@open-mercato/cli 0.6.8-develop.6931.1.4a1e1c786b → 0.6.8-develop.6941.1.3c26284542

package/dist/agentic/shared/ai/harness/fixtures/index.json

@@ -44,6 +44,8 @@
     "omh-189": { "purpose": "Calendar provider stub missing the integration definition, DI health registration, and the hardened transport.", "seededArtifacts": ["src/modules/room_calendar_sync/index.ts"], "precondition": "oracle.business.provider-transport must fail" },
     "omh-190": { "purpose": "Room bookings data layer without the customers response enricher.", "seededArtifacts": ["src/modules/room_bookings/index.ts", "src/modules/room_bookings/data/entities.ts"], "precondition": "oracle.umes.response-enricher must fail" },
     "omh-191": { "purpose": "Room bookings data layer without the durable hold-expiry workflow.", "seededArtifacts": ["src/modules/room_bookings/index.ts", "src/modules/room_bookings/data/entities.ts"], "precondition": "oracle.workflow.durable-timer must fail" },
-    "omh-192": { "purpose": "Partial CRM-backed library loan slice that trusts payload scope, races checkout, inverts lifecycle undo, and ships non-executable Jest coverage.", "seededArtifacts": ["src/modules/library/commands/crm-loans.ts", "src/modules/library/api/schemas.ts", "src/modules/library/commands/__tests__/crm-loans.test.ts"], "precondition": "oracle.regression.crm-library must fail" }
+    "omh-192": { "purpose": "Partial CRM-backed library loan slice that trusts payload scope, races checkout, inverts lifecycle undo, and ships non-executable Jest coverage.", "seededArtifacts": ["src/modules/library/commands/crm-loans.ts", "src/modules/library/api/schemas.ts", "src/modules/library/commands/__tests__/crm-loans.test.ts"], "precondition": "oracle.regression.crm-library must fail" },
+    "planning-new-feature": { "purpose": "Fresh scaffold whose .ai/specs holds only the emitted scaffolding — README, blank template, and the shipped reference-module activation spec — none of which covers the requested capability.", "seededArtifacts": [], "precondition": "oracle.planning.spec-first must fail" },
+    "planning-existing-spec": { "purpose": "Covering specification for reminders on a confirmed appointment, seeded without the rescheduled/cancelled and per-channel outcome contract the prompt introduces.", "seededArtifacts": [".ai/specs/2026-08-04-service-appointment-reminders.md"], "precondition": "oracle.planning.spec-reuse must fail" }
   }
 }

