@starci/hfs 4.9.0 → 4.9.2

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 4.9.2 - 2026-10-28
+
+- Fixed: `repositoryName` (runtime/scripts/hfs/repo-identity.mjs) names a repository by its origin remote, whatever folder holds the clone; the main checkout's folder names it only without an origin. HFS_README_TITLE_INVALID and the stack project name no longer change with the clone folder. Spec: `src/repo-identity.spec.mjs`.
+- Fixed: the rendered `sonar-project.properties` carries `sonar.cpd.exclusions` inside the generated `starci:sonar-scope` block, after `sonar.coverage.exclusions`, and its entries are the `cpd-exclusions` allowances of the bundled design truths (`SONAR_CPD_EXCLUSIONS` reads them; no second list), so `starci check loosening` accepts the rendered line as the block `starci app sonar` derives instead of flagging a ruled exclusion as hand-written. An app moves the line with `starci app sync --write`.
+- Fixed: the fe skeleton passes canon-fe 9.4.1: `SignInForm` takes `{ props: { ..., pending, errorMessage }, on }` (no retired `state`, no `failure` status prop), and the opt-in auth callback's `GET` and `exchangeAuthCode` are arrow consts. Spec: `src/scaffold-template-canon-fe.spec.mjs` scaffolds each edition and lints every fe source with the starci-fe rules.
+- Changed: the bundled canon pins follow release D (Grammar family 0.15.1, hfs 4.9.2, canon-fe 9.4.1, canon-be 3.6.1, starci-harness 1.1.0-alpha.2), so an app installs the released versions without pin drift.
+
+## 4.9.1 - 2026-10-28
+
+- Changed: the bundled canon pins follow release C (Grammar family 0.15.0, hfs 4.9.1, canon-fe 9.4.0, canon-be 3.6.0, jest-preset 2.4.1, stylelint-canon 2.2.1, tsconfig 2.1.0, prettier-config 1.1.0, and `@starci/ai-router` 0.2.1 pinned), so an app installs the released versions without pin drift.
+
 ## 4.9.0 - 2026-10-28
 
 - Removed: 121 bundled runtime scripts that only served the legacy runtime and that no `starci app` verb, package entry or catalogued rule enforcer reaches: `scripts/agent/`, `scripts/reconciler/`, the legacy hook guards of `scripts/guards/` (command, seat, rights, install and launch verdicts), the op gate of `scripts/gates/` (`gate.mjs`, canon pins and digest, type impact), the drawing pipeline of `scripts/work/` other than the DNA judge (`draw-dna*`, `grammar-proposal`, `asset-slot`), the ledger of `engine/db/`, the machine helpers, and the `scripts/api` and `scripts/lib` helpers only they imported; with them the specs that exercised only that code. The `release-push-gate` and `hook-io` cases of `hook-input.spec.mjs` stay.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@starci/hfs",
-  "version": "4.9.0",
+  "version": "4.9.2",
   "description": "The StarCi app command implementation for scaffolding, linting, checking and synchronizing one product repository.",
   "type": "module",
   "license": "MIT",

