@rafinery/cli 0.15.0 → 0.15.2

package/CHANGELOG.md

@@ -4,6 +4,30 @@ The machine-readable version of this lives in [`lib/releases.mjs`](lib/releases.
 CLI reads it to tell a client, on `rafa update`, exactly what an upgrade requires (nothing,
 a re-scan, or a `rafa migrate`).
 
+## 0.15.2 — rafa-validate implements the parallel-brain check
+
+sage caught a card-ahead-of-procedure gap: prism's card claimed "a refresh that
+minted parallel ids is a BLOCKER," but `rafa-validate` — the procedure prism
+follows — never implemented the check. It was documented, not load-bearing.
+
+`rafa-validate` step 9 now performs the continuity check: for every note the
+refresh *added*, compare against the prior manifest — same domain/category +
+equal-ish title or ≥50% shared cited files = a parallel-id blocker (founding
+scans exempt). It's the scan-time twin of the reconciler's merge-time guard, so
+the rule is enforced by a procedure at both ends.
+
+## 0.15.1 — fix `rafa reflex --consume` verdict parsing
+
+A `rafa reflex --consume <id> --reason session-only` silently recorded `banked`
+instead — the parser only accepted a bare positional verdict and rejected
+anything starting with `-`, then fell through to the `banked` default. That's a
+silent wrong value, exactly what the platform forbids.
+
+Now the verdict accepts a flag form (`--verdict=<v>` / `--reason=<v>`, plus the
+bare positional), and an **unrecognized verdict fails loudly** instead of
+defaulting — a session-only correction is recorded session-only, or the consume
+errors. Regression-tested.
+
 ## 0.15.0 — learnings are a `.rafa/` sibling
 
 sage's learnings move out of committed `.claude/rafa/learnings/` and become a

package/blueprint/.claude/skills/rafa-validate/SKILL.md

@@ -86,9 +86,21 @@ agent. So:
    (it violates the net-positive law: a wrong note is worse than none).
 8. **Connectivity** — orphan notes, dangling links (the checker's LINKS warn lane —
    `citation-check.md` § Links — is your pre-built worklist), literal `[[...]]` in prose → minor.
+9. **Continuity — the parallel-brain check (REFRESH scans only; contract §12.4).** A refresh
+   MUST update the existing brain in place, never re-derive a differently-named twin over
+   concepts the org already carries. Detect it: for each note/improvement the scan ADDED
+   (not in the prior brain), check whether an existing note in the same `domain`/`category`
+   already covers the concept — same/near-equal `title`, or ≥50% shared cited files. A new id
+   that duplicates an existing concept is a **BLOCKER** (continuity is the product: a parallel
+   brain orphans triage, resets trends, and destroys id stability). Ground it against the prior
+   brain: compare the scan's output ids to the pre-scan manifest; every genuinely-new id must
+   name, in its body, why no existing note covers it. (This is the validation twin of the
+   reconciler's deterministic parallel-brain guard — prism catches at scan-time what the guard
+   catches at merge-time; a founding scan, with no prior brain, is exempt.)
 
 ## Severity + decision
-- **Blocker** — hard-gate failure, broken checker, or a wrong/misleading note. Must be **0**.
+- **Blocker** — hard-gate failure, broken checker, a wrong/misleading note, or a refresh that
+  minted parallel ids over existing concepts (continuity, step 9). Must be **0**.
 - **Major** — a real gap: missing essence, under-covered domain, unanswerable question.
 - **Minor** — nits (orphan, cosmetic). Logged, not looped on.
 - **PASS** = hard gates pass · quality score ≥ 85 · 0 blockers · majors ≤ 2 · **and no

