karajan-code 4.65.0 → 4.66.0

package/src/harden/sign-changes.js

@@ -61,7 +61,10 @@ const cut = (text, limit) => {
  */
 export function describeSupervisorChanges({ projectDir, files, gitFn = defaultGit(projectDir), scan = scanText }) {
   let budget = DIFF_LIMIT_TOTAL;
-  return files.map(({ file, deleted }) => {
+  return files.map(({ file, deleted, local }) => {
+    // KJC-TSK-1207: a machine-local file (ignored host settings) is sealed by its hash
+    // alone; its content never leaves the machine, whatever the scan would say of it.
+    if (local === true) return { file, status: "local", added: 0, removed: 0, summary: "machine-local, sealed by its hash", diff: "[content not sent: machine-local file, sealed by its hash only]", truncated: false };
     const tracked = inHead(gitFn, file);
     const present = !deleted && existsSync(join(projectDir, file));
     let status = "modified";

package/src/harden/supervisor-commit.js

@@ -30,6 +30,15 @@ const HARNESS_PREFIX = ".karajan/harness/";
 // with the repo is sealed with the supervisor, so a policy change enters only
 // with the human's signed act. kj.config.yml is machine-local: CI never sees it.
 export const GOVERNANCE_FILES = [".karajan/policy.yml", ".karajan/rules.yml"];
+// KJC-BUG-0400: the CI workflows are sealed the same way, by hash: a PR could
+// otherwise rewrite the check that judges it and pass with a forged seal.
+const WORKFLOW_FILE = /^\.github\/workflows\/[^/]+\.ya?ml$/;
+// KJC-TSK-1207 (ADR 0030): with the guards run from the installed kj, the host
+// settings decide which guard runs. Committed where the project versions them;
+// where it ignores .claude/ (machine-local, like the guards) only their hash travels.
+export const HOST_SETTINGS = ".claude/settings.json";
+/** A file the seal covers by its hash alone: the governance config, every CI workflow and the host settings. */
+export const isSealedConfig = (file) => GOVERNANCE_FILES.includes(file) || WORKFLOW_FILE.test(file) || file === HOST_SETTINGS;
 
 const sha256 = (abs) => createHash("sha256").update(readFileSync(abs)).digest("hex");
 
