@rafinery/cli 0.4.1 → 0.6.0

package/lib/reflex.mjs

@@ -0,0 +1,76 @@
+// rafa reflex — the correction queue's query/consume surface (M5, agent-internal;
+// the UserPromptSubmit sensor writes the queue, the conductor works it).
+//
+//   rafa reflex                    list unprocessed corrections
+//   rafa reflex --json             machine shape (bootstrap digest / spawn prompts)
+//   rafa reflex --consume <id> [reason]   mark one processed — AFTER it was banked
+//                                  through the gates, or judged session-only
+//
+// Consume APPENDS a done-marker line ({id, done:true, verdict, at}) — the queue
+// is append-only like every M5 sensor stream (monotonic, torn-line tolerant);
+// readers treat the latest line per id as truth. Nothing here ever ships: the
+// queue is transport-excluded; only distilled cited notes pass the gates.
+
+import { appendFileSync, existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+
+export function readReflex(root = process.cwd()) {
+  const file = join(root, ".rafa", "reflex.jsonl");
+  const byId = new Map(); // id → latest entry (done-markers override)
+  if (!existsSync(file)) return { file, pending: [], done: 0 };
+  for (const line of readFileSync(file, "utf8").split("\n")) {
+    if (!line.trim()) continue;
+    try {
+      const e = JSON.parse(line);
+      if (e?.id) byId.set(e.id, { ...(byId.get(e.id) ?? {}), ...e });
+    } catch {
+      /* torn line — skip */
+    }
+  }
+  const all = [...byId.values()];
+  return {
+    file,
+    pending: all.filter((e) => !e.done),
+    done: all.filter((e) => e.done).length,
+  };
+}
+
+export default async function reflex(args = []) {
+  const ROOT = process.cwd();
+  const { file, pending, done } = readReflex(ROOT);
+
+  const ci = args.indexOf("--consume");
+  if (ci !== -1) {
+    const id = args[ci + 1];
+    if (!id || id.startsWith("-")) {
+      console.error("✗ usage: rafa reflex --consume <id> [banked|session-only|refuted]");
+      process.exit(1);
+    }
+    if (!pending.some((e) => e.id === id)) {
+      console.error(`✗ no unprocessed correction with id ${id} (see \`rafa reflex\`)`);
+      process.exit(1);
+    }
+    const verdict = args[ci + 2] && !args[ci + 2].startsWith("-") ? args[ci + 2] : "banked";
+    appendFileSync(
+      file,
+      JSON.stringify({ id, done: true, verdict, at: new Date().toISOString() }) + "\n",
+    );
+    console.log(`✓ correction ${id} consumed (${verdict})`);
+    return;
+  }
+
+  if (args.includes("--json")) {
+    console.log(JSON.stringify({ pending, done }, null, 2));
+    return;
+  }
+
+  if (pending.length === 0) {
+    console.log(`✓ reflex queue clean${done ? ` (${done} processed)` : ""} — no unbanked corrections`);
+    return;
+  }
+  console.log(`${pending.length} unprocessed correction(s):`);
+  for (const e of pending) console.log(`  · ${e.id} [${e.t}] "${e.p}"`);
+  console.log(
+    "→ for each: bank it through the gates if it's durable repo knowledge (branch: note + checkpoint · main: full gates), then `rafa reflex --consume <id>` — or consume with `session-only` if it isn't.",
+  );
+}

