toplu 2026-10-22: N1 waves 8+9, docs, Node security floor, dev deps (no release) by AlbSar · Pull Request #109 · Verhex/deckent-next

AlbSar · 2026-10-22T01:09:53Z

Summary

No-release toplu after alpha.51: N1 dogfood waves 8+9 (10 tasks, done by Deckent alone, owner confirmed the batch cards) plus docs and owner decisions of 2026-10-21/22. Reaches live with the next release; no live/N1 switch for this PR.

Part	What
N1 wave 8	known-limits: MCP/terminal keep the previous build after a switch (w8a); TR worker/heartbeat wording (w8b); `lint-arch` graphs string-literal dynamic `import()` edges + cycle check (w8c, LINT-ARCH-DYNAMIC); shared delivery-queue e2e fixture (w8d)
N1 wave 9	guards: EN/TR doc heading+link parity (w9a), README `deckent` commands exist (w9b), README `npm run` scripts exist (w9c), unused i18n keys (w9d), identical EN/TR messages must be listed (w9e); hardcode ratchet −13, behaviour-neutral (w9f)
Node security (owner 2026-10-22)	engines `>=24.22.1 <25 \|\| >=26.12.1` (one patched floor per major; 2026-10-21 Node security release); doctor/init/setup name the floor per major, an unparsable range is never "supported"; Docker test fixture on patched node:24-trixie-slim (`43b9ba11`)
Dependency currency (owner 2026-10-22)	dev-only: vitest 5.0.5 (+vite 8.3.5), eslint 10.13.0, typescript-eslint 8.72.0, globals 17.13.0, @types/node 24.19.2 — deps-watch HIGH 1 / MEDIUM 6 → 0/0; fast-uri accepted risk (MCP SDK 2.3.1, not shipped) extended by the owner to 2026-11-21
Docs	alpha.51 released; OTONOM-TESLIM + delivery-card human summary move into beta; law 7 amended (local full suite only once, for a live-bound behaviour-changing candidate); beta transition = npm (`@verhex/deckent` direction) + docs + deckent.ai site

Evidence

Astra REVISE 2716 (one P2: two summaries still demanded a full suite per candidate) → fixed in 69d121ce → Astra PASS 2718 on 69d121ce; REVISE 2720 (CI fixture preflight; per-major Node floor) fixed → PASS 2723/2724/2726, final on 478af54f8fa9ccf55f779ec2363aad67347d4832.
Node floor + deps: targeted 40 files 498/498 (rerun; first run had one load-time Docker supervisor failure that passed alone on both fixtures); tooling + platform + delivery-queue-e2e with vitest 5.0.5, 72 files (pack-smoke-dist passed after rebuilding a stale dist); CI fixture script run locally rc 0.
Targeted tests (every test file in the delta + model-invocation/provider-catalog/assistant tests): 42 files, 384/384 passed, 0 skipped. typecheck, ESLint, lint-arch, lint-docs, lint-core-memory 0.
Each N1 task accepted by its own verification Run; lead host acceptance 10/10.
No local full suite (amended law 7: not live-bound, no runtime/contract/security change); hosted CI runs the full matrix.

Merge danger

Two-way door: revert is enough. No ledger, protocol, migration or policy-template change; no version bump. The Node floor refuses Node 25 and unpatched 24/26 with the existing warn-and-proceed message.
Blast radius: dev-host checks (lint-docs, lint-arch, new contract tests), TR strings in doctor/monitor/ops/surface catalogs (live only after the next release), development process docs.

🤖 Generated with Claude Code

https://claude.ai/code/session_01MVCYhVxjGrJacwZYq8dmGr

…, known-limits wording Co-Authored-By: Claude Haiku 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F5YNDbeQ65PMTyg1CHSFCv

…ent-flow drops finished 10-11 rows Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F5YNDbeQ65PMTyg1CHSFCv

Run: d50-w8-r2 Task: w8d Acceptance: Task accepted; criteria 1; run revision 23

…t alone) into toplu/2026-10-22 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F5YNDbeQ65PMTyg1CHSFCv

Run: d50-w8-r3 Task: w8a Acceptance: Task accepted; criteria 1; run revision 13

Run: d50-w8-r3 Task: w8b Acceptance: Task accepted; criteria 1; run revision 13

Run: d50-w8-r3 Task: w8c Acceptance: Task accepted; criteria 1; run revision 13

…er/heartbeat terms), w8c (lint-arch dynamic import edges) — Deckent alone Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F5YNDbeQ65PMTyg1CHSFCv

