simplicio-cli 0.18.5__tar.gz → 0.18.9__tar.gz

{simplicio_cli-0.18.5 → simplicio_cli-0.18.9}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: simplicio-cli
-Version: 0.18.5
+Version: 0.18.9
 Summary: Deterministic task-to-code contract and verification CLI. It never executes or provisions an LLM.
 Author-email: Wesley Simplicio <wesleybob4@gmail.com>
 License: MIT
@@ -28,7 +28,7 @@ Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: numpy>=2.1.0
-Requires-Dist: simplicio-mapper>=0.26.2
+Requires-Dist: simplicio-mapper<0.27,>=0.26.11
 Requires-Dist: simplicio-prompt>=1.14.1
 Requires-Dist: httpx>=0.28.1
 Requires-Dist: orjson>=3.11.9
@@ -40,7 +40,7 @@ Requires-Dist: sentence-transformers>=5.6.0; extra == "ml"
 Provides-Extra: bench
 Requires-Dist: fpdf2>=2.8.7; extra == "bench"
 Provides-Extra: fast
-Requires-Dist: simplicio-fast<3,>=2.0.18; extra == "fast"
+Requires-Dist: simplicio-fast<3,>=2.0.22; python_version >= "3.11" and extra == "fast"
 Provides-Extra: performance
 Requires-Dist: uvloop>=0.21.0; sys_platform != "win32" and extra == "performance"
 Provides-Extra: all
@@ -476,6 +476,22 @@ When `simplicio-mapper` has generated `.simplicio/project-map.json` and
 If those artifacts are missing, the CLI falls back to the older target-file
 inspection path, so existing projects keep working.
 
+#### Optional ECC advisory guidance
+
+When explicitly enabled, the CLI asks the installed Mapper for the separate
+`simplicio.ecc-guidance/v1` pack:
+
+```bash
+export SIMPLICIO_ECC_ROOT=/path/to/ECC
+export SIMPLICIO_ECC_ENABLED=1
+export SIMPLICIO_ECC_REQUIRED=1  # optional fail-closed mode
+```
+
+The pack is pinned, bounded and validated as `advisory-only`. Its text may
+shape standalone prompt context, while task results retain only the
+hash/provenance reference under `ecc_guidance_ref`; it never changes
+`TaskSpec`, `PlanDAG`, effect authorization or execution policy.
+
 #### Adaptive retry and observability
 
 The retry loop now validates generated output before applying/testing it,

{simplicio_cli-0.18.5 → simplicio_cli-0.18.9}/README.md

@@ -416,6 +416,22 @@ When `simplicio-mapper` has generated `.simplicio/project-map.json` and
 If those artifacts are missing, the CLI falls back to the older target-file
 inspection path, so existing projects keep working.
 
+#### Optional ECC advisory guidance
+
+When explicitly enabled, the CLI asks the installed Mapper for the separate
+`simplicio.ecc-guidance/v1` pack:
+
+```bash
+export SIMPLICIO_ECC_ROOT=/path/to/ECC
+export SIMPLICIO_ECC_ENABLED=1
+export SIMPLICIO_ECC_REQUIRED=1  # optional fail-closed mode
+```
+
+The pack is pinned, bounded and validated as `advisory-only`. Its text may
+shape standalone prompt context, while task results retain only the
+hash/provenance reference under `ecc_guidance_ref`; it never changes
+`TaskSpec`, `PlanDAG`, effect authorization or execution policy.
+
 #### Adaptive retry and observability
 
