@deftai/directive-core 0.56.0 → 0.56.2

package/dist/content-contracts/standards/_helpers.js

@@ -63,6 +63,10 @@ const SKIP_DIRS = new Set([
     "dist",
     "tests",
     ".deft-cache",
+    // node_modules holds third-party markdown (dependency READMEs) that is not
+    // framework content; scanning it produced volatile, version-pinned cases that
+    // broke CI when dependency versions drifted (#1993 follow-up).
+    "node_modules",
 ]);
 const MIGRATION_ARTIFACT_TREES = ["vbrief/migration"];
 export function isMigrationArtifact(rel) {

package/dist/legacy-bridge/sot.js

@@ -37,7 +37,7 @@
  * at freeze time. Leave it `null` otherwise. This is the only edit required to
  * pin the bridge version; the freeze + drift gates pick it up automatically.
  */
-export const LAST_GO_INSTALLER = null;
+export const LAST_GO_INSTALLER = "v0.56.0";
 /** Returns the frozen final Go-installer tag, or `null` while unfrozen. */
 export function lastGoInstaller() {
     return LAST_GO_INSTALLER;

package/dist/preflight-cache/evaluate.js

@@ -148,6 +148,32 @@ function metaFetchedAt(metaPath) {
         return null;
     }
 }
+/**
+ * #1991: report whether a cache entry's upstream issue is terminal-closed.
+ *
+ * Reads the sibling raw.json (the cached issue payload) and returns true only
+ * when its `state` is positively "closed". Unknown / missing state returns
+ * false so we never exclude an entry we are not sure about. Closed issues are
+ * terminal: their `fetched_at` age is irrelevant to dispatch-queue freshness,
+ * and `cache:fetch-all --force` (open-only enumeration) can never refresh them,
+ * so the age gate must not wedge on them.
+ */
+function metaEntryIsTerminalClosed(metaPath) {
+    const rawPath = join(metaPath, "..", "raw.json");
+    if (!existsSync(rawPath))
+        return false;
+    try {
+        const raw = JSON.parse(readFileSync(rawPath, "utf8"));
+        if (raw !== null && typeof raw === "object" && !Array.isArray(raw)) {
+            const state = raw.state;
+            return typeof state === "string" && state.toLowerCase() === "closed";
+        }
+    }
+    catch {
+        /* unknown state -> keep in scope */
+    }
+    return false;
+}
 function loadScopeRules(projectRoot) {
     const defPath = join(projectRoot, "vbrief", "PROJECT-DEFINITION.vbrief.json");
     if (!existsSync(defPath))
@@ -398,10 +424,16 @@ export function evaluate(projectRoot, options = {}) {
         allMetaPaths.length > 0 &&
         scopedMetaPaths.length === 0 &&
         candState === "populated";
-    // Step 5: Oldest in-scope entry age + drift probe (#1886)
+    // Step 5: Oldest in-scope entry age + drift probe (#1886).
+    // #1991: judge age over OPEN entries only. Terminal-closed entries are
+    // excluded because `cache:fetch-all --force` (open-only enumeration) can never
+    // refresh their `fetched_at`, so including them would let a stale closed entry
+    // wedge the gate with no working recovery command.
+    const rawCandidatePaths = scopedMetaPaths.length > 0 ? scopedMetaPaths : allMetaPaths;
+    const ageCandidatePaths = rawCandidatePaths.filter((p) => !metaEntryIsTerminalClosed(p));
     let minFetchedAt = null;
     let minMetaPath = null;
-    for (const p of scopedMetaPaths.length > 0 ? scopedMetaPaths : allMetaPaths) {
+    for (const p of ageCandidatePaths) {
         const ts = metaFetchedAt(p);
         if (ts !== null && (minFetchedAt === null || ts < minFetchedAt)) {
             minFetchedAt = ts;
@@ -411,7 +443,11 @@ export function evaluate(projectRoot, options = {}) {
     const now = nowFn();
     const ageMs = minFetchedAt !== null ? now.getTime() - minFetchedAt.getTime() : Infinity;
     const ageH = ageMs / (1000 * 3600);
-    const stale = ageH > maxAgeHours;
+    // When every candidate is terminal-closed (non-empty input, no open entry to
+    // judge) there is nothing open whose age can be stale -> fresh. The truly
+    // empty-cache case (no entries at all) preserves its prior staleness result.
+    const allCandidatesClosed = minFetchedAt === null && rawCandidatePaths.length > 0;
+    const stale = allCandidatesClosed ? false : ageH > maxAgeHours;
     // Step 5b: --allow-stale bypass
     if (stale && allowStale) {
         const warning = [

