@dzhechkov/harness-cli 0.7.5 → 0.7.7

package/dist/known-flags.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"known-flags.d.ts","sourceRoot":"","sources":["../src/known-flags.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAuR5C,CAAC"}
+{"version":3,"file":"known-flags.d.ts","sourceRoot":"","sources":["../src/known-flags.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAyR5C,CAAC"}

package/dist/known-flags.js

@@ -23,6 +23,7 @@ export const KNOWN_CLI_FLAGS = [
     'audit-dev',
     'author',
     'auto',
+    'backfill',
     'base',
     'baseline',
     'body',
@@ -135,6 +136,7 @@ export const KNOWN_CLI_FLAGS = [
     'margin',
     'mark',
     'max',
+    'max-per-day',
     'max-wall-clock',
     'memory',
     'mock',

package/dist/known-flags.js.map

@@ -1 +1 @@
-{"version":3,"file":"known-flags.js","sourceRoot":"","sources":["../src/known-flags.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,eAAe,GAAsB;IAChD,UAAU;IACV,KAAK;IACL,mBAAmB;IACnB,sBAAsB;IACtB,KAAK;IACL,QAAQ;IACR,OAAO;IACP,KAAK;IACL,UAAU;IACV,IAAI;IACJ,WAAW;IACX,QAAQ;IACR,MAAM;IACN,MAAM;IACN,UAAU;IACV,MAAM;IACN,MAAM;IACN,OAAO;IACP,KAAK;IACL,QAAQ;IACR,cAAc;IACd,WAAW;IACX,UAAU;IACV,WAAW;IACX,WAAW;IACX,YAAY;IACZ,WAAW;IACX,UAAU;IACV,SAAS;IACT,OAAO;IACP,aAAa;IACb,YAAY;IACZ,KAAK;IACL,cAAc;IACd,YAAY;IACZ,SAAS;IACT,UAAU;IACV,QAAQ;IACR,SAAS;IACT,SAAS;IACT,WAAW;IACX,cAAc;IACd,aAAa;IACb,eAAe;IACf,KAAK;IACL,MAAM;IACN,gBAAgB;IAChB,MAAM;IACN,aAAa;IACb,MAAM;IACN,aAAa;IACb,KAAK;IACL,QAAQ;IACR,MAAM;IACN,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,aAAa;IACb,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,iBAAiB;IACjB,QAAQ;IACR,WAAW;IACX,SAAS;IACT,oBAAoB;IACpB,QAAQ;IACR,aAAa;IACb,OAAO;IACP,QAAQ;IACR,UAAU;IACV,UAAU;IACV,MAAM;IACN,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,OAAO;IACP,WAAW;IACX,UAAU;IACV,WAAW;IACX,YAAY;IACZ,WAAW;IACX,MAAM;IACN,OAAO;IACP,YAAY;IACZ,MAAM;IACN,OAAO;IACP,QAAQ;IACR,WAAW;IACX,WAAW;IACX,MAAM;IACN,SAAS;IACT,MAAM;IACN,IAAI;IACJ,gBAAgB;IAChB,eAAe;IACf,MAAM;IACN,YAAY;IACZ,SAAS;IACT,gBAAgB;IAChB,cAAc;IACd,MAAM;IACN,YAAY;IACZ,MAAM;IACN,OAAO;IACP,GAAG;IACH,cAAc;IACd,KAAK;IACL,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,SAAS;IACT,OAAO;IACP,MAAM;IACN,cAAc;IACd,SAAS;IACT,YAAY;IACZ,UAAU;IACV,QAAQ;IACR,MAAM;IACN,KAAK;IACL,gBAAgB;IAChB,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;IACP,QAAQ;IACR,OAAO;IACP,GAAG;IACH,MAAM;IACN,WAAW;IACX,OAAO;IACP,UAAU;IACV,aAAa;IACb,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,SAAS;IACT,UAAU;IACV,UAAU;IACV,UAAU;IACV,UAAU;IACV,WAAW;IACX,WAAW;IACX,WAAW;IACX,eAAe;IACf,WAAW;IACX,aAAa;IACb,wBAAwB;IACxB,UAAU;IACV,WAAW;IACX,GAAG;IACH,MAAM;IACN,SAAS;IACT,MAAM;IACN,IAAI;IACJ,UAAU;IACV,KAAK;IACL,QAAQ;IACR,eAAe;IACf,UAAU;IACV,MAAM;IACN,kBAAkB;IAClB,SAAS;IACT,MAAM;IACN,SAAS;IACT,SAAS;IACT,MAAM;IACN,MAAM;IACN,YAAY;IACZ,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,SAAS;IACT,SAAS;IACT,UAAU;IACV,YAAY;IACZ,aAAa;IACb,kBAAkB;IAClB,QAAQ;IACR,SAAS;IACT,SAAS;IACT,QAAQ;IACR,YAAY;IACZ,UAAU;IACV,WAAW;IACX,oBAAoB;IACpB,mBAAmB;IACnB,UAAU;IACV,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,cAAc;IACd,iBAAiB;IACjB,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,KAAK;IACL,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,SAAS;IACT,UAAU;IACV,WAAW;IACX,aAAa;IACb,OAAO;IACP,MAAM;IACN,QAAQ;IACR,UAAU;IACV,MAAM;IACN,SAAS;IACT,cAAc;IACd,OAAO;IACP,eAAe;IACf,UAAU;IACV,OAAO;IACP,OAAO;IACP,YAAY;IACZ,OAAO;IACP,MAAM;IACN,QAAQ;IACR,OAAO;IACP,OAAO;IACP,eAAe;IACf,aAAa;IACb,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,OAAO;IACP,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,mBAAmB;IACnB,WAAW;IACX,SAAS;IACT,KAAK;IACL,QAAQ;IACR,MAAM;IACN,OAAO;IACP,MAAM;IACN,UAAU;IACV,MAAM;IACN,WAAW;IACX,UAAU;IACV,MAAM;IACN,SAAS;IACT,OAAO;IACP,WAAW;IACX,OAAO;IACP,QAAQ;IACR,MAAM;IACN,OAAO;IACP,UAAU;IACV,SAAS;IACT,UAAU;IACV,QAAQ;IACR,SAAS;IACT,kBAAkB;IAClB,MAAM;IACN,MAAM;IACN,QAAQ;IACR,aAAa;IACb,QAAQ;IACR,YAAY;IACZ,iBAAiB;IACjB,YAAY;IACZ,OAAO;IACP,MAAM;IACN,KAAK;CACN,CAAC"}
+{"version":3,"file":"known-flags.js","sourceRoot":"","sources":["../src/known-flags.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,eAAe,GAAsB;IAChD,UAAU;IACV,KAAK;IACL,mBAAmB;IACnB,sBAAsB;IACtB,KAAK;IACL,QAAQ;IACR,OAAO;IACP,KAAK;IACL,UAAU;IACV,IAAI;IACJ,WAAW;IACX,QAAQ;IACR,MAAM;IACN,UAAU;IACV,MAAM;IACN,UAAU;IACV,MAAM;IACN,MAAM;IACN,OAAO;IACP,KAAK;IACL,QAAQ;IACR,cAAc;IACd,WAAW;IACX,UAAU;IACV,WAAW;IACX,WAAW;IACX,YAAY;IACZ,WAAW;IACX,UAAU;IACV,SAAS;IACT,OAAO;IACP,aAAa;IACb,YAAY;IACZ,KAAK;IACL,cAAc;IACd,YAAY;IACZ,SAAS;IACT,UAAU;IACV,QAAQ;IACR,SAAS;IACT,SAAS;IACT,WAAW;IACX,cAAc;IACd,aAAa;IACb,eAAe;IACf,KAAK;IACL,MAAM;IACN,gBAAgB;IAChB,MAAM;IACN,aAAa;IACb,MAAM;IACN,aAAa;IACb,KAAK;IACL,QAAQ;IACR,MAAM;IACN,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,aAAa;IACb,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,iBAAiB;IACjB,QAAQ;IACR,WAAW;IACX,SAAS;IACT,oBAAoB;IACpB,QAAQ;IACR,aAAa;IACb,OAAO;IACP,QAAQ;IACR,UAAU;IACV,UAAU;IACV,MAAM;IACN,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,OAAO;IACP,WAAW;IACX,UAAU;IACV,WAAW;IACX,YAAY;IACZ,WAAW;IACX,MAAM;IACN,OAAO;IACP,YAAY;IACZ,MAAM;IACN,OAAO;IACP,QAAQ;IACR,WAAW;IACX,WAAW;IACX,MAAM;IACN,SAAS;IACT,MAAM;IACN,IAAI;IACJ,gBAAgB;IAChB,eAAe;IACf,MAAM;IACN,YAAY;IACZ,SAAS;IACT,gBAAgB;IAChB,cAAc;IACd,MAAM;IACN,YAAY;IACZ,MAAM;IACN,OAAO;IACP,GAAG;IACH,cAAc;IACd,KAAK;IACL,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,SAAS;IACT,OAAO;IACP,MAAM;IACN,cAAc;IACd,SAAS;IACT,YAAY;IACZ,UAAU;IACV,QAAQ;IACR,MAAM;IACN,KAAK;IACL,aAAa;IACb,gBAAgB;IAChB,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;IACP,QAAQ;IACR,OAAO;IACP,GAAG;IACH,MAAM;IACN,WAAW;IACX,OAAO;IACP,UAAU;IACV,aAAa;IACb,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,SAAS;IACT,UAAU;IACV,UAAU;IACV,UAAU;IACV,UAAU;IACV,WAAW;IACX,WAAW;IACX,WAAW;IACX,eAAe;IACf,WAAW;IACX,aAAa;IACb,wBAAwB;IACxB,UAAU;IACV,WAAW;IACX,GAAG;IACH,MAAM;IACN,SAAS;IACT,MAAM;IACN,IAAI;IACJ,UAAU;IACV,KAAK;IACL,QAAQ;IACR,eAAe;IACf,UAAU;IACV,MAAM;IACN,kBAAkB;IAClB,SAAS;IACT,MAAM;IACN,SAAS;IACT,SAAS;IACT,MAAM;IACN,MAAM;IACN,YAAY;IACZ,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,SAAS;IACT,SAAS;IACT,UAAU;IACV,YAAY;IACZ,aAAa;IACb,kBAAkB;IAClB,QAAQ;IACR,SAAS;IACT,SAAS;IACT,QAAQ;IACR,YAAY;IACZ,UAAU;IACV,WAAW;IACX,oBAAoB;IACpB,mBAAmB;IACnB,UAAU;IACV,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,cAAc;IACd,iBAAiB;IACjB,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,KAAK;IACL,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,SAAS;IACT,UAAU;IACV,WAAW;IACX,aAAa;IACb,OAAO;IACP,MAAM;IACN,QAAQ;IACR,UAAU;IACV,MAAM;IACN,SAAS;IACT,cAAc;IACd,OAAO;IACP,eAAe;IACf,UAAU;IACV,OAAO;IACP,OAAO;IACP,YAAY;IACZ,OAAO;IACP,MAAM;IACN,QAAQ;IACR,OAAO;IACP,OAAO;IACP,eAAe;IACf,aAAa;IACb,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,OAAO;IACP,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,mBAAmB;IACnB,WAAW;IACX,SAAS;IACT,KAAK;IACL,QAAQ;IACR,MAAM;IACN,OAAO;IACP,MAAM;IACN,UAAU;IACV,MAAM;IACN,WAAW;IACX,UAAU;IACV,MAAM;IACN,SAAS;IACT,OAAO;IACP,WAAW;IACX,OAAO;IACP,QAAQ;IACR,MAAM;IACN,OAAO;IACP,UAAU;IACV,SAAS;IACT,UAAU;IACV,QAAQ;IACR,SAAS;IACT,kBAAkB;IAClB,MAAM;IACN,MAAM;IACN,QAAQ;IACR,aAAa;IACb,QAAQ;IACR,YAAY;IACZ,iBAAiB;IACjB,YAAY;IACZ,OAAO;IACP,MAAM;IACN,KAAK;CACN,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dzhechkov/harness-cli",
-  "version": "0.7.5",
+  "version": "0.7.7",
   "description": "The dz CLI — install AI skills for Claude Code, Codex, OpenCode, Hermes, OpenClaude, GitHub Copilot. 67 commands, 14 presets, 10 platform targets.",
   "type": "module",
   "license": "MIT",
@@ -41,23 +41,23 @@
     "sbom.json"
   ],
   "dependencies": {
-    "@dzhechkov/harness-core": "^0.7.5",
-    "@dzhechkov/scout": "^0.8.7",
+    "@dzhechkov/harness-core": "^0.7.8",
     "@dzhechkov/harness-presets": "^0.5.14",
-    "@dzhechkov/skills-mcp": "^0.3.6",
+    "@dzhechkov/scout": "^0.8.7",
     "@dzhechkov/skills-devops": "^0.3.13",
+    "@dzhechkov/skills-mcp": "^0.3.6",
     "@dzhechkov/skills-web3": "^0.2.5",
     "@dzhechkov/skills-qe": "^0.3.10",
-    "@dzhechkov/skills-news": "^0.1.12",
+    "@dzhechkov/skills-academic": "^0.3.3",
+    "@dzhechkov/skills-meta": "^0.9.51",
     "@dzhechkov/skills-ecc": "^0.1.8",
-    "@dzhechkov/skills-meta": "^0.9.49",
     "@dzhechkov/skills-pm": "^0.1.1",
-    "@dzhechkov/skills-academic": "^0.3.3",
     "@dzhechkov/skills-taste": "^0.1.1",
+    "@dzhechkov/skills-idea2prd": "^0.1.11",
     "@dzhechkov/skills-reverse-engineering": "^0.1.9",
     "@dzhechkov/skills-presentation-storyteller": "^0.1.10",
-    "@dzhechkov/skills-website-cloner": "^0.1.1",
-    "@dzhechkov/skills-idea2prd": "^0.1.11"
+    "@dzhechkov/skills-news": "^0.1.12",
+    "@dzhechkov/skills-website-cloner": "^0.1.1"
   },
   "devDependencies": {
     "@types/node": "^25.6.0",

