modwright 0.1.4 → 0.1.5

package/dist/core/build/run.js

@@ -5,6 +5,7 @@ import { normalizeBuildSteps } from "../project/build-steps.js";
 import { outsideRootPaths } from "../project/outside-root.js";
 import { locateTool as coreLocateTool, TOOL_SPECS } from "../toolchain/index.js";
 import { describeNeeds, isProjectTrusted, trustRefusal } from "../trust.js";
+import { pruneDated, STAGE_RETENTION } from "../safety/retention.js";
 import { buildContext, runValidators } from "../validate/index.js";
 import { runAssertAbsentStep, runAssertPresentStep, runExecStep, runZipStep } from "./steps/core.js";
 import { runBlenderExportStep, runVerifyArchiveListingStep, runWolvenkitImportStep, runWolvenkitPackStep, } from "./steps/cyberpunk.js";
@@ -187,6 +188,7 @@ export async function runBuild(project, surface, options) {
         ? path.resolve(project.root, project.build.staging)
         : path.join(project.root, ".modwright", "cache", "build");
     const stageRoot = path.join(stagingDir, buildStamp());
+    const stagesPruned = options.mode === "apply" ? (await pruneDated(stagingDir, "stage", STAGE_RETENTION, { mode: "apply" })).expired : [];
     const outDirAbs = project.build.absOutDir;
     const locateTool = options.locateTool ?? defaultLocateTool(project, options.mode);
     const projectExclude = project.build.exclude ?? [];
@@ -310,6 +312,7 @@ export async function runBuild(project, surface, options) {
             failureReason,
             ...(failedStep ? { failedStep } : {}),
             skippedOptional,
+            ...(stagesPruned.length > 0 ? { stagesPruned } : {}),
             ...(options.mode === "dry-run" ? { skippedVariant } : {}),
             outDirAbs,
         };
@@ -323,6 +326,7 @@ export async function runBuild(project, surface, options) {
             plan: dryRunPlan,
             failed: false,
             skippedOptional,
+            ...(stagesPruned.length > 0 ? { stagesPruned } : {}),
             skippedVariant,
             outDirAbs,
         };
@@ -351,6 +355,7 @@ export async function runBuild(project, surface, options) {
         manifestPath,
         failed: false,
         skippedOptional,
+        ...(stagesPruned.length > 0 ? { stagesPruned } : {}),
         outDirAbs,
     };
 }

package/dist/core/deploy/plan.js

@@ -3,6 +3,7 @@ import * as path from "node:path";
 import { isDirectory, pathExists, walk } from "../fsutil.js";
 import { globToRegExp, isExcludedByGlobs } from "../validate/index.js";
 import { outsideRootPaths } from "../project/outside-root.js";
+import { BACKUP_RETENTION, countBackupRuns } from "../safety/retention.js";
 import { findRunningProcesses } from "../process.js";
 import { executePlan, isIdenticalFile, planCopy, planDelete, planJunction, planMkdir, planUnlink, sha256File } from "../safety/index.js";
 import { classifyReload } from "./reload.js";
@@ -116,8 +117,14 @@ export async function planDeploy(inputs) {
     const mode = inputs.mode ?? "dry-run";
     const deployMode = inputs.deployMode ?? "pak";
     const backupRoot = path.join(project.root, ".modwright", "backups");
+    const backupRuns = await countBackupRuns(backupRoot);
+    const backupWarning = backupRuns > BACKUP_RETENTION.keepRuns
+        ? `${backupRuns} backup runs under ${backupRoot}; rollback action=prune keeps the newest ${BACKUP_RETENTION.keepRuns} and anything under ${BACKUP_RETENTION.maxAgeDays} days old.`
+        : undefined;
     const blocked = [];
     const warnings = [];
+    if (backupWarning)
+        warnings.push(backupWarning);
     const assumptions = [];
     const verifiedBy = [];
     const targets = [];
@@ -535,6 +542,17 @@ export async function planDeploy(inputs) {
         ...toWrite.filter((t) => !t.locked).flatMap((t) => t.copies.map((c) => planCopy(c.from, c.to))),
         ...toWrite.filter((t) => t.locked).flatMap((t) => t.copies.map((c) => planCopy(c.from, c.to))),
     ];
+    const throughLinks = await writesThroughLinks(operations, roots, junctions.map((j) => j.linkPath));
+    if (throughLinks.size > 0) {
+        blocked.push({
+            code: "write-through-link",
+            message: `${[...throughLinks.keys()].join(", ")} ${throughLinks.size === 1 ? "is a link" : "are links"} inside a mod root, and this deploy would write through ` +
+                `${throughLinks.size === 1 ? "it" : "them"} into wherever ${throughLinks.size === 1 ? "it points" : "they point"} ` +
+                `(${[...throughLinks.values()].flat().slice(0, 3).join(", ")}${[...throughLinks.values()].flat().length > 3 ? ", ..." : ""}). ` +
+                `Remove the link, or declare it under deploy.junctions if the project owns it.`,
+            detail: { links: Object.fromEntries([...throughLinks].map(([link, paths]) => [link, paths.slice(0, 20)])) },
+        });
+    }
     const confidence = {
         level: assumptions.length > 0 ? "medium" : "high",
         assumptions,
@@ -562,6 +580,49 @@ export async function planDeploy(inputs) {
         backupRoot,
     };
 }
+async function writesThroughLinks(operations, roots, allowed) {
+    const isLink = new Map();
+    const linkAt = async (dir) => {
+        const key = normalizeForCompare(dir);
+        let known = isLink.get(key);
+        if (known === undefined) {
+            try {
+                known = (await fs.lstat(dir)).isSymbolicLink();
+            }
+            catch {
+                known = false;
+            }
+            isLink.set(key, known);
+        }
+        return known;
+    };
+    const allowedKeys = new Set(allowed.map(normalizeForCompare));
+    const rootPaths = roots.map((r) => path.resolve(r.path));
+    const found = new Map();
+    for (const op of operations) {
+        const dest = op.kind === "copy" ? op.to : "path" in op ? op.path : undefined;
+        if (!dest || op.kind === "junction" || op.kind === "unlink")
+            continue;
+        const abs = path.resolve(dest);
+        const root = rootPaths.find((r) => {
+            const rel = path.relative(r, abs);
+            return rel !== "" && !rel.startsWith("..") && !path.isAbsolute(rel);
+        });
+        if (!root)
+            continue;
+        for (let dir = path.dirname(abs); dir !== root && dir.length > root.length; dir = path.dirname(dir)) {
+            if (allowedKeys.has(normalizeForCompare(dir)))
+                break;
+            if (await linkAt(dir)) {
+                const list = found.get(dir) ?? [];
+                list.push(abs);
+                found.set(dir, list);
+                break;
+            }
+        }
+    }
+    return found;
+}
 function copyKey(from, to) {
     return `${normalizeForCompare(from)}\0${normalizeForCompare(to)}`;
 }

