@mrciphersmith/keryx 0.3.0 → 0.3.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrciphersmith/keryx",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Version-controlled project context for AI coding agents: code graph, architecture wiki, project memory, relevant tests, quality signals, and task flows.",
   "private": false,
   "publishConfig": {

package/src/gdskills/bundled/agents/go-code-auditor.md

@@ -1,7 +1,7 @@
 ---
 schema_version: 1
 name: "go-code-auditor"
-description: "Reviews Go code, read-only, for the 6 stack-specific risk patterns this pack's governance gate has confirmed for go (correctness, resource, and security patterns particular to Go). Dispatched for a stack-specific code-quality pass distinct from generic review, gated the same stack_requires-style way review-orchestrator already uses for per-stack reviewers."
+description: "Reviews Go code, read-only, for the 6 stack-specific risk patterns this pack's authors documented for go (correctness, resource, and security patterns particular to Go). Dispatched for a stack-specific code-quality pass distinct from generic review, gated the same stack_requires-style way review-orchestrator already uses for per-stack reviewers."
 role: "A Go-focused code auditor who reads for this stack's known risk patterns without editing anything, and ranks findings by real-world impact rather than listing every theoretical concern equally."
 tools:
   - "read_file"

package/src/gdskills/bundled/agents/python-code-auditor.md

@@ -1,7 +1,7 @@
 ---
 schema_version: 1
 name: "python-code-auditor"
-description: "Reviews Python code, read-only, for the 6 stack-specific risk patterns this pack's governance gate has confirmed for python (correctness, resource, and security patterns particular to Python). Dispatched for a stack-specific code-quality pass distinct from generic review, gated the same stack_requires-style way review-orchestrator already uses for per-stack reviewers."
+description: "Reviews Python code, read-only, for the 6 stack-specific risk patterns this pack's authors documented for python (correctness, resource, and security patterns particular to Python). Dispatched for a stack-specific code-quality pass distinct from generic review, gated the same stack_requires-style way review-orchestrator already uses for per-stack reviewers."
 role: "A Python-focused code auditor who reads for this stack's known risk patterns without editing anything, and ranks findings by real-world impact rather than listing every theoretical concern equally."
 tools:
   - "read_file"

