@open-mercato/cli 0.6.8-develop.6963.1.04a6d320e9 → 0.6.8-develop.6969.1.7a32706312

package/dist/agentic/shared/ai/harness/RELEASE.md

@@ -6,7 +6,7 @@ Run the complete per-release gate from a generated standalone app with one comma
 yarn harness:release --runner codex --prepare-targets /absolute/empty-release-targets --acknowledge-writes
 ```
 
-Choose exactly one blocking primary runner with `--runner codex` or `--runner claude`. That runner owns the complete 229-case routing gate and every writable/review lane. To add cross-model portability evidence, explicitly pass the other runner as `--portability-runner claude` or `--portability-runner codex`; it runs only the exact 48-case representative read-only set. The two runners must differ. Omitting the portability option is valid and is recorded as `portabilityRunner: null`; no secondary result is claimed. There is no per-case fallback or mixed primary ownership. Once requested, a portability failure or unavailable runner fails that extended release run.
+Choose exactly one blocking primary runner with `--runner codex` or `--runner claude`. That runner owns the complete 231-case routing gate and every writable/review lane. To add cross-model portability evidence, explicitly pass the other runner as `--portability-runner claude` or `--portability-runner codex`; it runs only the exact 49-case representative read-only set. The two runners must differ. Omitting the portability option is valid and is recorded as `portabilityRunner: null`; no secondary result is claimed. There is no per-case fallback or mixed primary ownership. Once requested, a portability failure or unavailable runner fails that extended release run.
 
 `--prepare-targets` accepts only an absolute, new or empty regular directory outside the controller app. The controller must be a sanitized fresh scaffold: automatic preparation fails before copying when it finds `.env`, `.env.*` (except `.env.example`, `.env.sample`, and `.env.template`), credential files, or private-key files. Never use a configured development or production app as the controller. It copies the fresh scaffold once per catalog case whose `evaluationKind` is `implementation` or `regression`, while excluding `.git`, `node_modules`, build/cache/coverage output, `.ai/harness/results`, `.ai/reports`, and `.ai/framework-context`. Each target receives a guarded link to the controller's installed dependency tree. The OS sandbox resolves that link as read-only during both the writable model run and the target command gate. The release gate also hashes every dependency entry and regular-file body once before execution and once after the complete suite, and fails if any nested content or metadata changed. A generated `release-targets.json` records the local mapping.
 
@@ -34,17 +34,17 @@ For externally prepared apps, `--writable-targets /absolute/release-targets.json
 }
 ```
 
-The current catalog contains 229 cases, including 48 writable implementation/regression cases (21.0%). The command still derives all counts and case IDs from `cases.json`, `validators.json`, and `release-matrix.json`; those figures are documented release facts, not runner constants. The matrix keeps both supported runner model selectors, an exact all-case primary profile, an exact 48-case portability profile, and runner-neutral writable assignments. Run `yarn install-skills` first so the pinned external `om-code-review` skill and ownership evidence are present; the reusable local `om-judge-agent-session` skill ships with the scaffold. Before running a model or writing a fixture, the release command requires complete deterministic, primary live-routing, writable, trusted-oracle, target, generated-test, and generative-judge coverage. Every one of the 48 writable cases must have a judge assignment composing both skills. Missing business fixtures or release-matrix entries fail preflight and are listed by exact case ID in the report.
+The current catalog contains 231 cases, including 49 writable implementation/regression cases (21.2%). The command still derives all counts and case IDs from `cases.json`, `validators.json`, and `release-matrix.json`; those figures are documented release facts, not runner constants. The matrix keeps both supported runner model selectors, an exact all-case primary profile, an exact 49-case portability profile, and runner-neutral writable assignments. Run `yarn install-skills` first so the pinned external `om-code-review` skill and ownership evidence are present; the reusable local `om-judge-agent-session` skill ships with the scaffold. Before running a model or writing a fixture, the release command requires complete deterministic, primary live-routing, writable, trusted-oracle, target, generated-test, and generative-judge coverage. Every one of the 49 writable cases must have a judge assignment composing both skills. Missing business fixtures or release-matrix entries fail preflight and are listed by exact case ID in the report.
 
 ## PR #4529 remediation evidence
 
-The PR's focused remediation evidence is not a release-certification substitute. Fresh emitted controllers pass deterministic 192/192, and the field-tested OMH-188–192 generative cohort passes on default Codex, Claude Sonnet, and high-effort gpt-5.4-mini. Fresh OMH-185 writable attempts fixed concrete organization-scope, command-object, module-activation, command-snapshot, schema, custom-field, UI, and Jest guidance defects at their routed owners without relaxing trusted oracles. The final attempt reached the case's fixed 600-second ceiling and is excluded from pass evidence. Issue #4670 now owns the complete selected-primary 229-case routing and 48-case writable/generated-test/review certification, prioritizing the generative cohort and recording unavailable Claude lanes without fallback or mixed-runner ownership.
+The PR's focused remediation evidence is not a release-certification substitute. Fresh emitted controllers pass deterministic 192/192, and the field-tested OMH-188–192 generative cohort passes on default Codex, Claude Sonnet, and high-effort gpt-5.4-mini. Fresh OMH-185 writable attempts fixed concrete organization-scope, command-object, module-activation, command-snapshot, schema, custom-field, UI, and Jest guidance defects at their routed owners without relaxing trusted oracles. The final attempt reached the case's fixed 600-second ceiling and is excluded from pass evidence. Issue #4670 now owns the complete selected-primary 231-case routing and 49-case writable/generated-test/review certification, prioritizing the generative cohort and recording unavailable Claude lanes without fallback or mixed-runner ownership.
 
