raise-cli 3.1.3__tar.gz → 3.1.4__tar.gz

{raise_cli-3.1.3 → raise_cli-3.1.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: raise-cli
-Version: 3.1.3
+Version: 3.1.4
 Summary: RaiSE CLI - Reliable AI Software Engineering governance framework
 Project-URL: Homepage, https://raiseframework.ai
 Project-URL: Documentation, https://docs.raiseframework.ai
@@ -33,7 +33,7 @@ Requires-Dist: pydantic>=2.6.0
 Requires-Dist: python-dotenv>=1.0.0
 Requires-Dist: pyyaml>=6.0.1
 Requires-Dist: qrcode>=8.2
-Requires-Dist: raise-core==3.1.3
+Requires-Dist: raise-core==3.1.4
 Requires-Dist: rich>=13.7.0
 Requires-Dist: ruamel-yaml>=0.18
 Requires-Dist: textual>=0.89.0

{raise_cli-3.1.3 → raise_cli-3.1.4}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "raise-cli"
-version = "3.1.3"
+version = "3.1.4"
 description = "RaiSE CLI - Reliable AI Software Engineering governance framework"
 authors = [
     {name = "Emilio Osorio", email = "emilio@humansys.ai"}
@@ -21,7 +21,7 @@ classifiers = [
 ]
 
 dependencies = [
-    "raise-core==3.1.3",
+    "raise-core==3.1.4",
     "typer>=0.12.0",
     "rich>=13.7.0",
     "pydantic>=2.6.0",

{raise_cli-3.1.3 → raise_cli-3.1.4}/src/raise_cli/adapters/composite_pm.py

@@ -14,7 +14,6 @@ from __future__ import annotations
 
 import contextlib
 import logging
-import re
 from collections.abc import Callable
 from datetime import UTC, datetime
 from pathlib import Path
@@ -25,6 +24,7 @@ from pydantic import ValidationError
 
 from raise_cli.adapters.errors import AdapterSyncError
 from raise_cli.adapters.filesystem_models import BacklogItem
+from raise_cli.adapters.id_utils import DEFAULT_ID_PATTERN, work_id_re
 from raise_cli.adapters.models import (
     AdapterHealth,
     AttachmentDetail,
@@ -55,8 +55,6 @@ _RemoteAction = Callable[[Any, str], None]
 
 MAX_RETRIES = 5
 
-_JIRA_KEY_RE = re.compile(r"^[A-Z][A-Z0-9]*-\d+$")
-
 
 class RemoteWriteOutcome(NamedTuple):
     """Return contract for ``_write_to_remotes_keyed`` (RAISE-12598).
@@ -91,12 +89,14 @@ class CompositeBacklogAdapter:
         pending: PendingOpsLog,
         *,
         server_first: bool = False,
+        id_pattern: str = DEFAULT_ID_PATTERN,
     ) -> None:
         self._local = adapters[0]
         self._remotes = adapters[1:]
         self._wi_store = wi_store
         self._pending = pending
         self._server_first = server_first
+        self._id_re = work_id_re(id_pattern)
 
     @property
     def remotes(self) -> list[Any]:
@@ -1104,7 +1104,7 @@ class CompositeBacklogAdapter:
         remote_key = self._wi_store.get_jira_key(local_key)
         if remote_key is None:
             if self._local_has_key(local_key):
-                if _JIRA_KEY_RE.match(local_key):
+                if self._id_re.match(local_key):
                     # Auto-heal: local key IS a remote key (migrated/imported
                     # item with NULL jira_key). Self-map and pass through.
                     remote_key = local_key

