@ngockhoale/ukit 3.4.28 → 3.4.29

package/CHANGELOG.md

@@ -9,6 +9,13 @@ All notable changes to UKit are documented here.
 - New `/ukit:ci-check` command + `ci-check.mjs` helper (core pack): prechecks, fail-closed budget guard, local preflight, at most one dispatch per invocation, write-ahead run-id state, `status` (never dispatches), `--ref`, `--dry-run`, per-OS report. Never pushes, merges or publishes.
 - Default-branch bootstrap stub documented in `docs/design/CI-CROSS-PLATFORM-MATRIX.md` (requires separate approval).
 
+## 3.4.29 - 2026-10-09
+
+**Fixes (no new features).**
+- `ukit install` inside the UKit source repo no longer overwrites the hand-curated root `CLAUDE.md` / `AGENTS.md` (repo-only Release Policy was lost). Self-install now seeds but never overwrites them, like `docs/`; downstream projects still get them refreshed. Regression: `tests/core/buildPlan.test.js`.
+- `ukit status` no longer reads the ambient project's `context-capacity.json` (CLAUDE_PROJECT_DIR/cwd); the capacity record is scoped to the reported project root, so `statusCommand.test.js` passes with or without a live runtime cache.
+- Completion gate: `yarn release:verify; echo "exit=$?"` (and `&&`/`|` variants without a space) is now recognised as a verification command, so the green run records `verification-evidence`. Failed runs still record as failed. Regression: `tests/hooks/executionLedgerReleaseVerify.test.js`.
+
 ## 3.4.28 - 2026-10-09
 
 **Release-safety close-out: config preservation, safe `ukit update`, OMP eval/Bash hardening (local RC; not yet published).**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ngockhoale/ukit",
-  "version": "3.4.28",
+  "version": "3.4.29",
   "description": "Install/update an index-first AI workspace for Claude Code, OpenAI Codex and omp (Oh My Pi).",
   "license": "MIT",
   "type": "module",

package/src/core/buildPlan.js

@@ -45,6 +45,16 @@ function safeResolve(basePath, relativePath) {
   return resolvedPath;
 }
 
+// Root instruction files are hand-curated canonical sources in the UKit repo itself (they carry
+// the repo-only Release Policy, rendered from instructions/ + the repo overlay), so a
+// self-install must seed them but never overwrite them.
+const SELF_INSTALL_PROTECTED_ROOT_FILES = new Set(['CLAUDE.md', 'AGENTS.md']);
+
+function isSelfInstallProtectedTarget(targetPath, projectRoot) {
+  return isDocsTarget(targetPath, projectRoot)
+    || SELF_INSTALL_PROTECTED_ROOT_FILES.has(path.relative(projectRoot, targetPath));
+}
+
 function isDocsTarget(targetPath, projectRoot) {
   const relative = path.relative(projectRoot, targetPath);
   return relative === 'docs' || relative.startsWith(`docs${path.sep}`);
@@ -88,7 +98,7 @@ async function downgradeSelfInstallDocOverwrites(planEntries, { templatesRoot, p
     if (entry.type === 'link' || entry.mergeStrategy !== 'overwrite_with_backup') {
       continue;
     }
-    if (isDocsTarget(entry.targetPath, projectRoot)) {
+    if (isSelfInstallProtectedTarget(entry.targetPath, projectRoot)) {
       entry.mergeStrategy = 'skip';
     }
   }

package/src/core/status.js

@@ -146,7 +146,9 @@ export async function buildStatusReport(projectRoot) {
   const compactSummary = buildCompactSummary(compactHistory);
   const compactPressure = await buildCompactPressureState(
     await readStatusJson(runtimePaths.compactPressurePath),
-    config,
+    // Scope the negotiated-capacity record to the reported project; without projectRoot the
+    // reader falls back to CLAUDE_PROJECT_DIR/cwd and leaks another project's runtime cache.
+    { ...config, projectRoot },
   );
   const promptCacheStats = buildPromptCacheStats(await readStatusJson(runtimePaths.promptCachePath));
   const outputCompressionStats = summarizeOutputHistory(await readStatusJson(runtimePaths.outputHistoryPath));

package/template_project/.claude/ukit/runtime/execution-ledger.mjs

@@ -501,15 +501,17 @@ function extractExitCode(payload = {}) {
   return null;
 }
 
+// The trailing boundary accepts shell terminators (`;`, `&`, `|`, `)`) so
+// `yarn release:verify; echo "exit=$?"` — the real-exit-code idiom — still mints a receipt.
 function isVerificationCommand(command) {
   const text = String(command || '').trim();
   if (!text) return false;
   return [
-    /(?:^|\s|\.bin\/)(?:vitest|jest|mocha|ava|pytest|py\.test)(?:\s|$)/i,
-    /(?:^|\s)(?:npm|pnpm|yarn|bun)(?:\s+run)?\s+(?:test|lint|typecheck|check|build)(?:\s|$)/i,
-    /(?:^|\s)(?:npm|pnpm|yarn|bun)(?:\s+run)?\s+release:verify(?:\s|$)/i,
-    /(?:^|\s|\.bin\/)(?:tsc|eslint|biome|ruff|mypy)(?:\s|$)/i,
-    /(?:^|\s)node\s+--check(?:\s|$)/i,
+    /(?:^|\s|\.bin\/)(?:vitest|jest|mocha|ava|pytest|py\.test)(?:\s|$|[;&|)])/i,
+    /(?:^|\s)(?:npm|pnpm|yarn|bun)(?:\s+run)?\s+(?:test|lint|typecheck|check|build)(?:\s|$|[;&|)])/i,
+    /(?:^|\s)(?:npm|pnpm|yarn|bun)(?:\s+run)?\s+release:verify(?:\s|$|[;&|)])/i,
+    /(?:^|\s|\.bin\/)(?:tsc|eslint|biome|ruff|mypy)(?:\s|$|[;&|)])/i,
+    /(?:^|\s)node\s+--check(?:\s|$|[;&|)])/i,
   ].some((pattern) => pattern.test(text));
 }