package/lib/reflex.mjs

@@ -3,7 +3,10 @@
 //
 //   rafa reflex                    list unprocessed corrections
 //   rafa reflex --json             machine shape (bootstrap digest / spawn prompts)
-//   rafa reflex --consume <id> [reason]   mark one processed — AFTER it was banked
+//   rafa reflex --consume <id> [verdict]  mark one processed. verdict ∈
+//       banked | session-only | refuted — a bare word, or --verdict=<v> /
+//       --reason=<v>. Omitted ⇒ banked (the SOP default). An UNRECOGNIZED
+//       verdict fails loudly — never a silent wrong outcome (no assumed values).
 //                                  through the gates, or judged session-only
 //
 // Consume APPENDS a done-marker line ({id, done:true, verdict, at}) — the queue
@@ -50,7 +53,40 @@ export default async function reflex(args = []) {
       console.error(`✗ no unprocessed correction with id ${id} (see \`rafa reflex\`)`);
       process.exit(1);
     }
-    const verdict = args[ci + 2] && !args[ci + 2].startsWith("-") ? args[ci + 2] : "banked";
+    // The verdict — from a bare positional (`--consume <id> session-only`) OR a
+    // flag (`--verdict=X` · `--verdict X` · `--reason=X` · `--reason X`; the
+    // human reaches for `--reason`, so accept it). NO ASSUMED VALUES: default to
+    // `banked` ONLY when no verdict was supplied at all; an unrecognized verdict
+    // — or a flag whose value is unrecognized — fails LOUDLY rather than
+    // silently recording the wrong outcome (the 2026-07-27 mislabel: a
+    // `--reason session-only` fell through to a false `banked`).
+    const VERDICTS = ["banked", "session-only", "refuted"];
+    const rest = args.slice(ci + 2);
+    let verdict = null;
+    let supplied = false;
+    for (let i = 0; i < rest.length; i++) {
+      const a = rest[i];
+      const m = a.match(/^--(?:verdict|reason)(?:=(.+))?$/);
+      if (m) {
+        supplied = true;
+        verdict = m[1] ?? rest[++i] ?? null; // `=value` or the next token
+      } else if (!a.startsWith("-")) {
+        supplied = true;
+        verdict = a; // bare positional verdict
+      } else {
+        continue; // an unrelated flag (e.g. a future --json) — skip, don't consume it as a verdict
+      }
+      break;
+    }
+    if (!supplied) verdict = "banked"; // bare `--consume <id>` — the SOP's default
+    else if (!VERDICTS.includes(verdict)) {
+      console.error(
+        `✗ unrecognized verdict ${verdict === null ? "(none given after the flag)" : `"${verdict}"`} — ` +
+          `expected one of: ${VERDICTS.join(" | ")}.\n` +
+          `  usage: rafa reflex --consume <id> [${VERDICTS.join("|")}]   (bare word, or --verdict=<v> / --reason=<v>)`,
+      );
+      process.exit(1);
+    }
     appendFileSync(
       file,
       JSON.stringify({ id, done: true, verdict, at: new Date().toISOString() }) + "\n",

package/lib/releases.mjs

@@ -501,6 +501,34 @@ export const RELEASES = [
       "governance framing is retired; the DB is the store, `.rafa/learnings/` " +
       "the local working copy — no learning files clutter `.claude/`.",
   },
+  {
+    version: "0.15.1",
+    contract: 1,
+    plans: 2,
+    requires: "update",
+    summary:
+      "FIX `rafa reflex --consume`: the verdict now accepts a flag form " +
+      "(`--verdict=<v>` / `--reason=<v>`, since the human reaches for " +
+      "`--reason`) as well as the bare positional, and an UNRECOGNIZED verdict " +
+      "fails loudly instead of silently defaulting to `banked` (the 2026-07-27 " +
+      "mislabel: `--reason session-only` fell through to a false `banked` in " +
+      "reflex.jsonl + the loop event). No assumed values — a session-only " +
+      "correction is recorded session-only, or the consume errors.",
+  },
+  {
+    version: "0.15.2",
+    contract: 1,
+    plans: 2,
+    requires: "update",
+    summary:
+      "FIX a card-ahead-of-procedure gap (sage-caught): prism's card claimed " +
+      "'a refresh that minted parallel ids is a BLOCKER' but rafa-validate — " +
+      "the procedure prism follows — never implemented the check. rafa-validate " +
+      "step 9 now performs the continuity/parallel-brain check (added-note ids " +
+      "vs the prior manifest; same domain/category + title-or-cite overlap = " +
+      "blocker; founding exempt) — the scan-time twin of the reconciler's " +
+      "deterministic guard. A documented rule made load-bearing.",
+  },
 ];
 
 // The release this CLI build ships (last entry).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rafinery/cli",
-  "version": "0.15.0",
+  "version": "0.15.2",
   "description": "rafa — the AI engineer CLI. Vendors the rafa blueprint into your repo (shadcn-style) and runs the deterministic contract gates.",
   "type": "module",
   "bin": {

package/skills-bundle/skills-manifest.json

@@ -1,5 +1,5 @@
 {
-  "generatedAt": "2026-07-26T22:32:00.748Z",
+  "generatedAt": "2026-07-26T23:37:59.067Z",
   "skills": {
     "tdd": {
       "version": "1.0.0",