@starci/hfs 1.0.1 → 2.0.1

package/runtime/engine/migrations/runtime/0003-usage-unavailable.sql

@@ -0,0 +1,13 @@
+-- 0003-usage-unavailable (starci/runtime@1, user_version 1 -> 3). Applied by engine/ledger-db.mjs migrateLedger on the first
+-- writer open of an older ledger, after a VACUUM INTO backup and an integrity_check, with foreign_key_check + quick_check
+-- before COMMIT; a fresh ledger runs 0001 then this file.
+--
+-- op_attempts.usage_source admits 'unavailable' (the attempt's agent has no usage adapter, or no session file was ever found),
+-- and usage_reason says why. SQLite cannot ALTER a CHECK, so the table SQL in sqlite_master is rewritten under
+-- writable_schema (the documented path for a change that leaves the on-disk row format alone: the constraint only widens),
+-- then schema_version is bumped by the migrator. Every existing row already satisfies the wider constraint.
+ALTER TABLE op_attempts ADD COLUMN usage_reason TEXT;
+PRAGMA writable_schema=ON;
+UPDATE sqlite_master
+   SET sql=replace(sql,'usage_source IN (''cli-transcript'',''provider-report'')','usage_source IN (''cli-transcript'',''provider-report'',''unavailable'')')
+ WHERE type='table' AND name='op_attempts' AND instr(sql,'''unavailable''')=0;

package/runtime/engine/migrations/runtime/0004-attempt-why.sql

@@ -0,0 +1,43 @@
+-- 0004-attempt-why (starci/runtime@1, user_version 3 -> 4). Applied by engine/ledger-db.mjs migrateLedger on the first
+-- writer open of an older ledger (after a VACUUM INTO backup and an integrity_check, with foreign_key_check + quick_check
+-- before COMMIT); a fresh ledger runs 0001 then the forward files.
+--
+-- op_attempts.why_json: the owner-facing reason an attempt failed, was blocked, refused or is waiting (starci/why@1,
+-- scripts/kernel/why.mjs, docs/why.md), written with the settle. The two attempt views are recreated:
+--   v_attempt_state.native  'awaiting-owner' (job awaiting_owner, or verdict blocked + report_outcome ask) and
+--                           'rejected' (end_state requeued whose settle_json.reason is dispatch-rejected) are their own states;
+--   v_op_history            carries why_json, and its `ui` reads 'awaiting-owner' and 'rejected' for those two natives
+--                           (every other native still maps through ui_state_map; job_status stays a column).
+ALTER TABLE op_attempts ADD COLUMN why_json TEXT CHECK(why_json IS NULL OR json_valid(why_json));
+DROP VIEW IF EXISTS v_op_history;
+DROP VIEW IF EXISTS v_attempt_state;
+CREATE VIEW v_attempt_state AS
+SELECT a.attempt_id,
+       CASE WHEN a.end_state='worker-dead' THEN 'worker-dead' WHEN a.end_state='effect-unknown' THEN 'effect-unknown'
+            WHEN a.end_state='requeued' AND json_extract(a.settle_json,'$.reason')='dispatch-rejected' THEN 'rejected'
+            WHEN a.end_state='requeued' THEN 'requeued'
+            WHEN (a.verdict='blocked' AND a.report_outcome='ask')
+              OR (a.verdict IS NOT NULL AND (SELECT j.status FROM jobs j WHERE j.job_id=a.job_id)='awaiting_owner') THEN 'awaiting-owner'
+            WHEN a.verdict IS NOT NULL THEN a.verdict
+            WHEN a.dispatched_at IS NULL THEN 'routed' ELSE 'in-flight' END AS native
+FROM op_attempts a;
+CREATE VIEW v_op_history AS
+SELECT a.attempt_id, a.workflow_id, a.unit_id, a.job_id, a.op_id, a.try_no, a.dispatch_seq, a.dispatch_id, a.span_id,
+       a.agent, a.provider, a.model, a.model_profile, a.pool, a.effort, a.cli_version, a.runtime_rev,
+       a.terminal_handle, a.worktree_path, a.branch, a.base_sha, a.head_sha, a.integrated_sha,
+       a.routed_at, a.dispatched_at, a.reported_at, a.settled_at, a.released_at, a.worktree_removed_at,
+       COALESCE(a.wall_ms, a.settled_at - a.dispatched_at) AS cycle_ms,
+       a.report_outcome, a.verdict, a.settled_by, a.failure_class, a.end_state, a.why_json,
+       a.tokens_in, a.tokens_out, a.cost_usd, a.usage_source,
+       a.prompt_sha, a.transcript_sha, a.session_sha,
+       s.native AS attempt_state,
+       CASE WHEN s.native IN ('awaiting-owner','rejected') THEN s.native ELSE COALESCE(m.ui,'unknown') END AS ui,
+       j.status AS job_status, r.report_id, r.summary AS report_summary,
+       (SELECT count(*) FROM check_runs c WHERE c.attempt_id=a.attempt_id)                                 AS checks,
+       (SELECT count(*) FROM check_runs c WHERE c.attempt_id=a.attempt_id AND c.status IN ('fail','error')) AS checks_red,
+       (SELECT count(*) FROM job_artifacts x WHERE x.attempt_id=a.attempt_id)                              AS artifacts
+FROM op_attempts a
+JOIN v_attempt_state s ON s.attempt_id=a.attempt_id
+LEFT JOIN ui_state_map m ON m.entity='attempt' AND m.native=s.native
+LEFT JOIN jobs j    ON j.job_id=a.job_id
+LEFT JOIN reports r ON r.attempt_id=a.attempt_id;

