atris 3.74.11 → 3.74.13

package/atris/team/executor/MEMBER.md

@@ -124,6 +124,7 @@ If new evidence changes the task, stop and add a task note instead of forcing co
 7. **Anti-slop aware**: Read `atris/policies/ANTISLOP.md` before writing. No sparkles, no filler, no purple prose.
 8. **Stay in scope**: Only touch files listed in the task. If you need to change something outside scope, stop and flag it. That's a new task.
 9. **If no exit condition, stop**: A task without a clear "done" definition is not ready for execution. Send it back to navigator.
+10. **Make exactly what was asked**: Match the existing output shape, names, and style. Add no fields, flags, or features the job did not ask for; name them as a next step instead.
 
 ---
 

package/commands/member.js

@@ -785,6 +785,7 @@ const MEMBER_RUN_START_BOOLEAN_FLAGS = [
   '--json',
   '--no-verify',
   '--referee',
+  '--referee-if-check-edited',
   '--no-referee',
   '--worktree',
   '--shared-checkout',
@@ -976,9 +977,22 @@ function inferMemberRunVerifier(missionText, args = [], cwd = process.cwd()) {
   if (testFileMatch && fs.existsSync(path.join(cwd, testFileMatch[1]))) {
     return `node --test ${testFileMatch[1]}`;
   }
+  // A job that names the project's own test command ("keep npm test green")
+  // chose that check; it is not a silent broad-suite default.
+  const npmMatch = text.match(/\bnpm\s+(run\s+)?test(?![\w:-]|\.\w)/i);
+  if (npmMatch && projectHasTestScript(cwd)) return npmMatch[1] ? 'npm run test' : 'npm test';
   return '';
 }
 
+function projectHasTestScript(cwd) {
+  try {
+    const pkg = JSON.parse(fs.readFileSync(path.join(cwd, 'package.json'), 'utf8'));
+    return Boolean(pkg && pkg.scripts && pkg.scripts.test);
+  } catch {
+    return false;
+  }
+}
+
 function buildMemberRunStartArgs(owner, missionText, args = [], cwd = process.cwd()) {
   const resolvedVerifier = inferMemberRunVerifier(missionText, args, cwd);
   const startArgs = [
@@ -1023,7 +1037,10 @@ function buildMemberRunStartArgs(owner, missionText, args = [], cwd = process.cw
   // Default to an isolated worktree only when there is a git repo to cut it
   // from. A plain (non-git) workspace would fail every mission start with
   // "fatal: not a git repository", degrade to the shared checkout instead.
-  if (!hasFlag(args, '--shared-checkout') && !hasFlag(args, '--no-worktree') && insideGitRepo(cwd)) {
+  // A job that says "do not commit" wants the change in the person's own
+  // files; a side checkout would hide uncommitted work where they never see it.
+  const forbidsCommit = !hasFlag(args, '--worktree') && require('../lib/member-save-work').jobForbidsCommit(missionText);
+  if (!forbidsCommit && !hasFlag(args, '--shared-checkout') && !hasFlag(args, '--no-worktree') && insideGitRepo(cwd)) {
     startArgs.push('--worktree');
   }
   startArgs.push('--json');
@@ -1048,9 +1065,21 @@ function startMemberRunMission(name, missionText, args = []) {
 }
 
 // An ignited run asks a second engine to review the work by default, so every
-// run ends with a verdict. --no-referee skips it; an explicit --referee is kept.
-function memberRunWantsReferee(runArgs, ignite) {
-  return Boolean(ignite) && !hasFlag(runArgs, '--referee') && !hasFlag(runArgs, '--no-referee');
+// run ends with a verdict. A real test command is already that verdict: the
+// second engine only reran the same commands and cost about a minute a run
+// (member lab 2026-10-24), so it stays for runs whose check is not a test
+// runner (whitespace, syntax, or file-exists checks). --no-referee skips it; an explicit --referee is kept.
+function memberRunHasRealCheck(verifier) {
+  const command = String(verifier || '').trim();
+  // A plain test runner only: chaining (|| true, ; , &&, pipes, subshells) or a
+  // pass-with-no-tests switch can make any run "pass", so those keep the review.
+  if (/\|\||&&|[;|`\r\n]|\$\(|pass-?with-?no-?tests|--no-tests|--exit-zero/i.test(command)) return false;
+  return /^((npm|pnpm|yarn)\s+(run\s+)?test\b|node\s+--test\b|npx\s+(jest|vitest|mocha)\b|pytest\b|python3?\s+-m\s+pytest\b|go\s+test\b|cargo\s+test\b)/i.test(command);
+}
+
+function memberRunWantsReferee(runArgs, ignite, verifier = '') {
+  return Boolean(ignite) && !hasFlag(runArgs, '--referee') && !hasFlag(runArgs, '--no-referee')
+    && !memberRunHasRealCheck(verifier);
 }
 