package/lib/releases.mjs

@@ -102,6 +102,72 @@ export const RELEASES = [
       "the working-set scanner returned the directory path instead of each file's path " +
       "(variable shadowing in scanWorkingFiles). No schema change; no re-scan.",
   },
+  {
+    version: "0.4.2",
+    contract: 1,
+    plans: 1,
+    requires: "update",
+    summary:
+      "Owner E2E feedback round. `rafa init` now OFFERS CI reconciliation at provisioning " +
+      "(TTY only; skipping prints the session-fallback path — nothing is silently installed). " +
+      "`rafa distill --headless` streams the agent's narration and prints per-phase timings + " +
+      "cost (mirror · agent · gates · total), so CI logs show liveness and where time goes. " +
+      "Plans gain an optional parent-only `domains:` (contract §7) — the blast radius rides " +
+      "push_plan and the platform renders the plan's brain slice on its new detail page. " +
+      "No schema migration; no re-scan.",
+  },
+  {
+    version: "0.5.0",
+    contract: 1,
+    plans: 2,
+    requires: "migrate",
+    summary:
+      "Plans v2 — the work-item tree (contract §7 v2, first plans data-version bump). " +
+      "epic → task → subtask with vendor-blended vocabulary (checked against Linear/Jira/Asana " +
+      "APIs): title · description · approach · assignee · blocked_by (a dependency IS a " +
+      "blocker) · blocked_reason · priority 0–4 · estimate · external {provider,key,url} " +
+      "(read-only tracker identity). `blocked` is DERIVED, never stored — the status enum is " +
+      "todo|in-progress|done|superseded|abandoned. Decisions become first-class channel " +
+      "records (log_decision: at·actor·context·options·decision·rationale; paraphrase + " +
+      "pivotal quotes), mirrored as `## Decisions` body prose. `rafa migrate` converts v1 " +
+      "files mechanically (parent→epic, child→task, blocked→todo+blocked_reason). Brain data " +
+      "schema unchanged; no re-scan.",
+  },
+  {
+    version: "0.6.0",
+    contract: 1,
+    plans: 2,
+    requires: "update",
+    summary:
+      "The core-solidity release — checker v2 + the M5 capture engine. RATCHET: " +
+      "verify-citations gains the two 2026-06-08 catches as gates — ABSENCE (declared " +
+      "`absent:` tokens re-grepped every run; a stale absence claim fails at gate 1) and " +
+      "INVENTORY (coverage `inventory: <name> :: <glob> :: <count>` recomputed via git " +
+      "ls-files; surface drift fails) — plus a non-failing WARN heuristic for undeclared " +
+      "absence-shaped claims (prism's worklist). The checker records its run " +
+      "(citation-check.json) and compile folds it into manifest.citations {checkerVersion, " +
+      "pass, at} — the platform learns which gate level a brain passed. M5 SENSORS " +
+      "(deterministic capture moments — no more SOP-only checkpoints): SessionStart state " +
+      "digest (staleness · conflicts · active plan), PostToolUse dirty-marking " +
+      "(.rafa/dirty.jsonl, monotonic, no session-end dependency), git pre-push runs " +
+      "`rafa checkpoint` (non-blocking; installed per-clone at init/pull/update). New " +
+      "`rafa dirty [--json|--consume]` — the cite-graph invalidator's query surface: dirty " +
+      "files → citing notes → scoped refresh offer at boundaries; drift threshold → " +
+      "fire-alarm (/rafa scan --brain-only). Hooks vendor LOCKSTEP at .claude/rafa/hooks/ " +
+      "and are disabled in headless/CI runs (RAFA_HOOKS_DISABLED=1 — the recursion guard). " +
+      "THE CORRECTION REFLEX: correction-shaped prompts are queued (.rafa/reflex.jsonl) and " +
+      "steer the session to validate + bank them through the gates SAME-SESSION (rafa reflex " +
+      "--consume closes each with a verdict; ungroundable claims never bank). " +
+      "THE FRICTIONLESS LOOP: loop-state statusline (rafa ▸ plan 2/5 · 3 stale · 1 correction; " +
+      "never replaces a dev's own statusline; `rafa status --line|--json` is the harness-" +
+      "neutral core — Claude Code today, Cursor/Codex adapters later) · a deterministic " +
+      "'suggested next' line in the session digest · DIRECT-DO routing (small work = no plan " +
+      "files, no approval; escalates only when it grows) · brainstorm mode (grounded " +
+      "participant, one crystallization offer). " +
+      "`rafa push` now re-runs the checker itself (stale/hand-stamped check records can " +
+      "never ship). Brain data schema unchanged; no re-scan; adopt with `rafa update` " +
+      "(re-vendors hooks, merges settings + statusline, installs the pre-push boundary).",
+  },
 ];
 
 // The release this CLI build ships (last entry).

