projectstore-claude 0.30.4 → 0.30.6

package/node_modules/projectstore/scripts/harness.mjs

@@ -321,6 +321,28 @@ export function harnessHome(manifest, { env = process.env, home = homedir() } =
   return fromEnv || (home && r.home_default ? join(home, r.home_default) : null);
 }
 
+// The registry block of a manifest's host plugin registration, where it names
+// its host's own folders and files (cache_dir, synced_dir, the registry
+// files), or null for a harness whose registration is not the host's plugin
+// system.
+export function hostRegistry(manifest) {
+  const [surface, s] =
+    Object.entries(manifest?.surfaces || {}).find(
+      ([k, x]) => !k.startsWith("_") && x?.format === "host-plugin-registration" && x.registry,
+    ) || [];
+  return s ? { ...s.registry, plugin_name: s.plugin_name, surface } : null;
+}
+
+// Whether the host auto-updates `marketplace` when no settings entry and no
+// registry entry say (registry.auto_update: its names and name prefixes are on,
+// every other marketplace off). null when the manifest states no default.
+export function autoUpdateDefault(manifest, marketplace) {
+  const d = hostRegistry(manifest)?.auto_update;
+  if (!d) return null;
+  const name = String(marketplace || "");
+  return (d.on || []).includes(name) || (d.on_prefix || []).some((p) => name.startsWith(p));
+}
+
 // The agents block of a RUN (the story "One run plans the agents block once,
 // and a bare uninstall selects every harness the project uses", rules 1–2):
 // the files every manifest of the run names for it, in the FIRST manifest's
@@ -411,6 +433,46 @@ export function activeHarness(env = process.env, dir = MANIFEST_DIR) {
   return loadHarness(detectHarnessId(env, dir), dir) || sourceHarness(dir);
 }
 
