@starci/hfs 4.7.47 → 4.9.0

package/runtime/scripts/lib/package-at.mjs

@@ -13,9 +13,9 @@ export const packageAt = (dir, name) => {
 /** This runtime's own `starci` bin (packages/cli is the only package that declares one). */
 const RUNTIME_STARCI_BIN = path.join(skillRoot, 'packages', 'cli', 'bin', 'starci.mjs');
 
-/** The `starci` bin of the @starci/cli that `dir` installs (a product runs its own pinned CLI), else this runtime's own. */
+/** The `starci` bin of the starci-harness that `dir` installs (a product runs its own pinned CLI), else this runtime's own. */
 function starciBin(dir) {
-  const packageFile = packageAt(dir, '@starci/cli');
+  const packageFile = packageAt(dir, 'starci-harness');
   if (packageFile) {
     try {
       const { bin } = JSON.parse(fs.readFileSync(packageFile, 'utf8'));
@@ -50,13 +50,12 @@ export const loadTypescript = (...dirs) => {
 };
 
 /**
- * The app's command line and the app implementation behind it: `bin` the `starci` bin of the app's installed @starci/cli, else
+ * The app's command line and the app implementation behind it: `bin` the `starci` bin of the app's installed starci-harness, else
  * this runtime's packages/cli/bin/starci.mjs (starciBin); `dir` the @starci/hfs that answers
- * `starci app` - the app's own install, else the one beside its @starci/cli, else this runtime's packages/hfs - whose runtime
- * slice the gate's base lint (scripts/gates/gate.mjs) and the READ digest (scripts/gates/read-digest.mjs) load in-process.
+ * `starci app` - the app's own install, else the one beside its starci-harness, else this runtime's packages/hfs.
  */
 export function hfsEntry(root) {
-  const cli = packageAt(root, '@starci/cli');
+  const cli = packageAt(root, 'starci-harness');
   const manifest = packageAt(root, '@starci/hfs') ?? (cli && packageAt(path.dirname(cli), '@starci/hfs'));
   return { dir: manifest ? path.dirname(manifest) : path.join(skillRoot, 'packages', 'hfs'), bin: starciBin(root) };
 }

package/runtime/scripts/lib/roots.mjs

@@ -11,8 +11,8 @@
 //   product trees      treesInOrder       the workflow tree first, then the product's main checkout
 //   Work records       workRecordPath     the first tree that holds the record, else the main checkout's path
 //   tool lookups       toolSearchDirs     the tree the work happens in first, the runtime's own install last
-// The workflow tree itself, a job's placement and the Critic directory are registry facts: scripts/machine/workflow-tree.mjs,
-// placement-rebound.mjs and the worktree registry resolve them, and a caller hands the result in as `tree`.
+// The workflow tree itself, a job's placement and the Critic directory are registry facts: the worktree registry resolves
+// them, and a caller hands the result in as `tree`.
 // The `root-adhoc` self-check (scripts/checks/check-root-adhoc.mjs, rule R240) refuses a new path built from the process working
 // directory or from the Work directory name outside this module.
 import fs from 'node:fs';

package/runtime/scripts/work/draw/draw-dna-findings.mjs

@@ -12,7 +12,7 @@ export function appendDnaFindings({ all, dna, proposals, label, assetRequests, t
   alertFindings(all, dna, rules, add, helpers);
   meterTrackFindings(all, rules, add, helpers);
   artworkFindings(all, assetRequests, add, helpers);
-  badgeDotFindings(all, rules, add, helpers);
+  statusDotFindings(all, rules, add, helpers);
   return groupedFindings(groups, label);
 }
 
@@ -221,29 +221,40 @@ function artworkFindingFor(el, assetRequests, add, h) {
   if (assetRequests && !assetRequests.has(id)) add(h.DRAW_ASSET_SLOT_UNDECLARED, 'asset slot without a request', slotEl, `${h.ASSET_SLOT_ATTR}="${id}" has no entry in the drawing's asset-request.md`);
 }
 
-function badgeDotFindings(all, rules, add, h) {
-  for (const el of all) badgeDotFindingFor(el, rules, add, h);
+function statusDotFindings(all, rules, add, h) {
+  for (const el of all) statusDotFindingFor(el, rules, add, h);
 }
 