 After preflight it runs, in order:
 
 1. deterministic validation for the complete catalog;
 2. the release matrix's fixed `yarn generate`, `yarn typecheck`, `yarn lint`, and `yarn build` foundation;
-3. the selected primary runner across all 229 live-routing cases, followed by the optional distinct portability runner across the exact 48-case read-only sample when requested;
+3. the selected primary runner across all 231 live-routing cases, followed by the optional distinct portability runner across the exact 49-case read-only sample when requested;
 4. fixture preparation and the selected primary runner for every writable case, including the controller-owned AST/behavior oracles and target typecheck;
 5. `yarn generate`, `yarn typecheck`, `yarn lint`, and `yarn build` in every writable target, after its trusted oracles;
 6. real generated-code execution for OMH-163 and OMH-192 through fixed Jest, OMH-164 through API-only Playwright, and OMH-165 through real-browser Playwright; and

package/dist/agentic/shared/ai/harness/cases.json

@@ -392,6 +392,7 @@
         ".ai/skills/om-implement-spec/references/spec-resolution.md",
         ".ai/skills/om-implement-spec/references/phases-and-gates.md",
         ".ai/skills/om-implement-spec/references/planning-and-progress.md",
+        ".ai/skills/om-implement-spec/references/resume.md",
         ".ai/skills/om-implement-spec/references/report-templates.md"
       ],
       "allowedExtra": [
@@ -409,6 +410,9 @@
       "working-phases",
       "smallest-validation",
       "implementation-progress",
+      "slice-ledger-write",
+      "in-flight-ledger",
+      "atomic-edit-sequence",
       "stable-implementation-report",
       "spec-reference-marker"
     ],
@@ -5683,7 +5687,7 @@
       "patterns.forbidden"
     ],
     "maxContextFiles": 13,
-    "maxInitialContextBytes": 65536,
+    "maxInitialContextBytes": 66560,
     "maxTotalContextBytes": 311296,
     "relatedCases": [
       "OMH-024",
@@ -7872,7 +7876,7 @@
       "oracle.business.command"
     ],
     "maxContextFiles": 10,
-    "maxInitialContextBytes": 65536,
+    "maxInitialContextBytes": 66560,
     "maxTotalContextBytes": 311296,
     "relatedCases": [
       "OMH-060",
@@ -8263,7 +8267,7 @@
       "patterns.forbidden"
     ],
     "maxContextFiles": 12,
-    "maxInitialContextBytes": 65536,
+    "maxInitialContextBytes": 66560,
     "maxTotalContextBytes": 548864,
     "relatedCases": [
       "OMH-018",
@@ -8631,7 +8635,7 @@
       "patterns.forbidden"
     ],
     "maxContextFiles": 10,
-    "maxInitialContextBytes": 57344,
+    "maxInitialContextBytes": 58368,
     "maxTotalContextBytes": 274432,
     "relatedCases": [
       "OMH-017",
@@ -8808,7 +8812,7 @@
       "patterns.forbidden"
     ],
     "maxContextFiles": 10,
-    "maxInitialContextBytes": 57344,
+    "maxInitialContextBytes": 58368,
     "maxTotalContextBytes": 274432,
     "relatedCases": [
       "OMH-012",
@@ -9005,7 +9009,7 @@
       "oracle.business.command"
     ],
     "maxContextFiles": 10,
-    "maxInitialContextBytes": 57344,
+    "maxInitialContextBytes": 58368,
     "maxTotalContextBytes": 335872,
     "relatedCases": [
       "OMH-031",
@@ -9974,7 +9978,7 @@
       "oracle.business.ui-surface"
     ],
     "maxContextFiles": 8,
-    "maxInitialContextBytes": 49152,
+    "maxInitialContextBytes": 50176,
     "maxTotalContextBytes": 274432,
     "relatedCases": [
       "OMH-027",
@@ -10178,7 +10182,7 @@
       "patterns.forbidden"
     ],
     "maxContextFiles": 10,
-    "maxInitialContextBytes": 57344,
+    "maxInitialContextBytes": 58368,
     "maxTotalContextBytes": 348160,
     "relatedCases": [
       "OMH-010",
@@ -10269,7 +10273,7 @@
       "patterns.forbidden"
     ],
     "maxContextFiles": 10,
-    "maxInitialContextBytes": 57344,
+    "maxInitialContextBytes": 58368,
     "maxTotalContextBytes": 204800,
     "relatedCases": [
       "OMH-009",
@@ -10455,7 +10459,7 @@
       "patterns.forbidden"
     ],
     "maxContextFiles": 10,
-    "maxInitialContextBytes": 65536,
+    "maxInitialContextBytes": 66560,
     "maxTotalContextBytes": 380928,
     "relatedCases": [
       "OMH-069",
@@ -10844,7 +10848,7 @@
       "patterns.forbidden"
     ],
     "maxContextFiles": 10,
-    "maxInitialContextBytes": 57344,
+    "maxInitialContextBytes": 58368,
     "maxTotalContextBytes": 348160,
     "relatedCases": [
       "OMH-012",
@@ -11206,7 +11210,7 @@
       "oracle.business.async-operation"
     ],
     "maxContextFiles": 10,
-    "maxInitialContextBytes": 57344,
+    "maxInitialContextBytes": 58368,
     "maxTotalContextBytes": 196608,
     "relatedCases": [
       "OMH-012",
@@ -11407,7 +11411,7 @@
       "oracle.business.ui-surface"
     ],
     "maxContextFiles": 10,
-    "maxInitialContextBytes": 57344,
+    "maxInitialContextBytes": 58368,
     "maxTotalContextBytes": 344064,
     "relatedCases": [
       "OMH-034",
@@ -12465,7 +12469,7 @@
       "patterns.forbidden"
     ],
     "maxContextFiles": 11,
-    "maxInitialContextBytes": 65536,
+    "maxInitialContextBytes": 66560,
     "maxTotalContextBytes": 307200,
     "relatedCases": [
       "OMH-053",
@@ -14876,6 +14880,7 @@
         ".ai/skills/om-implement-spec/references/spec-resolution.md",
         ".ai/skills/om-implement-spec/references/phases-and-gates.md",
         ".ai/skills/om-implement-spec/references/planning-and-progress.md",
+        ".ai/skills/om-implement-spec/references/resume.md",
         ".ai/skills/om-implement-spec/references/report-templates.md"
       ],
       "forbidden": [
@@ -14892,6 +14897,9 @@
       "selected-phase-boundary",
       "preserve-spec-contracts",
       "implementation-progress",
+      "slice-ledger-write",
+      "in-flight-ledger",
+      "atomic-edit-sequence",
       "stable-implementation-report",
       "spec-reference-marker"
     ],
@@ -20845,5 +20853,76 @@
       "OMH-194",
       "OMH-202"
     ]
+  },
+  {
+    "id": "OMH-230",
+    "title": "Resume the first unticked slice of an interrupted specification",
+    "family": "architecture",
+    "mode": "spec",
+    "evaluationKind": "implementation",
+    "risk": "medium",
