@dzhechkov/harness-core 0.8.6 → 0.8.11

package/src/guard.ts

@@ -11,8 +11,16 @@
 // PURE: `evaluateGuard` operates over INJECTED FACTS (package.json deps, a drift result, lesson text, README
 // counts, store size) that the CLI gathers. No filesystem here → deterministic + unit-testable without a repo.
 
-import { type RuleTemplate, type TemplateParams, type ChangeSet, templateFires, validTemplateParams } from './guard-promotion.js';
+import { lessonRuleContentAnchor, type RuleTemplate, type TemplateParams, type ChangeSet, templateFires, validTemplateParams } from './guard-promotion.js';
 import { STUB_MARKERS, STUB_PHRASES, checkNoStubs, type StubWaiver } from './no-stubs.js';
+import {
+  VOLUME_SHADOW_RULE_IDS,
+  evaluateVolumeShadow,
+  unknownVolumeShadow,
+  type GuardObservation,
+  type VolumeShadowInput,
+  type VolumeShadowResult,
+} from './guard-volume.js';
 
 export type GuardSeverity = 'hard' | 'soft';
 export type GuardOp = 'publish' | 'teach' | 'consolidate' | 'reindex';
@@ -39,6 +47,8 @@ export interface Violation {
   readonly rule: string;
   readonly severity: GuardSeverity;
   readonly detail: string;
+  /** Present for promoted-template firings; ids alone do not prove equal effective rule content. */
+  readonly contentAnchor?: string;
 }
 
 export interface GuardResult {
@@ -54,15 +64,24 @@ export interface GuardResult {
    * argument; a note is the cheap fix. Present only when non-empty.
    */
   readonly notes?: readonly string[];
+  /** Versioned shadow measurements. They are evidence only and never enter the verdict reducer. */
+  readonly observations?: readonly GuardObservation[];
 }
 
 /** Facts the CLI injects; each rule reads only the fields it needs. Missing evidence ⇒ that rule is skipped. */
 export interface GuardFacts {
   readonly op: GuardOp;
+  /** Publish-only raw volume facts. Absence preserves the legacy result shape. */
+  readonly volume?: VolumeShadowInput;
   /** for no-workspace-star: each publishable package's deps map. */
   readonly packages?: readonly { readonly name: string; readonly deps: Readonly<Record<string, string>> }[];
   /** for no-skill-drift: the names that byte-drift between copies (from sweepSkillDrift). */
   readonly drift?: readonly string[];
+  /**
+   * for codex-wrapper-for-value-stage: workflow scripts to scan, as (path, text). Absent ⇒ the
+   * rule reports nothing: a guard with no evidence must stay silent rather than invent a verdict.
+   */
+  readonly workflowScripts?: readonly { readonly path: string; readonly text: string }[];
   /** for no-secrets: labelled blobs to scan (lesson text, staged files). */
   readonly secretTargets?: readonly { readonly label: string; readonly text: string }[];
   /** for readme-consistency: labelled (a,b) count pairs that must be equal. */
@@ -287,7 +306,12 @@ export const DEFAULT_RULES: readonly GuardRule[] = [
   { id: 'readme-first', severity: 'soft', ops: ['publish'], description: 'a package with a staged version bump must update its own README.md in the same change (README-first)' },
   { id: 'routing-store-stale', severity: 'soft', ops: ['publish'], description: 'harvested routing telemetry has been applied to the auto-cost outcome store' },
   { id: 'marketplace-parity', severity: 'soft', ops: ['publish'], description: 'the published .claude-plugin/ showcase composition matches a fresh regeneration from the live registry (version excluded — an operator field)' },
+  { id: 'template-context-token-weight', severity: 'soft', ops: ['publish'], description: 'observe the UTF-8-byte estimated token weight of each selected template context corpus; measured starting points are advisory only' },
+  { id: 'template-context-largest-file-share', severity: 'soft', ops: ['publish'], description: 'observe the largest template file share on the same estimated-token basis as its corpus total; advisory only' },
