@dzhechkov/p-replicator 1.5.18 → 1.6.0

package/.dz-manifest.json

@@ -5,7 +5,7 @@
     "files": [
       {
         "path": "CHANGELOG.md",
-        "sha256": "542dc8f6022012996f67733680d6e482ba485016c2ab439979a5ef50ad082253"
+        "sha256": "837815d5116c5e117c1249a414b7ae81927969d74a3b44685e8dc8a8dd3a6d8e"
       },
       {
         "path": "KNOWN_LIMITATIONS.md",
@@ -17,23 +17,23 @@
       },
       {
         "path": "MULTIPLATFORM_ROADMAP.md",
-        "sha256": "655097e8dc7d1506b0760ac60635325415b005abf2c97643d93577d9bd12c85b"
+        "sha256": "a6fed19895b2c93a1be5f3416f021b2d5165449ff6dadd9bf6d96ba8c0491192"
       },
       {
         "path": "README.md",
-        "sha256": "8be51476830ef5fdd3125b4884c323547fdb96428e21aac52a7907d338fa0f70"
+        "sha256": "6b863dbfd298c1788097d53a87425030a341684f67bbb5a81a90c192c0c90d22"
       },
       {
         "path": "README/eng/01_quickstart.md",
-        "sha256": "b63c09b54f5d5d01fdb2cf8552785eabf67ebecf648630e72ffc4fadcb30243e"
+        "sha256": "8fe8dc32ddb603bfae2c71c8bafed51dd4d291a3f32942c06a049cab25dbf490"
       },
       {
         "path": "README/eng/02_user_guide.md",
-        "sha256": "85849a14aa46bd9e529bc2f84e53382b7515db4019fe9d0755761e657077b734"
+        "sha256": "307cf6c2a9bd6ebee678e47c0a13c15fdaaebcfdc9a17a0a08fe7892ed1afee0"
       },
       {
         "path": "README/eng/03_admin_guide.md",
-        "sha256": "d4b27da460ea8ac622aed4f684980373fd357b2edb203218e54718bb13f13c5c"
+        "sha256": "e4c5c190383570dd0f9853ec18221d0ccd24a85a4a42575e819c7b283fc42077"
       },
       {
         "path": "README/eng/04_api_reference.md",
@@ -41,7 +41,7 @@
       },
       {
         "path": "README/eng/05_architecture.md",
-        "sha256": "bacd91f3877c685c3b5ae2baf0cac2c43764e118887675c2671bf0c958756740"
+        "sha256": "6cd5056f9e315bd910187925f0085910fa6905490559a58cb3c604d7bd63ebc4"
       },
       {
         "path": "README/eng/06_troubleshooting.md",
@@ -53,19 +53,19 @@
       },
       {
         "path": "README/eng/README.md",
-        "sha256": "b14daf9cf17f384af11b803606af7d2a2df28f509b34674bf9d46ba27e8caee6"
+        "sha256": "19cddc3b70de2f8ae440d7dfcd5268cf195df32e35a0b17f861f727df76cc3ca"
       },
       {
         "path": "README/ru/01_quickstart.md",
-        "sha256": "b66c24e6ab262fe55d4b897b0d9bf56787ef0ae07c8437ca7f21f8c934783e85"
+        "sha256": "3d5b2a8dd9c9f7c0f35ae7b280ed22d865086a07a5f07866ce496549d4623e9b"
       },
       {
         "path": "README/ru/02_user_guide.md",
-        "sha256": "c9e00214b39a964d0d98a14b3d28b8d5313c24934c05f646cef32ae75242deb6"
+        "sha256": "20b8f60be4755fcdacfb845b8bfc9f12cc26bd999fefb5f98ab6dd0a2948f1c7"
       },
       {
         "path": "README/ru/03_admin_guide.md",
-        "sha256": "e2d33b9637d2b6fcbf0cb5004cb00d8b625f4f5a2d5c357620cf229536c24678"
+        "sha256": "c7923e865819d4d544f64066a4ef9ab729266dc2e11eeaed5e736f0357fcd2e8"
       },
       {
         "path": "README/ru/04_api_reference.md",
@@ -73,7 +73,7 @@
       },
       {
         "path": "README/ru/05_architecture.md",
-        "sha256": "9a67023b60c9eb6a1bcbbb3b359da73463d903668c5425ed68494024eff0c356"
+        "sha256": "f11803686a9b0d1cfe526d36d5ad3fe7e527b73bdf5bbcd2bb9e8207abbd9a94"
       },
       {
         "path": "README/ru/06_troubleshooting.md",
@@ -85,7 +85,7 @@
       },
       {
         "path": "README/ru/README.md",
-        "sha256": "45cafce56e84483c8cb66d542ba9b1f6594a44d333bbc3b70a14f282874b8aa3"
+        "sha256": "b98cda9099c19497ddcdc1b58d17d62a75ef73cf6c6e64beac723b0e0363b661"
       },