package/dist/core/safety/retention.js

@@ -0,0 +1,76 @@
+import { promises as fs } from "node:fs";
+import * as path from "node:path";
+const BACKUP_NAME = /^(\d{4})(\d{2})(\d{2})-(\d{2})(\d{2})(\d{2})(?:-\d+)?$/;
+const STAGE_NAME = /^(\d{4})-(\d{2})-(\d{2})T(\d{2})-(\d{2})-(\d{2})-\d{3}Z$/;
+export const BACKUP_RETENTION = { keepRuns: 20, maxAgeDays: 14 };
+export const STAGE_RETENTION = { keepRuns: 3, maxAgeDays: 0 };
+function runOf(name, kind) {
+    const m = (kind === "backup" ? BACKUP_NAME : STAGE_NAME).exec(name);
+    if (!m)
+        return undefined;
+    const time = Date.UTC(Number(m[1]), Number(m[2]) - 1, Number(m[3]), Number(m[4]), Number(m[5]), Number(m[6]));
+    return { run: kind === "backup" ? name.slice(0, 15) : name, time };
+}
+export function selectExpired(names, kind, policy, now = new Date()) {
+    const byRun = new Map();
+    const ignored = [];
+    for (const name of names) {
+        const r = runOf(name, kind);
+        if (!r) {
+            ignored.push(name);
+            continue;
+        }
+        const entry = byRun.get(r.run) ?? { time: r.time, names: [] };
+        entry.names.push(name);
+        byRun.set(r.run, entry);
+    }
+    const runs = [...byRun.values()].sort((a, b) => b.time - a.time);
+    const cutoff = now.getTime() - policy.maxAgeDays * 24 * 60 * 60 * 1000;
+    const expired = [];
+    const kept = [];
+    runs.forEach((run, i) => {
+        const keep = i < policy.keepRuns || (policy.maxAgeDays > 0 && run.time >= cutoff);
+        (keep ? kept : expired).push(...run.names);
+    });
+    return { expired: expired.sort(), kept: kept.sort(), ignored: ignored.sort(), runs: runs.length };
+}
+async function folderNames(root) {
+    try {
+        return (await fs.readdir(root, { withFileTypes: true })).filter((e) => e.isDirectory()).map((e) => e.name);
+    }
+    catch {
+        return [];
+    }
+}
+export async function pruneDated(root, kind, policy, options = {}) {
+    const mode = options.mode ?? "dry-run";
+    const selection = selectExpired(await folderNames(root), kind, policy, options.now);
+    const report = {
+        mode,
+        root,
+        applied: false,
+        policy,
+        runs: selection.runs,
+        expired: selection.expired,
+        keptCount: selection.kept.length,
+        ignored: selection.ignored,
+    };
+    if (mode !== "apply")
+        return report;
+    const failed = [];
+    for (const name of selection.expired) {
+        try {
+            await fs.rm(path.join(root, name), { recursive: true, force: true });
+        }
+        catch (error) {
+            failed.push({ name, error: error.message });
+        }
+    }
+    report.applied = true;
+    if (failed.length > 0)
+        report.failed = failed;
+    return report;
+}
+export async function countBackupRuns(root) {
+    return selectExpired(await folderNames(root), "backup", { keepRuns: Infinity, maxAgeDays: 0 }).runs;
+}

package/dist/core/writes/index.js

@@ -47,6 +47,15 @@ export async function collectWrites(surface, install, options = {}) {
         }
         for (const err of extraction.errors)
             collection.coverage.errors.push({ writerId: mod.id, ...err });
+        for (const r of extraction.repeatedKeys ?? []) {
+            (collection.repeatedKeys ??= []).push({
+                writerId: r.unit ? `${mod.id}/${r.unit}` : mod.id,
+                name: r.unit ?? mod.name,
+                file: r.file,
+                key: r.key,
+                lines: r.lines,
+            });
+        }
         for (const write of extraction.writes) {
             const writerId = write.unit ? `${mod.id}/${write.unit}` : mod.id;
             scanned.add(writerId);

package/dist/index.js

@@ -1,14 +1,16 @@
 #!/usr/bin/env node
 import { spawn } from "node:child_process";
-import { promises as fs, watchFile, unwatchFile } from "node:fs";
+import { appendFileSync, mkdirSync, promises as fs, watchFile, unwatchFile } from "node:fs";
 import * as path from "node:path";
 import { StringDecoder } from "node:string_decoder";
 import { fileURLToPath } from "node:url";
+import { userDataDir } from "./core/home.js";
 const here = path.dirname(fileURLToPath(import.meta.url));
 const SERVER_ENTRY = process.env.MODWRIGHT_SERVER_ENTRY ?? path.join(here, "server.js");
 const STAMP_FILE = process.env.MODWRIGHT_BUILD_STAMP ?? path.join(here, ".build-stamp");
 const STAMP_POLL_MS = Number(process.env.MODWRIGHT_STAMP_POLL_MS ?? 2000);
 const RETIRE_GRACE_MS = Number(process.env.MODWRIGHT_RETIRE_GRACE_MS ?? 15 * 60_000);
+const SHUTDOWN_GRACE_MS = Number(process.env.MODWRIGHT_SHUTDOWN_GRACE_MS ?? 5000);
 const INIT_TIMEOUT_MS = 20_000;
 const RESTART_BASE_MS = Number(process.env.MODWRIGHT_RESTART_BASE_MS ?? 500);
 const RESTART_MAX_DELAY_MS = 30_000;
@@ -17,6 +19,16 @@ const SUPERVISOR_INIT_ID = "modwright-supervisor-initialize";
 function log(msg) {
     process.stderr.write(`[modwright supervisor] ${msg}\n`);
 }
+function incident(msg) {
+    log(msg);
+    try {
+        const dir = userDataDir();
+        mkdirSync(dir, { recursive: true });
+        appendFileSync(path.join(dir, "supervisor-incidents.log"), `${new Date().toISOString()} ${msg}\n`);
+    }
+    catch {
+    }
+}
 function idKey(id) {
     return `${typeof id}:${String(id)}`;
 }
@@ -49,6 +61,10 @@ class ServerProcess {
     child;
     generation;
     pending = new Set();
+    pendingMethod = new Map();
+    pendingMethods() {
+        return [...this.pending].map((k) => this.pendingMethod.get(k) ?? "?");
+    }
     retired = false;
     exited = false;
     splitter = new LineSplitter();
@@ -115,6 +131,7 @@ class Supervisor {
     swapping = false;
     swapQueued = false;
     closing = false;
+    retiredServers = new Set();
     initializeRaw;
     initializedSeen = false;
     routes = new Map();
@@ -194,11 +211,13 @@ class Supervisor {
         if (key !== undefined) {
             this.routes.set(key, active);
             active.pending.add(key);
+            active.pendingMethod.set(key, msg.method);
         }
         if (!active.send(raw)) {
             if (key !== undefined) {
                 this.routes.delete(key);
                 active.pending.delete(key);
+                active.pendingMethod.delete(key);
             }
             answerNotRunning();
         }
@@ -212,6 +231,7 @@ class Supervisor {
             const key = idKey(msg.id);
             this.routes.delete(key);
             server.pending.delete(key);
+            server.pendingMethod.delete(key);
             process.stdout.write(`${raw}\n`);
             if (server.retired && server.pending.size === 0)
                 server.kill();
@@ -239,6 +259,7 @@ class Supervisor {
             process.stdout.write(`${JSON.stringify(response)}\n`);
         }
         server.pending.clear();
+        server.pendingMethod.clear();
         if (this.closing || server.retired || server !== this.active)
             return;
         log(`server exited unexpectedly (code ${code ?? "null"}, signal ${signal ?? "none"}); restarting`);
@@ -301,6 +322,7 @@ class Supervisor {
             log(`swapped to server generation ${next.generation} (${reason})`);
             if (previous && previous !== next) {
                 previous.retired = true;
+                this.retiredServers.add(previous);
                 if (previous.pending.size === 0)
                     previous.kill();
                 else
@@ -356,7 +378,25 @@ class Supervisor {
             clearTimeout(this.restartTimer);
         unwatchFile(STAMP_FILE);
         this.active?.kill();
-        setTimeout(() => process.exit(0), 2500).unref();
+        const busy = [...this.retiredServers].filter((s) => !s.exited && s.pending.size > 0);
+        for (const s of this.retiredServers)
+            if (!busy.includes(s))
+                s.kill();
+        for (const s of busy) {
+            incident(`shutdown: retired server generation ${s.generation} still answering ${s.pending.size} request(s) (${s.pendingMethods().join(", ")}); ` +
+                `killing it in ${SHUTDOWN_GRACE_MS} ms`);
+        }
+        if (busy.length > 0) {
+            setTimeout(() => {
+                for (const s of busy) {
+                    if (s.exited)
+                        continue;
+                    incident(`shutdown: retired server generation ${s.generation} killed with ${s.pending.size} request(s) unanswered`);
+                    s.kill();
+                }
+            }, SHUTDOWN_GRACE_MS);
+        }
+        setTimeout(() => process.exit(0), Math.max(2500, busy.length > 0 ? SHUTDOWN_GRACE_MS + 500 : 0)).unref();
     }
 }
 async function readStamp() {

