code-mower 0.5.0b20__tar.gz → 0.5.0b22__tar.gz

{code_mower-0.5.0b20 → code_mower-0.5.0b22}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-mower
-Version: 0.5.0b20
+Version: 0.5.0b22
 Summary: Multi-reviewer AI code audit orchestration
 License-Expression: Apache-2.0
 Requires-Python: >=3.11
@@ -101,11 +101,11 @@ Code Mower currently targets Python 3.11+; Python 3.12 is recommended.
 
 ```bash
 python3.12 --version
-pipx install --python python3.12 code-mower==0.5.0b20
+pipx install --python python3.12 code-mower==0.5.0b22
 code-mower --version
 ```
 
-`0.5.0b20` is a beta release. Until Code Mower publishes a stable `1.0`
+`0.5.0b22` is a beta release. Until Code Mower publishes a stable `1.0`
 line, use the explicit beta version above or allow prereleases with:
 
 ```bash
@@ -148,7 +148,7 @@ First-time command map: [docs/launch-command-surface.md](docs/launch-command-sur
 
 The current PyPI beta has been rehearsed end-to-end from a clean install:
 [First-User Install Rehearsal](docs/first-user-install-rehearsal.md) records
-the latest 10/10 public-package readiness proof for `code-mower==0.5.0b20`.
+the latest 10/10 public-package readiness proof for `code-mower==0.5.0b22`.
 
 ## Why Not Just Run Codex Or Claude Yourself?
 
@@ -253,9 +253,9 @@ best?" to "which AI builder plus reviewer loop ships best on this product?" See
 
 ## Installation Status
 
-The current public beta is `v0.5.0-beta.20` from
+The current public beta is `v0.5.0-beta.22` from
 [codemower-ai/code-mower](https://github.com/codemower-ai/code-mower), published
-as `code-mower==0.5.0b20` on [PyPI](https://pypi.org/project/code-mower/).
+as `code-mower==0.5.0b22` on [PyPI](https://pypi.org/project/code-mower/).
 GitHub releases remain the auditable source for tags, build artifacts, and
 release notes.
 

{code_mower-0.5.0b20 → code_mower-0.5.0b22}/README.md

@@ -86,11 +86,11 @@ Code Mower currently targets Python 3.11+; Python 3.12 is recommended.
 
 ```bash
 python3.12 --version
-pipx install --python python3.12 code-mower==0.5.0b20
+pipx install --python python3.12 code-mower==0.5.0b22
 code-mower --version
 ```
 
-`0.5.0b20` is a beta release. Until Code Mower publishes a stable `1.0`
+`0.5.0b22` is a beta release. Until Code Mower publishes a stable `1.0`
 line, use the explicit beta version above or allow prereleases with:
 
 ```bash
@@ -133,7 +133,7 @@ First-time command map: [docs/launch-command-surface.md](docs/launch-command-sur
 
 The current PyPI beta has been rehearsed end-to-end from a clean install:
 [First-User Install Rehearsal](docs/first-user-install-rehearsal.md) records
-the latest 10/10 public-package readiness proof for `code-mower==0.5.0b20`.
+the latest 10/10 public-package readiness proof for `code-mower==0.5.0b22`.
 
 ## Why Not Just Run Codex Or Claude Yourself?
 
@@ -238,9 +238,9 @@ best?" to "which AI builder plus reviewer loop ships best on this product?" See
 
 ## Installation Status
 
-The current public beta is `v0.5.0-beta.20` from
+The current public beta is `v0.5.0-beta.22` from
 [codemower-ai/code-mower](https://github.com/codemower-ai/code-mower), published
-as `code-mower==0.5.0b20` on [PyPI](https://pypi.org/project/code-mower/).
+as `code-mower==0.5.0b22` on [PyPI](https://pypi.org/project/code-mower/).
 GitHub releases remain the auditable source for tags, build artifacts, and
 release notes.
 

