feat(detection-core): package-rooted entry packs wired into JS recognition; fact digest covers packs (8.2 part 2)

benchmarks/measurements/2026-10-30-recognition-coverage/NOTES.md

@@ -24,3 +24,14 @@ jaxrs, symfony, livewire, laravel, remix, tornado. **0/12 pilot repos covered.**
 First fact-pack target: **express** (5 repos; covers 2 of the 3 in-family access_control
 pilot cases: dbhub, matrix). Script: /tmp/opencode/recognition_table_71.py; raw:
 table.json.
+
+## Probe 2026-10-30 (engine wiring): handler extraction is the deeper gap
+
+The probe ran with built-in tokens only (pack wiring is package-rooted since this commit); route statements are found (matrix: 10, dbhub: several),
+but every one has `defines_handler=False` and a misidentified handler name (`res`,
+`None`) on `this.app.get('/health', this.getHealth.bind(this))`-style registrations.
+The prover consumes only entries with `defines_handler` + named handler + line, so all
+are ignored -- this is why the admission records showed zero frameworks for these repos.
+Raw probe: `probe-handler-extraction.txt`. Next increment: `_js_registration` /
+`_js_handler_name` must resolve `.bind(this)` and arrow handlers. The express pack is
+necessary (patterns) but not sufficient (handler identity).

benchmarks/measurements/2026-10-30-recognition-coverage/probe-handler-extraction.txt

@@ -0,0 +1,14 @@
+bytebase__dbhub: raw route entries=10
+   src/server.ts:208 name=None defines_handler=False fw=None
+   src/server.ts:216 name=next defines_handler=False fw=None
+   src/server.ts:247 name=arrow_handler defines_handler=False fw=None
+   src/server.ts:254 name=res defines_handler=False fw=None
+   src/server.ts:265 name=None defines_handler=False fw=None
+   src/server.ts:268 name=listSources defines_handler=False fw=None
+matrix-org__matrix-appservice-bridge: raw route entries=10
+   src/bridge.ts:1543 name=None defines_handler=False fw=None
+   src/components/media-proxy.ts:49 name=_res defines_handler=False fw=None
+   src/components/media-proxy.ts:53 name=None defines_handler=False fw=None
+   src/components/media-proxy.ts:54 name=res defines_handler=False fw=None
+   src/components/media-proxy.ts:57 name=None defines_handler=False fw=None
+   src/components/media-proxy.ts:62 name=None defines_handler=False fw=None

benchmarks/valid/arm_regression.py

@@ -44,11 +44,17 @@ def _sha256_bytes(payload: bytes) -> str:
 
 
 def fact_manifest_disk(directory: Path) -> dict[str, str]:
-    """Digest every TOML fact artifact under ``directory`` as it exists on disk."""
+    """Digest every fact artifact under ``directory`` as it exists on disk.
+
+    Covers ruleset TOMLs plus admitted entry-pack JSON files under ``entries/``, so a
+    pack is part of the frozen fact-set digest (2026-10-30 detection-core 8.2).
+    """
     manifest: dict[str, str] = {}
     for path in sorted(directory.rglob("*.toml")):
         if path.is_file():
             manifest[path.relative_to(directory).as_posix()] = _sha256_bytes(path.read_bytes())
+    for path in sorted((directory / "entries").glob("*.json")) if (directory / "entries").is_dir() else []:
+        manifest[path.relative_to(directory).as_posix()] = _sha256_bytes(path.read_bytes())
     return manifest