package/dist/server.js

@@ -4,7 +4,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { z } from "zod";
 import { pathExists, tail } from "./core/fsutil.js";
 import { describeProject, findProjectFile, loadProject, locateProjectFile } from "./core/project/index.js";
-import { userDataDir } from "./core/home.js";
+import { packageRoot, userDataDir } from "./core/home.js";
 import { applyDataFetch, applyManagedInstall, checkToolchain, featureReadiness, locateTool, planDataFetch, planDataMemory, planManagedInstall, planToolMemory, readinessSummary, TOOL_SPECS, toolsToLocate } from "./core/toolchain/index.js";
 import { loadUserConfig } from "./core/userconfig.js";
 import { describeNeeds, isProjectTrusted, planTrust, projectTrustNeeds, trustRefusal } from "./core/trust.js";
@@ -15,6 +15,7 @@ import { runBuild } from "./core/build/index.js";
 import { classifyReload, detectRedHotTools, runDeploy } from "./core/deploy/index.js";
 import { armBridge, bridgeCandidateDirs, bridgeStatus, cetLogCandidates, listPendingArms, PROTOCOL_VERSION as BRIDGE_PROTOCOL_VERSION, pollCyberpunk, pollForResult, probeSchema as bridgeProbeSchema, readPendingArm, stageBridge } from "./core/bridge/index.js";
 import { removeBridge } from "./core/bridge/remove.js";
+import { BACKUP_RETENTION, pruneDated } from "./core/safety/retention.js";
 import { runTestPlan } from "./core/testplan/index.js";
 import { applyBuildLedgerHook, applyClaimTransition, applyDecisionRecord, applyValidateLedgerHook, checkLedger, claimsFilePath, listClaims, loadClaims, loadDecisions, saveClaims, saveDecisions, showClaim, } from "./core/ledger/index.js";
 import { IndexStore, defaultCacheDir, findLegacyIndex, indexFile, legacyIndexHint, loadKnowledge, resolveIndexFile, searchFacts, } from "./core/knowledge/index.js";
@@ -30,7 +31,27 @@ import { SURFACES, getSurface, installGameVersion, resolveInstall, surfaceIds }
 import { CONVERTERS, convert as runConvert, defaultLocateTool as defaultTextLocateTool, extractTemplate, fieldDiff, getTemplate, invalidateTemplate, listTemplates, } from "./core/text/index.js";
 import { bootstrapProject, describe as describeScaffold, findScaffold, findSequence, generateClaudeAssets, loadAllScaffolds, loadAllSequences, planSequence, runScaffold, summarize, summarizeSequences } from "./core/scaffold/index.js";
 import { loadSkillPromptCatalog, renderSkillPrompt } from "./core/prompts.js";
-const server = new McpServer({ name: "modwright", version: "0.1.0" });
+const server = new McpServer({ name: "modwright", version: await serverVersion() });
+async function serverVersion() {
+    try {
+        const pkg = JSON.parse(await fs.readFile(path.join(packageRoot(), "package.json"), "utf8"));
+        return pkg.version ?? "0.0.0";
+    }
+    catch {
+        return "0.0.0";
+    }
+}
+{
+    const register = server.registerTool.bind(server);
+    server.registerTool = (name, config, handler) => register(name, config, async (...args) => {
+        try {
+            return await handler(...args);
+        }
+        catch (error) {
+            return fail(`${String(name)} failed: ${error.message}`);
+        }
+    });
+}
 const registry = new SignatureRegistry();
 for (const surface of SURFACES) {
     if (surface.logSignatures?.length)
@@ -313,6 +334,7 @@ server.registerTool("who_touches", {
     const collection = await collectWrites(surface, install, rootIds ? { rootIds } : {});
     const { errors, ...coverage } = collection.coverage;
     const copies = duplicateCopies(collection);
+    const repeats = (collection.repeatedKeys ?? []).filter((r) => key ? r.key.toLowerCase().startsWith(key.toLowerCase()) : mod ? r.writerId.toLowerCase().includes(mod.toLowerCase()) || r.name.toLowerCase().includes(mod.toLowerCase()) : true);
     const result = key
         ? { mode: "key", ...whoTouches(collection, key, limit) }
         : mod
@@ -328,6 +350,16 @@ server.registerTool("who_touches", {
             errors: errors.slice(0, 25),
         },
         ...(copies.length > 0 ? { duplicateCopies: copies } : {}),
+        ...(repeats.length > 0
+            ? {
+                repeatedKeys: {
+                    total: repeats.length,
+                    items: repeats.slice(0, 50),
+                    note: "Each key is repeated within one mapping in that file: invalid YAML that TweakXL reads without an error. Which " +
+                        "occurrence takes effect is not established, so one of the edits may be silently lost.",
+                },
+            }
+            : {}),
         ...result,
         note: "Static: read from the mods' files, never from the running game. 'contested' means two or more mods write the " +
             "key and not only by appending; which one the game ends up with depends on load order, which this tool does " +
@@ -1300,19 +1332,59 @@ server.registerTool("rollback", {
         "allowOutsideRoots is set.",
     inputSchema: {
         path: z.string().optional().describe("modwright.json path or a directory to search from. Default: current directory."),
+        action: z
+            .enum(["list", "restore", "prune"])
+            .optional()
+            .describe("list (the default without backupId), restore (the default with one), or prune: delete old backup runs, keeping the newest 20 and anything under 14 days old. Only ModWright's own dated folders are ever pruned."),
         backupId: z.string().optional().describe("The stamp naming one backup directory under .modwright/backups (from this tool's own listing). Omit to list."),
-        mode: z.enum(["dry-run", "apply"]).default("dry-run").describe("dry-run reports what would be restored without writing a byte."),
+        backupRoot: z
+            .string()
+            .optional()
+            .describe("prune only: another backups folder to prune instead of the project's, e.g. one an older version left under a working directory. Must be a .modwright/backups folder or ModWright's per-user backups."),
+        mode: z.enum(["dry-run", "apply"]).default("dry-run").describe("dry-run reports what would be restored or pruned without changing anything."),
         installPath: installPathArg,
         allowOutsideRoots: z
             .boolean()
             .default(false)
             .describe("Restore entries outside the project and the game's mod roots too. Off by default: a backup that names any other path is refused whole."),
     },
-}, async ({ path: start, backupId, mode, installPath, allowOutsideRoots }) => {
+}, async ({ path: start, action, backupId, backupRoot: otherRoot, mode, installPath, allowOutsideRoots }) => {
+    if (action === "prune") {
+        let root;
+        if (otherRoot) {
+            const abs = path.resolve(otherRoot);
+            const posix = abs.split(path.sep).join("/").toLowerCase();
+            const perUser = path.join(userDataDir(), "backups").split(path.sep).join("/").toLowerCase();
+            if (!posix.endsWith("/.modwright/backups") && posix !== perUser) {
+                return fail(`rollback prune: ${abs} is not a .modwright/backups folder or ModWright's per-user backups (${path.join(userDataDir(), "backups")}).`);
+            }
+            root = abs;
+        }
+        else {
+            const project = await projectOrFail(start);
+            if ("isError" in project)
+                return project;
+            root = path.join(project.root, ".modwright", "backups");
+        }
+        const report = await pruneDated(root, "backup", BACKUP_RETENTION, { mode });
+        return json({
+            action,
+            ...report,
+            expired: report.expired.slice(0, 100),
+            expiredCount: report.expired.length,
+            note: report.expired.length === 0
+                ? `Nothing to prune: ${report.runs} backup run(s), all within the newest ${BACKUP_RETENTION.keepRuns} or under ${BACKUP_RETENTION.maxAgeDays} days old.`
+                : report.applied
+                    ? `Pruned ${report.expired.length - (report.failed?.length ?? 0)} folder(s); ${report.keptCount} kept.`
+                    : `Dry run: ${report.expired.length} folder(s) would be deleted outright (they are the backups); ${report.keptCount} kept. Repeat with mode 'apply'.`,
+        });
+    }
     const resolved = await projectOrFail(start);
     if ("isError" in resolved)
         return resolved;
     const backupRoot = path.join(resolved.root, ".modwright", "backups");
+    if (action === "restore" && !backupId)
+        return fail("rollback restore needs backupId (from this tool's listing).");
     if (!backupId) {
         const backups = await listBackups(backupRoot);
         return json({
@@ -1686,7 +1758,7 @@ server.registerTool("ledger", {
         scopeFiles: z.array(z.string()).optional().describe("'record' kind:\"claim\": files this claim is about, for a new claim."),
         scopeEntries: z.array(z.string()).optional().describe("'record' kind:\"claim\": named entries (stat/tweak ids) this claim is about, for a new claim."),
         toStatus: z.enum(["authored", "checker-clean", "built", "verified", "contradicted"]).optional().describe("'record' kind:\"claim\": the status to move this claim to."),
-        tool: z.enum(["validate", "build", "run_tests", "ledger"]).optional().describe("'record' kind:\"claim\": which tool this write claims to be — defaults to \"ledger\" (a manual record/correction). Passing another tool's name does not skip that tool's own gate; it only labels the write."),
+        tool: z.enum(["validate", "build", "run_tests", "ledger"]).optional().describe("'record' kind:\"claim\": whose transition rule applies. \"ledger\" (the default) is a manual record or correction: any move is allowed, with a note when it skips a stage. Naming validate, build or run_tests applies that tool's rule instead: only the status that tool writes, and only forward. A name never widens what is allowed and never stands in for the tool's own checks."),
         by: z.string().optional().describe("'record': who or what made this write. Default \"ledger\"."),
         note: z.string().optional().describe("'record': why, for the history entry."),
         evidence: z

package/dist/surfaces/baldursgate3/validators/bridge.js

@@ -2,6 +2,6 @@ import { bridgeNeverShipValidator } from "../../../core/bridge/index.js";
 export const bridgeNeverShipsValidator = bridgeNeverShipValidator({
     id: "bg3.history.bridge-never-ships",
     game: "baldursgate3",
-    evidence: ["ModWright research"],
+    evidence: ["ModWright's own rule, decided 2026-09-08: the in-game verification bridge is an authoring aid and never ships in a release build."],
 });
 export const BRIDGE_VALIDATORS = [bridgeNeverShipsValidator];

package/dist/surfaces/baldursgate3/validators/templates.js

@@ -2,6 +2,6 @@ import { vanillaExtractNeverShipValidator } from "../../../core/text/validate.js
 export const vanillaExtractNeverShipsValidator = vanillaExtractNeverShipValidator({
     id: "bg3.history.vanilla-extract-never-ships",
     game: "baldursgate3",
-    evidence: ["ModWright research"],
+    evidence: ["ModWright's own rule, decided 2026-09-08: a template extracted from the user's own install is for authoring only, and a release never ships one verbatim (redistributing game data)."],
 });
 export const TEMPLATE_VALIDATORS = [vanillaExtractNeverShipsValidator];

package/dist/surfaces/cyberpunk2077/index/parsers/tweakxl-yaml.js

@@ -181,3 +181,32 @@ export function parseTweakXLYaml(text, file, options = {}) {
     }
     return ctx.records;
 }
+export function findRepeatedKeys(text) {
+    const lineCounter = new YAML.LineCounter();
+    const doc = YAML.parseDocument(text, { lineCounter, uniqueKeys: false });
+    if (doc.errors.length > 0)
+        return [];
+    const out = [];
+    const visit = (node, prefix) => {
+        if (YAML.isMap(node)) {
+            const seen = new Map();
+            for (const pair of node.items) {
+                if (!YAML.isScalar(pair.key))
+                    continue;
+                const name = String(pair.key.value);
+                const line = pair.key.range ? lineCounter.linePos(pair.key.range[0]).line : 0;
+                seen.set(name, [...(seen.get(name) ?? []), line]);
+                visit(pair.value, prefix ? `${prefix}.${name}` : name);
+            }
+            for (const [name, lines] of seen)
+                if (lines.length > 1)
+                    out.push({ key: prefix ? `${prefix}.${name}` : name, lines });
+        }
+        else if (YAML.isSeq(node)) {
+            for (const item of node.items)
+                visit(item, prefix);
+        }
+    };
+    visit(doc.contents, "");
+    return out.sort((a, b) => a.lines[0] - b.lines[0]);
+}

package/dist/surfaces/cyberpunk2077/validators/bridge.js

@@ -2,6 +2,6 @@ import { bridgeNeverShipValidator } from "../../../core/bridge/index.js";
 export const bridgeNeverShipsValidator = bridgeNeverShipValidator({
     id: "cp2077.history.bridge-never-ships",
     game: "cyberpunk2077",
-    evidence: ["ModWright research"],
+    evidence: ["ModWright's own rule, decided 2026-09-08: the in-game verification bridge is an authoring aid and never ships in a release build."],
 });
 export const BRIDGE_VALIDATORS = [bridgeNeverShipsValidator];

package/dist/surfaces/cyberpunk2077/validators/cr2w.js

@@ -264,7 +264,7 @@ function checkResourcePathShape(root, file) {
 const GAMEVERSION_EVIDENCE = [
     "cp2077.toolchain.gameversion-header",
     "cp2077.packaging.game-version-compatibility",
-    "observed: a WolvenKit 8.20.0 en-us.source.json header carries GameVersion 2310",
+    "observed by 2026-09-07: a WolvenKit 8.20.0 en-us.source.json header carries GameVersion 2310",
 ];
 function expectedGameVersion(marketingVersion) {
     const m = /^(\d+)\.(\d{1,2})$/.exec(marketingVersion.trim());

package/dist/surfaces/cyberpunk2077/validators/modsettings.js

@@ -1,6 +1,6 @@
 import * as path from "node:path";
 const ID = "cp2077.history.modsettings-annotation-keys";
-const EVIDENCE = ["ModWright research"];
+const EVIDENCE = ["cp2077.ui.modsettings.universal-annotation-keys", "cp2077.ui.modsettings.type-specific-annotation-keys", "cp2077.ui.modsettings.unannotated-property-is-invisible"];
 const REQUIRED_KEYS = ["mod", "category", "displayName"];
 function isWithin(parent, child) {
     const rel = path.relative(parent, child);

package/dist/surfaces/cyberpunk2077/validators/templates.js

@@ -2,6 +2,6 @@ import { vanillaExtractNeverShipValidator } from "../../../core/text/validate.js
 export const vanillaExtractNeverShipsValidator = vanillaExtractNeverShipValidator({
     id: "cp2077.history.vanilla-extract-never-ships",
     game: "cyberpunk2077",
-    evidence: ["ModWright research"],
+    evidence: ["ModWright's own rule, decided 2026-09-08: a template extracted from the user's own install is for authoring only, and a release never ships one verbatim (redistributing game data)."],
 });
 export const TEMPLATE_VALIDATORS = [vanillaExtractNeverShipsValidator];

package/dist/surfaces/cyberpunk2077/validators/tweaks.js

@@ -85,7 +85,11 @@ function finding(validatorId, severity, file, message, evidence, extra = {}) {
 const YAML_LINT_ID = "cp2077.tweaks.yaml-lint";
 const YAML_LINT_EVIDENCE = [
     "cp2077.tweakdb.melee.tweakxl-log-required-after-yaml-changes",
+    "cp2077.tweakxl.yaml-syntax.duplicate-keys-do-not-fail-the-parse",
 ];
+const DUPLICATE_KEY_NOTE = "That is invalid YAML. TweakXL reads the file without an error, but which occurrence takes effect is not established, " +
+    "so one of the two edits can be silently lost.";
+const DUPLICATE_KEY_FIX = "Write everything this key sets in one block, and delete the repeat.";
 export const yamlLintValidator = {
     id: YAML_LINT_ID,
     game: GAME,
@@ -113,9 +117,12 @@ export const yamlLintValidator = {
         const doc = YAML.parseDocument(text, { lineCounter });
         return doc.errors.map((err) => {
             const pos = err.pos ? lineCounter.linePos(err.pos[0]) : undefined;
-            return finding(YAML_LINT_ID, "block", file, err.message.split("\n")[0] ?? err.message, YAML_LINT_EVIDENCE, {
+            const first = err.message.split("\n")[0] ?? err.message;
+            const duplicate = /map keys must be unique/i.test(first);
+            return finding(YAML_LINT_ID, "block", file, duplicate ? `${first} ${DUPLICATE_KEY_NOTE}` : first, YAML_LINT_EVIDENCE, {
                 line: pos?.line,
                 column: pos?.col,
+                ...(duplicate ? { fix: DUPLICATE_KEY_FIX } : {}),
             });
         });
     },
@@ -164,7 +171,7 @@ export const baseExistsValidator = {
     },
 };
 const TYPE_KNOWN_ID = "cp2077.tweaks.type-known";
-const TYPE_KNOWN_EVIDENCE = ["ModWright research"];
+const TYPE_KNOWN_EVIDENCE = ["cp2077.tweakxl.yaml-syntax.record-names-must-be-unique", "https://github.com/psiberx/cp2077-tweak-xl/wiki/YAML-Tweaks"];
 export const typeKnownValidator = {
     id: TYPE_KNOWN_ID,
     game: GAME,
@@ -252,7 +259,7 @@ export const appendOnListFlatValidator = {
     },
 };
 const INSTANCES_ID = "cp2077.tweaks.instances-resolve";
-const INSTANCES_EVIDENCE = ["ModWright research"];
+const INSTANCES_EVIDENCE = ["https://github.com/psiberx/cp2077-tweak-xl/wiki/YAML-Tweaks"];
 const VAR_RE = /\$\(([^)]+)\)/g;
 function collectVarNamesFromText(text, out) {
     for (const m of text.matchAll(VAR_RE))
@@ -553,7 +560,7 @@ const REPLACER_BASE = "Character.Player_Replacer_Puppet_Base";
 const REPLACER_TEMPLATE_EVIDENCE = [
     "cp2077.player.control.replacers-are-other-player-bodies",
     "cp2077.player.control.android-replacer-is-v-in-the-android-app",
-    "cyberpunk2077.tweakxl.missing-resource (triage pattern: `<record>.entityTemplatePath refers to a non-existent resource.`)",
+    "observed 2026-10-04 in a TweakXL 1.11.4 log: `<record>.entityTemplatePath refers to a non-existent resource.` is logged as a warning naming the record",
 ];
 async function derivesFromReplacerBase(ctx, start, projectBases) {
     let current = start;

