simplicio-loop 3.37.0__tar.gz → 3.38.1__tar.gz

{simplicio_loop-3.37.0/simplicio_loop.egg-info → simplicio_loop-3.38.1}/PKG-INFO

@@ -1,83 +1,87 @@
-Metadata-Version: 2.4
-Name: simplicio-loop
-Version: 3.37.0
-Summary: The Universal Looping AI Orchestrator — a runtime-agnostic super-plugin (7 skills) that drains any queue of work end-to-end on any LLM/runtime.
-Author-email: Wesley Simplicio <wesleybob4@gmail.com>
-License: MIT
-Project-URL: Homepage, https://github.com/wesleysimplicio/simplicio-loop
-Project-URL: Repository, https://github.com/wesleysimplicio/simplicio-loop
-Project-URL: Issues, https://github.com/wesleysimplicio/simplicio-loop/issues
-Keywords: ai,agent,orchestrator,llm,claude,cursor,automation,ralph-loop,token-economy,cli
-Classifier: Development Status :: 4 - Beta
-Classifier: Intended Audience :: Developers
-Classifier: License :: OSI Approved :: MIT License
-Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3 :: Only
-Classifier: Topic :: Software Development :: Build Tools
-Classifier: Topic :: Utilities
-Classifier: Operating System :: OS Independent
-Requires-Python: >=3.8
-Description-Content-Type: text/markdown
-License-File: LICENSE
-Requires-Dist: simplicio-cli>=0.16.1
-Provides-Extra: dev
-Requires-Dist: pytest>=7; extra == "dev"
-Requires-Dist: pytest-cov>=4; extra == "dev"
-Provides-Extra: ml
-Requires-Dist: model2vec>=0.3; extra == "ml"
-Requires-Dist: numpy>=1.21; extra == "ml"
-Dynamic: license-file
-
-# simplicio-loop
-
-**The Universal Looping AI Orchestrator** — a runtime-agnostic **super-plugin** (7 skills) that
-drains any queue of work end-to-end on **any LLM / runtime**:
-`discover → implement → verify → merge → close → watch 24/7`, behind safety gates and evidence
-checks, at up to **96% fewer tokens**. Not a chatbot. A worker.
-
-![simplicio-loop](https://raw.githubusercontent.com/wesleysimplicio/simplicio-loop/main/assets/simplicio-loop-hero-2026.png)
-
-## Install
-
-```bash
-pip install simplicio-loop
-```
-
-Then drop the skills + hooks into your project (or globally):
-
-```bash
-simplicio-loop install            # into ./.claude of the current project
-simplicio-loop install --global   # into ~/.claude (all projects)
-```
-
-Now invoke it from your agent runtime (Claude Code, Cursor, Codex, Gemini, …):
-
-```
-/simplicio-loop finish all the open issues
-```
-
-## What you get — 7 skills
-
-| Skill | What it does |
-|---|---|
-| `simplicio-loop` | Unified public entrypoint: orchestrator core + hardened loop behind one command. |
-| `simplicio-tasks` | Legacy alias kept only for compatibility with older installs and saved prompts. |
-| `simplicio-orient` | Terminal-first token economy — output-reduction catalog, tee-cache, signatures-read. |
-| `simplicio-review` | Adversarial review — parallel subagents on distinct rubrics, deduped into one verdict. |
-| `simplicio-compress` | Output + memory compression, byte-preserving identifiers. |
-| `simplicio-autoresearch` | Evolutionary mutate/eval/keep-revert optimizer — yool-guardrailed caps, git-isolated branch, anti-Goodhart gate-first eval. |
-| `simplicio-learn` | Retrospective — durable, deduped lessons written back to memory. |
-
-## Highlights
-
-- **12 runtimes, one protocol** — Claude Code, Codex, VS Code/Copilot, Cursor, Antigravity, Kiro,
-  OpenCode, Gemini, Aider, Simplicio Agent (formerly Hermes), OpenClaw, Orca.
-- **Evidence-gated completion** — never a false "done"; exits only on a verified `<promise>`,
-  cap, spindle handoff, or STOP.
-- **Token economy** — honest "answer concisely" baseline; savings credited only on verified-correct
-  outcomes.
