code-mower 0.5.0b9__tar.gz → 0.5.0b11__tar.gz

{code_mower-0.5.0b9 → code_mower-0.5.0b11}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-mower
-Version: 0.5.0b9
+Version: 0.5.0b11
 Summary: Multi-reviewer AI code audit orchestration
 License-Expression: Apache-2.0
 Requires-Python: >=3.11
@@ -98,11 +98,11 @@ Code Mower currently targets Python 3.11+; Python 3.12 is recommended.
 
 ```bash
 python3.12 --version
-pipx install --python python3.12 code-mower==0.5.0b9
+pipx install --python python3.12 code-mower==0.5.0b11
 code-mower --version
 ```
 
-`0.5.0b9` is a beta release. Until Code Mower publishes a stable `1.0`
+`0.5.0b11` is a beta release. Until Code Mower publishes a stable `1.0`
 line, use the explicit beta version above or allow prereleases with:
 
 ```bash
@@ -143,6 +143,10 @@ every disposition before using it for lane promotion or merge policy.
 Full walkthrough: [docs/try-in-10-minutes.md](docs/try-in-10-minutes.md).
 First-time command map: [docs/launch-command-surface.md](docs/launch-command-surface.md).
 
+The current PyPI beta has been rehearsed end-to-end from a clean install:
+[First-User Install Rehearsal](docs/first-user-install-rehearsal.md) records
+the latest 10/10 public-package readiness proof for `code-mower==0.5.0b11`.
+
 ## Why Not Just Run Codex Or Claude Yourself?
 
 You should, at first. Code Mower is not a replacement for a good local agent or
@@ -246,11 +250,11 @@ best?" to "which AI builder plus reviewer loop ships best on this product?" See
 
 ## Installation Status
 
-The current public beta is `v0.5.0-beta.9` from
-[codemower-ai/code-mower](https://github.com/codemower-ai/code-mower), and it
-is published as `code-mower==0.5.0b9` on
-[PyPI](https://pypi.org/project/code-mower/). GitHub releases remain the
-auditable source for tags, build artifacts, and release notes.
+The current public beta is `v0.5.0-beta.11` from
+[codemower-ai/code-mower](https://github.com/codemower-ai/code-mower), published
+as `code-mower==0.5.0b11` on [PyPI](https://pypi.org/project/code-mower/).
+GitHub releases remain the auditable source for tags, build artifacts, and
+release notes.
 
 For source checkout development and release rehearsal, use:
 

{code_mower-0.5.0b9 → code_mower-0.5.0b11}/README.md

@@ -86,11 +86,11 @@ Code Mower currently targets Python 3.11+; Python 3.12 is recommended.
 
 ```bash
 python3.12 --version
-pipx install --python python3.12 code-mower==0.5.0b9
+pipx install --python python3.12 code-mower==0.5.0b11
 code-mower --version
 ```
 
-`0.5.0b9` is a beta release. Until Code Mower publishes a stable `1.0`
+`0.5.0b11` is a beta release. Until Code Mower publishes a stable `1.0`
 line, use the explicit beta version above or allow prereleases with:
 
 ```bash
@@ -131,6 +131,10 @@ every disposition before using it for lane promotion or merge policy.
 Full walkthrough: [docs/try-in-10-minutes.md](docs/try-in-10-minutes.md).
 First-time command map: [docs/launch-command-surface.md](docs/launch-command-surface.md).
 
+The current PyPI beta has been rehearsed end-to-end from a clean install:
+[First-User Install Rehearsal](docs/first-user-install-rehearsal.md) records
+the latest 10/10 public-package readiness proof for `code-mower==0.5.0b11`.
+
 ## Why Not Just Run Codex Or Claude Yourself?
 
 You should, at first. Code Mower is not a replacement for a good local agent or
@@ -234,11 +238,11 @@ best?" to "which AI builder plus reviewer loop ships best on this product?" See
 
 ## Installation Status
 
-The current public beta is `v0.5.0-beta.9` from
-[codemower-ai/code-mower](https://github.com/codemower-ai/code-mower), and it
-is published as `code-mower==0.5.0b9` on
-[PyPI](https://pypi.org/project/code-mower/). GitHub releases remain the
-auditable source for tags, build artifacts, and release notes.
+The current public beta is `v0.5.0-beta.11` from
+[codemower-ai/code-mower](https://github.com/codemower-ai/code-mower), published
+as `code-mower==0.5.0b11` on [PyPI](https://pypi.org/project/code-mower/).
+GitHub releases remain the auditable source for tags, build artifacts, and
+release notes.
 
