@dzhechkov/harness-cli 0.4.5 → 0.5.0

package/sbom.json

@@ -25,7 +25,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2f053f11ea49780919d0557877302e70adb8f33949299b0b0637ece2809c1b67"
+          "content": "27e2ddfd256e5c89a1c51a2520b52cc4b947dd7295f5730bde0a2c735186fb8f"
         }
       ]
     },
@@ -35,7 +35,17 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e539390d6899ede6cdd0acb76cae6c58e90d4fb3d4389c00dce8604a014aeea7"
+          "content": "d2eef62228d4f2b31f5c7fca703f0f6844cf517d41be9dee516f3489f5babfec"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "coverage/coverage-summary.json",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "981eef381eb1e9a040a31eaa561ea078c6f6711d9908990e796d5213d6ffe89f"
         }
       ]
     },
@@ -45,7 +55,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "58be9f04d2fe63cca2efe3957b9933068e443a0e57f9838ff9ef800cc191e03f"
+          "content": "1d651fdfe05fc306c857bbbee44c395b63b39c1e0c53a8166eb7ca43c6cfa157"
         }
       ]
     },
@@ -55,7 +65,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b1e41c8c19fa56ae9dec2267740eb4389bc785431478861a8843867f99c1b25b"
+          "content": "74105b3edb4c4a7d75393a7cb2dda06a0f545b1cce75e9a772a30b18b3609374"
         }
       ]
     },
@@ -65,7 +75,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c4a6b64f875db72a2897df0e3b0c7cd279308dba2471ae29a57775dad7a7d8f8"
+          "content": "e215d5ebb9d87106c3bdfda29c8cb1af59bc9bdbd62c11b2b6a313a2bd3ecd7c"
         }
       ]
     },
@@ -75,7 +85,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "9661e4d167ea1c13c3f40de510f311024da3c44bcb452d3781fb89f46373eadc"
+          "content": "31849f2576f6e57a8a71f49cbb1a6e6c692f98dd8303217ec836933420d08dac"
         }
       ]
     },
@@ -85,7 +95,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "9afd7c4a02708d7d425214c5d3b76a2ad7bd5ea3ba6c725e4880a91d76062f34"
+          "content": "56db11f99b505b2ffbc314aa70b4bcd17ec741e14ca99a3662d0ca9f4afcc1cc"
         }
       ]
     },
@@ -95,7 +105,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5bdc153e789ac180543e9b4955ea36666dc27b7238637b05875e048fc49ae30f"
+          "content": "19170be889713fffd051dfde1044074125f66bb4623e415c355f812a47721436"
         }
       ]
     },
@@ -105,7 +115,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0183c01a98e232554a7460be48ee5fdf59dd3a7d09c719a31b08acc9c6b3528c"
+          "content": "c80fe1740887b68a3521ee6d22e09303785238c6e27dd0c80fb76289927e73a4"
         }
       ]
     },
@@ -115,7 +125,47 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c5bd1b0b852dd21de328494d7a99db336afbde4397b7c687d416f1a6f3c297b2"
+          "content": "1ef2072181086e6b14c30005417f3edba91db5c3f2ae82201236ea493385d6a8"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/core-compat.d.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "dedfc859e163f229af0445d6439172a4b66c150c0942bce3ae1bf0304dbb3290"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/core-compat.d.ts.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "bce1ded9ffac15080908af1a9571b67141c141374ec4ba90b987fd6fd8883aab"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/core-compat.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "57930e6918c2a5d90826c74924a62de9a1ffab53d8196ff8f98a59c89baf23be"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/core-compat.js.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "e95005978fdd733f78208d6d916f62f970123530241739c9da7d3a74154b7a13"
         }
       ]
     },
@@ -175,7 +225,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "00a53276d145112e3c2ae5ca2950ac74877ea4b069b2b81040d49c5903eb6482"
+          "content": "be73e142cc0dcd05cf774c73827572b1e55e503c8ab84f4a396fa785b271980b"
         }
       ]
     },
@@ -185,7 +235,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f799d9771166fe95eb40463d1ebbeb0dd3acdd78fa9c692e086a6a673f54752a"
+          "content": "42a1f67e1f39c4cda2df0887c16fbb6f54eb108ba0cb18612bb83ee153092463"
         }
       ]
     },
@@ -195,7 +245,17 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0a1097fc3a2294f934fc50f5871b287cfbc5ec85becdab914b7caeca42cb7d1a"
+          "content": "c875709ccafe3493342776b28c8aa7b34e1fb800e2fccedcb499e6490e6ad1c0"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "src/core-compat.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "3638272a91166a047c3edc14626c0011e91b2de862a197d1b8e424470e7a0575"
         }
       ]
     },
@@ -209,13 +269,73 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/agents-sync.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "32606890dc57d58257e6b4a38246acb343eea88b6e4b2f643f061325a34d066a"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/cli.test.ts",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c66bdd2fbbe2e0b622e3bc4e0e4521e865cc8088e581bd4b4862c1c550307900"
+          "content": "83d8c6a9d7e8d46b57bb2e5da47c0345e8a512bdcc2e7cc8c59e163ade41de10"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "test/command-count.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "9958e10a8adb80ee64baad0d91fb4c9a3b6e8801c6379f7ba5f8f5ab6c1f1716"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "test/core-compat-guard.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "98086d0b6bd7ce32cc844e0cbbc710c4dbf009389c1d020aed48ced2de8acd57"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "test/core-compat.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "c54d5aa80a2455a396b396ff9fc398c141c3be4ec9c830e0941f830658758866"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "test/core-import-floor.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "84e16e0f31608570f72575038ae246d9ff002671ade0e9f9fa6009dd862dfc03"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "test/discrimination-check-cli.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "cd7507c8ec1f621fea6f05596541235d09efbd215540b56b012cf465e06b6ba0"
         }
       ]
     },
@@ -229,6 +349,26 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/fixtures/discrimination-check/fake-runner.sh",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "126bbd1ba9c08ef9de826cfa21df3981720e4bc36cd993dff28e0de435cbebae"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "test/fixtures/discrimination-check/fixture.py",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "bb413a8b6e9dc597eb298e7646fb84e23ccd3e117eb61201776ef3e9e27a0e0a"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/fixtures/install-layouts-helpers.ts",
@@ -459,6 +599,26 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/install-sync-partial.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "35824489662dbe9315d78cd20ecf968d416fbe80685d74b6588c8521a08497ea"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "test/list-partial.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "fd98385a9b1021cf8341d154abcdf4506a84aaadddd465fcc7e057ba1927fe64"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/mutation-gate-cli.test.ts",
@@ -475,7 +635,17 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "fe8e5792626cf58678c1e2bcb809f63413655c2e171439157b74deb8b4fd80fb"
+          "content": "3e6f9bb105154121988da41568ff85573099235857ba25e76c4264c166b414ae"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "test/skills-verify-static-advisories.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "b1140c20ec04d1c8ae67f97a42dbcece1e8e63c98a5de2c087f0359d27c25f17"
         }
       ]
     },
@@ -489,6 +659,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/target-alias-cli.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "96df42acb1cc5ada5ca97912d3b7da5b486067e851b9dd395855b1b540ce738c"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/trace-bundle-cli.test.ts",
@@ -499,6 +679,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/version-flag.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "7acd80deb073fb2987c6d14a028a64c6d44324ac61a05410b7d4b6c87ff5acc6"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/workflow-init-lint-clean.test.ts",