-
-Requires Python 3.8+. The skills, hooks, and installer are pure cross-platform Python.
-
-MIT — part of the [Simplicio](https://github.com/wesleysimplicio) ecosystem.
-Full docs: <https://github.com/wesleysimplicio/simplicio-loop>
+Metadata-Version: 2.4
+Name: simplicio-loop
+Version: 3.38.1
+Summary: The Universal Looping AI Orchestrator — a runtime-agnostic super-plugin (7 skills) that drains any queue of work end-to-end on any LLM/runtime.
+Author-email: Wesley Simplicio <wesleybob4@gmail.com>
+License: MIT
+Project-URL: Homepage, https://github.com/wesleysimplicio/simplicio-loop
+Project-URL: Repository, https://github.com/wesleysimplicio/simplicio-loop
+Project-URL: Issues, https://github.com/wesleysimplicio/simplicio-loop/issues
+Keywords: ai,agent,orchestrator,llm,claude,cursor,automation,ralph-loop,token-economy,cli
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Topic :: Software Development :: Build Tools
+Classifier: Topic :: Utilities
+Classifier: Operating System :: OS Independent
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: simplicio-cli>=0.16.2
+Requires-Dist: tiktoken<1,>=0.12.0
+Provides-Extra: dev
+Requires-Dist: pytest>=7; extra == "dev"
+Requires-Dist: pytest-cov>=4; extra == "dev"
+Requires-Dist: cryptography<50,>=42; extra == "dev"
+Provides-Extra: ml
+Requires-Dist: model2vec>=0.3; extra == "ml"
+Requires-Dist: numpy>=1.21; extra == "ml"
+Provides-Extra: uvloop
+Requires-Dist: uvloop>=0.19; platform_system != "Windows" and extra == "uvloop"
+Dynamic: license-file
+
+# simplicio-loop
+
+**The Universal Looping AI Orchestrator** — a runtime-agnostic **super-plugin** (7 skills) that
+drains any queue of work end-to-end on **any LLM / runtime**:
+`discover → implement → verify → merge → close → watch 24/7`, behind safety gates and evidence
+checks, at up to **96% fewer tokens**. Not a chatbot. A worker.
+
+![simplicio-loop](https://raw.githubusercontent.com/wesleysimplicio/simplicio-loop/main/assets/simplicio-loop-hero-2026.png)
+
+## Install
+
+```bash
+pip install simplicio-loop
+```
+
+Then drop the skills + hooks into your project (or globally):
+
+```bash
+simplicio-loop install            # into ./.claude of the current project
+simplicio-loop install --global   # into ~/.claude (all projects)
+```
+
+Now invoke it from your agent runtime (Claude Code, Cursor, Codex, Gemini, …):
+
+```
+/simplicio-loop finish all the open issues
+```
+
+## What you get — 7 skills
+
+| Skill | What it does |
+|---|---|
+| `simplicio-loop` | Unified public entrypoint: orchestrator core + hardened loop behind one command. |
+| `simplicio-tasks` | Legacy alias kept only for compatibility with older installs and saved prompts. |
+| `simplicio-orient` | Terminal-first token economy — output-reduction catalog, tee-cache, signatures-read. |
+| `simplicio-review` | Adversarial review — parallel subagents on distinct rubrics, deduped into one verdict. |
+| `simplicio-compress` | Output + memory compression, byte-preserving identifiers. |
+| `simplicio-autoresearch` | Evolutionary mutate/eval/keep-revert optimizer — yool-guardrailed caps, git-isolated branch, anti-Goodhart gate-first eval. |
+| `simplicio-learn` | Retrospective — durable, deduped lessons written back to memory. |
+
+## Highlights
+
+- **12 runtimes, one protocol** — Claude Code, Codex, VS Code/Copilot, Cursor, Antigravity, Kiro,
+  OpenCode, Gemini, Aider, Simplicio Agent (formerly Hermes), OpenClaw, Orca.
+- **Evidence-gated completion** — never a false "done"; exits only on a verified `<promise>`,
+  cap, spindle handoff, or STOP.
+- **Token economy** — honest "answer concisely" baseline; savings credited only on verified-correct
+  outcomes.
