@dzhechkov/harness-core 0.8.35 → 0.8.37

package/src/index.ts

@@ -203,6 +203,9 @@ export {
   mirrorPatternsToVector,
   backfillVectorMirror,
   mergeHybridHits,
+  compareHybridHits,
+  evidenceRank,
+  orderHitsForReRank,
   recallHybrid,
   teachGuard,
   vectorTierStatus,
@@ -224,6 +227,7 @@ export type {
   HybridRecall,
   HybridRecallMode,
   HybridHit,
+  HybridOrderKey,
   RankedPattern,
   VectorServiceOptions,
   VectorTierStatus,
@@ -311,10 +315,10 @@ export {
   segmentRun,
 } from './eta.js';
 export type { CheckpointObservation, EtaEstimate, EtaInput, IncompleteCoverageSample, RunSegment, StageDurationSample, StageSample } from './eta.js';
-export { indexPatternsToAgentdb, resolveAgentdbPath, searchAgentdbPatterns, listAgentdbDzIds, resolveAgentdbEmbedder, resetAgentdbEmbedderCache, getAgentdbEmbedderCacheStats, cosineSimilarity, importVectorsToAgentdb, reindexAgentdbRows, bumpAgentdbUses, clearAgentdbQuarantine, deleteAgentdbByDzIds, readAgentdbRowsByTaskType, DZ_OWNED_TASK_TYPES, ensureAgentdbSchema, readStoreGeneration, bumpStoreGeneration } from './agentdb-index.js';
+export { indexPatternsToAgentdb, resolveAgentdbPath, searchAgentdbPatterns, listAgentdbDzIds, resolveAgentdbEmbedder, resolveStoreEmbedDtype, resetAgentdbEmbedderCache, getAgentdbEmbedderCacheStats, cosineSimilarity, importVectorsToAgentdb, reindexAgentdbRows, bumpAgentdbUses, clearAgentdbQuarantine, deleteAgentdbByDzIds, readAgentdbRowsByTaskType, DZ_OWNED_TASK_TYPES, ensureAgentdbSchema, readStoreGeneration, bumpStoreGeneration, resolveTransformersModule } from './agentdb-index.js';
 export type { AgentdbSearchHit, AgentdbSearchResult, AgentdbImportRow } from './agentdb-index.js';
-export { DEFAULT_EMBED_MODEL, LEGACY_EMBED_MODEL, DEFAULT_EMBED_DIM, KNOWN_EMBED_DIMS, resolveEmbedModel, readEmbedManifest, writeEmbedManifest, embedManifestPath, legacyEmbedManifest } from './embedding-config.js';
-export type { EmbedModelConfig, EmbedModelSource, EmbedManifest } from './embedding-config.js';
+export { DEFAULT_EMBED_MODEL, LEGACY_EMBED_MODEL, DEFAULT_EMBED_DIM, KNOWN_EMBED_DIMS, KNOWN_EMBED_DTYPES, resolveEmbedModel, readEmbedManifest, writeEmbedManifest, embedManifestPath, legacyEmbedManifest, currentEmbedManifest, guardEmbedSpace, snapshotEmbedManifest } from './embedding-config.js';
+export type { EmbedModelConfig, EmbedModelSource, EmbedManifest, EmbedDtype } from './embedding-config.js';
 export { putBookKnowledge, queryBookKnowledge, bookKbPath } from './book-kb.js';
 export type { BookKU, BookKUHit } from './book-kb.js';
 export { applyReadonlyPragmas, classifySqliteReadFailure, warnOnce } from './sqlite-read-helpers.js';
@@ -500,10 +504,30 @@ export {
   decideRecordWrite,
   decideReadBack,
   recordVerdictLine,
+  parseModelSpec,
 } from './run-records.js';
+export {
+  ENVELOPE_SCHEMA,
+  TASK_KINDS,
+  PRIORITIES as ENVELOPE_PRIORITIES,
+  TIERS as ENVELOPE_TIERS,
+  buildExperimentEnvelope,
+  validateExperimentEnvelope,
+} from './feature-adr-envelope.js';
+export type {
+  TaskKind,
+  EnvelopePriority,
+  EnvelopeTier,
+  ExperimentEnvelope,
+  ExperimentEnvelopeArms,
+  ExperimentEnvelopeChosen,
+  ExperimentEnvelopePolicy,
+  ExperimentEnvelopeEvaluator,
+  BuildExperimentEnvelopeInput,
+} from './feature-adr-envelope.js';
 export { decidePublishSigning, decidePostSigningVerification, decideSignableSet, publishSigningLine, signableSetLine } from './publish-signing.js';
 export type { PublishSigningVerdict, PublishSigningDecision, SignableSetDecision } from './publish-signing.js';
-export type { RecordKind, RecordVerdict, RecordDecision } from './run-records.js';
+export type { RecordKind, RecordVerdict, RecordDecision, LedgerEnrichInput, LedgerPriceEntry, ParsedModelSpec } from './run-records.js';
 export type { AmendmentAmbiguity, AmendmentRow, AmendmentVerdict, AmendmentResolution, AmendmentOutcome, AmendmentDecision, PlanCoverageGap } from './amendment-trace.js';
 // contract-checklist (ADR-001): pure extraction, canonical rendering, typed report parsing, and
 // exact per-item verification. Filesystem discovery/containment stays in harness-cli.
@@ -730,7 +754,8 @@ export type {
   ChainDefectAges,
   ChainedJournal,
 } from './event-chain.js';
-export { decideProvenance, environmentCanMintProvenance, publishArgv, discoverPackages, publishPackages, bumpPatch, compareVersions, findUnpackagedSkills, findUnpublishedWorkspaceFloors, rewriteWorkspaceSpecs, orderByDependencies, syncReadmeVersion, isChangelogEntryLine, changelogRegion } from './publish.js';
+export { decideProvenance, environmentCanMintProvenance, publishArgv, discoverPackages, publishPackages, bumpPatch, compareVersions, findUnpackagedSkills, findUnpublishedWorkspaceFloors, rewriteWorkspaceSpecs, orderByDependencies, syncReadmeVersion, isChangelogEntryLine, changelogRegion, planReadmeVersionSync } from './publish.js';
+export type { ReadmeVersionSyncPlan, ReadmeSyncRewrite } from './publish.js';
 export { RELEASE_LINE_RE, findReleaseLine, rewriteReleaseLine } from './release-line.js';
 export * from './course-staleness.js';
 export { fetchAllDownloads } from './downloads.js';
@@ -906,6 +931,14 @@ export {
   // p16-non-js-portability: the gate-script search chain's operator note (ADR-002/AM-7) and the
   // dzBin absolutization (ADR-003). Named for the same reason as the three above.
   refusalNoteFor,
+  shellQuote,
+  planBackupCmd,
+  planRestoreCmd,
+  planArchiveBackupCmd,
+  planSnapshotCmd,
+  snapshotBlock,
+  snapshotNumber,
+  parsePlanSnapshot,
   normalizeDzBin,
   // qe-bridge-claude: the bridge's path/slug hygiene reuses these rather than minting a second
   // definition of "safe" (ADR-001 D5-A).
@@ -973,6 +1006,7 @@ export type {
   ParsedBaselineCapture,
   ParsedLandingSignal,
   PlanGateVerdict,
+  PlanSnapshot,
   PlanGateCmdOpts,
   CodexReviewCommandInput,
   CodexReviewCommandResult,
@@ -1049,6 +1083,25 @@ export type {
   WorkflowRunRecord,
   WorkflowStageEntry,
 } from './cost-ledger.js';
+// Canonical stage taxonomy (feature measurement-integrity, ADR-001 D1).
+export { CANONICAL_STAGES, STAGE_LABEL_RULES, canonicalStage } from './feature-adr-stage-canon.js';
+export type {
+  CanonicalStage,
+  KnownStageResult,
+  StageCanonResult,
+  StageLabelRule,
+  UnknownStageResult,
+} from './feature-adr-stage-canon.js';
+// Codex rollout-log reader (feature measurement-integrity, ADR-001 D3).
+export { matchCodexRollouts, parseCodexRollout } from './codex-rollouts.js';
+export type {
+  CodexRollout,
+  CodexRolloutMatch,
+  CodexRolloutMatchWindow,
+  CodexRolloutParseError,
+  CodexRolloutTotals,
+  CodexRolloutTurn,
+} from './codex-rollouts.js';
 export type {
   ClaudeUsageModel,
   UsageCalibrationChange,
@@ -1149,6 +1202,7 @@ export {
 // Run-process scorecard (feature dz-score, Reading C) — scores the DISCIPLINE of a feature-adr run
 // from its artifacts and folds immutable receipts into a chained aggregate. Descriptive-only,
 // permanently: neither the single-run score nor the aggregate gates.
