@ngockhoale/ukit 2.3.17 → 2.3.19

package/CHANGELOG.md

@@ -2,6 +2,21 @@
 
 All notable changes to UKit are documented here.
 
+## 2.3.19 - 2026-09-12
+
+C14 bug-fix release record — one correctness fix is shipped; this release adds no new features.
+
+- **Completion gate no longer silently releases a reentrant stop.** `templates/.claude/ukit/runtime/execution-ledger.mjs` (`--evaluate-stop`) had a `stop_hook_active` valve: when Claude Code re-fired `Stop` after the gate had already blocked once, the valve emitted only a `systemMessage` with no `decision` while completion evidence was still missing, so the turn ended and the session idled until the human typed "tiếp". The valve is removed — a reentrant stop is now evaluated like any other stop, blocking again with the actionable missing-evidence reason (produce the evidence or report a blocker), and the loop stays bounded by the existing visible continuation cap and the verification-loop blocker, so a finished task is never trapped.
+
+## 2.3.18 - 2026-09-12
+
+C13 bug-sweep release record — two wave-1 correctness fixes are shipped; this release adds no new features.
+
+- **Task-budget validator heading and target-count fix.** `src/core/taskBudgetValidator.js` and the shipped twin `templates/.claude/ukit/index/task-budget-validator.mjs` now accept the template's `## Test Cases (REQUIRED — TDD)` heading without a false `missing-field` verdict and count only top-level `## Target Files` bullets, avoiding indented sub-bullet miscounts.
+- **Task-progress guard multi-section fix.** `src/core/taskProgressGuard.js` now evaluates milestone entries across every `## Progress` section, so a fresh appended entry is not masked by an older first-section entry while malformed and drift checks remain active.
+
+Verification: version pin and targeted regression suites pass; `yarn release:verify` is the closing release gate.
+
 ## 2.3.17 - 2026-09-12
 
 Long-task resilience — a handoff run is now measured before planning, checkpointed during

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ngockhoale/ukit",
-  "version": "2.3.17",
+  "version": "2.3.19",
   "description": "Install/update an index-first AI workspace for Claude Code, OpenAI Codex, OpenCode, and omp (Oh My Pi).",
   "license": "MIT",
   "type": "module",

package/src/core/ensureGitignore.js

@@ -2,17 +2,22 @@ import fs from 'node:fs/promises';
 import path from 'node:path';
 import { writeFileAtomic } from './fileOps.js';
 
+// Root-anchored (leading `/`) so the block only ignores project-root entries.
+// Unanchored dir entries (`.claude/`) match same-named dirs at ANY depth and
+// hid templates/.claude from git — the C12 trap `ukit install` kept re-adding.
+// Entries with an inner slash (`.claude/ukit/...`) are already root-anchored
+// by gitignore semantics.
 const UKIT_ENTRIES = [
-  '.cache/',
+  '/.cache/',
   // legacy: Antigravity adapter removed in v2.2.0; leftovers must stay ignored
-  '.antigravity/',
-  '.claude/',
-  '.codex/',
-  '.omp/',
-  '.ukit/',
-  'opencode.json',
-  'AGENTS.md',
-  'CLAUDE.md',
+  '/.antigravity/',
+  '/.claude/',
+  '/.codex/',
+  '/.omp/',
+  '/.ukit/',
+  '/opencode.json',
+  '/AGENTS.md',
+  '/CLAUDE.md',
   '.claude/ukit/.ukit/',
   '.claude/ukit/permission-usage.json',
   '.claude/ukit/permission-audit.log',

package/src/core/taskBudgetValidator.js

@@ -88,17 +88,23 @@ function splitSections(markdown) {
 }
 
 function getSectionBody(sections, name) {
-  if (!sections.has(name)) return null;
-  return sections.get(name).join('\n');
+  if (sections.has(name)) return sections.get(name).join('\n');
+  const normalizedName = name.replace(/\s*\([^)]*\)\s*$/, '');
+  for (const [heading, body] of sections) {
+    if (heading.replace(/\s*\([^)]*\)\s*$/, '') === normalizedName) {
+      return body.join('\n');
+    }
+  }
+  return null;
 }
 
-// Count bullets under `## Target Files` — lines whose first non-whitespace char is `- `
+// Count bullets under `## Target Files` — only column-0 bullet lines.
 function countTargetFiles(body) {
   if (body == null) return 0;
   const lines = body.split('\n');
   let count = 0;
   for (const line of lines) {
-    if (/^\s*-\s+\S/.test(line)) count += 1;
+    if (/^-\s+\S/.test(line)) count += 1;
   }
   return count;
 }

package/src/core/taskProgressGuard.js

@@ -28,6 +28,7 @@
 // future watchdog integration) can inject a fixed timestamp.
 