 The retry loop now validates generated output before applying/testing it,

{simplicio_cli-0.18.5 → simplicio_cli-0.18.9}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "simplicio-cli"
-version = "0.18.5"
+version = "0.18.9"
 description = "Deterministic task-to-code contract and verification CLI. It never executes or provisions an LLM."
 readme = "README.md"
 license = { text = "MIT" }
@@ -45,7 +45,7 @@ classifiers = [
 # (generated, `--check`-able) for the full graph and #99 for the audit.
 dependencies = [
   "numpy>=2.1.0",
-  "simplicio-mapper>=0.26.2",
+  "simplicio-mapper>=0.26.11,<0.27",
   "simplicio-prompt>=1.14.1",
   "httpx>=0.28.1",
   "orjson>=3.11.9",
@@ -62,7 +62,7 @@ ml = ["sentence-transformers>=5.6.0"]
 bench = ["fpdf2>=2.8.7"]
 # Optional canonical Fast adapter. It remains outside the base install until
 # its release train is formally promoted.
-fast = ["simplicio-fast>=2.0.18,<3"]
+fast = ["simplicio-fast>=2.0.22,<3; python_version >= '3.11'"]
 # Opt-in faster asyncio event loop for the structured-concurrency runtime
 # (simplicio.runtime_async, issue #212). Never required: `install_uvloop()`
 # no-ops on Windows or when this extra is absent, falling back to stdlib
@@ -129,6 +129,7 @@ simplicio = [
   # `simplicio-py score-skill` with no --scenario silently fails outside the
   # checkout (#167 AC "Package instalado contem docs/schemas esperados").
   "commands/scenarios/*.json",
+  "contracts/io/v1/*.json",
 ]
 
 [tool.pytest.ini_options]
@@ -268,3 +269,4 @@ module = [
   "simplicio.scratch.cli",
 ]
 ignore_errors = true
+

{simplicio_cli-0.18.5 → simplicio_cli-0.18.9}/simplicio/__init__.py

@@ -1,4 +1,4 @@
-__version__ = "0.18.5"
+__version__ = "0.18.9"
 
 
 def mapper_module():
@@ -16,3 +16,4 @@ def mapper_version():
 
 
 __all__ = ["__version__", "mapper_module", "mapper_version"]
+

{simplicio_cli-0.18.5 → simplicio_cli-0.18.9}/simplicio/cli.py

@@ -402,6 +402,11 @@ def _build_parser() -> argparse.ArgumentParser:
         ),
     )
     p_versions.add_argument("--json", action="store_true", help="machine-readable output")
+    p_versions.add_argument(
+        "--refresh",
+        action="store_true",
+        help="bypass the 24h PyPI cache when resolving mapper latest_known",
+    )
 
     p_env_export = sub.add_parser(
         "env-export",
@@ -504,28 +509,46 @@ def _build_parser() -> argparse.ArgumentParser:
 
     p_token = sub.add_parser("token", help="token-efficient execution primitives")
     token_sub = p_token.add_subparsers(dest="token_cmd", required=True)
-    p_log = token_sub.add_parser("log-summary")
+    p_log = token_sub.add_parser(
+        "log-summary",
+        help="summarize token usage and savings events from a log",
+    )
     p_log.add_argument("--file", default="-")
     p_log.add_argument("--max-chars", type=int, default=1200)
-    p_diff = token_sub.add_parser("diff-review")
+    p_diff = token_sub.add_parser(
+        "diff-review",
+        help="review a diff for risk, scope and verification gaps",
+    )
     p_diff.add_argument("--root", default=".")
     p_diff.add_argument("--max-patch-chars", type=int, default=4000)
-    p_post = token_sub.add_parser("postconditions")
+    p_post = token_sub.add_parser(
+        "postconditions",
+        help="check postconditions recorded by a task run",
+    )
     p_post.add_argument("--file", default="-")
     p_post.add_argument("--root", default=".")
-    p_retry = token_sub.add_parser("retry")
+    p_retry = token_sub.add_parser(
+        "retry",
+        help="classify a failure and produce a bounded retry decision",
+    )
     p_retry.add_argument("--reason", required=True)
     p_retry.add_argument("--failure-json", default="{}")
     p_retry.add_argument("--log-file")
     p_retry.add_argument("--max-log-chars", type=int, default=1000)
-    p_route = token_sub.add_parser("model-routing")
+    p_route = token_sub.add_parser(
+        "model-routing",
+        help="inspect model/provider routing decisions without executing them",
+    )
     p_route.add_argument("--file", default="-")
-    p_cache = token_sub.add_parser("context-cache")
+    p_cache = token_sub.add_parser(
+        "context-cache",
+        help="read, write or invalidate the repository context cache",
+    )
     cache_sub = p_cache.add_subparsers(dest="cache_cmd", required=True)
     for p_cache_action in (
-        cache_sub.add_parser("get"),
-        cache_sub.add_parser("put"),
-        cache_sub.add_parser("invalidate"),
+        cache_sub.add_parser("get", help="read one cached context entry"),
+        cache_sub.add_parser("put", help="store one context entry in the cache"),
+        cache_sub.add_parser("invalidate", help="remove one cached context entry"),
     ):
         p_cache_action.add_argument("--root", default=".")
         p_cache_action.add_argument("--key")
@@ -576,7 +599,9 @@ def _build_parser() -> argparse.ArgumentParser:
 
