@nurix/etna 0.19.45 → 0.19.47

package/data/harness-index.json

@@ -1,5 +1,5 @@
 {
-    "fingerprint": "8a30d3130f63",
+    "fingerprint": "fa53d6fe5dfc",
     "harnesses": {
         "apollo": {
             "plugin": "apollo",

package/data/harnesses/apollo/agents/bookkeeper.md

@@ -15,8 +15,8 @@ Ground every edit in this ladder, in order. Never invent content; a fact you can
 
 1. **`auto:` rows are recomputable from code + docs on any machine — fix directly.** A `dead-glob` row: read the owning doc, find where the files went (`git log --follow`, glob search), update its `owns:` frontmatter. A `header-missing` row: add the file-path header comment in the file's native comment syntax. A `doc-lint` row: fix the finding, or add `<!-- doc-lint-disable: id -->` with a reason beside it when the flagged text is deliberate. An `index-row-missing` row: add the doc's row to `docs/README.md`. A `doc-implicated` row: read the diff of the named source file (`git diff` / `git log -p`), and update the owning doc **only where the diff contradicts documented behavior**; if nothing documented changed, the row's resolution is deleting it.
 2. **`note:` rows — expand strictly from the stated context.** The one-line context after the area is everything the session chose to hand you; land it in the destination the row names (`lands-in:` an owning doc, the backlog, or memory), written in that document's genre.
-3. **A thin note, same machine only** — read a timestamp-anchored window of the transcript JSONL at the row's `tp=` path around its `ts=` stamp (never the whole file). The stamp is best-effort and dead on other clones — expected; treat an unreadable or missing transcript as "no window".
-4. **Still ungrounded** — replace the row with a `needs-session:` row (`- needs-session: {date} · {what you could not ground} → main session resolves | refs={original ts}`) and stop working that row.
+3. **A thin note, same machine only** — derive the transcript from the row's `sid=` tail: the session JSONL lives at `~/.claude/projects/{project-dir-slug}/{sid}.jsonl` (the slug is the project path with `/` → `-`). Search it for the row's file path or area and read only that window — never the whole file. The sid is best-effort and dead on other clones — expected; treat an unreadable or missing transcript as "no window".
+4. **Still ungrounded** — replace the row with a `needs-session:` row (`- needs-session: {date} · {what you could not ground} → main session resolves | refs={original row}`) and stop working that row.
 
 ## Rules
 

package/data/harnesses/apollo/harness.json

@@ -1,7 +1,7 @@
 {
   "harness": "apollo",
   "name": "apollo",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "files": [
     ".prettierignore",
     ".prettierrc.json",
@@ -14,5 +14,5 @@
     "docs/history/backlog.md",
     "docs/memory/main.md"
   ],
-  "digest": "544ba9e97120"
+  "digest": "7b3bfe5d305e"
 }

package/data/harnesses/apollo/hooks/awareness.mjs

@@ -123,6 +123,14 @@ function driftBanner(projectDir) {
   const waivers = unexpiredWaivers(queueRows, "dead-glob", today());
   const unwaivedDead = dead.filter((d) => !waivers.some((w) => w.body.includes(d.glob)));
 
+  // A queued dead-glob row covered by an unexpired waiver is resolved history — drop it,
+  // so waiving a finding class actually empties the rows it supersedes.
+  resolveRows(projectDir, (row) => {
+    if (row.kind !== "auto" || !row.body.includes("dead-glob")) return false;
+    const m = /`([^`]+)`/.exec(row.body);
+    return !!m && waivers.some((w) => w.body.includes(`\`${m[1]}\``));
+  });
+
   // Docs older than the code they own (doc mtime < newest owned-file mtime).
   const staleDocs = [];
   for (const entry of scanFeatureDocs(projectDir)) {
@@ -313,7 +321,9 @@ function detectorForFile(projectDir, rel, meta, rows) {
 
 function detectRenames(projectDir, command, meta, rows) {
   if (!/\bgit mv\b|\bmv\b/.test(command || "")) return;
+  const waivers = unexpiredWaivers(readQueue(projectDir), "dead-glob", today());
   for (const { glob, doc } of deadGlobs(projectDir)) {
+    if (waivers.some((w) => w.body.includes(`\`${glob}\``))) continue;
     rows.push(
       formatAutoRow({
         ...meta,

package/data/harnesses/apollo/hooks/compliance.mjs

@@ -232,7 +232,8 @@ function bashGate(projectDir, command, sessionId) {
     return commitGate(projectDir);
   }
 
