@dzhechkov/harness-core 0.8.2 → 0.8.6

package/src/guard.ts

@@ -69,6 +69,29 @@ export interface GuardFacts {
   readonly counts?: readonly { readonly label: string; readonly a: number; readonly b: number }[];
   /** for store-bloat-cap: current learned-store size vs its cap. */
   readonly store?: { readonly count: number; readonly cap: number };
+  /** Advisory freshness evidence for the auto-cost outcome store. Missing evidence fails open. */
+  readonly routingFreshness?: { readonly unfedRunIds: readonly string[] };
+  /**
+   * for marketplace-parity: the CLI's read-only regeneration result. The whole field being absent
+   * means evidence could not be gathered, so this advisory rule reports nothing.
+   */
+  readonly marketplaceParity?: {
+    /** false ⇒ this repository has no .claude-plugin/ showcase and is out of scope. */
+    readonly applicable: boolean;
+    /** true ⇒ exactly one of plugin.json / marketplace.json is present. */
+    readonly onlyOnePresent?: boolean;
+    /** true ⇒ registry-derived composition differs from a fresh regeneration. */
+    readonly diverged?: boolean;
+    /** Operator-owned published version, carried only to render the exact repair command. */
+    readonly publishedVersion?: string;
+    /** Existing published manifests that could not be read or parsed. */
+    readonly manifestFailures?: readonly {
+      readonly file: 'plugin.json' | 'marketplace.json';
+      readonly error: string;
+    }[];
+    /** true ⇒ regeneration was attempted but could not complete. */
+    readonly regenerateFailed?: boolean;
+  };
   /** for skills-registrable: per skill pack, dirs that would ship un-registrable (no depth-1 SKILL.md). */
   readonly skillPacks?: readonly { readonly name: string; readonly nonRegistrable: readonly string[] }[];
   /** for readme-first: per publishable package, is a version bump staged without a README change? */
@@ -262,6 +285,8 @@ export const DEFAULT_RULES: readonly GuardRule[] = [
   { id: 'readme-consistency', severity: 'soft', ops: ['publish'], description: 'README counts agree (CJM header vs All Commands, etc.)' },
   { id: 'skills-registrable', severity: 'soft', ops: ['publish'], description: 'every skill directory in a skill pack has a depth-1 SKILL.md (a buried or missing one ships un-registrable — the health-advisor 1.2.0 class)' },
   { id: 'readme-first', severity: 'soft', ops: ['publish'], description: 'a package with a staged version bump must update its own README.md in the same change (README-first)' },
+  { id: 'routing-store-stale', severity: 'soft', ops: ['publish'], description: 'harvested routing telemetry has been applied to the auto-cost outcome store' },
+  { id: 'marketplace-parity', severity: 'soft', ops: ['publish'], description: 'the published .claude-plugin/ showcase composition matches a fresh regeneration from the live registry (version excluded — an operator field)' },
   { id: 'agents-md-policy-sync', severity: 'soft', ops: ['publish'], description: 'proves the AGENTS.md copy is in SYNC with its source — not that the runtime read or obeyed it; heal drift with dz agents-sync' },
   { id: 'lockfile-in-sync', severity: 'soft', ops: ['publish'], description: 'every workspace @dzhechkov/* dependency spec matches the specifier pnpm-lock.yaml records for that importer (a dep bump without a lockfile refresh breaks CI with ERR_PNPM_OUTDATED_LOCKFILE). SOFT-ONLY — a config cannot promote it to HARD' },
   { id: 'store-bloat-cap', severity: 'soft', ops: ['teach', 'consolidate'], description: 'the learned store is within its size cap' },
@@ -360,6 +385,59 @@ const CHECKERS: Record<string, (f: GuardFacts, sev: GuardSeverity) => Violation[
     }
     return out;
   },
+  'routing-store-stale': (f, _sev) => {
+    const ids = f.routingFreshness?.unfedRunIds;
+    if (!Array.isArray(ids) || ids.length === 0) return [];
+    const valid = [...new Set(ids.filter((id): id is string => typeof id === 'string' && id !== ''))].sort();
+    if (valid.length === 0) return [];
+    return [{
+      rule: 'routing-store-stale',
+      severity: 'soft',
+      detail: `${valid.length} harvested run(s) are not reflected in the auto-cost store: ${valid.slice(0, 5).join(', ')}${valid.length > 5 ? '…' : ''} — run dz routing recommend --apply`,
+    }];
+  },
+  'marketplace-parity': (f, _sev) => {
+    const fact = f.marketplaceParity;
+    if (fact === undefined || fact.applicable !== true) return [];
+    const hasPublishedVersion = typeof fact.publishedVersion === 'string' && fact.publishedVersion !== '';
+    const fix = `dz plugin --version ${hasPublishedVersion ? fact.publishedVersion : 'X.Y.Z'}`;
+    const fixHint = hasPublishedVersion ? '' : ' (substitute the published version for X.Y.Z)';
+    const manifestFailures = Array.isArray(fact.manifestFailures)
+      ? fact.manifestFailures.filter((failure) => failure
+        && (failure.file === 'plugin.json' || failure.file === 'marketplace.json')
+        && typeof failure.error === 'string'
+        && failure.error !== '')
+      : [];
+    if (manifestFailures.length > 0) {
+      return manifestFailures.map((failure) => ({
+        rule: 'marketplace-parity',
+        severity: 'soft',
+        detail: `.claude-plugin/${failure.file} exists but could not be read or parsed: ${failure.error} — run \`${fix}\`${fixHint} and commit the result`,
+      }));
+    }
+    if (fact.onlyOnePresent === true) {
+      return [{
+        rule: 'marketplace-parity',
+        severity: 'soft',
+        detail: `.claude-plugin/ has only one of plugin.json / marketplace.json — a broken half-showcase; run \`${fix}\`${fixHint} and commit the result`,
+      }];
+    }
+    if (fact.regenerateFailed === true) {
+      return [{
+        rule: 'marketplace-parity',
+        severity: 'soft',
+        detail: 'could not verify .claude-plugin/ composition because fresh regeneration failed',
+      }];
+    }
+    if (fact.diverged === true) {
+      return [{
+        rule: 'marketplace-parity',
+        severity: 'soft',
+        detail: `.claude-plugin/ composition does not match a fresh regeneration from the live registry — run \`${fix}\`${fixHint} and commit the result`,
+      }];
+    }
+    return [];
+  },
   'review-round': (f, sev) => {
     // The publish gate had eleven rules and not one asked whether anyone but the author had read the
     // code. MEASURED cost (health-advisor slice H): five rounds graded F, thirteen packages published
@@ -508,7 +586,7 @@ const CHECKERS: Record<string, (f: GuardFacts, sev: GuardSeverity) => Violation[
  * may not understand a file, and "I might be wrong" plus "block the publish" is the wrong pair. Disabling
  * such a rule stays allowed — only the promotion is refused.
  */
-export const SOFT_ONLY_RULES: readonly string[] = ['lockfile-in-sync', 'agents-md-policy-sync'];
+export const SOFT_ONLY_RULES: readonly string[] = ['lockfile-in-sync', 'agents-md-policy-sync', 'routing-store-stale', 'marketplace-parity'];
 
 /**
  * A well-formed PROMOTED rule: an id the engine does not know, made enforceable by a template +

package/src/index.ts

@@ -224,6 +224,28 @@ export type { PretrainResult, DetectedTech } from './pretrain.js';
 export type { RecommendationReport, SkillRecommendation } from './recommend.js';
 export { claimCheck, summarize, decideClaimCheckText, severityCounts, isGated } from './claim-check.js';
 export type { ClaimFinding, ClaimCheckResult, ClaimTextDecision, FailOn } from './claim-check.js';
+export {
+  BUNDLED_SLOP_REGISTRY_URL,
+  DEFAULT_SLOP_CONFIG,
+  parseSlopRegistry,
+  slopLint,
+  validateSlopLintConfig,
+} from './slop-lint.js';
+export type {
+  SlopDiagnostic,
+  SlopEvidence,
+  SlopFinding,
+  SlopFindingMetrics,
+  SlopFindingThresholds,
+  SlopLanguage,
+  SlopLintConfig,
+  SlopLintResult,
+  SlopRegistry,
+  SlopRegistryEntry,
+  SlopRuleId,
+  SlopValidationError,
+  ValidationResult,
+} from './slop-lint.js';
 export { hookDecision, isFenced, isNewLine, ESCAPE_TEACHING } from './claim-check-hook-policy.js';
 export type { HookDecision, HookDecisionOpts } from './claim-check-hook-policy.js';
 export { step8ClaimGate } from './feature-adr-claim-gate.js';
@@ -261,7 +283,7 @@ export {
   codeCheckpointPersistAllowed,
   codeStageResultShapeValid,
 } from './feature-adr-checkpoints.js';
-export type { CheckpointStage, CheckpointEntry, ResumeMode, ResumeDecision, ParsedCheckpointRead, TrainingPairFamily, TrainingPair, TrainingPairEvaluation, TrainingPairProvenance, TrainingPairTruncation,
+export type { CheckpointStage, CheckpointEntry, ResumeMode, ResumeDecision, ParsedCheckpointRead, TrainingPairFamily, TrainingPair, TrainingPairEvaluation, TrainingPairProvenance, TrainingPairBudget, TrainingPairTruncation,
   CheckpointWriteVerdict,
 } from './feature-adr-checkpoints.js';
 
