@dzhechkov/harness-cli 0.5.1 → 0.5.3

package/dist/core-compat.d.ts

@@ -39,7 +39,7 @@
  * standing test (`test/core-import-floor.test.ts`, F1) fails if the two drift apart,
  * because a guard that says 0.4.7 while npm may install 0.4.2 is worse than no guard.
  */
-export declare const MIN_CORE = "0.5.1";
+export declare const MIN_CORE = "0.5.3";
 /** The npm name of the guarded package — one literal, used by every leg below. */
 export declare const CORE_PACKAGE_NAME = "@dzhechkov/harness-core";
 /**

package/dist/core-compat.js

@@ -42,7 +42,7 @@ import { fileURLToPath } from 'node:url';
  * standing test (`test/core-import-floor.test.ts`, F1) fails if the two drift apart,
  * because a guard that says 0.4.7 while npm may install 0.4.2 is worse than no guard.
  */
-export const MIN_CORE = '0.5.1';
+export const MIN_CORE = '0.5.3';
 /** The npm name of the guarded package — one literal, used by every leg below. */
 export const CORE_PACKAGE_NAME = '@dzhechkov/harness-core';
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dzhechkov/harness-cli",
-  "version": "0.5.1",
+  "version": "0.5.3",
   "description": "The dz CLI — install AI skills for Claude Code, Codex, OpenCode, Hermes, OpenClaude, GitHub Copilot. 67 commands, 14 presets, 10 platform targets.",
   "type": "module",
   "license": "MIT",
@@ -40,8 +40,15 @@
     ".dz-manifest.json",
     "sbom.json"
   ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "lint": "tsc -p tsconfig.json --noEmit"
+  },
   "dependencies": {
-    "@dzhechkov/harness-core": "^0.5.1",
+    "@dzhechkov/harness-core": "^0.5.3",
     "@dzhechkov/harness-presets": "^0.5.0",
     "@dzhechkov/scout": "^0.8.0",
     "@dzhechkov/skills-devops": "^0.3.0",
@@ -75,12 +82,5 @@
     "url": "https://github.com/djd1m/dz-harness-hub.git",
     "directory": "packages/@dzhechkov/harness-cli"
   },
-  "homepage": "https://github.com/djd1m/dz-harness-hub/tree/main/packages/@dzhechkov/harness-cli#readme",
-  "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
-    "lint": "tsc -p tsconfig.json --noEmit"
-  }
-}
+  "homepage": "https://github.com/djd1m/dz-harness-hub/tree/main/packages/@dzhechkov/harness-cli#readme"
+}

