statutor 0.4.0__tar.gz → 0.5.1__tar.gz

{statutor-0.4.0/core/statutor.egg-info → statutor-0.5.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: statutor
-Version: 0.4.0
+Version: 0.5.1
 Summary: Typed project-ledger framework for agentic repos: four planes, single-writer files, enforced mutation policies.
 Author: Hoo
 License-Expression: MIT
@@ -92,6 +92,15 @@ append-only/cap checks; see adapters/codex/). Residual gaps: MCP tools
 and Update-File section checks — so the git floor remains
 mandatory there.
 
+Worker provenance (v0.5, `statutor machine`/`statutor worker`): automatic
+hooks on every host prove an **attempt** only and record nothing by
+themselves — the hook path stays fail-open. Ingress is executor- or
+custom-run (`begin` → `record --event attempt` → attributed rewrite →
+`complete --session`); `--event mutation` under an automatic harness is
+denied. `worker capabilities` reports proven surfaces and gaps per host
+(verified against Claude Code 2.1.258, Codex CLI 0.152.1, OpenCode 1.18.20
+baselines); `worker compare <ref>` explains sibling handoffs read-only.
+
 ## Install
 
     pipx install statutor                # or: pip install -e .
@@ -105,7 +114,7 @@ mandatory there.
     # .pre-commit-config.yaml
     repos:
       - repo: https://github.com/hoohugokim/statutor
-        rev: v0.4.0
+        rev: v0.5.1
         hooks: [{id: statutor}]
 
 Per-repo policy lives in `.statutor.yaml`. In-loop checks use the committed

{statutor-0.4.0 → statutor-0.5.1}/README.md

@@ -67,6 +67,15 @@ append-only/cap checks; see adapters/codex/). Residual gaps: MCP tools
 and Update-File section checks — so the git floor remains
 mandatory there.
 
+Worker provenance (v0.5, `statutor machine`/`statutor worker`): automatic
+hooks on every host prove an **attempt** only and record nothing by
+themselves — the hook path stays fail-open. Ingress is executor- or
+custom-run (`begin` → `record --event attempt` → attributed rewrite →
+`complete --session`); `--event mutation` under an automatic harness is
+denied. `worker capabilities` reports proven surfaces and gaps per host
+(verified against Claude Code 2.1.258, Codex CLI 0.152.1, OpenCode 1.18.20
+baselines); `worker compare <ref>` explains sibling handoffs read-only.
+
 ## Install
 
     pipx install statutor                # or: pip install -e .
@@ -80,7 +89,7 @@ mandatory there.
     # .pre-commit-config.yaml
     repos:
       - repo: https://github.com/hoohugokim/statutor
-        rev: v0.4.0
+        rev: v0.5.1
         hooks: [{id: statutor}]
 
 Per-repo policy lives in `.statutor.yaml`. In-loop checks use the committed

{statutor-0.4.0 → statutor-0.5.1/core/statutor.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: statutor
-Version: 0.4.0
+Version: 0.5.1
 Summary: Typed project-ledger framework for agentic repos: four planes, single-writer files, enforced mutation policies.
 Author: Hoo
 License-Expression: MIT
@@ -92,6 +92,15 @@ append-only/cap checks; see adapters/codex/). Residual gaps: MCP tools
 and Update-File section checks — so the git floor remains
 mandatory there.
 
+Worker provenance (v0.5, `statutor machine`/`statutor worker`): automatic
+hooks on every host prove an **attempt** only and record nothing by
+themselves — the hook path stays fail-open. Ingress is executor- or
+custom-run (`begin` → `record --event attempt` → attributed rewrite →
+`complete --session`); `--event mutation` under an automatic harness is
+denied. `worker capabilities` reports proven surfaces and gaps per host
+(verified against Claude Code 2.1.258, Codex CLI 0.152.1, OpenCode 1.18.20
+baselines); `worker compare <ref>` explains sibling handoffs read-only.
+
 ## Install
 
     pipx install statutor                # or: pip install -e .
@@ -105,7 +114,7 @@ mandatory there.
     # .pre-commit-config.yaml
     repos:
       - repo: https://github.com/hoohugokim/statutor
-        rev: v0.4.0
+        rev: v0.5.1
         hooks: [{id: statutor}]
 