+export * from './qe-findings.js';
 export * from './score.js';
 export * from './recap.js';
 export * from './provenance.js';
@@ -1263,8 +1317,13 @@ export * from './run-registry.js';
 
 export { JOURNAL_KINDS, formatLine, parseLine, selectWindow, appendWitnessed } from './journal.js';
 export type { JournalKind, JournalEvent, JournalLine, JournalIo } from './journal.js';
-export { openRound, closeRound, listRounds } from './round.js';
-export type { RoundState, RoundExecState, RoundLedgerRow } from './round.js';
+export { openRound, closeRound, listRounds, validateClosedRoundLedgerRow } from './round.js';
+export type { RoundState, RoundExecState, RoundLedgerRow, RoundReviewSidecar } from './round.js';
 export { parseCodexTokens, classifyRoundExecOutcome, buildRoundExecRow } from './round-exec.js';
 export type { RoundExecOutcome, RoundExecLedgerRow } from './round-exec.js';
 export * from './run-cleanup.js';
+
+export * from './cross-family-control.js';
+
+export { debtRatchetVerdict, parsePinnedCeiling, ceilingUnreadableMessage } from './debt-ratchet.js';
+export type { DebtRatchetArgs, DebtRatchetVerdict, PinnedCeiling } from './debt-ratchet.js';

package/src/loop-blobs.generated.ts

@@ -61,11 +61,11 @@ export const BLOBS: Record<string, LoopBlob> = {
   "training-pairs": {
     name: "training-pairs",
     version: "1.2.0",
-    contentHash: "7c836995b72f0b8fc69074cf6bb7b8a58fac609e4f5c365c82b8745c655da39c",
+    contentHash: "e80c53755e8c2b0e08d3dabcd49cdfffb2283a5b3f650c06b76196936979caf6",
     sourcePath: "packages/@dzhechkov/harness-core/src/feature-adr-checkpoints.ts",
     requires: ["checkpoints"],
     exports: ["TRAINPAIR_SCHEMA_VERSION","TRAINPAIR_MAX_IO_CHARS","trainingPairFamily","trainingPairPath","TRAINPAIR_PRIVACY_NOTE","buildTrainingPair","serializeTrainingPair","trainingPairAppendCmd","decideCaptureMode","captureFailureRecord","trainingPairBackfillCmd","TP_BACKFILL_OK","TP_BACKFILL_SKIP"],
-    code: "function decideCaptureMode(opts) {\n    if (!opts.enabled)\n        return 'skip-disabled';\n    if (!Number.isInteger(opts.recordCount) || opts.recordCount <= 0)\n        return 'skip-empty';\n    return opts.resumed ? 'backfill' : 'capture';\n}\nfunction captureFailureRecord(stage, mode, reason, detail) {\n    const normalizedStage = typeof stage === 'string' && stage.trim() !== '' ? stage : 'unknown';\n    const normalizedMode = mode === 'capture' || mode === 'backfill' || mode === 'skip-disabled' || mode === 'skip-empty'\n        ? mode\n        : null;\n    const normalizedReason = reason === 'threw' || reason === 'unserializable' || reason === 'unverified' || reason === 'backfill-unverified' || reason === 'empty-output'\n        ? reason\n        : 'threw';\n    let normalizedDetail = null;\n    if (detail !== null && detail !== undefined) {\n        try {\n            const text = String(detail);\n            if (text !== '')\n                normalizedDetail = text.length > 500 ? text.slice(0, 500) + '…' : text;\n        }\n        catch {\n            normalizedDetail = null;\n        }\n    }\n    return { stage: normalizedStage, mode: normalizedMode, reason: normalizedReason, detail: normalizedDetail };\n}\nconst TRAINPAIR_SCHEMA_VERSION = 'fa-trainpair-3';\nconst TRAINPAIR_MAX_IO_CHARS = 48000;\nfunction trainingPairFamily(spec) {\n    return /codex|gpt|openai/i.test(String(spec ?? '')) ? 'codex' : 'claude';\n}\nfunction trainingPairPath(slug, stage) {\n    return '.dz/fa-training/' + slug + '/' + stage + '.jsonl';\n}\nconst TRAINPAIR_PRIVACY_NOTE = \"feature-adr TRAINING PAIRS (backlog 70e0f083): per-stage SFT records - STAGE INPUT (full prompt/context) -> STAGE OUTPUT (artifact/result) -> EVALUATION (QE grade + injected lessons) with model+family provenance; one JSONL file per stage per slug. PRIVACY: pairs may contain TARGET-REPO CODE and full prompts. This directory is NOT gitignored yet by explicit owner decision - review contents before sharing or publishing anything that embeds it. ts is the CAPTURE time. On a record with captureMode: 'backfill' that is the RECONSTRUCTION time, NOT the stage's observation time — the original stage's timing lives in that run's .fa-state checkpoint.\";\nconst TP_PROFILE_MARKER_START = '<!-- dz:profile:start -->';\nconst TP_PROFILE_MARKER_END = '<!-- dz:profile:end -->';\nconst TP_PROFILE_REDACTED = '[dz:profile REDACTED]';\nfunction redactProfileBlock(text) {\n    if (typeof text !== 'string' || text === '')\n        return typeof text === 'string' ? text : '';\n    let out = '';\n    let rest = text;\n    for (;;) {\n        const start = rest.indexOf(TP_PROFILE_MARKER_START);\n        if (start === -1)\n            return out + rest;\n        out += rest.slice(0, start) + TP_PROFILE_REDACTED;\n        const end = rest.indexOf(TP_PROFILE_MARKER_END, start + TP_PROFILE_MARKER_START.length);\n        if (end === -1)\n            return out;\n        rest = rest.slice(end + TP_PROFILE_MARKER_END.length);\n    }\n}\nfunction coerceText(v) {\n    if (typeof v === 'string')\n        return v;\n    if (v === null || v === undefined)\n        return '';\n    try {\n        const s = JSON.stringify(v);\n        return typeof s === 'string' ? s : String(v);\n    }\n    catch {\n        return String(v);\n    }\n}\nfunction normalizeTrainingPairBudget(raw) {\n    try {\n        if (raw === undefined)\n            return { primary: 'claude', claude: 'normal', codex: 'normal', preset: 'unset' };\n        if (raw === null || typeof raw !== 'object')\n            return null;\n        const value = raw;\n        const primary = value.primary;\n        const claude = value.claude;\n        const codex = value.codex;\n        if (primary !== 'claude' && primary !== 'codex')\n            return null;\n        if (claude !== 'normal' && claude !== 'eco')\n            return null;\n        if (codex !== 'normal' && codex !== 'eco')\n            return null;\n        if (value.preset === 'unset')\n            return { primary, claude, codex, preset: 'unset' };\n        let preset = 'custom';\n        if (claude === 'normal' && codex === 'normal')\n            preset = 'normal';\n        else if (claude === 'eco' && codex === 'eco')\n            preset = 'eco';\n        else if (claude === 'eco' && codex === 'normal')\n            preset = 'hybrid';\n        return { primary, claude, codex, preset };\n    }\n    catch {\n        return null;\n    }\n}\nfunction buildTrainingPair(opts) {\n    let input = redactProfileBlock(coerceText(opts.input));\n    let output = redactProfileBlock(coerceText(opts.output));\n    let truncated = null;\n    if (input.length + output.length > TRAINPAIR_MAX_IO_CHARS) {\n        truncated = { inputChars: input.length, outputChars: output.length, inputHash: fnv1a64(input), outputHash: fnv1a64(output) };\n        const half = Math.floor(TRAINPAIR_MAX_IO_CHARS / 2);\n        let inKeep = input.length;\n        let outKeep = output.length;\n        if (outKeep <= half)\n            inKeep = TRAINPAIR_MAX_IO_CHARS - outKeep;\n        else if (inKeep <= half)\n            outKeep = TRAINPAIR_MAX_IO_CHARS - inKeep;\n        else {\n            inKeep = half;\n            outKeep = TRAINPAIR_MAX_IO_CHARS - half;\n        }\n        if (inKeep < input.length)\n            input = input.slice(0, inKeep) + '\\n…[TRUNCATED ' + (truncated.inputChars - inKeep) + ' chars — full-text fnv1a64=' + truncated.inputHash + ']';\n        if (outKeep < output.length)\n            output = output.slice(0, outKeep) + '\\n…[TRUNCATED ' + (truncated.outputChars - outKeep) + ' chars — full-text fnv1a64=' + truncated.outputHash + ']';\n    }\n    const ev = opts.evaluation || {};\n    const pv = opts.provenance || {};\n    return {\n        schema: TRAINPAIR_SCHEMA_VERSION,\n        slug: opts.slug,\n        stage: opts.stage,\n        ts: opts.ts === undefined ? null : opts.ts,\n        input,\n        output,\n        evaluation: {\n            grade: typeof ev.grade === 'string' && ev.grade.trim() !== '' ? ev.grade : null,\n            gradedBy: typeof ev.gradedBy === 'string' && ev.gradedBy !== '' ? ev.gradedBy : null,\n            lessonsInjected: Array.isArray(ev.lessonsInjected) ? ev.lessonsInjected.filter((s) => typeof s === 'string' && s !