package/dist/agentic/shared/ai/harness/fixtures/seeds.json

@@ -157,6 +157,10 @@
       "src/modules/library/commands/crm-loans.ts": "export type TrustedScope = { tenantId?: string; organizationId?: string }\nexport type LibraryEffects = {\n  createBook(record: Record<string, unknown>, scope: TrustedScope): Promise<Record<string, unknown>>\n  softDeleteBook(id: string, scope: TrustedScope): Promise<Record<string, unknown>>\n  restoreBook(id: string, scope: TrustedScope): Promise<Record<string, unknown>>\n  resolveCustomer(id: string, scope: TrustedScope): Promise<{ id: string; displayName: string }>\n  findActiveLoan(bookId: string, scope: TrustedScope): Promise<Record<string, unknown> | undefined>\n  createLoan(input: Record<string, unknown>, scope: TrustedScope): Promise<Record<string, unknown>>\n  claimCheckout(input: Record<string, unknown>, scope: TrustedScope): Promise<Record<string, unknown>>\n  findLoan(id: string, scope: TrustedScope): Promise<Record<string, unknown> | undefined>\n  updateLoan(id: string, scope: TrustedScope, patch: Record<string, unknown>): Promise<Record<string, unknown>>\n}\n\ntype ScopedInput = { tenantId?: string; organizationId?: string }\nconst payloadScope = (input: ScopedInput): TrustedScope => ({ tenantId: input.tenantId, organizationId: input.organizationId })\n\nexport async function createBook(input: { id: string; title: string } & ScopedInput, _scope: TrustedScope, effects: LibraryEffects) {\n  return effects.createBook(input, payloadScope(input))\n}\n\nexport async function undoCreateBook(id: string, scope: TrustedScope, effects: LibraryEffects) {\n  return effects.restoreBook(id, scope)\n}\n\nexport async function deleteBook(id: string, scope: TrustedScope, effects: LibraryEffects) {\n  return effects.softDeleteBook(id, scope)\n}\n\nexport async function undoDeleteBook(id: string, scope: TrustedScope, effects: LibraryEffects) {\n  return effects.softDeleteBook(id, scope)\n}\n\nexport async function checkoutBook(input: { bookId: string; customerEntityId: string; idempotencyKey: string } & ScopedInput, _scope: TrustedScope, effects: LibraryEffects) {\n  const scope = payloadScope(input)\n  const active = await effects.findActiveLoan(input.bookId, scope)\n  if (active) return { status: 'conflict' }\n  const customer = await effects.resolveCustomer(input.customerEntityId, scope)\n  const loan = await effects.createLoan({ bookId: input.bookId, memberId: customer.id, idempotencyKey: input.idempotencyKey }, scope)\n  return { status: 'created', loan }\n}\n\nexport async function returnLoan(input: { id: string } & ScopedInput, _scope: TrustedScope, effects: LibraryEffects) {\n  const scope = payloadScope(input)\n  await effects.findLoan(input.id, scope)\n  return effects.updateLoan(input.id, scope, { status: 'returned' })\n}\n\nexport async function renewLoan(input: { id: string } & ScopedInput, _scope: TrustedScope, effects: LibraryEffects) {\n  const scope = payloadScope(input)\n  await effects.findLoan(input.id, scope)\n  return effects.updateLoan(input.id, scope, { status: 'renewed' })\n}\n\nexport async function markLoanLost(input: { id: string } & ScopedInput, _scope: TrustedScope, effects: LibraryEffects) {\n  const scope = payloadScope(input)\n  await effects.findLoan(input.id, scope)\n  return effects.updateLoan(input.id, scope, { status: 'lost' })\n}\n",
       "src/modules/library/api/schemas.ts": "import { z } from 'zod'\n\nexport const createBookRequestSchema = z.object({\n  title: z.string().min(1),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid(),\n})\n\nexport const checkoutBookRequestSchema = z.object({\n  bookId: z.string().uuid(),\n  customerEntityId: z.string().uuid(),\n  idempotencyKey: z.string().min(1),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid(),\n})\n",
       "src/modules/library/commands/__tests__/crm-loans.test.ts": "import { createBook } from '../crm-loans'\n\ndescribe('CRM library loans', () => {\n  it('persists a book', async () => {\n    const create = jest.fn(async (record) => record)\n    await createBook({ id: 'book-a', title: 'Book', tenantId: 'tenant-a', organizationId: 'org-a' }, { tenantId: 'tenant-a', organizationId: 'org-a' }, { createBook: create } as never)\n    expect(create).toHaveBeenCalledTimes(2)\n  })\n})\n"
+    },
+    "planning-new-feature": {},
+    "planning-existing-spec": {
+      ".ai/specs/2026-08-04-service-appointment-reminders.md": "# Service Appointment Reminders\n\n**Date**: 2026-08-04\n**Status**: Ready for implementation\n\n## TLDR\n\nBranch staff spend part of every afternoon telephoning customers about tomorrow's confirmed appointment. This slice sends that reminder automatically for a confirmed appointment so staff keep the phone free for booking work and the customer still arrives on the agreed day.\n\n## Problem Statement\n\nEvery service branch books work into an appointment diary, and a booking becomes real for the customer only once a member of staff marks it confirmed. Today nothing tells the customer about that confirmation except a manual telephone call made the afternoon before the visit. Two branches keep a paper call list, one keeps a spreadsheet, and none of them records whether the call was ever made. When the afternoon is busy the calls are skipped, the customer forgets, the technician arrives at an empty address, and the branch loses a whole slot it could have sold to somebody else. Staff also cannot tell an auditing manager which customers were actually contacted, so a complaint about a missed visit turns into an argument about memory rather than a look at a record. The branches have asked for the reminder to leave the diary automatically once an appointment is confirmed, and for the app to keep the proof that it went out.