+
+Requires Python 3.8+. The skills, hooks, and installer are pure cross-platform Python.
+
+MIT — part of the [Simplicio](https://github.com/wesleysimplicio) ecosystem.
+Full docs: <https://github.com/wesleysimplicio/simplicio-loop>

{simplicio_loop-3.37.0 → simplicio_loop-3.38.1}/README.md

@@ -10,7 +10,7 @@
   <a href="#-the-7-skills--5-accelerators"><img src="https://img.shields.io/badge/skills-7-7C3AED" alt="7 skills"></a>
   <a href="#-source-adapters"><img src="https://img.shields.io/badge/source%20adapters-5-00E08A" alt="5 source adapters"></a>
   <a href="#-15-runtimes-one-protocol"><img src="https://img.shields.io/badge/runtimes-15%20(3%20garantidos%2B12%20best--effort)-2563EB" alt="15 runtimes (3 guaranteed + 12 best-effort)"></a>
-  <a href="#-the-49-extension-points"><img src="https://img.shields.io/badge/extension%20points-49-00E08A" alt="49 extension points"></a>
+  <a href="#-the-49-extension-points"><img src="https://img.shields.io/badge/extension%20points-50-00E08A" alt="50 extension points"></a>
   <a href="#-token-economy"><img src="https://img.shields.io/badge/savings-unverified-888888" alt="Savings — unverified"></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-blue" alt="License"></a>
   <a href="https://discord.gg/wM6tr7xVb"><img src="https://img.shields.io/badge/Discord-Join%20Simplicio-5865F2?logo=discord&logoColor=white" alt="Join the Simplicio Discord"></a>
@@ -87,11 +87,11 @@ That architecture lets one goal become a governed delivery system: from a single
 <!-- visual-story:end -->
 
 <!-- stage-agents-roadmap:start -->
-## 🤖 Roadmap — a concrete agent behind every stage
+## 🤖 Shipped: a concrete agent behind every stage
 
-> **Implementation status:** this is the tracked target architecture in [#422](https://github.com/wesleysimplicio/simplicio-loop/issues/422)–[#436](https://github.com/wesleysimplicio/simplicio-loop/issues/436), not a claim that every stage agent and tracker adapter already ships. The canonical GitHub lifecycle comment exists today; the full mandatory stage-reporting gate is tracked in [#433](https://github.com/wesleysimplicio/simplicio-loop/issues/433).
+> **Implementation status:** [#422](https://github.com/wesleysimplicio/simplicio-loop/issues/422)–[#436](https://github.com/wesleysimplicio/simplicio-loop/issues/436) — the whole EPIC — is **closed and shipped** as of v3.37.0, including the full mandatory stage-reporting gate ([#433](https://github.com/wesleysimplicio/simplicio-loop/issues/433)) and the multi-tracker interface ([#436](https://github.com/wesleysimplicio/simplicio-loop/issues/436)). v3.38.0 adds the multi-agent coordination layer on top (`scripts/coordinator.py`, `scripts/pr_dod_review.py`) — see [§ What's new](#-whats-new-in-v3380--the-multi-agent-coordination-release).
 
-The portable driver will assign one accountable agent to intake/planning, implementation, safety,
+The portable driver assigns one accountable agent to intake/planning, implementation, safety,
 delivery, feedback/recovery, and final completion audit. Review fans out to four independent agents
 — security/correctness, code quality, runtime reproduction, and blast radius — before it can
 reconverge. Every transition emits an event and receipt; the completion auditor accepts evidence,
@@ -148,24 +148,79 @@ rules, sandbox E2E matrix, and acceptance criteria are specified in
 treated as connected merely because a CLI exists, and no remote acknowledgment is ever invented.
 <!-- stage-agents-roadmap:end -->
 
-## 🆕 What's new in v3.35.0
-
-- **Real multi-device execution** — atomic claim/discovery over a live remote queue, worker heartbeat + cancellation, receipt verification on *both* the client and the server, and an installable worker/supervisor/queue-server console-script surface, plus a `doctor.py` `LOCAL_ONLY` / `REMOTE_READY` / `REMOTE_MEASURED` tri-state so "remote" is never claimed without a passing cross-process proof.
