@dzhechkov/harness-cli 0.3.260 → 0.3.262

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dzhechkov/harness-cli",
-  "version": "0.3.260",
+  "version": "0.3.262",
   "description": "The dz CLI — install AI skills for Claude Code, Codex, OpenCode, Hermes, OpenClaude, GitHub Copilot. 35 commands, 13 presets, 6 platform targets.",
   "type": "module",
   "license": "MIT",

package/sbom.json

@@ -25,7 +25,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6b3bcc252253732b9703f1eb43ac1f0e9f0599979b09d0fea3208932fd0f33a8"
+          "content": "af18869081f5141177b6427e812d724e15995d49b10cf67f24803eb5e1d79cb5"
         }
       ]
     },
@@ -105,7 +105,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "4c5fa8c51cc350874413efceb0a2e4dce2f0c71f39914ddd8be425336a37ae2d"
+          "content": "02a2ba1def8a57e1d4dcde048d5a62af19ab4cd825c98bcfbe8ac0df7de2062c"
         }
       ]
     },
@@ -115,7 +115,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a75034dfe70f0b57811dfad831366bd5c7995583a57db0f218621b026ac8d854"
+          "content": "8d3674dc681dc2493886534c8a30e124664a158fd4f7f2da476f5ff2ec615edd"
         }
       ]
     },
@@ -125,7 +125,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "dbe8fa418aedcb77dead3a374bba7cbf0fb5e305dd9a06002946a19604279684"
+          "content": "3975feb3b9102aad34cdcc070315a7756ef9241aa2bb618759a1bbac25ec7951"
         }
       ]
     },
@@ -185,7 +185,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "72858a1f0199832c7ad781f892b7b117ec980af33ff9598587e1ed1544046a35"
+          "content": "3e9deb36cf53245aaae26a72de359a7f57e9691d52454266ffe32f61dc963a27"
         }
       ]
     },
@@ -205,7 +205,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "1481238a2fc3a60051f678dcf6b415f8052ce954a9e55ee7577d8c3b2261e062"
+          "content": "9549a9864fddc36eb99a172f3f0e7c7e72ae32d36aebadaf826b58af0bed16b4"
         }
       ]
     },

package/src/cli.ts

@@ -2251,6 +2251,14 @@ async function cmdRecall(options: Map<string, string>, flags: Set<string>, cwd:
   // never receive its promised lift — the feature was weakest in exactly the case it
   // exists for (foreign-domain dilution pushing a relevant lesson just past the cut).
   // Fetch a bounded surplus, re-rank, then trim to the limit the caller asked for.
+  // EVERY value that reaches an output line goes through this, not just stored fields.
+  // Round 5: `pattern` and `domain` were sanitised but the QUERY and the requested
+  // domain were not, so a caller-supplied newline could still forge a line that looks
+  // like the tool's own — including the boost note a peer reads as a capability probe.
+  // The rule is "one line out per line of output", and it has to hold for every field.
+  const oneLine = (v: string): string => String(v).replace(/[\r\n\u2028\u2029\u0085\v\f]+/g, ' ⏎ ');
+  const shownQuery = oneLine(query);
+  const shownDomain = wantedDomain === undefined ? undefined : oneLine(wantedDomain);
   const fetchLimit = wantedDomain !== undefined ? Math.min(limit * 3, limit + 20) : limit;
   const result = await recallHybrid(projectRoot, query, { limit: fetchLimit, mode });
 
@@ -2278,18 +2286,18 @@ async function cmdRecall(options: Map<string, string>, flags: Set<string>, cwd:
   }
 
   if (hits.length === 0) {
-    write(`dz recall "${query}"`);
+    write(`dz recall "${shownQuery}"`);
     write(`  No matching patterns (teach some with \`dz teach\`, or consolidate sessions).`);
     // The domain note must print here too (Codex QE #10): a --domain run with zero hits
     // silently said nothing about the domain, so the reader could not tell whether the
     // boost had been applied and found nothing, or had not run at all.
-    if (boost !== null && wantedDomain !== undefined) write(renderDomainBoostNote(boost, wantedDomain));
+    if (boost !== null && shownDomain !== undefined) write(renderDomainBoostNote(boost, shownDomain));
     return 0;
   }
   const vectorOn = result.vectorEngine !== 'none' && result.vectorError === undefined && mode !== 'lexical';
   const lexLabel = result.lexicalBackend === 'sqlite' ? 'SQLite FTS5' : 'keyword (JSON)';
   const ranking = vectorOn ? `${lexLabel} + vector (${result.vectorEngine}) ranking` : `${lexLabel} ranking (lexical)`;
-  write(`dz recall "${query}"  —  ${hits.length} hit(s), ${ranking}`);
+  write(`dz recall "${shownQuery}"  —  ${hits.length} hit(s), ${ranking}`);
   let sawQuarantined = false;
   for (const h of hits) {
     const backendTag = vectorOn ? ` ⟨${h.backend}⟩` : '';
@@ -2300,17 +2308,21 @@ async function cmdRecall(options: Map<string, string>, flags: Set<string>, cwd:
     // the domain-boost note that learning_bridge.py reads as a capability probe. Any
     // consumer that parses this output line-wise has the same exposure, so the fix
     // belongs at the point of rendering rather than in each reader.
-    const oneLine = h.pattern.pattern.replace(/[\r\n]+/g, ' ⏎ ').slice(0, 80);
-    write(`  [${h.pattern.reward.toFixed(2)}] (${h.pattern.domain})${backendTag}${qTag} ${oneLine}`);
+    // Sanitise EVERY stored field that reaches the line, and every character a reader
+    // might treat as a break — not just CR/LF. Round 4 forged the domain-boost note
+    // twice over: once through `domain`, which was rendered raw, and once through a
+    // U+2028 that Python's splitlines() honours and this replace did not.
+    const shown = oneLine(h.pattern.pattern).slice(0, 80);
+    write(`  [${h.pattern.reward.toFixed(2)}] (${oneLine(h.pattern.domain)})${backendTag}${qTag} ${shown}`);
   }
   if (sawQuarantined) {
     // The loop stays VISIBLE (ADR D2): a quarantined hit is shown, marked, and explained.
     write('  ⚠q = quarantined (unproven hypothesis, rank damped) — confirm with dz teach --reinforce, or dz recall --promote <dzId> --apply');
   }
-  if (boost !== null && wantedDomain !== undefined) {
+  if (boost !== null && shownDomain !== undefined) {
     // Say what the boost did — INCLUDING when it did nothing. A silent reorder would
     // let the reader believe the ranking was domain-aware when it had no match to work with.
-    write(renderDomainBoostNote(boost, wantedDomain));
+    write(renderDomainBoostNote(boost, shownDomain));
     const cutNote = renderDomainCutNote(displaced, limit);
     if (cutNote !== '') write(cutNote);
   }