@rafinery/cli 0.5.0 → 0.7.0

package/lib/gate/verify-citations.mjs

@@ -1,6 +1,8 @@
 // Deterministic citation checker for the atlas scan output. Lives INSIDE
 // @rafinery/cli (blueprint split, 0.4.0) — run as `rafa verify-citations`.
-// Three gates:
+// Five gates (checker v2 — the 2026-06-08 ratchet: prism's two recommended
+// checks mechanized, per the disposition protocol "every prism catch gets
+// mechanized | eval-cased | judgment"):
 //
 //  RESOLUTION (B1)   — every cite `- <file>:<line>[-<end>] :: <token>` points at a line
 //                      that actually contains <token>. Catches off-by-N / wrong-file.
@@ -11,18 +13,48 @@
 //                      or `anchor: none` for composition/ordering contracts that don't grep
 //                      as one token. So completeness can't be silently skipped (closes F1:
 //                      the guarantee is mandatory, not opt-in; exemptions are explicit).
+//  ABSENCE (B3)      — a note may declare `absent: <token>` (repeatable, anchor-style):
+//                      "this token appears NOWHERE in code." The checker re-greps every
+//                      declared absence and FAILS if it now matches (docs/.md excluded).
+//                      Mechanizes the 2026-06-08 blocker class: a false absence-claim
+//                      (the note said stubbed; the code had grown the real thing).
+//  INVENTORY         — coverage.md may declare `inventory:` entries
+//                      `- <name> :: <glob> :: <count>`; the checker recomputes each via
+//                      `git ls-files ':(glob)<glob>'` and FAILS on drift. Mechanizes the
+//                      route-inventory diff (coverage claiming N surface files vs reality).
 //
-// Writes a generated report to <root>/citation-check.md (don't hand-paste it).
+// Plus a non-failing heuristic: notes whose title/summary reads existence-shaped
+// ("does not exist", "stubbed", "not implemented"…) without declaring `absent:` are
+// listed as WARNs — prism's worklist, never a gate failure (a heuristic that fails
+// the gate would be an assumed value).
+//
+// Writes a generated report to <root>/citation-check.md (don't hand-paste it) and a
+// machine record to <root>/citation-check.json ({ checkerVersion, pass, gates … }) —
+// `rafa compile` folds that record into manifest.citations so the platform knows
+// which gate level a brain actually passed (recorded run, never assumed).
 // Returns exit code 1 on any failure. Run from repo root:  rafa verify-citations
 
-import { readFileSync, writeFileSync, readdirSync, statSync, existsSync, mkdtempSync, rmSync } from "node:fs";
+import { readFileSync, writeFileSync, readdirSync, statSync, existsSync, mkdtempSync, rmSync, mkdirSync } from "node:fs";
 import { execSync } from "node:child_process";
 import { join } from "node:path";
 import { tmpdir } from "node:os";
 
+export const CHECKER_VERSION = 2; // v1 = the 3-gate era (resolution/completeness/policy)
+
 const CITE = /^\s*-\s+(.+?):(\d+)(?:-(\d+))?\s*::\s*(.+?)\s*$/; // - file:start[-end] :: token
 const ANCHOR = /^anchor:\s*(.+?)\s*$/;
+const ABSENT = /^absent:\s*(.+?)\s*$/;
 const TYPE = /^type:\s*(.+?)\s*$/;
+const TITLE = /^title:\s*(.+?)\s*$/;
+const SUMMARY = /^summary:\s*(.+?)\s*$/;
+const INV_ENTRY = /^(.+?)\s*::\s*(.+?)\s*::\s*(\d+)$/; // name :: glob :: count
+
+// Existence-shaped phrases (title/summary only — the machine surface; the body is
+// never parsed). Deliberately narrow: policy claims ("never hardcode") must not hit.
+const ABSENCE_HEURISTIC =
+  /(does\s?n[o']?t exist|do not exist|no longer exists?|nowhere in|not (yet )?(implemented|built|wired|created|present)|only a stub|stubbed|unbuilt|unimplemented|nothing (reads|writes|calls|imports|consumes)|absent from)/i;
+
+const strip = (s) => s.replace(/\s+#.*$/, "").replace(/^["']|["']$/g, "").trim();
 
 function walk(dir) {
   if (!existsSync(dir)) return [];
@@ -32,19 +64,33 @@ function walk(dir) {
   });
 }
 
