leerness 1.36.301 → 1.36.303

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## 1.36.303 - 2026-10-15
+
+- Fixed (tests): `scripts/ci-shard.js` passed its own `LEERNESS_CI_SHARD_TIMES` to the leaves it runs, so `scripts/ci-shard-probe.js`, which runs the runner itself, overwrote the outer run's times file in the middle of a local full run (found in a full run for this release; the outer runner rewrote the file at its end, so the stored times were right). Leaves no longer see the variable, the way `e2eShard` already hides its own. CI does not set it. A new probe case fails on the 1.36.302 runner (13/14) and passes now (14/14) (T-0364).
+- Not shipped: T-0357, removing the temp folders a test made after it ends with exit code 0, was planned for this release in a simplified form. Its four review rounds found 16 more problems in the exit-time decision and in which folders it records (6, 6, 2 and 2; the first 14 fixed, each with a test that fails on the reviewed code). By the owner's decision before the fourth round, this release ships only the change above, and T-0357 continues separately.
+- Not changed: `contract verify` still counts exports written inside comments and strings. This was investigated and deferred on purpose in 1.36.18 (a comment masker without a parser deleted real code in review, which blocks valid contracts); T-0361 is on hold until a real parser is an option.
+
+## 1.36.302 - 2026-10-14
+
+- Fixed (tests): store-values-probe's two `skill publish` tests failed when a run crossed UTC midnight (T-0358; seen once in a Linux Docker node:20 run during the 1.36.299 release).
+  - `skill publish` first runs a pre-check (1.9.98), which refuses while drift needs attention. drift reads the tracker's last date as UTC midnight with a one-day threshold, so a tracker dated the previous UTC day makes drift attention as soon as the UTC date changes. The probe makes its template project once, so a run that crosses UTC midnight between making the template and publishing fails.
+  - The two tests about the generated text now pass `--no-security-check`, as do the e2e cases B(1.9.47) and B(1.9.48). A new test checks the pre-check with dates that do not depend on the time of day: a tracker dated two days back is refused and publishes with `--no-security-check`; one dated a day ahead passes the pre-check.
+  - With the health and drift clock set one minute past the next UTC midnight (a preload in their processes), HEAD's store-values-probe fails both publish tests (11/13) and the new one passes 14/14; HEAD's two e2e cases fail and the new ones pass. On the real clock both pass.
+  - Of 18 commands compared with a tracker dated today and one dated yesterday (gate, health, audit, drift check, handoff, doctor, session close and others), only `health --strict` and `skill publish` change their exit code. The drift behavior itself is unchanged.
+- Changed: CI shard weights for npm leaves now come from the first sharded CI run (T-0360; run 38481240201, 1.36.301), the median of each leaf's `ci-shard: ok` time over the Windows fast and gate commands jobs; 1.36.301 had measured them on a PC under load.
+  - From that run's own times, the slowest Windows fast shard goes from 28.8 to 23.9 min (15.0 / 26.5 / 28.8 measured). For `test:commands`, with each Node version's times predicted from weights of the other three versions: 26.2 / 25.7 / 24.1 / 23.2 to 26.0 / 23.2 / 23.4 / 22.3 min (Node 18 / 20 / 22 / 24).
+  - The e2e case weights stay those of 1.36.301. Predicted from the same run, the old split reproduces every measured shard time within 0.1 min. No reweighting from it (median, mean, maximum or normalized share over the four Windows Node versions, Node 18 alone, or the mean of both Node 18 runs) lowered the slowest Windows e2e shard, Node 18's 60.5 min as predicted (60.6 measured); each raised it, to 61.6-74.0 min.
+  - The run used 1,201.8 job-minutes, so with 20 jobs at a time it needs at least 60.1 min. It took 85.6 min from the first job's start to the last job's end; that last job, a Node 18 e2e shard, started 31.1 min after the first one (another started after 22.1 min). Windows e2e is 713.1 of those job-minutes, Node 18 alone 235.5 (1.38-1.63 times each other Node version).
+- Not changed: drift still reads a tracker dated the previous UTC day as stale from the first minute of the new UTC day, which blocks `skill publish` until `--no-security-check` or a task update (reported, a product decision). `contract verify` counts exports written inside comments and strings (found during this release, T-0361).
+- Reviewed by codex gpt-6.1-sol: four rounds on a candidate that also held a cleanup of test temp folders (T-0357); every finding concerned that cleanup, which moves to a later release (owner decision). A confirmation round on exactly this release's tree found no code issue and two CHANGELOG claims without saved evidence, the CI timing figures and the command sweep (NO-GO). Recomputed from the saved logs, the Windows e2e figure changed from 709 to 713.1 job-minutes and other figures were made exact; a check of the corrected entry against the saved evidence: GO.
+
 ## 1.36.301 - 2026-10-14
 
 - Changed: public CI runs its long work in parallel shards (T-0359). 1.36.300's CI run (38332288454) took five hours: each Windows gate job (199-300 min) ran e2e.js after `test:commands`, and the Windows fast job took 46 min (79 min in 1.36.299's run 38193803239).

package/README.md

@@ -195,7 +195,7 @@ MIT
 <!-- leerness:project-readme:start -->
 ## Leerness Project Harness
 
-이 프로젝트는 Leerness v1.36.301 하네스를 사용합니다. AI 에이전트는 작업 전 `leerness handoff`로 컨텍스트를 적재하고, 작업 후 `leerness check`/`leerness audit`/`leerness session close`를 수행해야 합니다.
+이 프로젝트는 Leerness v1.36.303 하네스를 사용합니다. AI 에이전트는 작업 전 `leerness handoff`로 컨텍스트를 적재하고, 작업 후 `leerness check`/`leerness audit`/`leerness session close`를 수행해야 합니다.