 function memberRunCli(args, cwd, { live = false, missionId = '' } = {}) {
@@ -1377,7 +1406,10 @@ function memberRunWith(name, args, { quiet = false, closeTaskIds = [] } = {}) {
     ['--mission', '--mission-id', '--minutes', '--hours', '--industry', '--domain', '--value', '--outcome', '--truth', '--proof', '--base', '--yes-lock', '--yes-lock-parent'],
     ['--worktree', '--shared-checkout', '--no-worktree', '--choose-work', '--auto', '--ignite', '--wait', '--sync']);
   if (ignite && !hasFlag(runArgs, '--complete-on-pass')) runArgs.push('--complete-on-pass');
-  if (memberRunWantsReferee(runArgs, ignite)) runArgs.push('--referee');
+  if (memberRunWantsReferee(runArgs, ignite, mission.verifier)) runArgs.push('--referee');
+  // Skipped because a real test is the check: review anyway if the worker
+  // edits what that test command runs.
+  else if (ignite && memberRunHasRealCheck(mission.verifier) && !hasFlag(runArgs, '--no-referee')) runArgs.push('--referee-if-check-edited');
   const budgetSeconds = memberRunBudgetSeconds(args);
   if (!readFlag(runArgs, '--max-ticks', '')) {
     runArgs.push('--max-ticks', budgetSeconds ? String(Math.max(4, Math.ceil(budgetSeconds / 300))) : '1');
@@ -1434,6 +1466,17 @@ function memberRunWith(name, args, { quiet = false, closeTaskIds = [] } = {}) {
     result.ask = `${name} is waiting on you: ${payload.human_asks[0]}`;
     result.next_command = payload.next_command || 'atris decide';
   }
+  // Passed but never committed: save the loose work on the member's branch so
+  // the branch holds it. Only in the member's own side checkout, never the main one.
+  const worktreePath = finalMission.worktree?.path || mission.worktree?.path || '';
+  if (ok && started && worktreePath && finalMission.verifier_result?.passed === true) {
+    result.saved_work = require('../lib/member-save-work').saveLeftoverMemberWork({
+      worktreePath, member: name, objective: finalMission.objective || mission.objective,
+    });
+    if (result.saved_work.saved && !asJson && !quiet) {
+      console.log(`saved ${result.saved_work.files.length} file(s) ${name} left unsaved onto its branch`);
+    }
+  }
   // A finished ignited run whose check passed hands its branch to GitHub
   // auto-merge, only past the local gates; any held gate leaves the branch.
   if (ignite && ok && started && !reviewAsk && finalMission.verifier_result?.passed === true) {
@@ -9946,13 +9989,24 @@ async function memberChat(name, ...rest) {
 
 const IDEA_ARCHETYPE_RULES = [
   {
-    slugs: ['auto-improver', 'improver'],
-    pattern: /\b(repeat|recurring|broken\s+test|flaky|error|regression|pain|fix\s+bug|self[- ]improv|crash)\b/i,
+    // A job that opens by asking where or which, or forbids source edits, is
+    // a read-and-answer job even when it mentions a bug.
+    slugs: ['navigator'],
+    // Wins wherever it matches: the question shape decides the whole job.
+    leading: true,
+    pattern: /^(?![\s\S]*(?<!not\s|n't\s)\b(fix|repair|implement|update|change|edit|add|rename|modify)\b)\s*(find|locate|which|count|trace|identify)\b|\bdo\s+not\s+(edit|change|modify)\s+(any\s+)?source\b/i,
+    reason: 'reads the code and answers where and which questions',
+  },
+  {
+    // The shipped `improver` proposes team and workflow changes; it is not a
+    // code fixer, so fix jobs go to auto-improver or fall back to the builder.
+    slugs: ['auto-improver'],
+    pattern: /\b(repeat|recurring|broken|flaky|errors?|regressions?|pain|fix(es|ed|ing)?|bugs?|fail(s|ing|ed|ure)?|self[- ]improv|crash(es|ed|ing)?)\b/i,
     reason: 'handles recurring errors, regressions, and test fixes',
   },
   {
     slugs: ['validator', 'orb'],
-    pattern: /\b(review|audit|validate|verify|check\s+diff|quality|slop|security)\b/i,
+    pattern: /\b(code\s+review|review|audit|validate|verify|check\s+diff|quality|slop|security)\b/i,
     reason: 'reviews changes and blocks weak work before merge',
   },
   {
@@ -9988,8 +10042,10 @@ const ARCHETYPE_FOR_JOB = { build: 'executor', review: 'validator', search: 'res
 const EXPERIMENT_STATUSES = new Set(['experimental', 'one-off']);
 
