hypomnema 1.2.1 → 1.3.0

package/scripts/lib/check-bilingual.mjs

@@ -0,0 +1,141 @@
+/**
+ * lib/check-bilingual.mjs — pure validators for the bilingual release-doc rule.
+ *
+ * Rule source: CLAUDE.md learned_behaviors release-doc-bilingual (2026-05-24).
+ * Every Hypomnema OSS ship must carry an English body PLUS a Korean summary
+ * block in both the CHANGELOG section and the git tag annotation. This module
+ * exports the parsing/validation primitives; the CLI wrapper in
+ * scripts/check-bilingual.mjs handles I/O and exit codes.
+ *
+ * Scope (deliberate): this gate only enforces the KOREAN half. The English
+ * half has been historically present in every ship — the rule exists because
+ * the Korean half is what gets silently dropped under time pressure (see
+ * release-doc-bilingual feedback page). A tag body of "---" + Korean with an
+ * empty English section would technically pass these validators, but that's
+ * acceptable because such a body is not a realistic failure mode for a
+ * maintainer who already wrote the English release notes. If "English missing"
+ * ever becomes a real regression vector, add an English-half threshold.
+ *
+ * Why pure functions: lets tests/runner.mjs construct synthetic CHANGELOG /
+ * tag-body strings without touching real git or real CHANGELOG.md.
+ */
+
+// AC00–D7A3 covers all precomposed Hangul syllables. We NFC-normalize the
+// input before counting so jamo-only inputs (decomposed) still match after
+// composition.
+export const HANGUL_RE = /[가-힣]/g;
+export const HANGUL_BODY_THRESHOLD = 10;
+
+export function countHangul(text) {
+  return (text.normalize('NFC').match(HANGUL_RE) || []).length;
+}
+
+export function escapeRegex(s) {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+
+/**
+ * Validate that CHANGELOG.md content has a "## [<version>]" section containing
+ * a "### 한글 요약" sub-section with >= HANGUL_BODY_THRESHOLD Hangul chars.
+ *
+ * @param {string} content  CHANGELOG.md raw content (CRLF tolerated).
+ * @param {string} version  Semver string to look up (e.g. "1.2.1").
+ * @returns {{ok: true, hangulCount: number} | {ok: false, reason: string}}
+ */
+export function validateChangelog(content, version) {
+  if (!version) return { ok: false, reason: 'no version supplied' };
+  const lines = content.replace(/\r\n/g, '\n').split('\n');
+  const versionEsc = escapeRegex(version);
+  // Anchor closing bracket so 1.2.1 does NOT match the prefix of 1.2.10.
+  // Allow trailing " - YYYY-MM-DD" or nothing.
+  const sectionRe = new RegExp(`^## \\[${versionEsc}\\](\\s.*)?$`);
+
+  const startIndices = [];
+  for (let i = 0; i < lines.length; i++) {
+    if (sectionRe.test(lines[i])) startIndices.push(i);
+  }
+  if (startIndices.length === 0) {
+    return { ok: false, reason: `no "## [${version}]" section in CHANGELOG.md` };
+  }
+  if (startIndices.length > 1) {
+    return {
+      ok: false,
+      reason: `duplicate "## [${version}]" sections (${startIndices.length}) in CHANGELOG.md`,
+    };
+  }
+
+  const start = startIndices[0];
+  let sectionEnd = lines.length;
+  for (let i = start + 1; i < lines.length; i++) {
+    if (/^## /.test(lines[i])) {
+      sectionEnd = i;
+      break;
+    }
+  }
+  const sectionLines = lines.slice(start, sectionEnd);
+
+  const koreanHeadIdx = sectionLines.findIndex((l) => l.trim() === '### 한글 요약');
+  if (koreanHeadIdx === -1) {
+    return { ok: false, reason: `section [${version}] missing "### 한글 요약" sub-section` };
+  }
+
+  // Bound the Korean block: stop at the next H2 OR H3. CHANGELOG.md has
+  // sibling H3s like "### Internal", "### Fixed" — Hangul in those sections
+  // does not count toward the "### 한글 요약" requirement.
+  let koreanEnd = sectionLines.length;
+  for (let i = koreanHeadIdx + 1; i < sectionLines.length; i++) {
+    if (/^(##|###) /.test(sectionLines[i])) {
+      koreanEnd = i;
+      break;
+    }
+  }
+  const body = sectionLines.slice(koreanHeadIdx + 1, koreanEnd).join('\n');
+  const count = countHangul(body);
+  if (count < HANGUL_BODY_THRESHOLD) {
+    return {
+      ok: false,
+      reason:
+        `section [${version}] "### 한글 요약" body has ${count} Hangul chars ` +
+        `(threshold: ${HANGUL_BODY_THRESHOLD}). Heading alone does not count — write real Korean summary.`,
+    };
+  }
+  return { ok: true, hangulCount: count };
+}
+
+/**
+ * Validate that a git tag annotation body has a "---" separator with Korean
+ * text after the LAST such separator. Tolerates earlier "---" markdown
+ * horizontal rules in the English body.
+ *
+ * @param {string} body  Tag annotation body, as returned by
+ *                       `git tag -l --format='%(contents)' <ref>`.
+ * @returns {{ok: true, hangulCount: number} | {ok: false, reason: string}}
+ */
+export function validateTagBody(body) {
+  const lines = body.replace(/\r\n/g, '\n').split('\n');
+  let lastSepIdx = -1;
+  for (let i = lines.length - 1; i >= 0; i--) {
+    if (lines[i].trim() === '---') {
+      lastSepIdx = i;
+      break;
+    }
+  }
+  if (lastSepIdx === -1) {
+    return {
+      ok: false,
+      reason:
+        'tag annotation has no "---" separator line (expected: English body + "---" + Korean)',
+    };
+  }
+  const tail = lines.slice(lastSepIdx + 1).join('\n');
+  const count = countHangul(tail);
+  if (count < HANGUL_BODY_THRESHOLD) {
+    return {
+      ok: false,
+      reason:
+        `tag body after the last "---" has only ${count} Hangul chars ` +
+        `(threshold: ${HANGUL_BODY_THRESHOLD}). Write a real Korean summary after the separator.`,
+    };
+  }
+  return { ok: true, hangulCount: count };
+}

