@dzhechkov/cloudru-hub 0.1.10 → 0.1.12

package/.dz-manifest.json

@@ -45,7 +45,7 @@
       },
       {
         "path": "package.json",
-        "sha256": "0c1440677dbf69a57d5991a3d0819c8ebf9c27de3fd47c3423f97f35d6221e99"
+        "sha256": "c40ea35a6a994034e4643310bdd990367abcb033f49279f5349e95fe489b4e1a"
       },
       {
         "path": "src/classification.js",
@@ -87,9 +87,13 @@
         "path": "test/install.test.mjs",
         "sha256": "e986b29346672bf75b384ab6d8657265b8ecb8f62df6563dca317c1fc63fc8fc"
       },
+      {
+        "path": "test/mutation-registry-freshness.test.mjs",
+        "sha256": "99cc5dd9f32ffbfbde09361940190f41b2efd682f687b3db67b5a3b943e66f47"
+      },
       {
         "path": "test/mutation-registry.json",
-        "sha256": "23baf0c1c20afc5bbbfcd72ae9c553ce8a774c25328609e33f43e11cf4ca5581"
+        "sha256": "e56ee7b4ba160f28687423ca113d1bfbcbfdd351fe9d31ad5a19b4d0069dbe3a"
       },
       {
         "path": "test/pack-holds.test.mjs",
@@ -101,5 +105,5 @@
       }
     ]
   },
-  "signature": "wE901DRBN9CH8KrpgeNXwnVanJZcC4giKPry4PxDuNYs+PgAq6e/e1hBmbP+ny1AFIiiBa8T7MmDTo1DDy1UAQ=="
+  "signature": "NhFBu/MKRxi0dLb3A40PAfnOWi8pqEXs1vZ6+3AQIoh7K09B9/BFQXdQnMiCCfTtG1getGxSNK2SCr/57FGIBw=="
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dzhechkov/cloudru-hub",
-  "version": "0.1.10",
+  "version": "0.1.12",
   "licenseHold": {
     "adr": "features/hermes-claude-adaptation/03_adr/001-licence-and-provenance-precondition.md",
     "note": "SATISFIED hold (ADR-001 AM-2, grant recorded 2026-08-12 — see grant-record-2026-08-12.md). The field deliberately STAYS: the dz guard `licence-hold` rule passes a satisfied hold with the trigger in place and keeps verifying LICENSE (no PENDING placeholder, Grant-Confirmation URL), THIRD_PARTY_NOTICES and the SPDX license field on every publish. test/pack-holds.test.mjs goes RED if this field is dropped or the LICENSE grant record is degraded."
@@ -51,12 +51,12 @@
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/djd1m/dz-harness-hub.git",
+    "url": "git+https://github.com/djd1m/dz-harness.git",
     "directory": "packages/@dzhechkov/cloudru-hub"
   },
-  "homepage": "https://github.com/djd1m/dz-harness-hub/tree/main/packages/@dzhechkov/cloudru-hub#readme",
+  "homepage": "https://github.com/djd1m/dz-harness/tree/main/packages/@dzhechkov/cloudru-hub#readme",
   "bugs": {
-    "url": "https://github.com/djd1m/dz-harness-hub/issues"
+    "url": "https://github.com/djd1m/dz-harness/issues"
   },
   "publishConfig": {
     "access": "public"

package/sbom.json

@@ -119,7 +119,7 @@
         },
         {
           "name": "dz:canonical-json-sha256-v2",
-          "value": "0c1440677dbf69a57d5991a3d0819c8ebf9c27de3fd47c3423f97f35d6221e99"
+          "value": "c40ea35a6a994034e4643310bdd990367abcb033f49279f5349e95fe489b4e1a"
         }
       ]
     },
@@ -223,13 +223,23 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/mutation-registry-freshness.test.mjs",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "99cc5dd9f32ffbfbde09361940190f41b2efd682f687b3db67b5a3b943e66f47"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/mutation-registry.json",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "23baf0c1c20afc5bbbfcd72ae9c553ce8a774c25328609e33f43e11cf4ca5581"
+          "content": "e56ee7b4ba160f28687423ca113d1bfbcbfdd351fe9d31ad5a19b4d0069dbe3a"
         }
       ]
     },

package/test/mutation-registry-freshness.test.mjs

@@ -0,0 +1,39 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import test from 'node:test';
+
+const packageRoot = new URL('../', import.meta.url);
+const registry = JSON.parse(
+  readFileSync(new URL('./mutation-registry.json', import.meta.url), 'utf8'),
+);
+
+test('mutation registry entries are complete', () => {
+  for (const entry of registry.entries) {
+    assert.ok(typeof entry.id === 'string' && entry.id.length > 0, 'entry has no id');
+    assert.ok(typeof entry.file === 'string' && entry.file.length > 0, `${entry.id}: no file`);
+    if (entry.uncoverable === true) {
+      assert.ok(typeof entry.reason === 'string' && entry.reason.trim().length > 0,
+        `${entry.id}: uncoverable entry has no reason`);
+      continue;
+    }
+    assert.ok(typeof entry.mutation?.find === 'string' && entry.mutation.find.length > 0,
+      `${entry.id}: ${entry.file}: no mutation.find`);
+    assert.equal(typeof entry.mutation?.replace, 'string',
+      `${entry.id}: ${entry.file}: mutation.replace is not a string`);
+    assert.notEqual(entry.mutation.replace, entry.mutation.find,
+      `${entry.id}: ${entry.file}: mutation.replace equals mutation.find`);
+  }
+});
+
+test('every mutation.find occurs exactly once in its source file', () => {
+  const stale = [];
+  for (const entry of registry.entries) {
+    if (entry.uncoverable === true) continue;
+    const source = readFileSync(new URL(entry.file, packageRoot), 'utf8');
+    const occurrences = source.split(entry.mutation.find).length - 1;
+    if (occurrences !== 1) {
+      stale.push(`${entry.id}: ${entry.file}: mutation.find occurs ${occurrences} time(s)`);
+    }
+  }
+  assert.deepEqual(stale, [], `stale or ambiguous mutation entries:\n${stale.join('\n')}`);
+});

package/test/mutation-registry.json

@@ -46,10 +46,12 @@
       "property": "Post-grant (ADR-001 AM-2) the pack must REMAIN publishable — a stray private:true would silently kill every future publish while CI stays green, so the publishable-state assertion must go red on it. (The Grant-Confirmation URL protection itself lives in LICENSE, which the gate cannot mutate — extensionless file, no parser; its layer-1 coverage is the pack-holds LICENSE assertions plus the dz guard licence-hold rule, both reading LICENSE directly on every run/publish.)",
       "file": "package.json",
       "mutation": {
-        "find": "  \"version\": \"0.1.4\",",
-        "replace": "  \"version\": \"0.1.4\",\n  \"private\": true,"
+        "find": "  \"publishConfig\": {",
+        "replace": "  \"private\": true,\n  \"publishConfig\": {"
       },
-      "minFailing": 1
+      "minFailing": 1,
+      "observed": 1,
+      "maxFailing": 1
     },
     {
       "id": "licence-block-guard-trigger-declared",