codevira 3.0.0__tar.gz → 3.1.1__tar.gz

{codevira-3.0.0 → codevira-3.1.1}/CHANGELOG.md

@@ -9,6 +9,429 @@ This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.htm
 
 ---
 
+## [3.1.1] — 2026-05-30 — Hardening, viewer overhaul, G3, sync-observe-git
+
+v3.1.1 is the hardening release that supersedes the brief 3.1.0
+window. Same five memory subsystems, but the read/write surface
+is tightened (secret scrubbing across every store), the viewer
+graduates from "look at the graph" to "interrogate the memory"
+(ranked search + Q&A + outcome lens + lineage trace), and the
+last permanently-skipped gauntlet gate (G3 real-IDE smoke) ships
+as a real check.
+
+If you installed 3.1.0, `pip install --upgrade codevira` brings
+you straight to 3.1.1. 3.1.0 is yanked: undocumented at release
+time (this CHANGELOG entry didn't ship with it), superseded
+without code regressions.
+
+### Memory hardening
+
+- **Secret scrubbing across every store.** M8 (reflections) and
+  M3 (skills) already scrubbed; v3.1.1 brings parity to M2
+  (working) and to `decisions_store.record` (decision text +
+  context). One shared module: `mcp_server/storage/sanitize.py`.
+  Patterns: api-key, Bearer, password, AWS AKIA, long hex,
+  long base64. Scrub runs at the storage-write boundary so the
+  secret never lands on disk in committed surfaces.
+- **`commit_session` path-traversal hardening.** Previously
+  `commit_session("../escape")` would write outside
+  `.codevira/working_archived/`. Now validates `session_id`
+  against `[A-Za-z0-9._-]+`; non-conforming inputs raise
+  `ValueError`.
+- **`skills_store.record(triggers={"tags": "git"})` rejected.**
+  Previously a bare string would silently iterate as characters
+  and persist `["g", "i", "t"]`. Now raises `ValueError` pointing
+  the caller to wrap as a list.
+- **BFS query-time crash fix.** `spatial._bfs_distances` now
+  catches `sqlite3.DatabaseError` raised inside the query loop
+  (not only at connect-time). A corrupt-bytes `graph.db` or a
+  schema with missing `edges` table falls back to neighborhood-
+  only mode instead of crashing `spatial_nearby`.
+- **`skills_store.list_all(limit=0)` returns `[]`.** Previously
+  the for-loop did append-then-check, returning the first row
+  instead of empty.
+- **`promote_skill_to_playbook` refuses archived skills.** A
+  low-value skill (5+ consecutive failures OR 90+ days unused)
+  is now refused unless `force=True` is passed. Previously
+  promoted silently and competed with active skills.
+- **`origin.current_origin` normalizes agent_model.** Whitespace
+  and the literal strings `"null"` / `"None"` (any case) collapse
+  to `None`. Downstream consensus-check string compares no longer
+  see junk values.
+- **Antigravity multi-target atomicity.** `inject_global_antigravity`
+  + `_inject_antigravity` now snapshot each target's pre-write
+  content. On any write failure, all successfully-written targets
+  are restored from snapshot. Either every target is stamped or
+  none — no asymmetric provenance state from a mid-iteration
+  failure.
+
+### Counter-decision discipline (schema change, back-compat)
+
+`decisions_store.record` + `record_decision` MCP tool grew two
+optional fields:
+
+- `alternatives_considered: list[str]` — the strongest options
+  you rejected. Surfaces in the viewer's rich-detail panel.
+- `would_re_examine_if: str` — the condition that should force
+  a re-examination. Pair with `do_not_revert=True` to turn the
+  one-way ratchet into a self-documenting precondition.
+
+Both fields are optional, sanitized on write, and tolerated as
+absent/null on read for legacy records.
+
+### `codevira graph` viewer overhaul
+
+The viewer graduates from a passive force-layout to an active
+interrogation tool. Major additions:
+
+- **Ranked search panel.** Free-text queries now produce a
+  top-K ranked panel under the search box (BM25-ish: token