+  { id: 'feature-artifact-diff-ratio', severity: 'soft', ops: ['publish'], description: 'observe feature artifact bytes against attributable unified-diff bytes, explicitly a proxy; advisory only' },
+  { id: 'feature-tier-artifact-set', severity: 'soft', ops: ['publish'], description: 'observe artifacts due for the recorded feature tier, active steps, consumers, and lifecycle; advisory only' },
   { id: 'agents-md-policy-sync', severity: 'soft', ops: ['publish'], description: 'proves the AGENTS.md copy is in SYNC with its source — not that the runtime read or obeyed it; heal drift with dz agents-sync' },
+  { id: 'codex-wrapper-for-value-stage', severity: 'hard', ops: ['publish'], description: 'a workflow stage routed to the fire-and-forget codex wrapper must not have its return value consumed — the wrapper answers with a dispatch stub, never with the model' },
   { id: 'lockfile-in-sync', severity: 'soft', ops: ['publish'], description: 'every workspace @dzhechkov/* dependency spec matches the specifier pnpm-lock.yaml records for that importer (a dep bump without a lockfile refresh breaks CI with ERR_PNPM_OUTDATED_LOCKFILE). SOFT-ONLY — a config cannot promote it to HARD' },
   { id: 'store-bloat-cap', severity: 'soft', ops: ['teach', 'consolidate'], description: 'the learned store is within its size cap' },
   // Description ASSEMBLED from STUB_MARKERS so guard.ts itself stays clean under the scan it defines
@@ -492,6 +516,40 @@ const CHECKERS: Record<string, (f: GuardFacts, sev: GuardSeverity) => Violation[
       detail: `${drifted.length} AGENTS.md policy section(s) are out of sync: ${drifted.slice(0, 8).join(', ')}${drifted.length > 8 ? '…' : ''} — heal with: dz agents-sync`,
     }];
   },
+  /**
+   * The fire-and-forget wrapper returns a DISPATCH STUB, so a stage whose deliverable is its
+   * return value gets a receipt instead of an answer. MEASURED 2026-08-31: eight stages of one
+   * research swarm each returned "Codex Task started in the background as task-…", downstream
+   * agents built on those stubs, and no artifact was produced. The misuse is visible in the
+   * program text — the stage's result is assigned to a name that a later prompt interpolates —
+   * so it belongs on layer 1 rather than in a rule nobody re-reads.
+   */
+  'codex-wrapper-for-value-stage': (f, sev) => {
+    const scripts = f.workflowScripts;
+    if (scripts === undefined || scripts.length === 0) return [];
+    const out: Violation[] = [];
+    for (const s of scripts) {
+      const text = String(s.text ?? '');
+      // Find `const <name> = await agent(… codex:codex-rescue …)` and ask whether <name> is later
+      // interpolated into another prompt. Assignment alone is not the defect: a stage may keep its
+      // handle for logging. Consumption in a prompt is what proves the VALUE was the deliverable.
+      const re = /(?:const|let)\s+([A-Za-z_$][\w$]*)\s*=\s*await\s+agent\(([\s\S]{0,4000}?)\)\s*(?:\n|;)/g;
+      for (const m of text.matchAll(re)) {
+        const name = String(m[1]);
+        const call = String(m[2]);
+        if (!/codex:codex-rescue/.test(call)) continue;
+        const consumed = new RegExp('\\$\\{\\s*(?:String\\()?' + name.replace(/[.*+?^{}()|[\]\\]/g, '\\$&') + '\\b');
+        if (consumed.test(text)) {
+          out.push({
+            rule: 'codex-wrapper-for-value-stage',
+            severity: sev,
+            detail: `${s.path}: stage "${name}" is routed to codex:codex-rescue AND its result is interpolated into another prompt — the wrapper returns a dispatch stub, so that prompt would receive a receipt, not an answer. Invoke codex synchronously (dz codex / codex exec) for a stage whose deliverable is its return value.`,
+          });
+        }
+      }
+    }
+    return out;
+  },
   'lockfile-in-sync': (f, _sev) => {
     // The 2026-07-28 CI break, mechanized: an overnight dep bump edited package.json and left
     // pnpm-lock.yaml stale, so `pnpm install --frozen-lockfile` died with ERR_PNPM_OUTDATED_LOCKFILE.
