core-runtime 2.14.3__tar.gz → 2.14.4__tar.gz

{core_runtime-2.14.3 → core_runtime-2.14.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: core-runtime
-Version: 2.14.3
+Version: 2.14.4
 Summary: CORE: executable constitutional governance for AI-assisted software development.
 License-Expression: MIT
 License-File: LICENSE
@@ -58,10 +58,10 @@ Description-Content-Type: text/markdown
 > **Executable constitutional governance for AI-assisted software development.**
 
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
-[![Release](https://img.shields.io/badge/Release-v2.14.3-blue)](https://github.com/DariuszNewecki/CORE/releases)
+[![Release](https://img.shields.io/badge/Release-v2.14.4-blue)](https://github.com/DariuszNewecki/CORE/releases)
 [![Docs](https://img.shields.io/badge/Docs-online-green)](https://dariusznewecki.github.io/CORE/)
 
-**Current Release:** v2.14.3 — see [CHANGELOG.md](CHANGELOG.md).
+**Current Release:** v2.14.4 — see [CHANGELOG.md](CHANGELOG.md).
 
 ## What CORE is
 
@@ -92,6 +92,14 @@ core-admin project adopt-pack core/starter-python --write
 core-admin code audit --offline
 ```
 
+Connect your AI assistant (Claude Code shown; any MCP client works) so it asks
+CORE about your project's rules and checks its change before committing; see
+[Connect your AI assistant](https://dariusznewecki.github.io/CORE/connect-an-assistant/):
+
+```bash
+claude mcp add --scope project core -- core-admin mcp run
+```
+
 A new project:
 
 ```bash

{core_runtime-2.14.3 → core_runtime-2.14.4}/README.md

@@ -3,10 +3,10 @@
 > **Executable constitutional governance for AI-assisted software development.**
 
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
-[![Release](https://img.shields.io/badge/Release-v2.14.3-blue)](https://github.com/DariuszNewecki/CORE/releases)
+[![Release](https://img.shields.io/badge/Release-v2.14.4-blue)](https://github.com/DariuszNewecki/CORE/releases)
 [![Docs](https://img.shields.io/badge/Docs-online-green)](https://dariusznewecki.github.io/CORE/)
 
-**Current Release:** v2.14.3 — see [CHANGELOG.md](CHANGELOG.md).
+**Current Release:** v2.14.4 — see [CHANGELOG.md](CHANGELOG.md).
 
 ## What CORE is
 
@@ -37,6 +37,14 @@ core-admin project adopt-pack core/starter-python --write
 core-admin code audit --offline
 ```
 
+Connect your AI assistant (Claude Code shown; any MCP client works) so it asks
+CORE about your project's rules and checks its change before committing; see
+[Connect your AI assistant](https://dariusznewecki.github.io/CORE/connect-an-assistant/):
+
+```bash
+claude mcp add --scope project core -- core-admin mcp run
+```
+
 A new project:
 
 ```bash

{core_runtime-2.14.3 → core_runtime-2.14.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "poetry.core.masonry.api"
 
 [project]
 name = "core-runtime"
-version = "2.14.3"
+version = "2.14.4"
 description = "CORE: executable constitutional governance for AI-assisted software development."
 authors = [
     { name = "Dariusz Newecki", email = "d.newecki@gmail.com" },

{core_runtime-2.14.3 → core_runtime-2.14.4}/src/body/services/outside_write_ledger.py

@@ -127,7 +127,8 @@ class OutsideWriteLog:
         ledger to require: the writes proceed and are reported unrecorded.
         """
         if not database_is_configured():
-            logger.warning(
+            # Standalone by design: debug, not a warning on every write (#1028).
+            logger.debug(
                 "outside-write ledger: no CORE database is configured "
                 "(standalone install); %s will write under %s WITHOUT a "
                 "ledger record (ADR-169 D5 applies to installations with a "
@@ -155,14 +156,16 @@ class OutsideWriteLog:
 
