klypix-mcp 1.84.0 → 1.85.0

package/README.md

@@ -1,14 +1,28 @@
 # Every project gets a brain.
 
-**Active state management for multi-agent coding — a local-first active context engine with a shared brain.**
-*One project. One shared understanding.*
+Shared project memory for **Claude Code, Codex, Cursor** and other MCP coding tools. One
+`brain.klypix` file, committed with your code, carries the project's decisions, corrections and open
+questions across sessions and between tools. Corrections supersede stale decisions; sessions declare
+the files they expect to touch and get warned about same-machine overlap. Versioned in Git. Served
+over MCP by a process on your machine; Klypix uploads nothing (your agent's provider still receives
+what the agent reads). Integration depth differs by host — see
+[Supported hosts](#supported-hosts-and-their-integration-level).
 
-[![CI](https://img.shields.io/github/actions/workflow/status/dahshanlabs/klypix-mcp/ci.yml?branch=master&style=flat-square&label=CI)](https://github.com/dahshanlabs/klypix-mcp/actions/workflows/ci.yml)
-[![npm](https://img.shields.io/npm/v/klypix-mcp?style=flat-square)](https://www.npmjs.com/package/klypix-mcp)
-[![License](https://img.shields.io/github/license/dahshanlabs/klypix-mcp?style=flat-square)](LICENSE)
-[![Node](https://img.shields.io/node/v/klypix-mcp?style=flat-square)](package.json)
-[![MCP](https://img.shields.io/badge/MCP-server-475569?style=flat-square)](https://modelcontextprotocol.io)
-[![bench](https://img.shields.io/badge/npx_klypix--mcp_bench-10_writers_%C2%B7_0_lost-475569?style=flat-square)](BENCHMARKS.md)
+![Two real MCP sessions on one project: Session B declares a file Session A already declared, and the server's exact-file-overlap warning fires; Session A then records a correction that supersedes its stale card](docs/demo/demo.gif)
+
+<sub>Real output, not a mockup: both panes run a real MCP client against this server
+([docs/demo/](docs/demo/) — the GIF is rendered by CI from a scripted tape against this server, not
+hand-recorded, and re-rendered when the server's responses change).</sub>
+
+Run this inside your project:
+
+```bash
+npx klypix-mcp install
+```
+
+It creates `brain.klypix` if the project has none, wires the editors it finds on this machine,
+registers the `.klypix` merge driver if this is a git repo, and exits only after a real MCP
+handshake has counted the tools that answered.
 
 [![Claude Code](https://img.shields.io/badge/Claude_Code-5_lifecycle_hooks-475569?style=flat-square)](#supported-hosts-and-their-integration-level)
 [![Codex](https://img.shields.io/badge/Codex-native_MCP_%2B_presence-475569?style=flat-square)](#supported-hosts-and-their-integration-level)
@@ -18,24 +32,18 @@
 <sub>Host badges name the **integration level**, not a flat "compatible" — the levels and what is
 actually tested are in [Supported hosts](#supported-hosts-and-their-integration-level).</sub>
 
-**One actively managed project brain for multi-agent coding.** `klypix-mcp` keeps one versioned
-`brain.klypix` in your repo: the project's active state — current decisions, corrections, evidence
-anchors, open questions, active work, and handoffs. Corrections supersede stale decisions,
-`brain_challenge` tests proposed decisions against standing rules and reversed approaches, and
-sessions declare their scope and get warned about same-machine file overlap. Agents read it and
-write to it over MCP. You read it and correct it in the [KLYPIX app](https://klypix.com).
-
 > **One project. Many agents. One current understanding.**
 
-![Two real MCP sessions on one project: Session B declares a file Session A already declared, and the server's exact-file-overlap warning fires; Session A then records a correction that supersedes its stale card](docs/demo/demo.gif)
-
-<sub>Real output, not a mockup: both panes run a real MCP client against this server
-([docs/demo/](docs/demo/) — the GIF is re-rendered by CI from a scripted tape, so it can never
-drift from what the product actually does).</sub>
-
 Klypix does not launch, run, supervise, or replace your agents. It is not an agent runtime, a model
-router, a worktree manager, or a replacement for Git. It is the layer underneath them that holds
-what the project currently believes.
+router, a worktree manager, or a replacement for Git. It holds what the project currently believes.
+
+[![CI](https://img.shields.io/github/actions/workflow/status/dahshanlabs/klypix-mcp/ci.yml?branch=master&style=flat-square&label=CI)](https://github.com/dahshanlabs/klypix-mcp/actions/workflows/ci.yml)
+[![npm](https://img.shields.io/npm/v/klypix-mcp?style=flat-square)](https://www.npmjs.com/package/klypix-mcp)
+[![License](https://img.shields.io/github/license/dahshanlabs/klypix-mcp?style=flat-square)](LICENSE)
+[![Node](https://img.shields.io/node/v/klypix-mcp?style=flat-square)](package.json)
+[![MCP](https://img.shields.io/badge/MCP-server-475569?style=flat-square)](https://modelcontextprotocol.io)
+[![Glama score](https://glama.ai/mcp/servers/dahshanlabs/klypix-mcp/badges/score.svg)](https://glama.ai/mcp/servers/dahshanlabs/klypix-mcp)
+[![bench](https://img.shields.io/badge/npx_klypix--mcp_bench-10_writers_%C2%B7_0_lost-475569?style=flat-square)](BENCHMARKS.md)
 
