@mrciphersmith/keryx 0.3.130 → 0.3.132

package/dist/core.js

@@ -11988,6 +11988,7 @@ function renderMetaprojectGitignoreBlock() {
 # entries rather than inheriting coverage that does not exist.
 .metaproject/data/learning/observations/
 .metaproject/data/learning/candidates/
+.metaproject/data/learning/probes/
 # Recommendation journal (flow 392): what the human chose and why they deviated.
 # Personal runtime state, written 0o600.
 .metaproject/data/decisions/
@@ -29210,6 +29211,39 @@ function decisionWriters(kind, packageArg = "<review-dir>") {
 import { existsSync as existsSync7 } from "fs";
 import { cp, mkdir as mkdir9, mkdtemp, readFile as readFile22, readdir as readdir11, realpath as realpath12, rm as rm3, symlink, writeFile as writeFile6 } from "fs/promises";
 import path50 from "path";
+
+// src/lib/git-env.ts
+var GIT_DISCOVERY_OVERRIDE_VARS = [
+  "GIT_DIR",
+  "GIT_WORK_TREE",
+  "GIT_INDEX_FILE",
+  "GIT_OBJECT_DIRECTORY",
+  "GIT_ALTERNATE_OBJECT_DIRECTORIES",
+  "GIT_COMMON_DIR"
+];
+function withoutGitDiscoveryOverrides(env) {
+  const clean = {};
+  for (const [key, value] of Object.entries(env)) {
+    if (value !== undefined && !GIT_DISCOVERY_OVERRIDE_VARS.includes(key)) {
+      clean[key] = value;
+    }
+  }
+  return clean;
+}
+
+// src/review/worktree-provenance.ts
+var REVIEW_PACKAGES_DIR = ".metaproject/reviews";
+var EXCLUDE_REVIEW_PACKAGES = `:(exclude)${REVIEW_PACKAGES_DIR}`;
+var DEFAULT_PROVENANCE_LIMITS = {
+  maxUntrackedFiles: 20000,
+  maxHashedFileBytes: 10 * 1024 * 1024,
+  maxGitOutputBytes: 64 * 1024 * 1024,
+  maxTotalBytes: 256 * 1024 * 1024,
+  gitTimeoutMs: 60000,
+  maxMs: 120000
+};
+
+// src/review/mutate.ts
 var MUTANT_KINDS = ["behavior", "presentation"];
 var MUTANTS_SPEC = "mutants.json";
 var EVIDENCE_DIR = "research-evidence";
@@ -38342,25 +38376,6 @@ init_contained_write();
 import { existsSync as existsSync17 } from "fs";
 import { readFile as readFile61, readdir as readdir20 } from "fs/promises";
 import path119 from "path";
-
-// src/lib/git-env.ts
-var GIT_DISCOVERY_OVERRIDE_VARS = [
-  "GIT_DIR",
-  "GIT_WORK_TREE",
-  "GIT_INDEX_FILE",
-  "GIT_OBJECT_DIRECTORY",
-  "GIT_ALTERNATE_OBJECT_DIRECTORIES",
-  "GIT_COMMON_DIR"
-];
-function withoutGitDiscoveryOverrides(env) {
-  const clean = {};
-  for (const [key, value] of Object.entries(env)) {
-    if (value !== undefined && !GIT_DISCOVERY_OVERRIDE_VARS.includes(key)) {
-      clean[key] = value;
-    }
-  }
-  return clean;
-}
 // src/metrics/lifecycle.ts
 init_fs();
 init_guard();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrciphersmith/keryx",
-  "version": "0.3.130",
+  "version": "0.3.132",
   "description": "Version-controlled project context for AI coding agents: code graph, architecture wiki, project memory, relevant tests, quality signals, and task flows.",
   "private": false,
   "publishConfig": {
@@ -75,10 +75,12 @@
   ],
   "dependencies": {},
   "overrides": {
-    "fast-uri": "^3.1.6",
-    "ip-address": "^10.3.1",
+    "fast-uri": "^3.1.9",
+    "body-parser": "^2.4.0",
+    "ip-address": "^10.7.4",
     "hono": "^4.13.11",
     "qs": "^6.16.0",
+    "zod": "^4.6.6",
     "@hono/node-server": "^1.19.15",
     "protobufjs": "7.6.6",
     "sharp": "0.35.5"

package/src/gdskills/bundled/skills/review/review-orchestrator/SKILL.detail.md

@@ -775,6 +775,20 @@ and `.json`. A mutant is `killed` (the suite went red), `survived` (nothing pins
 behaviour), `timeout`, or `invalid` (anchor missing or not unique, file outside the copy).
 A survivor is evidence for the finding that names it.
 
+When `--test` is a plain `[env] [NAME=value] bun test <paths>` command, each mutant runs with
+`--bail` inserted right after `bun test`: the first red test ends that run, so a killed mutant
+costs the time to its first failure, not the whole suite. The baseline always runs in full, and
+a green run is the same with or without the flag, so a survivor stays a survivor. One verdict can move: a mutant that fails an early test and would hang in a later one is `killed` with bail and `timeout` without it. Any other command shape
+(`sh script`, quotes, pipes, `bunx`) runs as given. `--no-bail` turns this off and takes no value.
+The `.json` record carries `bail: true` when it was applied; always `startedAt`, `loadavg` (sampled
+at the start of the pass), `provenanceMs`, `copyMs` and `mutantsMs`; and `head` and `treeHash` only
+when the worktree is the root of a git checkout and the size and time limits of that step held.
+`treeHash` hashes the tracked changes against HEAD (staged or not) and the untracked, non-ignored
+files, so two passes over the same code agree. It leaves out the review packages under
+`.metaproject/reviews`, ignored files (the scratch copy still includes them), the inside of an
+untracked nested repository, and the content of an untracked file over 10 MiB (counted by size).
+Records written before these fields exist stay valid.
+
 `keryx review complete` refuses while proposed mutants are unrun on an attended round, unless the
 operator waived the pass themselves: the `review_waive_mutation` card in keryx shell, or their answer to
 the host question recorded with `keryx review waive-mutation --package <review-dir> --reason "<why>"