@starci/hfs 1.0.0 → 1.0.1

package/CHANGELOG.md

@@ -0,0 +1,11 @@
+# Changelog
+
+## 1.0.1 - 2026-09-30
+
+- Fixed: `package.json` now has `exports` for `./runtime/*` and `./package.json`, so other published packages can resolve the runtime copy it carries (`@starci/hfs/runtime/knowledge/hfs/slots.yaml`, `@starci/hfs/runtime/engine/yaml.mjs`) with `import.meta.resolve` or `require.resolve`, wherever the package is installed. `@starci/eslint-canon-be` 1.7.1 reads the slot manifest this way.
+- Changed: `CHANGELOG.md` ships in the package (`files`).
+- The bin is unchanged; the runtime copy is resynced (`canon-pins.yaml` states the new pins).
+
+## 1.0.0 - 2026-09-30
+
+- First registry publication: the `hfs` command line with its runtime bundle, sync files and templates.

package/README.md

@@ -36,3 +36,9 @@ except `hfs init`, which writes `hfs.json` only when none exists.
 check can emit). After changing `scripts/lib/hfs-check.mjs`, `scripts/lib/hfs-slots.mjs`, `knowledge/hfs/slots.yaml`,
 `knowledge/hfs/canon-pins.yaml` or the catalog entries of those codes, run `node packages/hfs/scripts/sync-runtime.mjs`;
 `tests/hfs-cli.spec.mjs` fails on a stale copy. Bump `version` here and in the pin when the behaviour changes.
+
+## Serving knowledge to other packages
+
+`package.json` `exports` opens `./runtime/*`, so a package that needs a runtime file resolves it from the installed copy
+(`import.meta.resolve("@starci/hfs/runtime/knowledge/hfs/slots.yaml")`), never from the product repository or a link path.
+`@starci/eslint-canon-be` does this and lists `@starci/hfs` in `dependencies` at the exact version.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@starci/hfs",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "The HFS command line of a StarCi product repository: hfs check, init, explain, sync and work-hygiene. Self-contained: it carries the runtime files it reads.",
   "type": "module",
   "license": "UNLICENSED",
@@ -8,12 +8,17 @@
   "bin": {
     "hfs": "./bin/hfs.mjs"
   },
+  "exports": {
+    "./package.json": "./package.json",
+    "./runtime/*": "./runtime/*"
+  },
   "files": [
     "bin/hfs.mjs",
     "runtime/**",
     "sync/**",
     "templates/**",
-    "README.md"
+    "README.md",
+    "CHANGELOG.md"
   ],
   "engines": {
     "node": ">=22.13.0"

package/runtime/knowledge/hfs/canon-pins.yaml

@@ -17,12 +17,12 @@ pins:
     source: packages/grammar/package.json
     why: nivo-fe pins 0.4.11 and 0.5.0 in one workspace, starci-next-fe 0.5.1, miamia-fe 0.5.0; the runtime source is 0.7.1.
   '@starci/eslint-canon-be':
-    version: 1.7.0
+    version: 1.7.1
     group: starci
     install: registry
     side: be
     source: packages/eslint/be/package.json
-    why: 'back-end repositories carry 1.2.1 and 1.2.2 while the runtime source is 1.7.0: the round-3 catch-up landed the nest code-pattern profile''s version and content digest, left unbumped when R78-R82 landed, plus the inbox-dedupe-required shape-detection fix; 1.7.0 adds named-entity-manager-only (R83).'
+    why: 'back-end repositories carry 1.2.1 and 1.2.2 while the runtime source is 1.7.0: the round-3 catch-up landed the nest code-pattern profile''s version and content digest, left unbumped when R78-R82 landed, plus the inbox-dedupe-required shape-detection fix; 1.7.0 adds named-entity-manager-only (R83); 1.7.1 reads the slot manifest from the installed @starci/hfs runtime copy instead of the product repository.'
   '@starci/eslint-canon-fe':
     version: 5.1.2
     group: starci
@@ -69,12 +69,12 @@ pins:
     side: fe
     source: packages/playwright-preset/package.json
   '@starci/hfs':
-    version: 1.0.0
+    version: 1.0.1
     group: starci
     install: registry
     side: both
     source: packages/hfs/package.json
-    why: the hfs command line (check, init, explain) of every product repository, installed from the npm registry.
+    why: the hfs command line (check, init, explain) of every product repository, installed from the npm registry; 1.0.1 exports runtime/* so the eslint canons resolve the knowledge it carries.
   # --- tooling
   typescript:
     version: 5.9.3

package/runtime/knowledge/hfs/slots.yaml

@@ -92,14 +92,15 @@ ruleParams:
     globalModules: [src/modules/platform/config/, src/modules/platform/logging/, src/modules/platform/database/]
     # HFS_SIZE_GROWTH: a file above soft may not grow against its parent commit; a new file stays within soft.
     fileLines: {soft: 500, hardGrowth: true}
-    # HFS_DUPLICATE_BLOCK: a token-normalised block of at least this many source lines that appears in two owners.
-    duplicateBlockLines: 25
+    # R21 HFS_DUPLICATE_CODE: the ONE threshold of duplicate code (the architecture machine reads it here; no other file states it):
+    # a token-normalised block of at least `lines` source lines and `tokens` tokens that appears twice.
+    duplicateBlock: {lines: 8, tokens: 60}
   fe:
     # Slot budgets (component.tsx 300, hooks 200, modules 400) are stricter than this cap where they apply.
     fileLines: {soft: 500, hardGrowth: true}
     # FE_TRANSPORT_OWNER: the one module per app that may call fetch.
     clientModule: "apps/<app>/src/modules/api/client.ts"
-    duplicateBlockLines: 25
+    duplicateBlock: {lines: 8, tokens: 60}
 
