@dzhechkov/harness-core 0.3.128 → 0.3.130

package/sbom.json

@@ -25,7 +25,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d161d91fc1657d650584970e00ee393973ae625063e692319d2e28e816f91ea4"
+          "content": "b1691701ab0b6c51b194984178fa012168d1c2740258d64b759692d825c7cd4b"
         }
       ]
     },
@@ -95,7 +95,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c9140e5af51f3af20a36c46909081d851c473190edb2de991b42f0735660fbf6"
+          "content": "f5baab841b3179512cf72fd12884869719f0a352b9e231a87dfa1b87b772974f"
         }
       ]
     },
@@ -105,7 +105,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "8ef6c9aa473d330ee8d934191fb2b715f4f07bba317edff6f212d67fe5146e91"
+          "content": "eb8f01ef67cb90a2d95b18ae1f10bb3ce2dd5855dc297402665a1fa621a8fb65"
         }
       ]
     },
@@ -115,7 +115,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "61c19dbe15ac1ae4a4fc9564c8d4eed1cd1290a6177ec46eaf07832a8c55b4f0"
+          "content": "f661d868e08152e9e293c83d9914e53c0c2ea52e0afc0ff49d1f8c320017eabd"
         }
       ]
     },
@@ -125,7 +125,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "3e73ff7641ad09ac8e7af287f0df4329d08dfa73633cd9b2620224e79f4810ef"
+          "content": "a994c29d7f265c129dccaf9c0e00b55eb7f6312af8112691035c3889a113668b"
         }
       ]
     },
@@ -1015,7 +1015,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6ee6d990aac7ee33204316a49cde4110818f1522ae89bcae0226d221490c246f"
+          "content": "63b513058606e37cf080176b76be65b33f21ded4f05b25e78ec56e3a978ac16b"
         }
       ]
     },
@@ -1025,7 +1025,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0a509ce7802e48f49eca17166fc8dd85715791288b3021277b06435d854c32ff"
+          "content": "92b4313165d607a7acb9321f490801f8b5d24a202050f7363f5df4836e4fc1de"
         }
       ]
     },
@@ -1035,7 +1035,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a7bfc772641de89a456cda793d23a920911313c87efc0f40ad44b33c6f7e1787"
+          "content": "dd5e32274dee6e2bc787977f4dca188101e77ac74bc9599be56286ba12a3c32f"
         }
       ]
     },
@@ -1045,7 +1045,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ce0d259f4d632b2920bfc8b3f3899885e58ef71bd225b731e885c67081d1f61f"
+          "content": "5e47bad5dd4e137a9ac61272419e6ad2f23166069776d5db364bc0d8f9d8dee3"
         }
       ]
     },
@@ -1065,7 +1065,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "389e18ea7bfe22074dcd0ccc373fab234a4161333ae1bae4eb4466ffeaf166e6"
+          "content": "1fb488eaaef87d92cd95ca18901508cfb1793057470c31df01f399dae6c9af6e"
         }
       ]
     },
@@ -1075,7 +1075,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d1c4136cad91ab8e3cee681f5ab7fde0696d5de1da61f6a69be423087f4d2eb9"
+          "content": "55ae03d431dd90aa819f8ea28aa590aad076a2f0222bb076461ce627ac342187"
         }
       ]
     },
@@ -1085,7 +1085,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "8bcb517e1d8277479344b5290c09e44ece12a7eca3d1bc5b1e61d4c355aaa2a9"
+          "content": "7752efa7cba6b11dd7230b6d965f72a1b3a9e47e0c32fab619496d67f5f5ba22"
         }
       ]
     },
@@ -1215,7 +1215,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f58c60e77c4dd0a098b2ae076ae8db37cc1f0d63d95870e21083156cfd84f09c"
+          "content": "f1c730b94dc591aa592b7b31b86982561f099680fb822e7da68045ec01d44a99"
         }
       ]
     },
@@ -1225,7 +1225,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "282289f512e343985baaf3457ce39bd43927b3fd8ef597532f34e83db0c6cfd8"
+          "content": "f59c1f9742028737b973c4129ac2b4f8e50c3c0b762f48ea2ce97f0a4f89c20a"
         }
       ]
     },
@@ -1235,7 +1235,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5d13af079c98511b2300b05f9f1ca3844578fa4cb110d89194ddde06afd96e19"
+          "content": "f8f8e5a7139e6c898b466a208a14228752501845ca755c94d80e2200cb24d890"
         }
       ]
     },
@@ -1245,7 +1245,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ff59a5013fd97593f273bfee0de3cc22fb71ad51ad9609c57dc1efb57d35c0d4"
+          "content": "ac7463223c47a36d03e2875995c98624c681bc36f04cd37490aa76616513d5aa"
         }
       ]
     },
@@ -1495,7 +1495,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2d837b3e03c48cb106dd76342c319bc949ff53907baf91ea40102093127290ab"
+          "content": "9a74c9472688a4326b10065f61c9294b473baf232a27cf69f6ae7a74a5ce9bb6"
         }
       ]
     },
@@ -1505,7 +1505,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "7b7f0b99bcf1d4d45233f33f059f520107258b71014064058b8f018a16375194"
+          "content": "0631cf526a8aae076d5512bcc75c629ea69830f65aa267ade03028e532a2a923"
         }
       ]
     },
@@ -1515,7 +1515,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "db3a0e92b040e83b792ee56f759e036a9019d05b401d65cd366e716f00a08578"
+          "content": "73fa2d3bcedb0158a2860171b66046aa67c7aa1aab80a93502588202f0aed09e"
         }
       ]
     },
@@ -1525,7 +1525,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "002462c04676596add4eed874909da0ca4310d927fe9d04d79357a22ff76480a"
+          "content": "abdfa155fca15e8aa950430d201c2e6754872c0b02d0201a10c5f0923210373a"
         }
       ]
     },
@@ -2089,6 +2089,46 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "dist/skills-verify.d.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "a2352edd8bd41e74dd5a7939f00d3166b24661c3e5a11fa0443937713fee7452"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/skills-verify.d.ts.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "e6cab46f60962e86bf738a71f638ef38e1114f9b88a892417abdf6a0e8c31795"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/skills-verify.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "a755e50fc0efaa79f9aec3cb4b0c1e42bf389c6b05f7f2e3f539bf04dd72e530"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/skills-verify.js.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "fa859ddaa63747473d92d1efc701975b89c4458ff53c49f1bc2bf6a83517f8df"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "dist/skills.d.ts",
@@ -2335,7 +2375,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "7e181b3d05e7aac7acaf496a8eb58773abef14bd2e11e2f8aa8bed55ae69326b"
+          "content": "2bc60f782f3b2f9ee179894b88d8b2b9ff487f286c17f3d3dfd7f0ca0d640ffc"
         }
       ]
     },
@@ -2345,7 +2385,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "4b70f02d8954195ff16a19df746f5a1cf6f9c00f420621a692fe381221bba081"
+          "content": "2a30a5bd7b8caf0e1cca2587817d25d9b0a366162ca098d5464f9783cdc2311d"
         }
       ]
     },
@@ -2355,7 +2395,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a1076a6870b1cfb1c0fc47525e8bf9357887be062cbd124d6145996ad8b81da7"
+          "content": "c0d917225ced953324609cb086fff6d6a2f31dead7dad470a31ec5d6bb257a32"
         }
       ]
     },
@@ -2365,7 +2405,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "82b2a767216bd3688100189a38aa331515e30696310d086ff2a9ea934172f3df"
+          "content": "70e3c78890c71f0bb1cdd66bc2f787ead25c88edc130449d71003275e5adf57b"
         }
       ]
     },
@@ -2415,7 +2455,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "10333f357c5fc55ad72780e1f8c8b0626fca13955ca21faa1588448e0f111ff1"
+          "content": "efe1f6f372dada19c2889e5ed4ee3fe930602ed77ff9e7695ab59c47978dc340"
         }
       ]
     },
@@ -2435,7 +2475,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "3347529bd57799df27e1c209a7a480348b53b511f26f5fd863cc21a39c6d5b53"
+          "content": "91f8d26b81e3262bc9e3b4ca357165eaed5d889660ef60f18b63e483009ea44e"
         }
       ]
     },
@@ -2665,7 +2705,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "4ab5be98ff44ccdf428a60976bfd9e6c728ad88c7a76c56d1c11912727fe7c62"
+          "content": "c224021d9de3fbfd777ad74dc2d65baefa112b98e6fcee8eeac4bc0c83fa8b60"
         }
       ]
     },
@@ -2675,7 +2715,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "517a2346f10e1331aa9a33a7d24d25fd01bcb9e365b6c153f0631e6cb64208da"
+          "content": "041fea2a00543016e0d2d9c5fc45df0df3bd97744c1705f95f6bb73725f03aee"
         }
       ]
     },
@@ -2715,7 +2755,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "55cfcd5cd45a8bec20c10ea0c7f40ccd3a57bce84783e9d7fa563eac4ba7f347"
+          "content": "dba61149547898122304b11d4be377aed17ad822b0f4a017d76815ddb295eb0a"
         }
       ]
     },
@@ -2775,7 +2815,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b7fa9bd88206c40c6e8e8c1cc42bfdb409595cb86db1769e6597d2315bd65b23"
+          "content": "b4a3c6b3fc2e8338efeee729038a01e3881dc578b65427ffbb03c236e160b470"
         }
       ]
     },
@@ -2919,6 +2959,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "src/skills-verify.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "7d71fd31d41d2d3b369046161920edde3825dd620ec5e4ea503d59b56abc5d94"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "src/skills.ts",
@@ -2985,7 +3035,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5d1189cca886a9e34112e74706e2610eaf7449a83268c13d005cdd84f5bf77a9"
+          "content": "9707fa46b1f92cfa75e45c6619e01ef8f74bb5f50a913b778edfe6143d818d8a"
         }
       ]
     },
@@ -3419,6 +3469,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/lesson-quarantine.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "61931781195ab6093482060120f537a047223c6f345ce8c1809a81655ffb74d6"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/mcp-scan.test.ts",
@@ -3639,6 +3699,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/skills-verify.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "99e16fe36ae35f5493452dfe0b26265061467b14d98e60cdcb30265fa63d97b5"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/statusline.test.ts",

package/src/agentdb-index.ts

@@ -484,6 +484,52 @@ export async function importVectorsToAgentdb(
   }
 }
 
+/**
+ * lesson-quarantine: clear the `qStatus` marker from mirrored rows after a promotion — the hook
+ * daemon reads ONLY this mirror's metadata, so a promoted lesson must stop being excluded there
+ * too. Best-effort, same custody model as {@link bumpAgentdbUses} (missing db/deps ⇒ no-op).
+ */
+export function clearAgentdbQuarantine(
+  projectRoot: string,
+  dzIds: readonly string[],
+  opts: { dbPath?: string } = {},
+): { cleared: number; error?: string } {
+  if (dzIds.length === 0) return { cleared: 0 };
+  const dbFile = resolveAgentdbPath(projectRoot, opts.dbPath);
+  if (!existsSync(dbFile)) return { cleared: 0 };
+  let Database: new (p: string) => UpsertDb;
+  try {
+    const req = createRequire(join(projectRoot, 'package.json'));
+    Database = req('better-sqlite3') as new (p: string) => UpsertDb;
+  } catch {
+    return { cleared: 0, error: DEPS_MISSING };
+  }
+  try {
+    const db = new Database(dbFile);
+    try {
+      db.pragma('journal_mode = WAL');
+      db.pragma('busy_timeout = 5000');
+      db.exec(REASONING_BANK_SCHEMA);
+      const stmt = db.prepare(
+        "UPDATE reasoning_patterns SET metadata = json_remove(metadata, '$.qStatus', '$.quarantinedAt') WHERE json_extract(metadata, '$.dzId') = ? AND json_extract(metadata, '$.qStatus') = 'quarantined'",
+      );
+      const tx = db.transaction(() => {
+        let cleared = 0;
+        for (const dzId of dzIds) {
+          const r = stmt.run(dzId);
+          cleared += Number((r as unknown as { changes?: number }).changes ?? 0);
+        }
+        return cleared;
+      });
+      return { cleared: tx() };
+    } finally {
+      db.close();
+    }
+  } catch (err) {
+    return { cleared: 0, error: `quarantine clear failed: ${err instanceof Error ? err.message : String(err)}` };
+  }
+}
+
 export function bumpAgentdbUses(
   projectRoot: string,
   dzIds: readonly string[],

package/src/index.ts

@@ -40,8 +40,8 @@ export { benchmarkSkill, benchmarkSkills, compareSkills } from './benchmark.js';
 export { buildRegistry, searchRegistry, filterByCategory, skillPackBaseDirs, discoverSkillPackDirs } from './registry.js';
 export { recommend } from './recommend.js';
 export { pretrain } from './pretrain.js';
-export { loadPatterns, loadSessions, computePatternBoost, readLearningConfig, readMemoryLearningConfig, BOOST_CAP, recordPattern, loadStorePatternsSync, loadStoreRecords, patternToRecord, recordToPattern, patternRecordId, patternIdentityOf, dreamRecordId, isMirrorableLearning, consolidateSessions, recallPatterns, pruneNoisePatterns, removePatternsByIds, snapshotStore, readReinforcementState, encodeReinforcementState, reinforcePattern, updateReinforcementState, storeStats, lessonDeltaReport, lessonDeltaMap } from './patterns.js';
-export type { PatternRecord, SessionRecord, LearningConfig, MemoryLearningConfig, LoadOptions, ConsolidateResult, ConsolidateOptions, SqliteBackendMode, RecallHit, SessionsSource, PruneNoiseResult, RemovePatternsResult, SnapshotStoreResult, ReinforcementState, ReinforcePatternResult, StoreStats, LessonDeltaReport, LessonDeltaRow } from './patterns.js';
+export { loadPatterns, loadSessions, computePatternBoost, readLearningConfig, readMemoryLearningConfig, BOOST_CAP, recordPattern, loadStorePatternsSync, loadStoreRecords, patternToRecord, recordToPattern, patternRecordId, patternIdentityOf, dreamRecordId, isMirrorableLearning, consolidateSessions, recallPatterns, pruneNoisePatterns, removePatternsByIds, snapshotStore, readReinforcementState, encodeReinforcementState, reinforcePattern, updateReinforcementState, storeStats, lessonDeltaReport, lessonDeltaMap, readQuarantineState, encodeQuarantineState, promotePatterns, quarantineExpiryCandidates, pruneQuarantinePatterns } from './patterns.js';
+export type { PatternRecord, SessionRecord, LearningConfig, MemoryLearningConfig, LoadOptions, ConsolidateResult, ConsolidateOptions, SqliteBackendMode, RecallHit, SessionsSource, PruneNoiseResult, RemovePatternsResult, SnapshotStoreResult, ReinforcementState, ReinforcePatternResult, StoreStats, LessonDeltaReport, LessonDeltaRow, QuarantineState, PromoteResult, QuarantineExpiryCandidate } from './patterns.js';
 export { DEFAULT_REINFORCE_THRESHOLD, NoopLearningBackend, NativeReinforcementBackend, resolveLearningBackend, isLearningSignalBackend } from './learning-backend.js';
 export type { LearningSignalBackend, LearningSignalStats, LearningSample, SignalCandidate, EnhanceContext, TrainingResult, LearningBackendMode } from './learning-backend.js';
 export {
@@ -96,7 +96,7 @@ export type {
 export { runSetup, generateHooksConfig, generateAgentdbWriter, writerVersionOf, AGENTDB_WRITER_VERSION } from './setup.js';
 export { statuslineData, readFeatureAdrState, writeFeatureAdrState, featureAdrStatePath } from './statusline.js';
 export type { StatuslineData, FeatureAdrState, WriteFeatureAdrStateInput } from './statusline.js';
-export { indexPatternsToAgentdb, resolveAgentdbPath, searchAgentdbPatterns, listAgentdbDzIds, resolveAgentdbEmbedder, cosineSimilarity, importVectorsToAgentdb, reindexAgentdbRows, bumpAgentdbUses } from './agentdb-index.js';
+export { indexPatternsToAgentdb, resolveAgentdbPath, searchAgentdbPatterns, listAgentdbDzIds, resolveAgentdbEmbedder, cosineSimilarity, importVectorsToAgentdb, reindexAgentdbRows, bumpAgentdbUses, clearAgentdbQuarantine } from './agentdb-index.js';
 export type { AgentdbSearchHit, AgentdbSearchResult, AgentdbImportRow } from './agentdb-index.js';
 export { DEFAULT_EMBED_MODEL, LEGACY_EMBED_MODEL, DEFAULT_EMBED_DIM, KNOWN_EMBED_DIMS, resolveEmbedModel, readEmbedManifest, writeEmbedManifest, embedManifestPath, legacyEmbedManifest } from './embedding-config.js';
 export type { EmbedModelConfig, EmbedModelSource, EmbedManifest } from './embedding-config.js';
@@ -317,3 +317,7 @@ export * from './bto-optimize.js';
 export * from './discrimination-gate.js';
 export * from './guard.js';
 export * from './delivery-check.js';
+
+// Skill-registration gate (feature skills-verify, ADR-001) — static layout scan + the deterministic
+// `system/init` listing. Fail-closed: an unobservable registration is `inconclusive`, never `pass`.
+export * from './skills-verify.js';

package/src/learning-backend.ts

@@ -115,9 +115,13 @@ export class NativeReinforcementBackend implements LearningSignalBackend {
     let failed = 0;
     let error: string | undefined;
     for (const sample of batch) {
+      // lesson-quarantine (CRITICAL, cross-model QE): a `recall-hit` sample is EXPOSURE, not
+      // confirmation — it must update reinforcement stats WITHOUT lifting quarantine. Only an
+      // explicit `reinforce` sample promotes (the ADR's no-promotion-by-exposure invariant).
       const r = await reinforcePattern(this.projectRoot, sample.dzId, {
         ts: sample.ts,
         ...(sample.reward !== undefined ? { reward: sample.reward } : {}),
+        ...(sample.kind === 'recall-hit' ? { exposure: true } : {}),
       });
       if (r.ok) flushed += 1;
       else {