       {
         "path": "README/ru/html/build.js",
@@ -93,7 +93,7 @@
       },
       {
         "path": "README/ru/html/index.html",
-        "sha256": "36aea5a412f883049599882198845771c3c77092dd10f1fd1e93422117907d42"
+        "sha256": "31baddce9668e9802bc042c8a0df326061c1db7662f64df6861f7ed419890b88"
       },
       {
         "path": "README/ru/html/script.js",
@@ -109,7 +109,7 @@
       },
       {
         "path": "package.json",
-        "sha256": "8ba9dc6c39fd9eebb793a3b7ed7e6baee80222ae6dc5d33a02efc7d4d670b382"
+        "sha256": "8ae12d621050c3a4f992bc853b4ec961af5fbf32bf9c3fee639a182b546992de"
       },
       {
         "path": "src/cli.js",
@@ -141,11 +141,11 @@
       },
       {
         "path": "src/utils.js",
-        "sha256": "96702826927362de5b2030da81a37589c7822e7582f58ae996d0eb5e7f3fdd57"
+        "sha256": "ec9d1695f4b0ef2ce0b3ee6908e90900ebac0941a32ea48df673f6cd20fc1387"
       },
       {
         "path": "templates/.claude/agents/doc-validator.md",
-        "sha256": "a46651637239b4f078b5c3022ea2bf9ef4fb84ab2eb529cdc41273c42deaddf5"
+        "sha256": "e57950758cd4764b2cb54b3f1905567e9dbc1ed20ac6ecd30998614894689f4f"
       },
       {
         "path": "templates/.claude/agents/harvest-coordinator.md",
@@ -153,7 +153,7 @@
       },
       {
         "path": "templates/.claude/agents/product-discoverer.md",
-        "sha256": "ea341407faa6f31a152508945b24e650c5a71459bbc9e1f91cdab7621660a54d"
+        "sha256": "f74683fe91b4357d6fb4024ed47b4d5a129ea6375ca6b223dee97176d74acf1c"
       },
       {
         "path": "templates/.claude/agents/replicate-coordinator.md",
@@ -185,7 +185,7 @@
       },
       {
         "path": "templates/.claude/commands/next.md",
-        "sha256": "c417f86626a91d716cb9b5ed98e1445a0820055b22947da33fc90fc65fe974b2"
+        "sha256": "1e4984306c3aa80dfc8734dc1c975dfe5fdf2cf6396ddd759e4c7635646107b8"
       },
       {
         "path": "templates/.claude/commands/plan.md",
@@ -193,7 +193,7 @@
       },
       {
         "path": "templates/.claude/commands/replicate.md",
-        "sha256": "27fb978d1b4f19169d48795c5ce1a8ad4e5b6a03e9ae478b64857cdeb9d8b4bb"
+        "sha256": "13f5e2ebe109f33b63cbcd75e3cf1b94224ab066aba1b0cb10cf34f668144a8a"
       },
       {
         "path": "templates/.claude/commands/run.md",
@@ -201,31 +201,39 @@
       },
       {
         "path": "templates/.claude/commands/start.md",
-        "sha256": "8ebd4393caf6fb453bf607022e6209b963847dd61cb95a78e7bb5f98e039c774"
+        "sha256": "4aaebc10ca8d607d4b2b43883d82392e9788c2f183878a49fc0d1ed54d07ee95"
       },
       {
         "path": "templates/.claude/hooks/autocommit-insights.cjs",
-        "sha256": "36fa95a1cfa74098f2f222ee7038d1bd22478a42070746614eb9e2d8514cad61"
+        "sha256": "5e7cef87b24d457f25315d79fe15f0dfaf94d9269495d638817f0faee2593c6f"
       },
       {
         "path": "templates/.claude/hooks/autocommit-plans.cjs",
-        "sha256": "ac831fa835557e268a73e7a039977194c638689c3c65ce8cba427535d88ec3b2"
+        "sha256": "9bb404b7f4fda5de03e6c2f16bf8939a79ec1944538767b04bcccc6cf50cc03d"
       },
       {
         "path": "templates/.claude/hooks/autocommit-roadmap.cjs",
-        "sha256": "ab78ae2f163400865bee520b73b7624094bf6c32c63478dfd5d6a1715ca7f135"
+        "sha256": "f4dcc9ffd9a3aed91dd56e011e699fcf8af903cc81594e4ab1ef61e5432a36ad"
+      },
+      {
+        "path": "templates/.claude/hooks/check-ports.cjs",
+        "sha256": "e5f2d2bd8899df27c2dfedf76128467becae1868210eb8525a1bad2869a8c78f"
       },
       {
         "path": "templates/.claude/hooks/session-insights.cjs",
