@dzhechkov/harness-core 0.8.23 → 0.8.25

package/.dz-manifest.json

@@ -9,7 +9,7 @@
       },
       {
         "path": "README.md",
-        "sha256": "113ecbe403e5275826354f6d5ff12b0e5fb18a7132dc7c6fccd29f06a8afd2e4"
+        "sha256": "730f21a43510c2229067affd057ce7b37fc67ee4a686de7064cfea350e1ae444"
       },
       {
         "path": "dist/__tests__/golden-baseline.test.d.ts",
@@ -491,21 +491,53 @@
         "path": "dist/compounding.js.map",
         "sha256": "19ff7b3255776240d9a4f24325e1fc7c8f804928f46bf4a7032c3eeff0688e72"
       },
+      {
+        "path": "dist/confirmation-file-gate.d.ts",
+        "sha256": "0b09682845c90a789e866ce77b65bd1bcceb204c95a718c6807ad73606d75ee9"
+      },
+      {
+        "path": "dist/confirmation-file-gate.d.ts.map",
+        "sha256": "f03b495079fa4d6712f29dbdeca0606ef883e2f2df47e9d0084310fbb32a0bf7"
+      },
+      {
+        "path": "dist/confirmation-file-gate.js",
+        "sha256": "033af9c6da9a301df4a21aca9fd1befee2e33096b5a0f8da6a2cf0db6e9bfcb3"
+      },
+      {
+        "path": "dist/confirmation-file-gate.js.map",
+        "sha256": "feacf0b3a6ae0ce0e97f33e36c9a2fd6f98a29172659235b8c209163a3dc6c43"
+      },
       {
         "path": "dist/contract-checklist.d.ts",
-        "sha256": "bf101a58875316681241b76308383ec61ac0d2f60ce3256693a4cf20dacd6749"
+        "sha256": "e2596400484084347e7e260676a2409c1883f9e3bef5aa534c46cd3f3a62a04d"
       },
       {
         "path": "dist/contract-checklist.d.ts.map",
-        "sha256": "fa5598db398ca655764fa07878fa093766211011574c77fd6890476b27a4f332"
+        "sha256": "46f24afc07e280fd6bc5cec28796df0d4311fc5bc69b5c106d156421aed415ff"
       },
       {
         "path": "dist/contract-checklist.js",
-        "sha256": "0943f9f0986ef240395c8d3679bb6d83e95a2259c49d4af3a85bc4a3dbcf3998"
+        "sha256": "fa654ab80e1dfacf5c317d1f53acd9fcab55b4f9374ca511993d8b933ded585c"
       },
       {
         "path": "dist/contract-checklist.js.map",
-        "sha256": "ae1d26c22ddd63c589349a371f371a63b4e83066b94a8a0e93f58b0d976a9f5b"
+        "sha256": "4ea4c52968213b2c334b3ce30f2bf72aabfd2956121e7ea1909f5a0a18477ea3"
+      },
+      {
+        "path": "dist/core-boundary.d.ts",
+        "sha256": "41ae43ed9d453fcc1ac7eb4d57b8afe47775ef49d071e06dc0bff1aeea33c5df"
+      },
+      {
+        "path": "dist/core-boundary.d.ts.map",
+        "sha256": "2e3ab72ef03cd6306b2dd2801dd0b6f8ee53b01a314f9e34dc4133a2b05a79dc"
+      },
+      {
+        "path": "dist/core-boundary.js",
+        "sha256": "1aa4c5767d4f0a431d19ed7bf6143d1e8b223cc1f57f15dc49c8825f36c78021"
+      },
+      {
+        "path": "dist/core-boundary.js.map",
+        "sha256": "4c88ba310ed850fb42de4cf1c4503600b1ea2b73648ee4e30810abe7b42e5768"
       },
       {
         "path": "dist/cost-ledger.d.ts",
@@ -781,19 +813,19 @@
       },
       {
         "path": "dist/feature-adr-landing.d.ts",
-        "sha256": "9a6ef9d2cfb287081938a72e0f706a53a2baabe0cd984c6f6ff91cdc73765012"
+        "sha256": "1640c3850c7ea92e4f6da0620af0814433005ba312c6276b5ac5482a379f9e43"
       },
       {
         "path": "dist/feature-adr-landing.d.ts.map",
-        "sha256": "0c1951763213e3b741e7c395c772cdee98f679014b1cfa94f91dd42f7513e024"
