@mstar-harness/engine 3.6.3 → 3.7.0

package/dist/skill-authoring.d.ts

@@ -6,14 +6,14 @@
  * Source skills (semantic SSOT — this module implements their deterministic
  * rules, it never redefines them; roadmap §8.5 C2):
  * - `mstar-skill-authoring` SKILL.md § Frontmatter Contract — `name` stable
- *   lowercase-hyphen; `description` is the trigger contract (not a workflow
- *   summary), third person.
+ * lowercase-hyphen; `description` is the trigger contract (not a workflow
+ * summary), third person.
  * - `mstar-skill-authoring` SKILL.md § Body 必须回答的 5 问 + § 默认 Body
- *   结构 — a SKILL.md body answers five questions via key sections (Load
- *   Order, Workflow, Decision Rules, Evidence, References).
+ * 结构 — a SKILL.md body answers five questions via key sections (Load
+ * Order, Workflow, Decision Rules, Evidence, References).
  * - `mstar-skill-authoring` SKILL.md § Skill-relative script and asset
- *   paths ("skill `my-skill` → scripts/do-thing") + `mstar-host` SKILL.md
- *   § Resolve loaded skill root (per-host resolution).
+ * paths ("skill `my-skill` → scripts/do-thing") + `mstar-host` SKILL.md
+ * § Resolve loaded skill root (per-host resolution).
  *
  * The SkillsBench six principles and trigger-contract reasoning stay prompt.
  */
@@ -46,10 +46,37 @@ export declare function stripFrontmatter(text: string): string;
  * or `runtime` (canonical plus the locked `RUNTIME_HEADING_ALIASES` table
  * — shipped `mstar-*` topic skills). */
 export type FiveQuestionMode = "authoring" | "runtime";
+/** Skill-lint profile kind (spec A4): `core` = the `mstar-harness-core` hub
+ * (five-question exempt), `runtime` = shipped `mstar-*` topic skills, and
+ * `authoring` = the standard plus every non-`mstar-*`/unknown input. */
+export type SkillLintKind = "core" | "runtime" | "authoring";
+/** Classification result: the profile kind plus the five-question mode to
+ * apply — `null` mode means the five-question check is skipped entirely
+ * (core exemption only; every other check stays active). */
+export type SkillLintProfile = {
+    kind: SkillLintKind;
+    mode: FiveQuestionMode | null;
+};
+/**
+ * One lint-classification policy (spec A4
+ * the single profile SSOT the CLI, dsh and drift Guard 5 consume.
+ * Semantics preserve the CLI `skill lint` selection verbatim:
+ * - exact `mstar-harness-core` → `core` / `null` (five-question exempt by
+ * design — hub headings; frontmatter + ephemeral checks still run);
+ * - exact `mstar-skill-authoring` → `authoring` (the standard's own
+ * definition stays strict despite the `mstar-` prefix);
+ * - any other `mstar-*` → `runtime` (locked alias table applies);
+ * - unknown / non-`mstar-*` / missing identity → `authoring` (strict
+ * default — greenfield inputs are never loosened).
+ * The `skillId` is the resolved target directory basename at the CLI and
+ * dsh configured skill-root boundaries — never an arbitrary YAML `name`
+ * alone (a misleading frontmatter name must not select a looser profile).
+ * These are lint profiles only: not authorization, not trusted origin.
+ */
+export declare function classifySkillLint(skillId: string | undefined): SkillLintProfile;
 /**
- * Locked runtime alias table (plan 20260816-audit-001-five-question-runtime-
- * alignment, Step 2): heading synonyms that answer the same question for
- * shipped topic skills, verified against the corpus at `81480e7`. Tokens are
+ * Locked runtime alias table: heading synonyms that answer the same question
+ * for shipped topic skills, verified against the shipped-skill corpus. Tokens are
  * case-insensitive heading substrings (any heading level); the `decision-rules`
  * breadth is bounded by the corpus regression test pinning current state.
  * `load-order` has no aliases — the canonical label covers 15/16 skills and