@@ -290,6 +312,35 @@ export { decidePublishSigning, decidePostSigningVerification, decideSignableSet,
 export type { PublishSigningVerdict, PublishSigningDecision, SignableSetDecision } from './publish-signing.js';
 export type { RecordKind, RecordVerdict, RecordDecision } from './run-records.js';
 export type { AmendmentRow, AmendmentVerdict, AmendmentResolution, AmendmentOutcome, AmendmentDecision, PlanCoverageGap } from './amendment-trace.js';
+// contract-checklist (ADR-001): pure extraction, canonical rendering, typed report parsing, and
+// exact per-item verification. Filesystem discovery/containment stays in harness-cli.
+export {
+  extractContractChecklist,
+  renderContractChecklist,
+  parseContractVerdictReport,
+  verifyContractVerdicts,
+} from './contract-checklist.js';
+export type {
+  ContractSourceKind,
+  ContractVerdict,
+  ContractObservedOutcome,
+  ContractGrade,
+  ContractSourceArtifact,
+  ContractChecklistSource,
+  ContractItem,
+  ContractChecklist,
+  ContractDiagnostic,
+  ContractChecklistResult,
+  ContractVerdictEvidence,
+  ContractVerdictItem,
+  ContractVerdictReport,
+  ContractVerdictParseResult,
+  ContractEvidenceReadResult,
+  ContractEvidenceReader,
+  ContractItemVerification,
+  ContractVerificationCounts,
+  ContractVerification,
+} from './contract-checklist.js';
 export {
   DOMAIN_LIFT_EXACT,
   DOMAIN_LIFT_RELATED,
@@ -576,6 +627,7 @@ export {
   resolveCoderSpec,
   coderIsCodex,
   resolveQeSpec,
+  resolveQeSpecForCoder,
   crossFamilyQe,
   decideModeBScope,
   partitionReviewFindings,
@@ -792,6 +844,9 @@ export * from './skills-verify.js';
 // finding, not a pass).
 export * from './compounding.js';
 
+// Advisory command-invocation telemetry + deadwood report (feature dz-deadwood).
+export * from './cmd-usage.js';
+
 // Cold-vs-warm EPOCH RUNNER (feature epoch-replay, scout idea #4) — the RESULT leg to compounding's
 // readiness leg. Orchestrates + scores; never calls a model. SUPPORTED requires two DISJOINT Wilson
 // intervals; INCONCLUSIVE is a first-class honest outcome.
@@ -872,6 +927,31 @@ export { decideCadenceWindow, isoWeekOf, weeklyBuckets, guardRepeatDecay, buildC
 export type { CadenceWindow, CadenceReport, CadenceWindowDecision } from './cadence.js';
 export { readQeRounds, countQeRounds, QE_ROUNDS_DEFAULT_CEILING } from './qe-rounds.js';
 export type { QeRound, QeFailedAttempt, QeRoundsReport, QeRoundsStatus } from './qe-rounds.js';
+export {
+  adviseRestart,
+  decideRestartRecommendation,
+  parseCheckpointQeHistory,
+  parseTrainingPairQeHistory,
+  renderRestartDecisionLog,
+  RESTART_ADVISOR_SCHEMA,
+  RESTART_ADVISOR_MAX_DIAGNOSTICS,
+  RESTART_ADVISOR_MAX_EVIDENCE,
+} from './restart-advisor.js';
+export type {
+  ParsedRestartHistory,
+  RestartAdvice,
+  RestartAdvisorInput,
+  RestartAdvisorPolicy,
+  RestartDecision,
+  RestartDecisionInput,
+  RestartGrade,
+  RestartNormalizedRound,
+  RestartPolicyOrigin,
+  RestartReason,
+  RestartRecommendation,
+  RestartSource,
+  RestartThreshold,
+} from './restart-advisor.js';
 export { describeStoreLocation, storeLocationLine } from './store-location.js';
 export type { StoreLocation, StoreOrigin } from './store-location.js';
 export { mergeStoreHits, sameStore, globalStoreRoot, storeCountLabel } from './store-merge.js';