 
 ### 정체성 — AI 에이전트 운영 레이어 (UR-0030)
 
@@ -249,7 +249,7 @@ leerness memory restore decision <date|title>
 
 ### MCP server (외부 AI 통합)
 
-Leerness v1.36.301는 stdio JSON-RPC MCP server를 내장합니다 — Claude Code · Cursor · Codex CLI 등 외부 AI에 **102개 도구**를 노출:
+Leerness v1.36.303는 stdio JSON-RPC MCP server를 내장합니다 — Claude Code · Cursor · Codex CLI 등 외부 AI에 **102개 도구**를 노출:
 
 ```jsonc
 // 카테고리별
@@ -270,7 +270,7 @@ Leerness v1.36.301는 stdio JSON-RPC MCP server를 내장합니다 — Claude Co
 `<<autonomous-loop-dynamic>>` 신호만 보내면 AI가:
 1) 다음 라운드 후보 선정 → 2) 코드 변경 → 3) 회귀 테스트 갱신 → 4) 전체 e2e 스위트 통과 → 5) npm publish + git tag → 6) main push → 7) session close → 8) 다음 라운드 예약.
 
-현재 사용 중인 하네스 버전: **1.36.301**. 공개 릴리스 여부는 공개 저장소의 태그와 배포 기록에서 별도로 확인합니다.
+현재 사용 중인 하네스 버전: **1.36.303**. 공개 릴리스 여부는 공개 저장소의 태그와 배포 기록에서 별도로 확인합니다.
 
 ### 성능 가이드
 
@@ -308,7 +308,7 @@ leerness release pack --close --auto-main-push
 - `.leerness/session-handoff.md`: 다음 세션 인수인계 (자동 작성)
 - `.leerness/lessons.md` / `decisions.md` / `rules.md`: 영구 메모리 (5 surface)
 
-Last synced by Leerness v1.36.301: 2026-09-30
+Last synced by Leerness v1.36.303: 2026-09-30
 <!-- leerness:project-readme:end -->
 GitHub 로그인 계정 확인용 서버 어댑터: [설정·연결·승인과의 구분](docs/github-login.md). 실제 앱 등록/브라우저 세션 연결과 대상별 승인은 후속입니다.
 

package/bin/leerness.js

@@ -115,7 +115,7 @@ const {
   migrateLegacyWorkspace,
 } = require('../lib/workspace-dir');
 
-const VERSION = '1.36.301';
+const VERSION = '1.36.303';
 
 // MCP lifecycle 주소 표식은 현재 CLI 호출 한 번에만 유효하다. CLI bootstrap에서 즉시 env에서
 // 떼어 두어 `--no-record`/hook처럼 presence 기록 함수에 도달하지 않는 경로도 후속 child에 유출하지 않는다.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "leerness",
-  "version": "1.36.301",
+  "version": "1.36.303",
   "description": "The AI-coding operations layer that makes \"done\" require evidence — persistent memory, evidence-gated completion checks, and clean handoffs for any AI agent (Claude Code, Codex, Cursor). State lives as plain files in your repo. CLI + MCP, 0 runtime dependencies.",
   "keywords": [
     "leerness",

package/scripts/ci-shard-probe.js

@@ -136,6 +136,21 @@ try {
     assert.deepStrictEqual(s1.results.map(r => r.key), ['node ./a.js', 'node ./d.js']);
   });
 
+  check('runNpm keeps LEERNESS_CI_SHARD_TIMES to itself: leaves do not see it, the runner still writes its times', () => {
+    // 1.36.303: the full run's times file was overwritten mid-run by this probe's own runNpm, which inherited the
+    //   variable from the outer runner through the leaf environment.
+    const dir = path.join(arena, 'times-env');
+    fs.mkdirSync(dir);
+    const seen = path.join(dir, 'seen.txt'), times = path.join(dir, 'times.json');
+    fs.writeFileSync(path.join(dir, 'e.js'), `require('fs').writeFileSync(${JSON.stringify(seen)}, Object.keys(process.env).filter(k => k.toUpperCase() === 'LEERNESS_CI_SHARD_TIMES').length ? 'set' : 'unset');\n`);
+    const env = { ...process.env, GITHUB_ACTIONS: '', LEERNESS_CI_SHARD_TIMES: times };
+    const r = cs.runNpm('suite', { index: 1, count: 1 }, { root: dir, scripts: { suite: 'node ./e.js' }, weights: { e2e: {}, npm: {} }, stdio: 'ignore', env, log: () => {} });
+    assert.deepStrictEqual(r.failed, []);
+    assert.strictEqual(fs.readFileSync(seen, 'utf8'), 'unset', 'a leaf saw the runner\'s times variable');
+    assert.deepStrictEqual(Object.keys(JSON.parse(fs.readFileSync(times, 'utf8'))), ['node ./e.js'], 'the runner did not write its own times');
+    assert.strictEqual(env.LEERNESS_CI_SHARD_TIMES, times, 'the caller\'s environment object was changed');
+  });
+
   const CREATE = names => `const e2eShard = require('./ci-shard').e2eShard(__filename, [${names.map(n => `'${n}'`).join(', ')}]);`;
   const START = '// e2e-shard: cases start here';
 

package/scripts/ci-shard-weights.json

@@ -1,5 +1,5 @@
 {
- "_about": "Seconds per unit, for scripts/ci-shard.js. e2e: per case of scripts/e2e.js, from the result-line timestamps of the Windows Node 18 gate job of public CI run 38193803239 (1.36.299). npm: per leaf of test:commands and test:fast, measured on a Windows PC with Node 26.3.0 (2026-10-13), with other test runs in parallel. Weights only balance the shards; a missing or stale weight cannot drop a unit. Refresh: node ./scripts/ci-shard.js weights.",