 Per-repo policy lives in `.statutor.yaml`. In-loop checks use the committed

{statutor-0.4.0 → statutor-0.5.1}/core/statutor.egg-info/SOURCES.txt

@@ -8,6 +8,7 @@ core/statutor_global.py
 core/statutor_global_cli.py
 core/statutor_global_status.py
 core/statutor_skills.py
+core/statutor_worker.py
 core/statutor.egg-info/PKG-INFO
 core/statutor.egg-info/SOURCES.txt
 core/statutor.egg-info/dependency_links.txt

{statutor-0.4.0 → statutor-0.5.1}/core/statutor.egg-info/top_level.txt

@@ -4,3 +4,4 @@ statutor_global
 statutor_global_cli
 statutor_global_status
 statutor_skills
+statutor_worker

{statutor-0.4.0 → statutor-0.5.1}/core/statutor_core.py

@@ -27,6 +27,8 @@ Entry modes (all share the same validate() core):
                           exit 1 on violations.
   statutor init [DIR]     Scaffold governed files from embedded templates.
   statutor global ...     Opt-in global instruction and skill projection manager.
+  statutor machine ...    Random machine identity (mode 0600, rotation).
+  statutor worker ...     Machine-local worker provenance (begin/record/show/active/complete/compare).
 
 No third-party dependencies. The policy format is a deterministic YAML subset;
 PyYAML is optional for ancillary tooling, never required by the trust floor.
@@ -785,6 +787,13 @@ def _automatic_reason(tool: str, payload: dict, cwd: str) -> str | None:
     return None
 
 def run_hook() -> int:
+    if sys.stdin.isatty():
+        # A TTY means a human ran the hook with no piped event (harnesses
+        # always pipe JSON). Fail fast with usage instead of blocking on
+        # stdin forever; fail-open applies to hook *events*, not misuse.
+        print("statutor hook expects piped hook JSON on stdin; "
+              "run `statutor --help` for modes.", file=sys.stderr)
+        return 64
     try:
         event = json.load(sys.stdin)
         tool = event.get("tool_name", "")
@@ -1314,6 +1323,10 @@ TEMPLATES: dict[str, str] = {
 # HANDOFF
 
 last_verified: 1970-01-01 by `<command that proved the state below>`
+last_worker: unknown
+last_machine: unknown
+handoff_id: none
+supersedes: none
 
 ## Goal
 <the single objective of the current work stream>
@@ -1406,7 +1419,12 @@ def run_init(target: str) -> int:
 
 def main() -> None:
     argv = sys.argv[1:]
-    mode = argv[0] if argv else "hook"
+    if not argv or argv[0] in ("--help", "-h"):
+        # Bare invocation must never fall through to hook mode (which blocks
+        # on stdin); print usage instead. --help exits clean, bare exits 64.
+        print(__doc__)
+        sys.exit(0 if argv else 64)
+    mode = argv[0]
     if mode in ("hook", "--claude-hook"):
         sys.exit(run_hook())
     if mode == "check":
@@ -1420,6 +1438,12 @@ def main() -> None:
     if mode == "global":
         import statutor_global_cli
         sys.exit(statutor_global_cli.main(argv[1:]))
+    if mode == "machine":
+        import statutor_worker
+        sys.exit(statutor_worker.machine_cli(argv[1:]))
+    if mode == "worker":
+        import statutor_worker
+        sys.exit(statutor_worker.worker_cli(argv[1:]))
     print(__doc__)
     sys.exit(64)
 

{statutor-0.4.0 → statutor-0.5.1}/core/statutor_doctor.py

@@ -42,6 +42,7 @@ import sys
 from datetime import date, datetime
 
 import statutor_core
+import statutor_worker
 
 SOFT_AGENTS_LINES = 120
 HANDOFF_STALE_DAYS = 3
@@ -141,6 +142,19 @@ def check(root: str) -> None:
                 "bypassed the hook/floor (that's drift)."
             )
 
+        fields = statutor_worker.parse_handoff_fields(text)
+        if all(fields[name] is None
+               for name in statutor_worker.ATTRIBUTION_FIELDS):
+            warnings.append(
+                f"{handoff_filename} has no v0.5 worker attribution block "
+                "(last_worker/last_machine/handoff_id/supersedes) — pre-v0.5 "
+                "ledger, still valid; add it on the next rewrite and record "
+                "completion with `statutor worker complete --session <id>`."
+            )
+        else:
+            for problem in statutor_worker.validate_handoff_metadata(text):
+                errors.append(f"{handoff_filename}: {problem}")
+
     done_ids: set[str] = set()
     if os.path.isfile(p(tasks_filename)):
         state_body = open(p(tasks_filename), encoding="utf-8").read()