@dzhechkov/harness-core 0.8.35 → 0.8.36

package/.dz-manifest.json

@@ -9,7 +9,7 @@
       },
       {
         "path": "README.md",
-        "sha256": "37a3aab588b4b12b15d2d67a014abec49ae38615a1d28816310d5f2e6ad29f79"
+        "sha256": "290fbe2449b8b9d3a03cf3356db0ecd070a59078415cf4917be142aa7b33b068"
       },
       {
         "path": "dist/__tests__/golden-baseline.test.d.ts",
@@ -125,19 +125,19 @@
       },
       {
         "path": "dist/apply-leg.d.ts",
-        "sha256": "9cc4cf39b4ef8479eba5745c767c60a8a331f777e19251ec9faf42530f16b7c7"
+        "sha256": "0e6bbd55092eac615ce87ffe760087d9081227346587bda681fa5c92000d0bec"
       },
       {
         "path": "dist/apply-leg.d.ts.map",
-        "sha256": "5204913b80c8748926f20a1632658720b75336fcd7bdf15114ceb1707fde804c"
+        "sha256": "4ac8a748703efc1b0713f1a7e9174ec2b38d4d6f5fd93f884461eea21fcdd8d3"
       },
       {
         "path": "dist/apply-leg.js",
-        "sha256": "f3e74e03e325569237340aace076e4e0507d12b48d47dcced7a836242ae13ac9"
+        "sha256": "7983e9c4eb5186a42733edb2f9bc1d5c8a36af680e807dd893bdb47e66f51321"
       },
       {
         "path": "dist/apply-leg.js.map",
-        "sha256": "300050992853dba6e5cdd4dc54e66d77a506ac3750d81ed2d3da560086830e99"
+        "sha256": "5ef8ff0bc84b28fe777ba613ff586c2845be6df0cee05a8e273a80b16797dbad"
       },
       {
         "path": "dist/apply.d.ts",
@@ -481,15 +481,15 @@
       },
       {
         "path": "dist/codex-hooks-assets.d.ts.map",
-        "sha256": "5dfb0f0625c650dbaf5fe464cdf155ce8c7a7cef39f6c3654568ca9ffc038300"
+        "sha256": "633d8863c5373b236e9090dcb0d1f11da5564f846474888cf94750e51257e493"
       },
       {
         "path": "dist/codex-hooks-assets.js",
-        "sha256": "642ad70ee49e345a1fcae56262db4e223d243b0c95ad48f753e888d97437afae"
+        "sha256": "17a6dfd4bc631197601e601ecaeea8c49ee3e23a878c807cdac80446762c0549"
       },
       {
         "path": "dist/codex-hooks-assets.js.map",
-        "sha256": "0f99defe443a26ad690bc82b5deaccbfba39b21274106b35bea57cee35827919"
+        "sha256": "d4faab38bfa30923c5844241a1e305f984c0ea217375e2ae1c194abda0690e45"
       },
       {
         "path": "dist/codex-hooks-verify.d.ts",
@@ -509,19 +509,19 @@
       },
       {
         "path": "dist/codex-hooks.d.ts",
-        "sha256": "035c1a5dada5fcc44973086bdea9ada0d05716f1ebf03dc8231086a56139bb44"
+        "sha256": "530a08cb50bfdbee96db39fe595ca16d01f221e16016a2a75b9049d3b156503e"
       },
       {
         "path": "dist/codex-hooks.d.ts.map",
-        "sha256": "73e55c49155cddf3cb9da698ac776af6c0744f136f68e9e1cc238eae7517a27d"
+        "sha256": "1279c7d4f340f107ac1a3675245673be9e414cfdcfc2edf5efc175c6c567095a"
       },
       {
         "path": "dist/codex-hooks.js",
-        "sha256": "e26fbfc25960da6f538d27f690c12bbf4d811577c89ca47476369a9e3457c202"
+        "sha256": "516b6255b226fdfd33dbcf17f0df42f3f3b3c7987206ca6d2b706f43924d7a63"
       },
       {
         "path": "dist/codex-hooks.js.map",
-        "sha256": "fd3b104ecdcdca163c5f5c5c47bce3ebb9342ce6131f5ac3e1011e7044e4d393"
+        "sha256": "6ccf6a1d2b8d6df485b8e20b582d0f4655eb18d99bd88575357b842381afc633"
       },
       {
         "path": "dist/codex-invoke.d.ts",
@@ -1037,19 +1037,19 @@
       },
       {
         "path": "dist/index.d.ts",
-        "sha256": "5476546b291c2df0a0a4e3afd7b64900ada0b7ab26d400ae6fb6985853466c72"
+        "sha256": "c117024a23cb05d976b361b564200ae7422cb104ed2944763ca8458eb1c60f68"
       },
       {
         "path": "dist/index.d.ts.map",
-        "sha256": "593859b38d79431517940bccf25f5e8ae079e142ac6cb66396b38421555a1d17"
+        "sha256": "b1dae52fbf72991b5b2ad3119e34555dc4d5a24d5379d907da3e289273445f32"
       },
       {
         "path": "dist/index.js",
