@mindrian_os/cli 2.0.0-beta.25 → 2.0.0-beta.29

package/CHANGELOG.md

@@ -1,3 +1,105 @@
+## [2.0.0-beta.29] - 2026-09-09
+
+### Added
+- **Phase 298 (SEED-032): Harness-as-Code.** MindrianOS declares and machine-enforces its own
+  agent harness for the first time. `data/harness-policies/` is the closed, versioned schema:
+  eleven slice-1 policies (five gates, four voice rules, the memory-write declaration, the
+  Larry contract-parity declaration), each carrying an enforcement rung (`declared` / `logged`
+  / `blocking`) read from disk, never hardcoded. `scripts/run-harness.cjs` is the one idempotent
+  policy runner: a tiered `--check`, a `--room <dir>` convergence scan (proven idempotent twice
+  in a row against a committed fixture, byte-identical output, zero writes), and a `--policy
+  <id>` promotion review that prints one evaluator's verdict and never recomputes it.
+  `scripts/build-harness-manifest.cjs` goes to manifest v2 (three additive keys -- `policies`,
+  `larry_surfaces`, `fixture_ref` -- `maps` stays exactly three) and now runs the Larry
+  contract-parity checks inline, so `--check` fails closed the moment any of Larry's three
+  speaking surfaces drops a core-contract phrase or the Desktop wire exceeds its 1,950-byte
+  budget. `node scripts/doctor.cjs --acceptance` gained a `harness-policies` blocker that spawns
+  the runner, wiring the whole harness into the release train's own gate. The pre-commit drift
+  guard now fires on any edit under `data/harness-policies/` or `data/harness-fixtures/`, so the
+  manifest's own digest cannot silently rot. Two long-red manifest-cluster tests were repaired
+  (repointed at the file that actually carries the guard after Phase 235-01's rewrite) rather
+  than left recorded as known-broken. 15 plans, 6 waves, goal-backward verified.
+- **Admin-only commands stop leaking into recommendations (SEED-052).** The Brain
+  recommendation scorer (`lib/workflow/f-selector-ranker.cjs`) now reads each command's
+  `visibility` field (mirrored into `data/command-registry.json` by the generator) and filters
+  out `visibility: admin` candidates for a non-admin navigator, fail-closed by default. Closes a
+  live, reproduced leak: `/mos:admin` was ranking as the #2 recommendation for every navigator,
+  admin or not, before this fix.
+- **Skill-optimization smoke calibration reconciliation (SEED-061).** `scripts/skillopt-funnel.cjs`
+  gained a deterministic, exact-match reconciliation pass over `enumerateQueries`'s full-roster
+  output: a `should_not_trigger` negative labeled `expected_skill: null` that exactly collides
+  with a real positive elsewhere in the roster is corrected before the flag rule scores it,
+  closing a disclosed false-alarm class from Phase 230's smoke calibration (`230-07-CALIBRATION.md`).
+  The fix also closes a resume-path staleness hole: a resumed funnel run now re-applies the
+  reconciled label instead of reading a stale persisted verdict. Zero live model calls anywhere
+  in the fix or its tests.
+- **`scripts/release.sh` Step 5.5 stops crying wolf on a good push (SEED-051).** The tag-push
+  verification gate now checks an independent `git ls-remote` on `origin/main`'s SHA before
+  deciding whether a still-not-visible tag is a real failure or just GitHub replication lag.
+  When the push demonstrably landed, a slow tag now prints a warning and the ceremony continues
+  through the acceptance/marketplace/post-verify steps; when it did not land, the original hard
+  abort is preserved. The abort-vs-warn decision lives in a new, independently testable library,
+  `scripts/release-lib/verify-tag-push.sh`. Reproduces and fixes the exact false alarm hit on
+  the v1.15.0 release ceremony (2026-07-02).
+
+### Changed
+- Twelve stale-duplicate roadmap phase stubs (283, 297, 299, 300, 302, 304, 305, 306, 309, 312,
+  325, 326) closed as `ABSORBED BY PHASE <N>`, each citing the specific already-shipped phase
+  and code evidence, after tracing that their seeds' own required capabilities were already
+  live -- no renumbering, no plans lost, roadmap now tells the truth about what still needs
+  building. Two further clusters fused (319 absorbs 320-322/324 into one Host Runtime Decision
+  Record; 333 absorbs 334 into one Room-as-GraphRAG walk-test-then-build phase).