{code_mower-0.5.0b20 → code_mower-0.5.0b22}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "code-mower"
-version = "0.5.0b20"
+version = "0.5.0b22"
 description = "Multi-reviewer AI code audit orchestration"
 requires-python = ">=3.11"
 readme = "README.md"

{code_mower-0.5.0b20 → code_mower-0.5.0b22}/src/code_mower/__init__.py

@@ -1,3 +1,3 @@
 """Code Mower package."""
 
-__version__ = "0.5.0b20"
+__version__ = "0.5.0b22"

{code_mower-0.5.0b20 → code_mower-0.5.0b22}/src/code_mower/cli.py

@@ -14,7 +14,7 @@ from pathlib import Path
 if __package__ in {None, ""}:
     raise SystemExit(
         "code_mower.cli is a packaged entrypoint. Install Code Mower with "
-        "`pipx install code-mower==0.5.0b20`, or run source checkouts with "
+        "`pipx install code-mower==0.5.0b22`, or run source checkouts with "
         "`PYTHONPATH=src python -m code_mower.cli`."
     )
 

{code_mower-0.5.0b20 → code_mower-0.5.0b22}/src/code_mower/cloud_client/export.py

@@ -266,7 +266,9 @@ def build_provenance_summary(events: list[dict[str, Any]]) -> dict[str, Any]:
         if not model and not model_version_raw and model_source in {"", "missing"}:
             missing_model_events += 1
         if not tool_version:
-            missing_tool_version_events += 1
+            version_source = str(tool.get("version_source") or "").strip()
+            if version_source in {"", "missing"}:
+                missing_tool_version_events += 1
         key = (tool_name or "unknown", provider or "unknown", model or "")
         row = tools.setdefault(
             key,
@@ -276,6 +278,8 @@ def build_provenance_summary(events: list[dict[str, Any]]) -> dict[str, Any]:
                 "model": key[2],
                 "events": 0,
                 "versions": set(),
+                "model_sources": set(),
+                "version_sources": set(),
                 "roles": set(),
                 "lenses": set(),
             },
@@ -283,6 +287,8 @@ def build_provenance_summary(events: list[dict[str, Any]]) -> dict[str, Any]:
         row["events"] += 1
         for field, target in (
             ("tool_version", "versions"),
+            ("model_source", "model_sources"),
+            ("version_source", "version_sources"),
             ("role", "roles"),
             ("lens", "lenses"),
         ):
@@ -298,6 +304,8 @@ def build_provenance_summary(events: list[dict[str, Any]]) -> dict[str, Any]:
                 "model": row["model"],
                 "events": row["events"],
                 "versions": sorted(row["versions"]),
+                "model_sources": sorted(row["model_sources"]),
+                "version_sources": sorted(row["version_sources"]),
                 "roles": sorted(row["roles"]),
                 "lenses": sorted(row["lenses"]),
             }