@@ -586,7 +644,13 @@ const CHECKERS: Record<string, (f: GuardFacts, sev: GuardSeverity) => Violation[
  * may not understand a file, and "I might be wrong" plus "block the publish" is the wrong pair. Disabling
  * such a rule stays allowed — only the promotion is refused.
  */
-export const SOFT_ONLY_RULES: readonly string[] = ['lockfile-in-sync', 'agents-md-policy-sync', 'routing-store-stale', 'marketplace-parity'];
+export const SOFT_ONLY_RULES: readonly string[] = [
+  'lockfile-in-sync',
+  'agents-md-policy-sync',
+  'routing-store-stale',
+  'marketplace-parity',
+  ...VOLUME_SHADOW_RULE_IDS,
+];
 
 /**
  * A well-formed PROMOTED rule: an id the engine does not know, made enforceable by a template +
@@ -612,7 +676,12 @@ function templateChecker(rule: GuardRule & { template: RuleTemplate; params: Tem
     const r = templateFires(rule.template, rule.params, change);
     if (Object.hasOwn(r, 'undecidable') || !(r as { fired?: boolean }).fired) return [];
     // A promoted rule is ALWAYS soft, whatever severity reaches this point (belt to resolveRules' braces).
-    return [{ rule: rule.id, severity: 'soft', detail: `${(r as { detail?: string }).detail ?? 'template rule fired'} (promoted rule — advisory)` }];
+    return [{
+      rule: rule.id,
+      severity: 'soft',
+      detail: `${(r as { detail?: string }).detail ?? 'template rule fired'} (promoted rule — advisory)`,
+      contentAnchor: lessonRuleContentAnchor(rule.template, rule.params),
+    }];
   };
 }
 
@@ -671,8 +740,32 @@ export function evaluateGuard(facts: GuardFacts, rules: readonly GuardRule[] = D
   );
   const violations: Violation[] = [];
   const checked: string[] = [];
+  const observations: GuardObservation[] = [];
+  let volumeResult: VolumeShadowResult | undefined;
+  let volumeEvaluated = false;
+  const volume = (): VolumeShadowResult => {
+    if (volumeEvaluated) return volumeResult ?? { observations: [], signals: [], notes: [] };
+    volumeEvaluated = true;
+    try {
+      volumeResult = evaluateVolumeShadow(facts.volume);
+    } catch (error) {
+      volumeResult = unknownVolumeShadow(
+        'volume-evaluator-failure',
+        error instanceof Error ? error.message : String(error),
+      );
+    }
+    return volumeResult;
+  };
   for (const r of active) {
     checked.push(r.id);
+    if ((VOLUME_SHADOW_RULE_IDS as readonly string[]).includes(r.id)) {
+      const emission = volume();
+      observations.push(...emission.observations.filter((item) => item.rule === r.id));
+      violations.push(...emission.signals
+        .filter((signal) => signal.rule === r.id)
+        .map((signal) => ({ rule: signal.rule, severity: 'soft' as const, detail: signal.detail })));
+      continue;
+    }
     // A promoted (template) rule has no built-in checker by design — it is enforceable through the
     // shared `templateFires` predicate instead. Without this branch a promoted rule written into
     // `.dz/guard.json` would be INERT: present in the config, listed as checked, enforcing nothing —
@@ -720,7 +813,17 @@ export function evaluateGuard(facts: GuardFacts, rules: readonly GuardRule[] = D
       notes.push('agents-md-policy-sync: this repository carries a dz:policies fence but its canonical policy sources are unreadable — the advisory rule could not compare, and that gap is on the record, not a silent pass');
     }
   }