package/dist/status.d.ts

@@ -14,7 +14,7 @@ export type StatusDoc = {
     [key: string]: unknown;
 };
 /**
- * v2 root status document (`{HARNESS_DIR}/status.json`, plan Task 3 — hard
+ * v2 root status document (`{HARNESS_DIR}/status.json`( — hard
  * cutover): `version`, `updated_at`, `workflows[]` only. The list holds
  * ACTIVE (non-terminal) lifecycles; terminal writers unregister AFTER the
  * snapshot write (removal-at-terminal).
@@ -96,7 +96,7 @@ export declare function validatePlanRow(row: unknown): GateResult;
  */
 export declare function validateResidual(entry: unknown): GateResult;
 /**
- * Validate one v2 root `workflows[]` entry (plan Task 3): required `id`,
+ * Validate one v2 root `workflows[]` entry (): required `id`,
  * `type` (plan | iteration), `started_at`, `dir` — harness-relative, never
  * absolute and never containing `..`. The removal-at-terminal invariant
  * (snapshot exists and is non-terminal) is checked at document level by
@@ -104,7 +104,7 @@ export declare function validateResidual(entry: unknown): GateResult;
  */
 export declare function validateWorkflowEntry(entry: unknown): GateResult;
 /**
- * Validate a v2 status.json document (plan Task 3 — hard cutover). Accepts a
+ * Validate a v2 status.json document ( — hard cutover). Accepts a
  * parsed document or a file path (malformed JSON yields a
  * `status.invalid-json` violation, never a throw). v1 or unknown-version
  * inputs — including v1-shaped documents carrying a root `plans[]` — fail
@@ -122,14 +122,14 @@ export declare function validateWorkflowEntry(entry: unknown): GateResult;
  * root holds active lifecycles only, and terminal writers unregister AFTER
  * the snapshot write. The snapshot must also PHYSICALLY live under the
  * harness: a symlinked `workflows/<id>/` (or snapshot file) resolving
- * outside the harness dir is rejected fail-closed (QC wave-1 S-f). Doc
+ * outside the harness dir is rejected fail-closed . Doc
  * input without a harness dir is structure-only.
  */
 export declare function validateStatusV2(docOrPath: StatusV2Doc | string, opts?: {
     harnessDir?: string;
 }): GateResult;
 /**
- * Relocated v2 root validator (plan Task 3 — hard cutover, no dual path):
+ * Relocated v2 root validator ( — hard cutover, no dual path):
  * the v1 `validateStatus` implementation was deleted in the same task that
  * introduced the v2 surface; the public export name survives so external
  * consumers (CLI, host hooks — cut over in P2) keep compiling and now fail
@@ -158,14 +158,14 @@ export declare const validateStatus: typeof validateStatusV2;
  * Async-only (architect-locked 2026-08-27): the durable write goes through
  * `getArtifactStore().put({ kind: "status", key: "root", ... })` inside the
  * caller's lock — the store is the persist backend, never a second lock.
- * Fails loud (qc3 F-201) when the active FsStore would resolve its
+ * Fails loud when the active FsStore would resolve its
  * `status.json` to a path other than `statusPath` — callers whose root
  * differs from the active store's root MUST
  * `setArtifactStore(createFsStore(root))` first.
  */
 export declare function registerWorkflowEntryLocked(statusPath: string, entry: WorkflowEntry): Promise<StatusV2Doc>;
 /**
- * Register one active workflow entry in the v2 root file (plan Task 3).
+ * Register one active workflow entry in the v2 root file ().
  * Idempotent upsert by entry `id` under the root-file `withStatusWriteLock`,
  * bumping root `updated_at`. A missing/empty root file is initialized from
  * the v2 template (never a v1 tree); a v1 root is refused with the
@@ -178,7 +178,7 @@ export declare function registerWorkflowEntryLocked(statusPath: string, entry: W
  */
 export declare function registerWorkflow(root: string, entry: WorkflowEntry): Promise<StatusV2Doc>;
 /**
- * Remove one workflow entry from the v2 root file (plan Task 3). Idempotent:
+ * Remove one workflow entry from the v2 root file (). Idempotent:
  * removing an absent id is a no-op with no write; a missing/empty root file
  * is a no-op that never creates the file. Runs under the root-file
  * `withStatusWriteLock`, bumping root `updated_at` only when an entry was
@@ -186,7 +186,7 @@ export declare function registerWorkflow(root: string, entry: WorkflowEntry): Pr
  * invariant included) before the write — a v1 root is refused with the
  * `mstar migrate` hint.
  *
- * Fails loud (qc3 F-201) when the active FsStore would resolve its
+ * Fails loud when the active FsStore would resolve its
  * `status.json` to a path other than the caller's root — the no-op branches
  * below never mask a store/path mismatch.
  */
@@ -199,8 +199,7 @@ export declare function unregisterWorkflow(root: string, id: string): Promise<St
  * frontmatter declares `enforcement: hard` hardens the gate in this repo.
  * A COMPLETED (or status-less/archived) iteration's compass NEVER hardens:
  * D2 rollback = unset the flag in the ACTIVE compass, and that must work
- * while older completed compasses still declare hard (qc1 F-001 / qc2 F-002).
- * A counting compass declaring a non-hard value, or no compass at all,
+ * while older completed compasses still declare hard. * A counting compass declaring a non-hard value, or no compass at all,
  * leaves the flag unset (`source: none`) — hard gates are never the default
  * and the flag is inert when the engine is absent. Frontmatter is
  * `---`-fenced; hard declarations in the compass BODY do not count (the