 const PROGRESS_HEADING = /^##\s+Progress\s*$/m;
+const PROGRESS_HEADING_GLOBAL = /^##\s+Progress\s*$/gm;
 const REPORT_HEADING = /^##\s+Executor Report\s*$/m;
 const TARGET_HEADING = /^##\s+Target Files\s*$/m;
 const ENTRY_RE = /^-\s+(\S+)\s+·\s+milestone:\s*([^·]*)·\s+last-green:\s*([^·]*)·\s+files:\s*([^·]*)·\s+drift:\s*(.*)$/;
@@ -87,6 +88,16 @@ function collectProgressEntries(progressSection) {
   return entries;
 }
 
+function collectAllProgressEntries(markdown) {
+  const headings = [...markdown.matchAll(PROGRESS_HEADING_GLOBAL)];
+  return headings.flatMap((heading, index) => {
+    const start = heading.index + heading[0].length;
+    const nextHeading = /\n##\s+/.exec(markdown.slice(start));
+    const end = nextHeading ? start + nextHeading.index : markdown.length;
+    return collectProgressEntries(markdown.slice(start, end));
+  });
+}
+
 export function checkMilestoneProgress({
   markdown,
   now = Date.now(),
@@ -110,8 +121,7 @@ export function checkMilestoneProgress({
     };
   }
 
-  const progressSection = sliceSection(markdown, PROGRESS_HEADING);
-  const entries = collectProgressEntries(progressSection || '');
+  const entries = collectAllProgressEntries(markdown);
 
   if (entries.length === 0) {
     violations.push({ type: 'no-progress', detail: '## Progress section has no entries' });

package/templates/.claude/ukit/index/task-budget-validator.mjs

@@ -70,15 +70,21 @@ function splitSections(markdown) {
 }
 
 function getSectionBody(sections, name) {
-  if (!sections.has(name)) return null;
-  return sections.get(name).join('\n');
+  if (sections.has(name)) return sections.get(name).join('\n');
+  const normalizedName = name.replace(/\s*\([^)]*\)\s*$/, '');
+  for (const [heading, body] of sections) {
+    if (heading.replace(/\s*\([^)]*\)\s*$/, '') === normalizedName) {
+      return body.join('\n');
+    }
+  }
+  return null;
 }
 
 function countTargetFiles(body) {
   if (body == null) return 0;
   let count = 0;
   for (const line of body.split('\n')) {
-    if (/^\s*-\s+\S/.test(line)) count += 1;
+    if (/^-\s+\S/.test(line)) count += 1;
   }
   return count;
 }

package/templates/.claude/ukit/runtime/execution-ledger.mjs

@@ -938,23 +938,12 @@ async function main() {
       return;
     }
 
-    // Claude Code invokes Stop again after a Stop hook blocks the first stop. Re-blocking
-    // that recovery turn creates a self-sustaining loop, so let it end normally instead.
-    // If work still lacks evidence, surface the recovery reason to the user rather than
-    // silently ending after the automatic continuation.
-    // Vibecode autonomy keeps pushing through the reentrant Stop as well: the recovery turn
-    // after a block is another chance to finish the work, not a release valve. Block again
-    // with the reason; the loop still ends the moment evidence lands or a blocker appears.
-    if (payload.stop_hook_active === true && state?.routeSummary?.autonomyLevel !== 'vibecode') {
-      if (result.continue || result.capped || result.notify) {
-        const recoveryReason = result.reason
-          || 'UKit completion gate reached its continuation limit; unfinished work was not retried again.';
-        process.stdout.write(`${JSON.stringify({
-          systemMessage: `UKit stopped automatic recovery after one continuation: ${recoveryReason}`,
-        })}\n`);
-      }
-      return;
-    }
+    // A reentrant Stop (Claude Code re-fires Stop after this hook already blocked once) is
+    // gated exactly like any other Stop: while evidence is still missing it blocks again
+    // with the actionable reason instead of silently releasing the recovery turn. Loop
+    // termination is guaranteed elsewhere — non-vibecode routes end at the continuation cap
+    // (final-notice block -> capped visible release), and vibecode ends on the visible
+    // verification-loop blocker.
 
     if (result.continue) {
       if (result.finalNotice) await markNotified(projectRoot, payload, ledger);