package/sbom.json

@@ -25,7 +25,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "bf6ac920e20f4e9978dbb7b1cca48790d97e44f245dc53088e189776b4a7616e"
+          "content": "3d621db3f7811b174ee46b19fa462316ef13679786a910ac64c65fb05bfd5ef7"
         }
       ]
     },
@@ -85,7 +85,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a8309c4a78c90a1c9db9518a6d07c5fa800c4d39710941a379635a65012e208d"
+          "content": "bf5eadb6ea3ed4761fbc8206167c86119467d7dfd28d7e0eee7cd21d30099da6"
         }
       ]
     },
@@ -95,7 +95,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "8cf050f1bc0b69be1088e58cc5f88f034d2e847fba9ffc87f3cc01121d7d9d74"
+          "content": "2cee996fe21ed692135c98b35bf5e56a89f2dc157f681b36c65020fd062b857b"
         }
       ]
     },
@@ -105,7 +105,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "442b8bbb2ec9f7701ddc2232fc8662956966097d6f46ee1fce49bd06c20db97f"
+          "content": "68a41f08452af263f2a378b54e813567b6ba52376f3d0e13567a7eef7dff09e0"
         }
       ]
     },
@@ -125,7 +125,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6fc728a98d8a920a226a4ee2d8b045ee46e27246c7d7e8bdf15e6c7758f3efbc"
+          "content": "c7856b79fdf6683fe855268191805ed07b1c68f2ff7ac544d46ac3d93e4c94ef"
         }
       ]
     },
@@ -135,7 +135,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "4bc5e7cb6563fd672fd7e2c38eac4ba55d54de46940c194b3d2cd5ea4519732a"
+          "content": "27741d68ac996a060df7161b49e372f68e31b990a406f0792c79c474ff17eeca"
         }
       ]
     },
@@ -145,7 +145,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "560d103ce98af8095eb7ee86537aa80de7a914fffa693dc23fdf2440a4f76183"
+          "content": "bea844c256e8d947464a4690d2224e4f28d61f433d6e50e5fe26bed3b415ae26"
         }
       ]
     },
@@ -285,7 +285,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "23fa9b92489e2f39d99397a57f99a4c7566d41b75682d1bbde3f113c480acdcd"
+          "content": "1e6f9fd92734216f3cc392fba9e2ec7899492a6892e5891197bc582c886a38fc"
         }
       ]
     },
@@ -295,7 +295,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f4ed9bddb45629484baf117a3b92eb4097932abda6e5a48227acbc7b5f23f561"
+          "content": "fea029550cb557c73eea2d53d94ef09ec99ba353126a5090a658dc219e8ae5df"
         }
       ]
     },
@@ -305,7 +305,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "41bce9592c8192431f7f023271eaf3f548398e5c15441ea69a59e78633915cd9"
+          "content": "1b46a6093d0ff5713c870b5b7566623c98a33bb212c7f1ba0c56f336620961a3"
         }
       ]
     },
@@ -335,7 +335,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "423120966d33fb4515177a7613f0ace5b392a576098987d0d9ca22aedea96716"
+          "content": "b7c47af8811ca86ee8dd5d4d98cab76c4cceddaafbe09676141bacae92b69b9d"
         }
       ]
     },
@@ -355,7 +355,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c3ef929a729f53ca612ac67b1571d2e8da3681ac5060a1cd16e453e0bb1d4e00"
+          "content": "3ea2dd881198881f94675ce14e465ce007e5d987e25b7786f67d9af13e880e22"
         }
       ]
     },
@@ -365,7 +365,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "cae511b9b892c43e874ee06b439306290cd2c0a9e6b75cd0cd931d47adaef3f5"
+          "content": "d8288240b5420ddca2cabdb7b358c7c18ba59724defda951d0dbc61439b6fc4c"
         }
       ]
     },
@@ -405,7 +405,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "aed996e8a3741b595eba31ef694ec5b2999dc0a73933a4289325cf6b9944e254"
+          "content": "d123f4f88f51a6b6d283a4fe6d2502bb297ad0de4eb1ef6f99f01b86a7da98a0"
         }
       ]
     }

package/src/boolean-flags.ts

@@ -20,6 +20,7 @@
  */
 export const BOOLEAN_CLI_FLAGS: ReadonlySet<string> = new Set([
   'affected',
+  'backfill',
   'all',
   'allow-same-family',
   'allow-same-family-qe',

