@dzhechkov/keysarium 1.7.10 → 1.7.11

package/.dz-manifest.json

@@ -9,7 +9,7 @@
       },
       {
         "path": "README.md",
-        "sha256": "10e8e4f470823f26d20a8cb4b5680dde97fd9654f9545b81de099405bd2dba32"
+        "sha256": "a81456ef7ae79788d7859aab9a2238c541bb61a41b9d289a27ae6992119538db"
       },
       {
         "path": "README.ru.md",
@@ -21,7 +21,7 @@
       },
       {
         "path": "package.json",
-        "sha256": "fec2ebcb8a572ee95f1ac5b41264933d853a01d96b85a826e208a7bf4b49da1b"
+        "sha256": "844c32f67fc8ed8099a388aa53f597a100371c6a693d4b99730a5808593a4843"
       },
       {
         "path": "src/cli.js",
@@ -389,7 +389,7 @@
       },
       {
         "path": "templates/.claude/skills/feature-adr/modules/07-code.md",
-        "sha256": "db79f8d026cc47edd1e5d2f30d0e1455c55c570dd022d549d440985a3e5940a5"
+        "sha256": "d5c03890b2b3a34277c73a14d3d7c97741dec1d6c382e87ee4cc6a5a52d938d7"
       },
       {
         "path": "templates/.claude/skills/feature-adr/modules/08-qe.md",
@@ -487,6 +487,10 @@
         "path": "templates/.claude/skills/feature-adr/scripts/build-coder-context.mjs",
         "sha256": "19c3991bfb5e88205c9ff6d4d44037c136a190581bab199d3928196e4616fe15"
       },
+      {
+        "path": "templates/.claude/skills/feature-adr/scripts/check-code-targets.mjs",
+        "sha256": "bfbad12b54508d5d4c71de640c5e19b3d19317f660e2986d02338ef502f8007e"
+      },
       {
         "path": "templates/.claude/skills/feature-adr/scripts/check-plan-completeness.mjs",
         "sha256": "8b93949ce4f671d932c5389050db3a3e2750efcbed69681d69f392ccf4d2a168"
@@ -1001,5 +1005,5 @@
       }
     ]
   },
-  "signature": "wfYnIS4MAw7T3m282RmpXCeIUVVAi+TDfNI4DmRaHJEy3h/gpJdtlv1TMTRz6dVfMA0fOcxZrJKWBXO+JFEcCg=="
+  "signature": "p0J0fnCC54JAc14pg5UuIgUGtG8u7YLxPlBS6YEXl4qUf5yCqWGZ4g6Bs2Tz8XSfIg1uHkBkAAczkeGaKeBeBw=="
 }

package/README.md

@@ -1,6 +1,6 @@
 # @dzhechkov/keysarium
 
-Current package version: `1.7.10`. <!-- dz:version -->
+Current package version: `1.7.11`. <!-- dz:version -->
 
 Site: https://aicoding.space · Source: https://github.com/djd1m/dz-harness/tree/main/packages/@dzhechkov/keysarium
 
@@ -70,6 +70,11 @@ After installation, open Claude Code in your project directory and start using s
 
 ## What You Get
 
+MEASURED package inventory from `npm pack --dry-run --json` in this package directory.
+Skills are `templates/.claude/skills/*/SKILL.md`; commands are Markdown files in
+`templates/.claude/commands/`. Rules, shards and agent templates are beneath `templates/.claude/`; the library is
+`templates/lib/` and optional documentation is `templates/docs/`. Counts describe bundled files,
+not execution results.
 | Component | Count | Description |
 |-----------|-------|-------------|
 | **Skills** | 12 | `explore`, `frontend-design`, `goap-research-ed25519`, `presentation-storyteller`, `problem-solver-enhanced`, `reverse-engineering-unicorn`, `knowledge-extractor`, `ai-factory-mapper`, `analyst-manual-full`, `edu-site-generator`, `transcript-site-generator`, `feature-adr` |
@@ -84,9 +89,10 @@ After installation, open Claude Code in your project directory and start using s
 Everything is installed into your project's `.claude/` directory and works natively with Claude Code.
 