-        "sha256": "cbb60842149fb90aaa968576f99d0695c92628377c3ca3120d28c5ff0bc692f2"
+        "sha256": "46f8357e3886a6d54db1ab4af969b9b8643ae5937ba59038a5651ffbcfd0d30e"
       },
       {
         "path": "templates/.claude/hooks/state-update.cjs",
-        "sha256": "39a20e59278e457f4ec4eadd66f3699fee43c79695934a44a4cdca0c18f6cec2"
+        "sha256": "47146a76b768ac2273abe8f2f017856a0e28b45afaf90048148da417dd19604e"
       },
       {
         "path": "templates/.claude/hooks/statusline.cjs",
-        "sha256": "7e3e230f68b2ba76908127887e7f75428599dbd62826be62ed626fc054ca1e65"
+        "sha256": "1eca683baf67a17874dc5db6dfe38eb11944f550c66f46330bce0f794732245f"
+      },
+      {
+        "path": "templates/.claude/rules/docker-ports.md",
+        "sha256": "bef41c25c875479341f68783c2d64572800d4710f55401e55519245f03d22efb"
       },
       {
         "path": "templates/.claude/rules/feature-lifecycle.md",
@@ -241,7 +249,7 @@
       },
       {
         "path": "templates/.claude/rules/replicate-pipeline.md",
-        "sha256": "2eaa40ece405b506f0b94818013e2e235be6c9fb3bd73e964dd675afc34b6535"
+        "sha256": "b65e802d32a1e50bdfcd0cfc79c78e9234eac48a94f0cd1f5647cf4fea6c0162"
       },
       {
         "path": "templates/.claude/rules/skill-interface-protocol.md",
@@ -249,7 +257,7 @@
       },
       {
         "path": "templates/.claude/settings.json",
-        "sha256": "1afea754d42e3b2aa7cee0a17a8347ba594427b40daa293ce7b21f3dfd0607c3"
+        "sha256": "b1df6cf834ccfa227f3318a70862115c17838ab31253e9d8d89381b7763e61fd"
       },
       {
         "path": "templates/.claude/skills/brutal-honesty-review/README.md",
@@ -293,11 +301,11 @@
       },
       {
         "path": "templates/.claude/skills/cc-toolkit-generator-enhanced/modules/01-detect-parse.md",
-        "sha256": "45441d525ff5092766b9ab743e783dbf3b25e9f9515bdda888c8ca1cc3e0a6f0"
+        "sha256": "85c72f6daa5af88b4a7ff520a387f47a7c92b81cb1f0757550c8b58100a97be6"
       },
       {
         "path": "templates/.claude/skills/cc-toolkit-generator-enhanced/modules/02-analyze-map.md",
-        "sha256": "231ac3c42b800e26d035562633da79abd77ea90540e8d9245cc9360867dc91ab"
+        "sha256": "5939f3fe6ae542fabb8e665dc373a20410d8de917362fcb3ecac504286f41836"
       },
       {
         "path": "templates/.claude/skills/cc-toolkit-generator-enhanced/modules/03-generate-p0.md",
@@ -337,11 +345,11 @@
       },
       {
         "path": "templates/.claude/skills/cc-toolkit-generator-enhanced/references/enhanced-recommendations.md",
-        "sha256": "0a828ed5302a3436ab9c21cdeeb2ebf47329031106dfb242517ca04f226033dd"
+        "sha256": "657e35db0cb77d3a9d1a4d01215a9b8d50441dd863593bee3a84f62aad8b00bc"
       },
       {
         "path": "templates/.claude/skills/cc-toolkit-generator-enhanced/references/extended-mapping.md",
-        "sha256": "0c906fe8622ffa147a09af592ab75a8b1034b7634501e576da58e858477c3141"
+        "sha256": "5e87c91956eabc70b4a1084b47b2c9a20ede18bb245735812ead956eafabf3af"
       },
       {
         "path": "templates/.claude/skills/cc-toolkit-generator-enhanced/references/maturity-integration.md",
@@ -357,7 +365,7 @@
       },
       {
         "path": "templates/.claude/skills/cc-toolkit-generator-enhanced/references/templates/ddd-agents.md",
-        "sha256": "208619880fe6fea47b25f5f31a7fc5ef27f2a80b2235c2f8c1aa2b4140f48363"
+        "sha256": "c91f81da197a072b57378fd0018eea26c35d909a558bdca6f070eb60153c97b3"
       },
       {
         "path": "templates/.claude/skills/cc-toolkit-generator-enhanced/references/templates/ddd-hooks-commands.md",