+  overlap + recency + protected boost). Each row: id, snippet,
+  outcome badge, protected lock, score. Click any row →
+  centers + selects + opens the rich detail panel.
+- **Q&A intent detection** (no LLM dependency, pure regex).
+  Four shapes today: `what did we decide about X`, `why did
+  we pick X`, `what got reverted`, `what's protected`. Each
+  produces a synthesized answer with clickable decision-id
+  chips that jump in the graph.
+- **Rich detail panel for decisions.** Surfaces the new
+  counter-decision fields (alternatives_considered as a list,
+  would_re_examine_if as an italic banner), context as a
+  scrollable block, outcome badge in the title, and the full
+  supersedes lineage chain (clickable predecessors + successors).
+- **Outcome lens.** New "Outcome" choice in the lens dropdown.
+  Colors decisions by classification: `kept`=green, `modified`=
+  amber, `reverted`=coral, `unclassified`=gray. Legend shows
+  per-bucket counts.
+- **Lineage trace mode.** Click "trace" in the lineage block on
+  any decision in a supersedes chain — everything dims, the
+  chain stays full opacity with extra-thick warning-colored
+  edges, camera fits to the chain. Esc exits.
+- **`alternatives_considered` + `would_re_examine_if` surfaced**
+  in the rich detail panel.
+- **Search debouncing** (120ms trailing-edge) so the ranked-
+  score pass doesn't lag on typing bursts at the 2000-node cap.
+
+The viewer's underlying file split: `mcp_server/cli_graph.py`
+shrank 84KB → 14KB by extracting the HTML/CSS/JS template into
+`mcp_server/graph/template.html`. Public API unchanged.
+
+### `codevira sync` auto-classifies outcomes
+
+Every `codevira sync` (manual or automatic) now runs
+`observe-git` as a best-effort tail step. The outcome lens in
+the viewer + the Q&A "what got reverted" surface now have real
+data on every sync — previously stayed gray because outcome
+classification was opt-in. Non-git projects degrade silently.
+
+### G3 — real-IDE smoke (the last stubbed gate)
+
+`scripts/check_real_ide_smoke.sh` was a stub returning exit 2
+("skipped") since v2.0. Now ships a real implementation:
+
+- Locates codevira on PATH (the same binary IDE configs invoke).
+- For each detected IDE config (Claude Code, Claude Desktop,
+  Cursor, Windsurf, Antigravity — per-app + shared paths):
+  validates JSON; "empty file" treated as not-configured;
+  malformed JSON treated as hard fail.
+- Verifies `codevira` (or `codevira-<safe_name>`) is registered;
+  reports `env.CODEVIRA_IDE` state (pre-v3.1.0 installs show
+  as missing with re-setup guidance).
+- Spawns a real MCP stdio server (`codevira --project-dir <tmp>`),
+  runs initialize + tools/list. Thresholds: initialize 5s budget
+  (warm-load OK), tools/list 1s HARD (Claude Desktop disconnect
+  class), tool count ≥20.
+
+Evidence file now records `G3_real_ide_smoke: true` for the
+first time since v2.0.
+
+### Process / discipline
+
+- **`test_cross_tool_universality` added to `make test-e2e`.**
+  Previously the procedural lock (D000010) said "run test-e2e
+  before changing engine policies." The gate only included
+  `test_first_contact` + `test_product_invariants`. A bump to
+  `_DEFAULT_MIN_SCORE` 0.10 → 0.25 broke the cross-tool wedge
+  silently because the test that catches it wasn't in the gate.
+  Reverted the bump; widened the gate; added a wedge-regression
+  unit test (`TestCrossToolWedgeRegression`) so the same class
+  of regression also fails at the fast unit-test layer.
+- **`make release-verify-version` BSD sed fix.** The version
+  drift check used `sed -E 's/.*=\s*"([^"]+)".*/\1/'` which is
+  GNU-only; BSD sed (macOS default) doesn't recognize `\s` in
+  `-E`. Replaced with `= *` (literal space).
+- **CLAUDE.md "MUST"/"SHOULD" honesty.** The
+  "before-you-finish" contract claimed `MUST call
