sprag-cli 3.50.0 → 3.50.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sprag-cli",
-  "version": "3.50.0",
+  "version": "3.50.1",
   "description": "Sprag - a quality ratchet harness for AI coding agents: model-fitting delegation, ratchet rules, doc2md, Korean style gate. Same tool as claude-token-saver, under its new name.",
   "type": "module",
   "bin": {

package/src/route-inject.js

@@ -19,11 +19,13 @@
  *     there are no tool calls yet)
  *   - the text trips ESCALATE_RE (design, analysis, deploy, merge …), where the
  *     top tier is the right answer and a nudge downward would be wrong
+ *   - the text trips EDIT_RE (implement, add, fix …): editing is not delegable
+ *     however much the sentence also says "install" or "check"
  *   - no registered rule covers that category
  * A hint that fires on the wrong request costs more than one that stays quiet.
  */
 
-import { categorize, ESCALATE_RE } from './route-scan.js';
+import { categorize, ESCALATE_RE, EDIT_RE } from './route-scan.js';
 import { loadModelRules, budgetCapPhrase } from './model-rules.js';
 import { agentPhrase, agentPhraseEn } from './agents.js';
 import { userLanguage } from './config.js';
@@ -48,6 +50,9 @@ export function routeHint(text, { rules, lang = userLanguage(), root } = {}) {
   // before classification because such a request often looks like a light
   // "run" or "check" in its wording.
   if (ESCALATE_RE.test(t)) return null;
+  // Same for implementation work dressed as a run or a check: an edit is not
+  // delegable, and with no tool calls yet only the wording can say so.
+  if (EDIT_RE.test(t)) return null;
 
   const cat = categorize(t, null);
   if (!cat) return null;

package/src/route-scan.js

@@ -51,7 +51,18 @@ export const MIN_DELEGABLE_OUT = 100;
 // Irreversible/external actions (store submission, deploy, release, merge)
 // are included — they may look like light "run" episodes in the logs, but
 // delegating them defeats the harness's default-safe-path rule.
-export const ESCALATE_RE = /설계|아키텍처|리팩토링|원인 분석|개선할|검토해보|비교|왜 |제출|배포|출시|analyze|compare|evaluate|architect|refactor|submit|deploy|release|publish|merge/i;
+// Measured 2026-09-20 on 1,276 local prompts: '퍼블리시' (npm publish, 15 hits)
+// and '이유' (root-cause asks) were slipping through as run/translate, and a
+// bare '머지' matched inside '나머지' ("나머지 진행하자" ×7) — hence the lookbehind.
+export const ESCALATE_RE = /설계|아키텍처|리팩토링|원인 분석|개선할|검토해보|비교|왜 |이유|제출|배포|출시|퍼블리시|릴리스|릴리즈|(?<!나)머지|analyze|compare|evaluate|architect|refactor|submit|deploy|release|publish|merge/i;
+
+// Implementation asks phrased around a run/check verb ("설치와 동시에 설정되도록
+// 하자", "피드백 확인해주고 아이콘도 만들자"). Editing is not delegable, and at
+// prompt time there is no tool mix to reveal it, so the wording has to. Offline
+// classification does not use this: a write-dominant tool mix already excludes
+// such episodes in behaviorPool(). Same corpus: 21 of 1,276 prompts gated, all
+// but two of them implementation requests that had been read as run/check.
+export const EDIT_RE = /구현|추가하자|만들자|넣자|넣어줘|수정해|고쳐|바꿔|되도록|되게|리팩/;
 // A pattern must recur this often before we nag about it.
 export const MIN_RECURRENCE = 3;