@dzhechkov/harness-core 0.8.37 → 0.8.38

package/sbom.json

@@ -25,7 +25,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "8681fe97661ea41329df7e8d544edb9a9eb71bd563888dfcdf56c593e8f8de0f"
+          "content": "e245c714c75f1e53186aea9bb38c0767c72a1911c4abc3066f270d206ae410b7"
         }
       ]
     },
@@ -1715,7 +1715,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2bc158ecece08d9d3d829adadcfc82f309dd7921633cee96d808d9d3d24ac09b"
+          "content": "d8c21e3cc28e57c56ee22b4eee3dff98c0fbf0b6df93f5b8acbacf1c787b16f1"
         }
       ]
     },
@@ -1725,7 +1725,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "87284ca644e3b95d796ffba24095b2b70572e160246841f00b65c9ce2904307b"
+          "content": "b8489d2f519a9090ad9053b9613952a733e258b6b58509a4a213534d8d987b4d"
         }
       ]
     },
@@ -1735,7 +1735,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "61916c0c548741c299867992856f74289575f730c2bf541b24cac95d503c1135"
+          "content": "046fa4d0e04a56b3b8dd6bba542de25a99b000f03f27e9d192046043702e1213"
         }
       ]
     },
@@ -1745,7 +1745,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "eb25f9acdb75bfd6414d78c5d3d4eaf9c7ee55fdc473572e555f55d0ede1a269"
+          "content": "36cb70ec0ea7b130e420c3c1baea0543958b5fbeb9d75e6f8064eedd7df89a25"
         }
       ]
     },
@@ -2445,7 +2445,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "08e2f3281134246237badf405152df859b8c2b3c798bbf96e6a2cdea4e697551"
+          "content": "fc45729c438028377eb646c9c66eaa5bee82ed37aa08bc2d14db64e3eb3cdc29"
         }
       ]
     },
@@ -2455,7 +2455,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5beac314ff52187934da91d8243e417156cb73f214c4bd6485ef1f7c4948f138"
+          "content": "5a3de377ea062c34da34b2ed315997fdaf11a4ea90ce70c2f867294e87fb53bc"
         }
       ]
     },
@@ -2465,7 +2465,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0952a178e1942572adfde30c7449f8f11c6d57265fac93607cacb1cb9829d3f5"
+          "content": "d5db78aadc6c4ae5482b44513e873b36347b1a5b9888c3bb18be9e49dff6b34b"
         }
       ]
     },
@@ -2795,7 +2795,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5f0446cc54af8c90e525bad6189f93873ad1592c1d1824c18a2f0991dd5959b9"
+          "content": "5323d4f19ccbcf5929a61a4849b17e0cb39c248205a14967610dda85635c6ddb"
         }
       ]
     },
@@ -2805,7 +2805,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "62df6d6a2f6f861b8485e9890c272a335cc9d697bee4064faa83de36fe3d7413"
+          "content": "9371106d16ee809aa6bc19410087491840654c1f268f20928b8ccc148a52e7fd"
         }
       ]
     },
@@ -2815,7 +2815,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "3d61d50137956af1322911629db07737f857d81fde22cf1594dfc7aed5b03341"
+          "content": "8c1913c94939655785cf62534d8c61bbb8a0e85d8e77f432de4ecabb73ac6d73"
         }
       ]
     },
@@ -2825,7 +2825,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ffe8d30bc1182349088f2712a080cfb32240111a874c3fd3217a0e123953f2d7"
+          "content": "7a46163decf648a7214ece84dadad0bef80fbc47d0f9f123f6cab475da40e1ba"
         }
       ]
     },
@@ -4515,7 +4515,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "7bf6a9f4bbd79eef7858d3a5e073fbb897d7af01accf9257894635664432f449"
+          "content": "f1964fe74508371aa7abc3ac067310e141548d3a5f99e1ebfecf8403d5e68daa"
         }
       ]
     },
@@ -4525,7 +4525,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "73072e6cd684b6bb3638881f3719f1dd39b8d1b02c9ea1f2a1efb8b3ebfa6a83"
+          "content": "1b323500c270897632a1322a07bf5955eaf08e67421096f573913ac3c6723322"
         }
       ]
     },
@@ -4545,7 +4545,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f5bf74e490c5a0f0b49042fa89f2c9156dae1ca60fdef822a14be21f8fc378a8"
+          "content": "1f3d05d697dc24e811ea5ef194439c4b25d992dbf01b8600d266091ea5a52aeb"
         }
       ]
     },
@@ -5229,6 +5229,46 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "dist/review-cost.d.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "0488bbb484a390759262da1244870b2f3df10abe96169d7604e8585a618d7fd2"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/review-cost.d.ts.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "0a533e5d143a0e0ab3cc84c6218dfed3c8dfe3c86f3af25835f4d700b0fb1527"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/review-cost.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "5daa7df5632004fc6ccf4fd30425787c7ea7780ab1f2af183eafe4055d87fa36"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/review-cost.js.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "3c8abfadf727f2b4dfea0cdc58af3a7c73765a0636417e061fb1e010419fec6c"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "dist/risk-scoring.d.ts",
