@dzhechkov/harness-core 0.8.41 → 0.8.43

package/sbom.json

@@ -25,7 +25,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a33ec597a6b89f2b93c6ce067d7128d213ef9c81bb894245014482d514333efb"
+          "content": "3d7cfbd07df446a36b1f8f93aeeb4d4dfb9c1d5659b0be7fb5788e130b9ff685"
         }
       ]
     },
@@ -405,7 +405,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "721a78bc22d9aae2141fab974f0ca924d527c1be4d42922e4ea55231efea27f6"
+          "content": "c6dcbe1c8ddb221aace37ef1518afc357b2b541a440619265d435d6c4b24cc54"
         }
       ]
     },
@@ -415,7 +415,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "cd4a7d917a2a85365e44c177d172fb2e88ad6e874edc6a4702664b7c6b699575"
+          "content": "c93a224929b4b864f60c0812f526acf7d07a9f4e138aae576687cadafc90f4b5"
         }
       ]
     },
@@ -425,7 +425,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f6774d037b9be34a45a0914fbcffdcba48f4260d75d8eb2bfe59004d00fbbb0b"
+          "content": "a9a6486b8e1de9c1d05a37b391bcb54cb5a257f671ceb5ebe4b7e366a9631ea2"
         }
       ]
     },
@@ -2795,7 +2795,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "15736b2a2c861371a8080cba4cbbdcee31a639d2d0699bd7a39320cc69369781"
+          "content": "bfdd98ddc96aa86d974a84c3533d4698d7b08c2009a8a1b37e7412faccea723c"
         }
       ]
     },
@@ -2805,7 +2805,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "be421d4da63de94de4663251982d88d3521550a3bc8dc14b854bbd417f25425f"
+          "content": "e5877b5c58e9705ec7d076366d303df64e5e25458ddb3bd7372d18784b6ac338"
         }
       ]
     },
@@ -2815,7 +2815,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "996f7de0f2ddaf94a9b13a2db9cabbc937f3f55c1a454894085a80e52dd7b79d"
+          "content": "8a133ab16a53be1f09ea6598fa5e6a58b02b94890bb85c24bca7b38bf7988eec"
         }
       ]
     },
@@ -2825,7 +2825,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "339e385e5aadefaa5da9cc37bde9f53897871b14faba521b9148c9cbb553a85d"
+          "content": "446f2d5f25afba9800ccdc723b456316223d135ce86f1367e258259933ea1845"
         }
       ]
     },
@@ -2915,7 +2915,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ffca045e1a647601b1f83f9bfe0d71bfddc8a61dad22ac1488480b9948e94735"
+          "content": "033e685536165cf7fd76ac8be8b40d7c63dbcadeb8da7c74b8848a7ee4ea0cc9"
         }
       ]
     },
@@ -2925,7 +2925,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ca543835412487b4b41e1759ad70366a0f79e971de097d2e0241c53f49ddeffa"
+          "content": "e144f314424a168aaae260a73ad9a7914cc413f598351aa989abb6714727d1f0"
         }
       ]
     },
@@ -2935,7 +2935,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0b89e2e4a5f4f7888079be7a2d28e6f63fb964d9370074435325023d43ec262b"
+          "content": "6366af45dd192850c5aaa8c38c927366cfc706ec35a28343136694f66998c474"
         }
       ]
     },
@@ -2945,7 +2945,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f5a7841b591f780ee52fe3a4699a27696da918f8d9bc8375c01ce8770be4da05"
+          "content": "473cb3fd816c7f444562e3c8cff515e0a74285ca701fd269a0bdeb1162a15b61"
         }
       ]
     },
@@ -3829,6 +3829,46 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "dist/memory-index-check.d.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "8dc2b00ea8ab550a29d0f5612c3b643724948a1f9ebb3e2c1258d6601836c66f"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/memory-index-check.d.ts.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "e4201e20636b32e62d72039533d2f6ea52da46b3daef52fd2e17e7a028a3fb9b"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/memory-index-check.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "d032d7bbd923ef86a473a37e844fe1f6e8123da2ad9f9cb60f4e868f26f4789a"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/memory-index-check.js.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "b26cf0abe736bac0ecd8c5babb2bce60e19dfb22eaaa13004cb96cf2a8c4c55a"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "dist/model-recommender.d.ts",
@@ -4715,7 +4755,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "8b06e1c57efad5680946faefd804037ac32939155a5b07195bd9cec67d62dcb7"
+          "content": "149d0d95689591db30c433eb84c4f6da93a100296e156a52672bc715ac832991"
         }
       ]
     },
@@ -4725,7 +4765,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "82153f384af5f6b8011b6917a9bcddb87f77f38f3024c2844d426e8a74c36d3c"
+          "content": "93a56cbdfd3acff3e95f42695478f3f04ebed664380506fa1085dbc8f729b0b6"
