goal 2.2.0__tar.gz → 2.2.2__tar.gz

{goal-2.2.0 → goal-2.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: goal
-Version: 2.2.0
+Version: 2.2.2
 Summary: Goal - Automated git push with enterprise-grade commit intelligence, smart conventional commit generation based on deep code analysis, and interactive release workflow management.
 Author-email: Tom Sapletta <tom@sapletta.com>
 License-Expression: Apache-2.0
@@ -25,7 +25,6 @@ Provides-Extra: dev
 Requires-Dist: pytest>=7.0.0; extra == "dev"
 Requires-Dist: build; extra == "dev"
 Requires-Dist: twine; extra == "dev"
-Requires-Dist: pfix>=0.1.60; python_version >= "3.10" and extra == "dev"
 Requires-Dist: tox>=4.0.0; extra == "dev"
 Dynamic: license-file
 
@@ -112,6 +111,25 @@ workflow and remaining project-local Docker/ticket steps.
 
 ### ✨ New Features
 
+**🔄 Autonomous publication completion (governed repositories)**
+- After the protected merge lands, a governed `goal -a` on a clean,
+  synchronized base with committed-but-unpublished package sources now
+  **completes the waited-for publication** automatically: it records a
+  `publish-completion` delivery event, re-enables publishing and finishes
+  tag + registry upload without creating a new commit.
+- Without pending sources the boundary stays a no-change return — clean main
+  remains a safe, quiet no-op.
+
+**🛡️ Frozen goal.yaml protection**
+- Version-file auto-detection now skips tooling caches and governed runtime
+  state (`.pytest_cache`, `.subactor`, `.worktrees`, …), so stale snapshots
+  can never be learned as version carriers.
+- An explicit, non-empty `versioning.files` list is authoritative: detection
+  is bootstrap-only and never replaces it.
+- Governed targets load the frozen `goal.yaml` from **every** command
+  (`goal publish` included) — auto-detection can no longer rewrite a
+  protected configuration as a side effect.
+
 **🧹 `goal all` — sweep many repos at once**
 - `goal all [PATHS...]` runs `goal -a` in every sub-repo that has uncommitted
   changes (defaults to `*` — all sub-folders of the current directory).
@@ -1859,3 +1877,8 @@ _Last updated by [taskill](https://github.com/oqlos/taskill) at 2026-04-25 13:38
 > Introduces a configuration management system, improves the code analysis engine and commit message generation, expands CLI functionality and markdown output support, and applies bulk TODO fixes and documentation updates.
 
 <!-- taskill:status:end -->
+
+
+## Documentation ownership
+
+Before producing a report or plan, follow [documentation instructions](docs/AGENTS.md) and use the [documentation index](docs/README.md). Durable results belong in versioned repository documentation; private recovery archives and raw logs stay outside publication.

{goal-2.2.0 → goal-2.2.2}/README.md

@@ -81,6 +81,25 @@ workflow and remaining project-local Docker/ticket steps.
 
 ### ✨ New Features
 
+**🔄 Autonomous publication completion (governed repositories)**
+- After the protected merge lands, a governed `goal -a` on a clean,
+  synchronized base with committed-but-unpublished package sources now
+  **completes the waited-for publication** automatically: it records a
+  `publish-completion` delivery event, re-enables publishing and finishes
+  tag + registry upload without creating a new commit.
+- Without pending sources the boundary stays a no-change return — clean main
+  remains a safe, quiet no-op.
+
+**🛡️ Frozen goal.yaml protection**
+- Version-file auto-detection now skips tooling caches and governed runtime
+  state (`.pytest_cache`, `.subactor`, `.worktrees`, …), so stale snapshots
+  can never be learned as version carriers.
+- An explicit, non-empty `versioning.files` list is authoritative: detection
+  is bootstrap-only and never replaces it.
+- Governed targets load the frozen `goal.yaml` from **every** command
+  (`goal publish` included) — auto-detection can no longer rewrite a
+  protected configuration as a side effect.
+
 **🧹 `goal all` — sweep many repos at once**
 - `goal all [PATHS...]` runs `goal -a` in every sub-repo that has uncommitted
   changes (defaults to `*` — all sub-folders of the current directory).
@@ -1828,3 +1847,8 @@ _Last updated by [taskill](https://github.com/oqlos/taskill) at 2026-04-25 13:38
 > Introduces a configuration management system, improves the code analysis engine and commit message generation, expands CLI functionality and markdown output support, and applies bulk TODO fixes and documentation updates.
 