+  write_session_log` but no engine layer enforced it. Downgraded
+  to STRONG RECOMMENDATION with explicit "engine enforcement on
+  roadmap" note.
+- **AGENTS.md idempotency.** `agents_md_generator.regenerate`
+  now compares computed content vs existing and short-circuits
+  when identical (no write, no mtime bump). Kills the
+  perpetual uncommitted-drift loop where every codevira write
+  bumped AGENTS.md even when content didn't change.
+
+### Tests + suite
+
+- Full project suite: 2538 → 2540 passing, 28 skipped, 0
+  failures.
+- Widened `make test-e2e` gate: 39 → 43 passing.
+- All 4 product fixes verified end-to-end through the fresh-
+  built wheel + against AgentStore's real memory.
+
+### Locked decisions honored
+
+D000010 procedural gate ran on every engine-policy change.
+D000001 (atomic disk writes) honored. D000012 (project-root
+validation) honored.
+
+### Yanked
+
+- **3.1.0 yanked 2026-05-30.** Same code shape; released
+  without this CHANGELOG entry. Process gap, not code gap.
+  Existing pins still work; new `pip install codevira` lands
+  on 3.1.1 directly.
+
+---
+
+---
+
+## [3.1.0] — Five memory subsystems + cross-IDE consensus
+
+v3.1.0 adds five memory subsystems on top of the v3.0.x decision
+log, plus a cross-IDE consensus layer. Every addition is additive
+to the existing schemas; v3.0.x records continue to read without
+migration. The MCP surface gains 22 new tools across the new
+subsystems.
+
+### v3.0.x storage prereq (ships first)
+
+- **`refactor(jsonl_store)`** — extract `read_merged` / `compact` /
+  `read_recent` from `decisions_store._read_merged` /
+  `sessions_store.read_recent`. The five new memory subsystems
+  share this amendment-overlay primitive instead of duplicating
+  it. Tests cover amendment-chain-three-deep recursion semantics.
+  Zero behavior change for existing callers.
+
+- **`fix(session_id)`** — `decisions_store.record` and
+  `sessions_store.write` now default `session_id` to
+  `f"ad-hoc-{secrets.token_hex(3)}"` (e.g., `ad-hoc-a1b2c3`)
+  instead of the literal string `"ad-hoc"`. Every concurrent IDE
+  that didn't pass a slug previously collided into one bucket;
+  the unique-per-call default fixes cross-IDE attribution.
+
+### M1 — Origin tagging (provenance)
+
+Every decision and session write now carries an `origin` block:
+
+```json
+"origin": {"ide": "claude_code", "agent_model": "...",
+           "host_hash": "<12 hex chars>", "ts": "..."}
+```
+
+- `host_hash` = `sha1(uuid.getnode() bytes + username)[:12]` —
+  stable per machine (MAC-based, `platform.node()` fallback),
+  privacy-preserving (no plaintext hostname/username leaks).
+- `CODEVIRA_IDE` env var read at MCP server startup; default
+  `"unknown"`. `ide_inject.py` now writes `CODEVIRA_IDE=<ide_key>`
+  into the MCP config block for all 10 supported IDE configs
+  (Claude Code, Claude Desktop, Cursor, Windsurf, Antigravity —
+  per-project + global).
+- `check_conflict` response includes the candidate's `origin` so
+  agents can see "this conflicts with a decision Cursor wrote 3
+  days ago" instead of just an opaque decision_id.
+- Reads tolerate `origin` absent (legacy v3.0.x records treated
+  as `ide="unknown"`).
+
+### M2 — Working memory
+
+Bounded, decay-scored intra-session scratchpad.
+
+- `.codevira-cache/working.jsonl` (per-machine, ephemeral,
+  gitignored). Auto-populated by `post_tool_use` hook on Edit /
+  Write / MultiEdit / NotebookEdit / update_node (importance 4),
+  Bash (importance 3), tool errors (importance bumped to 7).
+- 4 MCP tools: `working_add`, `working_get`, `working_promote`
+  (to=decision|skill|playbook with check_conflict gate), and
+  `get_working_context` (compact markdown for ReAct loops).
+- Decay score: `importance × exp(-Δt_hours / 6) + 0.5 ×
+  access_count`. Top-3 surfaces in `get_session_context`.
+- Eviction = amendment tombstone; periodic compaction during
