@mstar-harness/engine 3.9.2 → 3.9.3

package/dist/engine.js

@@ -7221,6 +7221,51 @@ function findEphemeralCitations(skillText) {
   }
   return citations;
 }
+var DATED_SLUG_TOKEN_SOURCE = "\\b20\\d{6}-[a-z0-9][a-z0-9-]*\\b(?!\\.\\d)";
+var DATED_SLUG_TOKEN_RE = new RegExp(DATED_SLUG_TOKEN_SOURCE, "g");
+var HARNESS_PATH_RE = /\.(?:mstar|agents)\/[^\s<>{}\[\]"'\*\?]+/g;
+var SDD_DEEPLINK_PREFIX_RE = /^\.(?:mstar|agents)\/sdd(?:\/|$)/;
+var TRAILING_SENTENCE_PUNCT_RE = /[.,;:!?]+$/;
+function isExampleSlug(token) {
+  return token.split("-").includes("example");
+}
+function qualifyingDatedToken(text) {
+  for (const m of text.matchAll(DATED_SLUG_TOKEN_RE)) {
+    if (!isExampleSlug(m[0]))
+      return m[0];
+  }
+  return null;
+}
+function findProvenanceCitations(text) {
+  const citations = [];
+  const lines = text.split(/\r?\n/);
+  for (let i = 0;i < lines.length; i++) {
+    const found = [];
+    const pathRanges = [];
+    for (const m of lines[i].matchAll(HARNESS_PATH_RE)) {
+      const start = m.index;
+      pathRanges.push([start, start + m[0].length]);
+      if (SDD_DEEPLINK_PREFIX_RE.test(m[0]))
+        continue;
+      if (qualifyingDatedToken(m[0]) !== null) {
+        found.push({ index: start, match: m[0], kind: "harness-path" });
+      }
+    }
+    const inPath = (index) => pathRanges.some(([from, to]) => index >= from && index < to);
+    for (const m of lines[i].matchAll(DATED_SLUG_TOKEN_RE)) {
+      if (inPath(m.index))
+        continue;
+      if (isExampleSlug(m[0]))
+        continue;
+      found.push({ index: m.index, match: m[0], kind: "plan-id" });
+    }
+    found.sort((a, b) => a.index - b.index);
+    for (const f of found) {
+      citations.push({ line: i + 1, match: f.match.replace(TRAILING_SENTENCE_PUNCT_RE, ""), kind: f.kind });
+    }
+  }
+  return citations;
+}
 var TEST_FILE_PATH_RE = /[\w./-]+\.(?:test|spec)\.[a-z0-9]+/i;
 var TEST_FILE_PHRASE_RE = /\btest file(?:s|\(s\))?\s*:[ \t]*(.+)/i;
 var COMMAND_PROMPT_RE = /^\s*[$>]\s*\S/;
@@ -8773,6 +8818,7 @@ export {
   executionModeToN,
   findEphemeralCitations,
   findMstarc,
+  findProvenanceCitations,
   findSimplifyMarkers,
   findTemporaryMarkers,
   findingsCleanupGate,