@@ -365,11 +373,11 @@
       },
       {
         "path": "templates/.claude/skills/cc-toolkit-generator-enhanced/references/templates/ddd-skills.md",
-        "sha256": "9cbdbc251026297ba30dca8b4311906a85ba7a8bf85fd35c41aa1dc358ec7574"
+        "sha256": "2f1019d5da7d695983aee79186a47fcefccbfa24db48219c04f9bb9feb757d3a"
       },
       {
         "path": "templates/.claude/skills/cc-toolkit-generator-enhanced/references/templates/enhanced-claude-md.md",
-        "sha256": "6121b4bec44fa726a8b70d6680c17ecf428fdf937bb3e13d9ee7e3b56ad33913"
+        "sha256": "db6898b7202b84965cbff9195a6ce780cadd6aeb64adae3fbfd951443a6bc43d"
       },
       {
         "path": "templates/.claude/skills/cc-toolkit-generator-enhanced/references/templates/feature-lifecycle-ent.md",
@@ -381,7 +389,7 @@
       },
       {
         "path": "templates/.claude/skills/cc-toolkit-generator-enhanced/references/templates/feature-suggestions.md",
-        "sha256": "455fd4e4147f15175e1bb2dbfeda53d6ae0a4ac3f8d985544d0db5d24eba935d"
+        "sha256": "3b1c20d2394e180720447416767fbfae99168cf9ca846bf64907f6fe5cd906da"
       },
       {
         "path": "templates/.claude/skills/cc-toolkit-generator-enhanced/references/templates/insights-system.md",
@@ -393,7 +401,7 @@
       },
       {
         "path": "templates/.claude/skills/cc-toolkit-generator-enhanced/references/templates/start-command.md",
-        "sha256": "67cf259f8d22c1b94c5242c6fd48d557e97581beb162cf176eb2e6851bab1962"
+        "sha256": "e037a7e73e65e5216f95f27a255009c4c2b95f0f2d6b7c575d70813efac34438"
       },
       {
         "path": "templates/.claude/skills/explore/SKILL.md",
@@ -589,7 +597,7 @@
       },
       {
         "path": "templates/.claude/skills/requirements-validator/SKILL.md",
-        "sha256": "baa5cf7257de711ad64d4233ff5a26eb4573fb75a3392fda9a75c2c2e5a73ef9"
+        "sha256": "e50c5269ad181966a81c14ef596946cea67cbf4b8f8f648c90fd66ecad948933"
       },
       {
         "path": "templates/.claude/skills/requirements-validator/assets/templates/bdd-feature-template.feature",
@@ -605,7 +613,7 @@
       },
       {
         "path": "templates/.claude/skills/requirements-validator/references/scoring-system.md",
-        "sha256": "79d421c79ab2cc594e685c27178368495774a1154e2b65cdbcd2a94cc28e9dbb"
+        "sha256": "49afe072f31f5b4f9a33f6b59487244f494b0f5587b6cc10c797c4de59510114"
       },
       {
         "path": "templates/.claude/skills/requirements-validator/references/smart-criteria.md",
@@ -665,7 +673,7 @@
       },
       {
         "path": "templates/.claude/skills/sparc-prd-mini/SKILL.md",
-        "sha256": "2555c4de0edce73f6c2f637db1d839900c7fa27a7d25ca88ec0cf5a70a47325d"
+        "sha256": "50e829635b828b444487e4b04219518a595dbd4b94f91b66fb03ddf4a7b21712"
       },
       {
         "path": "templates/.claude/skills/sparc-prd-mini/references/sparc-methodology.md",
@@ -681,11 +689,11 @@
       },
       {
         "path": "tests/e2e/lifecycle.test.js",
-        "sha256": "16213dcaf6b930a41bf2cb3329638fb032651083f0e497e0632f3d9920788c70"
+        "sha256": "fd4af066e9e20c7c0f711337f3afdfd2f8e13ec8c845f8784befeb0785270e14"
       },
       {
         "path": "tests/snapshot/baseline.json",
-        "sha256": "1c3d036235c8bc167b173a38f86ef49bc0769596cacd301813adf6f87ce0f628"
+        "sha256": "cb6c08b5c5fb7ea837fb6c054d1094f8c4878a88ac866ec67a3862f8c7fb2a07"
       },
       {
         "path": "tests/snapshot/templates.test.js",
@@ -693,13 +701,85 @@
       },
       {
         "path": "tests/snapshot/update-baseline.js",
