@dzhechkov/harness-cli 0.7.0 → 0.7.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dzhechkov/harness-cli",
-  "version": "0.7.0",
+  "version": "0.7.2",
   "description": "The dz CLI — install AI skills for Claude Code, Codex, OpenCode, Hermes, OpenClaude, GitHub Copilot. 67 commands, 14 presets, 10 platform targets.",
   "type": "module",
   "license": "MIT",

package/sbom.json

@@ -25,7 +25,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "696aae63a95e8f8726eecc1aa0e68f20d7980e99bb4008b22f2e1058ca67c6c0"
+          "content": "ca0d42d114330fe7a2d0833abbf2fe90f3a60221e6cffeb3dc3b7edc7f818ec6"
         }
       ]
     },
@@ -75,7 +75,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "3893831e365016b5bd118f7f0ce2e8b106cfd0400689b9e190a5f80aa61b79f5"
+          "content": "5aeeec8ab84e3922ce0c7b7ea711fd1cdff67b68e1ded0b66e920a907e6ac267"
         }
       ]
     },
@@ -85,7 +85,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ea26d4cfd1265fc9f2397a17055580425ddf1ee312e0f28a06a214804a58906a"
+          "content": "f1cc2dc4a5de433a2d3cbd1e0567bf9c7bb5f3d04e90f72d10c54a9ccc5b00ae"
         }
       ]
     },
@@ -95,7 +95,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "aa547fee89f14b634fb3b95f95ccbe1bfcc3f29a1c8f11b01a4ecc98ff3e736d"
+          "content": "a1154eea12c861e092af90e33b5074d1219401f2194e2205f29ae9deb742834e"
         }
       ]
     },
@@ -105,7 +105,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "11c89da8d9b115a70397da792e9b2220e32936ecebcd2e26ab03963c14fc56d8"
+          "content": "a1fcb5f0f1524e7564bdec11bcf3b1c8d9d41ddb08ea5502dc72bbb3de439baa"
         }
       ]
     },
@@ -115,7 +115,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b735a6c18bfbe5adf17bbcfe6e2eeae71477b877e958c36e0a5e73e59f100d6a"
+          "content": "4ab523bc0a5f777fd66b8ed44c07a8b240a4cf2ce32da779a3916e6ddc53fa33"
         }
       ]
     },
@@ -125,7 +125,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "bce1ded9ffac15080908af1a9571b67141c141374ec4ba90b987fd6fd8883aab"
+          "content": "e378022dd85db141f1d5b4d06d4791072b4caf6900b992dde5781d09b0559c35"
         }
       ]
     },
@@ -135,7 +135,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6d052e0a7352e9824bc1d4a319d03b42320f6551210f7dfd360afbdca4e556f0"
+          "content": "0c33ad728e7b3b25211d0b16d2803b9ca35d0aae6d3a570b57aa9b8377fcde1f"
         }
       ]
     },
@@ -145,7 +145,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e95005978fdd733f78208d6d916f62f970123530241739c9da7d3a74154b7a13"
+          "content": "342b0c716f6ac9f853e6fb9e10d2d3ae4c643f047becd200d6f8576a84674fb2"
         }
       ]
     },
@@ -155,7 +155,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a25d0a97a30fa5abc35473ed4ca1bc32bc5a8bcb8a45c57d7feeb03cb6058e02"
+          "content": "936596fd99f3767ca0119a02f07dfabf22b5b1c30e7007c63c3ff21cfced3836"
         }
       ]
     },
@@ -165,7 +165,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "7c554d109fb0aabcf9a2923b0d9ac84723652abdec81202b2cc0a726d38c84bd"
+          "content": "9096b181a0164cd59061bddcf9f4bee59123c1ab776e7a12da8b9808bd5b7936"
         }
       ]
     },
@@ -175,7 +175,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5b7992e09b843a01c9bf7a05b5db4475ca9abbf893ead79f7bad73f0f92c4249"
+          "content": "8225f1de31f005c0d883fa9cf9b3a106f5e244ebbe5b4b3d2375c8127ba821f8"
         }
       ]
     },
@@ -185,7 +185,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "54c8133a172c2ca81c3f5a32e701386812a621198758423fcc7f0bf3db8c1ff7"
+          "content": "02b6b6f1b17a53d652a75555d185a20ea5d3e3110aa915ab228bf5521b0ce5fb"
         }
       ]
     },
@@ -215,7 +215,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c8e09eb658132733bf3fbd6e4b54eaa0e8084264fddcd279e663e32809a9c485"
+          "content": "ec93467aada7c720f48874e6f24a5fb57bb77e8f5e01a450a29bc363b81f7b9a"
         }
       ]
     },
@@ -235,7 +235,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b4f400b3e08cb7bb6326f973ca09c87411dd942ae9c8cdcd9d2d27dc562dac1f"
+          "content": "a31c2567ee0817e7a01eb034ac4ae8e9c44e18edea85ef722af2d32b4a2dabc4"
         }
       ]
     },
@@ -245,7 +245,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5fef10b3d968d299eb7463157e8b164413872f7cc8bf5e9ca1c605e63569a9f7"
+          "content": "b6e2b8d73bb492afec8717f39ecfe3638c62b2f1d2479a9be43c493adebf89d6"
         }
       ]
     },
@@ -255,7 +255,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "76c2dc1598e72d11df59319cc64fb2aa39b8c3af4eb3077f66598f4f2a3323c0"
+          "content": "d4258f3b183d03047aa07399ae96bdb2b3af83f0005127a24a39f8932982bf78"
         }
       ]
     }

package/src/cli.ts

@@ -5192,17 +5192,40 @@ function cmdPublish(options: Map<string, string>, flags: Set<string>, cwd: strin
       const manifestPath = join(pk.dir, MANIFEST_NAME);
       const manifestPresent = existsSync(manifestPath);
       let verifyOk = false;
+      let artifactUnavailable = false;
       if (trustRootPresent && manifestPresent) {
+        // Verify the ARTIFACT, through the SAME extraction `dz sign` uses. This used to walk the
+        // source TREE narrowed to a shipped-path list — a different object by construction, because
+        // npm synthesises a LICENSE into the pack of a package whose tree has none and pnpm rewrites
+        // package.json at pack time. So the gate named two failures that were both true about the
+        // tree and both wrong about what ships, for EVERY package, and a fail-closed gate no input
+        // can satisfy is a gate that gets routed around — it was: the 0.7.0 release went out through
+        // `pnpm publish` and skipped re-signing (ADR-001, features/publish-gate-verifies-the-tarball).
+        let cleanupGate: (() => void) | null = null;
         try {
           const signed = JSON.parse(readFileSync(manifestPath, 'utf8'));
-          let shippedForGate: string[] | undefined;
-          try { shippedForGate = npmPackedPaths(pk.dir); } catch { shippedForGate = undefined; }
-          verifyOk = verifyManifest(pk.dir, signed, readFileSync(trustRoot, 'utf8'), shippedForGate).ok;
+          let extracted: { dir: string; cleanup: () => void } | undefined;
+          try {
+            extracted = extractPublishTarball(pk.dir);
+            cleanupGate = extracted.cleanup;
+          } catch (err) {
+            // Cross-family review (codex `gpt-5.6-sol`, 2026-08-22): falling back to the working
+            // TREE here fails the gate OPEN. The gate's whole claim is "what ships matches the
+            // signature"; with no artifact, nothing was compared, and reporting a pass would be a
+            // claim about an object that was never built. Say why, and block.
+            write(`dz publish: could not pack ${pk.name} (${(err as Error).message.split('\n')[0]}) — the artifact was never built, so its signature was not checked`);
+            artifactUnavailable = true;
+          }
+          verifyOk =
+            extracted !== undefined &&
+            verifyManifest(extracted.dir, signed, readFileSync(trustRoot, 'utf8')).ok;
         } catch {
           verifyOk = false;
+        } finally {
+          cleanupGate?.();
         }
       }
-      const decision = decidePublishGate({ trustRootPresent, manifestPresent, verifyOk, requireSigning });
+      const decision = decidePublishGate({ trustRootPresent, manifestPresent, verifyOk, requireSigning, artifactUnavailable });
       if (decision.action === 'block') {
         write(`dz publish: BLOCKED ${pk.name} — ${decision.reason}`);
         blocked++;
@@ -5232,16 +5255,31 @@ function cmdPublish(options: Map<string, string>, flags: Set<string>, cwd: strin
       // Verify the OUTCOME against the trust root a CONSUMER would use — an existing key may be the
       // WRONG key, and enumerating that state is a losing game (round-1 review). The pack NAME travels
       // with the verdict so a pass about a different artifact cannot be mistaken for this one.
+      // The identity must be the one the PUBLISHER uses — the npm package name — or the check
+      // compares two vocabularies and can never agree. It did: `basename(packDir)` is `memory`
+      // where the publisher says `@dzhechkov/memory`, so every scoped package (all of them here)
+      // was refused as "a pass about another artifact", and the release routed around the gate
+      // instead. MEASURED 2026-08-22 by running `dz publish --filter memory --yes`.
       const trustRoot = resolve(cwd, TRUST_ROOT_REL);
-      if (!existsSync(trustRoot)) return { ok: false, trustRootPresent: false, pack: basename(packDir) };
+      const identity = packNpmName(packDir);
+      const id = identity === undefined ? {} : { pack: identity };
+      if (!existsSync(trustRoot)) return { ok: false, trustRootPresent: false, ...id };
+      // Verify the SAME OBJECT `reSign` hashed: the extracted tarball. Walking the source tree here
+      // compares a manifest built from the artifact against files npm rewrites at pack time, so it
+      // reported "does not verify — most likely the WRONG signing key" about a correctly signed pack
+      // (MEASURED 2026-08-22, `dz publish --filter memory --yes`). That message sends the operator
+      // hunting for a key problem that does not exist; the object was simply the wrong one.
+      let cleanup: (() => void) | null = null;
       try {
         const signed = JSON.parse(readFileSync(join(packDir, MANIFEST_NAME), 'utf8')) as never;
-        let shipped: string[] | undefined;
-        try { shipped = npmPackedPaths(packDir); } catch { shipped = undefined; }
-        const res = verifyManifest(packDir, signed, readFileSync(trustRoot, 'utf8'), shipped);
-        return { ok: res.ok, trustRootPresent: true, pack: basename(packDir) };
+        const extracted = extractPublishTarball(packDir);
+        cleanup = extracted.cleanup;
+        const res = verifyManifest(extracted.dir, signed, readFileSync(trustRoot, 'utf8'));
+        return { ok: res.ok, trustRootPresent: true, ...id };
       } catch {
-        return { ok: false, trustRootPresent: true, pack: basename(packDir) };
+        return { ok: false, trustRootPresent: true, ...id };
+      } finally {
+        cleanup?.();
       }
     },
     reSign: (packDir: string, keyPath: string): void => {
@@ -9374,6 +9412,19 @@ function scanOneReqeRoot(
  * authority on what `files[]` ships; reimplementing its globbing would put a second, divergent answer
  * next to the real one — which is the class of defect this whole change exists to remove.
  */
+/**
+ * The npm name of a pack on disk — the identity a publisher, a registry and a consumer all use.
+ * `undefined` when it cannot be read, so an unestablished identity is never asserted as a match.
+ */
+function packNpmName(packDir: string): string | undefined {
+  try {
+    const name = (JSON.parse(readFileSync(join(packDir, 'package.json'), 'utf8')) as { name?: unknown }).name;
+    return typeof name === 'string' && name !== '' ? name : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
 function npmPackedPaths(packDir: string): string[] {
   // `pnpm`, not `npm`: the PUBLISHER is `pnpm publish` (see `publishArgv`), and the two packers do not
   // agree. MEASURED 2026-08-21 on `skills-news`: `npm pack` emits a 1051-byte package.json identical
@@ -9399,6 +9450,17 @@ function npmPackedPaths(packDir: string): string[] {
  */
 function extractPublishTarball(packDir: string): { dir: string; cleanup: () => void } {
   const tmp = mkdtempSync(join(tmpdir(), 'dz-sign-pack-'));
+  try {
+    return extractIntoTempDir(packDir, tmp);
+  } catch (err) {
+    // The caller never receives a cleanup for a throw, so the directory this function created must
+    // be removed HERE or it leaks once per failed pack (cross-family review, 2026-08-22).
+    try { rmSync(tmp, { recursive: true, force: true }); } catch { /* best-effort */ }
+    throw err;
+  }
+}
+
+function extractIntoTempDir(packDir: string, tmp: string): { dir: string; cleanup: () => void } {
   const out = execFileSync('pnpm', ['pack', '--pack-destination', tmp, '--json'], {
     cwd: packDir,
     encoding: 'utf-8',