@dzhechkov/harness-cli 0.3.260 → 0.3.262

package/.dz-manifest.json

@@ -9,7 +9,7 @@
       },
       {
         "path": "README.md",
-        "sha256": "6b3bcc252253732b9703f1eb43ac1f0e9f0599979b09d0fea3208932fd0f33a8"
+        "sha256": "af18869081f5141177b6427e812d724e15995d49b10cf67f24803eb5e1d79cb5"
       },
       {
         "path": "coverage/coverage-final.json",
@@ -41,15 +41,15 @@
       },
       {
         "path": "dist/cli.d.ts.map",
-        "sha256": "4c5fa8c51cc350874413efceb0a2e4dce2f0c71f39914ddd8be425336a37ae2d"
+        "sha256": "02a2ba1def8a57e1d4dcde048d5a62af19ab4cd825c98bcfbe8ac0df7de2062c"
       },
       {
         "path": "dist/cli.js",
-        "sha256": "a75034dfe70f0b57811dfad831366bd5c7995583a57db0f218621b026ac8d854"
+        "sha256": "8d3674dc681dc2493886534c8a30e124664a158fd4f7f2da476f5ff2ec615edd"
       },
       {
         "path": "dist/cli.js.map",
-        "sha256": "dbe8fa418aedcb77dead3a374bba7cbf0fb5e305dd9a06002946a19604279684"
+        "sha256": "3975feb3b9102aad34cdcc070315a7756ef9241aa2bb618759a1bbac25ec7951"
       },
       {
         "path": "dist/index.d.ts",
@@ -73,7 +73,7 @@
       },
       {
         "path": "package.json",
-        "sha256": "72858a1f0199832c7ad781f892b7b117ec980af33ff9598587e1ed1544046a35"
+        "sha256": "3e9deb36cf53245aaae26a72de359a7f57e9691d52454266ffe32f61dc963a27"
       },
       {
         "path": "src/bin.ts",
@@ -81,7 +81,7 @@
       },
       {
         "path": "src/cli.ts",
-        "sha256": "1481238a2fc3a60051f678dcf6b415f8052ce954a9e55ee7577d8c3b2261e062"
+        "sha256": "9549a9864fddc36eb99a172f3f0e7c7e72ae32d36aebadaf826b58af0bed16b4"
       },
       {
         "path": "src/index.ts",
@@ -109,5 +109,5 @@
       }
     ]
   },
-  "signature": "uYnxiEzDxjwdXlp1SGaC0Zv2x/MW39skbUKw3+xpvnLcoNsEV4pp8kFD5q7urBvC87fC+lRKsIpatoXCNGzwBA=="
+  "signature": "3ghvnJARKOZq3JBJswFiPPiar56oO/qN6KDRN1kU2yunpTVyhNAqXdr49P/a5w/OHWPKD7hX5Vk72VLYNkTWDA=="
 }

package/README.md

@@ -2359,13 +2359,20 @@ dz recall "signature" --limit 3 --domain security
 #     [0.90] (security) ⟨both⟩ Crypto anti-hallucination anti-pattern: verifying a signature …
 #     [0.85] (publishing) ⟨both⟩ ⚠q 'Re-sign LAST' applies to EVERY signed pack a sweep touches …
 #     [0.80] (testing) ⟨vector⟩ A structural registry-coverage test that only checks key-SET …
-#     domain "security": 1 exact match(es); the order was already correct — nothing moved;
+#     domain "security": among 6 candidate(s) — 1 exact match(es), 3 changed position;
 #     foreign-domain lessons kept (a boost, not a filter)
+#     1 lower-ranked lesson fell past the --limit 3 cut to make room — raise --limit to see them
 