package/dist/surfaces/cyberpunk2077/writes.js

@@ -2,7 +2,7 @@ import { promises as fs } from "node:fs";
 import * as path from "node:path";
 import { TweakParseError } from "./index/model.js";
 import { parseTweakFile } from "./index/parsers/tweak.js";
-import { parseTweakXLYaml } from "./index/parsers/tweakxl-yaml.js";
+import { findRepeatedKeys, parseTweakXLYaml } from "./index/parsers/tweakxl-yaml.js";
 const TWEAK_EXTENSIONS = new Set([".yaml", ".yml", ".tweak"]);
 const MAX_TWEAK_BYTES = 8 * 1024 * 1024;
 export const TWEAKS_UNIT_NOTE = "r6/tweaks is one shared folder and TweakXL has no notion of mods, so each top-level folder there " +
@@ -38,7 +38,9 @@ async function parseFile(abs) {
     if (stat.size > MAX_TWEAK_BYTES)
         throw new Error(`larger than ${MAX_TWEAK_BYTES} bytes; skipped`);
     const text = await fs.readFile(abs, "utf8");
-    return path.extname(abs).toLowerCase() === ".tweak" ? parseTweakFile(text, abs) : parseTweakXLYaml(text, abs, { allowDuplicateKeys: true });
+    if (path.extname(abs).toLowerCase() === ".tweak")
+        return { records: parseTweakFile(text, abs), repeats: [] };
+    return { records: parseTweakXLYaml(text, abs, { allowDuplicateKeys: true }), repeats: findRepeatedKeys(text) };
 }
 export async function extractCyberpunkWrites(mod, root) {
     let files;
@@ -56,7 +58,10 @@ export async function extractCyberpunkWrites(mod, root) {
         const abs = path.join(mod.path, rel);
         const unit = root.id === "tweaks" ? rel.split("/")[0] : undefined;
         try {
-            extraction.writes.push(...recordWrites(await parseFile(abs), abs, unit));
+            const { records, repeats } = await parseFile(abs);
+            extraction.writes.push(...recordWrites(records, abs, unit));
+            for (const r of repeats)
+                (extraction.repeatedKeys ??= []).push({ file: abs, ...(unit ? { unit } : {}), key: r.key, lines: r.lines });
         }
         catch (error) {
             const message = error instanceof TweakParseError ? error.message : `${abs}: ${error.message}`;

package/dist/surfaces/skyrimse/validators/archives.js

@@ -1,6 +1,6 @@
 import * as path from "node:path";
 import { BSA_VERSION_OBLIVION, BSA_VERSION_SKYRIM_LE, BSA_VERSION_SKYRIM_SE, BsaHeaderError, readBsaHeader } from "../archives.js";
-const EVIDENCE = ["ModWright research"];
+const HEADER_EVIDENCE = ["sse.archives.bsa.version-105"];
 const APPLIES = "every .bsa file under a project source";
 function isWithin(parent, child) {
     const rel = path.relative(parent, child);
@@ -23,11 +23,12 @@ async function headerOrFinding(id, file) {
             file,
             message: `${path.basename(file)} has no readable BSA header (${reason}): ${err.message}`,
             fix: "Repack the archive with BSArch or the Creation Kit's archive tool.",
-            evidence: EVIDENCE,
+            evidence: HEADER_EVIDENCE,
         };
     }
 }
 const isFinding = (v) => v.validatorId !== undefined;
+const ARCHIVEVERSION_EVIDENCE = ["sse.archives.bsa.version-105", "sse.archives.bsa.v105-uses-lz4", "sse.archives.bsa.folder-record-is-24-bytes-in-v105"];
 const archiveVersion = {
     id: "sse.archives.version",
     game: "skyrimse",
@@ -39,7 +40,7 @@ const archiveVersion = {
     needs: { project: true },
     cost: "edit",
     severity: "block",
-    evidence: EVIDENCE,
+    evidence: ARCHIVEVERSION_EVIDENCE,
     async run(ctx) {
         if (ctx.target.kind !== "file")
             return [];
@@ -59,11 +60,12 @@ const archiveVersion = {
                     ? `${name} is a version ${header.version} archive, ${known}; Skyrim SE reads version 105.`
                     : `${name} has BSA version ${header.version}; Skyrim SE reads version 105.`,
                 fix: "Extract and repack the archive for Skyrim SE (BSArch with the SSE format, or the Creation Kit).",
-                evidence: EVIDENCE,
+                evidence: ARCHIVEVERSION_EVIDENCE,
             },
         ];
     },
 };
+const ARCHIVENAMEFLAGS_EVIDENCE = ["sse.archives.bsa.directory-and-file-name-flags-are-required"];
 const archiveNameFlags = {
     id: "sse.archives.name-flags",
     game: "skyrimse",
@@ -75,7 +77,7 @@ const archiveNameFlags = {
     needs: { project: true },
     cost: "edit",
     severity: "warn",
-    evidence: EVIDENCE,
+    evidence: ARCHIVENAMEFLAGS_EVIDENCE,
     async run(ctx) {
         if (ctx.target.kind !== "file")
             return [];
@@ -91,7 +93,7 @@ const archiveNameFlags = {
                 file: ctx.target.path,
                 message: `${path.basename(ctx.target.path)} lacks ${missing.join(" and ")} in its archive flags; UESP notes the game may not load a BSA without them, and every official archive sets both.`,
                 fix: "Repack with names included (BSArch's default).",
-                evidence: EVIDENCE,
+                evidence: ARCHIVENAMEFLAGS_EVIDENCE,
             });
         }
         if (header.xbox360) {
@@ -101,7 +103,7 @@ const archiveNameFlags = {
                 file: ctx.target.path,
                 message: `${path.basename(ctx.target.path)} has the Xbox 360 flag (0x40): big-endian numbers and hashes, which the PC game does not read.`,
                 fix: "Repack for PC.",
-                evidence: EVIDENCE,
+                evidence: ARCHIVENAMEFLAGS_EVIDENCE,
             });
         }
         return findings;

