@mstar-harness/engine 3.10.1 → 3.10.2

package/dist/engine.js

@@ -1812,6 +1812,15 @@ async function recordWorkflowDelivery(workflowId, dir, opts) {
     if (stableJson(snapshot.delivery ?? null) === stableJson(merged)) {
       return { snapshot, written: false };
     }
+    const tailMembers = members.filter((member) => member === "compound" || member === "pr" || member === "merge");
+    if (tailMembers.length > 0) {
+      const notDone = snapshot.plans.filter((row) => row.status !== "Done");
+      if (notDone.length > 0) {
+        const rowDetail = notDone.map((row) => `${row.id} (${JSON.stringify(row.status)})`).join(", ");
+        const detail = violation3("high", "PHASE6_PLAN_ROW_NOT_DONE", `owned plan row(s) ${rowDetail} are not Done - every plan row must be Done before the delivery tail (${tailMembers.join(", ")}) is recorded (mstar-artifacts/references/plan-workflow-lifecycle-contract.md section 3: row Done -> compound disposition -> PR identity -> verified-merge record)`, `Bring every owned plan row to Done, then record delivery evidence with 'mstar workflow evidence --workflow ${workflowId} --file <payload.json>'`);
+        throw new Error(`refusing to record delivery evidence: ${detail.code}: ${detail.message}${detail.fix !== undefined ? ` (fix: ${detail.fix})` : ""}`);
+      }
+    }
     const next = { ...snapshot, delivery: merged, updated_at: at };
     await validateAndPutWorkflowSnapshot(store, next, snapshotPath);
     return { snapshot: next, written: true };

package/dist/workflow.d.ts

@@ -375,7 +375,15 @@ export type RecordWorkflowDeliveryResult = {
  *   `development` workflow) — the declared kind is authoritative;
  * - a rewrite of the recorded PR identity (§4d records it once at submission:
  *   an identical re-record is idempotent, a different pair is refused);
- * - an empty patch or a malformed member: nothing is silently dropped.
+ * - an empty patch or a malformed member: nothing is silently dropped;
+ * - compound / PR identity / verified-merge record while any owned plan row
+ *   is not `Done` (`PHASE6_PLAN_ROW_NOT_DONE` — contract §3: the delivery
+ *   tail runs after every row is Done; write-time only, see below).
+ *
+ * Grandfathering: the row-Done gate is write-time only. Snapshots that
+ * already carry delivery evidence while rows are not `Done` are never
+ * retro-invalidated; idempotent re-records return without consulting row
+ * state; `closeWorkflow` / `evaluatePostMergeClose` are unchanged.
  *
  * Idempotent and re-entrant: re-recording the exact stored evidence performs
  * NO write and returns the snapshot as read (the timestamp is untouched), so

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mstar-harness/engine",
-  "version": "3.10.1",
+  "version": "3.10.2",
   "description": "Morning Star Harness Workflow Engine — deterministic workflow enforcement library (path, status, lease, dispatch, sdd, iteration, lint gates).",
   "license": "MIT",
   "repository": {