package/dist/release-e2e/legacy-bridge-leg.d.ts

@@ -83,17 +83,17 @@ export type BridgeAssetSelection = {
     candidates: string[];
 };
 /**
- * Pick the deft-install bridge binary matching the current host platform/arch.
+ * Pick the installer bridge binary matching the current host platform/arch.
  *
- * Go releases publish one asset per OS/arch (e.g. `deft-install-linux-amd64`,
- * `deft-install-darwin-arm64`, `deft-install-windows-amd64.exe`). Selecting
- * `assets[0]` alphabetically silently picks the wrong binary on a multi-asset
- * release (darwin sorts before linux), producing an exec-format failure on a
- * non-Darwin runner. This resolves the host-matching asset instead and reports
- * a precise outcome when none matches:
- *   - single deft-install asset -> use it (single-binary releases, back-compat);
- *   - prefer an asset whose name carries BOTH the GOOS and GOARCH tokens;
- *   - else fall back to a GOOS-only match (releases that omit the arch suffix);
+ * The release publishes one asset per OS (`install-<os>-<arch>`, with macOS as a
+ * single `install-macos-universal` fat binary). Selecting `assets[0]`
+ * alphabetically silently picks the wrong binary on a multi-asset release,
+ * producing an exec-format failure on a mismatched runner. This resolves the
+ * host-matching asset instead and reports a precise outcome when none matches:
+ *   - single installer asset -> use it (single-binary releases, back-compat);
+ *   - prefer an asset whose name carries BOTH the OS and arch tokens;
+ *   - else fall back to an OS-only match (e.g. the macOS universal binary, which
+ *     carries no arch suffix, or releases that omit the arch suffix);
  *   - else `no-platform-match` so the caller fails loudly rather than guessing.
  */
 export declare function selectBridgeAsset(fileNames: readonly string[], platform?: NodeJS.Platform, arch?: string): BridgeAssetSelection;