+        "sha256": "0fb04dc4825cb5a9e5a0e5fa0c95bc4d351d8ff87b9093a039a4f326112e9831"
       },
       {
         "path": "dist/feature-adr-landing.js",
-        "sha256": "7738f7cef2ce3572dc34e41da8f4fdf8fbf463c536a7520fb140ee310fcd7c7e"
+        "sha256": "ebdbb669aa4c8f3b5109921c021c915cef68b48bf6d04842e53f5d4c9a5f2d1e"
       },
       {
         "path": "dist/feature-adr-landing.js.map",
-        "sha256": "25699c4f27eeb1e31f6eeea89828c6cc329904fc29ab21b7a4c61d127efeac9a"
+        "sha256": "7386d8d2367ddee799f8b2cd49ea79843fea79666e8e11466ba52624b3143678"
       },
       {
         "path": "dist/feature-adr-routing.d.ts",
@@ -827,6 +859,22 @@
         "path": "dist/feature-adr-setup.js.map",
         "sha256": "dc50ce0dd4b4680afdda3e2c650d0d8665c7defce22e4afaeb24d2113c0dec9d"
       },
+      {
+        "path": "dist/feature-tier.d.ts",
+        "sha256": "8c7008c7c961cb4c5906558842bfcbd22de2d6783d58bc90ba3a80e362310109"
+      },
+      {
+        "path": "dist/feature-tier.d.ts.map",
+        "sha256": "61af175e3f46e30ffc2c112dca85d523a2f4375958f9a7d8560b44c956ad4598"
+      },
+      {
+        "path": "dist/feature-tier.js",
+        "sha256": "6ed1b3decf61ef9f8ca72f1d7e1d9743deb701d8e1af627c0a89f1a0218a5ba6"
+      },
+      {
+        "path": "dist/feature-tier.js.map",
+        "sha256": "041102138ff00e59ccee280eb56ccad49db09eff68958c61020a2119a1813033"
+      },
       {
         "path": "dist/guard-promotion.d.ts",
         "sha256": "5ade66f1fdbd8d0f15b676a623fc566af6db74b46c963966930d1ade33d5a6ba"
@@ -909,19 +957,19 @@
       },
       {
         "path": "dist/index.d.ts",
-        "sha256": "1f29a6394fd77db7aa6e6e123a9e1cdac934a42be6f7c8408601d1974294e30a"
+        "sha256": "5d039ab016a653c8e7b1beeb332c8cb1006ff890cb3efc89a17e9f05de0f1140"
       },
       {
         "path": "dist/index.d.ts.map",
-        "sha256": "486ddf11b5ac451d18173d7e6105746ae7ea8491b062e498ee05ac69dfafa2dd"
+        "sha256": "f51c5db8115b725eaa53d78c09fc04734ce07fd4f23367d463f8b707387070e6"
       },
       {
         "path": "dist/index.js",
-        "sha256": "3a3b54eb0662739c5996c24b2e9eb7891d75de80592a92718f222b3ab854d8f4"
+        "sha256": "0ac18efff2e6a04d240a7afb6b235fbc0feded591a4725b433ba8d1cdd3233b5"
       },
       {
         "path": "dist/index.js.map",
-        "sha256": "c0c05215db1d6372b042870ac9f8530ad7d4e4789638553a32622d7636a7e84f"
+        "sha256": "bc116020a81c071e703f22acf55cc8a3ed3b865c6670d94d5592812d6f35051d"
       },
       {
         "path": "dist/integration-apply.d.ts",
@@ -987,6 +1035,22 @@
         "path": "dist/integrations-verify.js.map",
         "sha256": "8101ee9c9e9c1eb4cf3e27ae412462b0e52f5524a09f60e9ee389f39136b0f2c"
       },
+      {
+        "path": "dist/journal.d.ts",
+        "sha256": "8b5f559ee8f2a18b209a5793627c5553864d6a80833ff215b522b3d43959164c"
+      },
+      {
+        "path": "dist/journal.d.ts.map",
+        "sha256": "cf61e79c0f4d7f9d641c4a6ef4bd8f2d553fa1fe35a568a3ef64927b7a89483f"
+      },
+      {
+        "path": "dist/journal.js",
+        "sha256": "0adc99cfd7d1b443c506451dbd2f2ade3d8b71ede273fafdd653f8c29c5185f7"
+      },
+      {
+        "path": "dist/journal.js.map",