-function gitGrep(token) {
+function gitGrep(token, cwd = process.cwd()) {
   try {
-    const out = execSync(`git grep -nF -e ${JSON.stringify(token)}`, { encoding: "utf8" });
+    const out = execSync(`git grep -nF -e ${JSON.stringify(token)}`, { encoding: "utf8", cwd });
     return out.split("\n").filter(Boolean).map((l) => {
       const m = l.match(/^(.+?):(\d+):/);
       return m ? { file: m[1], line: +m[2] } : null;
-    }).filter(Boolean);
+    }).filter(Boolean)
+      // The brain is never "code": exclude .rafa/** categorically so the checker
+      // can't self-collide with manifests/notes if .rafa is (accidentally) tracked.
+      .filter((h) => !h.file.startsWith(".rafa/"));
   } catch (e) {
     if (e.status === 1) return []; // git grep: no matches
     throw e;
   }
 }
 
+// Tracked files matching a glob — deterministic inventory ground truth.
+// `:(glob)` pathspec magic makes `**` match across directories.
+function gitLsGlob(glob, cwd = process.cwd()) {
+  try {
+    const out = execSync(`git ls-files -- ${JSON.stringify(`:(glob)${glob}`)}`, { encoding: "utf8", cwd });
+    return out.split("\n").filter(Boolean);
+  } catch {
+    return null; // bad pathspec → caller reports it as a failure, never guesses 0
+  }
+}
+
 function citeResolves(file, start, end, token) {
   if (!existsSync(file)) return { ok: false, reason: "file missing" };
   const src = readFileSync(file, "utf8").split("\n");
@@ -53,28 +99,81 @@ function citeResolves(file, start, end, token) {
   return { ok: false, reason: `token not on ${start}${end !== start ? "-" + end : ""}` };
 }
 
+// coverage.md frontmatter `inventory:` block list → [{ name, glob, count }] + malformed lines.
+function parseCoverageInventory(path) {
+  const entries = [];
+  const malformed = [];
+  if (!existsSync(path)) return { entries, malformed };
+  const lines = readFileSync(path, "utf8").split("\n");
+  let fence = 0;
+  let inBlock = false;
+  for (const line of lines) {
+    if (line.trim() === "---") { fence++; if (fence >= 2) break; continue; }
+    if (fence !== 1) continue;
+    if (/^inventory:\s*$/.test(line)) { inBlock = true; continue; }
+    if (inBlock) {
+      const item = line.match(/^\s+-\s+(.+?)\s*$/);
+      if (item) {
+        const m = strip(item[1]).match(INV_ENTRY);
+        if (m) entries.push({ name: m[1].trim(), glob: m[2].trim(), count: +m[3] });
+        else malformed.push(item[1]);
+        continue;
+      }
+      if (/^\S/.test(line)) inBlock = false; // next top-level key ends the block
+    }
+  }
+  return { entries, malformed };
+}
+
 export function runVerifyCitations(argv = []) {
   const arg = (k, d) => { const m = argv.find((a) => a.startsWith(`--${k}=`)); return m ? m.slice(k.length + 3) : d; };
   const ROOT = arg("root", ".rafa/brain");                                      // --root=.rafa/improve for the improve ledger
   const NOTE_DIRS = arg("dirs", "rules,playbooks").split(",").filter(Boolean);  // --dirs=improvements
 