         }
       ]
     },
@@ -4735,7 +4775,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5b36db320c5d38454545ed2e903b1f039ccb1204dc30a681bc76ea76dcf0878b"
+          "content": "d92c3e7382fc142dd2a53b6be27de3c866be34f9916020c9eaf20bdc3eae17f0"
         }
       ]
     },
@@ -4745,7 +4785,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "95f5e1db5383e576dde66564bd1e83a530372c9f5dac70379afd94395902de76"
+          "content": "6a45842cd3083205cbff2438c60dc3bce98b23b5a87b0586d11114dba931f40d"
         }
       ]
     },
@@ -5195,7 +5235,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "bde357169aebd5fe8fa57c8443827cca62dbac5ecc112a661aa69fd67a78546b"
+          "content": "a015a9f318640511606c2f3f8debba215c9c2189877ebf1a18f2ff3b0766d2c2"
         }
       ]
     },
@@ -5205,7 +5245,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "8bbfbf84bf6fa8a2af347cb36891875bfb3d515fd02b2a606a79dc171df1cfbb"
+          "content": "4b2eaa030c836ebb7884e4c6b90e6f8fe317cfe92b463ddb246f71132cdaaff0"
         }
       ]
     },
@@ -5215,7 +5255,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5cd79637c54813cdd56b5619587b8f929e20760d18b6f62bfcf928d0af8a23a9"
+          "content": "94bf10ad7df83b07b65c0ba15ccb75f00ec6310a4f321d3654bd0f7b0a719d3b"
         }
       ]
     },
@@ -5225,7 +5265,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a3b93aa12f3065659eaa7a59c7dc55adace93901c2087dfc5e67bc30f7d9e666"
+          "content": "0a87ae82e71a5b7448869459891fdc35f2cefe22948e3939721c989b621dbfaf"
         }
       ]
     },
@@ -5955,7 +5995,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "414e69cd6bf21b03ae347907df237313d81865e4b05be2e51fe1eb22e46a6811"
+          "content": "ae652668bcff0fd5846e63fda6f1ffb38155459e1ad563d549ab72f4f1f5d32d"
         }
       ]
     },
@@ -5965,7 +6005,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "8fcef5cd2ea2de50e67086d0b6d0ab1014a4b862df0ca17fd3be3028810f4e41"
+          "content": "6119e91d2af673e5583e0f6ad117af62fd92799f6d8f671332e134f978f7ffe0"
         }
       ]
     },
@@ -5975,7 +6015,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "463e8753ab525e75cf1425b7adc9590456a082f34d2bfdc27c6acc03c5b04bd7"
+          "content": "878a9dd6db7d369edaf7acb1ae6e00dd994ece247e6123980cd4dba0d7c54949"
         }
       ]
     },
@@ -5985,7 +6025,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b89710dfad9d5190092fe10f014b3131cab4be27304e8d0c4cfc147cb0162ace"
+          "content": "6eb19cab2cac968a063a7615e7fccb2a9ca4ac1b3fcf16bfd0f4c0c1506f1f5e"
         }
       ]
     },
@@ -7109,6 +7149,46 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "dist/text-mangling.d.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "fa46a6aa1981ed6569a45c1a4d3ce99404db9ae6ca345f6fd16e3edb2ca00bd8"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/text-mangling.d.ts.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "414ba36e047efbf7460728884bec7509520ed6e7f95887bd423d98cc1e69a776"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/text-mangling.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "538b223f3bf30a0806df7ff68af7432b86972898bbc8932fe03786dc313e271a"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/text-mangling.js.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "184f7f29fc4472c4e6a82deeff6207fa884156d91c8679eaa020f62b46699dc0"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "dist/tg-post.d.ts",
@@ -7229,6 +7309,46 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "dist/tree-sync.d.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "e4ec19e1f9d8228f754a81857c87e42f57df56f6502937d14ded715df2878216"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/tree-sync.d.ts.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "6886d17207d8266e9d15cf349ab78055df10898a532a6d9c8dae3e4d927b5dd9"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/tree-sync.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "fde15c60f67cd507bb53eeb455a430ffc4299677e26cbd08490cd90d2756f73a"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/tree-sync.js.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "341d8ea2442a40ecfecc41cce836a0e2d227f4d32d57a230a2c03be1e23ebd95"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "dist/upgrade.d.ts",
@@ -7519,7 +7639,7 @@
         },
         {
           "name": "dz:canonical-json-sha256-v2",
-          "value": "38ecefe9b741d0a11ef393790c24fc782fbd899b86409b4c5010d7051edf1fe5"