-- **Real multi-LLM routing** — a deterministic model registry/router with fallback and circuit-breaker, task-contract-driven routing fields, and a genuine, verified `codex exec` run producing an auditable `runtime-execution-receipt` (Claude-side execution is implemented too, gated only by org policy in this environment — never faked).
-- **Evidence-gated delivery, wired for real** — fail-closed receipt verification (content/hash/schema/freshness), heartbeat-guarded dispatch, a merge executor that reconciles *after* merging (not just after opening the PR), chaos-tested crash recovery, and a cross-receipt commit-binding gate that closes a real "two green receipts, two different commits" gap.
-- **Security hardening** — an enumerated environment allow-list, short-lived HMAC credentials with `jti` revocation and per-operation scoping, DNS/TLS-pinned transport proven against live redirect/rebinding/proxy-injection attempts, structured audit logging, and CODEOWNERS coverage of every security-critical module.
-- **Delivery truth** — no more presumed proof: paginated live GraphQL queries, byte-level release-artifact verification (real SHA-256 + `gh attestation verify`), branch-reachability/issue-state/freshness checks, and a real concurrency + crash + fault-injection test matrix (including crashes *during* the external call itself).
-- **Quality gate, for real** — an independent watcher that re-derives every quality-matrix lane (including coverage drift) instead of trusting a self-reported receipt, all 192 test files sorted into a real unit/integration/system/regression convention, and measured coverage raised from 16.6% / 9.4% to 28.45% / 24.02% (global / critical) on the widened scope.
-- **A local, CI-less determinism story** — since GitHub Actions isn't available on this repo, a fail-closed local pre-push gate now stands in as the mandatory, impossible-to-bypass check, and the release pipeline (version bump → build → checksum → SBOM → local provenance → install-smoke) runs end-to-end against the real checkout with `scripts/release_rehearsal.py`.
-- **A transactional installer** — backup-before-mutate, real rollback, N-1→N upgrade tests, explicit consent gating before installing a service/proxy, and a machine-readable mutation manifest.
-- **Repository governance** — LFS-scoped media, a budget gate blocking accidental build-artifact commits, a canonical version/skill/claims manifest, and a dry-run-only history-migration plan (the actual rewrite stays a separate, explicit maintainer action, by design).
-
-See [`CHANGELOG.md`](CHANGELOG.md) for the full list and the [v3.35.0 release](https://github.com/wesleysimplicio/simplicio-loop/releases/tag/v3.35.0) for signed artifacts (wheel, sdist, SBOM, provenance).
+## 🆕 What's new in v3.38.0 — the multi-agent coordination release
+
+This release is about one hard problem that only shows up once **several agent sessions work the
+same repo at once**: how does a session know what's already claimed, what's already merged-but-
+incomplete, and what to do with its own idle time instead of duplicating a sibling's work? Every
+item below was built, tested, and shipped against the **live, multi-session state of this very
+repo** — not a synthetic scenario.
+
+- **`scripts/coordinator.py` — the decision core.** Given today's GitHub state (open-issue claim
+  comments + merged PRs), it returns one deterministic action per issue: `OWN` (nothing claimed
+  yet), `CONTINUE_OWN` (you're already the latest claimant), `DEFER_ACTIVE_CLAIM` (a sibling
+  session claimed it recently — don't duplicate), `RECLAIM_STALE` (that claim went cold, safe to
+  pick up), or `VERIFY_PARTIAL` (a PR already merged for this issue, but it's still open — check
+  what's actually done before assuming either "nothing happened" or "it's finished"). It also
+  raises a `duplicate_risk` flag the instant two sessions claim the same issue close together.
+  Caught, live, on day one: two sessions independently building a findings collector for the same
+  issue under two different filenames.
+- **`scripts/pr_dod_review.py` — the reviewer for idle time.** When every open issue is already
+  claimed, a session's highest-leverage move isn't to wait — it's to check the open PRs against
+  this repo's own bar: the 7-dimension Definition of Done (implementation, unit/integration/
+  system/regression tests, a performance benchmark, ≥85% coverage) and the underlying issue's
+  frozen acceptance-criteria checklist. `check --post` posts a mechanical, line-by-line verdict as
+  a PR comment instead of a vibe-based approval. Proven against a real, already-merged "MVP slice"
+  PR: it correctly flagged **17 of 17** acceptance criteria on the parent epic as still unresolved.