== '') : [],\n        },\n        provenance: {\n            model: typeof pv.model === 'string' && pv.model !== '' ? pv.model : 'unknown',\n            family: pv.family === 'claude' || pv.family === 'codex' ? pv.family : trainingPairFamily(pv.model),\n            role: typeof pv.role === 'string' && pv.role !== '' ? pv.role : 'unknown',\n            tokens: typeof pv.tokens === 'number' && Number.isFinite(pv.tokens) ? pv.tokens : null,\n            minutes: typeof pv.minutes === 'number' && Number.isFinite(pv.minutes) ? pv.minutes : null,\n        },\n        budgetMode: normalizeTrainingPairBudget(opts.budgetMode),\n        truncated,\n        captureMode: opts.captureMode === 'backfill' ? 'backfill' : 'capture',\n        resumed: opts.resumed === true,\n    };\n}\nfunction serializeTrainingPair(pair) {\n    try {\n        const line = JSON.stringify(pair);\n        return typeof line === 'string' ? line : null;\n    }\n    catch {\n        return null;\n    }\n}\nfunction trainingPairAppendCmd(repoAbs, slug, stage, line) {\n    const dirAbs = repoAbs + '/.dz/fa-training/' + slug;\n    const readmeAbs = repoAbs + '/.dz/fa-training/README.md';\n    const fileAbs = dirAbs + '/' + stage + '.jsonl';\n    return ('mkdir -p ' + shellQuote(dirAbs) +\n        ' && { [ -f ' + shellQuote(readmeAbs) + ' ] || printf \\'%s\\\\n\\' ' + shellQuote(TRAINPAIR_PRIVACY_NOTE) + ' > ' + shellQuote(readmeAbs) + '; }' +\n        \" && printf '%s\\\\n' \" + shellQuote(line) + ' >> ' + shellQuote(fileAbs));\n}\nconst TP_BACKFILL_OK = 'TP-BACKFILL-OK';\nconst TP_BACKFILL_SKIP = 'TP-BACKFILL-SKIP';\nconst TP_BACKFILL_DUP = 'TP-BACKFILL-DUP';\nfunction trainingPairBackfillCmd(repoAbs, slug, stage, lines, markKey) {\n    if (typeof repoAbs !== 'string' || repoAbs === '')\n        return null;\n    if (typeof slug !== 'string' || slug === '')\n        return null;\n    if (typeof stage !== 'string' || stage === '')\n        return null;\n    if (!Array.isArray(lines) || lines.length === 0 || !lines.every(line => typeof line === 'string' && line !== ''))\n        return null;\n    const dirAbs = repoAbs + '/.dz/fa-training/' + slug;\n    const readmeAbs = repoAbs + '/.dz/fa-training/README.md';\n    const fileAbs = dirAbs + '/' + stage + '.jsonl';\n    const markDir = repoAbs + '/.dz/fa-training/.backfill-marks';\n    const markStage = stage.replace(/\\.\\./g, '_').replace(/\\//g, '_');\n    const resolvedMarkKey = markKey === undefined ? fnv1a64(stage + '\\0' + lines.join('\\n')) : markKey;\n    const markPath = markDir + '/' + markStage + '-' + resolvedMarkKey;\n    const appends = lines\n        .map(line => \"printf '%s\\\\n' \" + shellQuote(line) + ' >> ' + shellQuote(fileAbs))\n        .join(' && ');\n    return ('mkdir -p ' + shellQuote(dirAbs) +\n        ' && { [ -f ' + shellQuote(readmeAbs) + ' ] || printf \\'%s\\\\n\\' ' + shellQuote(TRAINPAIR_PRIVACY_NOTE) + ' > ' + shellQuote(readmeAbs) + '; }' +\n        ' && mkdir -p ' + shellQuote(markDir) +\n        ' && if mkdir ' + shellQuote(markPath) + ' 2>/dev/null; then ' +\n        'if [ -f ' + shellQuote(fileAbs) + ' ]; then echo ' + shellQuote(TP_BACKFILL_SKIP) +\n        '; else { ' + appends + ' && echo ' + shellQuote(TP_BACKFILL_OK) + '; } || { rmdir ' + shellQuote(markPath) + ' 2>/dev/null; false; }; fi' +\n        '; else echo ' + shellQuote(TP_BACKFILL_DUP) + '; fi');\n}",
+    code: "function decideCaptureMode(opts) {\n    if (!opts.enabled)\n        return 'skip-disabled';\n    if (!Number.isInteger(opts.recordCount) || opts.recordCount <= 0)\n        return 'skip-empty';\n    return opts.resumed ? 'backfill' : 'capture';\n}\nfunction captureFailureRecord(stage, mode, reason, detail) {\n    const normalizedStage = typeof stage === 'string' && stage.trim() !== '' ? stage : 'unknown';\n    const normalizedMode = mode === 'capture' || mode === 'backfill' || mode === 'skip-disabled' || mode === 'skip-empty'\n        ? mode\n        : null;\n    const normalizedReason = reason === 'threw' || reason === 'unserializable' || reason === 'unverified' || reason === 'backfill-unverified' || reason === 'empty-output'\n        ? reason\n        : 'threw';\n    let normalizedDetail = null;\n    if (detail !== null && detail !== undefined) {\n        try {\n            const text = String(detail);\n            if (text !== '')\n                normalizedDetail = text.length > 500 ? text.slice(0, 500) + '…' : text;\n        }\n        catch {\n            normalizedDetail = null;\n        }\n    }\n    return { stage: normalizedStage, mode: normalizedMode, reason: normalizedReason, detail: normalizedDetail };\n}\nconst TRAINPAIR_SCHEMA_VERSION = 'fa-trainpair-3';\nconst TRAINPAIR_MAX_IO_CHARS = 48000;\nfunction trainingPairFamily(spec) {\n    return /codex|gpt|openai/i.test(String(spec ?? '')) ? 'codex' : 'claude';\n}\nfunction trainingPairPath(slug, stage) {\n    return '.dz/fa-training/' + slug + '/' + stage + '.jsonl';\n}\nconst TRAINPAIR_PRIVACY_NOTE = \"feature-adr TRAINING PAIRS (backlog 70e0f083): per-stage SFT records - STAGE INPUT (full prompt/context) -> STAGE OUTPUT (artifact/result) -> EVALUATION (QE grade + injected lessons) with model+family provenance; one JSONL file per stage per slug. PRIVACY: pairs may contain TARGET-REPO CODE and full prompts. This directory is NOT gitignored yet by explicit owner decision - review contents before sharing or publishing anything that embeds it. ts is the CAPTURE time. On a record with captureMode: 'backfill' that is the RECONSTRUCTION time, NOT the stage's observation time — the original stage's timing lives in that run's .fa-state checkpoint.\";\nconst TP_PROFILE_MARKER_START = '<!-- dz:profile:start -->';\nconst TP_PROFILE_MARKER_END = '<!-- dz:profile:end -->';\nconst TP_PROFILE_REDACTED = '[dz:profile REDACTED]';\nfunction redactProfileBlock(text) {\n    if (typeof text !== 'string' || text === '')\n        return typeof text === 'string' ? text : '';\n    let out = '';\n    let rest = text;\n    for (;;) {\n        const start = rest.indexOf(TP_PROFILE_MARKER_START);\n        if (start === -1)\n            return out + rest;\n        out += rest.slice(0, start) + TP_PROFILE_REDACTED;\n        const end = rest.indexOf(TP_PROFILE_MARKER_END, start + TP_PROFILE_MARKER_START.length);\n        if (end === -1)\n            return out;\n        rest = rest.slice(end + TP_PROFILE_MARKER_END.length);\n    }\n}\nfunction coerceText(v) {\n    if (typeof v === 'string')\n        return v;\n    if (v === null || v === undefined)\n        return '';\n    try {\n        const s = JSON.stringify(v);\n        return typeof s === 'string' ? s : String(v);\n    }\n    catch {\n        return String(v);\n    }\n}\nfunction normalizeTrainingPairBudget(raw) {\n    try {\n        if (raw === undefined)\n            return { primary: 'claude', claude: 'normal', codex: 'normal', preset: 'unset' };\n        if (raw === null || typeof raw !== 'object')\n            return null;\n        const value = raw;\n        const primary = value.primary;\n        const claude = value.claude;\n        const codex = value.codex;\n        if (primary !== 'claude' && primary !== 'codex')\n            return null;\n        if (claude !== 'normal' && claude !== 'eco')\n            return null;\n        if (codex !== 'normal' && codex !== 'eco')\n            return null;\n        if (value.preset === 'unset')\n            return { primary, claude, codex, preset: 'unset' };\n        let preset = 'custom';\n        if (claude === 'normal' && codex === 'normal')\n            preset = 'normal';\n        else if (claude === 'eco' && codex === 'eco')\n            preset = 'eco';\n        else if (claude === 'eco' && codex === 'normal')\n            preset = 'hybrid';\n        return { primary, claude, codex, preset };\n    }\n    catch {\n        return null;\n    }\n}\nfunction normalizeTrainingPairEnvelope(raw) {\n    if (raw === null || raw === undefined || typeof raw !== 'object' || Array.isArray(raw))\n        return null;\n    const v = raw;\n    if (v.schema !== 1)\n        return null;\n    if (typeof v.runId !== 'string' || v.runId.trim() === '')\n        return null;\n    if (v.arms === null || typeof v.arms !== 'object')\n        return null;\n    if (v.chosen === null || typeof v.chosen !