+    "prompt": "Resume the interrupted implementation described by .ai/specs/2026-08-10-interrupted-export-format.md. Begin with the focused TypeScript check named by the spec, reconcile the implementation tree against the canonical ledger, and preserve the already verified first slice without re-executing it. Resume from the first unticked slice: repair the paired export contract and formatter atomically so no intermediate invalid state is left behind, then update the same ledger with exact verification evidence. Use an IN FLIGHT marker while the slice is incomplete and clear it only after the slice gate passes. Do not create a second plan or spec and do not rewrite the preserved artifact.",
+    "tags": ["spec", "resume", "planning-proof", "writable"],
+    "owner": { "kind": "skill", "path": ".ai/skills/om-implement-spec/references/resume.md", "ruleIds": ["BC-01", "BC-03"] },
+    "expectedRouter": { "required": ["spec-pr"], "allowedExtra": ["module-data", "debugging", "testing"] },
+    "requiredSkills": ["om-implement-spec"],
+    "context": {
+      "required": ["AGENTS.md", ".ai/guides/spec-delivery.md", ".ai/skills/om-implement-spec/SKILL.md", ".ai/skills/om-implement-spec/references/resume.md", ".ai/skills/om-implement-spec/references/planning-and-progress.md"],
+      "allowedExtra": [".ai/skills/om-implement-spec/references/phases-and-gates.md"],
+      "forbidden": [".env*", ".git/**", ".mercato/generated/**"]
+    },
+    "decisionVocabulary": ["focused-typecheck-first", "ledger-tree-reconciliation", "resume-first-unticked-slice", "never-reexecute-ticked", "never-trust-unticked", "in-flight-ledger", "atomic-edit-sequence", "restart-from-first-slice", "trust-unticked-ledger"],
+    "requiredDecisions": ["focused-typecheck-first", "ledger-tree-reconciliation", "resume-first-unticked-slice", "never-reexecute-ticked", "never-trust-unticked", "in-flight-ledger", "atomic-edit-sequence"],
+    "forbiddenPatterns": ["(?:tenant|organization).{0,30}(?:unscoped|scope optional)", "node_modules.{0,40}(?:write|edit|patch)"],
+    "validators": ["catalog.schema", "owner.reference", "skills.reference", "router.contract", "context.budget", "context.forbidden", "patterns.forbidden", "writable.allowed-paths", "oracle.artifacts", "oracle.planning.spec-resume"],
+    "fixture": { "scaffold": "fresh-standalone", "setup": ["fixture:spec-resume-half-done"] },
+    "allowedWrites": [".ai/specs/2026-08-10-interrupted-export-format.md", "src/modules/resume_demo/lib/export-contract.ts", "src/modules/resume_demo/lib/format-export.ts"],
+    "oracle": {
+      "validatorIds": ["writable.allowed-paths", "oracle.artifacts", "oracle.planning.spec-resume"],
+      "expectedArtifacts": [".ai/specs/2026-08-10-interrupted-export-format.md", "src/modules/resume_demo/lib/export-contract.ts", "src/modules/resume_demo/lib/format-export.ts"]
+    },
+    "timeoutMs": 600000,
+    "maxContextFiles": 10,
+    "maxInitialContextBytes": 65536,
+    "maxTotalContextBytes": 131072,
+    "relatedCases": ["OMH-006", "OMH-168", "OMH-223"],
+    "source": { "paths": [".ai/specs/2026-08-14-standalone-harness-optimizations.md"] }
+  },
+  {
+    "id": "OMH-231",
+    "title": "Resolve shared CRUD and command contracts through the installed digest",
+    "family": "architecture",
+    "mode": "analysis",
+    "evaluationKind": "routing",
+    "risk": "medium",
+    "prompt": "Before changing an app-owned command-backed CRUD route, explain the installed contracts for CommandHandler execution and undo/redo hooks, command registration, command-owned CRUD persistence and side effects, makeCrudRoute ownership, typed event timing, command optimistic locking, defensive JSON parsing, and DataEngine scope/flush behavior. Select the emitted guide and its exact installed source links first. Use the bounded resolver only for one named fact that remains unresolved, and do not browse a package directory or modify node_modules.",
+    "tags": ["framework-context", "commands", "crud", "source-links"],
+    "owner": { "kind": "guide", "path": ".ai/guides/framework-contracts.md", "ruleIds": ["BC-01", "BC-03", "BC-05", "BC-07"] },
+    "expectedRouter": { "required": ["framework-context"], "allowedExtra": ["module-data", "architecture"] },
+    "requiredSkills": [],
+    "context": {
+      "required": ["AGENTS.md", ".ai/guides/framework-contracts.md"],
+      "allowedExtra": [".ai/skills/om-framework-context/SKILL.md"],
+      "forbidden": [".env*", ".git/**"],
+      "sourceReferenceIds": [
+        "guides/framework-contracts:node_modules/@open-mercato/shared/src/lib/commands/types.ts",
+        "guides/framework-contracts:node_modules/@open-mercato/shared/src/lib/commands/registry.ts",
+        "guides/framework-contracts:node_modules/@open-mercato/shared/src/lib/commands/runCrudCommandWrite.ts",
+        "guides/framework-contracts:node_modules/@open-mercato/shared/src/lib/crud/factory.ts",
+        "guides/framework-contracts:node_modules/@open-mercato/shared/src/modules/events/factory.ts",
+        "guides/framework-contracts:node_modules/@open-mercato/shared/src/lib/crud/optimistic-lock-command.ts",
+        "guides/framework-contracts:node_modules/@open-mercato/shared/src/lib/http/readJsonSafe.ts",
+        "guides/framework-contracts:node_modules/@open-mercato/shared/src/lib/data/engine.ts"
+      ]
+    },
+    "decisionVocabulary": ["framework-contract-digest-first", "exact-installed-source-links", "bounded-resolver-only-if-unresolved", "installed-packages-read-only", "whole-package-discovery", "node-modules-edit"],
+    "requiredDecisions": ["framework-contract-digest-first", "exact-installed-source-links", "bounded-resolver-only-if-unresolved", "installed-packages-read-only"],
+    "forbiddenPatterns": ["node_modules.{0,40}(?:write|edit|patch)", "node_modules/@open-mercato/shared/(?:\\*\\*|src/?$)"],
+    "validators": ["catalog.schema", "owner.reference", "skills.reference", "router.contract", "context.budget", "context.forbidden", "patterns.forbidden"],
+    "maxContextFiles": 12,
+    "maxInitialContextBytes": 73728,
+    "maxTotalContextBytes": 196608,
+    "relatedCases": ["OMH-003", "OMH-222"],
+    "source": { "paths": [".ai/specs/2026-08-14-standalone-harness-optimizations.md"] }
   }
 ]