raise_cli-3.1.4/src/raise_cli/adapters/id_utils.py

@@ -0,0 +1,41 @@
+r"""Utility for configurable work-item ID regex — RAISE-18508.
+
+Centralizes the pattern used to validate work-item keys across gates,
+pipeline modules, and adapters.  Callers compile the regex once via
+``work_id_re`` and should NOT hardcode ``[A-Z][A-Z0-9]*-\\d+`` directly.
+"""
+
+from __future__ import annotations
+
+import re
+from pathlib import Path
+
+DEFAULT_ID_PATTERN: str = r"[A-Z][A-Z0-9]*-\d+"
+
+
+def work_id_re(pattern: str) -> re.Pattern[str]:
+    """Return a compiled regex for the given work-item ID pattern."""
+    return re.compile(pattern)
+
+
+def load_id_pattern(project_root: Path) -> str:
+    """Read ``id_pattern`` from ``.raise/backlog.yaml``.
+
+    Returns ``DEFAULT_ID_PATTERN`` on any error (missing file, invalid YAML,
+    adapter not found) so callers never need to handle the failure.
+    """
+    try:
+        from raise_cli.adapters.backlog_config import (
+            get_configured_adapters,
+            load_backlog_config,
+        )
+
+        adapters = get_configured_adapters(project_root)
+        if not adapters:
+            return DEFAULT_ID_PATTERN
+        adapter_name = next(iter(adapters))
+        cfg = load_backlog_config(project_root, adapter_name)
+        re.compile(cfg.id_pattern)  # validate — re.error falls through to except
+        return cfg.id_pattern
+    except Exception:  # noqa: BLE001 — fail-open: always return a usable pattern
+        return DEFAULT_ID_PATTERN

{raise_cli-3.1.3 → raise_cli-3.1.4}/src/raise_cli/adapters/jira_config_gen.py

@@ -189,6 +189,16 @@ _CONFIG_HEADER = """\
 # organizations.<name>.url: tool endpoint domain
 # projects.<key>.org: which organization owns this project
 #
+# id_pattern: optional regex for work-item IDs (default: Jira format [A-Z][A-Z0-9]*-\\d+)
+# Override when your project uses non-Jira IDs (e.g. E14, S1.1, BUG-ALR-01).
+# Example patterns:
+#   Jira (default): '[A-Z][A-Z0-9]*-\\d+'
+#   Epics only:     'E\\d+'
+#   Stories only:   'S\\d+\\.\\d+'
+#   Multi-segment:  '[A-Z]+-[A-Z]+-\\d+'
+# Uncomment and set under the adapter section (e.g. under jira:):
+#   # id_pattern: 'E\\d+'
+#
 """
 
 

{raise_cli-3.1.3 → raise_cli-3.1.4}/src/raise_cli/adapters/models/pm.py

@@ -530,6 +530,14 @@ class BacklogAdapterConfig(BaseModel, frozen=True):
         default_factory=dict,
         description="Issue type → key prefix (e.g. Epic → e, Story → s). Populated by issue-types discover.",
     )
+    id_pattern: str = Field(
+        default=r"[A-Z][A-Z0-9]*-\d+",
+        description=(
+            "Regex pattern for work-item ID validation (RAISE-18508). "
+            "Default matches Jira-style keys (e.g. RAISE-123). "
+            "Override for non-Jira systems: e.g. 'E\\d+' for InterWare."
+        ),
+    )
 
     @model_validator(mode="before")
     @classmethod

{raise_cli-3.1.3 → raise_cli-3.1.4}/src/raise_cli/adapters/resolve.py

@@ -245,8 +245,14 @@ def _compose_pm_adapters(
     # Consulta env vars + ~/.rai/server.json (vía get_server_credentials).
     # El código anterior solo leía env vars, ignorando rai connect → server.json.
     server_first = get_server_credentials() is not None
+    from raise_cli.adapters.id_utils import load_id_pattern
+
     return CompositeBacklogAdapter(
-        instances, wi_store, pending, server_first=server_first
+        instances,
+        wi_store,
+        pending,
+        server_first=server_first,
+        id_pattern=load_id_pattern(root),
     )
 
 

{raise_cli-3.1.3 → raise_cli-3.1.4}/src/raise_cli/backlog/migrate.py

@@ -22,13 +22,14 @@ from pydantic import BaseModel
 
 from raise_cli.adapters.filesystem import FilesystemPMAdapter
 from raise_cli.adapters.filesystem_models import BacklogItem
+from raise_cli.adapters.id_utils import DEFAULT_ID_PATTERN, work_id_re
 from raise_cli.adapters.key_gen import issue_type_to_work_item_type
 from raise_cli.storage.work_items import WorkItem, WorkItemStore
 
