@mstar-harness/engine 2.2.0 → 2.4.0

package/dist/engine.js

@@ -674,7 +674,7 @@ function parseAssignmentBranchForms(assignmentText) {
   if (fields.branchPolicy !== undefined && fields.branchPolicy !== "") {
     const direct = fields.branchPolicy.match(/^direct\s+on\s+(\S+)/i);
     if (direct) {
-      const strict = fields.branchPolicy.match(/^direct\s+on\s+(\S+)(?:\s*(?:[—–]|--|-)\s*(.+))?$/);
+      const strict = fields.branchPolicy.match(/^direct\s+on\s+(\S+)(?:\s*(?:[\u2014\u2013]|--|-)\s*(.+))?$/);
       forms.directOn = { branch: direct[1].trim(), reason: strict ? (strict[2] ?? "").trim() : "" };
     }
   }
@@ -2552,6 +2552,7 @@ function renderIndex(params) {
   if (rejectedRows !== "") {
     sections.push("", "## Findings considered and rejected", "", rejectedRows);
   }
+  sections.push("", "## Red-team dispositions", "", "- <finding>: <survived / refuted / hallucination-dropped / uncovered-kept>, <one-line reason>");
   return `${sections.join(`
 `)}
 `;
@@ -3080,11 +3081,31 @@ function findTemporaryMarkers(fileText) {
   }
   return { ok: violations.length === 0, violations, markers };
 }
+var TASK_ARTIFACT_RE = /\btask-\d+(?:-(?:brief|report|fix-report|diff)|\.diff)\b/g;
+var SDD_DEEPLINK_RE = /\.(?:mstar|agents)\/sdd\/([^\s/<>{}\[\]"'\*\?]+)/g;
+function findEphemeralCitations(skillText) {
+  const citations = [];
+  const lines = skillText.split(/\r?\n/);
+  for (let i = 0;i < lines.length; i++) {
+    const found = [];
+    for (const m of lines[i].matchAll(TASK_ARTIFACT_RE)) {
+      found.push({ index: m.index, match: m[0], kind: "task-artifact" });
+    }
+    for (const m of lines[i].matchAll(SDD_DEEPLINK_RE)) {
+      found.push({ index: m.index, match: m[0], kind: "sdd-deeplink" });
+    }
+    found.sort((a, b) => a.index - b.index);
+    for (const f of found) {
+      citations.push({ line: i + 1, match: f.match, kind: f.kind });
+    }
+  }
+  return citations;
+}
 var TEST_FILE_PATH_RE = /[\w./-]+\.(?:test|spec)\.[a-z0-9]+/i;
 var TEST_FILE_PHRASE_RE = /\btest files?\b/i;
 var COMMAND_PROMPT_RE = /^\s*[$>]\s*\S/;
 var RUNNER_RE = /\b(?:bun|pnpm|npm|yarn|npx|bunx)\s+(?:test|run|exec)\b|\b(?:npx|bunx)\s+[\w./-]+\b|\b(?:tsc|vitest|jest|mocha|pytest)\b|\bgo\s+test\b|\bcargo\s+test\b/i;
-var OUTPUT_TOKEN_RE = /[✓✔✗✘]|\b(?:PASS|FAIL)\b|\b\d+\s+(?:pass(?:es|ed)?|fail(?:s|ed|ing)?|skipped|tests?|ok)\b|\bok\s+\d+\b|\ball\s+ok\b|exit(?:ed)?\s+(?:with\s+)?(?:code\s+)?\d+/i;
+var OUTPUT_TOKEN_RE = /[\u2713\u2714\u2717\u2718]|\b(?:PASS|FAIL)\b|\b\d+\s+(?:pass(?:es|ed)?|fail(?:s|ed|ing)?|skipped|tests?|ok)\b|\bok\s+\d+\b|\ball\s+ok\b|exit(?:ed)?\s+(?:with\s+)?(?:code\s+)?\d+/i;
 function assertSddTddTriple(reportText) {
   const violations = [];
   const lines = reportText.split(/\r?\n/);
@@ -3447,13 +3468,56 @@ var FIVE_QUESTION_SECTIONS = [