-function badgeDotFindingFor(el, rules, add, h) {
+/** The nearest declaration of the dot-size token on the element or an ancestor, in px; null when none is declared. */
+function statusDotTokenPx(el, rules, h) {
+  for (const node of [el, ...h.ancestorsOf(el)]) {
+    const px = h.declaredPx(node, h.STATUS_DOT_SIZE_PROPERTY, rules);
+    if (px != null) return px;
+  }
+  return null;
+}
+
+function statusDotFindingFor(el, rules, add, h) {
   if (h.insideSvg(el)) return;
   const part = (el.attrs[h.PART_ATTR] ?? '').trim();
+  const slot = (el.attrs['data-slot'] ?? '').trim();
   const cls = h.classesOf(el);
-  const dotLike = /(^|-)dot$/.test(part) || cls.some((c) => h.DOT_CLASS.test(c));
+  const inDotComponent = h.inComponent(el, h.COMPONENTS_WITH_DOT);
+  if (inDotComponent && (h.STATUS_DOT_ANATOMY.test(part) || cls.some((c) => h.STATUS_DOT_ANATOMY.test(c)))) return;
+  const dotLike = /(^|-)dot(-mark)?$/.test(part) || cls.some((c) => h.DOT_CLASS.test(c));
   if (!dotLike) return;
-  const dnaDot = ['badge-dot', 'dot'].includes(part) || cls.includes(h.BADGE_DOT_CLASS);
-  const inBadge = h.inComponent(el, ['Badge']);
-  if (!dnaDot || !inBadge) {
-    add(h.DRAW_OFF_GRAMMAR_COMPONENT, 'hand-made status dot', el, `a status dot is DNA Badge isDot (data-grammar-part="badge-dot" / ${h.BADGE_DOT_CLASS} inside a Badge), never a hand-drawn dot`);
+  const dnaDot = [part, slot].includes(h.STATUS_DOT_MARK_PART) || cls.includes(h.STATUS_DOT_MARK_CLASS);
+  if (!dnaDot || !inDotComponent) {
+    add(h.DRAW_OFF_GRAMMAR_COMPONENT, 'hand-made status dot', el, `a status dot is the DNA StatusDot mark (data-grammar-part="${h.STATUS_DOT_MARK_PART}" / ${h.STATUS_DOT_MARK_CLASS} inside a StatusDot or a Badge isDot), never a hand-drawn dot`);
     return;
   }
   const inline = h.declsOf(el.attrs.style);
   const ruled = rules.filter((r) => h.selectorMatches(r.selector, el)).map((r) => r.decls);
   const ring = [inline, ...ruled].some((d) => ['box-shadow', 'outline', 'border'].some((key) => d[key] && !/^(none|0|0px)$/i.test(d[key].trim())))
     || cls.some((c) => /^(ring|shadow|outline)(-|$)/.test(c) && !/^(ring|shadow|outline)-none$/.test(c));
-  if (ring) add(h.DRAW_OFF_GRAMMAR_COMPONENT, 'Badge dot with a halo', el, 'the Badge dot is a plain 6px solid circle in the tone colour: no box-shadow, ring, outline or border halo');
-  const px = Math.max(h.declaredPx(el, 'width', rules) ?? 0, h.declaredPx(el, 'height', rules) ?? 0, Number(el.attrs.width) || 0, Number(el.attrs.height) || 0);
-  if (px && Math.abs(px - h.BADGE_DOT_PX) > 0.5) add(h.DRAW_OFF_GRAMMAR_COMPONENT, 'Badge dot off its size', el, `the dot declares ${px}px: the Badge dot is ${h.BADGE_DOT_PX}px (<CircleFill width={6} />), no size variants`);
+  if (ring) add(h.DRAW_OFF_GRAMMAR_COMPONENT, 'status dot with a halo', el, `the status dot is a plain ${h.STATUS_DOT_PX}px solid circle in the tone colour: no box-shadow, ring, outline or border halo (the echo ring is the StatusDot's own)`);
+  const px = Math.max(h.declaredPx(el, 'width', rules) ?? 0, h.declaredPx(el, 'height', rules) ?? 0, Number(el.attrs.width) || 0, Number(el.attrs.height) || 0, statusDotTokenPx(el, rules, h) ?? 0);
+  if (px && Math.abs(px - h.STATUS_DOT_PX) > 0.5) add(h.DRAW_OFF_GRAMMAR_COMPONENT, 'status dot off its size', el, `the dot declares ${px}px: the status dot is ${h.STATUS_DOT_PX}px, read from ${h.STATUS_DOT_SIZE_PROPERTY}, no size variants`);
 }
 