 For source checkout development and release rehearsal, use:
 

{code_mower-0.5.0b9 → code_mower-0.5.0b11}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "code-mower"
-version = "0.5.0b9"
+version = "0.5.0b11"
 description = "Multi-reviewer AI code audit orchestration"
 requires-python = ">=3.11"
 readme = "README.md"

{code_mower-0.5.0b9 → code_mower-0.5.0b11}/src/code_mower/__init__.py

@@ -1,3 +1,3 @@
 """Code Mower package."""
 
-__version__ = "0.5.0b9"
+__version__ = "0.5.0b11"

{code_mower-0.5.0b9 → code_mower-0.5.0b11}/src/code_mower/claude_audit_pr.py

@@ -32,13 +32,17 @@ if __package__ in {None, "", "tools"}:
         from tools.provider_runners import (
             clip_text as _clip_text,
             fetch_pull_request,
+            fetch_base_ref_sha as _shared_fetch_base_ref_sha,
+            fetch_pr_head_sha as _shared_fetch_pr_head_sha,
             limit_comment_body,
             one_line as _one_line,
             parse_repo_paths as _parse_repo_paths,
             post_pr_comment,
+            FetchedHeadMismatch,
             repost_audit_verdict_artifact,
             require_exact_keys as _require_exact_keys,
             resolve_github_token_from_stdin_or_env,
+            run_git_text as _shared_run_git_text,
             write_audit_verdict_artifact,
         )
     except ImportError:  # pragma: no cover - direct script execution fallback
@@ -51,13 +55,17 @@ if __package__ in {None, "", "tools"}:
         from provider_runners import (  # type: ignore
             clip_text as _clip_text,
             fetch_pull_request,
+            fetch_base_ref_sha as _shared_fetch_base_ref_sha,
+            fetch_pr_head_sha as _shared_fetch_pr_head_sha,
             limit_comment_body,
             one_line as _one_line,
             parse_repo_paths as _parse_repo_paths,
             post_pr_comment,
+            FetchedHeadMismatch,
             repost_audit_verdict_artifact,
             require_exact_keys as _require_exact_keys,
             resolve_github_token_from_stdin_or_env,
+            run_git_text as _shared_run_git_text,
             write_audit_verdict_artifact,
         )
 else:  # pragma: no cover - exercised after package extraction.
@@ -65,8 +73,11 @@ else:  # pragma: no cover - exercised after package extraction.
     from .audit_progress import AuditProgress, run_subprocess_with_progress
     from .claude_cli_environment import clean_claude_cli_env, env_flag
     from .provider_runners import (
+        FetchedHeadMismatch,
         clip_text as _clip_text,
+        fetch_base_ref_sha as _shared_fetch_base_ref_sha,
         fetch_pull_request,
+        fetch_pr_head_sha as _shared_fetch_pr_head_sha,
         limit_comment_body,
         one_line as _one_line,
         parse_repo_paths as _parse_repo_paths,
@@ -74,6 +85,7 @@ else:  # pragma: no cover - exercised after package extraction.
         repost_audit_verdict_artifact,
         require_exact_keys as _require_exact_keys,
         resolve_github_token_from_stdin_or_env,
+        run_git_text as _shared_run_git_text,
         write_audit_verdict_artifact,
     )
 
@@ -175,15 +187,6 @@ class ClaudeAuditResult:
     verdict_artifact_path: Optional[Path] = None
 