package/dist/release-e2e/legacy-bridge-leg.js

@@ -269,11 +269,21 @@ export function assertNpmHybridMigration(workRoot, agentsTemplatePath, seams = {
             `directive migrate -> managed_by: '${NPM_MANAGED_SENTINEL_VALUE}', idempotent)`,
     ];
 }
-/** Map a Node `process.platform` value to the Go release `GOOS` asset token. */
+/**
+ * Map a Node `process.platform` value to the published release OS asset token.
+ *
+ * The release workflow (.github/workflows/release.yml) uploads assets named
+ * `install-<os>-<arch>` where <os> is `windows` / `macos` / `linux` -- NOT the Go
+ * `GOOS` token. In particular macOS publishes a single `install-macos-universal`
+ * binary (the lipo'd fat binary), so a darwin host must look for `macos`, not
+ * `darwin`.
+ */
 function goOsToken(platform) {
     if (platform === "win32")
         return "windows";
-    return platform; // "linux" / "darwin" line up with GOOS as-is
+    if (platform === "darwin")
+        return "macos"; // assets are install-macos-universal
+    return platform; // "linux" lines up as-is
 }
 /** Map a Node `process.arch` value to the Go release `GOARCH` asset token. */
 function goArchToken(arch) {
@@ -282,21 +292,29 @@ function goArchToken(arch) {
     return arch; // "arm64" lines up with GOARCH as-is
 }
 /**
- * Pick the deft-install bridge binary matching the current host platform/arch.
+ * Match an installer binary asset. The release workflow uploads
+ * `install-<os>-<arch>` (e.g. `install-linux-amd64`, `install-windows-amd64.exe`,
+ * `install-macos-universal`); the legacy single-binary / `deft-install-` naming is
+ * also accepted for back-compat. Anchored at the start of the basename so sibling
+ * assets like `checksums.txt` / `README.md` are excluded.
+ */
+const INSTALLER_ASSET_RE = /^(?:deft-)?install(?:-|\.exe$|$)/i;
+/**
+ * Pick the installer bridge binary matching the current host platform/arch.
  *
- * Go releases publish one asset per OS/arch (e.g. `deft-install-linux-amd64`,
- * `deft-install-darwin-arm64`, `deft-install-windows-amd64.exe`). Selecting
- * `assets[0]` alphabetically silently picks the wrong binary on a multi-asset
- * release (darwin sorts before linux), producing an exec-format failure on a
- * non-Darwin runner. This resolves the host-matching asset instead and reports
- * a precise outcome when none matches:
- *   - single deft-install asset -> use it (single-binary releases, back-compat);
- *   - prefer an asset whose name carries BOTH the GOOS and GOARCH tokens;
- *   - else fall back to a GOOS-only match (releases that omit the arch suffix);
+ * The release publishes one asset per OS (`install-<os>-<arch>`, with macOS as a
+ * single `install-macos-universal` fat binary). Selecting `assets[0]`
+ * alphabetically silently picks the wrong binary on a multi-asset release,
+ * producing an exec-format failure on a mismatched runner. This resolves the
+ * host-matching asset instead and reports a precise outcome when none matches:
+ *   - single installer asset -> use it (single-binary releases, back-compat);
+ *   - prefer an asset whose name carries BOTH the OS and arch tokens;
+ *   - else fall back to an OS-only match (e.g. the macOS universal binary, which
+ *     carries no arch suffix, or releases that omit the arch suffix);
  *   - else `no-platform-match` so the caller fails loudly rather than guessing.
  */
 export function selectBridgeAsset(fileNames, platform = process.platform, arch = process.arch) {
-    const candidates = fileNames.filter((name) => /deft-install/i.test(name));
+    const candidates = fileNames.filter((name) => INSTALLER_ASSET_RE.test(name));
     if (candidates.length === 0) {
         return { kind: "none" };
     }
@@ -353,14 +371,14 @@ export function downloadAndRunFrozenBridge(pin, fixtureDir, seams = {}) {
         if (selection.kind === "none") {
             return [
                 false,
-                `frozen bridge ${pin} downloaded but no deft-install asset found in ${assetDir} ` +
+                `frozen bridge ${pin} downloaded but no installer asset (install-*) found in ${assetDir} ` +
                     `(see ${GO_BRIDGE_RELEASES_URL})`,
             ];
         }
         if (selection.kind === "no-platform-match") {
             return [
                 false,
-                `frozen bridge ${pin} downloaded but no deft-install asset matches ` +
+                `frozen bridge ${pin} downloaded but no installer asset matches ` +
                     `${goOsToken(process.platform)}/${goArchToken(process.arch)} ` +
                     `(candidates: ${selection.candidates.join(", ")}; see ${GO_BRIDGE_RELEASES_URL})`,
             ];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deftai/directive-core",
-  "version": "0.56.0",
+  "version": "0.56.2",
   "description": "TypeScript engine core for the Directive framework.",
   "type": "module",
   "main": "./dist/index.js",
@@ -189,6 +189,10 @@
     "./init-deposit": {
       "types": "./dist/init-deposit/index.d.ts",
       "default": "./dist/init-deposit/index.js"
+    },
+    "./dist/*.js": {
+      "types": "./dist/*.d.ts",
+      "default": "./dist/*.js"
     }
   },
   "files": [
@@ -205,8 +209,8 @@
     "provenance": true
   },
   "dependencies": {
-    "@deftai/directive-content": "^0.56.0",
-    "@deftai/directive-types": "^0.56.0"
+    "@deftai/directive-content": "^0.56.2",
+    "@deftai/directive-types": "^0.56.2"
   },
   "scripts": {
     "build": "tsc -b",