+- **`scripts/finding_collector.py` — durable, deduplicated defect memory (issue #466, phase 1).**
+  A `simplicio.finding/v1` record per distinct defect, fingerprinted so the *same* underlying bug —
+  seen by any agent, any run, any timestamp — collapses into one record with an occurrence count
+  instead of spawning duplicate noise. No GitHub calls yet; that's the next phase.
+  `scripts/evolution.py` (taxonomy + priority + dedup) and `scripts/workflow_topology.py` (DAG
+  diff + validator) shipped as the first MVP slices of the companion Continuous Evolution (#467)
+  and Adaptive Architecture (#468) epics; `scripts/agent_replication.py` did the same for Elastic
+  Replication (#469) — admission control and winner-selection for speculative duplicate execution.
+- **`references/multi-agent-coordination.md` + `references/background-verification.md`** — two new
+  documented conventions wired straight into `SKILL.md`'s triage step: check coordinator ownership
+  before touching an issue, review PRs instead of idling once everything's claimed, and launch
+  slow verification commands (tests/`claims_audit.py`) in the background so a turn keeps making
+  progress instead of watching a progress bar.
+- **Mandatory post-merge cleanup (`scripts/worktree_cleanup.py`, #484)** — a merged branch's local
+  worktree and branch ref are now removed automatically instead of accumulating across sessions.
+- **CLI contract additions (WI-471)** — a `preflight` subcommand and a `--json` flag on `status`,
+  so an external supervisor can machine-check readiness before arming a run.
+- **Continuous Findings wiring (WI-466)** — the completion gate now genuinely consults the finding
+  store, and a store/repo consistency bug was found and fixed in the same pass.
+- **Two real regressions caught and fixed on `main` itself, live, this release cycle** — a PR that
+  silently deleted a function definition (breaking `loop_progress.py`'s own selftest) merged once,
+  and a squash-merge race then reintroduced the exact same broken code onto `main` a second time.
+  Both were found by actually running the affected script, not by trusting a green PR description —
+  the whole reason `coordinator.py` and `pr_dod_review.py` exist now.
+- **Carried forward from v3.37.0's Portable Stage Agents epic (#422–#436)** — a concrete,
+  independently verifiable agent behind every stage (intake/planner, implementation, four-way
+  review panel, safety gate, delivery, feedback/recovery, completion auditor), a conformance suite
+  proving contract/receipt parity across all 15 runtimes, human-readable agent identities, and
+  `simplicio-runtime` promoted to a required bound operator exactly like `simplicio-mapper`/
+  `simplicio-dev-cli`.
+- **Test suite grew to 231 files** (from 192), all still sorted into the unit/integration/system/
+  regression convention `docs/SCRIPTS_INVENTORY.md` tracks; `scripts/claims_audit.py` stayed at
+  14/14 through every merge this cycle.
+
+**What this means for you, concretely:** if you run `simplicio-loop` across more than one session
+or machine against the same repo, it now actively protects you from the two failure modes that
+actually happen in practice — two agents quietly redoing the same work, and a "done" PR that
+merged but left the real issue only partially solved. Neither used to be visible; both now are,
+mechanically, every triage pass.
+
+See [`CHANGELOG.md`](CHANGELOG.md) for the full list and the
+[v3.38.0 release](https://github.com/wesleysimplicio/simplicio-loop/releases/tag/v3.38.0) for
+signed artifacts (wheel, sdist, SBOM, provenance).
 
 ## ⚡ TL;DR
 
 **simplicio-loop** is a runtime-agnostic **super-plugin** — one autonomous looping
-orchestrator (invoked as **`/simplicio-loop`**) plus **five satellite skills** — that turns any
+orchestrator (invoked as **`/simplicio-loop`**) plus **six satellite skills and five
+accelerators** — that turns any
 strong LLM (Claude, Codex, Copilot, Gemini, Cursor, local models) into a self-driving worker. You
 point it at a body of work — *"finish all the open issues"*, *"clear the CI queue"*, *"drain the Jira board"* — and it
 runs the whole lifecycle on its own:
@@ -231,8 +286,8 @@ If you are an agent/runtime entering this repo cold, read `llms.txt` first for t
 ## 📘 Official capability record
 
 The complete, official roster of what `simplicio-loop` ships — every capability below is **real,
-runnable, and tested** (`python3 scripts/check.py`: claims-audit 9/9 + 245 passed). Each links to its
-deep section and its worker.