package/dist/agentic/shared/ai/harness/cases.schema.json

@@ -3,8 +3,8 @@
   "$id": "https://open-mercato.dev/schemas/standalone-harness-cases.schema.json",
   "title": "Open Mercato standalone harness case catalog",
   "type": "array",
-  "minItems": 229,
-  "maxItems": 229,
+  "minItems": 231,
+  "maxItems": 231,
   "items": {
     "type": "object",
     "additionalProperties": false,
@@ -15,7 +15,7 @@
       "maxTotalContextBytes", "relatedCases"
     ],
     "properties": {
-      "id": { "type": "string", "pattern": "^OMH-(00[1-9]|0[1-9][0-9]|1[0-9][0-9]|20[0-9]|21[0-9]|22[0-9])$" },
+      "id": { "type": "string", "pattern": "^OMH-(00[1-9]|0[1-9][0-9]|1[0-9][0-9]|20[0-9]|21[0-9]|22[0-9]|23[01])$" },
       "title": { "type": "string", "minLength": 12, "maxLength": 180 },
       "family": { "enum": ["architecture", "module", "umes", "integration", "ai-workflow", "bugfix", "business", "testing"] },
       "mode": { "enum": ["analysis", "one-shot", "spec", "bugfix", "review"] },
@@ -168,7 +168,7 @@
       "maxInitialContextBytes": { "type": "integer", "minimum": 4096, "maximum": 98304 },
       "maxTotalContextBytes": { "type": "integer", "minimum": 8192, "maximum": 1048576 },
       "timeoutMs": { "type": "integer", "minimum": 1000, "maximum": 600000 },
-      "relatedCases": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "type": "string", "pattern": "^OMH-(00[1-9]|0[1-9][0-9]|1[0-9][0-9]|20[0-9]|21[0-9]|22[0-9])$" } },
+      "relatedCases": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "type": "string", "pattern": "^OMH-(00[1-9]|0[1-9][0-9]|1[0-9][0-9]|20[0-9]|21[0-9]|22[0-9]|23[01])$" } },
       "source": {
         "type": "object",
         "additionalProperties": false,

