@skein-code/cli 0.3.17 → 0.3.18

package/docs/NEXT_STEPS.md

@@ -9,7 +9,7 @@ one of the milestones below.
 
 - Product name: `Skein`; primary executable: `skein`.
 - Compatibility executables: `mosaic` and `mosaic-code`.
-- Current repository version: `0.3.16`.
+- Current repository version: `0.3.18`.
 - Runtime requirement: Node.js `>=22.16.0` (the runtime uses unflagged
   `node:sqlite` with FTS5, and current CLI/build dependencies require this
   Node 22 baseline).
@@ -41,8 +41,8 @@ npm audit --omit=dev
 npm run release:verify -- --output-dir artifacts/package
 ```
 
-The latest verified package is `skein-code-cli-0.3.16.tgz`. The verifier writes
-its SHA-256 to `artifacts/package/skein-code-cli-0.3.16.tgz.sha256`, and CI
+The latest verified package is `skein-code-cli-0.3.18.tgz`. The verifier writes
+its SHA-256 to `artifacts/package/skein-code-cli-0.3.18.tgz.sha256`, and CI
 retains the checksum beside the package metadata. The checksum is deliberately
 not copied into this packaged document because doing so would change the
 archive it describes.
@@ -54,6 +54,24 @@ short-height case. The current full-suite count is recorded from the latest
 
 ## Recommended Order
 
+### P0-E: Token Economy measurement and bounded schema disclosure
+
+Version `0.3.18` adds the repository-owned `token-economy-benchmark-v1`
+deterministic replay. Its seven retrieval, large-output, CJK, and repeated
+zero-hit fixtures compare the legacy ceilings with the adaptive budget and
+firewall policies while requiring complete evidence and recovery coverage.
+The replay reports a 36.7% estimated-input reduction; this is a deterministic
+budget measurement, not a provider billing or task-success claim.
+
+MCP tool definitions are now marked for progressive disclosure. Catalogs of
+eight or fewer eligible tools remain fully visible; larger catalogs disclose a
+deterministically ranked maximum of eight schemas. Selected schemas retain
+their registry order and remain loaded for the current run, and Token Ledger
+receipts record the deferred count. MCP tools remain `network` operations and
+hidden tool calls remain rejected by the existing boundary. This release does
+not defer MCP connection or remote `listTools` discovery and does not claim the
+provider-cache or Context Compaction 2.0 follow-up work is complete.
+
 ### P0-D: Repository reuse and calibrated duplication enforcement
 
 Version `0.3.14` added the prompt ladder and pre-write `ReuseReceipt`. Version

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skein-code/cli",
-  "version": "0.3.17",
+  "version": "0.3.18",
   "description": "A context-first, model-agnostic coding agent with an auditable terminal workspace.",
   "type": "module",
   "license": "MIT",
@@ -16,6 +16,9 @@
   },
   "skein": {
     "releaseNotes": [
+      "Large MCP catalogs now disclose at most eight request-relevant schemas per run while preserving network permissions",
+      "Token Ledger receipts report deferred progressive schemas and selected definitions remain stable across tool turns",
+      "A deterministic Token Economy replay benchmark guards evidence, output-firewall, and no-progress invariants",
       "Calibrated Type-1/2 duplication matches now block completion until reuse or exact audited suppression",
       "Type-3 duplication remains warning-only and Type-4 semantic equivalence remains explicitly unsupported",
       "Duplication benchmark fixtures report deterministic recall, precision, false-positive rate, and latency",
@@ -58,6 +61,7 @@
     "test:pty": "sh test/pty/run-visual.sh",
     "benchmark:context": "tsx scripts/benchmark-local-index.ts",
     "benchmark:duplication": "tsx scripts/benchmark-duplication.ts",
+    "benchmark:token-economy": "tsx scripts/benchmark-token-economy.ts",
     "verify:package": "node scripts/verify-package.mjs",
     "release:verify": "npm run check && npm run verify:package --",
     "typecheck": "tsc --noEmit",