@@ -83,7 +92,7 @@ export async function commitSupervisorRegeneration({
   // KJC-BUG-0244 (grebla #958): el commit sellado solo lleva el supervisor, pero
   // un stage ajeno se quedaba en esta rama y el siguiente commit caía aquí con la
   // card equivocada. Se para ANTES de pedir nada al humano y se nombra.
-  const foreign = run(["diff", "--cached", "--name-only"]).split("\n").filter((f) => f && !f.startsWith(HOOKS_PREFIX) && f !== PROVENANCE_FILE && !GOVERNANCE_FILES.includes(f));
+  const foreign = run(["diff", "--cached", "--name-only"]).split("\n").filter((f) => f && !f.startsWith(HOOKS_PREFIX) && f !== PROVENANCE_FILE && !isSealedConfig(f));
   if (foreign.length > 0) {
     throw new Error(
       `harden --commit: hay cambios en el stage que no son del supervisor (${foreign.slice(0, 5).join(", ")}${foreign.length > 5 ? ", …" : ""}): commitéalos en su rama o sácalos del stage (git restore --staged <ficheros>) antes de sellar`,
@@ -92,8 +101,15 @@ export async function commitSupervisorRegeneration({
   // Capa 4 (test adversarial 6-sep: un huérfano a init con pty falso y
   // prompts a ciegas llegó hasta aquí): nonce aleatorio tecleado de vuelta.
   seal.confirm(deps.confirm);
-  const tracked = new Set(run(["ls-files", "--", ...GOVERNANCE_FILES]).split("\n").filter(Boolean));
-  const governance = GOVERNANCE_FILES.filter((f) => existsSync(join(projectDir, f)) || tracked.has(f));
+  const tracked = new Set(run(["ls-files", "--", ...GOVERNANCE_FILES, HOST_SETTINGS, ".github/workflows"]).split("\n").filter(Boolean));
+  // Local only when git ignores it; untracked but not ignored, it is committed with the seal.
+  const gitIgnores = (file) => { try { run(["check-ignore", "-q", "--", file]); return true; } catch { return false; } };
+  const settingsHere = !tracked.has(HOST_SETTINGS) && existsSync(join(projectDir, HOST_SETTINGS));
+  const localSettings = settingsHere && gitIgnores(HOST_SETTINGS) ? [HOST_SETTINGS] : [];
+  const newSettings = settingsHere && localSettings.length === 0 ? [HOST_SETTINGS] : [];
+  const onDisk = (() => { try { return readdirSync(join(projectDir, ".github", "workflows")).map((f) => `.github/workflows/${f}`); } catch { return []; } })();
+  const candidates = [...new Set([...GOVERNANCE_FILES, ...onDisk, ...tracked, ...newSettings])].filter(isSealedConfig).sort();
+  const governance = candidates.filter((f) => existsSync(join(projectDir, f)) || tracked.has(f));
   const governanceDrift = governance.length === 0 ? [] : run(["status", "--porcelain", "--", ...governance]).split("\n").map((l) => l.slice(3).trim()).filter(Boolean);
   const drift = [...supervisorDrift({ projectDir, gitFn: run }), ...governanceDrift];
   // La provenance describe SIEMPRE el estado COMPLETO del supervisor (cazado
@@ -103,6 +119,7 @@ export async function commitSupervisorRegeneration({
     ...readdirSync(join(projectDir, HOOKS_PREFIX)).map((f) => HOOKS_PREFIX + f),
     ...harnessGuards(projectDir),
     ...governance.filter((f) => existsSync(join(projectDir, f))),
+    ...localSettings,
   ].sort();
   // KJC-BUG-0197: un guardia BORRADO se anota como borrado, igual que un hook.
   // No hacía falta para desencadenar el re-sello (la lista encoge, así que la
@@ -117,7 +134,7 @@ export async function commitSupervisorRegeneration({
     .map((f) => f?.file)
     .filter((f) => typeof f === "string" && f.startsWith(HARNESS_PREFIX) && !existsSync(join(projectDir, f)));
   const hashed = [
-    ...current.map((file) => ({ file, sha256: sha256(join(projectDir, file)) })),
+    ...current.map((file) => ({ file, sha256: sha256(join(projectDir, file)), ...(localSettings.includes(file) ? { local: true } : {}) })),
     ...drift.filter((f) => !existsSync(join(projectDir, f))).map((file) => ({ file, deleted: true })),
     ...goneGuards.map((file) => ({ file, deleted: true })),
   ];

package/src/harden/workflow-templates.js

@@ -67,6 +67,8 @@ export const WORKFLOWS = [
 // PL-C (KJC-TSK-0735) — tier C del ADR 0001: re-check merge-blocking en CI
 // (cubre el hook local manipulado). Solo se siembra con policy declarada;
 // npx PINEADO a la versión del kj que corrió harden — jamás @latest en CI.
+// KJC-BUG-0399: the judge is never the PR's code. A repo that ships kj itself
+// judges with the kj of the BASE branch, checked out apart; the PR is only data.
 export const policyWorkflowFor = (kjVersion, kjName = "karajan-code") => [
   "name: Policy",
   "on:",
@@ -87,7 +89,15 @@ export const policyWorkflowFor = (kjVersion, kjName = "karajan-code") => [
   "        env:",
   "          BASE_REF: ${{ github.base_ref }}",
   "        run: |",
-  `          if [ -f bin/kj.js ]; then npm ci --ignore-scripts && KJ="node bin/kj.js"; else KJ="npx --yes ${kjName}@${kjVersion}"; fi`,
+  '          JUDGE="$RUNNER_TEMP/kj-judge"',
+  '          git fetch --no-tags origin "${BASE_REF}:refs/remotes/origin/${BASE_REF}"',
+  '          if git cat-file -e "origin/${BASE_REF}:bin/kj.js" 2>/dev/null; then',
+  '            git worktree add --detach "$JUDGE" "origin/${BASE_REF}"',
+  '            (cd "$JUDGE" && npm ci --ignore-scripts)',
+  '            KJ="node $JUDGE/bin/kj.js"',
+  "          else",
+  `            KJ="npx --yes ${kjName}@${kjVersion}"`,
+  "          fi",
   '          $KJ policy check --range "origin/${BASE_REF}...HEAD" --strict',
 ].join("\n");
 

package/src/hu/team-board-mirror.js

@@ -4,15 +4,20 @@
  * rewritten from the issues every time kj reads them. It is a view: changing it is done
  * with kj hu move, never from the web, and the board refuses to edit it.
  */
-import { savePlan } from "../plan/plan-store.js";
+import { rm } from "node:fs/promises";
+import path from "node:path";
+import { plansDir, savePlan } from "../plan/plan-store.js";
 
