@dzhechkov/harness-cli 0.3.235 → 0.3.236

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dzhechkov/harness-cli",
-  "version": "0.3.235",
+  "version": "0.3.236",
   "description": "The dz CLI — install AI skills for Claude Code, Codex, OpenCode, Hermes, OpenClaude, GitHub Copilot. 35 commands, 13 presets, 6 platform targets.",
   "type": "module",
   "license": "MIT",
@@ -57,7 +57,7 @@
     "@dzhechkov/skills-reverse-engineering": "^0.1.0",
     "@dzhechkov/skills-presentation-storyteller": "^0.1.0",
     "@dzhechkov/skills-website-cloner": "^0.1.0",
-    "@dzhechkov/harness-core": "0.3.126"
+    "@dzhechkov/harness-core": "0.3.127"
   },
   "devDependencies": {
     "@types/node": "^25.6.0",

package/sbom.json

@@ -9,86 +9,6 @@
     }
   },
   "components": [
-    {
-      "type": "file",
-      "name": ".agentic-qe/brain.rvf",
-      "hashes": [
-        {
-          "alg": "SHA-256",
-          "content": "8136cd4cc145d3dbe6ed3ae4489946bbc26e3e44172f0e5241ac45dde38bfead"
-        }
-      ]
-    },
-    {
-      "type": "file",
-      "name": ".agentic-qe/brain.rvf.lock",
-      "hashes": [
-        {
-          "alg": "SHA-256",
-          "content": "99fa5178a48b6953b8f3a6f1690204a3b5449004b7dd105e7a3155ad3658266c"
-        }
-      ]
-    },
-    {
-      "type": "file",
-      "name": ".agentic-qe/memory.db",
-      "hashes": [
-        {
-          "alg": "SHA-256",
-          "content": "456372cb9a8c12f98ae6378338b8469d9be6df05cbe03a99b412d83d962b3d11"
-        }
-      ]
-    },
-    {
-      "type": "file",
-      "name": ".agentic-qe/memory.db-shm",
-      "hashes": [
-        {
-          "alg": "SHA-256",
-          "content": "cab99dd5d4068013a0c5f4f1c2d29dbec07729dc47c1d77adba6a53b773d0026"
-        }
-      ]
-    },
-    {
-      "type": "file",
-      "name": ".agentic-qe/memory.db-wal",
-      "hashes": [
-        {
-          "alg": "SHA-256",
-          "content": "2cc80ec378c1f9cd2588676588ee1b73bfe4f2f7ef3b96879c295eb86dccd2c2"
-        }
-      ]
-    },
-    {
-      "type": "file",
-      "name": ".agentic-qe/patterns.rvf",
-      "hashes": [
-        {
-          "alg": "SHA-256",
-          "content": "9090b2e6d339eaa183672ac0cf9f625dbd5f9fc76d64afcdb34a3f5871c31c5a"
-        }
-      ]
-    },
-    {
-      "type": "file",
-      "name": ".agentic-qe/patterns.rvf.idmap.json",
-      "hashes": [
-        {
-          "alg": "SHA-256",
-          "content": "c2693f9a7f47a2d2bffe3004188e70ce08411bf8db47d07c60551d18ff7640c4"
-        }
-      ]
-    },
-    {
-      "type": "file",
-      "name": ".agentic-qe/patterns.rvf.lock",
-      "hashes": [
-        {
-          "alg": "SHA-256",
-          "content": "84842f3916c558b1f4f2da2a5b0236587f146dda1f6ab4ba4c31ed7b8b17f943"
-        }
-      ]
-    },
     {
       "type": "file",
       "name": "CHANGELOG.md",
@@ -105,7 +25,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "378ef9c8fcde4e77594b29a5f043b57f880f5df2b40fce679addfae756670154"
+          "content": "1e36d7e9e6022d412c030975ec686b1ab91c61c64c807ef2e9ff3fa75ac8917c"
         }
       ]
     },
@@ -185,7 +105,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "45c0c1328829a56cfe0ea0ebc74c15477a00bb683b496404688ab4b7b7a88ef8"
+          "content": "8a00bf14c3fdd437b7e482da8c4018366041755714ed1791b1c523f9dee5de6c"
         }
       ]
     },
@@ -195,7 +115,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "20974a159438ac73a4c308cdb3710154dd9fe0450ed5184f6f3938792380fece"
+          "content": "dea4446db1109285c1fc5f5283d7263462cb446f12b0d9b1e1e821374d0ca57d"
         }
       ]
     },
@@ -205,7 +125,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "bfb9ecebeb1c3cc631f2c8e7f46af4318e3698789c9dda49aaebbe26fe1c7fa7"
+          "content": "a253625c94835ef94bbd141b1dd759578433423bd098314fd977c515f140dafe"
         }
       ]
     },
@@ -265,7 +185,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c03aafaeaf663bb47b756608049bf77f6460615f1e806054644ec830c524cf72"
+          "content": "543319797d47d599a646c7d695f82aa31491ffd97579edd691b6a9cb99af76ef"
         }
       ]
     },
@@ -285,7 +205,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6b8d21416576a2744b5d9bf973d7b878c255495829fcf3679b183a977abc55a2"
+          "content": "c5d4902f9b0c4133318b15e757d07856872177dc92752d5996440524342b7f88"
         }
       ]
     },
@@ -305,7 +225,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "09472c195254c359f14256c39e8c7afd08c0b71aadb57cd077534f0d7c482005"
+          "content": "0538f3cfd8eb880305c08fef05a78601263003c54a6f1b44f97cd7ebd7bd37f9"
         }
       ]
     },