-        "sha256": "a7264b451ffa98a04e54d23e83312abe3afe1f380b088e386841ea4325938596"
+        "sha256": "425634956f1720d006b3aed2f55e7155d13683b132978b2c6fd8375f487343cb"
       },
       {
         "path": "dist/index.js.map",
-        "sha256": "67861fde05a1927927ab1951738fbed427a2d016b22433603136041df21b3f0d"
+        "sha256": "c8dbced70fa364f092bfcfa7df24bdbd6ad016d456126dae7ab0165a4e623ae6"
       },
       {
         "path": "dist/integration-apply.d.ts",
@@ -1485,19 +1485,19 @@
       },
       {
         "path": "dist/operations.d.ts",
-        "sha256": "60bd3d2d8ddc18535260e2b790ee25e6ddb77eab597248f05948987d7d5a39eb"
+        "sha256": "8f0fe19c13dc8bb0a6887e78c2b2613126b587173986d9d66644f07053975e92"
       },
       {
         "path": "dist/operations.d.ts.map",
-        "sha256": "f8021977e02820666664922176bca714047fc544c8b466f3956aae854e53dd53"
+        "sha256": "6b874fc2839e335428926642ee8ad6f094dabdf9ffd654dd1ef1d96b164772f1"
       },
       {
         "path": "dist/operations.js",
-        "sha256": "76105d806137ef947694e1cb10b2e8360411bd873e74386e87d933c99f53bbb3"
+        "sha256": "1cd168844d94eecfe28b321d931f23d6c6bc6d8b5c1a29d6afbe7d5dfc375135"
       },
       {
         "path": "dist/operations.js.map",
-        "sha256": "acbb9920848e738a286eff1f45ebdd3a9f5e3b09fec879567072573df15d171b"
+        "sha256": "40e24aa5f3c4b3724adc02134b3f4fe46d16ae3c64b848a70231528b4e3416db"
       },
       {
         "path": "dist/package-skill-layouts.d.ts",
@@ -1709,19 +1709,19 @@
       },
       {
         "path": "dist/publish.d.ts",
-        "sha256": "c2494e9728e80aecd427671f17f252d250ea8866e5b1770efa74f64e37ced8d7"
+        "sha256": "ea2a9ab3829303a80180ada68cb66b38cdfedbc6523409c2b561975a161ff58c"
       },
       {
         "path": "dist/publish.d.ts.map",
-        "sha256": "a4cedae6fed2af78018ae9db1d57f71008373df4c42a9d23f6b73e0a1fde00a1"
+        "sha256": "bc0d47090d260a135db510ee7a5c2cdb30733026fc152de1a391c896b800183f"
       },
       {
         "path": "dist/publish.js",
-        "sha256": "5521d2668e6ddb77086a911166eee4b7df1776ff94b23b5bab9ba927d479b6d4"
+        "sha256": "665db8ce1a60587a18762240504aabba0dcd54bc8d222d279722579c319d57f6"
       },
       {
         "path": "dist/publish.js.map",
-        "sha256": "2dae5163293e7aa626a27d8da7642a82437b8bdac98b2735706f535572ec71c1"
+        "sha256": "a2ca3c599991fe420fa3278729ec552f5b283f4dab240f18f5f5747bc7a50bf4"
       },
       {
         "path": "dist/qe-bridge.d.ts",
@@ -1885,19 +1885,19 @@
       },
       {
         "path": "dist/release-line.d.ts",
-        "sha256": "0c0a981edaf3480952c45035c51f76a0218d3dc88b54a2658acf917fe0cca605"
+        "sha256": "bde357169aebd5fe8fa57c8443827cca62dbac5ecc112a661aa69fd67a78546b"
       },
       {
         "path": "dist/release-line.d.ts.map",
-        "sha256": "612b67646d8f82e9ce320578e05f8e721ea5532b6b6eaffa6738adb64434f38b"
+        "sha256": "8bbfbf84bf6fa8a2af347cb36891875bfb3d515fd02b2a606a79dc171df1cfbb"
       },
       {
         "path": "dist/release-line.js",
-        "sha256": "122160d1bd467c98e2a7a38836ad44152a3f85d60fb3cb3f2ab3e0304524e841"
+        "sha256": "5cd79637c54813cdd56b5619587b8f929e20760d18b6f62bfcf928d0af8a23a9"
       },
       {
         "path": "dist/release-line.js.map",
-        "sha256": "d6da1dc84b6885bf5976f0787b16888f2561502782d600d1b611c777ef0fdfe4"
+        "sha256": "a3b93aa12f3065659eaa7a59c7dc55adace93901c2087dfc5e67bc30f7d9e666"
       },
       {
         "path": "dist/release.d.ts",
@@ -2653,19 +2653,19 @@
       },
       {
         "path": "dist/vector-tier.d.ts",
-        "sha256": "cdf68fa28b6a7e78d0381a5b2d23647ae812fee004e31b4c8c3893a897fd6f6f"
+        "sha256": "29f17c93d7d1a702195007a540717916c759956888d69a9c79673c06e2e37e37"
       },
       {
         "path": "dist/vector-tier.d.ts.map",