+        "sha256": "51472bb6bec5c6977ad8b6077126fcb74c808fe02ae8f7fb2e7e5682ff637a4e"
+      },
       {
         "path": "dist/lead-shift-gate.d.ts",
         "sha256": "11503ccc1990b8a3493024bcebd724eb9e90f44088db135bc215a767607dec8d"
@@ -1085,19 +1149,19 @@
       },
       {
         "path": "dist/loop-blobs.generated.d.ts",
-        "sha256": "3c78481cb8198706cdb8890e76e2bb2df974b93be2147b1646cf9d3aa5335e95"
+        "sha256": "efe3f87b164385984d25701731f1de015dd6dbbd94144288a8e9ddc9da23ad08"
       },
       {
         "path": "dist/loop-blobs.generated.d.ts.map",
-        "sha256": "e5b581e7f1870d57d34492a1fe63607de514a9a4afde0a3926d84dc2301c1629"
+        "sha256": "d5a7c7a45ce44cec5138a4aea219921225ccf09cf633f84e294bdf8fff800d0a"
       },
       {
         "path": "dist/loop-blobs.generated.js",
-        "sha256": "48397bdb099841229022125e0f72e35379412273e3db089e8537560f752d6595"
+        "sha256": "5903d8d29bef0b0bbba310cd67dbbfbf16da7b006eab65d25389630c99e73ba6"
       },
       {
         "path": "dist/loop-blobs.generated.js.map",
-        "sha256": "86b6632133e8b092fb7445b5076595376fbe01cc16ca72e00d7e1ac5ba770e90"
+        "sha256": "d43a06f44969af89038c5a18a690537a1a8b1b16d4bc13facbdba526aa6481ab"
       },
       {
         "path": "dist/loop-lint.d.ts",
@@ -1405,19 +1469,19 @@
       },
       {
         "path": "dist/patterns.d.ts",
-        "sha256": "7659dcc11bd2a35c14efb57ade06d144cea701a0b75211eb4a26d47dcb866e45"
+        "sha256": "32348c6790ab707dc53126c0f00fe2409dcce667d65fb86c773fca550dae3183"
       },
       {
         "path": "dist/patterns.d.ts.map",
-        "sha256": "4ebea456f9a894f5a711306c35de385e486ef05938ee913cda2559247129855c"
+        "sha256": "5ec4dc7878b13969fd5cecd926c3f3ed58aa5b9ec66b92cfbba36dc244b48910"
       },
       {
         "path": "dist/patterns.js",
-        "sha256": "5006d10009530f837c4921c16e8f6081a19af6a9379fc9ac978125236cdd2955"
+        "sha256": "be48c8d6ed81b344f033f0e3bbce2037583a145d8c452798617fe70ebd72c053"
       },
       {
         "path": "dist/patterns.js.map",
-        "sha256": "40a72c8fe24231765539f9bb5b0dc6b1e9478dd82bd10d1e885e0a64ee6befef"
+        "sha256": "6f31319f9243b04a7cee47e2740a17dd0564596888ef1e54fe06977d119dbd55"
       },
       {
         "path": "dist/plugin.d.ts",
@@ -1533,19 +1597,19 @@
       },
       {
         "path": "dist/publish.d.ts",
-        "sha256": "4141516f710c2033b64a778d6c8a41fa7015448bb4acc22c5fd6e6ab909c0098"
+        "sha256": "59e6436ae59f0ef4ed94692aef8ddc4a5bf021e6afb364078c4484ef48fc6923"
       },
       {
         "path": "dist/publish.d.ts.map",
-        "sha256": "4763bd53c31be95fde9912073394e27340bd9603e3e9c99be7b79f09b4f87353"
+        "sha256": "d4424a2422f93a831ea30edb2945a1e427c0738f55d991d895bdf725b7b1eed7"
       },
       {
         "path": "dist/publish.js",
-        "sha256": "a6e333a5a2516838b56b30a4088d44bbd62742646aa3f8056cd527890ff178ca"
+        "sha256": "eef4266f8e54b04d258314610248966fbf4908d4be95013a0fdedc5127f35215"
       },
       {
         "path": "dist/publish.js.map",
-        "sha256": "a3326b95708d27fc923c7e788509d90155f5e84732b584d1dd0a6007a039b126"
