@mrciphersmith/keryx 0.2.131 → 0.2.132

package/dist/cli.js

@@ -51129,7 +51129,7 @@ import path47 from "path";
 // package.json
 var package_default = {
   name: "@mrciphersmith/keryx",
-  version: "0.2.131",
+  version: "0.2.132",
   description: "Version-controlled project context for AI coding agents: code graph, architecture wiki, project memory, relevant tests, quality signals, and task flows.",
   private: false,
   publishConfig: {
@@ -59098,7 +59098,7 @@ init_provenance();
 
 // src/sync/diff.ts
 init_provenance();
-var CODE_EXT2 = /\.(ts|tsx|js|jsx|mjs|cjs|py|go|rs|java|rb|php|c|h|cc|cpp|hpp|cs|swift|kt|scala|sh|vue|svelte)$/;
+var CODE_EXT2 = /\.(ts|tsx|mts|cts|js|jsx|mjs|cjs|py|go|rs|java|rb|php|c|h|cc|cpp|hpp|cs|swift|kt|scala|sh|vue|svelte)$/;
 function isCodeFile(file) {
   return CODE_EXT2.test(file);
 }
@@ -59220,7 +59220,22 @@ On git pull / branch switch, they run 'keryx sync' (advisory report). Run 'keryx
     }
     const code = codeOnly(diff);
     if (totalChanges(code) === 0) {
-      console.log(`  up to date (built at ${provenance.commit.slice(0, 8)})`);
+      if (apply && provenance.commit !== head.commit) {
+        if (module === "gdwiki") {
+          const gate = await resolveWikiSourceGate(cwd, HEAD_NOT_REQUESTED);
+          if (gate.status !== "fresh") {
+            printApplyOutcome({ recorded: false, gate }, "", `  up to date (built at ${provenance.commit.slice(0, 8)}); HEAD moved to ${head.commit.slice(0, 8)} with no code changes, but provenance NOT advanced`);
+            console.log("");
+            continue;
+          }
+        }
+        await recordProvenance(cwd, module, at);
+        console.log(`  up to date (built at ${provenance.commit.slice(0, 8)}); no code changed \u2014 provenance advanced to ${head.commit.slice(0, 8)}`);
+      } else if (provenance.commit !== head.commit) {
+        console.log(`  up to date (built at ${provenance.commit.slice(0, 8)}); HEAD moved to ${head.commit.slice(0, 8)} with no code changes \u2014 run \`keryx sync --apply\` to advance provenance`);
+      } else {
+        console.log(`  up to date (built at ${provenance.commit.slice(0, 8)})`);
+      }
       console.log("");
       continue;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrciphersmith/keryx",
-  "version": "0.2.131",
+  "version": "0.2.132",
   "description": "Version-controlled project context for AI coding agents: code graph, architecture wiki, project memory, relevant tests, quality signals, and task flows.",
   "private": false,
   "publishConfig": {

package/src/gdgraph/staleness.ts

@@ -128,6 +128,27 @@ export async function checkGraphStaleness(cwd: string): Promise<StalenessCheck>
   let gitFailed = false;
 
   // --- new commit -----------------------------------------------------------
+  //
+  // Flow 280 (the graph-provenance stall): this comparison is intentionally a
+  // bare commit-hash check, and it stays one. The disagreement that flow
+  // fixed — a `.metaproject/`-only commit left `keryx sync` saying "nothing
+  // to rebuild" while THIS check said "stale" forever, because nothing ever
+  // advanced the provenance commit this reads — was not a defect in this
+  // comparison. `checkGraphStaleness` has no notion of "since provenance was
+  // last recorded" and no per-commit diff to reason from; it only ever sees
+  // the two endpoints (`provenance.commit`, `head.commit`). Rederiving "did
+  // any code file change between them" here would mean re-running the same
+  // diff `../sync/diff.ts` already computes, in a module whose contract is a
+  // cheap, dependency-light freshness probe (staleness.test.ts, AFC-10) —
+  // and would leave that diff computed twice, once here and once in sync's
+  // own loop, with the two free to drift. The fix instead makes the ONE place
+  // that already has the diff (`../commands/sync.ts`'s per-module loop)
+  // advance provenance to HEAD when that diff is empty, so this check's
+  // simple "did the commit move" question starts answering "no" again — which
+  // is also why it is correct for this to stay a hard equality check: once
+  // provenance is honestly advanced, an ADVANCING mismatch here really does
+  // mean the graph predates HEAD, and this is exactly the check the wiki gate
+  // (`../wiki/staleness.ts`) needs to keep trusting for that.
   const head = await gitHead(cwd);
   if (head === null) {
     gitFailed = true;