-  // --selftest: prove the resolution logic fails on a bad cite and passes a good one, on a
-  // throwaway temp file (no brain/repo pollution). prism runs this as its mutation probe —
-  // re-running the checker is not proof it still works; this is.
+  // --selftest: prove each gate's logic on throwaway fixtures (no brain/repo pollution).
+  // prism runs this as its mutation probe — re-running the checker is not proof it still
+  // works; this is. Covers: resolution (good+bad cite) · absence (present token must
+  // flag, missing token must pass) · inventory (count drift must flag, exact must pass).
   if (argv.includes("--selftest")) {
-    const dir = mkdtempSync(join(tmpdir(), "vc-selftest-"));
-    const f = join(dir, "sample.txt");
-    writeFileSync(f, "alpha\nTOKEN beta\ngamma\n");
-    const good = citeResolves(f, 2, 2, "TOKEN").ok; // expect true
-    const bad = citeResolves(f, 1, 1, "TOKEN").ok;  // expect false (off-by-one)
-    rmSync(dir, { recursive: true, force: true });
-    const sane = good === true && bad === false;
-    console.log(`checker self-test: ${sane ? "PASS" : "FAIL"} — good cite=${good} (expect true), bad cite=${bad} (expect false)`);
+    const results = [];
+    // resolution — pure file logic
+    {
+      const dir = mkdtempSync(join(tmpdir(), "vc-selftest-"));
+      const f = join(dir, "sample.txt");
+      writeFileSync(f, "alpha\nTOKEN beta\ngamma\n");
+      results.push(["resolution good cite", citeResolves(f, 2, 2, "TOKEN").ok === true]);
+      results.push(["resolution bad cite", citeResolves(f, 1, 1, "TOKEN").ok === false]);
+      rmSync(dir, { recursive: true, force: true });
+    }
+    // absence + inventory — need a real (temp) git index
+    {
+      const dir = mkdtempSync(join(tmpdir(), "vc-selftest-git-"));
+      try {
+        execSync("git init -q", { cwd: dir });
+        mkdirSync(join(dir, "app", "x"), { recursive: true });
+        writeFileSync(join(dir, "app", "x", "page.tsx"), "export default function X() { return SELFTEST_PRESENT; }\n");
+        writeFileSync(join(dir, "app", "readme.md"), "SELFTEST_PRESENT in docs must not count\n");
+        execSync("git add -A", { cwd: dir });
+        const present = gitGrep("SELFTEST_PRESENT", dir).filter((h) => !h.file.endsWith(".md"));
+        const gone = gitGrep("SELFTEST_TRULY_ABSENT", dir).filter((h) => !h.file.endsWith(".md"));
+        results.push(["absence flags a present token", present.length === 1]); // code hit only, .md excluded
+        results.push(["absence passes a truly absent token", gone.length === 0]);
+        const found = gitLsGlob("app/**/page.tsx", dir);
+        results.push(["inventory exact count passes", (found ?? []).length === 1]);
+        results.push(["inventory drift flags", (found ?? []).length !== 2]);
+      } finally {
+        rmSync(dir, { recursive: true, force: true });
+      }
+    }
+    const sane = results.every(([, ok]) => ok);
+    for (const [name, ok] of results) console.log(`  ${ok ? "✓" : "✗"} ${name}`);
+    console.log(`checker self-test (v${CHECKER_VERSION}): ${sane ? "PASS" : "FAIL"}`);
     return sane ? 0 : 1;
   }
 
   const notes = NOTE_DIRS.flatMap((d) => walk(join(ROOT, d)));
-  if (notes.length === 0) {
+  const coveragePath = join(ROOT, "coverage.md");
+  if (notes.length === 0 && !existsSync(coveragePath)) {
     console.log(`No notes under ${ROOT}/{${NOTE_DIRS.join(",")}}/ — run a scan first.`);
     return 0;
   }
@@ -82,13 +181,19 @@ export function runVerifyCitations(argv = []) {
   const resolution = []; // { note, loc, token, ok, reason }
   const completeness = []; // { note, anchor, site, ok, reason }
   const policy = []; // { note, ok, reason }
+  const absence = []; // { note, token, site, ok, reason }
+  const inventory = []; // { name, glob, declared, found, ok, reason, paths }
+  const warns = []; // { note, phrase }  — heuristic, never fails the gate
 
