cuff-cli 0.1.0__tar.gz → 0.2.0__tar.gz

{cuff_cli-0.1.0 → cuff_cli-0.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cuff-cli
-Version: 0.1.0
+Version: 0.2.0
 Summary: Cuff subject-bound claim, evidence, and verification gate.
 Author: Fab7
 License-Expression: Apache-2.0
@@ -38,7 +38,7 @@ worktree, or stages, commits, fetches, pushes, releases, or deploys anything.
 Install a released version as a standard uv-managed tool:
 
 ```bash
-uv tool install cuff-cli==0.1.0
+uv tool install cuff-cli==0.2.0
 cuff --version
 ```
 
@@ -57,12 +57,12 @@ Run initialization at the exact Git worktree root:
 
 ```bash
 cuff init --json
-git add .cuff/project.json
+git add .fab7/cuff/project.json
 git commit -m "Initialize Cuff"
 ```
 
 The marker is exactly `{"schema":1}` and records live under
-`.cuff/records/`. An incompatible marker is never rewritten or migrated.
+`.fab7/cuff/records/`. An incompatible marker is never rewritten or migrated.
 
 The preferred path atomically appends a claim and its observed evidence:
 
@@ -123,19 +123,36 @@ spend, or residual-risk authority.
 
 ## Static host integrations
 
-Small native assets live in [`plugins/claude/cuff`](plugins/claude/cuff) and
-[`plugins/codex/cuff`](plugins/codex/cuff). The corresponding host plugin
-manager owns their installation and removal. These assets require only the
-uv-managed `cuff` executable on `PATH`; Cuff itself does not install plugins.
+One native payload lives in [`plugins/cuff`](plugins/cuff) and contains both
+host manifests, Claude Code commands, and Codex skills. The shared
+`fab7hq/fab7` marketplace owns registration; this repository owns the payload.
+The assets require the uv-managed `cuff` executable on `PATH`.
 
 ```bash
 # Codex
-codex plugin marketplace add fab7hq/cuff --ref v0.1.0
-codex plugin add cuff@fab7hq
+codex plugin marketplace add fab7hq/fab7
+codex plugin add cuff@fab7
 
 # Claude Code
-claude plugin marketplace add fab7hq/cuff@v0.1.0
-claude plugin install cuff@fab7hq --scope user
+claude plugin marketplace add fab7hq/fab7
+claude plugin install cuff@fab7 --scope user
+```
+
+Validate the built candidate and both host payloads without touching the
+normal host configuration:
+
+```bash
+uv build --out-dir ../sandbox/cuff-01/dist
+uv run python tools/local_release_check.py --host all
+uv run python tools/local_release_check.py --host all --prepare-auth \
+  --candidate-commit COMMIT \
+  --evidence-dir ../sandbox/cuff-01/e2e
+# Log each CLI in using the isolated home paths printed by the prepare phase.
+uv run python tools/local_release_check.py --host all --live --reuse-prepared \
+  --candidate-commit COMMIT \
+  --evidence-dir ../sandbox/cuff-01/e2e \
+  --codex-model MODEL \
+  --claude-model MODEL
 ```
 
 See [RUNBOOK.md](RUNBOOK.md) for operations, [the architecture overview](docs/architecture/overview.md)

{cuff_cli-0.1.0 → cuff_cli-0.2.0}/README.md

@@ -27,7 +27,7 @@ worktree, or stages, commits, fetches, pushes, releases, or deploys anything.
 Install a released version as a standard uv-managed tool:
 
 ```bash
-uv tool install cuff-cli==0.1.0
+uv tool install cuff-cli==0.2.0
 cuff --version
 ```
 
@@ -46,12 +46,12 @@ Run initialization at the exact Git worktree root:
 
 ```bash
 cuff init --json
-git add .cuff/project.json
+git add .fab7/cuff/project.json
 git commit -m "Initialize Cuff"
 ```
 
 The marker is exactly `{"schema":1}` and records live under
-`.cuff/records/`. An incompatible marker is never rewritten or migrated.
+`.fab7/cuff/records/`. An incompatible marker is never rewritten or migrated.
 
 The preferred path atomically appends a claim and its observed evidence:
 
@@ -112,19 +112,36 @@ spend, or residual-risk authority.
 
