@starci/hfs 4.7.41 → 4.7.42

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 4.7.42 - 2026-10-26
+- Fixed: `HFS_BYPASS_MARKER` reads a skip/only index only (`describe["skip"]`), not a marker word inside an array literal.
+- Fixed: the BE SQL owner analysis bounds a FROM-less and an aggregate-only SELECT as one row.
+- Changed: the bundled canon pins follow the lint family bumps (canon-be 3.4.49, canon-fe 9.1.4, Grammar 0.12.8).
+
 ## 4.7.41 - 2026-10-26
 - Changed: the bundled canon pins follow the lint family bumps (canon-be 3.4.48, canon-fe 9.1.3, Grammar 0.12.7). No behavior change.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@starci/hfs",
-  "version": "4.7.41",
+  "version": "4.7.42",
   "description": "The StarCi app command implementation for scaffolding, linting, checking and synchronizing one product repository.",
   "type": "module",
   "license": "MIT",

package/runtime/knowledge/hfs/canon-pins.yaml

@@ -23,35 +23,35 @@ pins:
     source: packages/heroicons/package.json
     why: 'StarCi custom Heroicons-compatible cuts; eslint-grammar-starci (icon.mjs) admits @starci/heroicons/24/outline and /16/solid as icon sources, so an app that uses them gets this exact version.'
   '@starci/grammar':
-    version: 0.12.7
+    version: 0.12.8
     group: starci
     install: registry
     side: fe
     source: packages/grammar/package.json
     why: 'the grammar front ends read: the brand layer sets `--font-sans` and `--font-mono` and the grammar reads them; it carries the Input tel kind, the copyable and read-only Input, the IconButton disclosure props and count badge, ChatBubble, FillViewport, Textarea mentions and Enter-to-send, the leading PrimaryRailLayout rail, the plate-less Image, ListRow, the soft Alert, Progress steps, the floating primary IconButton, FlowGraph, the STATE-8 loading views and the bordered selectable TagGroup chips. The runtime source version wins for a @starci package.'
   '@starci/eslint-canon-be':
-    version: 3.4.48
+    version: 3.4.49
     group: starci
     install: registry
     side: be
     source: packages/eslint/be/package.json
     why: 'the back-end ESLint canon: `loadHfs(import.meta.url)` of be/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the be side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; `starciBeConfig({ hfs: loadHfs(import.meta.url) })` is the typed factory and the BE-CONVENTION laws are its rules.'
   '@starci/eslint-canon-fe':
-    version: 9.1.3
+    version: 9.1.4
     group: starci
     install: registry
     side: fe
     source: packages/eslint/fe/package.json
     why: 'the front-end ESLint canon: `loadHfs(import.meta.url)` of fe/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the fe side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; the front end has no tests (FE_NO_TESTS R97 in hfs) and no-vietnamese-in-source (R91) applies.'
   '@starci/eslint-grammar-starci':
-    version: 0.12.7
+    version: 0.12.8
     group: starci
     install: registry
     side: fe
     source: packages/eslint/grammar-starci/package.json
     why: 'the StarCi Grammar component API lint, versioned with @starci/grammar; front ends compose this family package with the universal FE canon.'
   '@starci/eslint-grammar-offset-pop':
-    version: 0.12.7
+    version: 0.12.8
     group: starci
     install: registry
     side: fe
@@ -91,14 +91,14 @@ pins:
     source: packages/test-world/package.json
     why: 'the shared e2e library of every back end (R47, R48), a devDependency of every back end: the warm stack behind toxiproxy, the network-edge fakes, the Nest boot, the typed useTestWorld handle, useSandbox for contract specs and the outage lock. Kafka is real own infra (the one digest-pinned apache/kafka KRaft image, a broker listener and proxy per slot, slot-prefixed topics, consumer groups and client ids) and Postgres is schema-per-context (a schema and a login role per context in a shared database). Each worker has its own data slot (<ns>_w<k>) with its own databases, Keycloak realm, leased Redis DB, bucket/collection/topic prefixes, fakes host, toxiproxy proxies and outage lock; a run provisions min(jest workers, workers cap, default 2) slots, and state file protocol 2 pairs exactly with @starci/jest-preset (TEST_WORLD_PAIR_MISMATCH otherwise). A modules world boots real peer apps beside its modules, world.apps.<name>.during(fn) is the outage of a peer app, w.keycloak.clientSecret(client) answers the run-generated secret of a confidential realm client, world.keycloak.events/sessions read the realm user events and live sessions, world.infra.postgresql.connection(name) takes one database connection down while the others serve, and world.resolve and scope.resolve take any Nest token. Every path a declaration names (`stack`, seeds, the realm, Dockerfiles) resolves from the app root (the directory of hfs.json); the globalSetup registers the path aliases as TypeScript resolves them. Its CLI main is exported at ./cli for starci app stack.'
   '@starci/cli':
-    version: 1.7.41
+    version: 1.7.42
     group: starci
     install: registry
     side: both
     source: packages/cli/package.json
     why: 'the only StarCi command package; product repositories install it for starci app, while @starci/hfs remains its pinned transitive implementation.'
   '@starci/hfs':
-    version: 4.7.41
+    version: 4.7.42
     group: starci
     install: registry
     side: both