 dz recall "signature" --limit 3 --domain health-research
 #     domain "health-research": no lesson in this result carries it — order unchanged, nothing was hidden
 ```
 
+**One line out per hit.** Every value that reaches a `dz recall` output line — the lesson, its
+domain, your query, the requested domain — is rendered on a single line, with embedded line breaks
+shown as `⏎`. That is not cosmetic: any tool parsing this output line-wise (the `health-advisor`
+research skill reads it to detect whether this `dz` supports `--domain`) would otherwise see lines
+forged by stored content or by a crafted query.
+
 **Why a boost and not a filter.** Cross-domain transfer is the reason one shared store beats two
 separate ones: *"a reviewer's evidence needs the same execute-don't-describe discipline as your own
 claims"* was learned reviewing code and applies verbatim to medical sources. A filter would cut
@@ -2374,8 +2381,11 @@ for a hierarchical relative (`health` ↔ `health-research`) — and nothing is
 count with `--domain` equals the hit count without it.
 
 The bound matters: a domain tag is a hint about relevance, not evidence of it, so it breaks near-ties
-instead of overruling lexical ranking. And the note is honest in both directions — it says when
-nothing matched, and it distinguishes *matched* from *actually moved*.
+instead of overruling lexical ranking. And the note is honest in three directions — it says when
+nothing matched, it distinguishes *matched* from *actually moved*, and it counts what the `--limit`
+cut hid. That last one is the subtle part: the boost never drops a hit, but promoting a match into
+the top N does push the last one out of the printed list, so "nothing was dropped" would be true of
+the ranked list and false of the one you are reading. The note names the difference instead.
 
 ### Semantic recall (vector tier)
 

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA8XH,2EAA2E;AAC3E,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,iBAAiB,CAAC;CAC5C;AAED,yFAAyF;AACzF,MAAM,MAAM,iBAAiB,GAAG,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,KACvD;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAk3O9E,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAE,KAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CA8J5E"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA8XH,2EAA2E;AAC3E,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,iBAAiB,CAAC;CAC5C;AAED,yFAAyF;AACzF,MAAM,MAAM,iBAAiB,GAAG,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,KACvD;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AA83O9E,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAE,KAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CA8J5E"}

package/dist/cli.js

@@ -1848,6 +1848,14 @@ async function cmdRecall(options, flags, cwd, write) {
     // never receive its promised lift — the feature was weakest in exactly the case it
     // exists for (foreign-domain dilution pushing a relevant lesson just past the cut).
     // Fetch a bounded surplus, re-rank, then trim to the limit the caller asked for.
+    // EVERY value that reaches an output line goes through this, not just stored fields.
+    // Round 5: `pattern` and `domain` were sanitised but the QUERY and the requested
+    // domain were not, so a caller-supplied newline could still forge a line that looks
+    // like the tool's own — including the boost note a peer reads as a capability probe.
+    // The rule is "one line out per line of output", and it has to hold for every field.
+    const oneLine = (v) => String(v).replace(/[\r\n\u2028\u2029\u0085\v\f]+/g, ' ⏎ ');
+    const shownQuery = oneLine(query);
+    const shownDomain = wantedDomain === undefined ? undefined : oneLine(wantedDomain);
     const fetchLimit = wantedDomain !== undefined ? Math.min(limit * 3, limit + 20) : limit;
     const result = await recallHybrid(projectRoot, query, { limit: fetchLimit, mode });
     if (mode === 'semantic' && result.vectorEngine === 'none') {
@@ -1873,19 +1881,19 @@ async function cmdRecall(options, flags, cwd, write) {
         return 0;
     }
     if (hits.length === 0) {
-        write(`dz recall "${query}"`);
+        write(`dz recall "${shownQuery}"`);
         write(`  No matching patterns (teach some with \`dz teach\`, or consolidate sessions).`);
         // The domain note must print here too (Codex QE #10): a --domain run with zero hits
         // silently said nothing about the domain, so the reader could not tell whether the
         // boost had been applied and found nothing, or had not run at all.
-        if (boost !== null && wantedDomain !== undefined)
-            write(renderDomainBoostNote(boost, wantedDomain));
+        if (boost !== null && shownDomain !== undefined)
+            write(renderDomainBoostNote(boost, shownDomain));
         return 0;
     }
     const vectorOn = result.vectorEngine !== 'none' && result.vectorError === undefined && mode !== 'lexical';
     const lexLabel = result.lexicalBackend === 'sqlite' ? 'SQLite FTS5' : 'keyword (JSON)';
     const ranking = vectorOn ? `${lexLabel} + vector (${result.vectorEngine}) ranking` : `${lexLabel} ranking (lexical)`;
-    write(`dz recall "${query}"  —  ${hits.length} hit(s), ${ranking}`);
+    write(`dz recall "${shownQuery}"  —  ${hits.length} hit(s), ${ranking}`);
     let sawQuarantined = false;
     for (const h of hits) {
         const backendTag = vectorOn ? ` ⟨${h.backend}⟩` : '';
@@ -1897,17 +1905,21 @@ async function cmdRecall(options, flags, cwd, write) {
         // the domain-boost note that learning_bridge.py reads as a capability probe. Any
         // consumer that parses this output line-wise has the same exposure, so the fix
         // belongs at the point of rendering rather than in each reader.
-        const oneLine = h.pattern.pattern.replace(/[\r\n]+/g, ' ⏎ ').slice(0, 80);
-        write(`  [${h.pattern.reward.toFixed(2)}] (${h.pattern.domain})${backendTag}${qTag} ${oneLine}`);
+        // Sanitise EVERY stored field that reaches the line, and every character a reader
+        // might treat as a break — not just CR/LF. Round 4 forged the domain-boost note
+        // twice over: once through `domain`, which was rendered raw, and once through a
+        // U+2028 that Python's splitlines() honours and this replace did not.
+        const shown = oneLine(h.pattern.pattern).slice(0, 80);
+        write(`  [${h.pattern.reward.toFixed(2)}] (${oneLine(h.pattern.domain)})${backendTag}${qTag} ${shown}`);
     }
     if (sawQuarantined) {
         // The loop stays VISIBLE (ADR D2): a quarantined hit is shown, marked, and explained.
         write('  ⚠q = quarantined (unproven hypothesis, rank damped) — confirm with dz teach --reinforce, or dz recall --promote <dzId> --apply');
     }
-    if (boost !== null && wantedDomain !== undefined) {
+    if (boost !== null && shownDomain !== undefined) {
         // Say what the boost did — INCLUDING when it did nothing. A silent reorder would
         // let the reader believe the ranking was domain-aware when it had no match to work with.
-        write(renderDomainBoostNote(boost, wantedDomain));
+        write(renderDomainBoostNote(boost, shownDomain));
         const cutNote = renderDomainCutNote(displaced, limit);
         if (cutNote !== '')
             write(cutNote);