package/dist/store.d.ts

@@ -1,5 +1,4 @@
-/** JSON coordination-doc kinds the store persists (spec SP2). */
-export type ArtifactKind = "status" | "snapshot" | "residuals" | "review" | "json";
+/** JSON coordination-doc kinds the store persists */ export type ArtifactKind = "status" | "snapshot" | "residuals" | "review" | "json";
 /** Stable key inside the kind. Workflow id, project id, or review id;
  * `kind: "status"` always uses key `"root"`. */
 export type ArtifactRef = {
@@ -23,14 +22,13 @@ export interface ArtifactStore {
     get<T = unknown>(ref: ArtifactRef): Promise<T | undefined>;
     delete?(ref: ArtifactRef): Promise<void>;
     /** Enumerate refs of `kind`, sorted by key ascending (spec D4). Uniform
-     * rule: report what exists — missing backing dir/file → `[]`; every
-     * listed key round-trips through `get`. `json` is not enumerable. */
+   * rule: report what exists — missing backing dir/file → `[]`; every
+   * listed key round-trips through `get`. `json` is not enumerable. */
     list?(kind: ArtifactKind): Promise<ArtifactRef[]>;
 }
-/** Map an artifact ref to its file path under `harnessRoot` (spec SP2
- * FsStore path table — the single kind→path mapping, shared with SP3;
- * SP3 never re-implements or extends it). Exported (qc1 S-002) so SP3
- * imports the contract instead of re-deriving it textually. */
+/** Map an artifact ref to its file path under `harnessRoot` (the store contract — the single kind→path
+ * mapping). Exported so host adapters import the contract instead of
+ * re-deriving it textually. */
 export declare function resolveArtifactPath(harnessRoot: string, ref: ArtifactRef): string;
 /** Default local adapter: maps kinds to the existing `.mstar/` paths.
  * `put` uses the sync `writeJson` (atomic temp+rename unchanged) and
@@ -39,7 +37,7 @@ export declare function resolveArtifactPath(harnessRoot: string, ref: ArtifactRe
  * malformed JSON → throw with the path in the message. The returned store
  * also exposes its resolved `root` so the routed writers can fail loud
  * when a caller's explicit target path diverges from the store-resolved
- * path (qc3 F-201); `root` is not part of the `ArtifactStore` contract.
+ * path ; `root` is not part of the `ArtifactStore` contract.
  * `list` enumerates per the D4 table: report what exists — missing
  * backing dir/file → `[]`, `json` throws, keys sorted ascending. */
 export declare function createFsStore(harnessRoot: string): ArtifactStore & {
@@ -52,7 +50,7 @@ export declare function setArtifactStore(store: ArtifactStore | undefined): void
  * `resolveHarnessSubdir` — never a silent cwd fallback. */
 export declare function getArtifactStore(): ArtifactStore;
 /**
- * Fail-loud path-agreement guard for the routed writers (qc3 F-201): when
+ * Fail-loud path-agreement guard for the routed writers : when
  * `store` is an FsStore, resolve the path the store would compute for
  * `ref` and require it to equal `expectedPath` (the caller's explicit
  * target). A divergence means the caller's path lives outside the active
@@ -62,8 +60,7 @@ export declare function getArtifactStore(): ArtifactStore;
  * Cheap: pure path resolution, no I/O.
  */
 export declare function assertFsStorePath(store: ArtifactStore, ref: ArtifactRef, expectedPath: string): void;
-/** Load a store module from a filesystem path (spec SP2 § Injection 2–3,
- * SP2-AC6 / SP2-AC7). Resolves against cwd; rejects empty values and any
+/** Load a store module from a filesystem path (the store module-loading trust boundary). Resolves against cwd; rejects empty values and any
  * URI scheme before `import()`; throws when the file is missing. Accepts a
  * `createArtifactStore` named export, a default-exported factory, or a
  * default-exported object; the result is structurally verified (`put` +