 ## See the shared project brain in action
 
@@ -587,10 +595,10 @@ The MCP verbs below are what agents call. These are what **you** call:
 | `brain_ask` | Whole-brain question answering — correction-aware, `as_of` time travel |
 | `brain_challenge` | The brain argues back: contradictions with receipts, tried-and-reversed chains, standing rules, other-agent provenance flags |
 | `brain_note` | Capture with the full lifecycle — supersede / re-adopt / ✓ resolve / ~ update / 🛠 skill / `closes:` |
-| `brain_reconcile` | Proposes stale-vs-correction pairs and unrecorded migrations for a human to confirm |
+| `brain_reconcile` | Proposes stale-vs-correction pairs, unrecorded migrations, and the open cards a release ref's commits look to have closed — then closes the exact pairs you confirm |
 | `brain_insights` | Hubs, orphaned decisions, stale questions, area sizes |
 | `brain_lens` | Machine-readable freshness, provenance, activity, timeline, orrery and unresolved views |
-| `brain_garden` | Maintenance pass — proposes first, and cannot apply without an approval code the human generates |
+| `brain_garden` | Maintenance pass — proposes first; consolidation cannot apply without an approval code the human generates. The separate `repair:"duplicate-partials"` pass is dry-run first and needs no code (it removes only exact repeats and archives nothing) |
 | `brain_doctor` | Self-diagnosis: version, core/enhanced host adapters, active sessions, tool count, projection drift |
 | `brain_message` | Session-to-session coordination notes with a fixed send-time audience and per-recipient pending / offer / acknowledgement / consumption / failure receipts (24h TTL, never written into the brain) |
 | `brain_message_receipt` | Explicitly record model-side consumption using the exact message id and per-recipient offer token; acknowledgement alone never consumes a note |
@@ -613,8 +621,15 @@ Exactly 22, machine-verifiable with `npx klypix-mcp doctor`.
 > screenshot and no host-level test. Hosts without the extension get clean text, which is the path
 > that is actually verified.
 
-`brain_doctor`, `brain_lens`, `brain_insights` and `brain_reconcile` are read-only introspection.
-`brain_garden`, `brain_reconcile` and `brain_connect` always propose before they apply.
+`brain_doctor`, `brain_lens` and `brain_insights` are read-only introspection. `brain_reconcile`
+is read-only too, with one exception: on `mode:"claims"` and `mode:"release"` you may pass
+`confirm` / `dismiss` to close the pairs you verified. Confirm names exact card ids — nothing is
+matched by prose — and covering only part of a multi-item clause writes `✔ partial` and keeps the
+card open unless you pass `whole:true`. A call whose every entry is refused leaves the brain
+byte-identical. A `dismiss` is recorded as a `not_fulfilled` edge between two CARDS, so a hint
+whose only evidence is a raw commit has nothing to point at — name a `cardId`, or resolve the open
+card itself. `brain_garden`, `brain_reconcile` and `brain_connect` always propose before they
+apply.
 `npx klypix-mcp doctor` gives one verdict and exits non-zero on drift, so it doubles as a CI gate.
 
 ## One file you can hold

package/bin/klypix-install.mjs

@@ -254,7 +254,11 @@ const flatten = (code) => code
     // only thing standing between that and the field; it caught exactly this.
     // (remote-client deliberately absent: the Remote feature was removed in
     // 1.73.x, and this cherry-pick must not resurrect it — recorded rule.)
-    .replace(/\.\.\/src\/(bench|brain-doctor|agent-presence|agent-rules|capture-gap|enrichment|finding-routing|mcp-presence|mcp-supervisor|mcp-auto-update|presence-relay|semantic-memory|runtime-inspector|project-graph|git-capture-install)\.mjs/g, './$1.mjs')
+    // repo-state: the worker's release-cut reconcile advisory (1.85.0) imports
+    // commitsInRange / makeContainmentProbe from it. It was already STAGED in
+    // the flat bundle (mcp-presence needs it) but never flattened, because
+    // nothing in bin/ had imported it directly before.
+    .replace(/\.\.\/src\/(bench|brain-doctor|agent-presence|agent-rules|capture-gap|enrichment|finding-routing|mcp-presence|mcp-supervisor|mcp-auto-update|presence-relay|repo-state|semantic-memory|runtime-inspector|project-graph|git-capture-install)\.mjs/g, './$1.mjs')
     .replace(/klypix-worker\.mjs/g, 'klypix-mcp-worker.mjs')
     .replace(/const PKG_VERSION = \(\(\) => \{[\s\S]*?\}\)\(\);/, `const PKG_VERSION = '${VERSION}'; // baked at install (flat layout has no package.json)`);
 

