universal-dev-standards 6.14.0-beta.2 → 6.14.0-beta.3

package/src/utils/hasher.js

@@ -532,6 +532,42 @@ export function computeIntegrationBlockHash(filePath) {
   }
 }
 
+/**
+ * Hash everything in an integration file that is OUTSIDE the UDS marker block.
+ *
+ * `computeIntegrationBlockHash` answers "did anyone edit what UDS manages?".
+ * This answers the opposite question, which `uds uninstall` needs: "is anything
+ * outside the block something other than what UDS itself wrote?". A file UDS
+ * created from nothing (AGENTS.md's `# AGENTS.md` / `> Auto-generated by ...`
+ * header and its trailing sections, CLAUDE.md's leading guidance) has plenty of
+ * text outside the markers, and that text alone cannot tell "generated by UDS"
+ * from "typed by the adopter" — only a hash recorded when UDS created the file,
+ * compared with the same hash now, can.
+ *
+ * Line endings are normalized (same reason as every other hash here) and each
+ * side is trimmed, so an editor adding a trailing newline is not "a user edit".
+ *
+ * @param {string} filePath - Absolute file path
+ * @returns {{hash: string, size: number}|null} null when the file cannot be read,
+ *   has no marker block, or has an ambiguous marker pair (no proof is available)
+ */
+export function computeOutsideBlockHash(filePath) {
+  try {
+    const content = normalizeLineEndings(readFileSync(filePath, 'utf-8'));
+    const { before, blockContent, after } = extractBlockContent(content, detectFormat(filePath));
+    if (!blockContent) return null;
+    const outside = `${before.trim()}\n\u0000\n${after.trim()}`;
+    return {
+      hash: `sha256:${createHash('sha256').update(outside).digest('hex')}`,
+      size: Buffer.byteLength(outside, 'utf-8')
+    };
+  } catch {
+    // Includes AmbiguousMarkerError: with two marker pairs there is no single
+    // "outside", so there is nothing to prove anything with.
+    return null;
+  }
+}
+
 /**
  * Compare integration block hash with stored hash info
  * @param {string} filePath - Absolute file path

package/src/utils/integration-generator.js

@@ -3202,8 +3202,14 @@ export function writeIntegrationFile(tool, config, projectPath) {
   try {
     let content = generateIntegrationContent({ ...config, tool });
 
+    // Whether this call CREATES the file (as opposed to merging into one that was
+    // already there). Only a file UDS created from nothing can later be proven
+    // to be wholly UDS's — see core/install-records.js. Taken from the existence
+    // check that already gates the merge below, before anything is written.
+    const created = !existsSync(filePath);
+
     // Handle merge if file exists
-    if (existsSync(filePath)) {
+    if (!created) {
       const existingContent = readFileSync(filePath, 'utf-8');
 
       if (config.mergeStrategy) {
@@ -3242,6 +3248,7 @@ export function writeIntegrationFile(tool, config, projectPath) {
       success: true,
       path: fileName, // Return relative path for consistency
       absolutePath: filePath,
+      created,
       blockHashInfo // Contains: blockHash, blockSize, fullHash, fullSize
     };
   } catch (error) {
@@ -3584,8 +3591,8 @@ export function parseStandardsIndexCount(content) {
 export function wrapWithMarkers(content, format) {
   const markers = UDS_MARKERS[format] || UDS_MARKERS.markdown;
   const warning = format === 'plaintext'
-    ? '# WARNING: This block is managed by UDS (universal-dev-standards). DO NOT manually edit. Use \'npx uds init\' or \'npx uds update\' to modify.'
-    : '<!-- WARNING: This block is managed by UDS (universal-dev-standards). DO NOT manually edit. Use \'npx uds init\' or \'npx uds update\' to modify. -->';
+    ? '# WARNING: This block is managed by UDS. DO NOT manually edit. Use \'npx universal-dev-standards init\' or \'npx universal-dev-standards update\' to modify.'
+    : '<!-- WARNING: This block is managed by UDS. DO NOT manually edit. Use \'npx universal-dev-standards init\' or \'npx universal-dev-standards update\' to modify. -->';
   // 冪等：warning 位於 markers **內部**，而 extractMarkedContent 取出的內容也含它，
   // 於是重新包裝會疊出第二份（dev-platform CLAUDE.md 實測 178/179 兩行完全相同）。
   // 這裡先剝掉內容開頭既有的 warning，不論上游哪條路徑造成都能修掉。
@@ -3949,7 +3956,7 @@ export function generateAgentsMdSummary(config = {}) {
       blockLines.push(`- \`${dir}/${filename}\` — ${filename.replace(suffix, '')}`);
     }
   } else {
-    blockLines.push('No standards installed yet. Run `npx uds init` to install.');
+    blockLines.push('No standards installed yet. Run `npx universal-dev-standards init` to install.');
   }
 