+ "_about": "Seconds per unit, for scripts/ci-shard.js. e2e: per case of scripts/e2e.js, from the result-line timestamps of the Windows Node 18 gate job of public CI run 38193803239 (1.36.299); kept in 1.36.302 because no weighting from the first sharded run (38481240201) lowered the slowest Windows e2e shard (Node 18, 60.5 min) and most raised it (T-0360). npm: per leaf of test:commands and test:fast, the median of the Windows fast and gate commands jobs of public CI run 38481240201 (1.36.301; ci-shard: lines). Weights only balance the shards; a missing or stale weight cannot drop a unit. Refresh: node ./scripts/ci-shard.js weights.",
  "e2e": {
   "--help: 제거된 설정 명령 없음": 0.2,
   "A(1.36.103)": 16.2,
@@ -424,167 +424,168 @@
   "제거된 setup-agents 명령은 설정을 변경하지 않음": 0.2
  },
  "npm": {
-  "node ./scripts/agents-bench-output-probe.js": 8.9,
-  "node ./scripts/api-skill-match-probe.js": 314.2,
-  "node ./scripts/auto-update-hooks-probe.js": 21.6,
-  "node ./scripts/bugfix-areas-probe.js": 184.9,
-  "node ./scripts/claim-runtime-cache-probe.js": 4.5,
-  "node ./scripts/claim-sweep-git-probe.js": 9.7,
-  "node ./scripts/claims-baseline-concurrency-probe.js": 26.3,
-  "node ./scripts/claims-baseline-probe.js": 37.4,
-  "node ./scripts/command-flags-probe.js": 33.9,
-  "node ./scripts/copy-tree-probe.js": 0.3,
-  "node ./scripts/crud-check-probe.js": 168.3,
-  "node ./scripts/dead-flags-probe.js": 68.8,
-  "node ./scripts/decision-fence-offset-probe.js": 0.4,
-  "node ./scripts/done-status-probe.js": 222.4,
-  "node ./scripts/dry-run-refusal-probe.js": 79,
+  "node ./scripts/agents-bench-output-probe.js": 7,
+  "node ./scripts/api-skill-match-probe.js": 213,
+  "node ./scripts/auto-update-hooks-probe.js": 24.1,
+  "node ./scripts/bugfix-areas-probe.js": 127.8,
+  "node ./scripts/ci-shard-probe.js": 1.4,
+  "node ./scripts/claim-runtime-cache-probe.js": 3.3,
+  "node ./scripts/claim-sweep-git-probe.js": 7.2,
+  "node ./scripts/claims-baseline-concurrency-probe.js": 15.1,
+  "node ./scripts/claims-baseline-probe.js": 22.5,
+  "node ./scripts/command-flags-probe.js": 19,
+  "node ./scripts/copy-tree-probe.js": 0.1,
+  "node ./scripts/crud-check-probe.js": 129.9,
+  "node ./scripts/dead-flags-probe.js": 36.1,
+  "node ./scripts/decision-fence-offset-probe.js": 0.6,
+  "node ./scripts/done-status-probe.js": 125.9,
+  "node ./scripts/dry-run-refusal-probe.js": 56.6,
   "node ./scripts/e2e-child-diagnostics-probe.js": 0.5,
-  "node ./scripts/e2e-command-surface.js": 48.9,
+  "node ./scripts/e2e-command-surface.js": 30.5,
   "node ./scripts/e2e-repo-guard.js": 0.1,
-  "node ./scripts/e2e-temp-scope-probe.js": 0.3,
+  "node ./scripts/e2e-temp-scope-probe.js": 0.2,
   "node ./scripts/encoding-selftest-probe.js": 0.5,
-  "node ./scripts/execution-ledger-sync-probe.js": 7.7,
-  "node ./scripts/false-claim-probe.js": 156.5,
-  "node ./scripts/file-lease-probe.js": 256.9,
-  "node ./scripts/fix-evidence-language-probe.js": 130.7,
-  "node ./scripts/free-text-args-probe.js": 113.9,
-  "node ./scripts/git-resolution-cache-probe.js": 1.5,
-  "node ./scripts/handoff-i18n-probe.js": 194.4,
-  "node ./scripts/handoff-preservation-probe.js": 34.7,
-  "node ./scripts/harness-text-probe.js": 68.9,
-  "node ./scripts/i18n-next-cluster-probe.js": 104.8,
-  "node ./scripts/i18n-priority-surface-probe.js": 32.2,
-  "node ./scripts/lazy-auto-track-probe.js": 41.7,
-  "node ./scripts/lint.js": 42.7,
-  "node ./scripts/lock-heartbeat-probe.js": 10.3,
-  "node ./scripts/lock-probe.js": 0.1,
-  "node ./scripts/mcp-presence-probe.js": 102.2,
-  "node ./scripts/memory-archive-check-probe.js": 140.7,
-  "node ./scripts/memory-archive-retention-probe.js": 192,
-  "node ./scripts/memory-arena-cleanup-probe.js": 0.8,
-  "node ./scripts/memory-candidate-budget-probe.js": 0.1,
+  "node ./scripts/execution-ledger-sync-probe.js": 3.6,
+  "node ./scripts/false-claim-probe.js": 131.1,
+  "node ./scripts/file-lease-probe.js": 97.6,
+  "node ./scripts/fix-evidence-language-probe.js": 73.3,
+  "node ./scripts/free-text-args-probe.js": 79.7,
+  "node ./scripts/git-resolution-cache-probe.js": 0.2,
+  "node ./scripts/handoff-i18n-probe.js": 146.8,
+  "node ./scripts/handoff-preservation-probe.js": 19.2,
+  "node ./scripts/harness-text-probe.js": 34.1,
+  "node ./scripts/i18n-next-cluster-probe.js": 41.7,
+  "node ./scripts/i18n-priority-surface-probe.js": 19.3,
+  "node ./scripts/lazy-auto-track-probe.js": 33.2,
+  "node ./scripts/lint.js": 21.6,
+  "node ./scripts/lock-heartbeat-probe.js": 10.1,
+  "node ./scripts/lock-probe.js": 0,
+  "node ./scripts/mcp-presence-probe.js": 76.5,
+  "node ./scripts/memory-archive-check-probe.js": 105.4,
+  "node ./scripts/memory-archive-retention-probe.js": 139.6,
+  "node ./scripts/memory-arena-cleanup-probe.js": 0.3,