   { key: "evidence", label: "Evidence", question: "what a correct result looks like (success criteria / evidence)" },
   { key: "references", label: "References", question: "additional resources to open when the main path is not enough" }
 ];
+function stripFrontmatter(text) {
+  const lines = text.replace(/^\uFEFF/, "").split(/\r?\n/);
+  if (lines.length === 0 || lines[0].trim() !== "---")
+    return text;
+  for (let i = 1;i < lines.length; i++) {
+    if (lines[i].trim() === "---")
+      return lines.slice(i + 1).join(`
+`);
+  }
+  return text;
+}
 var HEADING_RE = /^#{1,6}\s+[^\r\n]+$/;
-function lintFiveQuestion(bodyText) {
-  const headings = bodyText.split(/\r?\n/).filter((line) => HEADING_RE.test(line)).map((line) => line.replace(/^#{1,6}\s+/, "").trim().toLowerCase());
+function collectHeadings(bodyText) {
+  const headings = [];
+  let inFence = false;
+  for (const line of bodyText.split(/\r?\n/)) {
+    if (line.startsWith("```") || line.startsWith("~~~")) {
+      inFence = !inFence;
+      continue;
+    }
+    if (!inFence && HEADING_RE.test(line)) {
+      headings.push(line.replace(/^#{1,6}\s+/, "").trim().toLowerCase());
+    }
+  }
+  return headings;
+}
+var RUNTIME_HEADING_ALIASES = {
+  workflow: ["process", "playbook"],
+  "decision-rules": [
+    "hard rules",
+    "core rules",
+    "rule",
+    "gate",
+    "not to do",
+    "red flags",
+    "反模式",
+    "红线",
+    "规则",
+    "门禁"
+  ],
+  evidence: ["output format", "证据"],
+  references: ["dependencies", "关系"]
+};
+function lintFiveQuestion(bodyText, mode = "authoring") {
+  const headings = collectHeadings(bodyText);
   const violations = [];
   for (const section of FIVE_QUESTION_SECTIONS) {
     const label = section.label.toLowerCase();
-    const covered = headings.some((heading) => heading.includes(label));
+    const aliases = mode === "runtime" ? RUNTIME_HEADING_ALIASES[section.key] ?? [] : [];
+    const covered = headings.some((heading) => heading.includes(label) || aliases.some((alias) => heading.includes(alias)));
     if (!covered) {
       violations.push(violation11("low", `skill-authoring.five-question.${section.key}`, `body does not answer "${section.question}" — no "${section.label}" section (mstar-skill-authoring § Body 必须回答的 5 问 / § 默认 Body 结构)`, `add a "## ${section.label}" section covering ${section.question}`));
     }
@@ -3482,6 +3546,7 @@ export {
   techDebtRollup,
   taskReportExists,
   taskBrief,
+  stripFrontmatter,
   singleReviewSnapshot,
   sddWorkspace,
   scopeGuard,
@@ -3526,6 +3591,7 @@ export {
   findingsCleanupGate,
   findTemporaryMarkers,
   findSimplifyMarkers,
+  findEphemeralCitations,
   executionModeToN,
   evaluatePhaseGate,
   emitGitignoreSnippet,
@@ -3553,6 +3619,7 @@ export {
   SddScriptError,
   SHARED_FAMILIES,
   SEVERITY_ORDER,
+  RUNTIME_HEADING_ALIASES,
   ROLE_MAPPING,
   QC_REVIEWER_PARAMS,
   KNOWLEDGE_SEVERITIES,