package/runtime/scripts/hfs/architecture/sql-tokens.mjs

@@ -307,19 +307,48 @@ function singleFromRelation(tokens, level, from) {
   return true;
 }
 
-/** Plain known aggregate calls are scalar; other calls, including wrappers around aggregates, may return sets. */
+// Functions that return a set of rows when they stand in a select list. A select list holding one multiplies the rows.
+const SET_RETURNING = new Set(`GENERATE_SERIES GENERATE_SUBSCRIPTS UNNEST REGEXP_MATCHES REGEXP_SPLIT_TO_TABLE STRING_TO_TABLE
+JSON_EACH JSONB_EACH JSON_EACH_TEXT JSONB_EACH_TEXT JSON_ARRAY_ELEMENTS JSONB_ARRAY_ELEMENTS JSON_ARRAY_ELEMENTS_TEXT JSONB_ARRAY_ELEMENTS_TEXT
+JSON_OBJECT_KEYS JSONB_OBJECT_KEYS JSON_TO_RECORDSET JSONB_TO_RECORDSET JSON_POPULATE_RECORDSET JSONB_POPULATE_RECORDSET
+JSONB_PATH_QUERY JSONB_PATH_QUERY_TZ JSON_TABLE PG_LS_DIR PG_LS_WALDIR PG_LS_LOGDIR PG_LISTENING_CHANNELS PG_SHOW_ALL_SETTINGS PG_GET_KEYWORDS ACLEXPLODE TS_STAT TS_DEBUG`.split(/\s+/u));
+// Scalar builtins and operator-like words that are no row-multiplying call; the aggregate-only shape accepts these around its aggregates.
+const SCALAR_CALLS = new Set(`COALESCE NULLIF GREATEST LEAST ROUND CEIL CEILING FLOOR ABS TRUNC EXTRACT DATE_PART DATE_TRUNC TO_CHAR LOWER UPPER LENGTH CONCAT
+JSONB_BUILD_OBJECT JSONB_BUILD_ARRAY JSON_BUILD_OBJECT JSON_BUILD_ARRAY TO_JSONB TO_JSON`.split(/\s+/u));
+const NOT_A_CALL = new Set(['IN', 'ANY', 'ALL', 'SOME', 'AND', 'OR', 'NOT', 'FILTER', 'EXISTS', 'CASE', 'WHEN', 'THEN', 'ELSE', 'AS', 'ON', 'DISTINCT', 'BETWEEN', 'LIKE', 'ILIKE', 'IS', 'WITHIN', 'FROM']);
+
+const callAt = (tokens, index) => isName(tokens[index]) && tokens[index + 1]?.v === '(' && !(tokens[index].t === 'word' && (NOT_A_CALL.has(tokens[index].up) || CLAUSE_WORDS.has(tokens[index].up)));
+
+/** A call to a set-returning function anywhere in the statement (conservative: nested positions count). */
+const hasSetReturningCall = tokens => tokens.some((token, index) => callAt(tokens, index) && token.t === 'word' && SET_RETURNING.has(token.up));
+
+const hasWindow = tokens => tokens.some(token => isWord(token, 'OVER'));
+
+/** Plain known aggregate calls and known scalar builtins are scalar; other calls, including wrappers around aggregates, may return sets. */
 function unprovenProjectionCall(tokens, level, select, from) {
   const end = from < 0 ? tokens.length : from;
   for (let index = select + 1; index < end; index += 1) {
     const token = tokens[index];
     if (level[index] === 0 && (isWord(token, 'WHERE') || (token.t === 'word' && WHERE_END.has(token.up)))) break;
-    if (!isName(token) || tokens[index + 1]?.v !== '(') continue;
+    if (!callAt(tokens, index)) continue;
     if (scalarCastAt(tokens, index)) continue;
-    if (token.t !== 'word' || !AGGREGATES.has(token.up) || tokens[index - 1]?.v === '.') return true;
+    const known = token.t === 'word' && tokens[index - 1]?.v !== '.' && (AGGREGATES.has(token.up) || SCALAR_CALLS.has(token.up));
+    if (!known) return true;
   }
   return false;
 }
 
