[ticket-001] chore(governance): upgrade standard adoption to v0.20.131

Author: tom-sapletta-com

.governance/agent_host_check.py

@@ -342,6 +342,8 @@ def python_declaration(marker: Path) -> tuple[dict[str, Any] | None, dict[str, A
         document = tomllib.loads(marker.read_text(encoding="utf-8"))
     except (OSError, tomllib.TOMLDecodeError):
         return None, {}
+    if not isinstance(document, dict):
+        return None, {}
     tool = document.get("tool")
     declaration = tool.get("wellmanifest") if isinstance(tool, dict) else None
     return (declaration if isinstance(declaration, dict) else None), document
@@ -359,6 +361,8 @@ def node_declaration(marker: Path) -> tuple[dict[str, Any] | None, dict[str, Any
 
 
 def lifecycle_value(kind: str, document: dict[str, Any]) -> str:
+    if not isinstance(document, dict):
+        return ""
     if kind == "npm-script":
         scripts = document.get("scripts")
         value = scripts.get("prepare") if isinstance(scripts, dict) else None

.governance/change-evaluation.schema.json

@@ -38,7 +38,7 @@
       "allOf": [
         {
           "if": {
-            "properties": { "event": { "enum": ["pull_request", "merge_group"] } },
+            "properties": { "event": { "const": "pull_request" } },
             "required": ["event"]
           },
           "then": { "required": ["pullRequest"] }

.governance/decision_record.py

@@ -198,8 +198,9 @@ def to_dsl(record: dict[str, Any]) -> str:
         f"VERDICT {record['verdict']} AUTHORITY {record['verdictAuthority']}"
     )
     rejected = record["rejected"]
+    because = " ".join(str(rejected["because"]).splitlines()).strip()
     lines.append(
-        f"REJECTED {rejected['alternative']} BECAUSE {rejected['because']}"
+        f"REJECTED {rejected['alternative']} BECAUSE {because}"
     )
     adv = record.get("advisory")
     if adv:
@@ -208,7 +209,8 @@ def to_dsl(record: dict[str, Any]) -> str:
             f'MODEL {format_value(adv.get("model", ""))}'
         )
     for assertion in record.get("assertions") or []:
-        lines.append(f"ASSERT {assertion}")
+        assert_text = " ".join(str(assertion).splitlines()).strip()
+        lines.append(f"ASSERT {assert_text}")
     return "\n".join(lines) + "\n"
 
 

.governance/error/GOV-PHYS.md

@@ -44,4 +44,4 @@ Expected result: no `GOV-PHYS-*` finding.
 ## Related rules
 
 - `P-PHYS-001`, `P-PHYS-002`, `P-PHYS-003` in `POLICY.md`.
-- [Physical interface contracts](../docs/information/physical-interface-contracts.md).
+- [Physical interface contracts](https://github.com/wellmanifest/new-project/blob/main/docs/information/physical-interface-contracts.md).

.governance/error/GOV-VERSION.md

@@ -26,7 +26,12 @@ Ponadto w modelach podziału na workstreamy (`manifest.json`), workstream `integ
        from importlib.metadata import version as _meta_version
        __version__ = _meta_version("my-package")
    except Exception:
-       __version__ = (Path(__file__).resolve().parent / "VERSION").read_text(encoding="utf-8").strip()
+       from pathlib import Path
+       _root = Path(__file__).resolve().parent
+       while _root.parent != _root and not (_root / "VERSION").is_file():
+           _root = _root.parent
+       _version_file = _root / "VERSION"
+       __version__ = _version_file.read_text(encoding="utf-8").strip() if _version_file.is_file() else "0.0.0"
    ```
    Jeśli w kodzie pozostaje statyczne przypisanie `__version__ = "..."`, jego wartość musi być identyczna z `VERSION`.
 4. Uruchom bramkę: `./project/governance-check.sh`.

.governance/governance_check.py

@@ -35,7 +35,9 @@
 sys.dont_write_bytecode = True
 try:
     try:
-        from ticket_activity import ActivityError, delivery_landed, resolve as resolve_ticket_activity
+        from ticket_activity import (ActivityError, delivery_landed,
+                                     parse_ticket_state_text as _shared_ticket_state,
+                                     resolve as resolve_ticket_activity)
     except ModuleNotFoundError:
         _activity_spec = importlib.util.spec_from_file_location(
             "ticket_activity", Path(__file__).with_name("ticket_activity.py")
@@ -48,6 +50,7 @@
         ActivityError = _activity_module.ActivityError
         delivery_landed = _activity_module.delivery_landed
         resolve_ticket_activity = _activity_module.resolve
+        _shared_ticket_state = _activity_module.parse_ticket_state_text
 finally:
     sys.dont_write_bytecode = _previous_bytecode_policy
 