package/dist/surfaces/skyrimse/validators/plugins.js

@@ -3,7 +3,7 @@ import { readPeFileVersion } from "../../../core/compat/pe.js";
 import { compareVersions, parseVersion } from "../../../core/compat/version.js";
 import { FORM_VERSION_LE, FORM_VERSION_SSE, HEADER_VERSION_EXPANDED_LIGHT_RANGE, MASTER_LIMIT_SSE, PluginHeaderError, VALID_HEADER_VERSIONS_SSE, pluginExtension, readPluginHeader, } from "../plugins.js";
 import { RUNTIME_EXPANDED_LIGHT_RANGE } from "../compat.js";
-const EVIDENCE = ["ModWright research"];
+const HEADER_EVIDENCE = ["sse.plugins.format.record-header-is-24-bytes", "sse.plugins.format.hedr-is-twelve-bytes"];
 function isPluginUnderSource(target, project) {
     if (target.kind !== "file" || pluginExtension(target.path) === undefined)
         return false;
@@ -26,7 +26,7 @@ async function headerOrFinding(id, file) {
             file,
             message: `${path.basename(file)} has no readable TES4 header (${reason}): ${err.message}`,
             fix: "A plugin must begin with a TES4 record; re-save it from the Creation Kit or xEdit, or check the file is not truncated.",
-            evidence: EVIDENCE,
+            evidence: HEADER_EVIDENCE,
         };
     }
 }
@@ -42,6 +42,7 @@ function findEntry(order, name) {
     const key = name.toLowerCase();
     return order.find((e) => e.name.toLowerCase() === key);
 }
+const MASTERSPRESENT_EVIDENCE = ["sse.plugins.format.mast-data-pairs-are-the-master-list", "sse.loadorder.files.five-masters-are-implicit-and-absent"];
 const mastersPresent = {
     id: "sse.plugins.masters-present",
     game: "skyrimse",
@@ -53,7 +54,7 @@ const mastersPresent = {
     needs: { project: true, install: true },
     cost: "edit",
     severity: "block",
-    evidence: EVIDENCE,
+    evidence: MASTERSPRESENT_EVIDENCE,
     async run(ctx) {
         if (ctx.target.kind !== "file")
             return [];
@@ -79,12 +80,13 @@ const mastersPresent = {
                         ? `Master "${master}" is under Data but not in the load order at all; ${path.basename(ctx.target.path)} depends on it.`
                         : `Master "${master}" is neither in the load order nor under Data; ${path.basename(ctx.target.path)} cannot load without it.`,
                 fix: entry ? `Activate ${master} (a * line in Plugins.txt).` : `Install ${master} and activate it ahead of ${path.basename(ctx.target.path)}.`,
-                evidence: EVIDENCE,
+                evidence: MASTERSPRESENT_EVIDENCE,
             });
         }
         return findings;
     },
 };
+const MASTERORDER_EVIDENCE = ["sse.plugins.format.mast-data-pairs-are-the-master-list", "sse.loadorder.files.master-hoisting"];
 const masterOrder = {
     id: "sse.plugins.master-order",
     game: "skyrimse",
@@ -96,7 +98,7 @@ const masterOrder = {
     needs: { project: true, install: true },
     cost: "edit",
     severity: "block",
-    evidence: [...EVIDENCE],
+    evidence: [...MASTERORDER_EVIDENCE],
     async run(ctx) {
         if (ctx.target.kind !== "file")
             return [];
@@ -114,7 +116,7 @@ const masterOrder = {
                     severity: "info",
                     file: ctx.target.path,
                     message: `${path.basename(ctx.target.path)} is not in the load order, so its masters' positions relative to it cannot be checked yet.`,
-                    evidence: EVIDENCE,
+                    evidence: MASTERORDER_EVIDENCE,
                 },
             ];
         }
@@ -129,12 +131,13 @@ const masterOrder = {
                 file: ctx.target.path,
                 message: `Master "${master}" loads at position ${entry.index}, after ${path.basename(ctx.target.path)} at ${self.index}; a plugin must load after every master it depends on.`,
                 fix: `Move ${master} above ${path.basename(ctx.target.path)} in Plugins.txt (LOOT does this).`,
-                evidence: [...EVIDENCE],
+                evidence: [...MASTERORDER_EVIDENCE],
             });
         }
         return findings;
     },
 };
+const ESLHEADERVERSION_EVIDENCE = ["sse.plugins.esl.hedr-1-71-unlocks-the-expanded-range", "sse.plugins.esl.masters-at-1-71-force-the-plugin-to-1-71", "sse.plugins.esl.1-71-plugins-crash-old-game-builds"];
 const eslHeaderVersion = {
     id: "sse.plugins.esl-header-version",
     game: "skyrimse",
@@ -146,7 +149,7 @@ const eslHeaderVersion = {
     needs: { project: true },
     cost: "edit",
     severity: "block",
-    evidence: EVIDENCE,
+    evidence: ESLHEADERVERSION_EVIDENCE,
     async run(ctx) {
         if (ctx.target.kind !== "file")
             return [];
@@ -161,7 +164,7 @@ const eslHeaderVersion = {
                 severity: "block",
                 file: ctx.target.path,
                 message: `${path.basename(ctx.target.path)} has no HEDR subrecord; every plugin's TES4 record carries one.`,
-                evidence: EVIDENCE,
+                evidence: ESLHEADERVERSION_EVIDENCE,
             });
             return findings;
         }
@@ -172,7 +175,7 @@ const eslHeaderVersion = {
                 file: ctx.target.path,
                 message: `HEDR version ${version.toFixed(2)} is not one Skyrim SE accepts (${VALID_HEADER_VERSIONS_SSE.map((v) => v.toFixed(2)).join(", ")}).`,
                 fix: "Re-save the plugin with the Skyrim SE Creation Kit or xEdit in SSE mode.",
-                evidence: EVIDENCE,
+                evidence: ESLHEADERVERSION_EVIDENCE,
             });
             return findings;
         }
@@ -185,7 +188,7 @@ const eslHeaderVersion = {
                     file: ctx.target.path,
                     message: `${path.basename(ctx.target.path)} has HEDR version ${version.toFixed(2)}, which needs game runtime ${RUNTIME_EXPANDED_LIGHT_RANGE} or later; this install is ${runtime}.`,