package/runtime/engine/plain-object.mjs

@@ -0,0 +1,5 @@
+// plain-object.mjs — the one "is this a non-array object" predicate the runtime asks with.
+// A leaf beside digest.mjs: schema walkers, config readers and JSON consumers all mean the
+// same thing by "a mapping" - own object, never null, never an array - so they share it here.
+/** True for a non-null, non-array object. Does not check the prototype (a JSON.parse result). */
+export const isPlainObject = (value) => value !== null && typeof value === 'object' && !Array.isArray(value);

package/runtime/knowledge/hfs/canon-pins.yaml

@@ -10,35 +10,35 @@ pins:
   # --- @starci packages. Every @starci package is a PUBLISHED npm package (install: registry): a product repository
   # installs the exact pinned version from the npm registry in the root and every workspace package.json, never `file:`.
   '@starci/grammar':
-    version: 0.7.1
+    version: 0.7.2
     group: starci
     install: registry
     side: fe
     source: packages/grammar/package.json
-    why: nivo-fe pins 0.4.11 and 0.5.0 in one workspace, starci-next-fe 0.5.1, miamia-fe 0.5.0; the runtime source is 0.7.1.
+    why: nivo-fe pins 0.4.11 and 0.5.0 in one workspace, starci-next-fe 0.5.1, miamia-fe 0.5.0; the runtime source is 0.7.2 (Input tel kind and IconButton disclosure props).
   '@starci/eslint-canon-be':
-    version: 1.7.1
+    version: 2.0.1
     group: starci
     install: registry
     side: be
     source: packages/eslint/be/package.json
-    why: 'back-end repositories carry 1.2.1 and 1.2.2 while the runtime source is 1.7.0: the round-3 catch-up landed the nest code-pattern profile''s version and content digest, left unbumped when R78-R82 landed, plus the inbox-dedupe-required shape-detection fix; 1.7.0 adds named-entity-manager-only (R83); 1.7.1 reads the slot manifest from the installed @starci/hfs runtime copy instead of the product repository.'
+    why: '2.0.0 (C0 release): starciBeConfig({ hfs: loadHfs(import.meta.url) }) typed factory and the BE-CONVENTION laws (R36 sql-text-only, R83 no-repository-class, R85/R87/R89 service-deps, R43 config-parsed-in-main, R47/R48 test world, R95 operations, R98-R101 builders).'
   '@starci/eslint-canon-fe':
-    version: 5.1.2
+    version: 7.0.0
     group: starci
     install: registry
     side: fe
     source: packages/eslint/fe/package.json
-    why: 'every front-end repository carries 3.0.2 or 4.0.0 while the runtime source is 5.1.0: the vn-ok pragma is gone, starciFeConfig enables every rule and the React Hooks rules at error, and 5.1.0 adds the list, effect, formatter, navigation, metadata and type-safety rules that repositories used to carry in their own config.'
+    why: '7.0.0: the front end has no tests (test rules removed, FE_NO_TESTS R97 in hfs); no-vietnamese-in-source (R91).'
   '@starci/stylelint-canon':
-    version: 1.1.0
+    version: 2.0.0
     group: starci
     install: registry
     side: fe
     source: packages/stylelint/package.json
-    why: no front-end repository lints its CSS yet (nivo-fe apps/landing carries 4.3k lines of raw CSS); the runtime source is the first release.
+    why: '2.0.0 adds status-contrast (HeroUI soft pairs measured per theme), fixes brand-layer-shape on the shared :root,.light,.dark block and the info soft pair, and derives appTokens with loadAppTokens(import.meta.url) for the managed one-line stylelint.config.mjs.'
   '@starci/tsconfig':
-    version: 1.0.0
+    version: 2.0.0
     group: starci
     install: registry
     side: both
@@ -50,31 +50,19 @@ pins:
     side: both
     source: packages/prettier-config/package.json
   '@starci/jest-preset':
-    version: 1.1.0
+    version: 2.1.0
     group: starci
     install: registry
     side: be