         Raises OutsideWritesUnrecorded, naming every path, when the ledger
         cannot be reached; the entries stay on the log, never dropped. With no
-        CORE database configured, logs the unrecorded paths and clears them.
+        CORE database configured, logs the unrecorded paths (debug) and clears them.
         """
         if not self.entries:
             return
         entries = list(self.entries)
         root = Path(self.target_root).resolve().as_posix()
         if not database_is_configured():
-            logger.warning(
+            # A standalone install has no ledger by design: the paths are kept
+            # in the debug log, not shown as a warning on every write (#1028).
+            logger.debug(
                 "outside-write ledger: %d write(s) by %s under %s not recorded "
                 "-- no CORE database is configured (standalone install): %s",
                 len(entries),

{core_runtime-2.14.3 → core_runtime-2.14.4}/src/cli/admin_cli.py

@@ -10,8 +10,24 @@ UNIX Philosophy: CLI provides atomic resource actions; Makefile composes them.
 
 from __future__ import annotations
 
+import os
 import sys
 
+
+# #1021 (proof run): every command printed the runtime's INFO logs (intent
+# validation, git service, rule extraction ...) around its own output. A
+# person or an assistant running core-admin sees warnings and errors only,
+# unless LOG_LEVEL says otherwise; set before shared.logger configures the
+# root logger at import. Only for this process's own invocation (core-admin
+# or `python -m cli.admin_cli`), and never for the daemon, whose level comes
+# from core.env.
+if (
+    "LOG_LEVEL" not in os.environ
+    and os.path.basename(sys.argv[0]) in {"core-admin", "admin_cli.py"}
+    and sys.argv[1:3] != ["daemon", "start"]
+):
+    os.environ["LOG_LEVEL"] = "WARNING"
+
 from cli.runtime_external_run import matches_route as matches_external_run
 from cli.runtime_external_run import run as run_external_run
 from cli.runtime_external_verify import matches_route
@@ -79,7 +95,7 @@ from shared.infrastructure.intent.errors import GovernanceError
 console = Console()
 app = typer.Typer(
     name="core-admin",
-    help="CORE: The Self-Improving System Architect's Toolkit.",
+    help="CORE: executable constitutional governance for AI-assisted software development.",
     no_args_is_help=False,
 )
 

{core_runtime-2.14.3 → core_runtime-2.14.4}/src/cli/logic/assistant_tools.py

@@ -78,6 +78,13 @@ async def _law_rule(repo_root: Path, arguments: dict[str, Any]) -> dict[str, Any
     return LawFacts(repo_root).rule(_text(arguments, "rule_id")).as_dict()
 
 
+async def _law_rules(repo_root: Path, arguments: dict[str, Any]) -> dict[str, Any]:
+    match = arguments.get("match")
+    if match is not None and not isinstance(match, str):
+        raise ToolInputError("'match' must be a string when given.")
+    return LawFacts(repo_root).rules(match or None).as_dict()
+
+
 async def _law_can_write(repo_root: Path, arguments: dict[str, Any]) -> dict[str, Any]:
     return LawFacts(repo_root).can_write(_text(arguments, "path")).as_dict()
 
@@ -229,6 +236,21 @@ TOOLS: dict[str, AssistantTool] = {
             },
             handler=_law_can_write,
         ),
+        AssistantTool(
+            name="law_rules",
+            description=(
+                "Every rule declared in this project: id, enforcement (blocking, "
+                "reporting ...), a one-line statement, the engine and check that "
+                "run it, and its file. Optional 'match': a rule-id prefix (e.g. "
+                "'starter.') or a pack id (e.g. 'core/starter-python')."
+            ),
+            input_schema={
+                "type": "object",
+                "properties": {"match": _STRING},
+                "additionalProperties": False,
+            },
+            handler=_law_rules,
+        ),
         AssistantTool(
             name="decision_adr",
             description=(
@@ -261,7 +283,8 @@ TOOLS: dict[str, AssistantTool] = {
             description=(
                 "Fast verdict on the current change (every path that differs from "
                 "HEAD, or the given files): BLOCKED, CLEAR_IN_SCOPE, NO_CHANGES or "
-                "NOT_EVALUATED (nothing could be judged; see 'error'), naming every "
+                "NOT_EVALUATED (nothing could be judged; see 'error'), naming the "
+                "rules it evaluated, the non-blocking findings in scope, and every "
                 "rule it did not evaluate. Producer feedback, never "
                 "PASS: the full audit (CI) stays authoritative."
             ),