 <!-- taskill:status:end -->
+
+
+## Documentation ownership
+
+Before producing a report or plan, follow [documentation instructions](docs/AGENTS.md) and use the [documentation index](docs/README.md). Durable results belong in versioned repository documentation; private recovery archives and raw logs stay outside publication.

{goal-2.2.0 → goal-2.2.2}/goal/__init__.py

@@ -1,3 +1,3 @@
 """Goal - Automated git push with smart commit messages, changelog updates, and version tagging."""
 
-__version__ = "2.2.0"
+__version__ = "2.2.2"

{goal-2.2.0 → goal-2.2.2}/goal/bootstrap/costs_badge.py

@@ -51,6 +51,16 @@ def _costs_version_satisfies_minimum(version: object) -> bool:
     return bool(current) and current >= minimum
 
 
+def _run_costs_install_command(command: list[str], project_dir: Path) -> bool:
+    install_result = subprocess.run(
+        command,
+        capture_output=True,
+        text=True,
+        cwd=str(project_dir),
+    )
+    return install_result.returncode == 0
+
+
 def _install_costs_requirement(project_dir: Path, python_bin: str) -> bool:
     requirement = f"costs>={_MIN_COSTS_VERSION}"
     commands = [
@@ -61,13 +71,7 @@ def _install_costs_requirement(project_dir: Path, python_bin: str) -> bool:
         commands.append([uv_bin, "pip", "install", "--python", python_bin, requirement])
 
     for command in commands:
-        install_result = subprocess.run(
-            command,
-            capture_output=True,
-            text=True,
-            cwd=str(project_dir),
-        )
-        if install_result.returncode == 0:
+        if _run_costs_install_command(command, project_dir):
             return True
     return False
 
@@ -202,7 +206,7 @@ def _calculate_ai_costs(repo_root: Path):
     all_commits_data = parse_commits(
         str(repo_root), max_count=500, ai_only=False, full_history=True
     )
-    ai_commits = _filter_ai_commits(all_commits_data)
+    ai_commits = _filter_ai_commits(all_commits_data, indicators=_AI_INDICATORS)
 
     total_cost = sum(
         _single_commit_ai_cost(

{goal-2.2.0 → goal-2.2.2}/goal/bootstrap/installer.py

@@ -107,6 +107,16 @@ def _install_python_deps_legacy(
         else cfg.get("dep_install_commands", [])
     )
 
+    def _run_dep_install_cmd(command_str: str) -> subprocess.CompletedProcess:
+        return subprocess.run(
+            command_str,
+            shell=True,
+            cwd=str(project_dir),
+            capture_output=True,
+            text=True,
+            env=isolated_env(str(project_dir)),
+        )
+
     for dep_cfg in dep_commands:
         condition = dep_cfg["condition"]
         if not _match_marker(project_dir, condition):
@@ -121,28 +131,14 @@ def _install_python_deps_legacy(
                 cmd = f"uv pip install {cmd.split('install ', 1)[1]}"
 
         click.echo(click.style(f"  Installing deps: {cmd}", fg="cyan"))
-        result = subprocess.run(
-            cmd,
-            shell=True,
-            cwd=str(project_dir),
-            capture_output=True,
-            text=True,
-            env=isolated_env(str(project_dir)),
-        )
+        result = _run_dep_install_cmd(cmd)
 
         if result.returncode != 0:
             fallback = dep_cfg.get("fallback")
             if fallback:
                 cmd = fallback.format(python=python_bin)
                 click.echo(click.style(f"  Retrying: {cmd}", fg="yellow"))
-                result = subprocess.run(
-                    cmd,
-                    shell=True,
-                    cwd=str(project_dir),
-                    capture_output=True,
-                    text=True,
-                    env=isolated_env(str(project_dir)),
-                )
+                result = _run_dep_install_cmd(cmd)
 
             if result.returncode != 0:
                 click.echo(

{goal-2.2.0 → goal-2.2.2}/goal/bootstrap/pyproject_costs_setup.py

@@ -10,10 +10,11 @@ import click
 
 logger = logging.getLogger(__name__)
 