package/src/cli.ts

@@ -142,6 +142,12 @@ import {
   writeFeatureAdrState,
   computeUsage,
   deriveCostLedger,
+  planLedgerBackfill,
+  listCostLedgerRuns,
+  resolveLedgerRunId,
+  AMBIGUOUS,
+  stampCheckpointLine,
+  LEDGER_FILL_SOURCE,
   renderCostLedger,
   verifyCostLedgerReport,
   writeCostLedgerJsonl,
@@ -452,6 +458,7 @@ import {
   decideReadBack,
   recordVerdictLine,
   buildCadenceReport,
+  tgVisibleSha256,
   CADENCE_WINDOW_DAYS,
 } from '@dzhechkov/harness-core';
 import type { RecordKind, RecordDecision } from '@dzhechkov/harness-core';
@@ -498,6 +505,7 @@ Usage:
   dz release [--filter <name>] [--tag] [--publish] [--json] [--dry-run] [--no-issue]   (VERIFIED release: 4 HARD gates in FRONT of dz publish — full package test suites, audit >=high, node --check of every dist/bin file, bin smoke-boot via "node <bin> --help" — any red gate STOPS the release (exit 1) + best-effort gh issue; all green ⇒ re-sign reminder, then prints the ready dz publish command (or chains with --publish); never duplicates publish's own gates)
   dz parity [--target <name>] [--json]   (the honest feature×target map, COMPUTED from the capability model — which harness feature is full / manual / absent on each of the ${TARGET_NAMES.length} targets, and via which form)
   dz delivery-check --slug <slug> [--context-only] [--findings <f.json>] [--strict] [--author <model>] [--json]   (portable Step-10 Delivery Gate: prints the 4-plane review brief + artifact probes; --findings classifies a fed-back review into a fail-closed ready|blocked hand-off and writes features/<slug>/10_delivery_review.md; --strict exits 1 on blocked)
+  dz challenge --plan <plan.md> [--author <model>]   (the deterministic cartridge behind the challenge-panel adversarial plan-gate (R6): assembles the wide brief — plan + architecture/vision.md + testing.md + map.json + degradations.md — and prints the C1-C8 adversary prompt naming the cross-family reviewer to dispatch. exit 0 brief printed / 1 plan missing or empty)
   dz skills-verify [--dir <project>] [--expect a,b] [--static] [--strict] [--json]   (does .claude/skills/ actually REGISTER? --static = instant layout scan for CI; default reads the authoritative system/init listing from a real session. exit 0 pass / 1 fail / 2 inconclusive — never a false pass)
   dz compounding [--project <dir>] [--json]   (honest learning-loop payoff report: pool write-only ratio, guard repeat-violation trajectory, cold-vs-warm replay readiness, instrumentation health — a gate without enough data says INSUFFICIENT_DATA, never a fake verdict)
   dz epoch-replay --mock [--n <N>] [--effect <-1..1>] [--tie-rate <0..1>] [--seed <N>] [--slice <name>] [--json]   ($0 synthetic run — exercises the verdict math, NOT evidence)
@@ -7229,7 +7237,7 @@ function gatherGuardFacts(op: string, root: string, text: string | undefined, st
       }
       facts['licenceHold'] = holds;
     } catch { /* unreadable tree — the rule reports nothing rather than inventing a violation */ }
-    try { facts['drift'] = sweepSkillDrift(root, { scope: 'packages', allowlist: readDriftAllowlist(root) }).drifted.map((d) => d.name); } catch { /* skip */ }
+    try { facts['drift'] = sweepSkillDrift(root, { scope: 'installs', allowlist: readDriftAllowlist(root) }).drifted.map((d) => d.name); } catch { /* skip */ }
     facts['counts'] = gatherReadmeCounts(root);
     // readme-first: from the WORKING-TREE diff (publishes happen pre-commit here), per package: does the
     // change set contain its package.json (the version-bump signal) without its README.md?
@@ -7393,7 +7401,7 @@ function gatherGuardFacts(op: string, root: string, text: string | undefined, st
     if (Array.isArray(stubWaivers)) facts['stubWaivers'] = stubWaivers;
   }
   if (op === 'consolidate') {
-    try { facts['drift'] = sweepSkillDrift(root, { scope: 'packages', allowlist: readDriftAllowlist(root) }).drifted.map((d) => d.name); } catch { /* skip */ }
+    try { facts['drift'] = sweepSkillDrift(root, { scope: 'installs', allowlist: readDriftAllowlist(root) }).drifted.map((d) => d.name); } catch { /* skip */ }
   }
   if (op === 'teach' || op === 'consolidate') {
     if (op === 'teach' && text) facts['secretTargets'] = [{ label: 'lesson', text }];
@@ -10396,12 +10404,39 @@ async function cmdTgPost(options: Map<string, string>, flags: Set<string>, cwd:
     if (!json) for (const line of renderSourceProvenance(decision)) write(line);
   }
 
+  // ADR-005 autopublish guards: read the stop-cord and the send journal as FACTS, then let the pure
+  // decideTgSend judge. An UNREADABLE journal stays undefined ⇒ decideTgSend fails closed on G4/G5.
+  const tgDir = join(repoRoot, '.dz', 'tg-post');
+  const halted = existsSync(join(tgDir, 'HALT'));
+  const sha256 = tgVisibleSha256(draft);
+  let sentLog: { sha256: string; ts: string; status?: 'pending' | 'sent' }[] | undefined;
+  const sentLogPath = join(tgDir, 'sent-log.jsonl');
+  if (!existsSync(sentLogPath)) {
+    sentLog = []; // no journal yet is an EMPTY journal, not an unreadable one — a fresh channel sends
+  } else {
+    try {
+      sentLog = [];
+      for (const line of readFileSync(sentLogPath, 'utf-8').split('\n')) {
+        if (line.trim() === '') continue;
+        const r = JSON.parse(line) as { sha256?: unknown; ts?: unknown; status?: unknown };
+        if (typeof r.sha256 === 'string' && typeof r.ts === 'string') {
+          sentLog.push({ sha256: r.sha256, ts: r.ts, ...(r.status === 'pending' || r.status === 'sent' ? { status: r.status } : {}) });
+        }
+      }
+    } catch {
+      sentLog = undefined; // genuinely unreadable ⇒ fail-closed
+    }
+  }
   const decision = decideTgSend({
     issues,
     provenanceOutcome,
     confirmed: flags.has('send') && flags.has('yes'),
     nowUtcIso: new Date().toISOString(),
     nightOverride: flags.has('night'),
+    halted,
+    sha256,
+    sentLog,
+    maxPostsPerDay: (() => { const n = Number(options.get('max-per-day')); return Number.isFinite(n) && n > 0 ? n : 10; })(),
   });
 
   const visible = tgVisibleLength(draft);
@@ -10422,6 +10457,13 @@ async function cmdTgPost(options: Map<string, string>, flags: Set<string>, cwd:
   const channel = (options.get('channel') ?? '').trim();
   if (channel === '') { write('dz tg-post: --channel @name (or a chat id) is required to send'); return 2; }
 
+  // Two-phase journal (Codex A-): write a PENDING row BEFORE the network call. If the process dies
+  // between send and the sent-row, G5 dedup sees this pending row on the next run and refuses to
+  // double-publish. Best-effort — a pending-write failure is warned, not fatal (better to risk one
+  // duplicate than to block a legitimate send on a full disk).
+  try { mkdirSync(tgDir, { recursive: true }); appendFileSync(sentLogPath, JSON.stringify({ sha256, ts: new Date().toISOString(), channel, status: 'pending' }) + '\n'); }
+  catch (e) { write(`dz tg-post: WARNING — could not write the PENDING journal row (${(e as Error).message}); the crash-window dedup guard is degraded for this send`); }
+
   const sent = await tgApi(token, 'sendMessage', {
     chat_id: channel,
     text: draft,
@@ -10434,6 +10476,15 @@ async function cmdTgPost(options: Map<string, string>, flags: Set<string>, cwd:
     if (json) write(JSON.stringify({ ok: false, action: 'send', reason: sent.description ?? 'refused', visible }));
     return 1;
   }
+  // Record the send AFTER Telegram accepted it (never before — a failed send must not eat the daily
+  // limit or block a retry via dedup). Best-effort append; a journal write failure is logged, not
+  // fatal — the post already went out.
+  try {
+    mkdirSync(tgDir, { recursive: true });
+    appendFileSync(sentLogPath, JSON.stringify({ sha256, ts: new Date().toISOString(), channel, messageId: sent.messageId ?? null, status: 'sent' }) + '\n');
+  } catch (e) {
+    write(`dz tg-post: WARNING — sent, but could not record it in ${sentLogPath} (${(e as Error).message}) — the daily limit and dedup may under-count until fixed`);
+  }
   write(`dz tg-post: sent to ${channel}${sent.messageId !== undefined ? ` (message ${sent.messageId})` : ''}`);
   if (json) write(JSON.stringify({ ok: true, action: 'send', channel, messageId: sent.messageId ?? null, visible }));
   return 0;
@@ -10502,8 +10553,106 @@ async function cmdRecap(options: Map<string, string>, flags: Set<string>, cwd: s
   return 0;
 }
 
+/**
+ * `dz feature-adr-record --backfill` — fill the run-cost ledger from the host workflow records.
+ *
+ * MEASURED 2026-08-25: of 87 ledger rows, all 20 written automatically carried
+ * `tokens:null, minutes:null, agents:null`, so cost-per-feature was answerable only for the 66 rows
+ * a human retyped. The numbers exist in the host record; the sandboxed workflow simply cannot reach
+ * them. This is that join, run afterwards, on the dz side.
+ */
+function cmdLedgerBackfill(options: Map<string, string>, flags: Set<string>, cwd: string, write: Write): number {
+  const json = flags.has('json');
+  const apply = flags.has('yes');
+  const ledgerPath = resolve(options.get('project') ?? cwd, '.dz', 'feature-adr', 'run-cost-ledger.jsonl');
+  if (!existsSync(ledgerPath)) {
+    const msg = `dz feature-adr-record --backfill: no ledger at ${ledgerPath}`;
+    write(json ? JSON.stringify({ ok: false, reason: 'no-ledger', path: ledgerPath }) : msg);
+    return 1;
+  }
+  const raw = readFileSync(ledgerPath, 'utf-8');
+  const lines = raw.split('\n').filter((l) => l !== '');
+
+  // One host-record lookup per runId, cached: deriveCostLedger walks the transcript tree.
+  type Facts = { tokens: number | null; minutes: number | null; agents: number | null };
+  const cache = new Map<string, Facts | typeof AMBIGUOUS | null>();
+
+  // Only `tokens` is derived, and the scope is narrow on purpose:
+  //  • minutes — CostLedgerReport exposes startedTs but no run duration; there is nothing to divide.
+  //  • agents  — the ledger column means TOTAL agent invocations including infra agents, while the
+  //    union of row.agentIds counts only agents that SPENT. Writing the second into the first would
+  //    quietly redefine the column, which that column's own writer explicitly warns against.
+  const factsFor = (runId: string): Facts | null => {
+    try {
+      const report = deriveCostLedger({ runId });
+      if (report === null) return null;
+      const tokens = typeof report.recordTotalTokens === 'number' && Number.isFinite(report.recordTotalTokens)
+        ? report.recordTotalTokens
+        : null;
+      return { tokens, minutes: null, agents: null };
+    } catch { return null; }
+  };
+
+  const facts = (key: 'runId' | 'slug', value: string): Facts | typeof AMBIGUOUS | null => {
+    const ck = key + ':' + value;
+    const hit = cache.get(ck);
+    if (hit !== undefined) return hit;
+    let out: Facts | typeof AMBIGUOUS | null = null;
+    if (key === 'runId') {
+      out = factsFor(value);
+    } else {
+      // The slug is the fallback because the sandboxed workflow cannot know its own run id. It is
+      // only usable when it names exactly ONE host run: deriveCostLedger resolves a slug with
+      // `runs.find(...)`, which takes the FIRST match SILENTLY, so a feature run twice would have
+      // one run's spend written into the other run's row and called measured. Count first, refuse
+      // on more than one.
+      try {
+        const matches = listCostLedgerRuns().filter((r) => r.slug === value);
+        if (matches.length > 1) out = AMBIGUOUS;
+        else if (matches.length === 1 && matches[0] !== undefined) out = factsFor(matches[0].runId);
+      } catch { out = null; }
+    }
+    cache.set(ck, out);
+    return out;
+  };
+
+  const plan = planLedgerBackfill({ lines, facts });
+  const unfilled = plan.rows.filter((r) => r.skipped !== null && r.skipped !== 'already-complete');
+
+  if (apply && plan.filledRows > 0) {
+    // Atomic replace: a torn ledger is worse than an unfilled one.
+    const tmp = ledgerPath + '.backfill-tmp';
+    writeFileSync(tmp, plan.lines.join('\n') + '\n', 'utf-8');
+    renameSync(tmp, ledgerPath);
+  }
+
+  if (json) {
+    write(JSON.stringify({
+      ok: true, applied: apply && plan.filledRows > 0, filledRows: plan.filledRows,
+      totalRows: lines.length, disagreements: plan.disagreements,
+      unfilled: unfilled.map((r) => ({ index: r.index, runId: r.runId, reason: r.skipped })),
+      source: LEDGER_FILL_SOURCE, path: ledgerPath,
+    }));
+    return 0;
+  }
+  write('dz feature-adr-record --backfill: SCOPE — only tokens is derived; minutes and agents stay null (the run record exposes no duration, and the agents column means a different quantity than the spend-bearing agent ids). A row without a runId is matched by SLUG, and only when the slug names exactly one run.');
+  write(`dz feature-adr-record --backfill: ${plan.filledRows} of ${lines.length} row(s) fillable from the host record${apply ? ' — WRITTEN' : ' (dry run; pass --yes to write)'}`);
+  for (const d of plan.disagreements) {
+    write(`  DISAGREEMENT row ${d.index} ${d.field}: ledger says ${d.existing}, host record says ${d.derived} — the typed number stands, look at this`);
+  }
+  const byReason = new Map<string, number>();
+  for (const r of unfilled) byReason.set(String(r.skipped), (byReason.get(String(r.skipped)) ?? 0) + 1);
+  for (const [reason, n] of byReason) write(`  not filled: ${n} row(s) — ${reason}`);
+  return 0;
+}
+
 function cmdFeatureAdrRecord(options: Map<string, string>, flags: Set<string>, cwd: string, write: Write): number {
   const json = flags.has('json');
+  // `--backfill` is a different verb on the same store: it fills the ledger's null cost fields from
+  // the host's own workflow record. DRY-RUN BY DEFAULT — this rewrites an append-only log, so the
+  // writing form must be asked for (`--yes`), the same contract `dz publish` and `sync-canonical`
+  // already use. See ledger-backfill.ts for the four rules the plan obeys.
+  if (flags.has('backfill')) return cmdLedgerBackfill(options, flags, cwd, write);
   const kind = (options.get('kind') ?? '').trim() as RecordKind;
   const stage = (options.get('stage') ?? '').trim();
   const slug = (options.get('slug') ?? '').trim();
@@ -10547,6 +10696,11 @@ function cmdFeatureAdrRecord(options: Map<string, string>, flags: Set<string>, c
   });
   if (decision.line === null) return emit(decision);
 
+  // Declared out here because the READ-BACK below must verify what was ACTUALLY written, not what
+  // the decision proposed — the ledger path enriches the line with a resolved runId before the
+  // append, and comparing against the pre-enrichment text made every ledger write report
+  // "not-verified" (caught by running it, not by reading it).
+  let lineToWrite = decision.line;
   // MEASURE, never assume: an unwritable target is a LOUD refusal, because a swallowed mkdir failure
   // is exactly how a write becomes a silent no-op (acid case A4).
   try {
@@ -10568,7 +10722,27 @@ function cmdFeatureAdrRecord(options: Map<string, string>, flags: Set<string>, c
   }
 
   try {
-    appendFileSync(target, `${decision.line}\n`, 'utf-8');
+    // WRITE-TIME RUN-ID RESOLUTION. The sandboxed workflow cannot know its own run id — it is not in
+    // `args` and not a sandbox global — so 16 of 20 automatic ledger rows carried no join key at all
+    // and nothing could ever be joined to them (MEASURED 2026-08-25). This command runs on the host,
+    // where the records live, so it answers the question the sandbox cannot. Resolving HERE beats
+    // resolving later: right now the run is in flight and is simply the newest for this slug; an hour
+    // from now the same slug may have several and the choice becomes a guess. Refuses on any tie.
+    lineToWrite = decision.line;
+    if (kind === 'ledger') {
+      try {
+        const parsed: unknown = JSON.parse(decision.line);
+        if (parsed !== null && typeof parsed === 'object' && !Array.isArray(parsed)) {
+          const rowObj = parsed as Record<string, unknown>;
+          const resolved = resolveLedgerRunId(rowObj, listCostLedgerRuns());
+          if (resolved !== null) {
+            // Marked, because a resolved run id is our inference, not something the pipeline knew.
+            lineToWrite = JSON.stringify({ ...rowObj, runId: resolved, runIdSource: 'resolved-at-write' });
+          }
+        }
+      } catch { /* resolution is an ENRICHMENT; a failure must never cost the row itself */ }
+    }
+    appendFileSync(target, `${lineToWrite}\n`, 'utf-8');
   } catch (err) {
     return emit({ verdict: 'refused', exit: 2, reason: `the append failed: ${(err as Error).message}`, blocking: false, line: null });
   }
@@ -10582,7 +10756,7 @@ function cmdFeatureAdrRecord(options: Map<string, string>, flags: Set<string>, c
   } catch {
     lastLine = null;
   }
-  return emit(decideReadBack(decision.line, lastLine), { target });
+  return emit(decideReadBack(lineToWrite, lastLine), { target });
 }
 
 function cmdAmendmentCheck(options: Map<string, string>, flags: Set<string>, cwd: string, write: Write): number {
@@ -10739,7 +10913,9 @@ function cmdFeatureAdrCheckpoint(options: Map<string, string>, flags: Set<string
   const stateDir = join(featureDir, '.fa-state');
   try {
     mkdirSync(stateDir, { recursive: true });
-    appendFileSync(join(stateDir, 'checkpoints.jsonl'), verdict.line + '\n', 'utf-8');
+    // The CLI is the only participant with a clock — the sandboxed workflow has no `Date` — so the
+    // write instant is stamped here, at the append, and nowhere inside the blob-mirrored serializer.
+    appendFileSync(join(stateDir, 'checkpoints.jsonl'), stampCheckpointLine(verdict.line, new Date().toISOString()) + '\n', 'utf-8');
   } catch (err) {
     const reason = err instanceof Error ? err.message : String(err);
     return emit({ ok: false, stage, reason }, 'dz feature-adr checkpoint: write failed — ' + reason, 1);

package/src/known-flags.ts

@@ -23,6 +23,7 @@ export const KNOWN_CLI_FLAGS: readonly string[] = [
   'audit-dev',
   'author',
   'auto',
+  'backfill',
   'base',
   'baseline',
   'body',
@@ -135,6 +136,7 @@ export const KNOWN_CLI_FLAGS: readonly string[] = [
   'margin',
   'mark',
   'max',
+  'max-per-day',
   'max-wall-clock',
   'memory',
   'mock',