PyPI - gargoyle-receipts - Versions diffs - 0.14.0.dev0__tar.gz → 0.14.1.dev0__tar.gz - Mend

@@ -149,3 +149,17 @@ def test_audit_command_reports_reconciliation_and_tree(tmp_path, capsys):
     (root / "n.md").write_text("tampered", encoding="utf-8")
     assert main(["audit", "--log", str(tmp_path / "audit.jsonl"), "--out", str(out), "--check-tree", str(root)]) == 1
     assert "CHANGED_OUTSIDE_GATE" in capsys.readouterr().out
+def test_audit_names_a_missing_witness_or_folder_plainly(tmp_path, capsys):
+    from gargoyle.cli import main
+    log = tmp_path / "audit.jsonl"; log.write_text("")
+    out = tmp_path / "deploy"; out.mkdir()
+    (out / "public-keys.json").write_text(json.dumps({"issuer": {}, "executor": {}, "approver": {}}))
+    assert main(["audit", "--log", str(log), "--out", str(out), "--witness", str(tmp_path / "nope.jsonl")]) == 2
+    assert "witness file not found" in capsys.readouterr().err
+    assert main(["audit", "--log", str(log), "--out", str(out), "--check-tree", str(tmp_path / "nodir")]) == 2
+    assert "not a directory" in capsys.readouterr().err
+    # The issuer creates the witness file at start, before any decision.
+    w = WitnessLog(str(tmp_path / "fresh" / "witness.jsonl"), issuer, "issuer-1")
+    assert (tmp_path / "fresh" / "witness.jsonl").exists() and w.entries == []

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gargoyle-receipts
-Version: 0.14.0.dev0
+Version: 0.14.1.dev0
 Summary: Signed, single-use, argument-bound receipts and human-approval holds for agent tool calls.
 Author: Justin LaPorte
 License-Expression: Apache-2.0
@@ -59,7 +59,7 @@ your MCP server and lets through only what both agreed to.
 [![PyPI](https://img.shields.io/pypi/v/gargoyle-receipts)](https://pypi.org/project/gargoyle-receipts/)
-Status: pre-release (`0.14.0.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
+Status: pre-release (`0.14.1.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
 still change before the first release; it is specified in [SPEC.md](SPEC.md).
 ## What a receipt gives you

@@ -21,7 +21,7 @@ your MCP server and lets through only what both agreed to.
 [![PyPI](https://img.shields.io/pypi/v/gargoyle-receipts)](https://pypi.org/project/gargoyle-receipts/)
-Status: pre-release (`0.14.0.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
+Status: pre-release (`0.14.1.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
 still change before the first release; it is specified in [SPEC.md](SPEC.md).
 ## What a receipt gives you

@@ -361,6 +361,12 @@ def cmd_audit(args) -> int:
               % (v["count"], v["honored"], v["refused"], failed, v["reason"], v["tail_sha256"][:16]))
         rc = 0 if v["accepted"] else 1
         entries = read_log(args.log)
+        if args.witness and not Path(args.witness).exists():
+            print("witness file not found: %s (copy the issuer's witness.jsonl here first)" % args.witness, file=sys.stderr)
+            return 2
+        if args.check_tree and not Path(args.check_tree).is_dir():
+            print("not a directory: %s" % args.check_tree, file=sys.stderr)
+            return 2
         if args.witness:
             # The issuer's signed record: the client's evidence must agree with it.
             from gargoyle.reconcile import reconcile

@@ -63,6 +63,11 @@ class WitnessLog:
                     e = json.loads(line)
                     self.entries.append(e)
                     self._seq, self._tail = int(e["seq"]), e["entry_sha256"]
+        elif self.path is not None:
+            # Exists from the first start, so an operator can copy it before
+            # the first decision and a monitor can see it is in place.
+            self.path.parent.mkdir(parents=True, exist_ok=True)
+            self.path.touch()
     def record(self, event: str, **fields: Any) -> Dict[str, Any]:
         with self._lock:

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gargoyle-receipts
-Version: 0.14.0.dev0
+Version: 0.14.1.dev0
 Summary: Signed, single-use, argument-bound receipts and human-approval holds for agent tool calls.
 Author: Justin LaPorte
 License-Expression: Apache-2.0
@@ -59,7 +59,7 @@ your MCP server and lets through only what both agreed to.
 [![PyPI](https://img.shields.io/pypi/v/gargoyle-receipts)](https://pypi.org/project/gargoyle-receipts/)
-Status: pre-release (`0.14.0.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
+Status: pre-release (`0.14.1.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
 still change before the first release; it is specified in [SPEC.md](SPEC.md).
 ## What a receipt gives you

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 [project]
 name = "gargoyle-receipts"
-version = "0.14.0.dev0"
+version = "0.14.1.dev0"
 description = "Signed, single-use, argument-bound receipts and human-approval holds for agent tool calls."
 readme = "README.md"
 requires-python = ">=3.12"

gargoyle-receipts 0.14.0.dev0__tar.gz → 0.14.1.dev0__tar.gz