"},
+            "digest": {"type": "string"}
+          },
+          "if": {"required": ["digest"]},
+          "then": {"required": ["path"]}
+        }
+      }
+    }
+  }
+}

agentbundle-0.57.0/agentbundle/_data/catalogue-members.txt

@@ -0,0 +1,8 @@
+adapter.schema.json
+catalogue-index.schema.json
+catalogue-manifest.schema.json
+catalogue.schema.json
+pack.schema.json
+profile.schema.json
+skill-manifest.schema.json
+skill.schema.json

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/_data/catalogue-scaffold/manifest.json

@@ -16,7 +16,7 @@
     "profiles/_example/README.md": "164494df049ddce3e57cb44ed604cb3d39be0a6ec2072e609ea3fa4bbfc74c72",
     "profiles/_example/profile.toml": "68af18cf50fa0327a9776b029c92bb1cf82710c649691b3ac889eb8537b8eac7",
     "tests/conformance/test_gemini_admissibility.py": "8b337da9272823aed2cb22041b3f9fd27549f075f28b9817efd5be8f8c5bb948",
-    "tests/conformance/test_pack_layout_declared_section.py": "1e03e04b995bd3f3cd2e6362c07d05514d3fe995c0fbe59045e3cc11a1e787a0",
+    "tests/conformance/test_pack_layout_declared_section.py": "48f644778a08d9460458aadb92eb1157042f9094c59f859c8d44df0a271c1256",
     "tests/conformance/test_pack_metadata.py": "8ea175b88cc6e10ba10cda87676fc225ee2b968d710c8e6ab05fb20e31ec978a",
     "tests/conformance/test_shared_library_boundaries.py": "5e07783459336e657a355f43aa5a9cf6c138603624daec258ecc0fa3d74239c3"
   },

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/_data/catalogue-scaffold/tests/conformance/test_pack_layout_declared_section.py

@@ -1,4 +1,4 @@
-"""A pack's declared layout section must be one it documents (spec AC6).
+"""A pack's declared layout section must be one it documents.
 
 `agentbundle install` appends `[<section>] output_dir = <output_dir>` to an
 adopter's `agentbundle-layout.toml`, taking both values from the pack manifest.
@@ -209,7 +209,7 @@ def test_no_pack_documents_a_crossing_of_its_own_pairs() -> None:
 
 
 def test_every_reference_doc_agrees_with_its_pack_on_the_base() -> None:
-    """AC6 admits a pair documented in *one* doc; this requires all of them.
+    """A pair documented in *one* doc is admitted; this requires all of them.
 
     A pack with several reference pages can otherwise regress one of them to a
     base the installer does not write, and stay green — the adopter reading

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/_data/catalogue.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "catalogue.schema.json",
+  "$id": "https://eugenelim.github.io/agent-ready-repo/docs/spec/catalogue/0.1/catalogue.schema.json",
   "title": "CatalogueConfig",
   "description": "JSON Schema for catalogue.toml — ini-005 Bucket 3 configuration layer.",
   "type": "object",

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/_data/install-marker.py

@@ -13,10 +13,6 @@ It detects first-install-or-update and writes a ``[[packs-installed]]`` entry
 to the scope-correct ``.adapt-install-marker.toml`` file so the existing core
 session-start nudge and ``/adapt-to-project`` skill can consume it.
 
-Specs:
-  docs/specs/claude-plugins-install-route/spec.md  (route = "claude-plugins")
-  docs/specs/apm-install-route-parity/spec.md      (route = "apm"; --install-route flag)
-
 CLI:
   ``--install-route {claude-plugins,apm}`` is *required*. The build pipeline bakes
   the value into the projected hook ``command`` at projection time for both routes;
@@ -604,8 +600,8 @@ def _serialise_marker(entries: list[dict]) -> str:
         lines.append(f"install-route = {_emit_basic_string(install_route)}")
         # Pass-through unresolved-markers and new-companions if present on the
         # entry. CLI-seeded entries carry both; writer-created entries omit them
-        # (the writer has no visibility into the projected primitive tree —
-        # per spec). Re-emit verbatim using _emit_basic_string so CLI-seeded
+        # (the writer has no visibility into the projected primitive tree).
+        # Re-emit verbatim using _emit_basic_string so CLI-seeded
         # queue/companion lists survive a Claude-plugins writer pass.
         if "unresolved-markers" in entry:
             markers_repr = ", ".join(
@@ -692,9 +688,10 @@ def _write_hash(plugin_data: pathlib.Path, current_hash: str) -> None:
     """Write the hash file at ``${CLAUDE_PLUGIN_DATA}/pack-manifest-hash``.
 