 > Counts above are MEASURED from the shipped `templates/` tree — reproducer:
-> `npx @dzhechkov/keysarium init --dry-run` (the install plan prints the same numbers, computed at
-> runtime) or, on a real install, `npx @dzhechkov/keysarium list`. If a count here disagrees with the
-> CLI, trust the CLI — it counts files, this table is hand-written.
+> `npx @dzhechkov/keysarium init --dry-run --with-docs` prints these component counts, including
+> optional documentation. On an installed project, `npx @dzhechkov/keysarium list` reports recursive
+> file totals; its skills row counts skill assets, not skill directories, so its units differ from
+> this table. Compare matching units when checking an installed project.
 
 ---
 
@@ -245,7 +251,9 @@ The toolkit automatically detects the domain from the case description and appli
 - Visual palette: Blue / Navy / Silver
 
 ### Retail / E-commerce
-- Latency budget: < 200ms for real-time recommendations
+- ESTIMATED example design target: response latency below 200 ms for real-time recommendations.
+  This is a planning constraint for a retail case, not measured Keysarium performance; validate it
+  against the proposed system and its workload.
 - A/B testing as primary validation method
 - Personalization vs. privacy balance (GDPR / FZ-152)
 - Seasonality and cold-start handling
@@ -530,3 +538,15 @@ Before fallback, host prepare retains independently written pending receipt find
 After a reviewed artifact is renamed or removed, convergence keeps its previously host-bound condition scope in the measured manifest; an absent old path has a null digest. Current discovered paths remain measured. Both prepare and evaluate validate the retained snapshot and reject unbound or unsafe scope paths. The original condition and originating reviewer verification remain required; a rename alone does not close a finding.
 
 QE also measures the exact `.dz/guard.json` policy configuration when it is in the current Git index or selected review base. This includes newly staged and intent-to-add files; base-tracked deletions retain a null digest. Both declared targets and discovered changes use this rule. Untracked files absent from that base do not qualify through older history. Other `.dz/` runtime files remain excluded, and existing path, symlink, freshness and reviewer-ownership checks still apply.
+
+### Pre-code target admission
+
+Step 7 now runs the installed read-only `scripts/check-code-targets.mjs` before literal context,
+code-cache lookup or any coder route, on every entry including auto/force resume. It reuses the
+colocated review manifest authority: strict targets, circular exclusions, discovered source changes,
+path/Git safety and the exact `.dz/guard.json` index-or-selected-base exception are unchanged.
+Missing planned files remain admissible. Workflow requires admitted JSON plus the actual producer's
+terminal `RC_EXIT:0` witness; failure refuses coding/cache access. Admission preserves review state
+and existing `.fa-state/base-ref` (HEAD only when absent); actual coder initialization never resets
+an existing base. Plain uses the same executable helper and mandatory instructions, without an
+automatic dispatcher. Admission observes current bytes; final QE remains the freshness check.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dzhechkov/keysarium",
-  "version": "1.7.10",
+  "version": "1.7.11",
   "scripts": {},
   "description": "AI Case Research Toolkit for Claude Code — full 7-phase pipeline with feature-adr, dream cycles, background workers, multi-platform support, reward learning, and Cloud.ru AI Factory mapping (--ai-factory flag)",
   "main": "src/cli.js",

package/sbom.json

@@ -25,7 +25,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "10e8e4f470823f26d20a8cb4b5680dde97fd9654f9545b81de099405bd2dba32"
+          "content": "a81456ef7ae79788d7859aab9a2238c541bb61a41b9d289a27ae6992119538db"
         }
       ]
     },
@@ -59,7 +59,7 @@
         },
         {
           "name": "dz:canonical-json-sha256-v2",
-          "value": "fec2ebcb8a572ee95f1ac5b41264933d853a01d96b85a826e208a7bf4b49da1b"
+          "value": "844c32f67fc8ed8099a388aa53f597a100371c6a693d4b99730a5808593a4843"
         }
       ]
     },
@@ -979,7 +979,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "db79f8d026cc47edd1e5d2f30d0e1455c55c570dd022d549d440985a3e5940a5"
+          "content": "d5c03890b2b3a34277c73a14d3d7c97741dec1d6c382e87ee4cc6a5a52d938d7"
         }
       ]
     },
@@ -1223,6 +1223,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "templates/.claude/skills/feature-adr/scripts/check-code-targets.mjs",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "bfbad12b54508d5d4c71de640c5e19b3d19317f660e2986d02338ef502f8007e"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "templates/.claude/skills/feature-adr/scripts/check-plan-completeness.mjs",

package/templates/.claude/skills/feature-adr/modules/07-code.md

@@ -26,6 +26,40 @@ opus (complex code generation)
 