+  `codevira sync`.
+- CLI: `codevira working commit <session_id>` archives a
+  session's live entries to
+  `.codevira/working_archived/<session_id>.jsonl`.
+
+### M3 — Skill library (procedural memory)
+
+`.codevira/skills.jsonl` (canonical, team-shareable). FTS5
+retrieval + composite ranking.
+
+- `skill_fts` virtual table in the existing
+  `.codevira-cache/fts5.sqlite`. Independent staleness key
+  (`skill_source_mtime`) so the existing decisions tracking is
+  unaffected.
+- Composite ranking:
+  `score = 0.5 × BM25_norm + 0.3 × tag_jaccard + 0.2 ×
+  recency_decay(τ=30d)`. Never-used skills score 0 recency —
+  reinforcement, not existence, drives the recency signal.
+- 6 MCP tools: `record_skill`, `get_skill`, `apply_skill_outcome`,
+  `list_skills`, `supersede_skill`,
+  `promote_skill_to_playbook` (writes
+  `.codevira/playbooks/<task_type>/<slug>.md`).
+- Lifecycle states: `active` (default), `archived` (5 consec
+  failures OR `unused_days ≥ 90` — configurable; do_not_revert
+  exempt), `superseded` (final).
+- M5 wires git-derived outcomes_writer to skill reinforcement (see
+  below).
+
+### M4 — Spatial memory
+
+Activity heatmap + folder-tree neighborhoods + affordances.
+
+- `.codevira-cache/activity.jsonl` (per-machine). Auto-emitted on
+  Edit/Write via `memory_fanout` + on `decisions_store.record`
+  when `file_path` is set. Schema: `{id, ts, node_id, kind:
+  edit|decision_ref, session_id, origin, _schema_v: 1}`.
+- 4 MCP tools: `spatial_nearby` (BFS ≤ 2 hops over the indexer
+  graph + same-neighborhood union, ranked by `(1/(1+bfs_dist)) ×
+  log(1+visit_count_30d)`), `spatial_heat`,
+  `spatial_neighborhood`, `spatial_affordances`.
+- Folder-tree neighborhoods (top-2 dir components, e.g.,
+  `mcp_server/storage`). Project-overridable via
+  `.codevira/neighborhoods.yaml`.
+- Bundled `mcp_server/data/affordances.yaml` mapping file globs to
+  task_type affordances (e.g., `mcp_server/tools/*.py` →
+  `{add_tool, write_test}`). Project override:
+  `.codevira/affordances.yaml`; bundled + project union per match.
+
+### M5 — Skill induction wired to outcomes_writer
+
+Closes the reinforcement loop. Two pieces:
+
+- **Sessions schema additions**: `task_type` (`feature` | `bug` |
+  `refactor` | `release` | `docs` | `other`) and `skill_ids: []`
+  (skills used during the session). Additive; legacy sessions
+  tolerate absence.
+- **outcomes_writer fan-out**: when `observe_all()` classifies a
+  decision as `kept` or `reverted`, each skill referenced via
+  `skill_ids` on the same session gets `mark_used(success=…)`.
+  Pre-builds a `{session_id → set[skill_id]}` index so the
+  per-decision fan-out is O(1). Best-effort: skill errors log and
+  drop without blocking the decision-outcome write.
+- **CLI**: `codevira induce-skills [--apply] [--yes]` —
+  deterministic induction (no LLM in v3.1.0). Pipeline: filter
+  sessions with ≥80% kept; group by task_type; cluster by
+  tag-Jaccard ≥ 0.5; keep clusters ≥3 sessions; render candidate
+  skill with `name = "<task_type>: <top-3 tags>"`,
+  `procedure = bullet-summary of session.task +
+  decision.decision` (capped 30 lines).
+
+### M6 — Consensus Phase B (cross-IDE conflict check, read-only)
+
+- Per-IDE checkpoint files
+  `.codevira/checkpoints/<ide_key>.json` keyed on
+  `last_seen_decision_id` — zero-padded base-36 D-ids preserve
+  monotonic ordering without clock drift.
+- `consensus_store.scan_and_materialize()`: walks decisions with
+  `id > checkpoint`, partitions by `origin.ide` into
+  `current_corpus` + `foreign`, runs the reused `check_conflict`
+  tokenize/Jaccard/overlap math on every pair, records matches as
+  PC-prefixed rows in `.codevira/pending_conflicts.jsonl`.
+- 2 MCP tools: `consensus_check`, `consensus_status`.
+  `get_session_context` surfaces a top-3 panel sorted by
+  `(do_not_revert × recency)`.