 # D5: strict wire-key shape. Excludes local-only keys (E1, S1.1) and
 # hex-suffixed staged keys (TMP-7D983BB0) that `_save_item`'s looser
-# `not key.startswith("e")` heuristic would mis-tag as Jira keys.
-_WIRE_KEY_RE = re.compile(r"[A-Z][A-Z0-9]*-\d+")
+# `not key.startswith("e")` heuristic would mis-tag as remote keys.
+_WIRE_KEY_RE = work_id_re(DEFAULT_ID_PATTERN)
 
 # D11: work_items columns eligible for the fill-only-empty update rule,
 # in a fixed order so `MigrationAction.fields` is deterministic.
@@ -45,9 +46,9 @@ _FILL_ONLY_EMPTY_FIELDS: tuple[str, ...] = (
 )
 
 
-def _wire_key(key: str | None) -> str | None:
+def _wire_key(key: str | None, *, id_re: re.Pattern[str] = _WIRE_KEY_RE) -> str | None:
     """Return *key* iff it strictly matches the wire-key shape (D5), else None."""
-    if key and _WIRE_KEY_RE.fullmatch(key):
+    if key and id_re.fullmatch(key):
         return key
     return None
 

{raise_cli-3.1.3 → raise_cli-3.1.4}/src/raise_cli/cli/commands/graph.py

@@ -2008,13 +2008,14 @@ def _find_stale_cartridges(
         current_fps = {n.id: compute_fp(n.id, n.content, spec) for n in nodes}
         deleted_ids = set(existing_fps) - {n.id for n in nodes}
         changed = any(current_fps[n.id] != existing_fps.get(n.id) for n in nodes)
-        if not changed and not deleted_ids and existing_fps:
+        existing_embeddings = _load_existing_embeddings(instances_dir)
+        if not changed and not deleted_ids and existing_fps and existing_embeddings:
             continue
         work_items.append(
             (
                 instances_dir,
                 nodes,
-                _load_existing_embeddings(instances_dir),
+                existing_embeddings,
                 existing_fps,
             )
         )

{raise_cli-3.1.3 → raise_cli-3.1.4}/src/raise_cli/cli/commands/init.py

@@ -1245,7 +1245,10 @@ def _scaffold_per_agent(
 
             claude_memory = get_claude_memory_path(project_path)
             claude_memory.parent.mkdir(parents=True, exist_ok=True)
-            claude_memory.write_text(memory_content, encoding="utf-8")
+            if not claude_memory.exists() or force:
+                claude_memory.write_text(memory_content, encoding="utf-8")
+            else:
+                logger.debug("Kept (exists): %s", claude_memory)
 
         plugin.post_init(project_path, config)
 

{raise_cli-3.1.3 → raise_cli-3.1.4}/src/raise_cli/cli/commands/session.py

@@ -961,6 +961,13 @@ def start(  # noqa: C901
         typer.echo(f"▶ Session {session_id}{display_name} started ({agent_name})")
     else:
         typer.echo(f"▶ Session started ({agent_name})")
+    lease = payload.session_lease
+    if lease is not None and lease.get("reason") == "unregistered":
+        typer.echo(
+            "⚠ This worktree is not registered, so no session lease was taken"
+            f" — run `{lease.get('hint', 'rai worktree register')}` and reopen"
+            " the session."
+        )
 
 
 @session_app.command()

{raise_cli-3.1.3 → raise_cli-3.1.4}/src/raise_cli/cockpit/session_lease.py

@@ -10,11 +10,41 @@ import logging
 import os
 from pathlib import Path
 
-from raise_cli.storage.leases import SqliteLeaseStore
+from raise_cli.storage.leases import Lease, SqliteLeaseStore
+from raise_cli.storage.worktrees import (
+    SqliteWorktreeStore,
+    Worktree,
+    WorktreeNotFoundError,
+)
 
 _log = logging.getLogger(__name__)
 
