@starci/hfs 2.0.0 → 2.0.1

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 2.0.1 - 2026-10-01
+
+- Fixed: `hfs sync` validates the whole hfs.json declaration against the manifest before rendering (a pre-2.0 `connections` list of names is refused), so a pin bump can never leave eslint unable to start.
+- Changed: the back-end managed scripts carry `test:stack` (`starci-test-stack`); repo-specific devDependencies stay the repository's (sync owns only the `scripts` block and the canon pins).
+
 ## 2.0.0 - 2026-09-30
 
 - Added (lane PORT): the repository scripts of the product repos are gone, so their laws live here. `repo.scripts` owns `scripts/{.gitkeep,*.mjs,*.cjs,*.ps1,*.sh}` (operational scripts, or an empty folder with `.gitkeep`, which `hfs sync --init` writes from `templates/{be,fe}/skeleton/scripts/.gitkeep`). New checks: `BE_SPEC_PLACEMENT` (R102, a spec outside the four test layers, `scripts/` and `tools/` included), `HFS_REPO_LOCAL_CHECK` (R103, a `check-*` file, `eslint-local-rules*`, a local plugin, a script that runs one), `HFS_LINT_SUPPRESSION_FILE` (R104, an eslint suppressions file, script or flag), `HFS_PROOF_COMMAND_FILE_MISSING` (R105, a `.starciwork` proof command that runs a file the repository does not hold; only records of this repository are judged) and, in the architecture machine, `FE_I18N_KEYS` (R106, a key the source reads that a locale lacks, a catalog key nothing reads). `HFS_DEP_VERSION_SKEW` (R14) also refuses a dependency declared at another version than the root `overrides` pin.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@starci/hfs",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "description": "The HFS command line of a StarCi product repository: hfs check, init, explain, sync and work-hygiene. Self-contained: it carries the runtime files it reads.",
   "type": "module",
   "license": "UNLICENSED",

package/runtime/knowledge/hfs/canon-pins.yaml

@@ -17,7 +17,7 @@ pins:
     source: packages/grammar/package.json
     why: nivo-fe pins 0.4.11 and 0.5.0 in one workspace, starci-next-fe 0.5.1, miamia-fe 0.5.0; the runtime source is 0.7.2 (Input tel kind and IconButton disclosure props).
   '@starci/eslint-canon-be':
-    version: 2.0.0
+    version: 2.0.1
     group: starci
     install: registry
     side: be
@@ -57,7 +57,7 @@ pins:
     source: packages/jest-preset/package.json
     why: '2.1.0: four projects on the test world, the unit kit (mockEntityManager, fakeTransaction, fakeIds, FakeClock, Outcome matchers) and the recordingOutbox claim side.'
   '@starci/hfs':
-    version: 2.0.0
+    version: 2.0.1
     group: starci
     install: registry
     side: both

package/sync/index.mjs

@@ -15,7 +15,7 @@ import { createRequire } from 'node:module';
 import fs from 'node:fs';
 import path from 'node:path';
 import { braceVariants } from '../runtime/scripts/lib/glob.mjs';
-import { loadSlotManifest } from '../runtime/scripts/lib/hfs-slots.mjs';
+import { loadSlotManifest, resolveRepoDeclaration } from '../runtime/scripts/lib/hfs-slots.mjs';
 import { readDeclaredSonarKey } from './sonar-key.mjs';
 
 export const TEMPLATES_DIR = path.join(import.meta.dirname, '..', 'templates');
@@ -87,6 +87,13 @@ export function validateHfs(hfs, manifest = loadSlotManifest()) {
     if (hfs.profile === 'be' && !manifest.appKinds.be.includes(app.kind)) bad(`app ${app.name} needs a kind, one of ${manifest.appKinds.be.join(', ')}`);
     seen.add(app.name);
   }
+  // The whole declaration must be valid for the manifest it pins (connections, optional slots, ...): sync never renders
+  // configs for a declaration the eslint canons and hfs check would refuse, so a pin bump cannot leave lint unable to start.
+  try {
+    resolveRepoDeclaration(manifest, hfs);
+  } catch (error) {
+    bad(`hfs.json is not a valid declaration for manifest ${manifest.version}: ${error.message}`);
+  }
   return hfs;
 }
 

package/templates/be/package-scripts/package.json

@@ -14,6 +14,7 @@
     "test:integration": "npm run typecheck:tests && jest --selectProjects integration",
     "test:e2e": "npm run typecheck:tests && jest --selectProjects e2e",
     "test:contract": "npm run typecheck:tests && jest --selectProjects contract",
+    "test:stack": "starci-test-stack",
     "contract:emit": "hfs emit-contracts",
     "hfs:check": "hfs check",
     "hfs:report": "hfs check --sonar reports/hfs.sonar.json"