custos-code 0.0.2__tar.gz → 0.0.4__tar.gz

{custos_code-0.0.2 → custos_code-0.0.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: custos-code
-Version: 0.0.2
+Version: 0.0.4
 Summary: Checks a coding agent's final report against the log of what it actually did.
 License-Expression: MIT
 License-File: LICENSE
@@ -64,6 +64,18 @@ did, what it said, the receipt, and the deterministic nudge that goes back. `cus
 the claims, the ledger they cite, and what the check cost, with no JavaScript in it.
 `--format markdown` writes what the PR bot posts. Both are options on `check`, not `demo`.
 
+## Architecture Scope
+
+`custos-code arch` reads Mermaid flowcharts in repo docs and reports when touched files span
+components with no declared edge:
+
+```bash
+custos-code arch --repo . --touched "$(git diff --name-only | paste -sd, -)"
+```
+
+The diagram should live in a Markdown file such as `docs/ARCHITECTURE.md`, and component names
+should roughly match folders or files, for example `Billing` -> `src/billing/`.
+
 ## Prototype
 
 `docs/prototype/index.html` is an interactive, non-functional mock of the editor experience: marks on the agent's message, the evidence panel, editor decorations, the auto-mode loop, and the PR receipt. It is a single self-contained file:

{custos_code-0.0.2 → custos_code-0.0.4}/README.md

@@ -38,6 +38,18 @@ did, what it said, the receipt, and the deterministic nudge that goes back. `cus
 the claims, the ledger they cite, and what the check cost, with no JavaScript in it.
 `--format markdown` writes what the PR bot posts. Both are options on `check`, not `demo`.
 
+## Architecture Scope
+
+`custos-code arch` reads Mermaid flowcharts in repo docs and reports when touched files span
+components with no declared edge:
+
+```bash
+custos-code arch --repo . --touched "$(git diff --name-only | paste -sd, -)"
+```
+
+The diagram should live in a Markdown file such as `docs/ARCHITECTURE.md`, and component names
+should roughly match folders or files, for example `Billing` -> `src/billing/`.
+
 ## Prototype
 
 `docs/prototype/index.html` is an interactive, non-functional mock of the editor experience: marks on the agent's message, the evidence panel, editor decorations, the auto-mode loop, and the PR receipt. It is a single self-contained file:

{custos_code-0.0.2 → custos_code-0.0.4}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "custos-code"
-version = "0.0.2"
+version = "0.0.4"
 description = "Checks a coding agent's final report against the log of what it actually did."
 readme = "README.md"
 license = "MIT"

{custos_code-0.0.2 → custos_code-0.0.4}/src/custos_code/__init__.py

@@ -3,4 +3,4 @@
 Read AGENTS.md before changing anything. Invariants live there. Every module below has a
 docstring saying what it owns and what it must never do.
 """
-__version__ = "0.0.1"
+__version__ = "0.0.4"

{custos_code-0.0.2 → custos_code-0.0.4}/src/custos_code/cli.py

@@ -11,6 +11,7 @@ from __future__ import annotations
 import pathlib
 import re
 from dataclasses import dataclass
+from importlib.metadata import PackageNotFoundError, version
 
 import typer
 from rich.console import Console
@@ -42,6 +43,29 @@ app = typer.Typer(
 console = Console()
 
 
+def _print_version(show: bool) -> None:
+    if not show:
+        return
+    # Read from the installed package's own metadata, not a literal here, so this can never say
+    # something other than what was actually installed -- a hardcoded string drifts the moment a
+    # release changes pyproject.toml without someone remembering this one too.
+    try:
+        console.print(f"custos-code {version('custos-code')}")
+    except PackageNotFoundError:
+        console.print("custos-code (unknown version: not installed as a package)")
+    raise typer.Exit()
+
+
+@app.callback()
+def _main(
+    version_: bool = typer.Option(
+        False, "--version", "-V", callback=_print_version, is_eager=True,
+        help="Print the installed version and exit.",
+    ),
+) -> None:
+    return
+
+
 @app.command()
 def check(
     session: str | None = typer.Argument(

{custos_code-0.0.2 → custos_code-0.0.4}/src/custos_code/scope.py

@@ -310,7 +310,7 @@ _FILE_WRITERS = frozenset({"tee", "touch", "cp", "mv", "dd", "install", "ln", "t
 _PREFIX_TOKENS = frozenset({"cd", "time", "timeout", "command", "exec", "nohup", "nice", "env"})
 _ASSIGN = re.compile(r"(?:^|[;&|]|\n)\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)=([^\s;&|<>]+)")
 _VARREF = re.compile(r"\$\{?([A-Za-z_][A-Za-z0-9_]*)\}?")
-_CD = re.compile(r"(?:^|[;&|]|\n)\s*cd\s+(?:--\s+)?([^\s;&|<>]+)")
+_CD = re.compile(r"""(?:^|[;&|]|\n)\s*cd\s+(?:--\s+)?(?:"([^"]*)"|'([^']*)'|([^\s;&|<>]+))""")
 _SHELLS = frozenset({"bash", "sh", "zsh", "dash", "ksh", "eval", "xargs", "source", ".",
                      "ssh", "env", "nohup", "timeout", "watch", "script"})
 
@@ -442,10 +442,18 @@ def _effective_cwd(cmd: str, cwd: str) -> str:
     Resolving against the session root invents a path that does not exist -- most of the
     `unrecoverable-write` volume -- and in the other direction MISSES the real target when the
     `cd` leaves the grant. An unexpandable `$VAR` aborts the walk rather than guessing.
+
+    `_CD` has three alternative groups -- double-quoted, single-quoted, bare -- because a bare
+    `[^\\s...]+` capture stops at the first space, and a path with a space in it is not a rare
+    edge case: `cd "/Users/x/Documents/HackMIT 2026/receipts" && ...` is what every compound
+    command in *this project's own checkout* looks like. Truncating the quoted target at that
+    space silently rebased every subsequent path in the command onto a directory one level up
+    that happens not to exist, which made `write-outside-cwd` fire on commands that never left
+    the grant at all.
     """
     d = cwd
     for m in _CD.finditer(_strip_heredocs(cmd)):
-        tgt = m.group(1).strip("'\"")
+        tgt = next(g for g in m.groups() if g is not None)
         if "$" in tgt or "`" in tgt:
             return d
         d = _abs(tgt, d)