   lines.push(wrapWithMarkers(blockLines.join('\n'), 'markdown'));
@@ -3976,12 +3983,14 @@ export function generateAgentsMdSummary(config = {}) {
  */
 export function writeAgentsMdSummary(config, projectPath) {
   const filePath = join(projectPath, 'AGENTS.md');
-
   try {
     let content = generateAgentsMdSummary({ ...config, projectPath });
 
+    // See writeIntegrationFile: true only when this call creates the file.
+    const created = !existsSync(filePath);
+
     // Handle merge if file exists (preserve user content outside markers)
-    if (existsSync(filePath)) {
+    if (!created) {
       const existingContent = readFileSync(filePath, 'utf-8');
       const newParts = extractMarkedContent(content, 'markdown');
       if (newParts.content) {
@@ -3997,6 +4006,7 @@ export function writeAgentsMdSummary(config, projectPath) {
       success: true,
       path: 'AGENTS.md',
       absolutePath: filePath,
+      created,
       blockHashInfo
     };
   } catch (error) {

package/src/utils/legacy-hook-migration.js

@@ -0,0 +1,112 @@
+/**
+ * Migrate the pre-commit hook line older UDS versions wrote
+ * (`npx uds check`) to the block current UDS writes.
+ *
+ * Why it exists: every adopter who ran `uds init` before this fix has
+ * `.husky/pre-commit` asking `npx` to run the bare name `uds`. `npx` looks in
+ * node_modules/.bin and PATH first and otherwise asks the npm registry — where
+ * `uds` is an unrelated package that is not ours (see buildPreCommitBlock in
+ * git-hooks.js for the measurements). Fixing what `uds init` writes today does
+ * nothing for the hooks already on disk, so `uds update` swaps them.
+ *
+ * ⚠️ THIS FILE RECOGNISES the old text; it must never EMIT it. The regression
+ * guard (tests/unit/no-bare-uds-npx.test.js) lists this file as the one place
+ * a bare-name npx string is allowed, and says why. Nothing here may write one.
+ *
+ * What counts as "UDS wrote this line" — exact equality, not a pattern:
+ * only the two shapes UDS has ever generated, and only directly under the
+ * marker comment UDS put above them.
+ *   2026-02-04 .. 2026-03-04   npx uds check --standard checkin-standards
+ *   2026-03-04 .. this fix     npx uds check
+ * (from `git log -S` on the writer in cli/src/commands/init.js.) A line an
+ * adopter edited, or wrote themselves, is NOT swapped: it cannot be proven to be
+ * ours, and a hook that runs the adopter's own arguments is theirs to change.
+ * It is reported, with the exact line number and what to write instead.
+ *
+ * @module utils/legacy-hook-migration
+ */
+
+import { existsSync, readFileSync, writeFileSync } from 'fs';
+import { join } from 'path';
+import { buildPreCommitBlock, UDS_HOOK_MARKER, BARE_UDS_RUNNER_RE, hasBareUdsRunner } from './git-hooks.js';
+import { getFileRecord, proveUnchanged, recordFile, newRecorder, RECORD_KINDS } from '../core/install-records.js';
+
+/** The exact command lines UDS itself has written under the marker, and the extra arguments each carried. */
+const UDS_WRITTEN_LEGACY_LINES = new Map([
+  ['npx uds check', ''],
+  ['npx uds check --standard checkin-standards', '--standard checkin-standards']
+]);
+
+/**
+ * Swap the legacy hook line UDS wrote in `.husky/pre-commit` for the current block.
+ *
+ * @param {string} projectPath
+ * @param {{plan?: boolean, manifest?: object|null}} [opts]
+ *   plan     — report what would change, write nothing
+ *   manifest — read only to see whether the file was provably UDS's before the
+ *              swap (so the install record can follow it); may be null
+ * @returns {{
+ *   state: 'none'|'migrated'|'would-migrate'|'kept'|'error',
+ *   replaced: number,           // legacy UDS-written lines swapped (or that would be)
+ *   kept: Array<{line: number, text: string}>, // bare-name lines UDS cannot prove it wrote
+ *   recorder: object|null,      // fold into the manifest when non-null
+ *   error?: string
+ * }}
+ */
+export function migrateLegacyHuskyHook(projectPath, { plan = false, manifest = null } = {}) {
+  const rel = '.husky/pre-commit';
+  const abs = join(projectPath, '.husky', 'pre-commit');
+  const none = { state: 'none', replaced: 0, kept: [], recorder: null };
+  if (!existsSync(abs)) return none;
+
+  let content;
+  try {
+    content = readFileSync(abs, 'utf-8');
+  } catch (e) {