+# pfix is deliberately not injected: its automatic repairs overwrote development
+# changes, so projects must opt in explicitly instead of receiving it by default.
 _REQUIRED_DEV_DEPS = (
     ("goal", '"goal>=2.1.0; python_version >= \'3.12\'"'),
     ("costs", '"costs>=0.1.53; python_version >= \'3.9\'"'),
-    ("pfix", '"pfix>=0.1.60; python_version >= \'3.10\'"'),
 )
 _LEGACY_DEV_DEP_REPLACEMENTS = tuple(
     (spec.split(";", 1)[0] + '"', spec)
@@ -181,7 +182,7 @@ def _ensure_costs_config(project_dir: Path) -> bool:
         pyproject.write_text(content, encoding="utf-8")
         click.echo(
             click.style(
-                "  ✓ Added goal, costs and pfix to dev dependencies", fg="green"
+                "  ✓ Added goal and costs to dev dependencies", fg="green"
             )
         )
 

{goal-2.2.0 → goal-2.2.2}/goal/changelog.py

@@ -134,10 +134,15 @@ def update_changelog(
         (config or {}).get("git", {}).get("changelog", {}).get("group_by_domain", False)
     )
 
+    effective_files = (
+        changelog_entry.get("files", files)
+        if isinstance(changelog_entry, dict)
+        else files
+    )
     if use_domain_grouping and config:
-        entry = _build_domain_entry(version, date_str, files, config)
+        entry = _build_domain_entry(version, date_str, effective_files, config)
     else:
-        entry = _build_simple_entry(version, date_str, files)
+        entry = _build_simple_entry(version, date_str, effective_files)
 
     changelog_path.write_text(_insert_entry(existing_content, entry))
 

{goal-2.2.0 → goal-2.2.2}/goal/cli/__init__.py

@@ -440,6 +440,21 @@ def _resolve_output_markdown(output_markdown: bool | None, all_flags: bool) -> b
     return bool(all_flags)
 
 
+def _governed_clone() -> bool:
+    """Whether another checkout of this clone carries adopted governance."""
+    from goal.governance.delivery import governed_clone_evidence
+
+    return bool(governed_clone_evidence())
+
+
+def _is_governed_target() -> bool:
+    """Whether the current checkout has a new-project governance manifest."""
+    from pathlib import Path
+    from goal.governance.delivery import is_new_project_manifest
+
+    return is_new_project_manifest(Path(".governance/manifest.json"))
+
+
 def _configure_main_context(
     ctx,
     bump,
@@ -458,8 +473,10 @@ def _configure_main_context(
     abstraction,
     delivery_mode,
     read_only_governance=False,
+    koru=False,
 ) -> None:
     ctx.ensure_object(dict)
+    ctx.obj["koru"] = koru
     ctx.obj["bump"] = bump
     ctx.obj["version"] = target_version
     ctx.obj["yes"] = yes or all_flags
@@ -467,7 +484,12 @@ def _configure_main_context(
     ctx.obj["recursive"] = recursive
     ctx.obj["interactive"] = interactive
     ctx.obj["no_publish"] = no_publish
-    ctx.obj["force_publish"] = force_publish
+    ctx.obj["force_publish_explicit"] = force_publish
+    # The full workflow is a release intent. Treat it like the explicit
+    # --force-publish flag so a clean tree with already-committed package
+    # changes still reaches the registry publisher. --no-publish remains an
+    # explicit opt-out and is enforced by the publish stage.
+    ctx.obj["force_publish"] = force_publish or all_flags
     ctx.obj["todo"] = todo
     ctx.obj["markdown"] = _resolve_output_markdown(markdown, all_flags)
     ctx.obj["dry_run"] = dry_run
@@ -478,9 +500,16 @@ def _configure_main_context(
         ctx.obj["config"] = load_config(config_path) if config_path else load_config()
     elif config_path:
         ctx.obj["config"] = load_config(config_path)
+    elif _is_governed_target() or _governed_clone():
+        # Governed targets never rewrite goal.yaml from any command: the
+        # protected gate freezes the file and auto-detection must neither
+        # precede a refusal nor corrupt a frozen projection after a merge.
+        # Previously only dry-run/--all runs were protected; ``goal publish``
+        # and other subcommands still triggered ensure_config() rewrites.
+        ctx.obj["config"] = load_config()
     elif dry_run:
-        # Dry-run must be observably read-only. ensure_config can create a
-        # missing goal.yaml or rewrite an existing one after auto-detection.
+        # Dry runs must reach their gate/no-change check before any mutation.
+        # ensure_config can create or rewrite goal.yaml during auto-detection.
         ctx.obj["config"] = load_config()
     else:
         ctx.obj["config"] = ensure_config()
@@ -559,6 +588,7 @@ class GoalGroup(click.Group):
         # We must skip option *values* (e.g. 'major' in '--bump major') so
         # they are not mistaken for subcommand names.
         has_all_flag = _has_cli_flag(args, "a", "--all")
+        has_koru_flag = _has_cli_flag(args, "k", "--koru")
         known_cmds = set(self.list_commands(ctx) or [])
         # Options whose next token is a value (not a flag).
         _VALUE_OPTIONS = {
@@ -614,7 +644,7 @@ class GoalGroup(click.Group):
 
         has_subcommand = any(p in known_cmds for p in positionals)
 