-  if (statement(String.raw`git\s+(checkout\s+-b|switch\s+-c|branch\s+\S+|worktree\s+add)\b`).test(command)) {
+  // `git branch <name>` creates; flag-led forms (--show-current, --list, -d, -vv) query or manage
+  if (statement(String.raw`git\s+(checkout\s+-b|switch\s+-c|branch\s+(?!-)\S+|worktree\s+add)`).test(command)) {
     return askOnce(
       projectDir,
       sessionId,
@@ -290,12 +291,17 @@ function plansCompletedThisSession(projectDir) {
 function stopGate(projectDir, payload) {
   if (payload.stop_hook_active) return null; // the runtime's infinite-loop guard — never re-block
 
-  const counts = countRows(readQueue(projectDir));
+  // The Stop wall is scoped to this session's own rows (plus sid-less ones) — a concurrent
+  // session's open work must not block this one's stop. The commit wall stays global.
+  const mine = readQueue(projectDir).filter(
+    (row) => !/\bsid=/.test(row.body) || row.body.includes(`sid=${payload.session_id}`)
+  );
+  const counts = countRows(mine);
   if (counts.unresolved > 0 && !bookkeeperDispatched(payload.transcript_path)) {
     return {
       decision: "block",
       reason:
-        `${counts.unresolved} unresolved bookkeeping rows (${counts.auto} auto, ${counts.note} note, ${counts.needsSession} needs-session) in docs/operations/bookkeeping.md. ` +
+        `${counts.unresolved} unresolved bookkeeping rows from this session (${counts.auto} auto, ${counts.note} note, ${counts.needsSession} needs-session) in docs/operations/bookkeeping.md. ` +
         "Dispatch the `bookkeeper` agent to drain them, resolve them now, or convert to `waived:` rows with reason + expiry. " +
         "If implementation of the open plan is complete, also report it and offer the verification gate — never run it unbidden.",
     };

package/data/harnesses/apollo/hooks/lib/state.mjs

@@ -1,8 +1,8 @@
 // harness/code/hooks/lib/state.mjs — the bookkeeping queue (docs/operations/bookkeeping.md) and the
 // machine-local state dir (.claude/state/). The row grammar is the contract between the awareness
 // detector (writer), the bookkeeper agent (drain), the compliance gates (walls), and CI (backstop):
-//   - auto: {YYYY-MM-DD} · {finding-kind} · {description} → {action} | sid={session_id} tp={transcript_path} ts={ISO}
-//   - note: {YYYY-MM-DD} · {area} · {context} → lands-in: {owning doc | backlog | memory} | sid=… tp=… ts=…
+//   - auto: {YYYY-MM-DD} · {finding-kind} · {description} → {action} | sid={session_id}
+//   - note: {YYYY-MM-DD} · {area} · {context} → lands-in: {owning doc | backlog | memory} | sid=…
 //   - needs-session: {YYYY-MM-DD} · {what could not be grounded} → main session resolves | refs={ts}
 //   - waived: {YYYY-MM-DD} · {what is deferred} · reason: {why} → expires={YYYY-MM-DD}
 // Unresolved = auto + note + needs-session. waived: rows are resolved history until expires= passes.
@@ -57,9 +57,10 @@ export function countRows(rows) {
   return c;
 }
 
-// Format one auto: row per the grammar; sid/tp/ts come from the hook payload.
-export function formatAutoRow({ date, kind, description, action, sessionId, transcriptPath, ts }) {
-  return `- auto: ${date} · ${kind} · ${description} → ${action} | sid=${sessionId || "-"} tp=${transcriptPath || "-"} ts=${ts || "-"}`;
+// Format one auto: row per the grammar; the sid tail is the only provenance kept —
+// a transcript path or timestamp is machine noise in a PR-reviewed queue.
+export function formatAutoRow({ date, kind, description, action, sessionId }) {
+  return `- auto: ${date} · ${kind} · ${description} → ${action} | sid=${sessionId || "-"}`;
 }
 
 // Append rows to the queue, creating the file with its genre header when absent.

package/data/harnesses/code/agents/bookkeeper.md

@@ -15,8 +15,8 @@ Ground every edit in this ladder, in order. Never invent content; a fact you can
 