package/src/cli.ts

@@ -48,6 +48,9 @@ import {
   runInitAgentsMd,
   runInitGeminiMd,
   TARGET_NAMES,
+  buildParityMatrix,
+  TARGET_CAPABILITIES,
+  TARGET_SHORT_LABELS,
   WORKFLOW_NAMES,
   importEcc,
   recordPattern,
@@ -204,6 +207,7 @@ Usage:
   dz verify-pack --pack <dir> [--pubkey <path>]             (signature check; fail-closed; key from the repo, never the pack)
   dz publish [--filter <name>] [--bump-only] [--claim-check <off|warn|error>] [--require-signing] [--provenance|--no-provenance]   (dry-run by default; pass --yes/--confirm/--no-dry-run to go live; claim-check gate default warn — surfaces README claim findings, never blocks; error fails an offending package)
   dz release [--filter <name>] [--tag] [--publish] [--json] [--dry-run] [--no-issue]   (VERIFIED release: 4 HARD gates in FRONT of dz publish — full package test suites, audit >=high, node --check of every dist/bin file, bin smoke-boot via "node <bin> --help" — any red gate STOPS the release (exit 1) + best-effort gh issue; all green ⇒ re-sign reminder, then prints the ready dz publish command (or chains with --publish); never duplicates publish's own gates)
+  dz parity [--target <name>] [--json]   (the honest feature×target map, COMPUTED from the capability model — which harness feature is full / manual / absent on each of the ${TARGET_NAMES.length} targets, and via which form)
   dz setup --target <name> [--preset <name>] [--select id,id,...] [--skills-dir <dir>] [--project <dir>] [--memory agentdb] [--no-memory] [--no-hooks] [--install-driver] [--force] [--enrich]
   dz teach "<pattern>" [--reward <0-1>] [--domain <name>] [--type rule|success-pattern|lesson-learned] [--project <dir>] [--no-mirror]   (--project pins the learned store to <dir>/.dz, not the cwd — pin to a canonical brain)
   dz teach --from-json <file> [--project <dir>] [--no-mirror]   (bulk-import a 'dz recall --all --json' export — share a learned store across machines)
@@ -3571,6 +3575,88 @@ function cmdPublish(options: Map<string, string>, flags: Set<string>, cwd: strin
   return report.errors > 0 ? 1 : 0;
 }
 
