core-runtime 2.9.0__tar.gz → 2.9.1__tar.gz

{core_runtime-2.9.0 → core_runtime-2.9.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: core-runtime
-Version: 2.9.0
+Version: 2.9.1
 Summary: CORE: executable constitutional governance for AI-assisted software development.
 License-Expression: MIT
 License-File: LICENSE

{core_runtime-2.9.0 → core_runtime-2.9.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "poetry.core.masonry.api"
 
 [project]
 name = "core-runtime"
-version = "2.9.0"
+version = "2.9.1"
 description = "CORE: executable constitutional governance for AI-assisted software development."
 authors = [
     { name = "Dariusz Newecki", email = "d.newecki@gmail.com" },

{core_runtime-2.9.0 → core_runtime-2.9.1}/src/api/cli/client.py

@@ -21,6 +21,7 @@ to avoid collision with the existing `audit()` method.
 from __future__ import annotations
 
 import asyncio
+import os
 from typing import Any
 
 import httpx
@@ -58,10 +59,16 @@ class CoreApiClient:
     Internally a facade over namespace sub-clients (see module docstring).
     Existing flat methods are preserved as delegating shims for
     backwards-compatible call sites.
+
+    Base URL resolution order: explicit `base_url` argument, then the
+    `CORE_API_URL` environment variable, then the loopback default. Every
+    call site in this codebase constructs `CoreApiClient()` with no
+    argument, so `CORE_API_URL` is the only way to point the CLI at a
+    non-default host without an argument-plumbing change.
     """
 
     def __init__(self, base_url: str | None = None) -> None:
-        self.base_url = base_url or _DEFAULT_BASE_URL
+        self.base_url = base_url or os.environ.get("CORE_API_URL") or _DEFAULT_BASE_URL
         self.timeout = _DEFAULT_TIMEOUT_SECONDS
         self.audits = AuditClient(self)
         self.fix = FixClient(self)

{core_runtime-2.9.0 → core_runtime-2.9.1}/src/api/v1/project_routes.py

@@ -21,6 +21,7 @@ from __future__ import annotations
 
 from pathlib import Path
 
+import typer
 from fastapi import APIRouter, Depends, HTTPException, Request
 from pydantic import BaseModel
 from sqlalchemy.ext.asyncio import AsyncSession
@@ -90,7 +91,13 @@ async def onboard_project(body: OnboardRequest, request: Request) -> dict:
     from examples/starter-intent/.intent/ into <path>/.intent/. Dry-run by default.
     Pass write=true to apply; pass stage=true with write=true to stage for inspection.
 
-    Assumes the CORE API and the caller share the same filesystem.
+    Requires the caller and the CORE API to be co-located on the same host/
+    filesystem: `path` is resolved and written on the API host, not the
+    caller's machine. This is not a convenience assumption but a consequence
+    of ADR-054 D3 (core-api is loopback-bound, single-operator, no auth) —
+    a remote consumer CLI (ADR-146 D2) cannot safely direct writes to an
+    arbitrary server-side path without authentication, which loopback-only
+    Phase 1 does not provide. See F-1, `.specs/planning/CORE-CLI-2.9.0-Followups.md`.
     """
     from cli.logic.byor import _stage_dir_for, initialize_repository
 
@@ -116,7 +123,11 @@ async def onboard_project(body: OnboardRequest, request: Request) -> dict:
             dry_run=not body.write,
             stage_dir=stage_dir,
         )
-    except SystemExit as exc:
+    except (SystemExit, typer.Exit) as exc:
+        # typer.Exit is click.exceptions.Exit -> RuntimeError -> Exception, NOT
+        # SystemExit (Typer 0.16), despite the name — byor.py's known failure
+        # modes all raise typer.Exit, so catching SystemExit alone here silently
+        # let every one of them fall through to the 500 branch below.
         raise HTTPException(
             status_code=400, detail="Onboard failed — check CORE logs."
         ) from exc
@@ -139,6 +150,10 @@ async def promote_onboard(body: PromoteRequest, request: Request) -> dict:
 
     Reads from work/staged/<name>/.intent/ and writes to <path>/.intent/.
     Run POST /project/onboard with write=true and stage=true first.
+
+    Requires the caller and the CORE API to be co-located on the same host/
+    filesystem — same constraint as POST /project/onboard; see that docstring
+    and F-1 in `.specs/planning/CORE-CLI-2.9.0-Followups.md`.
     """
     from cli.logic.byor import promote_staged
 
@@ -146,7 +161,7 @@ async def promote_onboard(body: PromoteRequest, request: Request) -> dict:
     target_path = Path(body.path).resolve()
     try:
         await promote_staged(context=core_context, path=target_path)
-    except SystemExit as exc:
+    except (SystemExit, typer.Exit) as exc:
         raise HTTPException(
             status_code=400, detail="Promote failed — check CORE logs."
         ) from exc

{core_runtime-2.9.0 → core_runtime-2.9.1}/src/cli/logic/byor.py

@@ -118,7 +118,16 @@ async def initialize_repository(
     else:
         dest_root = target_root
         target_intent = target_root / ".intent"
-        if target_intent.exists():
+        try:
+            target_intent_exists = target_intent.exists()
+        except OSError as exc:
+            logger.error(
+                "Target path not accessible on the CORE host: %s (%s)",
+                target_intent,
+                exc,
+            )
+            raise typer.Exit(code=1) from exc
+        if target_intent_exists:
             logger.error(
                 "Target already has a constitution at %s. CORE will not overwrite an "
                 "existing .intent/. Remove it first if you intend to re-scaffold.",
@@ -156,8 +165,14 @@ async def initialize_repository(
         rel = src.relative_to(starter_dir)
         dest = dest_root / ".intent" / rel
         if write:
-            dest.parent.mkdir(parents=True, exist_ok=True)
-            shutil.copy2(src, dest)
+            try:
+                dest.parent.mkdir(parents=True, exist_ok=True)
+                shutil.copy2(src, dest)
+            except OSError as exc:
+                logger.error(
+                    "Target path not accessible on the CORE host: %s (%s)", dest, exc
+                )
+                raise typer.Exit(code=1) from exc
             if not dest.is_file():
                 logger.error("   ❌ not delivered: %s", rel)
                 continue
@@ -234,7 +249,14 @@ async def promote_staged(context: CoreContext, path: Path) -> None:
 
     # ADR-111 D3 / ADR-123 D2: same overwrite guard as the direct write path.
     target_intent = target_root / ".intent"
-    if target_intent.exists():
+    try:
+        target_intent_exists = target_intent.exists()
+    except OSError as exc:
+        logger.error(
+            "Target path not accessible on the CORE host: %s (%s)", target_intent, exc
+        )
+        raise typer.Exit(code=1) from exc
+    if target_intent_exists:
         logger.error(
             "Target already has a constitution at %s. "
             "CORE will not overwrite an existing .intent/. "
@@ -254,8 +276,14 @@ async def promote_staged(context: CoreContext, path: Path) -> None:
     for src in source_files:
         rel = src.relative_to(stage_intent)
         dest = target_intent / rel
-        dest.parent.mkdir(parents=True, exist_ok=True)
-        shutil.copy2(src, dest)
+        try:
+            dest.parent.mkdir(parents=True, exist_ok=True)
+            shutil.copy2(src, dest)
+        except OSError as exc:
+            logger.error(
+                "Target path not accessible on the CORE host: %s (%s)", dest, exc
+            )
+            raise typer.Exit(code=1) from exc
         if not dest.is_file():
             logger.error("   ❌ not delivered: %s", rel)
             continue