 function ideaRuleFor(slug, record, text) {
-  const own = IDEA_ARCHETYPE_RULES.find((rule) => rule.slugs.includes(slug));
-  if (own && own.pattern.test(text)) return { rule: own, own: true };
+  const ownRules = IDEA_ARCHETYPE_RULES.filter((rule) => rule.slugs.includes(slug));
+  const matched = ownRules.find((rule) => rule.pattern.test(text));
+  if (matched) return { rule: matched, own: true };
+  const own = ownRules[0];
   const { autoJobForMember } = require('../lib/member-engine');
   const archetype = ARCHETYPE_FOR_JOB[autoJobForMember(slug, record.role)];
   const rule = IDEA_ARCHETYPE_RULES.find((r) => r.slugs.includes(archetype)) || null;
@@ -10000,7 +10056,15 @@ function ideaRuleFor(slug, record, text) {
 // specific jobs to the general build job, so "where is the code" is a
 // navigator job even though "code" is also a build word.
 function ideaJobRule(text) {
-  return IDEA_ARCHETYPE_RULES.find((rule) => rule.pattern.test(text)) || null;
+  // The job word that comes first names the job: "review the bug fix" is a
+  // review, "fix the review page" is a fix. Ties keep list order.
+  let best = null;
+  for (const rule of IDEA_ARCHETYPE_RULES) {
+    const match = rule.pattern.exec(text);
+    const index = match ? (rule.leading ? -1 : match.index) : null;
+    if (match && (!best || index < best.index)) best = { rule, index };
+  }
+  return best ? best.rule : null;
 }
 
 // 3 = named in the idea, 2 = the job is the member's own, 1 = the member
@@ -10059,7 +10123,12 @@ function pickMemberForIdea(ideaText, root = process.cwd(), preferredMember = '')
     .toLowerCase()
     .split(/[^a-z0-9]+/)
     .filter((w) => w.length >= 4);
-  const jobRule = ideaJobRule(text);
+  let jobRule = ideaJobRule(text);
+  // A job nobody on this team owns goes to the builder rule, not to whoever
+  // shares the most words with it.
+  if (jobRule && !members.some((m) => ideaRuleFor(memberSlugFromRecord(m), m, text).rule === jobRule)) {
+    jobRule = IDEA_ARCHETYPE_RULES.find((rule) => rule.slugs.includes('executor')) || jobRule;
+  }
 
   let best = null;
   for (const record of members) {
@@ -10073,6 +10142,9 @@ function pickMemberForIdea(ideaText, root = process.cwd(), preferredMember = '')
 
     const memberRule = ideaRuleFor(slug, record, text);
     const fit = ideaJobFit(named, memberRule, jobRule);
+    // A reviewer never patches, so it only takes review jobs unless named.
+    const reviewRule = IDEA_ARCHETYPE_RULES.find((rule) => rule.slugs.includes('validator'));
+    const effectiveTier = !named && memberRule.rule === reviewRule && jobRule !== reviewRule ? Math.max(tier, 1) : tier;
     if (fit > 0 && memberRule.rule) {
       score += 30;
       matchedReason = memberRule.rule.reason;
@@ -10105,7 +10177,7 @@ function pickMemberForIdea(ideaText, root = process.cwd(), preferredMember = '')
       role: record.role || 'Team Member',
       reason: matchedReason,
       score,
-      tier,
+      tier: effectiveTier,
       fit,
     };
     if (outranksDispatch(candidate, best)) best = candidate;
@@ -10438,7 +10510,7 @@ function resolveMemberEngineSeat(memberSlug, root = process.cwd()) {
 