 function groupedFindings(groups, label) {

package/runtime/scripts/work/draw/draw-dna.mjs

@@ -17,9 +17,10 @@
 //                               inherits its parent's; an svg's inner shapes inherit the svg's); a component name DNA
 //                               does not publish; a part none of the enclosing components publishes; a closed prop
 //                               value outside its DNA values; a proposal with no entry in a grammar-proposal file;
-//                               a status dot that is not the DNA Badge isDot dot (grammar 0.5.3: HeroUI's
-//                               <CircleFill width={6} />, part badge-dot / class starci-core-badge-dot inside a Badge) -
-//                               a hand-made dot span, a dot with a box-shadow/ring/outline halo, or a dot not 6px;
+//                               a status dot that is not the DNA StatusDot mark (grammar 0.14: class
+//                               starci-core-status-dot-mark / part status-dot-mark inside a StatusDot or a Badge isDot,
+//                               sized by --starci-core-status-dot-size, 6px) - a hand-made dot span, a dot with a
+//                               box-shadow/ring/outline halo, or a dot (or a redefined size token) not 6px;
 //   DRAW_NOTICE_NOT_ALERT       a notice that is not DNA `Alert` with a tone: an Alert without a tone in the
 //                               PresentationState vocabulary, or a container (SurfaceCard, a bare div ...) posing as a
 //                               notice - role alert/status or aria-live, notice/callout/banner vocabulary in its
@@ -67,9 +68,14 @@ export { anatomyFindings } from './draw-dna-anatomy.mjs';
 export const DRAW_OFF_GRAMMAR_COMPONENT = 'DRAW_OFF_GRAMMAR_COMPONENT';
 export const DRAW_NOTICE_NOT_ALERT = 'DRAW_NOTICE_NOT_ALERT';
 export const DRAW_RATIO_NOT_METER = 'DRAW_RATIO_NOT_METER';
-/** Grammar 0.5.3 Badge isDot: the dot's class and its one size (HeroUI's <CircleFill width={6} />). */
-const BADGE_DOT_CLASS = 'starci-core-badge-dot';
-const BADGE_DOT_PX = 6;
+/** Grammar 0.14 StatusDot (also behind Badge isDot): the dot's class, part, size custom property and its one value. */
+const STATUS_DOT_MARK_CLASS = 'starci-core-status-dot-mark';
+const STATUS_DOT_MARK_PART = 'status-dot-mark';
+const STATUS_DOT_SIZE_PROPERTY = '--starci-core-status-dot-size';
+const STATUS_DOT_PX = 6;
+/** The StatusDot's own anatomy around the mark (root, chip, label): parts of the component, never a dot. */
+const STATUS_DOT_ANATOMY = /^(starci-core-)?status-dot(-chip|-label)?$/;
+const COMPONENTS_WITH_DOT = ['StatusDot', 'Badge'];
 const DOT_CLASS = /(?:^|[-_])(dot|status-dot|dot-indicator)(?:$|[-_])/i;
 /**
  * The grammar Alert's action Button variant for a PresentationState tone (@starci/grammar 0.5.3 Alert, after HeroUI v3's
@@ -425,8 +431,8 @@ function isArtwork(el) {
  * its asset-request.md requests (null: not judged).
  */
 const DNA_FINDING_HELPERS = {
-  ACTION_COMPONENTS, ALERT_INDICATOR_MAX_PX, ASSET_SLOT_ATTR, BADGE_DOT_CLASS, BADGE_DOT_PX, BAR_CLASS, CONTAINERS,
-  DOT_CLASS, DRAW_ALERT_ANATOMY, DRAW_ASSET_SLOT_UNDECLARED, DRAW_METER_TRACK, DRAW_NOTICE_NOT_ALERT, DRAW_OFF_GRAMMAR_COMPONENT, DRAW_RATIO_NOT_METER,
+  ACTION_COMPONENTS, ALERT_INDICATOR_MAX_PX, ASSET_SLOT_ATTR, BAR_CLASS, COMPONENTS_WITH_DOT, CONTAINERS,
+  DOT_CLASS, STATUS_DOT_ANATOMY, STATUS_DOT_MARK_CLASS, STATUS_DOT_MARK_PART, STATUS_DOT_PX, STATUS_DOT_SIZE_PROPERTY, DRAW_ALERT_ANATOMY, DRAW_ASSET_SLOT_UNDECLARED, DRAW_METER_TRACK, DRAW_NOTICE_NOT_ALERT, DRAW_OFF_GRAMMAR_COMPONENT, DRAW_RATIO_NOT_METER,
   METER_FULL_WIDTH_SHARE, METER_SEGMENTED_TRACK_PX, METER_SEGMENTS_PROPOSAL, METER_TRACK_PX, METER_SEGMENT_GAP_MAX_PX, NOTICE_CLASS, OUTCOME_STATES,
   PART_ATTR, PROPOSAL_ATTR, RATIO_RX, alertActionVariantFor, ancestorsOf, classesOf, componentNameOf, componentRootOf,
   declaredBackgroundsOf, declaredPx, declsOf, describe, dnaSegment, inComponent, insideSvg, isAction, isArtwork, kebab,

package/scaffold/app.mjs

@@ -127,7 +127,7 @@ export const packageJsonText = value => `${JSON.stringify(value, null, 2)}\n`;
 const STARTER_SIDES = Object.freeze({
   be: Object.freeze({ apps: [{ name: 'core', kind: 'api' }, { name: 'cli', kind: 'cli' }], kinds: ['api', 'cli'], connections: [{ name: 'primary', envPrefix: 'PRIMARY_DB', owner: 'core', isolation: 'database' }] }),
   // fe: the landing and the product app, over the shared ui and i18n packages (both opt-in slots, enabled here).
-  fe: Object.freeze({ grammar: 'starci', apps: [{ name: 'landing', kind: 'next' }, { name: 'app', kind: 'next' }], reads: ['be/contracts/'], optionalSlots: ['fe.package.ui', 'fe.package.i18n'] }),
+  fe: Object.freeze({ grammar: 'core', apps: [{ name: 'landing', kind: 'next' }, { name: 'app', kind: 'next' }], reads: ['be/contracts/'], optionalSlots: ['fe.package.ui', 'fe.package.i18n'] }),
 });
 