package/scripts/lib/extensions.mjs

@@ -80,8 +80,8 @@ function pkgRootDir(target) {
 
 /**
  * Discover sync-eligible extensions under `extDir`. Returns a per-type map plus a
- * `warnings` array. Applies the `.hypoignore` filter (#30), the basename
- * whitelist (#9), and pairs each file with its optional `<name>.manifest.json`.
+ * `warnings` array. Applies the `.hypoignore` filter (fix #30), the basename
+ * whitelist (plan §5 #9), and pairs each file with its optional `<name>.manifest.json`.
  * No-ops gracefully when extDir is absent (e.g. --from-remote clones, plan §5 #8).
  */
 export function discoverExtensions(extDir, hypoignorePatterns, hypoDir) {
@@ -364,7 +364,7 @@ export function syncExtensions({
   const discovered = discoverExtensions(extDir, patterns, hypoDir);
   result.warnings.push(...discovered.warnings);
 
-  // E4 (#32): Codex supports hooks + commands only. If the user authored
+  // E4 (fix #32): Codex supports hooks + commands only. If the user authored
   // skills/agents extensions, surface a one-time notice that they are skipped
   // for this target rather than silently dropping them (plan §2 E4).
   if (target === 'codex') {

package/scripts/lib/feedback-scope.mjs

@@ -0,0 +1,21 @@
+// Feedback page `scope:` field vocabulary — shared single source of truth.
+//
+// Consumed by:
+//   - scripts/lint.mjs      (lint-time validation of feedback page frontmatter)
+//   - scripts/feedback.mjs  (create-time --scope validation in /hypo:feedback)
+// Keep this the ONLY definition; both consumers import it so the two validators
+// never drift (ADR 0034 / OQ-34). feedback-sync.mjs matches scope by plain string
+// equality (not this regex), so it is intentionally not a consumer.
+//
+// Accepts `global` or `project:<id>`. The `<id>` charset matches what
+// deriveProjectId() (feedback-sync.mjs) emits from a cwd: `/` and `.` are both
+// replaced with `-`, producing leading-dash, mixed-case ids like
+// `-Users-you-Workspace-Project`. So the class allows a leading `-`, mixed case,
+// and `_`/`-` — but deliberately NOT `.`:
+//   - deriveProjectId never emits `.` (it is replaced), so excluding it loses
+//     nothing for the derived path; and
+//   - the resolved project-id is path-joined in feedback-sync.mjs:213, so keeping
+//     `.` out of the vocabulary avoids ever blessing `project:.` / `project:..`.
+// Known limit: a cwd containing spaces (or other path chars outside [A-Za-z0-9_-])
+// still derives an id this regex rejects; pass `--project-id=<id>` for those.
+export const FEEDBACK_SCOPE_RE = /^(global|project:[A-Za-z0-9_-]+)$/;