 
-class FetchedHeadMismatch(RuntimeError):
-    def __init__(self, expected_sha: str, actual_sha: str) -> None:
-        self.expected_sha = expected_sha
-        self.actual_sha = actual_sha
-        super().__init__(
-            f"fetched PR head {actual_sha} does not match expected {expected_sha}"
-        )
-
-
 @dataclass(frozen=True)
 class DiffContext:
     stat: str
@@ -365,81 +368,15 @@ def _timeout_output(value: Any) -> str:
 
 
 def _run_git(local_repo: Path, args: List[str], *, timeout: int = 60) -> str:
-    result = subprocess.run(
-        ["git", "-C", str(local_repo), *args],
-        check=True,
-        text=True,
-        capture_output=True,
-        timeout=timeout,
-    )
-    return result.stdout
+    return _shared_run_git_text(local_repo, args, timeout=timeout)
 
 
 def _fetch_base_sha_for_diff(local_repo: Path, base_ref: str) -> str:
-    temporary_ref = False
-    if base_ref.startswith("origin/"):
-        remote_branch = base_ref[len("origin/") :]
-        local_ref = f"refs/remotes/origin/{remote_branch}"
-        fetch_refspec = f"+{remote_branch}:{local_ref}"
-    elif base_ref.startswith("refs/heads/"):
-        remote_branch = base_ref[len("refs/heads/") :]
-        local_ref = f"refs/remotes/origin/{remote_branch}"
-        fetch_refspec = f"+{base_ref}:{local_ref}"
-    elif "/" not in base_ref:
-        local_ref = f"refs/remotes/origin/{base_ref}"
-        fetch_refspec = f"+{base_ref}:{local_ref}"
-    else:
-        local_ref = f"refs/code-mower/base/{os.getpid()}-{secrets.token_hex(8)}"
-        fetch_refspec = f"+{base_ref}:{local_ref}"
-        temporary_ref = True
-    try:
-        subprocess.run(
-            ["git", "-C", str(local_repo), "fetch", "origin", fetch_refspec],
-            check=True,
-            capture_output=True,
-            text=True,
-        )
-        return _run_git(
-            local_repo,
-            ["rev-parse", "--verify", f"{local_ref}^{{commit}}"],
-        ).strip()
-    finally:
-        if temporary_ref:
-            subprocess.run(
-                ["git", "-C", str(local_repo), "update-ref", "-d", local_ref],
-                check=False,
-                capture_output=True,
-                text=True,
-            )
+    return _shared_fetch_base_ref_sha(local_repo, base_ref)
 
 
 def _fetch_pr_head_sha_for_diff(local_repo: Path, pr_number: int) -> str:
-    local_ref = f"refs/code-mower/pr/{pr_number}/{os.getpid()}-{secrets.token_hex(8)}"
-    try:
-        subprocess.run(
-            [
-                "git",
-                "-C",
-                str(local_repo),
-                "fetch",
-                "origin",
-                f"+pull/{pr_number}/head:{local_ref}",
-            ],
-            check=True,
-            capture_output=True,
-            text=True,
-        )
-        return _run_git(
-            local_repo,
-            ["rev-parse", "--verify", f"{local_ref}^{{commit}}"],
-        ).strip()
-    finally:
-        subprocess.run(
-            ["git", "-C", str(local_repo), "update-ref", "-d", local_ref],
-            check=False,
-            capture_output=True,
-            text=True,
-        )
+    return _shared_fetch_pr_head_sha(local_repo, pr_number)
 
 
 def _clip_bytes(text: str, max_bytes: int) -> Tuple[str, bool]:

{code_mower-0.5.0b9 → code_mower-0.5.0b11}/src/code_mower/clear_stale.py

@@ -80,6 +80,9 @@ class StaleClearResult:
     reason: str
     requeue_added: bool = False
     dispatch_requested: bool = False
+    trusted_terminal_status: Optional[str] = None
+    trusted_terminal_sha: Optional[str] = None
+    trusted_terminal_author: Optional[str] = None
 
 
 def _comment_created_at(comment: dict[str, Any]) -> str:
@@ -148,6 +151,9 @@ def resolve_stale_clear_decision(
                     f"terminal label is current: {current_comment.status} by "
                     f"{current_comment.author} for {current_comment.reviewed_sha}"
                 ),
+                trusted_terminal_status=current_comment.status,
+                trusted_terminal_sha=current_comment.reviewed_sha,
+                trusted_terminal_author=current_comment.author,
             )
         return StaleClearResult(
             LabelDecision(
@@ -164,6 +170,9 @@ def resolve_stale_clear_decision(
                 "terminal audit label mismatch for current trusted "
                 f"{current_comment.status} result"
             ),
+            trusted_terminal_status=current_comment.status,
+            trusted_terminal_sha=current_comment.reviewed_sha,
+            trusted_terminal_author=current_comment.author,
         )
 