-        "sha256": "8c504e223d4d78a29a24993078f4a90e771f56d6a62b310ab90b7ba44f1a6bd5"
+        "sha256": "6e89cc42c34eb4779792b89cc4a24e96179e28c1e6e343bc43682fe25b4be703"
       },
       {
         "path": "dist/vector-tier.js",
-        "sha256": "6554f0bd2566ac10e6c841732210daa2412028e520ce49acf197451024161382"
+        "sha256": "2e8d87067df268d285a1c140b2ab4f81d91b1fa28f4e605fac343f1293c5c932"
       },
       {
         "path": "dist/vector-tier.js.map",
-        "sha256": "23de503688790bbe679dae6c72b3c77faa43a14d4d0fbc54946c2e35cfd2d543"
+        "sha256": "d7135aa3aa0866426d656a943ad482ebd99e4201c032bbee6b9bed74d1a52464"
       },
       {
         "path": "dist/workflow-run-dispatch.d.ts",
@@ -2733,7 +2733,7 @@
       },
       {
         "path": "package.json",
-        "sha256": "273067dfe330063f7f449dea7480208e147a20eb7b554f921d1eb9ee33cb8ca4"
+        "sha256": "0019331c94f897c4cf80e5cadba55c001db3d8bd8ff080fda5b78fb0e0ca7d8b"
       },
       {
         "path": "src/__tests__/golden-baseline.test.ts",
@@ -2765,7 +2765,7 @@
       },
       {
         "path": "src/apply-leg.ts",
-        "sha256": "9391b6e0d9f6ef3f39662d4f3c89dbc173881584c6956ad5add2ebd54cdc85cf"
+        "sha256": "610ad9f310a8bbcc563f28c78368483d3fe2d208e6c909a283695a8fe8b037e8"
       },
       {
         "path": "src/apply.ts",
@@ -2853,7 +2853,7 @@
       },
       {
         "path": "src/codex-hooks-assets.ts",
-        "sha256": "88230ebdfa2d7cc09c6d18e70cb77269d5f00668644c24fbec934f54c04e863f"
+        "sha256": "abbafec2171dd098b0f33ae000380e31f4123fcbb71b93f611f3656f807a201f"
       },
       {
         "path": "src/codex-hooks-verify.ts",
@@ -2861,7 +2861,7 @@
       },
       {
         "path": "src/codex-hooks.ts",
-        "sha256": "39bea3c06d2d8c21eac33673c12c29f91148799a8d6573b51dadb733d200cf19"
+        "sha256": "814b8694bc1ca5372ffc63c4913fe2ab43c3cdfaefe51af27b5545369ddf37d2"
       },
       {
         "path": "src/codex-invoke.ts",
@@ -2997,7 +2997,7 @@
       },
       {
         "path": "src/index.ts",
-        "sha256": "f248dbc9f0fc735dcfe11ae399c8f7c52b4053bb10e29234dc27c6c9581b7945"
+        "sha256": "396802058cecfc4076f82c6e48869da3d1f5df16effbc9c3885112449725c8b9"
       },
       {
         "path": "src/integration-apply.ts",
@@ -3113,7 +3113,7 @@
       },
       {
         "path": "src/operations.ts",
-        "sha256": "8143fae14dbfcf0e87bf148add74e16e0ee8c2f8064fd2bfb0f90fbf1a21889b"
+        "sha256": "476dc9c7f0c1ca8720ac0876f9b6400110ef3858d84fd10107e7c3c3fe174cf2"
       },
       {
         "path": "src/package-skill-layouts.ts",
@@ -3169,7 +3169,7 @@
       },
       {
         "path": "src/publish.ts",
-        "sha256": "00024c5a639339c5184bdad4d0ccf2e2e7d609cd74f25e64b624a43c22ac8625"
+        "sha256": "b5ff9e0c107290d0217a82cf1baed940f81dcc937e5c240a0c3565884b42b615"
       },
       {
         "path": "src/qe-bridge.ts",
@@ -3213,7 +3213,7 @@
       },
       {
         "path": "src/release-line.ts",
-        "sha256": "19b4f6df4bf9683eb06ff6fbfca13cd74409f201340abacf7c1ff2e1ee06a6e2"
+        "sha256": "2faa022c6b4fd312c5f42f117453e493934770ca86bebdae3225dee5c61c6912"
       },
       {
         "path": "src/release.ts",
@@ -3405,7 +3405,7 @@
       },
       {
         "path": "src/vector-tier.ts",
-        "sha256": "6607b712f768be25a140f224dc6c3c80d25e0e5144898fb819d488da7f0cd600"
+        "sha256": "eefb77f2aa10cb4273b84cb611a5c490a736aa4ffeff3d5396efec2f665a329b"
       },
       {
         "path": "src/workflow-run-dispatch.ts",
@@ -3425,5 +3425,5 @@
       }
     ]
   },
-  "signature": "dNZha0vxyf5ob2PcHUsX1zU0BQwDvQbcrZ5oKyPYXcgGmJAjvPkXAPf4scWIz152ujHWLaetlKNujBxedF+CDA=="
+  "signature": "bXhTZgcdViqfv+nZCOc/jsuBoXZ4DHIa64mGVve3GA3MnbUsZx8Mw83VWPTs6fR3K5d8F7hbGeznzrPdYDQqBA=="
 }