 ## Static host integrations
 
-Small native assets live in [`plugins/claude/cuff`](plugins/claude/cuff) and
-[`plugins/codex/cuff`](plugins/codex/cuff). The corresponding host plugin
-manager owns their installation and removal. These assets require only the
-uv-managed `cuff` executable on `PATH`; Cuff itself does not install plugins.
+One native payload lives in [`plugins/cuff`](plugins/cuff) and contains both
+host manifests, Claude Code commands, and Codex skills. The shared
+`fab7hq/fab7` marketplace owns registration; this repository owns the payload.
+The assets require the uv-managed `cuff` executable on `PATH`.
 
 ```bash
 # Codex
-codex plugin marketplace add fab7hq/cuff --ref v0.1.0
-codex plugin add cuff@fab7hq
+codex plugin marketplace add fab7hq/fab7
+codex plugin add cuff@fab7
 
 # Claude Code
-claude plugin marketplace add fab7hq/cuff@v0.1.0
-claude plugin install cuff@fab7hq --scope user
+claude plugin marketplace add fab7hq/fab7
+claude plugin install cuff@fab7 --scope user
+```
+
+Validate the built candidate and both host payloads without touching the
+normal host configuration:
+
+```bash
+uv build --out-dir ../sandbox/cuff-01/dist
+uv run python tools/local_release_check.py --host all
+uv run python tools/local_release_check.py --host all --prepare-auth \
+  --candidate-commit COMMIT \
+  --evidence-dir ../sandbox/cuff-01/e2e
+# Log each CLI in using the isolated home paths printed by the prepare phase.
+uv run python tools/local_release_check.py --host all --live --reuse-prepared \
+  --candidate-commit COMMIT \
+  --evidence-dir ../sandbox/cuff-01/e2e \
+  --codex-model MODEL \
+  --claude-model MODEL
 ```
 
 See [RUNBOOK.md](RUNBOOK.md) for operations, [the architecture overview](docs/architecture/overview.md)

{cuff_cli-0.1.0 → cuff_cli-0.2.0}/core/cuff/__init__.py

@@ -1,4 +1,4 @@
 """Cuff's host-neutral claim and evidence gate."""
 
 __all__ = ["__version__"]
-__version__ = "0.1.0"
+__version__ = "0.2.0"

{cuff_cli-0.1.0 → cuff_cli-0.2.0}/core/cuff/cli.py

@@ -11,7 +11,7 @@ from typing import Any
 from . import __version__
 from .errors import CuffError
 from .gate import check
-from .ledger import append, create_claim, seal, verify
+from .ledger import append, create_claim, normalize_work_item, seal, verify
 from .subject import declared_subject, filesystem_subject
 from .workspace import find_workspace, initialize_workspace
 
@@ -137,13 +137,15 @@ def main(argv: list[str] | None = None) -> int:
     except KeyboardInterrupt:
         return 130
     except Exception as exc:
+        error = {"code": "CUFF_UNEXPECTED", "message": f"{type(exc).__name__}: {exc}"}
+        if getattr(args, "command", None) == "check":
+            data = _check_error(args, error)
+        else:
+            data = {"ok": False, "errors": [error]}
         if getattr(args, "json", False):
-            print(json.dumps({
-                "ok": False,
-                "errors": [{"code": "CUFF_UNEXPECTED", "message": f"{type(exc).__name__}: {exc}"}],
-            }, sort_keys=True, indent=2))
+            print(json.dumps(data, sort_keys=True, indent=2))
         else:
-            print(f"CUFF_UNEXPECTED: {type(exc).__name__}: {exc}", file=sys.stderr)
+            print(f"{error['code']}: {error['message']}", file=sys.stderr)
         return 3
     return 2
 
@@ -211,7 +213,11 @@ def _finish_result(args: argparse.Namespace, data: dict[str, Any], label: str) -
 
 
 def _finish_error(args: argparse.Namespace, error: CuffError) -> int:
-    data = {"ok": False, "errors": [error.to_dict()]}
+    data = (
+        _check_error(args, error.to_dict())
+        if getattr(args, "command", None) == "check"
+        else {"ok": False, "errors": [error.to_dict()]}
+    )
     if getattr(args, "json", False):
         print(json.dumps(data, sort_keys=True, indent=2))
     else:
@@ -219,6 +225,22 @@ def _finish_error(args: argparse.Namespace, error: CuffError) -> int:
     return 1
 
