@starci/eslint-canon-fe 9.13.2 → 9.13.4

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 9.13.4 - 2026-11-04
+
+- Changed: the runtime copy of the canon pins names the release-6 versions.
+
+## 9.13.3 - 2026-11-04
+
+- Changed: the runtime copies carry `engine/runtime-root.mjs`, which moves an installed copy's legacy state with its owner and mode (`@starci/hfs` 5.6.1), and the release-5 canon pins.
+
 ## 9.13.2 - 2026-11-04
 
 - Changed: the runtime copies carry `engine/runtime-root.mjs` with the per-user state base of an installed copy (`@starci/hfs` 5.6.0) and the canon pins of release 4 (`@starci/auth` 0.4.0, `@starci/auth-oidc` 0.1.3).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@starci/eslint-canon-fe",
-  "version": "9.13.2",
+  "version": "9.13.4",
   "description": "Universal front-end lint laws for TypeScript and Next.js, independent of the selected Grammar family.",
   "type": "module",
   "license": "MIT",

package/runtime/engine/runtime-root.mjs

@@ -58,10 +58,36 @@ export class LegacyStateHeld extends Error {
 }
 const HELD = new Set(['EPERM', 'EBUSY', 'EACCES']);
 const isHeld = (error) => HELD.has(String(error?.code));
+/** Gives `to` and everything below it the mode, owner and group of the matching entry of `from` (a copy keeps neither on its own). */
+function keepOwnership(from, to) {
+    const source = fs.lstatSync(from);
+    const target = fs.lstatSync(to);
+    if (!source.isSymbolicLink())
+        fs.chmodSync(to, source.mode & 0o7777);
+    if (source.uid !== target.uid || source.gid !== target.gid)
+        fs.lchownSync(to, source.uid, source.gid);
+    if (source.isDirectory())
+        for (const name of fs.readdirSync(from))
+            keepOwnership(path.join(from, name), path.join(to, name));
+}
+/** Moves one entry by rename, which keeps its owner and mode; across volumes (EXDEV) it is copied, its ownership restored, then removed. */
+function moveEntry(from, to) {
+    try {
+        fs.renameSync(from, to);
+        return;
+    }
+    catch (error) {
+        if (error?.code !== 'EXDEV')
+            throw error;
+    }
+    fs.cpSync(from, to, { recursive: true, verbatimSymlinks: true, errorOnExist: true, force: false });
+    keepOwnership(from, to);
+    fs.rmSync(from, { recursive: true, force: true });
+}
 /**
  * Moves the state an installed copy kept inside itself (<copy>/.runtime, before installedStateBase) out to the state base, once: the
- * folder is first renamed to <copy>/.runtime.adopting (a rename a running stack's open files refuse, LegacyStateHeld), then copied
- * entry by entry and removed. An entry the state base already holds is kept beside it under legacy-<stamp>/, never overwritten. An
+ * folder is first renamed to <copy>/.runtime.adopting (a rename a running stack's open files refuse, LegacyStateHeld), then each entry
+ * is moved with its owner and mode (a bind folder a container user owns stays that user's) and the folder removed. An entry the state base already holds is kept beside it under legacy-<stamp>/, never overwritten. An
  * interrupted adoption resumes from .runtime.adopting. Null when there is nothing to adopt: a checkout, LOCAL_ROOT_ENV set, or no
  * legacy folder.
  */
@@ -88,7 +114,8 @@ export function adoptLegacyState(env = process.env, root = skillRoot, now = () =
     const kept = [];
     for (const name of fs.readdirSync(parked).sort()) {
         const taken = fs.existsSync(path.join(to, name));
-        fs.cpSync(path.join(parked, name), path.join(taken ? aside : to, name), { recursive: true, verbatimSymlinks: true, errorOnExist: true, force: false });
+        fs.mkdirSync(taken ? aside : to, { recursive: true });
+        moveEntry(path.join(parked, name), path.join(taken ? aside : to, name));
         (taken ? kept : moved).push(name);
     }
     fs.rmSync(parked, { recursive: true, force: true });

package/runtime/knowledge/hfs/canon-pins.yaml

@@ -38,7 +38,7 @@ pins:
     source: packages/next-data/package.json
     why: 'the SWR data helpers of every front end (fe-stack data, owner:next-data-package): pollingRestart, the viewer and tenant key helpers, viewerSwrConfig and the viewer cache; each operation hook stays in the app and the package holds no component.'
   '@starci/grammar':
-    version: 0.21.19
+    version: 0.21.21
     group: starci
     install: registry
     side: fe
@@ -52,28 +52,28 @@ pins:
     source: packages/next-i18n/package.json
     why: 'the next-intl stack of every front end (fe-stack i18n, owner:next-i18n-package): defineI18n over the locales of the app, the locale-negotiating proxy, the locale-aware navigation, the request config that loads the catalogs of the app and the locale read of the [locale] layout; the app keeps its message catalogs and writes none of the stack.'
   '@starci/eslint-canon-be':
-    version: 3.15.2
+    version: 3.15.4
     group: starci
     install: registry
     side: be
     source: packages/eslint-canon-be/package.json
     why: 'the back-end ESLint canon: `loadHfs(import.meta.url)` of be/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the be side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; `starciBeConfig({ hfs: loadHfs(import.meta.url) })` is the typed factory and the BE-CONVENTION laws are its rules.'
   '@starci/eslint-canon-fe':
-    version: 9.13.2
+    version: 9.13.4
     group: starci
     install: registry
     side: fe
     source: packages/eslint-canon-fe/package.json
     why: 'the front-end ESLint canon: `loadHfs(import.meta.url)` of fe/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the fe side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; the front end has no tests (FE_NO_TESTS R97 in hfs) and no-vietnamese-in-source (R91) applies.'
   '@starci/eslint-grammar-core':
-    version: 0.21.19
+    version: 0.21.21
     group: starci
     install: registry
     side: fe
     source: packages/eslint-grammar-core/package.json
     why: 'the StarCi Grammar component API lint, versioned with @starci/grammar; front ends compose this family package with the universal FE canon.'
   '@starci/eslint-grammar-offset-pop':
-    version: 0.21.19
+    version: 0.21.21
     group: starci
     install: registry
     side: fe
@@ -155,7 +155,7 @@ pins:
     source: packages/mail/package.json
     why: 'outgoing mail of a back end: a NestJS module and the Mailer port over SMTP (connect, greeting, socket and total timeouts, STARTTLS required by default, recipient, message and attachment checks, a shared SMTP target policy, coded errors, typed escaping render helpers returning { subject, text, html }), with @starci/mail/testing for its specs; the only importer of nodemailer (R90).'
   '@starci/hfs':
-    version: 5.6.0
+    version: 5.7.0
     group: starci
     install: registry
     side: both