package/README.md

@@ -607,6 +607,13 @@ instead of only ever checking the plain project path. The daemon also now prints
 (path N bytes)` and exits non-zero, never a silent "ready" for a socket that was never created
 (`APPLY_LEG_VERSION` bumped 3→4 for this and the resolver change).
 
+`probeApplyLeg` (and `probeHookLiveness` beneath it) now report **`groupKillAttempted`** — whether the
+liveness probe actually issued its process-group `SIGKILL` (attempted after EVERY probe outcome — timeout, exit, spawn error; ESRCH still counts as attempted) — as an OBSERVED field,
+set in the `finally` right after the kill attempt and present only on branches that reached a spawn.
+A test can therefore assert "the kill was attempted" separately from "the child is dead" instead of
+inferring the first from the source (feature `full-suite-flake-fixes-3`, Codex HIGH-1; the mutant
+that never reports the attempt is registry entry `probe-group-kill-attempted`).
+
 ### One recall engine for hook and CLI (`hook-recall-hybrid-parity`, ADR-001, `APPLY_LEG_VERSION` 4→5)
 
 The daemon's `op: recall` handler used to run its own brute-force cosine loop over the in-memory
@@ -677,9 +684,30 @@ find module` from a foreign session, swallowed by `2>/dev/null || true`.
 - **Limits, named plainly.** One store per install: from a foreign project's session the hook injects
   the INSTALL ROOT's lessons, not the session project's — that is the requested behavior (a
   per-project store alongside a user-level one is a separate feature). The Codex host's own hook
-  (`codex-hooks-assets.ts:232`/`:373`) resolves its root from `payload.cwd || PWD || cwd()` — the
-  SAME class of weakness — and is deliberately left unfixed here (named, not silently patched); see
-  that file's own comments and the project backlog.
+  (`codex-hooks-assets.ts:232`/`:373`) resolves its root from `payload.cwd || PWD || cwd()` via a
+  single shared `resolveHookRoot(payload)` and now NAMES a not-found root on stderr instead of a
+  silent early return (`codex-hook-root-provenance`, below); a live probe (T1, codex-cli 0.154.0,
+  re-run correctly in fix-round 1 — see that feature's own change manifest) found `payload.cwd`
+  always present and equal to `PWD`/`cwd()` across 3 scenarios / 6 captures, so no explicit-override
+  knob was added — a SCOPED finding, not a claim that no producer could ever send a different value.
+
+#### Codex hook root provenance (`codex-hook-root-provenance`)
+
+Both Codex hooks (`dz-codex-veto`, `dz-codex-recall`) share ONE `resolveHookRoot(payload)` instead of
+two copies of the `payload.cwd || PWD || cwd()` fallback, and a `root === null` early return now
+prints one line to stderr — `[dz-codex-<hook>] skipped reason=no-project-root start=<startDir>
+(<source>)` — so a hook that never found a project is distinguishable from one that is silently dead;
+a found root stays silent unless `DZ_CODEX_HOOK_DEBUG` is set. Interpolated paths are escaped (C0
+control range + DEL) before printing, so a hostile `cwd` cannot turn the "ONE line" promise into
+several — the tradeoff is that the line still discloses the absolute directory the hook was asked
+about (which can embed a username or a project name) to stderr, accepted because it is a diagnostic
+for the person running the hook, not a return value. A live probe (three real `codex exec` sessions —
+project root, a nested subdirectory, a directory with no `.dz` anywhere — each with BOTH hook events,