 
+def usable_worktree(lease: Lease, wt_store: SqliteWorktreeStore) -> Worktree | None:
+    """Return the lease's worktree when it is a usable binding target, else None.
+
+    Usable means: the registry row exists, its status is not ``closed`` and
+    its directory exists on disk (RAISE-18504). A missing row (orphan lease)
+    answers None, accepted behaviour change vs the old fail-open: the
+    hook now skips it and may bind an older usable sibling lease.
+
+    Deliberately does NOT evaluate pid liveness (that is the lease store's
+    ``pid_alive`` filter; the MCP-pid caveat is RAISE-18043) nor lease expiry
+    (no TTL on the read path; an expired lease with a live holder still
+    binds; a policy decision belonging to the ADR). This is the seam where
+    a future shared predicate extends.
+
+    Lookup errors other than "row absent" propagate so callers fail open.
+    """
+    try:
+        wt = wt_store.get_by_name(lease.worktree_id)
+    except WorktreeNotFoundError:
+        return None
+    if wt.status == "closed" or not Path(wt.path).is_dir():
+        return None
+    return wt
+
+
 def acquire_session_lease(
     store: SqliteLeaseStore,
     worktree_id: str,
@@ -26,9 +56,15 @@ def acquire_session_lease(
     the call is a no-op (does not raise — session open is not the place
     to hard-block).
 
-    Returns True if a new lease was acquired.
+    A same-session live holder is renewed (heartbeat + expiry, pid
+    preserved) so a reopen makes this worktree the session's most recent
+    one (RAISE-18504); the renew result is returned (False on a lost race).
+
+    Returns True if a lease was acquired or renewed.
     """
     holder = store.get_live_or_reap(worktree_id)
+    if holder is not None and holder.session_id == session_id:
+        return store.renew(worktree_id, session_id=session_id)
     if holder is not None:
         _log.info(
             "Worktree '%s' already held by session '%s' (pid %d) — skipping lease",

{raise_cli-3.1.3 → raise_cli-3.1.4}/src/raise_cli/cwd_binding.py

@@ -15,8 +15,9 @@ import logging
 import sys
 from pathlib import Path
 
+from raise_cli.cockpit.session_lease import usable_worktree
 from raise_cli.storage.leases import SqliteLeaseStore
-from raise_cli.storage.worktrees import SqliteWorktreeStore, WorktreeNotFoundError
+from raise_cli.storage.worktrees import SqliteWorktreeStore
 
 _log = logging.getLogger(__name__)
 
@@ -38,17 +39,17 @@ class LocalCoordinationStore:
         """Return the worktree path leased by *session_id*, or None.
 
         When a session holds several leases (parent + an ``isolation:
-        worktree`` subagent sharing its session id and pid), the one with
-        the most recent heartbeat wins — RAISE-17602. An orphan lease,
-        whose worktree row is gone, answers None so the hook fails open.
+        worktree`` subagent sharing its session id and pid), the most
+        recent heartbeat wins — RAISE-17602. Leases whose worktree is
+        unusable (row gone, ``closed`` or directory missing —
+        ``usable_worktree``) are skipped and the next older one binds
+        (RAISE-18504); none usable answers None so the hook fails open.
         """
-        lease = self._leases.get_latest_for_session(session_id)
-        if lease is None:
-            return None
-        try:
-            return str(self._worktrees.get_by_name(lease.worktree_id).path)
-        except WorktreeNotFoundError:
-            return None
+        for lease in self._leases.iter_live_for_session(session_id):
+            wt = usable_worktree(lease, self._worktrees)
+            if wt is not None:
+                return str(wt.path)
+        return None
 
     def get_repo_root(self) -> str:
         """Return the project root as the repo boundary."""
@@ -94,7 +95,9 @@ def evaluate_pretooluse(
         print(
             f"[cwd-binding] BLOCKED: write to {target_path} rejected.\n"
             f"  Session '{session_id}' is leased to a different worktree.\n"
-            f"  Only writes inside your leased worktree are allowed.",
+            f"  Only writes inside your leased worktree are allowed.\n"
+            f"  Working in a new worktree? Register it (`rai worktree register`)"
+            f" and reopen the session (`rai session start`).",
             file=sys.stderr,
         )
         return 2