\n\n## Users, Permissions, and Scope\n\n| Actor | Allowed outcomes | Scope rule | Required feature IDs |\n|---|---|---|---|\n| Branch staff | view the reminder history for an appointment | own organization | `appointment_reminders.view` |\n| Branch manager | view history and trigger one manual resend | own organization | `appointment_reminders.manage` |\n\nBoth the tenant and the organization are always derived from the trusted request context. A reminder record is written with the same scope as the appointment that produced it, and every read filters on that scope so one branch can never see another branch's customer contact history.\n\n## API, Command, and Error Contracts\n\n| Method / command | Path / ID | Auth and feature gate | Input | Success response / event | Errors and concurrency |\n|---|---|---|---|---|---|\n| `GET` | `/api/appointment-reminders` | auth + `appointment_reminders.view` | `appointmentId`, `page`, `pageSize` | `{ items, totalCount }` | 400 invalid query, 401 unauthenticated, 403 wrong feature |\n| `POST` | `/api/appointment-reminders/resend` | auth + `appointment_reminders.manage` | `appointmentId`, `reason` | 201 and `appointment_reminders.reminder.sent` | 400 invalid body, 403 wrong feature, 409 stale appointment version |\n\nThe list route is built on the CRUD route factory and returns only reminder rows for appointments inside the caller's trusted scope. The resend command is a guarded command route rather than a plain handler because it has an external side effect: it loads the appointment, refuses the write when the caller's appointment version is behind the stored one, records a new reminder row, and only then hands the message to the mail sender. The command carries an idempotency key derived from the appointment identifier and the scheduled reminder moment, so a retry after a transport timeout reuses the existing row instead of contacting the same customer twice. A reminder row stores the appointment identifier, the address it was sent to, the moment it was queued, and the moment the sender accepted it.\n\n## Integration Coverage\n\nTests are self-contained: each one creates its own tenant, organization, staff user, customer, and appointment, and removes those records in a `finally` block.\n\n| Test ID | Level | Setup / fixture | Actions | Assertions |\n|---|---|---|---|---|\n| TEST-001 | integration | one organization, one confirmed appointment for tomorrow | run the reminder worker | one reminder row exists, the sender received one message, and a second worker run adds nothing |\n| TEST-002 | security | two organizations, one appointment each | read the list route as the first organization's staff | only the caller's own reminder row is returned and no identifier from the other organization leaks |\n| TEST-003 | integration | one confirmed appointment with an existing reminder | call the resend command twice with the same idempotency key | exactly one additional reminder row exists and the second call reports the first result |\n\n## Implementation Phases\n\nPhases are dependency ordered, and each one leaves the application working on its own.\n\n### Phase 1 — Reminder record and scoped read path\n\n- **Depends on:** none\n- **Outcome:** staff can open an appointment and see whether a reminder was recorded for it.\n- **Deliverables:** the reminder entity with its tenant and organization columns, its migration, the zod validators, the list route on the CRUD route factory, and the feature identifiers in the access-control declaration.\n- **Tests:** TEST-001, TEST-002\n- **Validation:** `yarn generate`, focused typecheck, and the two named integration tests.\n- **Exit gate:** a reminder row created by hand in one organization is visible to that organization's staff and invisible to another organization's staff.\n\n### Phase 2 — Automatic send for a confirmed appointment\n\n- **Depends on:** Phase 1 exit gate\n- **Outcome:** a confirmed appointment produces its reminder without anyone touching the diary.\n- **Deliverables:** the scheduled worker that selects tomorrow's confirmed appointments, the guarded resend command, the idempotency key, and the typed event emitted after the sender accepts the message.\n- **Tests:** TEST-003\n- **Validation:** focused worker and command tests plus the named integration test.\n- **Exit gate:** running the worker twice over the same confirmed appointment contacts the customer exactly once, and a manual resend is recorded as a separate audited row.\n\n## Risks and Tradeoffs\n\n| Risk / tradeoff | Impact | Mitigation / detection | Residual risk |\n|---|---|---|---|\n| A transport timeout is retried and contacts the customer twice | annoyed customer, lost trust | idempotency key on appointment and scheduled moment, asserted by TEST-003 | a sender that accepts and then silently drops a message is not detectable here |\n| The worker runs long after the confirmed appointment has already started | a useless reminder | the worker selects only appointments that start after the run moment | clock skew between the worker host and the diary |\n\n## Changelog\n\n| Date | Change |\n|---|---|\n| 2026-08-04 | Initial covering specification for reminders on a confirmed appointment. |\n"
     }
   }
 }