     decision = LabelDecision(
@@ -179,6 +188,9 @@ def resolve_stale_clear_decision(
         decision,
         "terminal audit label is stale or lacks a current trusted Head SHA",
         requeue_added=config.needs_label not in label_set,
+        trusted_terminal_status=current_comment.status if current_comment else None,
+        trusted_terminal_sha=current_comment.reviewed_sha if current_comment else None,
+        trusted_terminal_author=current_comment.author if current_comment else None,
     )
 
 
@@ -356,6 +368,12 @@ def main(argv: Optional[Sequence[str]] = None) -> int:
         "decision": result.decision.__dict__ if result.decision else None,
         "requeue_added": result.requeue_added,
         "dispatch_requested": dispatch_requested,
+        "trusted_terminal": {
+            "status": result.trusted_terminal_status,
+            "reviewed_sha": result.trusted_terminal_sha,
+            "author": result.trusted_terminal_author,
+            "head_bound": bool(result.trusted_terminal_sha),
+        },
     }
     if args.json or args.dry_run:
         print(json.dumps(output, indent=2, sort_keys=True))

{code_mower-0.5.0b9 → code_mower-0.5.0b11}/src/code_mower/cli.py

@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-"""Reference dispatcher for the future standalone Code Mower CLI."""
+"""Command dispatcher for the packaged Code Mower CLI."""
 
 from __future__ import annotations
 
@@ -11,82 +11,47 @@ import urllib.error
 import urllib.request
 from collections.abc import Callable
 from pathlib import Path
-
 if __package__ in {None, ""}:
-    sys.path.insert(0, str(Path(__file__).resolve().parents[1]))
-
-if __package__ in {None, "", "tools"}:
-    from tools import __version__
-    from tools import (
-        antigravity_cli_audit_pr,
-        blind_review_coordinator,
-        bootstrap as code_mower_bootstrap,
-        claude_audit_pr,
-        claude_cli_bounce,
-        clear_stale,
-        coderabbit_cli_audit_pr,
-        codex_audit_env_preflight,
-        codex_audit_pr,
-        codex_audit_schema_smoke,
-        hermes_cli_audit_pr,
-        code_mower_builder_experiment,
-        code_mower_cloud,
-        code_mower_config,
-        code_mower_calibration,
-        code_mower_context_packs,
-        code_mower_doctor,
-        code_mower_init,
-        code_mower_merge,
-        code_mower_next_steps,
-        code_mower_package,
-        code_mower_prompts,
-        code_mower_telemetry,
-        migration as code_mower_migration,
-        gemini_cli_audit_pr,
-        local_llm_bakeoff,
-        local_llm_calibration,
-        local_llm_audit_pr,
-        local_llm_profiles,
-        reviewer_metrics,
-        saas_reviewer_labeler,
-        trailer_comment_labeler,
+    raise SystemExit(
+        "code_mower.cli is a packaged entrypoint. Install Code Mower with "
+        "`pipx install code-mower==0.5.0b11`, or run source checkouts with "
+        "`PYTHONPATH=src python -m code_mower.cli`."
     )
-    from code_mower import checks as code_mower_checks
-else:  # pragma: no cover - exercised after package extraction.
-    from . import __version__
-    from . import blind_review_coordinator
-    from . import antigravity_cli_audit_pr
-    from . import bootstrap as code_mower_bootstrap
-    from . import builder_experiment as code_mower_builder_experiment
-    from . import claude_audit_pr
-    from . import claude_cli_bounce
-    from . import clear_stale
-    from . import cloud as code_mower_cloud
-    from . import coderabbit_cli_audit_pr
-    from . import codex_audit_env_preflight
-    from . import codex_audit_pr
-    from . import codex_audit_schema_smoke
-    from . import config as code_mower_config
-    from . import code_mower_calibration
-    from . import checks as code_mower_checks
-    from . import code_mower_context_packs
-    from . import code_mower_merge
-    from . import next_steps as code_mower_next_steps
-    from . import doctor as code_mower_doctor
-    from . import gemini_cli_audit_pr
-    from . import hermes_cli_audit_pr
-    from . import init as code_mower_init
-    from . import code_mower_telemetry
-    from . import local_llm_bakeoff
-    from . import local_llm_calibration
-    from . import local_llm_audit_pr
-    from . import local_llm_profiles
-    from . import migration as code_mower_migration
-    from . import package as code_mower_package
-    from . import prompts as code_mower_prompts
-    from . import reviewer_metrics
-    from . import saas_reviewer_labeler
-    from . import trailer_comment_labeler
+
+from . import __version__
+from . import antigravity_cli_audit_pr
+from . import blind_review_coordinator
+from . import bootstrap as code_mower_bootstrap
+from . import builder_experiment as code_mower_builder_experiment
+from . import checks as code_mower_checks
+from . import claude_audit_pr
+from . import claude_cli_bounce
+from . import clear_stale
+from . import cloud as code_mower_cloud
+from . import coderabbit_cli_audit_pr
+from . import codex_audit_env_preflight
+from . import codex_audit_pr
+from . import codex_audit_schema_smoke
+from . import code_mower_calibration
+from . import code_mower_context_packs
+from . import code_mower_merge
+from . import code_mower_telemetry
+from . import config as code_mower_config
+from . import doctor as code_mower_doctor
+from . import gemini_cli_audit_pr
+from . import hermes_cli_audit_pr
+from . import init as code_mower_init
+from . import local_llm_audit_pr
+from . import local_llm_bakeoff
+from . import local_llm_calibration
+from . import local_llm_profiles
+from . import migration as code_mower_migration
+from . import next_steps as code_mower_next_steps
+from . import package as code_mower_package
+from . import prompts as code_mower_prompts
+from . import reviewer_metrics
+from . import saas_reviewer_labeler
+from . import trailer_comment_labeler
 