{code_mower-0.5.0b20 → code_mower-0.5.0b22}/src/code_mower/provider_registry.py

@@ -85,6 +85,11 @@ REFERENCE_PROVIDERS: dict[str, ProviderLane] = {
         merge_authority=True,
         provider_config={
             "command": "codex",
+            "model_env_any": (
+                "CODE_MOWER_CODEX_MODEL",
+                "CODEX_MODEL",
+                "OPENAI_MODEL",
+            ),
             "doctor_probe_args": ("--version",),
         },
     ),
@@ -273,6 +278,7 @@ REFERENCE_PROVIDERS: dict[str, ProviderLane] = {
         provider_config={
             "api_base_env": "LOCAL_LLM_API_BASE",
             "model_env": "LOCAL_LLM_MODEL",
+            "model_env_any": ("CODE_MOWER_LOCAL_LLM_MODEL",),
             "bot_authors_env": "LOCAL_LLM_BOT_AUTHORS",
             "default_api_base": "http://localhost:1234/v1",
             "profile_env": "LOCAL_LLM_PROFILE",
@@ -301,6 +307,7 @@ REFERENCE_PROVIDERS: dict[str, ProviderLane] = {
             "command": "aider",
             "mode": "review-only",
             "model_env": "AIDER_MODEL",
+            "model_env_any": ("CODE_MOWER_AIDER_MODEL", "AIDER_CHAT_MODEL"),
             "api_base_env": "AIDER_API_BASE",
             "status": "optional tool lane; provider-specific invocation belongs in an adapter",
         },
@@ -326,6 +333,7 @@ REFERENCE_PROVIDERS: dict[str, ProviderLane] = {
             "command": "gemini",
             "command_env": "GEMINI_CLI_COMMAND",
             "model_env": "GEMINI_MODEL",
+            "model_env_any": ("CODE_MOWER_GEMINI_MODEL", "GOOGLE_GENAI_MODEL"),
             "prompt_lenses": ("base-audit",),
             "doctor_probe_args": (
                 "-p",
@@ -362,6 +370,7 @@ REFERENCE_PROVIDERS: dict[str, ProviderLane] = {
             "alternate_commands": ("antigravity",),
             "command_env": "ANTIGRAVITY_CLI_COMMAND",
             "model_env": "ANTIGRAVITY_MODEL",
+            "model_env_any": ("CODE_MOWER_ANTIGRAVITY_MODEL",),
             "prompt_lenses": ("base-audit",),
             "required_env_truthy": ("ANTIGRAVITY_CLI_USE_AMBIENT_HOME",),
             "doctor_probe_args": ("--version",),
@@ -396,6 +405,7 @@ REFERENCE_PROVIDERS: dict[str, ProviderLane] = {
             "command": "hermes",
             "command_env": "HERMES_CLI_COMMAND",
             "model_env": "HERMES_INFERENCE_MODEL",
+            "model_env_any": ("CODE_MOWER_HERMES_MODEL", "HERMES_MODEL"),
             "provider_env": "HERMES_PROVIDER",
             "prompt_lenses": ("base-audit",),
             "required_env_truthy": ("HERMES_CLI_USE_AMBIENT_HOME",),
@@ -430,6 +440,7 @@ REFERENCE_PROVIDERS: dict[str, ProviderLane] = {
         provider_config={
             "command": "coderabbit",
             "alternate_commands": ("cr",),
+            "model_env_any": ("CODE_MOWER_CODERABBIT_MODEL", "CODERABBIT_MODEL"),
             "status": "optional CLI lane for local/on-demand review capture",
         },
     ),
@@ -451,6 +462,7 @@ REFERENCE_PROVIDERS: dict[str, ProviderLane] = {
         spend_policy="none",
         provider_config={
             "command_env": "CODE_MOWER_ACP_COMMAND",
+            "model_env": "CODE_MOWER_ACP_MODEL",
             "protocol": "agent-client-protocol",
             "prompt_lenses": ("base-audit",),
             "status": "protocol research lane; no automatic merge authority",

{code_mower-0.5.0b20 → code_mower-0.5.0b22}/src/code_mower/providers/provenance.py

@@ -119,6 +119,8 @@ def build_code_mower_tool_provenance(
             "tool_name": "code-mower",
             "tool_version": version,
             "provider": "code-mower",
+            "model_source": "not_applicable",
+            "version_source": "package_version",
             "integration": source,
             "source": source,
         }
@@ -166,6 +168,21 @@ def _env_value(config: Mapping[str, Any], key: str) -> str:
     return _safe_text(os.environ.get(env_name)) if env_name else ""
 