                     fix: "Update the game, or re-save the plugin with a 1.70 header if it uses no FormID below 0x800.",
-                    evidence: EVIDENCE,
+                    evidence: ESLHEADERVERSION_EVIDENCE,
                 });
             }
         }
@@ -204,7 +207,7 @@ const eslHeaderVersion = {
                                 file: ctx.target.path,
                                 message: `Master "${master}" is a ${mh.headerVersion.toFixed(2)} plugin while ${path.basename(ctx.target.path)} is ${version.toFixed(2)}; referencing or overriding that master's records in the extended FormID range (001-7FF) will error.`,
                                 fix: "Re-save this plugin with a 1.71 header (xEdit 4.1.5b or later, or the current Creation Kit).",
-                                evidence: EVIDENCE,
+                                evidence: ESLHEADERVERSION_EVIDENCE,
                             });
                         }
                     }
@@ -217,6 +220,7 @@ const eslHeaderVersion = {
         return findings;
     },
 };
+const FLAGEXTENSIONMISMATCH_EVIDENCE = ["sse.plugins.esl.extension-does-not-determine-lightness", "sse.plugins.format.tes4-flag-bits"];
 const flagExtensionMismatch = {
     id: "sse.plugins.flag-extension-mismatch",
     game: "skyrimse",
@@ -228,7 +232,7 @@ const flagExtensionMismatch = {
     needs: { project: true },
     cost: "edit",
     severity: "warn",
-    evidence: EVIDENCE,
+    evidence: FLAGEXTENSIONMISMATCH_EVIDENCE,
     async run(ctx) {
         if (ctx.target.kind !== "file")
             return [];
@@ -245,7 +249,7 @@ const flagExtensionMismatch = {
                     file: ctx.target.path,
                     message: `${name} has the ESM flag set: the game treats it as a master regardless of the .esp extension, so it loads among the masters and every header-reading tool disagrees with its name.`,
                     fix: "Clear the ESM flag in xEdit, or rename the file .esm so the extension says what the flag does.",
-                    evidence: EVIDENCE,
+                    evidence: FLAGEXTENSIONMISMATCH_EVIDENCE,
                 },
             ];
         }
@@ -257,13 +261,14 @@ const flagExtensionMismatch = {
                     file: ctx.target.path,
                     message: `${name} has no ESM flag: the .esm extension makes the game load it as a master anyway, but tools reading the header will not.`,
                     fix: "Set the ESM flag in xEdit so the header and the extension agree.",
-                    evidence: EVIDENCE,
+                    evidence: FLAGEXTENSIONMISMATCH_EVIDENCE,
                 },
             ];
         }
         return [];
     },
 };
+const ESLEXTENSIONIMPLIESFLAG_EVIDENCE = ["sse.plugins.esl.flag-is-bit-9-of-the-tes4-header", "sse.plugins.esl.extension-does-not-determine-lightness"];
 const eslExtensionImpliesFlag = {
     id: "sse.plugins.esl-extension-implies-flag",
     game: "skyrimse",
@@ -275,7 +280,7 @@ const eslExtensionImpliesFlag = {
     needs: { project: true },
     cost: "edit",
     severity: "warn",
-    evidence: EVIDENCE,
+    evidence: ESLEXTENSIONIMPLIESFLAG_EVIDENCE,
     async run(ctx) {
         if (ctx.target.kind !== "file")
             return [];
@@ -291,11 +296,12 @@ const eslExtensionImpliesFlag = {
                 file: ctx.target.path,
                 message: `${path.basename(ctx.target.path)} is an .esl without the light flag (0x200) in its header; the game treats it as light because of the extension, header-reading tools do not.`,
                 fix: "Set the ESL flag in xEdit (it checks the plugin's new records fit the light range first).",
-                evidence: EVIDENCE,
+                evidence: ESLEXTENSIONIMPLIESFLAG_EVIDENCE,
             },
         ];
     },
 };
+const FORMVERSION_EVIDENCE = ["sse.plugins.format.form-version-44-for-sse"];
 const formVersion = {
     id: "sse.plugins.form-version",
     game: "skyrimse",
@@ -307,7 +313,7 @@ const formVersion = {
     needs: { project: true },
     cost: "edit",
     severity: "block",
-    evidence: EVIDENCE,
+    evidence: FORMVERSION_EVIDENCE,
     async run(ctx) {
         if (ctx.target.kind !== "file")
             return [];
@@ -326,11 +332,12 @@ const formVersion = {
                     ? `${path.basename(ctx.target.path)} has form version 43: a Skyrim Legendary Edition plugin, not converted for Special Edition.`
                     : `${path.basename(ctx.target.path)} has form version ${header.formVersion}; Skyrim SE plugins carry 44.`,
                 fix: le ? "Open and re-save the plugin in the Skyrim SE Creation Kit to convert it (and re-pack any LE .bsa)." : "Re-save the plugin with the Skyrim SE Creation Kit or xEdit.",
-                evidence: EVIDENCE,
+                evidence: FORMVERSION_EVIDENCE,
             },
         ];
     },
 };
+const MASTERCOUNT_EVIDENCE = ["sse.plugins.esl.master-list-limit-is-253"];
 const masterCount = {
     id: "sse.plugins.master-count",
     game: "skyrimse",
@@ -342,7 +349,7 @@ const masterCount = {
     needs: { project: true },
     cost: "edit",
     severity: "block",
-    evidence: EVIDENCE,
+    evidence: MASTERCOUNT_EVIDENCE,
     async run(ctx) {
         if (ctx.target.kind !== "file")
             return [];
@@ -358,7 +365,7 @@ const masterCount = {
                 file: ctx.target.path,
                 message: `${path.basename(ctx.target.path)} names ${header.masters.length} masters; Skyrim SE allows ${MASTER_LIMIT_SSE}.`,
                 fix: "Clean unused masters in xEdit, or split the plugin.",
-                evidence: EVIDENCE,
+                evidence: MASTERCOUNT_EVIDENCE,
             },
         ];
     },