+        "sha256": "71adda6450a1ccb8ea04742d5d489dd341317bc8366d51b114296fc0528a64df"
       },
       {
         "path": "dist/qe-bridge.d.ts",
@@ -1803,6 +1867,22 @@
         "path": "dist/routing-outcomes.js.map",
         "sha256": "c369e33d38ea564f5a59fc0a90fa34fecfc90f2f25c87dfb153dfe20f0b0e0de"
       },
+      {
+        "path": "dist/run-cleanup.d.ts",
+        "sha256": "33c809e1ef9cc8c57a4bc24e67dac0cfe24ca26be64966e8895d31586ca1a559"
+      },
+      {
+        "path": "dist/run-cleanup.d.ts.map",
+        "sha256": "3b4dad57a1409a409264f27bd7fd655c173d987aa3f85df55cf5084739677a2f"
+      },
+      {
+        "path": "dist/run-cleanup.js",
+        "sha256": "e5b7b281b8aa4451733f0fac0283f5acf842e12feaed091b3e8d4b434fd9a215"
+      },
+      {
+        "path": "dist/run-cleanup.js.map",
+        "sha256": "84ad985f8c7cace4e64f8d040f70deb332ce13c8698f327e2ec50e6ef067b63a"
+      },
       {
         "path": "dist/run-records.d.ts",
         "sha256": "b52abf7998b3f525b57ac3351df6d9a50786d3c050da141a00b99f2d463538b7"
@@ -1819,6 +1899,22 @@
         "path": "dist/run-records.js.map",
         "sha256": "e262c1126c023ba2068834ce2a208b139633557e6005a79b5b0b192c91a5f445"
       },
+      {
+        "path": "dist/run-registry.d.ts",
+        "sha256": "d32da0a5830171704cc18409b9dbe03eb9fb600f2529b674fd1635e908ded24f"
+      },
+      {
+        "path": "dist/run-registry.d.ts.map",
+        "sha256": "aa04abcdb48095e55502e04371373f8d8a1018102a429fcdda3f0e046764b38d"
+      },
+      {
+        "path": "dist/run-registry.js",
+        "sha256": "6ff25aca76e770074727384410d31888fa5445a73a98a997720e7fde0eb06c00"
+      },
+      {
+        "path": "dist/run-registry.js.map",
+        "sha256": "c893a0c5d54d9e7b76f29b1586f5725af0f1c85ceda0622fbd64149e7064563a"
+      },
       {
         "path": "dist/safla-delta.d.ts",
         "sha256": "9fb8db73445acb7af089880d38222dd4a706f58416943893a090aa3f44199ef3"
@@ -2429,7 +2525,7 @@
       },
       {
         "path": "package.json",
-        "sha256": "16fd42962be640728b28147ce43c87753a1337cc871215a169cf14816cb3f44a"
+        "sha256": "51be8751220b4103038ee3bf61f65d5d853ef2b04c2359ec0049cc4ae109f1c6"
       },
       {
         "path": "src/__tests__/golden-baseline.test.ts",
@@ -2551,9 +2647,17 @@
         "path": "src/compounding.ts",
         "sha256": "25cf5ee4081c42773c3bbe4965860bc1ca7cca6ebbed3fff27ff3d2640859f9a"
       },
+      {
+        "path": "src/confirmation-file-gate.ts",
+        "sha256": "3f0a5542e7f39503e508ba1f38f7640b452285a7500049d97f60eef83952afb9"
+      },
       {
         "path": "src/contract-checklist.ts",
-        "sha256": "7e54a22c9c1a4dbc76bffc82ae58fd6a21510de689f139ac06a04038620e56ae"
+        "sha256": "04bcebd879b3ad29d60c7aea1ca7b5b43e84d29d15c73d47116847bc524d07c3"
+      },
+      {
+        "path": "src/core-boundary.ts",
+        "sha256": "230ed4ba253284818af3a91f48f21f9d83cd7d8fac589f91e9f5c5836a520569"
       },
       {
         "path": "src/cost-ledger.ts",
@@ -2629,7 +2733,7 @@
       },
       {
         "path": "src/feature-adr-landing.ts",
-        "sha256": "a63d6fc7cb5d30a6da92fabd7de52d1cf0a1c95b44f9c26a871dc5d7dd6d9d22"
+        "sha256": "0b33c998579c0912bb05b28ef32c59e96d7070adb7a4b03fecc531d487b778dd"
