Wave-2 W2-10 cluster B: 4-surface census + junk-state fixes for apps 27-52 (domains..projects)

[andrei-hasna]

Wave-2 lane W2-10 — cluster B: 4-surface census + fixes for apps 27–52 (domains → projects)

Refs task 44b5f90e. Claim note: that short id does not resolve on the todos authority (verified against all 63,539 tasks via todos list --all and a direct /v1/tasks/44b5f90e probe — zero occurrences; the parent wave-2 coordination message is conversations 709253). The mission text in the dispatch brief is self-contained, so the lane proceeded. Worktree: deepsec2-10-cluster-b.

Census (26 apps — apps 27–52 by ls order; contracts falls at #20, outside this quarter, owned by W2-8)

Legend: cli/mcp/serve/sdk from bin + exports + repo-standard suite; pub = published on npm at time of check. Registry versions verified via npm view.

app	pkg	npm	cli	mcp	serve	sdk	notes
domains	@hasna/domains 0.0.39	0.0.39 ✅	✅	✅	✅	✅
draw	@hasna/draw 0.1.0	0.1.0 ✅	✅	—	—	—	library-shaped; excused in suite (SDK lane c7ce8b75)
economy	@hasna/economy 0.3.9	0.3.10 (behind)	✅	✅	✅	—	economy-otel bin exception tracked (todos 2a70ece0)
emails	@hasna/emails 1.3.15	1.3.15 ✅	✅	✅	✅	—	SDK lane; contracts exception e0ef3e32
evals	@hasna/evals 0.2.0	0.2.0 ✅	✅	✅	✅	—	repo URL points at retired hasna/open-evals (archived) — P3
events	@hasna/events 0.1.15	0.1.15 ✅	✅	—	—	—	hasna-events alias bin exception tracked (todos 9b78ba7e); 13 committed dist files
feedback	@hasna/feedback 0.3.0	0.3.0 ✅	✅	✅	✅	—
files	@hasna/files 0.3.16	0.3.16 ✅	✅	✅	✅	✅
fleet	@hasna/fleet 0.1.0	0.1.0 ✅	✅	✅	✅	—
gateway	@hasna/gateway 0.1.8	0.1.8 ✅	✅	✅	✅	—
guardrails	@hasna/guardrails 0.2.0	0.2.0 ✅	✅	—	—	✅	library-shaped
holdings	@hasna/holdings 0.1.2	0.1.2 ✅	✅	✅	✅	—
hooks	@hasna/hooks 0.6.8	0.6.8 ✅	✅	—	✅	—	fixed here: 2 committed runtime state files
instructions	@hasna/instructions 0.4.35	0.4.36 (behind)	✅	✅	✅	—	configs bin aliases; nested sdk/ is a separate package, unpublished (@hasna/markdown-sdk-style, not in workspace globs) — P3
knowledge	@hasna/knowledge 0.2.106	0.2.106 ✅	✅	✅	✅	✅	62 committed dist/d.ts files
logs	@hasna/logs 0.4.5	0.4.5 ✅	✅	✅	✅	—
loops	@hasna/loops 0.5.1	0.5.1 ✅	✅	✅	✅	✅
machines	@hasna/machines 0.2.27	0.2.27 ✅	✅	✅	✅	✅	6 committed test .d.ts.map files; @hasna/open-chrome browserplan constant references an unpublished package (see P3 list)
markdown	@hasna/markdown 0.1.18	0.1.18 ✅	✅	✅	✅	—	repo URL → retired hasna/open-markdown (archived) — P3; separate sdk/ subpackage @hasna/markdown-sdk unpublished
mcps	@hasna/mcps 0.0.31	0.0.31 ✅	✅	✅	—	—	CLI-only member
mementos	@hasna/mementos 0.14.84	0.14.84 ✅	✅	✅	✅	✅	fixed here: internal-infra lineage marker removed
models	@hasna/models 0.0.8	0.0.8 ✅	✅	—	—	—	library-shaped
monitor	@hasna/monitor 0.1.26	0.1.26 ✅	✅	✅	—	—	bins monitor-server/monitor-web undeclared in manifest — tracked (todos d2c6d20f); repo URL → retired hasna/open-monitor (archived) — P3
orgs	@hasna/orgs 0.1.0	0.1.0 ✅	✅	—	—	—	legacy open-orgs bin alias kept deliberately (npm 0.1.0 ships it; not renamable while published)
pixels	@hasna/pixels 0.1.0	0.1.0 ✅	✅	✅	—	—
projects	@hasna/projects 0.1.131	0.1.130 (ahead)	✅	✅	✅	✅

Name/dir conformance: all 26 members @hasna/<dir> kebab-case — 0 violations (check:names over 81 members: 0 violations).

4-surface verdict: 26/26 have the HARD <name> CLI bin. mcp 17/26, serve 14/26, sdk 8/26 — every gap is a recorded, reasoned exception in tooling/ci/tests/standard/census.ts (library/CLI-only shapes, SDK lane c7ce8b75), not a defect to fix in this lane.

Fixes in this PR (P2s, published-artifact and public-tree hygiene)

1. hooks: remove 2 committed runtime state files (<db>:heartbeat_state:<session-uuid>). Literal template-placeholder filenames with February session snapshots at package root; the files: ["hooks/", ...] glob ships them into the tarball. Zero references anywhere in src/bin/docs. Pure deletion, 24 lines.
2. mementos: remove mementos_authority_lineage_candidate.md — a landed-work candidate record carrying internal-infra identifiers (hasnaxyz/iapp-mementos, live ECS diagnostic task id) in the public tree. Not tarball-shipped, but public-tree internal-infra identifiers are what the publish-guard exists to keep out; the underlying work is landed and git history preserves the record.

Tests / typecheck sample

• bun run check → rc=0 (names 0 violations · secrets 0 findings · manifests · publish-guard 81 members, 0 internal-infra strings) — run before AND after the changes.
• bun run test:standard (4-surface suite) → 18 pass / 0 fail.
• hooks suite: 1365 pass / 11 fail — all 11 in codework-native-common.test.ts fail on the fixture environment (git commit in temp dirs trips a missing lefthook PATH error, pre-existing, environment-specific, unrelated to this diff; the suite's own baseline on a clean CI box passes).
• orgs 24/24 pass; pixels 102/102 pass.
• typecheck sample (orgs, markdown, monitor, events, economy, mementos, guardrails, hooks, pixels) → all rc=0, 0 TS errors.

P3 deferred (list, no action)

• economy (local 0.3.9 < npm 0.3.10) and instructions (0.4.35 < 0.4.36), projects (0.1.131 > npm 0.1.130): version-skew rows belong to the release-train lane (todos aaef650b), not a census PR.
• Stale repo URLs pointing at retired/archived upstreams: evals, markdown, monitor (+ instructions' nested sdk open-configs). Cosmetic; touch only with a repo-URL sweep that covers the whole tree.
• events/knowledge/machines committed dist/.d.ts/.map files — pre-existing faithful-import residue; wholesale dist removal is a per-package decision needing a publish-impact check, out of census scope.
• @hasna/open-chrome browserplan constant in machines references an npm name that 404s today; the name is documented as the BrowserPlan distribution source of truth — flagging, not changing.
• hooks README/docs open-configs references: prose only, the tool is @hasna/instructions.

No name/dir renames were needed (all conform). No ./sdk additions (gaps are recorded exceptions). No merge — leaving for review.

Agent: deepsec

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}