package/dist/workflow.d.ts

@@ -1,18 +1,18 @@
 import type { GateResult } from "./core.js";
 import { type IntegrationMergeLease } from "./lease.js";
 import { type PlanRow } from "./status.js";
-/** Snapshot file name inside `workflows/<id>/` (plan Task 2 — writer contract). */
+/** Snapshot file name inside `workflows/<id>/` ( — writer contract). */
 export declare const WORKFLOW_SNAPSHOT_FILE = "snapshot.json";
-/** Lifecycle status enum (plan Task 2 — terminal set = completed|failed|stopped). */
+/** Lifecycle status enum ( — terminal set = completed|failed|stopped). */
 export declare const WORKFLOW_LIFECYCLE_STATUSES: readonly ["running", "paused", "completed", "failed", "stopped"];
 /** Terminal statuses: snapshot must carry `ended_at` and no dangling leases. */
 export declare const WORKFLOW_TERMINAL_STATUSES: readonly ["completed", "failed", "stopped"];
-/** Lifecycle type enum (plan Task 2 — id reuses the orchestration id). */
+/** Lifecycle type enum ( — id reuses the orchestration id). */
 export declare const WORKFLOW_LIFECYCLE_TYPES: readonly ["plan", "iteration"];
 export type WorkflowLifecycleStatus = (typeof WORKFLOW_LIFECYCLE_STATUSES)[number];
 export type WorkflowLifecycleType = (typeof WORKFLOW_LIFECYCLE_TYPES)[number];
 /**
- * First-class lifecycle execution policy (plan Task 2 — keys copied from root
+ * First-class lifecycle execution policy ( — keys copied from root
  * `metadata` at migrate; values accepted-but-opaque this iteration, no
  * semantic gate).
  */
@@ -21,7 +21,7 @@ export type WorkflowExecutionPolicy = {
     worktree_mode?: unknown;
     push_policy?: unknown;
 };
-/** Iteration branch anchors (plan Task 2 — from root metadata anchors). */
+/** Iteration branch anchors ( — from root metadata anchors). */
 export type WorkflowBranchAnchors = {
     base?: string;
     integration?: string;
@@ -29,11 +29,11 @@ export type WorkflowBranchAnchors = {
 };
 /**
  * v3 workflow snapshot (`workflows/<id>/snapshot.json`) — final schema
- * (plan Task 2). `plans[]` rows are the legacy PlanRow shape verbatim;
+ * (). `plans[]` rows are the legacy PlanRow shape verbatim;
  * per-row `execution_lease` stays on the row, `integration_merge_lease` is
  * top-level.
  *
- * Notes dual-home SSOT (qc wave-1 S-e): a plan row's `notes` array is the
+ * Notes dual-home SSOT: a plan row's `notes` array is the
  * LEGACY VERBATIM copy preserved at migrate time — the RUNTIME ledger is
  * `notes.jsonl` in the workflow dir (`migrate.ts` NOTES_LEDGER_FILE). New
  * notes append to the ledger only; row `notes` is read-only legacy and is
@@ -57,7 +57,7 @@ export type WorkflowSnapshot = {
     compass_ref?: string;
 };
 /**
- * Validate a v3 workflow snapshot document (plan Task 2 — final schema):
+ * Validate a v3 workflow snapshot document ( — final schema):
  * enum/type/id checks, `schema_version: 1`, required timestamps, `plans[]`
  * rows validated by the legacy `validatePlanRow` with row-level
  * `execution_lease` shape delegated to `validateExecutionLease`,
@@ -70,16 +70,16 @@ export type WorkflowSnapshot = {
 export declare function validateWorkflowSnapshot(doc: unknown): GateResult;
 /**
  * Write a workflow snapshot as a whole-rewrite of `dir/snapshot.json` under
- * `withStatusWriteLock(snapshotPath)` (plan Task 2 — the `.status-write.lockdir`
+ * `withStatusWriteLock(snapshotPath)` ( — the `.status-write.lockdir`
  * lands inside `workflows/<id>/`, dirname of the snapshot; no harness-root
  * pollution). The snapshot is validated first — an invalid snapshot throws
  * and nothing is written. `dir` is created recursively. The durable write
- * routes through the active `ArtifactStore` (spec SP2: snapshot →
+ * routes through the active `ArtifactStore` (the store contract: snapshot →
  * `{ kind: "snapshot", key: <workflow id> }`) inside the existing lock — the
  * default FsStore resolves `{WORKFLOW_DIR}/<key>/snapshot.json`, identical
  * to `join(dir, WORKFLOW_SNAPSHOT_FILE)` for canonical callers. The write
  * fails loud when the active FsStore would resolve a different path than
- * the caller's `join(dir, WORKFLOW_SNAPSHOT_FILE)` (qc3 F-201) — callers
+ * the caller's `join(dir, WORKFLOW_SNAPSHOT_FILE)`  — callers
  * whose target root differs from the active store's root MUST
  * `setArtifactStore(createFsStore(root))` first.
  */

package/dist/worktree.d.ts

@@ -38,8 +38,7 @@ export type BranchProbeOptions = {
     /**
      * Git probe timeout in ms (default 10s; `MSTAR_GIT_PROBE_TIMEOUT_MS` env
      * overrides; per-call value wins). On timeout the probe fails closed into
-     * `branch-probe-failed` — never hangs, never guesses a branch (qc3 F-4).
-     */
+     * `branch-probe-failed` — never hangs, never guesses a branch.   */
     timeoutMs?: number;
 };
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mstar-harness/engine",
-  "version": "3.6.3",
+  "version": "3.7.0",
   "description": "Morning Star Harness Workflow Engine — deterministic workflow enforcement library (path, status, lease, dispatch, sdd, iteration, lint gates).",
   "license": "MIT",
   "repository": {