 
 def _has_positional_config(argv: list[str], options_with_values: set[str]) -> bool:

{code_mower-0.5.0b9 → code_mower-0.5.0b11}/src/code_mower/cloud.py

@@ -602,6 +602,11 @@ def main(argv: list[str] | None = None) -> int:
                 print(f"Repository: {result['repo_slug']}")
                 print(f"Runs: {result['run_count']}")
                 print("Provenance: imported history (not calibration evidence)")
+                guidance = result.get("catch_up", {}).get("trust_guidance", {})
+                if guidance:
+                    print(f"Use for: {guidance.get('use_for', '')}")
+                    print(f"Do not use for: {guidance.get('do_not_use_for', '')}")
+                    print(f"Next: {guidance.get('next_step', '')}")
                 print(f"Bundle: {result['export']['output_dir']}")
                 print(f"Events: {result['export']['event_count']}")
                 if result["status"] == "uploaded":

{code_mower-0.5.0b9 → code_mower-0.5.0b11}/src/code_mower/cloud_client/operations.py

@@ -23,6 +23,16 @@ from .setup import DEFAULT_INSTALL_ID_ENV, DEFAULT_TEAM_ID_ENV
 from .upload import build_upload_payload, post_upload_payload
 
 
+CATCH_UP_TRUST_GUIDANCE = {
+    "use_for": "historical activity context and dashboard coverage backfill",
+    "do_not_use_for": "reviewer or lens accuracy, lane promotion, or merge-gate policy",
+    "next_step": (
+        "run current dogfood uploads plus reviewer-runs or calibration evidence "
+        "before making provider/lens decisions"
+    ),
+}
+
+
 def build_catch_up_summary(
     *,
     repo_slug: str,
@@ -63,6 +73,7 @@ def build_catch_up_summary(
         "source_category": "history",
         "history_only": True,
         "calibration_evidence": False,
+        "trust_guidance": CATCH_UP_TRUST_GUIDANCE,
         "git_ref_included": include_git_ref,
         "workflow_counts": dict(sorted(workflow_counts.items())),
         "status_counts": dict(sorted(status_counts.items())),