@@ -981,12 +984,12 @@ def placement_error(value: Any) -> str | None:
     allowed = required | {"runtimeOwner", "adopt"}
     if not isinstance(value, dict) or not required <= set(value) <= allowed:
         return "placement must contain home and shape"
-    if value["home"] not in PLACEMENT_HOMES:
+    if not isinstance(value.get("home"), str) or value["home"] not in PLACEMENT_HOMES:
         return "placement home is invalid"
-    if value["shape"] not in PLACEMENT_SHAPES:
+    if not isinstance(value.get("shape"), str) or value["shape"] not in PLACEMENT_SHAPES:
         return "placement shape is invalid"
     runtime_owner = value.get("runtimeOwner")
-    if runtime_owner is not None and runtime_owner not in PLACEMENT_HOMES:
+    if runtime_owner is not None and (not isinstance(runtime_owner, str) or runtime_owner not in PLACEMENT_HOMES):
         return "placement runtimeOwner is invalid"
     if value["home"] == "wellmanifest" and value["shape"] == "runtime_service":
         return "runtime_service must not HOME wellmanifest; ADOPT packs from a product organization"
@@ -1417,14 +1420,12 @@ def check_history_order(
     _, commit = first_implementation
     ticket_intent = f"{ticket_root.rstrip('/')}/{ticket_name}/{intent_path}"
     try:
-        subprocess.run(
-            ["git", "cat-file", "-e", f"{commit}:{ticket_intent}"], cwd=root,
-            check=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL,
-        )
-    except subprocess.CalledProcessError:
+        raw_blob = git_output(root, ["cat-file", "-p", f"{commit}:{ticket_intent}"])
+        json.loads(raw_blob.decode("utf-8"))
+    except (subprocess.CalledProcessError, ValueError, UnicodeDecodeError):
         report.add(
             "GOV-INTENT-003",
-            f"{ticket_intent} was absent from the first material implementation commit.",
+            f"{ticket_intent} was absent or invalid in the first material implementation commit.",
             "Include the validated intent atomically with the first material commit; do not create a separate plan-only commit.",
             [ticket_intent], {"firstImplementationCommit": commit},
         )
@@ -1774,12 +1775,7 @@ def parse_ticket_state(readme: Path) -> tuple[str | None, str | None]:
 
 
 def parse_ticket_state_text(text: str) -> tuple[str | None, str | None]:
-    status_match = re.search(r"(?mi)^-[ \t]+\*\*Status\*\*:[ \t]*([A-Z_]+)[ \t]*$", text)
-    state_match = re.search(r"(?mi)^-[ \t]+\*\*Workflow state\*\*:[ \t]*([A-Z_]+)[ \t]*$", text)
-    return (
-        status_match.group(1).upper() if status_match else None,
-        state_match.group(1).upper() if state_match else None,
-    )
+    return _shared_ticket_state(text)
 
 
 def ticket_directories(root: Path, config: dict[str, Any]) -> list[Path]:
@@ -1946,8 +1942,9 @@ def load_repository_policy_ticket(
         "integrationTicket": None,
         "classification": {"kind": "SERVICE", "priority": "P2", "origin": "requested"},
     }
+    ticket_root = policy.get("tickets", {}).get("root", "project")
     return TicketRecord(
-        root / str(raw_path),
+        root / str(ticket_root) / adapter["ticket"],
         adapter["status"],
         adapter["workflow"],
         intent,
@@ -2854,12 +2851,19 @@ def validate_domain_errors(root: Path, errors: dict[str, Any], domain: str, comm
         {"code", "documentation", "retryability", "status", "rejectionEvent"},
         "errors",
     )
+    command_for_code = {
+        code: [cmd_name for cmd_name, cmd in commands.items() if code in cmd["rejects"]]
+        for code in error_index
+    }
     for error in error_index.values():
         contract_document(
             root, error["documentation"], f"error/{error['code']}.md", "error",
         )
         if error["rejectionEvent"] not in event_index:
             raise ValueError("error rejection event is unknown")
+        emitter = event_index[error["rejectionEvent"]]["emittedBy"]
+        if emitter not in command_for_code.get(error["code"], []):
+            raise ValueError("error rejection event emitter does not match rejecting command")
         if error["retryability"] not in {
             "never", "after-correction", "after-new-evidence",
         }:
@@ -2937,6 +2941,22 @@ def first_repo_file(names: list[str]) -> str | None:
             )
 
 
+def _section_aware_toml_version(content: str, section_names: tuple[str, ...]) -> str | None:
+    current_section = None
+    for line in content.splitlines():
+        line = line.strip()
+        if not line or line.startswith("#"):
+            continue
+        if line.startswith("[") and line.endswith("]"):
+            current_section = line.strip("[]").strip()
+            continue
+        if current_section in section_names:
+            m = re.match(r'^version\s*=\s*["\']([^"\']+)["\']', line)
+            if m:
+                return m.group(1).strip()
+    return None
+
+
 def _extract_pyproject_version(content: str) -> str | None:
     if tomllib is not None:
         try:
@@ -2952,8 +2972,7 @@ def _extract_pyproject_version(content: str) -> str | None:
                 return flit["version"].strip()
         except Exception:
             pass
-    m = re.search(r'^\s*version\s*=\s*["\']([^"\']+)["\']', content, re.MULTILINE)
-    return m.group(1).strip() if m else None
+    return _section_aware_toml_version(content, ("project", "tool.poetry", "tool.flit.metadata"))
 
 
 def _extract_setup_py_version(content: str) -> str | None:
@@ -2973,8 +2992,7 @@ def _extract_cargo_version(content: str) -> str | None:
                 return pkg["version"].strip()
         except Exception:
             pass
-    m = re.search(r'^\s*version\s*=\s*["\']([^"\']+)["\']', content, re.MULTILINE)
-    return m.group(1).strip() if m else None
+    return _section_aware_toml_version(content, ("package",))
 
 
 def check_version_parity(root: Path, manifest: dict[str, Any], report: Report) -> None:

.governance/manifest.base.json

@@ -138,7 +138,7 @@
   "stacks": [],
   "standard": {
     "id": "wellmanifest/new-project",
-    "version": "0.20.129"
+    "version": "0.20.131"
   },
   "ticket": {
     "activeStatuses": [

.governance/manifest.json

@@ -254,7 +254,7 @@
   "stacks": [],
   "standard": {
     "id": "wellmanifest/new-project",
-    "version": "0.20.129"
+    "version": "0.20.131"
   },
   "ticket": {
     "activeStatuses": [