 
+def _env_value_any(config: Mapping[str, Any], key: str, any_key: str) -> str:
+    env_names = []
+    primary = _safe_text(config.get(key))
+    if primary:
+        env_names.append(primary)
+    for env_name in _text_values(config.get(any_key)):
+        if env_name not in env_names:
+            env_names.append(env_name)
+    for env_name in env_names:
+        value = _safe_text(os.environ.get(env_name))
+        if value:
+            return value
+    return ""
+
+
 def _profile_model(config: Mapping[str, Any]) -> tuple[str, str]:
     profile_env = _safe_text(config.get("profile_env"))
     profile_id = _safe_text(os.environ.get(profile_env)) if profile_env else ""
@@ -182,7 +199,7 @@ _VENDOR_HIDDEN_MODEL_DRIVERS = frozenset({"hosted_bridge", "manual", "saas_event
 
 
 def _configured_model(config: Mapping[str, Any], driver: str) -> tuple[str, str]:
-    env_model = _env_value(config, "model_env")
+    env_model = _env_value_any(config, "model_env", "model_env_any")
     if env_model:
         return env_model, "env"
     profile_model, profile_id = _profile_model(config)
@@ -256,6 +273,7 @@ def build_provider_lane_tool_provenance(
         if driver == "local_cli"
         else _safe_text(_lane_value(lane, "adapter")) or provider
     )
+    hidden_vendor_version = driver in _VENDOR_HIDDEN_MODEL_DRIVERS
     detail: dict[str, Any] = {
         "lane_id": lane_id,
         "driver": driver,
@@ -264,7 +282,9 @@ def build_provider_lane_tool_provenance(
         "model_known": bool(model),
         "model_source": model_source,
         "version_known": False,
-        "version_source": "not_probed" if driver != "local_cli" else "missing",
+        "version_source": "vendor_hidden"
+        if hidden_vendor_version
+        else ("not_applicable" if driver == "api_model" else "missing"),
     }
     tool_version = ""
     if driver == "local_cli" and include_version_probe and command:

{code_mower-0.5.0b20 → code_mower-0.5.0b22}/src/code_mower/templates/code-mower.example.yml

@@ -24,6 +24,10 @@ lanes:
       - GITHUB_TOKEN
     provider_config:
       command: codex
+      model_env_any:
+        - CODE_MOWER_CODEX_MODEL
+        - CODEX_MODEL
+        - OPENAI_MODEL
       doctor_probe_args:
         - --version
     review_hygiene:
@@ -207,6 +211,8 @@ lanes:
     provider_config:
       api_base_env: LOCAL_LLM_API_BASE
       model_env: LOCAL_LLM_MODEL
+      model_env_any:
+        - CODE_MOWER_LOCAL_LLM_MODEL
       bot_authors_env: LOCAL_LLM_BOT_AUTHORS
       default_api_base: http://localhost:1234/v1
       profile_env: LOCAL_LLM_PROFILE
@@ -242,6 +248,9 @@ lanes:
       command: aider
       mode: review-only
       model_env: AIDER_MODEL
+      model_env_any:
+        - CODE_MOWER_AIDER_MODEL
+        - AIDER_CHAT_MODEL
       api_base_env: AIDER_API_BASE
       status: optional tool lane; provider-specific invocation belongs in an adapter
 
@@ -264,6 +273,9 @@ lanes:
       command: gemini
       command_env: GEMINI_CLI_COMMAND
       model_env: GEMINI_MODEL
+      model_env_any:
+        - CODE_MOWER_GEMINI_MODEL
+        - GOOGLE_GENAI_MODEL
       prompt_lenses:
         - base-audit
       doctor_probe_args:
@@ -298,6 +310,8 @@ lanes:
         - antigravity
       command_env: ANTIGRAVITY_CLI_COMMAND
       model_env: ANTIGRAVITY_MODEL
+      model_env_any:
+        - CODE_MOWER_ANTIGRAVITY_MODEL
       prompt_lenses:
         - base-audit
       required_env_truthy:
@@ -325,6 +339,9 @@ lanes:
       command: hermes
       command_env: HERMES_CLI_COMMAND
       model_env: HERMES_INFERENCE_MODEL
+      model_env_any:
+        - CODE_MOWER_HERMES_MODEL
+        - HERMES_MODEL
       provider_env: HERMES_PROVIDER
       prompt_lenses:
         - base-audit
@@ -353,6 +370,9 @@ lanes:
       command: coderabbit
       alternate_commands:
         - cr
+      model_env_any:
+        - CODE_MOWER_CODERABBIT_MODEL
+        - CODERABBIT_MODEL
       status: optional CLI lane for local/on-demand review capture
 
   acp_bridge:
@@ -371,6 +391,7 @@ lanes:
       - GITHUB_TOKEN
     provider_config:
       command_env: CODE_MOWER_ACP_COMMAND
+      model_env: CODE_MOWER_ACP_MODEL
       protocol: agent-client-protocol
       prompt_lenses:
         - base-audit