 /** The lite starter is the upgrade-safe subset: one API, one web app and one Supabase schema authority. */
@@ -138,7 +138,7 @@ const LITE_STARTER_SIDES = Object.freeze({
     connections: [{ name: 'primary', envPrefix: 'PRIMARY_DB', owner: 'api', isolation: 'schema', provider: 'supabase' }],
     reads: ['supabase/types/'],
   }),
-  fe: Object.freeze({ grammar: 'starci', apps: [{ name: 'web', kind: 'next' }], reads: ['be/contracts/', 'supabase/types/'] }),
+  fe: Object.freeze({ grammar: 'core', apps: [{ name: 'web', kind: 'next' }], reads: ['be/contracts/', 'supabase/types/'] }),
 });
 
 /** The checked local Supabase auth posture of every newly scaffolded lite app. */
@@ -161,8 +161,8 @@ const STARTER_DEPENDENCIES = Object.freeze({
     'class-transformer': null, 'class-validator': null, 'reflect-metadata': null, rxjs: null, tslib: null, typeorm: null, zod: null,
   },
   devDependencies: {
-    turbo: null, '@nestjs/testing': null, '@starci/cli': null, '@starci/eslint-canon-be': null, '@starci/eslint-canon-fe': null, '@starci/jest-preset': null,
-    '@starci/prettier-config': null, '@starci/stylelint-canon': null, '@starci/test-world': null, '@starci/tsconfig': null, '@tailwindcss/postcss': null, '@types/express': null,
+    turbo: null, '@nestjs/testing': null, '@starci/eslint-canon-be': null, '@starci/eslint-canon-fe': null, '@starci/jest-preset': null,
+    '@starci/prettier-config': null, '@starci/stylelint-canon': null, '@starci/test-world': null, '@starci/tsconfig': null, 'starci-harness': null, '@tailwindcss/postcss': null, '@types/express': null,
     '@types/jest': null, '@types/node': null, '@types/react': null, '@types/react-dom': null, eslint: null, 'eslint-plugin-react-hooks': null,
     husky: null, jest: null, 'postcss-value-parser': null, prettier: null, stylelint: null, tailwindcss: null, 'ts-jest': null,
     'ts-node-dev': null, 'tsc-alias': null, 'tsconfig-paths': null, typescript: null,
@@ -182,8 +182,8 @@ const LITE_STARTER_DEPENDENCIES = Object.freeze({
     'reflect-metadata': null, rxjs: null, tslib: null, typeorm: null, zod: null,
   },
   devDependencies: {
-    turbo: null, '@nestjs/testing': null, '@starci/eslint-canon-be': null, '@starci/eslint-canon-fe': null, '@starci/cli': null,
-    '@starci/jest-preset': null, '@starci/prettier-config': null, '@starci/stylelint-canon': null, '@starci/tsconfig': null, '@tailwindcss/postcss': null,
+    turbo: null, '@nestjs/testing': null, '@starci/eslint-canon-be': null, '@starci/eslint-canon-fe': null,
+    '@starci/jest-preset': null, '@starci/prettier-config': null, '@starci/stylelint-canon': null, '@starci/tsconfig': null, 'starci-harness': null, '@tailwindcss/postcss': null,
     '@types/express': null, '@types/jest': null, '@types/node': null, '@types/react': null, '@types/react-dom': null,
     eslint: null, 'eslint-plugin-react-hooks': null, husky: null, jest: null, 'postcss-value-parser': null, prettier: null,
     stylelint: null, supabase: null, tailwindcss: null, 'ts-jest': null, 'ts-node-dev': null, 'tsc-alias': null,

package/src/main.mjs

@@ -136,7 +136,7 @@ starci app hygiene [--cwd <dir>]
 starci app coverage merge --out <lcov> <lcov-or-dir>... [--cwd <dir>]
 `;
 const PER_CODE_LIMIT = 25;
-const VALUE_FLAGS = new Set(['--base', '--inject', '--into', '--event', '--from', '--service', '--connection', '--owner', '--failed', '--done', '--coverage-from', '--registry-visibility']);
+const VALUE_FLAGS = new Set(['--base', '--inject', '--into', '--event', '--from', '--service', '--connection', '--owner', '--failed', '--done', '--coverage-from', '--registry-visibility', '--shapes', '--read', '--app']);
 /** Flags that may repeat: their values are collected in order. */
 const LIST_FLAGS = new Set(['--inject']);
 const BOOL_FLAGS = new Set(['--json', '--fast', '--fe', '--no-types', '--db-types', '--wiring']);
@@ -293,7 +293,7 @@ async function lintMain(argv, { cwd, stdout, presets, prettier, runLinter, check
 
 /**
  * The jest preset a new app renders its Sonar exclusions from: the copy this @starci/hfs ships (bundledPresets), the same version the
- * scaffold pins, so `npx @starci/cli app scaffold` works before any dependency of the app is installed.
+ * scaffold pins, so `npx starci-harness app scaffold` works before any dependency of the app is installed.
  */
 const scaffoldPresets = () => bundledPresets();
 