package/src/gdskills/bundled/install-manifest.json

@@ -78,6 +78,44 @@
       ],
       "stackDetectionAware": true
     },
+    "vue": {
+      "description": "Common rules plus the Vue stack pack component (`vue-rules` + `vue-skills`, from src/gdskills/bundled/stacks/vue/), installed when `keryx stack detect` finds a matching tag.",
+      "modules": [
+        "core-common-rules",
+        "skill-lifecycle"
+      ],
+      "components": [
+        "framework:vue",
+        "lang:ts-js-node"
+      ],
+      "stackDetectionAware": true
+    },
+    "angular": {
+      "description": "Common rules plus the Angular stack pack component (`angular-rules` + `angular-skills`, from src/gdskills/bundled/stacks/angular/), installed when `keryx stack detect` finds a matching tag.",
+      "modules": [
+        "core-common-rules",
+        "skill-lifecycle"
+      ],
+      "components": [
+        "framework:angular",
+        "lang:ts-js-node"
+      ],
+      "stackDetectionAware": true
+    },
+    "nextjs-nuxt": {
+      "description": "Common rules plus the Next.js/Nuxt meta-framework stack pack component (`nextjs-nuxt-rules` + `nextjs-nuxt-skills`, from src/gdskills/bundled/stacks/nextjs-nuxt/) alongside its React and Vue bases, installed when `keryx stack detect` finds a matching tag (nextjs or nuxt).",
+      "modules": [
+        "core-common-rules",
+        "skill-lifecycle"
+      ],
+      "components": [
+        "framework:react",
+        "framework:vue",
+        "framework:nextjs-nuxt",
+        "lang:ts-js-node"
+      ],
+      "stackDetectionAware": true
+    },
     "full": {
       "description": "Every registered module and component, unconditionally.",
       "modules": [
@@ -89,8 +127,12 @@
         "react-review-skills",
         "mobx-review-skill",
         "mobx-store-template-rule",
+        "mobx-rules",
+        "mobx-skills",
         "nestjs-review-skill",
         "nestjs-dto-rule",
+        "nestjs-rules",
+        "nestjs-skills",
         "python-rules",
         "python-skills",
         "ts-js-node-rules",
@@ -98,7 +140,13 @@
         "react-rules",
         "react-skills",
         "go-rules",
-        "go-skills"
+        "go-skills",
+        "vue-rules",
+        "vue-skills",
+        "angular-rules",
+        "angular-skills",
+        "nextjs-nuxt-rules",
+        "nextjs-nuxt-skills"
       ],
       "components": [
         "lang:ts-js-node",
@@ -106,7 +154,10 @@
         "capability:mobx",
         "framework:nestjs",
         "lang:python",
-        "lang:go"
+        "lang:go",
+        "framework:vue",
+        "framework:angular",
+        "framework:nextjs-nuxt"
       ]
     }
   },
@@ -441,6 +492,178 @@
       "defaultInstall": true,
       "cost": "medium",
       "stability": "stable"
+    },
+    "nestjs-rules": {
+      "kind": "rule",
+      "description": "NestJS stack pack rules (coding-style, patterns, security, testing; scoped to *.ts) from src/gdskills/bundled/stacks/nestjs/rules/. Complements, does not replace, the existing nestjs-dto-rule.",
+      "paths": [
+        "src/gdskills/bundled/stacks/nestjs/rules/*.mdc"
+      ],
+      "targets": [
+        "claude",
+        "keryx-shell"
+      ],
+      "dependencies": [
+        "ts-js-node-rules"
+      ],
+      "defaultInstall": true,
+      "cost": "light",
+      "stability": "experimental"
+    },
+    "nestjs-skills": {
+      "kind": "skill",
+      "description": "NestJS stack pack skills (implementation, testing, build-fix) from src/gdskills/bundled/stacks/nestjs/skills/. Complements, does not replace, the existing nestjs-review-skill (review-backend).",
+      "paths": [
+        "src/gdskills/bundled/stacks/nestjs/skills/**"
+      ],
+      "targets": [
+        "claude",
+        "keryx-shell"
+      ],
+      "dependencies": [
+        "ts-js-node-skills"
+      ],
+      "defaultInstall": true,
+      "cost": "medium",
+      "stability": "experimental"
+    },
+    "vue-rules": {
+      "kind": "rule",
+      "description": "Vue stack pack rules (coding-style, patterns, security, testing; scoped to *.vue) from src/gdskills/bundled/stacks/vue/rules/.",
+      "paths": [
+        "src/gdskills/bundled/stacks/vue/rules/*.mdc"
+      ],
+      "targets": [
+        "claude",
+        "keryx-shell"
+      ],
+      "dependencies": [
+        "ts-js-node-rules"
+      ],
+      "defaultInstall": true,
+      "cost": "light",
+      "stability": "experimental"
+    },
+    "vue-skills": {
+      "kind": "skill",
+      "description": "Vue stack pack skills (implementation, testing, code review, build-fix, Vue 2 to Vue 3 migration) from src/gdskills/bundled/stacks/vue/skills/.",
+      "paths": [
+        "src/gdskills/bundled/stacks/vue/skills/**"
+      ],
+      "targets": [
+        "claude",
+        "keryx-shell"
+      ],
+      "dependencies": [
+        "ts-js-node-skills"
+      ],
+      "defaultInstall": true,