{code_mower-0.5.0b20 → code_mower-0.5.0b22}/src/code_mower/templates/providers.yml

@@ -17,6 +17,7 @@ provider_templates:
     trigger_policy: "manual"
     provider_config:
       command_env: "CODE_MOWER_ACP_COMMAND"
+      model_env: "CODE_MOWER_ACP_MODEL"
       protocol: "agent-client-protocol"
       prompt_lenses:
         - "base-audit"
@@ -42,6 +43,9 @@ provider_templates:
       command: "aider"
       mode: "review-only"
       model_env: "AIDER_MODEL"
+      model_env_any:
+        - "CODE_MOWER_AIDER_MODEL"
+        - "AIDER_CHAT_MODEL"
       api_base_env: "AIDER_API_BASE"
       status: "optional tool lane; provider-specific invocation belongs in an adapter"
     review_hygiene: {}
@@ -66,6 +70,8 @@ provider_templates:
         - "antigravity"
       command_env: "ANTIGRAVITY_CLI_COMMAND"
       model_env: "ANTIGRAVITY_MODEL"
+      model_env_any:
+        - "CODE_MOWER_ANTIGRAVITY_MODEL"
       prompt_lenses:
         - "base-audit"
       required_env_truthy:
@@ -161,6 +167,9 @@ provider_templates:
       command: "coderabbit"
       alternate_commands:
         - "cr"
+      model_env_any:
+        - "CODE_MOWER_CODERABBIT_MODEL"
+        - "CODERABBIT_MODEL"
       status: "optional CLI lane for local/on-demand review capture"
     review_hygiene: {}
   codex:
@@ -181,6 +190,10 @@ provider_templates:
     trigger_policy: "label"
     provider_config:
       command: "codex"
+      model_env_any:
+        - "CODE_MOWER_CODEX_MODEL"
+        - "CODEX_MODEL"
+        - "OPENAI_MODEL"
       doctor_probe_args:
         - "--version"
     review_hygiene:
@@ -253,6 +266,9 @@ provider_templates:
       command: "gemini"
       command_env: "GEMINI_CLI_COMMAND"
       model_env: "GEMINI_MODEL"
+      model_env_any:
+        - "CODE_MOWER_GEMINI_MODEL"
+        - "GOOGLE_GENAI_MODEL"
       prompt_lenses:
         - "base-audit"
       doctor_probe_args:
@@ -335,6 +351,9 @@ provider_templates:
       command: "hermes"
       command_env: "HERMES_CLI_COMMAND"
       model_env: "HERMES_INFERENCE_MODEL"
+      model_env_any:
+        - "CODE_MOWER_HERMES_MODEL"
+        - "HERMES_MODEL"
       provider_env: "HERMES_PROVIDER"
       prompt_lenses:
         - "base-audit"
@@ -365,6 +384,8 @@ provider_templates:
     provider_config:
       api_base_env: "LOCAL_LLM_API_BASE"
       model_env: "LOCAL_LLM_MODEL"
+      model_env_any:
+        - "CODE_MOWER_LOCAL_LLM_MODEL"
       bot_authors_env: "LOCAL_LLM_BOT_AUTHORS"
       default_api_base: "http://localhost:1234/v1"
       profile_env: "LOCAL_LLM_PROFILE"