== 'object')\n        return null;\n    if (v.policy === null || typeof v.policy !== 'object')\n        return null;\n    if (v.evaluator === null || typeof v.evaluator !== 'object')\n        return null;\n    return raw;\n}\nfunction buildTrainingPair(opts) {\n    let input = redactProfileBlock(coerceText(opts.input));\n    let output = redactProfileBlock(coerceText(opts.output));\n    let truncated = null;\n    if (input.length + output.length > TRAINPAIR_MAX_IO_CHARS) {\n        truncated = { inputChars: input.length, outputChars: output.length, inputHash: fnv1a64(input), outputHash: fnv1a64(output) };\n        const half = Math.floor(TRAINPAIR_MAX_IO_CHARS / 2);\n        let inKeep = input.length;\n        let outKeep = output.length;\n        if (outKeep <= half)\n            inKeep = TRAINPAIR_MAX_IO_CHARS - outKeep;\n        else if (inKeep <= half)\n            outKeep = TRAINPAIR_MAX_IO_CHARS - inKeep;\n        else {\n            inKeep = half;\n            outKeep = TRAINPAIR_MAX_IO_CHARS - half;\n        }\n        if (inKeep < input.length)\n            input = input.slice(0, inKeep) + '\\n…[TRUNCATED ' + (truncated.inputChars - inKeep) + ' chars — full-text fnv1a64=' + truncated.inputHash + ']';\n        if (outKeep < output.length)\n            output = output.slice(0, outKeep) + '\\n…[TRUNCATED ' + (truncated.outputChars - outKeep) + ' chars — full-text fnv1a64=' + truncated.outputHash + ']';\n    }\n    const ev = opts.evaluation || {};\n    const pv = opts.provenance || {};\n    return {\n        schema: TRAINPAIR_SCHEMA_VERSION,\n        slug: opts.slug,\n        stage: opts.stage,\n        ts: opts.ts === undefined ? null : opts.ts,\n        input,\n        output,\n        evaluation: {\n            grade: typeof ev.grade === 'string' && ev.grade.trim() !== '' ? ev.grade : null,\n            gradedBy: typeof ev.gradedBy === 'string' && ev.gradedBy !== '' ? ev.gradedBy : null,\n            lessonsInjected: Array.isArray(ev.lessonsInjected) ? ev.lessonsInjected.filter((s) => typeof s === 'string' && s !== '') : [],\n        },\n        provenance: {\n            model: typeof pv.model === 'string' && pv.model !== '' ? pv.model : 'unknown',\n            family: pv.family === 'claude' || pv.family === 'codex' ? pv.family : trainingPairFamily(pv.model),\n            role: typeof pv.role === 'string' && pv.role !== '' ? pv.role : 'unknown',\n            tokens: typeof pv.tokens === 'number' && Number.isFinite(pv.tokens) ? pv.tokens : null,\n            minutes: typeof pv.minutes === 'number' && Number.isFinite(pv.minutes) ? pv.minutes : null,\n        },\n        budgetMode: normalizeTrainingPairBudget(opts.budgetMode),\n        truncated,\n        captureMode: opts.captureMode === 'backfill' ? 'backfill' : 'capture',\n        resumed: opts.resumed === true,\n        envelope: normalizeTrainingPairEnvelope(opts.envelope),\n    };\n}\nfunction serializeTrainingPair(pair) {\n    try {\n        const line = JSON.stringify(pair);\n        return typeof line === 'string' ? line : null;\n    }\n    catch {\n        return null;\n    }\n}\nfunction trainingPairAppendCmd(repoAbs, slug, stage, line) {\n    const dirAbs = repoAbs + '/.dz/fa-training/' + slug;\n    const readmeAbs = repoAbs + '/.dz/fa-training/README.md';\n    const fileAbs = dirAbs + '/' + stage + '.jsonl';\n    return ('mkdir -p ' + shellQuote(dirAbs) +\n        ' && { [ -f ' + shellQuote(readmeAbs) + ' ] || printf \\'%s\\\\n\\' ' + shellQuote(TRAINPAIR_PRIVACY_NOTE) + ' > ' + shellQuote(readmeAbs) + '; }' +\n        \" && printf '%s\\\\n' \" + shellQuote(line) + ' >> ' + shellQuote(fileAbs));\n}\nconst TP_BACKFILL_OK = 'TP-BACKFILL-OK';\nconst TP_BACKFILL_SKIP = 'TP-BACKFILL-SKIP';\nconst TP_BACKFILL_DUP = 'TP-BACKFILL-DUP';\nfunction trainingPairBackfillCmd(repoAbs, slug, stage, lines, markKey) {\n    if (typeof repoAbs !== 'string' || repoAbs === '')\n        return null;\n    if (typeof slug !== 'string' || slug === '')\n        return null;\n    if (typeof stage !== 'string' || stage === '')\n        return null;\n    if (!Array.isArray(lines) || lines.length === 0 || !lines.every(line => typeof line === 'string' && line !== ''))\n        return null;\n    const dirAbs = repoAbs + '/.dz/fa-training/' + slug;\n    const readmeAbs = repoAbs + '/.dz/fa-training/README.md';\n    const fileAbs = dirAbs + '/' + stage + '.jsonl';\n    const markDir = repoAbs + '/.dz/fa-training/.backfill-marks';\n    const markStage = stage.replace(/\\.\\./g, '_').replace(/\\//g, '_');\n    const resolvedMarkKey = markKey === undefined ? fnv1a64(stage + '\\0' + lines.join('\\n')) : markKey;\n    const markPath = markDir + '/' + markStage + '-' + resolvedMarkKey;\n    const appends = lines\n        .map(line => \"printf '%s\\\\n' \" + shellQuote(line) + ' >> ' + shellQuote(fileAbs))\n        .join(' && ');\n    return ('mkdir -p ' + shellQuote(dirAbs) +\n        ' && { [ -f ' + shellQuote(readmeAbs) + ' ] || printf \\'%s\\\\n\\' ' + shellQuote(TRAINPAIR_PRIVACY_NOTE) + ' > ' + shellQuote(readmeAbs) + '; }' +\n        ' && mkdir -p ' + shellQuote(markDir) +\n        ' && if mkdir ' + shellQuote(markPath) + ' 2>/dev/null; then ' +\n        'if [ -f ' + shellQuote(fileAbs) + ' ]; then echo ' + shellQuote(TP_BACKFILL_SKIP) +\n        '; else { ' + appends + ' && echo ' + shellQuote(TP_BACKFILL_OK) + '; } || { rmdir ' + shellQuote(markPath) + ' 2>/dev/null; false; }; fi' +\n        '; else echo ' + shellQuote(TP_BACKFILL_DUP) + '; fi');\n}",
   },
   "model-resolver": {
     name: "model-resolver",
@@ -88,11 +88,11 @@ export const BLOBS: Record<string, LoopBlob> = {
   "codex-dispatch": {
     name: "codex-dispatch",
     version: "1.0.0",
-    contentHash: "f203268da376fa993ce61d38b8fc6a24db4ac1e3edb6b90662f86ae4351a30e7",
+    contentHash: "dc50f313088cfcea9ec3c95051f73ba6311a8d4d9f962d638901e6f0187bdd32",
     sourcePath: "packages/@dzhechkov/harness-core/src/feature-adr-routing.ts",
     requires: [],
     exports: ["codexDispatchMode","codexExecPlan","needsCodeLandedBarrier","decideCodeLanding"],
-    code: "const CODE_LANDING_PIPELINE_PREFIXES = ['features/', '.dz/', '.agentic-qe/', 'roam/'];\nfunction codeLandingEmptySignal(seconds) {\n    return 'changed=0 after ' + seconds + 's — genuinely not landed';\n}\nfunction needsCodeLandedBarrier(coderUsed) {\n    return coderUsed === 'codex' || coderUsed === 'codex-fallback';\n}\nfunction stripCodeLandingPath(path) {\n    let p = String(path || '').trim().replace(/\\\\/g, '/');\n    while (p.indexOf('./') === 0)\n        p = p.slice(2);\n    return p.replace(/\\/+/g, '/');\n}\nfunction classifyCodeLandingPathReject(path) {\n    const p = stripCodeLandingPath(path);\n    if (!p)\n        return 'empty-after-strip';\n    if (p[0] === '/')\n        return 'absolute-path';\n    if (p === '..' || p.indexOf('../') === 0 || p.indexOf('/../') >= 0 || p.endsWith('/..'))\n        return 'traversal';\n    if (/[\\0\\r\\n\\t \"'\\x60$;&|<>*?()[\\]{}!]/.test(p))\n        return 'not-a-path';\n    if (p.endsWith('/'))\n        return 'not-a-path';\n    for (const prefix of CODE_LANDING_PIPELINE_PREFIXES) {\n        const bare = prefix.slice(0, -1);\n        if (p === bare || p.indexOf(prefix) === 0)\n            return 'pipeline-artifact-path';\n    }\n    return null;\n}\nfunction normalizeCodeLandingPath(path) {\n    return classifyCodeLandingPathReject(path) === null ? stripCodeLandingPath(path) : '';\n}\nfunction filterPollableCodePaths(paths) {\n    const out = [];\n    const seen = new Set();\n    for (const path of paths || []) {\n        const normalized = normalizeCodeLandingPath(path);\n        if (!normalized || seen.has(normalized))\n            continue;\n        seen.add(normalized);\n        out.push(normalized);\n    }\n    return out;\n}\nfunction isNewlyChanged(path, baseline, currentHashes) {\n    if (!baseline || !baseline.ok)\n        return false;\n    let recorded = null;\n    for (const entry of baseline.entries) {\n        if (entry.path === path) {\n            recorded = entry.hash;\n            break;\n        }\n    }\n    if (recorded === null)\n        return true;\n    const now = currentHashes ? currentHashes[path] : undefined;\n    if (now === undefined)\n        return false;\n    return now !