   for (const note of notes) {
     const rel = note.replace(ROOT + "/", "");
     const lines = readFileSync(note, "utf8").split("\n");
     const cites = [];
     const anchors = [];
+    const absents = [];
     let noteType = "";
+    let title = "";
+    let summary = "";
     let fence = 0;
     for (const line of lines) {
       if (line.trim() === "---") { fence++; if (fence >= 2) break; continue; }
@@ -96,9 +201,15 @@ export function runVerifyCitations(argv = []) {
       const c = line.match(CITE);
       if (c) { cites.push({ file: c[1], start: +c[2], end: c[3] ? +c[3] : +c[2], token: c[4] }); continue; }
       const a = line.match(ANCHOR);
-      if (a) { anchors.push(a[1].replace(/\s+#.*$/, "").replace(/^["']|["']$/g, "").trim()); continue; }
+      if (a) { anchors.push(strip(a[1])); continue; }
+      const ab = line.match(ABSENT);
+      if (ab) { absents.push(strip(ab[1])); continue; }
       const t = line.match(TYPE);
-      if (t) noteType = t[1].replace(/\s+#.*$/, "").trim();
+      if (t) { noteType = strip(t[1]); continue; }
+      const ti = line.match(TITLE);
+      if (ti) { title = strip(ti[1]); continue; }
+      const s = line.match(SUMMARY);
+      if (s) summary = strip(s[1]);
     }
 
     // POLICY — every contract must declare an anchor (token or explicit `none`)
@@ -126,15 +237,56 @@ export function runVerifyCitations(argv = []) {
         completeness.push({ note: rel, anchor, site: `${h.file}:${h.line}`, ok: covered, reason: covered ? "" : "grep hit not cited — site omitted" });
       }
     }
+
+    // ABSENCE (B3) — a declared absence must still be absent
+    for (const token of absents) {
+      if (token.toLowerCase() === "none") continue;
+      const hits = gitGrep(token).filter((h) => !h.file.endsWith(".md")); // docs excluded, same rule as completeness
+      if (hits.length === 0) {
+        absence.push({ note: rel, token, site: "(nowhere — as claimed)", ok: true, reason: "" });
+      } else {
+        for (const h of hits) {
+          absence.push({ note: rel, token, site: `${h.file}:${h.line}`, ok: false, reason: "claimed absent but exists — the claim went stale" });
+        }
+      }
+    }
+
+    // WARN heuristic — existence-shaped claim with no declared `absent:` token
+    if (absents.length === 0) {
+      const m = (title + " · " + summary).match(ABSENCE_HEURISTIC);
+      if (m) warns.push({ note: rel, phrase: m[0] });
+    }
+  }
+
+  // INVENTORY — coverage.md declared counts vs tracked reality
+  {
+    const { entries, malformed } = parseCoverageInventory(coveragePath);
+    for (const bad of malformed)
+      inventory.push({ name: "(malformed)", glob: bad, declared: NaN, found: NaN, ok: false, reason: "entry must be `<name> :: <glob> :: <count>`", paths: [] });
+    for (const e of entries) {
+      const paths = gitLsGlob(e.glob);
+      if (paths === null) {
+        inventory.push({ name: e.name, glob: e.glob, declared: e.count, found: NaN, ok: false, reason: "glob is not a valid git pathspec", paths: [] });
+        continue;
+      }
+      const ok = paths.length === e.count;
+      inventory.push({
+        name: e.name, glob: e.glob, declared: e.count, found: paths.length, ok,
+        reason: ok ? "" : `declared ${e.count}, found ${paths.length} — coverage is stale (refresh the scan)`,
+        paths: ok ? [] : paths.slice(0, 20),
+      });
+    }
   }
 
   const rFail = resolution.filter((r) => !r.ok);
   const cFail = completeness.filter((r) => !r.ok);
   const pFail = policy.filter((r) => !r.ok);
-  const fail = rFail.length + cFail.length + pFail.length;
+  const aFail = absence.filter((r) => !r.ok);
+  const iFail = inventory.filter((r) => !r.ok);
+  const fail = rFail.length + cFail.length + pFail.length + aFail.length + iFail.length;
 