package/dist/agentic/shared/ai/harness/knowledge-change.schema.json

@@ -0,0 +1,228 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://open-mercato.dev/schemas/standalone-harness-knowledge-change.schema.json",
+  "title": "Open Mercato standalone harness knowledge-change run manifest",
+  "description": "Validation artifact for a harness knowledge-contract or asset-sync change. Authored input declares the intended contract surface; the controller resolves SHAs and focused base/head execution evidence. Authored input MUST omit resolvedBaseSha, headSha, and focusedExecutions.",
+  "$ref": "#/$defs/authoredManifest",
+  "$defs": {
+    "sha256": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{64}$"
+    },
+    "gitSha": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{40}$"
+    },
+    "gitRef": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 200
+    },
+    "exactPath": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 400,
+      "pattern": "^(?!/)(?![A-Za-z]:)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)[^*?\\\\<>|\"]+(?<!/)$",
+      "description": "Repository-relative POSIX path to one exact regular file. Absolute paths, parent traversal, wildcards, and directory targets are rejected."
+    },
+    "caseId": {
+      "type": "string",
+      "pattern": "^OMH-[0-9]{3}$"
+    },
+    "rangeId": {
+      "type": "string",
+      "pattern": "^OMH-[0-9]{3}\\.\\.OMH-[0-9]{3}$",
+      "description": "Inclusive contiguous case-ID range, low bound first."
+    },
+    "laneId": {
+      "enum": [
+        "deterministic",
+        "routing",
+        "writable",
+        "generatedCodeReview",
+        "generativeJudge",
+        "generatedTests"
+      ]
+    },
+    "changedContract": {
+      "enum": [
+        "routing",
+        "skill-link",
+        "source-link",
+        "example-source",
+        "installed-source",
+        "discovery",
+        "context-read",
+        "evaluator",
+        "oracle"
+      ]
+    },
+    "authoritativeFile": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "sha256"],
+      "properties": {
+        "path": { "$ref": "#/$defs/exactPath" },
+        "sha256": { "$ref": "#/$defs/sha256" }
+      }
+    },
+    "generatedFile": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "sha256", "sourcePath"],
+      "properties": {
+        "path": { "$ref": "#/$defs/exactPath" },
+        "sha256": { "$ref": "#/$defs/sha256" },
+        "sourcePath": { "$ref": "#/$defs/exactPath" }
+      }
+    },
+    "sourceLinkInventory": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "path",
+        "baselineRef",
+        "expectedOwnerCount",
+        "expectedTopicCount",
+        "resolvedLinkCount",
+        "baselineAssetCount",
+        "baselineDispositionCount",
+        "baselinePath",
+        "baselineSchemaPath"
+      ],
+      "properties": {
+        "path": { "$ref": "#/$defs/exactPath" },
+        "baselineRef": { "$ref": "#/$defs/gitSha" },
+        "expectedOwnerCount": { "type": "integer", "minimum": 0 },
+        "expectedTopicCount": { "type": "integer", "minimum": 0 },
+        "resolvedLinkCount": { "type": "integer", "minimum": 0 },
+        "baselineAssetCount": { "type": "integer", "minimum": 0 },
+        "baselineDispositionCount": { "type": "integer", "minimum": 0 },
+        "baselinePath": { "$ref": "#/$defs/exactPath" },
+        "baselineSchemaPath": { "$ref": "#/$defs/exactPath" }
+      }
+    },
+    "executionOutcome": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["exitCode", "stdoutSha256", "stderrSha256"],
+      "properties": {
+        "exitCode": { "type": "integer", "minimum": 0, "maximum": 255 },
+        "stdoutSha256": { "$ref": "#/$defs/sha256" },
+        "stderrSha256": { "$ref": "#/$defs/sha256" }
+      }
+    },
+    "focusedExecution": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["testFile", "command", "baseWithTestPatch", "head"],
+      "properties": {
+        "testFile": { "$ref": "#/$defs/exactPath" },
+        "command": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "^[^`$;&|<>\\n]*$",
+            "description": "One argv token. Shell metacharacters are rejected; the controller never interpolates a shell."
+          }
+        },
+        "baseWithTestPatch": { "$ref": "#/$defs/executionOutcome" },
+        "head": { "$ref": "#/$defs/executionOutcome" }
+      }
+    },
+    "manifest": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "changeClass",
+        "baseRef",
+        "affectedCaseIds",
+        "affectedRanges",
+        "changedContracts",
+        "focusedTestFiles",
+        "authoritativeFiles",
+        "generatedFiles",
+        "expectedCatalogCount",
+        "requiredReleaseLanes",
+        "documentationFiles",
+        "sourceLinkInventory"
+      ],
+      "properties": {
+        "changeClass": { "enum": ["knowledge-contract", "asset-sync"] },
+        "baseRef": { "$ref": "#/$defs/gitRef" },
+        "resolvedBaseSha": { "$ref": "#/$defs/gitSha" },
+        "headSha": { "$ref": "#/$defs/gitSha" },
+        "affectedCaseIds": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/caseId" }
+        },
+        "affectedRanges": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/rangeId" }
+        },
+        "changedContracts": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/changedContract" }
+        },
+        "focusedTestFiles": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/exactPath" }
+        },
+        "authoritativeFiles": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/authoritativeFile" }
+        },
+        "generatedFiles": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/generatedFile" }
+        },
+        "expectedCatalogCount": { "type": "integer", "minimum": 0 },
+        "requiredReleaseLanes": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/laneId" }
+        },
+        "documentationFiles": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/exactPath" }
+        },
+        "sourceLinkInventory": { "$ref": "#/$defs/sourceLinkInventory" },
+        "focusedExecutions": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/focusedExecution" }
+        }
+      }
+    },
+    "authoredManifest": {
+      "allOf": [
+        { "$ref": "#/$defs/manifest" },
+        {
+          "not": {
+            "anyOf": [
+              { "required": ["resolvedBaseSha"] },
+              { "required": ["headSha"] },
+              { "required": ["focusedExecutions"] }
+            ]
+          },
+          "description": "resolvedBaseSha, headSha, and focusedExecutions are controller-owned output fields; author-supplied evidence fails validation."
+        }
+      ]
+    },
+    "completedManifest": {
+      "allOf": [
+        { "$ref": "#/$defs/manifest" },
+        { "required": ["resolvedBaseSha", "headSha", "focusedExecutions"] }
+      ]
+    }
+  }
+}