 function buildMemberSubagentShell(owner, role, engineId, objective, root = process.cwd()) {
   const cleanObjective = compactSentence(objective || `Advance ${owner} roadmap`, 160);
-  const verify = inferMemberRunVerifier(owner, cleanObjective, root);
+  const verify = inferMemberRunVerifier(cleanObjective, [], root);
   return {
     role: `${owner} (${role || 'Team Member'})`,
     member: owner,
@@ -12068,6 +12140,7 @@ module.exports = {
   wakeBootLines,
   buildMemberRunStartArgs,
   inferMemberRunVerifier,
+  buildMemberSubagentShell,
   pickMemberForIdea,
   appendMemberGoalLog,
   appendProjectLog,

package/commands/mission.js

@@ -788,6 +788,7 @@ const MISSION_RUN_BOOLEAN_FLAGS = [
   '--no-claude',
   '--no-verify',
   '--referee',
+  '--referee-if-check-edited',
   '--no-referee',
   '--complete-on-pass',
   '--no-drain',
@@ -2620,7 +2621,8 @@ const MISSION_BARE_COMMAND_WORDS = new Set(['go', 'keep', 'going', 'do', 'it', '
 function missionObjectiveIsJunk(value) {
   const objective = String(value || '').trim();
   if (!objective || objective.startsWith('-')) return true;
-  if (/[\u0000-\u001f\u007f-\u009f\ufffd]/u.test(objective)) return true;
+  // Line breaks and tabs are normal in a pasted bug report; other control bytes are junk.
+  if (/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f\ufffd]/u.test(objective)) return true;
   if (objective.replace(/\s/g, '').length < 8) return true;
   const words = objective.toLowerCase().match(/[a-z]+/g) || [];
   return words.length > 0
@@ -6949,6 +6951,39 @@ function missionProtectedTags(mission, root = process.cwd()) {
   return tags;
 }
 
+// True when the tick changed what its check command runs: package.json (which
+// defines npm test) or a file the command names. A passing test the worker
+// rewrote is not evidence on its own.
+function tickTouchedCheckDefinition(verifier, before, root = process.cwd()) {
+  const run = (args) => spawnSync('git', args, { cwd: root, encoding: 'utf8' });
+  const head = String(before?.head || '').trim();
+  const changed = [
+    // No starting commit to compare against: every tracked file counts.
+    ...String(run(head ? ['diff', '--name-only', head] : ['ls-files']).stdout || '').split('\n'),
+    ...String(run(['diff', '--name-only', 'HEAD']).stdout || '').split('\n'),
+    ...String(run(['ls-files', '--others', '--exclude-standard']).stdout || '').split('\n'),
+  ].map((file) => file.trim()).filter(Boolean);
+  // npm test runs whatever package.json says, so its paths and folders count too.
+  let checkText = String(verifier || '');
+  if (/^(npm|pnpm|yarn)\s/i.test(checkText.trim())) {
+    try { checkText += ` ${JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8'))?.scripts?.test || ''}`; } catch {}
+  }
+  // Runners that find tests by name (node --test, jest, pytest, go test) never
+  // list them, so any changed file shaped like a test counts as well.
+  const testShaped = /(^|\/)(tests?|__tests__|specs?|checks?)\/|\.(test|spec)\.[cm]?[jt]sx?$|_test\.(go|py)$|(^|\/)test_[^/]*\.py$|(^|\/)conftest\.py$/i;
+  return changed.some((file) => path.basename(file) === 'package.json'
+    || testShaped.test(file)
+    || checkText.includes(file)
+    || (path.dirname(file) !== '.' && checkText.includes(`${path.dirname(file)}/`)));
+}
+
+// The worker's `learned:` line from its receipt, so the lesson reaches the
+// member log (and the next worker's preloaded memory) without a hand edit.
+function receiptLearnedLine(text) {
+  const match = String(text || '').match(/^[\s*-]*learned:\s*(.+)$/im);
+  return match ? match[1].trim().slice(0, 240) : undefined;
+}
+
 function inspectMissionTickProtectedDiff(mission, before, root = process.cwd()) {
   const after = gitWorktreeSnapshot(root);
   if (before?.reason === 'not-git-worktree' && after?.reason === 'not-git-worktree') {
@@ -9152,6 +9187,31 @@ function readBoundedContextFile(filePath, maxChars = 1600) {
   }
 }
 