+  "node ./scripts/memory-candidate-budget-probe.js": 0.2,
   "node ./scripts/memory-candidate-isolation-probe.js": 0.1,
-  "node ./scripts/memory-checked-input-probe.js": 85.5,
-  "node ./scripts/memory-command-policy-mcp-probe.js": 32.4,
-  "node ./scripts/memory-command-policy-probe.js": 79.4,
-  "node ./scripts/memory-command-size-probe.js": 0.2,
-  "node ./scripts/memory-footprint-probe.js": 17.9,
-  "node ./scripts/memory-footprint-race-probe.js": 8.5,
-  "node ./scripts/memory-guard-order-probe.js": 50.7,
-  "node ./scripts/memory-input-preflight-probe.js": 75.3,
+  "node ./scripts/memory-checked-input-probe.js": 72,
+  "node ./scripts/memory-command-policy-mcp-probe.js": 21.3,
+  "node ./scripts/memory-command-policy-probe.js": 36.4,
+  "node ./scripts/memory-command-size-probe.js": 0.1,
+  "node ./scripts/memory-footprint-probe.js": 7,
+  "node ./scripts/memory-footprint-race-probe.js": 5.3,
+  "node ./scripts/memory-guard-order-probe.js": 39.4,
+  "node ./scripts/memory-input-preflight-probe.js": 65,
   "node ./scripts/memory-input-unit-probe.js": 0.2,
-  "node ./scripts/memory-item-admission-probe.js": 36.2,
+  "node ./scripts/memory-item-admission-probe.js": 18,
   "node ./scripts/memory-items-unit-probe.js": 0.1,
-  "node ./scripts/memory-language-probe.js": 266.3,
-  "node ./scripts/memory-legacy-retention-probe.js": 66.1,
-  "node ./scripts/memory-migration-boundary-probe.js": 19.7,
-  "node ./scripts/memory-migration-concurrency-probe.js": 16.6,
-  "node ./scripts/memory-migration-failure-probe.js": 89.1,
-  "node ./scripts/memory-migration-isolation-probe.js": 0.3,
-  "node ./scripts/memory-migration-observe-probe.js": 19.8,
-  "node ./scripts/memory-migration-plan-probe.js": 0.3,
-  "node ./scripts/memory-migration-race-probe.js": 4.3,
-  "node ./scripts/memory-migration-transport-probe.js": 27.7,
-  "node ./scripts/memory-migration-write-probe.js": 45.2,
-  "node ./scripts/memory-output-parent-race-probe.js": 0.2,
+  "node ./scripts/memory-language-probe.js": 185.3,
+  "node ./scripts/memory-legacy-retention-probe.js": 42.4,
+  "node ./scripts/memory-migration-boundary-probe.js": 11.8,
+  "node ./scripts/memory-migration-concurrency-probe.js": 13.9,
+  "node ./scripts/memory-migration-failure-probe.js": 34.8,
+  "node ./scripts/memory-migration-isolation-probe.js": 0.1,
+  "node ./scripts/memory-migration-observe-probe.js": 6.6,
+  "node ./scripts/memory-migration-plan-probe.js": 0.8,
+  "node ./scripts/memory-migration-race-probe.js": 1.9,
+  "node ./scripts/memory-migration-transport-probe.js": 14.5,
+  "node ./scripts/memory-migration-write-probe.js": 44.4,
+  "node ./scripts/memory-output-parent-race-probe.js": 0.1,
   "node ./scripts/memory-output-posix-probe.js": 0.1,
-  "node ./scripts/memory-output-publication-probe.js": 27.5,
-  "node ./scripts/memory-output-unit-probe.js": 0.4,
-  "node ./scripts/memory-policy-root-spelling-probe.js": 31.5,
-  "node ./scripts/memory-projection-retention-probe.js": 30,
-  "node ./scripts/memory-publication-cli-probe.js": 85.2,
-  "node ./scripts/memory-publication-policy-probe.js": 38.6,
-  "node ./scripts/memory-recovery-external-probe.js": 6.8,
-  "node ./scripts/memory-recovery-receipt-probe.js": 23.6,
-  "node ./scripts/memory-recovery-transfer-probe.js": 1.4,
-  "node ./scripts/memory-restore-canonical-probe.js": 79.1,
-  "node ./scripts/memory-utf8-admission-probe.js": 85.8,
-  "node ./scripts/memory-write-admission-probe.js": 50.5,
-  "node ./scripts/memory-write-budget-cli-probe.js": 20.5,
-  "node ./scripts/memory-write-budget-probe.js": 33.1,
-  "node ./scripts/memory-write-budget-race-probe.js": 7.7,
-  "node ./scripts/memory-write-dry-run-probe.js": 7.1,
-  "node ./scripts/memory-write-preparation-cli-probe.js": 15.7,
-  "node ./scripts/memory-write-preparation-probe.js": 22.3,
-  "node ./scripts/mutation-integrity-probe.js": 63.5,
-  "node ./scripts/next-action-suggestion-probe.js": 8,
-  "node ./scripts/openai-response-retrieval-probe.js": 1.2,
-  "node ./scripts/openai-ui-review-dispatch-probe.js": 878.7,
-  "node ./scripts/openai-ui-review-observation-probe.js": 1035.8,
-  "node ./scripts/openai-ui-review-observation-record-probe.js": 0.2,
-  "node ./scripts/openai-ui-review-receipt-probe.js": 548.3,
+  "node ./scripts/memory-output-publication-probe.js": 18.3,
+  "node ./scripts/memory-output-unit-probe.js": 0.3,
+  "node ./scripts/memory-policy-root-spelling-probe.js": 16.5,
+  "node ./scripts/memory-projection-retention-probe.js": 21.3,