+          "value": "073fc68b426d7cf73bb6d3ba9ec163306e7c8f5945db4d12f2da993c4da15089"
         }
       ]
     },
@@ -7619,7 +7739,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2334e9a0d6a06655c96a47a9c71263f60928de3cf6612899921c4fbeecd1a276"
+          "content": "75f32916bb73b3b8fccdcdfdd20aa5e9c9231a61be7670db83efe912b6250bd0"
         }
       ]
     },
@@ -8229,7 +8349,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "1c9149656fe7a5947918367343c0b4c7769699a62ff0f2590973aca26ac08cb7"
+          "content": "bf2eadba83394c55206f6beb3a6c83ff5d5808654e62e50b001dc306e1f49acf"
         }
       ]
     },
@@ -8259,7 +8379,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "3c8cdea4d2f9ae9844fd381dd9ec93d84d36ce479408c055cc2edf75474a9f3a"
+          "content": "f308da21522b74a4aae4ca85a00e9a332a7497f2b3daded5d34a2f4b44d37273"
         }
       ]
     },
@@ -8483,6 +8603,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "src/memory-index-check.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "c938c3b14d7aa27ef8f3bc9281273f0d8454de2fadd600742c5c0f9632625196"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "src/model-recommender.ts",
@@ -8709,7 +8839,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e52312b3e16012d0830b3807d8d700f8aed247c65b9f8970c9525d812383b413"
+          "content": "4bb4dbe8a712c17a6df93ff86553a53364c66ea5a8b5caf694dc4992cb9e3e4b"
         }
       ]
     },
@@ -8839,7 +8969,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2faa022c6b4fd312c5f42f117453e493934770ca86bebdae3225dee5c61c6912"
+          "content": "07ee047f3fd9904fd13ddea2e95e0a0ff9a6544a754fbd19f3da6cbfff6ea087"
         }
       ]
     },
@@ -9019,7 +9149,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "49e342c2309cef269c78a6c587b80fae9c9992ceb199728c82d5a167fbe1ed4d"
+          "content": "191c5a88e35cb4d1e142cd1a60faa1f397c6a49b5e7d24690a5ea61d722c73de"
         }
       ]
     },
@@ -9313,6 +9443,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "src/text-mangling.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "61b4ef4f7d63fb395922145c9803a55f9dce6d46920fa3bbe280fa1af6235e78"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "src/tg-post.ts",
@@ -9343,6 +9483,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "src/tree-sync.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "51801c51af7fe9f412141afc0c0a26b26d07778584d69e78032751c47501a8df"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "src/upgrade.ts",

package/src/guard.ts

@@ -119,6 +119,7 @@ export interface GuardFacts {
     readonly readmes: readonly { readonly path: string; readonly text: string | null }[];
     readonly coreVersion: string | null;
     readonly cliVersion: string | null;
+    readonly workspaceVersions?: Readonly<Record<string, string | null>>;
   };
   /** Publish-only raw volume facts. Absence preserves the legacy result shape. */
   readonly volume?: VolumeShadowInput;
@@ -161,7 +162,10 @@ export interface GuardFacts {
   readonly featureBacklog?: {
     readonly baseline: string;
     readonly features: readonly { readonly slug: string; readonly createdIso: string; readonly waiver?: string }[];
+    /** Тексты записей бэклога и непустые причины переходов. */
     readonly backlogTexts: readonly string[];
+    /** Летопись ЕСТЬ, но не прочиталась: «<путь>: <причина>». */
+    readonly transitionLogError?: string;
   };
   /** for no-skill-drift: the names that byte-drift between copies (from sweepSkillDrift). */
   readonly drift?: readonly string[];
@@ -428,6 +432,50 @@ function inspectReleaseLines(
       });
       continue;
     }
+    if (evidence.workspaceVersions !== undefined) {
+      const stale: string[] = [];
+      const actual: string[] = [];
+      const versions: string[] = [];
+      const unknown = (detail: string): void => {
+        observations.push({
+          schemaVersion: 'volume-shadow/v1', rule: 'release-line-in-sync' as never,
+          metric: 'release-line-version-sync', scope: readme.path, status: 'unknown', value: null,
+          unit: 'artifact_set', signal: false, operands: {}, method: 'release-line-regex/v1', detail,
+        });
+      };
+      for (const token of found.tokens) {
+        if (!Object.hasOwn(evidence.workspaceVersions, token.name)) {
+          unknown(`пакет \`${token.name}\` не собирается в этом монорепо — сверить не с чем`);
+          continue;