{core_runtime-2.14.3 → core_runtime-2.14.4}/src/cli/logic/mcp_server.py

@@ -32,7 +32,8 @@ logger = getLogger(__name__)
 SERVER_NAME = "core"
 
 _INSTRUCTIONS = (
-    "CORE governs this repository. Ask it before you guess: law_rule and "
+    "CORE governs this repository. Ask it before you guess: law_rules lists "
+    "the rules in force; law_rule and "
     "law_can_write answer from the repository's law, decision_adr and "
     "decision_adrs from its decision history, each with its sources and its "
     "limits. Before committing, call change_verdict on your change: BLOCKED "

{core_runtime-2.14.3 → core_runtime-2.14.4}/src/cli/resources/code/audit.py

@@ -436,6 +436,18 @@ def _render_text_summary(
                 f"  [yellow]{entry.get('rule_id')}[/yellow] "
                 f"[dim]({entry.get('engine')}) — {entry.get('reason')}[/dim]"
             )
+    # #1027: law drift is why a verdict is DEGRADED; its findings are MEDIUM
+    # and fall below the default --severity, so name it next to the verdict.
+    law = result.get("law_state") or {}
+    if law.get("relationship") in {"DRIFT", "UNKNOWN"}:
+        reason = law.get("reason") or (
+            f"{len(law.get('drift_paths') or [])} file(s) under .intent/ differ "
+            "from the last commit; commit or revert them"
+        )
+        console.print(
+            "[bold yellow]Law not committed (verdict DEGRADED, not PASS):"
+            f"[/bold yellow] {reason}, then audit again."
+        )
     if skipped:
         console.print(
             f"[dim]Skipped {len(skipped)} rule(s) "

{core_runtime-2.14.3 → core_runtime-2.14.4}/src/cli/resources/law/commands.py

@@ -1,9 +1,9 @@
 # src/cli/resources/law/commands.py
 
-"""``core-admin law show`` / ``law check`` — law answers with provenance (ADR-168 D4.3).
+"""``core-admin law show`` / ``law list`` / ``law check`` — law answers with provenance (ADR-168 D4.3).
 
 Read-only and service-free: no database, no LLM. Output is the same JSON the
-MCP tools ``law_rule`` and ``law_can_write`` return.
+MCP tools ``law_rule``, ``law_rules`` and ``law_can_write`` return.
 """
 
 from __future__ import annotations
@@ -47,6 +47,31 @@ async def law_show(
     await run_tool("law_rule", {"rule_id": rule_id})
 
 
+@app.command("list")
+@command_meta(
+    canonical_name="law.list",
+    behavior=CommandBehavior.READ,
+    layer=CommandLayer.MIND,
+    exposure=CommandExposure.USER_FACING,
+    summary="Every declared rule: id, enforcement, statement, engine, file.",
+)
+@core_command(dangerous=False, requires_context=False, requires_brain_services=False)
+# ID: 3f13a957-a7b4-4f27-8fb1-606965b9d3c0
+async def law_list(
+    ctx: typer.Context,
+    match: str = typer.Argument(
+        None, help="Rule-id prefix (starter.) or pack id (core/starter-python)."
+    ),
+) -> None:
+    """
+    List the rules declared in this repository: id, enforcement, a one-line
+    statement, the engine and check that run it, and the file.
+
+    Example: core-admin law list core/starter-python
+    """
+    await run_tool("law_rules", {"match": match} if match else {})
+
+
 @app.command("check")
 @command_meta(
     canonical_name="law.check",

{core_runtime-2.14.3 → core_runtime-2.14.4}/src/cli/resources/mcp/run.py

@@ -50,8 +50,10 @@ async def mcp_run(
 ) -> None:
     """
     Serve the assistant surface over stdio for one project. Every tool only
-    reads; none can act as the governor. The assistant starts this itself;
-    see docs/connect-an-assistant.md for the configuration.
+    reads except validate_change and submit_change, which ask a running CORE
+    to check a change and record it as a pending proposal. None can act as
+    the governor. The assistant starts this itself; configuration:
+    https://dariusznewecki.github.io/CORE/connect-an-assistant/
 