package/lib/status.mjs

@@ -0,0 +1,152 @@
+// rafa status — the loop-state read, HARNESS-NEUTRAL CORE (portability
+// directive, 2026-07-13: built for Claude Code now, ships for Cursor/Codex
+// later — the logic lives HERE; harness adapters stay thin mirrors).
+//
+//   rafa status           human view of where the loop stands
+//   rafa status --line    the one-line ambient form (statuslines, prompts, TUIs)
+//   rafa status --json    machine shape (adapters, conductors, other harnesses)
+//
+// Reads ONLY local state (the queues + plans + active pointer) — fast, offline,
+// no network. The Claude Code statusline adapter (.claude/rafa/hooks/
+// statusline.mjs) mirrors this computation as a self-contained script; any
+// drift between the two is a bug against THIS file's semantics.
+
+import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
+import { join } from "node:path";
+
+function readJsonl(file, pick) {
+  if (!existsSync(file)) return [];
+  const out = [];
+  for (const line of readFileSync(file, "utf8").split("\n")) {
+    if (!line.trim()) continue;
+    try {
+      const e = JSON.parse(line);
+      if (e) out.push(e);
+    } catch {
+      /* torn line */
+    }
+  }
+  return pick ? pick(out) : out;
+}
+
+function walk(dir, depth, hit, out = []) {
+  if (depth < 0 || !existsSync(dir)) return out;
+  for (const e of readdirSync(dir)) {
+    if (e === ".git") continue;
+    const p = join(dir, e);
+    try {
+      if (statSync(p).isDirectory()) walk(p, depth - 1, hit, out);
+      else if (hit(e)) out.push(p);
+    } catch {
+      /* races are fine */
+    }
+  }
+  return out;
+}
+
+// Frontmatter line-scan (the hooks' shared idiom — never a YAML parser).
+function fmField(path, key) {
+  try {
+    const lines = readFileSync(path, "utf8").split("\n");
+    let fence = 0;
+    for (const line of lines) {
+      if (line.trim() === "---") { fence++; if (fence >= 2) break; continue; }
+      if (fence !== 1) continue;
+      const m = line.match(new RegExp(`^${key}:\\s*(.+?)\\s*$`));
+      if (m) return m[1].replace(/\s+#.*$/, "").replace(/^["']|["']$/g, "").trim();
+    }
+  } catch {
+    /* unreadable = absent */
+  }
+  return null;
+}
+
+// The whole loop state, from local files only.
+export function computeStatus(root = process.cwd()) {
+  const rafaDir = join(root, ".rafa");
+  const provisioned = existsSync(join(root, "rafa.json"));
+
+  // dirty: unique files
+  const dirty = new Set(
+    readJsonl(join(rafaDir, "dirty.jsonl")).filter((e) => typeof e.f === "string").map((e) => e.f),
+  ).size;
+
+  // reflex: pending = latest-per-id without a done marker
+  const byId = new Map();
+  for (const e of readJsonl(join(rafaDir, "reflex.jsonl"))) {
+    if (e.id) byId.set(e.id, { ...(byId.get(e.id) ?? {}), ...e });
+  }
+  const reflex = [...byId.values()].filter((e) => !e.done).length;
+
+  // checkpoint conflicts awaiting a human
+  const conflicts = walk(rafaDir, 4, (n) => n.endsWith(".theirs.md")).length;
+
+  // active plan + task progress (plans v2: kind task|subtask, status done|…)
+  let plan = null;
+  const activePath = join(rafaDir, "active.md");
+  if (existsSync(activePath)) {
+    const first = readFileSync(activePath, "utf8").split("\n")[0].trim();
+    const id = first.startsWith("# ") && first !== "# No active plan" ? first.slice(2).trim() : null;
+    if (id) {
+      let done = 0;
+      let total = 0;
+      let current = null;
+      for (const f of walk(join(rafaDir, "plans"), 3, (n) => n.endsWith(".md") && !n.startsWith("_"))) {
+        if (fmField(f, "plan") !== id) continue;
+        const kind = fmField(f, "kind");
+        if (kind !== "task" && kind !== "subtask") continue;
+        total++;
+        const status = fmField(f, "status");
+        if (status === "done") done++;
+        else if (status === "in-progress" && !current)
+          current = fmField(f, "title") ?? fmField(f, "id");
+      }
+      plan = { id, done, total, current };
+    }
+  }
+
+  return { provisioned, plan, dirty, reflex, conflicts };
+}
+
+// The ambient one-liner — identical semantics wherever it renders.
+export function formatLine(s) {
+  if (!s.provisioned) return "";
+  const parts = [];
+  if (s.plan)
+    parts.push(
+      `plan ${s.plan.id} ${s.plan.done}/${s.plan.total}` +
+        (s.plan.current ? ` → ${s.plan.current}` : ""),
+    );
+  if (s.dirty) parts.push(`${s.dirty} stale`);
+  if (s.reflex) parts.push(`${s.reflex} correction${s.reflex === 1 ? "" : "s"}`);
+  if (s.conflicts) parts.push(`${s.conflicts} conflict${s.conflicts === 1 ? "" : "s"}`);
+  return parts.length ? `rafa ▸ ${parts.join(" · ")}` : "rafa ▸ in sync";
+}
+
+export default async function status(args = []) {
+  const s = computeStatus(process.cwd());
+  if (args.includes("--json")) {
+    console.log(JSON.stringify(s, null, 2));
+    return;
+  }
+  if (args.includes("--line")) {
+    const line = formatLine(s);
+    if (line) console.log(line);
+    return;
+  }
+  if (!s.provisioned) {
+    console.log("not a rafa repo (no rafa.json) — `npx @rafinery/cli init` to provision");
+    return;
+  }
+  console.log(formatLine(s));
+  if (s.plan)
+    console.log(
+      `  plan: ${s.plan.id} — ${s.plan.done}/${s.plan.total} tasks done` +
+        (s.plan.current ? ` · in progress: ${s.plan.current}` : ""),
+    );
+  if (s.dirty) console.log(`  stale: ${s.dirty} code file(s) touched since last reconcile (rafa dirty)`);
+  if (s.reflex) console.log(`  corrections: ${s.reflex} unprocessed (rafa reflex)`);
+  if (s.conflicts) console.log(`  conflicts: ${s.conflicts} .theirs.md awaiting your decision`);
+  if (!s.plan && !s.dirty && !s.reflex && !s.conflicts)
+    console.log("  nothing pending — the loop is closed.");
+}

