immune-brain 3.2.0 → 3.2.1

package/README.md

@@ -46,7 +46,7 @@ This repo is a Pi package — Pi discovers Skills and extensions from `package.j
 }
 ```
 
-No extra server config is needed. Installing the package via Pi makes all 5 Skills available automatically. Verify with:
+No extra server config is needed. Installing the package via Pi makes all 6 Skills available automatically. Verify with:
 
 ```bash
 bun test                          # run all tests
@@ -165,7 +165,7 @@ See [`docs/reference/immune-brain-config.md`](docs/reference/immune-brain-config
 package.json                          # Pi package manifest (skills + extensions)
 plugins/immune-brain/
 ├── .pi-extension/                    # Pi TUI + Kernel authority extension
-├── skills/                           # 5 public Skills (trigger shims)
+├── skills/                           # 6 public Skills (trigger shims)
 ├── dist/                             # Built skill contracts & references
 ├── runtime/                          # Bun + TypeScript runtime & Kernel
 └── bin/                              # CLI wrappers (→ runtime/v4_runtime.ts)
@@ -183,7 +183,7 @@ docs/specs/                           # Living specs (updated in place)
 
 ## FAQ
 
-**Do I need to learn all 5 skills?** No. Just describe what you want — Pi routes to the right skill. Learn `imm-planner` and `imm-loop` first; the other two are occasional.
+**Do I need to learn all 6 skills?** No. Just describe what you want — Pi routes to the right skill. Learn `imm-planner` and `imm-loop` first; the other four are occasional.
 
 **What if I interrupt or close Pi mid-task?** State is on disk (`.imm/` + TaskIntent). Re-enter `imm-loop` to resume — the Kernel projection is authoritative.
 
@@ -202,8 +202,8 @@ This repo uses [Changesets](https://github.com/changesets/changesets) for versio
 | Task | Command |
 |------|---------|
 | Add a changeset | `bunx changeset` — pick bump (patch/minor/major) and write summary |
-| Bump version | `bun run changeset:version` — updates `package.json` + `CHANGELOG.md` |
-| Publish (local) | `bun run changeset:publish` — publishes to npm (needs `NPM_TOKEN` or `npm login`) |
+| Bump version | `bun run changeset:version` — updates `package.json` + `CHANGELOG.md`, then syncs and validates the Claude plugin manifest |
+| Publish (local) | `bun run changeset:publish` — validates manifest versions, then publishes to npm (needs `NPM_TOKEN` or `npm login`) |
 
 **Automated flow (recommended):**
 1. Push changesets to `main` → workflow opens a “Version Packages” PR.

package/README.zh-CN.md

@@ -46,7 +46,7 @@ Pi 与 Claude Code 是支持的宿主。未声明的适配器仍不受支持。C
 }
 ```
 
-无需额外 server 配置，通过 Pi 安装本 package 后 5 个 Skill 即自动可用。验证：
+无需额外 server 配置，通过 Pi 安装本 package 后 6 个 Skill 即自动可用。验证：
 
 ```bash
 bun test                    # 全量测试
@@ -165,7 +165,7 @@ Immune-Brain **没有独立配置文件**，偏好设置写在 `AGENTS.md`（仓
 package.json                          # Pi package manifest（skills + extensions）
 plugins/immune-brain/
 ├── .pi-extension/                    # Pi TUI + Kernel 扩展
-├── skills/                           # 5 个公开 Skills（触发 shim）
+├── skills/                           # 6 个公开 Skills（触发 shim）
 ├── dist/                             # 构建后的 skill 契约与参考文档
 ├── runtime/                          # Bun + TypeScript 运行时与 Kernel
 └── bin/                              # CLI wrappers（→ runtime/v4_runtime.ts）
@@ -183,7 +183,7 @@ docs/specs/                           # Living specs（原地更新）
 
 ## 常见问题
 
-**需要记住所有 Skill 吗？** 不需要，直接描述需求即可，Pi 会自动路由。先掌握 `imm-planner` 和 `imm-loop`，另外两个按需使用。
+**需要记住所有 Skill 吗？** 不需要，直接描述需求即可，Pi 会自动路由。先掌握 `imm-planner` 和 `imm-loop`，另外四个按需使用。
 
 **中途关闭 Pi 会怎样？** 状态已落盘（`.imm/` + TaskIntent），重新进入 `imm-loop` 即可恢复，以 Kernel projection 为准。
 
@@ -202,8 +202,8 @@ docs/specs/                           # Living specs（原地更新）
 | 任务 | 命令 |
 |------|------|
 | 创建 changeset | `bunx changeset` — 选择 bump 类型（patch/minor/major）并填写说明 |
-| 升级版本 | `bun run changeset:version` — 更新 `package.json` + `CHANGELOG.md` |
-| 本地发布 | `bun run changeset:publish` — 发布到 npm（需 `NPM_TOKEN` 或 `npm login`） |
+| 升级版本 | `bun run changeset:version` — 更新 `package.json` + `CHANGELOG.md`，然后同步并校验 Claude plugin manifest |
+| 本地发布 | `bun run changeset:publish` — 校验 manifest 版本后发布到 npm（需 `NPM_TOKEN` 或 `npm login`） |
 