+        }
+        const version = evidence.workspaceVersions[token.name];
+        if (typeof version !== 'string') {
+          unknown(`${token.name} package.json version не прочитана — сверить не с чем`);
+          continue;
+        }
+        actual.push(`${token.name} v${token.version}`);
+        versions.push(`${token.name} v${version}`);
+        if (token.version !== version) {
+          stale.push(`строка релиза говорит ${token.name} v${token.version}, package.json — v${version}`);
+        }
+      }
+      if (found.wrapped) unknown('цепочка перенесена на следующую строку — продолжение вне охвата правила');
+      if (actual.length > 0) {
+        const mismatch = stale.length > 0;
+        const detail = mismatch
+          ? `${readme.path}: ${stale.join('; ')}`
+          : `${readme.path}: строка релиза совпадает с package.json (${versions.join(', ')})`;
+        observations.push({
+          schemaVersion: 'volume-shadow/v1', rule: 'release-line-in-sync' as never,
+          metric: 'release-line-version-sync', scope: readme.path,
+          status: mismatch ? 'outside-reference' : 'within-reference', value: actual,
+          unit: 'artifact_set', signal: mismatch, operands: { actual, expected: versions },
+          method: 'release-line-regex/v1', detail,
+        });
+        if (mismatch) violations.push({ rule: 'release-line-in-sync', severity, detail });
+      }
+      continue;
+    }
     if (expected === null) {
       const missing = [
         ...(evidence.coreVersion === null ? ['harness-core package.json version'] : []),
@@ -499,7 +547,7 @@ export const DEFAULT_RULES: readonly GuardRule[] = [
   { id: 'backlog-covers-features', severity: 'soft', ops: ['publish', 'consolidate'], description: 'каталог фичи, заведённый после базовой даты, назван записью бэклога — либо несёт именованную оговорку с причиной' },
   { id: 'no-secrets', severity: 'hard', ops: ['teach', 'publish'], description: 'no private key or API token in lesson text or a published file' },
   { id: 'readme-consistency', severity: 'soft', ops: ['publish'], description: 'README counts agree (CJM header vs All Commands, etc.)' },
-  { id: 'release-line-in-sync', severity: 'soft', ops: ['publish'], description: 'root and harness-cli README release lines agree with the harness-core and harness-cli package versions' },
+  { id: 'release-line-in-sync', severity: 'soft', ops: ['publish'], description: 'root and harness-cli README release lines agree with the package.json version of every workspace package the line names' },
   { id: 'signature-fresh', severity: 'soft', ops: ['publish', 'code'], description: 'a pack whose files changed in this diff still verifies against its signed .dz-manifest.json — a stale signature is named before publish, not at the gate' },
   { id: 'skills-registrable', severity: 'soft', ops: ['publish'], description: 'every skill directory in a skill pack has a depth-1 SKILL.md (a buried or missing one ships un-registrable — the health-advisor 1.2.0 class)' },
   { id: 'readme-first', severity: 'soft', ops: ['publish'], description: 'a package with a staged version bump must update its own README.md in the same change (README-first)' },
@@ -810,9 +858,10 @@ const CHECKERS: Record<string, (f: GuardFacts, sev: GuardSeverity) => Violation[
     return [{
       rule: 'backlog-covers-features',
       severity: sev,
-      detail: `${uncovered.length} фич(и) заведены после ${ev.baseline} и не названы ни одной записью бэклога: `
+      detail: `${uncovered.length} фич(и) заведены после ${ev.baseline} и не названы ни записью бэклога, ни причиной перехода: `
         + `${uncovered.slice(0, 8).join(', ')}${uncovered.length > 8 ? '…' : ''}`
-        + ` — заведи запись (dz backlog add) ЛИБО впиши оговорку в features/<slug>/README.md строкой`
+        + ` — назови слаг в записи (dz backlog add) ЛИБО в причине закрытия`
+        + ` (dz backlog ship <id> --reason "<слаг>: что сделано") ЛИБО впиши оговорку в features/<slug>/README.md строкой`
         + ` "Backlog: не заведено — <причина>". Оговорка без причины не считается.`,
     }];
   },
@@ -1338,6 +1387,16 @@ export function evaluateGuard(facts: GuardFacts, rules: readonly GuardRule[] = D
   // (missing contents ⇒ nothing reported), but a skip nobody can see is fail-SILENT. One aggregate
   // note, computed AFTER the verdict so it can never block or warn: information, not a violation.