@@ -5315,7 +5355,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c952216bc03cd2f8ad1d2b17ba5402b70bc8f1ec9d9557b25b3b064192ff56be"
+          "content": "3f789196d023177040a7d0c4e2690186855714a8139b6d995b85022588bc6cbd"
         }
       ]
     },
@@ -5325,7 +5365,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "dee616e546cfa366853c82707046b4cf2463f522632c121e584c1231efd299ef"
+          "content": "93610d2de68db800c91478697a10864e3dd438d25b7b45aeeae62a3d5a5438f0"
         }
       ]
     },
@@ -5335,7 +5375,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6f746137311636982727ba5da3ae62f625cc19b2b78f1ebaa056017dbf91d6c8"
+          "content": "c731c0fb46ba714cba4dc7b8129245de73c81d21a0e585053d16199ffd7b3011"
         }
       ]
     },
@@ -5345,7 +5385,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "1d5c036f42c6d213b11a7441f3ab52186cd8e94a9aed9f5ce2b3ce2548c576ba"
+          "content": "d4ba5ce8b11a36075d103d3be3d0785bd521ffc0fd5f0bfc1a0a9138410e730c"
         }
       ]
     },
@@ -5435,7 +5475,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ea6253a14d0eeb65ab671a989f44876088752a64e86fb7a2c6631f43aba552f4"
+          "content": "4c139f0e13f547a8e03bcfbfb7530c9f0862c2b6d80d7d1f9d9fcd4dd4512c96"
         }
       ]
     },
@@ -5445,7 +5485,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "72922e63f075128f46650dd7484db67571777dfc3a388e39efe2e7dad7ac007c"
+          "content": "7085330bdcd668ab0a8e881ecb4f0737fe1e6cb360fa4fc58093e5e5b02ad6c4"
         }
       ]
     },
@@ -5455,7 +5495,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c4931905e808eb7cab306b5e3d350bd255b9a0633d6de2c8827e511b3cc91a29"
+          "content": "edc206a0b721e8248945f24c2654efd6f425fa8daa4a3d8760575569117ec1ee"
         }
       ]
     },
@@ -5465,7 +5505,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b395c6d2d0f423a361ef0539a66ae84268537461877506739d9e3f58a6739a23"
+          "content": "ccfa3e492154b92519af8cf40ab9af7f4710135020776775b8cdb3be208626a2"
         }
       ]
     },
@@ -7079,7 +7119,7 @@
         },
         {
           "name": "dz:canonical-json-sha256-v2",
-          "value": "9307673a743a014bc30e5897796a0dff724152f9325946aee2b4d35c05f91820"
+          "value": "e9095406e69e4c15757b0489f742834880a940176c106aaeb7e9bab561dc87c0"
         }
       ]
     },
@@ -7509,7 +7549,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e1e447ab6cda0afb4518c73e482dda7bb27a6fe676e65999b8077da3b8c0a8b3"
+          "content": "9236bcc66ddfa060fae3a7dfee4324f5a9a7c687aca109f6578d2d01bf34acb4"
         }
       ]
     },
@@ -7699,7 +7739,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "89458ef7d48bfca28cab0cb47da3c97d65c3730b92005cae742f4414c27f84dc"
+          "content": "8811f5256553c85d4f9fd5c817621467e3b492d8b3e1640e74c4b23b07320a16"
         }
       ]
     },
@@ -7789,7 +7829,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "94826e7248002d6b3ae5cf1909018d0ee17a0eecb22c310dc0d94589ab74c5ad"
+          "content": "54ec8ac2203964a7a409bf2987557c784137d9b0c9caf213db994b1b4784986a"
         }
       ]
     },
@@ -8229,7 +8269,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b8f881ddfa3c8c597b6c09d8e70f6548eb2318adf74b80d4942e6e665bb936cf"
+          "content": "dc21e4af7023dbc15c19e951ed8b99228bcba8916cfe713cadc9694a10a8308b"
         }
       ]
     },
@@ -8393,6 +8433,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "src/review-cost.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "e4442e3732c494f700f3e651a6416c3c47136c3c1cb9c9ad86237326f5ae7894"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "src/risk-scoring.ts",
@@ -8419,7 +8469,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ea21e8206f9a571a36a90f3219459466b94d0c5c3ea9c600979bcd07b015ed2d"
+          "content": "33f933caad731cb20c95d04075214a308b024399b36259f6fb1bd2ce742ffef3"
         }
       ]
     },
@@ -8449,7 +8499,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "73fe9ae5a262a30e2351df434e8e586090b660e4f9968e094c42f79ec169471a"
+          "content": "f18c291059dcf8d8e103df61ef9a175b85763ec946a0fb9a26ed15613dc3f568"
         }
       ]
     },