     Only called from ``main`` AFTER ``_write_marker`` returns successfully
-    (the write-after-success ordering is the spec's robustness rail — see
-    Boundaries §Never do). Hash-write failure is non-fatal (main allows it
-    to proceed with exit 0 + warning); the next session retries detection.
+    (write-after-success ordering, so a failed marker write is retried
+    next session instead of being masked by a fresh hash). Hash-write
+    failure is non-fatal (main allows it to proceed with exit 0 + warning);
+    the next session retries detection.
 
     Uses tempfile + os.replace for atomicity, matching the marker write rail.
     """

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/_data/pack.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "pack.schema.json",
+  "$id": "https://eugenelim.github.io/agent-ready-repo/docs/spec/catalogue/0.1/pack.schema.json",
   "title": "PackConfig",
   "description": "JSON Schema for pack.toml — pack metadata and adapter-contract configuration.",
   "type": "object",

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/_data/profile.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "profile.schema.json",
+  "$id": "https://eugenelim.github.io/agent-ready-repo/docs/spec/catalogue/0.1/profile.schema.json",
   "title": "ProfileConfig",
   "description": "JSON Schema for profiles/*.toml — pack-profile install bundles.",
   "type": "object",

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/_data/public-contracts.txt

@@ -3,6 +3,7 @@ adapter.toml
 agent-plugin-extension-namespaces.schema.json
 agent-plugin-extension-namespaces.toml
 catalogue-index.schema.json
+catalogue-manifest.schema.json
 catalogue.schema.json
 distribution-routes.schema.json
 distribution-routes.toml

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/_data/skill-manifest.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft-07/schema#",
-  "$id": "skill-manifest.schema.json",
+  "$id": "https://eugenelim.github.io/agent-ready-repo/docs/spec/catalogue/0.1/skill-manifest.schema.json",
   "type": "object",
   "required": ["id", "name", "version", "description"],
   "additionalProperties": false,

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/_data/skill.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "skill.schema.json",
+  "$id": "https://eugenelim.github.io/agent-ready-repo/docs/spec/catalogue/0.1/skill.schema.json",
   "title": "SkillFrontmatter",
   "description": "JSON Schema for SKILL.md frontmatter — the closed key set enforced by agentbundle catalogue lint --deep.",
   "type": "object",

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/bounded_metadata.py

@@ -127,7 +127,7 @@ def _parse_frontmatter(
     except UnicodeDecodeError as exc:
         raise BoundedMetadataError(f"{label}: invalid UTF-8") from exc
     # Line endings are normalised for the PARSE ONLY. `data` is the byte string
-    # AC15 says is written to the normalized tree and fed to the digest, and it
+    # is written to the normalized tree and fed to the digest, and it
     # is untouched here — this rebinds `text`, never `data`.
     #
     # Without this, a `SKILL.md` saved with CRLF — the default of most Windows
@@ -153,8 +153,8 @@ def _parse_frontmatter(
     # after the parse — which is what this did — refuses the whole source when
     # an unrecognised key holds a value the bounded subset cannot represent:
     # `version: 1.0` refused while `version: 2` was dropped, and `version` is
-    # the second most common publisher key in the surveyed corpus. RFC-0098 E18
-    # says an unrecognised key is ignored regardless of its value type.
+    # the second most common publisher key in the surveyed corpus. The
+    # rule is that an unrecognised key is ignored regardless of its value type.
     parsed = _parse_subset(
         _strip_unrecognised_keys(raw, allowed_top_level_keys), label, limits
     )

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/build/__init__.py

@@ -19,14 +19,13 @@ Subcommands landing in later tasks (T6–T8):
 from __future__ import annotations
 
 import argparse
-import json
 import shutil
 import sys
 from pathlib import Path
 
 from agentbundle.build.contract import load as load_contract
 from agentbundle.build.lint_packs import cmd_lint_packs
-from agentbundle.build.main import _read_bundled, cmd_build
+from agentbundle.build.main import cmd_build
 from agentbundle.build.self_host import cmd_check, cmd_self
 from agentbundle.build.validate import validate as validate_instance
 
@@ -42,12 +41,15 @@ def _cmd_validate(args: argparse.Namespace) -> int:
         )
         return 1
 
