@dzhechkov/harness-cli 0.3.240 → 0.3.242

package/.dz-manifest.json

@@ -9,7 +9,7 @@
       },
       {
         "path": "README.md",
-        "sha256": "1356d1ebf22352d0ab57ebe17fb91bb8c4df17da8b6968863a92b92402921bb7"
+        "sha256": "f10f682ab0a6a472d1bb52fb8c861d8b22669d579af8ddbbd392e2fb115cce67"
       },
       {
         "path": "coverage/coverage-final.json",
@@ -41,15 +41,15 @@
       },
       {
         "path": "dist/cli.d.ts.map",
-        "sha256": "eb431a9aaed2c853b19a797cd49668bed9fe1e700880a8d18d9a1a4cfe243f55"
+        "sha256": "2efde3e98ca7843ac6260881eef51bfd3743e736425ed60fc73bdbebacdb54c6"
       },
       {
         "path": "dist/cli.js",
-        "sha256": "9a46ece09ee1ac72ca3d7715ae86c1b5dc3747b18287c6f558a3c5d6569de7da"
+        "sha256": "88282ec4122a1e414dfb4c74e8583a49893b7ea0eba18d0cabe9ff50e72b0dec"
       },
       {
         "path": "dist/cli.js.map",
-        "sha256": "02dcf19b1e616487f3840482e9af6f9028749b5a8c9d8da143126be5d7ee5779"
+        "sha256": "da8e7d578e7929880f0a87e240dac4a3a25afaf5c4da96442fbcb159f1eb0e07"
       },
       {
         "path": "dist/index.d.ts",
@@ -73,7 +73,7 @@
       },
       {
         "path": "package.json",
-        "sha256": "b729864fd3fb9fc4cf2fcab96c6aa36f13ed181f3aa2bb37c6b3ca0c893afd76"
+        "sha256": "7c10b138fb5cbb7c8ccba350863c100aea77a5fd2b2bd30fa08a3ea4260a0e4a"
       },
       {
         "path": "src/bin.ts",
@@ -81,7 +81,7 @@
       },
       {
         "path": "src/cli.ts",
-        "sha256": "8477517b028f8258d5f11a2197167210de2db0acefa901f0f393579dc14bd409"
+        "sha256": "79d8ade45869b7a264d54da7fafda72a39953cab0d48f5ad504dd26657a54a1b"
       },
       {
         "path": "src/index.ts",
@@ -89,7 +89,7 @@
       },
       {
         "path": "test/cli.test.ts",
-        "sha256": "3deb99917f3d8b4a5c9a3b0315bd65a3099ce2b508121cfa2bdeed19b7554d48"
+        "sha256": "a82b15dd9d166764479528e9f9ede45fc39d1b4068a96f19f158aa5a4c03369b"
       },
       {
         "path": "tsconfig.json",
@@ -101,5 +101,5 @@
       }
     ]
   },
-  "signature": "qMYFndIEe8HqlomfBmJrqsujcr/krjDvnlUuzoSIuw5v6muHu/4VQxha9DnqUpyfyz1MNAHgfo6N841osW0UCg=="
+  "signature": "FZQ+o3JaRRSlZNY7rza0Neki2zXzDh2wKx2msyLIJhet1811uzEnhpQD5p7RYyfdNt8imOcGlI0eAax5PhxKBQ=="
 }

package/README.md

@@ -434,6 +434,31 @@ dz parity — codex  (capabilities: shell, skills, mcp)
 **When to use:** before promising a workflow to a teammate on Cursor/Codex/Hermes; when choosing
 a target for a project; as the requirements input for porting a feature to more targets.
 
+### Usage estimates you can act on — `dz usage`
+
+`dz usage` estimates how much of your Claude session (5h block) and week you have spent, from local
+transcripts. It drives feature-adr's pre-emptive "switch to Codex before the limit" routing.
+
+Two things changed to make it mean something:
+
+- **Cost-weighted, not a raw sum.** A flat token sum is 89–99.7% cache-read (MEASURED), which grows
+  with *conversation length*, not with work done — two sessions doing identical work differed by
+  orders of magnitude. Tokens are now **input-equivalents** (input 1x, cache-write 1.25x — 2x for a
+  1-hour TTL write, cache-read 0.1x, output 5x).
+- **Subagent transcripts count.** `<session>/subagents/*.jsonl` carry real, non-duplicated usage and
+  were silently excluded.
+
+```bash
+dz usage                       # session ~13% (resets 10:24) · week ~15% (resets 08:59) · estimated
+dz usage --json                # machine-readable; pct is null when limits are unconfigured
+dz usage --calibrate --session 42 --weekly 61      # teach it YOUR real numbers from claude.ai
+```
+
+**`pct` is `null` until you configure limits — that is deliberate**, an unconfigured estimate is not
+a guess dressed as a number. The authoritative calibration is `--calibrate` with the percentages
+shown on claude.ai/settings/usage; absent that, limits set from your own observed peak mean "unusually
+heavy **for you**", which is exactly what a pre-emptive routing switch needs.
+
 ### Do your skills actually register? — `dz skills-verify`
 
