@dzhechkov/harness-cli 0.3.259 → 0.3.261

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dzhechkov/harness-cli",
-  "version": "0.3.259",
+  "version": "0.3.261",
   "description": "The dz CLI — install AI skills for Claude Code, Codex, OpenCode, Hermes, OpenClaude, GitHub Copilot. 35 commands, 13 presets, 6 platform targets.",
   "type": "module",
   "license": "MIT",
@@ -41,7 +41,7 @@
     "sbom.json"
   ],
   "dependencies": {
-    "@dzhechkov/harness-core": "^0.3.149",
+    "@dzhechkov/harness-core": "^0.3.150",
     "@dzhechkov/harness-presets": "^0.5.0",
     "@dzhechkov/scout": "^0.8.0",
     "@dzhechkov/skills-devops": "^0.3.0",

package/sbom.json

@@ -25,7 +25,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6b3bcc252253732b9703f1eb43ac1f0e9f0599979b09d0fea3208932fd0f33a8"
+          "content": "61c71e355d633a88401a19c247e517d69f7a8d1483ea7549b3505eccb2a8740b"
         }
       ]
     },
@@ -105,7 +105,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "4c5fa8c51cc350874413efceb0a2e4dce2f0c71f39914ddd8be425336a37ae2d"
+          "content": "942d09c054994014e50139b807e1984586e172809b21e309114a5bf2ea92667c"
         }
       ]
     },
@@ -115,7 +115,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a75034dfe70f0b57811dfad831366bd5c7995583a57db0f218621b026ac8d854"
+          "content": "43b1280af2070d30296162cc33a045a23452201b2da2ce7aec12eea1900451f3"
         }
       ]
     },
@@ -125,7 +125,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "dbe8fa418aedcb77dead3a374bba7cbf0fb5e305dd9a06002946a19604279684"
+          "content": "d0847603ca911ccca9e0838d54dadd1924ac0d9008e103c4edaef16dc4be0678"
         }
       ]
     },
@@ -185,7 +185,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "72858a1f0199832c7ad781f892b7b117ec980af33ff9598587e1ed1544046a35"
+          "content": "582e9b8e1b919650b444b6be90cc3a1ae54e2fd190524fdb3ffa46c8f2058990"
         }
       ]
     },
@@ -205,7 +205,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "1481238a2fc3a60051f678dcf6b415f8052ce954a9e55ee7577d8c3b2261e062"
+          "content": "e6b54081432afb9d3f1ee8a851c0e6b5ec8012dad4b9ae02a0d9036772226044"
         }
       ]
     },