package/dist/agentic/shared/ai/harness/fixtures/index.json

@@ -46,6 +46,7 @@
     "omh-191": { "purpose": "Room bookings data layer without the durable hold-expiry workflow.", "seededArtifacts": ["src/modules/room_bookings/index.ts", "src/modules/room_bookings/data/entities.ts"], "precondition": "oracle.workflow.durable-timer must fail" },
     "omh-192": { "purpose": "Partial CRM-backed library loan slice that trusts payload scope, races checkout, inverts lifecycle undo, and ships non-executable Jest coverage.", "seededArtifacts": ["src/modules/library/commands/crm-loans.ts", "src/modules/library/api/schemas.ts", "src/modules/library/commands/__tests__/crm-loans.test.ts"], "precondition": "oracle.regression.crm-library must fail" },
     "planning-new-feature": { "purpose": "Fresh scaffold whose .ai/specs holds only the emitted scaffolding — README, blank template, and the shipped reference-module activation spec — none of which covers the requested capability.", "seededArtifacts": [], "precondition": "oracle.planning.spec-first must fail" },
-    "planning-existing-spec": { "purpose": "Covering specification for reminders on a confirmed appointment, seeded without the rescheduled/cancelled and per-channel outcome contract the prompt introduces.", "seededArtifacts": [".ai/specs/2026-08-04-service-appointment-reminders.md"], "precondition": "oracle.planning.spec-reuse must fail" }
+    "planning-existing-spec": { "purpose": "Covering specification for reminders on a confirmed appointment, seeded without the rescheduled/cancelled and per-channel outcome contract the prompt introduces.", "seededArtifacts": [".ai/specs/2026-08-04-service-appointment-reminders.md"], "precondition": "oracle.planning.spec-reuse must fail" },
+    "spec-resume-half-done": { "purpose": "Interrupted two-slice implementation with one verified ledger row, one stale unticked row, a preserved artifact, and an invalid paired TypeScript edit.", "seededArtifacts": [".ai/specs/2026-08-10-interrupted-export-format.md", "src/modules/resume_demo/lib/preserved.ts", "src/modules/resume_demo/lib/format-export.ts"], "precondition": "oracle.planning.spec-resume must fail" }
   }
 }