-  return { op, verdict, violations, checked, ...(notes.length > 0 ? { notes } : {}) };
+  for (const item of observations) {
+    if (item.status === 'unknown') notes.push(`${item.rule} ${item.scope}: ${item.detail}`);
+  }
+  return {
+    op,
+    verdict,
+    violations,
+    checked,
+    ...(notes.length > 0 ? { notes } : {}),
+    ...(observations.length > 0 ? { observations } : {}),
+  };
 }
 
 /** An append-only audit record. `ts` is injected by the caller (no wall-clock here → deterministic tests). */
@@ -731,6 +834,8 @@ export interface GuardAuditRecord {
   readonly violations: readonly Violation[];
   /** informational notes (FN-7 — e.g. the no-stubs skipped-files note); on the record, never a verdict input. */
   readonly notes?: readonly string[];
+  /** Shadow measurements copied without recomputation from the evaluated result. */
+  readonly observations?: readonly GuardObservation[];
   /** set when the operator overrode a block with `--force <reason>` — the override is logged, never silent. */
   readonly override?: { readonly forced: true; readonly reason: string };
 }
@@ -743,6 +848,7 @@ export function auditRecord(result: GuardResult, ts: string, override?: { reason
     verdict: result.verdict,
     violations: result.violations,
     ...(Array.isArray(result.notes) && result.notes.length > 0 ? { notes: result.notes } : {}),
+    ...(Array.isArray(result.observations) && result.observations.length > 0 ? { observations: result.observations } : {}),
     ...(override && typeof override.reason === 'string' ? { override: { forced: true, reason: override.reason } } : {}),
   };
 }

package/src/index.ts

@@ -15,6 +15,11 @@ export * from './apply.js';
 export { bundleSkills } from './bundle.js';
 export type { BundleOptions, BundleResult, BundledSkill } from './bundle.js';
 export * from './targets.js';
+export * from './target-integrations.js';
+export * from './integration-evidence.js';
+export * from './integration-apply.js';
+export * from './integrations-verify.js';
+export { redactProbeText, PROBE_REDACTION_MARKER } from './integration-probe-worker.js';
 // Target-parity model (feature target-parity-matrix, ADR-001) — the computed feature×target map.
 export {
   RUNTIME_CAPABILITIES,
@@ -78,8 +83,8 @@ export type { SyncUpstreamReport, UpstreamCheckResult, SourcesManifest, SourcePa
 export { sweepSkillDrift, syncCanonicalSkill } from './skill-drift.js';
 export { SKILL_INSTALL_ROOTS, SKILL_INSTALL_ROOT_BY_TARGET, DEV_SKILL_ROOT, TARGET_ENRICHMENT_ASSETS } from './skill-install-roots.js';
 export { stampCheckpointLine } from './checkpoint-stamp.js';
-export { TELEMETRY_VOCAB_VERSION, TELEMETRY_FIELDS, PROVISIONAL_TELEMETRY_FIELDS, LOCAL_FIELD_ALIASES, telemetryFieldFor } from './telemetry-vocabulary.js';
-export type { TelemetryField, FieldSource } from './telemetry-vocabulary.js';
+export { TELEMETRY_VOCAB_VERSION, TELEMETRY_FIELDS, PROVISIONAL_TELEMETRY_FIELDS, LOCAL_FIELD_ALIASES, RUN_OUTCOMES, telemetryFieldFor, runOutcomeOf } from './telemetry-vocabulary.js';
+export type { TelemetryField, FieldSource, RunOutcome } from './telemetry-vocabulary.js';
 export { planLedgerBackfill, LEDGER_FILL_SOURCE, AMBIGUOUS, resolveLedgerRunId } from './ledger-backfill.js';
 // project-skills root resolution (field report doc-25b): the ONE builder behind both the Step-0
 // probe and the PS_GUIDANCE paragraph, so the two can never look at different roots again.