 slots:
 

package/runtime/scripts/lib/hfs-slots.mjs

@@ -144,13 +144,13 @@ function manifestShapeProblems(m) {
       for (const key of Object.keys(def ?? {})) if (!['mayImport', 'acyclic', 'lowerLayerOnly'].includes(key)) bad.push(`tiers.${profile}.${tier}.${key} is not a tier field`);
     }
   }
-  const blockLinesOk = (v) => Number.isInteger(v) && v >= 2;
+  const blockOk = (v) => isMap(v) && Number.isInteger(v.lines) && v.lines >= 2 && Number.isInteger(v.tokens) && v.tokens >= 1 && Object.keys(v).length === 2;
   const fileLinesOk = (v) => isMap(v) && Number.isInteger(v.soft) && v.soft >= 1 && typeof v.hardGrowth === 'boolean' && Object.keys(v).length === 2;
   const rp = m.ruleParams;
   if (!isMap(rp) || Object.keys(rp).some((k) => !PROFILES.includes(k)) || !PROFILES.every((p) => isMap(rp[p]))) bad.push('ruleParams must be a map with be and fe');
   else {
-    if (!(strList(rp.be.globalModules) && new Set(rp.be.globalModules).size === rp.be.globalModules.length) || !fileLinesOk(rp.be.fileLines) || !blockLinesOk(rp.be.duplicateBlockLines) || Object.keys(rp.be).length !== 3) bad.push('ruleParams.be needs globalModules (unique paths), fileLines {soft, hardGrowth} and duplicateBlockLines (integer >= 2)');
-    if (!fileLinesOk(rp.fe.fileLines) || typeof rp.fe.clientModule !== 'string' || !rp.fe.clientModule || !blockLinesOk(rp.fe.duplicateBlockLines) || Object.keys(rp.fe).length !== 3) bad.push('ruleParams.fe needs fileLines {soft, hardGrowth}, clientModule and duplicateBlockLines (integer >= 2)');
+    if (!(strList(rp.be.globalModules) && new Set(rp.be.globalModules).size === rp.be.globalModules.length) || !fileLinesOk(rp.be.fileLines) || !blockOk(rp.be.duplicateBlock) || Object.keys(rp.be).length !== 3) bad.push('ruleParams.be needs globalModules (unique paths), fileLines {soft, hardGrowth} and duplicateBlock {lines >= 2, tokens >= 1}');
+    if (!fileLinesOk(rp.fe.fileLines) || typeof rp.fe.clientModule !== 'string' || !rp.fe.clientModule || !blockOk(rp.fe.duplicateBlock) || Object.keys(rp.fe).length !== 3) bad.push('ruleParams.fe needs fileLines {soft, hardGrowth}, clientModule and duplicateBlock {lines >= 2, tokens >= 1}');
   }
   if (!Array.isArray(m.slots) || !m.slots.length) { bad.push('slots must be a non-empty list'); return bad; }
   const slotKeys = new Set(['id', 'profiles', 'path', 'presence', 'tracked', 'tier', 'tests', 'owner', 'appKind', 'minInstances', 'requiredWhen', 'requiredInstances', 'requires', 'allows', 'forbids', 'layers', 'budget', 'managedBy', 'rules', 'goesTo', 'why', 'since', 'retiredIn', 'successor']);
@@ -535,7 +535,7 @@ export function createSlotResolver(manifest, repo) {
   });
 }
 
-/** The rule parameters of one profile (be: globalModules, fileLines, duplicateBlockLines; fe: fileLines, clientModule, duplicateBlockLines), as a frozen deep copy. */
+/** The rule parameters of one profile (be: globalModules, fileLines, duplicateBlock; fe: fileLines, clientModule, duplicateBlock), as a frozen deep copy. */
 export function ruleParams(manifest, profile) {
   if (!PROFILES.includes(profile)) fail('HFS_MANIFEST_INVALID', `ruleParams has no profile ${profile}`, { profile });
   const deepFreeze = (v) => { if (v && typeof v === 'object') Object.values(v).forEach(deepFreeze); return Object.freeze(v); };
@@ -662,6 +662,12 @@ export function loadRuleCatalog({ root = skillRoot, file = path.join(root, HFS_R
     byCode: (code) => byCode.get(code) ?? null,
     /** The rules that run at a gate. */
     forGate: (gate) => list.filter((r) => r.gates.includes(gate)),
+    /** The catalogued why code of a lint finding's rule id (`starci-be/<id>`, `starci-fe/<id>`), or undefined. */
+    lintCode: (ruleId) => {
+      const [plugin, id] = String(ruleId ?? '').split('/');
+      const kind = plugin === 'starci-be' ? 'eslint-be' : plugin === 'starci-fe' ? 'eslint-fe' : null;
+      return kind ? list.find((r) => r.enforcers.some((e) => e.kind === kind && e.id === id))?.code : undefined;
+    },
     /** The rules one enforcer judges, e.g. forEnforcer('eslint-be', 'error-home'). */
     forEnforcer: (kind, id) => list.filter((r) => r.enforcers.some((e) => e.kind === kind && e.id === id)),
     /** Every enforcer still owed, as {rule, kind, id}. */
@@ -671,5 +677,5 @@ export function loadRuleCatalog({ root = skillRoot, file = path.join(root, HFS_R
   });
 }
 
-/** The 77 rules of this runtime's catalog, frozen, in id order. */
+/** The rules of this runtime's catalog, frozen, in id order. */
 export const rules = (options) => loadRuleCatalog(options).rules;