 1. **`auto:` rows are recomputable from code + docs on any machine — fix directly.** A `dead-glob` row: read the owning doc, find where the files went (`git log --follow`, glob search), update its `owns:` frontmatter. A `header-missing` row: add the file-path header comment in the file's native comment syntax. A `doc-lint` row: fix the finding, or add `<!-- doc-lint-disable: id -->` with a reason beside it when the flagged text is deliberate. An `index-row-missing` row: add the doc's row to `docs/README.md`. A `doc-implicated` row: read the diff of the named source file (`git diff` / `git log -p`), and update the owning doc **only where the diff contradicts documented behavior**; if nothing documented changed, the row's resolution is deleting it.
 2. **`note:` rows — expand strictly from the stated context.** The one-line context after the area is everything the session chose to hand you; land it in the destination the row names (`lands-in:` an owning doc, the backlog, or memory), written in that document's genre.
-3. **A thin note, same machine only** — read a timestamp-anchored window of the transcript JSONL at the row's `tp=` path around its `ts=` stamp (never the whole file). The stamp is best-effort and dead on other clones — expected; treat an unreadable or missing transcript as "no window".
-4. **Still ungrounded** — replace the row with a `needs-session:` row (`- needs-session: {date} · {what you could not ground} → main session resolves | refs={original ts}`) and stop working that row.
+3. **A thin note, same machine only** — derive the transcript from the row's `sid=` tail: the session JSONL lives at `~/.claude/projects/{project-dir-slug}/{sid}.jsonl` (the slug is the project path with `/` → `-`). Search it for the row's file path or area and read only that window — never the whole file. The sid is best-effort and dead on other clones — expected; treat an unreadable or missing transcript as "no window".
+4. **Still ungrounded** — replace the row with a `needs-session:` row (`- needs-session: {date} · {what you could not ground} → main session resolves | refs={original row}`) and stop working that row.
 
 ## Rules
 

package/data/harnesses/code/harness.json

@@ -1,12 +1,12 @@
 {
   "harness": "code",
   "name": "code",
-  "version": "3.5.11",
+  "version": "3.5.12",
   "files": [
     ".prettierignore",
     ".prettierrc.json",
     ".vscode/settings.json"
   ],
   "seeds": [],
-  "digest": "132494301fd0"
+  "digest": "ddfeda99a408"
 }

package/data/harnesses/code/hooks/awareness.mjs

@@ -123,6 +123,14 @@ function driftBanner(projectDir) {
   const waivers = unexpiredWaivers(queueRows, "dead-glob", today());
   const unwaivedDead = dead.filter((d) => !waivers.some((w) => w.body.includes(d.glob)));
 
+  // A queued dead-glob row covered by an unexpired waiver is resolved history — drop it,
+  // so waiving a finding class actually empties the rows it supersedes.
+  resolveRows(projectDir, (row) => {
+    if (row.kind !== "auto" || !row.body.includes("dead-glob")) return false;
+    const m = /`([^`]+)`/.exec(row.body);
+    return !!m && waivers.some((w) => w.body.includes(`\`${m[1]}\``));
+  });
+
   // Docs older than the code they own (doc mtime < newest owned-file mtime).
   const staleDocs = [];
   for (const entry of scanFeatureDocs(projectDir)) {
@@ -313,7 +321,9 @@ function detectorForFile(projectDir, rel, meta, rows) {
 
 function detectRenames(projectDir, command, meta, rows) {
   if (!/\bgit mv\b|\bmv\b/.test(command || "")) return;
+  const waivers = unexpiredWaivers(readQueue(projectDir), "dead-glob", today());
   for (const { glob, doc } of deadGlobs(projectDir)) {
+    if (waivers.some((w) => w.body.includes(`\`${glob}\``))) continue;
     rows.push(
       formatAutoRow({
         ...meta,

package/data/harnesses/code/hooks/compliance.mjs

@@ -232,7 +232,8 @@ function bashGate(projectDir, command, sessionId) {
     return commitGate(projectDir);
   }
 
-  if (statement(String.raw`git\s+(checkout\s+-b|switch\s+-c|branch\s+\S+|worktree\s+add)\b`).test(command)) {
+  // `git branch <name>` creates; flag-led forms (--show-current, --list, -d, -vv) query or manage
+  if (statement(String.raw`git\s+(checkout\s+-b|switch\s+-c|branch\s+(?!-)\S+|worktree\s+add)`).test(command)) {
     return askOnce(
       projectDir,
       sessionId,
@@ -290,12 +291,17 @@ function plansCompletedThisSession(projectDir) {
 function stopGate(projectDir, payload) {
   if (payload.stop_hook_active) return null; // the runtime's infinite-loop guard — never re-block
 