-        "sha256": "cff277584cd8447e95e9a9cda47788a65243b2232acfa05516229df734c686e4"
+        "sha256": "1f50d0c2ec86f1c865ee6ed8c59725e57c397d487b7a24baf051dc5d4b294459"
+      },
+      {
+        "path": "tests/unit/adr-decision-coverage.test.js",
+        "sha256": "34f9bf0700b4c45fb905f606567f2a6d3ba152f8f1db29f479963667b298ede4"
+      },
+      {
+        "path": "tests/unit/adr-scanner-contract.test.js",
+        "sha256": "08c8b7d862ae0ddcd72116462458b71d3fe29b09cbaf08fa6a824e22ad6985c8"
+      },
+      {
+        "path": "tests/unit/autocommit-deletion.test.js",
+        "sha256": "87ebe50e164cfa3aeda3d4f04e6b6aa98ab8af44711cbeb94252d770c07ad8ad"
+      },
+      {
+        "path": "tests/unit/check-ports.test.js",
+        "sha256": "72d9eeaa8c47d83fba867722f4b8efc8d079e2d9649e1a20abff46571c2f6f15"
+      },
+      {
+        "path": "tests/unit/db-port-rule.test.js",
+        "sha256": "a97c913ccba8da16f7b8ef3094cac4ba8b499df2d644b3094c58945306d98c09"
+      },
+      {
+        "path": "tests/unit/detect-parse-anchor.test.js",
+        "sha256": "ecfa57bfcb34e12081009d0bdf4be83a6eab7a8b7a6a0dc27c1cb02ae5561be0"
+      },
+      {
+        "path": "tests/unit/external-dependency-check.test.js",
+        "sha256": "d85109f8e86648d61fc17d0128e9d4881950a70641c246e667d7e54ffc1f0273"
+      },
+      {
+        "path": "tests/unit/growth-module-b2b-gate.test.js",
+        "sha256": "7bb5b39a637becbea9813744a5d649b19c6bd8a9b18045c971bcfd842852ea84"
+      },
+      {
+        "path": "tests/unit/hooks-project-anchored.test.js",
+        "sha256": "2fa5b44982d72701d7a8486ac24ee3a91c6fa6123ef7303a0e065bf1e60987d7"
+      },
+      {
+        "path": "tests/unit/hooks-report-failures.test.js",
+        "sha256": "35d3fca74c22e1bc88b6fbb25f172b66a21561a947e2b6e90a366d5a854376b8"
+      },
+      {
+        "path": "tests/unit/pipeline-file-ownership.test.js",
+        "sha256": "dd5b6e2ddb3078fb5ccafed6c55a6079bbd20d73fd5c2dacbb988263ceeda806"
+      },
+      {
+        "path": "tests/unit/roadmap-one-schema.test.js",
+        "sha256": "3e7ac9dbc9796a791fc95c43b4346c6da2455f3c0ace45bbc440502c5957d3dc"
+      },
+      {
+        "path": "tests/unit/sparc-reconciliation.test.js",
+        "sha256": "4020c623cb351d42b3b184d23194d48cf04e4a3ce8d95ff96c4261ade75632c9"
+      },
+      {
+        "path": "tests/unit/spec-pseudocode-traceability.test.js",
+        "sha256": "fc01a561458f35e789a6d22ce3def23f3553493ba9f06493666306c603fa3c8c"
+      },
+      {
+        "path": "tests/unit/statusline-honest-labels.test.js",
+        "sha256": "3188892491df4133566c20fc336b8d5ceedac7e14c7053088be2e3bee3e10594"
+      },
+      {
+        "path": "tests/unit/statusline-two-roots.test.js",
+        "sha256": "73eb6c542058b3969e97ac0fb7f363e5b2d396bd5328b4cb186fba102aa3fd01"
+      },
+      {
+        "path": "tests/unit/sync-templates-guard.test.js",
+        "sha256": "75e8e0d0d2dfc16f14c586d399b5c9c075cc3a0494c558fe39d8528516185cfe"
       },
       {
         "path": "tests/unit/utils.test.js",
-        "sha256": "6c33d6c3ed2406831dc00b228bcdb143636c39b3b967d42a04c53fb99a77170c"
+        "sha256": "2ccc68f9a91d188d56ebad77c4a64653cc5ff7aec093a739eb707774a37e1732"
+      },
+      {
+        "path": "tests/unit/validation-gate-teeth.test.js",
+        "sha256": "d4f42a26b67b2fa1dfa8db9984c301a7d7e91657e5e2cdabb1bab307c766138d"
       }
     ]
   },
-  "signature": "B2xxu/6qfq8cnKMX0dlV4cVX8oZYmMaxGJz6BrIcFlUwgbXwtm90lp4AyYkiEmzEBSbFMnt2o0vqSTJ7lcOOBg=="
+  "signature": "2lO/3LnJ6PCrXJW8Hm4PO2SRG0YNFAU8vsA+FjHBfXgNYU91TalTT7tFpIo2uG8wx9qpZWDYfWjGNsiQhvqiBQ=="
 }