package/bin/klypix-worker.mjs

@@ -34,6 +34,7 @@ import { compareProjectGraphResults, projectGraphContextMarkdown, queryProjectGr
 import { auditProject, compactAgentsBrief, linkProject, mcpServerEntry } from '../src/agent-rules.mjs';
 import { createMcpPresence, KLYPIX_MCP_INSTRUCTIONS } from '../src/mcp-presence.mjs';
 import { consumeMessageReceipt, findProjectBrain } from '../src/agent-presence.mjs';
+import { collectRepoState, commitsInRange, makeContainmentProbe } from '../src/repo-state.mjs';
 import {
   reconcileRegisteredProjects,
   registerProjectBrain,
@@ -219,6 +220,10 @@ const mcpPresence = createMcpPresence({
     formatDecayAge: typeof brainFormat.formatDecayAge === 'function' ? brainFormat.formatDecayAge : undefined,
   } : {},
 });
+// Release-cut reconcile: the ref each lane last scanned, so a checkpoint that
+// merely REFRESHES the same lease does not re-walk the range. In-memory only —
+// a worker restart rescans once, which costs one bounded git log.
+const lastReconcileRef = new Map();
 // Once brain_sync binds this connection to an exact project brain, all
 // project-brain-default tools must use that same file. Leaving canvas undefined
 // lets klypix-core's intentional cwd/env precedence substitute an ambient brain
@@ -627,18 +632,32 @@ server.registerTool('brain_connect', {
 }, async ({ canvas, apply, max, threshold, scope, pairs, relationship }) => toContent(await opBrainConnect({ vault: mcpPresence.vault, canvas: boundBrainCanvas(canvas), apply, max, threshold, scope, pairs, relationship, log })));
 
 server.registerTool('brain_reconcile', {
-  title: 'Reconcile the brain — contradictions between cards + unrecorded migrations',
-  description: 'Truth maintenance. (1) CONTRADICTIONS: finds same-subject live card pairs where one carries an explicit correction cue (uppercase "CORRECTION", "was WRONG", "OBSOLETE" — that side is the presumed truth, UNLESS the cue predates its counterpart: then the pair is marked "presumed superseded" and the newer card is presumed current — verify before retiring) or the two use opposite polarity words (deferred↔wired, broken↔fixed, dead↔live), i.e. stale facts whose correction never got linked — candidates only, YOU confirm each: retire the stale card via brain_note ✓. Dismiss a FALSE positive (either kind) by connecting the two ids with brain_connect pairs + relationship:"not_contradiction" — persisted, so it never resurfaces (and its cue stops overlaying recall/ask for that pair). (2) MIGRATIONS: lists committed migration files (Supabase / Rails / Prisma / Knex / generic) that NO brain card references, so an applied-but-unnarrated rollout can be recorded. (3) LEGACY: pre-v1.15 raw-bash ship cards to tidy. Reads ONLY the filesystem — never the database, never the network — and changes nothing. Run it periodically, or when recall surfaces something you believe is stale.',
+  title: 'Reconcile the brain — contradictions, unrecorded migrations, and what a release already closed',
+  description: 'Truth maintenance. (1) CONTRADICTIONS: finds same-subject live card pairs where one carries an explicit correction cue (uppercase "CORRECTION", "was WRONG", "OBSOLETE" — that side is the presumed truth, UNLESS the cue predates its counterpart: then the pair is marked "presumed superseded" and the newer card is presumed current — verify before retiring) or the two use opposite polarity words (deferred↔wired, broken↔fixed, dead↔live), i.e. stale facts whose correction never got linked — candidates only, YOU confirm each: retire the stale card via brain_note ✓. Dismiss a FALSE positive (either kind) by connecting the two ids with brain_connect pairs + relationship:"not_contradiction" — persisted, so it never resurfaces (and its cue stops overlaying recall/ask for that pair). (2) MIGRATIONS: lists committed migration files (Supabase / Rails / Prisma / Knex / generic) that NO brain card references, so an applied-but-unnarrated rollout can be recorded. (3) LEGACY: pre-v1.15 raw-bash ship cards to tidy. (4) RELEASE: which open cards look fulfilled by the commits a release ref already carries (subject+body coverage, the card\'s own #commit- receipt, or a hint edge whose milestone is in the ref). READ-ONLY by default and on every other mode. THE ONE EXCEPTION: on mode "claims" and mode "release" you may pass confirm/dismiss to actually close what you verified — confirm names exact card ids, so nothing is matched by prose; covering only part of a multi-item clause writes "✔ partial" and KEEPS the card open unless you pass whole:true; a call whose every entry is refused leaves the brain byte-identical. Never reads the database or the network. Run it periodically, when recall surfaces something you believe is stale, or right before cutting a release.',
   inputSchema: {
     canvas: z.string().optional().describe('Brain canvas filename/path. Defaults to the project brain ("brain").'),
-    root: z.string().optional().describe("Project root holding the migrations dir (default: the brain file's folder)."),
-    mode: z.enum(['all', 'contradictions', 'migrations', 'legacy', 'claims', 'plans']).optional().describe('Which pass to run (default "all"): contradictions · migrations · legacy (pre-v1.15 raw-bash ship cards to tidy) · claims (open "remaining:/next:" clauses a later milestone likely fulfilled — receipts + ✓ markers, never auto-archived) · plans (plan / proposal / "design decided" cards a LATER 🏁 appears to have built — embedding-first because the ship is usually renamed; receipts + ✓ markers, never auto-archived).'),
+    root: z.string().optional().describe("Project root holding the migrations dir / git repo (default: the brain file's folder)."),
+    mode: z.enum(['all', 'contradictions', 'migrations', 'legacy', 'claims', 'plans', 'release']).optional().describe('Which pass to run (default "all"): contradictions · migrations · legacy (pre-v1.15 raw-bash ship cards to tidy) · claims (open "remaining:/next:" clauses a later milestone likely fulfilled — receipts + ✓ markers; confirm with {id, milestoneId}) · plans (plan / proposal / "design decided" cards a LATER 🏁 appears to have built — embedding-first because the ship is usually renamed) · release (open cards the commits in `ref` look to have fulfilled; confirm with {id, sha}).'),
+    ref: z.string().max(200).optional().describe('mode "release": the git ref being cut. Defaults to this session\'s active release lease, else HEAD.'),
+    sinceRef: z.string().max(200).optional().describe('mode "release": the baseline the range starts from. Defaults to the highest release-shaped tag in the repo.'),
+    confirm: z.array(z.object({
+      id: z.string().max(64).describe('The OPEN card id to close.'),
+      milestoneId: z.string().max(64).optional().describe('mode "claims": the live milestone card that fulfilled it. Requires an existing "likely closed by" link or a current coverage gap on this exact pair.'),
+      sha: z.string().max(40).optional().describe('mode "release": a commit the listing named as covering this card (cov ≥ 0.6, confirmable). Omit to use the card\'s own #commit- receipt.'),
+      whole: z.boolean().optional().describe('Assert the WHOLE card is done. Without it, covering one item of a multi-item clause writes "✔ partial" and the card stays open.'),
+    })).max(64).optional().describe('Pairs YOU verified. Honoured on mode "claims" and mode "release" only. Each confirmed card is stamped ✅, archived, and arrowed "closed by" to its evidence.'),
+    dismiss: z.array(z.object({
+      openId: z.string().max(64).describe('The open card the hint was wrong about.'),
+      cardId: z.string().max(64).optional().describe('The milestone/evidence card to dismiss it against (required unless the listing already named one).'),
+      sha: z.string().max(40).optional().describe('Informational only — the commit that produced the wrong hint. A dismissal is recorded against a CARD, so a hint whose only evidence is a raw commit (no milestone card) cannot be dismissed: pass a cardId, or retire the open card itself.'),
+    })).max(64).optional().describe('Wrong hints to retire permanently as "not_fulfilled" edges between two CARDS — never re-suggested by claims, release, or the self-heal. A card-to-card pair is what makes the dismissal durable; a coverage hint built straight from a commit has no card to point at and will be re-listed at the next release cut until the open card is resolved or the pair is named with a cardId.'),
+    note: z.string().max(400).optional().describe('One line of why, echoed in the receipt.'),
   },
-}, async ({ canvas, root, mode }) => toContent(await opBrainReconcile({ vault: mcpPresence.vault, canvas: boundBrainCanvas(canvas), root, mode, log })));
+}, async ({ canvas, root, mode, ref, sinceRef, confirm, dismiss, note }) => toContent(await opBrainReconcile({ vault: mcpPresence.vault, canvas: boundBrainCanvas(canvas), root, mode, ref, sinceRef, confirm, dismiss, note, log })));
 