package/lib/update.mjs

@@ -31,6 +31,26 @@ export default async function update(args = []) {
     await copyBlueprint(blueprintSource(), TARGET, { onConflict: makeConflictResolver(args) }),
   );
   reportSettings(TARGET);
+  // Wire the repo's own MCP servers into the (owned) agent cards so subagents
+  // can actually reach them (zero-command orchestration, 2026-07-12).
+  {
+    const { mergeRepoMcpsIntoCards } = await import("./claude-config.mjs");
+    const r = mergeRepoMcpsIntoCards(TARGET);
+    for (const u of r.updated) console.log(`  ✓ repo MCPs → ${u}`);
+  }
+  // M5 sensors: hooks config (merge, never clobber) + the per-clone pre-push
+  // boundary + the ambient loop-state statusline.
+  {
+    const { mergeClaudeHooks, mergeStatusLine } = await import("./claude-config.mjs");
+    const h = mergeClaudeHooks(TARGET);
+    if (h.skipped) console.log(`  ! hooks untouched — ${h.skipped}`);
+    else if (h.added?.length) console.log(`  ✓ sensor hooks → .claude/settings.json (${h.added.join(", ")})`);
+    const sl = mergeStatusLine(TARGET);
+    if (sl.skipped) console.log(`  ! statusline untouched — ${sl.skipped}`);
+    else if (sl.added?.length) console.log("  ✓ loop-state statusline → .claude/settings.json");
+    const { installPrePush, reportGitHook } = await import("./githook.mjs");
+    reportGitHook(installPrePush(TARGET));
+  }
 
   // ── Blueprint-side migrations: mechanical/deterministic, run here in the CLI. ──
   // (Anything needing intelligence is left for the brain-side pass — /rafa update.)

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@rafinery/cli",
-  "version": "0.4.1",
-  "description": "rafa \u2014 the AI engineer CLI. Vendors the rafa blueprint into your repo (shadcn-style) and runs the deterministic contract gates.",
+  "version": "0.6.0",
+  "description": "rafa — the AI engineer CLI. Vendors the rafa blueprint into your repo (shadcn-style) and runs the deterministic contract gates.",
   "type": "module",
   "bin": {
     "rafa": "bin/rafa.mjs"