fix(core): report repo-qualified affects matchers instead of skipping them silently (#300)

[mbeacom]

Closes #300.

What and why

A repo-qualified affects matcher in a single-repository corpus can't apply, and it used to vanish without a finding. That's the worst kind of failure under ADR-0016. The comparison read a log input that no caller ever set (the issue blamed Adr.log, but it was ResolveAffectsInput.log).

• adr check and adr explain report each skipped matcher as affects-repo-not-applicable (info), and adr lint reports one per record, so a corpus-wide run surfaces it without needing a path. On this repo, ADR-0056's four resource matchers for mbeacom/adrkit-azure now print one info line in adr lint.
• info, no exit-code authority. ADR-0059 clause 11 names it that way, it matches affects-unresolvable, and exit codes read only error. --json output grows additively.
• Federation hook, prepared but not wired. matcherAppliesToMember(matcher, { log, repo } | undefined) replaces matcherAppliesToLog, and ResolveAffectsInput.log / CheckChangesInput.log become member?. That's a type-level change for a TypeScript caller of @adrkit/core that passed log. None did, so runtime behavior is unchanged, and the CHANGELOG says so.

Checklist

• DCO signed off.
• Recorded decision: ADR-0059 clause 11 (accepted), ADR-0016, and ADR-0022.
• Schema changed: n/a. I deliberately didn't edit adr.schema.ts, which is pinned.
• @adrkit/core changed, so packages/ci/dist is regenerated under linux/amd64 Bun 1.4.2. The non-reorder diff is only this change.
• Observed failing first (ADR-0016):
  • core: 9 of 12 failed against stubs (the 3 that passed guard unchanged behavior);
  • CLI: all 4 failed with core stashed;
  • mutations: always emitting, and changing the severity to warn.
• Full bun test: 4349 pass. typecheck, lint, check:deps, check:stale-refs, check:changelog, and adr lint (59 records, 0 errors, 0 warnings, 1 info) pass.

Notes for reviewers

• Re-baselined digest pin: the catalog-envelope pin for affects/index.ts only. The reason is in the test header, following Replace remaining localeCompare sorts on determinism-contract surfaces #115's precedent.
• Test change: lint.test.ts's live-corpus test now asserts there are no error or warn lines, instead of an empty stderr.
• Merge order with fix(core,evaluator): qualified relatesTo/conflictsWith are inert in lint; cross-repo supersession is an error everywhere (#299) #307: it also regenerates packages/ci/dist and adds a CHANGELOG entry. Whichever merges second gets rebased with its dist rebuilt.

[github-actions]

Decisions governing this change

11 accepted decisions govern this change

Show all 11 governing decisions and why each applies

• 0003 — Ship as a Spec Kit extension plus a standalone CLI, not a competing harness
  • via path: packages/cli/**
• 0009 — Pin affects resolution semantics and bind entity refs to pluggable catalogs
  • via path: packages/core/src/affects/**
• 0013 — Reconcile adapter isolation and catalog binding with the offline snapshot generator
  • via path: packages/core/src/affects/**
• 0016 — Require every check to be observed failing before it counts as coverage
  • via path: packages/*/test/**
  • via path: packages/core/src/validate/**
• 0022 — Scan inbound markers in check and CI without giving them exit-code authority
  • via path: packages/core/src/check/**
  • declared by packages/core/src/check/index.ts:1 (@adr 0022)
• 0029 — Scope Backstage publication as a downstream consumer, tiered on the entity-ownership mapping
  • via path: packages/catalog-envelope/**
  • via path: packages/core/src/affects/**
  • via path: packages/core/src/check/**
  • via path: packages/core/src/index.ts
• 0030 — Keep extension surfaces that carry a dependency tree outside this repository
  • via path: packages/ci/**
• 0031 — Publish a narrow consumer SDK as the contract, and document the CLI JSON as its sibling
  • via path: packages/core/src/index.ts
• 0035 — Execute the gates that certify a pull request from the default branch
  • via path: packages/ci/**
• 0036 — Expose the governing-decisions Action through one root Marketplace entry point
  • via path: packages/ci/dist/index.js
• 0041 — Regenerate committed artifacts on Dependabot pull requests with default-branch scripts behind a maintainer label
  • via path: packages/ci/dist/**

_{Links point at 770a0f0, this run's GITHUB_SHA. Run adr explain <path> locally to see why a file is governed.}

[Copilot]

🟡 Changes recommended

Member-aware checks can still emit the contradictory single-repository advisory when the qualified ADR itself changes.

1 open finding

• Filter repository-only lint advisories for federated members · New

What changed in this PR

Adds informational findings for repo-qualified affects matchers that cannot apply in single-repository runs.

Changes:

• Adds member-aware matcher resolution and lint advisories.
• Adds core/CLI coverage and updates public exports.
• Regenerates committed CI bundles and documents the change.

Decision-context MCP was unavailable, so ADR compliance was not independently verified.

File	Description
CHANGELOG.md	Documents the behavior and API change.
packages/​catalog-envelope/​test/​no-core-schema-change.test.ts	Explains the protected-surface update.
packages/​catalog-envelope/​test/​protected-surfaces.json	Updates the affects resolver digest.
packages/​ci/​dist/​index.js	Regenerates the governing-decisions bundle.
packages/​ci/​dist/​portal-action.js	Regenerates the portal Action bundle.
packages/​ci/​dist/​queue-action.js	Regenerates the queue Action bundle.
packages/​cli/​test/​lint.test.ts	Allows informational lint output.
packages/​cli/​test/​repo-qualified-matchers.test.ts	Tests CLI advisory behavior.
packages/​core/​src/​affects/​index.ts	Adds member-aware matching and findings.
packages/​core/​src/​check/​index.ts	Passes member identity into resolution.
packages/​core/​src/​index.ts	Exports the new validator.
packages/​core/​src/​validate/​affects-repo-qualifier.ts	Adds corpus-wide qualifier validation.
packages/​core/​src/​validate/​index.ts	Runs the new lint validation.
packages/​core/​test/​affects-repo.test.ts	Tests resolution, lint, and federation behavior.
packages/​core/​test/​surface.test.ts	Updates public runtime export expectations.

🧠 Review effort: Balanced