@rafinery/cli 0.10.0 → 0.12.0

package/lib/gate/compile.mjs

@@ -268,22 +268,26 @@ export function runCompile(argv = []) {
           "leverage",
           "required · { impact, effort } ∈ low|medium|high",
         );
+      // `category` is canonical; `lens` is the pre-2026-07-26 name, accepted
+      // as a deprecated alias so already-authored ledgers keep compiling.
+      const category = reqEnum(
+        { category: data.category ?? data.lens },
+        "category",
+        [
+          "security",
+          "correctness",
+          "performance",
+          "architecture",
+          "product",
+          "ops",
+        ],
+        path,
+      );
       out.push({
         id,
         priority: reqEnum(data, "priority", ["P0", "P1", "P2", "P3"], path),
-        lens: reqEnum(
-          data,
-          "lens",
-          [
-            "security",
-            "correctness",
-            "performance",
-            "architecture",
-            "product",
-            "ops",
-          ],
-          path,
-        ),
+        category,
+        lens: category, // transitional dual-key — dropped with the backfill arc
         status: reqEnum(
           data,
           "status",

package/lib/init.mjs

@@ -183,8 +183,9 @@ export default async function init(args) {
     );
   }
 
-  // Reconciliation runs on the PLATFORM (App-only era, owner call 2026-07-18):
-  // merged PRs are detected and distilled by the platform's own sandbox — no
+  // Reconciliation runs on the PLATFORM (App-only era, owner call 2026-07-18;
+  // agent-native since 2026-07-21): merged PRs are detected and reconciled by
+  // the server-side LangGraph agent — no
   // CI workflow, no repo secrets, nothing to wire here. The org-CI adapter
   // stays available as an explicit opt-out for teams that want the compute in
   // their own CI: `rafa ci-setup`. Init no longer asks — one fewer question,

package/lib/manifest.mjs

@@ -165,7 +165,8 @@ export default async function manifest() {
     return {
       id,
       priority: PRIORITIES.has(d.priority) ? d.priority : "P2",
-      lens: str(d.lens, "general"),
+      category: str(d.category ?? d.lens, "general"),
+      lens: str(d.category ?? d.lens, "general"), // transitional mirror of category
       status: IMP_STATUSES.has(d.status) ? d.status : "open",
       title: str(d.title, id),
       summary: str(d.summary),

package/lib/mcp-client.mjs

@@ -18,12 +18,20 @@ import { CLI_VERSION } from "./releases.mjs";
 
 // The CLI's own actor envelope for state-plane writes (wave 5: REQUIRED on every
 // loop event — strict, no legacy path). model is the explicit "mechanical"
-// sentinel: no LLM ruled here, and the split stays grep-able for sage.
+// sentinel: no LLM ruled here, and the split stays grep-able for sage. The
+// runner honors RAFA_ACTOR_RUNNER first (platform tiers export it —
+// sandbox|ci|session; "sandbox" is a legacy wire value kept for historical
+// rows), else CI env, else session.
 export function cliActorMeta() {
+  const declared = process.env.RAFA_ACTOR_RUNNER;
   return {
     model: "mechanical",
     agent: `cli@${CLI_VERSION}`,
-    runner: process.env.CI ? "ci" : "session",
+    runner: ["sandbox", "ci", "session"].includes(declared)
+      ? declared
+      : process.env.CI
+        ? "ci"
+        : "session",
   };
 }
 

package/lib/push.mjs

@@ -189,6 +189,11 @@ export default async function push(args = []) {
   // on it.
   const verbArg = args.find((a) => a.startsWith("--verb="));
   const verb = verbArg ? verbArg.slice("--verb=".length) : "update";
+  // Custom subject (owner 2026-07-26: reconciliation commits are DESCRIPTIVE):
+  // --message="…" replaces the generic manifest-derived subject; the brain-for
+  // trailer machinery below is untouched — provenance consumers keep their key.
+  const msgArg = args.find((a) => a.startsWith("--message="));
+  const customSubject = msgArg ? msgArg.slice("--message=".length).trim().replace(/"/g, "'") : null;
   const subjectParts = [];
   try {
     const m = JSON.parse(readFileSync(join(rafaDir, "manifest.json"), "utf8"));
@@ -214,9 +219,10 @@ export default async function push(args = []) {
   } catch {
     /* stat is garnish */
   }
-  const subject = `brain(${verb}): ${
-    subjectParts.length ? subjectParts.join(" · ") : "state sync"
-  } · brain-for: ${codeSha}`.replace(/"/g, "'");
+  const subject = (
+    customSubject ??
+    `brain(${verb}): ${subjectParts.length ? subjectParts.join(" · ") : "state sync"} · brain-for: ${codeSha}`
+  ).replace(/"/g, "'");
   try {
     inRafa(
       `git commit -m "${subject}" -m "brain-for: ${codeSha}${stagedStat ? ` · ${stagedStat}` : ""} · cli: ${CLI_VERSION}"`,