+`PreToolUse` and `UserPromptSubmit`, captured separately; corrected in fix-round 1 after the original
+reproducer's unexported `BASE` measured the wrong file) found `payload.cwd` always correct in every
+one of the 6 captures, so there is no `DZ_PROJECT_ROOT`-style override — stated as "not observed on
+codex-cli 0.154.0 across 3 scenarios / 6 captures", not as a claim that the "hook read the wrong
+project" class cannot exist elsewhere.
 
 ### Store write-generation counter (`store-generation-counter`, `agentdb-index.ts`/`vector-tier.ts`)
 
@@ -804,6 +832,16 @@ deeper.
   flake, not a correctness defect; the daemon's own `HOOK_RECALL_BUDGET_MS` is independently
   widenable, and `probeApplyLeg`'s `env` option exists for exactly this in tests. A real single
   `dz doctor`/`dz parity` invocation never contends with 100+ concurrent test files.
+- **Every probe beacon now carries an owner and a TTL (feature `apply-leg-daemon-hygiene`, FR-3).**
+  The pre-probe scavenger used to delete EVERY `apply-leg-probe`-domain record unconditionally,
+  which was safe against a probe killed mid-flight but WRONG the moment two probes from two
+  different sessions run against the same store concurrently — the second probe's scavenge could
+  delete the first probe's still-in-flight beacon, producing a false-red `dz doctor`/`dz parity`
+  parity check with no real defect behind it. Each beacon now embeds `probe-owner=<pid>:<startedMs>`
+  in its own text (no schema change), and `scavengeStaleProbeBeacons` (exported) removes ONLY a
+  beacon whose owner is dead (`process.kill(pid, 0)` ⇒ ESRCH) or older than 60 s — a live, in-budget
+  beacon from a different concurrent probe is left untouched. A scavenge failure is now a named fact
+  (`ApplyLegProbeResult.scavengeError`), never a swallowed exception.
 
 ## Run a plan without the Claude host
 
@@ -864,6 +902,15 @@ Four changes, each replacing a statement derived from configuration with one der
   it REPLACED the lexical one, and exact matches on rare identifiers vanished. The lexical top-1 now
   keeps a reserved seat (taken from the weakest non-`both` place, never from a hit both legs found),
   and ties break by evidence rather than by the id alphabet.
+- **Recall's ordering contract is score DESC → evidence → `dzId` ASC everywhere, via one exported
+  `compareHybridHits`** (`feature recall-parity-tie-break`) — `mergeHybridHits`, `dampQuarantined`,
+  and `enhance()`'s reinforcement/bandit re-rank (via `orderHitsForReRank`, its pre-sort) all share
+  it, and the comparator is total even for `NaN`/±Infinity keys (a `NaN` sorts deterministically
+  last, never a coincidental tie). The daemon's own `recall-hit` exposure write stays
+  fire-and-forget — awaiting it cost +55–131 ms per recall against a 500 ms hook budget without
+  fully closing the race anyway; parity between the daemon and `dz recall` is instead proven with a
+  byte-level store snapshot taken before the comparison, so no write can reach the read it's
+  compared against.
 - **`HybridRecall` carries `semanticCandidates` and `semanticRanked`** — what the engine returned and
   what actually entered the merge, so a caller can tell "the tier is empty" from "the tier returned
   only stale ids", which need different fixes.
@@ -1232,6 +1279,17 @@ had NO mutual exclusion, and only the 10-minute grace period above stood between
 
