karajan-code 4.50.0 → 4.51.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "karajan-code",
-  "version": "4.50.0",
+  "version": "4.51.0",
   "description": "Local multi-agent coding orchestrator with TDD, SonarQube, and code review pipeline",
   "type": "module",
   "license": "AGPL-3.0",

package/src/checks/release-check.js

@@ -29,7 +29,7 @@ async function withoutSetupInstalls(projectDir, setup, violations) {
   const installed = new Set(added.exitCode === 0 ? added.stdout.split("\n").map((s) => s.trim()).filter(Boolean) : []);
   const kept = [];
   for (const v of violations) {
-    if (v.rule_id === "defaults.supervisor.write" && installed.has(v.file)) {
+    if ((v.rule_id === "defaults.supervisor.write" || v.rule_id === "defaults.governance.write") && installed.has(v.file)) {
       const changed = await runCommand("git", ["-C", projectDir, "diff", "--quiet", setup, "HEAD", "--", v.file]);
       if (changed.exitCode === 0) continue;
     }

package/src/harden/supervisor-commit.js

@@ -26,6 +26,10 @@ const HOOKS_PREFIX = ".karajan/hooks/";
 // veredictos son locales por diseño); lo que viaja y se firma es su HUELLA,
 // dentro de una procedencia que sí está trackeada.
 const HARNESS_PREFIX = ".karajan/harness/";
+// KJC-TSK-1032 (owner's decision, 13-oct): the governance config that travels
+// with the repo is sealed with the supervisor, so a policy change enters only
+// with the human's signed act. kj.config.yml is machine-local: CI never sees it.
+export const GOVERNANCE_FILES = [".karajan/policy.yml", ".karajan/rules.yml"];
 
 const sha256 = (abs) => createHash("sha256").update(readFileSync(abs)).digest("hex");
 
@@ -79,7 +83,7 @@ export async function commitSupervisorRegeneration({
   // KJC-BUG-0244 (grebla #958): el commit sellado solo lleva el supervisor, pero
   // un stage ajeno se quedaba en esta rama y el siguiente commit caía aquí con la
   // card equivocada. Se para ANTES de pedir nada al humano y se nombra.
-  const foreign = run(["diff", "--cached", "--name-only"]).split("\n").filter((f) => f && !f.startsWith(HOOKS_PREFIX) && f !== PROVENANCE_FILE);
+  const foreign = run(["diff", "--cached", "--name-only"]).split("\n").filter((f) => f && !f.startsWith(HOOKS_PREFIX) && f !== PROVENANCE_FILE && !GOVERNANCE_FILES.includes(f));
   if (foreign.length > 0) {
     throw new Error(
       `harden --commit: hay cambios en el stage que no son del supervisor (${foreign.slice(0, 5).join(", ")}${foreign.length > 5 ? ", …" : ""}): commitéalos en su rama o sácalos del stage (git restore --staged <ficheros>) antes de sellar`,
@@ -88,13 +92,17 @@ export async function commitSupervisorRegeneration({
   // Capa 4 (test adversarial 6-sep: un huérfano a init con pty falso y
   // prompts a ciegas llegó hasta aquí): nonce aleatorio tecleado de vuelta.
   seal.confirm(deps.confirm);
-  const drift = supervisorDrift({ projectDir, gitFn: run });
+  const tracked = new Set(run(["ls-files", "--", ...GOVERNANCE_FILES]).split("\n").filter(Boolean));
+  const governance = GOVERNANCE_FILES.filter((f) => existsSync(join(projectDir, f)) || tracked.has(f));
+  const governanceDrift = governance.length === 0 ? [] : run(["status", "--porcelain", "--", ...governance]).split("\n").map((l) => l.slice(3).trim()).filter(Boolean);
+  const drift = [...supervisorDrift({ projectDir, gitFn: run }), ...governanceDrift];
   // La provenance describe SIEMPRE el estado COMPLETO del supervisor (cazado
   // en el primer estreno real: un sello parcial pisaba al anterior y dejaba
   // ficheros sin respaldo). Borrados del drift ⇒ deleted (catch de codex).
   const current = [
     ...readdirSync(join(projectDir, HOOKS_PREFIX)).map((f) => HOOKS_PREFIX + f),
     ...harnessGuards(projectDir),
+    ...governance.filter((f) => existsSync(join(projectDir, f))),
   ].sort();
   // KJC-BUG-0197: un guardia BORRADO se anota como borrado, igual que un hook.
   // No hacía falta para desencadenar el re-sello (la lista encoge, así que la
@@ -159,7 +167,7 @@ export async function commitSupervisorRegeneration({
   // Por DIRECTORIO, no por fichero: un rename ya staged deja la ruta vieja
   // sin existir y `git add -- <vieja>` falla; `-A` sobre el dir del
   // supervisor versiona altas, cambios, borrados y renombrados por igual.
-  run(["add", "-A", "--", PROVENANCE_FILE, ".karajan/hooks"]);
+  run(["add", "-A", "--", PROVENANCE_FILE, ".karajan/hooks", ...governance]);
   run([
     "commit",
     "--no-verify",
@@ -168,6 +176,7 @@ export async function commitSupervisorRegeneration({
     "--",
     PROVENANCE_FILE,
     ".karajan/hooks",
+    ...governance,
   ]);
   logger.info?.(`harden --commit: ${hashed.length} fichero(s) de supervisor versionados con procedencia sellada`);
   return { committed: true, files: hashed };