+    # Imported at call time so a patch of `agentbundle.build.main._read_bundled`
+    # reaches this call.
+    from agentbundle.build.main import _load_bundled_json
+
     try:
-        schema_text = _read_bundled("adapter.schema.json")
-    except (FileNotFoundError, ModuleNotFoundError):
+        schema = _load_bundled_json("adapter.schema.json")
+    except (OSError, ValueError, ModuleNotFoundError) as exc:
         print(
-            "validate: adapter.schema.json not found in package data or "
-            "repository contracts",
+            f"validate: cannot read bundled _data/adapter.schema.json: {exc}",
             file=sys.stderr,
         )
         return 1
@@ -58,7 +60,6 @@ def _cmd_validate(args: argparse.Namespace) -> int:
         print(f"validate: failed to load {contract_path}: {exc}", file=sys.stderr)
         return 1
 
-    schema = json.loads(schema_text)
     errors = validate_instance(contract, schema)
     if errors:
         print(

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/build/adapter_root_bins.py

@@ -227,7 +227,7 @@ def collect_pack_root_bins(pack_dir: Path) -> dict[str, Path]:
     target into each pair. ``agentbundle install`` operates on a single
     resolved catalogue ``pack_dir`` and owns its own per-scope path-jail, so
     it needs basenames + sources for one pack, not absolute targets under a
-    build tree (credbroker-user-scope plan T4 — the install-side seam). The
+    build tree (the install-side seam). The
     install caller composes ``.agentbundle/bin/<basename>`` relpaths from
     :data:`TARGET_SUBDIR` and writes via ``safety.write_jailed`` with POSIX
     :data:`EXECUTABLE_MODE`.

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/build/adapters/claude_code.py

@@ -84,8 +84,8 @@ def project_packs(
 
 
 # Mirror of kiro.py:_skill_direct_directory_target — keep in sync.
-# A shared helper is barred by the spec's `Never do` boundary (no
-# expansion of projections/direct_directory.py beyond `sweep_orphans`).
+# A shared helper is deliberately avoided, so projections/direct_directory.py
+# stays limited to `sweep_orphans`.
 def _resolve_target(output_root: Path, target_path: str) -> Path:
     """Join a contract ``target-path`` onto ``output_root``, confined.
 
@@ -119,7 +119,7 @@ def _installed_skill_names(output_root: Path, target_dir: Path) -> set[str]:
     """Return skill dir names recorded in the repo state file under target_dir.
 
     Delegates to the one shared implementation so this adapter cannot
-    drift from the other six; see `_sweep_guard` for the AC28 refusal.
+    drift from the other six; see `_sweep_guard` for the unreadable-state refusal.
     """
     from agentbundle.build.adapters._sweep_guard import installed_skill_names
 
@@ -193,7 +193,7 @@ def _project_direct_directory(source_dir: Path, target_dir: Path) -> None:
             continue
         if entry.is_dir():
             destination = target_dir / entry.name
-            # Spec § Never do — `shutil.rmtree` is barred against
+            # `shutil.rmtree` is barred against
             # any entry whose `is_symlink()` is true. If a previous
             # run left a symlink at the destination path, unlink it
             # (removes the link, not the target).

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/build/adapters/codex.py

@@ -45,7 +45,7 @@ def _installed_skill_names(output_root: Path, target_dir: Path) -> set[str]:
     """Return skill dir names recorded in the repo state file under target_dir.
 
     Delegates to the one shared implementation so this adapter cannot
-    drift from the other six; see `_sweep_guard` for the AC28 refusal.
+    drift from the other six; see `_sweep_guard` for the unreadable-state refusal.
     """
     from agentbundle.build.adapters._sweep_guard import installed_skill_names
 
@@ -157,7 +157,7 @@ def project_packs(
                     if entry.is_dir():
                         expected_names.add(entry.name)
                         destination = target_dir / entry.name
-                        # Spec § Never do — `shutil.rmtree` is barred
+                        # `shutil.rmtree` is barred
                         # against any entry whose `is_symlink()` is
                         # true. If a previous projection left a
                         # symlink at the destination path, unlink it
@@ -173,7 +173,7 @@ def project_packs(
                             symlinks=True,
                             ignore=ignore_absolute_symlinks,
                         )
-            # Bound to `skill` only per spec § Never do. Other
+            # Orphan sweeping is bound to `skill` only. Other
             # direct-directory primitives opt in explicitly.
             if primitive_name == "skill":
                 expected_names |= _installed_skill_names(output_root, target_dir)

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/build/adapters/copilot.py

@@ -219,7 +219,7 @@ def _installed_skill_names(output_root: Path, target_dir: Path) -> set[str]:
     """Return skill dir names recorded in the repo state file under target_dir.
 