       },
       {
         "path": "src/feature-adr-routing.ts",
@@ -2639,6 +2743,10 @@
         "path": "src/feature-adr-setup.ts",
         "sha256": "311f4344eed1a43a0a3bd2723cafce141e035078cdcc404509cdf26ee7df4904"
       },
+      {
+        "path": "src/feature-tier.ts",
+        "sha256": "dbe92163f0924dcecbd4d440f39ea119830dfffd4d7ec27261273ef3f0d350ba"
+      },
       {
         "path": "src/guard-promotion.ts",
         "sha256": "d3c6d2b1e64a9dc3fbcbbd61fa2e86fec41f47126649f9b747c12d045d49af07"
@@ -2661,7 +2769,7 @@
       },
       {
         "path": "src/index.ts",
-        "sha256": "a183b2befb37065b6de85f3ef2f5638283e8b2ebf079a7074bd0abc78cb547a0"
+        "sha256": "e578b60bd74d38bae0bf0fa2cf6b1b9f5543e0d96252d4398de5c4c8549fbdbd"
       },
       {
         "path": "src/integration-apply.ts",
@@ -2683,6 +2791,10 @@
         "path": "src/integrations-verify.ts",
         "sha256": "13141eb6439e091936b8a3860bee99e871ee0660a0c83c6108aa451d87e0e9fd"
       },
+      {
+        "path": "src/journal.ts",
+        "sha256": "85e55ac32a66929c13cdbc85e4e2df3a702d02523f183b435fdebf78fd54880c"
+      },
       {
         "path": "src/lead-shift-gate.ts",
         "sha256": "4ca0908a46d1578c05799ec4d2216b0dbd512268b1c5a85e7f3febc5a7640bd2"
@@ -2709,7 +2821,7 @@
       },
       {
         "path": "src/loop-blobs.generated.ts",
-        "sha256": "b7f5a095ecf30d657b387dcf04180840c62560857bdab0e863877de33f77486a"
+        "sha256": "995f8fbeae52217c3c5d6a2a76b46a0493e39f96cfadaae75b216ee2aa7eab45"
       },
       {
         "path": "src/loop-lint.ts",
@@ -2789,7 +2901,7 @@
       },
       {
         "path": "src/patterns.ts",
-        "sha256": "9c9b114503bc634ee91620f6ebb2046d631bb0598130db04df2f9d350a8b47f8"
+        "sha256": "5bfaa99d67cb5279f1519dd8268a19cb65488b863e37c6fdf41a42a5eaf74c0c"
       },
       {
         "path": "src/plugin.ts",
@@ -2821,7 +2933,7 @@
       },
       {
         "path": "src/publish.ts",
-        "sha256": "d52ad7be493664cecf90b82378129022f0eb8ae54fdfb25c606428b74db46601"
+        "sha256": "a4e62d0fb4ef95a268ef2f2199a2e1917dc16817c31ec62382e0c222445adb0f"
       },
       {
         "path": "src/qe-bridge.ts",
@@ -2883,10 +2995,18 @@
         "path": "src/routing-outcomes.ts",
         "sha256": "66cce181b105b6add863e52f2d9364166f75d95a2e26e48995dbbdb20d8e66dd"
       },
+      {
+        "path": "src/run-cleanup.ts",
+        "sha256": "cb36103388e70cbf8a48ca7ac77734dcd1b2492d837f990bc1777dc2d3fd794c"
+      },
       {
         "path": "src/run-records.ts",
         "sha256": "e978fed335dc383f153ff38b66f941eff0c87e318beb01861f6a1dfe0b49515b"
       },
+      {
+        "path": "src/run-registry.ts",
+        "sha256": "9563986ac43eea277222cb2ea8bd7151e5a08b7f069389d665c4efeb44c3b8e6"
+      },
       {
         "path": "src/safla-delta.ts",
         "sha256": "55d46a4d2068fc99c4606d744e861c19a1004148d2c7679537ff4862fc38db84"
@@ -3045,5 +3165,5 @@
       }
     ]
   },
-  "signature": "0Avyscaz+UEBy8ManvT2g5lGHvKuCaiPGlwxRaww4A1e5NzwBiF3YVlAU70CIxD5iToCa/B5oGHij1ROUst+BA=="
+  "signature": "1NsOn9Vix33eQgq1k+GbREyZo8pEVZ79I88PGbudZgTxrVUkZhWL3RIfXgswzc7kpcS5SXMknBZetCXsedaGAQ=="
 }