 Shipping a skill pack is not the same as a skill **registering**. A layout test that asserts
@@ -471,10 +496,20 @@ dz skills-verify: FAIL — nothing can register: 24 layout problem(s) and no reg
     [buried-skill-md] health-advisor/skills/clinical-decision-support/SKILL.md is 2+ levels deep …
 ```
 
-A `.claude-plugin/plugin.json` under `.claude/skills/` is reported as an **advisory**, not a failure:
-that layout may load under workspace trust, so the verdict asks the session whether the plugin actually
-loaded (`init.plugins`) instead of judging the layout. A container with skills inside and no matching
-loaded plugin fails, and says exactly that.
+**What it promises about plugins — and what it deliberately does not.** A `.claude-plugin/plugin.json`
+under `.claude/skills/` makes that directory a plugin *container*. The gate attributes it by the
+session's `init.plugins[].path` (never by the directory name), and:
+
+- container declares a plugin that **did not load** → **FAIL**, naming it;
+- container's plugin **loaded** → **PASS**, plus an advisory stating that its *individual* skills were
+  **not** verified.
+
+That last line is a deliberate limit, not an oversight. Verifying each plugin skill means reproducing
+Claude Code's command-name resolution — a skill's frontmatter `name` replaces the final command segment,
+and a manifest's `skills` field may be a string, a list, or a directory of children. Six cross-model
+review rounds showed every attempt to model that contract introduced a NEW wrong verdict. A narrow
+promise kept exactly is worth more than a broad one kept unreliably, so the gap is printed rather than
+guessed.
 
 **Exit codes: `0` pass · `1` fail · `2` inconclusive.** The third is the point — a missing `claude`
 binary, a login prompt, a timeout, or a session that read a *different* project all yield

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAqRH,2EAA2E;AAC3E,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,iBAAiB,CAAC;CAC5C;AAED,yFAAyF;AACzF,MAAM,MAAM,iBAAiB,GAAG,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,KACvD;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAgvL9E,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAE,KAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAoJ5E"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAqRH,2EAA2E;AAC3E,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,iBAAiB,CAAC;CAC5C;AAED,yFAAyF;AACzF,MAAM,MAAM,iBAAiB,GAAG,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,KACvD;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AA2xL9E,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAE,KAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAoJ5E"}

package/dist/cli.js

@@ -4047,7 +4047,52 @@ function cmdClaimCheck(options, _optionLists, flags, cwd, write) {
             break;
         paths.push(p);
     }
-    const scanSet = paths.length > 0 ? paths.map((p) => resolve(root, p)) : defaultClaimScanSet(root);
+    // A DIRECTORY argument used to hit EISDIR, be counted as "skipped", and still exit 0 — the gate
+    // reported PASS having scanned nothing (MEASURED: `dz claim-check docs` said "1 skipped" and exited
+    // 0 while `dz claim-check docs/*.md` found 7). Expand a directory into its markdown instead.
+    const expandDir = (dir, depth = 0) => {
+        if (depth > 6)
+            return [];
+        let entries;
+        try {
+            entries = readdirSync(dir);
+        }
+        catch {
+            return [];
+        }
+        const out = [];
+        for (const name of entries) {
+            if (name.startsWith('.') || name === 'node_modules' || name === 'dist')
+                continue;
+            const full = join(dir, name);
+            try {
+                const st = statSync(full);
+                if (st.isDirectory())
+                    out.push(...expandDir(full, depth + 1));
+                else if (st.isFile() && name.toLowerCase().endsWith('.md'))
+                    out.push(full);
+            }
+            catch {
+                /* unreadable entry — nothing to scan */
+            }
+        }
+        return out;
+    };
+    const requested = paths.length > 0 ? paths.map((p) => resolve(root, p)) : defaultClaimScanSet(root);
+    const scanSet = [];
+    for (const p of requested) {
+        let isDir = false;
+        try {
+            isDir = statSync(p).isDirectory();
+        }
+        catch {
+            /* missing path stays in the set so it is reported as skipped, never silently dropped */
+        }
+        if (isDir)
+            scanSet.push(...expandDir(p));
+        else
+            scanSet.push(p);
+    }
     const findings = [];
     const scanned = [];
     for (const abs of scanSet) {
@@ -4088,6 +4133,13 @@ function cmdClaimCheck(options, _optionLists, flags, cwd, write) {
     write(`\n  ${scanned.length} file(s) in scan set, ${skipped.length} skipped.`);
     for (const s of skipped)
         write(`    skipped ${s.path} (${s.reason})`);
+    // A gate that examined NOTHING must never report a pass. Previously an unreadable argument was
+    // counted as "skipped" and the command still exited 0 — a clean bill of health over zero evidence.
+    const readCount = scanned.filter((s) => s.status === 'scanned').length;
+    if (readCount === 0 && scanned.length > 0) {
+        write('  NOTHING was read — this is not a pass. Check the paths above.');
+        return 1;
+    }
     // Additive per-group rollup (ADR-001 C4): the widened default set can produce thousands of
     // findings; this summarizes WHERE they land (root README, packages/…, features/<slug>,
     // docs/<subdir>) WITHOUT hiding any — display-only, so `--json` shape and exit codes are