package/dist/index.d.ts

@@ -42,11 +42,11 @@ export type { AuditCategory, AuditEffort, AuditFinding, AuditPriority, AuditRisk
 export { AUDIT_CATEGORIES, AUDIT_EFFORTS, AUDIT_PRIORITIES, AUDIT_RISKS, redactSecrets, scaffoldAuditPlan, validateAuditStatusBlocks, } from "./audit.js";
 export type { ReferenceCheckResult } from "./compound.js";
 export { KNOWLEDGE_BUG_PROBLEM_TYPES, KNOWLEDGE_CATEGORY_MAP, KNOWLEDGE_KNOWLEDGE_PROBLEM_TYPES, KNOWLEDGE_PROBLEM_TYPES, KNOWLEDGE_REQUIRED_FIELDS, KNOWLEDGE_RESOLUTION_TYPES, KNOWLEDGE_SEVERITIES, assertIndexRows, compoundRefreshScope, referenceExists, scopeGuard, validateSchemaYaml, } from "./compound.js";
-export type { PlanQualityFinding, PlanQualityResult, SimplifyMarker, TemporaryMarker, TemporaryMarkerResult, } from "./lint.js";
-export { assertSddTddTriple, findSimplifyMarkers, findTemporaryMarkers, lintSkillFrontmatter, lintStrategySections, planQualityBar, } from "./lint.js";
+export type { EphemeralCitation, PlanQualityFinding, PlanQualityResult, SimplifyMarker, TemporaryMarker, TemporaryMarkerResult, } from "./lint.js";
+export { assertSddTddTriple, findEphemeralCitations, findSimplifyMarkers, findTemporaryMarkers, lintSkillFrontmatter, lintStrategySections, planQualityBar, } from "./lint.js";
 export type { DevTrackParam, QcReviewerParam, RoleFamily, RoleMappingEntry, RoleMappingOptions, } from "./roles.js";
 export { DEV_TRACK_PARAMS, QC_REVIEWER_PARAMS, ROLE_MAPPING, SHARED_FAMILIES, lintLoadOrder, validateRoleMapping, } from "./roles.js";
 export type { DetectResult, HostAdapter, HostId, SkillRootPaths, ToolSignal } from "./host.js";
 export { detectHost, resolveSkillRoot } from "./host.js";
-export type { FiveQuestionSection } from "./skill-authoring.js";
-export { FIVE_QUESTION_SECTIONS, lintFiveQuestion, lintFrontmatter, resolveAssetPath, } from "./skill-authoring.js";
+export type { FiveQuestionMode, FiveQuestionSection } from "./skill-authoring.js";
+export { FIVE_QUESTION_SECTIONS, RUNTIME_HEADING_ALIASES, lintFiveQuestion, lintFrontmatter, resolveAssetPath, stripFrontmatter, } from "./skill-authoring.js";

package/dist/lint.d.ts

@@ -27,6 +27,10 @@
  *   contract (not a workflow summary), third person.
  * - STRATEGY.md structure: `mstar-strategy` SKILL.md § STRATEGY.md structure —
  *   six required sections.
+ * - Ephemeral citations: knowledge `conventions/skill-content-porting-discipline.md`
+ *   §3 ("No ephemeral citations in durable skill text") + session evaluation
+ *   2026-08-16 discrimination contract — concrete task-artifact references
+ *   and SDD deeplinks are ephemeral; placeholder forms are not.
  *
  * Enforcement depth: roadmap §8.5 C4 — v1 lints are non-blocking
  * `ValidationResult`s; callers surface them as warnings.
@@ -95,6 +99,45 @@ export type TemporaryMarkerResult = GateResult & {
  * carry); do not special-case it without a real FP report.
  */
 export declare function findTemporaryMarkers(fileText: string): TemporaryMarkerResult;
+/**
+ * An ephemeral citation found in durable skill text: a concrete reference to
+ * a per-task artifact or an SDD deeplink that survives nothing (knowledge
+ * conventions/skill-content-porting-discipline.md §3 — "No ephemeral
+ * citations in durable skill text": a calibration line citing an SDD task
+ * report violates standalone + survives nothing; instances/examples cite
+ * in-repo artifacts only).
+ */
+export type EphemeralCitation = {
+    /** 1-based line number of the citation. */
+    line: number;
+    /** The matched citation token (artifact name or deeplink prefix). */
+    match: string;
+    /** `task-artifact`: `task-<digits>-(brief|report|fix-report|diff)`;
+     * `sdd-deeplink`: `.mstar/sdd/` / `.agents/sdd/` + a concrete first
+     * segment. */
+    kind: "task-artifact" | "sdd-deeplink";
+};
+/**
+ * Find ephemeral citations in skill text (knowledge
+ * conventions/skill-content-porting-discipline.md §3 + session evaluation
+ * 2026-08-16 discrimination contract).
+ *
+ * Discrimination (HARD — zero false positives on the skills corpus):
+ * - `task-<digits>-(brief|report|fix-report|diff)` with 1+ digits is a
+ *   concrete instance → reported (`task-2-report`, `task-1.diff`).
+ *   Placeholders (`task-N-brief`, `task-N-report`, `<plan-id>`,
+ *   `{SDD_DIR}/task-N-report.md`) never match.
+ * - `.mstar/sdd/<segment>` / `.agents/sdd/<segment>` with a concrete first
+ *   segment (`20260815-x`) → reported; `<plan-id>` / `{SDD_DIR}` segments
+ *   are template forms → never match.
+ *
+ * Discovery only — a finder returning an array, same shape as
+ * `findSimplifyMarkers`, NOT a GateResult; callers wrap findings into
+ * `ViolationResult`s (codes `skill.ephemeral.task-artifact` /
+ * `skill.ephemeral.sdd-deeplink`). Citations are reported line by line in
+ * 1-based line order, source order within a line.
+ */
+export declare function findEphemeralCitations(skillText: string): EphemeralCitation[];
 /**
  * Assert the SDD TDD triple is present in a `task-N-report.md` text
  * (mstar-coding-behavior § Integration Notes — "completion evidence must