package/src/loop-blobs.generated.ts

@@ -42,7 +42,7 @@ export const BLOB_COVERAGE_MANIFEST: { coveredWorkflows: string[] } = {
 export const BLOBS: Record<string, LoopBlob> = {
   "checkpoints": {
     name: "checkpoints",
-    version: "1.1.0",
+    version: "1.2.0",
     contentHash: "a44560c6036fd143b7a3f125fec00fa8b91c3c06ac5b9e1ecfb83d27a5211e9b",
     sourcePath: "packages/@dzhechkov/harness-core/src/feature-adr-checkpoints.ts",
     requires: [],
@@ -51,30 +51,30 @@ export const BLOBS: Record<string, LoopBlob> = {
   },
   "training-pairs": {
     name: "training-pairs",
-    version: "1.1.0",
-    contentHash: "199eaaa8ce5dba4f54744b4a4f34eea32a3c33d4de8dbbddd3d119b70459361d",
+    version: "1.2.0",
+    contentHash: "7c836995b72f0b8fc69074cf6bb7b8a58fac609e4f5c365c82b8745c655da39c",
     sourcePath: "packages/@dzhechkov/harness-core/src/feature-adr-checkpoints.ts",
     requires: ["checkpoints"],
     exports: ["TRAINPAIR_SCHEMA_VERSION","TRAINPAIR_MAX_IO_CHARS","trainingPairFamily","trainingPairPath","TRAINPAIR_PRIVACY_NOTE","buildTrainingPair","serializeTrainingPair","trainingPairAppendCmd","decideCaptureMode","captureFailureRecord","trainingPairBackfillCmd","TP_BACKFILL_OK","TP_BACKFILL_SKIP"],
-    code: "function decideCaptureMode(opts) {\n    if (!opts.enabled)\n        return 'skip-disabled';\n    if (!Number.isInteger(opts.recordCount) || opts.recordCount <= 0)\n        return 'skip-empty';\n    return opts.resumed ? 'backfill' : 'capture';\n}\nfunction captureFailureRecord(stage, mode, reason, detail) {\n    const normalizedStage = typeof stage === 'string' && stage.trim() !== '' ? stage : 'unknown';\n    const normalizedMode = mode === 'capture' || mode === 'backfill' || mode === 'skip-disabled' || mode === 'skip-empty'\n        ? mode\n        : null;\n    const normalizedReason = reason === 'threw' || reason === 'unserializable' || reason === 'unverified' || reason === 'backfill-unverified' || reason === 'empty-output'\n        ? reason\n        : 'threw';\n    let normalizedDetail = null;\n    if (detail !== null && detail !== undefined) {\n        try {\n            const text = String(detail);\n            if (text !== '')\n                normalizedDetail = text.length > 500 ? text.slice(0, 500) + '…' : text;\n        }\n        catch {\n            normalizedDetail = null;\n        }\n    }\n    return { stage: normalizedStage, mode: normalizedMode, reason: normalizedReason, detail: normalizedDetail };\n}\nconst TRAINPAIR_SCHEMA_VERSION = 'fa-trainpair-2';\nconst TRAINPAIR_MAX_IO_CHARS = 48000;\nfunction trainingPairFamily(spec) {\n    return /codex|gpt|openai/i.test(String(spec ?? '')) ? 'codex' : 'claude';\n}\nfunction trainingPairPath(slug, stage) {\n    return '.dz/fa-training/' + slug + '/' + stage + '.jsonl';\n}\nconst TRAINPAIR_PRIVACY_NOTE = \"feature-adr TRAINING PAIRS (backlog 70e0f083): per-stage SFT records - STAGE INPUT (full prompt/context) -> STAGE OUTPUT (artifact/result) -> EVALUATION (QE grade + injected lessons) with model+family provenance; one JSONL file per stage per slug. PRIVACY: pairs may contain TARGET-REPO CODE and full prompts. This directory is NOT gitignored yet by explicit owner decision - review contents before sharing or publishing anything that embeds it. ts is the CAPTURE time. On a record with captureMode: 'backfill' that is the RECONSTRUCTION time, NOT the stage's observation time — the original stage's timing lives in that run's .fa-state checkpoint.\";\nconst TP_PROFILE_MARKER_START = '<!-- dz:profile:start -->';\nconst TP_PROFILE_MARKER_END = '<!-- dz:profile:end -->';\nconst TP_PROFILE_REDACTED = '[dz:profile REDACTED]';\nfunction redactProfileBlock(text) {\n    if (typeof text !== 'string' || text === '')\n        return typeof text === 'string' ? text : '';\n    let out = '';\n    let rest = text;\n    for (;;) {\n        const start = rest.indexOf(TP_PROFILE_MARKER_START);\n        if (start === -1)\n            return out + rest;\n        out += rest.slice(0, start) + TP_PROFILE_REDACTED;\n        const end = rest.indexOf(TP_PROFILE_MARKER_END, start + TP_PROFILE_MARKER_START.length);\n        if (end === -1)\n            return out;\n        rest = rest.slice(end + TP_PROFILE_MARKER_END.length);\n    }\n}\nfunction coerceText(v) {\n    if (typeof v === 'string')\n        return v;\n    if (v === null || v === undefined)\n        return '';\n    try {\n        const s = JSON.stringify(v);\n        return typeof s === 'string' ? s : String(v);\n    }\n    catch {\n        return String(v);\n    }\n}\nfunction buildTrainingPair(opts) {\n    let input = redactProfileBlock(coerceText(opts.input));\n    let output = redactProfileBlock(coerceText(opts.output));\n    let truncated = null;\n    if (input.length + output.length > TRAINPAIR_MAX_IO_CHARS) {\n        truncated = { inputChars: input.length, outputChars: output.length, inputHash: fnv1a64(input), outputHash: fnv1a64(output) };\n        const half = Math.floor(TRAINPAIR_MAX_IO_CHARS / 2);\n        let inKeep = input.length;\n        let outKeep = output.length;\n        if (outKeep <= half)\n            inKeep = TRAINPAIR_MAX_IO_CHARS - outKeep;\n        else if (inKeep <= half)\n            outKeep = TRAINPAIR_MAX_IO_CHARS - inKeep;\n        else {\n            inKeep = half;\n            outKeep = TRAINPAIR_MAX_IO_CHARS - half;\n        }\n        if (inKeep < input.length)\n            input = input.slice(0, inKeep) + '\\n…[TRUNCATED ' + (truncated.inputChars - inKeep) + ' chars — full-text fnv1a64=' + truncated.inputHash + ']';\n        if (outKeep < output.length)\n            output = output.slice(0, outKeep) + '\\n…[TRUNCATED ' + (truncated.outputChars - outKeep) + ' chars — full-text fnv1a64=' + truncated.outputHash + ']';\n    }\n    const ev = opts.evaluation || {};\n    const pv = opts.provenance || {};\n    return {\n        schema: TRAINPAIR_SCHEMA_VERSION,\n        slug: opts.slug,\n        stage: opts.stage,\n        ts: opts.ts === undefined ? null : opts.ts,\n        input,\n        output,\n        evaluation: {\n            grade: typeof ev.grade === 'string' && ev.grade.trim() !== '' ? ev.grade : null,\n            gradedBy: typeof ev.gradedBy === 'string' && ev.gradedBy !== '' ? ev.gradedBy : null,\n            lessonsInjected: Array.isArray(ev.lessonsInjected) ? ev.lessonsInjected.filter((s) => typeof s === 'string' && s !== '') : [],\n        },\n        provenance: {\n            model: typeof pv.model === 'string' && pv.model !== '' ? pv.model : 'unknown',\n            family: pv.family === 'claude' || pv.family === 'codex' ? pv.family : trainingPairFamily(pv.model),\n            role: typeof pv.role === 'string' && pv.role !== '' ? pv.role : 'unknown',\n            tokens: typeof pv.tokens === 'number' && Number.isFinite(pv.tokens) ? pv.tokens : null,\n            minutes: typeof pv.minutes === 'number' && Number.isFinite(pv.minutes) ? pv.minutes : null,\n        },\n        truncated,\n        captureMode: opts.captureMode === 'backfill' ? 'backfill' : 'capture',\n        resumed: opts.resumed === true,\n    };\n}\nfunction serializeTrainingPair(pair) {\n    try {\n        const line = JSON.stringify(pair);\n        return typeof line === 'string' ? line : null;\n    }\n    catch {\n        return null;\n    }\n}\nfunction trainingPairAppendCmd(repoAbs, slug, stage, line) {\n    const dirAbs = repoAbs + '/.dz/fa-training/' + slug;\n    const readmeAbs = repoAbs + '/.dz/fa-training/README.md';\n    const fileAbs = dirAbs + '/' + stage + '.jsonl';\n    return ('mkdir -p ' + shellQuote(dirAbs) +\n        ' && { [ -f ' + shellQuote(readmeAbs) + ' ] || printf \\'%s\\\\n\\' ' + shellQuote(TRAINPAIR_PRIVACY_NOTE) + ' > ' + shellQuote(readmeAbs) + '; }' +\n        \" && printf '%s\\\\n' \" + shellQuote(line) + ' >> ' + shellQuote(fileAbs));\n}\nconst TP_BACKFILL_OK = 'TP-BACKFILL-OK';\nconst TP_BACKFILL_SKIP = 'TP-BACKFILL-SKIP';\nconst TP_BACKFILL_DUP = 'TP-BACKFILL-DUP';\nfunction trainingPairBackfillCmd(repoAbs, slug, stage, lines, markKey) {\n    if (typeof repoAbs !== 'string' || repoAbs === '')\n        return null;\n    if (typeof slug !== 'string' || slug === '')\n        return null;\n    if (typeof stage !== 'string' || stage === '')\n        return null;\n    if (!Array.isArray(lines) || lines.length === 0 || !lines.every(line => typeof line === 'string' && line !== ''))\n        return null;\n    const dirAbs = repoAbs + '/.dz/fa-training/' + slug;\n    const readmeAbs = repoAbs + '/.dz/fa-training/README.md';\n    const fileAbs = dirAbs + '/' + stage + '.jsonl';\n    const markDir = repoAbs + '/.dz/fa-training/.backfill-marks';\n    const markStage = stage.replace(/\\.\\./g, '_').replace(/\\//g, '_');\n    const resolvedMarkKey = markKey === undefined ? fnv1a64(stage + '\\0' + lines.join('\\n')) : markKey;\n    const markPath = markDir + '/' + markStage + '-' + resolvedMarkKey;\n    const appends = lines\n        .map(line => \"printf '%s\\\\n' \" + shellQuote(line) + ' >> ' + shellQuote(fileAbs))\n        .join(' && ');\n    return ('mkdir -p ' + shellQuote(dirAbs) +\n        ' && { [ -f ' + shellQuote(readmeAbs) + ' ] || printf \\'%s\\\\n\\' ' + shellQuote(TRAINPAIR_PRIVACY_NOTE) + ' > ' + shellQuote(readmeAbs) + '; }' +\n        ' && mkdir -p ' + shellQuote(markDir) +\n        ' && if mkdir ' + shellQuote(markPath) + ' 2>/dev/null; then ' +\n        'if [ -f ' + shellQuote(fileAbs) + ' ]; then echo ' + shellQuote(TP_BACKFILL_SKIP) +\n        '; else { ' + appends + ' && echo ' + shellQuote(TP_BACKFILL_OK) + '; } || { rmdir ' + shellQuote(markPath) + ' 2>/dev/null; false; }; fi' +\n        '; else echo ' + shellQuote(TP_BACKFILL_DUP) + '; fi');\n}",