Run: d50-w9 Task: w9b Acceptance: Task accepted; criteria 1; run revision 25

Run: d50-w9 Task: w9c Acceptance: Task accepted; criteria 1; run revision 25

Run: d50-w9 Task: w9d Acceptance: Task accepted; criteria 1; run revision 25

Run: d50-w9 Task: w9e Acceptance: Task accepted; criteria 1; run revision 25

Run: d50-w9 Task: w9a Acceptance: Task accepted; criteria 1; run revision 25

Run: d50-w9 Task: w9f Acceptance: Task accepted; criteria 1; run revision 25

…to beta (owner 2026-10-22) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F5YNDbeQ65PMTyg1CHSFCv

…s, npm scripts, unused i18n, identical messages, ratchet −13) — Deckent alone Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F5YNDbeQ65PMTyg1CHSFCv

…nsition = npm + docs + site; LINT-ARCH-DYNAMIC closed by w8c Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F5YNDbeQ65PMTyg1CHSFCv

… by similarity to dedent; owner 2026-10-22) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F5YNDbeQ65PMTyg1CHSFCv

…w 7 (REVISE 2716 P2) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F5YNDbeQ65PMTyg1CHSFCv

claude

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review for a one-time review, or @claude review always to subscribe this PR to a review on every future push.

_{Tip: disable this comment in your organization's Code Review settings.}

… Docker test fixture on patched node:24-trixie-slim engines >=24.22.1 (Brotli out-of-bounds write, TLS hostname checks fixed in 24.22.1/26.12.1); doctor/init read the floor from the manifest. The floor check reads one >= bound, so an older 26.x still passes: known-limits names 26.12.1. Docker test fixture node@sha256:43b9ba11 (Node 24.22.1). Targeted: 21 files 118 passed, 1 skipped (host-acceptance probe), rc=0. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F5YNDbeQ65PMTyg1CHSFCv

…gest (REVISE 2720 P1) Local proof: GITHUB_ENV=<tmp> bash scripts/ci-docker-fixture.sh → rc 0, exports DECKENT_TEST_DOCKER_IMAGE=sha256:43b9ba11…. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F5YNDbeQ65PMTyg1CHSFCv

…26.12.1 (REVISE 2720 P2) assessNodeSupport reads || clauses (>=X.Y.Z with an optional <M); 24.22.0, 26.10, 26.12.0, 25.x are unsupported, 24.22.1 and 26.12.1 supported; an unparsable range or version stays unknown and setup maps anything but supported to below-floor (was: unknown → supported). Messages name the floors as text (24.22.1 / 26.12.1); init keeps warn-and-proceed. Docs follow the range. Targeted: 40 files 498/498 (second run; first run had one load-time Docker supervisor failure in delivery-queue-e2e that passed alone on both fixture images and in the rerun). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01MVCYhVxjGrJacwZYq8dmGr

…3.5, closes 1 HIGH + 6 MEDIUM dev advisories), eslint 10.13.0, typescript-eslint 8.72.0, globals 17.13.0, @types/node 24.19.2 deps-watch 2026-10-22: before HIGH 1 / MEDIUM 6 / LOW 1, after 0/0/0 (MITIGATED 18 unchanged: fast-uri in MCP SDK 2.3.1, accepted until 2026-10-29). dependencies.json reviewedVersion/lastReview updated; dependencies.mjs 0, typecheck 0, eslint 0 errors (24 pre-existing max-lines warnings). Targeted with vitest 5.0.5: tests/contracts/tooling + platform + delivery-queue-e2e 72 files, 664 tests; pack-smoke-dist passed after rebuilding a stale dist left by the dropped alpha.52 build. Not taken: ink 8, react 19.3 (ink 7 reconciler pin), typescript 6/7 (DEPS-TS), zod 4 (planned migration), zod-to-json-schema 3.25.2 (runtime, rides with zod 4). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01MVCYhVxjGrJacwZYq8dmGr

…d 2026-10-22, expires 2026-11-21) MCP SDK has no release after 2.3.1 (2026-10-05); same not-shipped + own-validator conditions (FASTURI-OUT, MCP-SCHEMA-VALIDATOR). HIGH window 30 days from the decision. dependencies.mjs 0; deps-watch exit 0, 18 MITIGATED until 2026-11-21. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01MVCYhVxjGrJacwZYq8dmGr