@@ -390,7 +390,7 @@ function newMain(opts, { cwd: repoRoot, stdout: out }) {
 function addMain(opts, { cwd: repoRoot, stdout: out }) {
   const [noun, name, ...extra] = opts.positional;
   if (!noun || !name || extra.length) throw new Error('starci app add takes `<noun> <name>` and the options of the noun');
-  const { created, registered } = addKind({ repoRoot, noun, name, options: { event: opts.event, from: opts.from, service: opts.service, connection: opts.connection, owner: opts.owner, failed: opts.failed, done: opts.done, fe: opts.fe, noTypes: opts['no-types'] } });
+  const { created, registered } = addKind({ repoRoot, noun, name, options: { event: opts.event, from: opts.from, service: opts.service, connection: opts.connection, owner: opts.owner, failed: opts.failed, done: opts.done, fe: opts.fe, noTypes: opts['no-types'], shapes: opts.shapes, read: opts.read, app: opts.app } });
   for (const file of created) out(`created ${file}\n`);
   const kinds = registered.kinds.length ? `; kinds ${registered.kinds.join(', ')}` : '';
   out(`starci app add ${noun}: registered patterns ${registered.patterns.join(', ')}${kinds}\n`);

package/sync/hygiene.mjs

@@ -126,7 +126,7 @@ export function judge(cwd, files) {
 
 // The scripts/housekeeping/ledger-hygiene.mjs of the checkout under judgment: the root git names for `cwd`, which carries
 // that script only when the repository IS a full StarCi runtime checkout (packages/hfs/sync/ sits 3 directories
-// under such a root, the same computation scripts/hfs/sync-runtime.mjs uses). A product repository — or a
+// under such a root). A product repository — or a
 // bare repo — has no such file, so the section is silently absent wherever this module happens to be installed.
 const ledgerHygieneScript = cwd => {
   try {

package/sync/index.mjs

@@ -176,7 +176,7 @@ export async function loadPresets(root) {
 
 /**
  * The jest preset's Sonar exclusions as @starci/hfs ships them: `@starci/jest-preset/sonar-exclusions.cjs` (a require-free module),
- * copied byte for byte into packages/hfs/runtime by scripts/hfs/sync-runtime.mjs, so a fresh `starci app scaffold` (nothing installed
+ * carried byte for byte in packages/hfs/runtime, so a fresh `starci app scaffold` (nothing installed
  * yet) and an upgrade render the same list the app's installed preset answers. A missing copy is a refusal, never a render without it.
  */
 const BUNDLED_SONAR_EXCLUSIONS = new URL('../runtime/packages/jest-preset/sonar-exclusions.cjs', import.meta.url);
@@ -200,6 +200,18 @@ const LCOV_REPORT = 'be/coverage/lcov.info';
  */
 export const SONAR_CPD_EXCLUSIONS = Object.freeze(['**/messages/*.messages.ts', '**/messages/*.json']);
 
+/**
+ * The Sonar scope of the jest preset's exclusions (presets.sonarExclusions): its file patterns are the tests, which
+ * `sonar.test.inclusions` takes and `sonar.exclusions` moves out of the sources (`sonar.tests` names every source folder, so the
+ * two sets stay disjoint and each test is analysed as a test, never dropped); its folder patterns (`/**`) and the front end's
+ * build and dependency folders are no source at all. Nothing else is excluded: a generated file is analysed like any other.
+ */
+export function sonarScope(presets) {
+  const preset = String(presets?.sonarExclusions ?? '').split(',').map(glob => glob.trim()).filter(Boolean);
+  const tests = preset.filter(glob => !glob.endsWith('/**'));
+  return { tests, exclusions: [...new Set([...preset, '**/.next/**', '**/node_modules/**'])] };
+}
+
 const SOURCE_FILE = /\.[cm]?ts$/;
 const SOURCE_SKIPPED = new Set(['node_modules', 'dist', 'coverage']);
 
@@ -364,7 +376,8 @@ export function variables(app, scope, presets, sonarKey, manifest = loadSlotMani
     nodeMajor: String(NODE_MAJOR),
     sonarKey: sonarKey ?? app.project,
     sonarHostLine: sonarHostLine(quality.sonar),
-    sonarExclusions: [presets?.sonarExclusions, '**/.next/**', '**/node_modules/**', ...(lite ? ['supabase/types/**'] : [])].filter(Boolean).join(','),
+    sonarExclusions: sonarScope(presets).exclusions.join(','),
+    sonarTestInclusions: sonarScope(presets).tests.join(','),
     sonarSources: ['be/apps', 'be/src', 'fe/apps', ...(packages ? ['fe/packages'] : [])].join(','),
     lcovReport: LCOV_REPORT,
     cpdExclusions: SONAR_CPD_EXCLUSIONS.join(','),