+// Code members never call the account-wide tool servers (mail, calendar,
+// docs), yet loading them cost about 5s per worker start in the member lab.
+// They keep the project's own .mcp.json; ATRIS_MEMBER_KEEP_MCP=1 keeps all.
+const CODE_MEMBERS = new Set(['executor', 'builder', 'codex-executor', 'auto-improver', 'navigator', 'validator', 'architect']);
+
+function claudeRunnerMcpArgs(mission, cwd = process.cwd(), env = process.env) {
+  if (env.ATRIS_MEMBER_KEEP_MCP === '1') return [];
+  if (!CODE_MEMBERS.has(String(mission?.owner || '').trim().toLowerCase())) return [];
+  const args = ['--strict-mcp-config'];
+  const projectConfig = path.join(cwd, '.mcp.json');
+  if (fs.existsSync(projectConfig)) args.push('--mcp-config', projectConfig);
+  // Servers added for this folder with Claude's local scope live in
+  // ~/.claude.json under the folder's path; keep those too.
+  try {
+    const home = env.HOME || os.homedir();
+    const projects = JSON.parse(fs.readFileSync(path.join(home, '.claude.json'), 'utf8'))?.projects || {};
+    // A side checkout's servers are usually registered under the main checkout.
+    const common = spawnSync('git', ['rev-parse', '--git-common-dir'], { cwd, encoding: 'utf8' });
+    const mainRoot = common.status === 0 ? path.dirname(path.resolve(cwd, String(common.stdout || '').trim())) : '';
+    const local = { ...(mainRoot ? projects[mainRoot]?.mcpServers : null), ...projects[path.resolve(cwd)]?.mcpServers };
+    if (Object.keys(local).length) args.push('--mcp-config', JSON.stringify({ mcpServers: local }));
+  } catch {}
+  return args;
+}
+
 function buildPreloadedMemberContextLines(mission, root = process.cwd()) {
   const owner = String(mission?.owner || '').trim();
   const baseRoot = mission?.worktree_root || mission?.worktree?.path || root;
@@ -9281,7 +9341,7 @@ function buildTickPrompt(mission, tickIndex, maxTicks, frozen, pings = [], cwd =
     ``,
     `## Your task`,
     `Do ONE increment of work toward the stop condition. ONE. No more.`,
-    `- ${memberIdentityLine(mission.owner)} Read atris/team/${mission.owner}/MEMBER.md (and SOUL.md if present) before acting, work in that identity, inside its scope and stop rules. After your work, append what you did and what you learned to atris/team/${mission.owner}/logs/<today's date>.md.`,
+    `- ${memberIdentityLine(mission.owner)} Your member files are preloaded above; open atris/team/${mission.owner}/MEMBER.md only if that copy is marked truncated. Work in that identity, inside its scope and stop rules. Atris writes your member log from your receipt, so end the receipt with one \`learned: <one line>\` line instead of editing the log.`,
     `- FIRST: inspect current mission/task state before acting. Read the relevant files, run \`atris mission status ${mission.id}\`, \`git status\`, or \`atris task list\` as needed so you know what's already done.`,
     `- Pick the smallest concrete action that moves the mission forward.`,
     `- Before acting, state your single next move in one sentence.`,
@@ -9289,7 +9349,7 @@ function buildTickPrompt(mission, tickIndex, maxTicks, frozen, pings = [], cwd =
     `- The tick is not done until the verify step passes. If a frozen verifier exists, the harness runs it, but that does not replace the real-surface proof below. If no frozen verifier exists, finish by actually running the surface you changed on this computer and paste the real command output into your receipt.`,
     `- After that one verify step, STOP. Never start a second slice in one tick.`,
     `- Write the tick summary in operator language: what changed and what it buys or costs in plain words, with no flags, task ids, or code identifiers.`,
-    `- Propose the next needle-mover: include a \`next_push: <one concrete feature or optimization to build next>\` line in your receipt and member log so the team compounds exponentially.`,
+    `- Propose the next needle-mover: include a \`next_push: <one concrete feature or optimization to build next>\` line in your receipt so the team compounds exponentially.`,
     ``,
     `## No claimable work? Work the backstop ladder`,
     `If the mission and task state offer no claimable work, inspect these rungs in order. Pick the FIRST rung with real fuel and do ONE bounded slice:`,
@@ -9304,6 +9364,7 @@ function buildTickPrompt(mission, tickIndex, maxTicks, frozen, pings = [], cwd =
     ``,
     `## Landing rule`,
     `Safe-lane work (internal code, tests, docs, and proofs) must be committed and pushed or landed WITHOUT asking a human. Protected lanes (external sends, payments, credentials, auth/CSP/iframe/sandbox surfaces, and deletes of user data) are never self-landed: file a decision card instead.`,
+    `The objective's own limits win over this rule: if it says do not commit, touch only certain files, or leave something alone, do exactly that.`,
     `After landing a ladder-sourced slice, append a judge card to atris/status/for-you.md in this SHIPPED format:`,
     missionShippedCard(),
     ``,
@@ -9684,6 +9745,7 @@ function spawnGenericRunnerTick(mission, opts) {
         result: finalText,
         summary: usefulClaudeReceiptSummary(finalText || errStr, ok ? 'no-text' : 'error'),
         receipt_text: cappedClaudeReceiptText(finalText || errStr),
+        learned: receiptLearnedLine(finalText),
         duration_total_ms: Date.now() - startedAt,
         num_turns: null,
         stop_reason: null,
@@ -9773,6 +9835,7 @@ function spawnClaudeTick(mission, opts) {
     ];
     if (model) args.push('--model', model);
     if (mission.roster_effort) args.push('--effort', mission.roster_effort);
+    args.push(...claudeRunnerMcpArgs(mission, cwd));
     if (sessionMode === 'set') args.push('--session-id', sessionId);
     else if (sessionMode === 'resume') args.push('--resume', sessionId);
 