+      "cost": "medium",
+      "stability": "experimental"
+    },
+    "angular-rules": {
+      "kind": "rule",
+      "description": "Angular stack pack rules (coding-style, patterns, security, testing; scoped to *.ts/*.html) from src/gdskills/bundled/stacks/angular/rules/.",
+      "paths": [
+        "src/gdskills/bundled/stacks/angular/rules/*.mdc"
+      ],
+      "targets": [
+        "claude",
+        "keryx-shell"
+      ],
+      "dependencies": [
+        "ts-js-node-rules"
+      ],
+      "defaultInstall": true,
+      "cost": "light",
+      "stability": "experimental"
+    },
+    "angular-skills": {
+      "kind": "skill",
+      "description": "Angular stack pack skills (implementation, testing, code review, build-fix) from src/gdskills/bundled/stacks/angular/skills/.",
+      "paths": [
+        "src/gdskills/bundled/stacks/angular/skills/**"
+      ],
+      "targets": [
+        "claude",
+        "keryx-shell"
+      ],
+      "dependencies": [
+        "ts-js-node-skills"
+      ],
+      "defaultInstall": true,
+      "cost": "medium",
+      "stability": "experimental"
+    },
+    "nextjs-nuxt-rules": {
+      "kind": "rule",
+      "description": "Next.js/Nuxt meta-framework stack pack rules (coding-style, patterns, security, testing; scoped to *.tsx/*.jsx/*.vue) from src/gdskills/bundled/stacks/nextjs-nuxt/rules/.",
+      "paths": [
+        "src/gdskills/bundled/stacks/nextjs-nuxt/rules/*.mdc"
+      ],
+      "targets": [
+        "claude",
+        "keryx-shell"
+      ],
+      "dependencies": [
+        "react-rules",
+        "vue-rules"
+      ],
+      "defaultInstall": true,
+      "cost": "light",
+      "stability": "experimental"
+    },
+    "nextjs-nuxt-skills": {
+      "kind": "skill",
+      "description": "Next.js/Nuxt meta-framework stack pack skills (implementation, testing, code review, build-fix, upgrade migration) from src/gdskills/bundled/stacks/nextjs-nuxt/skills/.",
+      "paths": [
+        "src/gdskills/bundled/stacks/nextjs-nuxt/skills/**"
+      ],
+      "targets": [
+        "claude",
+        "keryx-shell"
+      ],
+      "dependencies": [
+        "react-skills",
+        "vue-skills"
+      ],
+      "defaultInstall": true,
+      "cost": "medium",
+      "stability": "experimental"
+    },
+    "mobx-rules": {
+      "kind": "rule",
+      "description": "MobX stack pack rules (coding-style, patterns, security, testing; scoped to *.ts/*.tsx) from src/gdskills/bundled/stacks/mobx/rules/. Complements, does not replace, the existing mobx-store-template-rule.",
+      "paths": [
+        "src/gdskills/bundled/stacks/mobx/rules/*.mdc"
+      ],
+      "targets": [
+        "claude",
+        "keryx-shell"
+      ],
+      "dependencies": [
+        "react-rules"
+      ],
+      "defaultInstall": true,
+      "cost": "light",
+      "stability": "experimental"
+    },
+    "mobx-skills": {
+      "kind": "skill",
+      "description": "MobX stack pack skills (store implementation, observable testing) from src/gdskills/bundled/stacks/mobx/skills/. Complements, does not replace, the existing mobx-review-skill (code-mobx-store-review).",
+      "paths": [
+        "src/gdskills/bundled/stacks/mobx/skills/**"
+      ],
+      "targets": [
+        "claude",
+        "keryx-shell"
+      ],
+      "dependencies": [
+        "react-skills"
+      ],
+      "defaultInstall": true,
+      "cost": "medium",
+      "stability": "experimental"
     }
   },
   "components": {
@@ -478,7 +701,9 @@
       "family": "capability",
       "modules": [
         "mobx-review-skill",
-        "mobx-store-template-rule"
+        "mobx-store-template-rule",
+        "mobx-rules",
+        "mobx-skills"
       ],
       "detectionMarkers": [
         "mobx"
@@ -491,7 +716,9 @@
       "family": "framework",
       "modules": [
         "nestjs-review-skill",
-        "nestjs-dto-rule"
+        "nestjs-dto-rule",
+        "nestjs-rules",
+        "nestjs-skills"
       ],
       "detectionMarkers": [
         "nestjs"
@@ -525,6 +752,46 @@
       "provenance": {
         "origin": "authored"
       }
+    },
+    "framework:vue": {
+      "family": "framework",
+      "modules": [
+        "vue-rules",
+        "vue-skills"
+      ],
+      "detectionMarkers": [
+        "vue"
+      ],
+      "provenance": {
+        "origin": "authored"
+      }
+    },
+    "framework:angular": {
+      "family": "framework",
+      "modules": [
+        "angular-rules",
+        "angular-skills"
+      ],
+      "detectionMarkers": [
+        "angular"
+      ],
+      "provenance": {
+        "origin": "authored"
+      }
+    },
+    "framework:nextjs-nuxt": {
+      "family": "framework",
+      "modules": [
+        "nextjs-nuxt-rules",
+        "nextjs-nuxt-skills"
+      ],
+      "detectionMarkers": [
+        "nextjs",
+        "nuxt"
+      ],
+      "provenance": {
+        "origin": "authored"
+      }
     }
   }
 }

