@mrciphersmith/keryx 0.2.131 → 0.2.133

package/dist/cli.js

@@ -22216,8 +22216,12 @@ import { existsSync as existsSync14 } from "fs";
 import path89 from "path";
 async function gdgraphCommand(args) {
   if (process.env.KERYX_GDGRAPH_LOCAL !== "1") {
-    const delegated = await delegateToLocalRunner(args);
-    if (delegated) {
+    const delegation = await delegateToLocalRunner(args);
+    if (delegation.delegated) {
+      if (args[0] === "build" && delegation.exitCode === 0) {
+        await Promise.resolve().then(() => init_provenance());
+        await recordProvenance(process.cwd(), "gdgraph", new Date().toISOString());
+      }
       return;
     }
   }
@@ -22825,15 +22829,15 @@ async function changedFiles() {
 async function delegateToLocalRunner(args) {
   const localRunner = path89.join(process.cwd(), ".metaproject", "core", "gdgraph", "cli.ts");
   if (!existsSync14(localRunner)) {
-    return false;
+    return { delegated: false };
   }
   const command = args[0];
   const treesitterOn = command === "build" && await isCapabilityEnabled(process.cwd(), "gdgraph.treesitter");
   const delegatable = command === "build" && !treesitterOn || command === "query" && !args.includes("--json") && (args[1] === "cycles" || args[1] === "orphans");
   if (!delegatable) {
-    return false;
+    return { delegated: false };
   }
-  await new Promise((resolve, reject) => {
+  const exitCode = await new Promise((resolve, reject) => {
     const child = spawn4(process.execPath, [localRunner, ...args], {
       cwd: process.cwd(),
       stdio: "inherit",
@@ -22844,11 +22848,11 @@ async function delegateToLocalRunner(args) {
     });
     child.on("error", reject);
     child.on("close", (code) => {
-      process.exitCode = code ?? 1;
-      resolve();
+      resolve(code ?? 1);
     });
   });
-  return true;
+  process.exitCode = exitCode;
+  return { delegated: true, exitCode };
 }
 function printHelp3() {
   console.log(`keryx gdgraph
@@ -51129,7 +51133,7 @@ import path47 from "path";
 // package.json
 var package_default = {
   name: "@mrciphersmith/keryx",
-  version: "0.2.131",
+  version: "0.2.133",
   description: "Version-controlled project context for AI coding agents: code graph, architecture wiki, project memory, relevant tests, quality signals, and task flows.",
   private: false,
   publishConfig: {
@@ -59098,7 +59102,7 @@ init_provenance();
 
 // src/sync/diff.ts
 init_provenance();
-var CODE_EXT2 = /\.(ts|tsx|js|jsx|mjs|cjs|py|go|rs|java|rb|php|c|h|cc|cpp|hpp|cs|swift|kt|scala|sh|vue|svelte)$/;
+var CODE_EXT2 = /\.(ts|tsx|mts|cts|js|jsx|mjs|cjs|py|go|rs|java|rb|php|c|h|cc|cpp|hpp|cs|swift|kt|scala|sh|vue|svelte)$/;
 function isCodeFile(file) {
   return CODE_EXT2.test(file);
 }
@@ -59220,7 +59224,22 @@ On git pull / branch switch, they run 'keryx sync' (advisory report). Run 'keryx
     }
     const code = codeOnly(diff);
     if (totalChanges(code) === 0) {
-      console.log(`  up to date (built at ${provenance.commit.slice(0, 8)})`);
+      if (apply && provenance.commit !== head.commit) {
+        if (module === "gdwiki") {
+          const gate = await resolveWikiSourceGate(cwd, HEAD_NOT_REQUESTED);
+          if (gate.status !== "fresh") {
+            printApplyOutcome({ recorded: false, gate }, "", `  up to date (built at ${provenance.commit.slice(0, 8)}); HEAD moved to ${head.commit.slice(0, 8)} with no code changes, but provenance NOT advanced`);
+            console.log("");
+            continue;
+          }
+        }
+        await recordProvenance(cwd, module, at);
+        console.log(`  up to date (built at ${provenance.commit.slice(0, 8)}); no code changed \u2014 provenance advanced to ${head.commit.slice(0, 8)}`);
+      } else if (provenance.commit !== head.commit) {
+        console.log(`  up to date (built at ${provenance.commit.slice(0, 8)}); HEAD moved to ${head.commit.slice(0, 8)} with no code changes \u2014 run \`keryx sync --apply\` to advance provenance`);
+      } else {
+        console.log(`  up to date (built at ${provenance.commit.slice(0, 8)})`);
+      }
       console.log("");
       continue;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrciphersmith/keryx",
-  "version": "0.2.131",
+  "version": "0.2.133",
   "description": "Version-controlled project context for AI coding agents: code graph, architecture wiki, project memory, relevant tests, quality signals, and task flows.",
   "private": false,
   "publishConfig": {

package/src/gdgraph/staleness.ts

@@ -128,6 +128,27 @@ export async function checkGraphStaleness(cwd: string): Promise<StalenessCheck>
   let gitFailed = false;
 
   // --- new commit -----------------------------------------------------------
+  //
+  // Flow 280 (the graph-provenance stall): this comparison is intentionally a
+  // bare commit-hash check, and it stays one. The disagreement that flow
+  // fixed — a `.metaproject/`-only commit left `keryx sync` saying "nothing
+  // to rebuild" while THIS check said "stale" forever, because nothing ever
+  // advanced the provenance commit this reads — was not a defect in this
+  // comparison. `checkGraphStaleness` has no notion of "since provenance was
+  // last recorded" and no per-commit diff to reason from; it only ever sees
+  // the two endpoints (`provenance.commit`, `head.commit`). Rederiving "did
+  // any code file change between them" here would mean re-running the same
+  // diff `../sync/diff.ts` already computes, in a module whose contract is a
+  // cheap, dependency-light freshness probe (staleness.test.ts, AFC-10) —
+  // and would leave that diff computed twice, once here and once in sync's
+  // own loop, with the two free to drift. The fix instead makes the ONE place
+  // that already has the diff (`../commands/sync.ts`'s per-module loop)
+  // advance provenance to HEAD when that diff is empty, so this check's
+  // simple "did the commit move" question starts answering "no" again — which
+  // is also why it is correct for this to stay a hard equality check: once
+  // provenance is honestly advanced, an ADVANCING mismatch here really does
+  // mean the graph predates HEAD, and this is exactly the check the wiki gate
+  // (`../wiki/staleness.ts`) needs to keep trusting for that.
   const head = await gitHead(cwd);
   if (head === null) {
     gitFailed = true;