+// ─── The Stop carrier (generation spec, contract 17; entry spec, contract 14,
+// as amended 2026-10-15) ────────────────────────────────────────────────
+//
+// The shape the entry reminder's Stop carrier prints, from the manifest of the
+// harness that IDENTIFIES itself — a forced harness, a parent's decision, a
+// strong signal or a session marker. Never detection's cwd folder, weak ranking or source
+// fallback: a wrong answer here is a hook the host refuses (Codex's Stop schema
+// denies hookSpecificOutput, measured 2026-10-15), and a refused print would
+// still spend the session's reminder. Nothing identified, or no carrier
+// measured, is null: the hook stays silent.
+export const STOP_CARRIERS = Object.freeze(["additionalContext", "block"]);
+export function stopCarrier(env = process.env, dir = MANIFEST_DIR) {
+  const id = identifiedHarnessId(env, dir);
+  const carrier = id ? loadHarness(id, dir)?.output_channels?.Stop?.carrier : null;
+  return STOP_CARRIERS.includes(carrier) ? carrier : null;
+}
+
+// What is wrong with a manifest's Stop row, or null. The carrier is our choice
+// and must be one its row supports: context needs `additionalContext` among the
+// honoured fields, a block needs the block decision, and a carrier is only
+// ever chosen from a measured row. Shared by the manifest check and its
+// planted fixtures.
+export function stopCarrierProblem(manifest) {
+  const row = manifest?.output_channels?.Stop;
+  if (row === null || row === undefined) return null;
+  if (typeof row !== "object") return "output_channels.Stop is not an object";
+  if (!("carrier" in row)) return "output_channels.Stop has no carrier (null when none is measured)";
+  if (![...STOP_CARRIERS, null].includes(row.carrier))
+    return `output_channels.Stop.carrier ${JSON.stringify(row.carrier)} is not one of ${STOP_CARRIERS.join(", ")} or null`;
+  if (![null, "block"].includes(row.decision))
+    return `output_channels.Stop.decision ${JSON.stringify(row.decision)} is not null or "block"`;
+  if (row.carrier === null) return null;
+  if (row.evidence !== "measured") return "output_channels.Stop.carrier is set on a row that is not measured";
+  if (row.carrier === "additionalContext" && !(row.fields || []).includes("additionalContext"))
+    return "output_channels.Stop.carrier is additionalContext, but its fields do not honour it";
+  if (row.carrier === "block" && row.decision !== "block")
+    return 'output_channels.Stop.carrier is block, but its decision is not "block"';
+  return null;
+}
+
 // ─── Who a message is for (generation spec, contract 18) ───────────────
 //
 // The core prints for ONE harness at a time, and a command it names must be
@@ -563,7 +625,8 @@ export function projectRootDeclared(env = process.env) {
 // Where this projectstore's core lives on disk: its layouts, templates and
 // scripts. The bin runs ITS OWN copy of the core: a child gets that through childEnv's
 // pluginRoot, an in-process read (the query verbs' loadLayout, the headings
-// registry) through this pin. Set once by cli.mjs; nothing else may call it.
+// registry) through this pin. Set by verbs.mjs's dispatch, on every run of
+// the CLI and of the read runner; nothing else may call it.
 let _pinnedPluginRoot = null;
 export function pinPluginRoot(root) {
   _pinnedPluginRoot = root || null;
@@ -693,8 +756,10 @@ export function layoutPaths(projectDir, { harnessDir = null, dir = MANIFEST_DIR
 //
 // What is ours on the machine but belongs to no project and no harness home:
 // the shell fetch's scratch (<root>/fetch/<pid>-<ms>/, removed when its run
-// ends) and the registry answer the update notice caches for a day
-// (<root>/registry.json, named now and read by no one yet). The XDG Base
+// ends), the registry answer the update notice caches for a day
+// (<root>/registry.json, named now and read by no one yet), the model lists
+// (<root>/models/<id>.json) and the welcome an unbound project has shown
+// (<root>/welcomed/<id>). The XDG Base
 // Directory spec puts a cache at $XDG_CACHE_HOME when that is an absolute
 // path and ignores a relative one; an empty one is ignored too. Otherwise it
 // is <home>/.cache. With neither, `root` is null and the fetch refuses. This
@@ -715,6 +780,12 @@ export function cachePaths({ env = process.env, home = homedir() } = {}) {
     // A harness's model list, as its last live read answered (the ADR "Agent
     // model lists are read from each harness's own catalog…", decision 4).
     models: (id) => (root && id ? join(root, "models", `${id}.json`) : null),
+    // A harness's first-run welcome, seen on this machine: the SessionStart
+    // hook writes it in place of the project's marker when the project is not
+    // bound, so an unbound project gets no writes (layout spec contract 5, as
+    // amended by the story "Opening a project that is not bound writes nothing
+    // into it…"). A lost marker costs one more welcome.
+    welcomed: (id) => (root && id ? join(root, "welcomed", id) : null),
     from: fromEnv ? variable : "the home directory",
     variable,
   };
@@ -765,9 +836,20 @@ export function shellHarnessId(env = process.env, dir = MANIFEST_DIR) {
 
 // The overlay a harness reads: <project>/.projectstore/harness/<overlay>.json —
 // the manifest's runtime.overlay, the harness id by convention (the layout ADR,
-// decision 3). Null only when no manifest at all can be found.
-export function overlayId(env = process.env, dir = MANIFEST_DIR) {
-  const h = activeHarness(env, dir);
+// decision 3). Whose (layout spec, contract 2, as amended 2026-10-15): the
+// harness that identifies itself; else the shell that bundles this core; else
+// the shell the environment names; else detectHarnessId's answer (the cwd's
+// harness folder, the weak ranking, the source harness). Contract 18's middle
+// rungs with detection's tail: a rendered skill's exec tool carries no variable
+// of its harness, and the cwd's folder would answer for it. --harness stays the
+// caller's (cli.mjs runAgents). Null only when no manifest at all can be found.
+export function overlayId(env = process.env, dir = MANIFEST_DIR, { core } = {}) {
+  const id =
+    identifiedHarnessId(env, dir) ||
+    bundlingShellHarnessId({ core, dir }) ||
+    shellHarnessId(env, dir) ||
+    detectHarnessId(env, dir);
+  const h = loadHarness(id, dir) || sourceHarness(dir);
   return h?.runtime?.overlay || h?.id || null;
 }