+
+## [2.0.0-beta.27] - 2026-09-07
+
+### Added
+- Larry recognizes Theo by name on all three surfaces. `agents/larry-extended.md` gained
+  `## If asked about Theo by name` (Theo is MindrianOS's own teaching-graph backend behind every
+  `brain_*` call; a direct by-name question gets an honest brief answer, never volunteered), with a
+  narrow inline carve-out on the Never-Do "mention databases or architecture" rule (quick
+  260907-i8j). The Desktop/Cowork MCP wire, `lib/mcp/runtime-instructions.cjs`, gained a THEO
+  clause inside the 1,950-byte served budget (1888 -> 1944 bytes) with the Canon Part 8 BOUNDARIES
+  paragraph byte-identical and still the tail (quick 260907-m2j). No endpoint, host, or wiring
+  detail is disclosed on any surface.
+- `### Honest about thin grounding` in `skills/larry-personality/SKILL.md`: on any thin `brain_*`
+  signal (an empty DirectiveEnvelope `signals` set, a zero or ambiguous `normalize_framework_name`
+  match, a low `orchestration_readiness` score) one capability-honesty clause rides inside the
+  answer Larry is already giving, naming no backend noun. Finishes wiring Decision #8, "Honest
+  refusal everywhere", into Larry's voice (quick 260907-i8j).
+- `lib/core/repo-version.cjs`: the one canonical answer to "what version is this repo" (module +
+  CLI), refusing with a named error instead of guessing when resolved from a `.claude/worktrees/*`
+  checkout (quick 260906-t3s).
+- `scripts/check-worktree-hygiene.cjs` plus a `worktree-hygiene` blocker in `doctor --acceptance`:
+  diffs `.claude/worktrees/*` on disk against `git worktree list`, classifies every unregistered
+  checkout (`live-gitdir` / `safe-orphan` / `review`) by hashing its files against the object
+  database, and is the only governed delete path (`--prune --confirm`; `review` is never
+  auto-deleted). 18 hermetic tests (quick 260906-t3s).
+- `docs/CANON-PHASE-MAP.md` `## Amendment cascade rule`: every canon amendment discovers the
+  version-pinning tests by an escaped-regex-aware grep instead of a hand-named list, and bumps
+  `Date:` together with `Version:` (quick 260907-m2l).
+- `docs/autopsies/2026-09-06-worktree-version-contamination-incident.md`, cross-referenced from
+  CLAUDE.md's WORKSPACE GUARD (quick 260906-t3s).
+
+### Fixed
+- Canon version floors: `test-205-elevation-doctrine-floor` (pinned 1.24) and
+  `test-cirs-render-coverage-floor` (pinned 1.16) cascaded to the live v1.27;
+  `test-bono-verdict` and `test-canon-part-9-ratification` redesigned from live-header equality
+  (structurally doomed the moment a later entry ships) to append-only provenance plus a monotonic
+  floor; the `run-all-340.sh` quarantine on part-9-ratification lifted; `docs/MINDRIAN-CANON.md`
+  `Date:` restored to 2026-09-05, the v1.27 commit date, after Phase 340's three bumps dropped it
+  (quick 260907-m2l).
+- Four stale lines in `agents/larry-extended.md` (em-dash wording under a hyphens-only rule, a
+  hardcoded sensor count now read from the registry, a nonexistent `lib/memory/user-md-persona.cjs`
+  path corrected to `lib/core/user-md-ops.cjs`, a moved dual-path registration note) and a
+  memory-layer contradiction in `skills/larry-personality/SKILL.md` (quick 260907-m2j).
+
+### Removed
+- `lib/mcp/larry-server-instructions.md`: an orphan loaded by nothing at runtime that named nine
+  tools which do not exist and opened with the exact first-contact string `test-143.2` forbids.
+  Its one live rule, the BCH-03 two-pass turn-ordering doctrine, relocated verbatim into
+  `skills/larry-personality/SKILL.md`; `tests/test-bch-01-ownership.cjs` repointed at it
+  (quick 260907-m2j).
+
 ## [2.0.0-beta.25] - 2026-09-06
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mindrian_os/cli",
-  "version": "2.0.0-beta.25",
+  "version": "2.0.0-beta.29",
   "description": "Install MindrianOS into Claude Code with one command -- `npx @mindrian_os/cli`. Ships the MindrianOS plugin (Larry + PWS methodology + Data Room) plus a setup/diagnostics CLI (install/doctor/update).",
   "scripts": {
     "mcp": "node bin/mindrian-mcp-server.cjs",