package/runtime/knowledge/hfs/canon-pins.yaml

@@ -30,61 +30,61 @@ pins:
     source: packages/event-stream/package.json
     why: 'the one server-sent-events client of every front end (fe-stack event-stream, owner:event-stream-package): the transport client layer (modules/api/sse/clients) creates one instance for the app with the bearer token source and the stream operations follow on it; it carries Last-Event-ID resume, the capped doubling backoff, the heartbeat timeout, the single 401 renewal and the useSWRSubscription adapter, so no app keeps a hand-written reader.'
   '@starci/grammar':
-    version: 0.14.0
+    version: 0.15.1
     group: starci
     install: registry
     side: fe
     source: packages/grammar/package.json
     why: 'the grammar front ends read: the brand layer sets `--font-sans` and `--font-mono` and the grammar reads them; it carries the Input tel kind, the copyable and read-only Input, the IconButton disclosure props and count badge, ChatBubble, FillViewport, Textarea mentions and Enter-to-send, the leading PrimaryRailLayout rail, the plate-less Image, ListRow, the soft Alert, Progress steps, the floating primary IconButton, FlowGraph, the STATE-8 loading views and the bordered selectable TagGroup chips. The runtime source version wins for a @starci package.'
   '@starci/eslint-canon-be':
-    version: 3.5.0
+    version: 3.6.1
     group: starci
     install: registry
     side: be
     source: packages/eslint-canon-be/package.json
     why: 'the back-end ESLint canon: `loadHfs(import.meta.url)` of be/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the be side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; `starciBeConfig({ hfs: loadHfs(import.meta.url) })` is the typed factory and the BE-CONVENTION laws are its rules.'
   '@starci/eslint-canon-fe':
-    version: 9.3.0
+    version: 9.4.1
     group: starci
     install: registry
     side: fe
     source: packages/eslint-canon-fe/package.json
     why: 'the front-end ESLint canon: `loadHfs(import.meta.url)` of fe/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the fe side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; the front end has no tests (FE_NO_TESTS R97 in hfs) and no-vietnamese-in-source (R91) applies.'
   '@starci/eslint-grammar-core':
-    version: 0.14.0
+    version: 0.15.1
     group: starci
     install: registry
     side: fe
     source: packages/eslint-grammar-core/package.json
     why: 'the StarCi Grammar component API lint, versioned with @starci/grammar; front ends compose this family package with the universal FE canon.'
   '@starci/eslint-grammar-offset-pop':
-    version: 0.14.0
+    version: 0.15.1
     group: starci
     install: registry
     side: fe
     source: packages/eslint-grammar-offset-pop/package.json
     why: 'the Offset Pop Grammar component API lint, versioned with @starci/grammar; its shared component contract comes from the StarCi family lint without copying rules.'
   '@starci/stylelint-canon':
-    version: 2.1.0
+    version: 2.2.1
     group: starci
     install: registry
     side: fe
     source: packages/stylelint-canon/package.json
     why: 'the front-end stylelint canon: no-class-selector refuses a compound class selector (`div.card`); the brand layer accepts `--font-sans` and `--font-mono`; status-contrast measures the HeroUI soft pairs per theme; brand-layer-shape reads the shared :root,.light,.dark block and the info soft pair; appTokens come from loadAppTokens(import.meta.url) for the managed one-line stylelint.config.mjs.'
   '@starci/tsconfig':
-    version: 2.0.8
+    version: 2.1.0
     group: starci
     install: registry
     side: both
     source: packages/tsconfig/package.json
   '@starci/prettier-config':
-    version: 1.0.5
+    version: 1.1.0
     group: starci
     install: registry
     side: both
     source: packages/prettier-config/package.json
   '@starci/jest-preset':
-    version: 2.3.7
+    version: 2.4.1
     group: starci
     install: registry
     side: be
@@ -97,15 +97,22 @@ pins:
     side: be
     source: packages/test-world/package.json
     why: 'the shared e2e library of every back end (R47, R48), a devDependency of every back end: the warm stack behind toxiproxy, the network-edge fakes, the Nest boot, the typed useTestWorld handle, useSandbox for contract specs and the outage lock. Kafka is real own infra (the one digest-pinned apache/kafka KRaft image, a broker listener and proxy per slot, slot-prefixed topics, consumer groups and client ids) and Postgres is schema-per-context (a schema and a login role per context in a shared database). Each worker has its own data slot (<ns>_w<k>) with its own databases, Keycloak realm, leased Redis DB, bucket/collection/topic prefixes, fakes host, toxiproxy proxies and outage lock; a run provisions min(jest workers, workers cap, default 2) slots, and state file protocol 2 pairs exactly with @starci/jest-preset (TEST_WORLD_PAIR_MISMATCH otherwise). A modules world boots real peer apps beside its modules, world.apps.<name>.during(fn) is the outage of a peer app, w.keycloak.clientSecret(client) answers the run-generated secret of a confidential realm client, world.keycloak.events/sessions read the realm user events and live sessions, world.infra.postgresql.connection(name) takes one database connection down while the others serve, and world.resolve and scope.resolve take any Nest token. Every path a declaration names (`stack`, seeds, the realm, Dockerfiles) resolves from the app root (the directory of hfs.json); the globalSetup registers the path aliases as TypeScript resolves them. Its CLI main is exported at ./cli for starci app stack.'
+  '@starci/ai-router':
+    version: 0.2.1
+    group: starci
+    install: registry
+    side: be
+    source: packages/ai-router/package.json
+    why: 'the AI pool router of a back end: a NestJS module that routes OpenAI-compatible chat, stream and embeddings calls across keys, models and providers, with @starci/ai-router/testing for its specs; @starci/jest-preset compiles it as an ESM-only dependency.'
   'starci-harness':
-    version: 1.1.0-alpha.1
+    version: 1.1.0-alpha.2
     group: starci
     install: registry
     side: both
     source: cli/package.json
     why: 'the one StarCi command line (bins starci and starci-harness): a product repository installs it for starci app, which it runs in-process through its exact @starci/hfs dependency, and its codegen loads starci-harness/input-bounds.'
   '@starci/hfs':
-    version: 4.9.0
+    version: 4.9.2
     group: starci
     install: registry
     side: both

