core-runtime 2.14.0__tar.gz → 2.14.2__tar.gz

{core_runtime-2.14.0 → core_runtime-2.14.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: core-runtime
-Version: 2.14.0
+Version: 2.14.2
 Summary: CORE: executable constitutional governance for AI-assisted software development.
 License-Expression: MIT
 License-File: LICENSE
@@ -60,7 +60,7 @@ Description-Content-Type: text/markdown
 > Designed for environments where AI action traceability is not optional.
 
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
-[![Release](https://img.shields.io/badge/Release-v2.14.0-blue)](https://github.com/DariuszNewecki/CORE/releases)
+[![Release](https://img.shields.io/badge/Release-v2.14.2-blue)](https://github.com/DariuszNewecki/CORE/releases)
 [![Docs](https://img.shields.io/badge/Docs-online-green)](https://dariusznewecki.github.io/CORE/)
 [![Autonomy](https://img.shields.io/badge/Autonomy-A3%20unproven-orange)](https://github.com/DariuszNewecki/CORE/blob/main/.specs/attestations/production-readiness.yaml)
 
@@ -448,7 +448,7 @@ CORE's tracker mixes governance-internal bookkeeping with ordinary engineering w
 
 ## Project Status
 
-**Current Release:** v2.14.0 — an assistant can propose a change and only the governor can let it land; law custody and the release runtime prepared, not yet active
+**Current Release:** v2.14.2 — law apply completes against the release law; an assistant can propose a change and only the governor can let it land
 
 Active work: A3 Governed Autonomy. The mechanism is built — the daemon runs continuously,
 finds constitutional violations in its own codebase, proposes fixes, routes them through the

{core_runtime-2.14.0 → core_runtime-2.14.2}/README.md

@@ -5,7 +5,7 @@
 > Designed for environments where AI action traceability is not optional.
 
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
-[![Release](https://img.shields.io/badge/Release-v2.14.0-blue)](https://github.com/DariuszNewecki/CORE/releases)
+[![Release](https://img.shields.io/badge/Release-v2.14.2-blue)](https://github.com/DariuszNewecki/CORE/releases)
 [![Docs](https://img.shields.io/badge/Docs-online-green)](https://dariusznewecki.github.io/CORE/)
 [![Autonomy](https://img.shields.io/badge/Autonomy-A3%20unproven-orange)](https://github.com/DariuszNewecki/CORE/blob/main/.specs/attestations/production-readiness.yaml)
 
@@ -393,7 +393,7 @@ CORE's tracker mixes governance-internal bookkeeping with ordinary engineering w
 
 ## Project Status
 
-**Current Release:** v2.14.0 — an assistant can propose a change and only the governor can let it land; law custody and the release runtime prepared, not yet active
+**Current Release:** v2.14.2 — law apply completes against the release law; an assistant can propose a change and only the governor can let it land
 
 Active work: A3 Governed Autonomy. The mechanism is built — the daemon runs continuously,
 finds constitutional violations in its own codebase, proposes fixes, routes them through the

{core_runtime-2.14.0 → core_runtime-2.14.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "poetry.core.masonry.api"
 
 [project]
 name = "core-runtime"
-version = "2.14.0"
+version = "2.14.2"
 description = "CORE: executable constitutional governance for AI-assisted software development."
 authors = [
     { name = "Dariusz Newecki", email = "d.newecki@gmail.com" },

{core_runtime-2.14.0 → core_runtime-2.14.2}/src/body/governance/law_custody/writer.py

@@ -39,6 +39,8 @@ from body.governance.law_custody.proposal import LawProposal
 
 
 CUSTODIAN_ACCOUNT = "core-law"
+# What release law holds (ADR-132 D10.13); every destination after the first.
+RELEASE_LAW_TOPS = frozenset({".intent", ".specs"})
 # The scratch tree: governed text is copied (the proposal is applied on top of
 # the copy); every other top-level entry is linked read-only, because the law
 # references files anywhere in the repository (references_resolve: src/,
@@ -133,6 +135,20 @@ def _safe_target(root: Path, rel: str) -> Path:
 
 def _replace_atomically(target: Path, content: bytes) -> None:
     target.parent.mkdir(mode=0o755, parents=True, exist_ok=True)
+    if (
+        target.is_file()
+        and not os.access(target.parent, os.W_OK)
+        and os.access(target, os.W_OK)
+    ):
+        # The repository root is root-owned and sticky (ADR-170 D2): core-law
+        # owns CLAUDE.md but cannot create a temp file beside it, so the file
+        # it owns is rewritten in place.
+        fd = os.open(target, os.O_WRONLY | os.O_TRUNC | os.O_NOFOLLOW)
+        with os.fdopen(fd, "wb") as handle:
+            handle.write(content)
+            handle.flush()
+            os.fsync(handle.fileno())
+        return
     temp = target.parent / f".{target.name}.law-apply.tmp"
     fd = os.open(temp, os.O_WRONLY | os.O_CREAT | os.O_TRUNC | os.O_NOFOLLOW, 0o644)
     try:
@@ -209,22 +225,32 @@ def write_destinations(
 ) -> list[DestinationOutcome]:
     """Write the proposal's in-memory bytes to every destination, in order.
 