   const md = [
-    "# Citation check (generated — do not hand-edit)",
+    `# Citation check (generated — do not hand-edit) · checker v${CHECKER_VERSION}`,
     "",
     `## Resolution (B1): ${resolution.length - rFail.length}/${resolution.length} ✓`,
     ...resolution.map((r) => `${r.ok ? "✓" : "✗"} ${r.loc} :: ${r.token}${r.ok ? "" : "  — " + r.reason + " [" + r.note + "]"}`),
@@ -145,12 +297,51 @@ export function runVerifyCitations(argv = []) {
     `## Policy (contract → anchor declared): ${policy.length - pFail.length}/${policy.length} ✓`,
     ...policy.map((r) => `${r.ok ? "✓" : "✗"} ${r.note}${r.ok ? "" : "  — " + r.reason}`),
     "",
+    `## Absence (B3, declared \`absent:\` re-grepped): ${absence.length - aFail.length}/${absence.length} ✓`,
+    ...absence.map((r) => `${r.ok ? "✓" : "✗"} absent '${r.token}' → ${r.site}${r.ok ? "" : "  — " + r.reason + " [" + r.note + "]"}`),
+    "",
+    `## Inventory (coverage declared vs \`git ls-files\`): ${inventory.length - iFail.length}/${inventory.length} ✓`,
+    ...inventory.flatMap((r) => [
+      `${r.ok ? "✓" : "✗"} ${r.name} '${r.glob}' declared ${r.declared} · found ${r.found}${r.ok ? "" : "  — " + r.reason}`,
+      ...r.paths.map((p) => `    · ${p}`),
+    ]),
+    "",
+    `## Warns (heuristic, non-failing — existence-shaped title/summary with no \`absent:\` declared): ${warns.length}`,
+    ...warns.map((w) => `⚠ ${w.note} — reads as an absence claim ("${w.phrase}") — declare \`absent: <token>\` so the gate can re-grep it, or reword`),
+    "",
     fail ? `**${fail} FAILED.**` : "**All pass.**",
     "",
   ].join("\n");
   writeFileSync(join(ROOT, "citation-check.md"), md);
 
+  // Machine record of THIS run — compile folds it into manifest.citations so the
+  // platform knows the gate level a brain passed. Recorded, never assumed.
+  writeFileSync(
+    join(ROOT, "citation-check.json"),
+    JSON.stringify(
+      {
+        checkerVersion: CHECKER_VERSION,
+        at: new Date().toISOString(),
+        pass: fail === 0,
+        gates: {
+          resolution: { pass: resolution.length - rFail.length, total: resolution.length },
+          completeness: { pass: completeness.length - cFail.length, total: completeness.length },
+          policy: { pass: policy.length - pFail.length, total: policy.length },
+          absence: { pass: absence.length - aFail.length, total: absence.length },
+          inventory: { pass: inventory.length - iFail.length, total: inventory.length },
+        },
+        warns: warns.length,
+      },
+      null,
+      2,
+    ) + "\n",
+  );
+
   console.log(md);
-  console.log(`resolution ${resolution.length - rFail.length}/${resolution.length} · completeness ${completeness.length - cFail.length}/${completeness.length} · policy ${policy.length - pFail.length}/${policy.length}` + (fail ? ` · ${fail} FAILED` : " · all pass"));
+  console.log(
+    `resolution ${resolution.length - rFail.length}/${resolution.length} · completeness ${completeness.length - cFail.length}/${completeness.length} · policy ${policy.length - pFail.length}/${policy.length} · absence ${absence.length - aFail.length}/${absence.length} · inventory ${inventory.length - iFail.length}/${inventory.length}` +
+      (warns.length ? ` · ${warns.length} warn(s)` : "") +
+      (fail ? ` · ${fail} FAILED` : " · all pass"),
+  );
   return fail ? 1 : 0;
 }