package/README.md

@@ -3,6 +3,10 @@
 Shared logic for the DZ harness — the engine behind `@dzhechkov/harness-cli`
 and any other consumer.
 
+`findExactLesson(records, text, domain?)` finds the earliest lesson whose trimmed,
+whitespace-collapsed text matches exactly (case-sensitive), optionally within one metadata domain,
+and reports whether that existing lesson is quarantined.
+
 `countLearningStoreRowsReadonly()` reports the mirror as TWO figures, deliberately not one.
 `vectorRows` stays the whole mirror (lessons + backlog ideas + book units) because the store guard
 reads it as an integrity signal against a recorded high-water mark; narrowing it would present a
@@ -17,6 +21,53 @@ carry no information. It is `{ state: 'different', lexical, vector }` on diverge
 tool failure and it is worth saying out loud. `statuslineData().brainKuCounts` carries the KU volume of each brain source in
 brain order; an empty array means the volumes could not be listed, never that the sources are empty.
 
+## Core boundary checks
+
+Run `npx vitest run test/core-boundary.test.ts` from this package. Rule A scans top-level
+`src/*.ts` (excluding `*.generated.ts`) for `process.argv` and `process.exit` in code using
+TypeScript's AST. Comments and literal text are excluded; expressions inside template
+interpolations are code. The scanner is internal to this test and is not exported from `index.ts`.
+
+`rule A: debt` remains red while existing violations remain; it has no exceptions.
+`rule A: scanner` separately compares the measured locations with the pinned requirements list.
+The corrected list contains two debts: `brain.ts:995` and `integration-probe-worker.ts:304`.
+Measured with `npx vitest run test/core-boundary.test.ts -t 'rule A: (scanner|debt)'`: the scanner
+test passes and the debt test fails with those locations. `integration-probe-worker.ts:308`
+uses `process.exitCode`, and `setup.ts:172` is template text; neither violates rule A.
+No debt is repaired by this change.
+
+The IO ratchet pins **57 files / 66 imports** in `test/core-boundary-ratchet.json`, measured with
+`npx vitest run test/core-boundary.test.ts -t 'IO ratchet'`. It counts import declarations,
+import-equals, dynamic imports and `require(...)` for `node:fs`, `node:child_process`, `node:https`,
+their bare forms (`fs`, `child_process`, `https`) and subpaths (such as `node:fs/promises`),
+excluding mentions inside comments and strings. The expanded set was remeasured and the totals
+remain unchanged on this tree. Both totals may decrease;
+neither may increase. Updating the baseline requires an explicit edit; tests never rewrite it.
+A source file that cannot be read aborts the measurement instead of counting as zero.
+
+Subpath membership has a separate test, `IO imports: subpath-only source belongs to the IO set`:
+the growth ratchet alone cannot detect an undercount. The current `src/loop-lint.ts` has no imports
+from the configured IO modules, so it cannot serve as a live witness for subpath membership.
+The causal probe replaces ``specifier.text === name || specifier.text.startsWith(`${name}/`)``
+with `specifier.text === name` in a temporary copy of the scanner and runs
+`npx vitest run test/core-boundary.test.ts -t 'IO imports: subpath-only|IO ratchet'`.
+The membership test fails, the ratchet passes; restoring the scanner makes both pass.
+
+Rules B and C are **measurement only**: the test prints direct `child_process`/`https` imports in
+`harness-cli/src/cli.ts`; a pure directory has not been designated, so rule C is not measurable.
+Neither rule is enforced by assertions.
+
+Mutation entries `rule-a-tokenizer-not-regex` and `ratchet-refuses-unreadable` were both PROVEN
+(respectively 2 and 1 failing tests under mutation) after fresh core and CLI builds:
+
+```bash
+npm run build && npm --prefix ../harness-cli run build
+node ../harness-cli/dist/bin.js mutation-gate --only rule-a-tokenizer-not-regex,ratchet-refuses-unreadable --test-cmd "npx vitest run test/core-boundary.test.ts -t '^(?!.*rule A: debt)'" --json
+```
+
+Only the intentionally red debt test is excluded from that gate's baseline. The scanner accuracy
+test remains included.
+
 ## Shared Markdown masking
 
 `maskMarkdown` in `src/markdown-masker.ts` is the single implementation used by amendment-trace
@@ -478,6 +529,14 @@ equivalence proved by the committed `pkg-audit-1` fixture covers a bounded fanou
 join, a dep chain and a gate — and NOT the gate redo route, the typed terminal route, the typed
 pause or the file deliverable.
 
+## Live publish success requires a registry receipt
+
+On the live `publishPackages` path, `status: 'published'` means the registry returned the exact new
+`name@version`, not merely that the `pnpm publish` subprocess exited zero. The publisher probes up to
+30 times, sleeping 10 seconds between misses, reports `registryProbes` on confirmation, and restores
+the package bump if no receipt arrives. Dry-run and bump-only do not make a publication and never run
+this receipt probe; their existing statuses retain their preview/staging meaning.
+
 ## The publish gate asks whether anyone but the author read the code
 
 `DEFAULT_RULES` gained `review-round` (HARD, publish): a package that bumps its version AND changes
@@ -546,6 +605,7 @@ bytes and an injected evidence reader:
 
 ```ts
 import {
+  checkConfirmationFiles,
   extractContractChecklist,
   renderContractChecklist,
   parseContractVerdictReport,
@@ -553,9 +613,14 @@ import {
 } from '@dzhechkov/harness-core';
 ```
 