package/dist/agentic/shared/ai/harness/fixtures/seeds.json

@@ -161,6 +161,11 @@
     "planning-new-feature": {},
     "planning-existing-spec": {
       ".ai/specs/2026-08-04-service-appointment-reminders.md": "# Service Appointment Reminders\n\n**Date**: 2026-08-04\n**Status**: Ready for implementation\n\n## TLDR\n\nBranch staff spend part of every afternoon telephoning customers about tomorrow's confirmed appointment. This slice sends that reminder automatically for a confirmed appointment so staff keep the phone free for booking work and the customer still arrives on the agreed day.\n\n## Problem Statement\n\nEvery service branch books work into an appointment diary, and a booking becomes real for the customer only once a member of staff marks it confirmed. Today nothing tells the customer about that confirmation except a manual telephone call made the afternoon before the visit. Two branches keep a paper call list, one keeps a spreadsheet, and none of them records whether the call was ever made. When the afternoon is busy the calls are skipped, the customer forgets, the technician arrives at an empty address, and the branch loses a whole slot it could have sold to somebody else. Staff also cannot tell an auditing manager which customers were actually contacted, so a complaint about a missed visit turns into an argument about memory rather than a look at a record. The branches have asked for the reminder to leave the diary automatically once an appointment is confirmed, and for the app to keep the proof that it went out.\n\n## Users, Permissions, and Scope\n\n| Actor | Allowed outcomes | Scope rule | Required feature IDs |\n|---|---|---|---|\n| Branch staff | view the reminder history for an appointment | own organization | `appointment_reminders.view` |\n| Branch manager | view history and trigger one manual resend | own organization | `appointment_reminders.manage` |\n\nBoth the tenant and the organization are always derived from the trusted request context. A reminder record is written with the same scope as the appointment that produced it, and every read filters on that scope so one branch can never see another branch's customer contact history.\n\n## API, Command, and Error Contracts\n\n| Method / command | Path / ID | Auth and feature gate | Input | Success response / event | Errors and concurrency |\n|---|---|---|---|---|---|\n| `GET` | `/api/appointment-reminders` | auth + `appointment_reminders.view` | `appointmentId`, `page`, `pageSize` | `{ items, totalCount }` | 400 invalid query, 401 unauthenticated, 403 wrong feature |\n| `POST` | `/api/appointment-reminders/resend` | auth + `appointment_reminders.manage` | `appointmentId`, `reason` | 201 and `appointment_reminders.reminder.sent` | 400 invalid body, 403 wrong feature, 409 stale appointment version |\n\nThe list route is built on the CRUD route factory and returns only reminder rows for appointments inside the caller's trusted scope. The resend command is a guarded command route rather than a plain handler because it has an external side effect: it loads the appointment, refuses the write when the caller's appointment version is behind the stored one, records a new reminder row, and only then hands the message to the mail sender. The command carries an idempotency key derived from the appointment identifier and the scheduled reminder moment, so a retry after a transport timeout reuses the existing row instead of contacting the same customer twice. A reminder row stores the appointment identifier, the address it was sent to, the moment it was queued, and the moment the sender accepted it.\n\n## Integration Coverage\n\nTests are self-contained: each one creates its own tenant, organization, staff user, customer, and appointment, and removes those records in a `finally` block.\n\n| Test ID | Level | Setup / fixture | Actions | Assertions |\n|---|---|---|---|---|\n| TEST-001 | integration | one organization, one confirmed appointment for tomorrow | run the reminder worker | one reminder row exists, the sender received one message, and a second worker run adds nothing |\n| TEST-002 | security | two organizations, one appointment each | read the list route as the first organization's staff | only the caller's own reminder row is returned and no identifier from the other organization leaks |\n| TEST-003 | integration | one confirmed appointment with an existing reminder | call the resend command twice with the same idempotency key | exactly one additional reminder row exists and the second call reports the first result |\n\n## Implementation Phases\n\nPhases are dependency ordered, and each one leaves the application working on its own.\n\n### Phase 1 — Reminder record and scoped read path\n\n- **Depends on:** none\n- **Outcome:** staff can open an appointment and see whether a reminder was recorded for it.\n- **Deliverables:** the reminder entity with its tenant and organization columns, its migration, the zod validators, the list route on the CRUD route factory, and the feature identifiers in the access-control declaration.\n- **Tests:** TEST-001, TEST-002\n- **Validation:** `yarn generate`, focused typecheck, and the two named integration tests.\n- **Exit gate:** a reminder row created by hand in one organization is visible to that organization's staff and invisible to another organization's staff.\n\n### Phase 2 — Automatic send for a confirmed appointment\n\n- **Depends on:** Phase 1 exit gate\n- **Outcome:** a confirmed appointment produces its reminder without anyone touching the diary.\n- **Deliverables:** the scheduled worker that selects tomorrow's confirmed appointments, the guarded resend command, the idempotency key, and the typed event emitted after the sender accepts the message.\n- **Tests:** TEST-003\n- **Validation:** focused worker and command tests plus the named integration test.\n- **Exit gate:** running the worker twice over the same confirmed appointment contacts the customer exactly once, and a manual resend is recorded as a separate audited row.\n\n## Risks and Tradeoffs\n\n| Risk / tradeoff | Impact | Mitigation / detection | Residual risk |\n|---|---|---|---|\n| A transport timeout is retried and contacts the customer twice | annoyed customer, lost trust | idempotency key on appointment and scheduled moment, asserted by TEST-003 | a sender that accepts and then silently drops a message is not detectable here |\n| The worker runs long after the confirmed appointment has already started | a useless reminder | the worker selects only appointments that start after the run moment | clock skew between the worker host and the diary |\n\n## Changelog\n\n| Date | Change |\n|---|---|\n| 2026-08-04 | Initial covering specification for reminders on a confirmed appointment. |\n"
+    },
+    "spec-resume-half-done": {
+      ".ai/specs/2026-08-10-interrupted-export-format.md": "# Interrupted Export Format\n\n## Implementation Status\n\nProgress: 1/2\n\n- [x] Slice 1 — preserve the stable export marker. verified: `yarn typecheck --pretty false`\n- [ ] Slice 2 — add `export-contract.ts` and repair `format-export.ts` as one atomic pair. verify: `yarn typecheck --pretty false`\n",
+      "src/modules/resume_demo/lib/preserved.ts": "export const immutableResumeBaseline = 'verified-v1'\n",
+      "src/modules/resume_demo/lib/format-export.ts": "import type { ExportContract } from './export-contract'\n\nexport function formatExport(label: number): ExportContract {\n  return { label }\n}\n"
     }
   }
 }

package/dist/agentic/shared/ai/harness/release-matrix.json

@@ -26,7 +26,7 @@
         "OMH-137", "OMH-140", "OMH-144", "OMH-146", "OMH-149", "OMH-150", "OMH-151", "OMH-153",
         "OMH-156", "OMH-163", "OMH-164", "OMH-165", "OMH-171", "OMH-172", "OMH-181", "OMH-185",
         "OMH-188", "OMH-189", "OMH-190", "OMH-191", "OMH-192", "OMH-193",
-        "OMH-223", "OMH-224"
+        "OMH-223", "OMH-224", "OMH-230"
       ]
     },
     "runners": {
@@ -82,7 +82,8 @@
     { "caseId": "OMH-192" },
     { "caseId": "OMH-193" },
     { "caseId": "OMH-223" },
-    { "caseId": "OMH-224" }
+    { "caseId": "OMH-224" },
+    { "caseId": "OMH-230" }
   ],
   "generatedCodeReview": {
     "required": true,
@@ -96,7 +97,7 @@
       "OMH-149", "OMH-150", "OMH-151", "OMH-153", "OMH-156", "OMH-163",
       "OMH-164", "OMH-165", "OMH-171", "OMH-172", "OMH-181", "OMH-185",
       "OMH-188", "OMH-189", "OMH-190", "OMH-191", "OMH-192", "OMH-193",
-        "OMH-223", "OMH-224"
+        "OMH-223", "OMH-224", "OMH-230"
     ],
     "runners": {
       "codex": { "modelSelector": "default" },
@@ -120,7 +121,7 @@
       "OMH-149", "OMH-150", "OMH-151", "OMH-153", "OMH-156", "OMH-163",
       "OMH-164", "OMH-165", "OMH-171", "OMH-172", "OMH-181", "OMH-185",
       "OMH-188", "OMH-189", "OMH-190", "OMH-191", "OMH-192", "OMH-193",
-        "OMH-223", "OMH-224"
+        "OMH-223", "OMH-224", "OMH-230"
     ],
     "runners": {
       "codex": { "modelSelector": "default" },

