@pareto4/pp-core 1.13.0 → 1.17.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pareto4/pp-core",
-  "version": "1.13.0",
+  "version": "1.17.1",
   "description": "Pareto pp-core — The Pareto Project's AI-assisted engineering framework: meta-prompting, context engineering, and spec-driven development for AI coding agents.",
   "bin": {
     "pp-core": "bin/install.js",
@@ -38,11 +38,11 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "git+https://gitlab.com/pareto4/pp-core.git"
+    "url": "git+https://github.com/pareto000/pp-core.git"
   },
-  "homepage": "https://gitlab.com/pareto4/pp-core",
+  "homepage": "https://github.com/pareto000/pp-core",
   "bugs": {
-    "url": "https://gitlab.com/pareto4/pp-core/-/issues"
+    "url": "https://github.com/pareto000/pp-core/issues"
   },
   "publishConfig": {
     "access": "public"
@@ -52,7 +52,7 @@
     "npm": ">=10.0.0"
   },
   "dependencies": {
-    "@anthropic-ai/claude-agent-sdk": "^0.3.218",
+    "@anthropic-ai/claude-agent-sdk": "^0.3.251",
     "ws": "^8.21.0"
   },
   "devDependencies": {
@@ -65,22 +65,13 @@
     "eslint-plugin-no-only-tests": "^3.4.0",
     "fast-check": "^4.8.0",
     "globals": "^16.5.0",
-    "js-yaml": "^4.3.2",
+    "js-yaml": "^4.2.0",
     "typescript": "^6.0.3",
     "typescript-eslint": "^8.60.0"
   },
   "overrides": {
     "qs": ">=6.16.0",
-    "@hono/node-server": ">=2.0.5",
-    "@modelcontextprotocol/sdk": "^1.31.0",
-    "fast-uri": "^3.1.8",
-    "hono": "^4.13.7",
-    "ip-address": "^10.7.1",
-    "proxy-addr": "^2.0.8",
-    "brace-expansion@^1.1.0": "^1.1.21",
-    "brace-expansion@^5.0.0": "^5.0.12",
-    "browserslist": "^4.28.7",
-    "baseline-browser-mapping": "^2.11.0"
+    "@hono/node-server": ">=2.0.5"
   },
   "optionalDependencies": {
     "fallow": "^2.70.0"
@@ -88,7 +79,7 @@
   "scripts": {
     "sync:launcher": "node scripts/sync-runtime-launcher.cjs",
     "check:env": "node scripts/check-env.cjs",
-    "setup": "node scripts/dev-env.cjs stable",
+    "setup": "node scripts/dev-env.cjs setup",
     "dev:setup": "node scripts/dev-env.cjs dev-setup",
     "dev:install": "node scripts/dev-env.cjs install",
     "dev:claude": "node scripts/dev-env.cjs claude",
@@ -103,6 +94,7 @@
     "gen:capability-registry": "node scripts/gen-capability-registry.cjs --write",
     "gen:platform-bindings-schema": "node scripts/gen-platform-bindings-schema.cjs --write",
     "check:platform-bindings-schema": "node scripts/gen-platform-bindings-schema.cjs --check",
+    "check:inventory-manifest": "node scripts/gen-inventory-manifest.cjs --check",
     "gen:commands-reference": "node scripts/gen-commands-reference.cjs --write",
     "prepack": "npm run build:lib",
     "prepare": "npm run build:lib",
@@ -112,7 +104,7 @@
     "pretest:coverage": "npm run build:lib && npm run lint:skill-deps",
     "lint": "eslint . --cache --cache-location node_modules/.cache/eslint/",
     "lint:fix": "eslint . --fix",
-    "lint:ci": "npm run lint && npm run lint:skill-deps && node scripts/lint-test-file-count.cjs && node scripts/lint-command-contract.cjs && node scripts/lint-pr-check-project-dir.cjs && npm run lint:legacy-name && node scripts/lint-regression-test-names.cjs && node scripts/lint-windows-test-portability.cjs && node scripts/lint-allow-test-rule-refs.cjs && npm run check:platform-bindings-schema && node scripts/lint-org-coordinates.cjs && node scripts/lint-neutrality-names.cjs",
+    "lint:ci": "npm run lint && npm run lint:skill-deps && node scripts/lint-test-file-count.cjs && node scripts/lint-command-contract.cjs && node scripts/lint-pr-check-project-dir.cjs && npm run lint:legacy-name && node scripts/lint-regression-test-names.cjs && node scripts/lint-windows-test-portability.cjs && node scripts/lint-allow-test-rule-refs.cjs && npm run check:platform-bindings-schema && npm run check:practice-arithmetic-contract && npm run check:inventory-manifest && npm run rename-guard",
     "lint:allow-test-rule-refs": "node scripts/lint-allow-test-rule-refs.cjs",
     "lint:windows-test-portability": "node scripts/lint-windows-test-portability.cjs",
     "lint:regression-names": "node scripts/lint-regression-test-names.cjs",
@@ -127,6 +119,7 @@
     "rename-guard:baseline": "node scripts/verify-rename-guard.cjs --update-baseline",
     "ci:test-scope": "node scripts/ci-test-scope.cjs",
     "size:baseline": "node scripts/update-size-baseline.cjs",
+    "vault:calibrate": "node scripts/vault-calibrate.cjs",
     "changeset": "node scripts/changeset/new.cjs",
     "changelog:render": "node scripts/changeset/cli.cjs render",