     Example: claude mcp add --scope project core -- core-admin mcp run
     """

{core_runtime-2.14.3 → core_runtime-2.14.4}/src/cli/resources/project/adopt_pack.py

@@ -263,8 +263,10 @@ async def adopt_pack_command(
         console.print(f"  Updated {tree_yaml.name}: packs: section")
 
     console.print(
-        "\n[bold green]Pack applied.[/bold green] "
-        "Run 'core-admin code audit --offline' to see findings."
+        "\n[bold green]Pack applied.[/bold green] Commit .intent/ "
+        "('git add .intent && git commit'), then run "
+        "'core-admin code audit --offline' to see findings: until the law is "
+        "committed the verdict is DEGRADED."
     )
 
 

{core_runtime-2.14.3 → core_runtime-2.14.4}/src/cli/resources/project/init.py

@@ -76,5 +76,6 @@ async def init_project_command(
     )
     console.print(
         "Next: [cyan]core-admin project adopt-pack core/starter-python --write[/cyan], "
-        "then [cyan]core-admin code audit --offline[/cyan]."
+        "commit .intent/ ([cyan]git add .intent && git commit[/cyan]), then "
+        "[cyan]core-admin code audit --offline[/cyan]."
     )

{core_runtime-2.14.3 → core_runtime-2.14.4}/src/mind/governance/fast_verdict.py

@@ -13,6 +13,8 @@ What it does:
   included, or an explicit file list.
 - **Per-file rules** run on the files in scope, through the same stateless
   audit the offline gate uses, so the rules and their findings are identical.
+- **What was evaluated is named** (``evaluated``), with the non-blocking
+  findings in scope (``other_findings``), so "clear" is checkable (#1030).
 - **Everything not evaluated is named**: whole-repository (context-level)
   rules, which a file-scoped run cannot evaluate; rules that need services;
   rules that failed; checks that reported themselves unavailable.
@@ -37,6 +39,7 @@ from mind.governance.stateless_audit import run_stateless_audit
 from shared.infrastructure.git_service import GitService
 from shared.infrastructure.intent.errors import GovernanceError
 from shared.infrastructure.intent.intent_repository import IntentRepository
+from shared.infrastructure.intent.law_state import LAW_DRIFT_CHECK_ID
 from shared.logger import getLogger
 from shared.models.audit_rendering import NOT_EVALUATED_FINDING_TYPES
 
@@ -76,6 +79,8 @@ async def run_fast_verdict(
             "note": _AUTHORITY_NOTE,
             "scope": {"files": [], "removed": removed},
             "blocking": [],
+            "other_findings": [],
+            "evaluated": [],
             "not_evaluated": {},
         }
 
@@ -88,6 +93,15 @@ async def run_fast_verdict(
         for f in findings
         if str(f.get("severity", "")).lower() in _BLOCKING and not _not_evaluated(f)
     ]
+    # #1030 (proof run): CLEAR_IN_SCOPE did not say which rules were checked,
+    # and reporting findings in scope (no_print ...) were not shown at all.
+    other_findings = [
+        _finding_summary(f) | {"severity": str(f.get("severity", "")).lower()}
+        for f in findings
+        if str(f.get("severity", "")).lower() not in _BLOCKING
+        and not _not_evaluated(f)
+        and f.get("check_id") != LAW_DRIFT_CHECK_ID
+    ]
     unavailable = sorted(
         {
             str(f.get("check_id"))
@@ -126,6 +140,8 @@ async def run_fast_verdict(
         "note": _AUTHORITY_NOTE,
         "scope": {"files": in_scope, "removed": removed},
         "blocking": blocking,
+        "other_findings": other_findings,
+        "evaluated": list(result.get("executed_rule_ids") or []),
         "not_evaluated": not_evaluated,
         "law": {
             "relationship": law.get("relationship"),

{core_runtime-2.14.3 → core_runtime-2.14.4}/src/mind/logic/engines/ast_gate/checks/purity_checks.py

@@ -238,6 +238,41 @@ class PurityChecks:
             if isinstance(n, ast.Call) and ASTHelpers.full_attr_name(n.func) == "print"
         ]
 