+- CLI: `codevira consensus check`. Read-only — no amendment rows
+  written on decisions.
+
+### M7 — Consensus Phase C handshake (opt-in, default off)
+
+Opt-in belief-revision protocol gated behind
+`memory.consensus.handshake_enabled` in `.codevira/config.yaml`.
+
+- New `config.py` helper for dotted-key lookups against
+  `.codevira/config.yaml`.
+- `propose_supersession` (cross-IDE) appends a
+  `proposed_supersession` row with `expires_at = ts +
+  handshake_timeout_days` (default 14, configurable). Same-IDE
+  fast-path returns `{fast_path: True}` so the caller routes to
+  `decisions_store.supersede` directly.
+- `resolve_proposal(action: approved|rejected|withdrawn)`
+  appends a resolution row carrying `resolver_origin`.
+- `finalize_proposal(expired_unilateral=False)` — approved
+  proposals turn into a real `decisions_store.supersede` call.
+  Expired proposals require `expired_unilateral=True` (deadlock
+  safety); the audit row records the force-finalize.
+- 3 MCP tools: `consensus_propose_supersession`,
+  `consensus_resolve`, `origin_of` (provenance lookup; always
+  available).
+- Row kind taxonomy in pending_conflicts.jsonl: `conflict` (M6),
+  `proposed_supersession` (M7), `resolution` (M7).
+
+### M8 — Reflections (durable LLM abstractions)
+
+Generative-Agents-style abstractions over recent decisions +
+sessions.
+
+- `.codevira/reflections.jsonl` (canonical, committed) +
+  `.codevira/reflection_proposals.jsonl` (review staging).
+- `scrub_sensitive` strips api keys, Bearer tokens, passwords,
+  AWS-style AKIA, long hex/base64 from source records before the
+  LLM sees them.
+- `build_source_context` aggregates sessions + decisions in the
+  period window with plan caps (≤30 sessions, ≤100 decisions,
+  ≤6 KB envelope).
+- Bundled prompt template at
+  `mcp_server/data/prompts/reflection_v1.md`.
+- **MCP sampling integration scope**: v3.1.0 ships the storage +
+  sanitization + prompt rendering + the API surface. The
+  `sampling/createMessage` RPC that asks the host LLM for the
+  abstraction is the **v3.2** deliverable. v3.1.0 `reflect()`
+  returns `{sampling_supported: False, rendered_prompt,
+  source_context, deferred_to: "v3.2"}`; the CLI accepts an LLM
+  response via `--from-file`.
+- 3 MCP tools: `reflect`, `get_reflections`, `list_reflections`.
+- CLI: `codevira reflect [--period 7d] [--from-file PATH]
+  [--apply] [--yes]`. Render mode prints the prompt;
+  `--from-file` parses the LLM YAML response and writes a
+  proposal; `--apply --yes` commits to `reflections.jsonl`.
+
+### Schema versioning convention
+
+All NEW JSONL stores (`working`, `skills`, `activity`,
+`pending_conflicts`, `reflections`) carry `_schema_v: 1` on each
+record. Readers tolerate absence (treats as v1). Existing
+`decisions.jsonl` / `sessions.jsonl` are unchanged.
+
+### `get_session_context` panels
+
+Now carries five panels in addition to the existing roadmap /
+recent decisions:
+  - `working` — top-3 live entries (M2).
+  - `consensus` — top-3 pending conflicts (M6) sorted by
+    `(do_not_revert × recency)`.
+The plan reserves panels for working, skills, spatial,
+reflections in future ticks if value justifies the token cost.
+
+### Tests
+
+~450+ new tests across `tests/storage/`, `tests/test_tools_*`,
+`tests/test_cli_*`, `tests/test_reflections.py`,
+`tests/test_consensus_handshake.py`, etc. The full v3.1.0 suite
+runs in <20s; zero regressions from the v3.0.x baseline.
+
+### Locked decisions honored
+
+The v3.0.0 locks remain intact:
+- D000001 (atomic writes through `mcp_server/storage/atomic.py`)
+- D000012 (WRITE-path forbidden-root validation via
+  `ensure_dirs`)
+- The v2.2.0 "no embeddings; FTS5 + Jaccard only" decision —
+  M3's skill retrieval and M6's conflict check both use the
+  existing FTS5/Jaccard infrastructure; no new embedding deps.
+
+---
+
 ## [3.0.0] — 2026-05-27 — Lean, audited, opinionated
 
