npm - @dzhechkov/harness-cli - Versions diffs - 0.6.0 → 0.6.1 - Mend

@dzhechkov/harness-cli 0.6.0 → 0.6.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (13) hide show

package/.dz-manifest.json CHANGED Viewed

@@ -5,11 +5,11 @@
     "files": [
       {
         "path": "CHANGELOG.md",
-        "sha256": "fb63e4a05e205a1a2ec6806b61898a4aa5ea19148e4bb0e553e2c9b19e382a5f"
+        "sha256": "b99db6be2d9e6d46f0a9d3ff0877c445efac7b9e90d5fe1db9f5bfa2cb6dc107"
       },
       {
         "path": "README.md",
-        "sha256": "e4d839c8ae59d86f2150bb632e0f8794688ccfa117974eb5f2605676912e7176"
+        "sha256": "696aae63a95e8f8726eecc1aa0e68f20d7980e99bb4008b22f2e1058ca67c6c0"
       },
       {
         "path": "coverage/coverage-final.json",
@@ -41,19 +41,19 @@
       },
       {
         "path": "dist/cli.d.ts.map",
-        "sha256": "bc71c42fc8804e71454efde34beee1e4aed2d074ee029edf08fbee3e76cc369a"
+        "sha256": "8d15372b27f7d79f54df09671b01d5944e8f3f3d87075ba4ece7f0131fc1103e"
       },
       {
         "path": "dist/cli.js",
-        "sha256": "b269e0a6c84ff4069655ee9cd8d264c3be16a12f7de2b849e8d9065d0b6c44b3"
+        "sha256": "be3648deb68dca8a48cc323f34f54c77c05f0ddf0d86982ea9d6f2cc8e073349"
       },
       {
         "path": "dist/cli.js.map",
-        "sha256": "8ba4b1bc4d3cc767a686f54a63e38d247fe399ccdbc959951bc788cee52f1eef"
+        "sha256": "47bcecfe2c9f1daeb73056b3a2c1e10e6b77c465c1bb0d6169690f2276a9cc77"
       },
       {
         "path": "dist/core-compat.d.ts",
-        "sha256": "a8a7f048200d1cde46e1c4b9a175734624f86b432e45db13ff69343ef41adee3"
+        "sha256": "b735a6c18bfbe5adf17bbcfe6e2eeae71477b877e958c36e0a5e73e59f100d6a"
       },
       {
         "path": "dist/core-compat.d.ts.map",
@@ -61,7 +61,7 @@
       },
       {
         "path": "dist/core-compat.js",
-        "sha256": "817a16aafa21f9d592e1b74fbc7b393208aa6cbe7a1ce44059b3d57e4897ca48"
+        "sha256": "6d052e0a7352e9824bc1d4a319d03b42320f6551210f7dfd360afbdca4e556f0"
       },
       {
         "path": "dist/core-compat.js.map",
@@ -85,11 +85,15 @@
       },
       {
         "path": "keys/README.md",
-        "sha256": "204deec657a7f147bf3016441082c2f868f6f11051776f4edc13ec6b44745192"
+        "sha256": "142fc5d0d59003476b8e7367d6fc21fe40ce9e0bf70159318a05abdb10502b8a"
+      },
+      {
+        "path": "keys/dz.pub",
+        "sha256": "353885160582f8e0cfb2a97ef9e51f77997f0120841f92a1ce50d202ebf5dd73"
       },
       {
         "path": "package.json",
-        "sha256": "82ac146f7d849e1315dafc8ca4536e031d5c8104317da46ab8b52e543a187b17"
+        "sha256": "a43608842dab18914486c96c1989b294031f35118bb91c1e8bd0807041a10ddd"
       },
       {
         "path": "src/bin.ts",
@@ -97,11 +101,11 @@
       },
       {
         "path": "src/cli.ts",
-        "sha256": "44be85b04467075bf671bc58572bf294f402b43abc76e23354724a74ea2a6c27"
+        "sha256": "d39fa1f437401419889965674889df3e5091d4ed76242e36f8e70f18683d4e4a"
       },
       {
         "path": "src/core-compat.ts",
-        "sha256": "80b02871db06aa78df70cdc166e46a67fa9335da2f4956d6f937149b7ea69698"
+        "sha256": "5fef10b3d968d299eb7463157e8b164413872f7cc8bf5e9ca1c605e63569a9f7"
       },
       {
         "path": "src/index.ts",
@@ -111,13 +115,17 @@
         "path": "test/agents-sync.test.ts",
         "sha256": "32606890dc57d58257e6b4a38246acb343eea88b6e4b2f643f061325a34d066a"
       },
+      {
+        "path": "test/amendment-check-cli.test.ts",
+        "sha256": "3dd543fd3032f1fca5c063af98a7501b4cccb9d7e42f6c307074b67f2d55d231"