package/knowledge/cyberpunk2077/tweakxl.yaml-syntax.yaml

@@ -60,7 +60,7 @@ facts:
   - id: cp2077.tweakxl.yaml-syntax.duplicate-keys-break-file
     claim: A duplicate key at the same nesting level in a TweakXL yaml file breaks the whole file's
       parse; the community-recommended check is to run the file through yamllint.com before packing.
-    status: community
+    status: contradicted
     source: CDPR-Modding-Documentation/Cyberpunk-Modding-Docs
       for-mod-creators-theory/core-mods-explained/tweakxl/tweakxl-changing-game-records/how-to-yaml-tweak-modding-basics.md,
       section "Key Uniqueness"
@@ -69,6 +69,26 @@ facts:
       - yaml
       - duplicate-key
       - validator
+    detail: "Contradicted for TweakXL 1.11.4: on 2026-10-04 it read seven installed files that repeat a
+      top-level key and logged no error for any of them, while it does log `[error] yaml-cpp: ...`
+      for a file that fails to parse
+      (cp2077.tweakxl.hotreload.parse-error-still-ends-in-import-completed). See
+      cp2077.tweakxl.yaml-syntax.duplicate-keys-do-not-fail-the-parse."
+  - id: cp2077.tweakxl.yaml-syntax.duplicate-keys-do-not-fail-the-parse
+    claim: "TweakXL 1.11.4 reads a yaml file that repeats a top-level key without a parse error: its log
+      shows the file being read and no error line, and the rest of the import goes on. Which
+      occurrence wins, or whether both apply, is not established."
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    supersedes: cp2077.tweakxl.yaml-syntax.duplicate-keys-break-file
+    tags:
+      - tweakxl
+      - yaml
+      - duplicate-key
+    detail: ModWright's write census (who_touches) reads such a file with every occurrence, in file
+      order. The yaml-lint rule still reports a repeated key in a project's own file, where it is
+      usually a mistake.
   - id: cp2077.tweakxl.yaml-syntax.record-names-must-be-unique
     claim: Every TweakXL record (a named container grouping properties, which may themselves be other
       records or flats) must have a globally unique name; two records sharing a name overwrite each

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "modwright",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "A game-agnostic MCP server for game modding, with per-game surfaces.",
   "type": "module",
   "main": "dist/index.js",