{raise_cli-3.1.3 → raise_cli-3.1.4}/src/raise_cli/doctor/checks/graph_annotations.py

@@ -109,7 +109,7 @@ class GraphAnnotationAlwaysNullColumnCheck(DoctorCheck):
             always_null: list[str] = []
             for col in columns:
                 non_null = conn.execute(
-                    f"SELECT COUNT(*) FROM graph_node_annotations WHERE {col} IS NOT NULL"  # noqa: S608  # nosec B608 — col is from a hardcoded schema list
+                    f"SELECT COUNT(*) FROM graph_node_annotations WHERE {col} IS NOT NULL"  # noqa: S608  # nosec B608 — col comes from PRAGMA table_info on the local trusted DB
                 ).fetchone()[0]
                 if non_null == 0:
                     always_null.append(col)

{raise_cli-3.1.3 → raise_cli-3.1.4}/src/raise_cli/doctor/fix.py

@@ -34,14 +34,18 @@ def register_fix(
 
 
 @register_fix("rebuild-graph")
-def rebuild_graph(working_dir: Path) -> bool:
+def rebuild_graph(working_dir: Path, timeout: int = 1800) -> bool:
     """Rebuild the knowledge graph by invoking ``rai graph build``."""
-    result = subprocess.run(
-        [*get_rai_executable(), "graph", "build"],
-        cwd=working_dir,
-        capture_output=True,
-        text=True,
-    )
+    try:
+        result = subprocess.run(
+            [*get_rai_executable(), "graph", "build"],
+            cwd=working_dir,
+            capture_output=True,
+            text=True,
+            timeout=timeout,
+        )
+    except (subprocess.TimeoutExpired, OSError):
+        return False
     return result.returncode == 0
 
 

{raise_cli-3.1.3 → raise_cli-3.1.4}/src/raise_cli/gates/governance/artifacts_gate.py

@@ -33,12 +33,12 @@ import subprocess
 from pathlib import Path
 from typing import ClassVar
 
+from raise_cli.adapters.id_utils import load_id_pattern, work_id_re
 from raise_cli.gates.models import GateContext, GateResult
 
 _SKIP_ENV = "RAISE_GOVERNANCE_SKIP_REASON"
 _STORY_RE = re.compile(r"^story/(s\d+(?:\.\d+)?)/")
-_STORY_KEY_RE = re.compile(r"^story/([A-Z][A-Z0-9]*-\d+)/")
-_BUG_RE = re.compile(r"^bug/([A-Z][A-Z0-9]*-\d+)/")
+# _STORY_KEY_RE and _BUG_RE are now compiled per-evaluate from id_pattern (RAISE-18508)
 
 
 def _git_branch(working_dir: Path) -> str:
@@ -84,6 +84,10 @@ class GovernanceArtifactsGate:
             )
 
         branch = _git_branch(context.working_dir)
+        _id_pattern = load_id_pattern(context.working_dir)
+        _id_re = work_id_re(_id_pattern)
+        _story_key_re = re.compile(rf"^story/({_id_re.pattern})/")
+        _bug_re = re.compile(rf"^bug/({_id_re.pattern})/")
 
         story_m = _STORY_RE.match(branch)
         if story_m:
@@ -104,7 +108,7 @@ class GovernanceArtifactsGate:
                 ),
             )
 
-        story_key_m = _STORY_KEY_RE.match(branch)
+        story_key_m = _story_key_re.match(branch)
         if story_key_m:
             story_key = story_key_m.group(1)
             if _find_story_scope(context.working_dir, story_key) or _find_bug_scope(
@@ -126,7 +130,7 @@ class GovernanceArtifactsGate:
                 ),
             )
 
-        bug_m = _BUG_RE.match(branch)
+        bug_m = _bug_re.match(branch)
         if bug_m:
             bug_key = bug_m.group(1)
             if _find_bug_scope(context.working_dir, bug_key):

{raise_cli-3.1.3 → raise_cli-3.1.4}/src/raise_cli/gates/governance/close_sync_gate.py