+      },
       {
         "path": "test/cli.test.ts",
         "sha256": "d9adcce84b509e00213bda59a0948eca90d83bdd2fdbbc86aee5ce11d9176940"
       },
       {
         "path": "test/command-count.test.ts",
-        "sha256": "a637ef30d058fcd95dc18ef6eca45d6ac06e0f2bf54341a0aae68b610180b44d"
+        "sha256": "d9677688116c0a35591cb7e53ab1502566e44336959ac0ea449f5e8a1c5e31e3"
       },
       {
         "path": "test/core-compat-guard.test.ts",
@@ -139,6 +147,10 @@
         "path": "test/epoch-replay-cli.test.ts",
         "sha256": "a5a48585b565288ca1ea96030b02b2ccb37a621ef7b3cfe54cd7aaa7164d6904"
       },
+      {
+        "path": "test/feature-adr-record-cli.test.ts",
+        "sha256": "e1a2687a1ae2bc2d32cbcc852487d30f9451ce1ea4a132e188186dd4251c49d1"
+      },
       {
         "path": "test/fixtures/discrimination-check/fake-runner.sh",
         "sha256": "126bbd1ba9c08ef9de826cfa21df3981720e4bc36cd993dff28e0de435cbebae"
@@ -255,6 +267,10 @@
         "path": "test/mutation-registry.json",
         "sha256": "3e6f9bb105154121988da41568ff85573099235857ba25e76c4264c166b414ae"
       },
+      {
+        "path": "test/packaged-trust-root.test.ts",
+        "sha256": "46c0af5494ad717eb4d936489f4bde2199b40cd756ab6c8adb0cd1714a971304"
+      },
       {
         "path": "test/parallel-worktree-smoke.test.ts",
         "sha256": "0522b12ccdf3db79215c4c42162ef970f4cba0c0af96208426ca0323c367d0ee"
@@ -333,5 +349,5 @@
       }
     ]
   },
-  "signature": "M4tCszFw3PbwC+QugRixQ3UqQH2YccEO9wMHSjJl8I5GSXRVnP4viiaUT7tSAvuxH+/8RBKDzSA/52R2KEbiDQ=="
+  "signature": "yL9vp8bfrRx+/nOqnZuEZbW2ccdXFsSI5KEjED+FYQZxqCfx3aQ5KD6htiBIADjoOrKOUDVq7sg6ZcxxBsMCBg=="
 }

package/README.md CHANGED Viewed

@@ -1763,9 +1763,9 @@ runs a command that MEASURES the declared artifacts itself. It refuses a null re
 never recorded as done), an absent or partially-present artifact set, and a stage that declares nothing
 to witness — so a stage that did not happen can no longer be recorded, which the old mechanism allowed.
-## All Commands (70)
+## All Commands (72)
-*(70 MEASURED — reproducer: `grep -c "^      case '" src/cli.ts`, the dispatch cases.)*
+*(72 MEASURED — reproducer: `grep -c "^      case '" src/cli.ts`, the dispatch cases.)*
 ```
 dz setup             --target <name> [--preset <name>] [--select id,id,...] [--skills-dir <dir>] [--memory agentdb] [--no-memory] [--no-hooks] [--install-driver] [--force]
@@ -1821,6 +1821,8 @@ dz challenge --plan <plan.md> [--json] [--context-only] [--author <model>]   # a
 dz routing [--stage <s>] [--json]   # inspect the learned cost-optimal routing store: what `args.models.<stage>='auto-cost'` believes per (stage, complexity-tier, model) — gated attempts/successes/rate (feeds feature-adr model selection)
 dz bto-optimize --split|--plan|--select|--scope-check|--diff [--json]   # deterministic engine behind /bto-optimize: hold-out split + hard-capped budget + no-regress-on-holdout winner selection (defeats judge-gaming); prose-only, diff-confirmed, never auto-writes
 dz discrimination-check --test <f[,f]> [--base <ref>] [--name <filter>] [--runner <cmd>] [--timeout <ms>] [--json]   # §42 test-discrimination gate for feature-adr Step-8: run the ADR's property test in an isolated git worktree at pre-feature base — it MUST go red without the fix. SEVEN verdicts, each gated on EXECUTION evidence: DISCRIMINATES · DISCRIMINATES_VIA_ERROR · NON_DISCRIMINATING (false green) · TEST_FILE_ABSENT · LOAD_ERROR_AT_BOTH_REVS · FAILS_AT_TIP · CANNOT_ISOLATE (+ typed reason). Advisory, never auto-aborts