+    @staticmethod
+    # ID: 2660494b-950c-4548-b4e4-5caae2ba9f98
+    def check_no_swallowed_exceptions(tree: ast.AST) -> list[str]:
+        """A bare ``except:`` (any body), or ``except Exception``/``BaseException``
+        whose body only passes (#1026: the starter rule's regex missed a bare
+        ``except:`` with a body, and matched text in strings and comments)."""
+        violations: list[str] = []
+        for node in ast.walk(tree):
+            if not isinstance(node, ast.ExceptHandler):
+                continue
+            line = ASTHelpers.lineno(node)
+            if node.type is None:
+                violations.append(
+                    f"Line {line}: bare 'except:' catches everything; name the "
+                    "exception you expect."
+                )
+                continue
+            caught = node.type.id if isinstance(node.type, ast.Name) else ""
+            broad = caught in {"Exception", "BaseException"}
+            silent = all(
+                isinstance(stmt, ast.Pass)
+                or (
+                    isinstance(stmt, ast.Expr)
+                    and isinstance(stmt.value, ast.Constant)
+                    and stmt.value.value is Ellipsis
+                )
+                for stmt in node.body
+            )
+            if broad and silent:
+                violations.append(
+                    f"Line {line}: 'except {caught}' that only passes "
+                    "swallows the error; name the exception and handle it."
+                )
+        return violations
+
     @staticmethod
     # ID: ca48084e-0a5b-4120-803f-dfc425f3a269
     def check_required_decorator(

{core_runtime-2.14.3 → core_runtime-2.14.4}/src/mind/logic/engines/ast_gate/engine.py

@@ -103,6 +103,7 @@ class ASTGateEngine(BaseEngine):
             "no_module_level_async_engine",
             "no_task_return_from_sync_cli",
             "no_print_statements",
+            "no_swallowed_exceptions",
             "test_file_naming",
             "max_file_lines",
             "max_function_length",
@@ -387,6 +388,8 @@ class ASTGateEngine(BaseEngine):
 
         elif check_type == "no_print_statements":
             violations.extend(PurityChecks.check_no_print_statements(tree))
+        elif check_type == "no_swallowed_exceptions":
+            violations.extend(PurityChecks.check_no_swallowed_exceptions(tree))
 
         elif check_type == "tempfile_default_dir":
             violations.extend(PurityChecks.check_tempfile_default_dir(tree))

{core_runtime-2.14.3 → core_runtime-2.14.4}/src/shared/_packs/python_hygiene.yaml

@@ -1,6 +1,6 @@
 kind: governance_pack
 id: "core/python-hygiene"
-version: "1.0.0"
+version: "1.1.0"
 title: "Python Hygiene (Intermediate)"
 description: >
   Stricter baseline for teams that have outgrown the starter pack and want
@@ -97,12 +97,9 @@ rules:
 enforcement_mappings:
   # Inherited starter mappings (scope widened to **/*.py for any repo layout)
   starter.no_bare_except:
-    engine: regex_gate
+    engine: ast_gate
     params:
-      forbidden_patterns:
-        - "except:\\s*pass"
-        - "except Exception:\\s*pass"
-        - "except BaseException:\\s*pass"
+      check_type: no_swallowed_exceptions
     scope:
       applies_to: ["**/*.py"]
       excludes:

{core_runtime-2.14.3 → core_runtime-2.14.4}/src/shared/_packs/starter_python.yaml

@@ -1,6 +1,6 @@
 kind: governance_pack
 id: "core/starter-python"
-version: "1.0.0"
+version: "1.1.0"
 title: "Starter Python Hygiene"
 description: >
   Zero-friction baseline for any Python project. Four proven rules covering
@@ -64,12 +64,9 @@ rules:
 
 enforcement_mappings:
   starter.no_bare_except:
-    engine: regex_gate
+    engine: ast_gate
     params:
-      forbidden_patterns:
-        - "except:\\s*pass"
-        - "except Exception:\\s*pass"
-        - "except BaseException:\\s*pass"
+      check_type: no_swallowed_exceptions
     scope:
       applies_to: ["**/*.py"]
       excludes:

{core_runtime-2.14.3 → core_runtime-2.14.4}/src/shared/infrastructure/assistant_surface/law_facts.py