@@ -87,14 +92,16 @@ export { projectSkillsOneRoot, projectSkillsProbeCommand } from './project-skill
 export type { LedgerBackfillPlan, LedgerBackfillRow, RunCostFacts } from './ledger-backfill.js';
 export type { SweepResult, DriftedSkill, SyncResult, SyncCanonicalOptions } from './skill-drift.js';
 export { benchmarkSkill, benchmarkSkills, compareSkills } from './benchmark.js';
-export { buildRegistry, searchRegistry, filterByCategory, skillPackBaseDirs, discoverSkillPackDirs, discoverVerifiablePackDirs } from './registry.js';
+export { buildRegistry, searchRegistry, filterByCategory, skillPackBaseDirs, discoverSkillPackDirs, discoverSkillCarryingDirs, discoverVerifiablePackDirs } from './registry.js';
+export { tokenize, stemToken, stems } from './stem.js';
 // Package skill-layout resolution (feature dz-install-npx-init) — the ONE seam that knows where an
 // npm package keeps its skills (flat / templates/.claude/skills / skills). `cmdInstall` calls it;
 // `dz init`/`dz registry` are the filed follow-up consumers.
 export * from './package-skill-layouts.js';
 export { recommend } from './recommend.js';
 export { pretrain } from './pretrain.js';
-export { loadPatterns, loadSessions, computePatternBoost, readLearningConfig, readMemoryLearningConfig, BOOST_CAP, recordPattern, loadStorePatternsSync, loadStoreRecords, patternToRecord, recordToPattern, patternRecordId, patternIdentityOf, dreamRecordId, isMirrorableLearning, consolidateSessions, recallPatterns, pruneNoisePatterns, removePatternsByIds, snapshotStore, readReinforcementState, encodeReinforcementState, reinforcePattern, updateReinforcementState, storeStats, lessonDeltaReport, lessonDeltaMap, readQuarantineState, encodeQuarantineState, promotePatterns, quarantineExpiryCandidates, pruneQuarantinePatterns } from './patterns.js';
+export { loadPatterns, loadSessions, computePatternBoost, readLearningConfig, readMemoryLearningConfig, BOOST_CAP, recordPattern, recordLessonForms, loadStorePatternsSync, loadStoreRecords, patternToRecord, recordToPattern, patternRecordId, patternIdentityOf, dreamRecordId, isMirrorableLearning, consolidateSessions, recallPatterns, pruneNoisePatterns, removePatternsByIds, snapshotStore, readReinforcementState, encodeReinforcementState, reinforcePattern, updateReinforcementState, storeStats, lessonDeltaReport, lessonDeltaMap, readQuarantineState, encodeQuarantineState, promotePatterns, quarantineExpiryCandidates, pruneQuarantinePatterns } from './patterns.js';
+export { normalizeLessonForms, validateClassTemplate, lessonPairIdOf, mergeLessonFormHits, mergeLessonMatchedForms } from './lesson-generalization.js';
 export { withStoreLock, withStoreLockSync, storeLockPath, StoreLockTimeoutError, StoreLockCompromisedError, STALE_LOCK_MS, LOCK_TIMEOUT_MS } from './store-lock.js';
 export type { StoreLockOptions } from './store-lock.js';
 export { withNamedLockSync, namedLockPath, isSafeLockName, NamedLockNameError, NamedLockTimeoutError, NamedLockCompromisedError } from './named-lock.js';
@@ -121,7 +128,8 @@ export {
   renderBridgeReport,
 } from './qe-bridge.js';
 export type { BridgeFamily, BridgeFailureReason, BridgeFinding, BridgeSignoff, BridgeParse, BridgeParseOk, BridgeParseFail, BridgeChannels, BridgeAudit, ClaudeResultExtraction, NamedExtract, BridgePromptInput } from './qe-bridge.js';
