claudemd-cli 0.72.0 → 0.73.1

package/bin/claudemd-lint.js

@@ -480,7 +480,20 @@ function auditCmd(rawArgs) {
     }
   }
 
-  const turns = parseTranscript(jsonl);
+  // `integrity` counts the rows parseTranscript drops. The pre-flight above
+  // only catches an ENTIRELY unparseable file; a transcript that is 30%
+  // corrupt passed it and then printed "no §10-V hits across N turn(s)" with N
+  // silently short (audit R11-24). Same warning shape as the string-row skip
+  // below — the verdict still comes from the rows that parsed, but the reader
+  // is told how many did not.
+  const integrity = { totalLines: 0, badLines: 0 };
+  const turns = parseTranscript(jsonl, integrity);
+  if (integrity.badLines > 0) {
+    process.stderr.write(
+      `audit: warning: skipped ${integrity.badLines} of ${integrity.totalLines} non-empty line(s) ` +
+        `that did not parse as JSON — the turn count below covers only the rows that parsed.\n`
+    );
+  }
   // QA ISSUE-002 (option c): string-shape assistant rows are outside the
   // block-array input domain and never reach the scanner. Keep the verdict
   // based on scanned turns, but say so on stderr — a silent skip here is the
@@ -514,7 +527,9 @@ function auditCmd(rawArgs) {
   const flaggedCount = annotated.reduce((n, t) => n + (t.hits.length > 0 ? 1 : 0), 0);
 
   if (json) {
-    process.stdout.write(formatJSON({ scope: 'audit', transcript: transcriptPath, turns: annotated }) + '\n');
+    process.stdout.write(
+      formatJSON({ scope: 'audit', transcript: transcriptPath, turns: annotated, integrity }) + '\n'
+    );
   } else {
     const out = formatHumanReadable({ scope: 'audit', turns: annotated });
     if (flaggedCount === 0) process.stdout.write(out + '\n');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claudemd-cli",
-  "version": "0.72.0",
+  "version": "0.73.1",
   "description": "Standalone CLI for §10-V banned-vocab + transcript scanning. Companion to the claudemd Claude Code plugin (github.com/sdsrss/claudemd) for use in git pre-commit hooks, GitHub Actions, and other agents.",
   "type": "module",
   "bin": {
@@ -24,11 +24,11 @@
   "scripts": {
     "test": "bash tests/run-all.sh",
     "test:scripts": "bash -c 'source tests/lib/env-hygiene.sh && claudemd_reset_test_env && node --test tests/scripts/*.test.js'",
-    "test:hooks": "for t in tests/hooks/*.test.sh; do bash \"$t\" || exit 1; done",
+    "test:hooks": "bash -c 'source tests/lib/env-hygiene.sh && claudemd_reset_test_env && source tests/lib/run-suite.sh && for t in tests/hooks/*.test.sh; do run_suite \"$t\" 300 || exit 1; done'",
     "lint:argv": "node scripts/lint-argv.js",
     "version-check": "node scripts/version-cascade-check.js",
     "test:coverage": "c8 --all --src=bin --src=scripts --include='bin/**/*.js' --include='scripts/**/*.js' --reporter=text-summary --reporter=html --reports-dir=coverage npm run test:scripts",
-    "lint": "npm run lint:argv && npm run version-check && npm run lint:sh && npm run lint:js",
+    "lint": "npm run lint:argv && npm run version-check && npm run lint:sh && npm run lint:js && npm run format:check",
     "lint:sh": "F=$(bash tests/lib/shell-files.sh) && shellcheck --severity=warning $F",
     "lint:js": "eslint bin scripts tests eslint.config.js",
     "format": "prettier --write bin scripts tests eslint.config.js",

package/scripts/lib/lint.js

@@ -383,21 +383,31 @@ export function scan(text, { excludeRatio = false, patterns, sanitize = false }
   return hits;
 }
 
-// parseTranscript(jsonlText) → [{turnIndex, line, text}, ...]
+// parseTranscript(jsonlText, integrity) → [{turnIndex, line, text}, ...]
 //   Iterates jsonl, returns one entry per assistant text-content turn. Each
 //   entry concatenates all .message.content[*].text blocks for that turn.
-//   Corrupt rows (unparseable JSON, missing fields) silently skipped — matches
+//   Corrupt rows (unparseable JSON, missing fields) are skipped — matches
 //   transcript-vocab-scan.sh's `try fromjson catch empty` design.
-export function parseTranscript(jsonlText) {
+//
+//   `integrity` (out param, optional): `{ totalLines, badLines }` written back
+//   so the skip is countable rather than invisible. Skipping is still the right
+//   behavior — a half-corrupt transcript is worth scanning — but until 2026-09-03
+//   (audit R11-24) nothing downstream could tell "0 hits across 40 turns" from
+//   "0 hits across the 40 turns that happened to parse". readLogRows in
+//   rule-hits-parse.js has carried the same counter since a 33% corruption went
+//   unnoticed there; this is the same counter on the transcript side.
+export function parseTranscript(jsonlText, integrity = null) {
   const lines = jsonlText.split('\n');
   const turns = [];
   let turnIndex = 0;
   for (let i = 0; i < lines.length; i++) {
     if (!lines[i].trim()) continue;
+    if (integrity) integrity.totalLines = (integrity.totalLines || 0) + 1;
     let row;
     try {
       row = JSON.parse(lines[i]);
     } catch {
+      if (integrity) integrity.badLines = (integrity.badLines || 0) + 1;
       continue;
     }
     if (row.type !== 'assistant') continue;