@rafinery/cli 0.15.0 → 0.15.1

package/CHANGELOG.md

@@ -4,6 +4,18 @@ The machine-readable version of this lives in [`lib/releases.mjs`](lib/releases.
 CLI reads it to tell a client, on `rafa update`, exactly what an upgrade requires (nothing,
 a re-scan, or a `rafa migrate`).
 
+## 0.15.1 — fix `rafa reflex --consume` verdict parsing
+
+A `rafa reflex --consume <id> --reason session-only` silently recorded `banked`
+instead — the parser only accepted a bare positional verdict and rejected
+anything starting with `-`, then fell through to the `banked` default. That's a
+silent wrong value, exactly what the platform forbids.
+
+Now the verdict accepts a flag form (`--verdict=<v>` / `--reason=<v>`, plus the
+bare positional), and an **unrecognized verdict fails loudly** instead of
+defaulting — a session-only correction is recorded session-only, or the consume
+errors. Regression-tested.
+
 ## 0.15.0 — learnings are a `.rafa/` sibling
 
 sage's learnings move out of committed `.claude/rafa/learnings/` and become a

package/lib/reflex.mjs

@@ -3,7 +3,10 @@
 //
 //   rafa reflex                    list unprocessed corrections
 //   rafa reflex --json             machine shape (bootstrap digest / spawn prompts)
-//   rafa reflex --consume <id> [reason]   mark one processed — AFTER it was banked
+//   rafa reflex --consume <id> [verdict]  mark one processed. verdict ∈
+//       banked | session-only | refuted — a bare word, or --verdict=<v> /
+//       --reason=<v>. Omitted ⇒ banked (the SOP default). An UNRECOGNIZED
+//       verdict fails loudly — never a silent wrong outcome (no assumed values).
 //                                  through the gates, or judged session-only
 //
 // Consume APPENDS a done-marker line ({id, done:true, verdict, at}) — the queue
@@ -50,7 +53,40 @@ export default async function reflex(args = []) {
       console.error(`✗ no unprocessed correction with id ${id} (see \`rafa reflex\`)`);
       process.exit(1);
     }
-    const verdict = args[ci + 2] && !args[ci + 2].startsWith("-") ? args[ci + 2] : "banked";
+    // The verdict — from a bare positional (`--consume <id> session-only`) OR a
+    // flag (`--verdict=X` · `--verdict X` · `--reason=X` · `--reason X`; the
+    // human reaches for `--reason`, so accept it). NO ASSUMED VALUES: default to
+    // `banked` ONLY when no verdict was supplied at all; an unrecognized verdict
+    // — or a flag whose value is unrecognized — fails LOUDLY rather than
+    // silently recording the wrong outcome (the 2026-07-27 mislabel: a
+    // `--reason session-only` fell through to a false `banked`).
+    const VERDICTS = ["banked", "session-only", "refuted"];
+    const rest = args.slice(ci + 2);
+    let verdict = null;
+    let supplied = false;
+    for (let i = 0; i < rest.length; i++) {
+      const a = rest[i];
+      const m = a.match(/^--(?:verdict|reason)(?:=(.+))?$/);
+      if (m) {
+        supplied = true;
+        verdict = m[1] ?? rest[++i] ?? null; // `=value` or the next token
+      } else if (!a.startsWith("-")) {
+        supplied = true;
+        verdict = a; // bare positional verdict
+      } else {
+        continue; // an unrelated flag (e.g. a future --json) — skip, don't consume it as a verdict
+      }
+      break;
+    }
+    if (!supplied) verdict = "banked"; // bare `--consume <id>` — the SOP's default
+    else if (!VERDICTS.includes(verdict)) {
+      console.error(
+        `✗ unrecognized verdict ${verdict === null ? "(none given after the flag)" : `"${verdict}"`} — ` +
+          `expected one of: ${VERDICTS.join(" | ")}.\n` +
+          `  usage: rafa reflex --consume <id> [${VERDICTS.join("|")}]   (bare word, or --verdict=<v> / --reason=<v>)`,
+      );
+      process.exit(1);
+    }
     appendFileSync(
       file,
       JSON.stringify({ id, done: true, verdict, at: new Date().toISOString() }) + "\n",

package/lib/releases.mjs

@@ -501,6 +501,20 @@ export const RELEASES = [
       "governance framing is retired; the DB is the store, `.rafa/learnings/` " +
       "the local working copy — no learning files clutter `.claude/`.",
   },
+  {
+    version: "0.15.1",
+    contract: 1,
+    plans: 2,
+    requires: "update",
+    summary:
+      "FIX `rafa reflex --consume`: the verdict now accepts a flag form " +
+      "(`--verdict=<v>` / `--reason=<v>`, since the human reaches for " +
+      "`--reason`) as well as the bare positional, and an UNRECOGNIZED verdict " +
+      "fails loudly instead of silently defaulting to `banked` (the 2026-07-27 " +
+      "mislabel: `--reason session-only` fell through to a false `banked` in " +
+      "reflex.jsonl + the loop event). No assumed values — a session-only " +
+      "correction is recorded session-only, or the consume errors.",
+  },
 ];
 
 // The release this CLI build ships (last entry).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rafinery/cli",
-  "version": "0.15.0",
+  "version": "0.15.1",
   "description": "rafa — the AI engineer CLI. Vendors the rafa blueprint into your repo (shadcn-style) and runs the deterministic contract gates.",
   "type": "module",
   "bin": {

package/skills-bundle/skills-manifest.json

@@ -1,5 +1,5 @@
 {
-  "generatedAt": "2026-07-26T22:32:00.748Z",
+  "generatedAt": "2026-07-26T22:59:22.774Z",
   "skills": {
     "tdd": {
       "version": "1.0.0",