@cleocode/core 2026.9.15 → 2026.9.17

package/templates/CLEO-INJECTION.md

@@ -1,6 +1,6 @@
 # CLEO Protocol
 
-Version: 2.20.5 | CLI-only dispatch | `cleo <command> [args]`
+Version: 2.20.6 | CLI-only dispatch | `cleo <command> [args]`
 
 <!-- CLEO-INJECTION:section=session-start -->
 ## Universal protocol
@@ -194,9 +194,9 @@ Small legacy DBs beside large snapshots do not prove corruption. `cleo doctor su
 | Symbols touched by a task | `cleo nexus task-symbols <taskId>` |
 | Why does this symbol exist / who needs it | `cleo nexus why <symbol>` |
 | Detected communities / execution flows | `cleo nexus clusters` / `flows` |
-| Rebuild the index | `cleo nexus analyze` |
+| Refresh the index | `cleo nexus analyze` |
 
-**FIRST CALL IS `cleo nexus status`.** Check `nodeCount`, `lastIndexedAt`, `staleFileCount`/`fileCount`. No auto-refresh: newer symbols may return `E_NOT_FOUND`. For stale coverage, run `cleo nexus analyze` or inspect source with `git grep` and disclose that basis. Impact/context `E_NOT_FOUND` includes index size, median age and a repair command; inspect these first.
+**FIRST CALL IS `cleo nexus status`.** Check `nodeCount`, `lastIndexedAt`, `staleFileCount`/`fileCount`. Queries report `_nexus.freshness` and auto-refresh ≤25 stale files; beyond that they warn `W_NEXUS_INDEX_STALE`. `analyze` is incremental (`--full` rebuilds). For stale coverage, refresh or inspect source with `git grep` and disclose that basis. Impact/context `E_NOT_FOUND` includes index size, median age and a repair command; inspect these first.
 
 **Project resolution**: `--project-id` > `--path` > `cwd`.
 Default ID = `base64url(path).slice(0,32)`.

package/templates/cleo-gitignore

@@ -19,6 +19,11 @@
 #   parent-repo ignore rules, this file must NOT re-include those four
 #   files — doing so would unignore them at the project repository level
 #   and re-open the T5158 data-loss vector.
+#
+# ADR-094 (amends ADR-013 §9, 2026-09-24, T12325): `project-id` IS tracked. It holds
+#   the write-once portable project identity. CLEO creates it once and never
+#   rewrites it, so git has nothing to overwrite — unlike the four mutable
+#   files above, whose hazard was git replacing live state CLEO rewrites.
 # =============================================================================
 
 # Step 1: Ignore everything in .cleo/
@@ -34,6 +39,8 @@
 # Step 3: Allow project configuration files that are SAFE to track
 # (detected project facts and bootstrap scripts — not runtime state).
 !project-context.json
+# T12325: write-once portable project identity (ADR-094, amends ADR-013 §9).
+!project-id
 !setup-otel.sh
 !DATA-SAFETY-IMPLEMENTATION-SUMMARY.md