 ## Status
 
+`0.8.36` — this release (night 15→16.09). Three changes live in this package: `recallHybrid` orders equal-scoring
+hits through ONE comparator (score desc → evidence rank → `dzId` asc, NaN last), so the embed daemon and
+`dz recall` agree; the apply-leg test helpers prove a daemon stop by OBSERVING `/proc` until nothing serves the
+root and gate every SIGKILL on a freshly-read identity plus containment under the test root (three-valued —
+"could not read" is never "does not match"), while the probe beacon carries its own owner, raw start ticks and
+expiry; and both generated Codex hooks resolve the project root through one `resolveHookRoot`, with
+`reportRootProvenance` naming the source and start directory on stderr, silent on the success path and with
+control characters escaped. The environment override originally planned for the hooks was dropped after a live
+measurement showed the payload's `cwd` present and correct in all six captures (3 scenarios × 2 hook events,
+codex-cli 0.154.0).
+
 `dz guard check --op publish` now warns when either release line disagrees with the core/CLI package versions, and a registry-confirmed live core or CLI publish synchronizes the first such line in both release READMEs: each README is rewritten atomically; the pair is not one transaction (dry-run and bump-only never write them).
 
 `0.8.12` — **staged, not published.** The `/feature-adr` phase panel + per-phase ledger telemetry,
@@ -1517,6 +1575,46 @@ comment claimed historical notes were safe; they were, except for the one releas
 cites most — the one it supersedes. A backticked version opening a line before a dash is now treated
 as an entry and left alone; footers, badges, install examples and pins still move.
 
+**Feature publish-readme-stamp-scope (2026-09-15, fix-round 1 2026-09-15): the sync outside the
+changelog region is a real POSITIVE ALLOWLIST — not a denylist, and not a denylist that calls itself
+one.** MEASURED 2026-09-15: a live `dz publish --yes` rewrote five historical lines — a second `##
+Status` region's own changelog entry (`changelogRegion` protected only the FIRST run, so a `memory`
+README's later `0.2.21` entry sat bare) and four prose CITATIONS of the outgoing version as a past
+fact (`MEASURED on 0.8.25`, two `Previous release (vA / v0.8.25)` parentheticals, `on 0.8.10 and
+0.8.25 alike`). The FIRST fix (same day) replaced that with a denylist of exactly those three phrase
+shapes (`isCitationContext`) — narrower than the incident, but still a denylist: any FOURTH prose
+shape citing the outgoing version ("since X", "measured against X", "X behaviour", a bare "X" in a
+sentence) would have rewritten by default until someone thought to deny it too, and the README
+documented it as an "allowlist" while the code rewrote by default — a cross-model review caught both.
+`planReadmeVersionSync(text, old, new)` now inverts the default: outside a changelog region, a token
+rewrites ONLY when `isAllowlistedRewriteContext` recognises one of six shapes — the lock-step feature
+this sync exists for, and nothing beyond it:
+
+1. a release-line token — `` `harness-core vX` · `harness-cli vY` `` and any generalised
+   `` `<name> vX` `` on the same line, including a trailing `` · `memory vZ` `` segment
+   (`release-line.ts` `isReleaseLineToken`/`GENERIC_RELEASE_TOKEN_RE`, unchanged since the earlier fix).
+2. a current-release FOOTER prefix — `Status:`/`Version:`/`Current release:`/`Current status:`/
+   `Released as` (case-insensitive, optional leading `**`/`-`), POSITION-aware: only the token
+   immediately after the label is allowed, so a footer sentence that also cites an unrelated older
+   release later in the same line (`Current release: X. (Previous release (vA / vB) …)`) allows the
+   first token and still protects the second.
+3. an install/dependency-pin context — the token immediately follows `@` (`npm i
+   @dzhechkov/harness-core@X`), or sits in a JSON-pin shape `"<package-name>": "X"`.
+4. the `dz publish: tarball <name>@X sha256:…` example line.
+5. a `<!-- dz:version -->` marker on the line — forces the rewrite regardless of EVERY other
+   protection, including the changelog region (the author's explicit override, AC-3).
+6. a shields.io-style badge URL segment — `badge/npm-vX-…` / `badge/version-X-…`.
+
+Every OTHER shape — whatever prose it is written in, today or in the future — is HISTORY by default,
+the same as a changelog entry. `syncReadmeVersion` stays a thin, atomic-write wrapper around the
+plan, returning exactly what it always returned (the pre-sync text, or `undefined` when nothing
+moved) — every existing caller is byte-compatible. The plan itself is never silent, and locates BOTH
+sides of its report: `dz publish` prints `readme sync <pkg>: would rewrite N line(s) (L…); M version
+token(s) kept as history (L…)` on a dry run and `rewrote N line(s) …` on a live publish — attached on
+every publish path (the main live publish, `--bump-only`, and the packed-transport batch), and
+`--json` carries the same `readmeSync` summary (`rewrittenLines`, `lines`, `skippedHistorical`,
+`historyLines`) per package.
+
 Also: skill-enrichment ownership is anchored at the skill dir rather than searched across the whole
 absolute path, and enrichment is excluded from canonical SELECTION as well as from the destination
 set — otherwise a `--auto` canonical could propagate one target's metadata into every copy.