+    The first destination is the development tree and receives every path.
+    The others are release law (ADR-132 D10.13): they hold only ``.intent/``
+    and ``.specs/``, so ``CLAUDE.md`` and ``.claude/`` are not theirs.
+
     Stops at the first failure; the outcomes say which destination holds
     which bytes. No ledger line is written here.
     """
     if current_account() != custodian:
         raise CustodyError(f"governed text is written only as {custodian}")
     outcomes: list[DestinationOutcome] = []
-    for root in destinations:
+    for index, root in enumerate(destinations):
         outcome = DestinationOutcome(root=root)
         outcomes.append(outcome)
+        release = index > 0
+
         try:
             if not root.is_dir() or root.is_symlink():
                 raise OSError(f"destination is not a directory: {root}")
             for proposed in proposal.files:
+                if release and Path(proposed.path).parts[0] not in RELEASE_LAW_TOPS:
+                    continue
                 _replace_atomically(_safe_target(root, proposed.path), proposed.content)
                 outcome.written.append(proposed.path)
             for rel in proposal.removals:
+                if release and Path(rel).parts[0] not in RELEASE_LAW_TOPS:
+                    continue
                 target = _safe_target(root, rel)
                 if target.exists():
                     if not stat.S_ISREG(os.lstat(target).st_mode):

{core_runtime-2.14.0 → core_runtime-2.14.2}/src/cli/resources/law/apply.py

@@ -150,6 +150,11 @@ async def law_apply(
         "--key",
         help="core-law's ledger signing key (default ~/.ssh/core_law_ledger).",
     ),
+    release_law: Path = typer.Option(
+        RELEASE_LAW_ROOT,
+        "--release-law",
+        help="The law beside the release runtime; a second destination when it exists.",
+    ),
     scratch: Path = typer.Option(
         None, "--scratch", help="Where the scratch tree is built (default ~/scratch)."
     ),
@@ -176,8 +181,8 @@ async def law_apply(
         raise typer.Exit(1)
     repo_root = (repo or get_repo_root(Path.cwd())).resolve()
     destinations = [repo_root]
-    if RELEASE_LAW_ROOT.is_dir():
-        destinations.append(RELEASE_LAW_ROOT)
+    if release_law.is_dir():
+        destinations.append(release_law)
     home = Path.home()
     try:
         prepared = prepare(

{core_runtime-2.14.0 → core_runtime-2.14.2}/src/shared/config.py

@@ -54,6 +54,24 @@ def _read_secrets_file() -> dict[str, str]:
     return {k: v for k, v in raw.items() if v is not None}
 
 
+# ID: 9faf1aed-8aee-4d7f-8797-c4cacba0979a
+def discover_law_root(start: Path | None = None) -> Path | None:
+    """The nearest directory, from ``start`` (default cwd) upward, holding a ``.intent/``.
+
+    A directory the process may not look into (a governor's home when
+    core-law is started there through sudo) is passed over, not fatal:
+    unreadable means it holds no law this process can use.
+    """
+    here = start or Path.cwd()
+    for candidate in [here, *here.parents]:
+        try:
+            if (candidate / ".intent").is_dir():
+                return candidate
+        except OSError as exc:
+            logger.debug("Cannot look into %s for .intent/: %s", candidate, exc)
+    return None
+
+
 # ID: e2f3a5b1-7c4d-4f8a-9d2e-1b6c8a3e4f9d
 def resolve_default_repo_path() -> Path:
     """Discover the repo root by walking up from cwd looking for ``.intent/``.
@@ -68,11 +86,8 @@ def resolve_default_repo_path() -> Path:
     for the F-10.3 incident this resolves; #545 promoted the helper to
     a public API so the engine-side intent loaders can share it.
     """
-    cwd = Path.cwd()
-    for candidate in [cwd, *cwd.parents]:
-        if (candidate / ".intent").is_dir():
-            return candidate
-    return REPO_ROOT
+    found = discover_law_root()
+    return found if found is not None else REPO_ROOT
 
 
 # ID: 67c68ee8-6e04-4eaf-8d41-bc79e3a4d15a
@@ -86,11 +101,9 @@ def resolve_default_mind_path() -> Path:
        before ``project onboard`` has run — allows ``core-admin`` to start and
        deliver the floor without a chicken-and-egg crash).
     """
-    cwd = Path.cwd()
-    for candidate in [cwd, *cwd.parents]:
-        intent = candidate / ".intent"
-        if intent.is_dir():
-            return intent
+    found = discover_law_root()
+    if found is not None:
+        return found / ".intent"
     # Source-tree: REPO_ROOT should have .intent/
     source_intent = REPO_ROOT / ".intent"
     if source_intent.is_dir():

{core_runtime-2.14.0 → core_runtime-2.14.2}/src/shared/infrastructure/intent/law_roots.py

@@ -95,12 +95,11 @@ def configured_repo_root() -> Path:
     REPO_PATH naming an external target therefore does not displace CORE's
     own law for a process started inside CORE's checkout.
     """
-    from shared.config import REPO_ROOT, settings
+    from shared.config import REPO_ROOT, discover_law_root, settings
 
-    cwd = Path.cwd()
-    for candidate in [cwd, *cwd.parents]:
-        if (candidate / ".intent").is_dir():
-            return candidate
+    found = discover_law_root()
+    if found is not None:
+        return found
     if "REPO_PATH" in settings.model_fields_set:
         return Path(settings.REPO_PATH)
     return REPO_ROOT