 **自动化流程（推荐）：**
 1. 推送 changeset 到 `main` → workflow 自动创建 “Version Packages” PR。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "immune-brain",
-  "version": "3.2.0",
+  "version": "3.2.1",
   "description": "Immune-Brain agent skill system",
   "publishConfig": {
     "access": "public",
@@ -29,8 +29,8 @@
   },
   "scripts": {
     "changeset": "changeset",
-    "changeset:version": "changeset version && bun scripts/plugin_versioning.ts stamp",
-    "changeset:publish": "changeset publish",
+    "changeset:version": "changeset version && bun scripts/plugin_versioning.ts stamp && bun scripts/plugin_versioning.ts validate",
+    "changeset:publish": "bun scripts/plugin_versioning.ts validate && changeset publish",
     "release": "bun run changeset:publish"
   },
   "devDependencies": {

package/plugins/immune-brain/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "immune-brain",
-  "version": "3.2.0",
+  "version": "3.2.1",
   "description": "Immune-Brain Claude Code Host: native Enrollment, QA, Review, and Kernel settlement.",
   "author": {
     "name": "Immune-Brain Team"

package/plugins/immune-brain/.pi-extension/imm-canary-enroll.ts

@@ -458,9 +458,7 @@ async function executeForegroundEnrollment(
 				`Goal: ${taskIntent.intent.goal}`,
 				`Risk: ${taskIntent.intent.risk}`,
 				`Scope: ${taskIntent.intent.scope_hint.length > 0 ? taskIntent.intent.scope_hint.join(", ") : "(none)"}`,
-				`Acceptance: ${taskIntent.intent.acceptance.length} descriptor(s); press d to expand`,
-				`Intent digest: ${preparation.intent.content_hash}`,
-				`Preparation digest: ${preparation.digest}`,
+				`Acceptance: ${taskIntent.intent.acceptance.length} descriptor(s)`,
 			].join("\n");
 			const confirmationDetails = [
 				`Acceptance descriptors:`,

package/plugins/immune-brain/.pi-extension/imm-canary-work.ts

@@ -477,7 +477,7 @@ export default function (
 				presentTaskRail(ctx, {
 					task_id: taskId,
 					state: "Approval required",
-					result: "Kernel authority repair requires literal-user approval",
+					result: "Authority repair needs your approval",
 					next: "Decide whether to repair the stale claim",
 				});
 				const repairSelection = await requestAuthorityDialog(pi, ctx, {
@@ -854,7 +854,7 @@ export default function (
 		presentTaskRail(ctx, {
 			task_id: taskId,
 			state: "Approval required",
-			result: `${operation} requires literal-user approval`,
+			result: `${operation} requires your confirmation`,
 			next: `Decide ${operation}`,
 		});
 		const attention = {
@@ -870,7 +870,7 @@ export default function (
 				details: dialogDetails,
 				signal: ctx.signal,
 				actions: [
-					{ value: "authorize", label: "Authorize", description: `Apply ${operation} after freshness revalidation` },
+					{ value: "authorize", label: "Authorize", description: `Apply ${operation} after re-checking state` },
 					{ value: "cancel", label: "Cancel", description: "Leave managed authority unchanged" },
 				],
 			});

package/plugins/immune-brain/.pi-extension/pi-canary-interaction.ts

@@ -161,7 +161,14 @@ export async function requestAuthorityDialog<T extends string, R = T | undefined
 
 export function presentTaskRail(ctx: UiContext, view: TaskRailView): void {
 	try {
-		ctx.ui.setWidget(TASK_RAIL_KEY, renderTaskRail(view), { placement: "aboveEditor" });
+		ctx.ui.setWidget(TASK_RAIL_KEY, (_tui, theme) => {
+			return {
+				render(width: number): string[] {
+					return renderTaskRail(view, width, theme);
+				},
+				invalidate(): void {},
+			};
+		}, { placement: "aboveEditor" });
 		if (view.state === "Completed" || view.state === "Stopped") terminalRailUis.add(ctx.ui);
 		else terminalRailUis.delete(ctx.ui);
 	} catch {
@@ -180,7 +187,7 @@ export function presentTaskRailResult(
 	const operation = string(details.operation);
 	const rawState = string(details.state);
 	const result = string(details.result) ?? string(details.reason) ?? operation ?? rawState ?? "Task state updated";
-	const next = string(details.next_action) ?? "Continue through the projected authority";
+	const next = string(details.next_action) ?? "Follow the projected Obligation";
 	presentTaskRail(ctx, {
 		task_id: taskId,
 		state: railState({ lifecycle, obligation: string(taskState?.next_obligation), operation, state: rawState }),
@@ -286,11 +293,34 @@ function emitAttention(pi: EventPublisher, event: UserAttentionEventV1): void {
 	}
 }
 
