@chrono-meta/fh-gate 1.4.37 → 1.4.38

package/CLAUDE.md

@@ -520,6 +520,15 @@ harvest-loop Step 0-b uses this file as its source — relying on LLM memory aft
 ```
 Closing phrase detected ("wrap up", "done", "good work", "end session", etc.)
   → ① Check git diff + unpushed commits (status snapshot)
+  → ①-b Open-PR sweep — `gh pr list --author @me --state open` (+ `gh search prs --author @me
+       --state open` for cross-repo). Classify, **surface-not-auto**: a **self-mergeable** PR
+       (operator's own repo, checks green) → *propose merge now* (never auto-merge — HITL); an
+       **awaiting-external** PR (other repos / corp review) → *surface for tracking only*. Why here:
+       the harness's "마감" ≠ the operator's "마감" — a self-authored PR (PR #111) sat open across
+       sessions with un-integrated skills + count drift because no close step surfaced it. Pairs with
+       the count-consistency check (which now runs at BOTH the local pre-commit hook AND the plugins/**
+       PR-CI merge boundary): the sweep surfaces the PR → merging it → the count-check catches any
+       drift at the merge (fh_signal_2026-06-21, gate-locality paired fix).
   → ② If FH assets changed: harvest-loop
   → ③ Sync local/gitignored session state to your durable companion store, if you keep one
   → ④ Memory hygiene — update stale entries + record new session findings
@@ -542,9 +551,10 @@ Closing phrase detected ("wrap up", "done", "good work", "end session", etc.)
   → ⑤ Card update ← ABSOLUTE LAST: must capture ①–④-b outcomes
   → ⑥ Commit card + push
 ```
-**Card-last guard**: ①–④-b must ALL complete before ⑤ runs. Any new information produced
-during ①–④ (new commits, model changes, new findings) feeds INTO ⑤ — card is never
-written mid-sequence and then left open for more work to accumulate after it.
+**Card-last guard**: ①–④-b (incl. ①-b open-PR sweep) must ALL complete before ⑤ runs. Any new
+information produced during ①–④ (new commits from a merged self-PR, model changes, new findings)
+feeds INTO ⑤ — card is never written mid-sequence and then left open for more work to accumulate
+after it.
 
 **Mid-session card writes are drafts**: If a task (e.g., a calibration run) internally updates
 the card, that is a draft. The close chain always re-runs ⑤ to capture post-draft activities.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chrono-meta/fh-gate",
-  "version": "1.4.37",
+  "version": "1.4.38",
   "description": "FH runtime adapters — run FH governance, skills, and agents via Claude or Codex with machine-parseable gates.",
   "license": "MIT",
   "keywords": [

package/plugins/fh-meta/skills/harness-doctor/SKILL.md

@@ -136,9 +136,23 @@ File: {path}
 | settings.json JSON syntax error | M-tier |
 | Hooks in settings.json (PostToolUse/Stop) that don't fire in Agent View | S-tier or M-tier |
 | Public-surface FH recommendation or default changed — no N-shot measurement evidence traceable in session records or PR body | S-tier |
+| Pre-commit-adjacent gate reads the working tree (cat/glob of a *tracked* path) with no `--staged`/`--cached`/`git show :` on that path, when its verdict is about *what's committed* | S-tier |
 
 Hook divergence verdict: 0 hooks = Normal · 1+ hooks (session-end/Stop) = S-tier · 1+ hooks (PostToolUse file writes or external API) = M-tier (data loss risk in Agent View).
 
+**Index-vs-worktree gate lint** (2026-06-21, gate-locality corollary — `[[feedback_gate_locality_principle]]`):
+a gate whose verdict is about *what is being committed* must read the **staged index**
+(`git ls-files --cached` / `git show :path`), not the working tree (`cat`/glob of a tracked file) —
+else it false-PASSes a commit whose staged content ≠ disk (origin: `count_check.sh` read the worktree
+while the pre-commit hook fired on the index; the sibling `regression_guard` already used `--staged`,
+so the lesson existed but was non-local). Mechanical scan — in the pre-commit hook + the scripts it
+invokes (+ `scripts/*-check.sh`): flag a `cat`/`<`/glob read of a tracked path with no
+`--staged`/`--cached`/`git show :` on that path. **Conditional (NOT universal)**: a gate whose verdict is
+about what *runs/deploys* (pre-push tests, build, an auto-fixer that rewrites the worktree) correctly
+reads the working tree — a line-level `# worktree-intentional:` comment suppresses the flag. FP surface
+(isolated-critic): display/log reads and untracked generated files are not violations → keep advisory
+(S-tier, never M).
+
 ### Step 5. L4 — Connection Diagnosis *(FH only)*
 
 - Tracks with no sync in 30+ days → R-tier

package/scripts/selfcheck.sh

@@ -35,35 +35,13 @@ done
 # Count consistency: stated skill/agent counts vs actual directories.
 # Drift class recurred 4x on 2026-06-10 alone (local_fh_context 26, plugin.json "3 agents",
 # README "5 agents", marketplace.json "3 agents") — this makes the check mechanical and permanent.
-# Active skill = SKILL.md without a deprecation marker (frontmatter `deprecated: true` or
-# "DEPRECATED" in the description block).
-count_active() { # count_active <plugin>
-  local n=0 s
-  for s in plugins/"$1"/skills/*/SKILL.md; do
-    [ -f "$s" ] || continue
-    head -20 "$s" | grep -qE 'deprecated: true|DEPRECATED' || n=$((n+1))
-  done
-  echo "$n"
-}
-count_agents() { ls plugins/"$1"/agents/*.md 2>/dev/null | wc -l | tr -d ' '; }
-
-meta_sk=$(count_active fh-meta); meta_ag=$(count_agents fh-meta)
-com_sk=$(count_active fh-commons); com_ag=$(count_agents fh-commons)
-total_sk=$((meta_sk + com_sk)); total_ag=$((meta_ag + com_ag))
-
-count_check() { # count_check <label> <file> <expected-string>
-  if grep -q "$3" "$2"; then
-    echo "PASS  count: $1"
-  else
-    echo "FAIL  count: $1 — expected \"$3\" in $2 (actual: fh-meta ${meta_sk}sk/${meta_ag}ag, fh-commons ${com_sk}sk/${com_ag}ag)"
-    fail=1
-  fi
-}
-count_check "fh-meta plugin.json"      plugins/fh-meta/.claude-plugin/plugin.json    "${meta_sk} skills + ${meta_ag} agents"
-count_check "fh-commons plugin.json"   plugins/fh-commons/.claude-plugin/plugin.json "${com_sk} skills"
-count_check "marketplace.json fh-meta" .claude-plugin/marketplace.json               "${meta_sk} skills + ${meta_ag} agents"
-count_check "README header"            README.md                                     "${total_sk} skills · ${total_ag} agents"
-count_check "local_fh_context fh-meta" templates/local_fh_context.md                 "(fh-meta, ${meta_sk})"
+# Logic extracted to scripts/count_check.sh so the SAME check also runs at commit time in
+# the pre-commit hook (shift-left, gated on a skills-dir add/remove — fh_signal_2026-06-21
+# gate-locality gap: the check previously lived only here at the publish boundary, so a
+# skill-adding PR could merge with stale counts undetected until the next publish).
+if ! bash scripts/count_check.sh; then
+  fail=1
+fi
 
 # Referenced-path existence: backtick-quoted repo-relative file refs in the always-loaded
 # governance surface (CLAUDE.md + .claude/rules/*.md) must exist. Phantom-reference class