package/scripts/lib/fix-manifest.mjs

@@ -0,0 +1,109 @@
+/**
+ * fix-manifest — evidence mapping for claimed-merged fixes (Phase 2, A-sot).
+ *
+ * ADR 0036: this module is the *evidence* SoT (fix → test + ADR-line), NOT the
+ * *status* SoT. "Is fix N merged?" is answered solely by the wiki spec
+ * (parseStatus). A manifest row says "if the spec claims N merged, here is the
+ * test that proves the behavior and the production-code line that proves the
+ * ADR's core decision shipped."
+ *
+ * Shape (ADR 0036 decision 2 — NO `status` field):
+ *   { fixId:number, testNames:string[], adrPath:string|null, adrKeyLine:string }
+ *
+ *  - testNames: MUST set-equal the `// @fix #N:` anchors in tests/runner.mjs
+ *    (drift is an error — MANIFEST_TEST_DRIFT). Multiple anchors → multiple
+ *    names. The NO_AUTO_TEST sentinel is the ONLY allowed lone entry; it may
+ *    not be mixed with real test names.
+ *  - adrPath: path (relative to the wiki root) of the ADR whose core decision
+ *    this fix implements. `null` iff adrKeyLine is the NO_ADR sentinel.
+ *  - adrKeyLine: a maintainer-curated literal that embodies the fix's shipped
+ *    decision and exists verbatim in production code (scripts/ hooks/ commands/
+ *    skills/ templates/). Verified by fixed-string grep — 0 hits is
+ *    ADR_LINE_MISSING. The NO_ADR sentinel exempts a fix that has no ADR (small
+ *    / doctor fixes); the test-green check still applies. NO_ADR is NOT for
+ *    fixes that have an ADR but whose evidence lives outside the corpus.
+ *
+ * Coverage contract: every fix that is BOTH claimed-merged in the spec AND
+ * anchored in the runner must have exactly one row here (MANIFEST_MISSING_ROW
+ * is an error). Fixes anchored but not claimed (e.g. #18) are ORPHAN_ANCHOR
+ * warnings and need no row.
+ *
+ * Corpus note (spec §A amendment, 2026-06-07): the ADR-line grep corpus is
+ * scripts/ hooks/ commands/ skills/ AND templates/. templates/ ships via npm
+ * `files`, so prompt-driven fixes whose decision is installed as template text
+ * (e.g. #20 proactive close offer) are honestly verifiable there.
+ */
+
+export const NO_ADR = 'NO_ADR';
+export const NO_AUTO_TEST = 'NO_AUTO_TEST';
+
+export const FIX_MANIFEST = [
+  {
+    fixId: 15,
+    testNames: ['all type-conditional fields present → green'],
+    adrPath: 'decisions/0030-hypoignore-enforce-all-injection-hooks.md',
+    adrKeyLine: 'isIgnored(path, HYPO_DIR, patterns)',
+  },
+  {
+    fixId: 17,
+    testNames: [
+      '5 mandatory memory files fresh → suppressOutput:true',
+      'project hot.md not updated today → block, reason names the file',
+      'open-questions.md absent/stale → still passes (conditional, not gated)',
+    ],
+    adrPath: 'decisions/0022-session-close-ux-automation.md',
+    adrKeyLine: 'sessionCloseFileStatus',
+  },
+  {
+    // Behavioral / prompt-driven: no automated test, evidence is the installed
+    // template prompt (templates/hypo-guide.md). Has an ADR (0022), so NOT
+    // NO_ADR — the adrKeyLine greps the shipped template text.
+    fixId: 20,
+    testNames: [NO_AUTO_TEST],
+    adrPath: 'decisions/0022-session-close-ux-automation.md',
+    adrKeyLine: '이 작업이 마무리되었나요? 세션을 정리(crystallize)할까요?',
+  },
+  {
+    fixId: 25,
+    testNames: [
+      'replay-compact-guard-detects-slash-clear: /clear with incomplete wiki → WIKI_AUTOCLOSE',
+    ],
+    adrPath: 'decisions/0022-session-close-ux-automation.md',
+    adrKeyLine: '[WIKI_AUTOCLOSE]',
+  },
+  {
+    // Removal fix (capacity bypass deleted). The shipped evidence is the
+    // deliberate removal-marker comment + the negative-control test.
+    fixId: 26,
+    testNames: [
+      'replay-personal-check-bypass-order: wiki-context-critical.json does NOT bypass (fix #26 negative control)',
+    ],
+    adrPath: 'decisions/0022-session-close-ux-automation.md',
+    adrKeyLine: 'Capacity bypass (≥90%) REMOVED — fix #26',
+  },
+  {
+    fixId: 27,
+    testNames: [
+      'replay-auto-minimal-crystallize-on-incomplete-close: mutating + no marker + close-intent → block',
+      'replay-auto-minimal-crystallize-on-incomplete-close: valid marker → continue (even with close-intent)',
+    ],
+    adrPath: 'decisions/0022-session-close-ux-automation.md',
+    adrKeyLine: 'The hook NEVER writes the marker',
+  },
+  {
+    // No dedicated ADR (schema-vocab tag validation); test-green only.
+    fixId: 36,
+    testNames: ['PascalCase tag → error', 'unknown tag (not in vocab) → error'],
+    adrPath: null,
+    adrKeyLine: NO_ADR,
+  },
+  {
+    fixId: 38,
+    testNames: [
+      'clean-wiki payload → ok:true, new entries appended (apply dedup is exact-entry, not date-based)',
+      'idempotent: re-running same payload produces no new bytes (file mtimes unchanged)',
+    ],
+    adrPath: 'decisions/0029-crystallize-session-close-depth-expansion.md',
+    adrKeyLine: 'exact-entry append dedup',
+  },
+];