@@ -107,7 +107,10 @@ class LawFacts:
                 question,
                 UNKNOWN,
                 {"rule_id": rule_id, "declared": False},
-                limits=(f"No rule {rule_id!r} is declared in this repository's law.",),
+                limits=(
+                    f"No rule {rule_id!r} is declared in this repository's law.",
+                    "law_rules lists the declared rules, by id prefix or pack id.",
+                ),
             )
         content = ref.content
         mapping, mapping_path = self._mapping_for(rule_id)
@@ -126,6 +129,9 @@ class LawFacts:
             params = mapping.get("params") or {}
             answer["mechanism"] = {
                 "engine": mapping.get("engine"),
+                # The engine's own check (ast_gate check_type ...): what runs
+                # when no code path is named in enforced_by (#1031).
+                "check": params.get("check_type"),
                 "enforced_by": params.get("enforced_by"),
                 "note": _squash(params.get("enforcement_note")),
             }
@@ -134,6 +140,54 @@ class LawFacts:
             limits.append("No enforcement mapping names a mechanism for this rule.")
         return Answer(question, LAW, answer, tuple(sources), tuple(limits))
 
+    # ID: fe99bca9-7706-4a92-a850-9574af3462bc
+    def rules(self, match: str | None = None) -> Answer:
+        """Every declared rule: id, enforcement, a one-line statement, the
+        engine and check that run it, and its file. ``match`` keeps the rules
+        whose id starts with it, or whose rule file is that pack (a pack id
+        such as ``core/starter-python``). #1029: an assistant had no way to
+        ask which rules apply and read ``.intent/`` itself."""
+        question = "Which rules are declared" + (f" for {match}?" if match else "?")
+        pack_slug = match.replace("/", "_").replace("-", "_") if match else None
+        rows: list[dict[str, Any]] = []
+        files: set[str] = set()
+        for rule_id in sorted(self._intent.known_rule_ids()):
+            ref = self._intent.get_rule(rule_id)
+            rel = self._rel(ref.source_path)
+            if match and not (rule_id.startswith(match) or Path(rel).stem == pack_slug):
+                continue
+            mapping, _path = self._mapping_for(rule_id)
+            params = (mapping or {}).get("params") or {}
+            statement = _squash(ref.content.get("statement")) or ""
+            rows.append(
+                {
+                    "rule_id": rule_id,
+                    "enforcement": ref.content.get("enforcement"),
+                    "statement": statement[:200],
+                    "engine": (mapping or {}).get("engine"),
+                    "check": params.get("check_type"),
+                    "file": rel,
+                }
+            )
+            files.add(rel)
+        limits: list[str] = []
+        if not rows:
+            limits.append(
+                f"No declared rule matches {match!r}."
+                if match
+                else "This repository declares no rules."
+            )
+        limits.append(
+            "Statements are cut to 200 characters; law_rule gives the full rule."
+        )
+        return Answer(
+            question,
+            LAW if rows else UNKNOWN,
+            {"rules": rows, "count": len(rows)},
+            tuple(Source(f) for f in sorted(files)),
+            tuple(limits),
+        )
+
     # ID: 10a1ca3e-61c7-41d1-9c88-1f52dadc2d3e
     def can_write(self, path: str) -> Answer:
         """May a producer write ``path``? Answers in two parts, never collapsed

{core_runtime-2.14.3 → core_runtime-2.14.4}/src/shared/infrastructure/intent/law_state.py

@@ -92,6 +92,18 @@ def observe_law_state(intent_root: Path) -> LawState:
     try:
         head_sha = git.get_current_commit()
         record = git.ls_tree_blobs("HEAD", rel)
+        if not record:
+            # Law delivered but never committed (#1027: after `project init`
+            # and `adopt-pack`, every file was reported as drift, 31 findings).
+            # One known state, like a repository with no commit (#958).
+            return LawState(
+                relationship="UNKNOWN",
+                head_sha=head_sha,
+                reason=(
+                    f"{rel}/ is not committed yet, so there is no law of record; "
+                    f"commit {rel}/ to establish it"
+                ),
+            )
         evaluated = git.hash_working_paths(rel)
         record_digest = law_digest(record)
         evaluated_digest = law_digest(evaluated)