stratless 0.3.5 — the worker: the work moves off your terminal

Phase 2 of the cold-start build. The machinery no longer lives inside the command you typed — it
lives in ONE background worker that commands merely wake. Nothing runs when there is nothing to
do; there is no daemon.

Changed

• update is now a doorbell. It wakes the background worker and — in a real terminal —
  watches it, printing the same progress lines as before. The difference shows only at the edges:
  Ctrl-C (or closing the terminal) detaches the display; the work continues and the profile
  still lands. The detach message prints the whole kill ladder: watch with status, stop
  everything with stop. The after-session hook rings the same doorbell and returns instantly.
• stop now stops a RUNNING refresh too, within seconds. The off switch means spending halts
  now — not after the current build finishes. Killing never wastes what was spent: every judgment
  already made is banked, and restarting re-reads at most one chunk.
• status shows a live worker (running now judging 12/31 · pid N) and labels the last
  run honestly (stopped by you, or failed with the reason).
• Kill-safe to one chunk, for real (C3). Judged verdicts are now banked per streamed session
  as they land — a crash, sleep, or kill loses at most the twelve-turn chunk in flight, never the
  whole batch. (The Phase 2 gauntlet test caught the old behavior losing the entire batch.)
• Typos refuse instead of quietly running something else. stratless update --npw used to run
  a plain update while you believed you had forced a rebuild. Unknown flags and stray arguments
  now exit loudly, with a did-you-mean — and a mistyped command (stratless updat) gets the same
  courtesy, suggesting the nearest verb.
• The borrowed model pin is absolute. A stage pinned to sonnet (mining, writing, grading) or
  haiku (judging) now runs on that model or REFUSES — it never silently falls back to your account
  default. Left unchecked, a failed pin could land the priciest stage on the priciest model (if you
  default to Opus) at frontier rates, invisibly. Override stays yours via STRATLESS_SYNTH_MODEL;
  a CLI without JSON output still answers, but on the same pinned model.

Added

• Every run hands you its receipt. A finished update closes with what it actually spent —
  this run: 1.2M tokens · ≈ $0.21 at API rates · claude-haiku-4-5 ×31 · claude-sonnet-5 ×3 —
  tokens first, models by their ground-truth names (which model RAN, not which was asked for).
  Refused and stopped runs get their receipt too; a run that spent nothing owes none. status
  keeps the most recent run's receipt (last run spend), so the hook's silent spends stay
  readable. Announced before, metered during, accounted after.
• The artifact-shape lint (the second half of the tool-less-borrow guarantee, pulled forward
  after a chatter reply was loaded as a real HUMAN.md in the wild): a profile that opens with
  assistant chatter, or a pattern-era profile without its section headings, is REFUSED like an
  invented number — nothing malformed ever loads.
• The flat-memory walk (C1): the archive is read one transcript at a time, newest first —
  memory stays flat whether your history holds 200 exchanges or 20,000. This is the read the
  cold-start release (0.4.0) will stand on.

---

Published to npm over Trusted Publishing (OIDC, no token) with Sigstore provenance — verify with npm audit signatures.