@dzhechkov/harness-core 0.5.3 → 0.6.0

package/sbom.json

@@ -15,7 +15,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "1790811c8031105b1f281ecaff8a2e5b66a33ac9a323cbe63fb0caae67835b0d"
+          "content": "91eaf7e5d2dbf1c4a6627a001c1bf3551e84346a9fa1cc03d2c3eb53fc5eaa33"
         }
       ]
     },
@@ -25,17 +25,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2546cfeb7cf640baaf5dd08714af19e510d23c94712037a2f5069fc1af5fd481"
-        }
-      ]
-    },
-    {
-      "type": "file",
-      "name": "coverage/.tmp/coverage-0.json",
-      "hashes": [
-        {
-          "alg": "SHA-256",
-          "content": "7d9ddf585a3cec04412ed70c7c0356a52b051f70ecf2cabda78bbb980c468968"
+          "content": "d8f8f086d2e3ad77f20b8692890eff77ee18a82e7057379ed73ea738447d06a4"
         }
       ]
     },
@@ -1245,7 +1235,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "164f314c63cced62a9ac52bab80f6fd946630b0ae65cd35a2210d0a7a21c44ac"
+          "content": "13d7d90d33f6c30498b397f34c32d095bdc91e407901a51a9ccdf40a56c60124"
         }
       ]
     },
@@ -1255,7 +1245,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e900ef100629e7fa50bfdb45ecbb173de06a62f140dfa19c1a62463fe94731c2"
+          "content": "bd89f5965d7437b4cef069a9a34cec1ab9f6cee40acde29cdba3fd4a18f27422"
         }
       ]
     },
@@ -1265,7 +1255,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "43c8ae39a919d8ee14c8e7a1ace4d7974c9f561c77b4ea753ddc471a7af8d3ce"
+          "content": "2738a809f3910c7aebc595fc0140d77a8ce5a258036dd318ce05053066c5f07a"
         }
       ]
     },
@@ -1275,7 +1265,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "98d604e83f5b274b66a303c8fa901b121a81dd34b6f29b1971f50b5a49cdcb7d"
+          "content": "bdeac6f879ab1695a11bb2323dc03ba4fa25dd7bd6da19e47208a69df33576f5"
         }
       ]
     },
@@ -1325,7 +1315,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "9c1a71aa8c7a336d9a766e10dd70ee41339d842873ba8eec7c83a4473f93c8e8"
+          "content": "a70af15e057ac643df6345a237c58bb3fb4b72f6707588eda3a93258394f78d0"
         }
       ]
     },
@@ -1335,7 +1325,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0871cfbfcbadd2f5c42c8272f81516c8b3acd06f1e51536ab4f4213375fc4865"
+          "content": "d19ee6f3753d3c715ae71113d85ca1349b04a6c31c72cb7593ab5c59adb174cb"
         }
       ]
     },
@@ -1345,7 +1335,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "30c335b1ab93f5426b3c4fc6187aef1365d76ff65824afee07e6fe3736e36c08"
+          "content": "a2f73174d723a7b60292197d84d4b5ffdccf64eeb030b83594928cae45265bba"
         }
       ]
     },
@@ -1355,7 +1345,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "503ea6db3bc9ff904f997a8d2289bd8c3904099b667bf6342bf09c1ce85dd9b2"
+          "content": "cc1df1420b813207fbd9a3cdaae1c3d8db38b1c85c45472c2e132058c7ca6d72"
         }
       ]
     },
@@ -1525,7 +1515,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "837b65bceef392d58a8b85257443e796c8da7219e2c7d5749df952ff4ba9a7d9"
+          "content": "318e76012b186069d07446f4e3c719f439d1bda17314b5dd6d198abf62293ada"
         }
       ]
     },
@@ -1535,7 +1525,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2c88a22a96119c8ed14d67c1830bd85857e0c43f8a730951c1279ec9442decd6"
+          "content": "997baa864e08b51d00c0207e5cb5e8d51c9c8c2f338037730944f78fa11d98d9"
         }
       ]
     },
@@ -1545,7 +1535,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5c208320312a34f0e4d09b2cea3d50a057253771a67b60a0ee0d0907a382546c"
+          "content": "95ec1aba37fe76082ad4fd5c75e53432fa6e81c39263cf98ef03aae5c73bba4b"
         }
       ]
     },
@@ -1555,7 +1545,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "262dd0fca9a734cc81ba33c215adb9ef88b343ee56091c017abda45c68bc2508"
+          "content": "e5d106e7b3805e65788276981ffdd7a08591bfc3f767ba71caab640c1df8d848"
         }
       ]
     },
@@ -1625,7 +1615,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "115740b3c04b6e906e135eb9d1e462ae4197cdba558d4eb620e29e541b4de288"
+          "content": "d74b846c3c6ca61b457a177719a0481e0c62760c4c106e9571c801ae178b4cf0"
         }
       ]
     },
@@ -1635,7 +1625,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2cbadd2514704ccf6cfbf7e44fc50cad3d3701bc91b98651015896ebe209449a"
+          "content": "c35d17990746480a66c9e34d6fa017b44bd233817cf2c798dc3bcd9ee62c7598"
         }
       ]
     },
@@ -3885,7 +3875,17 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f44d3dd18b5332681d861707c5644b1cbb027b217b9fda07a0b8510b6346d1a8"
+          "content": "abd7ce2bbf152b2e491c8fcaa1e7ee7bf6895a9a156a997e98596d13e31040aa"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "scripts/refuse-wrong-publisher.mjs",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "08bc189534281dd5421e941bd90b14b139dfd3b1dbf3125c9e7f0cf8db8c5add"
         }
       ]
     },
@@ -4195,7 +4195,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b287bc160d482024646d405b8cd3a1db0d09545a668ef27a05e53b1044ba03d5"
+          "content": "92b50c6987a9dc04a7a81608df6f819ee759c86d68498adf7b51ff7459c77d5f"
         }
       ]
     },
@@ -4215,7 +4215,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d7a5440c22dcb421195690762815c93ae77ae3044ed5af92e5cc2c28ad9158f4"
+          "content": "026f0bff646597899fcbb167066e44c0f474896de766da484231cf3f2aeeb8d8"
         }
       ]
     },
@@ -4265,7 +4265,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b741c4477d04f5fdb88f88601b8528f56e9b1fdc6a849dece4af157a81c0fe57"
+          "content": "92c155f8dcde89e00d85f1eaf9748b32023ccf0ab3412f605b6d3769cdc37702"
         }
       ]
     },
@@ -4285,7 +4285,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "929be36a3c9fd2cf3ba6e6b7328dd8d7928d9c031c38bb62880ba234c9553334"
+          "content": "60d25e8153ca6399e5e56b01db31b089001af84eec38e1f9082c1b16f6aa863d"
         }
       ]
     },
@@ -5069,6 +5069,26 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/change-set-probe.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "24a968aa313fcd7381134ea8df05f011d0529b6c5146f7769c6e6d1ab17ff93d"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "test/checkpoint-witness.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "f55d4f5a096e201ef305e46e320123a690a218d1bc67b5505d5fa5aa3f8131f8"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/claim-check-hook.test.ts",
@@ -5139,6 +5159,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/codex-scoped-review.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "34414570dac7fd1fe762f2b64a6d498334b9944200dbfbcbdcc22b43b596df44"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/compounding.test.ts",
@@ -5179,6 +5209,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/cross-family-qe.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "a4fe45f891d874933158428f15f54da81a715f6c06f1c0b47ef6cfb67609bcb1"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/cross-lingual-e2e.test.ts",
@@ -5225,7 +5265,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "cf71ef547bf161f1d2cadfc8456431cd3979f57c0dc2b8cdc1fd539e4dcf6d2f"
+          "content": "00a66584bc9218cb6429542e6984b77eb6814eb8f4c80def8b514761322ae050"
         }
       ]
     },
@@ -5299,6 +5339,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/feature-adr-artifact-probe.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "2243fc62d1518004ff0309e8c13aa0e06b51f6759233bbf990c4870de032e0fe"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/feature-adr-brain.test.ts",
@@ -5315,7 +5365,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "edcbf1f1768ba7fd206da3ad097fe1fa019e721dfd6313ab5354f4063ae341c4"
+          "content": "a644493843c097aeada5fc455ccdf063688761bcfa91e9a6f6423a96811034b3"
         }
       ]
     },
@@ -5335,7 +5385,27 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b5b1707b9b54d96723bb9d43e73f43e7c406535dd65b1b2cdeb10e6644135902"
+          "content": "756d443892354a11abe1c405368b5f038bd39cea03efe55f98f23eac6db96451"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "test/feature-adr-design-fan-amplification.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "9a739da5bbe8c2fb70971d00d51027004c3f59f2c28a12397e0fa594f53d7179"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "test/feature-adr-design-fan-resume.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "1bf2c8524bd2cf0ff390907780a86f10aaa8656a41ec9967aa295a7a94c078cc"
         }
       ]
     },
@@ -5345,7 +5415,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "9a825bc5526c60d669766fd297aec0de38901b2354f0acf77e722dc3e69487c2"
+          "content": "19fda071984ef60634c1be53bc04c1c4a531c7d987810a8b310c477cab02942e"
         }
       ]
     },
@@ -5375,7 +5445,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "63b418b7fac30d95f2501e9b784e8b1238c3df212a65290aeef41d999d669c68"
+          "content": "9c5ac3b9fa91e7d59f50982474fdcb01cf90570efcc9505edf10e785ba5b433f"
         }
       ]
     },
@@ -5429,6 +5499,36 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/fixtures/codex-review-2026-08-21.txt",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "d6c2a91af0f58350427dcfbaebef371aa484eb8007192109af84d32762b00a6a"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "test/fixtures/codex-review-empty-scope-2026-08-21.txt",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "4a35f4d302ed3c5d6bf25b85da5cab8e9a4be1aac163b0f4fc9d3cad9072b387"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "test/fixtures/codex-review-selfreview-slices-2026-08-21.txt",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "371404deb86510c725dd989540efcbbf21f00dc020f0c2ecce51281a63df534b"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/fixtures/loop-lint/seeds/seed-1-sandbox-date-now.js",
@@ -5899,6 +5999,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/mode-b-scope.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "1d03efb58161c9dcc4bf40f1c834777ccc57dc037afa5f9755d1c353aabeb991"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/model-recommender.test.ts",
@@ -5925,7 +6035,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e9ccae5e13df6370a8564326e5766aa1e03973c595bfdf73765d54191acf98c4"
+          "content": "1ff947d1a906c8a5b3e40ee05f953e7c90cd4b6d52c2c6edb57e877ce06596bd"
         }
       ]
     },
@@ -5989,6 +6099,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/partition-findings.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "5ba94ba0c9d7d74c3846de2073ed8186c69fd68e7575ccb93099dfb7579a47de"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/patterns.test.ts",
@@ -6039,6 +6159,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/publisher-guard.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "bb065e8d63186c13861f8cf55ada96ed6415b63a3ba7d6a5957cb47c6c72ab94"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/qe-bridge.test.ts",
@@ -6259,6 +6389,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/step0-artifact.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "72594c0ddc053f18e7b240cae4b07c61938ba245fd05cd7141dbbeb1a7447441"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/store-lock.test.ts",

package/src/feature-adr-checkpoints.ts

@@ -40,7 +40,10 @@ export type CheckpointStage = (typeof CHECKPOINT_STAGES)[number];
  * an M+ design must probe its ADR/ideation/architecture files too, not just requirements
  * (Codex QE #2: a one-file probe accepted a materially incomplete design). */
 export const STAGE_ARTIFACTS: Record<CheckpointStage, string | null> = {
-  router: null,
+  // Since 2026-08-21 Step 0 WRITES this, so the router stage has something to be witnessed by. It was
+  // `null` — a stage that promises nothing verifiable — which is precisely how the tier came to be
+  // recorded nowhere while a run was alive, and how C4 lost its input without anyone noticing.
+  router: '00_complexity_assessment.md',
   design: '01_requirements.md',
   plan: '06_implementation_plan.md',
   code: '07_code_changes/change_manifest.md',
@@ -71,6 +74,20 @@ export const CHECKPOINT_MAX_RESULT_CHARS = 12_000;
  */
 export const CKPT_SCHEMA_VERSION = 'fa-ckpt-3';
 
+/**
+ * Router-stage hash token. Step 0's CONTRACT changed on 2026-08-21 — it must now WRITE
+ * `00_complexity_assessment.md` with an acid table — and a contract change that leaves the hash
+ * alone lets a pre-change router entry resume: the resume gate only asks whether the artifact is
+ * PRESENT, and one of the 66 features that already had a (tableless) file satisfies it. Step 0 then
+ * never re-runs, the acid table is never written, and C4 goes on skipping — the exact defect this
+ * change exists to close, resurrected through the resume path.
+ *
+ * Scoped like `LANDING_HASH_TOKEN` (003-10) rather than bumping CKPT_SCHEMA_VERSION: only the router
+ * stage re-runs once, while design/plan/code/qe checkpoints stay valid. A global bump would re-spend
+ * every in-flight stage to fix one.
+ */
+export const ROUTER_CONTRACT_TOKEN = 'router-writes-00-v1';
+
 /** FNV-1a 32-bit over UTF-16 code units, hex-encoded (one pass; building block for the 64-bit form). */
 export function fnv1a(str: string): string {
   let h = 0x811c9dc5;
@@ -686,3 +703,59 @@ export function parseArtifactProbe(opts: {
   if (sentinels !== 1) return null;
   return found;
 }
+
+/** Why a checkpoint write was refused, or `ok` when it may proceed. */
+export type CheckpointWriteVerdict =
+  | { readonly ok: true; readonly line: string; readonly witnessed: readonly string[] }
+  | { readonly ok: false; readonly reason: string };
+
+/**
+ * Decide whether a stage may be recorded — the WITNESS half of `dz feature-adr checkpoint`.
+ *
+ * Why this exists (2026-08-21). The workflow script runs sandboxed with no filesystem, so it
+ * delegated checkpoint writes to a subagent by handing it a FINISHED JSON line and saying "append
+ * this". The subagent was a courier: it verified nothing. Read from outside, that shape is one party
+ * instructing another to declare a verification gate complete — which is what a safety classifier saw,
+ * blocking NINE such writes in one run (router, four design substages, plan, code, qe, and the cost
+ * ledger). MEASURED: `.fa-state/checkpoints.jsonl` was never created, while every stage had in fact
+ * run and left its artifact on disk. So resume was silently dead and the run still reported success.
+ *
+ * The classifier's premise was wrong for those writes, but its instinct was not: nothing in the old
+ * mechanism could tell a real completion from a fabricated one. A stage whose artifact does not exist
+ * could be recorded as complete, and yesterday's cross-family reviewer flagged exactly that for the
+ * `fleet` stage. So the fix is not a better-worded prompt — it is to stop hand-writing state at all.
+ * The subagent now RUNS A COMMAND; this function is the check that command performs first.
+ *
+ * @param artifacts repo-relative paths the stage must have produced. EMPTY IS REFUSED: a stage that
+ *        claims nothing verifiable has nothing to witness, and recording it would restore the very
+ *        hole this replaces.
+ * @param present   the subset of `artifacts` the caller MEASURED on disk (never what it planned).
+ */
+export function decideCheckpointWrite(opts: {
+  stage: string;
+  inputHash: string;
+  result: unknown;
+  artifacts: readonly string[];
+  present: readonly string[];
+}): CheckpointWriteVerdict {
+  const stage = String(opts.stage ?? '').trim();
+  if (stage === '') return { ok: false, reason: 'stage is empty' };
+  if (String(opts.inputHash ?? '').trim() === '') return { ok: false, reason: 'inputHash is empty' };
+  // A null result is what a DEAD stage returns. Recording it would mark a failure as a success.
+  if (opts.result === null || opts.result === undefined) {
+    return { ok: false, reason: `stage ${stage} produced no result — a dead stage is never recorded` };
+  }
+  if (opts.artifacts.length === 0) {
+    return { ok: false, reason: `stage ${stage} declared no artifact to witness` };
+  }
+  const presentSet = new Set(opts.present.map((p) => String(p)));
+  const missing = opts.artifacts.filter((a) => !presentSet.has(String(a)));
+  if (missing.length > 0) {
+    return { ok: false, reason: `stage ${stage} is missing its artifact(s): ${missing.join(', ')}` };
+  }
+  const line = serializeCheckpoint(stage, opts.inputHash, opts.result);
+  if (line === null) {
+    return { ok: false, reason: `stage ${stage} result is not serialisable within the size cap` };
+  }
+  return { ok: true, line, witnessed: [...opts.artifacts] };
+}