{code_mower-0.5.0b20 → code_mower-0.5.0b22}/src/code_mower.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-mower
-Version: 0.5.0b20
+Version: 0.5.0b22
 Summary: Multi-reviewer AI code audit orchestration
 License-Expression: Apache-2.0
 Requires-Python: >=3.11
@@ -101,11 +101,11 @@ Code Mower currently targets Python 3.11+; Python 3.12 is recommended.
 
 ```bash
 python3.12 --version
-pipx install --python python3.12 code-mower==0.5.0b20
+pipx install --python python3.12 code-mower==0.5.0b22
 code-mower --version
 ```
 
-`0.5.0b20` is a beta release. Until Code Mower publishes a stable `1.0`
+`0.5.0b22` is a beta release. Until Code Mower publishes a stable `1.0`
 line, use the explicit beta version above or allow prereleases with:
 
 ```bash
@@ -148,7 +148,7 @@ First-time command map: [docs/launch-command-surface.md](docs/launch-command-sur
 
 The current PyPI beta has been rehearsed end-to-end from a clean install:
 [First-User Install Rehearsal](docs/first-user-install-rehearsal.md) records
-the latest 10/10 public-package readiness proof for `code-mower==0.5.0b20`.
+the latest 10/10 public-package readiness proof for `code-mower==0.5.0b22`.
 
 ## Why Not Just Run Codex Or Claude Yourself?
 
@@ -253,9 +253,9 @@ best?" to "which AI builder plus reviewer loop ships best on this product?" See
 
 ## Installation Status
 
-The current public beta is `v0.5.0-beta.20` from
+The current public beta is `v0.5.0-beta.22` from
 [codemower-ai/code-mower](https://github.com/codemower-ai/code-mower), published
-as `code-mower==0.5.0b20` on [PyPI](https://pypi.org/project/code-mower/).
+as `code-mower==0.5.0b22` on [PyPI](https://pypi.org/project/code-mower/).
 GitHub releases remain the auditable source for tags, build artifacts, and
 release notes.
 

{code_mower-0.5.0b20 → code_mower-0.5.0b22}/templates/providers.yml

@@ -17,6 +17,7 @@ provider_templates:
     trigger_policy: "manual"
     provider_config:
       command_env: "CODE_MOWER_ACP_COMMAND"
+      model_env: "CODE_MOWER_ACP_MODEL"
       protocol: "agent-client-protocol"
       prompt_lenses:
         - "base-audit"
@@ -42,6 +43,9 @@ provider_templates:
       command: "aider"
       mode: "review-only"
       model_env: "AIDER_MODEL"
+      model_env_any:
+        - "CODE_MOWER_AIDER_MODEL"
+        - "AIDER_CHAT_MODEL"
       api_base_env: "AIDER_API_BASE"
       status: "optional tool lane; provider-specific invocation belongs in an adapter"
     review_hygiene: {}
@@ -66,6 +70,8 @@ provider_templates:
         - "antigravity"
       command_env: "ANTIGRAVITY_CLI_COMMAND"
       model_env: "ANTIGRAVITY_MODEL"
+      model_env_any:
+        - "CODE_MOWER_ANTIGRAVITY_MODEL"
       prompt_lenses:
         - "base-audit"
       required_env_truthy:
@@ -161,6 +167,9 @@ provider_templates:
       command: "coderabbit"
       alternate_commands:
         - "cr"
+      model_env_any:
+        - "CODE_MOWER_CODERABBIT_MODEL"
+        - "CODERABBIT_MODEL"
       status: "optional CLI lane for local/on-demand review capture"
     review_hygiene: {}
   codex:
@@ -181,6 +190,10 @@ provider_templates:
     trigger_policy: "label"
     provider_config:
       command: "codex"
+      model_env_any:
+        - "CODE_MOWER_CODEX_MODEL"
+        - "CODEX_MODEL"
+        - "OPENAI_MODEL"
       doctor_probe_args:
         - "--version"
     review_hygiene:
@@ -253,6 +266,9 @@ provider_templates:
       command: "gemini"
       command_env: "GEMINI_CLI_COMMAND"
       model_env: "GEMINI_MODEL"
+      model_env_any:
+        - "CODE_MOWER_GEMINI_MODEL"
+        - "GOOGLE_GENAI_MODEL"
       prompt_lenses:
         - "base-audit"
       doctor_probe_args:
@@ -335,6 +351,9 @@ provider_templates:
       command: "hermes"
       command_env: "HERMES_CLI_COMMAND"