package/CHANGELOG.md

@@ -5,6 +5,141 @@ All notable changes to `@dzhechkov/p-replicator` are documented here.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.6.0] - 2026-08-27
+
+**Seventeen features** across two days, from the field-report sweep (PR-003, PR-005+010, PR-008,
+PR-009+004, PR-010, PR-011, PR-012, PR-013, PR-007 G5) plus a latent publish hazard, a silent-failure
+class, a growth-module gate and three regressions found in passing. Every one went through the full
+design→plan→code→cross-family-QE pipeline; artifacts live in `features/<slug>/` in the source repo.
+
+**MINOR, not patch — the pre-shipped contract changed twice.** Rules went 5 → 6 (`docker-ports`) and
+hooks 6 → 7 (`check-ports`). After `update`, `doctor` and `verify` expect the new counts.
+
+### Added — a check that can fail, for the rule that could not
+
+`.claude/hooks/check-ports.cjs` enforces «Правило №0» against a real `docker compose config`, in Node
+so it runs where the package promises to run. **Three exit codes: 0 clean, 1 violation, 2 THE CHECK
+DID NOT RUN** — no compose, no docker, an unparseable config. A check that answers "clean" when it
+could not look turns an unknown into a reassurance.
+
+It is a rewrite, not a transcription: the bash original never looked at `network_mode: host`, which
+the rule forbids. It is not registered as an event hook — invoke it deliberately:
+
+```bash
+node .claude/hooks/check-ports.cjs .
+```
+
+### Added — a recorded decision cannot be quietly left unbuilt
+
+Phase 2 closes with a decision-coverage step: every `ADR-<nnn>` in `docs/ADR.md` must be named
+downstream, and every downstream reference must match a real decision. Both directions, both able to
+say `none`. It establishes that a decision is NAMED, not that it was implemented, and says so.
+
+### Changed — deleting an artifact is now recorded
+
+The three autocommit hooks treated a deleted roadmap as "nothing to do". A deletion is now committed
+with its own `auto-remove` subject, classified from what git actually staged — so deleting one file
+inside a surviving directory counts too. A project that never had the artifact stays silent.
+
+### Fixed — the status line stops saying untrue things
+
+The progress bar was built from done/total and captioned `mvp`; it now carries the caption it draws.
+And the domain guess had no word boundaries, so "healthchecks" made a project medical and "slack"
+made it enterprise. Boundaries are Unicode lookarounds, not `\b` — `\b` does not work around
+Cyrillic at all.
+
+### Fixed — the project scanner could not recognise its own output
+
+Seven probes resolved from one parameter and disagreed about what it was; the two that decide whether
+a project is SPARC-shaped looked exactly where the pipeline does not write.
+
+### Fixed — the growth module was gated off for the type it handles itself
+
+Two callers disabled it for B2B while the module branches on type internally. The condition is now
+about applicability, not product type.
+
+**The version number and the decision to publish were the owner's**; both were given on 2026-08-27.
+npm's latest before this release was 1.5.18; 1.5.19 was staged and never published.
+
+### Fixed — the shipped hooks did not work from a subdirectory, and never committed anything
+
+- `settings.json` pinned all five commands to `${CLAUDE_PROJECT_DIR}` (braced, quoted — the form
+  Claude Code rewrites for PowerShell). Relative paths resolve against the process cwd, which drifts
+  the moment any tool call runs `cd`, so every `Stop` hook died with `MODULE_NOT_FOUND` — silently,
+  because hooks are non-blocking.
+- All six hooks now anchor their DATA at an absolute `CLAUDE_PROJECT_DIR`, falling back to their own
+  `__dirname`. Fixing only `settings.json` would have made them run and silently do nothing.
+- The three autocommit hooks passed `-m` AFTER `--`, so git parsed the commit message as a pathspec
+  and the commit failed from every directory, always. They had never committed anything.
+
+### Fixed — the status line told half the truth from every directory
+
+Toolkit counts now resolve from the project root regardless of cwd, and the roadmap is a survey of
+`projects/*` rather than a guess — sub-project figures are labelled as theirs and never merged into
+the root's own counters. The survey is bounded (24 entries, 512 KB per file) because it renders on
+every prompt.
+
+### Added — the pipeline can now refuse to build on unvalidated input
+
+- A blocking FLOOR on the requirements gate: `Testable = 0` or `Completeness = 0` blocks whatever the
+  total says. A story with no acceptance criteria totalled 72/100 and read as "fix minor issues".
+- Phase 3 has a checkable precondition — the validation report must exist and its FIRST
+  `**Verdict:**` line must be green or yellow — replacing an unenforceable "never skip validation".
+- An External Dependencies inventory in `Architecture.md` plus a sixth Phase-2 lens: every external
+  capability a requirement rests on carries evidence (a citation WITH a verbatim quote) and one of
+  three verdicts. An unconfirmed capability stops the requirements that rest on it, not the run.
+- Scenario↔algorithm traceability: scenario IDs in Phase 3, `REALISES:` in Phase 4 algorithms, and a
+  coverage reconciliation that runs BOTH ways. It establishes that a claim exists — not that the
+  algorithm performs the check, and it says so in the template.
+
+### Added — `.claude/rules/docker-ports.md` (6th pre-shipped rule)
+
+"Правило №0": storage has no host publication except a loopback bind. Every forbidden form is named
+— `0.0.0.0`, `[::]`, a single explicit public address, and `network_mode: host`, which needs no
+`ports:` entry at all. The rule states that the package does NOT check your compose file, so nobody
+infers a guarantee from its presence.
+
+**This changes the pre-shipped contract from 5 rules to 6.** `doctor`, `verify`, the status line and
+the READMEs move together, and a test now holds every count site to `COMPONENTS.rules.items`.
+
+### Fixed — one schema for `feature-roadmap.json`
+
+It was documented twice, incompatibly, both copies claiming to be canonical. `commands/next.md` is
+now the schema; the other document points at it. The status line marks a roadmap whose `priority`
+values are off-schema instead of rendering a confident `mvp 0/0`.
+
+### Fixed — `/start` no longer discards what `/replicate` wrote
+
+Both wrote `docker-compose.yml`, `.gitignore` and `README.md`, and `/replicate` recommends running
+`/start` afterwards — so the collision was the normal path. Both sides now guard: if the file exists,
+make the minimal targeted edit, inspect the diff, and name every changed hunk.
+
+### Security — `scripts/sync-templates.js` fails closed
+
+It copied a discovered repo root's `.claude/` over `templates/` — the npm tarball — and inside a
+monorepo the walk-up finds the MONOREPO. It was safe only because nothing called it, while a test
+helper and an architecture doc both invited the call. It now refuses unless the root carries a
+regular `.p-replicator-sync-source` file with an exact declaration.
+
+### Changed — a hook that cannot commit no longer says nothing
+
+A real git failure now prints ONE line to **stdout** naming the hook, the artifact and git's own
+reason, and still exits 0. The ordinary "nothing to commit" path stays silent.
+
+The stream matters and was wrong at first: MEASURED in the Claude Code binary, a hook exiting 0 has
+its **stderr discarded** (*"Exit code 0 - stdout/stderr not shown"*) while stdout can be surfaced
+(*"Exit code 0 - stdout shown in transcript mode (ctrl+o)"*). "Visible" here means transcript mode
+and the debug log — not an interruption: a `Stop` hook cannot put a line in front of you without
+blocking your session, and blocking is worse.
+
+Still open, and it is the owner's call: whether a DELETED target should be auto-committed.
+
+### Tests
+
+**116 → 235** (MEASURED — reproducer `npm test` in this package; 116 before the first of these
+features, 235 after the last). Every feature's guard is proven by mutation: apply it, watch a
+specific assertion go red, restore, watch it pass.
+
 ## [1.5.14] - 2026-07-28
 
