code-mower 1.3.0__tar.gz → 1.3.1__tar.gz

{code_mower-1.3.0 → code_mower-1.3.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-mower
-Version: 1.3.0
+Version: 1.3.1
 Summary: Multi-reviewer AI code audit orchestration
 License-Expression: Apache-2.0
 Project-URL: Homepage, https://github.com/codemower-ai/code-mower
@@ -63,8 +63,8 @@ Default cloud bundles exclude source code, raw diffs, raw model transcripts,
 raw stdout/stderr, auth output, and secrets.
 
 Documentation on `main` follows the source on `main`. If you install the
-published `code-mower==1.3.0` package, use the documentation from the matching
-[`v1.3.0` tag](https://github.com/codemower-ai/code-mower/tree/v1.3.0) so the
+published `code-mower==1.3.1` package, use the documentation from the matching
+[`v1.3.1` tag](https://github.com/codemower-ai/code-mower/tree/v1.3.1) so the
 commands and package stay aligned as development continues.
 
 ## Design Principles
@@ -259,7 +259,7 @@ agent report its actual host posture, exact installed version, doctor result,
 Board URL, and any owner-only click-list before it mutates the repo.
 
 The current package-index announcement entry point is the tagged
-[Try Code Mower In 10 Minutes](https://github.com/codemower-ai/code-mower/blob/v1.3.0/docs/try-in-10-minutes.md)
+[Try Code Mower In 10 Minutes](https://github.com/codemower-ai/code-mower/blob/v1.3.1/docs/try-in-10-minutes.md)
 guide. The v1.0 supervised-pilot release includes the native Board, the
 controller dry-run and policy contract, adoption and upgrade hardening from
 recent install rehearsals, package-index release checks, provider-diversity
@@ -374,7 +374,7 @@ Provider-contract baseline for the next release train:
 
 For release verification,
 [First-User Install Rehearsal](docs/first-user-install-rehearsal.md) records
-the package-index procedure for `v1.3.0` / `code-mower==1.3.0`. The
+the package-index procedure for `v1.3.1` / `code-mower==1.3.1`. The
 GitHub release records the workflow and rehearsal evidence for the exact tag.
 After publication, [Release Qualification](docs/release-qualification.md)
 coordinates provider-specific install and operational checks without treating
@@ -568,8 +568,8 @@ measurement work.
 
 ## Installation Status
 
-The current package-index release baseline is `v1.3.0`, with pinned package
-install spec `code-mower==1.3.0`. Release evidence is recorded on the GitHub
+The current package-index release baseline is `v1.3.1`, with pinned package
+install spec `code-mower==1.3.1`. Release evidence is recorded on the GitHub
 release and in the first-user install rehearsal. The public repository is
 [codemower-ai/code-mower](https://github.com/codemower-ai/code-mower), and
 GitHub releases remain the auditable source for tags, build artifacts, and
@@ -687,6 +687,8 @@ first so local work exercises the same package entrypoint users install.
 - [v1.3.0 Release Notes](docs/v130-release-notes.md)
 - [Optional Coworker Setup](docs/context-setup.md)
 - [Context Qualification and Limits](docs/v130-context-qualification.md)
+- [v1.3.1 Guided Context Release Notes](docs/v131-release-notes.md)
+- [v1.3.1 Guided Context Qualification](docs/v131-guided-context-qualification.md)
 - [Post-v0.8 Effectiveness Assessment](docs/post-v08-effectiveness-assessment.md)
 - [v1.0.1 Effectiveness Assessment](docs/v101-effectiveness-assessment.md)
 

{code_mower-1.3.0 → code_mower-1.3.1}/README.md

@@ -28,8 +28,8 @@ Default cloud bundles exclude source code, raw diffs, raw model transcripts,
 raw stdout/stderr, auth output, and secrets.
 
 Documentation on `main` follows the source on `main`. If you install the
-published `code-mower==1.3.0` package, use the documentation from the matching
-[`v1.3.0` tag](https://github.com/codemower-ai/code-mower/tree/v1.3.0) so the
+published `code-mower==1.3.1` package, use the documentation from the matching
+[`v1.3.1` tag](https://github.com/codemower-ai/code-mower/tree/v1.3.1) so the
 commands and package stay aligned as development continues.
 
 ## Design Principles
@@ -224,7 +224,7 @@ agent report its actual host posture, exact installed version, doctor result,
 Board URL, and any owner-only click-list before it mutates the repo.
 