 server.registerTool('brain_garden', {
   title: 'Garden the brain — consolidate over-grown areas (sleep-time compute)',
-  description: 'Tidy an over-grown brain WITHOUT losing anything — SMART and non-invasive: it only consolidates DORMANT cards (old + peripheral), never load-bearing ones. Two phases: call it with no apply to get the areas that have accumulated forgotten cards (deterministic: >3 cards that are older than 14 days, beyond the area\'s newest 8, AND have ≤1 connection — so hubs and still-referenced decisions are left untouched; Focus/Instructions/Archive/Open-questions areas protected) plus their card text; YOU write one tight synthesis per area; then call again with apply:true, syntheses:[{title, synthesis}] AND the human\'s 8-char `approve` code (apply is REFUSED without it — you are never shown the code; the human generates it with `npx klypix-mcp garden-code` after reviewing your plan). Each area gets a 🌿 synthesis card, the originals are stamped "⤵ consolidated", moved to Archive, and arrowed to the synthesis — nothing is deleted, and one undo un-gardens. Run it when brain_insights or the brief shows an area has grown noisy.',
+  description: 'Tidy an over-grown brain WITHOUT losing anything — SMART and non-invasive: it only consolidates DORMANT cards (old + peripheral), never load-bearing ones. Two phases: call it with no apply to get the areas that have accumulated forgotten cards (deterministic: >3 cards that are older than 14 days, beyond the area\'s newest 8, AND have ≤1 connection — so hubs and still-referenced decisions are left untouched; Focus/Instructions/Archive/Open-questions areas protected) plus their card text; YOU write one tight synthesis per area; then call again with apply:true, syntheses:[{title, synthesis}] AND the human\'s 8-char `approve` code (apply is REFUSED without it — you are never shown the code; the human generates it with `npx klypix-mcp garden-code` after reviewing your plan). Each area gets a 🌿 synthesis card, the originals are stamped "⤵ consolidated", moved to Archive, and arrowed to the synthesis — nothing is deleted, and one undo un-gardens. Run it when brain_insights or the brief shows an area has grown noisy. SEPARATE PASS: `repair:"duplicate-partials"` lists (and with apply:true collapses) cards that carry the SAME `✔ partial` note more than once — the residue of a partial ✓ on a card that stays live by design. It keeps the earliest note of each distinct body and removes only exact repeats, so nothing is archived, nothing is deleted, no synthesis and no approval code are needed, and a second run finds nothing.',
   inputSchema: {
     canvas: z.string().optional().describe('Brain canvas filename/path. Defaults to the project brain ("brain").'),
     apply: z.boolean().optional().describe('false (default) = list over-grown areas + cards to synthesize; true = consolidate using the supplied syntheses.'),
@@ -647,8 +666,9 @@ server.registerTool('brain_garden', {
       synthesis: z.string().describe('3-6 sentence prose synthesis preserving every still-relevant fact/decision/number.'),
     })).optional().describe('Required when apply:true — one entry per area you want consolidated.'),
     approve: z.string().optional().describe('Required when apply:true — the 8-char human-approval code. You are never shown it: the human runs `npx klypix-mcp garden-code` and pastes the code into chat after reviewing your plan. Never guess or fabricate it.'),
+    repair: z.enum(['duplicate-partials']).optional().describe('Run a targeted repair instead of the consolidation pass. "duplicate-partials" collapses repeated ✔ partial notes on a card to the earliest one — lossless, idempotent, no syntheses and no approval code. Dry-run by default; apply:true writes.'),
   },
-}, async ({ canvas, apply, syntheses, approve }) => toContent(await opBrainGarden({ vault: mcpPresence.vault, canvas: boundBrainCanvas(canvas), apply, syntheses, approve })));
+}, async ({ canvas, apply, syntheses, approve, repair }) => toContent(await opBrainGarden({ vault: mcpPresence.vault, canvas: boundBrainCanvas(canvas), apply, syntheses, approve, repair })));
 