 ### Hardened (RC audit — rounds 2 + 3, pre-publish)

{codevira-3.0.0/codevira.egg-info → codevira-3.1.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: codevira
-Version: 3.0.0
+Version: 3.1.1
 Summary: Cross-IDE decision enforcement for AI coding agents. 1 MB per project, in your repo, no cloud, no vectors. Claude Code, Cursor, Windsurf, Antigravity, Codex all share the same in-repo memory; hooks block AI tool calls that violate prior decisions. MIT, local-first.
 Author-email: Sachin Shelke <sachin.worldnet@gmail.com>
 License: MIT
@@ -141,6 +141,28 @@ every AI tool, on every project, on your local machine.**
 
 ---
 
+## What's new in v3.1.1 — hardening + interrogable memory
+
+> 3.1.1 supersedes the briefly-published 3.1.0 (which shipped
+> without this README/CHANGELOG entry). Same code shape; this
+> release is the documented one. Brings five memory subsystems
+> (M1–M9 from 3.1.0) plus the v3.1.1 hardening + viewer overhaul.
+
+| Area | What you get |
+|---|---|
+| **Five memory subsystems** | Origin tagging (M1), working memory (M2), skill library with FTS5 ranking (M3), spatial memory + activity heatmap (M4), skill induction wired to outcomes (M5), cross-IDE consensus check + handshake (M6/M7), reflections (M8). 22 new MCP tools. |
+| **Secret scrubbing everywhere** | Decisions, sessions, working memory, skills, reflections — every store scrubs api-key / Bearer / password / AWS AKIA / long hex / long base64 at the write boundary. One shared `mcp_server/storage/sanitize.py`. |
+| **Counter-decision discipline** | `record_decision` now accepts `alternatives_considered: list[str]` and `would_re_examine_if: str` — losing options + invalidation trigger surface in the viewer's rich-detail panel. Optional + back-compat. |
+| **Interrogable graph viewer** | `codevira graph` is no longer a passive force-layout. Free-text search → top-K ranked panel with score + outcome badge. Q&A intent detection ("what did we decide about X", "what got reverted", "what's protected"). Outcome lens (kept/modified/reverted). Lineage trace mode for supersession chains. |
+| **Auto outcome classification** | `codevira sync` now runs `observe-git` as a best-effort tail step — outcomes flow into the viewer's outcome lens automatically. |
+| **G3 real-IDE smoke** | The last permanently-skipped gauntlet gate now ships as a real check. Verifies codevira is registered in each detected IDE config + MCP `tools/list` round-trips in <1s. |
+| **AGENTS.md no more churn** | `regenerate()` is now idempotent — no rewrite when content unchanged, no perpetual uncommitted-drift loop. |
+| **4 silent bugs fixed** | `commit_session("../escape")` rejected; `triggers.tags="git"` rejected; `list_all(limit=0)` returns `[]`; spatial BFS catches query-time sqlite errors. |
+
+Full v3.1.1 release notes: [CHANGELOG.md](CHANGELOG.md#311--2026-05-30--hardening-viewer-overhaul-g3-sync-observe-git).
+
+---
+
 ## What's new in v3.0.0 — audited, lean, opinionated
 
 > Major version. v3.0.0 is the biggest API contraction since v2.0

{codevira-3.0.0 → codevira-3.1.1}/README.md

@@ -92,6 +92,28 @@ every AI tool, on every project, on your local machine.**
 
 ---
 
+## What's new in v3.1.1 — hardening + interrogable memory
+
+> 3.1.1 supersedes the briefly-published 3.1.0 (which shipped
+> without this README/CHANGELOG entry). Same code shape; this
+> release is the documented one. Brings five memory subsystems
+> (M1–M9 from 3.1.0) plus the v3.1.1 hardening + viewer overhaul.
+
+| Area | What you get |
+|---|---|
+| **Five memory subsystems** | Origin tagging (M1), working memory (M2), skill library with FTS5 ranking (M3), spatial memory + activity heatmap (M4), skill induction wired to outcomes (M5), cross-IDE consensus check + handshake (M6/M7), reflections (M8). 22 new MCP tools. |
+| **Secret scrubbing everywhere** | Decisions, sessions, working memory, skills, reflections — every store scrubs api-key / Bearer / password / AWS AKIA / long hex / long base64 at the write boundary. One shared `mcp_server/storage/sanitize.py`. |
+| **Counter-decision discipline** | `record_decision` now accepts `alternatives_considered: list[str]` and `would_re_examine_if: str` — losing options + invalidation trigger surface in the viewer's rich-detail panel. Optional + back-compat. |
+| **Interrogable graph viewer** | `codevira graph` is no longer a passive force-layout. Free-text search → top-K ranked panel with score + outcome badge. Q&A intent detection ("what did we decide about X", "what got reverted", "what's protected"). Outcome lens (kept/modified/reverted). Lineage trace mode for supersession chains. |
+| **Auto outcome classification** | `codevira sync` now runs `observe-git` as a best-effort tail step — outcomes flow into the viewer's outcome lens automatically. |
+| **G3 real-IDE smoke** | The last permanently-skipped gauntlet gate now ships as a real check. Verifies codevira is registered in each detected IDE config + MCP `tools/list` round-trips in <1s. |
+| **AGENTS.md no more churn** | `regenerate()` is now idempotent — no rewrite when content unchanged, no perpetual uncommitted-drift loop. |
+| **4 silent bugs fixed** | `commit_session("../escape")` rejected; `triggers.tags="git"` rejected; `list_all(limit=0)` returns `[]`; spatial BFS catches query-time sqlite errors. |
+
+Full v3.1.1 release notes: [CHANGELOG.md](CHANGELOG.md#311--2026-05-30--hardening-viewer-overhaul-g3-sync-observe-git).
+
+---
+
 ## What's new in v3.0.0 — audited, lean, opinionated
 
 > Major version. v3.0.0 is the biggest API contraction since v2.0

{codevira-3.0.0 → codevira-3.1.1/codevira.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: codevira
-Version: 3.0.0
+Version: 3.1.1
 Summary: Cross-IDE decision enforcement for AI coding agents. 1 MB per project, in your repo, no cloud, no vectors. Claude Code, Cursor, Windsurf, Antigravity, Codex all share the same in-repo memory; hooks block AI tool calls that violate prior decisions. MIT, local-first.
 Author-email: Sachin Shelke <sachin.worldnet@gmail.com>
 License: MIT
@@ -141,6 +141,28 @@ every AI tool, on every project, on your local machine.**
 
 ---
 
+## What's new in v3.1.1 — hardening + interrogable memory
+
+> 3.1.1 supersedes the briefly-published 3.1.0 (which shipped
+> without this README/CHANGELOG entry). Same code shape; this
+> release is the documented one. Brings five memory subsystems
+> (M1–M9 from 3.1.0) plus the v3.1.1 hardening + viewer overhaul.
+
+| Area | What you get |
+|---|---|
+| **Five memory subsystems** | Origin tagging (M1), working memory (M2), skill library with FTS5 ranking (M3), spatial memory + activity heatmap (M4), skill induction wired to outcomes (M5), cross-IDE consensus check + handshake (M6/M7), reflections (M8). 22 new MCP tools. |
+| **Secret scrubbing everywhere** | Decisions, sessions, working memory, skills, reflections — every store scrubs api-key / Bearer / password / AWS AKIA / long hex / long base64 at the write boundary. One shared `mcp_server/storage/sanitize.py`. |
+| **Counter-decision discipline** | `record_decision` now accepts `alternatives_considered: list[str]` and `would_re_examine_if: str` — losing options + invalidation trigger surface in the viewer's rich-detail panel. Optional + back-compat. |
+| **Interrogable graph viewer** | `codevira graph` is no longer a passive force-layout. Free-text search → top-K ranked panel with score + outcome badge. Q&A intent detection ("what did we decide about X", "what got reverted", "what's protected"). Outcome lens (kept/modified/reverted). Lineage trace mode for supersession chains. |
+| **Auto outcome classification** | `codevira sync` now runs `observe-git` as a best-effort tail step — outcomes flow into the viewer's outcome lens automatically. |
+| **G3 real-IDE smoke** | The last permanently-skipped gauntlet gate now ships as a real check. Verifies codevira is registered in each detected IDE config + MCP `tools/list` round-trips in <1s. |
+| **AGENTS.md no more churn** | `regenerate()` is now idempotent — no rewrite when content unchanged, no perpetual uncommitted-drift loop. |
+| **4 silent bugs fixed** | `commit_session("../escape")` rejected; `triggers.tags="git"` rejected; `list_all(limit=0)` returns `[]`; spatial BFS catches query-time sqlite errors. |
+
+Full v3.1.1 release notes: [CHANGELOG.md](CHANGELOG.md#311--2026-05-30--hardening-viewer-overhaul-g3-sync-observe-git).
+
+---
+
 ## What's new in v3.0.0 — audited, lean, opinionated
 