 The current package-index announcement entry point is the tagged
-[Try Code Mower In 10 Minutes](https://github.com/codemower-ai/code-mower/blob/v1.3.0/docs/try-in-10-minutes.md)
+[Try Code Mower In 10 Minutes](https://github.com/codemower-ai/code-mower/blob/v1.3.1/docs/try-in-10-minutes.md)
 guide. The v1.0 supervised-pilot release includes the native Board, the
 controller dry-run and policy contract, adoption and upgrade hardening from
 recent install rehearsals, package-index release checks, provider-diversity
@@ -339,7 +339,7 @@ Provider-contract baseline for the next release train:
 
 For release verification,
 [First-User Install Rehearsal](docs/first-user-install-rehearsal.md) records
-the package-index procedure for `v1.3.0` / `code-mower==1.3.0`. The
+the package-index procedure for `v1.3.1` / `code-mower==1.3.1`. The
 GitHub release records the workflow and rehearsal evidence for the exact tag.
 After publication, [Release Qualification](docs/release-qualification.md)
 coordinates provider-specific install and operational checks without treating
@@ -533,8 +533,8 @@ measurement work.
 
 ## Installation Status
 
-The current package-index release baseline is `v1.3.0`, with pinned package
-install spec `code-mower==1.3.0`. Release evidence is recorded on the GitHub
+The current package-index release baseline is `v1.3.1`, with pinned package
+install spec `code-mower==1.3.1`. Release evidence is recorded on the GitHub
 release and in the first-user install rehearsal. The public repository is
 [codemower-ai/code-mower](https://github.com/codemower-ai/code-mower), and
 GitHub releases remain the auditable source for tags, build artifacts, and
@@ -652,6 +652,8 @@ first so local work exercises the same package entrypoint users install.
 - [v1.3.0 Release Notes](docs/v130-release-notes.md)
 - [Optional Coworker Setup](docs/context-setup.md)
 - [Context Qualification and Limits](docs/v130-context-qualification.md)
+- [v1.3.1 Guided Context Release Notes](docs/v131-release-notes.md)
+- [v1.3.1 Guided Context Qualification](docs/v131-guided-context-qualification.md)
 - [Post-v0.8 Effectiveness Assessment](docs/post-v08-effectiveness-assessment.md)
 - [v1.0.1 Effectiveness Assessment](docs/v101-effectiveness-assessment.md)
 

{code_mower-1.3.0 → code_mower-1.3.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "code-mower"
-version = "1.3.0"
+version = "1.3.1"
 description = "Multi-reviewer AI code audit orchestration"
 requires-python = ">=3.12"
 readme = "README.md"

{code_mower-1.3.0 → code_mower-1.3.1}/src/code_mower/__init__.py

@@ -1,3 +1,3 @@
 """Code Mower package."""
 
-__version__ = "1.3.0"
+__version__ = "1.3.1"

{code_mower-1.3.0 → code_mower-1.3.1}/src/code_mower/context_delivery.py

@@ -83,18 +83,31 @@ def _packet_for_binding(store, binding, recipient, *, backend=None):
     return packet
 
 
-def attach(store, name, handle, policy, request: ContextRequest, *, pr, head, publish, backend=None):
-    """Publish a new input revision before any participant can use that binding.
+def reserve_attachment(
+    store,
+    name,
+    handle,
+    policy,
+    request: ContextRequest,
+    *,
+    pr,
+    head,
+    revision=None,
+    backend=None,
+):
+    """Reserve one unpublished binding before any remote publication.
 