@@ -9879,6 +9942,7 @@ function spawnClaudeTick(mission, opts) {
         result: finalText,
         summary: usefulClaudeReceiptSummary(finalText, ok ? 'no-text' : 'error'),
         receipt_text: cappedClaudeReceiptText(finalText),
+        learned: receiptLearnedLine(finalText),
         api_equivalent_estimate: costEstimate,
         duration_api_ms: durationApiMs,
         duration_total_ms: Date.now() - startedAt,
@@ -10122,6 +10186,7 @@ async function parseAndValidateMissionRunPhase(args) {
   const skipClaude = hasFlag(args, '--no-claude');
   const verifyEach = !hasFlag(args, '--no-verify');
   const refereeEach = hasFlag(args, '--referee') && !hasFlag(args, '--no-referee');
+  const refereeIfCheckEdited = hasFlag(args, '--referee-if-check-edited') && !hasFlag(args, '--no-referee');
   const refereeEngine = readFlag(args, '--referee-engine', '');
   const completeOnPass = hasFlag(args, '--complete-on-pass');
   const skipDrain = hasFlag(args, '--no-drain');
@@ -10159,6 +10224,7 @@ async function parseAndValidateMissionRunPhase(args) {
     skipClaude,
     verifyEach,
     refereeEach,
+    refereeIfCheckEdited,
     refereeEngine,
     completeOnPass,
     skipDrain,
@@ -10993,6 +11059,7 @@ async function executeMissionRunTicksPhase(context) {
         verifier: verifierResult ? (verifierResult.passed ? 'passed' : 'failed') : 'not_run',
         summary: tickSummaryText ? tickSummaryText.slice(0, 240) : undefined,
         next_push: result.next_push ? String(result.next_push).slice(0, 180) : undefined,
+        learned: result?.claude?.learned || receiptLearnedLine(result?.claude?.result || result?.claude?.receipt_text),
         feedback: verifierResult && !verifierResult.passed ? String(mission.last_check_feedback || '').slice(0, 240) : undefined,
         receipt: receiptPath,
       }, cwd);
@@ -11190,6 +11257,7 @@ async function verifyMissionRunTickPhase(context) {
       && (
         !currentTick.frozen.verifier
         || context.refereeEach
+        || (context.refereeIfCheckEdited && tickTouchedCheckDefinition(currentTick.frozen.verifier, currentTick.tickWorktreeBefore, cwd))
         || (!currentTick.storedVerifier && !process.env.NODE_TEST_CONTEXT)
       );
     if (shouldRunReferee) {
@@ -12858,6 +12926,9 @@ function missionCommand(args) {
 }
 
 module.exports = {
+  receiptLearnedLine,
+  tickTouchedCheckDefinition,
+  claudeRunnerMcpArgs,
   crystallizeMemberSkillLesson,
   listSiblingWorkspaceMissionHints,
   missionProtectedLaneHold,