     p_runtime = sub.add_parser("runtime", help="runtime-facing dev-cli contracts")
     runtime_sub = p_runtime.add_subparsers(dest="runtime_cmd", required=True)
-    p_runtime_doctor = runtime_sub.add_parser("doctor")
+    p_runtime_doctor = runtime_sub.add_parser(
+        "doctor", help="inspect Runtime availability and local contract readiness"
+    )
     p_runtime_doctor.add_argument("--root", default=".")
     p_runtime_doctor.add_argument("--json", action="store_true")
     p_runtime_verify = runtime_sub.add_parser(
@@ -588,7 +613,9 @@ def _build_parser() -> argparse.ArgumentParser:
         default=None,
         help="optional Runtime probe deadline in seconds (default: no deadline)",
     )
-    p_runtime_capabilities = runtime_sub.add_parser("capabilities")
+    p_runtime_capabilities = runtime_sub.add_parser(
+        "capabilities", help="render the Runtime capability handshake"
+    )
     p_runtime_capabilities.add_argument("--root", default=".")
     p_runtime_capabilities.add_argument("--mode", choices=["auto", "integrated", "standalone"])
     p_runtime_capabilities.add_argument(
@@ -613,7 +640,9 @@ def _build_parser() -> argparse.ArgumentParser:
         "prototype", help="Prototype-First plan, scaffold, validate and promotion gate"
     )
     prototype_sub = p_prototype.add_subparsers(dest="prototype_cmd", required=True)
-    p_proto_plan = prototype_sub.add_parser("plan")
+    p_proto_plan = prototype_sub.add_parser(
+        "plan", help="compile and freeze a prototype plan"
+    )
     p_proto_plan.add_argument("--input", help="Loop/Mapper prototype-plan JSON")
     p_proto_plan.add_argument("--goal", default="")
     p_proto_plan.add_argument(
@@ -639,8 +668,16 @@ def _build_parser() -> argparse.ArgumentParser:
     p_proto_plan.add_argument("--root", default=".", help="source tree the plan's source_sha is anchored to")
     p_proto_plan.add_argument("--output", default=".simplicio/prototype-plan.json")
     p_proto_plan.add_argument("--json", action="store_true")
+    prototype_help = {
+        "scaffold": "create a prototype candidate from a frozen plan",
+        "dry-run": "simulate prototype execution without changing the target",
+        "validate": "validate a prototype candidate and its receipt",
+        "diff": "show the proposed prototype diff",
+        "promote": "promote a validated prototype into the target",
+        "reject": "record rejection of a prototype candidate",
+    }
     for name in ("scaffold", "dry-run", "validate", "diff", "promote", "reject"):
-        p = prototype_sub.add_parser(name)
+        p = prototype_sub.add_parser(name, help=prototype_help[name])
         p.add_argument("--root", default=".")
         p.add_argument("--plan", required=True)
         p.add_argument("--candidate")
@@ -650,7 +687,9 @@ def _build_parser() -> argparse.ArgumentParser:
         p.add_argument("--force", action="store_true")
         p.add_argument("--timeout", type=float, default=60.0)
         p.add_argument("--json", action="store_true")
-    p_proto_doctor = prototype_sub.add_parser("doctor")
+    p_proto_doctor = prototype_sub.add_parser(
+        "doctor", help="health-check the prototype gate and tracked flows"
+    )
     p_proto_doctor.add_argument("--json", action="store_true")
     p_proto_batch = prototype_sub.add_parser(
         "batch", help="scaffold+validate many plans concurrently, bounded by --concurrency"

