@skein-code/cli 0.3.12 → 0.3.14

package/docs/ARCHITECTURE.md

@@ -52,7 +52,10 @@
    receives one bounded recovery turn; the runtime persists `verified`,
    `unverified`, or `verification_failed` instead of trusting completion claims
    in model text.
-10. Persist the outcome and expose the same status through the TUI, text, JSON,
+10. Before the first substantive write, run the warning-only repository reuse
+    gate. It binds current candidate/read evidence to the request, index
+    generation, and change sequence without retaining source text.
+11. Persist the outcome and expose the same status through the TUI, text, JSON,
     and JSONL surfaces.
 
 ## Interactive startup gate
@@ -75,6 +78,12 @@ stay in a retry/exit state and occur before an empty session is persisted.
 Headless runs retain non-animated lazy indexing so structured automation does
 not acquire terminal-only behavior.
 
+Known mutations take a narrower path: the runner validates tool-reported
+`changedFiles`, marks them dirty, targeted-upserts or deletes only those paths,
+and atomically persists the new generation before returning the tool result.
+Manifest reconciliation additionally compares ctime, closing same-size changes
+whose mtime is restored without hashing every source file on an empty query.
+
 ### Prompt layers
 
 The runner keeps the cacheable system prefix separate from mutable task state:

package/docs/NEXT_STEPS.md

@@ -9,7 +9,7 @@ one of the milestones below.
 
 - Product name: `Skein`; primary executable: `skein`.
 - Compatibility executables: `mosaic` and `mosaic-code`.
-- Current repository version: `0.3.12`.
+- Current repository version: `0.3.14`.
 - Runtime requirement: Node.js `>=22.16.0` (the runtime uses unflagged
   `node:sqlite` with FTS5, and current CLI/build dependencies require this
   Node 22 baseline).
@@ -41,19 +41,33 @@ npm audit --omit=dev
 npm run release:verify -- --output-dir artifacts/package
 ```
 
-The latest verified package is `skein-code-cli-0.3.12.tgz`. The verifier writes
-its SHA-256 to `artifacts/package/skein-code-cli-0.3.12.tgz.sha256`, and CI
+The latest verified package is `skein-code-cli-0.3.14.tgz`. The verifier writes
+its SHA-256 to `artifacts/package/skein-code-cli-0.3.14.tgz.sha256`, and CI
 retains the checksum beside the package metadata. The checksum is deliberately
 not copied into this packaged document because doing so would change the
 archive it describes.
 
-The final verification included a fresh install and real PTY interaction for
-all three executable aliases, `/about`, a permission prompt, denial, and clean
-Ctrl+C exit. PTY coverage included 20, 24 ASCII, 40, 80, 120 columns and a
-40x10 short-height case. The current 42-file, 424-test suite passes the full check.
+The final verification included a fresh install for all three executable
+aliases. PTY coverage included 20, 24 ASCII, 40, 80, 120 columns and a 40x10
+short-height case. The current full-suite count is recorded from the latest
+`npm run check` in the release evidence.
 
 ## Recommended Order
 
+### P0-D: Warning-only repository reuse gate
+
+Version `0.3.14` adds the first runtime reuse slice. The prompt states a short
+repository-first ladder, while `src/agent/reuse-gate.ts` evaluates only the
+first substantive `write_file` or `apply_patch` addition. It flushes the local
+index, re-reads ranked candidates, and persists a bounded `ReuseReceipt` with
+hashed query metadata, paths, symbols, scores, read status, generation, and
+change sequence. The receipt never stores source or prompt text. This release
+is intentionally warning-only; an unavailable index is `unresolved`, not a
+false pass, and legitimate docs/config/test/generated/deletion/local-edit
+changes are exempt. The next slice is deterministic function extraction and
+post-write duplication audit; high-confidence blocking waits for fixture-based
+precision calibration.
+
 ### P0: Continuous Integration And Release Reproducibility
 
 `.github/workflows/ci.yml` now covers Node 22 on macOS and Linux. It runs
@@ -78,12 +92,12 @@ Implementation notes:
 - `npm run release:verify` reproduces the package from source, installs it into
   an isolated prefix, rejects packaged local state, and exercises `skein`,
   `mosaic`, and `mosaic-code`.
-- The `main` branch rule requires the strict `check` status. Version 0.3.12
-  adds privacy-safe per-request token receipts, actual-versus-estimated usage
-  provenance, prompt partition accounting, and adaptive 2k/4k/8k/12k local
-  retrieval budgets. Session telemetry stores counts, tool names, selection
-  decisions, and discard reasons, never prompt, source, schema, argument, or
-  tool-result content.
+- The `main` branch rule requires the strict `check` status. Version 0.3.13
+  retains v0.3.12's privacy-safe per-request token ledger and adaptive budgets,
+  then adds targeted known-change index refresh, ctime freshness reconciliation,
+  and bounded no-progress search recovery. Session telemetry stores counts,
+  tool names, selection decisions, and hashes, never prompt, source, schema,
+  argument, or tool-result content.
   Its tag, GitHub verification, and npm publication use the same source commit.
 
 ### P1: Skein Storage Namespace And Migration
@@ -147,9 +161,10 @@ Implementation progress:
 
 ### P1: Local Context Engine Reliability And Benchmarking
 
-Keep retrieval local and measurable as the repository grows. The next slice
-should add content hashes to index entries, a small generation-keyed query cache,
-overlap-aware packing, and language adapters for common declaration styles.
+Keep retrieval local and measurable as the repository grows. Content hashes,
+generation-keyed query caching, overlap-aware packing, adaptive budgets, and
+targeted known-change refresh are now implemented. The next retrieval slice is
+language adapters and the expanded multilingual benchmark.
 
 Definition of done:
 
@@ -166,8 +181,12 @@ Implementation progress:
 - The public `pack/search/index/status` boundary is now a pure local façade.
 - Legacy external configuration is stripped at the config schema boundary and
   no external executable or database is probed by the CLI.
-- Remaining work is content-hash freshness, cache invalidation, structured
-  chunking, and the reproducible benchmark.
+- Tool-reported creates, updates, and deletes refresh only affected paths and
+  atomically persist before the next turn in TUI or headless mode.
+- Size/mtime/ctime reconciliation closes the direct-new-query zero-hit window;
+  repeated empty or unchanged searches stop through the recovery circuit.
+- Remaining work is broader language adapters and production-scale benchmark
+  calibration; the reproducible benchmark pipeline already exists.
 
 ### P1: Multi-Agent Scheduler And Team UX
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skein-code/cli",
-  "version": "0.3.12",
+  "version": "0.3.14",
   "description": "A context-first, model-agnostic coding agent with an auditable terminal workspace.",
   "type": "module",
   "license": "MIT",
@@ -16,9 +16,12 @@
   },
   "skein": {
     "releaseNotes": [
-      "Each model request records privacy-safe token partitions and actual-versus-estimated provenance",
-      "Local retrieval now selects focused, standard, broad, or maximum evidence budgets",
-      "Terminal and JSON diagnostics expose budget decisions without storing prompt or source content"
+      "Warning-only Reuse Gate records content-free candidate evidence before the first substantive write",
+      "Reuse receipts surface unresolved index/read failures instead of claiming a safe new implementation",
+      "Prompt and timeline diagnostics expose the repository-first reuse ladder without blocking legitimate writes",
+      "Known tool changes refresh only their affected local-index paths before the next model turn",
+      "File ctime closes same-size and restored-mtime zero-hit freshness gaps without full-content scans",
+      "Repeated empty or unchanged search calls stop through the existing recovery circuit"
     ]
   },
   "bin": {