Port the pack from bash to TypeScript, with tests and CI

.github/workflows/ci.yml

@@ -0,0 +1,77 @@
+name: ci
+
+# macOS only, deliberately: mcs is a Swift/Homebrew tool that installs on macOS,
+# so it is the only platform that can actually install this pack. The suite runs
+# the hooks exactly as mcs does, by executing them and letting the shebang pick
+# the interpreter.
+on:
+  push:
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    strategy:
+      fail-fast: false
+      matrix:
+        # 22.6 is the floor: `--experimental-strip-types` does not exist below it,
+        # and a bare '22' resolves to current 22.x, which cannot reach that range.
+        node: ['22.6.0', '22', '24']
+    runs-on: macos-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node }}
+
+      - name: node is new enough to strip types
+        run: |
+          command -v git >/dev/null || { echo "::error::git is required"; exit 1; }
+          node --experimental-strip-types -e 'const [maj, min] = process.versions.node.split(".").map(Number);
+            if (maj < 22 || (maj === 22 && min < 6)) { console.error("::error::node " + process.versions.node + " cannot strip types"); process.exit(1); }
+            console.log("node " + process.versions.node + " strips types");'
+
+      - name: install typecheck deps (CI-only, never shipped)
+        run: npm install --no-save --silent typescript@5.9.2 @types/node@22.9.0
+
+      - name: typecheck
+        run: npm run typecheck
+
+      - name: unit, contract and behaviour tests
+        run: npm test
+
+      # A migration artifact: it pinned the premise that commit subjects were
+      # unchanged by the port. Cheap to keep, not load-bearing going forward.
+      - name: the hostname equivalence holds on this runner
+        run: |
+          from_shell=$(hostname -s)
+          from_node=$(node -e 'process.stdout.write(require("node:os").hostname().split(".")[0])')
+          echo "shell='$from_shell' node='$from_node'"
+          [ "$from_shell" = "$from_node" ] || { echo "::error::hostname -s and os.hostname() disagree"; exit 1; }
+
+      # The pack contains no shell at all. Hooks and pack scripts are TypeScript
+      # executed through their shebang.
+      - name: no shell crept back in
+        run: |
+          stray=$(find . -name '*.sh' -not -path './node_modules/*' -not -path './.git/*' || true)
+          if [ -n "$stray" ]; then
+            echo "::error::this pack contains no shell scripts"
+            echo "$stray"
+            exit 1
+          fi
+
+      # A test that writes outside its temp dir is a bug wherever it lands.
+      - name: the test run left the working tree clean
+        run: |
+          residue=$(git status --porcelain --untracked-files=all)
+          if [ -n "$residue" ]; then
+            echo "::error::the test run left files behind"
+            echo "$residue"
+            exit 1
+          fi

.gitignore

@@ -7,3 +7,6 @@
 *.swo
 .idea/
 .vscode/
+
+# Node typecheck deps (CI + local only; runtime is zero-deps)
+node_modules/

commands/approve-memories.md

@@ -14,7 +14,7 @@ Run `git -C .claude/.memories-repo status --porcelain -- memories/` and `git -C
 
 ## 2. Filename guardrail
 
-Every dirty file under `memories/` must match `^memories/(learning|decision)_[a-zA-Z0-9_-]+\.md$` — the same pattern the Stop hook enforces (keep in sync with `hooks/memories_autopush.sh` `allowed_pattern`, `hooks/memories_announce.sh` regex, and `scripts/configure-memories.sh` `allowed_pattern`). If any file fails, list the offenders, instruct the user to rename them to `memories/learning_<topic>_<specific>.md` or `memories/decision_<domain>_<topic>.md`, and stop without committing.
+Every dirty file under `memories/` must match `^memories/(learning|decision)_[a-zA-Z0-9_-]+\.md$` — the same pattern the Stop hook enforces, defined once in `runtime/lib/naming.mts`. If any file fails, list the offenders, instruct the user to rename them to `memories/learning_<topic>_<specific>.md` or `memories/decision_<domain>_<topic>.md`, and stop without committing.
 
 ## 3. Stage, commit, push