package/lib/releases.mjs

@@ -382,6 +382,33 @@ export const RELEASES = [
       "--json` carries the harness-neutral agentSkills + skillDeps blocks; " +
       "doctor gains a capabilities section.",
   },
+  {
+    version: "0.11.0",
+    contract: 1,
+    plans: 2,
+    requires: "update",
+    summary:
+      "SCHEMA-AWARE RECONCILIATION (owner's 4-case doctrine): distillation " +
+      "resolves the version lattice BEFORE judging — target below source → " +
+      "full target rewrite onto the newer schema (rides the run's gates + " +
+      "push); source below target → incoming candidates lift before judging; " +
+      "equal-but-old → the merged target rewrites onto the runner's latest; " +
+      "equal-and-current → plain diff (today). Either side newer than the " +
+      "runner aborts LOUDLY (update the runner; knowledge is never " +
+      "downgraded); transforms are registered per step and a missing step " +
+      "fails loudly — the ladder never guesses a schema. Also in this " +
+      "release (missed 0.10.0's publish): distill-refutation emits carry the " +
+      "required actor envelope + dedupeKey (a re-run counts once); " +
+      "cliActorMeta honors RAFA_ACTOR_RUNNER (sandbox|ci|session); dependsOn " +
+      "invalidation documented NOT transitive with breadth-as-conservative " +
+      "taught at facts add/help/prism's card (pinned by test). DESCRIPTIVE " +
+      "COMMITS: reconciliation pushes compose reconcile(<branch>): N banked " +
+      "· M refuted · K adjudication (rafa push --message= override); the " +
+      "commit contract requires an agent-readable body on dev commits. The " +
+      "configurable prod branch reaches the CLI: trunkBranchOf (stamp → " +
+      "origin/HEAD → main) drives the checkpoint trunk guard + CI distill " +
+      "target.",
+  },
 ];
 
 // The release this CLI build ships (last entry).

package/lib/stamp.mjs

@@ -3,6 +3,7 @@
 // stamp against what the running CLI ships to know what changed and what to migrate FROM.
 // (Also holds platform identity fields when the repo was provisioned via a setup URL.)
 
+import { execSync } from "node:child_process";
 import { existsSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { CURRENT, CLI_VERSION, RELEASES } from "./releases.mjs";
@@ -34,6 +35,29 @@ export function writeStamp(cwd, patch = {}) {
   return next;
 }
 
+// The code repo's canonical (prod) branch (owner 2026-07-26: configurable,
+// never hardcoded). Resolution chain: the rafa.json stamp's `prodBranch`
+// (mirrors the platform's per-repo setting — carried down so the CLI's trunk
+// guards agree with the platform's routing) → git's own origin/HEAD symref
+// (the repo's actual default) → "main".
+export function trunkBranchOf(cwd) {
+  const s = readStamp(cwd);
+  if (typeof s.prodBranch === "string" && s.prodBranch.trim() !== "")
+    return s.prodBranch.trim();
+  try {
+    const out = execSync("git symbolic-ref refs/remotes/origin/HEAD", {
+      cwd,
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+    }).trim();
+    const m = out.match(/refs\/remotes\/origin\/(.+)$/);
+    if (m) return m[1];
+  } catch {
+    /* no remote / no symref — fall through */
+  }
+  return "main";
+}
+
 // The versions this repo was last stamped at. Un-stamped repos predate the stamp (added in
 // 0.2.0), so default to the FIRST release's schema — never raise a false migration alarm.
 export function stampedVersions(cwd) {

package/lib/working-set.mjs

@@ -160,15 +160,16 @@ export function materializeImprovement(cwd, data, brainForSha) {
 }
 
 // Deterministic ledger-file writer for hydrated improvements — mirrors the shape
-// bloom authors (see any improve/improvements/*.md): priority · lens · status ·
+// bloom authors (see any improve/improvements/*.md): priority · category · status ·
 // fix · leverage · blast_radius · cites, then the prose body.
 export function renderImprovement(d) {
+  const category = d.category ?? d.lens;
   const lines = [
     "---",
     "schemaVersion: 1",
     `id: ${d.id}`,
     `priority: ${d.priority}`,
-    ...(d.lens ? [`lens: ${d.lens}`] : []),
+    ...(category ? [`category: ${category}`] : []),
     `status: ${d.status}`,
     `title: ${q(d.title)}`,
     ...(d.summary ? [`summary: ${q(d.summary)}`] : []),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rafinery/cli",
-  "version": "0.10.0",
+  "version": "0.12.0",
   "description": "rafa — the AI engineer CLI. Vendors the rafa blueprint into your repo (shadcn-style) and runs the deterministic contract gates.",
   "type": "module",
   "bin": {

package/skills-bundle/skills-manifest.json

@@ -1,5 +1,5 @@
 {
-  "generatedAt": "2026-07-25T18:10:32.629Z",
+  "generatedAt": "2026-07-26T15:51:05.847Z",
   "skills": {
     "tdd": {
       "version": "1.0.0",