       model_env: "HERMES_INFERENCE_MODEL"
+      model_env_any:
+        - "CODE_MOWER_HERMES_MODEL"
+        - "HERMES_MODEL"
       provider_env: "HERMES_PROVIDER"
       prompt_lenses:
         - "base-audit"
@@ -365,6 +384,8 @@ provider_templates:
     provider_config:
       api_base_env: "LOCAL_LLM_API_BASE"
       model_env: "LOCAL_LLM_MODEL"
+      model_env_any:
+        - "CODE_MOWER_LOCAL_LLM_MODEL"
       bot_authors_env: "LOCAL_LLM_BOT_AUTHORS"
       default_api_base: "http://localhost:1234/v1"
       profile_env: "LOCAL_LLM_PROFILE"

{code_mower-0.5.0b20 → code_mower-0.5.0b22}/tests/test_cloud_client.py

@@ -277,6 +277,71 @@ def test_provenance_summary_treats_vendor_hidden_model_as_known_source() -> None
 
     assert summary["events_with_model_provenance"] == 1
     assert summary["events_missing_model_provenance"] == 0
+    assert summary["events_with_tool_version_provenance"] == 1
+    assert summary["events_missing_tool_version_provenance"] == 0
+    assert summary["tools"][0]["model_sources"] == ["vendor_hidden"]
+    assert summary["tools"][0]["version_sources"] == ["not_probed"]
+
+
+def test_provenance_summary_preserves_source_quality_fields() -> None:
+    summary = build_provenance_summary(
+        [
+            normalize_event(
+                {
+                    "schema": EVENT_SCHEMA,
+                    "event_id": "evt-code-mower",
+                    "event_type": "dogfood_upload",
+                    "created_at": "2026-01-01T00:00:00Z",
+                    "repo_slug": "owner/repo",
+                    "team_id": "team",
+                    "install_id": "install",
+                    "source": "unit-test",
+                    "tool": {
+                        "role": "reporter",
+                        "tool_name": "code-mower",
+                        "tool_version": "0.5.0b22",
+                        "provider": "code-mower",
+                        "model": "",
+                        "model_source": "not_applicable",
+                        "version_source": "package_version",
+                    },
+                },
+                "dogfood_upload",
+            ),
+            normalize_event(
+                {
+                    "schema": EVENT_SCHEMA,
+                    "event_id": "evt-gemini",
+                    "event_type": "provider_catalog_snapshot",
+                    "created_at": "2026-01-01T00:00:00Z",
+                    "repo_slug": "owner/repo",
+                    "team_id": "team",
+                    "install_id": "install",
+                    "source": "unit-test",
+                    "tool": {
+                        "role": "reviewer",
+                        "tool_name": "gemini",
+                        "tool_version": "0.45.2",
+                        "provider": "gemini",
+                        "model": "",
+                        "model_source": "missing",
+                        "version_source": "cli_version_probe",
+                    },
+                },
+                "provider_catalog_snapshot",
+            ),
+        ]
+    )
+
+    assert summary["events_with_model_provenance"] == 1
+    assert summary["events_missing_model_provenance"] == 1
+    assert summary["events_with_tool_version_provenance"] == 2
+    assert summary["events_missing_tool_version_provenance"] == 0
+    rows = {row["tool_name"]: row for row in summary["tools"]}
+    assert rows["code-mower"]["model_sources"] == ["not_applicable"]
+    assert rows["code-mower"]["version_sources"] == ["package_version"]
+    assert rows["gemini"]["model_sources"] == ["missing"]
+    assert rows["gemini"]["version_sources"] == ["cli_version_probe"]
 
 
 def test_dogfood_dry_run_preserves_version_probe(monkeypatch, tmp_path: Path) -> None: