mempalace-code 1.10.4__tar.gz → 1.11.0__tar.gz

{mempalace_code-1.10.4 → mempalace_code-1.11.0}/.claude/skills/release/SKILL.md

@@ -111,12 +111,55 @@ unavailable and the user explicitly approves the fallback.
 
 ### Step 6: Verify Hosted Status
 
-Check all public surfaces separately:
+Run the release-status gate first. It checks every public publication surface
+and exits non-zero when any blocker remains:
 
 ```bash
+python scripts/release_status_gate.py --version X.Y.Z \
+  --repo rergards/mempalace-code \
+  --remote publish \
+  --branch main
+```
+
+The gate checks:
+1. publish remote git tag (`v X.Y.Z` on the `publish` remote)
+2. branch Tests workflow — most recent completed run on `main` must be green
+3. Publish to PyPI workflow — most recent completed run must be green
+4. GitHub Release metadata — non-draft, non-prerelease, `isLatest=true`
+5. PyPI JSON — `info.version == X.Y.Z` and both wheel and sdist present
+6. Install smoke — `pip install --no-cache-dir mempalace-code==X.Y.Z` in a disposable venv
+
+A release is **not shipped** when any blocker remains. Report the gate's
+`Remaining blockers` list verbatim in the release summary and do not use
+"shipped" or "latest" language until the gate exits 0.
+
+For machine-readable status (e.g. Autopilot gating):
+
+```bash
+python scripts/release_status_gate.py --version X.Y.Z --json
+```
+
+**Diagnostic-only mode** (skips install smoke; cannot be labeled fully shipped):
+
+```bash
+python scripts/release_status_gate.py --version X.Y.Z --skip-smoke
+```
+
+If the gate finds blockers, investigate the specific surface that failed.
+Manual fallback diagnostics for individual surfaces:
+
+```bash
+# Tag
+git ls-remote --tags publish "refs/tags/vX.Y.Z"
+
+# Workflows
 gh run list --repo rergards/mempalace-code --branch main --workflow Tests --limit 5
 gh run list --repo rergards/mempalace-code --workflow "Publish to PyPI" --limit 5
+
+# GitHub Release
 gh release view vX.Y.Z --repo rergards/mempalace-code
+
+# PyPI JSON
 python - <<'PY'
 import json, urllib.request
 version = "X.Y.Z"
@@ -126,10 +169,6 @@ assert data["info"]["version"] == version
 PY
 ```
 
-If the branch Tests run is red, the tag publish succeeded but the release is not
-clean. Fix and publish a follow-up patch before creating or advertising the
-GitHub Release as latest.
-
 If PyPI is visible but `gh release view` reports no release, create the GitHub
 Release only after hosted Tests are green:
 
@@ -151,11 +190,8 @@ tokens, hostnames, or incident-only details.
 Version: X.Y.Z
 Tag: vX.Y.Z
 Pushed to publish: [yes/no]
-Hosted Tests: [pass/fail/not-run]
-Publish to PyPI: [pass/fail/not-run]
-PyPI visible: [yes/no]
-GitHub Release: [created/existing/missing]
+Release status gate: [passed/failed]
 
 Remaining blockers:
-- [none or exact blocker]
+- [none or exact blocker from release_status_gate.py output]
 ```

{mempalace_code-1.10.4 → mempalace_code-1.11.0}/.github/workflows/ci.yml

@@ -83,6 +83,25 @@ jobs:
       - name: Pyright strict slice
         run: python -m pyright -p pyrightconfig.strict.json
 
+  dependency-upgrade-gate:
+    runs-on: ubuntu-latest
+    if: github.event_name != 'workflow_dispatch'
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+          cache: pip
+          cache-dependency-path: |
+            pyproject.toml
+            uv.lock
+      - name: Dependency upgrade gate
+        run: |
+          python scripts/dependency_upgrade_gate.py ci-check \
+            --base-ref "${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before }}"
+
   model-tests:
     runs-on: ubuntu-latest
     if: github.event_name == 'workflow_dispatch' && github.event.inputs.model_tests == 'true'

mempalace_code-1.11.0/.github/workflows/dependency-audit.yml

@@ -0,0 +1,86 @@
+name: Dependency Audit
+
+on:
+  schedule:
+    - cron: "0 6 * * 1"  # Weekly on Monday at 06:00 UTC
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  issues: write
+
+jobs:
+  current-audit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+          cache: pip
+          cache-dependency-path: |
+            pyproject.toml
+            uv.lock
+
+      - name: Install audit dependencies
+        run: pip install pip-audit
+
+      - name: Run current dependency audit
+        id: audit
+        run: |
+          set +e
+          python scripts/dependency_upgrade_gate.py current-audit \
+            --out-dir dependency-audit-output
+          rc=$?
+          echo "audit_exit=$rc" >> "$GITHUB_OUTPUT"
+          exit $rc
+        continue-on-error: true
+
+      - name: Upload audit artifacts
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: dependency-audit-report
+          path: dependency-audit-output/
+          if-no-files-found: warn
+
+      - name: Create or update dependency-audit issue
+        if: steps.audit.outcome == 'failure'
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          ISSUE_TITLE="[dependency-audit] current dependency audit findings"
+          ISSUE_BODY_FILE="dependency-audit-output/current-audit-issue-body.md"
+          ISSUE_LABEL="dependency-audit"
+
+          if [ ! -f "$ISSUE_BODY_FILE" ]; then
+            echo "No issue body file found; skipping issue creation." >&2
+            exit 0
+          fi
+
+          # Find existing open issue with the stable title
+          EXISTING=$(gh issue list \
+            --state open \
+            --search "\"$ISSUE_TITLE\" in:title" \
+            --json number \
+            --jq '.[0].number // empty' 2>/dev/null || true)
+
+          if [ -n "$EXISTING" ]; then
+            gh issue edit "$EXISTING" --body-file "$ISSUE_BODY_FILE"
+            echo "Updated existing issue #$EXISTING"
+          else
+            gh issue create \
+              --title "$ISSUE_TITLE" \
+              --body-file "$ISSUE_BODY_FILE" \
+              --label "$ISSUE_LABEL" 2>/dev/null || \
+            gh issue create \
+              --title "$ISSUE_TITLE" \
+              --body-file "$ISSUE_BODY_FILE"
+          fi
+
+      - name: Fail workflow on audit findings
+        if: steps.audit.outcome == 'failure'
+        run: |
+          echo "Dependency audit found actionable findings. See uploaded artifact and issue."
+          exit 1

{mempalace_code-1.10.4 → mempalace_code-1.11.0}/CHANGELOG.md

@@ -2,7 +2,62 @@
 
 ## Unreleased
 
-No changes yet.
+## v1.11.0 — 2026-06-18
+
+Minor release for release-readiness gates, dependency audit automation, offline
+search guards, watcher reliability, and clearer CLI recovery guidance.
+
+### Added
+
+- Code-intelligence demo packet with deterministic public exhibits: generated fixture
+  project mined, searched, and read via real CLI with exact commands and normalized
+  output captured in `docs/demo/code-intelligence-packet.{md,json}`.
+- Generation script `scripts/gen_code_intelligence_packet.py` with `--check` mode
+  for drift detection and public-safety validation; wired into `/verify` and CI.
+- Comprehensive test suite for packet generation with coverage for output
+  normalization, known-answer retrieval assertions, and artifact cleanup.
+- Dependency upgrade/audit gate covering proposed dependency changes, current
+  resolver audit checks, CI integration, allowlist handling, and documentation.
+- Weekly scheduled dependency audit workflow for the current dependency graph.
+- Six-surface release publication status gate covering publish remote tags,
+  branch tests, PyPI publish workflow status, GitHub Release metadata, PyPI JSON,
+  and fresh install smoke.
+- Watcher startup readiness markers for `watch_and_mine` and `watch_all`, making
+  daemon initialization distinguishable from stale post-recovery log entries.
+
+### Changed
+
+- Human-facing CLI failures now prefer explicit `Next:` recovery guidance across
+  search, read, export, backup/restore, watch status, mine-all, compress, health,
+  cleanup, and model-fetch flows.
+- Pipe-sensitive commands keep machine-readable output clean: `read` failures and
+  `export --out -` diagnostics go to stderr, and generated backup/watch schedule
+  snippets remain on stdout while install hints go to stderr.
+- Legacy Claude Code hook prompts now give concise MCP save contracts instead of
+  broad "save everything" instructions, while Codex/Gemini docs point to MCP +
+  canonical usage rules.
+
+### Fixed
+
+- `watch_and_mine` and `watch_all` now refuse uninitialized roots before starting
+  macOS FSEvents observers, preventing runaway watcher churn on broad local roots.
+- Cached Hugging Face model fetch and search paths are guarded by subprocess-level
+  offline regressions that catch token warnings or metadata network calls.
+- `watch status` now reports the top-level launchd service state instead of
+  nested coalition state from `launchctl print`.
+- Release status gate no longer requests unsupported `gh release view --json
+  isLatest`; latest release is checked through `gh release list`.
+- Release install smoke subprocesses are bounded by a timeout so public-surface
+  diagnostics cannot hang indefinitely on resolver/network stalls.
+- Release gate token sanitization avoids self-matching scanner literals while
+  still redacting GitHub and PyPI token-shaped values from diagnostics.
+- `search --palace <missing>` now fails with a clear stderr diagnostic instead
+  of reporting an empty result set.
+
+### Removed
+
+- Ignored `.tasks/` and `docs/audits/` Autopilot artifacts are no longer tracked
+  in the public tree.
 
 ## v1.10.4 — 2026-06-06
 

{mempalace_code-1.10.4 → mempalace_code-1.11.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mempalace-code
-Version: 1.10.4
+Version: 1.11.0
 Summary: Developer memory tool — mine codebases and conversations into a LanceDB-backed searchable palace. No API key required.
 Project-URL: Homepage, https://github.com/rergards/mempalace-code
 Project-URL: Repository, https://github.com/rergards/mempalace-code
@@ -335,6 +335,50 @@ launchctl unload ~/Library/LaunchAgents/com.mempalace.watch.plist   # stop until
 launchctl load   ~/Library/LaunchAgents/com.mempalace.watch.plist   # re-enable after freeing space
 ```
 
+**Diagnosing and stopping a crash-looping job:**
+
+If the daemon was pointed at an uninitialized directory it will crash-loop under `KeepAlive`. Confirm with:
+
+```bash
+mempalace-code watch ~/projects/ status   # shows state, runs count, and last exit code
+```
+
+Stop and optionally remove it:
+
+```bash
+# macOS 10.11+ preferred — unregisters the job immediately:
+launchctl bootout gui/$(id -u)/com.mempalace.watch
+
+# Older macOS / alternative:
+launchctl unload ~/Library/LaunchAgents/com.mempalace.watch.plist
+
+# Remove permanently (re-install after fixing the watch root):
+rm ~/Library/LaunchAgents/com.mempalace.watch.plist
+```
+
+**Daemon health check:**
+
+The daemon emits `WATCH_RUN` lines at each startup transition so the appended log at `/tmp/mempalace-watch.log` can be searched to confirm the latest startup reached the watch loop. Use this sequence to diagnose daemon state:
+
+```bash
+# 1. Process state — is the daemon running?
+launchctl print gui/$(id -u)/com.mempalace.watch
+# Or use the watch status shortcut:
+mempalace-code watch ~/projects/ status
+
+# 2. Palace storage health
+mempalace-code --palace ~/.mempalace/palace health
+
+# 3. Find the latest startup that reached watch-ready
+grep -a 'state=watch-ready' /tmp/mempalace-watch.log | tail -1
+# Example output: WATCH_RUN run_id=20260616T120102Z-p12345 state=watch-ready
+
+# 4. Filter that run's context (replace the run_id from step 3):
+grep -a 'run_id=20260616T120102Z-p12345' /tmp/mempalace-watch.log
+```
+
+A log file may contain `WATCH_RUN` lines from older runs that exited with disk-budget or backup failures. The `run_id` on the latest `state=watch-ready` line identifies the current healthy startup — lines from prior runs with different `run_id` values are stale and can be ignored. If no `watch-ready` line appears, check the most recent `run-started` line and the state that followed it (for example `state=pre-watch-backup-failed` or `state=initial-mine-skipped reason=disk-budget`).
+
 Configure the threshold via environment variable or `~/.mempalace/config.json`:
 
 ```bash
@@ -1002,7 +1046,7 @@ python -m pyright --pythonpath "$(python -c 'import sys; print(sys.executable)')
 Apache 2.0 — see [LICENSE](LICENSE) and [NOTICE](NOTICE).
 
 <!-- Link Definitions -->
-[version-shield]: https://img.shields.io/badge/version-1.10.2-4dc9f6?style=flat-square&labelColor=0a0e14
+[version-shield]: https://img.shields.io/badge/version-1.11.0-4dc9f6?style=flat-square&labelColor=0a0e14
 [release-link]: https://github.com/rergards/mempalace-code/releases
 [python-shield]: https://img.shields.io/badge/python-3.11+-7dd8f8?style=flat-square&labelColor=0a0e14&logo=python&logoColor=7dd8f8
 [python-link]: https://www.python.org/

{mempalace_code-1.10.4 → mempalace_code-1.11.0}/README.md

@@ -286,6 +286,50 @@ launchctl unload ~/Library/LaunchAgents/com.mempalace.watch.plist   # stop until
 launchctl load   ~/Library/LaunchAgents/com.mempalace.watch.plist   # re-enable after freeing space
 ```
 
+**Diagnosing and stopping a crash-looping job:**
+
+If the daemon was pointed at an uninitialized directory it will crash-loop under `KeepAlive`. Confirm with:
+
+```bash
+mempalace-code watch ~/projects/ status   # shows state, runs count, and last exit code
+```
+
+Stop and optionally remove it:
+
+```bash
+# macOS 10.11+ preferred — unregisters the job immediately:
+launchctl bootout gui/$(id -u)/com.mempalace.watch
+
+# Older macOS / alternative:
+launchctl unload ~/Library/LaunchAgents/com.mempalace.watch.plist
+
+# Remove permanently (re-install after fixing the watch root):
+rm ~/Library/LaunchAgents/com.mempalace.watch.plist
+```
+
+**Daemon health check:**
+
+The daemon emits `WATCH_RUN` lines at each startup transition so the appended log at `/tmp/mempalace-watch.log` can be searched to confirm the latest startup reached the watch loop. Use this sequence to diagnose daemon state:
+
+```bash
+# 1. Process state — is the daemon running?
+launchctl print gui/$(id -u)/com.mempalace.watch
+# Or use the watch status shortcut:
+mempalace-code watch ~/projects/ status
+
+# 2. Palace storage health
+mempalace-code --palace ~/.mempalace/palace health
+
+# 3. Find the latest startup that reached watch-ready
+grep -a 'state=watch-ready' /tmp/mempalace-watch.log | tail -1
+# Example output: WATCH_RUN run_id=20260616T120102Z-p12345 state=watch-ready
+
+# 4. Filter that run's context (replace the run_id from step 3):
+grep -a 'run_id=20260616T120102Z-p12345' /tmp/mempalace-watch.log
+```
+
+A log file may contain `WATCH_RUN` lines from older runs that exited with disk-budget or backup failures. The `run_id` on the latest `state=watch-ready` line identifies the current healthy startup — lines from prior runs with different `run_id` values are stale and can be ignored. If no `watch-ready` line appears, check the most recent `run-started` line and the state that followed it (for example `state=pre-watch-backup-failed` or `state=initial-mine-skipped reason=disk-budget`).
+
 Configure the threshold via environment variable or `~/.mempalace/config.json`:
 
 ```bash
@@ -953,7 +997,7 @@ python -m pyright --pythonpath "$(python -c 'import sys; print(sys.executable)')
 Apache 2.0 — see [LICENSE](LICENSE) and [NOTICE](NOTICE).
 
 <!-- Link Definitions -->
-[version-shield]: https://img.shields.io/badge/version-1.10.2-4dc9f6?style=flat-square&labelColor=0a0e14
+[version-shield]: https://img.shields.io/badge/version-1.11.0-4dc9f6?style=flat-square&labelColor=0a0e14
 [release-link]: https://github.com/rergards/mempalace-code/releases
 [python-shield]: https://img.shields.io/badge/python-3.11+-7dd8f8?style=flat-square&labelColor=0a0e14&logo=python&logoColor=7dd8f8
 [python-link]: https://www.python.org/

{mempalace_code-1.10.4 → mempalace_code-1.11.0}/docs/BACKLOG-archived.yaml

@@ -961,3 +961,68 @@ items:
       resolution: '2026-05-29: completed in pipeline run (commit=7588660, 9 files changed, 213 insertions(+), 1 deletion(-))'
       archived_date: "2026-05-29"
       done_summary: completed in pipeline run (commit=7588660, 9 files changed, 213 insertions(+), 1 deletion(-))
+    - key: AUTOPILOT-DEMO-QUALITY-SCORECARD
+      summary: Add a deterministic public quality scorecard that makes Autopilot cleanup progress visible across releases.
+      resolution: '2026-06-05: Deterministic public scorecard: scripts/quality_scorecard.py emits Markdown+JSON; --check gates shape/determinism/public-safety in CI lint job and /verify; baseline committed to docs/quality/; update workflow in docs/quality/README.md'
+      archived_date: "2026-06-11"
+      done_summary: 'Deterministic public scorecard: scripts/quality_scorecard.py emits Markdown+JSON; --check gates shape/determinism/public-safety in CI lint job and /verify; baseline committed to docs/quality/; update workflow in docs/quality/README.md'
+    - key: AUTOPILOT-DEMO-PUBLIC-SAFETY-GATE
+      summary: Add a repo-wide public-safety gate for tracked and staged files.
+      resolution: '2026-06-06: Added scripts/public_safety_scan.py --tracked --staged, CI and /verify wiring, focused tests, and removed tracked .verify-state while adding it to .gitignore.'
+      archived_date: "2026-06-11"
+      done_summary: Repo-wide public-safety scan now gates tracked/staged files and redacts matched content; .verify-state is local-only.
+    - key: AUTOPILOT-DEMO-RUFF-RATCHET
+      summary: Reduce transitional Ruff ignores in a measurable ratchet without broad style-only churn.
+      resolution: '2026-06-06: Reduced global Ruff ignores from 33 to 3 by keeping existing package/test debt scoped to per-file ignores and making new scripts inherit the stricter rule set.'
+      archived_date: "2026-06-11"
+      done_summary: 'Ruff global ignore ratchet: broad historical ignores are now scoped away from scripts; no new inline suppressions.'
+    - key: AUTOPILOT-DEMO-PYRIGHT-STRICT-SLICE
+      summary: Establish a strict Pyright slice for stable low-level modules and expand it gradually.
+      resolution: '2026-06-06: Added pyrightconfig.strict.json for version.py, mcp_tool_profiles.py, and disk_budget.py; annotated disk_budget.py enough to pass strict; wired strict slice into CI and /verify.'
+      archived_date: "2026-06-11"
+      done_summary: Initial strict Pyright slice gates three stable low-level modules in CI and /verify.
+    - key: AUTOPILOT-DEMO-WORKFLOW-REVIEW-PROTOCOL
+      summary: Document the public-safe adversarial Claude workflow protocol for repo quality work.
+      resolution: '2026-06-06: Added docs/quality/workflow-review-protocol.md and linked it from docs/quality/README.md.'
+      archived_date: "2026-06-11"
+      done_summary: Public-safe multi-agent workflow review protocol is documented for future quality improvements.
+    - key: AUTOPILOT-DEMO-CODE-INTELLIGENCE-GOLDEN-PACKET
+      summary: Generate a deterministic public-safe code-intelligence packet from real MemPalace CLI output and one minimal MCP stdio exhibit on a synthetic fixture project.
+      resolution: '2026-06-11: Deterministic code-intelligence demo packet implemented. scripts/gen_code_intelligence_packet.py builds fixture, mines, generates docs/demo/code-intelligence-packet.{md,json} with 1.5k lines of exhibits. Tests (464 lines) validate normalization, known-answer queries, check-mode drift, and cleanup. Wired into /verify and CI lint job. Quality scorecard updated.'
+      archived_date: "2026-06-11"
+      done_summary: Code-intelligence packet generation script and comprehensive demo artifacts with full test coverage; wired into /verify and CI.
+    - key: WATCH-MACOS-FSEVENTS-RUNAWAY-GUARD
+      summary: Prevent broken macOS watch jobs from monitoring broad uninitialized roots and driving sustained FSEvents or Spotlight churn.
+      resolution: '2026-06-11: completed in pipeline run (delivered: Add macOS watch runaway guard: root validation in render_watch_schedule, ThrottleInterval in launchd plist, on-save SKIP_DIRS event pruning with pre-start warning, crash-loop signal in watch status, and operator recovery docs in README, artifacts: mempalace_code/watcher.py, mempalace_code/cli_commands/watch.py, tests/test_watcher.py (+1), verified: VER-1, VER-2, VER-3 (+12), phase_commit=2c2716f, final_commit=10ff04f, 24 files changed, 1371 insertions(+), 16 deletions(-))'
+      archived_date: "2026-06-11"
+      done_summary: 'completed in pipeline run (delivered: Add macOS watch runaway guard: root validation in render_watch_schedule, ThrottleInterval in launchd plist, on-save SKIP_DIRS event pruning with pre-start warning, crash-loop signal in watch status, and operator recovery docs in README, artifacts: mempalace_code/watcher.py, mempalace_code/cli_commands/watch.py, tests/test_watcher.py (+1), verified: VER-1, VER-2, VER-3 (+12), phase_commit=2c2716f, final_commit=10ff04f, 24 files changed, 1371 insertions(+), 16 deletions(-))'
+    - key: STORE-HF-CACHED-SEARCH-SUBPROCESS-GUARD
+      summary: Add subprocess-level guard that cached model search/fetch never emits HuggingFace token warnings or performs network metadata calls after setup.
+      resolution: '2026-06-11: completed in pipeline run (delivered: Add subprocess-level offline guards in tests/test_offline.py: four non-network tests spawn real CLI subprocesses with fake sentence_transformers/huggingface_hub and a socket blocker via PYTHONPATH, proving cached fetch-model and search use only local_files_only model resolution and emit no HF token-warning output., artifacts: tests/test_offline.py, verified: VER-1, VER-2, VER-3 (+5))'
+      archived_date: "2026-06-11"
+      done_summary: 'completed in pipeline run (delivered: Add subprocess-level offline guards in tests/test_offline.py: four non-network tests spawn real CLI subprocesses with fake sentence_transformers/huggingface_hub and a socket blocker via PYTHONPATH, proving cached fetch-model and search use only local_files_only model resolution and emit no HF token-warning output., artifacts: tests/test_offline.py, verified: VER-1, VER-2, VER-3 (+5))'
+    - key: DEPENDENCY-SECURITY-UPGRADE-GATE
+      summary: Add a repeatable audited dependency-upgrade gate before raising package ceilings or refreshing the lock.
+      resolution: '2026-06-11: completed in pipeline run (delivered: Add dependency_upgrade_gate.py (audit/verify-report/ci-check), 17 focused tests, DEPENDENCY_UPGRADE_GATE.md documentation, CI gate step in Tests workflow with fetch-depth:0 and base-ref expressions, and regenerated quality scorecard., artifacts: scripts/dependency_upgrade_gate.py, tests/test_dependency_upgrade_gate.py, docs/DEPENDENCY_UPGRADE_GATE.md (+3), verified: VER-1, VER-2, VER-3 (+11), phase_commit=a6e7b12, final_commit=52035df, 23 files changed, 4452 insertions(+), 45 deletions(-))'
+      archived_date: "2026-06-11"
+      done_summary: 'completed in pipeline run (delivered: Add dependency_upgrade_gate.py (audit/verify-report/ci-check), 17 focused tests, DEPENDENCY_UPGRADE_GATE.md documentation, CI gate step in Tests workflow with fetch-depth:0 and base-ref expressions, and regenerated quality scorecard., artifacts: scripts/dependency_upgrade_gate.py, tests/test_dependency_upgrade_gate.py, docs/DEPENDENCY_UPGRADE_GATE.md (+3), verified: VER-1, VER-2, VER-3 (+11), phase_commit=a6e7b12, final_commit=52035df, 23 files changed, 4452 insertions(+), 45 deletions(-))'
+    - key: DEPENDENCY-SCHEDULED-AUDIT-CI
+      summary: Add a scheduled dependency audit workflow that checks current resolved packages without changing bounds.
+      resolution: '2026-06-11: completed in pipeline run (delivered: Add current-audit subcommand to dependency_upgrade_gate.py, weekly scheduled workflow, allowlist file, updated docs, and 8 focused acceptance tests., artifacts: scripts/dependency_upgrade_gate.py, tests/test_dependency_upgrade_gate.py, .github/workflows/dependency-audit.yml (+4), verified: VER-1, VER-2, VER-3 (+11), phase_commit=9f8e737, final_commit=5816c9b, 24 files changed, 3528 insertions(+), 6 deletions(-))'
+      archived_date: "2026-06-11"
+      done_summary: 'completed in pipeline run (delivered: Add current-audit subcommand to dependency_upgrade_gate.py, weekly scheduled workflow, allowlist file, updated docs, and 8 focused acceptance tests., artifacts: scripts/dependency_upgrade_gate.py, tests/test_dependency_upgrade_gate.py, .github/workflows/dependency-audit.yml (+4), verified: VER-1, VER-2, VER-3 (+11), phase_commit=9f8e737, final_commit=5816c9b, 24 files changed, 3528 insertions(+), 6 deletions(-))'
+    - key: RELEASE-PUBLICATION-STATUS-GATE
+      summary: Add a release-status verification gate that checks every public publication surface before calling a release shipped.
+      resolution: '2026-06-11: completed in pipeline run (delivered: Add scripts/release_status_gate.py (stdlib-only, 6-surface gate), 8 mocked tests covering AC-1 through AC-5, updated release skill (Step 6 now calls the gate), and regenerated quality scorecard., artifacts: scripts/release_status_gate.py, tests/test_release_status_gate.py, .claude/skills/release/SKILL.md (+2), verified: VER-1, VER-2, VER-3 (+9), phase_commit=404491c, final_commit=5b3231a, 23 files changed, 3567 insertions(+), 20 deletions(-))'
+      archived_date: "2026-06-11"
+      done_summary: 'completed in pipeline run (delivered: Add scripts/release_status_gate.py (stdlib-only, 6-surface gate), 8 mocked tests covering AC-1 through AC-5, updated release skill (Step 6 now calls the gate), and regenerated quality scorecard., artifacts: scripts/release_status_gate.py, tests/test_release_status_gate.py, .claude/skills/release/SKILL.md (+2), verified: VER-1, VER-2, VER-3 (+9), phase_commit=404491c, final_commit=5b3231a, 23 files changed, 3567 insertions(+), 20 deletions(-))'
+    - key: AUTOPILOT-DEMO-CODE-INTELLIGENCE-PACKET-ACCEPTANCE-FIX
+      summary: Close owner-acceptance blockers on the code-intelligence golden packet without broadening into new demo, docs-drift, or repo-wide public-safety work.
+      resolution: '2026-06-11: completed in pipeline run (delivered: Add owner-acceptance checklist to packet generator/artifacts, fix B905 zip strictness, encode scanner-flagged token literal, relocate audit evidence to public-safe path, replace fallback golden-packet plan with durable plan., artifacts: scripts/gen_code_intelligence_packet.py, tests/test_code_intelligence_packet.py, docs/demo/code-intelligence-packet.json (+6), verified: VER-1, VER-3, VER-4 (+12), phase_commit=680870f, final_commit=99bff31, 23 files changed, 1492 insertions(+), 84 deletions(-))'
+      archived_date: "2026-06-11"
+      done_summary: 'completed in pipeline run (delivered: Add owner-acceptance checklist to packet generator/artifacts, fix B905 zip strictness, encode scanner-flagged token literal, relocate audit evidence to public-safe path, replace fallback golden-packet plan with durable plan., artifacts: scripts/gen_code_intelligence_packet.py, tests/test_code_intelligence_packet.py, docs/demo/code-intelligence-packet.json (+6), verified: VER-1, VER-3, VER-4 (+12), phase_commit=680870f, final_commit=99bff31, 23 files changed, 1492 insertions(+), 84 deletions(-))'
+    - key: WATCH-RUN-READINESS-DIAGNOSTICS
+      summary: Make watch-daemon startup state easy to distinguish from stale appended log failures after disk-budget recovery.
+      resolution: '2026-06-16: completed in pipeline run (delivered: Add WATCH_RUN startup state markers to watch_and_mine/watch_all, update _optimize_once to return outcome, add TestWatchRunReadinessDiagnostics tests, and document health check workflow in README.md and docs/BACKUP_RESTORE.md, artifacts: mempalace_code/watcher.py, tests/test_watcher.py, README.md (+1), verified: VER-1, VER-2, VER-3 (+9), follow-ups: WATCH-ALL-BACKUP-FAIL-TEST, phase_commit=1b9b3e5, final_commit=936ae57, 8 files changed, 267 insertions(+), 15 deletions(-))'
+      archived_date: "2026-06-16"
+      done_summary: 'completed in pipeline run (delivered: Add WATCH_RUN startup state markers to watch_and_mine/watch_all, update _optimize_once to return outcome, add TestWatchRunReadinessDiagnostics tests, and document health check workflow in README.md and docs/BACKUP_RESTORE.md, artifacts: mempalace_code/watcher.py, tests/test_watcher.py, README.md (+1), verified: VER-1, VER-2, VER-3 (+9), follow-ups: WATCH-ALL-BACKUP-FAIL-TEST, phase_commit=1b9b3e5, final_commit=936ae57, 8 files changed, 267 insertions(+), 15 deletions(-))'

{mempalace_code-1.10.4 → mempalace_code-1.11.0}/docs/BACKLOG.yaml

@@ -47,99 +47,28 @@ sections:
 # OPEN ITEMS
 # ============================================================
 items:
-  - key: STORE-HF-CACHED-SEARCH-SUBPROCESS-GUARD
-    section: quality
-    status: open
-    priority: P2
-    summary: Add subprocess-level guard that cached model search/fetch never emits HuggingFace token warnings or performs network metadata calls after setup.
-    acceptance:
-      - Run a real CLI subprocess with a preseeded HuggingFace cache and network/socket access blocked or mocked.
-      - Assert `mempalace-code search` exits successfully without `HF_TOKEN`, `unauthenticated`, `huggingface.co`, or retry noise on stdout/stderr.
-      - Assert repeated `mempalace-code fetch-model` on a cached model uses local-only resolution and does not perform Hub metadata requests.
-      - Keep the existing network-marked download tests separate from this no-network regression guard.
-  - key: DEPENDENCY-SECURITY-UPGRADE-GATE
-    section: quality
-    status: open
-    priority: P1
-    summary: Add a repeatable audited dependency-upgrade gate before raising package ceilings or refreshing the lock.
-    acceptance:
-      - Enumerate current and target versions for direct runtime, dev, and optional dependencies from package metadata before changing bounds.
-      - Query OSV or an equivalent advisory source for both current and target direct dependency versions; block target ranges that are compromised or currently affected.
-      - Run pip-audit or an equivalent resolver-level audit on fresh environments for the default install and every optional extra whose bounds change.
-      - Keep deprecated optional backends capped away from affected ranges; do not raise ChromaDB to 1.x while GHSA-f4j7-r4q5-qw2c affects the available 1.x line.
-      - Update uv.lock only after the audited resolver passes, then run hosted-CI-equivalent tests in a clean pip environment so stale local locks cannot hide dependency drift.
-  - key: DEPENDENCY-SCHEDULED-AUDIT-CI
+  - key: BENCHMARK-FIXTURE-FRESHNESS-FACTS
     section: quality
     status: open
     priority: P1
-    summary: Add a scheduled dependency audit workflow that checks current resolved packages without changing bounds.
-    acceptance:
-      - Add a GitHub Actions workflow on `schedule` and `workflow_dispatch` that installs the default package and every optional extra in fresh environments.
-      - Run `pip-audit` or an equivalent resolver-level audit for default, `[dev]`, `[treesitter]`, `[spellcheck]`, and `[chroma]` installs.
-      - Query OSV or an equivalent advisory source for direct dependency versions including `lancedb`, `sentence-transformers`, `pyyaml`, `packaging`, `chromadb`, and tree-sitter packages.
-      - Treat known accepted risks as explicit allowlist entries with advisory ID, package, affected range, reason, and expiry date.
-      - Publish only package names, versions, advisory IDs, and remediation notes; never include private resolver caches, machine paths, or credentials.
-      - Open or update a backlog item when an advisory appears, a package becomes yanked, or a previously safe target range becomes affected.
-  - key: RELEASE-PUBLICATION-STATUS-GATE
+    summary: Refresh benchmark baselines and publish compact fixture facts so public savings claims do not depend on stale repo size numbers.
+    acceptance:
+      - Run the token-savings benchmark against the current canonical large-repo fixture and record commit/ref, tracked file count, mined drawer count, supported-language count, median/average/peak savings, and retrieval precision.
+      - Update public benchmark docs and marketing-safe snippets to use the measured fixture facts instead of the older 19k-chunk wording.
+      - Add a small benchmark metadata file or script output that prints fixture facts alongside results so future reruns cannot omit repo size, language coverage, or precision.
+      - Add a freshness guard that warns when fixture drawer count or tracked file count drifts materially from the documented baseline.
+      - Keep the published facts concise and non-private; do not include customer repo names, private remotes, machine paths, or incident history.
+  - key: VERSION-INSTALL-METADATA-CONSISTENCY
     section: quality
     status: open
-    priority: P1
-    summary: Add a release-status verification gate that checks every public publication surface before calling a release shipped.
-    acceptance:
-      - Add a script or documented command that takes an expected version and checks tag existence, tag workflow status, GitHub Release presence, PyPI version visibility, and clean install smoke from PyPI.
-      - Verify `publish/main`, the version tag, GitHub Actions tag publish run, GitHub Releases, and PyPI JSON/API state as separate facts with separate pass/fail rows.
-      - Fail if branch tests pass but tag publish, release creation, or PyPI visibility is missing or red.
-      - Keep output public-safe: no private remote URLs, tokens, local paths, hostnames, or non-public incident notes.
-      - Wire the command into the `/release` skill/runbook and require it before release completion summaries.
-      - Add tests for parsing mocked GitHub/PyPI responses and for partial-success states such as "tests green, PyPI missing".
-  - key: AUTOPILOT-DEMO-QUALITY-SCORECARD
-    section: autopilot_demo
-    status: done
-    priority: P1
-    summary: Add a deterministic public quality scorecard that makes Autopilot cleanup progress visible across releases.
-    acceptance:
-      - Add a script or command that emits markdown and JSON metrics for code size, largest modules, Ruff ignore counts, Pyright mode, unreasoned suppressions, test count, and available smoke suites.
-      - Generate any raw baseline evidence under local ignored docs/audits/, then commit only a sanitized public summary with public repo data and relative paths.
-      - Document how each Autopilot demo task updates the scorecard with before/after metrics.
-      - CI or `/verify` runs the scorecard command and fails on malformed output.
-    resolution: "2026-06-05: Deterministic public scorecard: scripts/quality_scorecard.py emits Markdown+JSON; --check gates shape/determinism/public-safety in CI lint job and /verify; baseline committed to docs/quality/; update workflow in docs/quality/README.md"
-    done_summary: "Deterministic public scorecard: scripts/quality_scorecard.py emits Markdown+JSON; --check gates shape/determinism/public-safety in CI lint job and /verify; baseline committed to docs/quality/; update workflow in docs/quality/README.md"
-  - key: AUTOPILOT-DEMO-PUBLIC-SAFETY-GATE
-    section: autopilot_demo
-    status: done
-    priority: P1
-    summary: Add a repo-wide public-safety gate for tracked and staged files.
-    acceptance:
-      - Add a stdlib scanner that checks tracked worktree files and staged index blobs.
-      - Block secret-like tokens, real local machine paths, and local-only artifact paths without printing the matched secret text.
-      - Wire the scanner into CI and `/verify`.
-      - Remove or ignore any local-only artifact that is already tracked.
-    resolution: "2026-06-06: Added scripts/public_safety_scan.py --tracked --staged, CI and /verify wiring, focused tests, and removed tracked .verify-state while adding it to .gitignore."
-    done_summary: "Repo-wide public-safety scan now gates tracked/staged files and redacts matched content; .verify-state is local-only."
-  - key: AUTOPILOT-DEMO-RUFF-RATCHET
-    section: autopilot_demo
-    status: done
-    priority: P1
-    summary: Reduce transitional Ruff ignores in a measurable ratchet without broad style-only churn.
-    acceptance:
-      - Record baseline counts for global ignores, per-file ignores, and inline suppressions before edits.
-      - Remove at least one global ignore family or reduce per-file ignore entries by at least 25% for a focused module group.
-      - Replace any necessary inline suppressions with reasoned, narrow suppressions; no new blanket `noqa` entries.
-      - "`ruff check`, `ruff format --check`, Pyright, and the relevant focused tests pass; update the quality scorecard."
-    resolution: "2026-06-06: Reduced global Ruff ignores from 33 to 3 by keeping existing package/test debt scoped to per-file ignores and making new scripts inherit the stricter rule set."
-    done_summary: "Ruff global ignore ratchet: broad historical ignores are now scoped away from scripts; no new inline suppressions."
-  - key: AUTOPILOT-DEMO-PYRIGHT-STRICT-SLICE
-    section: autopilot_demo
-    status: done
-    priority: P1
-    summary: Establish a strict Pyright slice for stable low-level modules and expand it gradually.
+    priority: P2
+    summary: Add a release/install smoke that catches mismatches between package metadata, `mempalace_code.__version__`, and the CLI version-check output.
     acceptance:
-      - Add a strict typecheck config or command for a small stable slice such as config, reader, MCP tool profiles, and mining scanner.
-      - Replace ad hoc `Any` and broad dictionaries in that slice with typed contracts where the code owns the boundary.
-      - Keep compatibility shims and third-party stub gaps outside the first strict slice unless they can be fixed narrowly.
-      - CI or `/verify` runs both the existing basic Pyright check and the strict-slice check; update the quality scorecard.
-    resolution: "2026-06-06: Added pyrightconfig.strict.json for version.py, mcp_tool_profiles.py, and disk_budget.py; annotated disk_budget.py enough to pass strict; wired strict slice into CI and /verify."
-    done_summary: "Initial strict Pyright slice gates three stable low-level modules in CI and /verify."
+      - In a fresh isolated install, assert `importlib.metadata.version("mempalace-code")`, `mempalace_code.__version__`, and `mempalace-code version-check --status` report the same version.
+      - Include pipx or uv-tool style invocation coverage if practical, because operator installs commonly use those surfaces.
+      - Fail with a clear diagnostic that names the disagreeing surfaces and recommended reinstall command without exposing private paths.
+      - Wire the smoke into release verification or the release-status gate, not the whole fast unit suite unless it stays cheap.
+      - Add a local troubleshooting note for stale tool environments where installed metadata and module source disagree.
   - key: AUTOPILOT-DEMO-PYRIGHT-STRICT-SLICE-EXPANSION
     section: autopilot_demo
     status: open
@@ -163,18 +92,6 @@ items:
       - Add tests proving deleted local-only files do not trigger tracked worktree failures, while committed local-only paths still fail.
       - Wire committed-tree mode into release verification docs or `/release`, not into every edit-time `/verify` run unless it remains fast.
       - Ensure all failure output remains redacted to rule id and file position only.
-  - key: AUTOPILOT-DEMO-WORKFLOW-REVIEW-PROTOCOL
-    section: autopilot_demo
-    status: done
-    priority: P1
-    summary: Document the public-safe adversarial Claude workflow protocol for repo quality work.
-    acceptance:
-      - Define review lenses, skeptical refutation, synthesis, implementation, and verification steps.
-      - Separate publishable summaries from local-only raw workflow artifacts.
-      - Link the protocol from quality docs.
-      - Include the canonical quality verification commands.
-    resolution: "2026-06-06: Added docs/quality/workflow-review-protocol.md and linked it from docs/quality/README.md."
-    done_summary: "Public-safe multi-agent workflow review protocol is documented for future quality improvements."
   - key: AUTOPILOT-DEMO-ARCHITECTURE-GUARD
     section: autopilot_demo
     status: open
@@ -269,3 +186,11 @@ items:
       - Keep raw multi-agent transcripts local-only under ignored paths; commit only the synthesized public summary when needed.
       - Document that passive review output is not enough: each surviving finding must either change code/tests/docs or become a backlog item with acceptance criteria.
       - Add tests for accepted summaries, missing evidence, missing action, and accidental private path/token content.
+  - key: WATCH-ALL-BACKUP-FAIL-TEST
+    summary: "Add test for watch_all pre-watch-backup-failed state path"
+    type: task
+    status: open
+    priority: low
+    size: XS
+    section_id: quality
+    description: "## Problem\nThe `pre-watch-backup-failed` WATCH_RUN state is emitted in `watch_all` (watcher.py:787) on the same code path as `watch_and_mine`, but only `watch_and_mine` has a dedicated test (`test_pre_watch_backup_failure_emits_failed_state_for_same_run`). A regression in the `watch_all` backup-gate branch would go undetected.\n\n## Deliverable\nAdd a `TestWatchRunReadinessDiagnostics` test case that patches `create_backup` to raise in a `watch_all` call with existing lance data, asserts `state=pre-watch-backup-failed` is emitted on the same `run_id`, and asserts `state=watch-ready` is absent.\n\n## Constraints\n- Must use the same mock pattern as the existing AC-2 test.\n- Must not change production code.\n\n## Acceptance criteria\n\npython -m pytest tests/test_watcher.py::TestWatchRunReadinessDiagnostics::test_watch_all_backup_failure_emits_failed_state -q passes\n\n## Scope\n\npython -m pytest tests/test_watcher.py::TestWatchRunReadinessDiagnostics::test_watch_all_backup_failure_emits_failed_state -q passes\n\n## Evidence\n\n- docs/audits/WATCH-RUN-READINESS-DIAGNOSTICS-round-1.md\n- Source task: WATCH-RUN-READINESS-DIAGNOSTICS"