 server.registerTool('create_canvas', {
   title: 'Create a KLYPIX canvas',
@@ -908,6 +928,71 @@ server.registerTool('brain_sync', {
       }
     } catch { /* observation is best-effort — never fail a sync */ }
   }
+  // ── Release-cut reconcile advisory (1.85.0) ─────────────────────────────────
+  // A release lease was just GRANTED, so this session is about to cut a build.
+  // The one question nobody ever asked at that moment: does anything still open
+  // in the brain look like it ALREADY SHIPPED in this ref? Advisory only — it
+  // never blocks, never writes, never joins the refusal object, and any git or
+  // brain failure degrades to `{ skipped }` rather than failing a sync.
+  //
+  // Recomputed only on a NEW lease or a CHANGED ref (the worker is long-lived;
+  // a restart rescans once, which is acceptable) so a checkpoint refresh every
+  // few minutes does not re-walk 500 commits.
+  let releaseReconcileText = '';
+  {
+    const lease = report.structured?.releaseLease;
+    const granted = lease && (lease.status === 'taken' || lease.status === 'refreshed');
+    const ref = granted ? String(lease.holder?.ref || '').trim() : '';
+    const laneKey = `${String(report.structured?.project || mcpPresence.vault || '').toLowerCase()}|${String(mcpPresence.id || '')}`;
+    if (granted && ref && lastReconcileRef.get(laneKey) !== ref) {
+      lastReconcileRef.set(laneKey, ref);
+      const projectDir = report.structured?.project || mcpPresence.vault;
+      const brainPath = report.structured?.brain;
+      try {
+        const { execFileSync } = await import('child_process');
+        const repoState = (() => { try { return collectRepoState(projectDir); } catch { return null; } })();
+        const sinceRef = repoState?.latestReleaseTag?.tag
+          || (() => {
+            try {
+              return brainFormat.readShipSignals(projectDir, (args) => execFileSync('git', String(args).split(/\s+/).filter(Boolean), {
+                cwd: projectDir, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'], timeout: 4000,
+              })).tag || '';
+            } catch { return ''; }
+          })();
+        // NO `${ref}~50` guess. On a young repo — no release-shaped tag and
+        // fewer than 50 commits, i.e. the FIRST release — `git log <ref>~50..`
+        // exits non-zero, commitsInRange reports 'bad-range', and the lease
+        // holder is told "git history for <ref> could not be read", which reads
+        // as a broken checkout when the truth is "this repo is young".
+        // commitsInRange already walks the ref's own tip window on an empty
+        // baseline, capped at the same 500 commits / 4 s either way.
+        const range = commitsInRange(projectDir, sinceRef, ref);
+        if (range.status !== 'ok' || !brainPath) {
+          lease.reconcile = { skipped: true, reason: range.status !== 'ok' ? (range.reason || 'git-unreadable') : 'no-brain' };
+          if (range.status !== 'ok') releaseReconcileText = brainFormat.releaseReconcileNotice({ ref, skipped: true });
+        } else {
+          const { struct } = await brainFormat.parseKlypix(fs.readFileSync(brainPath));
+          const { candidates, truncated } = brainFormat.releaseFulfilledOpens(struct, range.commits, {
+            ref, containedFn: makeContainmentProbe(projectDir, ref),
+          });
+          // Zero candidates → NO key at all (RL10 parity): an absent advisory
+          // and an empty one must not look the same to a reader.
+          if (candidates.length) {
+            lease.reconcile = {
+              kind: 'open-cards-likely-fulfilled-by-release', severity: 'advisory',
+              ref, sinceRef, commitsScanned: range.commits.length, scanCapped: range.capped,
+              candidates, truncated,
+              confirmWith: brainFormat.releaseReconcileConfirmTemplate(ref),
+            };
+          }
+          releaseReconcileText = brainFormat.releaseReconcileNotice({ ref, sinceRef, candidates });
+        }
+      } catch {
+        try { lease.reconcile = { skipped: true, reason: 'error' }; } catch { /* lease is frozen — advisory only */ }
+        releaseReconcileText = brainFormat.releaseReconcileNotice({ ref, skipped: true });
+      }
+    }
+  }
   // ── Uncaptured-work check, host-neutral half ────────────────────────────────
   // The Stop hook can REFUSE a stop; every other host has no lifecycle hook at
   // all, so brain_sync is the only place the same question can be asked. Stamp
@@ -1031,7 +1116,7 @@ server.registerTool('brain_sync', {
   return {
     content: [{
       type: 'text',
-      text: [report.text, harnessText, shipNotice, captureGapText, contextText, timingText].filter(Boolean).join('\n\n'),
+      text: [report.text, harnessText, shipNotice, releaseReconcileText, captureGapText, contextText, timingText].filter(Boolean).join('\n\n'),
     }],
     structuredContent,
     ...(report.isError ? { isError: true } : {}),
@@ -1040,7 +1125,7 @@ server.registerTool('brain_sync', {
 