package/sbom.json

@@ -25,7 +25,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6d4e868f0fef3d86f83c6316f4bb760fd9228ef1008d3bbb31916f6c8890b944"
+          "content": "0d475969dbc98308bf0e23a15700c537ed4947b3cf910b334e647e3972fc78fe"
         }
       ]
     },
@@ -105,7 +105,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "514bbdd5b14a1257693418c64bf2fb6c13d78beccd307f0f3a9c66461a42a62f"
+          "content": "7c64ed0d976d79fd8f3970ced13e664db1e97c43f96a7b153d7b993948cc5f9f"
         }
       ]
     },
@@ -115,7 +115,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "09277bf170699a591ca9d2c8f6ac3b2727ec41cff3a75e56058724bd1e4686e1"
+          "content": "8052367d84a5a1c4a9f7fb3397a6297edf707031bbfa59b945d240d17e221f04"
         }
       ]
     },
@@ -125,7 +125,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e2a46281a86931f342cf726ae0fd0aeb25eef7ce94edbd07abce68635f547e78"
+          "content": "f759949bcfaa04c3f4eaebbccde688192d44f129b61115313533f8828f7376f8"
         }
       ]
     },
@@ -135,7 +135,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "868dd0e0ec12ea9df5f4df148518f5c59226ecc1de04fa67d5455f4932a7819b"
+          "content": "f89dbd282c83fa64f23c8fff3c83bc85c08c8deef451fd4d525e33784c2a0e13"
         }
       ]
     },
@@ -155,7 +155,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "973e9bd7c0951e9f74bd3e8b38a0cc81076d6ea8393fa3e52a428b92ebc967c8"
+          "content": "66fd34797f007aa0607698a159fb367a772f32f5be1c2a90748c20cbf4b973cf"
         }
       ]
     },
@@ -225,7 +225,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "503d43d8ab6e7fb04c28f96270eb00da9782e4ec0570772f2f701aef33037c25"
+          "content": "797bfd035a68dc039ca33393f02f4ed1fe97e1021559e01906a0fbbc9b28c1dc"
         }
       ]
     },
@@ -245,7 +245,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "747d3a279349208ce8f5c6121bbf8ea039ebafaa8251c520ba3092a7aa80013f"
+          "content": "9338e5f5dd5cbb1f3692cb7db53531f103bc28450c109765bf161664a7598a5b"
         }
       ]
     },
@@ -255,7 +255,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "53747612facd41ade5c291949b854d354e694b733e1f294cb3e521193760ae26"
+          "content": "ba96d37f80c98618a1d8ca61cf071c9d26c74dab8d277106e9079068428a5b71"
         }
       ]
     },
@@ -679,6 +679,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/roam-nested-archive.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "0c078b6e03cc749a64e0ac327885de1eea3c13e940c8e3f231174ab84076d44c"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/skills-verify-static-advisories.test.ts",
@@ -779,6 +789,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/workflow-trace-attestation-cli.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "dad2efd147d9186b29989ef36f6e62614c4ded983d7894a7c1f9b1628e621871"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/workflow-trace-cli-surface.test.ts",