 ### 1. Pre-Implementation Checklist
 
+### Current target admission (before any coding)
+
+After prerequisite gates complete, and on **every** Step-7 entry (including auto/force resume),
+run the installed `scripts/check-code-targets.mjs` beside this module **before** context assembly,
+code-cache lookup, delegation or in-session edits. Set `TARGET_HELPER` to that installation's
+absolute helper path, `EXECUTION_PROJECT` to the absolute execution repository root, and
+`FEATURE_DIR` to its absolute `features/<slug>` directory:
+
+```bash
+node "$TARGET_HELPER" --repo "$EXECUTION_PROJECT" --feature "$FEATURE_DIR"
+```
+
+Require the actual command exit 0 and exactly one `fa-code-targets-1` JSON document with
+`status: "admitted"`, a SHA-256 `manifestDigest` and empty `reasons`. Any missing/broken helper,
+command failure, refused/unavailable status or malformed/contradictory output stops coding and
+cache access; repair the named cause first. Do not substitute a narrated success or saved admission.
+For a host relay, the shell must capture the producer's exit immediately and append one terminal
+`RC_EXIT:<integer>` line; Workflow requires both admitted JSON and observed `RC_EXIT:0` and refuses
+missing/duplicate/conflicting witnesses. Keep stderr separate from the bounded relay.
+
+The helper only calls the colocated review checker's `measureManifest(repo, feature, 'qe')`.
+Its strict `- ` target grammar, circular-root exclusions, discovered changed/untracked paths,
+filesystem/Git safety and exact `.dz/guard.json` index-or-selected-base authority remain unchanged.
+K2 remains an additional legacy Markdown-friendly check; admission does not normalize its bullets
+or backticks. Planned missing files/deletions can have null digests. The admission digest records
+this observation, not QE approval or a replacement cache key. Admission never prepares/evaluates
+review lineage or writes source, receipts or `.fa-state`.
+
+The selected baseline is existing `.fa-state/base-ref`, otherwise HEAD. Before actual coding,
+initialize HEAD only if that base file is absent; preserve an existing original selection through
+retries/re-entry. Refuse a failed initialization before edits. Admission does not initialize it.
+This is executable Plain guidance with mandatory orchestration, not an automatic Plain dispatcher.
+An unrelated process can change source after admission; ordinary final QE still checks freshness.
+
 ### Current literal context (plain and delegated coding)
 
 Before coding or delegating, run the installed helper beside this module. Set `CONTEXT_HELPER` to

package/templates/.claude/skills/feature-adr/scripts/check-code-targets.mjs

@@ -0,0 +1,28 @@
+#!/usr/bin/env node
+// Read-only current source admission. This is neither a QE receipt nor a cache key.
+import { createHash } from 'node:crypto'
+import { realpathSync } from 'node:fs'
+import { resolve } from 'node:path'
+import { measureManifest } from './check-review-convergence.mjs'
+
+const schema = 'fa-code-targets-1'
+let result
+try {
+  const args = process.argv.slice(2)
+  if (args.length !== 4 || args[0] !== '--repo' || !args[1] || args[2] !== '--feature' || !args[3]) throw Error('invalid-arguments: expected --repo <project> --feature <feature>')
+  // Match the checker: real execution root, feature resolved from that root, then
+  // its own inside-repo/path/Git checks. Do not reinterpret feature from cwd.
+  const repo = realpathSync(args[1])
+  const feature = resolve(repo, args[3])
+  const manifest = measureManifest(repo, feature, 'qe')
+  result = { schema, status: 'admitted', manifestDigest: createHash('sha256').update(JSON.stringify(manifest)).digest('hex'), reasons: [] }
+} catch (error) {
+  // execFileSync errors include raw subprocess output in message. Keep that out
+  // of the wire; ordinary checker diagnostics are bounded and carry no contents.
+  const reason = error && (error.stdout !== undefined || error.stderr !== undefined)
+    ? 'git-evidence-unavailable: exit=' + String(error.status ?? error.code ?? 'unknown')
+    : String(error?.message || 'measurement-unavailable').slice(0, 4096)
+  result = { schema, status: 'refused', manifestDigest: null, reasons: [reason] }
+}
+process.stdout.write(JSON.stringify(result) + '\n')
+process.exitCode = result.status === 'admitted' ? 0 : 1