+    code: "function decideCaptureMode(opts) {\n    if (!opts.enabled)\n        return 'skip-disabled';\n    if (!Number.isInteger(opts.recordCount) || opts.recordCount <= 0)\n        return 'skip-empty';\n    return opts.resumed ? 'backfill' : 'capture';\n}\nfunction captureFailureRecord(stage, mode, reason, detail) {\n    const normalizedStage = typeof stage === 'string' && stage.trim() !== '' ? stage : 'unknown';\n    const normalizedMode = mode === 'capture' || mode === 'backfill' || mode === 'skip-disabled' || mode === 'skip-empty'\n        ? mode\n        : null;\n    const normalizedReason = reason === 'threw' || reason === 'unserializable' || reason === 'unverified' || reason === 'backfill-unverified' || reason === 'empty-output'\n        ? reason\n        : 'threw';\n    let normalizedDetail = null;\n    if (detail !== null && detail !== undefined) {\n        try {\n            const text = String(detail);\n            if (text !== '')\n                normalizedDetail = text.length > 500 ? text.slice(0, 500) + '…' : text;\n        }\n        catch {\n            normalizedDetail = null;\n        }\n    }\n    return { stage: normalizedStage, mode: normalizedMode, reason: normalizedReason, detail: normalizedDetail };\n}\nconst TRAINPAIR_SCHEMA_VERSION = 'fa-trainpair-3';\nconst TRAINPAIR_MAX_IO_CHARS = 48000;\nfunction trainingPairFamily(spec) {\n    return /codex|gpt|openai/i.test(String(spec ?? '')) ? 'codex' : 'claude';\n}\nfunction trainingPairPath(slug, stage) {\n    return '.dz/fa-training/' + slug + '/' + stage + '.jsonl';\n}\nconst TRAINPAIR_PRIVACY_NOTE = \"feature-adr TRAINING PAIRS (backlog 70e0f083): per-stage SFT records - STAGE INPUT (full prompt/context) -> STAGE OUTPUT (artifact/result) -> EVALUATION (QE grade + injected lessons) with model+family provenance; one JSONL file per stage per slug. PRIVACY: pairs may contain TARGET-REPO CODE and full prompts. This directory is NOT gitignored yet by explicit owner decision - review contents before sharing or publishing anything that embeds it. ts is the CAPTURE time. On a record with captureMode: 'backfill' that is the RECONSTRUCTION time, NOT the stage's observation time — the original stage's timing lives in that run's .fa-state checkpoint.\";\nconst TP_PROFILE_MARKER_START = '<!-- dz:profile:start -->';\nconst TP_PROFILE_MARKER_END = '<!-- dz:profile:end -->';\nconst TP_PROFILE_REDACTED = '[dz:profile REDACTED]';\nfunction redactProfileBlock(text) {\n    if (typeof text !== 'string' || text === '')\n        return typeof text === 'string' ? text : '';\n    let out = '';\n    let rest = text;\n    for (;;) {\n        const start = rest.indexOf(TP_PROFILE_MARKER_START);\n        if (start === -1)\n            return out + rest;\n        out += rest.slice(0, start) + TP_PROFILE_REDACTED;\n        const end = rest.indexOf(TP_PROFILE_MARKER_END, start + TP_PROFILE_MARKER_START.length);\n        if (end === -1)\n            return out;\n        rest = rest.slice(end + TP_PROFILE_MARKER_END.length);\n    }\n}\nfunction coerceText(v) {\n    if (typeof v === 'string')\n        return v;\n    if (v === null || v === undefined)\n        return '';\n    try {\n        const s = JSON.stringify(v);\n        return typeof s === 'string' ? s : String(v);\n    }\n    catch {\n        return String(v);\n    }\n}\nfunction normalizeTrainingPairBudget(raw) {\n    try {\n        if (raw === undefined)\n            return { primary: 'claude', claude: 'normal', codex: 'normal', preset: 'unset' };\n        if (raw === null || typeof raw !== 'object')\n            return null;\n        const value = raw;\n        const primary = value.primary;\n        const claude = value.claude;\n        const codex = value.codex;\n        if (primary !== 'claude' && primary !== 'codex')\n            return null;\n        if (claude !== 'normal' && claude !== 'eco')\n            return null;\n        if (codex !== 'normal' && codex !== 'eco')\n            return null;\n        if (value.preset === 'unset')\n            return { primary, claude, codex, preset: 'unset' };\n        let preset = 'custom';\n        if (claude === 'normal' && codex === 'normal')\n            preset = 'normal';\n        else if (claude === 'eco' && codex === 'eco')\n            preset = 'eco';\n        else if (claude === 'eco' && codex === 'normal')\n            preset = 'hybrid';\n        return { primary, claude, codex, preset };\n    }\n    catch {\n        return null;\n    }\n}\nfunction buildTrainingPair(opts) {\n    let input = redactProfileBlock(coerceText(opts.input));\n    let output = redactProfileBlock(coerceText(opts.output));\n    let truncated = null;\n    if (input.length + output.length > TRAINPAIR_MAX_IO_CHARS) {\n        truncated = { inputChars: input.length, outputChars: output.length, inputHash: fnv1a64(input), outputHash: fnv1a64(output) };\n        const half = Math.floor(TRAINPAIR_MAX_IO_CHARS / 2);\n        let inKeep = input.length;\n        let outKeep = output.length;\n        if (outKeep <= half)\n            inKeep = TRAINPAIR_MAX_IO_CHARS - outKeep;\n        else if (inKeep <= half)\n            outKeep = TRAINPAIR_MAX_IO_CHARS - inKeep;\n        else {\n            inKeep = half;\n            outKeep = TRAINPAIR_MAX_IO_CHARS - half;\n        }\n        if (inKeep < input.length)\n            input = input.slice(0, inKeep) + '\\n…[TRUNCATED ' + (truncated.inputChars - inKeep) + ' chars — full-text fnv1a64=' + truncated.inputHash + ']';\n        if (outKeep < output.length)\n            output = output.slice(0, outKeep) + '\\n…[TRUNCATED ' + (truncated.outputChars - outKeep) + ' chars — full-text fnv1a64=' + truncated.outputHash + ']';\n    }\n    const ev = opts.evaluation || {};\n    const pv = opts.provenance || {};\n    return {\n        schema: TRAINPAIR_SCHEMA_VERSION,\n        slug: opts.slug,\n        stage: opts.stage,\n        ts: opts.ts === undefined ? null : opts.ts,\n        input,\n        output,\n        evaluation: {\n            grade: typeof ev.grade === 'string' && ev.grade.trim() !== '' ? ev.grade : null,\n            gradedBy: typeof ev.gradedBy === 'string' && ev.gradedBy !== '' ? ev.gradedBy : null,\n            lessonsInjected: Array.isArray(ev.lessonsInjected) ? ev.lessonsInjected.filter((s) => typeof s === 'string' && s !== '') : [],\n        },\n        provenance: {\n            model: typeof pv.model === 'string' && pv.model !== '' ? pv.model : 'unknown',\n            family: pv.family === 'claude' || pv.family === 'codex' ? pv.family : trainingPairFamily(pv.model),\n            role: typeof pv.role === 'string' && pv.role !== '' ? pv.role : 'unknown',\n            tokens: typeof pv.tokens === 'number' && Number.isFinite(pv.tokens) ? pv.tokens : null,\n            minutes: typeof pv.minutes === 'number' && Number.isFinite(pv.minutes) ? pv.minutes : null,\n        },\n        budgetMode: normalizeTrainingPairBudget(opts.budgetMode),\n        truncated,\n        captureMode: opts.captureMode === 'backfill' ? 'backfill' : 'capture',\n        resumed: opts.resumed === true,\n    };\n}\nfunction serializeTrainingPair(pair) {\n    try {\n        const line = JSON.stringify(pair);\n        return typeof line === 'string' ? line : null;\n    }\n    catch {\n        return null;\n    }\n}\nfunction trainingPairAppendCmd(repoAbs, slug, stage, line) {\n    const dirAbs = repoAbs + '/.dz/fa-training/' + slug;\n    const readmeAbs = repoAbs + '/.dz/fa-training/README.md';\n    const fileAbs = dirAbs + '/' + stage + '.jsonl';\n    return ('mkdir -p ' + shellQuote(dirAbs) +\n        ' && { [ -f ' + shellQuote(readmeAbs) + ' ] || printf \\'%s\\\\n\\' ' + shellQuote(TRAINPAIR_PRIVACY_NOTE) + ' > ' + shellQuote(readmeAbs) + '; }' +\n        \" && printf '%s\\\\n' \" + shellQuote(line) + ' >> ' + shellQuote(fileAbs));\n}\nconst TP_BACKFILL_OK = 'TP-BACKFILL-OK';\nconst TP_BACKFILL_SKIP = 'TP-BACKFILL-SKIP';\nconst TP_BACKFILL_DUP = 'TP-BACKFILL-DUP';\nfunction trainingPairBackfillCmd(repoAbs, slug, stage, lines, markKey) {\n    if (typeof repoAbs !