+/* ------------------------------------------------------------------ */
+/*  dz parity — the honest feature×target map (target-parity-matrix,   */
+/*  ADR-001): computed from the declarative model, never hand-written  */
+/* ------------------------------------------------------------------ */
+
+function cmdParity(options: Map<string, string>, flags: Set<string>, write: Write): number {
+  const json = flags.has('json');
+  if (flags.has('help')) {
+    write('dz parity [--target <name>] [--json] — the computed feature×target map (never hand-written)');
+    write(`  targets: ${TARGET_NAMES.join(', ')}`);
+    return 0;
+  }
+  const allowedFlags = new Set(['json', 'help']);
+  const allowedOptions = new Set(['target']);
+  // A stray positional is a typo'd invocation, not something to silently ignore (Codex QE gap 7).
+  if (options.has('_positional_0')) {
+    write(json ? JSON.stringify({ error: `unexpected argument "${options.get('_positional_0')}"`, exitCode: 1 }) : `dz parity: unexpected argument "${options.get('_positional_0')}"\n  allowed: --target <name>, --json`);
+    return 1;
+  }
+  for (const flag of flags) {
+    if (!allowedFlags.has(flag)) {
+      write(json ? JSON.stringify({ error: `unknown option --${flag}`, exitCode: 1 }) : `dz parity: unknown option --${flag}\n  allowed: --target <name>, --json`);
+      return 1;
+    }
+  }
+  for (const key of options.keys()) {
+    if (key.startsWith('_positional_')) continue;
+    if (!allowedOptions.has(key)) {
+      write(json ? JSON.stringify({ error: `unknown option --${key}`, exitCode: 1 }) : `dz parity: unknown option --${key}\n  allowed: --target <name>, --json`);
+      return 1;
+    }
+  }
+
+  const matrix = buildParityMatrix();
+  const target = options.get('target');
+  if (target !== undefined && !TARGET_NAMES.includes(target as (typeof TARGET_NAMES)[number])) {
+    if (json) write(JSON.stringify({ error: `unknown target "${target}"`, targets: TARGET_NAMES, exitCode: 1 }, null, 2));
+    else write(`dz parity: unknown target "${target}" — one of: ${TARGET_NAMES.join(', ')}`);
+    return 1;
+  }
+
+  if (json) {
+    const rows = matrix.map((r) => ({
+      id: r.feature.id,
+      title: r.feature.title,
+      cells: target !== undefined ? { [target]: r.cells[target as (typeof TARGET_NAMES)[number]] } : r.cells,
+    }));
+    // A filtered response stays internally consistent: capabilities are filtered too (Codex QE gap 9).
+    const caps = target !== undefined ? { [target]: TARGET_CAPABILITIES[target as (typeof TARGET_NAMES)[number]] } : TARGET_CAPABILITIES;
+    write(JSON.stringify({ targets: target !== undefined ? [target] : TARGET_NAMES, capabilities: caps, features: rows }, null, 2));
+    return 0;
+  }
+
+  if (target !== undefined) {
+    const t = target as (typeof TARGET_NAMES)[number];
+    write(`\ndz parity — ${t}  (capabilities: ${TARGET_CAPABILITIES[t].join(', ')})\n`);
+    for (const r of matrix) {
+      const c = r.cells[t];
+      const icon = c.level === 'full' ? '✓' : c.level === 'manual' ? '◐' : '—';
+      write(`  ${icon} ${r.feature.title.padEnd(58)} ${c.level === 'none' ? 'not available on this target' : `via ${c.via ?? ''}`}`);
+    }
+    write('\n  ✓ full (the complete experience)   ◐ manual (works, you drive it by hand)   — not available');
+    return 0;
+  }
+
+  // Grid: one column per target, short header, one row per feature. Computed, never hand-written;
+  // the labels live NEXT TO the model (a local map here would be a second, unchecked registry).
+  const short: Record<string, string> = TARGET_SHORT_LABELS;
+  write('\ndz parity — feature × target (computed from the model; dz parity --target <name> for detail)\n');
+  write(`  ${'feature'.padEnd(52)} ${TARGET_NAMES.map((t) => (short[t] ?? t).padStart(4)).join('')}`);
+  for (const r of matrix) {
+    const cells = TARGET_NAMES.map((t) => {
+      const c = r.cells[t];
+      return (c.level === 'full' ? '✓' : c.level === 'manual' ? '◐' : '—').padStart(4);
+    }).join('');
+    write(`  ${r.feature.title.slice(0, 52).padEnd(52)} ${cells}`);
+  }
+  write('\n  ✓ full   ◐ manual (available, driven by hand)   — not available');
+  write(`  columns: ${TARGET_NAMES.map((t) => `${short[t] ?? t}=${t}`).join('  ')}`);
+  return 0;
+}
+
 /* ------------------------------------------------------------------ */
 /*  dz release — verified-release conveyor (feature release-verified,  */
 /*  ADR-001): 4 HARD gates in FRONT of the untouched dz publish.       */
@@ -5732,6 +5818,8 @@ export async function runCli(argv: string[], io: CliIo = {}): Promise<number> {
         return cmdPublish(options, flags, cwd, write);
       case 'release':
         return cmdRelease(options, flags, cwd, write, io.releaseRunner);
+      case 'parity':
+        return cmdParity(options, flags, write);
       case 'registry':
         return cmdRegistry(options, cwd, write);
       case 'benchmark':