package/dist/index.d.ts

@@ -9,7 +9,8 @@
  * the execution/merge lease state machines + same-host status write lock,
  * `dispatch` implements the Assignment field contract, default-branch
  * gate, QC seat mapping and tri-identity/anti-recursion prechecks, `lint`
- * implements marker/TDD-triple/plan-quality/frontmatter/STRATEGY checks,
+ * implements marker/TDD-triple/plan-quality/frontmatter/STRATEGY checks and
+ * ephemeral/provenance citation discovery,
  * `design-md` validates DESIGN.md token frontmatter + light/dark parity +
  * completeness levels, `audit` validates audit Status blocks, redacts
  * secrets and scaffolds audit-<date>/ plan dirs, and `compound` validates
@@ -70,8 +71,8 @@ export type { AuditCategory, AuditConfidence, AuditEffort, AuditFinding, AuditPr
 export { AUDIT_CATEGORIES, AUDIT_CONFIDENCES, AUDIT_EFFORTS, AUDIT_PRIORITIES, AUDIT_RISKS, promoteAuditPlans, scaffoldAuditPlan, scanSecrets, supplyChainChecks, validateAuditStatusBlocks, } from "./audit.js";
 export { KNOWLEDGE_BUG_PROBLEM_TYPES, KNOWLEDGE_CATEGORY_MAP, KNOWLEDGE_KNOWLEDGE_PROBLEM_TYPES, KNOWLEDGE_PROBLEM_TYPES, KNOWLEDGE_REQUIRED_FIELDS, KNOWLEDGE_RESOLUTION_TYPES, KNOWLEDGE_SEVERITIES, assertIndexRows, compoundRefreshScope, referenceExists, scopeGuard, validateSchemaYaml, } from "./compound.js";
 export type { ReferenceCheckResult } from "./compound.js";
-export type { EphemeralCitation, PlanQualityFinding, PlanQualityResult, SimplifyMarker, TemporaryMarker, TemporaryMarkerResult, } from "./lint.js";
-export { assertSddTddTriple, findEphemeralCitations, findSimplifyMarkers, findTemporaryMarkers, lintSkillFrontmatter, lintStrategySections, planQualityBar, } from "./lint.js";
+export type { EphemeralCitation, PlanQualityFinding, PlanQualityResult, ProvenanceCitation, SimplifyMarker, TemporaryMarker, TemporaryMarkerResult, } from "./lint.js";
+export { assertSddTddTriple, findEphemeralCitations, findProvenanceCitations, findSimplifyMarkers, findTemporaryMarkers, lintSkillFrontmatter, lintStrategySections, planQualityBar, } from "./lint.js";
 export type { DevTrackParam, QcReviewerParam, RoleFamily, RoleMappingEntry, RoleMappingOptions, } from "./roles.js";
 export { DEV_TRACK_PARAMS, QC_REVIEWER_PARAMS, ROLE_MAPPING, SHARED_FAMILIES, lintLoadOrder, validateRoleMapping, } from "./roles.js";
 export type { DetectResult, HostAdapter, HostId, SkillRootPaths, ToolSignal } from "./host.js";

package/dist/iteration.d.ts

@@ -157,7 +157,6 @@ export declare function parseCompassFrontmatter(filePath: string): Record<string
 /**
  * Parse flat-subset YAML frontmatter from raw file content — the single
  * shared parser core behind `parseCompassFrontmatter` (path wrapper) and
- * the roadmap validator (plan `20260819-workflow-engine-core.md` Task 4 —
- * extract/reuse the same parsing, no fork).
+ * the roadmap validator (extract/reuse the same parsing, no fork).
  */
 export declare function parseCompassFrontmatterText(content: string, filePath: string): Record<string, unknown>;