package/dist/apply-leg.d.ts

@@ -364,7 +364,45 @@ export interface ApplyLegProbeResult {
      * reason=…` stderr line when present, else a best-effort description of what went wrong. */
     readonly reason?: string;
     readonly elapsedMs: number;
+    /** Fix round 1 (HIGH-1): the KILL-ATTEMPT fact, straight from `probeHookLiveness`'s own
+     * `groupKillAttempted` — present only on the branches that actually reached a spawn (absent for the
+     * early "not installed" / "no hook configured" / "legacy command" / "beacon write failed"
+     * returns, none of which ever call `probeHookLiveness`). This is deliberately a DIFFERENT fact
+     * from "is the grandchild still alive" — a caller observes both separately, never conflates them. */
+    readonly groupKillAttempted?: boolean;
+    /** FR-3 (feature `apply-leg-daemon-hygiene`): present exactly when the pre-probe scavenge of
+     * STALE beacon-domain records failed — the reason comes straight from {@link
+     * scavengeStaleProbeBeacons}'s own `error`, never swallowed. Independent of `ok`/`reason`: a
+     * scavenge failure does not itself flip `ok` to `false` (the probe's own injection result may
+     * still be perfectly genuine), but it IS a fact `dz doctor`/`dz parity` callers can surface
+     * rather than lose. */
+    readonly scavengeError?: string;
 }
+/** {@link scavengeStaleProbeBeacons}'s result — FR-3: a scavenge error is a FACT the caller can
+ * surface, never a swallowed exception (the pre-fix `catch { /* best-effort *\/ }` this replaces). */
+export type ScavengeResult = {
+    readonly ok: true;
+    readonly removed: number;
+} | {
+    readonly ok: false;
+    readonly error: string;
+};
+/**
+ * FR-3/FR-4: remove only the STALE beacon-domain records in `root`'s store — owner dead
+ * (`process.kill(pid, 0)` ⇒ ESRCH), older than `ttlMs`, OR (fix round 1, HIGH-6 residual) alive AND
+ * within `ttlMs` but the live pid's OWN `/proc/<pid>/stat` start time no longer matches the beacon's
+ * `proc-start=` tag — a confirmed PID-reuse case, where the recorded owner is provably gone even
+ * though `pid` itself answers. An UNREADABLE stat at scavenge time never counts as reuse evidence —
+ * it falls back to the plain alive+TTL verdict, per the lead's "cannot prove ⇒ do not remove"
+ * decision. A beacon whose owner is alive, within TTL, and (when provable) confirmed the SAME
+ * process is left untouched, even though it belongs to a different probe. An ownerless (pre-FR-3)
+ * beacon is always treated as stale. `ttlMs` defaults to {@link PROBE_BEACON_TTL_FLOOR_MS} for a
+ * caller that does not derive one (`apply-leg-beacon-owner.test.ts`'s own fixtures); `probeApplyLeg`
+ * always passes its own derived value. Exported so `apply-leg-beacon-owner.test.ts` can exercise the
+ * property directly, without needing a live hook/daemon (FR-4's red-first case needs only a store
+ * and an injectable remover, never a real probe round-trip).
+ */
+export declare function scavengeStaleProbeBeacons(root: string, removeBeacon: (root: string, ids: ReadonlySet<string>) => RemovePatternsResult, ttlMs?: number): ScavengeResult;
 /**
  * Live, end-to-end proof that the apply leg actually injects — ADR-001 Decision 1. `applyLegStatus`
  * only proves FILES exist and are STRUCTURALLY wired (issue #2's whole defect: four green checks,