== 'string' || repoAbs === '')\n        return null;\n    if (typeof slug !== 'string' || slug === '')\n        return null;\n    if (typeof stage !== 'string' || stage === '')\n        return null;\n    if (!Array.isArray(lines) || lines.length === 0 || !lines.every(line => typeof line === 'string' && line !== ''))\n        return null;\n    const dirAbs = repoAbs + '/.dz/fa-training/' + slug;\n    const readmeAbs = repoAbs + '/.dz/fa-training/README.md';\n    const fileAbs = dirAbs + '/' + stage + '.jsonl';\n    const markDir = repoAbs + '/.dz/fa-training/.backfill-marks';\n    const markStage = stage.replace(/\\.\\./g, '_').replace(/\\//g, '_');\n    const resolvedMarkKey = markKey === undefined ? fnv1a64(stage + '\\0' + lines.join('\\n')) : markKey;\n    const markPath = markDir + '/' + markStage + '-' + resolvedMarkKey;\n    const appends = lines\n        .map(line => \"printf '%s\\\\n' \" + shellQuote(line) + ' >> ' + shellQuote(fileAbs))\n        .join(' && ');\n    return ('mkdir -p ' + shellQuote(dirAbs) +\n        ' && { [ -f ' + shellQuote(readmeAbs) + ' ] || printf \\'%s\\\\n\\' ' + shellQuote(TRAINPAIR_PRIVACY_NOTE) + ' > ' + shellQuote(readmeAbs) + '; }' +\n        ' && mkdir -p ' + shellQuote(markDir) +\n        ' && if mkdir ' + shellQuote(markPath) + ' 2>/dev/null; then ' +\n        'if [ -f ' + shellQuote(fileAbs) + ' ]; then echo ' + shellQuote(TP_BACKFILL_SKIP) +\n        '; else { ' + appends + ' && echo ' + shellQuote(TP_BACKFILL_OK) + '; } || { rmdir ' + shellQuote(markPath) + ' 2>/dev/null; false; }; fi' +\n        '; else echo ' + shellQuote(TP_BACKFILL_DUP) + '; fi');\n}",
   },
   "model-resolver": {
     name: "model-resolver",
     version: "1.0.0",
-    contentHash: "e82ac2137279537f5b65725cbd8de5817fcbc89571068e2df843587352fa83f5",
+    contentHash: "fcf8c1dfc4b5364adb6e532565953ef30d94a45070b2b903411170965a1fb372",
     sourcePath: "packages/@dzhechkov/harness-core/src/feature-adr-routing.ts",
     requires: [],
     exports: ["specToOpts","resolveStageModel","KNOWN_CODEX","mergeOpts","stageLabel","modelLabel"],
-    code: "const OVERRIDE_REASONING = {\n    router: 'high',\n    requirements: 'xhigh',\n    research: 'xhigh',\n    adr: 'xhigh',\n    ideation: 'xhigh',\n    ddd: 'xhigh',\n    architecture: 'xhigh',\n    plan: 'xhigh',\n    code: 'xhigh',\n    qe: 'high',\n    fleet: 'high',\n};\nfunction topCodexId(env) {\n    let top = env.CODEX_MODEL;\n    if (top === 'auto') {\n        const ids = Object.keys(KNOWN_CODEX);\n        for (let i = 0; i < ids.length; i++) {\n            if (ids[i] !== 'auto')\n                top = ids[i] || top;\n        }\n    }\n    return top;\n}\nconst KNOWN_CODEX = { auto: 1, 'gpt-5.5': 1, 'gpt-5.6': 1, 'gpt-5.6-luna': 1, 'gpt-5.6-terra': 1, 'gpt-5.6-sol': 1 };\nconst CLAUDE_NAMES = { fable: 1, opus: 1, sonnet: 1, haiku: 1 };\nconst VALID_REASONING = { none: 1, minimal: 1, low: 1, medium: 1, high: 1, xhigh: 1 };\nconst DEFAULT_MODELS = {\n    router: 'fable',\n    requirements: 'sonnet',\n    research: 'sonnet',\n    adr: 'opus',\n    ideation: 'sonnet',\n    ddd: 'opus',\n    architecture: 'opus',\n    plan: 'sonnet',\n    code: null,\n    qe: null,\n    fleet: 'sonnet',\n};\nfunction specToOpts(spec, env) {\n    const log = env.log || function () { };\n    if (!spec)\n        return {};\n    const parts = String(spec).split(':');\n    const head = parts[0] || '';\n    if (head === 'codex') {\n        let id = parts[1] || env.CODEX_MODEL;\n        if (id !== 'auto' && !KNOWN_CODEX[id]) {\n            log('models: unknown codex id ' + id + ' — using ' + env.CODEX_MODEL);\n            id = env.CODEX_MODEL;\n        }\n        let reasoning = parts[2] || 'high';\n        if (!VALID_REASONING[reasoning]) {\n            log('models: unknown reasoning ' + reasoning + ' — using high');\n            reasoning = 'high';\n        }\n        return { agentType: 'codex:codex-rescue', codexModel: id, _reasoning: reasoning };\n    }\n    if (CLAUDE_NAMES[head])\n        return { model: head };\n    log('models: unknown spec ' + spec + ' — session-inherited');\n    return {};\n}\nfunction resolveCoderSpec(env) {\n    if (env.CODER === 'codex' || env.CODER === 'codex-fallback')\n        return 'codex:' + env.CODEX_MODEL + ':high';\n    return 'opus';\n}\nfunction coderIsCodex(env) {\n    if (env.CODER === 'codex' || env.CODER === 'codex-fallback')\n        return true;\n    const codeSpec = env.MODELS.code;\n    if (codeSpec && String(codeSpec).split(':')[0] === 'codex')\n        return true;\n    return false;\n}\nfunction resolveQeSpec(env) {\n    if (coderIsCodex(env))\n        return 'opus';\n    const CODEX_AVAILABLE = env.codexAvailable !== false;\n    if (!CODEX_AVAILABLE)\n        return 'opus';\n    return 'codex:' + topCodexId(env) + ':high';\n}\nfunction routingRequested(env) {\n    return (Object.keys(env.MODELS).length > 0 ||\n        env.PLANNER === 'codex' ||\n        env.CODER === 'codex' ||\n        env.CODER === 'codex-fallback' ||\n        env.QE_REVIEWER === 'codex' ||\n        env.QE_REVIEWER === 'codex-fallback');\n}\nfunction resolveStageModel(stage, env) {\n    if (env.usageOverride) {\n        const r = (env.usageReasoning && env.usageReasoning[stage]) || OVERRIDE_REASONING[stage] || 'high';\n        const o = specToOpts('codex:' + topCodexId(env) + ':' + r, env);\n        o._usageSwitched = true;\n        return o;\n    }\n    let spec = env.MODELS[stage];\n    if (spec === undefined) {\n        if (!routingRequested(env))\n            return {};\n        spec = DEFAULT_MODELS[stage];\n    }\n    if (stage === 'code' && (spec === null || spec === undefined))\n        return specToOpts(resolveCoderSpec(env), env);\n    if (stage === 'qe' && (spec === null || spec === undefined))\n        return specToOpts(resolveQeSpec(env), env);\n    return specToOpts(spec, env);\n}\nfunction modelLabel(opts) {\n    if (opts && opts.agentType === 'codex:codex-rescue') {\n        const base = 'codex:' + opts.codexModel + ':' + opts._reasoning;\n        return opts._usageSwitched ? base + ' (usage-switched)' : base;\n    }\n    if (opts && opts.model)\n        return opts.model;\n    return 'session';\n}\nfunction stageLabel(base, opts) {\n    const m = modelLabel(opts);\n    return m === 'session' ? base : base + ' · ' + m;\n}\nfunction mergeOpts(base, extra) {\n    const out = {};\n    for (const k in base)\n        out[k] = base[k];\n    for (const k in extra)\n        out[k] = extra[k];\n    return out;\n}",
+    code: "const STAGE_EFFORT = { override: {\n        router: 'medium',\n        requirements: 'medium',\n        research: 'medium',\n        adr: 'high',\n        ideation: 'medium',\n        ddd: 'high',\n        architecture: 'high',\n        plan: 'high',\n        code: 'medium',\n        qe: 'high',\n        fleet: 'medium',\n    } };\nfunction topCodexId(env) {\n    return env.CODEX_MODEL !== 'auto' ? env.CODEX_MODEL : CODEX_TIERS.flagship;\n}\nconst KNOWN_CODEX = { auto: 1, 'gpt-5.5': 1, 'gpt-5.6': 1, 'gpt-5.6-luna': 1, 'gpt-5.6-terra': 1, 'gpt-5.6-sol': 1 };\nconst CODEX_TIERS = {\n    flagship: 'gpt-5.6-sol',\n    workhorse: 'gpt-5.6-terra',\n    'high-volume': 'gpt-5.6-luna',\n};\nfunction codexIdForTier(tier, env) {\n    return env.CODEX_MODEL !== 'auto' ? env.CODEX_MODEL : CODEX_TIERS[tier];\n}\nconst BUDGET_PRESETS = {\n    normal: { claude: 'normal', codex: 'normal' },\n    eco: { claude: 'eco', codex: 'eco' },\n    hybrid: { claude: 'eco', codex: 'normal' },\n};\nfunction resolveBudgetMode(raw) {\n    if (raw === undefined)\n        return BUDGET_PRESETS.normal;\n    if (typeof raw === 'string') {\n        const preset = BUDGET_PRESETS[raw];\n        if (!preset)\n            throw new RangeError('budget: unknown preset \"' + raw + '\" — valid: normal|eco|hybrid');\n        return preset;\n    }\n    if (raw && typeof raw === 'object') {\n        const value = raw;\n        for (const key of Object.keys(value)) {\n            if (key !== 'claude' && key !== 'codex') {\n                throw new RangeError('budget: unknown family key \"' + key + '\" — valid: claude|codex');\n            }\n        }\n        for (const key of ['claude', 'codex']) {\n            const level = value[key];\n            if (level !== undefined && level !== 'normal' && level !