package/runtime/scripts/hfs/repo-identity.mjs

@@ -42,13 +42,13 @@ function askGit(root) {
 }
 
 /**
- * The product repository name: the main checkout's folder name (so a worktree and its main checkout agree), else the
- * origin remote's name, else package.json name outside Git, else the folder name. A folder inside a larger repository
- * (a nested product, an example) is named by its own folder.
+ * The product repository name: the origin remote's repository name (one name for every clone and worktree, whatever
+ * folder holds it), else the main checkout's folder name (so a worktree and its main checkout agree), else package.json
+ * name outside Git, else the folder name. A folder inside a larger repository (a nested product, an example) is named by
+ * its own folder.
  */
 export function repositoryName(root) {
   const { inWorkTree, repositoryRoot, home } = identityOf(root);
-  if (home) return path.basename(home);
   if (repositoryRoot) {
     try {
       const remote = trimTrailingSlashes(git(gitRemote, root, ['get-url', 'origin'])).replace(GIT_SUFFIX, '');
@@ -56,6 +56,7 @@ export function repositoryName(root) {
       if (name) return name;
     } catch { /* No origin remote. */ }
   }
+  if (home) return path.basename(home);
   if (inWorkTree && !repositoryRoot) return path.basename(root);
   try {
     const pkg = JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8'));

package/sync/index.mjs

@@ -36,6 +36,9 @@ import { ciWorkflowCommands } from './ci-commands.mjs';
 import { dependabotUpdates, hasDeclaredServices, readDeclaredQuality, readDeclaredBadges, sonarHostLine } from './quality-services.mjs';
 import { qualityServices } from '../runtime/scripts/hfs/ci-declaration.mjs';
 import { grammarLintFor } from '../runtime/scripts/lib/grammar-lint.mjs';
+import { LIST } from '../runtime/scripts/lib/loosening-config.mjs';
+import { readTruths } from '../runtime/scripts/lib/loosening-state.mjs';
+import { parseYaml as bundledParseYaml } from '../runtime/engine/yaml.mjs';
 
 export const TEMPLATES_DIR = path.join(import.meta.dirname, '..', 'templates');
 const NODE_MAJOR = 22;
@@ -194,11 +197,18 @@ export function bundledPresets() {
 
 /** Where the be unit run writes the lcov report (jest `coverageDirectory` coverage under be/, reporter lcov), from the app root. */
 const LCOV_REPORT = 'be/coverage/lcov.info';
+/** The design truths this package ships: the one list of the exceptions the canon allows, each with its owner ruling. */
+const DESIGN_TRUTHS = path.join(import.meta.dirname, '..', 'runtime', 'knowledge', 'hfs', 'design-truths.yaml');
+/** Every entry the design truths allow on `list`, in manifest order. */
+const designTruthEntries = list => [...new Set(readTruths(bundledParseYaml(fs.readFileSync(DESIGN_TRUTHS, 'utf8'))).literal.filter(allow => allow.list === list).flatMap(allow => allow.entries))];
 /**
- * The message catalogs Sonar's copy-paste detection leaves out (owner ruling 2026-10-22): a catalog holds one block per language
- * with the same keys, which CPD reads as duplicated code. They are still sources: linted, analysed and held to every other rule.
+ * The entries Sonar's copy-paste detection leaves out: every `cpd-exclusions` entry the design truths
+ * (knowledge/hfs/design-truths.yaml) allow, today the message catalogs (ruling message-catalogs-not-duplicate-code): a catalog
+ * holds one block per language with the same keys, which CPD reads as duplicated code. They are still sources: linted, analysed
+ * and held to every other rule. The rendered properties carry them inside the generated Sonar block, and `starci check loosening`
+ * accepts the block only as this manifest derives it.
  */
-export const SONAR_CPD_EXCLUSIONS = Object.freeze(['**/messages/*.messages.ts', '**/messages/*.json']);
+export const SONAR_CPD_EXCLUSIONS = Object.freeze(designTruthEntries(LIST.cpd));
 
 /**
  * The Sonar scope of the jest preset's exclusions (presets.sonarExclusions): its file patterns are the tests, which

package/templates/app/quality-config/sonar-project.properties

@@ -2,12 +2,12 @@
 {{sonarHostLine}}
 sonar.tests={{sonarSources}}
 sonar.exclusions={{sonarExclusions}}
-sonar.cpd.exclusions={{cpdExclusions}}
 sonar.test.inclusions={{sonarTestInclusions}}
 sonar.typescript.tsconfigPaths={{tsconfigPaths}}
 sonar.externalIssuesReportPaths=reports/lint.sonar.json
 sonar.javascript.lcov.reportPaths={{lcovReport}}
 # starci:sonar-scope begin (generated by `starci app sonar --write` from contexts/hfs/slots.yaml; do not edit)
 sonar.coverage.exclusions={{coverageExclusions}}
+sonar.cpd.exclusions={{cpdExclusions}}
 # starci:sonar-scope end
 sonar.javascript.node.maxspace=6144

package/templates/fe/skeleton/apps/__app__/src/app/auth/callback/route.ts

@@ -3,7 +3,7 @@ import { exchangeAuthCode } from "@/modules/auth/server"
 import { APP_ROUTES } from "@/modules/routes"
 