package/dist/apply-leg.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apply-leg.d.ts","sourceRoot":"","sources":["../src/apply-leg.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAWH,OAAO,EAAkG,KAAK,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAE1J;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,SAAO,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAgDnG;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+EG;AACH,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGzD;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAW7E;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAsiBnE;AAED,gGAAgG;AAChG,eAAO,MAAM,iBAAiB,aAAgB,CAAC;AAE/C,mGAAmG;AACnG,MAAM,WAAW,cAAc;IAC7B,oGAAoG;IACpG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,wFAAwF;IACxF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAIzD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,GAAE,MAAM,GAAG,IAAW,GAAG,MAAM,CA6iB3E;AAED,0HAA0H;AAC1H,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACnF;AAaD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,CAAC,EAAE,MAAM,GACnB;IAAE,QAAQ,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAA;CAAE,CAsD5F;AAED,sDAAsD;AACtD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,kGAAkG;IAClG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,uGAAuG;IACvG,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,6FAA6F;AAC7F,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,0BAA0B,GAAG,iBAAiB,GAAG,eAAe,GAAG,eAAe,GAAG,YAAY,CAAC;AAE9G,8HAA8H;AAC9H,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,4FAA4F;IAC5F,QAAQ,CAAC,MAAM,CAAC,EAAE,0BAA0B,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;QAC1C,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;KAC5C,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,gBAAgB,EAAE,oBAAoB,CAAC;QAChD,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;KAC7C,CAAC;IACF,kGAAkG;IAClG,QAAQ,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;CACnD;AAgBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAY/E;AAmBD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAyD3D;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAYpE;AA4BD;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEtE;AAED;;6DAE6D;AAC7D,MAAM,WAAW,mBAAmB;IAClC,yFAAyF;IACzF,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB;gGAC4F;IAC5F,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAUD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;IACJ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACvC;;sGAEkG;IAClG,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,oBAAoB,CAAC;CAC5E,GACL,OAAO,CAAC,mBAAmB,CAAC,CAwK9B"}
+{"version":3,"file":"apply-leg.d.ts","sourceRoot":"","sources":["../src/apply-leg.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAWH,OAAO,EAAkG,KAAK,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAE1J;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,SAAO,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAgDnG;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+EG;AACH,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGzD;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAW7E;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAsiBnE;AAED,gGAAgG;AAChG,eAAO,MAAM,iBAAiB,aAAgB,CAAC;AAE/C,mGAAmG;AACnG,MAAM,WAAW,cAAc;IAC7B,oGAAoG;IACpG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,wFAAwF;IACxF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAIzD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,GAAE,MAAM,GAAG,IAAW,GAAG,MAAM,CA6iB3E;AAED,0HAA0H;AAC1H,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACnF;AAaD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,CAAC,EAAE,MAAM,GACnB;IAAE,QAAQ,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAA;CAAE,CAsD5F;AAED,sDAAsD;AACtD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,kGAAkG;IAClG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,uGAAuG;IACvG,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,6FAA6F;AAC7F,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,0BAA0B,GAAG,iBAAiB,GAAG,eAAe,GAAG,eAAe,GAAG,YAAY,CAAC;AAE9G,8HAA8H;AAC9H,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,4FAA4F;IAC5F,QAAQ,CAAC,MAAM,CAAC,EAAE,0BAA0B,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;QAC1C,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;KAC5C,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,gBAAgB,EAAE,oBAAoB,CAAC;QAChD,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;KAC7C,CAAC;IACF,kGAAkG;IAClG,QAAQ,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;CACnD;AAgBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAY/E;AAmBD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAyD3D;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAYpE;AA4BD;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEtE;AAED;;6DAE6D;AAC7D,MAAM,WAAW,mBAAmB;IAClC,yFAAyF;IACzF,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB;gGAC4F;IAC5F,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;yGAIqG;IACrG,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC;;;;;2BAKuB;IACvB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAmKD;sGACsG;AACtG,MAAM,MAAM,cAAc,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9H;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,oBAAoB,EAC9E,KAAK,GAAE,MAAkC,GACxC,cAAc,CAqChB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;IACJ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACvC;;sGAEkG;IAClG,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,oBAAoB,CAAC;CAC5E,GACL,OAAO,CAAC,mBAAmB,CAAC,CAgN9B"}