package/dist/skill-authoring.d.ts

@@ -36,19 +36,43 @@ export type FiveQuestionSection = {
     question: string;
 };
 export declare const FIVE_QUESTION_SECTIONS: readonly FiveQuestionSection[];
+/** Strip a leading `---`-fenced YAML frontmatter block, returning the body
+ * (the five-question lint takes the body; the frontmatter lint takes the
+ * full doc). Returns the input unchanged when there is no closing fence —
+ * an unparseable block is treated as body rather than destroyed. Canonical
+ * helper shared by the CLI, drift-lint Guard 5 and the engine corpus test. */
+export declare function stripFrontmatter(text: string): string;
+/** Lint mode: `authoring` (canonical headings only — greenfield / strict)
+ * or `runtime` (canonical plus the locked `RUNTIME_HEADING_ALIASES` table
+ * — shipped `mstar-*` topic skills). */
+export type FiveQuestionMode = "authoring" | "runtime";
+/**
+ * Locked runtime alias table (plan 20260816-audit-001-five-question-runtime-
+ * alignment, Step 2): heading synonyms that answer the same question for
+ * shipped topic skills, verified against the corpus at `81480e7`. Tokens are
+ * case-insensitive heading substrings (any heading level); the `decision-rules`
+ * breadth is bounded by the corpus regression test pinning current state.
+ * `load-order` has no aliases — the canonical label covers 15/16 skills and
+ * `mstar-host` closes its gap with a corpus edit instead. Chinese tokens are
+ * `\uXXXX` escapes (ASCII-only src literals; runtime value is identical).
+ */
+export declare const RUNTIME_HEADING_ALIASES: Readonly<Record<string, readonly string[]>>;
 /**
  * Lint a SKILL.md body for the 5-question contract (mstar-skill-authoring
  * § Body 必须回答的 5 问). Heuristic: each of the five questions must be
  * answered by the presence of its canonical section heading (case-
  * insensitive substring match on heading text, any heading level — so
  * "## Load Order (Required)" and "### Workflow — main path" both match).
- * Content judgment (whether the answer is actually narrow / procedural)
- * stays prompt. Advisory: violations are `low` severity (v1 non-blocking).
+ * `mode: "runtime"` additionally accepts the locked `RUNTIME_HEADING_ALIASES`
+ * synonyms for shipped topic skills; `authoring` (default) stays canonical-
+ * only — greenfield skills still must use the canonical headings. Content
+ * judgment (whether the answer is actually narrow / procedural) stays prompt.
+ * Advisory: violations are `low` severity (v1 non-blocking).
  *
  * Violations: `skill-authoring.five-question.<key>` for each uncovered
  * question.
  */
-export declare function lintFiveQuestion(bodyText: string): GateResult;
+export declare function lintFiveQuestion(bodyText: string, mode?: FiveQuestionMode): GateResult;
 /**
  * Resolve a skill-relative asset path (mstar-skill-authoring § Skill-
  * relative script and asset paths: name assets as skill `<name>` →

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mstar-harness/engine",
-  "version": "2.2.0",
+  "version": "2.4.0",
   "description": "Morning Star Harness Workflow Engine — deterministic workflow enforcement library (path, status, lease, dispatch, sdd, iteration, lint gates).",
   "license": "MIT",
   "repository": {