 server.registerTool('brain_doctor', {
   title: 'Brain doctor — is this brain current, wired, and in sync?',
-  description: 'Read-only self-check of the installed klypix brain, as ONE verdict: VERSION (deployed brain-core + optional npm currency), CLAUDE (existing 5-hook capture readiness), CODEX (automatic MCP presence plus optional enhanced-hook status), TOOLS (discoverable MCP verbs), SESSIONS (all active presence-adapter sessions across hosts, never recent-chat history), and HARNESS (projection drift). Use to answer "is my brain current, correctly installed, in sync, and who is actually live?" without file-spelunking. Never writes. SCOPE: only CLAUDE and CODEX get behavioural verdicts. HARNESS classifies the projected config/rules FILES on disk — a project can read fully ok while no other host has ever actually loaded them, so do not report a clean HARNESS as "Cursor/Cline/Windsurf/Copilot is working". The MCP-callable twin of `npx klypix-mcp doctor`.',
+  description: 'Read-only self-check of the installed klypix brain, as ONE verdict: VERSION (deployed brain-core + optional npm currency), CLAUDE (existing 5-hook capture readiness), CODEX (automatic MCP presence plus optional enhanced-hook status), TOOLS (discoverable MCP verbs), SESSIONS (all active presence-adapter sessions across hosts, never recent-chat history), and HARNESS (projection drift). Use to answer "is my brain current, correctly installed, in sync, and who is actually live?" without file-spelunking. Never writes: the only side effects are read-only subprocess queries (git rev-parse / tag --list / log / merge-base with fixed argument arrays, and `npm view` only when check_npm is true) — it creates, edits, and deletes nothing. SCOPE: only CLAUDE and CODEX get behavioural verdicts. HARNESS classifies the projected config/rules FILES on disk — a project can read fully ok while no other host has ever actually loaded them, so do not report a clean HARNESS as "Cursor/Cline/Windsurf/Copilot is working". The MCP-callable twin of `npx klypix-mcp doctor`.',
   inputSchema: {
     project: z.string().optional().describe('Project dir to audit harness + peers for. Defaults to the server\'s working directory.'),
     check_npm: z.boolean().optional().describe('Also fetch npm latest to flag a stale brain (default false — this one does a network `npm view`).'),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "klypix-mcp",
-  "version": "1.84.0",
+  "version": "1.85.0",
   "mcpName": "io.github.dahshanlabs/klypix-mcp",
   "description": "Active state management for multi-agent coding: a shared, versioned project brain over MCP.",
   "type": "module",
@@ -84,7 +84,7 @@
     "bench": "node bin/klypix-mcp.mjs bench",
     "test:bench": "node test/bench.mjs",
     "pretest": "node test/publish-workflow.mjs",
-    "test": "node test/publish-verdict.mjs && node test/project-graph.mjs && node test/project-map-cli.mjs && node test/mcp-auto-update.mjs && node test/mcp-supervisor.mjs && node test/runtime-inspector.mjs && node test/codex-hooks.mjs && node test/request-identity.mjs && node test/session-identity-core.mjs && node test/agent-presence.mjs && node test/message-delivery-v3.mjs && node test/claude-message-delivery-v3.mjs && node test/result-reconcile.mjs && node test/evidence-publication-gate.mjs && node test/release-evidence-cli.mjs && node test/intent-guard.mjs && node test/git-capture-install.mjs && node test/brain-history.mjs && node test/brain-graveyard.mjs && node test/archived-visibility.mjs && node test/finding-routing.mjs && node test/finding-routing-hook.mjs && node test/presence-relay.mjs && node test/install-version.mjs && node test/install-rename-backoff.mjs && node test/project-binding-rebind.mjs && node test/context-gateway.mjs && node test/repo-state.mjs && node test/released-tag-guard.mjs && node test/conformance.mjs && node test/brain-doctor.mjs && node test/version-currency.mjs && node test/ship-capture.mjs && node test/capture-gap.mjs && node test/lane-message.mjs && node test/brain-quality.mjs && node test/brain-connect-orphans.mjs && node test/orphan-gardener.mjs && node test/brief-and-recall.mjs && node test/guard-cards.mjs && node test/layout-cluster.mjs && node test/brain-ask.mjs && node test/retrieval-fusion.mjs && node test/eval-retrieval.mjs && node test/field-report-2026-07-04.mjs && node test/autoprop.mjs && node test/overlay-recency-2026-07-12.mjs && node test/brain-challenge.mjs && node test/brain-lens.mjs && node