+    return { ...none, state: 'error', error: e.message };
+  }
+  if (!hasBareUdsRunner(content)) return none;
+
+  const eol = content.includes('\r\n') ? '\r\n' : '\n';
+  const lines = content.split('\n');
+  const out = [];
+  const kept = [];
+  let replaced = 0;
+
+  for (let i = 0; i < lines.length; i++) {
+    const text = lines[i].replace(/\r$/, '');
+    const next = i + 1 < lines.length ? lines[i + 1].replace(/\r$/, '').trim() : null;
+    // Marker line directly followed by a line UDS is known to have written.
+    if (text.trim() === UDS_HOOK_MARKER && next !== null && UDS_WRITTEN_LEGACY_LINES.has(next)) {
+      const block = buildPreCommitBlock({ args: UDS_WRITTEN_LEGACY_LINES.get(next) });
+      // block ends with '\n'; drop that so the surrounding line join supplies it.
+      out.push(...block.replace(/\n$/, '').split('\n').map((l) => l + (eol === '\r\n' ? '\r' : '')));
+      replaced += 1;
+      i += 1; // the legacy command line is consumed
+      continue;
+    }
+    if (BARE_UDS_RUNNER_RE.test(text)) kept.push({ line: i + 1, text: text.trim() });
+    out.push(lines[i]);
+  }
+
+  if (replaced === 0) return { state: 'kept', replaced: 0, kept, recorder: null };
+
+  if (plan) return { state: 'would-migrate', replaced, kept, recorder: null };
+
+  // Was the whole file provably UDS's until now? Then the swap must not cost it
+  // that proof: re-record the new content, or uninstall falls back from "delete
+  // the file UDS created" to "strip lines".
+  let recorder = null;
+  const wasProven = !!manifest && !!getFileRecord(manifest, rel) && proveUnchanged(manifest, projectPath, rel).state === 'proven';
+
+  try {
+    writeFileSync(abs, out.join('\n'), 'utf-8');
+  } catch (e) {
+    return { state: 'error', replaced: 0, kept, recorder: null, error: e.message };
+  }
+  if (wasProven) {
+    recorder = newRecorder();
+    recordFile(recorder, projectPath, rel, RECORD_KINDS.GIT_HOOK);
+  }
+  return { state: 'migrated', replaced, kept, recorder };
+}

package/src/utils/open-work-tracking.mjs

@@ -44,6 +44,19 @@
  *                                             could not apply (command, test
  *                                             name, identifier)
  *                            unnamed          VIOLATION — the only failure
+ *                          A field is read in three shapes, all through the one
+ *                          VOCAB.nextAction list: a heading section, an inline
+ *                          "Next action: ..." label, and EVERY ROW of a table column whose
+ *                          header is in that list (each report carries the line and the
+ *                          row's first cell, so it can be found).
+ *                          Not evaluated, counted: an empty cell, `-`, `—`, `n/a`, `none`,
+ *                          `done`. OWT-019 is NOT violated by them: it judges a next action
+ *                          that was written; "no next action written" is another failure
+ *                          this check does not decide (a finished item has none either).
+ *                          Undecidable, listed: a table row whose cell count differs from its
+ *                          header (a stray or missing `|`). It is neither judged nor read as
+ *                          empty. A violation elsewhere still exits 1; otherwise the exit is 2,
+ *                          because "no violation found" would then cover only part of the field.
  *   revision      OWT-018  the acceptance/goal/constraint sections changed
  *                          between two versions of a carrier; a NEW revision
  *                          record (change, approver, reason) must exist. No
@@ -75,8 +88,8 @@
  * (--id-pattern) and read the heading vocabulary as a starting point.
  *
  * Exit codes: 0 no violation · 1 violation · 2 cannot decide (no structure
- * found, git failed, or this script's own self-test arms failed). 2 is NOT a
- * pass.
+ * found, a next-action table row could not be read, git failed, or this
+ * script's own self-test arms failed). 2 is NOT a pass.
  *
  * Usage (`uds` from the npm package, or the repo shim; same arguments):
  *   uds open-work next-action <file...> [--root DIR] [--id-pattern RE]
@@ -97,7 +110,16 @@ import { fileURLToPath } from 'node:url';
 