package/src/cli.ts

@@ -103,6 +103,10 @@ import {
   parseTrace,
   assembleTimeline,
   runInvariants,
+  deriveAttestation,
+  stampAttestation,
+  corroborate,
+  NOT_WITNESSED,
   renderTimelineHtml,
   importEcc,
   recordPattern,
@@ -425,7 +429,7 @@ Usage:
   dz workflow render <plan.json> --o <script.js> [--check] [--force]   (plan → region-delimited loop script; USER regions preserved)
   dz workflow blobs [--check]                               (list/self-check the subsystem blob registry)
   dz workflow-lint <script.js> [--plan <plan.json>] [--require-plan|--legacy] [--json]   (layer-1 gate; exit 0/1/3 — inconclusive is never a pass)
-  dz workflow-trace <runDir|--slug <s>|--run <id>> [--invariants <plan.json>] [--html <out.html>] [--json]   (timeline + SEQ invariant runner)
+  dz workflow-trace <runDir|--slug <s>|--run <id>> [--invariants <plan.json>] [--corroborate <hostRunDir>] [--html <out.html>] [--json]   (timeline + SEQ invariant runner; ALWAYS reports who attested the trace — instrument|agent|unknown — and --corroborate checks the Claude host's own records for the half they can witness)
   dz workflow-trace export <run> --o <file> [--include-pairs --yes] [--strict]   (one run's telemetry as ONE movable file: events, not aggregates; degradation is typed and LOUD, --strict fails closed)
   dz workflow-trace import <bundle> --into <root> [--force] [--with-pairs]       (reconstruct that run under an explicit root; FAIL-CLOSED — never writes over a run that already has content)
   dz install <npm-pkg> [--target <name>] [--project <dir>] [--force]
@@ -1577,6 +1581,57 @@ function cmdWorkflowTrace(options: Map<string, string>, flags: Set<string>, cwd:
   const ckptFile = join(runDir, '.fa-state', 'checkpoints.jsonl');
   const ledgerFile = resolve(cwd, '.dz', 'feature-adr', 'run-cost-ledger.jsonl');
   const journalFile = join(runDir, 'journal.jsonl');
+  // ── provenance (feature honest-trace-provenance) ──────────────────────────────────────────────
+  // The attestation is DERIVED here, from run-state.json — an artifact the sandboxed rendered
+  // script cannot write. It is never read out of the trace itself (ADR-001).
+  const parsedRun = parseTrace(traceText);
+  const runStateFile = join(runDir, 'run-state.json');
+  const runStateForAttestation = existsSync(runStateFile)
+    ? ((): Record<string, unknown> | null => {
+        try {
+          return JSON.parse(readFileSync(runStateFile, 'utf8')) as Record<string, unknown>;
+        } catch {
+          return null; // an unreadable state binds nothing — the reader will say `unknown`
+        }
+      })()
+    : null;
+  const attestation = deriveAttestation(parsedRun, runStateForAttestation, {
+    sha256: createHash('sha256').update(traceText, 'utf8').digest('hex'),
+    lines: traceText.split('\n').filter((l) => l.trim() !== '').length,
+  });
+  const ATTESTATION_SENTENCE: Record<typeof attestation, string> = {
+    instrument: 'ATTESTATION instrument — the bytes read match the identifiers, hash and line count asserted by the co-located run-state.json. That is NOT proof that dz historically wrote them, nor that this is the directory it wrote them in.',
+    agent: 'ATTESTATION agent — this trace was appended by an AGENT asked to run the flush command, not by an instrument. Treat every verdict below as testimony.',
+    unknown: 'ATTESTATION unknown — no binding run-state.json and no emitter declaration. Not instrument; treat as testimony.',
+  };
+  // ── corroboration (ADR-002, opt-in) ───────────────────────────────────────────────────────────
+  // The host's OWN records, for the half they can witness. Directory containment is the ONLY
+  // binding available — trace and journal.jsonl share no identifier — and every result says so.
+  const corroborateDir = options.get('corroborate');
+  let corroboration: ReturnType<typeof corroborate> | null = null;
+  if (corroborateDir !== undefined) {
+    const hostDir = resolve(cwd, corroborateDir);
+    const jf = join(hostDir, 'journal.jsonl');
+    const transcripts: Record<string, string> = {};
+    try {
+      for (const f of readdirSync(hostDir)) {
+        const m = /^agent-(.+)\.jsonl$/.exec(f);
+        if (m) transcripts[m[1]!] = readFileSync(join(hostDir, f), 'utf8');
+      }
+    } catch {
+      /* an unreadable host dir is INCONCLUSIVE, decided by corroborate() below — never a throw */
+    }
+    // The trace side, projected: the agent ids the trace claims took part, in seq order. The trace
+    // has no agentId of its own, so the invocationId is what we can offer — and that is exactly why
+    // the binding is by-directory and the verdict is scoped.
+    const claimed: string[] = [];
+    for (const e of parsedRun.events) if (e.event === 'dispatched') claimed.push(e.invocationId);
+    corroboration = corroborate(
+      { agentIds: claimed },
+      { journal: existsSync(jf) ? readFileSync(jf, 'utf8') : null, agentTranscripts: transcripts },
+      hostDir,
+    );
+  }
   const timeline = assembleTimeline({
     trace: traceText,
     checkpoints: existsSync(ckptFile) ? readFileSync(ckptFile, 'utf8') : null,
@@ -1598,7 +1653,7 @@ function cmdWorkflowTrace(options: Map<string, string>, flags: Set<string>, cwd:
       return 1;
     }
     projection = toTraceProjection(parsed);
-    verdicts = runInvariants(projection, parseTrace(traceText));
+    verdicts = stampAttestation(runInvariants(projection, parsedRun), attestation);
   }
   const htmlOut = options.get('html');
   if (htmlOut !== undefined) {
@@ -1607,9 +1662,14 @@ function cmdWorkflowTrace(options: Map<string, string>, flags: Set<string>, cwd:
     write(`dz workflow-trace: wrote ${absHtml} (self-contained: mermaid topology + HTML waterfall)`);
   }
   if (flags.has('json')) {
-    write(JSON.stringify({ timeline, verdicts }, null, 2));
+    write(JSON.stringify({ timeline, attestation, corroboration, verdicts }, null, 2));
     return verdicts.some((v) => v.status === 'fail') ? 1 : 0;
   }
+  write(ATTESTATION_SENTENCE[attestation]);
+  if (corroboration !== null) {
+    write(`CORROBORATION ${corroboration.verdict} (binding: ${corroboration.binding}, ${corroboration.hostDir}) — ${corroboration.detail}`);
+    write(`  witnessed: ${corroboration.witnessed.join(', ')}   NOT witnessed: ${NOT_WITNESSED.join(', ')}`);
+  }
   write(`run ${timeline.runId ?? '(unknown)'}${timeline.incomplete ? ' — INCOMPLETE (no run.closed; unflushed tail may be lost)' : ''}; sources: ${timeline.sources.join(', ')}`);
   for (const r of timeline.rows.filter((x) => x.kind === 'trace')) {
     write(`  ${String(r.seq).padStart(5)}  ${r.label}  ${r.detail}${r.wallTime ? `  [wall ${r.wallTime} — diagnostic only]` : ''}`);
@@ -1661,6 +1721,17 @@ function cmdRoam(options: Map<string, string>, flags: Set<string>, cwd: string,
     return 1;
   }
 