package/src/cross-family-control.ts

@@ -579,10 +579,47 @@ export function buildControlRow(input: BuildControlRowInput): BuildControlRowRes
   };
 }
 
+/**
+ * experiment-instrument FR-4/A6 (ADR-001): a `stage:'control'` row `dz control-review` writes when
+ * the run REFUSED before producing a diff — the failure-leaves-a-row half of the ADR's safety
+ * property. Distinguished from {@link ControlLedgerRow} by `outcome:'refused'`, which a successful
+ * row never carries; the two schemas share nothing else structurally on purpose — a refused run has
+ * no diff, no tree hashes, no grades to validate.
+ */
+export interface ControlRefusedRow {
+  readonly slug: string;
+  readonly stage: 'control';
+  readonly outcome: 'refused';
+  /** Which half was responsible: the claude review, the codex review, or neither (a setup/tree/
+   *  aggregation failure that belongs to neither half specifically). */
+  readonly half: 'claude' | 'codex' | 'setup';
+  readonly reason: string;
+  readonly runId: string;
+  /** Known only when the coder family was determined before the refusal — absent for the earliest
+   *  failures (the claude half itself failing before it can report which family it reviewed). When
+   *  present, the SAME `bucket(coderFamily, reviewerOfInterest)` a successful control row uses. */
+  readonly coderFamily?: 'codex' | 'claude';
+  readonly minutes: number | null;
+}
+
+function isValidControlRefusedRow(obj: Record<string, unknown>): boolean {
+  if (typeof obj['slug'] !== 'string' || obj['slug'].trim() === '') return false;
+  if (typeof obj['runId'] !== 'string' || obj['runId'].trim() === '') return false;
+  if (obj['half'] !== 'claude' && obj['half'] !== 'codex' && obj['half'] !== 'setup') return false;
+  if (typeof obj['reason'] !== 'string' || obj['reason'].trim() === '') return false;
+  if (!(obj['minutes'] === null || (typeof obj['minutes'] === 'number' && Number.isFinite(obj['minutes'])))) return false;
+  if (obj['coderFamily'] !== undefined && obj['coderFamily'] !== 'codex' && obj['coderFamily'] !== 'claude') return false;
+  return true;
+}
+
 /* ── D5: reading the ledger back (FR-7; A8) ──────────────────────────────────────────────────── */
 