@@ -35,6 +35,7 @@ from dataclasses import dataclass
 from pathlib import Path
 from typing import TYPE_CHECKING, ClassVar, Protocol
 
+from raise_cli.adapters.id_utils import load_id_pattern, work_id_re
 from raise_cli.gates.models import GateContext, GateResult
 from raise_cli.release_preflight import ReleasePreflightResult, run_release_preflight
 
@@ -45,7 +46,7 @@ logger = logging.getLogger(__name__)
 
 _SKIP_ENV = "RAISE_CLOSE_SYNC_SKIP"
 _ISSUE_RE = re.compile(r"(?:bug|story)/(RAISE-\d+)/")
-_JIRA_KEY_RE = re.compile(r"^[A-Z][A-Z0-9]+-\d+$")
+# _JIRA_KEY_RE is now compiled per-evaluate from id_pattern (RAISE-18508)
 
 
 class AmbiguousMergeTargetError(Exception):
@@ -391,8 +392,9 @@ class CloseSyncVerificationGate:
                 message=f"Close-sync check skipped: {skip_reason}",
             )
 
+        _key_re = work_id_re(load_id_pattern(context.working_dir))
         issue_key = context.issue_id
-        if issue_key is not None and _JIRA_KEY_RE.fullmatch(issue_key) is None:
+        if issue_key is not None and _key_re.fullmatch(issue_key) is None:
             return GateResult(
                 passed=False,
                 gate_id=self.gate_id,

{raise_cli-3.1.3 → raise_cli-3.1.4}/src/raise_cli/gates/repository_hygiene.py

@@ -15,7 +15,7 @@ GENERATED_GRAPH_OUTPUTS: tuple[str, ...] = (
 )
 
 # Cartridge instance embedding caches (RAISE-15996) — regenerable via
-# `rai cartridge embed`, never committed. A glob pathspec (rather than a
+# `rai graph build`, never committed. A glob pathspec (rather than a
 # per-cartridge path list) so newly added cartridges are covered without
 # an edit here.
 GENERATED_EMBEDDING_CACHES: tuple[str, ...] = ("*.npy",)

{raise_cli-3.1.3 → raise_cli-3.1.4}/src/raise_cli/memory/memory_index.py

@@ -19,7 +19,7 @@ _FRONTMATTER_RE = re.compile(r"^---\s*\n(.*?)\n---", re.DOTALL)
 _HEADER = """\
 # Memory Index
 
-> Auto-generated by `rai session start`. Do not edit manually.
+> Auto-generated by `rai memory ingest --apply`. Do not edit manually.
 """
 
 _TYPE_SECTIONS: dict[str, str] = {
@@ -46,7 +46,8 @@ def _passes_tier1(entry: dict[str, str], *, is_active_scope: bool) -> bool:
                      ``missions/{active_mission_id}/``), or ``critical: true``,
                      or ``mtime`` is within ``_PROJECT_ACTIVE_DAYS``, else
                      Tier-2
-        feedback  -> Tier-1 only when frontmatter marks ``critical: true``
+        feedback  -> Tier-1 by default (opt-OUT); only Tier-2 when
+                     ``critical: false`` is present explicitly (RAISE-18600)
 
     Tier-2 is NOT automatically recoverable via ``hint_oracle.get_hints`` —
     that queries the knowledge graph, which only sees a demoted note after
@@ -55,11 +56,10 @@ def _passes_tier1(entry: dict[str, str], *, is_active_scope: bool) -> bool:
     the mitigation until/unless that ingest is wired into this flow.
 
     The ``critical`` flag is the one deliberate, additive departure from "no
-    new frontmatter field v1": without SOME signal to separate feedback,
-    tiering cannot demote the bulk of `_global/feedback_*` notes and AC-2
-    (<17KB) is unreachable — the field is optional and defaults to Tier-2
-    when absent, so every pre-existing note without it is conservatively
-    demoted, never silently promoted.
+    new frontmatter field v1". For ``feedback``, the field is optional and
+    defaults to Tier-1 when absent (opt-OUT, RAISE-18600) — Claude Code
+    auto-memory never writes ``critical``, so opt-IN silently dropped all
+    notes. Only ``critical: false`` explicitly demotes a feedback note.
 