package/src/cli.ts

@@ -275,6 +275,10 @@ import {
   makeBacklogIO,
   harmonizeBacklog,
   BACKLOG_BACKENDS,
+  applyDomainBoost,
+  countDisplacedByCut,
+  renderDomainBoostNote,
+  renderDomainCutNote,
   parseReqeDebt,
   buildReqeBrief,
   settleReqeDebt,
@@ -333,7 +337,7 @@ Usage:
   dz teach "<pattern>" [--reward <0-1>] [--domain <name>] [--type rule|success-pattern|lesson-learned] [--project <dir>] [--no-mirror]   (--project pins the learned store to <dir>/.dz, not the cwd — pin to a canonical brain)
   dz teach --from-json <file> [--project <dir>] [--no-mirror]   (bulk-import a 'dz recall --all --json' export — share a learned store across machines)
   dz consolidate [--sessions-dir <dir>] [--project <dir>] [--no-mirror] [--prune-noise [--apply]] [--prune-quarantine [--apply]]   (both prunes: DRY-RUN by default; --apply snapshots then deletes; prune-quarantine = expired unproven lessons ONLY, never coupled to noise)
-  dz recall "<query>" [--limit <N>] [--semantic | --no-semantic] [--books [--book <slug>]] [--project <dir>] | dz recall --all [--json] | dz recall --usage [--json] | dz recall --forget <dzId>[,<dzId>] [--apply] | dz recall --promote <dzId>[,<dzId>] [--apply]   (forget/promote: dry-run default; forget snapshots before removing; promote lifts lesson-quarantine)
+  dz recall "<query>" [--limit <N>] [--domain <name>] [--semantic | --no-semantic] [--books [--book <slug>]] [--project <dir>] | dz recall --all [--json] | dz recall --usage [--json] | dz recall --forget <dzId>[,<dzId>] [--apply] | dz recall --promote <dzId>[,<dzId>] [--apply]   (--domain <name> BOOSTS lessons of that domain without dropping foreign ones — a shared store keeps its cross-domain transfers; forget/promote: dry-run default; forget snapshots before removing; promote lifts lesson-quarantine)
   dz vector status [--project <dir>] [--json]                          (semantic tier: engine, mirrored vs lexical counts, pending queue)
   dz vector reindex [--project <dir>] [--json]                         (snapshot, re-embed learned-pattern vectors, stamp current model)
   dz vector export <path> [--project <dir>]                            (portable VECTOR form (.rvf, opt-in RVF engine); patterns ship via recall --all --json)
@@ -2241,13 +2245,31 @@ async function cmdRecall(options: Map<string, string>, flags: Set<string>, cwd:
     : flags.has('no-semantic') || flags.has('lexical')
       ? ('lexical' as const)
       : ('hybrid' as const);
-  const result = await recallHybrid(projectRoot, query, { limit, mode });
+  const wantedDomain = options.get('domain');
+  // OVER-FETCH before boosting (Codex QE #5): the boost used to run on hits ALREADY
+  // truncated to `limit`, so an exact-domain lesson sitting at rank limit+1 could
+  // never receive its promised lift — the feature was weakest in exactly the case it
+  // exists for (foreign-domain dilution pushing a relevant lesson just past the cut).
+  // Fetch a bounded surplus, re-rank, then trim to the limit the caller asked for.
+  const fetchLimit = wantedDomain !== undefined ? Math.min(limit * 3, limit + 20) : limit;
+  const result = await recallHybrid(projectRoot, query, { limit: fetchLimit, mode });
+
   if (mode === 'semantic' && result.vectorEngine === 'none') {
     // --semantic is an explicit ask — degrading it silently would be dishonest (FR-3).
     write(`dz recall --semantic: ${result.vectorReason ?? 'no vector engine available — run: dz setup --memory agentdb'}`);
     return 1;
   }
-  const hits = result.hits;
+  // Domain-aware re-ranking (health-advisor slice H): `--domain <name>` lifts lessons
+  // tagged with that domain WITHOUT dropping foreign ones — a boost, not a filter, so a
+  // shared store keeps the cross-domain transfers that make it worth more than two stores.
+  const boost = wantedDomain !== undefined ? applyDomainBoost(result.hits, wantedDomain) : null;
+  const hits = (boost ? boost.hits : result.hits).slice(0, limit);
+  // The boost never drops a hit, but the CUT still can: promoting a match into the top
+  // `limit` pushes the last one out, so a lesson visible WITHOUT --domain can vanish
+  // WITH it. Cross-model review called this out as a lie by omission — the note said
+  // "foreign-domain lessons kept" about the pre-cut list while the printed list was
+  // missing one. Count it and say so; the reader can act on it (raise --limit).
+  const displaced = boost !== null ? countDisplacedByCut(result.hits, boost.hits, limit) : 0;
   if (asJson) {
     // Portable contract UNCHANGED (I-7/AC-6): a plain PatternRecord[] — round-trips through
     // `dz teach --from-json` regardless of which backend ranked each hit.
@@ -2258,6 +2280,10 @@ async function cmdRecall(options: Map<string, string>, flags: Set<string>, cwd:
   if (hits.length === 0) {
     write(`dz recall "${query}"`);
     write(`  No matching patterns (teach some with \`dz teach\`, or consolidate sessions).`);
+    // The domain note must print here too (Codex QE #10): a --domain run with zero hits
+    // silently said nothing about the domain, so the reader could not tell whether the
+    // boost had been applied and found nothing, or had not run at all.
+    if (boost !== null && wantedDomain !== undefined) write(renderDomainBoostNote(boost, wantedDomain));
     return 0;
   }
   const vectorOn = result.vectorEngine !== 'none' && result.vectorError === undefined && mode !== 'lexical';
@@ -2269,12 +2295,30 @@ async function cmdRecall(options: Map<string, string>, flags: Set<string>, cwd:
     const backendTag = vectorOn ? ` ⟨${h.backend}⟩` : '';
     const qTag = h.quarantined === true ? ' ⚠q' : '';
     if (h.quarantined === true) sawQuarantined = true;
-    write(`  [${h.pattern.reward.toFixed(2)}] (${h.pattern.domain})${backendTag}${qTag} ${h.pattern.pattern.slice(0, 80)}`);
+    // ONE line per hit, always. A lesson may contain newlines, and printing them raw
+    // let stored CONTENT forge lines that look like the tool's own output — including
+    // the domain-boost note that learning_bridge.py reads as a capability probe. Any
+    // consumer that parses this output line-wise has the same exposure, so the fix
+    // belongs at the point of rendering rather than in each reader.
+    // Sanitise EVERY stored field that reaches the line, and every character a reader
+    // might treat as a break — not just CR/LF. Round 4 forged the domain-boost note
+    // twice over: once through `domain`, which was rendered raw, and once through a
+    // U+2028 that Python's splitlines() honours and this replace did not.
+    const oneLine = (v: string): string => v.replace(/[\r\n\u2028\u2029\u0085\v\f]+/g, ' ⏎ ');
+    const shown = oneLine(h.pattern.pattern).slice(0, 80);
+    write(`  [${h.pattern.reward.toFixed(2)}] (${oneLine(h.pattern.domain)})${backendTag}${qTag} ${shown}`);
   }
   if (sawQuarantined) {
     // The loop stays VISIBLE (ADR D2): a quarantined hit is shown, marked, and explained.
     write('  ⚠q = quarantined (unproven hypothesis, rank damped) — confirm with dz teach --reinforce, or dz recall --promote <dzId> --apply');
   }
+  if (boost !== null && wantedDomain !== undefined) {
+    // Say what the boost did — INCLUDING when it did nothing. A silent reorder would
+    // let the reader believe the ranking was domain-aware when it had no match to work with.
+    write(renderDomainBoostNote(boost, wantedDomain));
+    const cutNote = renderDomainCutNote(displaced, limit);
+    if (cutNote !== '') write(cutNote);
+  }
   if (result.vectorError !== undefined && mode !== 'lexical') {
     // Engine present but the semantic leg failed/timed out — one honest line, exit 0 (05 §2.3).
     write(`  ℹ vector search degraded: ${result.vectorError} — showing lexical ranking`);