package/lib/member-autoland.js

@@ -446,7 +446,14 @@ function landLocally({ headSha, branch, cwd, pinnedTree }) {
 function autolandMemberRun({ mission, cwd, summary = '', workerEngine = '', loadTask = defaultLoadTask, closeTaskIds = [] } = {}) {
   if (!mission || typeof mission !== 'object') return held('mission', 'the mission could not be read');
   if (mission.verifier_result?.passed !== true) return held('check', 'the check did not pass');
-  if (!policyOn(cwd)) return held('policy', 'self-landing is not switched on in the main checkout');
+  if (!policyOn(cwd)) {
+    // Say where the work is and the one command that brings it in; "self-landing
+    // is off" alone left people thinking the fix was already in their files.
+    const branch = String(mission.worktree?.branch || '').trim();
+    const gate = held('policy', 'self-landing is not switched on in the main checkout');
+    if (!branch || branch === mainCheckoutBranch(cwd)) return gate;
+    return { ...gate, branch, line: `your files are not changed yet: the work is saved on branch ${branch}. bring it in: git merge ${branch}` };
+  }
 
   const missionLane = protectedLane({ ...mission, title: mission.objective });
   if (missionLane) return held('protected', `this mission sits in a protected area (${missionLane})`);

package/lib/member-save-work.js

@@ -0,0 +1,54 @@
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const { spawnSync } = require('child_process');
+
+// A member that passed its check but never committed leaves its work loose in
+// a side checkout that cleanup later deletes (member lab 2026-10-24: navigator
+// and validator wrote the right files, said done, committed nothing). Commit
+// what is left so the branch holds the work. Atris's own state stays out.
+function git(args, cwd) {
+  const result = spawnSync('git', args, { cwd, encoding: 'utf8' });
+  return { ok: result.status === 0, stdout: String(result.stdout || '').trim() };
+}
+
+function jobForbidsCommit(text) {
+  return /\b(do\s+not|don't|never|without|no)\s+(?:(?:create|make|add|any|new|a|an|more)\s+){0,3}commit/i.test(String(text || ''));
+}
+
+// Files that look like secrets never ride an automatic commit.
+const SECRET_PATH = /(^|\/)(\.(aws|ssh|gnupg|docker|kube)\/|\.env(\.[^/]*)?$|\.npmrc$|\.netrc$|credentials?$|[^/]*credentials?[^/]*\.(json|ya?ml|txt)$|secrets?\.(json|ya?ml|txt|env)$|[^/]*\.(pem|key|p12|pfx)$|id_(rsa|ed25519|ecdsa)[^/]*$|service[-_]account[^/]*\.json$)/i;
+
+function saveLeftoverMemberWork({ worktreePath, member = 'member', objective = '' } = {}) {
+  if (!worktreePath) return { saved: false, reason: 'no_worktree' };
+  // The job's own words win: "do not commit" means leave the changes loose.
+  if (jobForbidsCommit(objective)) return { saved: false, reason: 'job_forbids_commit' };
+  if (!git(['rev-parse', '--is-inside-work-tree'], worktreePath).ok) return { saved: false, reason: 'not_git' };
+  // Only a linked side checkout: its git dir differs from the shared one. The
+  // person's main checkout is never committed into.
+  // Plain --git-dir/--git-common-dir work on old git too; resolve both against
+  // the checkout, since either may come back relative.
+  const gitDirOut = git(['rev-parse', '--git-dir'], worktreePath).stdout;
+  const commonDirOut = git(['rev-parse', '--git-common-dir'], worktreePath).stdout;
+  if (!gitDirOut || !commonDirOut) return { saved: false, reason: 'not_side_checkout' };
+  const real = (dir) => { try { return fs.realpathSync(path.resolve(worktreePath, dir)); } catch { return ''; } };
+  const gitDir = real(gitDirOut);
+  const commonDir = real(commonDirOut);
+  if (!gitDir || !commonDir || gitDir === commonDir) return { saved: false, reason: 'not_side_checkout' };
+  const add = git(['add', '-A', '--', '.', ':(exclude).atris', ':(exclude).agent-worktrees'], worktreePath);
+  if (!add.ok) return { saved: false, reason: 'add_failed' };
+  git(['reset', '-q', '--', '.atris', '.agent-worktrees'], worktreePath);
+  const stagedAll = git(['diff', '--cached', '--name-only'], worktreePath).stdout.split('\n').filter(Boolean);
+  const skipped = stagedAll.filter((file) => SECRET_PATH.test(file));
+  if (skipped.length) git(['reset', '-q', '--', ...skipped], worktreePath);
+  const staged = stagedAll.filter((file) => !SECRET_PATH.test(file));
+  if (!staged.length) return { saved: false, reason: 'nothing_left', ...(skipped.length ? { skipped } : {}) };
+  const title = String(objective || '').split('\n').map((line) => line.trim()).find(Boolean) || 'finished work';
+  const message = `${member}: ${title.slice(0, 72)}\n\nSaved by atris after the check passed; the member left these changes uncommitted.`;
+  const commit = git(['commit', '-q', '-m', message], worktreePath);
+  if (!commit.ok) return { saved: false, reason: 'commit_failed', files: staged };
+  return { saved: true, files: staged, ...(skipped.length ? { skipped } : {}), sha: git(['rev-parse', 'HEAD'], worktreePath).stdout };
+}
+
+module.exports = { jobForbidsCommit, saveLeftoverMemberWork };