 export interface ParsedControlRows {
   readonly rows: readonly ControlLedgerRow[];
+  /** experiment-instrument FR-4/A6: `stage:'control'` rows with `outcome:'refused'` — a run that
+   *  never produced a diff. Schema-validated (`isValidControlRefusedRow`) the same way `rows` is;
+   *  one that fails validation is `unreadable`, same as a malformed successful row. */
+  readonly refusedRows: readonly ControlRefusedRow[];
   readonly roundRows: readonly Record<string, unknown>[];
   readonly fullRows: readonly Record<string, unknown>[];
   /** A8: a line that is not parseable JSON, or parses to something that is not a plain object, or
@@ -678,6 +715,7 @@ function isValidControlRow(obj: Record<string, unknown>): boolean {
  */
 export function parseControlRows(lines: readonly string[]): ParsedControlRows {
   const rows: ControlLedgerRow[] = [];
+  const refusedRows: ControlRefusedRow[] = [];
   const roundRows: Record<string, unknown>[] = [];
   const fullRows: Record<string, unknown>[] = [];
   let unreadable = 0;
@@ -698,6 +736,17 @@ export function parseControlRows(lines: readonly string[]): ParsedControlRows {
     const obj = parsed as Record<string, unknown>;
     const stage = obj['stage'];
     if (stage === 'control') {
+      // experiment-instrument FR-4/A6: `outcome:'refused'` is a DIFFERENT schema from a successful
+      // control row — checked FIRST, so a refused row is never mistaken for a malformed successful
+      // one (which would count it `unreadable`, losing exactly the receipt this feature adds).
+      if (obj['outcome'] === 'refused') {
+        if (!isValidControlRefusedRow(obj)) {
+          unreadable++;
+          continue;
+        }
+        refusedRows.push(obj as unknown as ControlRefusedRow);
+        continue;
+      }
       if (!isValidControlRow(obj)) {
         unreadable++;
         continue;
@@ -711,7 +760,7 @@ export function parseControlRows(lines: readonly string[]): ParsedControlRows {
     // Every other stage (plan/impl/fix/loop-run/round-exec/…) and the header/comment row (no
     // string `stage`) are readable, just not addressed by this module.
   }
-  return { rows, roundRows, fullRows, unreadable };
+  return { rows, refusedRows, roundRows, fullRows, unreadable };
 }
 
 /* ── D6: the per-family-pair aggregate (FR-7; A6, A8) ────────────────────────────────────────── */
@@ -769,6 +818,10 @@ export interface FamilyPairAggregate {
   readonly refutedShare: { readonly n: number; readonly value: number | 'unknown' };
   readonly costPerConfirmed: { readonly n: number; readonly value: number | 'unknown' };
   readonly draftToShipped: ReadonlyArray<{ readonly slug: string; readonly first: string; readonly final: string; readonly finals: number }>;
+  /** experiment-instrument FR-4/A6: `stage:'control'` rows refused for THIS pair (attributed by a
+   *  known `coderFamily` on the refused row) — a real cost line (the run was attempted and failed),
+   *  never counted in `n` (which measures completed reviews). */
+  readonly refusedRuns: number;
 }
 
 export interface FamilyAggregate {
@@ -781,6 +834,11 @@ export interface FamilyAggregate {
   /** A6: the raw count of `stage:'control'` rows folded in — `0` means every `foreignUnique`
    *  figure below is a true, honestly-printed absence, not a fabricated non-observation. */
   readonly controlRows: number;
+  /** experiment-instrument FR-4/A6: EVERY `stage:'control'` refused row seen, attributed or not —
+   *  the total accounting figure `refusedRuns` (per pair) can never exceed, and the gap between the
+   *  sum of per-pair `refusedRuns` and this total is exactly how many refusals had no determinable
+   *  coderFamily (the earliest failures — printed here rather than silently dropped). */
+  readonly refusedControlRows: number;
 }
 
 interface MutablePair {
@@ -801,13 +859,14 @@ interface MutablePair {
   costN: number;
   costSum: number;
   drafts: Array<{ slug: string; first: string; final: string; finals: number }>;
+  refusedRuns: number;
 }
 
 function newPair(): MutablePair {
   return {
     n: 0, grades: {}, shipped: 0, shippedTotal: 0, fixRoundsList: [],
     foreignN: 0, foreignBySeverity: {}, foreignAuto: 0, foreignAdjudicated: 0, foreignAutoRuns: 0, foreignAdjudicatedRuns: 0, foreignIncomplete: 0,
-    refutedN: 0, refutedSum: 0, costN: 0, costSum: 0, drafts: [],
+    refutedN: 0, refutedSum: 0, costN: 0, costSum: 0, drafts: [], refusedRuns: 0,
   };
 }
 