package/src/policy/engine.js

@@ -31,6 +31,13 @@ export const SUPERVISOR_DEFAULTS = [
     pattern: /\.claude\/settings\.json\b|\.karajan\/(hooks|harness)\/|\.karajan\/supervisor-provenance\.json\b/,
     message: "nombra ficheros del supervisor — solo el humano los modifica, fuera de la sesión",
   },
+  {
+    // KJC-TSK-1033 (owner's decision, 13-oct): a policy change is authorized where
+    // it is USED (commit, CI, release), whatever wrote it: only the human's seal lifts it.
+    id: "defaults.governance.write",
+    pattern: /(^|\/)\.karajan\/(policy|rules)\.yml\b/,
+    message: "es configuración de gobierno: solo entra sellada por la persona (kj harden --commit, firmado desde su móvil)",
+  },
 ];
 
 // Tools del harness: mapeo acción → capability del kernel. Registro cerrado

package/src/policy/supervisor-verify.js

@@ -11,7 +11,7 @@ import { resolve, sep } from "node:path";
 import { renderCanonicalHook } from "../harden/harden-engine.js";
 import { provenanceSignature } from "../harden/phone-sign.js";
 import { canonicalHarnessBody } from "../harden/sentinel-hooks.js";
-import { PROVENANCE_FILE } from "../harden/supervisor-commit.js";
+import { GOVERNANCE_FILES, PROVENANCE_FILE } from "../harden/supervisor-commit.js";
 
 const HOOKS_PREFIX = ".karajan/hooks/";
 const HARNESS_PREFIX = ".karajan/harness/";
@@ -67,6 +67,15 @@ export function verifiedSupervisorFiles({ projectDir, trackedOnly = false }) {
   const ROOTS = [HOOKS_PREFIX, HARNESS_PREFIX].map((p) => [p, resolve(projectDir, p)]);
   for (const entry of entries) {
     if (typeof entry?.file !== "string") continue;
+    // KJC-TSK-1032: the governance config has no canonical render; the sealed
+    // hash, signed by the roster where there is one, is the proof.
+    if (GOVERNANCE_FILES.includes(entry.file)) {
+      const abs = resolve(projectDir, entry.file);
+      let st = null;
+      try { st = lstatSync(abs); } catch { /* absent */ }
+      if (entry.deleted === true ? st === null : st?.isFile() && sha256(readFileSync(abs)) === entry.sha256) ok.add(entry.file);
+      continue;
+    }
     const kind = ROOTS.find(([prefix]) => entry.file.startsWith(prefix));
     if (!kind) continue;
     const [prefix, root] = kind;
@@ -130,13 +139,14 @@ export function verifiedSupervisorFiles({ projectDir, trackedOnly = false }) {
  * mas laxo de lo que parece no pase por silencio (KJC-BUG-0212).
  */
 export function liftSealedSupervisorViolations({ projectDir, violations, trackedOnly = false }) {
-  const RULE = "defaults.supervisor.write";
-  if (!violations.some((v) => v.rule_id === RULE && v.file)) return { violations, lifted: 0 };
+  // KJC-TSK-1033: the governance config is lifted by the same seal.
+  const RULES = new Set(["defaults.supervisor.write", "defaults.governance.write"]);
+  if (!violations.some((v) => RULES.has(v.rule_id) && v.file)) return { violations, lifted: 0 };
   const sealed = verifiedSupervisorFiles({ projectDir, trackedOnly });
   // La violación sobre la PROPIA provenance solo se alza si la provenance
   // entera verificó — a medias no describe la verdad y sigue denegada.
   const liftable = (v) =>
-    v.rule_id === RULE
+    RULES.has(v.rule_id)
     && v.file
     && (sealed.files.has(v.file) || (v.file === PROVENANCE_FILE && sealed.complete === true));
   const kept = violations.filter((v) => !liftable(v));