{simplicio_cli-0.18.5 → simplicio_cli-0.18.9}/simplicio/commands/edit.py

@@ -14,7 +14,7 @@ import os
 import shutil
 import subprocess
 import sys
-from pathlib import Path
+from pathlib import Path, PurePosixPath, PureWindowsPath
 from typing import Any
 
 from ..runtime_bridge import delegated_command, record_delegation
@@ -138,6 +138,127 @@ def _translate_create_file_plan_for_native(plan: dict) -> list[dict] | None:
     return native_plans
 
 
+def _run_atomic_native_create_plans(
+    runtime: str, native_plans: list[dict], a: argparse.Namespace
+) -> dict[str, Any]:
+    """Apply a translated create-file batch through one Runtime transaction."""
+    from ..mechanical_edit import MechanicalEditError, _safe_path
+
+    root = Path(a.root).resolve()
+    transaction_files: list[dict[str, Any]] = []
+    for native_plan in native_plans:
+        relative = str(native_plan["file"])
+        try:
+            target = _safe_path(root, relative)
+        except MechanicalEditError:
+            return {
+                "schema": "simplicio.mechanical-edit-result/v1",
+                "status": "refused",
+                "applied": False,
+                "noop": False,
+                "operation_count": 0,
+                "files": [],
+                "errors": [{"code": "unsafe_path", "message": f"path escapes root: {relative}"}],
+                "mutation_receipt": mutation_receipt("blocked", entrypoint="edit"),
+            }
+        if target.exists():
+            return {
+                "schema": "simplicio.mechanical-edit-result/v1",
+                "status": "refused",
+                "applied": False,
+                "noop": False,
+                "operation_count": 0,
+                "files": [],
+                "errors": [
+                    {"code": "file_exists", "message": f"{relative} already exists", "path": relative}
+                ],
+                "mutation_receipt": mutation_receipt("blocked", entrypoint="edit"),
+            }
+        operation = native_plan["operations"][0]
+        transaction_files.append(
+            {
+                "file": str(target),
+                "operations": [{"op": "create", "text": str(operation.get("text", ""))}],
+            }
+        )
+
+    try:
+        transaction_text = json.dumps({"files": transaction_files})
+        cmd = delegated_command(runtime, ["cross-file-txn", "--plan", transaction_text, "--json"])
+        completed = subprocess.run(
+            cmd,
+            stdin=subprocess.DEVNULL,
+            cwd=root,
+            text=True,
+            capture_output=True,
+            shell=False,
+            timeout=RUNTIME_EDIT_TIMEOUT_S,
+        )
+    except (OSError, subprocess.TimeoutExpired) as exc:
+        record_effect_unknown(a.root)
+        return {
+            "schema": "simplicio.mechanical-edit-result/v1",
+            "status": "effect_unknown",
+            "applied": False,
+            "noop": False,
+            "operation_count": len(native_plans),
+            "files": [],
+            "errors": [{"code": "native_delegation_failed", "message": str(exc)}],
+            "mutation_receipt": mutation_receipt(
+                "runtime_effect_api", entrypoint="edit", runtime_gate_verified=False
+            ),
+        }
+
+    try:
+        payload = json.loads(completed.stdout)
+    except json.JSONDecodeError:
+        payload = None
+    result_files = payload.get("files") if isinstance(payload, dict) else None
+    actual_files = (
+        {str(item.get("file")) for item in result_files if isinstance(item, dict)}
+        if isinstance(result_files, list)
+        else set()
+    )
+    expected_files = {str(item["file"]) for item in transaction_files}
+    if (
+        completed.returncode != 0
+        or not isinstance(payload, dict)
+        or payload.get("status") != "committed"
+        or payload.get("file_count") != len(transaction_files)
+        or actual_files != expected_files
+    ):
+        record_effect_unknown(a.root)
+        message = (completed.stderr or completed.stdout).strip()
+        return {
+            "schema": "simplicio.mechanical-edit-result/v1",
+            "status": "effect_unknown",
+            "applied": False,
+            "noop": False,
+            "operation_count": len(native_plans),
+            "files": [],
+            "errors": [{"code": "native_delegation_failed", "message": message}],