package/dist/agentic/shared/ai/harness/release-matrix.json

@@ -25,7 +25,8 @@
         "OMH-093", "OMH-105", "OMH-107", "OMH-115", "OMH-122", "OMH-128", "OMH-130", "OMH-133",
         "OMH-137", "OMH-140", "OMH-144", "OMH-146", "OMH-149", "OMH-150", "OMH-151", "OMH-153",
         "OMH-156", "OMH-163", "OMH-164", "OMH-165", "OMH-171", "OMH-172", "OMH-181", "OMH-185",
-        "OMH-188", "OMH-189", "OMH-190", "OMH-191", "OMH-192", "OMH-193"
+        "OMH-188", "OMH-189", "OMH-190", "OMH-191", "OMH-192", "OMH-193",
+        "OMH-223", "OMH-224"
       ]
     },
     "runners": {
@@ -79,7 +80,9 @@
     { "caseId": "OMH-190" },
     { "caseId": "OMH-191" },
     { "caseId": "OMH-192" },
-    { "caseId": "OMH-193" }
+    { "caseId": "OMH-193" },
+    { "caseId": "OMH-223" },
+    { "caseId": "OMH-224" }
   ],
   "generatedCodeReview": {
     "required": true,
@@ -92,7 +95,8 @@
       "OMH-130", "OMH-133", "OMH-137", "OMH-140", "OMH-144", "OMH-146",
       "OMH-149", "OMH-150", "OMH-151", "OMH-153", "OMH-156", "OMH-163",
       "OMH-164", "OMH-165", "OMH-171", "OMH-172", "OMH-181", "OMH-185",
-      "OMH-188", "OMH-189", "OMH-190", "OMH-191", "OMH-192", "OMH-193"
+      "OMH-188", "OMH-189", "OMH-190", "OMH-191", "OMH-192", "OMH-193",
+        "OMH-223", "OMH-224"
     ],
     "runners": {
       "codex": { "modelSelector": "default" },
@@ -115,7 +119,8 @@
       "OMH-130", "OMH-133", "OMH-137", "OMH-140", "OMH-144", "OMH-146",
       "OMH-149", "OMH-150", "OMH-151", "OMH-153", "OMH-156", "OMH-163",
       "OMH-164", "OMH-165", "OMH-171", "OMH-172", "OMH-181", "OMH-185",
-      "OMH-188", "OMH-189", "OMH-190", "OMH-191", "OMH-192", "OMH-193"
+      "OMH-188", "OMH-189", "OMH-190", "OMH-191", "OMH-192", "OMH-193",
+        "OMH-223", "OMH-224"
     ],
     "runners": {
       "codex": { "modelSelector": "default" },