…/ 26.12.1), not the raw engines range Hosted CI run 39776084743 tests (node 26, shard 12/16): tests/e2e/i18n-renderer.test.ts expected the manifest range as the error.node_version_low floor param; ab622d4 made it the floor text. Local: e2e i18n-renderer + kernel-config 23/23. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01MVCYhVxjGrJacwZYq8dmGr

AlbSar and others added 19 commits October 22, 2026 01:11

docs: alpha.51 released; PLAN now/next, owner decisions 2026-10-21/22…

581f965

…, known-limits wording Co-Authored-By: Claude Haiku 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F5YNDbeQ65PMTyg1CHSFCv

docs: monitor interaction gap to beta inputs (owner 2026-10-22); curr…

15f9aba

…ent-flow drops finished 10-11 rows Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F5YNDbeQ65PMTyg1CHSFCv

w8d

ebd1095

Run: d50-w8-r2 Task: w8d Acceptance: Task accepted; criteria 1; run revision 23

merge: N1 adoption w8d (T41 shared delivery-queue e2e fixture, Decken…

f041e20

…t alone) into toplu/2026-10-22 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F5YNDbeQ65PMTyg1CHSFCv

w8a

8fdc8d0

Run: d50-w8-r3 Task: w8a Acceptance: Task accepted; criteria 1; run revision 13

w8b

48ef04f

Run: d50-w8-r3 Task: w8b Acceptance: Task accepted; criteria 1; run revision 13

w8c

f456e92

Run: d50-w8-r3 Task: w8c Acceptance: Task accepted; criteria 1; run revision 13

merge: N1 adoptions w8a (known-limits MCP after switch), w8b (TR work…

ad8749f

…er/heartbeat terms), w8c (lint-arch dynamic import edges) — Deckent alone Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F5YNDbeQ65PMTyg1CHSFCv

w9b

862d92f

Run: d50-w9 Task: w9b Acceptance: Task accepted; criteria 1; run revision 25

w9c

cc8545d

Run: d50-w9 Task: w9c Acceptance: Task accepted; criteria 1; run revision 25

w9d

f4ce293

Run: d50-w9 Task: w9d Acceptance: Task accepted; criteria 1; run revision 25

w9e

cfb6113

Run: d50-w9 Task: w9e Acceptance: Task accepted; criteria 1; run revision 25

w9a

c65f509

Run: d50-w9 Task: w9a Acceptance: Task accepted; criteria 1; run revision 25

w9f

9acc3e2

Run: d50-w9 Task: w9f Acceptance: Task accepted; criteria 1; run revision 25

docs(plan): OTONOM-TESLIM and the delivery-card human summary move in…

a09ef7a

…to beta (owner 2026-10-22) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F5YNDbeQ65PMTyg1CHSFCv

docs: owner 2026-10-22 packaging and test-tier rule (law 7), beta tra…

99d1461

…nsition = npm + docs + site; LINT-ARCH-DYNAMIC closed by w8c Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F5YNDbeQ65PMTyg1CHSFCv

docs(plan): npm name direction @verhex/deckent (unscoped name blocked…

42fe7ed

… by similarity to dedent; owner 2026-10-22) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F5YNDbeQ65PMTyg1CHSFCv

docs: core-memory index and contributor-process follow the amended la…

69d121c

…w 7 (REVISE 2716 P2) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F5YNDbeQ65PMTyg1CHSFCv

claude Bot reviewed Oct 22, 2026

View reviewed changes

AlbSar and others added 5 commits October 22, 2026 04:26

AlbSar changed the title ~~toplu 2026-10-22: N1 waves 8+9 + docs after alpha.51 (no release)~~ toplu 2026-10-22: N1 waves 8+9, docs, Node security floor, dev deps (no release) Oct 22, 2026

AlbSar merged commit c6c4c02 into main Oct 22, 2026
74 of 77 checks passed

Navigation Menu

Repository navigation

toplu 2026-10-22: N1 waves 8+9, docs, Node security floor, dev deps (no release) - #109

toplu 2026-10-22: N1 waves 8+9, docs, Node security floor, dev deps (no release)#109
AlbSar merged 25 commits into
mainfrom
toplu/2026-10-22

AlbSar commented Oct 22, 2026 •

edited

Loading

Uh oh!

claude Bot left a comment

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

AlbSar commented Oct 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Evidence

Merge danger

Uh oh!

claude Bot left a comment

Choose a reason for hiding this comment

Claude Code Review

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

AlbSar commented Oct 22, 2026 •

edited

Loading