 
+def _check_error(args: argparse.Namespace, error: dict[str, Any]) -> dict[str, Any]:
+    work_item = getattr(args, "work_item", None)
+    try:
+        work_item = normalize_work_item(work_item)
+    except CuffError:
+        pass
+    return {
+        "ok": False,
+        "errors": [error],
+        "work_item": work_item,
+        "latest_claim": None,
+        "selected_evidence": None,
+        "record_count": 0,
+    }
+
+
 def _replay(content: bytes, stream: Any) -> None:
     if content:
         stream.write(content.decode(errors="replace"))

{cuff_cli-0.1.0 → cuff_cli-0.2.0}/core/cuff/gate.py

@@ -43,26 +43,54 @@ def check(
         _fail(result["errors"], "CUFF_CLAIM_MISSING", "No completion claim exists", work_item=normalized)
         return result
 
-    passing = [
+    linked = [
         record
         for record in records
         if record["type"] == "evidence"
         and record["claim"] == claim["id"]
-        and record["exit_code"] == 0
     ]
-    for evidence in reversed(passing):
-        if not _subject_fresh(root, claim):
-            break
-        if git_context is None or not _evidence_fresh(root, evidence, head, git_context):
-            continue
-        result["selected_evidence"] = evidence
-        result["ok"] = not result["errors"]
+    if not linked:
+        _fail(
+            result["errors"],
+            "CUFF_EVIDENCE_MISSING",
+            "Latest claim has no linked evidence",
+            work_item=normalized,
+            record_id=claim["id"],
+        )
+        return result
+
+    passing = [record for record in linked if record["exit_code"] == 0]
+    if not passing:
+        _fail(
+            result["errors"],
+            "CUFF_EVIDENCE_FAILED",
+            "Latest claim has linked evidence, but none passed",
+            work_item=normalized,
+            record_id=claim["id"],
+        )
+        return result
+
+    if not _subject_fresh(root, claim):
+        _fail(
+            result["errors"],
+            "CUFF_SUBJECT_STALE",
+            "Latest claim subject changed or cannot be recomputed",
+            work_item=normalized,
+            record_id=claim["id"],
+        )
         return result
 
+    if git_context is not None and not result["errors"]:
+        for evidence in reversed(passing):
+            if _evidence_fresh(root, evidence, head, git_context):
+                result["selected_evidence"] = evidence
+                result["ok"] = True
+                return result
+
     _fail(
         result["errors"],
-        "CUFF_EVIDENCE_MISSING",
-        "Latest claim has no fresh passing evidence",
+        "CUFF_EVIDENCE_STALE",
+        "Passing evidence no longer applies to the selected Git state",
         work_item=normalized,
         record_id=claim["id"],
     )

{cuff_cli-0.1.0 → cuff_cli-0.2.0}/core/cuff/ledger.py

@@ -21,7 +21,8 @@ from .errors import CuffError
 from .subject import SHA256_RE, current_subject, validate_subject
 
 
-RECORDS_DIR = ".cuff/records"
+STATE_DIR = ".fab7/cuff"
+RECORDS_DIR = ".fab7/cuff/records"
 WORK_ITEM_RE = re.compile(r"^[a-z0-9_.-]{1,120}$")
 RECORD_ID_RE = re.compile(r"^rec_[0-9a-f]{32}$")
 GIT_OID_RE = re.compile(r"^[0-9a-f]{40}(?:[0-9a-f]{24})?$")
@@ -91,7 +92,8 @@ def resolve_actor(explicit: str | None) -> str:
 
 def init(root: Path) -> Path:
     path = root / RECORDS_DIR
-    if (root / ".cuff").is_symlink() or path.is_symlink():
+    state = root / STATE_DIR
+    if state.parent.is_symlink() or state.is_symlink() or path.is_symlink():
         raise CuffError("CUFF_PATH_INVALID", "Cuff workspace directories must not be symlinks")
     path.mkdir(parents=True, exist_ok=True)
     read_all(root)
@@ -315,7 +317,7 @@ def validate_record(record: Any) -> None:
     if "git_ref" in record:
         raise CuffError(
             "CUFF_LEDGER_INVALID",
-            "Ledger schema is incompatible; archive or remove .cuff and run cuff init",
+            "Ledger schema is incompatible; archive or remove .fab7/cuff and run cuff init",
         )
     record_type = record.get("type")
     allowed = (