-  const counts = countRows(readQueue(projectDir));
+  // The Stop wall is scoped to this session's own rows (plus sid-less ones) — a concurrent
+  // session's open work must not block this one's stop. The commit wall stays global.
+  const mine = readQueue(projectDir).filter(
+    (row) => !/\bsid=/.test(row.body) || row.body.includes(`sid=${payload.session_id}`)
+  );
+  const counts = countRows(mine);
   if (counts.unresolved > 0 && !bookkeeperDispatched(payload.transcript_path)) {
     return {
       decision: "block",
       reason:
-        `${counts.unresolved} unresolved bookkeeping rows (${counts.auto} auto, ${counts.note} note, ${counts.needsSession} needs-session) in docs/operations/bookkeeping.md. ` +
+        `${counts.unresolved} unresolved bookkeeping rows from this session (${counts.auto} auto, ${counts.note} note, ${counts.needsSession} needs-session) in docs/operations/bookkeeping.md. ` +
         "Dispatch the `bookkeeper` agent to drain them, resolve them now, or convert to `waived:` rows with reason + expiry. " +
         "If implementation of the open plan is complete, also report it and offer the verification gate — never run it unbidden.",
     };

package/data/harnesses/code/hooks/lib/state.mjs

@@ -1,8 +1,8 @@
 // harness/code/hooks/lib/state.mjs — the bookkeeping queue (docs/operations/bookkeeping.md) and the
 // machine-local state dir (.claude/state/). The row grammar is the contract between the awareness
 // detector (writer), the bookkeeper agent (drain), the compliance gates (walls), and CI (backstop):
-//   - auto: {YYYY-MM-DD} · {finding-kind} · {description} → {action} | sid={session_id} tp={transcript_path} ts={ISO}
-//   - note: {YYYY-MM-DD} · {area} · {context} → lands-in: {owning doc | backlog | memory} | sid=… tp=… ts=…
+//   - auto: {YYYY-MM-DD} · {finding-kind} · {description} → {action} | sid={session_id}
+//   - note: {YYYY-MM-DD} · {area} · {context} → lands-in: {owning doc | backlog | memory} | sid=…
 //   - needs-session: {YYYY-MM-DD} · {what could not be grounded} → main session resolves | refs={ts}
 //   - waived: {YYYY-MM-DD} · {what is deferred} · reason: {why} → expires={YYYY-MM-DD}
 // Unresolved = auto + note + needs-session. waived: rows are resolved history until expires= passes.
@@ -57,9 +57,10 @@ export function countRows(rows) {
   return c;
 }
 
-// Format one auto: row per the grammar; sid/tp/ts come from the hook payload.
-export function formatAutoRow({ date, kind, description, action, sessionId, transcriptPath, ts }) {
-  return `- auto: ${date} · ${kind} · ${description} → ${action} | sid=${sessionId || "-"} tp=${transcriptPath || "-"} ts=${ts || "-"}`;
+// Format one auto: row per the grammar; the sid tail is the only provenance kept —
+// a transcript path or timestamp is machine noise in a PR-reviewed queue.
+export function formatAutoRow({ date, kind, description, action, sessionId }) {
+  return `- auto: ${date} · ${kind} · ${description} → ${action} | sid=${sessionId || "-"}`;
 }
 
 // Append rows to the queue, creating the file with its genre header when absent.

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@nurix/etna",
-    "version": "0.19.45",
+    "version": "0.19.47",
     "description": "Bootstrap a project with a Nurix harness — copies the harness's CLAUDE.md, skills, agents, rules, and hooks directly into the project from a bundled payload (no marketplace fetch, no network).",
     "type": "module",
     "bin": {
@@ -19,6 +19,7 @@
         "node": ">=18.0.0"
     },
     "scripts": {
+        "test": "node --test 'tests/**/*.test.mjs'",
         "build:data": "node scripts/build-data.js",
         "prepack": "node scripts/build-data.js",
         "validate:codex-agents": "node lib/codex/validate-codex-agents.mjs"
@@ -41,5 +42,5 @@
         "agent",
         "plugin"
     ],
-    "etnaFingerprint": "8a30d3130f63"
+    "etnaFingerprint": "fa53d6fe5dfc"
 }