karajan-code 4.28.0 → 4.28.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "karajan-code",
-  "version": "4.28.0",
+  "version": "4.28.1",
   "description": "Local multi-agent coding orchestrator with TDD, SonarQube, and code review pipeline",
   "type": "module",
   "license": "AGPL-3.0",

package/src/harden/sentinel-hooks.js

@@ -616,13 +616,14 @@ process.stdin.on("end", () => {
     }
     if (tool === "Bash") {
       const cmd = String(input.command || "");
-      // KJC-BUG-0166: una sesion intento EN BUCLE retirar el ARBOL PRINCIPAL
-      // con git worktree remove y KJ_ALLOW_CROSS_LANE puesto. Retirar un
-      // worktree es destruccion de la estructura del repo — jamas trabajo de
-      // una sesion, y el escape de cruce NO puede ampararlo. Deny sin escape
-      // (el cauce sancionado es kj worktree done, que corre dentro de kj).
-      if (/(^|[^a-z])git[^a-z]+worktree[^a-z]+(remove|prune)/.test(cmd)) {
-        console.error("karajan sentinel: git worktree remove/prune no se ejecuta desde una sesion — destruccion de estructura del repo, sin escape; usa kj worktree done." + doc("cross-lane"));
+      // KJC-BUG-0166/0167: gestionar worktrees crudos (add/remove/prune) es
+      // estructura del repo, jamas trabajo de una sesion. 0166: una sesion
+      // intento EN BUCLE retirar el ARBOL PRINCIPAL con remove+CROSS_LANE.
+      // 0167: un coder descarrilado ANADIO un worktree .verify-main rebelde y
+      // de ahi se invento un bootstrap. Deny sin escape en los tres verbos;
+      // el cauce sancionado es kj worktree start|done (corre dentro de kj).
+      if (/(^|[^a-z])git[^a-z]+worktree[^a-z]+(add|remove|prune)/.test(cmd)) {
+        console.error("karajan sentinel: git worktree add/remove/prune no se ejecuta desde una sesion — estructura del repo, sin escape; usa kj worktree start|done." + doc("cross-lane"));
         process.exit(2);
       }
       // Deny-unless-known-read-only: un allowlist de verbos mutadores era

package/src/prompts/coder.js

@@ -246,6 +246,10 @@ export async function buildCoderPromptLayout({ task, reviewerFeedback = null, so
     section(langInstruction, STABLE),
     section("Implement directly in the repository.", STABLE),
     section("Keep changes minimal and production-ready.", STABLE),
+    // KJC-BUG-0167: a headless coder finished the real subtask, then derailed
+    // into inventing a "set up project structure" bootstrap (generic js+go
+    // .gitignore, a rogue verify worktree). Anchor the scope hard.
+    section("SCOPE: this is an EXISTING project. Implement ONLY the current HU against the code already here. NEVER scaffold, bootstrap or initialize project structure, never add a generic multi-stack .gitignore, and never create git worktrees (`git worktree add`) — your workspace is already prepared. If a step ever reads like 'set up the project', treat it as a misread of an existing repo: re-read the HU and make the real change.", STABLE),
     section("Follow SOLID principles. Write small, focused functions (< 30 lines).", STABLE),
     section("Make atomic commits: 1 logical change = 1 commit. Keep PRs small and reviewable.", STABLE),
     section("Security: validate all input, parameterize queries, never expose secrets. Use the auth pattern that matches the stack (e.g. httpOnly cookies for web sessions).", STABLE),