   const notes: string[] = [];
+  // Only `checked`: when the chronicle read fails, the collector still supplies `featureBacklog`
+  // (the error field can only live INSIDE that object), so HAS_INPUT holds and the rule is never
+  // in `notEstablished` with an error to report. The second half was dead by construction —
+  // MEASURED by mutation, Step 8, 22.09.2026: removing it turned no test red.
+  if (checked.includes('backlog-covers-features')) {
+    const error = facts.featureBacklog?.transitionLogError;
+    if (typeof error === 'string' && error.trim() !== '') {
+      notes.push(`backlog-covers-features: летопись переходов не прочитана (${error}) — покрытие проверено только по текстам записей бэклога`);
+    }
+  }
   if (notEstablished.includes('rounds-traced')) {
     const fact = facts.codeCommitsSinceLastRound;
     if (fact?.enabled === false) notes.push('rounds-traced: skipped (.dz/config.json rounds.traced=false)');

package/src/index.ts

@@ -308,6 +308,15 @@ export type {
   StoreMarkWriteOptions,
   StoreResetReceipt,
 } from './store-guard.js';
+export {
+  checkMemoryIndex,
+  MEMORY_INDEX_MAX_BYTES,
+  MEMORY_INDEX_MAX_LINE_CHARS,
+  MEMORY_INDEX_MIN_HOOK_SUPPORT,
+} from './memory-index-check.js';
+export type { MemoryIndexReport, Finding, FindingKind } from './memory-index-check.js';
+export { detectMangledText } from './text-mangling.js';
+export type { MangleKind, MangleSymptom } from './text-mangling.js';
 export { planStoreGuardPrune } from './store-guard-prune.js';
 export type {
   StoreGuardPruneBucket,
@@ -772,7 +781,8 @@ export type {
 } from './event-chain.js';
 export { decideProvenance, environmentCanMintProvenance, publishArgv, matchesPublishFilter, discoverPackages, publishPackages, bumpPatch, compareVersions, findUnpackagedSkills, findUnpublishedWorkspaceFloors, rewriteWorkspaceSpecs, orderByDependencies, syncReadmeVersion, isChangelogEntryLine, changelogRegion, planReadmeVersionSync } from './publish.js';
 export type { ReadmeVersionSyncPlan, ReadmeSyncRewrite } from './publish.js';
-export { RELEASE_LINE_RE, findReleaseLine, rewriteReleaseLine } from './release-line.js';
+export { RELEASE_LINE_RE, parseReleaseLine, findReleaseLine, rewriteReleaseLine, shortPackageName } from './release-line.js';
+export type { ReleaseLineToken, ReleaseLineParse, ReleaseLineMatch } from './release-line.js';
 export * from './course-staleness.js';
 export { fetchAllDownloads } from './downloads.js';
 export type { PackageDownloads, DownloadsReport } from './downloads.js';

package/src/memory-index-check.ts

@@ -0,0 +1,80 @@
+import { Buffer } from 'node:buffer';
+
+export const MEMORY_INDEX_MAX_BYTES = 24_000;
+export const MEMORY_INDEX_MAX_LINE_CHARS = 200;
+// Hook support is a lexical heuristic, not proof that a hook's meaning is preserved.