package/lib/githook.mjs

@@ -0,0 +1,54 @@
+// The git pre-push hook installer — M5 sensor #3 (the deterministic checkpoint
+// boundary). `git push` of the code branch is a ratified natural checkpoint
+// moment; this hook makes it MECHANICAL instead of SOP-remembered.
+//
+// .git/hooks is per-clone (git never versions it), so this runs at init AND
+// pull (the teammate path) AND update — every working copy gets the sensor.
+// Never clobbers a foreign hook: ours is recognized by its marker line; anything
+// else is respected and the chain-line printed for the dev to add themselves.
+
+import { chmodSync, copyFileSync, existsSync, readFileSync } from "node:fs";
+import { execSync } from "node:child_process";
+import { join } from "node:path";
+
+const MARKER = "rafa pre-push hook";
+const CHAIN_LINE = "npx -y @rafinery/cli checkpoint || true";
+
+export function installPrePush(targetDir) {
+  const src = join(targetDir, ".claude", "rafa", "hooks", "pre-push");
+  if (!existsSync(src)) return { skipped: "no vendored hook template (run `rafa update`)" };
+
+  let hooksDir;
+  try {
+    // --git-path resolves worktrees/submodules correctly; never assume .git is a dir.
+    hooksDir = execSync("git rev-parse --git-path hooks", { cwd: targetDir, encoding: "utf8" }).trim();
+    hooksDir = join(targetDir, hooksDir);
+  } catch {
+    return { skipped: "not a git repo" };
+  }
+
+  const dst = join(hooksDir, "pre-push");
+  if (existsSync(dst)) {
+    const body = readFileSync(dst, "utf8");
+    if (!body.includes(MARKER)) {
+      return {
+        skipped:
+          "a pre-push hook already exists (not rafa's) — to chain the checkpoint boundary, " +
+          `add this line to it yourself:  ${CHAIN_LINE}`,
+      };
+    }
+    // ours → refresh in place (idempotent update)
+    copyFileSync(src, dst);
+    chmodSync(dst, 0o755);
+    return { updated: true };
+  }
+  copyFileSync(src, dst);
+  chmodSync(dst, 0o755);
+  return { installed: true };
+}
+
+export function reportGitHook(r) {
+  if (r.installed) console.log("  ✓ git pre-push hook → checkpoint runs at every code push (non-blocking)");
+  else if (r.updated) console.log("  ✓ git pre-push hook refreshed");
+  else if (r.skipped) console.log(`  ! git pre-push hook not installed — ${r.skipped}`);
+}

package/lib/init.mjs

@@ -105,6 +105,24 @@ export default async function init(args) {
   );
   // Grant rafa's tools their permissions (merge, never overwrite).
   reportSettings(TARGET);
+  // Wire the M5 sensor hooks (SessionStart digest + PostToolUse dirty-marker)
+  // into .claude/settings.json — merge, never clobber the dev's own hooks.
+  {
+    const { mergeClaudeHooks, mergeStatusLine } = await import("./claude-config.mjs");
+    const h = mergeClaudeHooks(TARGET);
+    if (h.skipped) console.log(`  ! hooks untouched — ${h.skipped}`);
+    else if (h.added?.length) console.log(`  ✓ sensor hooks → .claude/settings.json (${h.added.join(", ")})`);
+    else console.log("  ✓ sensor hooks already wired");
+    const sl = mergeStatusLine(TARGET);
+    if (sl.skipped) console.log(`  ! statusline untouched — ${sl.skipped}`);
+    else if (sl.added?.length) console.log("  ✓ loop-state statusline → .claude/settings.json");
+    else console.log("  ✓ loop-state statusline already wired");
+  }
+  // The pre-push checkpoint boundary is per-clone (.git/hooks is never committed).
+  {
+    const { installPrePush, reportGitHook } = await import("./githook.mjs");
+    reportGitHook(installPrePush(TARGET));
+  }
   // Wire the repo's own MCP servers into the (owned) agent cards so subagents
   // can actually reach them (zero-command orchestration, 2026-07-12).
   {

package/lib/pull.mjs

@@ -32,6 +32,13 @@ export default async function pull(args = []) {
   const inRafa = inDir(rafaDir);
   if (bootstrapped) console.log(`• bootstrapped lazy .rafa/ from rafa.json (remote: ${remote})`);
 