+runnable, and tested** (`python3 scripts/check.py`: claims-audit 14/14 + 2,544 tests collected
+across 231 files). Each links to its deep section and its worker.
 
 | Capability | What it does | Proof / worker | Details |
 |---|---|---|---|
@@ -244,6 +299,10 @@ deep section and its worker.
 | 🔒 **Fail-closed safety gate** (`action_gate`) | A `PreToolUse`/git-pre-push hook that **mechanically blocks** force-push, history rewrite, mass-delete, destructive DDL, infra teardown, and secret-laden commits/pushes — Step 5 made executable, not prose | `hooks/action_gate.py` · `selftest` 15/15 | [§ Safety](#-safety-non-negotiable) |
 | 🔬 **Local verification** | A test suite (worker selftests + an **e2e of the loop driver** proving evidence-gated exit) + a **claims-audit** (referenced scripts exist · counts consistent · `_bundle ≡ source`) — all local, **no paid CI** | `scripts/check.py` · `scripts/claims_audit.py` · `tests/` | [§ Tests & local checks](#-tests--local-checks-no-paid-ci) |
 | ✅ **Honest savings** | The savings line is now **evidence-gated, not mandatory** — a number is shown only with a measured receipt (clamp/signatures/cache/`deterministic_edit`/ledger); never fabricated | token-economy contract | [§ Token economy](#-token-economy) |
+| 🤝 **Multi-agent coordinator** (`coordinator.py`) | Decides `OWN` / `CONTINUE_OWN` / `DEFER_ACTIVE_CLAIM` / `RECLAIM_STALE` / `VERIFY_PARTIAL` per issue from live claim comments + merged PRs, so two sessions never duplicate the same work | `scripts/coordinator.py` · `selftest` 10/10 | [§ The full flow](#️-the-full-flow--from-demand-to-delivery) |
+| 🕵️ **PR DoD/AC reviewer** (`pr_dod_review`) | When every issue is claimed, reviews open PRs against the 7-dimension Definition of Done + the issue's own acceptance-criteria checklist — a mechanical verdict, not a vibe-based approval | `scripts/pr_dod_review.py` · `selftest` 13/13 | [§ The full flow](#️-the-full-flow--from-demand-to-delivery) |
+| 🐞 **Finding collector** (`finding_collector`) | Fingerprinted, deduplicated defect memory — the same underlying bug collapses into one record with an occurrence count, no matter how many agents/runs observe it | `scripts/finding_collector.py` · `selftest` 9/9 | [§ Official capability record](#-official-capability-record) |
+| 🔔 **Release check** (`release_check`) | Compares the local canonical version against the latest GitHub release and tells the driving LLM to update instead of quietly working on a stale checkout — fail-open when offline | `scripts/release_check.py` · `selftest` 8/8 | [§ Install & use](#-install--use) |
 
 Two loop **modes** make termination explicit: **converge** (a single hard task — ends on the
 evidence-gated `<promise>` or a stall escalation) vs **drain** (a queue — ends when the source
@@ -353,27 +412,39 @@ to delivering merged, evidenced work, then looping 24/7 for more.