-- `extractContractChecklist(source)` reads the exact `## Acceptance criteria` / `AC-N: ...`
-  vocabulary and one exact `## Confirmation` pair from each canonical direct ADR Markdown file. It
-  emits ordered `contract-checklist/1` items with contiguous `CC-N` ids or no partial contract.
+- `extractContractChecklist(source)` reads `## Acceptance criteria` or `## Критерии приёмки` with
+  `AC-N: ...` rows and one `## Confirmation…`-prefixed pair from each canonical direct ADR Markdown file. It
+  emits ordered `contract-checklist/1` items with contiguous `CC-N` ids or no partial contract. Empty ADR input
+  remains an `adr-input-empty` refusal unless the caller explicitly supplies `adrsOptional: true`; even then, a
+  combined contract with no acceptance criteria remains a `contract-empty` refusal.
+- `checkConfirmationFiles(adrTexts, exists)` is the pure half of the single mandatory Step-8 ADR
+  gate: every parsed Confirmation test path must resolve to a readable regular file. Missing paths
+  fail; parse/read errors are refused; a feature with no ADR returns the explicit `no-adr` skip.
 - `renderContractChecklist(checklist)` serializes one deterministic fenced `contract-checklist`
   block for a future producer integration.
 - `parseContractVerdictReport(text)` accepts one `## Contract checklist` fenced JSON object with
@@ -568,6 +633,17 @@ import {
 This is a structural assurance boundary. It proves grammar, identity completeness, evidence
 containment/uniqueness, polarity, and grade coherence. It does not judge whether a quote semantically
 proves a criterion, execute a cited test, replace ADR Confirmation, or replace independent QE.
+The remaining 13-point ADR fitness checklist, discrimination check, and mutation check stay advisory;
+the Confirmation file-existence/readability check alone forces a non-passing Step-8 verdict.
+
+## Feature tier API
+
+`feature-tier.ts` is the dependency-free boundary for reading a feature tier from its complexity
+assessment. `parseFeatureTier(text)` recognizes the measured English `Tier` and Russian `Тир`
+Markdown forms and returns `S`, `M`, `L`, `XL`, or `null` when no unambiguous tier is established.
+`readFeatureTier(read, slug)` requests
+`features/<slug>/00_complexity_assessment.md` through the caller-supplied reader and delegates to the
+same parser; filesystem access therefore remains in the adapter that owns it.
 
 ## Restart advisor API
 
@@ -618,7 +694,7 @@ transition (plus a refusal REASON the CLI can print), and `kind`-carrying ledger
 to every cost reader (`planLedgerBackfill`, `selectLedgerRows`, `assembleTimeline`). See the phase
 telemetry paragraph above. Seven named guards in this package are `DEFENDED` under `dz mutation-gate`.
 
