@rafinery/cli 0.8.11 → 0.8.12

package/blueprint/.claude/rafa/hooks/brain-commit.mjs

@@ -17,10 +17,10 @@ try {
   if (!existsSync(join(ROOT, "rafa.json"))) process.exit(0);
   if (!existsSync(join(ROOT, ".rafa", ".git"))) process.exit(0);
 
-  const sh = (cmd, cwd = ROOT) =>
-    execSync(cmd, { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
+  const sh = (cmd, cwd = ROOT, timeout) =>
+    execSync(cmd, { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], ...(timeout ? { timeout } : {}) }).trim();
   const rafa = join(ROOT, ".rafa");
-  const shR = (cmd) => sh(cmd, rafa);
+  const shR = (cmd, timeout) => sh(cmd, rafa, timeout);
 
   // DISPOSAL (MIRRORS working-set.isDisposableHydration — the ONE rule, both planes):
   // an UNEDITED hydration must never enter a brain commit, or we re-push org content as a
@@ -135,6 +135,16 @@ try {
     `git commit --allow-empty -q -m "brain(${branch}): ${subject}" ` +
       `-m "code-commit: ${fullSha}" -m "code-branch: ${branch}"`,
   );
+  // Keep the REMOTE mirror branch current (owner 2026-07-23: the branch is visible
+  // in the brain repo) — best-effort, bounded; a failed push retries on the next
+  // commit. Never the trunk (single writer = the reconciler).
+  if (branch !== "main" && branch !== "master") {
+    try {
+      shR(`git push -q -u origin "${branch}"`, 10000);
+    } catch {
+      /* offline / no permission — stays local until a later push succeeds */
+    }
+  }
 } catch {
   /* silent by design — the heartbeat carries sensor health */
 }

package/blueprint/.claude/rafa/hooks/brain-switch.mjs

@@ -4,15 +4,16 @@
 // surfaces are committed to the OLD branch first (switch-carryover) —
 // deterministic, nothing lost, nothing blocks.
 //
-// FRESH-SLATE RULE (owner 2026-07-23): a NEW branch's mirror is cut FROM THE
-// REMOTE TRUNK (the published org brain), never from whatever branch the local
-// mirror happened to sit on. That makes the slate exact — no session leftovers
-// from other branches, no local-vs-remote drift — and keeps the branch's diff
-// vs trunk equal to precisely what the branch captures (the reconciler's
-// git-plane semantic). Cutting an EMPTY tree instead would read as mass
-// deletion of the org brain in that diff — never that.
+// EMPTY-SLATE RULE (owner 2026-07-23): a NEW branch's mirror is cut at the
+// trunk's ROOT COMMIT — the empty genesis base every brain trunk begins with —
+// so the branch starts with an EMPTY .rafa and code agents HYDRATE what they
+// need during development. Rooting at genesis (not an orphan) keeps ancestry
+// with main, so the reconciler's main...branch diff = exactly what the branch
+// captured (an unrooted empty branch would diff as mass deletion of the org
+// brain — never that). The new mirror branch is also PUSHED to the brain
+// remote (best-effort, bounded) so the branch is VISIBLE in the brain repo.
 // Fallback ladder (offline-safe, never blocks a checkout):
-//   origin/<trunk> (freshly fetched, bounded) → local <trunk> → current HEAD.
+//   root of origin/<trunk> (freshly fetched) → root of local <trunk> → current HEAD.
 //
 // argv: <prevHEAD> <newHEAD> <flag> (git's post-checkout contract;
 // flag "1" = branch checkout, "0" = file checkout → no-op).
@@ -104,7 +105,8 @@ try {
     }
   } catch {
     // CUT — no mirror branch yet. Never mirror-cut the trunk itself; for any other
-    // branch, base the new mirror on the freshest trunk we can reach.
+    // branch, base the new mirror at the ROOT of the freshest trunk we can reach —
+    // the empty genesis base ⇒ an EMPTY .rafa slate, hydrated on demand during dev.
     if (branch !== "main" && branch !== "master") {
       const trunk = trunkOf();
       let base = null;
@@ -113,7 +115,9 @@ try {
         for (const ref of [`refs/remotes/origin/${trunk}`, `refs/heads/${trunk}`]) {
           try {
             shR(`git rev-parse --verify -q "${ref}"`);
-            base = ref;
+            // The trunk-line root (first-parent chain has exactly one root) — the
+            // empty genesis commit the reconciler authors the org brain from.
+            base = shR(`git rev-list --max-parents=0 --first-parent "${ref}"`).split("\n").pop();
             break;
           } catch {
             /* next */
@@ -122,6 +126,14 @@ try {
       }
       if (base) shR(`git checkout -q -b "${branch}" "${base}"`);
       else shR(`git checkout -q -b "${branch}"`); // last resort: old behavior, current HEAD
+      // Make the branch VISIBLE in the brain repo (owner 2026-07-23) — best-effort,
+      // bounded; a push failure never blocks the checkout (remote lands on the next
+      // brain-commit push instead).
+      try {
+        shR(`git push -q -u origin "${branch}"`, 10000);
+      } catch {
+        /* offline / no permission — mirror stays local until a later push succeeds */
+      }
     }
   }
 } catch {

package/lib/releases.mjs

@@ -246,7 +246,7 @@ export const RELEASES = [
       "`git merge` + push to main reconciles too. `rafa update` re-vendors the scan SOP.",
   },
   {
-    version: "0.8.11",
+    version: "0.8.12",
     contract: 1,
     plans: 2,
     requires: "update",
@@ -259,7 +259,7 @@ export const RELEASES = [
       "No session leftovers cross branches, local-vs-remote drift can't leak into a " +
       "new branch, and the branch's diff vs trunk stays exactly what the branch " +
       "captured. Switching TO the trunk ff-freshens it from remote (divergence stays " +
-      "loud — `rafa pull --full --force` is the explicit adopt). SELF-HEAL: a repo " +
+      "loud — `rafa pull --full --force` is the explicit adopt). EMPTY-SLATE: a new branch's mirror is cut at the trunk's ROOT (the empty genesis base) — .rafa starts EMPTY and agents hydrate during dev; the mirror branch is PUSHED to the brain remote (visible on GitHub) at cut + after every brain commit. SELF-HEAL: a repo " +
       "with rafa.json but no materialized .rafa bootstraps it automatically on the " +
       "first branch checkout (bounded; a failure never breaks the checkout). " +
       "`rafa update` re-vendors the post-checkout hook.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rafinery/cli",
-  "version": "0.8.11",
+  "version": "0.8.12",
   "description": "rafa — the AI engineer CLI. Vendors the rafa blueprint into your repo (shadcn-style) and runs the deterministic contract gates.",
   "type": "module",
   "bin": {