 export const VOCAB = {
   revision: /revision|change[\s-]?log|amendment|history|修訂|變更紀錄|變更記錄|修改紀錄|修改記錄|異動/i,
-  nextAction: /next[\s-]?(action|step)s?|下一步|下一動/i,
+  // ONE list of "next action" words. It is read three ways and there is no second copy:
+  // a heading (classifyHeading), a table column header (extractNextActions) and an inline
+  // label ("Next action: ...", built from .source below). Keep it free of capture groups:
+  // the label regex embeds it and reads its own group 1.
+  // 回來要做什麼 ("what to do when you come back") is the header the dev-platform worklog's
+  // main table actually uses (DEC-122 H2 baseline carrier); that file describes the column as
+  // 下一動 in prose but the header text drifted. Added because a header outside this list is
+  // invisible to the check, which is the failure DEC-122 measured. Adopter-specific and
+  // UNCALIBRATED (OWT-016); an adopter whose header differs adds its own word here.
+  nextAction: /next[\s-]?(?:action|step)s?|下一步|下一動|回來要做什麼/i,
   progress: /\bprogress\b|\bstate\b|\bblockers?\b|\bblocked\b|進度|現況|卡在/i,
   intent: /acceptance|criteria|\brequirements?\b|\bgoals?\b|objectives?|constraints?|驗收|需求|目標|限制/i,
   // revision-table columns / labelled list fields
@@ -198,14 +220,58 @@ function innermost(stack) {
 
 const norm = (s) => s.replace(/\s+/g, ' ').trim();
 
+/** A table line may sit inside a Markdown blockquote ("> | a | b |"): drop the quote marker. */
+const unquote = (line) => line.replace(/^\s*(?:>\s?)+/, '');
+
+/** Index of the closing backtick run of exactly `n` backticks at or after `from`, or -1. */
+function closingRun(t, from, n) {
+  let j = from;
+  while (j < t.length) {
+    if (t[j] !== '`') { j++; continue; }
+    let m = 0;
+    while (t[j + m] === '`') m++;
+    if (m === n) return j;
+    j += m;
+  }
+  return -1;
+}
+
+/**
+ * Split one table row into cells. A `|` does NOT split a cell when it is escaped (`\|`) or
+ * sits inside a code span that closes on the same line. The second rule is deliberately
+ * looser than GFM (which splits inside code unless escaped): a hand-written note such as
+ * `tar -tzf \| grep` or `a|b` in backticks means one cell, and splitting it would shift
+ * every later column and misread the next-action cell. An unclosed backtick is literal.
+ */
 function splitRow(line) {
-  let t = line.trim();
+  let t = unquote(line).trim();
   if (t.startsWith('|')) t = t.slice(1);
-  if (t.endsWith('|')) t = t.slice(0, -1);
-  return t.split(/(?<!\\)\|/).map((c) => norm(c.replace(/\\\|/g, '|')));
+  const cells = [];
+  let cur = '';
+  let lastDelim = false;
+  let i = 0;
+  while (i < t.length) {
+    const ch = t[i];
+    lastDelim = false;
+    if (ch === '\\' && t[i + 1] === '|') { cur += '|'; i += 2; continue; }
+    if (ch === '`') {
+      let n = 0;
+      while (t[i + n] === '`') n++;
+      const close = closingRun(t, i + n, n);
+      if (close !== -1) { cur += t.slice(i, close + n).replace(/\\\|/g, '|'); i = close + n; continue; }
+      cur += '`'.repeat(n);
+      i += n;
+      continue;
+    }
+    if (ch === '|') { cells.push(cur); cur = ''; lastDelim = true; i++; continue; }
+    cur += ch;
+    i++;
+  }
+  if (!lastDelim) cells.push(cur); // a trailing unescaped `|` closes the row; it opens no cell
+  return cells.map(norm);
 }
 