{cuff_cli-0.1.0 → cuff_cli-0.2.0}/core/cuff/subject.py

@@ -22,6 +22,7 @@ MAX_FILES = 10_000
 MAX_BYTES = 256 * 1024 * 1024
 MAX_DEPTH = 64
 MAX_NAME_BYTES = 255
+STATE_PARTS = (".fab7", "cuff")
 
 
 def declared_subject(kind: str, ref: str, digest: str) -> dict[str, str]:
@@ -107,7 +108,7 @@ def _bounded_target(workspace: Path, path: Path) -> tuple[Path, str]:
         relative = lexical.relative_to(workspace)
     except ValueError as exc:
         raise CuffError("CUFF_SUBJECT_PATH_INVALID", "Subject path escapes the workspace") from exc
-    if relative.parts[:1] == (".cuff",):
+    if relative.parts[:len(STATE_PARTS)] == STATE_PARTS:
         raise CuffError("CUFF_SUBJECT_PATH_INVALID", "Cuff controller state cannot be a subject")
     current = workspace
     for part in relative.parts:
@@ -143,7 +144,7 @@ def _tree_entries(workspace: Path, target: Path) -> list[dict[str, Any]]:
         for name in names:
             candidate = directory_path / name
             workspace_relative = candidate.relative_to(workspace)
-            if workspace_relative.parts[:1] == (".cuff",):
+            if workspace_relative.parts[:len(STATE_PARTS)] == STATE_PARTS:
                 continue
             directory_mode = candidate.stat(follow_symlinks=False).st_mode
             if stat.S_ISLNK(directory_mode):

{cuff_cli-0.1.0 → cuff_cli-0.2.0}/core/cuff/workspace.py

@@ -10,11 +10,11 @@ from typing import Any
 
 from . import git
 from .errors import CuffError
-from .ledger import RECORDS_DIR, init as init_records
+from .ledger import RECORDS_DIR, STATE_DIR, init as init_records
 
 
 MAX_PARENT_WALK = 64
-PROJECT_PATH = Path(".cuff/project.json")
+PROJECT_PATH = Path(".fab7/cuff/project.json")
 PROJECT_MARKER = {"schema": 1}
 PROJECT_MARKER_BYTES = b'{"schema":1}\n'
 
@@ -28,7 +28,7 @@ def initialize_workspace(
     start = (cwd or Path.cwd()).resolve()
     root = _existing_directory(explicit or start, start)
     _require_git_root(root)
-    state = root / ".cuff"
+    state = root / STATE_DIR
     marker = root / PROJECT_PATH
     _require_safe_state_paths(state, marker)
     _require_safe_records_path(root / RECORDS_DIR)
@@ -37,7 +37,7 @@ def initialize_workspace(
     if existed:
         _read_marker(marker)
     else:
-        state.mkdir(mode=0o755, exist_ok=True)
+        state.mkdir(mode=0o755, parents=True, exist_ok=True)
     init_records(root)
     if not existed:
         _create_marker(marker)
@@ -63,9 +63,9 @@ def find_workspace(
 
     current = start
     for _ in range(MAX_PARENT_WALK):
-        state = current / ".cuff"
+        state = current / STATE_DIR
         marker = current / PROJECT_PATH
-        if state.is_symlink() or (state.exists() and not state.is_dir()):
+        if state.parent.is_symlink() or state.is_symlink() or (state.exists() and not state.is_dir()):
             raise CuffError(
                 "CUFF_PATH_INVALID",
                 "Cuff state path in workspace discovery is unsafe",
@@ -82,7 +82,7 @@ def find_workspace(
 
