shapeup-sdlc 3.9.0 → 3.9.1

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "shapeup-sdlc-plugin",
   "displayName": "ShapeUp SDLC Plugin",
-  "version": "3.9.0",
+  "version": "3.9.1",
   "description": "Shape Up SDLC harness for Claude Code: shaping, intake, orient, scope-mapping, building (T0-verified, sandboxed, scope-contracted), evaluation and QA skills orchestrated by a tech-lead.",
   "author": {
     "name": "Liberty Nguyen",

package/kernel/verify/trace.mjs

@@ -126,7 +126,9 @@ const IMPORT_RE = /(?:\bimport\b[^'"]*?from\s*|\bimport\s*|\bexport\b[^'"]*?from
  *   walk uses, plus what each widening contributed (reported, so a reader can see why it resolved).
  */
 export function sourceExtensions(profile, entryPoint) {
-  const raw = profile?.source_extensions ?? profile?.module_extensions ?? null;
+  // One spelling, the one the schema declares. A silent alias is a field nobody documented and
+  // nobody can be told to write.
+  const raw = profile?.source_extensions ?? null;
   const list = Array.isArray(raw) ? raw : typeof raw === "string" ? raw.split(/[,\s]+/) : [];
   const declared = list
     .map((e) => String(e).trim())
@@ -292,7 +294,6 @@ function sourceFilesUnder(root, exts) {
     let entries;
     try { entries = readdirSync(dir, { withFileTypes: true }); } catch { return; }
     for (const e of entries) {
-      if (e.name.startsWith(".") && e.name !== ".") { if (SKIP_DIRS.has(e.name)) continue; }
       if (SKIP_DIRS.has(e.name)) continue;
       const abs = join(dir, e.name);
       if (e.isDirectory()) walk(abs);
@@ -335,8 +336,10 @@ export function scopeReachability(contracts, reachable, sources) {
  * @param {{cwd:string, gate?:boolean}} opts - cwd (root the SHARED/LOCAL paths resolve against),
  *   gate (records mode; the CLI, not this function, turns gate+red into a non-zero exit).
  * @returns {{report:object, mermaid:(string|null)}} The trace report (covers_closure, reachability,
- *   findings[], overall "green"|"red") and a Mermaid view when a wiring map exists. Each arm
- *   self-skips (checked=false) when its artifact is absent — non-regression on pre-spine specs.
+ *   scope_reachability, findings[], overall "green"|"red") and a Mermaid view when a wiring map
+ *   exists. Each arm self-skips (checked=false) when its artifact is absent — non-regression on
+ *   pre-spine specs — and reachability also self-skips when it cannot root its walk, which is what
+ *   skips the per-scope arm with it.
  */
 export function traceLint(slug, { cwd, gate = false }) {
   const shared = sharedRoot(cwd, slug);
@@ -491,7 +494,8 @@ export function traceLint(slug, { cwd, gate = false }) {
               skipped_reason: `no engine is reachable from entry_point "${entryPoint}", which reaches ${reachable.size} file(s) — with no reachable engine as a control this walk cannot tell an orphaned module from an entry point that is not the runtime root (declarative routing, a manifest, a string-loaded screen). Reachability skipped.` };
             findings.push({ severity: "warn", code: "REACH-NO-CONTROL", message:
               `reachability did not run: all ${engines.length} engine(s) are unreachable from entry_point "${entryPoint}", which reaches ${reachable.size} file(s). ` +
-              "Every engine orphaned is the one result this arm cannot distinguish from a wrong root — if this project wires its screens by name rather than by import, declare the module that does the wiring as the entry point." });
+              "Every engine orphaned is the one result this arm cannot distinguish from a wrong root. If some module does compose the app, declare that one as the entry point. " +
+              "If the screens are registered in a manifest instead — a route map, a plugin table — then no entry point roots this walk and unchecked is the correct end state for this project, not a profile to fix." });
           } else {
             for (const u of unreachable) {
               findings.push({ severity: "red", code: "UC-UNREACHABLE", uc: u.use_case,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shapeup-sdlc",
-  "version": "3.9.0",
+  "version": "3.9.1",
   "description": "Shape Up for coding agents \u2014 with gates the agent can't talk its way past. Harness for Claude Code.",
   "bin": {
     "shapeup-sdlc": "bin/init.mjs"

package/skills/tech-lead/references/gates.md

@@ -224,10 +224,12 @@ Do NOT enter MAP SCOPES until Orient is accepted.
    archetype ∈ {client-only-game|web-service|mobile|library|data-pipeline}; entry_point is the
    reachability seam (a game's main.js is NOT a service's src/server.ts). Validate the enum — a
    typo must fail, not silently disable the check. entry_point is also the root reachability walks
-   the import graph from, so pick the module the app's screens hang off, not merely the file the
-   platform starts: a framework that registers screens by name (a route map, a manifest, a
-   string-loaded page) leaves its start file importing nothing the feature touches, and the arm
-   then reports that it could not check rather than calling every engine orphaned.
+   the import graph from, so where some module does compose the app, name that one rather than the
+   file the platform happens to start. Where the screens are registered in a MANIFEST instead (a
+   route map, a plugin table, a string-loaded page), no entry point roots an import walk at all —
+   measured on a real ArkTS app, where the navigation host imports nothing and every screen arrives
+   through route_map.json. The arm then reports that it could not check, and that is the correct
+   end state for such a project rather than a profile to keep re-declaring.
    source_extensions is optional and only needed when the project's modules end in something the
    entry point does not (e.g. [".ets"] when the entry is a .ts file); leaving it out costs a
    skipped arm, never a false red. The two probes feed the round build gate (`harness verify

package/skills/tech-lead/workflows/shapeup-run.js

@@ -1800,6 +1800,13 @@ while (verdict !== "pass" && round <= maxRounds) {
         `${gate.detail ? `: ${gate.detail}` : ""}). Treated as undeclared, not as green.`);
   }
 
+  // Trace-lint runs a SECOND time here, and this is the pass that can see anything. At L1b the
+  // scopes' files do not exist yet, so per-scope reachability measures an empty set and its warning
+  // cannot fire. After the round's build gate the code is on disk, which is exactly when "this
+  // scope's fixture is green and none of its code is in the compiled set" becomes a checkable fact
+  // — the shape that once left three scopes green while their files never compiled. Advisory, like
+  // the L1b pass: it overwrites the same projection with a later and better-informed one.
+  await advisory(`verify trace --slug ${slug} --quiet`, "Build", `trace-lint:r${round}`);
   await advisory(`reduce hill --slug ${slug}`, "Build", "hill-derive");
   {
     const g = await crossGate("L2", "Build", ["proceed", "ask", "abort"],