     Delegates to the one shared implementation so this adapter cannot
-    drift from the other six; see `_sweep_guard` for the AC28 refusal.
+    drift from the other six; see `_sweep_guard` for the unreadable-state refusal.
     """
     from agentbundle.build.adapters._sweep_guard import installed_skill_names
 

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/build/adapters/cursor.py

@@ -234,7 +234,7 @@ def _sweep_skill_orphans(pack_paths: list[Path], contract: dict, output_root: Pa
         for entry in source_dir.iterdir():
             if entry.is_dir():
                 expected_names.add(entry.name)
-    # AC28: this adapter previously built `expected_names` from pack
+    # This adapter previously built `expected_names` from pack
     # sources alone and had no protected set at all, so a sweep removed
     # every skill installed by `agentbundle install` into the same
     # directory. The installed set is unioned in, and an unreadable

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/build/adapters/gemini.py

@@ -229,7 +229,7 @@ def _sweep_skill_orphans(pack_paths: list[Path], contract: dict, output_root: Pa
         for entry in source_dir.iterdir():
             if entry.is_dir():
                 expected_names.add(entry.name)
-    # AC28: this adapter previously built `expected_names` from pack
+    # This adapter previously built `expected_names` from pack
     # sources alone and had no protected set at all, so a sweep removed
     # every skill installed by `agentbundle install` into the same
     # directory. The installed set is unioned in, and an unreadable

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/build/adapters/kiro.py

@@ -131,8 +131,8 @@ def project_packs(
 
 
 # Mirror of claude_code.py:_skill_direct_directory_target — keep in sync.
-# A shared helper is barred by the spec's `Never do` boundary (no
-# expansion of projections/direct_directory.py beyond `sweep_orphans`).
+# A shared helper is deliberately avoided, so projections/direct_directory.py
+# stays limited to `sweep_orphans`.
 def _skill_direct_directory_target(contract: dict, output_root: Path) -> Path | None:
     adapter_block = contract["adapter"]["kiro"]
     for entry in adapter_block.get("projection", []):
@@ -145,7 +145,7 @@ def _installed_skill_names(output_root: Path, target_dir: Path) -> set[str]:
     """Return skill dir names recorded in the repo state file under target_dir.
 
     Delegates to the one shared implementation so this adapter cannot
-    drift from the other six; see `_sweep_guard` for the AC28 refusal.
+    drift from the other six; see `_sweep_guard` for the unreadable-state refusal.
     """
     from agentbundle.build.adapters._sweep_guard import installed_skill_names
 
@@ -461,7 +461,7 @@ def _project_direct_directory(source_dir: Path, target_dir: Path) -> None:
             continue
         if entry.is_dir():
             destination = target_dir / entry.name
-            # Spec § Never do — `shutil.rmtree` is barred against
+            # `shutil.rmtree` is barred against
             # any entry whose `is_symlink()` is true. If a previous
             # run left a symlink at the destination path, unlink it.
             if destination.is_symlink():

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/build/adapters/kiro_ide.py

@@ -96,7 +96,7 @@ def _sweep_skill_orphans(pack_paths: list[Path], contract: dict, output_root: Pa
         for entry in source_dir.iterdir():
             if entry.is_dir():
                 expected_names.add(entry.name)
-    # AC28: this adapter previously built `expected_names` from pack
+    # This adapter previously built `expected_names` from pack
     # sources alone and had no protected set at all, so a sweep removed
     # every skill installed by `agentbundle install` into the same
     # directory. The installed set is unioned in, and an unreadable

{agentbundle-0.53.1 → agentbundle-0.57.0}/agentbundle/build/lint_packs.py

@@ -18,7 +18,7 @@ Three checks, applied to every pack under a `--packs-dir`:
      exceed the strictest `description-max-length`. Multi-line YAML
      descriptions (`>`, `|`, continuation lines) are refused outright
      rather than mis-parsed. Constraints come from
-     `contracts/target-vocab.toml` — see
+     the bundled `_data/target-vocab.toml`.
 
 The lint is Python-only so it runs on every CI platform without
 shelling out, and it is wired into `make build` / `make build-self` /
@@ -44,11 +44,6 @@ from agentbundle.safety import PathJailError, assert_portable_name
 # their content.
 _PACK_SUBTREES = ("seeds", ".apm")
 
-# Path to the sibling vocab file, relative to a repo root. The loader
-# walks up from a caller-supplied start until an ancestor contains
-# this relative path.
-_VOCAB_RELPATH = Path("contracts/target-vocab.toml")
-
 # Sentinel returned by `_extract_frontmatter_fields` when a key's
 # value position is `>`, `|`, or empty (signaling a folded / nested
 # block). The metadata checks translate this into a finding
@@ -57,7 +52,7 @@ _MULTILINE = object()
 
 
 class Constraints(NamedTuple):
-    """Strictest-cap snapshot of `contracts/target-vocab.toml`.
+    """Strictest-cap snapshot of the bundled `_data/target-vocab.toml`.
 