package/dist/lint.d.ts

@@ -126,8 +126,8 @@ export type EphemeralCitation = {
  * concrete instance → reported (`task-2-report`, `task-1.diff`).
  * Placeholders (`task-N-brief`, `task-N-report`, `<plan-id>`,
  * `{SDD_DIR}/task-N-report.md`) never match.
- * - `.mstar/sdd/<segment>` / `.agents/sdd/<segment>` with a concrete first
- * segment (`20260815-x`) → reported; `<plan-id>` / `{SDD_DIR}` segments
+ * - `.mstar/sdd/<segment>` / `.agents/sdd/<segment>` with a concrete dated
+ * first segment → reported; `<plan-id>` / `{SDD_DIR}` segments
  * are template forms → never match.
  *
  * Discovery only — a finder returning an array, same shape as
@@ -137,6 +137,54 @@ export type EphemeralCitation = {
  * 1-based line order, source order within a line.
  */
 export declare function findEphemeralCitations(skillText: string): EphemeralCitation[];
+/**
+ * A provenance citation found in text: a dated plan/iteration id token, or a
+ * local-harness deeplink whose specificity comes from a dated instance
+ * segment. Both disclose local artifact provenance, which tracked code and
+ * docs must not carry (repo AGENTS.md "Git and local artifacts": tracked
+ * content must not disclose real plan/iteration ids or local deep paths;
+ * synthetic example forms and generic layout lines are exempt).
+ */
+export type ProvenanceCitation = {
+    /** 1-based line number of the citation. */
+    line: number;
+    /** The matched citation token (dated plan id or deeplink path). */
+    match: string;
+    /** `plan-id`: a dated-slug plan/iteration id token; `harness-path`: a
+     * local-harness deeplink containing a dated token. */
+    kind: "plan-id" | "harness-path";
+};
+/**
+ * Find provenance citations in text (repo AGENTS.md "Git and local
+ * artifacts": tracked code and docs must not depend on local harness
+ * artifacts or disclose their provenance with real plan/iteration ids or
+ * local deep paths).
+ *
+ * Discrimination (HARD — zero false positives on the skills corpus):
+ * - `plan-id`: a dated-slug token (`20991231-<slug>`; the dated token
+ *   inside `iter-20990101-<slug>` counts). Synthetic example
+ *   slugs (`20991231-example-plan`, `20260717-example`) are never reported;
+ *   a token followed by a `.digits` version segment (`20260908-v3.9.0`) is
+ *   a version, not a plan id; placeholder shapes (`task-N-*`, `<plan-id>`,
+ *   `{…}`) never match the digit-anchored form.
+ * - `harness-path`: a `.mstar/…` / `.agents/…` deeplink containing a
+ *   qualifying dated token — the dated instance segment carries the
+ *   specificity, so generic layout lines (`.mstar/plans/`,
+ *   `.mstar/status.json`, `.mstar/knowledge/<category>/`) are never
+ *   reported.
+ * - Attribution (single decision, shared with `findEphemeralCitations`):
+ *   sdd deeplinks (first segment `sdd`, the SDD_DEEPLINK_RE face) belong to
+ *   the ephemeral check exclusively; a dated token inside any harness path
+ *   is reported at most once — as `harness-path` for non-sdd paths, never
+ *   by this finder for sdd paths. Undated concrete path segments are out of
+ *   scope (shape ambiguity — prose/review territory, like merge SHAs).
+ *
+ * Discovery only — a finder returning an array, same shape as
+ * `findEphemeralCitations`; callers wrap findings into `ViolationResult`s.
+ * Citations are reported line by line in 1-based line order, source order
+ * within a line.
+ */
+export declare function findProvenanceCitations(text: string): ProvenanceCitation[];
 /**
  * Validate task report evidence: an explicit scoped-check declaration for
  * document/policy checks, otherwise the executable-change TDD triple.

package/dist/path.d.ts

@@ -11,8 +11,8 @@ export type ResolveHarnessDirOptions = {
    */
     harnessDir?: string;
     /**
-   * Workspace-root stop boundary (roadmap §7c / plan
-   * 20260810-harness-root-boundary). The upward probe keeps walking only
+   * Workspace-root stop boundary (roadmap §7c). The upward probe keeps
+   * walking only
    * while `dir` is at or below this root — a harness dir above it is never
    * returned (the `~/.mstar` global-collision defect is the special case).
    * Resolved against `startDir` when relative. When omitted, the default

package/dist/project.d.ts

@@ -199,8 +199,8 @@ export declare function findingsCleanupGate(register: ProjectRegisterDoc, planId
  */
 export declare function techDebtRollup(projectDir: string): TechDebtRollup;
 /**
- * List theme-scoped research files under `<projectDir>/references/` (plan
- * 20260820-project-research-corpus Task 1 — compass ruling 1): top-level
+ * List theme-scoped research files under `<projectDir>/references/`
+ * (compass ruling 1): top-level
  * files plus files exactly one subdirectory deep; deeper nesting ignored;
  * directories never listed; regular files only (`Dirent.isFile()`). Returns
  * paths relative to the references root with `/` separators, sorted by code

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mstar-harness/engine",
-  "version": "3.9.2",
+  "version": "3.9.3",
   "description": "Morning Star Harness Workflow Engine — deterministic workflow enforcement library (path, status, lease, dispatch, sdd, iteration, lint gates).",
   "license": "MIT",
   "repository": {