-        if has_all_flag and not has_subcommand:
+        if (has_all_flag or has_koru_flag) and not has_subcommand:
             if positionals:
                 # `goal -a ./*` (or explicit dirs) → sweep those paths across
                 # every dirty sub-repo via the `all` command.
@@ -624,7 +654,7 @@ class GoalGroup(click.Group):
                 elif auto_used:
                     args = opts + positionals
             else:
-                # Bare `goal -a` → default to the single-repo push workflow.
+                # Bare `goal -a` or `goal -k` → default to the single-repo push workflow.
                 push_cmd = click.Group.get_command(self, ctx, "push")
                 if push_cmd is not None:
                     args = (opts + ["push"]) if auto_used else (args + ["push"])
@@ -649,6 +679,13 @@ class GoalGroup(click.Group):
     is_flag=True,
     help="Run full workflow (tests, push, publish)",
 )
+@click.option(
+    "--koru",
+    "-k",
+    "koru",
+    is_flag=True,
+    help="Run Koru auto-repair before workflow",
+)
 @click.option(
     "--upgrade-deps",
     "-u",
@@ -705,6 +742,7 @@ def main(
     target_version,
     yes,
     all_flags,
+    koru,
     upgrade_deps,
     recursive,
     interactive,
@@ -754,6 +792,7 @@ def main(
         abstraction,
         delivery_mode,
         read_only_governance or is_help_request,
+        koru=koru,
     )
 
 

{goal-2.2.0 → goal-2.2.2}/goal/cli/governance_cmd.py

@@ -502,6 +502,39 @@ def workspace_check(target_root, workspace_root, allow, output_format):
         raise click.exceptions.Exit(result.returncode)
 
 
+@governance.command("branch-intent-check")
+@click.option("--target-root", default=".", show_default=True,
+              type=click.Path(exists=True, file_okay=False, path_type=Path))
+@click.option("--report", required=True,
+              type=click.Path(exists=True, dir_okay=False, path_type=Path))
+@click.option("--observation", required=True,
+              type=click.Path(exists=True, dir_okay=False, path_type=Path))
+@click.option("--evidence-root", required=True,
+              type=click.Path(exists=True, file_okay=False, path_type=Path))
+@click.option("--expected-lock-sha256", required=True,
+              help="Adoption lock digest supplied independently by the protected caller.")
+@click.option("--timeout", default=30, show_default=True, type=click.IntRange(1, 300))
+def branch_intent_check(target_root, report, observation, evidence_root,
+                       expected_lock_sha256, timeout):
+    """Check a preserved branch's intent report without deleting anything.
+
+    Requires a published adopted package containing the reconciliation checker.
+    The protected caller verifies observation provenance and criterion coverage;
+    do not derive the expected lock digest from an author's untrusted checkout.
+    Exit 0 means ready for owner review, 1 unresolved, and 2 invalid evidence.
+    Report readiness never grants discard, merge or ticket-close authority.
+    """
+    from goal.governance.branch_intent import run_check
+
+    result = run_check(target_root, report, observation, evidence_root,
+                       expected_lock_sha256, timeout)
+    click.echo(result.stdout, nl=False)
+    if result.stderr:
+        click.echo(result.stderr, err=True, nl=False)
+    if result.returncode:
+        raise click.exceptions.Exit(result.returncode)
+
+
 @governance.group("delivery-hook")
 def delivery_hook():
     """Manage the local fail-fast pre-push guard."""
@@ -568,6 +601,51 @@ def verify_delivery(ctx, delivery_mode):
     click.echo(json.dumps(payload, indent=2, sort_keys=True))
 