package/sync/managed.mjs

@@ -23,8 +23,9 @@
 //                                 a file that states the coverage scope no longer states what the slot manifest derives (the `coverage` field of
 //                                 knowledge/hfs/slots.yaml through scripts/hfs/coverage-scope.mjs): be/jest.config.js, codecov.yml, or the
 //                                 `sonar.coverage.exclusions` line of sonar-project.properties. The scope is never edited by hand.
-//   HFS_SONAR_CONFIG (R11)        sonar-project.properties differs from its render (the render names no host URL, sources and tests that
-//                                 do not overlap, the `sonar.exclusions` of the jest preset (a back end), the be lcov with the logic of be/src/modules as the coverage scope, the ESLint report and the
+//   HFS_SONAR_CONFIG (R11)        sonar-project.properties differs from its render (the render names no host URL, the source folders as
+//                                 `sonar.tests` too, the jest preset's test patterns as `sonar.test.inclusions` moved out of the sources by
+//                                 `sonar.exclusions` beside the build and dependency folders (sync/index.mjs sonarScope), the be lcov with the logic of be/src/modules as the coverage scope, the ESLint report and the
 //                                 HFS import files Sonar reads), or the stack declaration names a quality gate other than the one
 //                                 gate of knowledge/sonar-gate.yaml (bundled in the runtime copy). One edit is one finding.
 //   HFS_TS_STRICT (R22)           the root tsconfig.json drift (either profile), named by flag (ts-strict.mjs) instead of by hash.

package/templates/app/codegen-graphql.mjs.partial

@@ -28,12 +28,12 @@ const writeFormBounds = (roots, source) => {
 if (schemas.length === 0 || operationRoots.length === 0) {
     process.stdout.write("codegen: no GraphQL contract under be/contracts yet\n")
     if (schemas.length === 0 && operationRoots.length) {
-        const { emptyInputBoundsSource } = await import("@starci/cli/input-bounds")
+        const { emptyInputBoundsSource } = await import("starci-harness/input-bounds")
         writeFormBounds(operationRoots, emptyInputBoundsSource())
     }
 } else {
     const { buildSchema } = await import("graphql")
-    const { assertCompatibleInputBounds } = await import("@starci/cli/input-bounds")
+    const { assertCompatibleInputBounds } = await import("starci-harness/input-bounds")
     assertCompatibleInputBounds(
         Object.fromEntries(schemas.map((file) => [file, buildSchema(fs.readFileSync(file, "utf8"))])),
     )
@@ -49,7 +49,7 @@ if (schemas.length === 0 || operationRoots.length === 0) {
                     config: { useTypeImports: true, enumsAsTypes: true, avoidOptionals: true },
                 },
             ],
-            [`${root}/__generated__/input-bounds.ts`, { plugins: [{ "@starci/cli/input-bounds": {} }] }],
+            [`${root}/__generated__/input-bounds.ts`, { plugins: [{ "starci-harness/input-bounds": {} }] }],
         ]),
     )
     await generate(
@@ -80,7 +80,7 @@ const restRoots = frontendApps
     .filter((dir) => fs.existsSync(dir))
     .map(posix)
 if (restRoots.length) {
-    const { openApiBoundsSource } = await import("@starci/cli/input-bounds")
+    const { openApiBoundsSource } = await import("starci-harness/input-bounds")
     const contracts = Object.fromEntries(
         services
             .map((service) => [service, path.join(CONTRACTS, service, "openapi.json")])

package/templates/app/quality-config/sonar-project.properties

@@ -1,11 +1,13 @@
 {{> app/quality-config/sonar-base.properties}}
 {{sonarHostLine}}
-sonar.tests=be/apps,be/src
+sonar.tests={{sonarSources}}
 sonar.exclusions={{sonarExclusions}}
 sonar.cpd.exclusions={{cpdExclusions}}
-sonar.test.inclusions=**/*.spec.ts
+sonar.test.inclusions={{sonarTestInclusions}}
 sonar.typescript.tsconfigPaths={{tsconfigPaths}}
 sonar.externalIssuesReportPaths=reports/lint.sonar.json
 sonar.javascript.lcov.reportPaths={{lcovReport}}
+# starci:sonar-scope begin (generated by `starci app sonar --write` from contexts/hfs/slots.yaml; do not edit)
 sonar.coverage.exclusions={{coverageExclusions}}
+# starci:sonar-scope end
 sonar.javascript.node.maxspace=6144

package/runtime/engine/canonical-json.mjs

@@ -1,14 +0,0 @@
-// canonical-json.mjs — the one canonical JSON the runtime digests structured values with: object keys
-// sorted, arrays in order, so two equal values always serialize to the same bytes. A leaf beside digest.mjs.
-import {byCodeUnit} from './by-code-unit.mjs';
-import {isPlainObject} from './plain-object.mjs';
-
-/** The canonical JSON text of `value`: keys sorted at every depth. */
-export function canonicalJSON(value) {
-  if (Array.isArray(value)) return `[${value.map(canonicalJSON).join(',')}]`;
-  if (isPlainObject(value)) {
-    const members = Object.keys(value).sort(byCodeUnit).map(k => `${JSON.stringify(k)}:${canonicalJSON(value[k])}`);
-    return `{${members.join(',')}}`;
-  }
-  return JSON.stringify(value);
-}