-const isSepRow = (line) => /^\s*\|?[\s:|-]+\|?\s*$/.test(line) && /-/.test(line);
+const isSepRow = (line) => /^\s*\|?[\s:|-]+\|?\s*$/.test(unquote(line)) && /-/.test(line);
 
 /** Tables among annotated lines: [{header, rows:[{cells, idx}]}] */
 function findTables(lines) {
@@ -213,12 +279,12 @@ function findTables(lines) {
   let k = 0;
   while (k < lines.length) {
     const l = lines[k];
-    if (!l.inFence && !l.fence && !l.front && l.text.trim().startsWith('|') && k + 1 < lines.length
-      && isSepRow(lines[k + 1].text) && lines[k + 1].text.trim().startsWith('|')) {
+    if (!l.inFence && !l.fence && !l.front && unquote(l.text).trim().startsWith('|') && k + 1 < lines.length
+      && isSepRow(lines[k + 1].text) && unquote(lines[k + 1].text).trim().startsWith('|')) {
       const header = splitRow(l.text);
       const rows = [];
       let j = k + 2;
-      while (j < lines.length && lines[j].text.trim().startsWith('|')) {
+      while (j < lines.length && unquote(lines[j].text).trim().startsWith('|')) {
         rows.push({ cells: splitRow(lines[j].text), idx: j });
         j++;
       }
@@ -456,24 +522,45 @@ export function classifyNextAction(text, opts = {}) {
   };
 }
 
-/** Find "next action" fields in a carrier. @returns {{fields:number, items:{text:string,where:string}[]}} */
+const clip = (s, n) => (s.length > n ? `${s.slice(0, n)}…` : s);
+
+/**
+ * Find "next action" fields in a carrier. Three shapes are read, all through the ONE
+ * vocabulary VOCAB.nextAction: a heading section, an inline label, and a table column whose
+ * HEADER is in that vocabulary (every row of that column is one field).
+ *
+ * A table row whose cell count differs from the header's is returned in `ragged`, not in
+ * `items`: after a stray or missing `|` the next-action cell cannot be told from its
+ * neighbour, and reading an absent cell as "empty" would turn a broken row into a quiet
+ * "no next action written". It is neither judged nor dropped: the caller counts and lists it.
+ * @returns {{fields:number, items:{text:string,where:string}[], ragged:{where:string,cells:number,expected:number}[]}}
+ */
 export function extractNextActions(md) {
   const lines = parseDoc(md);
   const items = [];
+  const ragged = [];
   let fields = 0;
   const tableIdx = new Set();
   const headerIdx = new Set();
   const tables = findTables(lines);
 
   for (const t of tables) {
-    const col = t.header.findIndex((c) => VOCAB.nextAction.test(c));
-    const hasCol = col >= 0;
+    // every header cell in the shared vocabulary is a next-action column (usually exactly one)
+    const cols = t.header.map((c, n) => (VOCAB.nextAction.test(c) ? n : -1)).filter((n) => n >= 0); // [mutation-anchor:table-header]
+    const hasCol = cols.length > 0;
     tableIdx.add(t.headerIdx); tableIdx.add(t.headerIdx + 1); headerIdx.add(t.headerIdx);
     t.rows.forEach((r) => tableIdx.add(r.idx));
     if (hasCol) {
       for (const r of t.rows) {
-        fields++;
-        items.push({ text: r.cells[col] || '', where: `table column "${t.header[col]}" (line ${r.idx + 1})` });
+        const who = `row "${clip(r.cells[0].replace(/\*\*|__/g, ''), 40)}"`;
+        if (r.cells.length !== t.header.length) {
+          ragged.push({ idx: r.idx, where: `table row (line ${r.idx + 1}, ${who})`, cells: r.cells.length, expected: t.header.length });
+          continue;
+        }
+        for (const col of cols) {
+          fields++;
+          items.push({ text: r.cells[col], where: `table column "${t.header[col]}" (line ${r.idx + 1}, ${who})` });
+        }
       }
     }
     // rows inside a nextAction-class section are handled by the section walk below
@@ -481,12 +568,16 @@ export function extractNextActions(md) {
   }
 