@@ -886,6 +945,18 @@ export function aggregateByFamily(
     else { b.foreignAutoRuns++; b.foreignAuto += foreignTotal; }
   }
 
+  // experiment-instrument FR-4/A6: a refused row is bucketed the SAME way a successful control row
+  // is — by its own coderFamily and the complementary reviewer — but ONLY when coderFamily is known
+  // (the earliest failures, before the claude half reports which family it reviewed, cannot be
+  // attributed to a pair; they still count toward `refusedControlRows` at the top level below,
+  // never silently dropped). `n` is deliberately untouched: `n` measures COMPLETED reviews.
+  for (const rr of parsed.refusedRows) {
+    if (rr.coderFamily === undefined) continue;
+    const reviewerOfInterest = rr.coderFamily === 'codex' ? 'claude' : 'codex';
+    const b = bucket(rr.coderFamily, reviewerOfInterest);
+    b.refusedRuns++;
+  }
+
   // draftToShipped: earliest known verdict per slug (a qe-bridge signoff, or this control row's
   // own claude-half grade when no signoff was given) against the slug's final grade — keyed by
   // slug PLUS the normalized (coder,reviewer) family pair (r1-14: two final rows for the same slug
@@ -952,9 +1023,16 @@ export function aggregateByFamily(
       refutedShare: { n: b.refutedN, value: b.refutedN > 0 ? b.refutedSum / b.refutedN : 'unknown' },
       costPerConfirmed: { n: b.costN, value: b.costN > 0 ? b.costSum / b.costN : 'unknown' },
       draftToShipped: b.drafts,
+      refusedRuns: b.refusedRuns,
     };
   }
 
   const incompleteControlRows = parsed.rows.filter((r) => !r.complete).length;
-  return { pairs: out, incomplete: parsed.unreadable > 0 || incompleteControlRows > 0, incompleteControlRows, controlRows: parsed.rows.length };
+  return {
+    pairs: out,
+    incomplete: parsed.unreadable > 0 || incompleteControlRows > 0,
+    incompleteControlRows,
+    controlRows: parsed.rows.length,
+    refusedControlRows: parsed.refusedRows.length,
+  };
 }

package/src/feature-adr-routing.ts

@@ -2190,7 +2190,11 @@ export function gradeFromReviewFindings(findings: readonly CodexQeFinding[] | nu
  * The LOCKED decline taxonomy. A `kind` outside this set is a bug, not a new case — which is why
  * {@link codexQeDeclineReason} throws on one rather than rendering something plausible.
  */
-export const CODEX_QE_DECLINE_KINDS: readonly string[] = ['timeout', 'no-verdict', 'tool-error', 'unusable-output', 'unavailable', 'over-ceiling', 'wrong-tree'];
+// 'scope-not-established' and 'base-ref-not-established' joined the set 2026-09-17 (feature
+// codex-review-scope + its fix-round-1, finding #7): the workflow's two inline mirrors grew both
+// kinds; this export copy diverged behind them until now. Appended, never reordered — the SAME
+// order the two workflow-twin mirrors carry.
+export const CODEX_QE_DECLINE_KINDS: readonly string[] = ['timeout', 'no-verdict', 'tool-error', 'unusable-output', 'unavailable', 'over-ceiling', 'wrong-tree', 'scope-not-established', 'base-ref-not-established'];
 