test/brain-kind.mjs && node test/rule-drafts.mjs && node test/claim-engine.mjs && node test/plan-fulfillment.mjs && node test/skill-staleness.mjs && node test/canvas-view.mjs && node test/status-completeness.mjs && node test/semantic-security.mjs && node test/semantic-gate.mjs && node test/memory-runtime.mjs && node test/semantic-cache.mjs && node test/enrichment.mjs && node test/decay-status.mjs && node test/decay-hook.mjs && node test/evidence-anchors.mjs && node test/brain-evidence.mjs && node test/presence-visibility.mjs && node test/undeclared-active.mjs && node test/presence-liveness.mjs && node test/observed-scope.mjs && node test/release-lease.mjs && node test/release-ancestry.mjs && node test/release-claim-join.mjs && node test/release-claims.mjs && node test/release-handshake.mjs && node test/completion-guard.mjs && node test/merge-brains.mjs && node test/concurrent-writes.mjs && node test/lock-interop.mjs && node test/capture-write-failure.mjs && node test/a2a-smoke.mjs && node test/one-command-setup.mjs && node test/cli-args.mjs && node test/format-guard.mjs && node test/canvas-groups.mjs && node test/git-tools.mjs && node test/uninstall.mjs && node test/current-guidance.mjs",
+    "test": "node test/publish-verdict.mjs && node test/project-graph.mjs && node test/project-map-cli.mjs && node test/mcp-auto-update.mjs && node test/mcp-supervisor.mjs && node test/runtime-inspector.mjs && node test/codex-hooks.mjs && node test/request-identity.mjs && node test/session-identity-core.mjs && node test/agent-presence.mjs && node test/message-delivery-v3.mjs && node test/claude-message-delivery-v3.mjs && node test/result-reconcile.mjs && node test/evidence-publication-gate.mjs && node test/release-evidence-cli.mjs && node test/intent-guard.mjs && node test/git-capture-install.mjs && node test/brain-history.mjs && node test/brain-graveyard.mjs && node test/archived-visibility.mjs && node test/finding-routing.mjs && node test/finding-routing-hook.mjs && node test/presence-relay.mjs && node test/install-version.mjs && node test/install-rename-backoff.mjs && node test/project-binding-rebind.mjs && node test/context-gateway.mjs && node test/repo-state.mjs && node test/released-tag-guard.mjs && node test/conformance.mjs && node test/brain-doctor.mjs && node test/version-currency.mjs && node test/ship-capture.mjs && node test/capture-gap.mjs && node test/lane-message.mjs && node test/brain-quality.mjs && node test/brain-connect-orphans.mjs && node test/orphan-gardener.mjs && node test/brief-and-recall.mjs && node test/guard-cards.mjs && node test/layout-cluster.mjs && node test/brain-ask.mjs && node test/retrieval-fusion.mjs && node test/eval-retrieval.mjs && node test/field-report-2026-07-04.mjs && node test/autoprop.mjs && node test/overlay-recency-2026-07-12.mjs && node test/brain-challenge.mjs && node test/brain-lens.mjs && node test/brain-kind.mjs && node test/rule-drafts.mjs && node test/claim-engine.mjs && node test/partial-notes.mjs && node test/lifecycle-prefix.mjs && node test/close-link-safety.mjs && node test/resolve-ledger.mjs && node test/plan-fulfillment.mjs && node test/skill-staleness.mjs && node test/canvas-view.mjs && node test/status-completeness.mjs && node test/semantic-security.mjs && node test/semantic-gate.mjs && node test/memory-runtime.mjs && node test/semantic-cache.mjs && node test/enrichment.mjs && node test/decay-status.mjs && node test/decay-hook.mjs && node test/evidence-anchors.mjs && node test/brain-evidence.mjs && node test/presence-visibility.mjs && node test/undeclared-active.mjs && node test/presence-liveness.mjs && node test/observed-scope.mjs && node test/release-lease.mjs && node test/release-reconcile.mjs && node test/release-ancestry.mjs && node test/release-claim-join.mjs && node test/release-claims.mjs && node test/release-handshake.mjs && node test/completion-guard.mjs && node test/merge-brains.mjs && node test/concurrent-writes.mjs && node test/lock-interop.mjs && node test/capture-write-failure.mjs && node test/a2a-smoke.mjs && node test/one-command-setup.mjs && node test/cli-args.mjs && node test/format-guard.mjs && node test/canvas-groups.mjs && node test/git-tools.mjs && node test/uninstall.mjs && node test/current-guidance.mjs && node test/status-shape.mjs && node test/status-hook.mjs",
     "test:memory": "node test/memory-runtime.mjs",
     "test:memory:soak": "node --expose-gc test/memory-soak.mjs",
     "runtime": "node bin/klypix-runtime.mjs",