   // inline labelled  "**Next action**: ..." (outside tables that have their own column)
-  const labelRe = /(?:\*\*|__)?(?:next[\s-]?(?:action|step)s?|下一步|下一動)(?:\*\*|__)?\s*[:：]\s*(.+)$/i;
+  const labelRe = new RegExp(`(?:\\*\\*|__)?(?:${VOCAB.nextAction.source})(?:\\*\\*|__)?\\s*[:：]\\s*(.+)$`, 'i');
   const colTableRows = new Set();
-  for (const t of tables) if (t.hasNextActionColumn) t.rows.forEach((r) => colTableRows.add(r.idx));
+  // Only rows read through the column are exempt from the label scan. A ragged row was not
+  // read, so an inline "Next action: ..." inside it must still be seen (else it goes dark).
+  const raggedIdx = new Set(ragged.map((g) => g.idx));
+  for (const t of tables) if (t.hasNextActionColumn) t.rows.forEach((r) => { if (!raggedIdx.has(r.idx)) colTableRows.add(r.idx); });
   lines.forEach((l, idx) => {
     if (l.front || l.fence || l.inFence || l.heading || l.cls === 'nextAction' || colTableRows.has(idx)) return;
-    const m = labelRe.exec(l.text);
+    // a label inside a table row reads to the end of the row, not into its closing pipe
+    const m = labelRe.exec(unquote(l.text).trim().startsWith('|') ? l.text.replace(/\s*\|\s*$/, '') : l.text);
     if (m && !/^\s*$/.test(m[1])) { fields++; items.push({ text: m[1], where: `label (line ${idx + 1})` }); }
   });
 
@@ -522,14 +613,15 @@ export function extractNextActions(md) {
     if (sec.length === 0) items.push({ text: '', where: `section "${owner.heading}" (empty)` });
     for (const s of sec) items.push({ text: s, where: `section "${owner.heading}"` });
   }
-  return { fields, items };
+  return { fields, items, ragged };
 }
 
 export function checkNextActions(carriers, opts = {}) {
-  const res = { walked: 0, empty: 0, counts: { 'named-resolved': 0, 'named-unresolved': 0, unnamed: 0 }, violations: [], detail: [], noFieldCarriers: [] };
+  const res = { walked: 0, empty: 0, counts: { 'named-resolved': 0, 'named-unresolved': 0, unnamed: 0 }, violations: [], detail: [], noFieldCarriers: [], undecidable: [] };
   for (const c of carriers) {
-    const { fields, items } = extractNextActions(c.content);
-    if (fields === 0) { res.noFieldCarriers.push(c.path); continue; }
+    const { fields, items, ragged } = extractNextActions(c.content);
+    for (const g of ragged) res.undecidable.push({ path: c.path, ...g });
+    if (fields === 0 && ragged.length === 0) { res.noFieldCarriers.push(c.path); continue; }
     for (const it of items) {
       const text = it.text.replace(/\*\*|__/g, '').trim();
       if (EMPTY_FIELD.test(text)) { res.empty++; continue; }
@@ -557,6 +649,11 @@ export function runSelfTest() {
   expect('D2 clean: identifier', classifyNextAction('finish XSPEC-436 R1', {}).status !== 'unnamed');
   expect('D2 clean: test name', classifyNextAction('make the test "a next action that names nothing is reported" pass', {}).status !== 'unnamed');
 