-export type { PatternRecord, SessionRecord, LearningConfig, MemoryLearningConfig, LoadOptions, ConsolidateResult, ConsolidateOptions, SqliteBackendMode, RecallHit, SessionsSource, PruneNoiseResult, RemovePatternsResult, SnapshotStoreResult, ReinforcementState, ReinforcePatternResult, StoreStats, LessonDeltaReport, LessonDeltaRow, QuarantineState, PromoteResult, QuarantineExpiryCandidate } from './patterns.js';
+export type { PatternRecord, SessionRecord, LearningConfig, MemoryLearningConfig, LoadOptions, ConsolidateResult, ConsolidateOptions, SqliteBackendMode, RecallHit, RecallPatternsOptions, RecordLessonFormsResult, SessionsSource, PruneNoiseResult, RemovePatternsResult, SnapshotStoreResult, ReinforcementState, ReinforcePatternResult, StoreStats, LessonDeltaReport, LessonDeltaRow, QuarantineState, PromoteResult, QuarantineExpiryCandidate } from './patterns.js';
+export type { LessonForm, LessonMatchedForm, LessonFormsInput, LessonFormRankedHit, MergedLessonFormHit } from './lesson-generalization.js';
 export { DEFAULT_REINFORCE_THRESHOLD, NoopLearningBackend, NativeReinforcementBackend, resolveLearningBackend, isLearningSignalBackend, applyLearningSignals, applyLearningSignalsWithDelta, applyLearningSignalsWithTerms } from './learning-backend.js';
 export type { LearningSignalBackend, LearningSignalStats, LearningSample, SignalCandidate, EnhanceContext, TrainingResult, LearningBackendMode, RerankTerm } from './learning-backend.js';
 // lesson-bandit-rerank (I-8): the ACL's public surface only. The vendored engine class is
@@ -186,6 +194,15 @@ export { runSetup, generateHooksConfig, generateAgentdbWriter, writerVersionOf,
   agentdbStorePath, agentdbMcpStorePath, agentdbStoreSeparationProblem } from './setup.js';
 export { statuslineData, readFeatureAdrState, writeFeatureAdrState, featureAdrStateDir, featureAdrStatePath } from './statusline.js';
 export type { StatuslineData, FeatureAdrState, WriteFeatureAdrStateInput } from './statusline.js';
+export {
+  ETA_MAX_STAGE_MS,
+  estimateEta,
+  extractStageSamples,
+  formatEta,
+  parseCheckpointLines,
+  segmentRun,
+} from './eta.js';
+export type { CheckpointObservation, EtaEstimate, EtaInput, IncompleteCoverageSample, RunSegment, StageDurationSample, StageSample } from './eta.js';
 export { indexPatternsToAgentdb, resolveAgentdbPath, searchAgentdbPatterns, listAgentdbDzIds, resolveAgentdbEmbedder, cosineSimilarity, importVectorsToAgentdb, reindexAgentdbRows, bumpAgentdbUses, clearAgentdbQuarantine, deleteAgentdbByDzIds, readAgentdbRowsByTaskType, DZ_OWNED_TASK_TYPES } from './agentdb-index.js';
 export type { AgentdbSearchHit, AgentdbSearchResult, AgentdbImportRow } from './agentdb-index.js';
 export { DEFAULT_EMBED_MODEL, LEGACY_EMBED_MODEL, DEFAULT_EMBED_DIM, KNOWN_EMBED_DIMS, resolveEmbedModel, readEmbedManifest, writeEmbedManifest, embedManifestPath, legacyEmbedManifest } from './embedding-config.js';
@@ -250,6 +267,50 @@ export { hookDecision, isFenced, isNewLine, ESCAPE_TEACHING } from './claim-chec
 export type { HookDecision, HookDecisionOpts } from './claim-check-hook-policy.js';
 export { step8ClaimGate } from './feature-adr-claim-gate.js';