+dz amendment-check   --slug <slug> | --feature-dir <dir> | --all [--json]   (every AM-N amendment row must resolve to a test found INSIDE the file the row names; the PLAN is authoritative when it carries rows, and an ideation amendment the plan drops is a failure; --all is a census that always exits 0; exit 0 pass/skip, 1 fail, 3 NOT-ESTABLISHED — a section that parsed ZERO rows is never a pass)
+dz feature-adr-record  --kind ledger|training-pair --stage <s> [--slug <s>] [--row|--pair <json>] [--mark <n>] [--once] [--json]   (the witnessed writer: payload as an ARGUMENT never as shell, refused before any write, timestamp stamped before serialising, append verified by re-reading the tail; exit 0 written|duplicate|skipped, 2 refused, 3 not-verified, never blocking)
 dz mutation-gate [--package <dir>] [--registry <file>] [--test-cmd "<cmd>"] [--only <id[,id]>] [--timeout <ms>] [--rebaseline per-entry|final] [--keep-scratch] [--json]   # the mutation gate: for each NAMED protection in a declarative registry, copy the package to a scratch dir (shadow-repo layout, node_modules symlinked, git-initialized), verify the baseline is green, apply the entry's exact {find, replace} mutation, run the suite, REQUIRE red, restore — and require the red to be ATTRIBUTABLE to the protection: a mutated file that no longer parses is MUTATION_UNPARSEABLE, a failing count far above the entry's bound (maxFailing, default from observed) is OVER_FAILING, and a restored tree that does not reproduce green makes the entry INCONCLUSIVE (flaky suite). A mutation that does not apply, a green suite, or an inconclusive run is a FAILURE — never a skip. exit 0 all proven / 1 gate failed / 2 setup error
 dz delivery-check --slug <slug> [--context-only] [--findings <f.json>] [--strict] [--author <model>] [--json]   # portable Step-10 Delivery Gate: the `manual` form that travels to every shell target — prints the 4-plane review brief (regressions ‖ security ‖ code-quality ‖ product-honesty) + artifact probes; --findings classifies a fed-back review into a fail-closed ready|blocked hand-off (only cross-validated BLOCKER/HIGH count) and writes features/<slug>/10_delivery_review.md; --strict exits 1 on blocked
 dz skills-verify     [--dir <project>] [--expect a,b] [--static] [--strict] [--timeout <s>] [--json]   # does .claude/skills/ actually REGISTER? --static = instant layout scan (CI-safe, no session): flags dirs that can never register; default also starts a real session and reads the authoritative system/init listing. exit 0 pass / 1 fail / 2 inconclusive — an unobservable registration is NEVER a pass
@@ -4021,7 +4023,15 @@ npx @dzhechkov/p-replicator init
 ## Status
-`v0.6.0` — adds `dz feature-adr-checkpoint`, which writes the pipeline's durable checkpoint line as a
+`v0.6.1` — two commands that move checks off the model's judgement and onto the disk.
+`dz amendment-check` resolves every `AM-N` amendment row to a test found INSIDE the file the row names
+(the plan is authoritative; an amendment it drops or rewords under the same id is a failure; `--all` is
+a census that never blocks). `dz feature-adr-record` is the witnessed writer for the run-cost ledger
+and training pairs: the payload arrives as an ARGUMENT rather than baked into a shell pipeline, a
+malformed or wrong-kind payload is refused before any write, the timestamp is stamped before
+serialising, and the append is verified by re-reading the tail. `MIN_CORE` moves to `0.6.1`.
+**v0.6.0** — adds `dz feature-adr-checkpoint`, which writes the pipeline's durable checkpoint line as a
 COMMAND instead of leaving a subagent to hand-write state into a file: a security classifier blocked
 NINE consecutive hand-written checkpoint writes in one run, `.fa-state/checkpoints.jsonl` was never
 created, resume was silently dead, and the run still reported success. The command measures every

package/dist/cli.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAA0B,KAAK,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKtF,OAAO,EA2CL,iBAAiB,EAmBjB,KAAK,oBAAoB,EA6SzB,KAAK,YAAY,~~EAyBlB~~,MAAM,yBAAyB,CAAC;~~AAsIjC~~,2EAA2E;AAC3E,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACjE;AAED,yFAAyF;AACzF,MAAM,MAAM,iBAAiB,GAAG,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,KACvD;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;~~AAy7K9E~~,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,mBAAmB,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAQzG;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,SAAkB,GAAG,iBAAiB,CAoB1G;AAwGD,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,mBAAmB,EAC1B,IAAI,GAAE,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC,KAAK,oBAA+C,EAC3G,KAAK,SAAa,GACjB,iBAAiB,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,CAK/D;AAi/DD,wFAAwF;AACxF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO,CAElG;AA4BD,gFAAgF;AAChF,wBAAgB,qBAAqB,IAAI;IAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,MAAM,CAAA;CAAE,CAM7I;~~AA8wBD~~,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,MAAsB,EAC3B,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,eAAe,CAAC,CAI1B;AA8CD,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAEvG;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,EAAE;IACJ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;IACxC;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC;IAChC,kGAAkG;IAClG,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B,GACA,OAAO,CAAC,eAAe,CAAC,CA8D1B;AAutED,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAE,KAAU,GAAG,OAAO,CAAC,MAAM,CAAC,~~CAsM5E~~"}
1	+ {"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAA0B,KAAK,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKtF,OAAO,EA2CL,iBAAiB,EAmBjB,KAAK,oBAAoB,EA6SzB,KAAK,YAAY,EAoClB,MAAM,yBAAyB,CAAC;AAyIjC,2EAA2E;AAC3E,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACjE;AAED,yFAAyF;AACzF,MAAM,MAAM,iBAAiB,GAAG,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,KACvD;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AA+8K9E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,mBAAmB,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAQzG;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,SAAkB,GAAG,iBAAiB,CAoB1G;AAwGD,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,mBAAmB,EAC1B,IAAI,GAAE,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC,KAAK,oBAA+C,EAC3G,KAAK,SAAa,GACjB,iBAAiB,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,CAK/D;AAi/DD,wFAAwF;AACxF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO,CAElG;AA4BD,gFAAgF;AAChF,wBAAgB,qBAAqB,IAAI;IAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,MAAM,CAAA;CAAE,CAM7I;AA89BD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,MAAsB,EAC3B,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,eAAe,CAAC,CAI1B;AA8CD,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAEvG;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,EAAE;IACJ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;IACxC;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC;IAChC,kGAAkG;IAClG,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B,GACA,OAAO,CAAC,eAAe,CAAC,CA8D1B;AAutED,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAE,KAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CA0M5E"}

package/dist/cli.js CHANGED Viewed

@@ -22,7 +22,7 @@ readBacklogConfig, readIdeas, writeIdeas, ideaId, dedupIdea, readGoalMap, readGo
 // qe-bridge (feature qe-bridge-claude, ADR-001): the pure half of the reverse QE bridge.
 KNOWN_CLAUDE, isSafeClaudeId, claudeProbeArgs, claudeReviewArgs, interpretClaudeProbe, modelFamily, buildBridgePrompt, parseBridgeOutput, buildBridgeFailureRecord, buildBridgeSignoffRecord, renderBridgeReport, isSafeSlug, hasUnsafePathChars, hasDotDotSegment, buildReqeBrief, settleReqeDebt, renderReqeList, REQE_SCOPE,
 // Mutation gate (feature ha-mutation-gate) — break each named protection, run the suite, require red.
-parseMutationRegistry, applyMutationToText, countFailingTests, classifyBaseline, classifyRunFailure, classifyMutationOutcome, mutationGateExitCode, summarizeMutationResults, renderMutationReport, TRACE_BUNDLE_LEDGER_PATH, TRACE_BUNDLE_SCHEMA, TRACE_BUNDLE_RUN_META_FILE, buildBundle, serializeBundle, parseBundle, planImport, decideCheckpointWrite, } from '@dzhechkov/harness-core';
+parseMutationRegistry, applyMutationToText, countFailingTests, classifyBaseline, classifyRunFailure, classifyMutationOutcome, mutationGateExitCode, summarizeMutationResults, renderMutationReport, TRACE_BUNDLE_LEDGER_PATH, TRACE_BUNDLE_SCHEMA, TRACE_BUNDLE_RUN_META_FILE, buildBundle, serializeBundle, parseBundle, planImport, decideCheckpointWrite, amendmentSection, planSaysNoAmendments, parseAmendments, resolveAmendments, decideAmendmentOutcome, amendmentVerdictLine, amendmentsMissingFromPlan, AMENDMENT_VACUITY_NOTE, decideRecordWrite, decideReadBack, recordVerdictLine, } from '@dzhechkov/harness-core';
 import { getPreset, PRESET_NAMES } from '@dzhechkov/harness-presets';
 import { scanGitHub, analyzeRepo, generateReport, deepAnalyze, scanAllSources, ScoutMemory } from '@dzhechkov/scout';
 const USAGE = `dz - DZ cross-platform harness CLI
@@ -62,6 +62,8 @@ Usage:
   dz epoch-replay --judge <filled-work-order.json> [--out <file>]   (blind judge prompts from the filled plans)
   dz epoch-replay --score <judgments.json> --work-order <file> [--slice <name>] [--json]   (un-blind against the pre-registered assignment → SUPPORTED only when the two 95% Wilson CIs are DISJOINT, else FALSIFIED / INCONCLUSIVE)
   dz score --slug <feature> [--project <dir>] [--json]   (process scorecard for ONE feature-adr run, from its artifacts: ADR confirmation, discrimination, cross-model QE grade, live verification, README-first, learning loop, amendments — descriptive-only, a low score exits 0)
+  dz amendment-check --slug <slug> | --feature-dir <dir> | --all [--json]   (the deterministic Step-8 amendment gate: every AM-N row must resolve to a test found INSIDE the file the row names; the PLAN is authoritative when it carries rows, and an ideation amendment the plan drops is a failure. exit 0 pass/skip, 1 fail, 3 NOT-ESTABLISHED — a section that parsed ZERO rows is never a pass. --all is a CENSUS and always exits 0. Does NOT prove non-vacuity — that is dz discrimination-check)
+  dz feature-adr-record --kind ledger|training-pair --stage <s> [--slug <s>] [--row|--pair <json>] [--mark <n>] [--once] [--json]   (the witnessed writer for the run-cost ledger and training pairs: the payload arrives as an ARGUMENT, never as shell; a malformed or wrong-kind payload is REFUSED before any write; the timestamp is stamped before serialising; the append is verified by re-reading the tail. exit 0 written|duplicate|skipped, 2 refused, 3 not-verified — a record failure is never blocking)
   dz feature-adr-checkpoint (--slug <feature> | --feature-dir <abs>) --stage <s> --input-hash <h> --result <json> [--artifact a,b] [--json]   (record a pipeline stage ONLY after measuring its artifacts on disk; refuses a null result, an absent artifact, or a stage that declares none — the subagent runs a COMMAND instead of hand-writing durable state)
   dz reqe [--slug <feature> [--done --report <f>]] [--json]   (the re-QE debt ledger: a usage-switched run whose Step-8 QE ran on the coder's OWN family records a debt; list debts, print the cross-family review brief, settle FAIL-CLOSED against a graded report — the settlement lands in 08_qe_report.md)
   dz qe-bridge --family claude --slug <feature> [--coder-family codex|claude] [--model <id>] [--files a,b] [--out <f>] [--timeout <s>] [--allow-same-family] [--json]   (the REVERSE QE bridge: run an INDEPENDENT Claude reviewer over a feature's Step-8 artifacts from ANY host — a Codex session included, plain shell, no Claude agent plane needed — and land a PARSED signoff. The reviewer runs ISOLATED: an EMPTY temp cwd plus --safe-mode --strict-mcp-config --tools '' --no-session-persistence, so no CLAUDE.md/skills/plugins/hooks/MCP load, and the verdict is read from the --output-format json RESULT ENVELOPE — text a session customization printed onto the same stdout can never become a signoff. Probes the model before trusting it; sends SCOPED extracts with a loud 200k-char ceiling (never silent truncation); the grade must AGREE across three LAST-anchored channels (terminal marker line, fenced qe-bridge-signoff JSON, the report's own GRADE line) AND the marker must be the FINAL content — empty, gradeless, self-contradicting or miscounted output is one of 18 NAMED failures with an audit record under features/<slug>/.fa-state/qe-bridge/ (runId, resolved executable + binOverride, prompt sha256, channel offsets, requestedOut, reportWritten, retained raw stdout; 0600 files in a 0700 dir), never a clean review. A --coder-family that contradicts the recorded reqe debt is refused. Writes features/<slug>/08b_reqe_report.md, which dz reqe --done settles unchanged. DISCLOSURE: the extracts you scope are sent to the Claude runtime; the bridge cannot classify secrets. DZ_QE_BRIDGE_CLAUDE_BIN is a TEST SEAM, not a flag. exit 0 signoff parsed (ANY grade — it reports, it does not gate) / 1 named failure / 2 usage)
@@ -4308,7 +4310,7 @@ function cmdPublish(options, flags, cwd, write) {
     // Reject unknown flags/options so a typo (e.g. `--dry-rum`) can NEVER be
     // silently swallowed and flip the command into live-publish mode.
     const allowedFlags = new Set(['dry-run', 'no-dry-run', 'yes', 'confirm', 'bump-only', 'help', 'require-signing', 'provenance', 'no-provenance']);
-    const allowedOptions = new Set(['filter', 'claim-check', 'no-guard']);
+    const allowedOptions = new Set(['filter', 'claim-check', 'no-guard', 'sign-key']);
     const allowedHelp = '  allowed: --dry-run (default), --yes/--confirm/--no-dry-run (go live), --bump-only, --filter <substr>, --claim-check <off|warn|error>, --no-guard "<reason>" (skip the guard pre-flight; logged)';
     for (const flag of flags) {
         if (!allowedFlags.has(flag)) {
@@ -4459,7 +4461,30 @@ function cmdPublish(options, flags, cwd, write) {
             return 1;
         }
     }
-    const report = publishPackages(cwd, { provenance, dryRun, filter, bumpOnly, claimGate: claimCheckOpt });
+    // A signed pack must be RE-SIGNED after publish's own bump and README sync (feature
+    // `sign-after-bump`): publish mutates the pack, so any earlier signature describes files that no
+    // longer exist. Default to the same path `dz sign --init` writes, so the ordinary operator needs no
+    // new flag; `--sign-key` overrides it.
+    const signKey = (options.get('sign-key') ?? join(homedir(), '.dz', 'keys', 'dz.key')).trim();
+    const report = publishPackages(cwd, {
+        provenance,
+        dryRun,
+        filter,
+        bumpOnly,
+        claimGate: claimCheckOpt,
+        signKey: signKey === '' ? undefined : resolve(cwd, signKey),
+        reSign: (packDir, keyPath) => {
+            // The same three steps `dz sign` performs, including the SBOM — a manifest refreshed without
+            // its SBOM would leave the two describing different trees.
+            const files = packFiles(packDir);
+            if (files.length === 0)
+                throw new Error(`refusing to sign an empty pack: ${packDir}`);
+            const manifest = buildManifest(packDir, basename(packDir), files);
+            const signed = signManifest(manifest, readFileSync(keyPath, 'utf-8'));
+            writeFileSync(join(packDir, MANIFEST_NAME), `${JSON.stringify(signed, null, 2)}\n`);
+            writeFileSync(join(packDir, SBOM_NAME), `${JSON.stringify(buildSbom(manifest), null, 2)}\n`);
+        },
+    });
     write(`\ndz publish${dryRun ? ' --dry-run' : ''}${bumpOnly ? ' --bump-only' : ''}${claimCheckOpt !== 'warn' ? ` --claim-check ${claimCheckOpt}` : ''}`);
     write(`  Published: ${report.published}  Skipped: ${report.skipped}  Errors: ${report.errors}\n`);
     for (const pkg of report.packages) {
@@ -8634,6 +8659,217 @@ function scanOneReqeRoot(featuresDir, keyMatchesDir, out, addMalformed) {
  * It measures `--artifact` paths on disk itself. A caller cannot assert presence; it can only name
  * what must be there.
  */
+/**
+ * `dz amendment-check` — the deterministic half of the Step-8 amendment gate (ADR-001).
+ *
+ * The gate used to be prompt text asking the QE agent to confirm every `AM-N` row names a real test.
+ * That is layer 4 on the cost-of-detection ladder, and `features/qe-scoped-review` shipped with five
+ * dangling ids and a plan recording `## Amendments: None`. This command owns I/O and the exit code;
+ * `harness-core/src/amendment-trace.ts` owns the grammar and the rules.
+ */
+/**
+ * `dz feature-adr-record` — the witnessed writer for the run-cost ledger and training pairs
+ * (ADR-001 … ADR-003). The subagent stops being a COURIER handed a shell pipeline and becomes a
+ * CALLER handed arguments: this command owns the paths, the refusal, the append, the READ-BACK and
+ * the exit code. A courier can neither refuse nor verify, which is how four workflow runs finished
+ * with no cost row at all.
+ */
+function cmdFeatureAdrRecord(options, flags, cwd, write) {
+    const json = flags.has('json');
+    const kind = (options.get('kind') ?? '').trim();
+    const stage = (options.get('stage') ?? '').trim();
+    const slug = (options.get('slug') ?? '').trim();
+    const payloadRaw = options.get('row') ?? options.get('pair') ?? '';
+    const emit = (d, extra = {}) => {
+        if (json) {
+            write(JSON.stringify({ ok: d.exit === 0, kind, stage, verdict: d.verdict, exit: d.exit, reason: d.reason, blocking: d.blocking, ...extra }));
+        }
+        else {
+            write(recordVerdictLine(kind === 'ledger' || kind === 'training-pair' ? kind : 'ledger', stage, d));
+        }
+        return d.exit;
+    };
+    if (kind !== 'ledger' && kind !== 'training-pair') {
+        write('dz feature-adr-record: --kind must be ledger or training-pair');
+        return 2;
+    }
+    if (payloadRaw === '') {
+        write('dz feature-adr-record: --row (ledger) or --pair (training-pair) is required');
+        return 2;
+    }
+    const repo = (options.get('project') ?? cwd).trim() || cwd;
+    const target = kind === 'ledger'
+        ? join(repo, '.dz', 'feature-adr', 'run-cost-ledger.jsonl')
+        : join(repo, '.dz', 'fa-training', slug === '' ? 'unknown' : slug, `${stage.replace(/[^\w.-]/g, '_')}.jsonl`);
+    const markDir = join(repo, '.dz', 'fa-training', '.backfill-marks');
+    const markName = (options.get('mark') ?? '').trim();
+    const markPath = markName === '' ? null : join(markDir, markName.replace(/[^\w.-]/g, '_'));
+    const decision = decideRecordWrite({
+        kind,
+        payloadRaw,
+        stage,
+        stageProducedResult: flags.has('no-result') ? false : true,
+        markExists: markPath !== null && existsSync(markPath),
+        targetExists: existsSync(target),
+        targetHasPair: flags.has('once') && existsSync(target),
+        timestamp: new Date().toISOString(),
+    });
+    if (decision.line === null)
+        return emit(decision);
+    // MEASURE, never assume: an unwritable target is a LOUD refusal, because a swallowed mkdir failure
+    // is exactly how a write becomes a silent no-op (acid case A4).
+    try {
+        mkdirSync(dirname(target), { recursive: true });
+        if (markPath !== null) {
+            mkdirSync(markDir, { recursive: true });
+            mkdirSync(markPath);
+        }
+    }
+    catch (err) {
+        const code = err.code;
+        if (markPath !== null && code === 'EEXIST') {
+            // A stale mark (target absent) was already decided as writable above; re-taking it is a no-op,
+            // not a duplicate. Only a mark WITH its target means another run got here first.
+            if (decision.staleMark !== true) {
+                return emit({ verdict: 'duplicate', exit: 0, reason: 'a mark for this record already exists — another run captured it first', blocking: false, line: null });
+            }
+        }
+        return emit({ verdict: 'refused', exit: 2, reason: `the target could not be prepared: ${err.message}`, blocking: false, line: null });
+    }
+    try {
+        appendFileSync(target, `${decision.line}\n`, 'utf-8');
+    }
+    catch (err) {
+        return emit({ verdict: 'refused', exit: 2, reason: `the append failed: ${err.message}`, blocking: false, line: null });
+    }
+    // ADR-002: the write is verified against the disk, never inferred from the absence of an error.
+    let lastLine = null;
+    try {
+        const body = readFileSync(target, 'utf-8');
+        const lines = body.split('\n').filter((l) => l !== '');
+        lastLine = lines.length > 0 ? lines[lines.length - 1] : null;
+    }
+    catch {
+        lastLine = null;
+    }
+    return emit(decideReadBack(decision.line, lastLine), { target });
+}
+function cmdAmendmentCheck(options, flags, cwd, write) {
+    const json = flags.has('json');
+    const readOr = (abs) => {
+        try {
+            return readFileSync(abs, 'utf-8');
+        }
+        catch {
+            return null;
+        }
+    };
+    const checkOne = (featureDir) => {
+        const slug = basename(featureDir);
+        const ideation = readOr(join(featureDir, '03.5_ideation_report.md'));
+        const plan = readOr(join(featureDir, '06_implementation_plan.md'));
+        if (ideation === null) {
+            return {
+                slug,
+                resolutions: [],
+                decision: decideAmendmentOutcome({ sectionPresent: false, rows: [], resolutions: [], planSaysNone: false }),
+            };
+        }
+        const sectionPresent = amendmentSection(ideation) !== null;
+        const ideationRows = parseAmendments(ideation);
+        const planRows = plan === null ? [] : parseAmendments(plan);
+        // The PLAN is authoritative when it carries rows: Step 6 owes "carry AM-N into the plan
+        // verbatim", and the ideation report is the historical record — rewriting its rows to match
+        // tests named later would close the trail by falsifying it. Coverage keeps that honest below.
+        const rows = planRows.length > 0 ? planRows : ideationRows;
+        const missingFromPlan = planRows.length > 0 ? amendmentsMissingFromPlan(ideationRows, planRows) : [];
+        // Paths in an amendment row are repo-relative, so they resolve against the repo root — not
+        // against the feature directory, and not against wherever the caller happened to stand.
+        const resolutions = resolveAmendments(rows, { readFile: (rel) => readOr(resolve(cwd, rel)) });
+        const decision = decideAmendmentOutcome({
+            sectionPresent,
+            rows,
+            resolutions,
+            planSaysNone: plan !== null && planSaysNoAmendments(plan),
+            missingFromPlan,
+        });
+        return { slug, decision, resolutions };
+    };
+    // --all is a CENSUS, not a gate (ADR-003): a gate that is red on arrival over 21 historical
+    // features gets disabled, and then the mechanism is gone along with the debt it was to surface.
+    if (flags.has('all')) {
+        const featuresDir = join(cwd, 'features');
+        let slugs = [];
+        try {
+            slugs = readdirSync(featuresDir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name).sort();
+        }
+        catch {
+            if (json)
+                write(JSON.stringify({ ok: true, mode: 'all', features: [], note: 'no features/ directory' }));
+            else
+                write('amendment traceability census: no features/ directory');
+            return 0;
+        }
+        const rowsOut = [];
+        for (const slug of slugs) {
+            try {
+                const r = checkOne(join(featuresDir, slug));
+                rowsOut.push({ slug, outcome: r.decision.outcome, counts: r.decision.counts, reasons: r.decision.reasons.length });
+            }
+            catch (err) {
+                // AM-6: one unreadable feature becomes its own row. Dropping it silently would make the
+                // census read like coverage it does not have.
+                rowsOut.push({ slug, outcome: 'read-error', error: err.message });
+            }
+        }
+        if (json) {
+            write(JSON.stringify({ ok: true, mode: 'all', note: AMENDMENT_VACUITY_NOTE, features: rowsOut }));
+        }
+        else {
+            const tally = new Map();
+            for (const r of rowsOut)
+                tally.set(String(r['outcome']), (tally.get(String(r['outcome'])) ?? 0) + 1);
+            for (const r of rowsOut) {
+                if (r['outcome'] !== 'pass' && r['outcome'] !== 'skip')
+                    write(`  [${String(r['outcome'])}] ${String(r['slug'])}`);
+            }
+            write(`amendment traceability census over ${rowsOut.length} feature(s): ${[...tally].map(([k, v]) => `${v} ${k}`).join(', ')}`);
+            write(AMENDMENT_VACUITY_NOTE);
+        }
+        return 0;
+    }
+    const explicitDir = (options.get('feature-dir') ?? '').trim();
+    const slug = (options.get('slug') ?? '').trim();
+    if (explicitDir === '' && slug === '') {
+        write('dz amendment-check: one of --slug / --feature-dir is required (or --all for a census)');
+        return 2;
+    }
+    const featureDir = explicitDir !== '' ? resolve(cwd, explicitDir) : join(cwd, 'features', slug);
+    const { decision, resolutions } = checkOne(featureDir);
+    if (json) {
+        write(JSON.stringify({
+            ok: decision.outcome === 'pass' || decision.outcome === 'skip',
+            slug: basename(featureDir),
+            outcome: decision.outcome,
+            exit: decision.exit,
+            counts: decision.counts,
+            reasons: decision.reasons,
+            rows: resolutions,
+            note: AMENDMENT_VACUITY_NOTE,
+        }));
+    }
+    else {
+        for (const r of resolutions) {
+            if (r.verdict !== 'resolved')
+                write(`  [${r.verdict}] ${r.id}${r.testId === null ? '' : ` \`${r.testId}\``} — ${r.detail}`);
+        }
+        write(AMENDMENT_VACUITY_NOTE);
+        // The verdict is the LAST line, in the K2 gate's own shape, so a caller that reads the tail of
+        // the output reads a verdict rather than a finding.
+        write(amendmentVerdictLine(decision));
+    }
+    return decision.exit;
+}
 function cmdFeatureAdrCheckpoint(options, flags, cwd, write) {
     const json = flags.has('json');
     const emit = (payload, human, code) => {
@@ -11513,6 +11749,10 @@ export async function runCli(argv, io = {}) {
                 return cmdEpochReplay(options, flags, cwd, write);
             case 'score':
                 return cmdScore(options, flags, cwd, write);
+            case 'feature-adr-record':
+                return cmdFeatureAdrRecord(options, flags, cwd, write);
+            case 'amendment-check':
+                return cmdAmendmentCheck(options, flags, cwd, write);
             case 'feature-adr-checkpoint':
                 return cmdFeatureAdrCheckpoint(options, flags, cwd, write);
             case 'reqe':