+  // OWT-019, table columns: the header decides which column is read, never the position
+  const tbl = extractNextActions('| item | state | Next action |\n|---|---|---|\n| a | open | keep going |\n');
+  expect('D2 clean: only the header-named column is a next-action field', tbl.fields === 1 && tbl.items[0].text === 'keep going');
+  expect('D2 clean: a table without such a header has no next-action field', extractNextActions('| item | state |\n|---|---|\n| a | open |\n').fields === 0);
+
   // OWT-018
   const spec = (ac, rev) => `# S\n\n## Acceptance criteria\n\n${ac}\n\n## Revisions\n\n${rev}\n`;
   const table = (rows) => `| Change | Approver | Reason |\n|---|---|---|\n${rows}`;
@@ -639,12 +736,16 @@ export function main(argv, io = { log: console.log, err: console.error }) {
       if (!files.length) { say('[owt] next-action: no files given'); return finish(2); }
       const res = checkNextActions(files.map(readCarrier), { root, idPattern });
       say(`[owt] OWT-019 walked ${res.walked} next-action field(s) in ${files.length} carrier(s); ${res.empty} empty/done field(s) not evaluated; ${res.noFieldCarriers.length} carrier(s) had no next-action field`);
-      say(`[owt]   named-resolved=${res.counts['named-resolved']} named-unresolved=${res.counts['named-unresolved']} unnamed=${res.counts.unnamed}`);
+      say(`[owt]   named-resolved=${res.counts['named-resolved']} named-unresolved=${res.counts['named-unresolved']} unnamed=${res.counts.unnamed} undecidable-table-rows=${res.undecidable.length}`);
       for (const d of res.detail) say(`[owt]   ${d.status.padEnd(16)} ${d.path} ${d.where}: ${d.text.slice(0, 80)}${d.kinds.length ? '  <- ' + d.kinds.map((k) => `${k.kind}:${k.value}`).join(', ') : ''}`);
       for (const v of res.violations) say(`[owt] VIOLATION OWT-019: ${v.path} ${v.where} names no file path, test name, command or requirement identifier: "${v.text.slice(0, 80)}"`);
+      for (const u of res.undecidable) say(`[owt] UNDECIDABLE: ${u.path} ${u.where} has ${u.cells} cell(s) but its header has ${u.expected}; the next-action cell cannot be located, so the row is neither judged nor counted as empty`);
       say(`[owt] ${COVERAGE_NOTE}`);
       say(`[owt] ${UNCALIBRATED_NOTE}`);
       if (res.walked + res.empty === 0) { say('[owt] CANNOT DECIDE: no next-action field found in any carrier (walked 0). Exit 2 is not a pass.'); return finish(2); }
+      // A violation is a definite answer whatever else is unreadable. Absent one, a row we could
+      // not read means "no violation found" is not "no violation": exit 2, never a green 0.
+      if (!res.violations.length && res.undecidable.length) { say(`[owt] CANNOT DECIDE: ${res.undecidable.length} table row(s) could not be read (see UNDECIDABLE above), so a clean result would cover only part of the field. Exit 2 is not a pass.`); return finish(2); }
       return finish(res.violations.length ? 1 : 0);
     }
     if (cmd === 'revision') {

package/standards-registry.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "version": "6.14.0-beta.2",
+  "version": "6.14.0-beta.3",
   "lastUpdated": "2026-05-13",
   "description": "Standards registry for universal-dev-standards with integrated skills and AI-optimized formats",
   "formats": {
@@ -58,14 +58,14 @@
     "standards": {
       "name": "universal-dev-standards",
       "url": "https://github.com/AsiaOstrich/universal-dev-standards",
-      "version": "6.14.0-beta.2"
+      "version": "6.14.0-beta.3"
     },
     "skills": {
       "name": "universal-dev-standards",
       "url": "https://github.com/AsiaOstrich/universal-dev-standards",
       "localPath": "skills",
       "rawUrl": "https://raw.githubusercontent.com/AsiaOstrich/universal-dev-standards/main/skills",
-      "version": "6.14.0-beta.2",
+      "version": "6.14.0-beta.3",
       "note": "Skills are now included in the main repository under skills/"
     }
   },
@@ -2295,7 +2295,7 @@
       "id": "license-compliance",
       "name": "License Compliance Standards",
       "nameZh": "授權合規標準",
-      "version": "6.14.0-beta.2",
+      "version": "6.14.0-beta.3",
       "source": {
         "human": "core/license-compliance.md",
         "ai": "ai/standards/license-compliance.ai.yaml"
@@ -2307,7 +2307,7 @@
       "id": "verification-oracle",
       "name": "Verification Oracle Standards",
       "nameZh": "驗證 Oracle 標準",
-      "version": "6.14.0-beta.2",
+      "version": "6.14.0-beta.3",
       "source": {
         "human": "core/verification-oracle.md",
         "ai": "ai/standards/verification-oracle.ai.yaml"
@@ -2319,7 +2319,7 @@
       "id": "model-provenance",
       "name": "Model Provenance Policy Standards",
       "nameZh": "模型來源政策標準",
-      "version": "6.14.0-beta.2",
+      "version": "6.14.0-beta.3",
       "source": {
         "human": "core/model-provenance.md",
         "ai": "ai/standards/model-provenance.ai.yaml"
@@ -2331,7 +2331,7 @@
       "id": "resource-cost-boundary",
       "name": "Resource / Cost Boundary Declaration Standards",
       "nameZh": "資源／成本邊界宣告標準",
-      "version": "6.14.0-beta.2",
+      "version": "6.14.0-beta.3",
       "source": {
         "human": "core/resource-cost-boundary.md",
         "ai": "ai/standards/resource-cost-boundary.ai.yaml"