+// Calibration history on the real index (108 judged lines): 2026-09-23 the coder measured a live
+// minimum of 0 at L83/L85/L114 and 15 lines under 0.5 — 14 were Russian hooks over English files
+// or other word forms (knowledge present), one (L76) linked the WRONG file. The lead rewrote those
+// hooks with words from their files; 2026-09-24 the live minimum is 0.5 exactly (5 lines at the
+// boundary, QE F2). The threshold stays the contract's 0.5; a hook at the boundary passes
+// (`support < min` fails), so the margin there is thin by construction.
+export const MEMORY_INDEX_MIN_HOOK_SUPPORT = 0.5;
+
+export type FindingKind = 'over-size' | 'long-line' | 'broken-link' | 'unindexed-file' | 'unsupported-hook' | 'duplicate-link';
+export type Finding = { kind: FindingKind; line?: number; file?: string; detail: string };
+export type MemoryIndexReport = { bytes: number; lines: number; findings: readonly Finding[] };
+
+/** Pure check: callers supply the index and sibling Markdown files (excluding MEMORY.md). */
+export function checkMemoryIndex(input: {
+  indexText: string;
+  files: ReadonlyMap<string, string>;
+  limits?: { maxBytes?: number; maxLineChars?: number; minHookSupport?: number };
+}): MemoryIndexReport {
+  const { indexText, files, limits } = input;
+  const maxBytes = limits?.maxBytes ?? MEMORY_INDEX_MAX_BYTES;
+  const maxLineChars = limits?.maxLineChars ?? MEMORY_INDEX_MAX_LINE_CHARS;
+  const minHookSupport = limits?.minHookSupport ?? MEMORY_INDEX_MIN_HOOK_SUPPORT;
+  const bytes = Buffer.byteLength(indexText, 'utf8');
+  const findings: Finding[] = [];
+  if (bytes > maxBytes) {
+    findings.push({ kind: 'over-size', detail: `${bytes} bytes exceeds maximum ${maxBytes}` });
+  }
+
+  // Count physical lines; a final newline terminates a line, rather than adding one.
+  const lines = indexText === '' ? [] : indexText.split(/\r?\n/u);
+  if (lines.at(-1) === '') lines.pop();
+  const indexed = new Map<string, number>();
+  for (const [offset, text] of lines.entries()) {
+    const line = offset + 1;
+    // String length measures UTF-16 code units, not bytes or Unicode code points.
+    if (text.length > maxLineChars) {
+      findings.push({ kind: 'long-line', line, detail: `${text.length} UTF-16 code units exceeds maximum ${maxLineChars}` });
+    }
+    const match = /^- \[(.*?)\]\((.*?)\)\s*—\s*(.*)$/u.exec(text);
+    if (match === null) continue;
+    const file = match[2]!;
+    const previous = indexed.get(file);
+    if (previous !== undefined) {
+      findings.push({ kind: 'duplicate-link', line, file, detail: `already linked on line ${previous}` });
+    } else {
+      indexed.set(file, line);
+    }
+    const content = files.get(file);
+    if (content === undefined) {
+      findings.push({ kind: 'broken-link', line, file, detail: 'linked file is absent' });
+      continue;
+    }
+    const tokens = (match[3]!.split(';', 1)[0]!.match(/[\p{L}\p{N}]{4,}/gu) ?? []).map(token => token.toLowerCase());
+    // Fewer than three tokens are too short for this heuristic to judge.
+    if (tokens.length < 3) continue;
+    const lowerContent = content.toLowerCase();
+    const missing = tokens.filter(token => !lowerContent.includes(token));
+    const supported = tokens.length - missing.length;
+    const support = supported / tokens.length;
+    if (support < minHookSupport) {
+      findings.push({
+        kind: 'unsupported-hook', line, file,
+        detail: `hook support ${support} (${supported}/${tokens.length}) below minimum ${minHookSupport}; missing tokens: ${missing.join(', ')}`,
+      });
+    }
+  }
+  for (const file of [...files.keys()].sort()) {
+    if (!indexed.has(file)) findings.push({ kind: 'unindexed-file', file, detail: 'file has no index entry' });
+  }
+  // Whole-index findings precede line findings; ties use kind, then file order.
+  findings.sort((a, b) => (a.line ?? 0) - (b.line ?? 0)
+    || (a.kind < b.kind ? -1 : a.kind > b.kind ? 1 : 0)
+    || ((a.file ?? '') < (b.file ?? '') ? -1 : (a.file ?? '') > (b.file ?? '') ? 1 : 0));
+  return { bytes, lines: lines.length, findings };
+}