@dzhechkov/harness-cli 0.7.7 → 0.7.8

package/.dz-manifest.json

@@ -9,7 +9,7 @@
       },
       {
         "path": "README.md",
-        "sha256": "3d621db3f7811b174ee46b19fa462316ef13679786a910ac64c65fb05bfd5ef7"
+        "sha256": "a4000a6a9a99f570f9f8955b135fe4742ca74ab9e8c12e7feee0d859c6ab0576"
       },
       {
         "path": "dist/bin.d.ts",
@@ -133,7 +133,7 @@
       },
       {
         "path": "package.json",
-        "sha256": "b7c47af8811ca86ee8dd5d4d98cab76c4cceddaafbe09676141bacae92b69b9d"
+        "sha256": "1b1e7ae1af22dd91a6bc92fe1070a5b1d1710e50434abbd8e707f95bbb8f3b14"
       },
       {
         "path": "src/bin.ts",
@@ -165,5 +165,5 @@
       }
     ]
   },
-  "signature": "OQCEpmIWKpZGhU/+x7WMKAFh0U4l40qE6AIVuUfTE5ACGVyVo5kon78Pw2MG2mNhf//gJwd+vAERs41vWR5rAw=="
+  "signature": "PVgkr7G4wCORcFU6EDG7gNQv8GiaqhZNJ9PNiM13CEjtWBuRyGmidP523RVPSGzXGbYrVdo/8g6Z0tpu6tE8Dg=="
 }

package/README.md

@@ -4096,7 +4096,7 @@ npx @dzhechkov/p-replicator init
 
 ## Status
 
-`v0.7.7` — **the observability pass, and one new verb.** `dz feature-adr-record --backfill` fills the
+`v0.7.8` — **the observability pass, one new verb, and a publisher that stops rewriting history.** `dz feature-adr-record --backfill` fills the
 run-cost ledger from the host's own workflow record — dry-run by default, `--yes` writes atomically.
 A derived number is MARKED (`filledFrom`/`filledBy`), a number you typed is never overwritten and any
 disagreement is reported, and every unfillable row comes back NAMED rather than silently skipped.
@@ -4111,12 +4111,17 @@ Ledger rows now carry a join key at all: the sandboxed workflow cannot know its
 unambiguous — and stamps it as `runIdSource: 'resolved-at-write'`, because a resolved id is an
 inference and not something the pipeline knew.
 
+`dz publish` stops relabelling old changelog entries. Keeping the README footer in lock-step with
+the bump was done by replacing every occurrence of the outgoing version, which rewrote the heading
+documenting what that release contained — four headings in one shipped README had collapsed onto one
+version. Entry-shaped lines are now left alone; footers and install examples still move.
+
 `dz feature-adr-checkpoint` stamps the write instant, so "how long did this stage take" becomes
 answerable for every future run. `dz doctor` reports AQE store integrity from a log that had 1508
 rows and no readers. `dz score` gains an `observability-declared` discipline: does the architecture
 artifact say how anyone would know this feature works? Descriptive, never a gate.
 
-`v0.7.7` — **`dz drift-check` and `dz sync-canonical` stop being a `.claude/skills` gate.** Skill-copy
+`v0.7.6` — **`dz drift-check` and `dz sync-canonical` stop being a `.claude/skills` gate.** Skill-copy
 discovery searched `packages/` plus one hardcoded install root, so the four other per-target install
 trees were ungated — measurably: this repo's own Codex install of `feature-adr` under `.agents/skills`
 drifted for a day while `dz sync-canonical feature-adr --check` reported "all 3 copies match
@@ -4130,7 +4135,7 @@ written by `dz init --enrich` is exempt from both the drift verdict and the heal
 cannot delete it. Also: `dz tg-post` gains `--max-per-day`, previously read by the code but
 unregistered.
 
-`v0.7.7` — **the channel sender stops trusting itself.** `dz tg-post` could format-check, provenance-check
+`v0.7.6` — **the channel sender stops trusting itself.** `dz tg-post` could format-check, provenance-check
 and time-check a post and still publish it twice, or ten more times, or right through an operator who
 wanted everything stopped: nothing counted what had already gone out. It now runs three guards FAIL-CLOSED
 in a fixed order — a **stop-cord** file that halts even a perfect post before any cheaper check, **dedup**
@@ -4144,7 +4149,7 @@ and never inferred from its shape. Also: `dz challenge` is now discoverable from
 (it existed and was reachable only if you already knew the name), and the adversary it assembles is fed all
 five calibration documents rather than a subset.
 
-`v0.7.7` — **a signature-only republish.** `0.7.0` shipped through `pnpm publish` rather than
+`v0.7.5` — **a signature-only republish.** `0.7.0` shipped through `pnpm publish` rather than
 `dz publish`, so the re-signing step was skipped and 17 of 497 files in the published core did not
 match their signed hashes — the content was correct, the manifest was ten hours stale. Nothing in
 the shipped behaviour changes between `0.7.0` and `0.7.7`; the integrity check stops reporting these

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dzhechkov/harness-cli",
-  "version": "0.7.7",
+  "version": "0.7.8",
   "description": "The dz CLI — install AI skills for Claude Code, Codex, OpenCode, Hermes, OpenClaude, GitHub Copilot. 67 commands, 14 presets, 10 platform targets.",
   "type": "module",
   "license": "MIT",
@@ -41,22 +41,22 @@
     "sbom.json"
   ],
   "dependencies": {
-    "@dzhechkov/harness-core": "^0.7.8",
+    "@dzhechkov/harness-core": "^0.7.10",
     "@dzhechkov/harness-presets": "^0.5.14",
     "@dzhechkov/scout": "^0.8.7",
     "@dzhechkov/skills-devops": "^0.3.13",
     "@dzhechkov/skills-mcp": "^0.3.6",
     "@dzhechkov/skills-web3": "^0.2.5",
     "@dzhechkov/skills-qe": "^0.3.10",
-    "@dzhechkov/skills-academic": "^0.3.3",
     "@dzhechkov/skills-meta": "^0.9.51",
+    "@dzhechkov/skills-academic": "^0.3.3",
     "@dzhechkov/skills-ecc": "^0.1.8",
+    "@dzhechkov/skills-news": "^0.1.12",
     "@dzhechkov/skills-pm": "^0.1.1",
     "@dzhechkov/skills-taste": "^0.1.1",
     "@dzhechkov/skills-idea2prd": "^0.1.11",
-    "@dzhechkov/skills-reverse-engineering": "^0.1.9",
     "@dzhechkov/skills-presentation-storyteller": "^0.1.10",
-    "@dzhechkov/skills-news": "^0.1.12",
+    "@dzhechkov/skills-reverse-engineering": "^0.1.9",
     "@dzhechkov/skills-website-cloner": "^0.1.1"
   },
   "devDependencies": {

package/sbom.json

@@ -25,7 +25,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "3d621db3f7811b174ee46b19fa462316ef13679786a910ac64c65fb05bfd5ef7"
+          "content": "a4000a6a9a99f570f9f8955b135fe4742ca74ab9e8c12e7feee0d859c6ab0576"
         }
       ]
     },
@@ -335,7 +335,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b7c47af8811ca86ee8dd5d4d98cab76c4cceddaafbe09676141bacae92b69b9d"
+          "content": "1b1e7ae1af22dd91a6bc92fe1070a5b1d1710e50434abbd8e707f95bbb8f3b14"
         }
       ]
     },