@skyf0xx/hedgehog 5.3.3 → 5.3.4

package/bin/cli.mjs

@@ -1296,11 +1296,15 @@ async function intentCommand(args) {
 }
 
 // On a module-axis core the intent id becomes {module} in every layer's
-// scope glob and verify command, and the generators the packet points at
-// take the module name plural. A singular id compiles a whole graph
-// scoped to a directory the generator will never write, and nothing
-// downstream catches it: plan compiles it, claim hands out a packet whose
-// own scaffold command contradicts its ALLOWED SCOPE.
+// scope glob and verify command, and on a core whose generator pluralizes
+// it (core.yaml's `pluralizes`, default true), a singular id compiles a
+// whole graph scoped to a directory the generator will never write, and
+// nothing downstream catches it: plan compiles it, claim hands out a
+// packet whose own scaffold command contradicts its ALLOWED SCOPE. A core
+// that declares `pluralizes: false` never has this failure mode, so
+// warnSingularModuleId and warnSingularModuleIdsAtPlan both skip it —
+// see core.pluralizes in src/db/core.mjs for why that lives on the core
+// rather than as a hardcoded exception here.
 //
 // A warning rather than a refusal: plenty of real modules are singular
 // (`billing`, `search`), so the convention cannot be enforced without
@@ -1332,6 +1336,7 @@ async function warnSingularModuleId(intent) {
     return;
   }
   if (!isModuleAxis(core)) return;
+  if (core.pluralizes === false) return;
   if (!looksSingular(intent.id)) return;
 
   console.log(
@@ -1360,6 +1365,7 @@ async function warnSingularModuleId(intent) {
 // recovery is still per-id, so those lines are listed one per name.
 function warnSingularModuleIdsAtPlan(core, db) {
   if (!isModuleAxis(core)) return;
+  if (core.pluralizes === false) return;
 
   // Every intent whose tasks have all yet to start, not just the ones
   // this run compiled. `db rebuild` replays the committed intent files

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skyf0xx/hedgehog",
-  "version": "5.3.3",
+  "version": "5.3.4",
   "description": "Install the Hedgehog build discipline (agents + skills) into a repo, for Claude Code, Cursor, or Gemini CLI.",
   "type": "module",
   "repository": {

package/src/db/core.mjs

@@ -182,6 +182,7 @@ function indentOf(line) {
 
 // Parses the narrow subset of YAML a core definition needs:
 //   id: <scalar>
+//   pluralizes: <bool>            # optional, default true
 //   layers:
 //     - id: <scalar>
 //       depends_on: <scalar>          # optional
@@ -201,7 +202,7 @@ export function parseCoreYaml(text) {
     lines.push({ indent: indentOf(noComment), text: noComment.trim() });
   }
 
-  const core = { id: undefined, layers: [] };
+  const core = { id: undefined, pluralizes: true, layers: [] };
   let i = 0;
 
   while (i < lines.length && lines[i].indent === 0) {
@@ -214,6 +215,15 @@ export function parseCoreYaml(text) {
     if (!match) throw new Error(`unparseable line: ${line.text}`);
     const [, key, value] = match;
     if (key === 'id') core.id = parseScalar(value);
+    // Whether this core's own generator takes a module id plural — a
+    // fixed, known fact about that generator, not a per-project unknown.
+    // Absent means true, so every core written before this field existed
+    // keeps warning exactly as it always has; a core whose generator
+    // never pluralizes (deepseek-harness's tool generator uses the id
+    // verbatim) declares `pluralizes: false` once and the singular-id
+    // advisory stops firing on it for good, rather than every user of
+    // that core re-discovering the same false positive.
+    if (key === 'pluralizes') core.pluralizes = parseScalar(value) === 'true';
     i++;
   }
 

package/src/db/next.mjs

@@ -375,10 +375,19 @@ export function scopePackageRoot(glob, module) {
   const segments = glob.replace('{module}', module).split('/');
   const wildcard = segments.findIndex((s) => s.includes('*'));
   // No wildcard means the glob names one literal file, not a directory
-  // tree — a single prompt/config file (e.g. `.hedgehog/dsh-smoke/{module}.md`)
-  // never holds a `package.json` of its own, so its parent directory is
-  // never a package root a generator could be first into.
-  if (wildcard === -1) return null;
+  // tree. Most such files are a single prompt/config file (e.g.
+  // `.hedgehog/dsh-smoke/{module}.md`) whose parent directory never holds
+  // a `package.json` of its own, so it is never a package root a
+  // generator could be first into — except when the literal file IS
+  // `package.json`: a layer whose own scope names that file directly
+  // (deepseek-harness's `bundle`: `plugins/{module}/package.json`) is
+  // naming its package root exactly as surely as a wildcard glob under
+  // that root would, and its parent directory is that root.
+  if (wildcard === -1) {
+    if (segments.at(-1) !== 'package.json') return null;
+    const literal = segments.slice(0, -1);
+    return literal.length >= 2 ? literal.join('/') : null;
+  }
   const literal = segments.slice(0, wildcard);
   const src = literal.indexOf('src');
   const root = src === -1 ? literal : literal.slice(0, src);
@@ -389,12 +398,13 @@ export function scopePackageRoot(glob, module) {
 
 // A task is the first arrival in its package when the package the scope
 // points into has no package.json on disk yet: the generator that
-// scaffolds this layer will create the package shell (package.json,
-// tsconfig*.json, vitest.config.mts, src/index.ts) alongside the module's
-// own files, and every one of those lands outside a {module}-bearing
-// glob. Detected here rather than left to be discovered from a failed
-// verify, which is where the override stops being available and the
-// recovery becomes a five-command round trip.
+// scaffolds this layer will create the package shell (package.json plus
+// whatever else this core scaffolds alongside it — tsconfig, test
+// config, src/index.ts) alongside the module's own files, and every one
+// of those lands outside a {module}-bearing glob. Detected here rather
+// than left to be discovered from a failed verify, which is where the
+// override stops being available and the recovery becomes a
+// five-command round trip.
 //
 // `exists` is injected so this module keeps no filesystem dependency of
 // its own; the CLI passes a real one and the packet degrades to no
@@ -429,11 +439,11 @@ function firstArrivalLines(task, roots) {
   return [
     'FIRST ARRIVAL',
     `  ${roots.join(', ')} ${roots.length > 1 ? 'do' : 'does'} not exist yet, so this task's`,
-    "  generator also creates the package shell (package.json, tsconfig*.json,",
-    '  vitest.config.mts, src/index.ts) plus any package-wide source it writes',
-    '  at the src/ root. All of that lands OUTSIDE the scope above. Widen this',
-    '  one task before building it, or verify will reject those paths and',
-    '  block the task:',
+    '  generator also creates the package shell (package.json plus whatever else',
+    '  this core scaffolds alongside it — tsconfig, test config, src/index.ts)',
+    '  plus any package-wide source it writes at the src/ root. All of that',
+    '  lands OUTSIDE the scope above. Widen this one task before building it,',
+    '  or verify will reject those paths and block the task:',
     '',
     `  hedgehog override add ${task.id} \\`,
     ...scopes.map((s) => `    --scope '${s}' \\`),

package/src/hosts/gemini/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "hedgehog",
-  "version": "5.3.3",
+  "version": "5.3.4",
   "description": "Hedgehog build discipline: ordered, tested, verified build steps.",
   "contextFileName": "GEMINI.md"
 }