== recorded;\n}\nfunction decideCodeLanding(snapshot) {\n    const maxWaitMs = Math.max(0, snapshot.maxWaitMs);\n    const elapsedMs = Math.max(0, snapshot.elapsedMs);\n    const elapsedSeconds = Math.floor(elapsedMs / 1000);\n    const expectedPaths = filterPollableCodePaths(snapshot.expectedPaths);\n    const changedPaths = filterPollableCodePaths(snapshot.changedEntries.map(function (entry) { return entry.path; }));\n    if (expectedPaths.length === 0) {\n        return {\n            status: 'inconclusive',\n            reason: 'empty-plan-block',\n            changed: 0,\n            elapsedMs: elapsedMs,\n            elapsedSeconds: elapsedSeconds,\n            expectedPaths: expectedPaths,\n            matchedExpectedPaths: [],\n            changedPaths: changedPaths,\n            predicate: 'no-expected-targets',\n            qeSignalLine: 'CODEX-LANDING-SIGNAL status=inconclusive predicate=no-expected-targets reason=empty-plan-block',\n        };\n    }\n    const baseline = snapshot.baseline;\n    if (!baseline || !baseline.ok) {\n        const reason = baseline && baseline.reason ? baseline.reason : 'no-baseline';\n        return {\n            status: 'inconclusive',\n            reason: reason,\n            changed: 0,\n            elapsedMs: elapsedMs,\n            elapsedSeconds: elapsedSeconds,\n            expectedPaths: expectedPaths,\n            matchedExpectedPaths: [],\n            changedPaths: changedPaths,\n            predicate: 'newly-changed',\n            qeSignalLine: 'CODEX-LANDING-SIGNAL status=inconclusive predicate=newly-changed reason=' + reason,\n        };\n    }\n    const changed = new Set(changedPaths);\n    const matchedExpectedPaths = expectedPaths.filter(function (path) {\n        return changed.has(path) && isNewlyChanged(path, baseline, snapshot.currentHashes);\n    });\n    if (matchedExpectedPaths.length > 0) {\n        return {\n            status: 'landed',\n            changed: matchedExpectedPaths.length,\n            elapsedMs: elapsedMs,\n            elapsedSeconds: elapsedSeconds,\n            expectedPaths: expectedPaths,\n            matchedExpectedPaths: matchedExpectedPaths,\n            changedPaths: changedPaths,\n            predicate: 'newly-changed',\n            qeSignalLine: 'CODEX-LANDING-SIGNAL status=landed changed=' +\n                matchedExpectedPaths.length +\n                ' after=' +\n                elapsedSeconds +\n                's predicate=newly-changed matched=' +\n                matchedExpectedPaths.join(','),\n        };\n    }\n    if (elapsedMs < maxWaitMs) {\n        return {\n            status: 'not-yet-flushed',\n            changed: 0,\n            elapsedMs: elapsedMs,\n            elapsedSeconds: elapsedSeconds,\n            expectedPaths: expectedPaths,\n            matchedExpectedPaths: [],\n            changedPaths: changedPaths,\n            predicate: 'empty-before-timeout',\n            qeSignalLine: 'CODEX-LANDING-SIGNAL status=not-yet-flushed changed=0 after ' + elapsedSeconds + 's — not yet flushed',\n        };\n    }\n    const terminalSeconds = Math.ceil(maxWaitMs / 1000);\n    return {\n        status: 'genuinely-not-landed',\n        changed: 0,\n        elapsedMs: elapsedMs,\n        elapsedSeconds: terminalSeconds,\n        expectedPaths: expectedPaths,\n        matchedExpectedPaths: [],\n        changedPaths: changedPaths,\n        predicate: 'empty-after-timeout',\n        qeSignalLine: 'CODEX-LANDING-SIGNAL status=genuinely-not-landed ' + codeLandingEmptySignal(terminalSeconds),\n    };\n}\nconst WRAPPER_STAGES = { code: 1, plan: 1 };\nfunction codexDispatchMode(stage) {\n    return WRAPPER_STAGES[stage] ? 'wrapper' : 'exec';\n}\nconst CODEX_EXEC_PROMPT_CEILING_CHARS = 24000;\nfunction codexExecPlan(input) {\n    if (codexDispatchMode(input.stage) === 'wrapper') {\n        return { mode: 'wrapper', reason: 'deliverable is a file written out-of-band' };\n    }\n    if (!input.probedId) {\n        return { mode: 'claude', reason: 'no codex model id answered the probe' };\n    }\n    if (input.stage === 'qe' && input.scoped !== true) {\n        return {\n            mode: 'claude',\n            reason: 'qe prompt is not SCOPED — an unscoped codex exec QE buys reconnaissance, not review ' +\n                '(MEASURED 2026-08-21: 19038 chars, 280s, exit 124, no verdict)',\n        };\n    }\n    if (input.promptChars > CODEX_EXEC_PROMPT_CEILING_CHARS) {\n        return {\n            mode: 'claude',\n            reason: 'prompt is ' +\n                input.promptChars +\n                ' chars, over the ' +\n                CODEX_EXEC_PROMPT_CEILING_CHARS +\n                '-char codex exec ceiling (it would stall)',\n        };\n    }\n    return { mode: 'exec', reason: 'codex exec on ' + input.probedId };\n}\nconst SCOPED_QE_MAX_FILES = 3;\nconst SCOPED_QE_MAX_QUESTIONS = 4;\nconst SCOPED_QE_MAX_PATH_CHARS = 200;\nconst SCOPED_QE_MAX_QUESTION_CHARS = 200;\nfunction scopedQePrompt(input) {\n    const o = input || {};\n    const rawFiles = Array.isArray(o.files) ? o.files : [];\n    const files = [];\n    for (const f of rawFiles) {\n        const s = String(f === undefined || f === null ? '' : f).trim();\n        if (s === '')\n            continue;\n        if (files.indexOf(s) !== -1)\n            continue;\n        files.push(s.slice(0, SCOPED_QE_MAX_PATH_CHARS));\n        if (files.length >= SCOPED_QE_MAX_FILES)\n            break;\n    }\n    if (files.length === 0)\n        return '';\n    const rawQuestions = Array.isArray(o.questions) ? o.questions : [];\n    const questions = [];\n    for (const q of rawQuestions) {\n        const s = String(q === undefined || q === null ? '' : q).trim().replace(/\\s+/g, ' ');\n        if (s === '')\n            continue;\n        questions.push(s.slice(0, SCOPED_QE_MAX_QUESTION_CHARS));\n        if (questions.length >= SCOPED_QE_MAX_QUESTIONS)\n            break;\n    }\n    if (questions.length === 0) {\n        questions.push('Is this change correct, and does the test named by its ADR actually DISCRIMINATE (would it fail if the protection were deleted)?');\n    }\n    const slug = String(o.slug === undefined || o.slug === null ? '' : o.slug).trim().slice(0, 60);\n    let out = 'Read ONLY these files: ' + files.join(', ') + '. Do NOT open any other file and do NOT explore the repository.';\n    if (slug !== '')\n        out += ' They are the changed files of feature ' + slug + '.';\n    out += '\\n\\nAnswer these ' + questions.length + ' questions about them:\\n';\n    for (let i = 0; i < questions.length; i++)\n        out += i + 1 + '. ' + questions[i] + '\\n';\n    out += '\\nFinish with a single final line: Grade: <A|B|C|D>';\n    return out;\n}",
+    code: "const CODE_LANDING_PIPELINE_PREFIXES = ['features/', '.dz/', '.agentic-qe/', 'roam/'];\nfunction codeLandingEmptySignal(seconds) {\n    return 'changed=0 after ' + seconds + 's — genuinely not landed';\n}\nfunction needsCodeLandedBarrier(coderUsed) {\n    return coderUsed === 'codex' || coderUsed === 'codex-fallback';\n}\nfunction stripCodeLandingPath(path) {\n    let p = String(path || '').trim().replace(/\\\\/g, '/');\n    while (p.indexOf('./') === 0)\n        p = p.slice(2);\n    return p.replace(/\\/+/g, '/');\n}\nfunction classifyCodeLandingPathReject(path) {\n    const p = stripCodeLandingPath(path);\n    if (!p)\n        return 'empty-after-strip';\n    if (p[0] === '/')\n        return 'absolute-path';\n    if (p === '..' || p.indexOf('../') === 0 || p.indexOf('/../') >= 0 || p.endsWith('/..'))\n        return 'traversal';\n    if (/[\\0\\r\\n\\t \"'\\x60$;&|<>*?()[\\]{}!]