 ### Fixed — Documentation & packaging (package-verification findings)

package/MULTIPLATFORM_ROADMAP.md

@@ -112,7 +112,7 @@ Beyond Level 2 — adapt logic for platform-specific capabilities:
 | `/myinsights`, `/docs`, `/harvest`, `/start`, `/deploy` | ✅ universal | path-translate | **Yes** |
 | 10 skills (sparc-prd-mini, etc.) | ⚠️ Claude-specific composition | inline-compile into commands | **Compromise** — sacrifice runtime-loading |
 | 4 pre-shipped agents | ⚠️ Claude Task-tool specific | translate to platform sub-agents | **Yes if platform supports** |
-| 5 rules | ✅ universal markdown | path-translate | **Yes** |
+| 6 rules | ✅ universal markdown | path-translate | **Yes** |
 | Hooks (SessionStart insights, Stop autocommit) | ❌ Claude-only | bake into commands as instructions | **Compromise** — degraded UX |
 | Statusline dashboard | ❌ Claude-only | optional `progress.md` file? | **Skip** — Claude-exclusive feature |
 | `verify` CLI command | ✅ universal | works as-is | **Yes** (already works) |

package/README/eng/01_quickstart.md

@@ -162,7 +162,7 @@ npx @dzhechkov/p-replicator verify
 
 The command checks:
 
-- **Pre-shipped contract** (must-have): 10 skills + 11 commands + 4 agents + 5 rules + settings.json
+- **Pre-shipped contract** (must-have): 10 skills + 11 commands + 4 agents + 6 rules + settings.json
 - **Post-/replicate hints** (advisory): CLAUDE.md, project-specific agents,
   feature-roadmap.json, security rules, etc.
 
@@ -225,7 +225,7 @@ your-project/
 │   ├── skills/              # 10 skills
 │   ├── commands/            # 11 slash commands
 │   ├── agents/              # 4 pipeline agents
-│   ├── rules/               # 5 rules
+│   ├── rules/               # 6 rules
 │   ├── hooks/               # 6 Node scripts
 │   └── settings.json        # hooks + statusline config
 ├── .p-replicator.json       # install manifest

