@skein-code/cli 0.3.13 → 0.3.14

package/docs/ARCHITECTURE.md

@@ -52,7 +52,10 @@
    receives one bounded recovery turn; the runtime persists `verified`,
    `unverified`, or `verification_failed` instead of trusting completion claims
    in model text.
-10. Persist the outcome and expose the same status through the TUI, text, JSON,
+10. Before the first substantive write, run the warning-only repository reuse
+    gate. It binds current candidate/read evidence to the request, index
+    generation, and change sequence without retaining source text.
+11. Persist the outcome and expose the same status through the TUI, text, JSON,
     and JSONL surfaces.
 
 ## Interactive startup gate

package/docs/NEXT_STEPS.md

@@ -9,7 +9,7 @@ one of the milestones below.
 
 - Product name: `Skein`; primary executable: `skein`.
 - Compatibility executables: `mosaic` and `mosaic-code`.
-- Current repository version: `0.3.13`.
+- Current repository version: `0.3.14`.
 - Runtime requirement: Node.js `>=22.16.0` (the runtime uses unflagged
   `node:sqlite` with FTS5, and current CLI/build dependencies require this
   Node 22 baseline).
@@ -41,8 +41,8 @@ npm audit --omit=dev
 npm run release:verify -- --output-dir artifacts/package
 ```
 
-The latest verified package is `skein-code-cli-0.3.13.tgz`. The verifier writes
-its SHA-256 to `artifacts/package/skein-code-cli-0.3.13.tgz.sha256`, and CI
+The latest verified package is `skein-code-cli-0.3.14.tgz`. The verifier writes
+its SHA-256 to `artifacts/package/skein-code-cli-0.3.14.tgz.sha256`, and CI
 retains the checksum beside the package metadata. The checksum is deliberately
 not copied into this packaged document because doing so would change the
 archive it describes.
@@ -54,6 +54,20 @@ short-height case. The current full-suite count is recorded from the latest
 
 ## Recommended Order
 
+### P0-D: Warning-only repository reuse gate
+
+Version `0.3.14` adds the first runtime reuse slice. The prompt states a short
+repository-first ladder, while `src/agent/reuse-gate.ts` evaluates only the
+first substantive `write_file` or `apply_patch` addition. It flushes the local
+index, re-reads ranked candidates, and persists a bounded `ReuseReceipt` with
+hashed query metadata, paths, symbols, scores, read status, generation, and
+change sequence. The receipt never stores source or prompt text. This release
+is intentionally warning-only; an unavailable index is `unresolved`, not a
+false pass, and legitimate docs/config/test/generated/deletion/local-edit
+changes are exempt. The next slice is deterministic function extraction and
+post-write duplication audit; high-confidence blocking waits for fixture-based
+precision calibration.
+
 ### P0: Continuous Integration And Release Reproducibility
 
 `.github/workflows/ci.yml` now covers Node 22 on macOS and Linux. It runs

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skein-code/cli",
-  "version": "0.3.13",
+  "version": "0.3.14",
   "description": "A context-first, model-agnostic coding agent with an auditable terminal workspace.",
   "type": "module",
   "license": "MIT",
@@ -16,6 +16,9 @@
   },
   "skein": {
     "releaseNotes": [
+      "Warning-only Reuse Gate records content-free candidate evidence before the first substantive write",
+      "Reuse receipts surface unresolved index/read failures instead of claiming a safe new implementation",
+      "Prompt and timeline diagnostics expose the repository-first reuse ladder without blocking legitimate writes",
       "Known tool changes refresh only their affected local-index paths before the next model turn",
       "File ctime closes same-size and restored-mtime zero-hit freshness gaps without full-content scans",
       "Repeated empty or unchanged search calls stop through the existing recovery circuit"