 
+@governance.command("plan-adoption")
+@click.option("--catalog", required=True,
+              type=click.Path(exists=True, dir_okay=False, path_type=Path))
+@click.option("--catalog-sha256", required=True,
+              help="Independently acquired SHA-256 of operator-supplied catalog bytes.")
+@click.option("--target-root", default=".", show_default=True,
+              type=click.Path(exists=True, file_okay=False, path_type=Path))
+@click.option("--target-revision", default=None,
+              help="Explicit destination SHA; otherwise preserve a supported current pin.")
+def plan_adoption_command(catalog, catalog_sha256, target_root, target_revision):
+    """Emit an offline advisory adoption plan; never fetch, write or call an LLM.
+
+    Catalog v1: schema=goal.adoption-catalog/v1,
+    standardRepository=wellmanifest/new-project, supportedRevisions=[SHA],
+    migrations=[{fromRevision: SHA, toRevision: SHA,
+    recipe: goal-governance-adopt/v1}]. All revisions are immutable commit SHAs.
+
+    Exit 0 means retain or migration planned, NOT policy approval or product
+    readiness. Exit 2 means blocked. No persistent queue or automatic upgrade
+    is created. Execute only through an independently authorized controller.
+    """
+    from goal.governance.adoption_plan import AdoptionPlanError, plan_adoption
+
+    try:
+        plan = plan_adoption(target_root, catalog, catalog_sha256, target_revision)
+    except (AdoptionPlanError, OSError) as error:
+        click.echo(json.dumps({"schema": "goal.adoption-plan/v1", "state": "blocked",
+                               "reason": "invalid_input", "detail": str(error),
+                               "authority": "advisory-only", "steps": []}, sort_keys=True))
+        raise click.exceptions.Exit(2) from error
+    click.echo(json.dumps(plan, indent=2, sort_keys=True))
+    if plan["state"] == "blocked":
+        raise click.exceptions.Exit(2)
+
+
+def _governance_committed(target: Path) -> bool:
+    """True when HEAD already contains an adopted governance manifest."""
+    result = subprocess.run(
+        ["git", "-C", str(target), "cat-file", "-e", "HEAD:.governance/manifest.json"],
+        capture_output=True,
+        check=False,
+    )
+    return result.returncode == 0
+
+
 @governance.command("adopt")
 @click.option(
     "--standard-repository",
@@ -610,6 +688,15 @@ def verify_delivery(ctx, delivery_mode):
         "generator must record non-production provenance."
     ),
 )
+@click.option(
+    "--bootstrap-native-adoption",
+    is_flag=True,
+    help=(
+        "First adoption into a committed repository without governance: record "
+        "the installer receipt that the first --bootstrap-adoption-digest "
+        "ticket allocation requires."
+    ),
+)
 @click.option(
     "--pre-commit",
     is_flag=True,
@@ -627,6 +714,7 @@ def adopt(
     check,
     upgrade,
     allow_unpublished_for_testing,
+    bootstrap_native_adoption,
     pre_commit,
     ticket,
 ):
@@ -642,10 +730,12 @@ def adopt(
         raise click.UsageError("--check and --upgrade are mutually exclusive")
     if pre_commit and (not latest or not ticket):
         raise click.UsageError("--pre-commit requires --latest and --ticket")
-    if pre_commit and (check or upgrade or allow_unpublished_for_testing):
+    if pre_commit and (
+        check or upgrade or allow_unpublished_for_testing or bootstrap_native_adoption
+    ):
         raise click.UsageError(
-            "--pre-commit cannot be combined with --check, --upgrade, or "
-            "--allow-unpublished-for-testing"
+            "--pre-commit cannot be combined with --check, --upgrade, "
+            "--allow-unpublished-for-testing, or --bootstrap-native-adoption"
         )
 
     target = target_root.resolve()
@@ -695,6 +785,9 @@ def adopt(
             command.append("--upgrade")
         if allow_unpublished_for_testing:
             command.append("--allow-unpublished-for-testing")
+        if bootstrap_native_adoption:
+            command.append("--bootstrap-native-adoption")
+        fresh_repository = not check and not _governance_committed(target)
 
         result = subprocess.run(command, capture_output=True, text=True, check=False)
         if result.stdout:
@@ -703,6 +796,14 @@ def adopt(
             click.echo(result.stderr, err=True, nl=False)
         if result.returncode != 0:
             raise click.exceptions.Exit(result.returncode)
+        if fresh_repository and not bootstrap_native_adoption:
+            click.echo(
+                "note: this repository has no committed governance; its first ticket "
+                "allocation needs the bootstrap receipt. Rerun with "
+                "--bootstrap-native-adoption, then allocate with "
+                "./project/new-ticket.sh --bootstrap-adoption-digest <dirtyDigest>.",
+                err=True,
+            )
         if pre_commit:
             click.echo(
                 f"prepared standard update {current_revision}..{source_revision} "