== 'eco') {\n                throw new RangeError('budget.' + key + ': unknown level \"' + level + '\" — valid: normal|eco');\n            }\n        }\n        return {\n            claude: value.claude || 'normal',\n            codex: value.codex || 'normal',\n        };\n    }\n    throw new RangeError('budget: expected a preset name or {claude,codex} object, got ' + typeof raw);\n}\nconst CLAUDE_NAMES = { fable: 1, opus: 1, sonnet: 1, haiku: 1 };\nconst VALID_REASONING = { none: 1, minimal: 1, low: 1, medium: 1, high: 1, xhigh: 1, max: 1 };\nconst DEFAULT_MODELS = {\n    router: 'fable',\n    requirements: 'sonnet',\n    research: 'sonnet',\n    adr: 'opus',\n    ideation: 'sonnet',\n    ddd: 'opus',\n    architecture: 'opus',\n    plan: 'sonnet',\n    code: null,\n    qe: null,\n    fleet: 'sonnet',\n};\nconst ROUTING_TABLES = {\n    claude: {\n        claude: {\n            normal: { router: 'sonnet', requirements: 'sonnet', research: 'sonnet', adr: 'fable', ideation: 'sonnet', ddd: 'fable', architecture: 'fable', plan: 'opus', code: 'sonnet', fleet: 'sonnet' },\n            eco: { router: 'sonnet', requirements: 'sonnet', research: 'sonnet', adr: 'opus', ideation: 'sonnet', ddd: 'opus', architecture: 'opus', plan: 'sonnet', code: 'sonnet', fleet: 'sonnet' },\n        },\n        codex: { normal: {}, eco: {} },\n    },\n    codex: {\n        claude: {\n            normal: { router: 'sonnet', qe: 'sonnet', fleet: 'sonnet' },\n            eco: { router: 'sonnet', qe: 'sonnet', fleet: 'sonnet' },\n        },\n        codex: { normal: {}, eco: {} },\n    },\n};\nfunction codexCell(tier, effort, env) {\n    return 'codex:' + codexIdForTier(tier, env) + ':' + effort;\n}\nfunction budgetTable(primary, mode, env) {\n    const claudeHalf = ROUTING_TABLES[primary].claude[mode.claude];\n    let codexHalf;\n    if (primary === 'claude') {\n        const qeSpec = mode.codex === 'normal'\n            ? codexCell('flagship', 'high', env)\n            : codexCell('workhorse', 'medium', env);\n        codexHalf = { ...ROUTING_TABLES.claude.codex[mode.codex], qe: env.codexAvailable === false ? 'opus' : qeSpec };\n    }\n    else {\n        const normal = mode.codex === 'normal';\n        const design = codexCell(normal ? 'flagship' : 'workhorse', normal ? 'high' : 'medium', env);\n        codexHalf = {\n            requirements: design,\n            research: design,\n            adr: design,\n            ideation: design,\n            ddd: design,\n            architecture: design,\n            plan: codexCell(normal ? 'flagship' : 'workhorse', normal ? 'high' : 'low', env),\n            code: codexCell(normal ? 'flagship' : 'workhorse', 'medium', env),\n        };\n    }\n    return { ...claudeHalf, ...codexHalf };\n}\nfunction specToOpts(spec, env) {\n    const log = env.log || function () { };\n    if (!spec)\n        return {};\n    const parts = String(spec).split(':');\n    const head = parts[0] || '';\n    if (head === 'codex') {\n        let id = parts[1] || env.CODEX_MODEL;\n        if (id !== 'auto' && !KNOWN_CODEX[id]) {\n            log('models: unknown codex id ' + id + ' — using ' + env.CODEX_MODEL);\n            id = env.CODEX_MODEL;\n        }\n        let reasoning = parts[2] || 'high';\n        if (!VALID_REASONING[reasoning]) {\n            throw new RangeError('models: invalid reasoning \"' + reasoning + '\" — valid: ' + Object.keys(VALID_REASONING).join('|'));\n        }\n        return { agentType: 'codex:codex-rescue', codexModel: id, _reasoning: reasoning };\n    }\n    if (CLAUDE_NAMES[head])\n        return { model: head };\n    log('models: unknown spec ' + spec + ' — session-inherited');\n    return {};\n}\nfunction resolveCoderSpec(env) {\n    if (env.CODER === 'codex' || env.CODER === 'codex-fallback')\n        return 'codex:' + env.CODEX_MODEL + ':high';\n    return 'opus';\n}\nfunction coderIsCodex(env) {\n    const codeSpec = env.MODELS.code;\n    if (codeSpec !== undefined && codeSpec !== null)\n        return String(codeSpec).split(':')[0] === 'codex';\n    if (env.CODER === 'codex' || env.CODER === 'codex-fallback')\n        return true;\n    return env.primary === 'codex';\n}\nfunction resolveQeSpecForCoder(coderCodex, env) {\n    if (coderCodex)\n        return 'sonnet';\n    const CODEX_AVAILABLE = env.codexAvailable !== false;\n    if (!CODEX_AVAILABLE)\n        return 'opus';\n    const budget = resolveBudgetMode(env.budget);\n    return budget.codex === 'eco'\n        ? 'codex:' + codexIdForTier('workhorse', env) + ':medium'\n        : 'codex:' + codexIdForTier('flagship', env) + ':high';\n}\nfunction resolveQeSpec(env) {\n    return resolveQeSpecForCoder(coderIsCodex(env), env);\n}\nfunction routingRequested(env) {\n    return (Object.keys(env.MODELS).length > 0 ||\n        env.primary !== undefined ||\n        env.budget !== undefined ||\n        env.PLANNER === 'codex' ||\n        env.CODER === 'codex' ||\n        env.CODER === 'codex-fallback' ||\n        env.QE_REVIEWER === 'codex' ||\n        env.QE_REVIEWER === 'codex-fallback');\n}\nfunction resolveStageModel(stage, env) {\n    if (env.usageOverride) {\n        const r = (env.usageReasoning && env.usageReasoning[stage]) || STAGE_EFFORT.override[stage] || 'medium';\n        const o = specToOpts('codex:' + topCodexId(env) + ':' + r, env);\n        o._usageSwitched = true;\n        return o;\n    }\n    let spec = env.MODELS[stage];\n    if (spec === undefined) {\n        if (!routingRequested(env))\n            return {};\n        if (stage === 'code' && (env.CODER === 'codex' || env.CODER === 'codex-fallback')) {\n            return specToOpts(resolveCoderSpec(env), env);\n        }\n        if (stage === 'plan' && env.PLANNER === 'codex') {\n            return specToOpts('codex:' + env.CODEX_MODEL + ':high', env);\n        }\n        if (stage === 'qe') {\n            return specToOpts(resolveQeSpec(env), env);\n        }\n        const resolvedPrimary = env.primary || 'claude';\n        const cell = budgetTable(resolvedPrimary, resolveBudgetMode(env.budget), env)[stage];\n        spec = cell !== undefined ? cell : DEFAULT_MODELS[stage];\n    }\n    if (stage === 'code' && (spec === null || spec === undefined))\n        return specToOpts(resolveCoderSpec(env), env);\n    if (stage === 'qe' && (spec === null || spec === undefined))\n        return specToOpts(resolveQeSpec(env), env);\n    return specToOpts(spec, env);\n}\nfunction modelLabel(opts) {\n    if (opts && opts.agentType === 'codex:codex-rescue') {\n        const base = 'codex:' + opts.codexModel + ':' + opts._reasoning;\n        return opts._usageSwitched ? base + ' (usage-switched)' : base;\n    }\n    if (opts && opts.model)\n        return opts.model;\n    return 'session';\n}\nfunction stageLabel(base, opts) {\n    const m = modelLabel(opts);\n    return m === 'session' ? base : base + ' · ' + m;\n}\nfunction mergeOpts(base, extra) {\n    const out = {};\n    for (const k in base)\n        out[k] = base[k];\n    for (const k in extra)\n        out[k] = extra[k];\n    return out;\n}",
   },
   "usage-probes": {
     name: "usage-probes",
     version: "1.0.0",
-    contentHash: "4ae2504a50fe05aad4383e223d460b21396805b17dfefab50e60022d58cdd19d",
+    contentHash: "a7d7fecc30202595c05cd31d5c36ee3bfa59f803f3e707e3c28c3ae372bc373b",
     sourcePath: "packages/@dzhechkov/harness-core/src/feature-adr-routing.ts",
     requires: ["model-resolver"],
     exports: ["decideUsageAction","OVERRIDE_REASONING","topCodexId"],
-    code: "function decideUsageAction(prevOverride, signal, threshold) {\n    if (signal === null || signal === undefined) {\n        if (prevOverride)\n            return { override: true, action: 'keep' };\n        return { override: true, action: 'fail-safe-switch' };\n    }\n    const s = signal.sessionPct;\n    const w = signal.weeklyPct;\n    const sKnown = typeof s === 'number' && isFinite(s) && s >= 0;\n    const wKnown = typeof w === 'number' && isFinite(w) && w >= 0;\n    if ((sKnown && s >= threshold) || (wKnown && w >= threshold)) {\n        return { override: true, action: prevOverride ? 'keep' : 'switch' };\n    }\n    if (sKnown && wKnown) {\n        return { override: false, action: prevOverride ? 'restore' : 'none' };\n    }\n    return { override: prevOverride, action: prevOverride ? 'keep' : 'none' };\n}",
+    code: "const OVERRIDE_REASONING = Object.freeze(STAGE_EFFORT.override);\nfunction decideUsageAction(prevOverride, signal, threshold) {\n    if (signal === null || signal === undefined) {\n        if (prevOverride)\n            return { override: true, action: 'keep' };\n        return { override: true, action: 'fail-safe-switch' };\n    }\n    const s = signal.sessionPct;\n    const w = signal.weeklyPct;\n    const sKnown = typeof s === 'number' && isFinite(s) && s >= 0;\n    const wKnown = typeof w === 'number' && isFinite(w) && w >= 0;\n    if ((sKnown && s >= threshold) || (wKnown && w >= threshold)) {\n        return { override: true, action: prevOverride ? 'keep' : 'switch' };\n    }\n    if (sKnown && wKnown) {\n        return { override: false, action: prevOverride ? 'restore' : 'none' };\n    }\n    return { override: prevOverride, action: prevOverride ? 'keep' : 'none' };\n}",
   },
   "codex-dispatch": {
     name: "codex-dispatch",