-export const MIRROR_PLAN_ID = "plan_github-board";
+// KJC-BUG-0397: the board reads plan-*.json only and groups a plan by its projectDir;
+// the mirror was plan_github-board.json with no projectDir, so it was never shown.
+export const MIRROR_PLAN_ID = "plan-github-board";
+const LEGACY_MIRROR_FILE = "plan_github-board.json";
 
 /** The shared board as a plan the web board can show, marked read-only. */
 export async function writeTeamMirror(projectDir, rows, { repo }) {
   const now = new Date().toISOString();
   const plan = {
-    version: 2, planId: MIRROR_PLAN_ID, name: "github", alias: "github",
+    version: 2, planId: MIRROR_PLAN_ID, name: "github", alias: "github", projectDir,
     task: `Shared HU Board: GitHub Issues of ${repo}`,
     status: "ready", readonly: "github", createdAt: now,
     hus: rows.map((r) => ({
@@ -22,5 +27,6 @@ export async function writeTeamMirror(projectDir, rows, { repo }) {
     })),
   };
   await savePlan(projectDir, plan);
+  await rm(path.join(plansDir(projectDir), LEGACY_MIRROR_FILE), { force: true });
   return plan;
 }

package/src/policy/engine.js

@@ -35,7 +35,8 @@ export const SUPERVISOR_DEFAULTS = [
     // KJC-TSK-1033 (owner's decision, 13-oct): a policy change is authorized where
     // it is USED (commit, CI, release), whatever wrote it: only the human's seal lifts it.
     id: "defaults.governance.write",
-    pattern: /(^|\/)\.karajan\/(policy|rules)\.yml\b/,
+    // KJC-BUG-0400: the CI workflows too; a PR could rewrite the check that judges it.
+    pattern: /(^|\/)\.karajan\/(policy|rules)\.yml\b|(^|\/)\.github\/workflows\/[^/\s]+\.ya?ml\b/,
     message: "es configuración de gobierno: solo entra sellada por la persona (kj harden --commit, firmado desde su móvil)",
   },
 ];

package/src/policy/supervisor-verify.js

@@ -11,7 +11,7 @@ import { resolve, sep } from "node:path";
 import { renderCanonicalHook } from "../harden/harden-engine.js";
 import { provenanceSignature } from "../harden/phone-sign.js";
 import { canonicalHarnessBody } from "../harden/sentinel-hooks.js";
-import { GOVERNANCE_FILES, PROVENANCE_FILE } from "../harden/supervisor-commit.js";
+import { HOST_SETTINGS, isSealedConfig, PROVENANCE_FILE } from "../harden/supervisor-commit.js";
 
 const HOOKS_PREFIX = ".karajan/hooks/";
 const HARNESS_PREFIX = ".karajan/harness/";
@@ -69,11 +69,15 @@ export function verifiedSupervisorFiles({ projectDir, trackedOnly = false }) {
     if (typeof entry?.file !== "string") continue;
     // KJC-TSK-1032: the governance config has no canonical render; the sealed
     // hash, signed by the roster where there is one, is the proof.
-    if (GOVERNANCE_FILES.includes(entry.file)) {
+    if (isSealedConfig(entry.file)) {
       const abs = resolve(projectDir, entry.file);
       let st = null;
       try { st = lstatSync(abs); } catch { /* absent */ }
-      if (entry.deleted === true ? st === null : st?.isFile() && sha256(readFileSync(abs)) === entry.sha256) ok.add(entry.file);
+      // KJC-TSK-1207: host settings sealed as ignored by git (local) live only where
+      // they were sealed; absent from this checkout they cannot be judged here (CI,
+      // another clone). Versioned ones travel with the repo, so absent they fail.
+      if (st === null && entry.local === true && entry.file === HOST_SETTINGS) unjudgeable.add(entry.file);
+      else if (entry.deleted === true ? st === null : st?.isFile() && sha256(readFileSync(abs)) === entry.sha256) ok.add(entry.file);
       continue;
     }
     const kind = ROOTS.find(([prefix]) => entry.file.startsWith(prefix));