@dzhechkov/harness-cli 0.8.17 → 0.8.19

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dzhechkov/harness-cli",
-  "version": "0.8.17",
+  "version": "0.8.19",
   "description": "The dz CLI — install AI skills for Claude Code, Codex, OpenCode, Hermes, OpenClaude, GitHub Copilot. 87 commands, 14 presets, 10 platform targets.",
   "type": "module",
   "license": "MIT",
@@ -42,23 +42,23 @@
     "src"
   ],
   "dependencies": {
-    "@dzhechkov/harness-core": "^0.8.24",
+    "@dzhechkov/harness-core": "^0.8.27",
     "@dzhechkov/harness-presets": "^0.5.18",
     "@dzhechkov/skills-devops": "^0.3.17",
     "@dzhechkov/scout": "^0.8.11",
     "@dzhechkov/skills-mcp": "^0.3.10",
     "@dzhechkov/skills-web3": "^0.2.9",
-    "@dzhechkov/skills-qe": "^0.3.14",
     "@dzhechkov/skills-meta": "^0.9.55",
-    "@dzhechkov/skills-ecc": "^0.1.12",
-    "@dzhechkov/skills-news": "^0.1.16",
     "@dzhechkov/skills-academic": "^0.3.7",
+    "@dzhechkov/skills-qe": "^0.3.14",
+    "@dzhechkov/skills-news": "^0.1.16",
+    "@dzhechkov/skills-ecc": "^0.1.12",
     "@dzhechkov/skills-pm": "^0.1.5",
-    "@dzhechkov/skills-idea2prd": "^0.1.15",
     "@dzhechkov/skills-taste": "^0.1.5",
-    "@dzhechkov/skills-presentation-storyteller": "^0.1.14",
+    "@dzhechkov/skills-idea2prd": "^0.1.15",
     "@dzhechkov/skills-reverse-engineering": "^0.3.4",
-    "@dzhechkov/skills-website-cloner": "^0.1.5"
+    "@dzhechkov/skills-website-cloner": "^0.1.5",
+    "@dzhechkov/skills-presentation-storyteller": "^0.1.14"
   },
   "devDependencies": {
     "@types/node": "^25.6.0",

package/sbom.json

@@ -25,7 +25,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0a9553b413db2cf2e1ac11fa7809974dbba743e457bc2898850e32536f70a000"
+          "content": "45af5a47278e24f2049789ac96bba2c18597e29e26f3a9df3ac95fc5b52719c2"
         }
       ]
     },
@@ -125,7 +125,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "40ce13aec8fc6cb0beb1ed02f07bb22438f940d52ef59d02f6dc9352e67b8d79"
+          "content": "22cddd1ff809cea9301af0905195bc1f2ff29730ce1b8a257c99c518457cff34"
         }
       ]
     },
@@ -135,7 +135,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b5b87557988b5ec5e58913f53068e35dd5a8f8aac6c62f409d13ab9d9b8202b7"
+          "content": "724695fafaa2a68b6c279ea1f55f14732888ee7ba6919f991ace14fa54620b08"
         }
       ]
     },
@@ -145,7 +145,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "4d0925b3047fc96233ddb1118b071a0a1eca35995a06f30cdfc8b2e613f1ec31"
+          "content": "2935abfc89e4a704d9615b0417ff19279487c05a8a97347b2de6c88908276d33"
         }
       ]
     },
@@ -379,7 +379,7 @@
         },
         {
           "name": "dz:canonical-json-sha256-v2",
-          "value": "1db45f8ab165516a8592bf9bb9dba68993f66e0f4a8b8e42b93c1cfa140a85f7"
+          "value": "5f0c597e704b7b515d40f4a95b784b26d4fe2a5adf1f1309a350541506eb14d4"
         }
       ]
     },
@@ -409,7 +409,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5ba834f5795e8d4208159aa6fbee738f38978ada811f49ba85f6798079970144"
+          "content": "f0bc9f52737064a3d5b26fb2ef07c0aa79e003dfca5e1277cd0988a65cdeeb8e"
         }
       ]
     },

package/src/cli.ts

@@ -6855,10 +6855,15 @@ function cmdSbom(options: Map<string, string>, flags: Set<string>, cwd: string,
   return 0;
 }
 
-function cmdPublish(options: Map<string, string>, flags: Set<string>, cwd: string, write: Write): number {
+function cmdPublish(options: Map<string, string>, flags: Set<string>, cwd: string, writeOutput: Write): number {
+  const json = flags.has('json');
+  // Under --json stdout carries exactly one JSON document, so every human line — guard notes, refusals,
+  // progress — goes to stderr instead of being dropped: a refusal that prints nothing is the silent
+  // failure this repo forbids (QE P2 2026-09-10).
+  const write: Write = json ? (line) => { process.stderr.write(`${line}\n`); } : writeOutput;
   // Reject unknown flags/options so a typo (e.g. `--dry-rum`) can NEVER be
   // silently swallowed and flip the command into live-publish mode.
-  const allowedFlags = new Set(['dry-run', 'no-dry-run', 'yes', 'confirm', 'bump-only', 'help', 'require-signing', 'provenance', 'no-provenance']);
+  const allowedFlags = new Set(['dry-run', 'no-dry-run', 'yes', 'confirm', 'bump-only', 'help', 'require-signing', 'provenance', 'no-provenance', 'json']);
   const allowedOptions = new Set(['filter', 'claim-check', 'no-guard', 'sign-key']);
   const allowedHelp = '  allowed: --dry-run (default), --yes/--confirm/--no-dry-run (go live), --bump-only, --filter <substr>, --claim-check <off|warn|error>, --no-guard "<reason>" (skip the guard pre-flight; logged)';
   for (const flag of flags) {
@@ -7120,6 +7125,11 @@ function cmdPublish(options: Map<string, string>, flags: Set<string>, cwd: strin
     },
   });
 
+  if (json) {
+    writeOutput(JSON.stringify(report));
+    return report.errors > 0 ? 1 : 0;
+  }
+
   write(`\ndz publish${dryRun ? ' --dry-run' : ''}${bumpOnly ? ' --bump-only' : ''}${claimCheckOpt !== 'warn' ? ` --claim-check ${claimCheckOpt}` : ''}`);
   write(`  Published: ${report.published}  Skipped: ${report.skipped}  Errors: ${report.errors}\n`);
   for (const pkg of report.packages) {
@@ -7134,6 +7144,22 @@ function cmdPublish(options: Map<string, string>, flags: Set<string>, cwd: strin
     if (pkg.status === 'error' && pkg.error) {
       for (const line of pkg.error.split('\n')) write(`      ${line}`);
     }
+    const probeLog = (pkg as typeof pkg & {
+      readonly probeLog?: readonly {
+        readonly attempt: number;
+        readonly stdout: string;
+        readonly stderr: string;
+        readonly code: number | null;
+        readonly ms: number;
+      }[];
+    }).probeLog;
+    if (pkg.status === 'error' && probeLog && probeLog.length > 0) {
+      for (const probe of probeLog.slice(-3)) {
+        const output = probe.stderr || probe.stdout;
+        const firstLine = output.split(/\r?\n/, 1)[0]?.trim() || '(empty)';
+        write(`      probe ${probe.attempt}: code ${String(probe.code)}, ${probe.ms}ms — ${firstLine}`);
+      }
+    }
     // The rollback branch cannot tell "publish failed" from "publish landed, registry never answered":
     // both restore package.json. The operator can — one registry query — so say what to check.
     if (pkg.status === 'error' && pkg.error?.startsWith('registry did not confirm')) {