     source: packages/jest-preset/package.json
-    why: gains the FakeClock test double (./clock) for the platform/clock Clock port, used by the R79 no-ambient-clock migration.
-  '@starci/vitest-preset':
-    version: 1.0.0
-    group: starci
-    install: registry
-    side: fe
-    source: packages/vitest-preset/package.json
-  '@starci/playwright-preset':
-    version: 1.0.0
-    group: starci
-    install: registry
-    side: fe
-    source: packages/playwright-preset/package.json
+    why: '2.1.0: four projects on the test world, the unit kit (mockEntityManager, fakeTransaction, fakeIds, FakeClock, Outcome matchers) and the recordingOutbox claim side.'
   '@starci/hfs':
-    version: 1.0.1
+    version: 2.0.1
     group: starci
     install: registry
     side: both
     source: packages/hfs/package.json
-    why: the hfs command line (check, init, explain) of every product repository, installed from the npm registry; 1.0.1 exports runtime/* so the eslint canons resolve the knowledge it carries.
+    why: '2.0.0 (C0 release): the BE-CONVENTION machine, emit-contracts (GraphQL SDL and OpenAPI from the typed operation table), the four-project test layout, FE has no tests, repo.scripts slot, secrets guard in work-hygiene, rule ids R<2-3 digits>.'
   # --- tooling
   typescript:
     version: 5.9.3
@@ -105,7 +93,7 @@ pins:
     version: 7.1.1
     group: tooling
     side: fe
-    why: '@starci/eslint-canon-fe 5.0.0 enables its recommended set (set-state-in-effect, refs, purity, immutability) at error and needs version 7 or newer; 7.1.1 is what the runtime examples resolve.'
+    why: '2.0.0 (C0 release): the BE-CONVENTION machine, emit-contracts (GraphQL SDL and OpenAPI from the typed operation table), the four-project test layout, FE has no tests, repo.scripts slot, secrets guard in work-hygiene, rule ids R<2-3 digits>.'
   '@types/node':
     version: 22.20.4
     group: tooling
@@ -124,36 +112,6 @@ pins:
     version: 29.5.14
     group: test
     side: be
-  vitest:
-    version: 3.2.7
-    group: test
-    side: fe
-  '@vitest/coverage-v8':
-    version: 3.2.7
-    group: test
-    side: fe
-  '@playwright/test':
-    version: 1.63.0
-    group: test
-    side: fe
-    why: nivo-fe pins 1.51.1 and starci-next-fe 1.63.0; the newer wins and the viewport projects need no older API.
-  jsdom:
-    version: 29.1.1
-    group: test
-    side: fe
-  '@vitejs/plugin-react':
-    version: 5.2.0
-    group: test
-    side: fe
-  '@testing-library/react':
-    version: 16.3.3
-    group: test
-    side: fe
-    why: nivo-fe resolves 16.3.2, the other two 16.3.3.
-  '@testing-library/jest-dom':
-    version: 7.0.1
-    group: test
-    side: fe
   # --- framework
   next:
     version: 16.1.6
@@ -188,7 +146,7 @@ pins:
     version: 11.1.1
     group: framework
     side: be
-    why: the health skeleton (hfs sync --init) answers { status, info, error, details } through Terminus; nivo-backend, starci-next and mia-mia-backend all resolve 11.1.1.
+    why: readiness probes with dependency indicators use Terminus (the liveness route of the hfs sync --init skeleton does not, being a thin door over the liveness service); nivo-backend, starci-next and mia-mia-backend all resolve 11.1.1.
   next-intl:
     version: 4.13.6
     group: framework
@@ -198,7 +156,7 @@ pins:
     version: 7.3.0
     group: tooling
     side: be
-    why: the composition spec of the back-end skeleton boots the real AppModule and calls /health/live; starci-next and mia-mia-backend resolve 7.3.0, nivo-backend 7.2.2.
+    why: the e2e world of a back end calls the app over HTTP (/health/live in the skeleton); starci-next and mia-mia-backend resolve 7.3.0, nivo-backend 7.2.2.
   # --- ui
   '@heroui/react':
     version: 3.2.6