+            "mutation_receipt": mutation_receipt(
+                "runtime_effect_api", entrypoint="edit", runtime_gate_verified=False
+            ),
+        }
+
+    return {
+        "schema": "simplicio.mechanical-edit-result/v1",
+        "status": "ok",
+        "applied": True,
+        "noop": False,
+        "operation_count": len(native_plans),
+        "files": [
+            {"path": native_plan["file"], "before_sha256": None, "after_sha256": None}
+            for native_plan in native_plans
+        ],
+        "errors": [],
+        "mutation_receipt": mutation_receipt(
+            "runtime_effect_api", entrypoint="edit", runtime_gate_verified=True
+        ),
+    }
+
+
 def _run_native_edit_plans(
     runtime: str,
     native_plans: list[dict],
@@ -148,24 +269,34 @@ def _run_native_edit_plans(
     plan_context: dict[str, Any] | None = None,
 ) -> dict[str, Any]:
     """Delegate validated plans while retaining exact stdin and causal proof."""
+    from ..mechanical_edit import MechanicalEditError, _safe_path
+
     files: list[dict] = []
     errors: list[dict] = []
-    if a.apply and len(native_plans) > 1:
-        return {
-            "schema": "simplicio.mechanical-edit-result/v1",
-            "status": "refused",
-            "applied": False,
-            "noop": False,
-            "operation_count": 0,
-            "files": [],
-            "errors": [
-                {
-                    "code": "RUNTIME_ATOMIC_MULTI_FILE_REQUIRED",
-                    "message": "multi-file apply requires one atomic Runtime transaction",
+    root = Path(a.root).resolve()
+    for native_plan in native_plans:
+        paths = [native_plan.get("file")] if "file" in native_plan else []
+        for operation in native_plan.get("operations", []):
+            if isinstance(operation, dict):
+                paths.extend(operation.get(key) for key in ("path", "dest") if key in operation)
+        for relative in paths:
+            try:
+                if not isinstance(relative, str):
+                    raise MechanicalEditError("unsafe_path", "native plan path must be a string")
+                _safe_path(root, relative)
+            except MechanicalEditError as exc:
+                return {
+                    "schema": "simplicio.mechanical-edit-result/v1",
+                    "status": "refused",
+                    "applied": False,
+                    "noop": False,
+                    "operation_count": 0,
+                    "files": [],
+                    "errors": [exc.to_dict()],
+                    "mutation_receipt": mutation_receipt("blocked", entrypoint="edit"),
                 }
-            ],
-            "mutation_receipt": mutation_receipt("blocked", entrypoint="edit"),
-        }
+    if a.apply and len(native_plans) > 1:
+        return _run_atomic_native_create_plans(runtime, native_plans, a)
     for _index, native_plan in enumerate(native_plans):
         current_plan_arg = plan_arg if len(native_plans) == 1 else "-"
         cmd = delegated_command(runtime, ["edit", "--plan", current_plan_arg, "--repo", a.root, "--json"])
@@ -177,8 +308,10 @@ def _run_native_edit_plans(
             else (json.dumps(native_plan) if current_plan_arg == "-" else None)
         )
         run_kwargs: dict[str, Any] = {
+            "cwd": root,
             "text": True,
             "capture_output": True,
+            "shell": False,
             "timeout": RUNTIME_EDIT_TIMEOUT_S,
         }
         if input_text is None:
@@ -269,11 +402,13 @@ def _invalid_delegated_plan(plan: Any) -> list[dict[str, Any]]:
     if "file" in plan:
         file_name = plan.get("file")
         operations = plan.get("operations")
+        portable_path = PurePosixPath(file_name.replace("\\", "/")) if isinstance(file_name, str) else None
         if (
             not isinstance(file_name, str)
             or not file_name.strip()
             or Path(file_name).is_absolute()
-            or ".." in Path(file_name).parts
+            or PureWindowsPath(file_name).is_absolute()
+            or (portable_path is not None and (portable_path.is_absolute() or ".." in portable_path.parts))
         ):
             return [{"code": "invalid_plan", "message": "Runtime plan file must be a safe relative path"}]
         if not isinstance(operations, list) or not operations: