@dzhechkov/harness-core 0.7.7 → 0.7.9

package/sbom.json

@@ -25,7 +25,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "196e14163a267a84083c01a9c4c7d6a26b49adcf4287ade505600848baa02161"
+          "content": "bc991bf4772dee2935710f224e7f0de9c5db84be93da7acef003b82a4fc90cba"
         }
       ]
     },
@@ -669,6 +669,46 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "dist/checkpoint-stamp.d.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "bcd22740dabf30df0b71f2164dd13c9c7fe619746a852929c7e8bd4edd049556"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/checkpoint-stamp.d.ts.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "ff59e5bc4e293a465dae508d6c50fead4d9925b890f33a737b8716ae0529287f"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/checkpoint-stamp.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "925ab26d210efe89d02924e979b6cb1598a3289af4c94c87734af04e7b992620"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/checkpoint-stamp.js.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "aa2887d4e9129aa14cb8b6dbd138307c1a9f06860cfe80cb985176b17db399e3"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "dist/claim-check-hook-policy.d.ts",
@@ -1355,7 +1395,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "13d7d90d33f6c30498b397f34c32d095bdc91e407901a51a9ccdf40a56c60124"
+          "content": "ba30eb15d8b125a3fbf71897fc848807b4636f676b2bc5c0cfb14c71d4667fa0"
         }
       ]
     },
@@ -1365,7 +1405,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "bd89f5965d7437b4cef069a9a34cec1ab9f6cee40acde29cdba3fd4a18f27422"
+          "content": "c1ee8730f59317e337b65fb200e2c2d6a817f87014ce84f192702aed9e38d14f"
         }
       ]
     },
@@ -1385,7 +1425,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "bdeac6f879ab1695a11bb2323dc03ba4fa25dd7bd6da19e47208a69df33576f5"
+          "content": "739d561a337682247f3341878b2c65254a2cf90db38513a73535a6f1dd7f0752"
         }
       ]
     },
@@ -1635,7 +1675,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "4eadcf12e18ccfbe77f857d71e52b29d51b35ee8bb9bbdf3a34cfb6724826c10"
+          "content": "90f57cae51a79c8d102b2230d7a94544abda217cb84f0c1fc5ec7d0a8334964c"
         }
       ]
     },
@@ -1645,7 +1685,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "de6cd5f7de860105804f100e487b65a78f2edd67a40645a710ad81c12e1c5b72"
+          "content": "4f4c8fd219c3027ba1d79d99b8329425026e70f65920a94f743a73bcb39ac647"
         }
       ]
     },
@@ -1655,7 +1695,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "bdb6933fa24b0e02ed293fe4e9c52910e2ed4f5652ea7bcb0dbbb7dc996cc224"
+          "content": "a4f52c56700d821995c7c15af20c9cf8ad8ed2682a37de41f2b03d7202022c02"
         }
       ]
     },
@@ -1665,7 +1705,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b47db4310de5fd7a586e795e10abe108e18cd164d1cb1862e67c227310a68001"
+          "content": "d3a50f4906f913b3419d24d710ec2b27838ffce89f224bf53d6447572bdcd7bc"
         }
       ]
     },
@@ -1709,6 +1749,46 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "dist/ledger-backfill.d.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "ef962a467ec121fa41ed346fe1ac619333f7e76c209173a7d4d5897ef9d6d5c7"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/ledger-backfill.d.ts.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "776d033d3aeffeb40af85cf2dd318ddff35bf08c8867cd56502f3240e841deb3"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/ledger-backfill.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "d8849acd78274c7f5ac82fda839899b1df107eab5cb4d58086d3b89a38fb30af"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/ledger-backfill.js.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "f3d4b2dfaef7cf56542d489bc57a6dcbca97f20181bc1fd2d293341be5dd3706"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "dist/loop-blobs.generated.d.ts",
@@ -2285,7 +2365,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "dfb99e5055b94eb46783f352095d00cfe096d657fd0d2697fa24f64078d3a681"
+          "content": "d1c3b12bfae90c560ccd3a20a988e219d215da92122da4729a1a549f32894656"
         }
       ]
     },
@@ -2295,7 +2375,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f865c6cacc965fbb445c4a8ccbcfd99420ffe7a6256cda79139d73cc24c33797"
+          "content": "e48fe1595148cc7b8859d8d89eef7c444c5d9c3025a3addfaa669d6762789c3f"
         }
       ]
     },
@@ -2305,7 +2385,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "3f1675b4e6a5c73197d330f1415c5a0baa352f7e9ce179a7c49a6630848c9e06"
+          "content": "cea487680c0fdfa429a06815ef5362f9c635bc3e9d3592efc8d7db526f3d21d4"
         }
       ]
     },
@@ -2635,7 +2715,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b67799a78a9b7298b1085b46f3c020a3ae8580ac3732c450c2e37f634c4d5cda"
+          "content": "ea13f5ecd61f3ae84e01c62c5881a026e1e3893b58bc2593e07d785fd5701320"
         }
       ]
     },
@@ -2645,7 +2725,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c90dcb2cb719184a02fb5aa9973e78b7648756c337598801c3c5ea826accfe4e"
+          "content": "b5d136be2a037a66f506e79108002d0b4eef05bbe2daa17ddca06a3bf9dae163"
         }
       ]
     },
@@ -2655,7 +2735,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a07e19838a997ef6ad929a684b035aba564c5554e2b3a1b99f761d54b3f6033f"
+          "content": "9b6b69db28b41bd13c48f604504836bab00970e6ccdd5bf06309d4e8c0f540d8"
         }
       ]
     },
@@ -2665,7 +2745,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "7065aeeff6219fac4eab92f09e38fd263392bd288d5602f5e630b110ab2c18b0"
+          "content": "bc3c91b1a58c4f35148e98c86514b3a1bd0f4d43de24c3531b69feceb9a389fd"
         }
       ]
     },
@@ -3355,7 +3435,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "337431dbd1999ee5ed97b00080c9044179998b4956381478331eda763cde23da"
+          "content": "0558d5a3ea988184f08459a3ed0c6e138541b86cb78cbca378a6ceef797f3c1f"
         }
       ]
     },
@@ -3365,7 +3445,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b259da2b621ff859700c5f1ca8084292f4a300261e3c4c9dc2e38f77fab3c137"
+          "content": "4775208c01c974b495c6001974902447bf3375ed675e4822dc8c1d5022b2e665"
         }
       ]
     },
@@ -3375,7 +3455,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ba4545d48692e799ad86f20839c0e225f38ddb9ea4be95134d7e0accecfb1cef"
+          "content": "ce87f3d528feaeb2f5c9d1c0287065078b388fd2b061a3412a49a836938ca7a8"
         }
       ]
     },
@@ -3385,7 +3465,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "24b30e4cfe58695e57ae07643cfd49352687ae10916713452a5a1c42f8fbdbf0"
+          "content": "7bcbb79b446908423948e131d1abfc3b01f6caf1ddcadeeffe083614bf119bbf"
         }
       ]
     },
@@ -3909,6 +3989,46 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "dist/telemetry-vocabulary.d.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "034f40510ecaa9ae9d867f482c87dbf3a1f771bc9b7ec67ff181fa4f9acf6499"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/telemetry-vocabulary.d.ts.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "9431269b10db42cba8796139d104a61182b08f080c7497b84542e7649c9947b5"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/telemetry-vocabulary.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "9cedc164e6d9b68583912a738c70b712763241c6b2d91a9e904505ebd31118e1"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/telemetry-vocabulary.js.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "a35a1fc29fc679ed9f27e43482a041a9d32f61289924f6e7599765043be8ec45"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "dist/tg-post.d.ts",
@@ -4315,7 +4435,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a75aa6acab6e787f214313004d83fcde7a3332e9828b61bf383fdc5e58a98186"
+          "content": "fefcdc0b5606d8c9ccd189e128bce94bf08bab1e943379c964e626e537396dee"
         }
       ]
     },
@@ -4479,6 +4599,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "src/checkpoint-stamp.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "35fdc7c788149c846114641b8dca2594a800e8210062478de04f42d0a11cc076"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "src/claim-check-hook-policy.ts",
@@ -4655,7 +4785,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "92b50c6987a9dc04a7a81608df6f819ee759c86d68498adf7b51ff7459c77d5f"
+          "content": "1b857c02834026d729b35a2df5998bc8a8e42dc124c6f6f07dad3b5a08d2e6f2"
         }
       ]
     },
@@ -4725,7 +4855,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "18a9f1e7f84b56f0c7aa23b096a15c414418ecdd4fafc2f29d38d6dcbf761c84"
+          "content": "6c99d27272bf6dd1acf3bdb32f01fc9dff13b25ea9e1f89eb49a7692ac1d4b50"
         }
       ]
     },
@@ -4739,6 +4869,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "src/ledger-backfill.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "5659ef646baec7a952a4c7bf9eddc1cde24205ae8eb39f43999c5656ace42224"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "src/loop-blobs.generated.ts",
@@ -4885,7 +5025,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "45875b1296fe035953aded1adba53cbc829f02d632a6c301640e4fedf0e08d38"
+          "content": "3b61b04d7fbcf6186695ea9afc8750d4d3c7dd633285a53b972e6544579a5c7b"
         }
       ]
     },
@@ -4975,7 +5115,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a23d5cb5bf77cc9479e2f00d59afe0f9c5bf56e04129116c171108c8af992182"
+          "content": "740196d64cc54b282a4c745864b7b1f1ce3e0375bfff5644c14b65bd7e0f92b6"
         }
       ]
     },
@@ -5135,7 +5275,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6a0522654d31a6e1e395d95450a7529c4bc64fd61a6a1c9d7a5f132aa2fb618d"
+          "content": "31c96e4bae47eedea0ef30b4a79997ef05e950dc8c61a3fd9b4c41070bb72ada"
         }
       ]
     },
@@ -5279,6 +5419,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "src/telemetry-vocabulary.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "8d6c4da15bb76eca46bff58a0519e4fc0f0b835e5a2b20fa701425ae8d518f10"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "src/tg-post.ts",

package/src/checkpoint-stamp.ts

@@ -0,0 +1,50 @@
+/**
+ * Stamp a checkpoint line with the instant it was WRITTEN.
+ *
+ * Deliberately NOT part of `feature-adr-checkpoints.ts`. That module's functions are mirrored
+ * verbatim into the sandboxed workflow through the loop-blob registry, and the sandbox has no
+ * `Date` — so a clock has no business inside a function the clockless copy also runs. Changing the
+ * mirrored serializer would also drag the whole blob regeneration + region re-render behind a
+ * one-field addition, which is a large machine for a small honest fact.
+ *
+ * The stamp belongs to the WRITER. Only the CLI performing the append has a clock, so only the CLI
+ * stamps, here, at the boundary.
+ *
+ * WHY IT EXISTS (MEASURED 2026-08-25): `.fa-state/checkpoints.jsonl` carried no time field of any
+ * kind, so across 241 feature dirs "how long did this stage take" had no answer for a single run —
+ * and no future run could answer it either.
+ *
+ * @packageDocumentation
+ */
+
+/** An ISO-8601 UTC instant exactly as `Date#toISOString` emits it. Anything else we did not write. */
+const ISO_INSTANT = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?Z$/;
+
+/**
+ * Return `line` with a `ts` field, or `line` UNCHANGED when the stamp is absent or malformed.
+ *
+ * Three properties, each a test:
+ *  - an ABSENT stamp leaves the record with no `ts` — unknown, never zero and never "now". Inventing
+ *    one would make every pre-existing record indistinguishable from a measured one.
+ *  - a MALFORMED stamp is dropped. A wrong instant is worse than an absent one: only the absent one
+ *    is readable as unmeasured.
+ *  - an EXISTING `ts` is never overwritten, and a line that is not a JSON object is passed through
+ *    untouched — this runs on the way to an append-only log.
+ */
+export function stampCheckpointLine(line: string, ts: string): string {
+  if (!ISO_INSTANT.test(ts)) return line;
+  let parsed: unknown;
+  try {
+    parsed = JSON.parse(line);
+  } catch {
+    return line;
+  }
+  if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) return line;
+  const row = parsed as Record<string, unknown>;
+  if (typeof row['ts'] === 'string') return line;
+  try {
+    return JSON.stringify({ ...row, ts });
+  } catch {
+    return line;
+  }
+}

package/src/feature-adr-checkpoints.ts

@@ -56,6 +56,26 @@ export interface CheckpointEntry {
   stage: string;
   inputHash: string;
   result: unknown;
+  /**
+   * ISO-8601 UTC instant the checkpoint was WRITTEN, supplied by the writer.
+   *
+   * OPTIONAL by necessity and by design. The sandboxed workflow has no `Date` at all, so it cannot
+   * stamp its own records — only the CLI that performs the append can, and only for the write, not
+   * for the stage's start. Absent `ts` therefore means UNKNOWN, never zero and never "instant": a
+   * pre-2026-08-25 record simply predates the field, and a reader must say so rather than compute a
+   * duration from a missing number.
+   *
+   * Why this exists at all: until it was added, `.fa-state/checkpoints.jsonl` carried no time field
+   * of any kind, so across 241 feature dirs the question "how long did this stage take" had no
+   * answer for a single run — and no FUTURE run could answer it either. This is the whole of the
+   * fix: one optional field, and every run from now on can be placed on a timeline.
+   *
+   * Deliberately NOT accompanied by a {@link CKPT_SCHEMA_VERSION} bump. The version is SALTED into
+   * every input hash, so bumping it would hash every in-flight checkpoint stale and force each
+   * feature to re-run router+design+plan. Stage semantics did not change; an additive optional field
+   * that old readers ignore and new readers treat as unknown is not a format break.
+   */
+  ts?: string;
 }
 
 /** Oversize guard: a result JSON above this is NOT checkpointed (the stage simply re-runs on resume).

package/src/index.ts

@@ -77,6 +77,11 @@ export { checkUpstream, checkAllUpstream, discoverSourcePackages, loadSourcesMan
 export type { SyncUpstreamReport, UpstreamCheckResult, SourcesManifest, SourcePackageInfo } from './sync-upstream.js';
 export { sweepSkillDrift, syncCanonicalSkill } from './skill-drift.js';
 export { SKILL_INSTALL_ROOTS, SKILL_INSTALL_ROOT_BY_TARGET, DEV_SKILL_ROOT, TARGET_ENRICHMENT_ASSETS } from './skill-install-roots.js';
+export { stampCheckpointLine } from './checkpoint-stamp.js';
+export { TELEMETRY_VOCAB_VERSION, TELEMETRY_FIELDS, PROVISIONAL_TELEMETRY_FIELDS, LOCAL_FIELD_ALIASES, telemetryFieldFor } from './telemetry-vocabulary.js';
+export type { TelemetryField, FieldSource } from './telemetry-vocabulary.js';
+export { planLedgerBackfill, LEDGER_FILL_SOURCE, AMBIGUOUS, resolveLedgerRunId } from './ledger-backfill.js';
+export type { LedgerBackfillPlan, LedgerBackfillRow, RunCostFacts } from './ledger-backfill.js';
 export type { SweepResult, DriftedSkill, SyncResult, SyncCanonicalOptions } from './skill-drift.js';
 export { benchmarkSkill, benchmarkSkills, compareSkills } from './benchmark.js';
 export { buildRegistry, searchRegistry, filterByCategory, skillPackBaseDirs, discoverSkillPackDirs, discoverVerifiablePackDirs } from './registry.js';
@@ -463,7 +468,7 @@ export type {
   ChainDefectAge,
   ChainDefectAges,
 } from './event-chain.js';
-export { decideProvenance, environmentCanMintProvenance, publishArgv, discoverPackages, publishPackages, bumpPatch, compareVersions, findUnpackagedSkills, findUnpublishedWorkspaceFloors, orderByDependencies, syncReadmeVersion } from './publish.js';
+export { decideProvenance, environmentCanMintProvenance, publishArgv, discoverPackages, publishPackages, bumpPatch, compareVersions, findUnpackagedSkills, findUnpublishedWorkspaceFloors, orderByDependencies, syncReadmeVersion, isChangelogEntryLine } from './publish.js';
 export { fetchAllDownloads } from './downloads.js';
 export type { PackageDownloads, DownloadsReport } from './downloads.js';
 export { discoverInstalled, checkUpgrades } from './upgrade.js';