 flowchart LR
   IN["Intent: issue · task · queue"] --> CONTRACT["1 · Freeze task contract"]
   CONTRACT --> MAP["2 · Map source + normalize"]
-  MAP --> PLAN["3 · Dependency DAG + acceptance criteria"]
-  PLAN --> ROUTE{"4 · Ready task?"}
+  MAP --> COORD{"3 · Coordinator decide (multi-session)"}
+  COORD -->|"OWN / CONTINUE_OWN / RECLAIM_STALE"| PLAN["4 · Dependency DAG + acceptance criteria"]
+  COORD -->|"DEFER_ACTIVE_CLAIM (all issues)"| REVIEW["PR DoD/AC review — never idle"]
+  COORD -->|"VERIFY_PARTIAL"| RECHECK["Verify what's actually merged before continuing"]
+  RECHECK --> PLAN
+  REVIEW --> IN
+  PLAN --> ROUTE{"5 · Ready task?"}
   ROUTE -->|"solo / small"| SOLO["Targeted lane"]
   ROUTE -->|"parallel / medium+"| FAN["Bounded fan-out"]
   FAN --> A["Isolated worktree A"]
   FAN --> B["Isolated worktree B"]
   FAN --> C["Isolated worktree C"]
-  SOLO --> VERIFY["5 · Test + impact/flow evidence"]
+  SOLO --> VERIFY["6 · Test + impact/flow evidence"]
   A --> VERIFY
   B --> VERIFY
   C --> VERIFY
   VERIFY --> RECEIPT["Watcher challenge + evidence receipt"]
-  RECEIPT --> ORACLE{"6 · Completion oracle"}
+  RECEIPT --> ORACLE{"7 · Completion oracle"}
   ORACLE -->|"pending / blocked"| RECOVER["Journal · checkpoint · rollback · backlog-only maintenance"]
   RECOVER --> PLAN
-  ORACLE -->|"verified / measured"| DELIVER["7 · Source sync · PR · merge"]
-  DELIVER --> MEMORY["8 · Ledger · wiki · durable attempt memory"]
-  MEMORY --> WATCH["9 · Re-feed · watcher · STOP path"]
+  ORACLE -->|"verified / measured"| DELIVER["8 · Source sync · PR · merge"]
+  DELIVER --> CLEANUP["Post-merge worktree/branch cleanup"]
+  CLEANUP --> MEMORY["9 · Ledger · wiki · durable attempt memory"]
+  MEMORY --> WATCH["10 · Re-feed · watcher · STOP path"]
   WATCH -->|"new work"| IN
 ```
 
+**Multi-agent coordination (new in v3.38.0).** Step 3 is the mechanical answer to "is a sibling
+session already on this?" — `scripts/coordinator.py` decides from live GitHub state, never a guess.
+When every candidate issue comes back deferred, the loop doesn't idle: it reviews open PRs against
+the DoD + acceptance criteria (`scripts/pr_dod_review.py`) instead. Full detail:
+[`references/multi-agent-coordination.md`](.claude/skills/simplicio-loop/references/multi-agent-coordination.md).
+
 **Planning gate (issue #284).** Steps 1–3 above are not just guidance — `simplicio_loop/planning_gate.py`
 makes them a fail-closed mechanical barrier between "claimed" and "mutating": every real
 `arm_run()` self-builds a `planning-receipt.json` binding run/attempt/contract/plan/lease/fence
@@ -642,9 +713,18 @@ Pass **`--minimal`** only for headless/CI to skip the heavy deps + the machine s
 ### Update
 
 ```bash
-bash scripts/update.sh [<runtime>]    # git pull → reinstall skills/hooks/operators → restart services
+python3 scripts/release_check.py check   # is a newer release published? — never auto-updates
+bash scripts/update.sh [<runtime>]       # git pull → reinstall skills/hooks/operators → restart services
 ```
 
+`release_check.py` compares the local canonical version (`pyproject.toml`) against the latest
+GitHub release tag and prints an explicit `MEASURED|release-check: a newer release is available …`
+line (exit 10) when you're behind — the agent/LLM driving `simplicio-loop` is meant to read that
+line and run the update itself, not silently keep working on a stale checkout. It never applies the
+update — a detected-but-declined update is never auto-installed — and it fails open (`UNVERIFIED|`,
+exit 0) when `gh`/network is unavailable, so an offline dev environment never looks broken. `doctor`
+(below) runs the same check as one OPTIONAL line in its report.
+
 `update.sh` stashes local edits, fast-forwards `main`, reinstalls from the fresh source, restarts the
 launchd/systemd services so they run the new code, and prints the live stack + savings.
 
@@ -745,6 +825,12 @@ opt-in capabilities you reach for when the task calls for them.