package/dist/agentic/shared/ai/harness/result.schema.json

@@ -25,6 +25,66 @@
     "status": { "enum": ["pass", "fail", "error"] },
     "sanitizedError": { "type": "string", "maxLength": 4096 },
     "refusedContextReads": { "type": "array", "uniqueItems": true, "items": { "type": "string" } },
+    "exampleReadPolicy": {
+      "type": "object",
+      "description": "Sanitized accounting of the case's canonical-example, declared source-reference, and reason-gated installed-source reads. Present when the case declares context.exampleRoots or context.sourceReferenceIds. Carries no file content.",
+      "additionalProperties": false,
+      "required": ["roots", "fallback", "references"],
+      "properties": {
+        "references": {
+          "type": "object",
+          "description": "Declared source-link references: what the case named, which origin owners it read first, and which exact targets it followed. Carries no file content.",
+          "additionalProperties": false,
+          "required": ["declared", "owners", "followed"],
+          "properties": {
+            "declared": { "type": "array", "uniqueItems": true, "items": { "type": "string" } },
+            "owners": { "type": "array", "uniqueItems": true, "items": { "type": "string" } },
+            "followed": {
+              "type": "array",
+              "items": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": ["referenceId", "originAsset", "resolvedPath", "targetKind", "package", "version", "hash"],
+                "properties": {
+                  "referenceId": { "type": "string" },
+                  "originAsset": { "type": "string" },
+                  "resolvedPath": { "type": "string" },
+                  "targetKind": { "type": ["string", "null"] },
+                  "package": { "type": ["string", "null"] },
+                  "version": { "type": ["string", "null"] },
+                  "hash": { "type": ["string", "null"] }
+                }
+              }
+            }
+          }
+        },
+        "roots": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["root", "entrypoints", "capabilities", "files", "bytes"],
+            "properties": {
+              "root": { "type": "string" },
+              "entrypoints": { "type": "array", "items": { "type": "string" } },
+              "capabilities": { "type": "array", "uniqueItems": true, "items": { "type": "string" } },
+              "files": { "type": "integer", "minimum": 0 },
+              "bytes": { "type": "integer", "minimum": 0 }
+            }
+          }
+        },
+        "fallback": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["reason", "files", "bytes"],
+          "properties": {
+            "reason": { "type": ["string", "null"], "enum": ["SPECIALIST_ROUTE_NOT_DECLARED", "INSTALLED_VERSION_CONTRACT_MISMATCH", null] },
+            "files": { "type": "integer", "minimum": 0 },
+            "bytes": { "type": "integer", "minimum": 0 }
+          }
+        }
+      }
+    },
     "actualContext": {
       "type": "object",
       "additionalProperties": false,

package/dist/agentic/shared/ai/harness/routing-response.schema.json

@@ -7,6 +7,16 @@
     "selectedSkills": { "type": "array", "items": { "type": "string", "pattern": "^om-[a-z0-9-]+$", "maxLength": 100 } },
     "selectedContext": { "type": "array", "items": { "type": "string", "maxLength": 300 } },
     "decisions": { "type": "array", "items": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]*$", "maxLength": 100 } },
+    "specRouting": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["decision", "reasonCodes"],
+      "properties": {
+        "decision": { "type": "string", "enum": ["spec-first", "direct", "reuse-spec", "ask"] },
+        "reasonCodes": { "type": "array", "minItems": 1, "maxItems": 8, "uniqueItems": true, "items": { "type": "string", "pattern": "^[A-Z][A-Z0-9]*(?:_[A-Z0-9]+)*$", "maxLength": 60 } },
+        "coveringSpecPath": { "type": "string", "maxLength": 300 }
+      }
+    },
     "violations": { "type": "array", "items": { "type": "string", "maxLength": 4096 } }
   }
 }