 > Major version. v3.0.0 is the biggest API contraction since v2.0

{codevira-3.0.0 → codevira-3.1.1}/codevira.egg-info/SOURCES.txt

@@ -66,6 +66,7 @@ docs/plans/v2.1.2.md
 docs/plans/v2.1.3.md
 docs/plans/v2.2.0.md
 docs/plans/v3.0.0.md
+docs/release-notes/v3.1.1.md
 docs/troubleshooting/antigravity.md
 graph/_schema.yaml
 indexer/__init__.py
@@ -90,14 +91,18 @@ mcp_server/_repair_init.py
 mcp_server/_safe_crash.py
 mcp_server/auto_init.py
 mcp_server/cli.py
+mcp_server/cli_consensus.py
 mcp_server/cli_export.py
 mcp_server/cli_graph.py
 mcp_server/cli_hooks_admin.py
+mcp_server/cli_induce.py
 mcp_server/cli_init.py
 mcp_server/cli_projects.py
+mcp_server/cli_reflect.py
 mcp_server/cli_replay.py
 mcp_server/cli_sync.py
 mcp_server/cli_uninstall.py
+mcp_server/cli_working.py
 mcp_server/crash_logger.py
 mcp_server/decision_replay.py
 mcp_server/detect.py
@@ -115,6 +120,7 @@ mcp_server/roadmap_drift.py
 mcp_server/server.py
 mcp_server/setup_wizard.py
 mcp_server/data/__init__.py
+mcp_server/data/affordances.yaml
 mcp_server/data/config.example.yaml
 mcp_server/data/agents/builder.md
 mcp_server/data/agents/developer.md
@@ -128,6 +134,7 @@ mcp_server/data/hooks/pre_tool_use.sh
 mcp_server/data/hooks/session_start.sh
 mcp_server/data/hooks/stop.sh
 mcp_server/data/hooks/user_prompt_submit.sh
+mcp_server/data/prompts/reflection_v1.md
 mcp_server/data/rules/coding-standards-generic.md
 mcp_server/data/rules/coding-standards-go.md
 mcp_server/data/rules/coding-standards-typescript.md
@@ -145,6 +152,7 @@ mcp_server/data/rules/testing-standards.md
 mcp_server/engine/__init__.py
 mcp_server/engine/demo_policy.py
 mcp_server/engine/events.py
+mcp_server/engine/memory_fanout.py
 mcp_server/engine/policy.py
 mcp_server/engine/runner.py
 mcp_server/engine/signals.py
@@ -160,27 +168,42 @@ mcp_server/engine/policies/token_budget.py
 mcp_server/engine/wiring/__init__.py
 mcp_server/engine/wiring/claude_code_hooks.py
 mcp_server/engine/wiring/mcp_dispatch.py
+mcp_server/graph/__init__.py
+mcp_server/graph/template.html
 mcp_server/storage/__init__.py
+mcp_server/storage/activity_store.py
 mcp_server/storage/agents_md_generator.py
 mcp_server/storage/atomic.py
+mcp_server/storage/config.py
+mcp_server/storage/consensus_store.py
 mcp_server/storage/decisions_store.py
 mcp_server/storage/digest.py
 mcp_server/storage/fts5_index.py
 mcp_server/storage/jsonl_store.py
 mcp_server/storage/manifest.py
+mcp_server/storage/origin.py
 mcp_server/storage/outcomes_writer.py
 mcp_server/storage/paths.py
+mcp_server/storage/reflections_store.py
+mcp_server/storage/sanitize.py
 mcp_server/storage/sessions_store.py
+mcp_server/storage/skills_store.py
 mcp_server/storage/token_estimator.py
+mcp_server/storage/working_store.py
 mcp_server/tools/__init__.py
 mcp_server/tools/changesets.py
 mcp_server/tools/check_conflict.py
 mcp_server/tools/code_reader.py
+mcp_server/tools/consensus.py
 mcp_server/tools/graph.py
 mcp_server/tools/learning.py
 mcp_server/tools/playbook.py
+mcp_server/tools/reflections.py
 mcp_server/tools/roadmap.py
 mcp_server/tools/search.py
+mcp_server/tools/skills.py
+mcp_server/tools/spatial.py
+mcp_server/tools/working.py
 rules/coding-standards.md
 rules/engineering-excellence.md
 rules/git-cicd-governance.md
@@ -196,11 +219,15 @@ tests/test_auto_init.py
 tests/test_call_edge_fk_safety.py
 tests/test_check_conflict.py
 tests/test_chunker.py
+tests/test_cli_consensus.py
 tests/test_cli_graph.py
+tests/test_cli_induce.py
 tests/test_cli_projects.py
 tests/test_cli_replay.py
 tests/test_cli_uninstall.py
 tests/test_cli_version.py
+tests/test_cli_working.py
+tests/test_consensus_handshake.py
 tests/test_crash_logger.py
 tests/test_dedupe_migration.py
 tests/test_detect.py
@@ -223,6 +250,7 @@ tests/test_outcome_tracker.py
 tests/test_paths.py
 tests/test_prompts.py
 tests/test_record_decision.py
+tests/test_reflections.py
 tests/test_repair_init.py
 tests/test_roadmap_drift.py
 tests/test_server.py
@@ -234,5 +262,8 @@ tests/test_tools_graph.py
 tests/test_tools_learning.py
 tests/test_tools_playbook.py
 tests/test_tools_roadmap.py
+tests/test_tools_skills.py
+tests/test_tools_spatial.py
+tests/test_tools_working.py
 tests/test_treesitter_parser.py
 tests/test_watcher_circuit.py