package/README/eng/02_user_guide.md

@@ -501,7 +501,7 @@ npx @dzhechkov/p-replicator verify
 ```
 
 Should report:
-- ✅ Pre-shipped contract intact (10 skills + 11 commands + 4 agents + 5 rules + settings.json)
+- ✅ Pre-shipped contract intact (10 skills + 11 commands + 4 agents + 6 rules + settings.json)
 - ✅ Post-/replicate hints — many will be absent in Mode 2 (this is normal)
 - 📊 Per-feature artifacts: `docs/features/<id>/01_specification.md`...`05_completion.md`,
   `validation-report.md`, `review-report.md`

package/README/eng/03_admin_guide.md

@@ -83,7 +83,7 @@ P-Replicator V1.5.0 ● user │ Sonnet 4.7
 🚀 Pipeline   /<cmd> ▓▓▓░░░░ 50%  │ Phase: VALIDATE (2/4)  │ Last: /replicate
 🎯 Roadmap    [●●●○○○○○] mvp 3/8   │ Done 5/12  │ ▶ auth-jwt  │ Domain: banking
 📊 SPARC      ●11/11  │ 🟢 78/100  │ Plans ●3  │ ADRs ●2  │ Harvest 2026-05-05
-🛠️ Toolkit   Skills ●10/10 │ Cmds ●11/11 │ Agents ●4+3 │ Rules ●5+2 │ Hooks ●6/6
+🛠️ Toolkit   Skills ●10/10 │ Cmds ●11/11 │ Agents ●4+3 │ Rules ●6+2 │ Hooks ●7/7
 💡 Insights   ●12 (2026-05-06) │ Tests 85/85 ✓ │ MCP ●1/1 │ Settings ✓ │ 🧬 Keysarium ✓
 ```
 
@@ -245,7 +245,7 @@ from PRD MVP scope, or by hand).
 
 | Tool | Checks | When |
 |---|---|---|
-| `npx @dzhechkov/p-replicator doctor` | Pre-shipped contract: 10 skills + 11 commands + 4 agents + 5 rules + settings.json + 6 hooks + git on PATH | After init / when something seems broken |
+| `npx @dzhechkov/p-replicator doctor` | Pre-shipped contract: 10 skills + 11 commands + 4 agents + 6 rules + settings.json + 7 hooks + git on PATH | After init / when something seems broken |
 | `npx @dzhechkov/p-replicator verify` | Pre-shipped + post-/replicate hints (CLAUDE.md, planner.md, security.md, feature-roadmap.json, etc.) | After every `/replicate` to confirm |
 
 **`doctor` exit codes:**

package/README/eng/05_architecture.md

@@ -73,7 +73,7 @@ function getItemRelativePath(comp, itemKey) {
 
 **Design principle:** zero shell dependency.
 
-All 6 hook scripts are pure Node, using `execFileSync('git', [...])`
+All 7 hook scripts are pure Node, using `execFileSync('git', [...])`
 instead of shell pipes. This works equivalently on:
 - Windows cmd.exe (no `2>/dev/null`, no `2>nul` — neither needed)
 - Bash / zsh / Git Bash on Windows
@@ -111,7 +111,11 @@ try {
 
 ## Sync-templates: MERGE mode (v1.4.1)
 
-**File:** `scripts/sync-templates.js` — runs as `prepublishOnly` hook.
+**File:** `scripts/sync-templates.js` — **not** a `prepublishOnly` hook, and not part of publishing.
+`prepublishOnly` runs the publish gate (`scripts/prepublish-gate.mjs`); this script is opt-in only and
+refuses to run unless the root it finds carries a `.p-replicator-sync-source` marker. The section
+below records how its MERGE mode works, for whoever opts in — it does not describe anything that
+happens during a normal publish.
 
 **Goal:** copy `.claude/` from source repo into `templates/.claude/` (which
 ends up in the npm tarball).

package/README/eng/README.md

@@ -6,7 +6,7 @@ product development in Claude Code (Vibe Coding).
 ## What it is
 
 `p-replicator` installs a ready-made `.claude/` toolkit into any project:
-**11 slash commands**, **10 skills**, **4 agents**, **5 rules**, **6 hook
+**11 slash commands**, **10 skills**, **4 agents**, **6 rules**, **7 hook
 scripts**, and a `settings.json` with pre-configured hooks. The flagship
 `/replicate` command takes a project through a 5-phase pipeline (Discovery →
 Planning → Validation → Toolkit Generation → Finalize), generating SPARC

package/README/ru/01_quickstart.md

@@ -162,7 +162,7 @@ npx @dzhechkov/p-replicator verify
 
 Команда проверит:
 
-- **Pre-shipped contract** (must-have): 10 skills + 11 commands + 4 agents + 5 rules + settings.json
+- **Pre-shipped contract** (must-have): 10 skills + 11 commands + 4 agents + 6 rules + settings.json
 - **Post-/replicate hints** (advisory): CLAUDE.md, project-specific агенты,
   feature-roadmap.json, security-правила и т.д.
 
@@ -225,7 +225,7 @@ npx @dzhechkov/p-replicator doctor
 │   ├── skills/              # 10 skills
 │   ├── commands/            # 11 slash-команд
 │   ├── agents/              # 4 pipeline-агента
-│   ├── rules/               # 5 правил
+│   ├── rules/               # 6 правил
 │   ├── hooks/               # 6 Node-скриптов
 │   └── settings.json        # hooks + statusline config
 ├── .p-replicator.json       # манифест установки