 export type { Step8ClaimCounts, Step8ClaimGate } from './feature-adr-claim-gate.js';
+export {
+  DEFAULT_CODE_LANDING_CEILING_MS,
+  CODE_LANDING_CEILING_ENV,
+  decideCodeLandingLiveness,
+  extractCodexCompanionJobId,
+  parseCodeLandingLivenessSignal,
+} from './feature-adr-landing.js';
+export type {
+  CodeLandingLivenessVerdict,
+  CodeLandingLivenessReason,
+  CodeLandingLivenessInput,
+  CodeLandingLivenessDecision,
+  CodeLandingLivenessProbe,
+} from './feature-adr-landing.js';
+export {
+  buildDecisionContext,
+  normalizeDecisionRecall,
+  parseDecisionRecallFrame,
+  parseDecisionRecallApplicationProbe,
+  mergeDecisionRecallEvents,
+  reduceDecisionRecallMetrics,
+  summarizeDecisionRecallReceipts,
+  decisionRecallEnterCmd,
+  decisionRecallRunCmd,
+  decisionRecallAppendCmd,
+  decisionRecallApplicationProbeCmd,
+} from './feature-adr-decision-recall.js';
+export type {
+  DecisionRecallKind,
+  DecisionRecallStage,
+  DecisionRecallOutcomeName,
+  DecisionRecallContext,
+  DecisionRecallFrame,
+  DecisionRecallSelection,
+  DecisionRecallOutcome,
+  DecisionRecallEvent,
+  DecisionRecallDisposition,
+  DecisionRecallApplicationProbe,
+  MergedDecisionRecallAttempt,
+  MergedDecisionRecallDecision,
+  MergedDecisionRecallEvents,
+  DecisionRecallRatio,
+  DecisionRecallMetrics,
+} from './feature-adr-decision-recall.js';
 export {
   CHECKPOINT_STAGES,
   STAGE_ARTIFACTS,
@@ -517,6 +578,7 @@ export {
   DEFAULT_REWRITE_ATTEMPTS,
   liveSegmentStart,
   classifyChainDefects,
+  CHAINED_JOURNALS,
 } from './event-chain.js';
 export type {
   ChainFields,
@@ -533,6 +595,7 @@ export type {
   VerifyEventChainOptions,
   ChainDefectAge,
   ChainDefectAges,
+  ChainedJournal,
 } from './event-chain.js';
 export { decideProvenance, environmentCanMintProvenance, publishArgv, discoverPackages, publishPackages, bumpPatch, compareVersions, findUnpackagedSkills, findUnpublishedWorkspaceFloors, orderByDependencies, syncReadmeVersion, isChangelogEntryLine, changelogRegion } from './publish.js';
 export { fetchAllDownloads } from './downloads.js';
@@ -826,6 +889,7 @@ export * from './model-recommender.js';
 export * from './bto-optimize.js';
 export * from './discrimination-gate.js';
 export * from './guard.js';
+export * from './guard-volume.js';
 // Root AGENTS.md policy projection: pure anchor extraction/render/hash drift +
 // the shared-emitter I/O entry point exported from operations.
 export * from './agents-policy.js';
@@ -900,7 +964,8 @@ export {
 } from './epoch-replay.js';
 
 // Run-process scorecard (feature dz-score, Reading C) — scores the DISCIPLINE of a feature-adr run
-// from its artifacts. Descriptive-only, permanently: it never gates.
+// from its artifacts and folds immutable receipts into a chained aggregate. Descriptive-only,
+// permanently: neither the single-run score nor the aggregate gates.
 export * from './score.js';
 export * from './recap.js';
 export * from './provenance.js';
@@ -976,3 +1041,5 @@ export type {
   Register, Domain, OperatorProfile, ProfileReadResult, ProfileSyncResult,
   ProfileDriftVerdict, ProfileDriftResult,
 } from './profile.js';
+export * from './codex-invoke.js';
+export * from './skill-selection.js';