+  "node ./scripts/memory-publication-cli-probe.js": 41,
+  "node ./scripts/memory-publication-policy-probe.js": 29,
+  "node ./scripts/memory-recovery-external-probe.js": 4.8,
+  "node ./scripts/memory-recovery-receipt-probe.js": 15.5,
+  "node ./scripts/memory-recovery-transfer-probe.js": 0.9,
+  "node ./scripts/memory-restore-canonical-probe.js": 59.6,
+  "node ./scripts/memory-utf8-admission-probe.js": 71.9,
+  "node ./scripts/memory-write-admission-probe.js": 19.9,
+  "node ./scripts/memory-write-budget-cli-probe.js": 15.1,
+  "node ./scripts/memory-write-budget-probe.js": 21.7,
+  "node ./scripts/memory-write-budget-race-probe.js": 6.2,
+  "node ./scripts/memory-write-dry-run-probe.js": 4.6,
+  "node ./scripts/memory-write-preparation-cli-probe.js": 6.8,
+  "node ./scripts/memory-write-preparation-probe.js": 23.8,
+  "node ./scripts/mutation-integrity-probe.js": 26.3,
+  "node ./scripts/next-action-suggestion-probe.js": 5.2,
+  "node ./scripts/openai-response-retrieval-probe.js": 2.1,
+  "node ./scripts/openai-ui-review-dispatch-probe.js": 522.2,
+  "node ./scripts/openai-ui-review-observation-probe.js": 331,
+  "node ./scripts/openai-ui-review-observation-record-probe.js": 0.1,
+  "node ./scripts/openai-ui-review-receipt-probe.js": 324,
   "node ./scripts/parent-detect-selftest-probe.js": 0.2,
-  "node ./scripts/path-setup-powershell-probe.js": 29.5,
-  "node ./scripts/plain-language-reporting-probe.js": 20.6,
-  "node ./scripts/platform-smoke.js": 45.3,
-  "node ./scripts/provider-capacity-probe.js": 25.1,
-  "node ./scripts/race-overlap-probe.js": 25.4,
-  "node ./scripts/release-runtime-probe.js": 80.3,
-  "node ./scripts/review-checkpoint-probe.js": 0.2,
-  "node ./scripts/review-checkpoint-transport-probe.js": 7.6,
-  "node ./scripts/review-request-labels-probe.js": 34.7,
-  "node ./scripts/review-request-signals-probe.js": 54.7,
-  "node ./scripts/review-snapshot-probe.js": 0.3,
-  "node ./scripts/review-snapshot-transport-probe.js": 9.5,
-  "node ./scripts/role-agent-schema-probe.js": 0.5,
-  "node ./scripts/role-fallback-probe.js": 96.7,
-  "node ./scripts/role-file-identity-probe.js": 19.8,
-  "node ./scripts/role-store-loader-probe.js": 61.3,
-  "node ./scripts/rule-applicability-probe.js": 2.5,
-  "node ./scripts/rule-verification-probe.js": 27.2,
-  "node ./scripts/runtime-admission-probe.js": 3.8,
-  "node ./scripts/runtime-cost-probe.js": 135,
-  "node ./scripts/runtime-descriptor-identity-probe.js": 6.5,
+  "node ./scripts/path-setup-powershell-probe.js": 13.6,
+  "node ./scripts/plain-language-reporting-probe.js": 6,
+  "node ./scripts/platform-smoke.js": 36.2,
+  "node ./scripts/provider-capacity-probe.js": 13.8,
+  "node ./scripts/race-overlap-probe.js": 24.6,
+  "node ./scripts/release-runtime-probe.js": 60.7,
+  "node ./scripts/review-checkpoint-probe.js": 0.1,
+  "node ./scripts/review-checkpoint-transport-probe.js": 3.5,
+  "node ./scripts/review-request-labels-probe.js": 18,
+  "node ./scripts/review-request-signals-probe.js": 33.3,
+  "node ./scripts/review-snapshot-probe.js": 0.2,
+  "node ./scripts/review-snapshot-transport-probe.js": 8.5,
+  "node ./scripts/role-agent-schema-probe.js": 0.6,
+  "node ./scripts/role-fallback-probe.js": 85.7,
+  "node ./scripts/role-file-identity-probe.js": 21.1,
+  "node ./scripts/role-store-loader-probe.js": 59.6,
+  "node ./scripts/rule-applicability-probe.js": 2.6,
+  "node ./scripts/rule-verification-probe.js": 7.3,
+  "node ./scripts/runtime-admission-probe.js": 4.2,
+  "node ./scripts/runtime-cost-probe.js": 77.1,
+  "node ./scripts/runtime-descriptor-identity-probe.js": 4.9,
   "node ./scripts/runtime-git-write-probe.js": 0.1,
-  "node ./scripts/runtime-layout-probe.js": 240.2,
-  "node ./scripts/runtime-repl-probe.js": 9.7,
-  "node ./scripts/runtime-replacement-probe.js": 23.7,
-  "node ./scripts/runtime-write-probe.js": 46.5,
-  "node ./scripts/secret-scan-scope-probe.js": 2.5,
-  "node ./scripts/selftest-cleanup-probe.js": 21.2,
-  "node ./scripts/shared-state-lock-probe.js": 5.1,
-  "node ./scripts/skill-archive-probe.js": 1.8,
-  "node ./scripts/smoke.js": 25.5,
-  "node ./scripts/state-inspect-cli-probe.js": 9.4,
-  "node ./scripts/state-scopes-probe.js": 41,
+  "node ./scripts/runtime-layout-probe.js": 84.8,
+  "node ./scripts/runtime-repl-probe.js": 5.5,
+  "node ./scripts/runtime-replacement-probe.js": 18.3,
+  "node ./scripts/runtime-write-probe.js": 32.1,
+  "node ./scripts/secret-scan-scope-probe.js": 1.6,
+  "node ./scripts/selftest-cleanup-probe.js": 17.7,