 export interface ClassifyCodexQeInput {
   readonly exit?: number | null;
@@ -2350,6 +2354,12 @@ export function codexQeDeclineReason(kind: string | null | undefined, detail?: C
   if (canonical === 'over-ceiling') {
     return 'prompt is ' + chars + ' chars / unscoped — refused before dispatch';
   }
+  if (canonical === 'scope-not-established') {
+    return 'review scope NOT ESTABLISHED for uncommitted QE — ' + (d.reason === undefined || d.reason === null || String(d.reason) === '' ? 'the change set could not be measured' : String(d.reason)) + ' — refusing to fall back to --uncommitted on the shared tree';
+  }
+  if (canonical === 'base-ref-not-established') {
+    return 'base ref for the isolated review scope NOT ESTABLISHED — ' + (d.reason === undefined || d.reason === null || String(d.reason) === '' ? 'the base-ref probe failed or was unparseable' : String(d.reason)) + ' — refusing to silently fall back to HEAD';
+  }
   throw new Error('codexQeDeclineReason: unknown kind ' + k);
 }
 

package/src/index.ts

@@ -505,6 +505,7 @@ export {
   decideReadBack,
   recordVerdictLine,
   parseModelSpec,
+  applyTaskId,
 } from './run-records.js';
 export {
   ENVELOPE_SCHEMA,
@@ -527,7 +528,7 @@ export type {
 } from './feature-adr-envelope.js';
 export { decidePublishSigning, decidePostSigningVerification, decideSignableSet, publishSigningLine, signableSetLine } from './publish-signing.js';
 export type { PublishSigningVerdict, PublishSigningDecision, SignableSetDecision } from './publish-signing.js';
-export type { RecordKind, RecordVerdict, RecordDecision, LedgerEnrichInput, LedgerPriceEntry, ParsedModelSpec } from './run-records.js';
+export type { RecordKind, RecordVerdict, RecordDecision, LedgerEnrichInput, LedgerPriceEntry, ParsedModelSpec, TaskIdLookup } from './run-records.js';
 export type { AmendmentAmbiguity, AmendmentRow, AmendmentVerdict, AmendmentResolution, AmendmentOutcome, AmendmentDecision, PlanCoverageGap } from './amendment-trace.js';
 // contract-checklist (ADR-001): pure extraction, canonical rendering, typed report parsing, and
 // exact per-item verification. Filesystem discovery/containment stays in harness-cli.
@@ -1317,8 +1318,12 @@ export * from './run-registry.js';
 
 export { JOURNAL_KINDS, formatLine, parseLine, selectWindow, appendWitnessed } from './journal.js';
 export type { JournalKind, JournalEvent, JournalLine, JournalIo } from './journal.js';
-export { openRound, closeRound, listRounds, validateClosedRoundLedgerRow } from './round.js';
+export { openRound, closeRound, listRounds, validateClosedRoundLedgerRow, readOpenRoundTaskId } from './round.js';
 export type { RoundState, RoundExecState, RoundLedgerRow, RoundReviewSidecar } from './round.js';
+
+// review-cost-ledger T1/FR-1 (ADR-001 п.1): the pure qe-bridge stdout cost parser.
+export { parseQeBridgeStdoutCost } from './review-cost.js';
+export type { QeBridgeCost, QeBridgeCostTokens } from './review-cost.js';
 export { parseCodexTokens, classifyRoundExecOutcome, buildRoundExecRow } from './round-exec.js';
 export type { RoundExecOutcome, RoundExecLedgerRow } from './round-exec.js';
 export * from './run-cleanup.js';

package/src/qe-bridge.ts

@@ -151,6 +151,14 @@ export interface BridgeSignoff {
   promptSha256: string;
   elapsedMs: number;
   emittedAt: string;
+  /** experiment-instrument FR-1/FR-3/T5 (ADR-001): the task identity of the slug's single open
+   *  round at the moment this signoff was emitted — filled by the cli (it owns `.dz/rounds/`), null
+   *  when there was no open round to fill from, never guessed. Optional so a signoff written before
+   *  this feature landed parses unchanged (NFR-1). */
+  taskId?: string | null;
+  /** experiment-instrument FR-1/FR-3/T5: present whenever `taskId` above was filled from a lookup —
+   *  names where it came from (`readOpenRoundTaskId`'s own source, r1-1/r1-2 extended to five values). */
+  taskIdSource?: 'open-round' | 'derived-legacy' | 'no-open-round' | 'ambiguous' | 'unavailable';
 }
 
 /** Where each channel was found, for the audit bundle: an auditor can re-derive the verdict from