package/src/gdskills/bundled/rules/core/model-selection.mdc

@@ -83,6 +83,57 @@ residue, and it is kept in the smallest shape that works:
 A model whose name is a codename carrying no size is unrankable by design. That
 is the honest outcome, not a gap to be patched with folklore.
 
+**Version is deliberately not ranked here.** `rankModelId` never parses a
+version number out of an id — two ids in the same size-word family but a
+different generation (an older vs. a newer numbered release of the same
+line) rank IDENTICALLY through this resolution, and a
+`standard`/`light`/`deep` dispatch never distinguishes between them. That
+stays true for `spawn_subagent` and `keryx review tier` after the decision
+below; it is a DIFFERENT consumer's rule, not this one's.
+
+The routing "derived default table" (`deriveDefaultTable`,
+`src/harness/routing/derive-default-table.ts`, flow 327/PRD §6.3) is that
+different consumer: it picks one model per routing category (`review`,
+`subagents`, `quick`, …) from a whole connected catalogue, not a tier
+relative to the session. The operator decided, 2026-09-25 (review of PR #718:
+a session's newer release lost a tie to an older release of the SAME family
+it should have beaten), that WITHIN the same family and vendor a newer
+version ranks higher there — the family word (a size marker from this same
+`MODEL_RANK_HINTS` list) already carries the size class, so version is free
+to order generations within it. That table reuses
+`rankModelId`/`MODEL_RANK_HINTS` UNMODIFIED for the size axis and adds its
+own separate, conservative version parse on top of it — nothing above
+changes for this module's own tier resolution.
+
+That version parse (`parseModelVersion`/`familyKey`, round 2) reads BOTH a
+dotted id (`vendor-opus-5.5`, `gemini-3.8-flash`) and a real
+Anthropic-style HYPHENATED one, where a run of 2-3 adjacent short (1-2
+digit) numeric tokens reads as a dotted version (`vendor-opus-4-8` → `4.8`).
+It still refuses a date/snapshot-shaped token (6-8 bare digits) and more
+than one numeric group in the same id — no version rather than a guess. A
+`gpt-4o`-style id (a short number plus one trailing letter) parses the
+number alone as the version, the letter kept only as an ignored variant
+tag, so `gpt-4o` and `gpt-4.1` compare within the same family instead of
+never comparing at all. Two versions of the same family are never decided
+by alphabetical order — the id-string fallback only applies when neither
+side has a parseable version.
+
+**A parameter-size token is never a version (round 3, review of PR #718).**
+`7b`, `32b`, `70b`, `1.5b`, `8x7b` — a total or MoE "N experts x M billion"
+param count — always stay in `familyKey` and are never fed to
+`parseModelVersion`. Before this fix, the letter-variant shape meant for
+`gpt-4o` (`/^(\d{1,2})([a-z])$/`, any trailing lowercase letter) also
+matched a size token, so `qwen2.5-coder-7b` and `qwen2.5-coder-32b` were
+misread as the SAME family at "version" 7 vs. 32 — merging two genuinely
+different-sized models and ranking the smaller one "newer". The letter
+variant is now restricted to the one real vendor shape that needs it
+(`4o`'s trailing `o`); every other trailing letter after a short digit run
+is a size suffix, so `qwen2.5-coder-7b`/`qwen2.5-coder-32b` and
+`llama-3.3-70b`/`llama-3.3-8b` key to different families and are never
+version-compared against each other. A trailing `-latest`/`-preview` alias
+word is also stripped from `familyKey` only (never from the id itself), so
+`vendor-3-7-sonnet-latest` joins the same family as `vendor-sonnet-5`.
+
 ## Falling back
 
 Ranking is **refused**, and every tier keeps the session's provider and model,