+  "node ./scripts/shared-state-lock-probe.js": 4.5,
+  "node ./scripts/skill-archive-probe.js": 1.1,
+  "node ./scripts/smoke.js": 17.7,
+  "node ./scripts/state-inspect-cli-probe.js": 4.2,
+  "node ./scripts/state-scopes-probe.js": 6.7,
   "node ./scripts/store-diagnostic-identity-probe.js": 1,
-  "node ./scripts/store-diagnostic-probe.js": 5.7,
-  "node ./scripts/store-values-probe.js": 144.7,
-  "node ./scripts/task-sync-roundtrip-probe.js": 437.8,
-  "node ./scripts/temp-cleanup-probe.js": 2.8,
-  "node ./scripts/test-execution-plan-probe.js": 1.2,
-  "node ./scripts/test-firestore-probe.js": 3.4,
-  "node ./scripts/test-http-probe.js": 3.9,
-  "node ./scripts/test-node-runner-probe.js": 14.9,
-  "node ./scripts/test-npm-script-probe.js": 2.7,
-  "node ./scripts/test-npm-script-runner-probe.js": 12.8,
-  "node ./scripts/test-prerequisite-probe.js": 2.4,
-  "node ./scripts/test-suite-list-runner-probe.js": 17.5,
-  "node ./scripts/title-args-probe.js": 156.2,
-  "node ./scripts/tracker-write-language-probe.js": 115.4,
-  "node ./scripts/ui-boundary-browser-probe.js": 0.2,
-  "node ./scripts/ui-boundary-contracts-probe.js": 5.3,
+  "node ./scripts/store-diagnostic-probe.js": 2.2,
+  "node ./scripts/store-values-probe.js": 82.8,
+  "node ./scripts/task-sync-roundtrip-probe.js": 264.2,
+  "node ./scripts/temp-cleanup-probe.js": 2.7,
+  "node ./scripts/test-execution-plan-probe.js": 0.6,
+  "node ./scripts/test-firestore-probe.js": 2.7,
+  "node ./scripts/test-http-probe.js": 2.1,
+  "node ./scripts/test-node-runner-probe.js": 13.9,
+  "node ./scripts/test-npm-script-probe.js": 1.4,
+  "node ./scripts/test-npm-script-runner-probe.js": 6.6,
+  "node ./scripts/test-prerequisite-probe.js": 1,
+  "node ./scripts/test-suite-list-runner-probe.js": 8.9,
+  "node ./scripts/title-args-probe.js": 114.4,
+  "node ./scripts/tracker-write-language-probe.js": 66.4,
+  "node ./scripts/ui-boundary-browser-probe.js": 0.3,
+  "node ./scripts/ui-boundary-contracts-probe.js": 2.5,
   "node ./scripts/ui-boundary-probe.js": 0.1,
-  "node ./scripts/ui-boundary-scanner-probe.js": 0.2,
+  "node ./scripts/ui-boundary-scanner-probe.js": 0.1,
   "node ./scripts/ui-boundary-trials-probe.js": 0.1,
-  "node ./scripts/ui-copy-boundary-probe.js": 40,
-  "node ./scripts/ui-information-quality-probe.js": 0.6,
-  "node ./scripts/ui-review-ledger-probe.js": 68.5,
-  "node ./scripts/ui-review-observation-probe.js": 2.3,
-  "node ./scripts/ui-review-probe.js": 0.3,
+  "node ./scripts/ui-copy-boundary-probe.js": 12.7,
+  "node ./scripts/ui-information-quality-probe.js": 0.4,
+  "node ./scripts/ui-review-ledger-probe.js": 27.7,
+  "node ./scripts/ui-review-observation-probe.js": 2.2,
+  "node ./scripts/ui-review-probe.js": 0.4,
   "node ./scripts/ui-review-provider-receipt-probe.js": 0.2,
-  "node ./scripts/ui-review-recovery-probe.js": 602,
-  "node ./scripts/ui-review-transport-probe.js": 22.4,
+  "node ./scripts/ui-review-recovery-probe.js": 342.7,
+  "node ./scripts/ui-review-transport-probe.js": 16.8,
   "node ./scripts/which-shim-probe.js": 0.1,
-  "node ./scripts/workspace-dir-lock-order-probe.js": 5.9,
-  "node ./scripts/workspace-dir-migration-probe.js": 27.7,
-  "node ./scripts/workspace-dir-source-ratchet.js": 0.3,
-  "node ./scripts/workspace-migration-heartbeat-probe.js": 36.8,
-  "node ./scripts/workspace-selection-probe.js": 0.3,
-  "node ./scripts/write-path-language-probe.js": 88.9,
-  "node ./scripts/write-primitive-language-probe.js": 34.9,
-  "node scripts/history-retention-probe.js": 11.6,
-  "node scripts/history-retention-write-probe.js": 80.7
+  "node ./scripts/workspace-dir-lock-order-probe.js": 2,
+  "node ./scripts/workspace-dir-migration-probe.js": 23.1,
+  "node ./scripts/workspace-dir-source-ratchet.js": 0.1,
+  "node ./scripts/workspace-migration-heartbeat-probe.js": 97.8,
+  "node ./scripts/workspace-selection-probe.js": 0.2,
+  "node ./scripts/write-path-language-probe.js": 63.7,
+  "node ./scripts/write-primitive-language-probe.js": 29.4,
+  "node scripts/history-retention-probe.js": 11.8,
+  "node scripts/history-retention-write-probe.js": 70.2
  }
 }

package/scripts/ci-shard.js

@@ -137,12 +137,15 @@ function runNpm(name, spec, opts = {}) {
   const mine = leaves.filter(l => l.shard === spec.index);
   const log = opts.log || (line => process.stdout.write(line + '\n'));
   const grouped = env.GITHUB_ACTIONS === 'true';
+  // Leaves do not see this runner's times file: a leaf that runs runNpm itself (ci-shard-probe.js) would overwrite it.
