replen 1.0.23 → 1.0.25

package/dist/discover-projects.js

@@ -171,7 +171,7 @@ export function discoverProjects(roots) {
             seenGithub.add(githubFullName);
             // Slug + display name both anchor on the GitHub repo NAME, not the
             // local folder name. Deriving from the folder meant a folder rename (or
-            // an org rename like Covelent→nsokin) minted a fresh slug and the server
+            // an org rename) minted a fresh slug and the server
             // inserted a duplicate row. `~/code/drone` with remote
             // `nsokin/palisade-website` now registers as slug `palisade-website`.
             // The repo name is also the fallback display name, so a generic

package/extras/skills/replen/SKILL.md

@@ -353,7 +353,13 @@ verdict it calibrates the relevance floor for this project, and your
 adopt/skip pattern continuously tunes the ranking via the taste vector).
 A skip coded `modality-collision` teaches Replen that this repo fits a
 *different* modality — so it stays available for the right project but stops
-colliding with this one.
+colliding with this one. A skip coded `covered` is the strongest signal you
+can send: it tells Replen the capability is **already built in this repo**, so
+it stops probing that facet entirely and won't surface a different tool for it
+next session. Use `covered` ONLY when you've confirmed the implementation in
+the code (e.g. the repo has its own `services/llm_client.py`), not just because
+a similar dependency exists — that's what makes "we already do this" stick to
+the capability instead of replaying every session against a new candidate.
 
 **Candidate's README is unreachable (WebFetch 404)**. Note it in the
 writeup (`Caveats: README unreachable; verdict based on description

package/extras/skills/replen-onboard/SKILL.md

@@ -126,13 +126,27 @@ knowledge graph — verify instead.)
 ### 2c. Write the grounded project report
 
 Produce a comprehensive write-up of the repo — the thing you'd hand a new
-engineer. Cover: **what it does and for whom · the stack · the algorithms/
-techniques it uses and WHY · the data it operates on · how it's architected ·
-what it's trying to achieve · constraints/non-goals.** Ground every claim in the
-code (name the files/modules). Be specific about the tech, not the domain
-marketing. This report is the single richest grounding artifact — it's what lets
-Replen tell, e.g., "anomaly detection over telemetry time-series (no ML)" apart
-from "image-defect anomaly detection".
+engineer. Cover: **the stack · the algorithms/techniques it uses and WHY · the
+data it operates on (shape/modality) · how it's architected · the technical
+problem it solves · constraints/non-goals.** Ground every claim in the code
+(name the files/modules). Be specific about the tech, not the domain. This
+report is the single richest grounding artifact — it's what lets Replen tell,
+e.g., "anomaly detection over telemetry time-series (no ML)" apart from
+"image-defect anomaly detection".
+
+**Respect the cover — describe the TECH, never de-sanitize the application.**
+This report leaves the machine (stored server-side as grounding), so it must
+read like the repo's own public docs, not like a leak. Replen only needs the
+technical capability profile — what algorithms run on what data shape — which is
+modality-precise without any sensitive real-world detail. If the README/CLAUDE.md
+deliberately present a sanitized framing (e.g. "urban-infrastructure
+segmentation") that differs from what the code's identifiers imply, FOLLOW THE
+DOCS' framing: write "semantic segmentation of overhead imagery into vector
+polygons," NOT the specific real-world thing it detects or who uses it. Never
+copy a sensitive internal codename, end-user, deployment, or real-world target
+into the report or the descriptors — the capability is the signal; the
+application is exactly what stays local. When in doubt, describe it as the
+public README does.
 
 ### 2d. Derive grounded capabilities
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replen",
-  "version": "1.0.23",
+  "version": "1.0.25",
   "description": "Make your AI coding tools smarter. One command, no API keys, free. Replen watches what your projects actually do and surfaces a few things worth bringing in each month. Use one as is, port a piece of another, cherry pick an idea, or build it clean room. The match happens inside your AI tool's session. A few actionable matches a month, by design.",
   "type": "module",
   "bin": {