     "test": "node scripts/run-tests.cjs",
@@ -141,6 +134,8 @@
     "test:coverage:unit": "c8 --check-coverage --lines 70 --branches 60 --reporter text --include 'pp-core/bin/lib/*.cjs' --exclude 'tests/**' --all node scripts/run-tests.cjs --suite unit && c8 check-coverage --per-file --lines 0 --functions 0 --statements 0 --branches 70 --include 'pp-core/bin/lib/state.cjs' --include 'pp-core/bin/lib/phase.cjs' --include 'pp-core/bin/lib/verify.cjs' --include 'pp-core/bin/lib/init.cjs' --exclude 'tests/**'",
     "test:coverage:all": "npm run test:coverage",
     "test:mutation": "stryker run",
-    "test:mutation:since": "stryker run --incremental --since origin/next"
+    "test:mutation:since": "stryker run --incremental --since origin/next",
+    "gen:practice-arithmetic-contract": "node scripts/gen-practice-arithmetic-contract.cjs --write",
+    "check:practice-arithmetic-contract": "node scripts/gen-practice-arithmetic-contract.cjs --check"
   }
 }

package/pareto-skills/pp-project-setup/SKILL.md

@@ -159,7 +159,7 @@ mkdir -p \
   .obsidian
 ```
 
-Discovery Sprint artifacts are not scaffolded here — `/pp-discovery` creates `.planning/discovery/` itself on first run (session files, `_progress.md`, `_context.md`). The interactive prototype is built by `/pp-discovery prototype` into `.planning/discovery/prototype/`, on the UI kit the client vault declares when there is one, otherwise on the kit recorded in Session 4.
+Discovery Sprint artifacts are not scaffolded here — `/pp-discovery` creates `.planning/discovery/` itself on first run (session files, `_progress.md`, `_context.md`). The interactive prototype is built by `/pp-discovery prototype` into `.planning/discovery/prototype/`, on the UI kit the client vault declares.
 
 #### 4c. Scaffold Project Definition & Requirements Templates
 

package/pp-core/bin/detect-build-commands.sh

@@ -47,7 +47,7 @@
 # the test ladder, after the Python arm in the build ladder, matching where
 # package.json already sat in each. The relative order of every pre-existing
 # arm is unchanged. That placement is load-bearing and is proven by an executed
-# mutation rung in tests/gate-shell-owners.test.cjs
+# mutation rung in tests/feat-73988-gate-shell-owners.test.cjs
 # ("PLACEMENT RUNG"), which swaps the two arms in a scratch copy and asserts
 # the shadowing reappears.
 #
@@ -86,7 +86,7 @@ _pp_emit() { printf '%s\n' "$1"; }
 # -maxdepth 2 probe covers ./App.csproj and ./App/App.csproj but misses the
 # canonical one entirely, which would silently hand a .NET repository back to
 # the package.json arm. All three layouts are pinned as a matrix in
-# tests/gate-shell-owners.test.cjs.
+# tests/feat-73988-gate-shell-owners.test.cjs.
 #
 # The solution probe stays at depth 1: a .sln nested deeper falls through to
 # the project probe, which still yields a correct `dotnet test`, whereas a

package/pp-core/bin/lib/capability-activation.cjs

@@ -13,11 +13,19 @@ const node_path_1 = __importDefault(require("node:path"));
 // eslint-disable-next-line @typescript-eslint/no-require-imports
 const planningWorkspaceMod = require("./planning-workspace.cjs");
 const { planningDir, planningRoot } = planningWorkspaceMod;
+/**
+ * Segments that must never be walked or matched, on either key form.
+ * Extracted so the nested walk and the flat fallback cannot drift into
+ * disagreeing about what a pollution attempt looks like.
+ */
+function _isRejectedKeySegment(seg) {
+    return seg === '__proto__' || seg === 'constructor' || seg === 'prototype';
+}
 function _getNestedConfigValue(config, dotKey) {
     const segments = dotKey.split('.');
     let current = config;
     for (const seg of segments) {
-        if (seg === '__proto__' || seg === 'constructor' || seg === 'prototype') {
+        if (_isRejectedKeySegment(seg)) {
             return { found: false, value: undefined };
         }
         if (typeof current !== 'object' || current === null) {
@@ -31,6 +39,65 @@ function _getNestedConfigValue(config, dotKey) {
     }
     return { found: true, value: current };
 }
+/**
+ * GATE-05: look the WHOLE dotted string up as a single own property.
+ *
+ * An operator hand-pasting a gate key into a config.json they did not write
+ * writes `{"vault.required": true}` at least as often as the three-line nested
+ * form. Before this existed, that flat shape resolved nowhere — the nested walk
+ * looked up `config['vault']`, found nothing, and the key silently fell through
+ * to its default. For an enforcement gate that is a fail-open with no error
+ * message, which is exactly the failure GATE-05 exists to close.