+  const leafEnv = { ...env };
+  for (const k of Object.keys(leafEnv)) if (k.toUpperCase() === 'LEERNESS_CI_SHARD_TIMES') delete leafEnv[k];
   log(`ci-shard: ${name} shard ${spec.index}/${spec.count} runs ${mine.length} of ${leaves.length} leaves`);
   const results = [];
   for (const leaf of mine) {
     if (grouped) log(`::group::${leaf.key}`);
     const started = Date.now();
-    const r = cp.spawnSync(process.execPath, [path.resolve(root, leaf.file), ...leaf.args], { cwd: root, stdio: opts.stdio || 'inherit', env });
+    const r = cp.spawnSync(process.execPath, [path.resolve(root, leaf.file), ...leaf.args], { cwd: root, stdio: opts.stdio || 'inherit', env: leafEnv });
     const seconds = (Date.now() - started) / 1000;
     const ok = r.status === 0 && !r.signal && !r.error;
     results.push({ key: leaf.key, ok, seconds, status: r.status, signal: r.signal || null, error: r.error ? String(r.error.code || r.error.message) : null });

package/scripts/e2e.js

@@ -1356,7 +1356,8 @@ if (e2eShard.take('B(1.9.48)')) {
   // 1.9.48 cross-platform archive — PowerShell ZIP or tar
   const tmpC = fs.mkdtempSync(path.join(os.tmpdir(), 'leerness-arc-'));
   cp.spawnSync(process.execPath, [CLI, 'init', tmpC, '--yes', '--no-banner', '--no-stale-check', '--language', 'ko', '--skills', 'all'], { stdio: 'ignore', timeout: 30000 });
-  const r = cp.spawnSync(process.execPath, [CLI, 'skill', 'publish', '--path', tmpC, '--bundle-only'], { encoding: 'utf8', timeout: 30000 });
+  // T-0358: the publish pre-check reads drift, which turns stale at UTC midnight; store-values-probe tests the pre-check.
+  const r = cp.spawnSync(process.execPath, [CLI, 'skill', 'publish', '--path', tmpC, '--bundle-only', '--no-security-check'], { encoding: 'utf8', timeout: 30000 });
   const tarballDir = path.join(tmpC, '.leerness', 'skills-publish-tarball');
   const files = fs.existsSync(tarballDir) ? fs.readdirSync(tarballDir) : [];
   const archive = files.find(f => /\.(tgz|zip)$/.test(f));
@@ -1425,7 +1426,8 @@ if (e2eShard.take('B(1.9.47)')) {
   total++;
   const tmpC = fs.mkdtempSync(path.join(os.tmpdir(), 'leerness-pub-'));
   cp.spawnSync(process.execPath, [CLI, 'init', tmpC, '--yes', '--no-banner', '--no-stale-check', '--language', 'ko', '--skills', 'all'], { stdio: 'ignore', timeout: 30000 });
-  const r = cp.spawnSync(process.execPath, [CLI, 'skill', 'publish', '--path', tmpC, '--bundle-only'], { encoding: 'utf8', timeout: 30000 });
+  // T-0358: as above, the pre-check has its own date-independent test in store-values-probe.
+  const r = cp.spawnSync(process.execPath, [CLI, 'skill', 'publish', '--path', tmpC, '--bundle-only', '--no-security-check'], { encoding: 'utf8', timeout: 30000 });
   const publishDir = path.join(tmpC, '.leerness', 'skills-publish');
   const manifestFile = path.join(publishDir, 'manifest.json');
   let manifest = null;

package/scripts/store-values-probe.js

@@ -58,6 +58,18 @@ const skill = (dir, id, fields) => {
   fs.writeFileSync(store(dir, 'skills', id, 'skill.json'), JSON.stringify({ name: id, ...fields }, null, 2) + '\n');
 };
 const constraints = (dir, platforms) => fs.writeFileSync(store(dir, 'platform-constraints.json'), JSON.stringify({ platforms }, null, 2) + '\n');
+// T-0358: skill publish first runs a pre-check (health), which fails while drift needs attention, and drift counts a
+//   tracker last dated the previous UTC day as stale. The template is made once at the start, so a run that crossed
+//   UTC midnight before a publish test failed there. The tests about generated text skip the pre-check; the pre-check
+//   has its own test below, with dates that do not depend on the time of day.