package/src/bin.ts

@@ -1,19 +1,50 @@
 #!/usr/bin/env node
 /**
  * `dz` executable entry point.
+ *
+ * Two phases, and the split is load-bearing (feature dz-cli-defects, D5):
+ *
+ *   phase 1 — ZERO `@dzhechkov/harness-core` imports: probe the installed core version
+ *             and refuse with a NAMED message if it is below `MIN_CORE`;
+ *   phase 2 — `await import('./cli.js')`, which is where the ~100-name static graph is
+ *             linked. A STATIC import here would link that graph before any guard could
+ *             run, which is exactly how a cached lower core produced a bare
+ *             `SyntaxError: … does not provide an export named 'GRADE_SUCCESS_FLOOR'`
+ *             with nothing pointing at the cause.
  */
 
-import { runCli } from './cli.js';
+import { checkCoreCompat, describeMissingExportError, resolveInstalledCoreVersion, MIN_CORE } from './core-compat.js';
 
-const code = await runCli(process.argv.slice(2));
+const foundCore = resolveInstalledCoreVersion(import.meta.url);
+const compat = checkCoreCompat({ found: foundCore, min: MIN_CORE });
 
-// `process.exit()` here TRUNCATED large output on a pipe, silently and at exactly the
-// pipe buffer size. On a pipe (not a TTY, not a file) Node's stdout is ASYNCHRONOUS, so
-// `process.exit` discards whatever has not flushed yet: `dz recall --all --json > file`
-// wrote 122826 bytes while `dz recall --all --json | jq` got exactly 65536 and a parse
-// error. That is data loss in the documented sharing path, and silent — the exit code
-// was 0 and the JSON simply stopped mid-string.
-//
-// So: set the code and let the process end when the event loop drains, which is what
-// flushes stdout. `process.exitCode` preserves the status without the race.
-process.exitCode = code;
+if (!compat.ok) {
+  // stderr, and no stack: the user needs one actionable line, not a trace.
+  console.error(compat.message);
+  process.exitCode = 1;
+} else {
+  let code: number;
+  try {
+    const { runCli } = await import('./cli.js');
+    code = await runCli(process.argv.slice(2));
+  } catch (error) {
+    // The version probe fails OPEN, so a missing-binding link error can still reach us.
+    // Translate exactly that class into the named form; re-throw everything else
+    // unchanged so real bugs still surface.
+    const named = describeMissingExportError(error, foundCore);
+    if (named === null) throw error;
+    console.error(named);
+    code = 1;
+  }
+
+  // `process.exit()` here TRUNCATED large output on a pipe, silently and at exactly the
+  // pipe buffer size. On a pipe (not a TTY, not a file) Node's stdout is ASYNCHRONOUS, so
+  // `process.exit` discards whatever has not flushed yet: `dz recall --all --json > file`
+  // wrote 122826 bytes while `dz recall --all --json | jq` got exactly 65536 and a parse
+  // error. That is data loss in the documented sharing path, and silent — the exit code
+  // was 0 and the JSON simply stopped mid-string.
+  //
+  // So: set the code and let the process end when the event loop drains, which is what
+  // flushes stdout. `process.exitCode` preserves the status without the race.
+  process.exitCode = code;
+}