 
 ---
 
+## ⭐ Star History
+
+[![Star History Chart](https://api.star-history.com/svg?repos=wesleysimplicio/simplicio-loop&type=Date)](https://star-history.com/#wesleysimplicio/simplicio-loop&Date)
+
+---
+
 ## 📄 License
 
 MIT

{simplicio_loop-3.37.0 → simplicio_loop-3.38.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "simplicio-loop"
-version = "3.37.0"
+version = "3.38.1"
 description = "The Universal Looping AI Orchestrator — a runtime-agnostic super-plugin (7 skills) that drains any queue of work end-to-end on any LLM/runtime."
 readme = "PYPI.md"
 requires-python = ">=3.8"
@@ -24,17 +24,18 @@ classifiers = [
 # The simplicio-loop drive requires the operator package (`simplicio-cli`), which exposes
 # `simplicio-dev-cli` and also brings the survey binary `simplicio-mapper` transitively.
 dependencies = [
-  "simplicio-cli>=0.16.1",
+  "simplicio-cli>=0.16.2",
+  "tiktoken>=0.12.0,<1",
 ]
 
 # Optional: the real embedding backend for `simplicio-cli semantic --ml` / `simplicio-cli rag --ml`.
 # The native engine itself is stdlib-only; this only enables embedding-based semantic dedup +
 # meaning retrieval. `pip install "simplicio-loop[ml]"`.
 [project.optional-dependencies]
-# Dev/test: the suite ALSO self-runs on bare python3 (`python3 scripts/check.py`), so pytest is
-# only a convenience for nicer output / IDE integration — never required.
-dev = ["pytest>=7", "pytest-cov>=4"]
+# Dev/test dependencies used by the local quality gate and secure-transport fixtures.
+dev = ["pytest>=7", "pytest-cov>=4", "cryptography>=42,<50"]
 ml = ["model2vec>=0.3", "numpy>=1.21"]
+uvloop = ["uvloop>=0.19; platform_system != 'Windows'"]
 
 [project.urls]
 Homepage = "https://github.com/wesleysimplicio/simplicio-loop"
@@ -43,11 +44,15 @@ Issues = "https://github.com/wesleysimplicio/simplicio-loop/issues"
 
 [project.scripts]
 simplicio-loop = "simplicio_loop.cli:main"
+simplicio-hub = "simplicio_loop.hub_daemon:main"
 # issue #286 step 11: the multi-device remote-worker protocol's server + worker + supervisor
 # are genuinely installable binaries, not source that only runs from a git checkout.
 simplicio-remote-queue-server = "simplicio_loop.remote_queue_server_cli:main"
 simplicio-remote-worker = "simplicio_loop.remote_worker_cli:main"
 simplicio-remote-worker-supervisor = "simplicio_loop.remote_worker_supervisor_cli:main"
+# issue #516: observability/enforcement CLI for the #498 process-supervisor contract
+# (status/top/queue/cancel/drain/reports over the #514 ProcessSpec/Lease/Result adapter).
+simplicio-process-supervisor = "simplicio_loop.process_enforcement_cli:main"
 
 [tool.setuptools]
 packages = ["simplicio_loop"]
@@ -67,3 +72,9 @@ exclude_lines = [
   "pragma: no cover",
   "if __name__ == .__main__.:",
 ]
+
+[tool.pytest.ini_options]
+addopts = ["--import-mode=importlib"]
+# The bundle/plugin trees mirror source files and are validated by mirror-parity.
+# Collect the canonical tests once instead of executing mirrored probes repeatedly.
+testpaths = ["tests"]

{simplicio_loop-3.37.0 → simplicio_loop-3.38.1}/setup.cfg

@@ -1,4 +1,4 @@
-[egg_info]
-tag_build = 
-tag_date = 0
-
+[egg_info]
+tag_build = 
+tag_date = 0
+

{simplicio_loop-3.37.0 → simplicio_loop-3.38.1}/simplicio_loop/__init__.py

@@ -13,6 +13,6 @@ try:
     try:
         __version__ = _v("simplicio-loop")
     except PackageNotFoundError:
-        __version__ = "3.37.0"
+        __version__ = "3.38.1"
 except Exception:  # pragma: no cover
-        __version__ = "3.37.0"
+        __version__ = "3.38.1"