package/runtime/engine/db/ledger-open.mjs

@@ -1,38 +0,0 @@
-import fs from 'node:fs';
-import path from 'node:path';
-import { createRequire } from 'node:module';
-import { installRefResolver } from './ref-value.mjs';
-
-// engine/db/ledger-open.mjs — how a ledger file is opened: bounded retry on a transient CANTOPEN, a reference-resolving handle.
-const require=createRequire(import.meta.url);
-export const need=(ok,message,code)=>{if(!ok)throw Object.assign(new Error(message),code?{code}:{});};
-export const applyPragmas=(db,pragmas)=>db.exec(Object.entries(pragmas).map(([k,v])=>`PRAGMA ${k}=${v};`).join(' '));
-const openSleep=ms=>Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,ms);
-// SQLITE_CANTOPEN is transient on Windows while a concurrent process closes the WAL files: a short bounded retry.
-const OPEN_RETRY_DELAYS_MS=[0,300,900];
-const cantOpen=error=>/unable to open/i.test(String(error?.message??''));
-export function openDb({file,busyTimeoutMs,journalMode='WAL',autoVacuum=false,label,pragmas}){
-  const {DatabaseSync}=require('node:sqlite');
-  need(typeof file==='string'&&file.trim(),`${label} needs a file`);
-  fs.mkdirSync(path.dirname(path.resolve(file)),{recursive:true});
-  let lastError;
-  for(const delay of OPEN_RETRY_DELAYS_MS){
-    if(delay)openSleep(delay);
-    let db;
-    try{
-      db=installRefResolver(new DatabaseSync(file,{timeout:busyTimeoutMs}));
-      // page_size/auto_vacuum only take on an empty database, before WAL and before the first table.
-      if(autoVacuum&&Number(db.prepare('PRAGMA page_count').get().page_count)===0)db.exec('PRAGMA page_size=4096; PRAGMA auto_vacuum=INCREMENTAL;');
-      const sqliteVersion=db.prepare('select sqlite_version() AS version').get().version;
-      const actual=String(db.prepare(`PRAGMA journal_mode=${journalMode}`).get().journal_mode).toUpperCase();
-      need(actual===String(journalMode).toUpperCase(),`${label}: SQLite selected journal mode ${actual}, expected ${journalMode} (a network or UNC path cannot hold WAL)`,'STARCI_LEDGER_NOT_WAL');
-      applyPragmas(db,pragmas);
-      return {db,sqliteVersion,journalMode:actual};
-    }catch(error){
-      try{db?.close();}catch{}
-      if(!cantOpen(error))throw error;
-      lastError=error;
-    }
-  }
-  throw lastError;
-}