package/dist/agentic/shared/ai/harness/source-link-inventory.json

@@ -2,10 +2,10 @@
   "version": 1,
   "generatedNote": "Derived asset — the app-facing projection of the repository source-link inventory, regenerated with `yarn workspace create-mercato-app harness:generate-source-link-inventory`. Never hand-edit. Harness cases resolve `context.sourceReferenceIds` against `referenceId` here; a record with `readStatus: \"qa-only\"` is validation evidence only and is refused as a case reference.",
   "derived": {
-    "ownerCount": 29,
-    "recordCount": 130,
-    "sourceRequiredCount": 105,
-    "readableCount": 130,
+    "ownerCount": 30,
+    "recordCount": 138,
+    "sourceRequiredCount": 113,
+    "readableCount": 138,
     "baselineSha": "f7c941570003f3abe920b1765995cbef98dcad0b"
   },
   "notCovered": [
@@ -109,6 +109,198 @@
         "migration"
       ]
     },
+    {
+      "referenceId": "guides/framework-contracts:node_modules/@open-mercato/shared/src/lib/commands/registry.ts",
+      "requirement": "source-required",
+      "originAsset": ".ai/guides/framework-contracts.md",
+      "heading": "Command handler and registry",
+      "href": "../../node_modules/@open-mercato/shared/src/lib/commands/registry.ts",
+      "targetKind": "installed-package",
+      "readStatus": "readable",
+      "resolvedPath": "node_modules/@open-mercato/shared/src/lib/commands/registry.ts",
+      "moduleId": null,
+      "capabilityIds": [],
+      "packageName": "@open-mercato/shared",
+      "packageRelativePath": "src/lib/commands/registry.ts",
+      "presets": [
+        "classic",
+        "crm",
+        "empty"
+      ],
+      "tiers": [
+        "automation",
+        "core",
+        "migration"
+      ]
+    },
+    {
+      "referenceId": "guides/framework-contracts:node_modules/@open-mercato/shared/src/lib/commands/runCrudCommandWrite.ts",
+      "requirement": "source-required",
+      "originAsset": ".ai/guides/framework-contracts.md",
+      "heading": "Atomic CRUD command writes",
+      "href": "../../node_modules/@open-mercato/shared/src/lib/commands/runCrudCommandWrite.ts",
+      "targetKind": "installed-package",
+      "readStatus": "readable",
+      "resolvedPath": "node_modules/@open-mercato/shared/src/lib/commands/runCrudCommandWrite.ts",
+      "moduleId": null,
+      "capabilityIds": [],
+      "packageName": "@open-mercato/shared",
+      "packageRelativePath": "src/lib/commands/runCrudCommandWrite.ts",
+      "presets": [
+        "classic",
+        "crm",
+        "empty"
+      ],
+      "tiers": [
+        "automation",
+        "core",
+        "migration"
+      ]
+    },
+    {
+      "referenceId": "guides/framework-contracts:node_modules/@open-mercato/shared/src/lib/commands/types.ts",
+      "requirement": "source-required",
+      "originAsset": ".ai/guides/framework-contracts.md",
+      "heading": "Command handler and registry",
+      "href": "../../node_modules/@open-mercato/shared/src/lib/commands/types.ts",
+      "targetKind": "installed-package",
+      "readStatus": "readable",
+      "resolvedPath": "node_modules/@open-mercato/shared/src/lib/commands/types.ts",
+      "moduleId": null,
+      "capabilityIds": [],
+      "packageName": "@open-mercato/shared",
+      "packageRelativePath": "src/lib/commands/types.ts",
+      "presets": [
+        "classic",
+        "crm",
+        "empty"
+      ],
+      "tiers": [
+        "automation",
+        "core",
+        "migration"
+      ]
+    },
+    {
+      "referenceId": "guides/framework-contracts:node_modules/@open-mercato/shared/src/lib/crud/factory.ts",
+      "requirement": "source-required",
+      "originAsset": ".ai/guides/framework-contracts.md",
+      "heading": "`makeCrudRoute`",
+      "href": "../../node_modules/@open-mercato/shared/src/lib/crud/factory.ts",
+      "targetKind": "installed-package",
+      "readStatus": "readable",
+      "resolvedPath": "node_modules/@open-mercato/shared/src/lib/crud/factory.ts",
+      "moduleId": null,
+      "capabilityIds": [],
+      "packageName": "@open-mercato/shared",
+      "packageRelativePath": "src/lib/crud/factory.ts",
+      "presets": [
+        "classic",
+        "crm",
+        "empty"
+      ],
+      "tiers": [
+        "automation",
+        "core",
+        "migration"
+      ]
+    },
+    {
+      "referenceId": "guides/framework-contracts:node_modules/@open-mercato/shared/src/lib/crud/optimistic-lock-command.ts",
+      "requirement": "source-required",
+      "originAsset": ".ai/guides/framework-contracts.md",
+      "heading": "Optimistic locking",
+      "href": "../../node_modules/@open-mercato/shared/src/lib/crud/optimistic-lock-command.ts",
+      "targetKind": "installed-package",
+      "readStatus": "readable",
+      "resolvedPath": "node_modules/@open-mercato/shared/src/lib/crud/optimistic-lock-command.ts",
+      "moduleId": null,
+      "capabilityIds": [],
+      "packageName": "@open-mercato/shared",
+      "packageRelativePath": "src/lib/crud/optimistic-lock-command.ts",
+      "presets": [
+        "classic",
+        "crm",
+        "empty"
+      ],
+      "tiers": [
+        "automation",
+        "core",
+        "migration"
+      ]
+    },
+    {
+      "referenceId": "guides/framework-contracts:node_modules/@open-mercato/shared/src/lib/data/engine.ts",
+      "requirement": "source-required",
+      "originAsset": ".ai/guides/framework-contracts.md",
+      "heading": "Data Engine ORM operations",
+      "href": "../../node_modules/@open-mercato/shared/src/lib/data/engine.ts",
+      "targetKind": "installed-package",
+      "readStatus": "readable",
+      "resolvedPath": "node_modules/@open-mercato/shared/src/lib/data/engine.ts",
+      "moduleId": null,
+      "capabilityIds": [],
+      "packageName": "@open-mercato/shared",
+      "packageRelativePath": "src/lib/data/engine.ts",
+      "presets": [
+        "classic",
+        "crm",
+        "empty"
+      ],
+      "tiers": [
+        "automation",
+        "core",
+        "migration"
+      ]
+    },
+    {
+      "referenceId": "guides/framework-contracts:node_modules/@open-mercato/shared/src/lib/http/readJsonSafe.ts",
+      "requirement": "source-required",
+      "originAsset": ".ai/guides/framework-contracts.md",
+      "heading": "Defensive JSON reads",
+      "href": "../../node_modules/@open-mercato/shared/src/lib/http/readJsonSafe.ts",
+      "targetKind": "installed-package",
+      "readStatus": "readable",
+      "resolvedPath": "node_modules/@open-mercato/shared/src/lib/http/readJsonSafe.ts",
+      "moduleId": null,
+      "capabilityIds": [],
+      "packageName": "@open-mercato/shared",
+      "packageRelativePath": "src/lib/http/readJsonSafe.ts",
+      "presets": [
+        "classic",
+        "crm",
+        "empty"
+      ],
+      "tiers": [
+        "automation",
+        "core",
+        "migration"
+      ]
+    },
+    {
+      "referenceId": "guides/framework-contracts:node_modules/@open-mercato/shared/src/modules/events/factory.ts",
+      "requirement": "source-required",
+      "originAsset": ".ai/guides/framework-contracts.md",
+      "heading": "Typed module events",
+      "href": "../../node_modules/@open-mercato/shared/src/modules/events/factory.ts",
+      "targetKind": "installed-package",
+      "readStatus": "readable",
+      "resolvedPath": "node_modules/@open-mercato/shared/src/modules/events/factory.ts",
+      "moduleId": null,
+      "capabilityIds": [],
+      "packageName": "@open-mercato/shared",
+      "packageRelativePath": "src/modules/events/factory.ts",
+      "presets": [
+        "classic",
+        "crm",
+        "empty"
+      ],
+      "tiers": [
+        "automation",
+        "core",
+        "migration"
+      ]
+    },
     {
       "referenceId": "om-backend-ui-design/crud-surfaces:README.md",
       "requirement": "source-required",