+  // Every working copy gets the M5 checkpoint boundary (.git/hooks is per-clone —
+  // pull IS the teammate path, so this is where a fresh clone gains the sensor).
+  {
+    const { installPrePush, reportGitHook } = await import("./githook.mjs");
+    reportGitHook(installPrePush(ROOT));
+  }
+
   // Reachability + default branch — loud if the remote can't be reached.
   let branch = "main";
   try {

package/lib/push.mjs

@@ -13,6 +13,7 @@ import { execSync } from "node:child_process";
 import { existsSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { runCompile } from "./gate/compile.mjs";
+import { runVerifyCitations } from "./gate/verify-citations.mjs";
 import { ensureBrainRepo, remoteDefaultBranch, inDir, die } from "./brain-repo.mjs";
 import { CLI_VERSION } from "./releases.mjs";
 
@@ -39,6 +40,26 @@ export default async function push(args = []) {
     /* no origin — manifest.repo stays "" */
   }
 
+  // ── citation gate (in-process) ──
+  // Re-run the checker HERE so the record that rides the push is the record of
+  // THIS push — a stale/hand-stamped citation-check.json can never ship
+  // (mechanized 2026-07-13 from prism's live-run recommendation: the stale-record
+  // class dies at the transport layer, not in review).
+  console.log("• rafa verify-citations — re-grounding every cite/absence/inventory …");
+  if (runVerifyCitations([]) !== 0)
+    die(
+      "citations failed the checker (see report above). Fix the notes against the " +
+        "code (or have atlas repair them), then re-push.",
+    );
+  if (
+    existsSync(join(ROOT, ".rafa", "improve", "improvements")) &&
+    runVerifyCitations(["--root=.rafa/improve", "--dirs=improvements"]) !== 0
+  )
+    die(
+      "improvement citations failed the checker (see report above). Fix the ledger " +
+        "files against the code (or have bloom correct them), then re-push.",
+    );
+
   // ── contract gate (in-process) ──
   // Compile + validate the brain. A schema-invalid brain NEVER leaves the machine —
   // the platform ingests JSON, so what we push must already conform to the contract.

package/lib/reflex.mjs

@@ -0,0 +1,76 @@
+// rafa reflex — the correction queue's query/consume surface (M5, agent-internal;
+// the UserPromptSubmit sensor writes the queue, the conductor works it).
+//
+//   rafa reflex                    list unprocessed corrections
+//   rafa reflex --json             machine shape (bootstrap digest / spawn prompts)
+//   rafa reflex --consume <id> [reason]   mark one processed — AFTER it was banked
+//                                  through the gates, or judged session-only
+//
+// Consume APPENDS a done-marker line ({id, done:true, verdict, at}) — the queue
+// is append-only like every M5 sensor stream (monotonic, torn-line tolerant);
+// readers treat the latest line per id as truth. Nothing here ever ships: the
+// queue is transport-excluded; only distilled cited notes pass the gates.
+
+import { appendFileSync, existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+
+export function readReflex(root = process.cwd()) {
+  const file = join(root, ".rafa", "reflex.jsonl");
+  const byId = new Map(); // id → latest entry (done-markers override)
+  if (!existsSync(file)) return { file, pending: [], done: 0 };
+  for (const line of readFileSync(file, "utf8").split("\n")) {
+    if (!line.trim()) continue;
+    try {
+      const e = JSON.parse(line);
+      if (e?.id) byId.set(e.id, { ...(byId.get(e.id) ?? {}), ...e });
+    } catch {
+      /* torn line — skip */
+    }
+  }
+  const all = [...byId.values()];
+  return {
+    file,
+    pending: all.filter((e) => !e.done),
+    done: all.filter((e) => e.done).length,
+  };
+}
+
+export default async function reflex(args = []) {
+  const ROOT = process.cwd();
+  const { file, pending, done } = readReflex(ROOT);
+
+  const ci = args.indexOf("--consume");
+  if (ci !== -1) {
+    const id = args[ci + 1];
+    if (!id || id.startsWith("-")) {
+      console.error("✗ usage: rafa reflex --consume <id> [banked|session-only|refuted]");
+      process.exit(1);
+    }
+    if (!pending.some((e) => e.id === id)) {
+      console.error(`✗ no unprocessed correction with id ${id} (see \`rafa reflex\`)`);
+      process.exit(1);
+    }
+    const verdict = args[ci + 2] && !args[ci + 2].startsWith("-") ? args[ci + 2] : "banked";
+    appendFileSync(
+      file,
+      JSON.stringify({ id, done: true, verdict, at: new Date().toISOString() }) + "\n",
+    );
+    console.log(`✓ correction ${id} consumed (${verdict})`);
+    return;
+  }
+
+  if (args.includes("--json")) {
+    console.log(JSON.stringify({ pending, done }, null, 2));
+    return;
+  }
+
+  if (pending.length === 0) {
+    console.log(`✓ reflex queue clean${done ? ` (${done} processed)` : ""} — no unbanked corrections`);
+    return;
+  }
+  console.log(`${pending.length} unprocessed correction(s):`);
+  for (const e of pending) console.log(`  · ${e.id} [${e.t}] "${e.p}"`);
+  console.log(
+    "→ for each: bank it through the gates if it's durable repo knowledge (branch: note + checkpoint · main: full gates), then `rafa reflex --consume <id>` — or consume with `session-only` if it isn't.",
+  );
+}