 /** The opt-in Supabase PKCE callback only exchanges the code and redirects home. */
-export async function GET(request: Request): Promise<NextResponse> {
+export const GET = async (request: Request): Promise<NextResponse> => {
     const url = new URL(request.url)
     const code = url.searchParams.get("code")
     if (code) await exchangeAuthCode(code)

package/templates/fe/skeleton/apps/__app__/src/components/blocks/SignInForm/component.tsx

@@ -1,14 +1,16 @@
 import { Button, Form, Input, SectionHeader, Text } from "@starci/grammar/common"
 
-/** Copy, state and action supplied by the connected sign-in block. */
+/** Copy, the pending flag, the first error message and the action supplied by the connected sign-in block. */
 export interface SignInFormBaseProps {
-    readonly state: "ready" | "working" | "failed"
     readonly props: {
         readonly title: string
         readonly emailLabel: string
         readonly passwordLabel: string
         readonly submitLabel: string
-        readonly failure: string | undefined
+        /** True while the sign-in request runs. */
+        readonly pending: boolean
+        /** The resolved message of the last refused sign-in, or undefined. */
+        readonly errorMessage: string | undefined
     }
     readonly on: { readonly submit: (input: FormData) => void }
 }
@@ -17,11 +19,11 @@ export interface SignInFormBaseProps {
 export const SignInFormBase = (props: SignInFormBaseProps) => (
     <>
         <SectionHeader title={props.props.title} level={2} />
-        <Form label={props.props.title} isPending={props.state === "working"} onSubmit={props.on.submit}>
+        <Form label={props.props.title} isPending={props.props.pending} onSubmit={props.on.submit}>
             <Input id="sign-in-email" name="email" label={props.props.emailLabel} kind="email" isRequired />
             <Input id="sign-in-password" name="password" label={props.props.passwordLabel} kind="password" isRequired />
-            {props.props.failure === undefined ? null : <Text live="assertive">{props.props.failure}</Text>}
-            <Button type="submit" intent="commit" isPending={props.state === "working"}>
+            {props.props.errorMessage === undefined ? null : <Text live="assertive">{props.props.errorMessage}</Text>}
+            <Button type="submit" intent="commit" isPending={props.props.pending}>
                 {props.props.submitLabel}
             </Button>
         </Form>

package/templates/fe/skeleton/apps/__app__/src/components/blocks/SignInForm/index.tsx

@@ -5,12 +5,6 @@ import { useSession, useSignIn } from "@/hooks/auth"
 import type { SignInFailure } from "@/hooks/auth"
 import { SignInFormBase } from "./component"
 
-/** The state the form shows: working while a request runs, failed after a refusal, else ready. */
-const stateOf = (pending: boolean, failure: SignInFailure | undefined): "working" | "ready" | "failed" => {
-    if (pending) return "working"
-    return failure === undefined ? "ready" : "failed"
-}
-
 /** The fields of the submitted form, or undefined when one is missing. */
 const credentialsOf = (input: FormData): { readonly email: string; readonly password: string } | undefined => {
     const email = input.get("email")
@@ -36,13 +30,13 @@ export const SignInForm = () => {
     }
     return (
         <SignInFormBase
-            state={stateOf(pending, failure)}
             props={{
                 title: t("title"),
                 emailLabel: t("email"),
                 passwordLabel: t("password"),
                 submitLabel: pending ? t("working") : t("submit"),
-                failure: failure === undefined ? undefined : failureMessages[failure],
+                pending,
+                errorMessage: failure === undefined ? undefined : failureMessages[failure],
             }}
             on={{ submit }}
         />

package/templates/fe/skeleton/apps/__app__/src/modules/auth/server.ts

@@ -4,7 +4,7 @@ import { cookies } from "next/headers"
 import { supabaseAnonKey, supabaseUrl } from "@/modules/config"
 
 /** The server auth owner reads the PKCE verifier and persists the exchanged session in cookies. */
-export async function exchangeAuthCode(code: string): Promise<void> {
+export const exchangeAuthCode = async (code: string): Promise<void> => {
     const cookieStore = await cookies()
     const client = createServerClient(supabaseUrl(), supabaseAnonKey(), {
         cookies: {