package/dist/agentic/shared/ai/harness/validators.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "catalog": {
-    "expectedCaseCount": 229,
+    "expectedCaseCount": 231,
     "maxContextFiles": 16,
     "maxInitialContextBytes": 98304,
     "maxTotalContextBytes": 1048576,
@@ -30,7 +30,7 @@
       "OMH-137", "OMH-140", "OMH-144", "OMH-146", "OMH-149", "OMH-150", "OMH-151", "OMH-153",
       "OMH-156", "OMH-163", "OMH-164", "OMH-165", "OMH-171", "OMH-172", "OMH-181", "OMH-185",
       "OMH-188", "OMH-189", "OMH-190", "OMH-191", "OMH-192", "OMH-193",
-      "OMH-223", "OMH-224"
+      "OMH-223", "OMH-224", "OMH-230"
     ]
   },
   "validators": {
@@ -77,6 +77,7 @@
     "oracle.business.data-flow": { "kind": "oracle", "implementation": "trusted-executable", "runners": ["writable-ast-oracles.mjs", "writable-behavior-oracles.mjs"] },
     "oracle.business.test-authoring": { "kind": "oracle", "implementation": "trusted-executable", "runners": ["writable-ast-oracles.mjs"] },
     "oracle.planning.spec-first": { "kind": "oracle", "implementation": "trusted-executable", "runners": ["writable-spec-oracles.mjs"] },
-    "oracle.planning.spec-reuse": { "kind": "oracle", "implementation": "trusted-executable", "runners": ["writable-spec-oracles.mjs"] }
+    "oracle.planning.spec-reuse": { "kind": "oracle", "implementation": "trusted-executable", "runners": ["writable-spec-oracles.mjs"] },
+    "oracle.planning.spec-resume": { "kind": "oracle", "implementation": "trusted-executable", "runners": ["writable-spec-oracles.mjs"] }
   }
 }