package/lib/zen-apply.js

@@ -31,6 +31,7 @@ const {
   sideCopyLines,
   scheduledCopies,
   runningCopies,
+  shortPlace,
   untrackedFiles,
   ABANDONED_DAYS,
   abandonedDaysFromEnv,
@@ -81,6 +82,13 @@ function identityEnv(root) {
   return env;
 }
 
+// Where zen put your copy of a clashing note, said from the repo root so the
+// line fits the pane, or from home when it sits outside the repo.
+function savedPlace(root, file) {
+  const rel = path.relative(root, file);
+  return rel && !rel.startsWith('..') && !path.isAbsolute(rel) ? rel : shortPlace(file);
+}
+
 function archiveStashes(root, tag) {
   const shas = (gitOut(['stash', 'list', '--format=%H'], root) || '').split('\n').filter(Boolean);
   if (!shas.length) return null;
@@ -444,7 +452,7 @@ function moveKeepingNotes(root, args, target, tag, from = 'HEAD') {
     for (const p of clashed) {
       const mine = path.join(dir, 'mine', p);
       if (isJournal(p) && joinJournal(path.join(root, p), mine)) notes.push(`joined your ${p} onto the new one`);
-      else if (!(fromCommit && lineRefsOnly(root, fromCommit, p, mine))) notes.push(`kept the new ${p}; your copy is in ${mine}`);
+      else if (!(fromCommit && lineRefsOnly(root, fromCommit, p, mine))) notes.push(`kept the new ${p}; your copy is in ${savedPlace(root, mine)}`);
     }
     for (const p of missed) {
       const mine = path.join(dir, 'mine', p);
@@ -452,9 +460,9 @@ function moveKeepingNotes(root, args, target, tag, from = 'HEAD') {
       if (to && fromCommit && followMove(root, fromCommit, p, to, mine)) {
         notes.push(`${p} moved to ${to}, and your edits went with it`);
       } else if (to) {
-        notes.push(`${p} moved to ${to} and your edits clash there; your copy is in ${fs.existsSync(mine) ? mine : patchFile}`);
+        notes.push(`${p} moved to ${to} and your edits clash there; your copy is in ${savedPlace(root, fs.existsSync(mine) ? mine : patchFile)}`);
       } else {
-        notes.push(`${p} no longer fits the new changes; your copy is in ${fs.existsSync(mine) ? mine : patchFile}`);
+        notes.push(`${p} no longer fits the new changes; your copy is in ${savedPlace(root, fs.existsSync(mine) ? mine : patchFile)}`);
       }
     }
   }
@@ -464,7 +472,7 @@ function moveKeepingNotes(root, args, target, tag, from = 'HEAD') {
       // A copy that matches the incoming file loses nothing, so say nothing.
       if (sameBytes(saved, path.join(root, p))) fs.rmSync(saved, { force: true });
       else if (isJournal(p) && joinJournal(path.join(root, p), saved)) notes.push(`joined your ${p} onto the new one`);
-      else notes.push(`kept the new ${p}; your copy is in ${saved}`);
+      else notes.push(`kept the new ${p}; your copy is in ${savedPlace(root, saved)}`);
     } else {
       fs.mkdirSync(path.dirname(path.join(root, p)), { recursive: true });
       fs.copyFileSync(saved, path.join(root, p));

package/lib/zen.js

@@ -646,4 +646,5 @@ module.exports = {
   readTeamState,
   scheduledCopies,
   runningCopies,
+  shortPlace,
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "atris",
-  "version": "3.74.11",
+  "version": "3.74.13",
   "description": "you say what you want in plain words. atris builds it, checks it, and shows you proof.",
   "mcpName": "io.github.atrislabs/atris",
   "main": "bin/atris.js",