/.test(p))\n        return 'not-a-path';\n    if (p.endsWith('/'))\n        return 'not-a-path';\n    for (const prefix of CODE_LANDING_PIPELINE_PREFIXES) {\n        const bare = prefix.slice(0, -1);\n        if (p === bare || p.indexOf(prefix) === 0)\n            return 'pipeline-artifact-path';\n    }\n    return null;\n}\nfunction normalizeCodeLandingPath(path) {\n    return classifyCodeLandingPathReject(path) === null ? stripCodeLandingPath(path) : '';\n}\nfunction filterPollableCodePaths(paths) {\n    const out = [];\n    const seen = new Set();\n    for (const path of paths || []) {\n        const normalized = normalizeCodeLandingPath(path);\n        if (!normalized || seen.has(normalized))\n            continue;\n        seen.add(normalized);\n        out.push(normalized);\n    }\n    return out;\n}\nfunction isNewlyChanged(path, baseline, currentHashes) {\n    if (!baseline || !baseline.ok)\n        return false;\n    let recorded = null;\n    for (const entry of baseline.entries) {\n        if (entry.path === path) {\n            recorded = entry.hash;\n            break;\n        }\n    }\n    if (recorded === null)\n        return true;\n    const now = currentHashes ? currentHashes[path] : undefined;\n    if (now === undefined)\n        return false;\n    return now !== recorded;\n}\nfunction decideCodeLanding(snapshot) {\n    const maxWaitMs = Math.max(0, snapshot.maxWaitMs);\n    const elapsedMs = Math.max(0, snapshot.elapsedMs);\n    const elapsedSeconds = Math.floor(elapsedMs / 1000);\n    const expectedPaths = filterPollableCodePaths(snapshot.expectedPaths);\n    const changedPaths = filterPollableCodePaths(snapshot.changedEntries.map(function (entry) { return entry.path; }));\n    if (expectedPaths.length === 0) {\n        return {\n            status: 'inconclusive',\n            reason: 'empty-plan-block',\n            changed: 0,\n            elapsedMs: elapsedMs,\n            elapsedSeconds: elapsedSeconds,\n            expectedPaths: expectedPaths,\n            matchedExpectedPaths: [],\n            changedPaths: changedPaths,\n            predicate: 'no-expected-targets',\n            qeSignalLine: 'CODEX-LANDING-SIGNAL status=inconclusive predicate=no-expected-targets reason=empty-plan-block',\n        };\n    }\n    const baseline = snapshot.baseline;\n    if (!baseline || !baseline.ok) {\n        const reason = baseline && baseline.reason ? baseline.reason : 'no-baseline';\n        return {\n            status: 'inconclusive',\n            reason: reason,\n            changed: 0,\n            elapsedMs: elapsedMs,\n            elapsedSeconds: elapsedSeconds,\n            expectedPaths: expectedPaths,\n            matchedExpectedPaths: [],\n            changedPaths: changedPaths,\n            predicate: 'newly-changed',\n            qeSignalLine: 'CODEX-LANDING-SIGNAL status=inconclusive predicate=newly-changed reason=' + reason,\n        };\n    }\n    const changed = new Set(changedPaths);\n    const matchedExpectedPaths = expectedPaths.filter(function (path) {\n        return changed.has(path) && isNewlyChanged(path, baseline, snapshot.currentHashes);\n    });\n    if (matchedExpectedPaths.length > 0) {\n        return {\n            status: 'landed',\n            changed: matchedExpectedPaths.length,\n            elapsedMs: elapsedMs,\n            elapsedSeconds: elapsedSeconds,\n            expectedPaths: expectedPaths,\n            matchedExpectedPaths: matchedExpectedPaths,\n            changedPaths: changedPaths,\n            predicate: 'newly-changed',\n            qeSignalLine: 'CODEX-LANDING-SIGNAL status=landed changed=' +\n                matchedExpectedPaths.length +\n                ' after=' +\n                elapsedSeconds +\n                's predicate=newly-changed matched=' +\n                matchedExpectedPaths.join(','),\n        };\n    }\n    if (elapsedMs < maxWaitMs) {\n        return {\n            status: 'not-yet-flushed',\n            changed: 0,\n            elapsedMs: elapsedMs,\n            elapsedSeconds: elapsedSeconds,\n            expectedPaths: expectedPaths,\n            matchedExpectedPaths: [],\n            changedPaths: changedPaths,\n            predicate: 'empty-before-timeout',\n            qeSignalLine: 'CODEX-LANDING-SIGNAL status=not-yet-flushed changed=0 after ' + elapsedSeconds + 's — not yet flushed',\n        };\n    }\n    const terminalSeconds = Math.ceil(maxWaitMs / 1000);\n    return {\n        status: 'genuinely-not-landed',\n        changed: 0,\n        elapsedMs: elapsedMs,\n        elapsedSeconds: terminalSeconds,\n        expectedPaths: expectedPaths,\n        matchedExpectedPaths: [],\n        changedPaths: changedPaths,\n        predicate: 'empty-after-timeout',\n        qeSignalLine: 'CODEX-LANDING-SIGNAL status=genuinely-not-landed ' + codeLandingEmptySignal(terminalSeconds),\n    };\n}\nconst WRAPPER_STAGES = { code: 1, plan: 1 };\nfunction codexDispatchMode(stage) {\n    return WRAPPER_STAGES[stage] ? 'wrapper' : 'exec';\n}\nconst CODEX_EXEC_PROMPT_CEILING_CHARS = 24000;\nfunction codexExecPlan(input) {\n    if (codexDispatchMode(input.stage) === 'wrapper') {\n        return { mode: 'wrapper', reason: 'deliverable is a file written out-of-band' };\n    }\n    if (!input.probedId) {\n        return { mode: 'claude', reason: 'no codex model id answered the probe' };\n    }\n    if (input.stage === 'qe' && input.scoped !== true) {\n        return {\n            mode: 'claude',\n            reason: 'qe prompt is not SCOPED — an unscoped codex exec QE buys reconnaissance, not review ' +\n                '(MEASURED 2026-08-21: 19038 chars, 280s, exit 124, no verdict)',\n        };\n    }\n    if (input.promptChars > CODEX_EXEC_PROMPT_CEILING_CHARS) {\n        return {\n            mode: 'claude',\n            reason: 'prompt is ' +\n                input.promptChars +\n                ' chars, over the ' +\n                CODEX_EXEC_PROMPT_CEILING_CHARS +\n                '-char codex exec ceiling (it would stall)',\n        };\n    }\n    return { mode: 'exec', reason: 'codex exec on ' + input.probedId };\n}\nconst SCOPED_QE_MAX_FILES = 3;\nconst SCOPED_QE_MAX_QUESTIONS = 4;\nconst SCOPED_QE_MAX_PATH_CHARS = 200;\nconst SCOPED_QE_MAX_QUESTION_CHARS = 200;\nfunction scopedQePrompt(input) {\n    const o = input || {};\n    const rawFiles = Array.isArray(o.files) ? o.files : [];\n    const files = [];\n    for (const f of rawFiles) {\n        const s = String(f === undefined || f === null ? '' : f).trim();\n        if (s === '')\n            continue;\n        if (files.indexOf(s) !== -1)\n            continue;\n        files.push(s.slice(0, SCOPED_QE_MAX_PATH_CHARS));\n        if (files.length >= SCOPED_QE_MAX_FILES)\n            break;\n    }\n    if (files.length === 0)\n        return '';\n    const rawQuestions = Array.isArray(o.questions) ? o.questions : [];\n    const questions = [];\n    for (const q of rawQuestions) {\n        const s = String(q === undefined || q === null ? '' : q).trim().replace(/\\s+/g, ' ');\n        if (s === '')\n            continue;\n        questions.push(s.slice(0, SCOPED_QE_MAX_QUESTION_CHARS));\n        if (questions.length >= SCOPED_QE_MAX_QUESTIONS)\n            break;\n    }\n    if (questions.length === 0) {\n        questions.push('Is this change correct, and does the test named by its ADR actually DISCRIMINATE (would it fail if the protection were deleted)?');\n    }\n    const slug = String(o.slug === undefined || o.slug === null ? '' : o.slug).trim().slice(0, 60);\n    let out = 'Read ONLY these files: ' + files.join(', ') + '. Do NOT open any other file and do NOT explore the repository.';\n    if (slug !== '')\n        out += ' They are the changed files of feature ' + slug + '.';\n    out += '\\n\\nAnswer these ' + questions.length + ' questions about them:\\n';\n    for (let i = 0; i < questions.length; i++)\n        out += i + 1 + '. ' + questions[i] + '\\n';\n    out += '\\nFinish with two final lines: Grade: <A|B|C|D> and QE-VERDICT: <same>';\n    return out;\n}",
   },
   "challenge-panel": {
     name: "challenge-panel",

package/src/mutation-gate.ts

@@ -72,6 +72,322 @@ export function buildMutationTestCommand(
   };
 }
 
+/**
+ * mutation-gate-inject-tokens FR-1..FR-3 (D1-D4b, fix-round 1 F1-F3): inject `--maxWorkers=<n>`
+ * into EVERY `vitest run` segment of a (possibly compound) test command, token-scoped — not the
+ * whole-command substring append that used to (a) cap only the FIRST `vitest run` in `a && b` (D1),
+ * (b) let an existing-flag SUBSTRING check be fooled by an unrelated `--maxWorkers` living inside a
+ * quoted argument or another command's own flags (D2, D3), and (c) stack a second `--maxWorkers` on
+ * top of a user's own `--max-workers=<n>` (D4) instead of deferring to it.