package/src/loop-plan.ts

@@ -150,6 +150,11 @@ export interface LoopFanout {
   registry: string[];
   /** Hard concurrency bound — REQUIRED, >= 1 (INV-2; unbounded fanout is unrepresentable-invalid). */
   maxFanout: number;
+  /** Admission policy when registry length exceeds maxFanout. Absent means window: dispatch all,
+   * while maxFanout bounds only concurrent work. */
+  overflow?: 'window' | 'truncate';
+  /** Mandatory human-readable receipt when overflow:'truncate' deliberately drops work. */
+  truncateReason?: string;
   dedup?: boolean;
   reasonRequired?: boolean;
   /** Per-item step chain (pipeline shape) — stepIds run in sequence per member. */
@@ -371,6 +376,8 @@ export const FIELD_DOMAINS: Record<string, FieldDomain> = {
   'LoopFanout.stage': { t: 'string' },
   'LoopFanout.registry': { t: 'string[]' },
   'LoopFanout.maxFanout': { t: 'number' },
+  'LoopFanout.overflow': { t: 'enum', values: ['window', 'truncate'] },
+  'LoopFanout.truncateReason': { t: 'string' },
   'LoopFanout.dedup': { t: 'boolean' },
   'LoopFanout.reasonRequired': { t: 'boolean' },
   'LoopFanout.chain': { t: 'string[]' },
@@ -992,6 +999,11 @@ export function validatePlan(plan: LoopPlan): Diagnostic[] {
     if (!Array.isArray(f.registry) || f.registry.length === 0) {
       out.push({ invariant: 'INV-2', path: `$.fanouts[${f.stage}].registry`, message: 'a fanout requires a non-empty member registry' });
     }
+    if (f.overflow !== undefined && f.overflow !== 'window' && f.overflow !== 'truncate') {
+      out.push({ invariant: 'INV-2b', path: `$.fanouts[${f.stage}].overflow`, message: `overflow must be one of window|truncate (received ${JSON.stringify(f.overflow)})` });
+    } else if (f.overflow === 'truncate' && (typeof f.truncateReason !== 'string' || f.truncateReason.trim() === '')) {
+      out.push({ invariant: 'INV-2b', path: `$.fanouts[${f.stage}].overflow`, message: 'overflow:"truncate" requires a non-blank truncateReason — deliberate dropped work needs a receipt' });
+    }
   });
 
   // INV-3: every fanout (parallel region) names an explicit join with a closed-set joinPolicy.
@@ -1388,7 +1400,7 @@ export function toLintProjection(plan: LoopPlan): LintProjection {
 }
 
 export interface TraceProjection {
-  kind: 'trace-projection/1';
+  kind: 'trace-projection/2';
   /** Expected happens-before edges: every dispatch of `step` must come after the settle of each
    * dep. Only DISPATCHING step kinds (agent/gate) appear — fanout/join/pause are structural
    * pseudo-steps that emit no trace events of their own (their ordering lives in `regions`). */
@@ -1396,7 +1408,20 @@ export interface TraceProjection {
   /** Parallel regions with the runtime bound + concurrency shape the trace must exhibit.
    * `after` = the dispatching steps that depend on the region (fanout or join) — the trace-visible
    * witnesses of the barrier. */
-  regions: { fanout: string; join: string; joinPolicy: string; maxFanout: number; members: string[]; shape: ConcurrencyShape; after: string[] }[];
+  regions: {
+    fanout: string;
+    join: string;
+    joinPolicy: string;
+    maxFanout: number;
+    members: string[];
+    shape: ConcurrencyShape;
+    after: string[];
+    /** Projection/2 evidence used to prove positional dispatch coverage. */
+    registry: string[];
+    registrySize: number;
+    overflow: 'window' | 'truncate';
+    dedup: boolean;
+  }[];
   /** Steps expected to appear in the trace, keyed by stepId (iteration/attempt keys are runtime axes). */
   expectedSteps: string[];
 }
@@ -1432,10 +1457,14 @@ export function toTraceProjection(plan: LoopPlan): TraceProjection {
       members: [...(f.chain ?? [])],
       shape: shapes.get(f.stage) ?? 'barrier',
       after,
+      registry: [...f.registry],
+      registrySize: f.registry.length,
+      overflow: f.overflow ?? 'window',
+      dedup: f.dedup === true,
     };
   });
   return {
-    kind: 'trace-projection/1',
+    kind: 'trace-projection/2',
     happensBefore,
     regions,
     expectedSteps: norm.steps.filter((s) => s.kind === 'agent' || s.kind === 'gate').map((s) => s.stepId),
@@ -1501,6 +1530,8 @@ export interface RunBoundary {
     maxFanout: number;
     registry: string[];
     dedup: boolean;
+    overflow: 'window' | 'truncate';
+    truncateReason: string | null;
     shape: ConcurrencyShape;
     chain: RunStepSpec[];
   };
@@ -1586,6 +1617,8 @@ export function toRunProjection(plan: LoopPlan): RunProjection {
           maxFanout: typeof f?.maxFanout === 'number' ? f.maxFanout : 0,
           registry: [...(f?.registry ?? [])],
           dedup: f?.dedup === true,
+          overflow: f?.overflow ?? 'window',
+          truncateReason: typeof f?.truncateReason === 'string' ? f.truncateReason : null,
           shape: s.concurrency ?? 'barrier',
           chain: (f?.chain ?? []).map((c) => byId.get(c)).filter((c): c is LoopStep => c !== undefined).map(specOf),
         },