-    ``publish`` is a trusted runtime callback for the selected repository/PR,
-    never provider code. A failed publication leaves the local binding unusable.
+    A caller-supplied revision lets a guided session persist its intent before
+    touching GitHub and resume that exact intent after a crash. Repeating the
+    same reservation is idempotent; a conflicting reuse fails closed.
     """
     if request.recipient not in SUPPORTED_RECIPIENTS or not request.recipient.endswith(":orchestrator"):
         raise ContextError("an approved orchestrator must attach context")
     policy = normalize_policy(policy)
     packet = load_authorized(store, name, handle, policy, request, backend=backend)
     payload = packet.private_payload()
-    revision = uuid.uuid4().hex
+    revision = revision or uuid.uuid4().hex
+    _handle(revision)
     metadata = context_review.validate({"revision": revision, "head": head, "required": policy["required"],
         "state": "available", "expires_at": payload["binding"]["expires_at"]})
     render_evidence(packet, handle)
@@ -107,30 +120,99 @@ def attach(store, name, handle, policy, request: ContextRequest, *, pr, head, pu
         if entry is None or entry["reference"] is None or entry["reference"]["sha256"] != packet.sha256:
             raise ContextError("context packet was replaced before attachment")
         deliveries = entry.setdefault("deliveries", [])
-        if len(deliveries) >= 8:
-            raise ContextError("context packet delivery limit reached; refresh the work item")
         binding = _binding({"schema": SCHEMA, "revision": revision, "connection": name,
             "repository": request.repository, "work_item": request.work_item, "pr": pr, "handle": handle,
             "policy": policy, "packet_sha256": packet.sha256, "metadata": metadata,
             "published": False, "feedback": {}})
         artifact = locked.artifact("d-" + revision)
-        deliveries.append(revision)
-        index_file.write(index)
-        artifact.write(binding)
-        try:
-            publish(metadata)
-        except Exception:
-            # Even an uncertain remote post must not enable delivery. Reclaim
-            # the unpublished local slot so a transient outage cannot exhaust
-            # the packet's bounded handoff capacity.
-            deliveries.remove(revision)
+        existing = artifact.read()
+        if existing is not None:
+            saved = _binding(existing)
+            comparable = {**saved, "published": False, "feedback": {}}
+            if comparable != binding:
+                raise ContextError("context attachment revision is already bound to different input")
+            if revision not in deliveries:
+                if len(deliveries) >= 8:
+                    raise ContextError("context packet delivery limit reached; refresh the work item")
+                deliveries.append(revision)
+                index_file.write(index)
+            return saved["metadata"]
+        if revision not in deliveries:
+            if len(deliveries) >= 8:
+                raise ContextError("context packet delivery limit reached; refresh the work item")
+            deliveries.append(revision)
             index_file.write(index)
-            artifact.delete()
-            raise
-        artifact.write({**binding, "published": True})
+        artifact.write(binding)
         return metadata
 
 
+def mark_published(store, name, revision):
+    """Enable a reserved binding only after its exact metadata is public."""
+    _handle(revision)
+    with store.locked(name) as locked:
+        artifact = locked.artifact("d-" + revision)
+        binding = _binding(artifact.read())
+        if binding["connection"] != name:
+            raise ContextError("context attachment connection does not match its binding")
+        if not binding["published"]:
+            artifact.write({**binding, "published": True})
+        return binding["metadata"]
+
+
+def _remove_attachment(store, name, handle, revision, *, published):
+    _handle(handle)
+    _handle(revision)
+    with store.locked(name) as locked:
+        index_file, index = _index(locked)
+        entry = next((item for item in index["entries"] if item["handle"] == handle), None)
+        artifact = locked.artifact("d-" + revision)
+        saved = artifact.read()
+        if saved is None:
+            if entry is not None and revision in entry.setdefault("deliveries", []):
+                entry["deliveries"].remove(revision)
+                index_file.write(index)
+            return
+        binding = _binding(saved)
+        if binding["published"] and not published:
+            raise ContextError("published context attachment cannot be abandoned")
+        if entry is None or revision not in entry.setdefault("deliveries", []):
+            raise ContextError("context attachment index is inconsistent")
+        entry["deliveries"].remove(revision)
+        index_file.write(index)
+        artifact.delete()
+
+
+def abandon_attachment(store, name, handle, revision):
+    """Remove an unpublished reservation after a known pre-publication failure."""
+    _remove_attachment(store, name, handle, revision, published=False)
+
+
+def retire_attachment(store, name, handle, revision):
+    """Remove a binding after its PR head is authoritatively no longer current."""
+    _remove_attachment(store, name, handle, revision, published=True)
+
+
+def attach(store, name, handle, policy, request: ContextRequest, *, pr, head, publish, backend=None):
+    """Publish a new input revision before any participant can use that binding.
+
+    ``publish`` is a trusted runtime callback for the selected repository/PR,
+    never provider code. A failed publication leaves the local binding unusable.
+    """
+    metadata = reserve_attachment(
+        store, name, handle, policy, request, pr=pr, head=head, backend=backend,
+    )
+    revision = metadata["revision"]
+    try:
+        publish(metadata)
+    except Exception:
+        # Even an uncertain remote post must not enable delivery. Preserve the
+        # expert command's historical retry behavior; guided sessions use the
+        # lower-level primitives and retain their fixed intent for reconciliation.
+        abandon_attachment(store, name, handle, revision)
+        raise
+    return mark_published(store, name, revision)
+
+
 @dataclass(frozen=True)
 class Delivery:
     metadata: dict
@@ -140,6 +222,10 @@ class Delivery:
 
 def deliver(store, revision, *, repository, pr, head, recipient, current, backend=None):
     binding = read_binding(store, revision)
+    try:
+        current = context_review.validate(dict(current))
+    except (TypeError, ValueError):
+        raise ContextError("no trusted current context input is declared") from None
     if (not binding["published"] or binding["repository"] != repository or binding["pr"] != pr
             or binding["metadata"] != current or current["head"] != head):
         raise ContextError("context input is missing, unpublished, or no longer current")