+ *
+ * Segmentation splits on `&&`/`||`/`;`/`|` that are OUTSIDE single/double quotes, POSIX-escape aware
+ * (fix-round 1, F1 — the round-1 Codex review's HIGH finding): outside single quotes a `\` makes the
+ * NEXT character literal (so `\"` cannot open/close a double-quoted span, and `\&` cannot be mistaken
+ * for an operator); inside double quotes a `\` escapes at least `\"` and `\\` (so `-t "a \" && b"` stays
+ * ONE segment — the escaped quote does not close the string, so the `&&` inside it is never treated as
+ * a real terminator); inside single quotes nothing is special, matching POSIX. This is the fix for the
+ * exploit the verdict named: `npx vitest run -t "a \" && b" --maxWorkers=1` used to be mis-split into
+ * two pseudo-segments (the existing flag ending up in the "wrong" one), stacking a second flag.
+ *
+ * Within each segment, `vitest run` is recognised only in COMMAND POSITION (fix-round 1, F2 — the
+ * round-1 Codex review's other HIGH finding): the first word token, after skipping any leading bare
+ * `NAME=value` assignments and at most one runner-prefix chain (`npx`, `pnpm exec`, `pnpm dlx`, `yarn`,
+ * `bunx`, or `env`/`cross-env` followed by more assignments), must have a BASENAME of `vitest`,
+ * `vitest.cmd`, `vitest.mjs` or `vitest.js` (a full path like `node_modules/.bin/vitest` counts — only
+ * the basename is compared), immediately followed by the literal token `run`. `echo vitest run` and
+ * `node wrapper.js vitest run` are therefore NOT vitest commands (`echo`/`node` is not an allowed
+ * prefix and is not itself a vitest basename) — the old scan matched `vitest`+`run` ANYWHERE in the
+ * segment and would have mutated both.
+ *
+ * An existing ceiling flag is detected per DECODED token (fix-round 1, F3 — MEDIUM finding: the old
+ * substring/regex checks compared RAW tokens, so a quoted `"--maxWorkers=1"` was invisible, and the
+ * regex additionally accepted unclaimed spellings like `--maxworkers`/`--max-Workers`) via
+ * `/^--(?:maxWorkers|max-workers)(?:=.*)?$/` — matches exactly `--maxWorkers=1`, `--maxWorkers 1` (the
+ * bare flag token, value in the next token), `--max-workers=1`, `--max-workers 1`; does NOT match
+ * `--maxWorkersFoo=9` (D3) or `--maxworkers`/`--max-Workers` (not the two claimed spellings). The scan
+ * stops at a standalone `--` token (F3): everything after it is positional per POSIX, so a `--maxWorkers`
+ * living there is a positional argument to vitest's OWN test-name filter, not a flag naming the ceiling.
+ * When a real flag is present, the segment is left untouched (the user's explicit choice wins, D4);
+ * when absent, ` --maxWorkers=<n>` is inserted immediately after the `run` token's RAW source span
+ * (never the decoded one — insertion always preserves the original quoting of everything else).
+ */
+export interface InjectVitestWorkerCeilingResult {
+  /** the command with the ceiling injected into every eligible vitest segment. */
+  readonly cmd: string;
+  /** how many segments were recognised as `vitest run` (0 for a non-vitest command). */
+  readonly vitestSegments: number;
+  /** how many of those segments actually got `--maxWorkers=<n>` inserted (excludes ones that already named it). */
+  readonly injected: number;
+  /** segments where `vitest run` was found only by the LOOSE token-pair fallback (command position
+   * unrecognised) — the CLI reports these so an odd wrapper shape is visible, not silent. */
+  readonly looseSegments: number;
+}
+
+interface RawSegment {
+  readonly text: string;
+  /** the operator that ended this segment (`&&`/`||`/`;`/`|`), or `''` for the last segment. */
+  readonly terminator: string;
+}
+
+/**
+ * Split on unquoted `&&`/`||`/`;`/`|`, preserving each segment's own text (incl. surrounding
+ * whitespace). POSIX-escape aware (fix-round 1, F1): outside quotes `\` makes the next character
+ * literal (so it can neither open a quote nor start an operator); inside double quotes `\"` and `\\`
+ * are recognised escapes that do NOT close the string; inside single quotes nothing is escaped.
+ */
+function splitUnquotedSegments(cmd: string): RawSegment[] {
+  const segments: RawSegment[] = [];
+  let segStart = 0;
+  let inSingle = false;
+  let inDouble = false;
+  let i = 0;
+  while (i < cmd.length) {
+    const ch = cmd[i];
+    if (inSingle) {
+      if (ch === "'") inSingle = false;
+      i += 1;
+      continue;
+    }
+    if (inDouble) {
+      if (ch === '"') { inDouble = false; i += 1; continue; }
+      if (ch === '\\') {
+        const next = cmd[i + 1];
+        // at least \" and \\ (F1's floor) — an escaped quote must not close the double-quoted span.
+        if (next === '"' || next === '\\') { i += 2; continue; }
+        i += 1;
+        continue;
+      }
+      i += 1;
+      continue;
+    }
+    if (ch === "'") {
+      inSingle = true;
+      i += 1;
+      continue;
+    }
+    if (ch === '"') {
+      inDouble = true;
+      i += 1;
+      continue;
+    }
+    if (ch === '\\') {
+      // Outside any quote, POSIX makes the character AFTER `\` literal — skip both so it can never
+      // be mis-read as a quote-open or an operator boundary.
+      i += cmd[i + 1] !== undefined ? 2 : 1;
+      continue;
+    }
+    const terminatorMatch = /^(&&|\|\||;|\|)/.exec(cmd.slice(i));
+    if (terminatorMatch) {
+      segments.push({ text: cmd.slice(segStart, i), terminator: terminatorMatch[0] });
+      i += terminatorMatch[0].length;
+      segStart = i;
+      continue;
+    }
+    i += 1;
+  }
+  segments.push({ text: cmd.slice(segStart), terminator: '' });
+  return segments;
+}
+
+interface SegmentToken {
+  /** decoded value — quotes stripped, at-least-\"/\\ escapes resolved (F1, F3: comparisons use this). */
+  readonly value: string;
+  /** RAW source end offset within the segment text — insertion always splices at a raw offset. */
+  readonly end: number;
+}
+
+function isWhitespaceChar(ch: string | undefined): boolean {
+  return ch !== undefined && /\s/u.test(ch);
+}
+
+/**
+ * Whitespace-delimited tokens with POSIX-ish quote/escape DECODING (fix-round 1, F1/F3): a quoted
+ * span (single or double) still forms one token with its surrounding unquoted parts (POSIX word
+ * concatenation — `'it''s'` decodes to the single token `its`), but `token.value` now holds the
+ * DECODED text (quotes removed, `\"`/`\\` resolved inside double quotes, `\<char>` resolved to
+ * `<char>` outside any quote, single-quoted content kept verbatim) while `token.end` keeps the RAW
+ * source offset so `injectIntoSegment` can still splice into the ORIGINAL text unchanged elsewhere.
+ */
+function tokenizeSegment(text: string): SegmentToken[] {
+  const tokens: SegmentToken[] = [];
+  let i = 0;
+  while (i < text.length) {
+    while (i < text.length && isWhitespaceChar(text[i])) i += 1;
+    if (i >= text.length) break;
+    const start = i;
+    let value = '';
+    let inSingle = false;
+    let inDouble = false;
+    while (i < text.length) {
+      const ch = text[i];
+      if (ch === undefined) break;
+      if (inSingle) {
+        if (ch === "'") { inSingle = false; i += 1; continue; }
+        value += ch;
+        i += 1;
+        continue;
+      }
+      if (inDouble) {
+        if (ch === '"') { inDouble = false; i += 1; continue; }
+        if (ch === '\\') {
+          const next = text[i + 1];
+          if (next === '"' || next === '\\') { value += next; i += 2; continue; }
+          // not one of the two claimed double-quote escapes: the backslash is literal (F1's floor).
+          value += ch;
+          i += 1;
+          continue;
+        }
+        value += ch;
+        i += 1;
+        continue;
+      }
+      if (ch === "'") { inSingle = true; i += 1; continue; }
+      if (ch === '"') { inDouble = true; i += 1; continue; }
+      if (ch === '\\') {
+        const next = text[i + 1];
+        // POSIX line continuation (lead delta after Codex r2, MEDIUM): `\<newline>` (and `\<CR><LF>`)
+        // is REMOVED by the shell, never a literal — a token must not swallow a newline as its value.
+        if (next === '\n' || (next === '\r' && text[i + 2] === '\n')) {
+          i += next === '\n' ? 2 : 3;
+          // an EMPTY token so far means the continuation sat between words: skip the whitespace
+          // that follows so the next word starts a real token instead of an empty one.
+          if (value.length === 0) { while (i < text.length && isWhitespaceChar(text[i]!)) i += 1; }
+          continue;
+        }
+        if (next !== undefined) { value += next; i += 2; continue; }
+        value += ch; // trailing lone backslash: nothing to escape, keep it literal.