     `binding_targets` keys (`"description_max"`, `"name_max"`,
     `"name_pattern"`) carry the ASCII-sorted list of targets enforcing
@@ -71,53 +66,31 @@ class Constraints(NamedTuple):
     binding_targets: dict[str, list[str]]
 
 
-def _walk_up_for_vocab(start: Path) -> Path | None:
-    cursor = start.resolve()
-    while True:
-        possible = cursor / _VOCAB_RELPATH
-        if possible.is_file():
-            return possible
-        if cursor.parent == cursor:
-            return None
-        cursor = cursor.parent
-
-
-def _load_target_vocab(start: Path) -> tuple[dict | None, str | None]:
-    """Walk up from `start` looking for `contracts/target-vocab.toml`;
-    then fall back to the bundled engine copy. This keeps the gate working when
-    an adopter points `--packs-dir` at a tree outside the repo and when the
-    engine runs from an installed artifact. Returns `(vocab_dict, None)` on
-    success, `(None, err)` when both sources fail or the file is malformed."""
-    candidate = _walk_up_for_vocab(start)
-    source = str(candidate) if candidate is not None else None
-    text = candidate.read_text(encoding="utf-8") if candidate is not None else None
-    if text is None:
-        try:
-            from importlib.resources import files
+def _load_target_vocab() -> tuple[dict | None, str | None]:
+    """Load the bundled `_data/target-vocab.toml`; no other source is tried.
 
-            resource = files("agentbundle").joinpath(
-                f"_data/{_VOCAB_RELPATH.name}"
-            )
-            if resource.is_file():
-                source = str(resource)
-                text = resource.read_text(encoding="utf-8")
-        except (FileNotFoundError, ModuleNotFoundError):
-            pass
-    if text is None:
+    Returns `(vocab_dict, None)` on success, `(None, err)` when the bundled
+    copy is missing, unreadable or malformed. `err` names the file."""
+    # Imported here so a patch of `agentbundle.build.main._read_bundled`
+    # reaches this call; `agentbundle.build.main` as an attribute of the
+    # package is rebound to the CLI function.
+    from agentbundle.build.main import _read_bundled
+
+    try:
+        text = _read_bundled("target-vocab.toml")
+    except (OSError, UnicodeDecodeError) as exc:
         return None, (
-            "lint-packs: target-vocab.toml not found (walked up from "
-            f"{start} and checked bundled package data; expected "
-            f"{_VOCAB_RELPATH.as_posix()} or _data/{_VOCAB_RELPATH.name})"
+            f"lint-packs: cannot read bundled _data/target-vocab.toml: {exc}"
         )
     try:
         raw = tomllib.loads(text)
     except tomllib.TOMLDecodeError as exc:
-        return None, f"lint-packs: failed to parse {source}: {exc}"
+        return None, f"lint-packs: failed to parse _data/target-vocab.toml: {exc}"
     targets = raw.get("target")
     if not isinstance(targets, dict) or not targets:
         return None, (
-            f"lint-packs: {source} has no [target.<name>] tables — "
-            f"the metadata gate has no constraints to apply"
+            "lint-packs: _data/target-vocab.toml has no [target.<name>] tables — "
+            "the metadata gate has no constraints to apply"
         )
     return raw, None
 
@@ -499,14 +472,14 @@ def lint_pack(
         from agentbundle.build import route_lookup
         from agentbundle.build.hook_wiring_rules import claude_projection_paths
         from agentbundle.build.main import (
+            _load_bundled_toml,
             _load_distribution_route_contract,
-            _read_bundled,
         )
         from agentbundle.build.projections.plugin_hooks import compile_plugin_hooks
 
         contract_data = contract
         if contract_data is None:
-            contract_data = tomllib.loads(_read_bundled("adapter.toml"))
+            contract_data = _load_bundled_toml("adapter.toml")
         try:
             route_data = _load_distribution_route_contract()
             route_declarations = route_lookup.read_route_declarations(route_data)
@@ -597,7 +570,7 @@ def cmd_lint_packs(args: argparse.Namespace) -> int:
     if not packs_dir.exists():
         print(f"lint-packs: packs-dir not found: {packs_dir}", file=sys.stderr)
         return 1
-    vocab, err = _load_target_vocab(packs_dir)
+    vocab, err = _load_target_vocab()
     if err is not None:
         print(err, file=sys.stderr)
         print(