 
 def _validate_project(root: Path) -> None:
-    state = root / ".cuff"
+    state = root / STATE_DIR
     marker = root / PROJECT_PATH
     if not marker.exists() and not marker.is_symlink():
         raise _not_initialized(root)
@@ -123,6 +123,12 @@ def _existing_directory(path: Path, start: Path) -> Path:
 
 
 def _require_safe_state_paths(state: Path, marker: Path) -> None:
+    if state.parent.is_symlink() or (state.parent.exists() and not state.parent.is_dir()):
+        raise CuffError(
+            "CUFF_PATH_INVALID",
+            "Cuff state directory must be a non-symlink directory",
+            {"path": str(state.parent)},
+        )
     if state.is_symlink() or (state.exists() and not state.is_dir()):
         raise CuffError(
             "CUFF_PATH_INVALID",

{cuff_cli-0.1.0 → cuff_cli-0.2.0}/core/cuff_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cuff-cli
-Version: 0.1.0
+Version: 0.2.0
 Summary: Cuff subject-bound claim, evidence, and verification gate.
 Author: Fab7
 License-Expression: Apache-2.0
@@ -38,7 +38,7 @@ worktree, or stages, commits, fetches, pushes, releases, or deploys anything.
 Install a released version as a standard uv-managed tool:
 
 ```bash
-uv tool install cuff-cli==0.1.0
+uv tool install cuff-cli==0.2.0
 cuff --version
 ```
 
@@ -57,12 +57,12 @@ Run initialization at the exact Git worktree root:
 
 ```bash
 cuff init --json
-git add .cuff/project.json
+git add .fab7/cuff/project.json
 git commit -m "Initialize Cuff"
 ```
 
 The marker is exactly `{"schema":1}` and records live under
-`.cuff/records/`. An incompatible marker is never rewritten or migrated.
+`.fab7/cuff/records/`. An incompatible marker is never rewritten or migrated.
 
 The preferred path atomically appends a claim and its observed evidence:
 
@@ -123,19 +123,36 @@ spend, or residual-risk authority.
 
 ## Static host integrations
 
-Small native assets live in [`plugins/claude/cuff`](plugins/claude/cuff) and
-[`plugins/codex/cuff`](plugins/codex/cuff). The corresponding host plugin
-manager owns their installation and removal. These assets require only the
-uv-managed `cuff` executable on `PATH`; Cuff itself does not install plugins.
+One native payload lives in [`plugins/cuff`](plugins/cuff) and contains both
+host manifests, Claude Code commands, and Codex skills. The shared
+`fab7hq/fab7` marketplace owns registration; this repository owns the payload.
+The assets require the uv-managed `cuff` executable on `PATH`.
 
 ```bash
 # Codex
-codex plugin marketplace add fab7hq/cuff --ref v0.1.0
-codex plugin add cuff@fab7hq
+codex plugin marketplace add fab7hq/fab7
+codex plugin add cuff@fab7
 
 # Claude Code
-claude plugin marketplace add fab7hq/cuff@v0.1.0
-claude plugin install cuff@fab7hq --scope user
+claude plugin marketplace add fab7hq/fab7
+claude plugin install cuff@fab7 --scope user
+```
+
+Validate the built candidate and both host payloads without touching the
+normal host configuration:
+
+```bash
+uv build --out-dir ../sandbox/cuff-01/dist
+uv run python tools/local_release_check.py --host all
+uv run python tools/local_release_check.py --host all --prepare-auth \
+  --candidate-commit COMMIT \
+  --evidence-dir ../sandbox/cuff-01/e2e
+# Log each CLI in using the isolated home paths printed by the prepare phase.
+uv run python tools/local_release_check.py --host all --live --reuse-prepared \
+  --candidate-commit COMMIT \
+  --evidence-dir ../sandbox/cuff-01/e2e \
+  --codex-model MODEL \
+  --claude-model MODEL
 ```
 
 See [RUNBOOK.md](RUNBOOK.md) for operations, [the architecture overview](docs/architecture/overview.md)

{cuff_cli-0.1.0 → cuff_cli-0.2.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "cuff-cli"
-version = "0.1.0"
+version = "0.2.0"
 description = "Cuff subject-bound claim, evidence, and verification gate."
 readme = "README.md"
 requires-python = ">=3.11"