@vantageos/backend-doctor 0.1.12 → 0.1.13

package/dist/detectors/source/writesafety.js

@@ -179,22 +179,23 @@ const LOOP_NAMED = /\bfor\s*\(|\bfor\s+(?:const|let|var|await)\b|\.forEach\s*\(|
 const INDEPENDENCE_STATED = /no\s+invariant\s+spans|invariant\s+spans\s+no|writes?\s+are\s+independent|independently\s+atomic|no\s+cross-write\s+invariant/i;
 // Shape-(1) sub-condition (Eta REVISE #26, 2026-08-31): "a pre-I/O gate mutation
 // precedes a single atomic write" describes itself CHECKABLY — it is EXACTLY TWO
-// ctx.runMutation calls, the FIRST a gate (require*/assert*/ensure*/bind*). A shape-1
+// ctx.runMutation calls, the FIRST a gate (require*/assert*/bind*). A shape-1
 // marker on anything else (three calls, an unbounded loop, a first call that is not a
 // gate) is INCOMPLETE and stays non-conforming, exactly as an incomplete shape-2 does
 // — otherwise eleven words in a comment remove a real violation from the #1250 prod
 // gate (abstentions do not block; mechanical_violations is the sole driver), and the
 // mechanical count that gate rests on is no longer honest.
-const GATE_CALLEE = /\b(require|assert|ensure|bind)\w*/i;
-// Shape (3) narrows the gate stems: `ensure*` is the standard prefix for an UPSERT
-// WRITE helper (ensureUser/ensureWorkspace/ensureRow), so on the reingest shape — whose
-// FIRST runMutation is the gate — accepting `ensure*` lets a first WRITE renamed the
-// usual way (e.g. _insertImportedMemory -> ensureImportedMemory) masquerade as the gate
-// and buy the exemption, removing a real violation from the #1250 prod gate (Eta REVISE
-// #27, probe B). `bind` STAYS (bindOrAssertStorageOwnership is kb.ts's real gate, the
-// case this shape exists for); `require`/`assert` are unambiguous. Shapes 1/2 keep the
-// broader GATE_CALLEE.
-const GATE_CALLEE_REINGEST = /\b(require|assert|bind)\w*/i;
+// The gate stem excludes `ensure*` — the standard prefix for an UPSERT WRITE helper
+// (ensureUser/ensureWorkspace/ensureRow). Both shapes whose FIRST runMutation is the gate
+// (shape 1 pre-io-gate, shape 3 gate-then-idempotent-reingest) checked the callee NAME, so
+// accepting `ensure*` let a first WRITE renamed the usual way (_insertImportedMemory ->
+// ensureImportedMemory) masquerade as the gate and buy the exemption — removing a real
+// violation from the #1250 prod gate. Fixed at the CLASS (Eta REVISE #27 probe B closed
+// shape 3; this closes the same hole in shape 1, task k179fmje8vb7y0tbjdmxbzg78h8dhj3q):
+// the defect was a gate sub-condition decided by a name stem that idiomatically names
+// writes, so the fix is one narrowed stem set for every gate check. `bind` STAYS
+// (bindOrAssertStorageOwnership is kb.ts's real gate); `require`/`assert` are unambiguous.
+const GATE_CALLEE = /\b(require|assert|bind)\w*/i;
 export function scanR29(files) {
     const scan = emptyScan();
     for (const f of files) {
@@ -218,7 +219,7 @@ export function scanR29(files) {
                 const shapeGate = count === 2 && GATE_CALLEE.test(firstMutCallee);
                 // Shape (3) sub-conditions: a leading gate runMutation, a supersede/dedup on
                 // a stable namespace, a re-insert loop, AND an explicit convergence statement.
-                const shapeReingest = GATE_CALLEE_REINGEST.test(firstMutCallee) &&
+                const shapeReingest = GATE_CALLEE.test(firstMutCallee) &&
                     REINGEST_SUPERSEDE.test(region) &&
                     STABLE_KEY.test(region) &&
                     LOOP_NAMED.test(region) &&
@@ -240,7 +241,7 @@ export function scanR29(files) {
                             ? "the region names its loop and states the per-item writes are independently atomic (no invariant spans two)"
                             : shape === SHAPE_GATE_REINGEST
                                 ? "a leading gate runMutation, a supersede/dedup keyed on a stable namespace, and a recovering re-insert loop, with the convergence stated explicitly — a re-ingest of the same stable key converges on one current set"
-                                : "exactly two runMutations, the first a gate (require*/assert*/ensure*/bind*) preceding a single atomic write, which R-29's <=1 bar has no room for"}. R-29 refuses (a reviewer verifies the claim per site) — never a silent green (Eta ruling 2026-08-31)`,
+                                : "exactly two runMutations, the first a gate (require*/assert*/bind*) preceding a single atomic write, which R-29's <=1 bar has no room for"}. R-29 refuses (a reviewer verifies the claim per site) — never a silent green (Eta ruling 2026-08-31)`,
                     });
                 }
                 else if (shape === SHAPE_GATE_REINGEST) {
@@ -248,7 +249,7 @@ export function scanR29(files) {
                     // NOT buy could-not-judge (Eta: a shape names a checkable sub-condition, or
                     // the carve-out becomes a vocabulary).
                     const missing = [
-                        !GATE_CALLEE_REINGEST.test(firstMutCallee) && "a leading gate runMutation (require*/assert*/bind* — ensure* is an upsert-write stem, excluded here)",
+                        !GATE_CALLEE.test(firstMutCallee) && "a leading gate runMutation (require*/assert*/bind* — ensure* is an upsert-write stem, excluded here)",
                         !REINGEST_SUPERSEDE.test(region) && "a supersede/dedup call",
                         !STABLE_KEY.test(region) && "a stable namespace key (namespace/docId/contentHash)",
                         !LOOP_NAMED.test(region) && "a re-insert loop (for/for-of/.forEach/.map)",
@@ -266,7 +267,7 @@ export function scanR29(files) {
                     scan.violate.push({
                         rel: f.rel,
                         n: firstMut || openLine,
-                        note: `action ${inAction} orchestrates ${count} ctx.runMutation calls with an atomicity-exception "${SHAPE_PRE_IO_GATE}" marker that is INCOMPLETE — this shape is EXACTLY TWO runMutations whose FIRST is a gate (require*/assert*/ensure*/bind*); here ${count !== 2
+                        note: `action ${inAction} orchestrates ${count} ctx.runMutation calls with an atomicity-exception "${SHAPE_PRE_IO_GATE}" marker that is INCOMPLETE — this shape is EXACTLY TWO runMutations whose FIRST is a gate (require*/assert*/bind*); here ${count !== 2
                             ? `there are ${count}, not two`
                             : "the first runMutation is not a gate call"}. A gate-then-single-write is checkable; a marker cannot remove a >2-call or loop site from the gate`,
                     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vantageos/backend-doctor",
-  "version": "0.1.12",
+  "version": "0.1.13",
   "description": "A conformance instrument that measures the VantagePeers backend against the pinned backend standard. The THIRD doctor built ON the @vantageos/mcp-doctor engine — never a third engine. It consumes runDoctor/renderTable and adds only detectors.",
   "type": "module",
   "main": "./dist/cli.js",