-function renderTaskRail(view: TaskRailView): string[] {
+function formatTaskRailState(state: TaskRailState, theme?: Theme): string {
+	const symbolAndColor: Record<TaskRailState, { symbol: string; color: string }> = {
+		Planning: { symbol: "●", color: "muted" },
+		"Approval required": { symbol: "▲", color: "accent" },
+		Working: { symbol: "●", color: "accent" },
+		Verifying: { symbol: "●", color: "accent" },
+		Reviewing: { symbol: "●", color: "accent" },
+		Blocked: { symbol: "⚠", color: "warning" },
+		Completed: { symbol: "✓", color: "success" },
+		Stopped: { symbol: "■", color: "muted" },
+	};
+	const cfg = symbolAndColor[state] ?? { symbol: "●", color: "dim" };
+	if (!theme) return `${cfg.symbol} ${state}`;
+	return `${theme.fg(cfg.color, cfg.symbol)} ${theme.fg(cfg.color, state)}`;
+}
+
+function renderTaskRail(view: TaskRailView, width = 120, theme?: Theme): string[] {
+	const prefixWidth = 8; // "Result: " or "Next: "
+	const availableContentWidth = Math.max(20, width - prefixWidth);
+	const taskIdWidth = Math.max(16, Math.min(52, width - 26));
+	const stateFormatted = formatTaskRailState(view.state, theme);
+	const label = (text: string) => (theme ? theme.fg("muted", text) : text);
+	const body = (text: string) => (theme ? theme.fg("dim", text) : text);
+
 	return [
-		`Task ${boundedMiddle(view.task_id, 52)} · ${view.state}`,
-		`Result: ${bounded(view.result, 112)}`,
-		`Next: ${bounded(view.next, 112)}`,
+		`Task ${boundedMiddle(view.task_id, taskIdWidth)} · ${stateFormatted}`,
+		`${label("Result:")} ${body(bounded(view.result, availableContentWidth))}`,
+		`${label("Next:")} ${body(bounded(view.next, availableContentWidth))}`,
 	];
 }
 
@@ -338,12 +368,12 @@ function strings(value: unknown): string[] {
 }
 
 function bounded(value: string, max: number): string {
-	return value.length <= max ? value : `${value.slice(0, max - 3)}...`;
+	return value.length <= max ? value : `${value.slice(0, max - 1)}…`;
 }
 
 function boundedMiddle(value: string, max: number): string {
 	if (value.length <= max) return value;
-	const visible = max - 3;
+	const visible = max - 1;
 	const start = Math.ceil(visible / 2);
-	return `${value.slice(0, start)}...${value.slice(-(visible - start))}`;
+	return `${value.slice(0, start)}…${value.slice(-(visible - start))}`;
 }

package/plugins/immune-brain/dist/docs/reference/HANDOFF-template.md

@@ -117,6 +117,6 @@ kept for historical reference only.
 
 ## Notes
 
-- `imm-work` owns HANDOFF.md writes (boundary exception documented in skill)
-- `.imm/memory/` is the source of truth; HANDOFF.md is a convenience artifact
+- Historical: `imm-work` previously owned HANDOFF.md writes (v3 boundary exception); that writer was removed with the v3 State Ledger retirement and no current runtime code rewrites the generated block.
+- Historical: `.imm/memory/` was the v3 source of truth; it is retired. The current durable source of truth is the TaskRecord v4 under `.imm/state/tasks/`, with HANDOFF.md as a convenience artifact only.
 - Priority files list is advisory (max 5) and exists only to make Pi session continuation faster

package/plugins/immune-brain/dist/docs/reference/planning-artifact-retention.md

@@ -65,8 +65,8 @@ listed here while its program was in flight; when that program closed the
 justification expired, and the spec was archived rather than left protected by
 text that no longer described it.
 
-- `docs/specs/automatic-subagent-activation.spec.md` — pinned by live planning artifacts: `scripts/dist-sync-manifest.ts`, `tests/code-review-activation-contract.test.ts`, and packaged copy `plugins/immune-brain/dist/docs/specs/automatic-subagent-activation.spec.md`.
-- `docs/specs/opencode-native-plugin.spec.md` — dual-path pinned; `tests/python-reference-boundary.test.ts` resolves it at either `docs/specs/` or `docs/specs/archive/`.
+- `docs/specs/automatic-subagent-activation.spec.md` — EXPIRED: this exemption lapsed when its program closed and the spec was archived to `docs/specs/archive/automatic-subagent-activation.spec.md` (the packaged copy pin in `tests/code-review-activation-contract.test.ts` remains in force).
+- `docs/specs/opencode-native-plugin.spec.md` — EXPIRED: this exemption lapsed when its program closed and the spec was archived to `docs/specs/archive/opencode-native-plugin.spec.md` (the dual-path resolution in `tests/python-reference-boundary.test.ts` remains in force).
 - `docs/plans/archive/2026-06-29-001-feat-bun-typescript-runtime-migration-plan.md` — frozen plan: its `docs/specs/opencode-native-plugin.spec.md` reference is exempt from archive-path rewriting because it is part of `REFERENCE_SIGNATURE = "e89bf7809875d215c2ca0275c8f6e86e024dd451934fdc04d8e4a422bbd03a6c"` in `tests/plan-validation.test.ts`; rewriting it changes the cross-runtime signature.
 
 Non-terminal artifacts remain durable at their existing paths by default.