+  // The roam archive is its OWN git repository (owner decision 2026-08-20), so `git rev-parse` run
+  // from inside it resolves to the archive, not the project. Left unguarded that computes
+  // `<repo>/roam/roam/claude-state` and, with --apply, creates a symlink under a fabricated slug.
+  // Detect the nested archive by its own shape rather than by its name alone: a directory called
+  // `roam` that CONTAINS `claude-state` is the archive, wherever it lives.
+  if (basename(repoRoot) === 'roam' && existsSync(join(repoRoot, 'claude-state'))) {
+    write('dz roam: this is the roam ARCHIVE, not the project — its git root is its own.');
+    write(`  Run from the project root instead: cd ${dirname(repoRoot)} && dz roam`);
+    return 1;
+  }
+
   const roamDir = join(repoRoot, 'roam', 'claude-state');
   const claudeProjectsDir = process.env['CLAUDE_PROJECTS_DIR'] ?? join(homedir(), '.claude', 'projects');
 
@@ -8424,6 +8495,13 @@ function wfMakeStore(runDir: string, repoRoot: string, targetCwd: string): RunSt
     runDirExists: () => existsSync(runDir),
     hasTrace: () => existsSync(tracePath),
     readTraceText: () => (existsSync(tracePath) ? readFileSync(tracePath, 'utf8') : null),
+    // The CONTENT half of the attestation binding. Hashes the file AS IT STANDS, so it must be
+    // called after the final flush — the scheduler's stampTraceBinding is the single caller.
+    measureTrace: () => {
+      if (!existsSync(tracePath)) return null;
+      const text = readFileSync(tracePath, 'utf8');
+      return { sha256: createHash('sha256').update(text, 'utf8').digest('hex'), lines: text.split('\n').filter((l) => l.trim() !== '').length };
+    },
     readRunState: () => wfReadJson(statePath) as WfRunState | null,
     writeRunState: (s) => {
       mkdirSync(runDir, { recursive: true });

package/src/core-compat.ts

@@ -44,7 +44,7 @@ import { fileURLToPath } from 'node:url';
  * standing test (`test/core-import-floor.test.ts`, F1) fails if the two drift apart,
  * because a guard that says 0.4.7 while npm may install 0.4.2 is worse than no guard.
  */
-export const MIN_CORE = '0.5.1';
+export const MIN_CORE = '0.5.3';
 
 /** The npm name of the guarded package — one literal, used by every leg below. */
 export const CORE_PACKAGE_NAME = '@dzhechkov/harness-core';

package/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2026 dzhechko
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.