-`0.8.22` — **the run verdict, the routing table, the panel and the registry all stopped overstating
+`0.8.24` — **the run verdict, the routing table, the panel and the registry all stopped overstating
 what they know.** `classifyRunFailure` gains the kind `runner-infrastructure` with the closed reason
 `worker-rpc-timeout`: it is claimed only when the parsed failing-test count is exactly zero AND the
 runner's own worker-RPC pattern is present, so a nonzero exit with no explanation stays
@@ -1133,3 +1209,69 @@ appendTransition(root, { id, from: 'new', to: 'shipped', ts, by: 'backlog ship'
 либо точный отказ/провал пробы. Только outcome добавляется в `dispatchOutcomes`, авторитетный отчёт
 «кто-что-делал»; intent остаётся живым предупреждением. Свёрнутые стадии (`research`, `ddd`) отдельных
 строк не получают — у них нет отдельного диспатча.
+
+
+### Run registry
+
+`dz runs --project <repo> [--json]` reads `.dz/runs/registry.jsonl`. The feature-adr workflow
+appends `started`, a `heartbeat` at each phase boundary, and `finished` through `dz runs-record`.
+Each invocation allocates its own run ID. Pass Workflow `args.runPid` for an explicit host PID,
+and `args.parentRunId` when nesting runs; otherwise the writer resolves the Claude ancestor PID
+and refuses if it cannot establish one. The courier checks the write response. Registry failures
+log `run registry: <event> UNVERIFIED — <reason>` and mark the registry outcome `unverified`;
+the workflow continues. Finalization runs on normal returns and exceptions; host termination
+can leave a started run without finished.
+
+`live` requires a responding PID. `orphaned` requires a recorded finish or confirmed absent PID;
+missing parents, inaccessible PID probes and unreadable registries remain `inconclusive`, with
+a reason. A confirmed live PID with a heartbeat older than `--stall-minutes` (default 120)
+is `stalled`; a missing heartbeat remains `live`. Stalled parents remain alive for their children. Completed runs display
+`finished`; a child of a finished parent is `orphaned`. An unreadable registry exits 1.
+Before the first run, an absent registry reports `нет реестра: .dz/runs/registry.jsonl ещё не создан (ни одного прогона)`
+and exits 0 (`status: "missing"` in JSON).
+
+The core exports `appendRunEvent`, `readRunRegistry`, `probePid`, `liveness`, `liveParents`, and
+`runRecordCommand`. Appends preserve event identity and bound diagnostic `reason` text below
+PIPE_BUF with `truncated: true`; oversized identity fields are refused.
+
+### Day-file action journal
+
+`JOURNAL_KINDS`, `formatLine`, `parseLine`, `selectWindow`, and `appendWitnessed` support
+`dz journal` over the existing `docs/journal/YYYY-MM-DD.md` files. The first `·` separates
+time from category; the last separates the reference, preserving middle dots in event text.
+Malformed events retain their raw line and `unparsed` status. The injected `JournalIo` writer
+re-reads the appended tail and throws if verification fails. Windows use UTC; a week is seven
+calendar days ending on the selected date.
+
+
+### Run cleanup and settlement
+
+`dz runs --settle` appends `finished` with outcome `died` only for confirmed absent PIDs.
+A second invocation reports `nothing to settle`. `inconclusive` is preserved. Use
+`dz runs --stall-minutes 150` to change the heartbeat threshold; `stalled` only changes the display.
+
+```bash
+dz runs-clean --project /path/to/repo                 # inspect the plan first
+dz runs-clean --project /path/to/repo --retention-days 7 --json
+# After reviewing the plan, explicitly apply:
+dz runs-clean --project /path/to/repo --retention-days 7 --apply
+```
+
+Only non-main worktrees merged into `main`, clean, and strictly older than the retention
+(default 2 days, measured from their latest commit) qualify. Detached worktrees use their HEAD's
+ancestry. Dirty worktrees stay, with the file count and first five paths printed. Unknown merge
+or commit-age facts stay; unreadable status refuses cleanup. Removal uses Git without force and
+is reported successful only after rereading the worktree list.
+
+With `--apply`, whole finished or confirmed-dead run histories whose newest event exceeds retention
+move to `.dz/runs/registry.archive.jsonl`; live and inconclusive runs stay in `registry.jsonl`.
+CLI appends, settlement, and archive read/plan/rewrite share the named `run-registry-archive` lock
+under `.dz/runs`. Archive writes append before temp-file rename; a crash between those operations
+can duplicate archive events on retry. A worktree removal that already succeeded (and was confirmed by
+re-listing) is not undone when the archive step fails afterwards: the command exits 1 and the printed lines
+name what did happen — `git worktree remove` has no rollback. Direct API writers must coordinate with that same lock.
+
+Core APIs: `settleDeadRuns` and `planRegistryArchive` are pure registry decisions;
+`planWorktreeCleanup` accepts injected `WorktreeFact` values and returns remove/keep decisions;
+`renderCleanupPlan` renders them. `worktreeRemovalsToApply` selects removals only when apply is true.
+No process is terminated and no branch is deleted.

package/dist/confirmation-file-gate.d.ts

@@ -0,0 +1,20 @@
+export type ConfirmationFileGateResult = {
+    readonly verdict: 'pass';
+    readonly checked: readonly string[];
+} | {
+    readonly verdict: 'fail';
+    readonly missing: readonly string[];
+} | {
+    readonly verdict: 'skipped';
+    readonly reason: 'no-adr';
+} | {
+    readonly verdict: 'refused';
+    readonly reason: string;
+};
+export type ConfirmationFileExists = (path: string) => boolean;
+/**
+ * Pure Step-8 policy. The caller owns filesystem access and injects a predicate that returns true
+ * only for a readable regular file. Throwing is a named refusal, never laundered into a skip.
+ */
+export declare function checkConfirmationFiles(adrTexts: readonly string[], exists: ConfirmationFileExists): ConfirmationFileGateResult;
+//# sourceMappingURL=confirmation-file-gate.d.ts.map

package/dist/confirmation-file-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmation-file-gate.d.ts","sourceRoot":"","sources":["../src/confirmation-file-gate.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,0BAA0B,GAClC;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACjE;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACjE;IAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7D,MAAM,MAAM,sBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;AAsC/D;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,MAAM,EAAE,sBAAsB,GAC7B,0BAA0B,CAiC5B"}