package/src/agent-presence.mjs

@@ -766,6 +766,11 @@ export function upsertSession({
   identitySource = null,
   aliases,
   home,
+  // Status-digest dedup hash (1.85.0): sha1[0:12] of the last computed status
+  // digest this session was shown, so a repeat status prompt gets a one-line
+  // pointer instead of the same ~5k chars. ADDITIVE — written only when a
+  // writer passes it; kept verbatim by every other touch (…previous spread).
+  statusDigestHash,
   now = Date.now(),
 }) {
   if (!brainPath || !id) return withWriteVerdict([], false, 'no-brain-or-id');
@@ -926,6 +931,7 @@ export function upsertSession({
           ...(previous.scopeStartedAt ? { scopeStartedAt: previous.scopeStartedAt } : {}),
           ...(taskCompleted ? { completedAt: now } : (previous.completedAt ? { completedAt: previous.completedAt } : {})),
         }),
+      ...(statusDigestHash !== undefined ? { statusDigestHash: String(statusDigestHash || '').slice(0, 16) } : {}),
       lastSeen: now,
     };
     const kept = sessions.filter((session) => session.id !== id);

package/src/codex-brain-hook.mjs

@@ -2,6 +2,7 @@
 // Codex lifecycle adapter for the agent-neutral KLYPIX presence lane.
 // It never reads Codex's unstable transcript format and never modifies the brain.
 import { execFileSync } from 'child_process';
+import crypto from 'crypto';
 import fs from 'fs';
 import path from 'path';
 import {
@@ -310,6 +311,61 @@ function queueConflictAlerts({ brainPath, sessionId, intent, conflicts, turnId,
   return queued;
 }
 
+// ── Status digest, Codex lane (1.85.0) ───────────────────────────────────────
+// Parity with the Claude hook's T8 injection: a STRONG status-shaped prompt
+// ("do i need to update the desk? ios? or web?", "ما تبقى") gets the engine's
+// COMPUTED current-state digest INSTEAD of card retrieval — same detector
+// (splitQueryTokens), same area scoping (areaHintsFromPrompt, resolved only
+// once the struct is loaded), same renderer and header, and the same
+// per-session sha1 dedup (a repeat gets a one-line pointer). Every engine
+// export is typeof-guarded so a stale bundle degrades to the task-context
+// path below, never a throw. Returns null when the prompt is not a status
+// question — the caller then runs today's retrieval unchanged.
+async function statusDigestContext({ brainPath, sessionId, prompt, sessions, cwd }) {
+  const lib = brainFormat;
+  if (!prompt || typeof lib.splitQueryTokens !== 'function' || typeof lib.areaStatusDigest !== 'function'
+    || typeof lib.parseKlypix !== 'function') return null;
+  let sp = null;
+  try { sp = lib.splitQueryTokens(String(prompt)); } catch { return null; }
+  if (!sp || !sp.strong) return null;
+  let struct = null;
+  try { ({ struct } = await lib.parseKlypix(fs.readFileSync(brainPath))); } catch { return null; }
+  if (!struct) return null;
+  let areas = null;
+  if (Array.isArray(sp.areaFamilies) && sp.areaFamilies.length && typeof lib.areaHintsFromPrompt === 'function') {
+    try { areas = lib.areaHintsFromPrompt(struct, String(prompt)); } catch { areas = null; }
+  }
+  // ONE count (1.85.0): the same per-brain summary cache the Claude lane
+  // reads (keyed on brain mtime + size, written by whichever lane misses
+  // first), so both hosts print identical header numbers for one brain and a
+  // status prompt pays ~0 for the detector. typeof-guarded: an older engine
+  // computes nothing here and the renderers derive the summary themselves.
+  let summary = null;
+  try {
+    if (typeof lib.cachedOpenStatusSummary === 'function') summary = lib.cachedOpenStatusSummary(struct, { brainPath }).summary;
+    else if (typeof lib.openStatusSummary === 'function') summary = lib.openStatusSummary(struct);
+  } catch { summary = null; }
+  let digest = [];
+  try { digest = lib.areaStatusDigest(struct, { maxAreas: 12, areas, summary }); } catch { return null; }
+  if (!Array.isArray(digest) || !digest.length) return null;
+  let body = null;
+  if (typeof lib.statusContextToMarkdown === 'function') {
+    try {
+      const md = lib.statusContextToMarkdown(struct, { budgetChars: 5200, areas, summary });
+      // Drop its own H1; the hook's stronger header replaces it (Claude-lane parity).
+      if (md && md.trim()) body = md.split('\n').slice(1).join('\n').trimEnd();
+    } catch { body = null; }
+  }
+  const content = body || digest.join('\n');
+  const h = crypto.createHash('sha1').update(content).digest('hex').slice(0, 12);
+  const me = (Array.isArray(sessions) ? sessions : []).find((session) => session.id === sessionId);
+  if (me && me.statusDigestHash === h) {
+    return '## 📊 Current state — unchanged since the digest shown earlier this session (`brain_ask` gives the full computed status view).';
+  }
+  try { upsertSession({ brainPath, id: sessionId, client: 'codex', cwd, statusDigestHash: h }); } catch { /* best-effort */ }
+  return ['## 📊 Computed current state (status-shaped question detected — answer from THIS + `brain_ask`, never from memory of past sessions)', content].join('\n');
+}
+
 async function compactTaskContext(projectDir, prompt, files) {
   if (!prompt) return '';
   try {
@@ -430,7 +486,10 @@ async function main() {
   }
   if (event === 'UserPromptSubmit') {
     const me = sessions.find((session) => session.id === sessionId);
-    const context = await compactTaskContext(projectDir, prompt,
+    // A STRONG status question is answered from computed state and REPLACES
+    // card retrieval (never additive) — the Claude hook's `freshHits = []`.
+    const statusMd = await statusDigestContext({ brainPath, sessionId, prompt, sessions, cwd });
+    const context = statusMd ?? await compactTaskContext(projectDir, prompt,
       [...new Set([...(me?.files || []), ...(me?.observedFiles || [])])]);
     emitSystemMessage([
       context,