@ultimat3/manifest 16.0.0 → 17.0.0

package/CLAUDE.md

@@ -30,6 +30,13 @@ by the CLI, not imported.
 
 ## Invariants
 
+- **`checkAgentsMd`'s `maxBytes` is a whole number of 0 or more** (`As of 2026-08-26`),
+  `finiteCount('checkAgentsMd', 'maxBytes', …)`, and it is screened in `checkAgentsMd` rather than
+  in `assertAgentsMd` because that is the function that READS the option — "inspect without
+  throwing" is a promise about the repository's state, not about a caller passing a budget that is
+  not a number. `bytes > maxBytes` is false when `maxBytes` is `NaN`, so `assertAgentsMd` passed an
+  `AGENTS.md` of any size while the `AgentsMdCheck` it returned reported `ok: false`: the gate's
+  throw and the gate's report disagreeing about one file, with nothing raising.
 - **No nondeterminism.** No timestamp, git sha, hostname, counter, or unsorted iteration.
   `buildManifest` is pure — it must never read a registry, a clock, or the filesystem.
 - Top-level key order in the file is fixed by `KEY_ORDER` in `emit.ts` — `as const satisfies

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ultimat3/manifest",
-  "version": "16.0.0",
+  "version": "17.0.0",
   "description": "x.manifest.json: deterministic generated facts, contract diff, AGENTS.md budget",
   "license": "MIT",
   "type": "module",
@@ -31,10 +31,10 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@ultimat3/action": "16.0.0",
-    "@ultimat3/core": "16.0.0",
-    "@ultimat3/entity": "16.0.0",
-    "@ultimat3/jobs": "16.0.0",
-    "@ultimat3/query": "16.0.0"
+    "@ultimat3/action": "17.0.0",
+    "@ultimat3/core": "17.0.0",
+    "@ultimat3/entity": "17.0.0",
+    "@ultimat3/jobs": "17.0.0",
+    "@ultimat3/query": "17.0.0"
   }
 }

package/src/agents-md.ts

@@ -15,6 +15,7 @@
 // This module therefore checks exactly two things: that the file exists, and that it has not
 // grown into a document nobody reads. It never writes.
 
+import { finiteCount } from '@ultimat3/core';
 import { AgentsMdMissingError, AgentsMdTooLargeError } from './errors';
 
 export const AGENTS_MD_FILENAME = 'AGENTS.md';
@@ -43,7 +44,12 @@ export interface CheckAgentsMdInput {
 /** Inspect without throwing — `x verify --json` reports, `assertAgentsMd` enforces. */
 export async function checkAgentsMd(input: CheckAgentsMdInput = {}): Promise<AgentsMdCheck> {
   const path = input.path ?? `./${AGENTS_MD_FILENAME}`;
-  const maxBytes = input.maxBytes ?? AGENTS_MD_MAX_BYTES;
+  // `bytes > maxBytes` is false when `maxBytes` is `NaN`, so `assertAgentsMd` passed a file of any
+  // size while the check it returned reported `ok: false` — the gate's throw and the gate's report
+  // disagreeing about one file, with nothing raising. Screened here rather than in `assertAgentsMd`
+  // because this is the function that reads the option; "inspect without throwing" is about the
+  // file's state, and a budget that is not a number is the caller's bug, not the repository's.
+  const maxBytes = finiteCount('checkAgentsMd', 'maxBytes', input.maxBytes ?? AGENTS_MD_MAX_BYTES);
   const file = Bun.file(path);
 
   if (!(await file.exists())) {