package/src/loop-render.ts

@@ -431,9 +431,18 @@ function renderFanout(plan: LoopPlan, fanoutStep: LoopStep): string {
   lines.push(G(`step:${id} kind=fanout shape=${shape} maxFanout=${f.maxFanout}`));
   for (const ms of members) lines.push(...stepPromptAssembly(ms, plan));
   lines.push(`const REGISTRY_${ident(id)} = ${JSON.stringify(f.registry)}`);
-  // dedup (enacted — QE round-3 B1): a declared dedup DEDUPLICATES the registry before the cap.
+  // dedup (enacted — QE round-3 B1): a declared dedup DEDUPLICATES the registry before admission.
   const registryExpr = f.dedup === true ? `REGISTRY_${ident(id)}.filter(function (x, i) { return REGISTRY_${ident(id)}.indexOf(x) === i })` : `REGISTRY_${ident(id)}`;
-  lines.push(`const MEMBERS_${ident(id)} = ${registryExpr}.slice(0, ${f.maxFanout}) // bounded fanout (INV-2): never args-derived, never uncapped`);
+  if (f.overflow === 'truncate') {
+    const reason = f.truncateReason ?? '';
+    const commentReason = reason.replace(/\r?\n/g, ' ').replace(/\*\//g, '* /');
+    lines.push(`// ==================== FANOUT TRUNCATION DECLARED: ${commentReason} ====================`);
+    lines.push(`const MEMBERS_${ident(id)} = ${registryExpr}.slice(0, ${f.maxFanout}) // declared truncation (INV-2b): intentionally drops registry positions beyond maxFanout`);
+    lines.push(`console.error('[fanout-truncated] ${id}: ' + MEMBERS_${ident(id)}.length + ' of ' + REGISTRY_${ident(id)}.length + ' items — ' + ${jsString(reason)})`);
+    lines.push(`if (__hooks.onFanoutTruncated) { __hooks.onFanoutTruncated({ stage: ${jsString(id)}, registrySize: REGISTRY_${ident(id)}.length, dispatched: MEMBERS_${ident(id)}.length, reason: ${jsString(reason)} }) }`);
+  } else {
+    lines.push(`const MEMBERS_${ident(id)} = ${registryExpr} // full registry (INV-2b): every item dispatched; maxFanout bounds CONCURRENCY, not work`);
+  }
   // ROUND-6 B3 SHAPE: the region's awaits (member dispatches via parallel + the join) ride ONE
   // settle-routed try, mirroring the per-step shape. Member runStep failures settle themselves
   // durably before rejecting; the outer catch is the structural belt for the region as a whole.
@@ -445,7 +454,7 @@ function renderFanout(plan: LoopPlan, fanoutStep: LoopStep): string {
     // dispatch(B:item1) is allocated a seq before settle(A:item3). Predecessor by POSITION (G15),
     // qualified by the branch OCCURRENCE (round 7 — duplicate registry values are distinct
     // branches, so a chain predecessor is looked up per occurrence, never per value).
-    lines.push(`  R_${ident(id)} = await __drainAll(MEMBERS_${ident(id)}.map((it, __ix) => async () => {`);
+    lines.push(`  R_${ident(id)} = await __drainAllWindowed(MEMBERS_${ident(id)}.map((it, __ix) => async () => {`);
     let prev: string | null = null;
     for (let ci = 0; ci < members.length; ci++) {
       const cs = members[ci] as LoopStep;
@@ -457,13 +466,13 @@ function renderFanout(plan: LoopPlan, fanoutStep: LoopStep): string {
       prev = `v_${ident(cs.stepId)}`;
     }
     lines.push(`    return ${prev ?? 'null'}`);
-    lines.push(`  }))`);
+    lines.push(`  }), ${f.maxFanout})`);
   } else {
     // BARRIER shape: all members dispatched, one join closes the region (exactly one member step —
     // MEMBER-2; extra barrier chain entries used to be silently never dispatched).
     const ms = members[0] as LoopStep;
     const call = stepCallExpr(ms, memberDeps(ms), { chainCausedBy: null, inputExpr: null });
-    lines.push(`  R_${ident(id)} = await __drainAll(MEMBERS_${ident(id)}.map((it, __ix) => () => ${call}))`);
+    lines.push(`  R_${ident(id)} = await __drainAllWindowed(MEMBERS_${ident(id)}.map((it, __ix) => () => ${call}), ${f.maxFanout})`);
   }
   lines.push(`  J_${ident(id)} = await __joinSettled(${jsString(j.stage)}, ${jsString(fanoutStep.phase)}, R_${ident(id)}, { policy: ${jsString(j.joinPolicy)}, onInvalid: ${jsString(j.onInvalid ?? 'named-failure')}, region: ${jsString(id)} })`);
   lines.push(`} catch (__stepErr) { await __settleStep({ stepId: ${jsString(id)}, phase: ${jsString(fanoutStep.phase)}, outcome: 'failed', error: __stepErr }) }`);
@@ -478,6 +487,7 @@ function renderFanout(plan: LoopPlan, fanoutStep: LoopStep): string {
  * attach hooks INSIDE it, and when opted out the hook sites are no-ops). */
 function renderRuntime(plan: LoopPlan, planDig: string, execFp: string, blobs: LoopBlob[]): string {
   const traceOn = plan.trace?.emit === true;
+  const hasDeclaredTruncation = (plan.fanouts ?? []).some((f) => f.overflow === 'truncate');
   const ckptOn = plan.checkpointing?.enabled === true || plan.subsystems?.checkpoints === true;
   // budget: declared per-step budgets PLUS the declared gate-redo allowance (QE round-3 B1 — a
   // plan-declared redo must be affordable; an undeclared one still hits the guard loudly). The
@@ -505,7 +515,7 @@ function renderRuntime(plan: LoopPlan, planDig: string, execFp: string, blobs: L
   lines.push(`let __ledgerDone = false`);
   if (traceOn) lines.push(`let __faLegWarned = false`);
   lines.push(`function __spendBudget(stepId) { if (__budget.left <= 0) { throw new Error('loop budget exhausted before ' + stepId) } __budget.left-- }`);
-  lines.push(`const __hooks = { onDispatch: null, onSettle: null }`);
+  lines.push(`const __hooks = { onDispatch: null, onSettle: null${hasDeclaredTruncation ? ', onFanoutTruncated: null' : ''} }`);
   lines.push(`const __settled = {}`);
   lines.push(`// settle identity is PER-OCCURRENCE (round-7; Codex round-6 R2: with dedup:false and a`);
   lines.push(`// duplicated registry value, two branches shared one (stepId,itemKey) slot — the second`);
@@ -650,12 +660,46 @@ function renderRuntime(plan: LoopPlan, planDig: string, execFp: string, blobs: L
     lines.push(`  if (__primary !== null) { throw __primary.error } // drained FIRST, then the primary failure propagates`);
     lines.push(`  return __results`);
     lines.push(`}`);
+    lines.push(`async function __drainAllWindowed(thunks, limit) {`);
+    lines.push(`  const __limit = Math.max(1, Math.floor(Number(limit) || 1))`);
+    lines.push(`  if (thunks.length <= __limit) { return __drainAll(thunks) }`);
+    lines.push(`  const __out = new Array(thunks.length)`);
+    lines.push(`  const __values = new Array(thunks.length)`);
+    lines.push(`  let __next = 0`);
+    lines.push(`  let __order = 0`);
+    lines.push(`  const __workers = []`);
+    lines.push(`  const __workerCount = Math.min(__limit, thunks.length)`);
+    lines.push(`  for (let w = 0; w < __workerCount; w++) {`);
+    lines.push(`    __workers.push(async function () {`);
+    lines.push(`      while (__next < thunks.length) {`);
+    lines.push(`        const i = __next++`);
+    lines.push(`        try { const v = await thunks[i](); __values[i] = v; __out[i] = { ok: true, value: v, at: __order++ } }`);
+    lines.push(`        catch (e) { __out[i] = { ok: false, error: e, at: __order++ } }`);
+    lines.push(`      }`);
+    lines.push(`    })`);
+    lines.push(`  }`);
+    lines.push(`  await parallel(__workers) // workers never reject ⇒ all registry positions drain to SETTLEMENT`);
+    lines.push(`  let __primary = null`);
+    lines.push(`  for (let i = 0; i < __out.length; i++) {`);
+    lines.push(`    const o = __out[i]`);
+    lines.push(`    if (o && o.ok !== true && (__primary === null || o.at < __primary.at)) { __primary = o }`);
+    lines.push(`  }`);
+    lines.push(`  if (__primary !== null) { throw __primary.error }`);
+    lines.push(`  return __values`);
+    lines.push(`}`);
   }
   if (traceOn) {
     lines.push(`// trace wiring (blob-provided emitter; hooks INSIDE runStep — ADR-003)`);
     lines.push(`const __traceState = traceInit(RUN_ID, PLAN_DIGEST, EXEC_FP, 'rendered-script')`);
     lines.push(`__hooks.onDispatch = function (e) { return traceOnDispatch(__traceState, e) }`);
     lines.push(`__hooks.onSettle = function (e) { return traceOnSettle(__traceState, e) }`);
+    if (hasDeclaredTruncation) {
+      lines.push(`__hooks.onFanoutTruncated = function (e) {`);
+      lines.push(`  const ev = { v: 1, runId: __traceState.runId, seq: ++__traceState.seq, event: 'fanout-truncated', stage: e.stage, registrySize: e.registrySize, dispatched: e.dispatched, reason: e.reason }`);
+      lines.push(`  __traceState.buffer.push(JSON.stringify(ev))`);
+      lines.push(`  return ev.seq`);
+      lines.push(`}`);
+    }
     lines.push(`async function __traceFlushNow(phaseName, stepLabel) {`);
     lines.push(`  if (TRACE_FILE === null) { return }`);
     lines.push(`  // cmd must be let: the trace payload stays LEFT and must never be replaced by the fa-record panel leg; both ride the SAME writer agent.`);