+/**
+ * A SELECT that returns at most one row by construction: it has no FROM (one row, unless a set-returning function multiplies it),
+ * or it selects only aggregates (plain or inside known scalar calls and casts) with no GROUP BY, window or set-returning function.
+ */
+function singleRowBound(tokens, level, select, from, grouped) {
+  if (hasSetReturningCall(tokens) || hasWindow(tokens)) return null;
+  if (from < 0) return grouped ? null : { bounded: true, basis: 'no from' };
+  if (!grouped && !unprovenProjectionCall(tokens, level, select, from) && aggregateSelectItems(tokens, level, select, from).every(isAggregateItem)) return { bounded: true, basis: 'aggregate' };
+  return null;
+}
+
 function selectBound(tokens, level, uniqueSetsOf, cte) {
   if (findTopWord(tokens, level, 'LIMIT') >= 0 || findTopWord(tokens, level, 'FETCH') >= 0) return { bounded: true, basis: 'limit' };
   const select = findTopWord(tokens, level, 'SELECT');
@@ -328,10 +357,10 @@ function selectBound(tokens, level, uniqueSetsOf, cte) {
   const unbounded = { bounded: false, basis: 'unbounded', table: primary?.table ?? null };
   const grouped = hasTopGroupBy(tokens, level);
   if (tokens.some((token, index) => level[index] === 0 && (isWord(token, 'UNION') || isWord(token, 'INTERSECT') || isWord(token, 'EXCEPT')))) return unbounded;
-  if (unprovenProjectionCall(tokens, level, select, from)) return unbounded;
-  if (from < 0) return grouped ? unbounded : { bounded: true, basis: 'no from' };
-  if (!grouped && aggregateSelectItems(tokens, level, select, from).every(isAggregateItem)) return { bounded: true, basis: 'aggregate' };
-  if (grouped || !primary || primary.dynamic || cte.has(primary.table) || !singleFromRelation(tokens, level, from)) return unbounded;
+  const single = singleRowBound(tokens, level, select, from, grouped);
+  if (single) return single;
+  if (unprovenProjectionCall(tokens, level, select, from) || hasSetReturningCall(tokens)) return unbounded;
+  if (grouped || from < 0 || !primary || primary.dynamic || cte.has(primary.table) || !singleFromRelation(tokens, level, from)) return unbounded;
   if (isUniqueBounded(tokens, level, from, primary, uniqueSetsOf(primary.table, primary.schema))) return { bounded: true, basis: 'unique' };
   return unbounded;
 }

package/runtime/scripts/lib/bypass-markers.mjs

@@ -230,8 +230,20 @@ function skipsHooks(piece, code, strings) {
   return around !== null && strings.some((other) => other.at > around[0] && other.at < around[1] && GIT_VERBS.has(other.text));
 }
 
-/** A test marker spelled as an index (`describe['skip']`): a string equal to a marker right after a `[`. */
-const indexedMarker = (piece, code) => TEST_KEYS.has(piece.text) && code.slice(0, piece.at).trimEnd().endsWith('[');
+/** Words after which a `[` opens an array literal, not a member access. */
+const BEFORE_ARRAY_LITERAL = /(?:^|[^\w$.])(?:return|typeof|in|of|case|yield|await|void|new|delete|else|do|throw|default|extends)$/;
+
+/**
+ * A test marker spelled as an index (`describe['skip']`): a string equal to a marker that is the whole key of a member access,
+ * `[` before it after an expression and `]` right after it. An array element (`["skip", "idea"]`, `const kinds = ['only']`) is data.
+ */
+function indexedMarker(piece, code) {
+  if (!TEST_KEYS.has(piece.text)) return false;
+  const before = code.slice(0, piece.at).trimEnd();
+  if (!before.endsWith('[') || !code.slice(piece.at + piece.text.length).trimStart().startsWith(']')) return false;
+  const subject = before.slice(0, -1).trimEnd();
+  return /[\w$)\]]$/.test(subject) && !BEFORE_ARRAY_LITERAL.test(subject);
+}
 
 /** An `exit` handler of the process that resets the exit code or swallows the failure. */
 function exitHandler(piece, code) {