package/runtime/engine/db/ledger-paths.mjs

@@ -1,87 +0,0 @@
-// Ledger path identity and ownership resolution; connection policy and caches remain in ledger.mjs.
-import fs from 'node:fs';
-import path from 'node:path';
-import {sha256} from '../digest.mjs';
-import {isUnderTempDir,localProjectsRoot,readMachine} from './machine.mjs';
-import {isSpecRun} from '../../scripts/lib/env.mjs';
-import {pathKey} from '../../scripts/lib/path-key.mjs';
-import {byCodeUnit} from '../by-code-unit.mjs';
-import {tempRoot} from '../temp-root.mjs';
-/** Overrides the projects root (the directory holding <ledger_id>/runtime.sqlite) for this process tree; narrower than machine-db.mjs LOCAL_ROOT_ENV, which this still honors through starciLocalRoot when unset. */
-export const PROJECTS_ROOT_ENV='STARCI_PROJECTS_ROOT';
-const normDir=file=>pathKey(file);
-/** <runtime root>/.runtime/projects (starciLocalRoot, itself overridable by STARCI_LOCAL_ROOT; a node --test process tree gets one under the OS temp directory). */
-export const projectsRootFor=(env=process.env)=>{
-  if(env[PROJECTS_ROOT_ENV])return path.resolve(env[PROJECTS_ROOT_ENV]);
-  const root=localProjectsRoot(env);
-  if(isSpecRun(env)&&!isUnderTempDir(root,{env}))return path.join(tempRoot({env}),'starci-test-projects');
-  return root;
-};
-/** Repository identity: resolved/realpath, forward slashes, case-folded only on Windows. */
-export const repoRootKey=repoRoot=>{let root=path.resolve(repoRoot);try{root=fs.realpathSync.native(root);}catch{}return normDir(root);};
-/**
- * The ledger id of a repository root until the machine registry (a3-2 machine.ledgers) resolves it: a name-based
- * UUID of the normalized root, so the same root always names the same ledger and no side registry is needed.
- */
-const ledgerIdFromKey=key=>{
-  const h=sha256(`starci-ledger:${key}`);
-  return `${h.slice(0,8)}-${h.slice(8,12)}-5${h.slice(13,16)}-${(8|(Number.parseInt(h[16],16)&3)).toString(16)}${h.slice(17,20)}-${h.slice(20,32)}`;
-};
-export const ledgerIdForRepo=repoRoot=>ledgerIdFromKey(repoRootKey(repoRoot));
-/** The registered runtime.sqlite of `repoRoot` in machine.ledgers (a3-2 resolveLedger), or null. */
-function registeredLedgerFile(root,env,openReader){
-  let row;try{row=readMachine(m=>m.resolveLedger({repoRoot:root}),null,{env});}catch{return null;}
-  const file=row?.file&&row.state!=='retired'?path.resolve(row.file):null;
-  if(file&&fs.existsSync(file))assertLedgerRoot(file,root,openReader);
-  return file;
-}
-function assertLedgerRoot(file,root,openReader){
-  const db=openReader(file);let own;try{own=db.prepare("SELECT value FROM meta WHERE key='repo_root'").get()?.value;}finally{db.close();}
-  if(!own||repoRootKey(own)!==repoRootKey(root))throw Object.assign(new Error(`ledger-root-mismatch: ${file} belongs to another or unverified repository; preserve the database and resolve the owner binding with the owner`),{code:'STARCI_LEDGER_ROOT_MISMATCH'});
-}
-function unregisteredLedgerFile(root,env,openReader){
-  const base=projectsRootFor(env),current=path.join(base,ledgerIdForRepo(root),'runtime.sqlite');
-  if(fs.existsSync(current)){assertLedgerRoot(current,root,openReader);return current;}
-  return current;
-}
-/** Resolve the registry or exact owned store; the ledger owner supplies its verified read-only opener. */
-export function resolveLedgerFile(root,{env,openReader}){
-  return registeredLedgerFile(root,env,openReader)??unregisteredLedgerFile(root,env,openReader);
-}
-
-const SYNTHETIC_LEDGER_ID=/^00000000-0000-4000-8000-[0-9a-f]{12}$/;
-const fixtureRefused=message=>{throw new TypeError(`ledger-fixture-refused: ${message}`);};
-const assertFixtureIdentity=fixture=>{
-  if(fixture.sqliteVersion!==undefined&&(typeof fixture.sqliteVersion!=='string'||!/^\d+\.\d+\.\d+(?:\.\d+)?$/.test(fixture.sqliteVersion)))fixtureRefused('sqliteVersion must be a dotted numeric version');
-  if(typeof fixture.ledgerId!=='string'||!SYNTHETIC_LEDGER_ID.test(fixture.ledgerId))fixtureRefused('ledgerId must be a synthetic UUID');
-  if(!Number.isSafeInteger(fixture.createdAt)||fixture.createdAt<=0||!Number.isFinite(new Date(fixture.createdAt).getTime()))fixtureRefused('createdAt must be a positive safe epoch millisecond');
-  const root=fixture.blobRoot;
-  if(typeof root!=='string'||!root||root.includes('\\')||root.trim()!==root||/[<>:"|?*\x00-\x1f]/.test(root)
-    ||path.posix.isAbsolute(root)||root.split('/').some(p=>!p||p==='.'||p==='..'))fixtureRefused('blobRoot must be a portable relative path');
-};
-const assertFixtureFile=file=>{
-  if(typeof file!=='string'||!path.isAbsolute(file)||path.basename(file)!=='runtime.sqlite')fixtureRefused('file must be an explicit absolute runtime.sqlite');
-  for(const suffix of ['','-wal','-shm'])if(fs.lstatSync(file+suffix,{throwIfNoEntry:false}))fixtureRefused('file and WAL/SHM must be absent');
-  const parent=path.dirname(file),stat=fs.lstatSync(parent,{throwIfNoEntry:false});
-  if(!stat?.isDirectory()||stat.isSymbolicLink()||fs.realpathSync.native(parent)!==path.resolve(parent))fixtureRefused('sample parent must be an existing physical directory');
-};
-/** Validate a fresh, initialization-only sample identity. Samples carry portable metadata,
- * never a repository/machine binding; the ordinary project resolver is not bypassed. */
-export function ledgerFixtureInit(fixture,{file,repoRoot,product,machine,mapped,checkpointer,now}){
-  if(fixture===null){
-    if(typeof file==='string'&&SYNTHETIC_LEDGER_ID.test(path.basename(path.dirname(path.resolve(file)))))fixtureRefused('synthetic identity is reserved for a sample');
-    return null;
-  }
-  if(!fixture||typeof fixture!=='object'||Array.isArray(fixture)
-    ||![Object.prototype,null].includes(Object.getPrototypeOf(fixture))
-    ||!['blobRoot,createdAt,ledgerId','blobRoot,createdAt,ledgerId,sqliteVersion'].includes(Object.keys(fixture).sort(byCodeUnit).join(',')))fixtureRefused('needs ledgerId, createdAt and blobRoot, and may state sqliteVersion');
-  assertFixtureIdentity(fixture);
-  if(repoRoot!==null||product!==null||machine!==null||mapped)fixtureRefused('a sample cannot bind a repository, product, machine or cached project path');
-  if(!checkpointer||now!==Date.now)fixtureRefused('initialization owns its frozen clock and requires a checkpointer');
-  assertFixtureFile(file);
-  return Object.freeze({...fixture,marker:'starci/basic-runtime-fixture@1'});
-}
-/** Refuse sample bytes as an operational ledger before opening a writer or beginning a transaction. */
-export function assertOperationalLedger(meta){
-  if(meta.fixture||SYNTHETIC_LEDGER_ID.test(meta.ledger_id??''))throw new Error('ledger-fixture-read-only: preserve the sample; initialize a new live project store');
-}