package/lib/releases.mjs

@@ -133,6 +133,41 @@ export const RELEASES = [
       "files mechanically (parent→epic, child→task, blocked→todo+blocked_reason). Brain data " +
       "schema unchanged; no re-scan.",
   },
+  {
+    version: "0.6.0",
+    contract: 1,
+    plans: 2,
+    requires: "update",
+    summary:
+      "The core-solidity release — checker v2 + the M5 capture engine. RATCHET: " +
+      "verify-citations gains the two 2026-06-08 catches as gates — ABSENCE (declared " +
+      "`absent:` tokens re-grepped every run; a stale absence claim fails at gate 1) and " +
+      "INVENTORY (coverage `inventory: <name> :: <glob> :: <count>` recomputed via git " +
+      "ls-files; surface drift fails) — plus a non-failing WARN heuristic for undeclared " +
+      "absence-shaped claims (prism's worklist). The checker records its run " +
+      "(citation-check.json) and compile folds it into manifest.citations {checkerVersion, " +
+      "pass, at} — the platform learns which gate level a brain passed. M5 SENSORS " +
+      "(deterministic capture moments — no more SOP-only checkpoints): SessionStart state " +
+      "digest (staleness · conflicts · active plan), PostToolUse dirty-marking " +
+      "(.rafa/dirty.jsonl, monotonic, no session-end dependency), git pre-push runs " +
+      "`rafa checkpoint` (non-blocking; installed per-clone at init/pull/update). New " +
+      "`rafa dirty [--json|--consume]` — the cite-graph invalidator's query surface: dirty " +
+      "files → citing notes → scoped refresh offer at boundaries; drift threshold → " +
+      "fire-alarm (/rafa scan --brain-only). Hooks vendor LOCKSTEP at .claude/rafa/hooks/ " +
+      "and are disabled in headless/CI runs (RAFA_HOOKS_DISABLED=1 — the recursion guard). " +
+      "THE CORRECTION REFLEX: correction-shaped prompts are queued (.rafa/reflex.jsonl) and " +
+      "steer the session to validate + bank them through the gates SAME-SESSION (rafa reflex " +
+      "--consume closes each with a verdict; ungroundable claims never bank). " +
+      "THE FRICTIONLESS LOOP: loop-state statusline (rafa ▸ plan 2/5 · 3 stale · 1 correction; " +
+      "never replaces a dev's own statusline; `rafa status --line|--json` is the harness-" +
+      "neutral core — Claude Code today, Cursor/Codex adapters later) · a deterministic " +
+      "'suggested next' line in the session digest · DIRECT-DO routing (small work = no plan " +
+      "files, no approval; escalates only when it grows) · brainstorm mode (grounded " +
+      "participant, one crystallization offer). " +
+      "`rafa push` now re-runs the checker itself (stale/hand-stamped check records can " +
+      "never ship). Brain data schema unchanged; no re-scan; adopt with `rafa update` " +
+      "(re-vendors hooks, merges settings + statusline, installs the pre-push boundary).",
+  },
 ];
 
 // The release this CLI build ships (last entry).