+        i += 1;
+        continue;
+      }
+      if (isWhitespaceChar(ch)) break;
+      value += ch;
+      i += 1;
+    }
+    tokens.push({ value, end: i });
+  }
+  return tokens;
+}
+
+/** strictly `--maxWorkers` or `--max-workers`, with or without `=…` (fix-round 1, F3: no other spelling). */
+const MAX_WORKERS_TOKEN = /^--(?:maxWorkers|max-workers)(?:=.*)?$/u;
+
+/** basenames vitest's own bin may resolve to; a leading path (POSIX or Windows-style) is stripped. */
+const VITEST_BASENAMES = new Set(['vitest', 'vitest.cmd', 'vitest.mjs', 'vitest.js']);
+
+/** allowed single-token runner prefixes that may precede the vitest executable. */
+const SINGLE_TOKEN_PREFIXES = new Set(['npx', 'yarn', 'bunx']);
+
+/** `env`/`cross-env` may be followed by more `NAME=value` assignments before the real command. */
+const ENV_STYLE_PREFIXES = new Set(['env', 'cross-env']);
+
+/** `NAME=value` — a bare shell-style assignment token, decoded value. */
+const ASSIGNMENT_TOKEN = /^[A-Za-z_][A-Za-z0-9_]*=/u;
+
+function basenameOf(path: string): string {
+  const normalised = path.replace(/\\/g, '/');
+  const idx = normalised.lastIndexOf('/');
+  return idx === -1 ? normalised : normalised.slice(idx + 1);
+}
+
+/**
+ * Find `vitest run` in COMMAND POSITION (fix-round 1, F2): the first word token after (a) any
+ * leading bare `NAME=value` assignments, then (b) AT MOST ONE recognised runner-prefix chain
+ * (`npx` / `yarn` / `bunx` — one token; `pnpm exec` / `pnpm dlx` — two tokens; `env` / `cross-env` —
+ * one token, itself followed by zero or more further assignments) must have a basename in
+ * `VITEST_BASENAMES`, and the token right after it must be the literal `run`. Returns the INDEX of
+ * that `run` token, or null when this segment is not a vitest-run command. `echo vitest run` and
+ * `node wrapper.js vitest run` correctly return null: `echo`/`node` are neither an allowed prefix
+ * nor a vitest basename, so the scan never advances past them.
+ */
+function findVitestRunCommandIndex(tokens: readonly SegmentToken[]): number | null {
+  let idx = 0;
+  // Lead delta after Codex r2 (HIGH): the prefix chain is ITERATIVE and OPTION-TOLERANT — a runner
+  // prefix may carry its own dash-options (`npx --yes`, `pnpm exec --silent`) and prefixes may chain
+  // (`env CI=1 npx vitest run`). The previous single-step grammar returned null for both and left
+  // such commands UNCAPPED — a regression against the substring era this feature replaced.
+  for (;;) {
+    while (idx < tokens.length && ASSIGNMENT_TOKEN.test(tokens[idx]!.value)) idx += 1;
+    const head = tokens[idx]?.value;
+    if (head === undefined) break;
+    if (SINGLE_TOKEN_PREFIXES.has(head)) {
+      idx += 1;
+    } else if (head === 'pnpm' && (tokens[idx + 1]?.value === 'exec' || tokens[idx + 1]?.value === 'dlx')) {
+      idx += 2;
+    } else if (ENV_STYLE_PREFIXES.has(head)) {
+      idx += 1;
+      continue; // assignments after env/cross-env are consumed by the loop head
+    } else {
+      break;
+    }
+    while (idx < tokens.length && tokens[idx]!.value.startsWith('-')) idx += 1; // the prefix's own options
+  }
+  const exe = tokens[idx];
+  const runToken = tokens[idx + 1];
+  if (exe === undefined || runToken === undefined) return null;
+  if (!VITEST_BASENAMES.has(basenameOf(exe.value))) return null;
+  if (runToken.value !== 'run') return null;
+  return idx + 1;
+}
+
+/**
+ * True when a `--maxWorkers`/`--max-workers` token names the ceiling ANYWHERE before a standalone
+ * `--` (fix-round 1, F3): a `--` marks POSIX end-of-options, so anything naming the flag AFTER it is
+ * a positional argument (e.g. vitest's own test-name filter), never the ceiling flag itself.
+ */
+function hasMaxWorkersFlag(tokens: readonly SegmentToken[]): boolean {
+  for (const token of tokens) {
+    if (token.value === '--') return false;
+    if (MAX_WORKERS_TOKEN.test(token.value)) return true;
+  }
+  return false;
+}
+
+/**
+ * LOOSE fallback (lead delta after Codex r2, HIGH): when the strict command-position grammar finds
+ * nothing, look for a `<vitest-basename> run` token pair ANYWHERE in the segment. The ceiling exists
+ * to keep a full-suite run from taking the machine down (0bb74d66); an unrecognised wrapper shape
+ * must degrade to the substring-era behaviour (capped, reported as `loose`), never to an uncapped
+ * run. The price — `echo vitest run` also gets the flag — is named in the result so the CLI can say
+ * it out loud, and is a harmless extra argument to a non-vitest command.
+ */
+function findVitestRunLooseIndex(tokens: readonly SegmentToken[]): number | null {
+  for (let i = 0; i + 1 < tokens.length; i += 1) {
+    if (VITEST_BASENAMES.has(basenameOf(tokens[i]!.value)) && tokens[i + 1]!.value === 'run') return i + 1;
+  }
+  return null;
+}
+
+function injectIntoSegment(text: string, maxWorkers: number): { readonly text: string; readonly isVitest: boolean; readonly injected: boolean; readonly loose: boolean } {
+  const tokens = tokenizeSegment(text);
+  const strictIdx = findVitestRunCommandIndex(tokens);
+  const looseIdx = strictIdx === null ? findVitestRunLooseIndex(tokens) : null;
+  const runTokenIdx = strictIdx ?? looseIdx;
+  const loose = strictIdx === null && looseIdx !== null;
+  if (runTokenIdx === null) return { text, isVitest: false, injected: false, loose: false };
+  if (hasMaxWorkersFlag(tokens)) return { text, isVitest: true, injected: false, loose };
+  const runToken = tokens[runTokenIdx];
+  // unreachable defensively: runTokenIdx was derived from a valid index into `tokens` above.
+  if (runToken === undefined) return { text, isVitest: true, injected: false, loose };
+  const insertAt = runToken.end;
+  const injectedText = `${text.slice(0, insertAt)} --maxWorkers=${maxWorkers}${text.slice(insertAt)}`;
+  return { text: injectedText, isVitest: true, injected: true, loose };
+}
+
+export function injectVitestWorkerCeiling(testCmd: string, maxWorkers: number): InjectVitestWorkerCeilingResult {
+  const segments = splitUnquotedSegments(testCmd);
+  let vitestSegments = 0;
+  let injected = 0;
+  let looseSegments = 0;
+  const rebuilt = segments.map((segment) => {
+    const result = injectIntoSegment(segment.text, maxWorkers);
+    if (result.isVitest) vitestSegments += 1;
+    if (result.injected) injected += 1;
+    if (result.loose) looseSegments += 1;
+    return result.text + segment.terminator;
+  }).join('');
+  return { cmd: rebuilt, vitestSegments, injected, looseSegments };
+}
+
 export interface MutationRegistry {
   /** optional suite command override for the whole registry (default `npm test`). */
   readonly testCommand?: string;

package/src/operations.ts

@@ -1893,8 +1893,19 @@ export function probeHookLiveness(
   command: string,
   payload: string,
   opts: { readonly cwd?: string; readonly env?: Readonly<Record<string, string>>; readonly timeoutMs?: number } = {},
-): { readonly status: number | null; readonly stdout: string; readonly stderr: string } {
+): { readonly status: number | null; readonly stdout: string; readonly stderr: string; readonly groupKillAttempted: boolean } {
   const shell = process.env['SHELL'] ?? '/bin/sh';
+  // Fix round 1 (apply-leg-never-silent, HIGH-1): a caller previously had to INFER "was the group
+  // kill sent" by reading this function's source — a regression removing or bypassing the
+  // `process.kill(-pid, ...)` call below would silently invalidate that inference. `groupKillAttempted`
+  // is the OBSERVABLE fact instead: true exactly when this call reached the point of attempting the
+  // kill syscall (`res.pid` was a real positive pid), false when it never got that far (e.g. the
+  // spawn itself never produced a pid). It does NOT claim the signal found a live recipient — ESRCH
+  // ("group already gone", the common successful-exit case) still counts as "sent": the syscall was
+  // issued, its target simply no longer existed. That is a SEPARATE fact from whether the grandchild
+  // is actually dead by the time a caller checks — see `probeApplyLeg`'s AM-5 test for the
+  // kill-sent-vs-death-observed split this field exists to make possible.
+  let groupKillAttempted = false;
   try {
     // AM-5 (fix round 1, apply-leg-never-silent): `detached: true` puts the shell in its OWN
     // process GROUP (pgid === its own pid) instead of sharing the caller's — `spawnSync`'s own
@@ -1925,11 +1936,15 @@ export function probeHookLiveness(
         process.kill(-res.pid, 'SIGKILL');
       } catch {
         /* group already gone */
+      } finally {
+        // set right after the process.kill(-pid, 'SIGKILL') attempt (HIGH-1 lead decision): reached
+        // regardless of ESRCH, because ESRCH means "no recipient", not "syscall not issued".
+        groupKillAttempted = true;
       }
     }
-    return { status: res.status, stdout: res.stdout ?? '', stderr: res.stderr ?? '' };
+    return { status: res.status, stdout: res.stdout ?? '', stderr: res.stderr ?? '', groupKillAttempted };
   } catch (err) {
-    return { status: null, stdout: '', stderr: String((err as Error)?.message ?? err) };
+    return { status: null, stdout: '', stderr: String((err as Error)?.message ?? err), groupKillAttempted };
   }
 }