     RAISE-16217: ``project`` reuses the same ``critical`` flag as an escape
     hatch from the mtime check — mtime measures when the file was written,
@@ -74,7 +74,9 @@ def _passes_tier1(entry: dict[str, str], *, is_active_scope: bool) -> bool:
     if mem_type == "reference":
         return False
     if mem_type == "feedback":
-        return entry.get("critical", "").strip().lower() == "true"
+        # RAISE-18600: opt-OUT — Tier-1 by default; only demote when critical: false is explicit.
+        # Claude Code auto-memory never writes the critical field, so opt-IN silently dropped all notes.
+        return entry.get("critical", "").strip().lower() != "false"
     if mem_type == "project":
         if is_active_scope:
             return True
@@ -133,7 +135,15 @@ def regenerate_memory_index(
 
     result = "\n".join(lines).rstrip() + "\n"
     memory_dir.mkdir(parents=True, exist_ok=True)
-    (memory_dir / "MEMORY.md").write_text(result)
+    memory_file = memory_dir / "MEMORY.md"
+    if memory_file.exists():
+        backup_dir = memory_dir / "_backup"
+        backup_dir.mkdir(exist_ok=True)
+        backup_name = f"MEMORY.md.{int(time.time())}"
+        (backup_dir / backup_name).write_text(
+            memory_file.read_text(encoding="utf-8"), encoding="utf-8"
+        )
+    memory_file.write_text(result, encoding="utf-8")
     return result
 
 

{raise_cli-3.1.3 → raise_cli-3.1.4}/src/raise_cli/onboarding/bootstrap.py

@@ -17,6 +17,7 @@ Example:
 from __future__ import annotations
 
 import logging
+from datetime import UTC, datetime
 from importlib.resources import files
 from importlib.resources.abc import Traversable
 from pathlib import Path
@@ -516,10 +517,12 @@ def sync_methodology(project_root: Path) -> bool:
     framework_dir = get_framework_dir(project_root)
     dest = framework_dir / "methodology.yaml"
 
+    backup: Path | None = None
     if dest.exists():
+        installed_text = dest.read_text(encoding="utf-8")
         try:
-            installed_data = yaml.safe_load(dest.read_text(encoding="utf-8"))
-            installed_version = (installed_data or {}).get("version", 0) or 0
+            installed_data = yaml.safe_load(installed_text)
+            installed_version = int((installed_data or {}).get("version", 0) or 0)
         except Exception:  # noqa: BLE001 — intentional broad catch (grandfathered at BLE001 enablement, RAISE-15490)
             installed_version = 0
 
@@ -527,7 +530,16 @@ def sync_methodology(project_root: Path) -> bool:
             logger.debug("Methodology already current (v%d)", installed_version)
             return False
 
+        # Create timestamped backup before overwriting — RAISE-18509
+        timestamp = datetime.now(tz=UTC).strftime("%Y%m%d-%H%M%S")
+        backup = dest.with_name(f"{dest.name}.bak.{timestamp}")
+        backup.write_text(installed_text, encoding="utf-8")
+
     dest.parent.mkdir(parents=True, exist_ok=True)
     dest.write_text(package_content, encoding="utf-8")
-    logger.debug("Methodology updated to v%d", package_version)
+    logger.info(
+        "Methodology updated to v%d%s",
+        package_version,
+        f" (backup: {backup})" if backup else "",
+    )
     return True

{raise_cli-3.1.3 → raise_cli-3.1.4}/src/raise_cli/onboarding/memory_md.py

@@ -104,7 +104,7 @@ class MemoryMdGenerator:
     def _add_footer(self, lines: list[str]) -> None:
         """Add document footer with timestamp."""
         lines.append(f"*Last updated: {date.today().isoformat()}*")
-        lines.append("*Generated by `rai graph build`*")
+        lines.append("*Generated by `rai init`*")
         lines.append("")
 
     # =========================================================================