+const NO_PRECHECK = ['--no-security-check'];
+const trackerDated = (dir, daysFromToday) => {
+  const day = new Date(Date.now() + daysFromToday * 86400000).toISOString().slice(0, 10);
+  const file = store(dir, 'progress-tracker.md');
+  const text = fs.readFileSync(file, 'utf8');
+  assert.ok(/\d{4}-\d{2}-\d{2}/.test(text), 'the template tracker holds no date');
+  fs.writeFileSync(file, text.replace(/\d{4}-\d{2}-\d{2}/g, day));
+};
 // What a non-text value turned into: an object, a comma-joined array, a missing value.
 const BAD = /\[object Object\]|undefined|얼룩말,목록/;
 const JS_ERROR = /is not a function|Cannot read properties|is not iterable|of undefined|of null/;
@@ -107,7 +119,7 @@ test('array fields that are not arrays do not crash skill commands, and skill le
   skill(dir, 'str-items', { displayNameKo: '문자열 항목', capabilities: ['zebra export'], patterns: ['run it'], optimizations: ['faster'], sources: [{ note: 'no url' }, null, { url: '' }], verification: null });
   skill(dir, 'good-sources', { displayNameKo: '출처 있음', capabilities: ['zebra export'], sources: ['https://string.example', { url: 'https://object.example' }] });
   for (const args of [['skill', 'search', 'zebra'], ['skill', 'info', 'str-caps'], ['skill', 'info', 'obj-caps'], ['skill', 'info', 'str-items'], ['skill', 'consolidate'],
-    ['skill', 'export', 'str-caps'], ['skill', 'export', 'obj-caps'], ['skill', 'export', 'str-items'], ['skill', 'export', 'good-sources'], ['skill', 'export-all'], ['skill', 'publish'],
+    ['skill', 'export', 'str-caps'], ['skill', 'export', 'obj-caps'], ['skill', 'export', 'str-items'], ['skill', 'export', 'good-sources'], ['skill', 'export-all'], ['skill', 'publish', ...NO_PRECHECK],
     ['skill', 'learn', 'obj-caps'], ['skill', 'learn', 'str-items'], ['skill', 'learn', 'str-items', '--doc', 'https://kite.example'], ['skill', 'learn', 'good-sources']]) {
     clean(must(run(dir, [...args, '--path', dir]), args.join(' ')), args.join(' '));
   }
@@ -225,7 +237,7 @@ test('generated files hold text only, and the export description still prefers d
   const dir = project();
   for (const [id, fields] of Object.entries(SKILLS)) skill(dir, id, fields);
   skill(dir, 'described', { displayNameKo: '설명 있음', description: 'Use when drawing zebra charts', capabilities: ['zebra export'] });
-  for (const args of [['skill', 'export', 'obj-desc'], ['skill', 'export-all'], ['skill', 'publish'], ['skill', 'learn', 'obj-name'], ['skill', 'learn', 'objitem-caps'],
+  for (const args of [['skill', 'export', 'obj-desc'], ['skill', 'export-all'], ['skill', 'publish', ...NO_PRECHECK], ['skill', 'learn', 'obj-name'], ['skill', 'learn', 'objitem-caps'],
     ['roadmap'], ['skill', 'match', 'zebra']]) must(run(dir, [...args, '--path', dir]), args.join(' '));
   // Only what these commands write: exported/published bundles, skill READMEs, the roadmap page, the match history.
   const files = [path.join(dir, 'roadmap.html'), store(dir, 'skill-suggestions.md')].filter(f => fs.existsSync(f));
@@ -242,6 +254,21 @@ test('generated files hold text only, and the export description still prefers d
   assert.deepStrictEqual(manifest.skills.filter(s => s.id === 'obj-name').map(s => s.name), ['obj-name']);
 });
 
+test('skill publish stops while drift needs attention, --no-security-check skips that check (no clock dependency)', () => {
+  // A tracker dated two days back is stale at any time of day; one dated tomorrow is not.
+  const stale = project(), fresh = project();
+  for (const dir of [stale, fresh]) skill(dir, 'plain', { displayNameKo: '기본', description: 'Use when drawing zebra charts', capabilities: ['zebra export'] });
+  trackerDated(stale, -2); trackerDated(fresh, 1);
+  const refused = run(stale, ['skill', 'publish', '--path', stale]);
+  assert.strictEqual(refused.status, 1, both(refused));
+  assert.ok(/보안 사전 점검 \(1\.9\.98\): \d+건 issue/.test(refused.stdout) && /⚠ drift/.test(refused.stdout), both(refused));
+  assert.ok(!fs.existsSync(store(stale, 'skills-publish', 'manifest.json')), 'a refused publish wrote its bundle');
+  must(run(stale, ['skill', 'publish', ...NO_PRECHECK, '--path', stale]), 'publish --no-security-check');
+  assert.ok(fs.existsSync(store(stale, 'skills-publish', 'manifest.json')), '--no-security-check did not publish');
+  const passedCheck = must(run(fresh, ['skill', 'publish', '--path', fresh]), 'publish with a fresh tracker');
+  assert.ok(/보안 사전 점검 \(1\.9\.98\): 통과/.test(passedCheck), passedCheck);
+});
+
 test('--json keeps the stored values', () => {
   const dir = project();
   for (const [id, fields] of Object.entries(SKILLS)) skill(dir, id, fields);