+ *
+ * Performs NO traversal: one own-property check on a string already in hand.
+ * The rejected-segment guard is applied to every segment of the dotted string
+ * anyway (T-02-13) so the flat path can never become the bypass the nested
+ * path already closes, and `hasOwnProperty` is required (T-02-14) so an
+ * inherited property is never mistaken for configuration.
+ *
+ * A flat own property valued `undefined` is reported NOT-found on purpose: it
+ * cannot come from JSON, and treating it as configured would let a
+ * programmatically built object shadow the schema default with nothing.
+ */
+function _getFlatConfigValue(config, dotKey) {
+    for (const seg of dotKey.split('.')) {
+        if (_isRejectedKeySegment(seg))
+            return { found: false, value: undefined };
+    }
+    if (typeof config !== 'object' || config === null) {
+        return { found: false, value: undefined };
+    }
+    if (!Object.prototype.hasOwnProperty.call(config, dotKey)) {
+        return { found: false, value: undefined };
+    }
+    const value = config[dotKey];
+    if (value === undefined)
+        return { found: false, value: undefined };
+    return { found: true, value };
+}
+/**
+ * GATE-05: resolve a dotted key in EITHER form against one config object.
+ *
+ * PRECEDENCE — nested first, flat only as a fallback. This ordering is the
+ * decision, not an implementation detail: when both forms are present for the
+ * same key the NESTED form wins. Chosen because every shipped example and every
+ * project configured to date is nested, so a nested-first fallback cannot move
+ * the resolution of any key that resolves today — the flat form resolves
+ * nowhere at present, so adding it below the nested walk is strictly additive.
+ * A flat-first ordering would silently change behaviour for any project that
+ * later adds a flat key alongside a nested one. Pinned by the
+ * "both forms present … NESTED wins" tests in
+ * tests/capability-precedence-parity.test.cjs; invert this and they go red.
+ *
+ * Called from the leaf of every precedence level, so levels 1-3 inherit the
+ * fallback without any change to the four-level walk itself.
+ */
+function getConfigValueEitherForm(config, dotKey) {
+    const nested = _getNestedConfigValue(config, dotKey);
+    if (nested.found)
+        return nested;
+    return _getFlatConfigValue(config, dotKey);
+}
 const _warnedRawConfigPaths = new Set();
 function _readRawConfigKey(filePath, dotKey) {
     try {
@@ -49,7 +116,9 @@ function _readRawConfigKey(filePath, dotKey) {
             }
             return { found: false, value: undefined };
         }
-        return _getNestedConfigValue(parsed, dotKey);
+        // GATE-05: levels 2 and 3 read raw config.json files — the surface an
+        // operator hand-edits — so they need both key forms, nested first.
+        return getConfigValueEitherForm(parsed, dotKey);
     }
     catch {
         return { found: false, value: undefined };
@@ -58,11 +127,11 @@ function _readRawConfigKey(filePath, dotKey) {
 /**
  * The raw config files levels 2 and 3 read, in read order: the active
  * `planningDir(cwd)/config.json`, then the root `planningRoot(cwd)/config.json`
- * when it is a different file. Exported so `unreadableConfigFiles`
- * (src/config-loader.cts) parses every file the hook resolver reads — this list
- * beside `configFilesFor`, the loader's — without restating either. Both levels
- * skip an unparseable file with a stderr warning and read on, which is the
- * swallow a gate-governing caller must refuse.
+ * when it is a different file (16-04, D-28). Exported so the door-admission
+ * verdict (`vaultAdmissionVerdict` in src/vault.cts) parses every file the gate
+ * reads — this list beside `configFilesFor`, the loader's — without restating
+ * either. Both levels skip an unparseable file with a stderr warning and read
+ * on, which is the swallow the verdict exists to refuse.
  */
 function activationConfigFilesFor(cwd) {
     const wsConfigPath = node_path_1.default.join(planningDir(cwd), 'config.json');
@@ -84,8 +153,8 @@ function activationConfigFilesFor(cwd) {
  */
 function resolveConfigKey(dotKey, opts) {
     const { config, cwd, registry } = opts;
-    // Level 1: loadConfig result
-    const fromConfig = _getNestedConfigValue(config, dotKey);
+    // Level 1: loadConfig result (GATE-05: nested form first, flat form as fallback)
+    const fromConfig = getConfigValueEitherForm(config, dotKey);
     if (fromConfig.found)
         return { found: true, value: fromConfig.value };
     // Level 2 + 3: raw config.json files (only when cwd is available)
@@ -116,6 +185,11 @@ function _resolveActivationValue(dotKey, config, cwd, registry) {
 }
 module.exports = {
     _getNestedConfigValue,
+    // GATE-05: exported so src/config.cts's cmdConfigGet reuses this exact flat
+    // lookup rather than growing a second, driftable copy of the rule.
+    _getFlatConfigValue,
+    _isRejectedKeySegment,
+    getConfigValueEitherForm,
     _readRawConfigKey,
     _resolveActivationValue,
     resolveConfigKey,