@zhivex-ai/harness 1.3.0-rc.3 → 1.3.0-rc.7

package/CHANGELOG.md

@@ -4,6 +4,51 @@ All notable changes to Zhivex Harness are documented in this file.
 
 The project follows Semantic Versioning. During `0.x`, minor releases may change user-facing contracts when the change is documented with a migration note. Patch releases remain backwards compatible bug fixes.
 
+## 1.3.0-rc.7 - 2026-10-01
+
+- Pin Qwen contract certification to zero sampling temperature in approval and conversation continuity smokes, preserving all approval, compaction, effect and context assertions. Application model defaults remain unchanged.
+- Distinguish approval resume status, compaction and private continuation failures; retain sanitized run counters and typed provider causes without publishing model output or messages.
+- Prepare RC7 with exact Code/Desktop pins and historical representative mappings preserved. Prior failed RC6 evidence remains historical; RC7 requires its own exact-artifact and protected release gates.
+
+## 1.3.0-rc.6 - 2026-09-30
+
+- Make protected OCI execution certification use a host-owned Node fixture while retaining exact command, patch, approval and journal checks.
+- Align manual certification with all six protected provider routes and preserve typed, sanitized continuity failures in the aggregate release diagnostics.
+- Admit future canonical release tags through the reviewed Vertex WIF identity condition, retaining repository, owner, environment, event and workflow bindings.
+- Prepare RC6 metadata, representative model mapping and exact Harness pins for Code and Desktop. Publication requires new release-bound artifact, live and representative evidence.
+
+## 1.3.0-rc.5 - 2026-09-30
+
+- Use the explicit Anthropic default endpoint when `ANTHROPIC_BASE_URL` is empty or whitespace-only, including empty optional workflow secrets. Preserve host environment isolation and rejection of unsafe custom endpoints.
+
+- Restore Qwen `qwen3.8-flash` and Meta `muse-spark-1.3-contributor` for protected certification, representative evidence and task acceptance. Preserve historical model mappings and CLI/Desktop/registry defaults; retain Gemini API 3.6 Flash and Vertex 3.7 Flash.
+- Prepare RC5 metadata and exact Harness pins for Code and Desktop, with regressions against certification model drift. Paid live certification and publication require separate approval; this preparation does not certify the new artifact.
+
+## 1.3.0-rc.4 - 2026-09-29
+
+- Add experimental trusted tool policies, explicit review receipts, policy inspection, durable task acceptance with exact-byte OCI delivery, structured delegation validation, and sanitized portable governance reports.
+- Add reviewed CLI/Desktop checkpoint restoration and bounded capture/retention.
+- Prepare Code 0.1.0-rc.2 with an exact RC4 dependency; require all six provider routes, approval compaction, structured delegation, continuity and four mixed-provider edges in protected certification. Include consumer documentation and isolate Desktop candidate provisioning from public registry availability.
+
+- Reduce repeated request context with concise host instructions, progressive tool schemas and recoverable excerpts of durable tool evidence. Preserve host policy, approval and explicit catalogs; add bounded numeric request measurements and a same-budget Sonnet 5.5 follow-up pilot.
+
+- Add experimental host-only `/mcp/stdio/v1`: explicit OCI admission, private snapshots, bounded stdio lifecycle, durable tool approvals, scoped resource recovery and host-authorized reconciliation. Verify a real MCP server from an installed candidate on Node 22/24 and Bun; workspace JSON still cannot enable stdio.
+
+- Expand independent Harness/Code acceptance to both installation orders across local/global managers, historical session and approval boundaries, and Node/Bun runtime checks. Retain exact candidate identity through a read-only acceptance registry and preserve failed default-registry attempts separately.
+
+- Migrate Desktop to an installed Harness tarball through declared package exports, including the versioned host provider contract. Verify artifact identity during build/package, remove source rewriting, and validate packaged conversation, approval, restart and persisted diff behavior.
+
+- Move Desktop whole-database snapshot/validation logic into Harness persistence and add the narrow, versioned `/desktop/v1/state` host contract. Keep raw SQL and `SqliteDatabase` private; preserve recovery errors, permissions and cooperative lease checks.
+
+- Add the explicit beta `/models` package entrypoint for browser-safe catalog data, schemas and display helpers, with clean-consumer Node/type/browser verification.
+
+- Add provisional Vertex through Google Cloud ADC with refresh, explicit project/location, shared CLI/Desktop selection and sanitized diagnostics. Route changes invalidate durable approvals. Keep renderer catalog metadata separate from host authentication and transport dependencies.
+
+- Classify provider HTTP 402 as `payment_required` without leaking response data; add Gemini creation/update, nullable-digest, signed-continuation and durable approval regressions. Preserve the earlier Gemini 3.7 HTTP 402 reproduction; subsequent Gemini API 3.6 Flash candidate gates passed. Certification remains bound to each model and artifact.
+
+- Add provisional Anthropic direct API support via SDK 0.12.4, shared CLI/Desktop models, secret-store credentials and presence-only diagnostics. Preserve existing default transport fingerprints; signed provider data, tool IDs and usage remain intact.
+- Add a versioned common task acceptance suite with seven fixtures, protected independent checks, durable approval/restart/cancellation, explicit model/route/artifact/budgets and append-only attempt evidence. Failed first attempts remain failed when a later retry recovers. No live certification or publication is implied.
+
 ## 1.3.0-rc.3 - 2026-09-28
 
 - Release Meta stream deadlines after HTTP setup errors, stream completion, cancellation and early iterator closure; retain the original provider error and natural process exit.

package/README.md

@@ -3,7 +3,7 @@
 **Work on your code with an agent. Review consequential actions before approving them.**
 
 Zhivex Harness is a local terminal assistant and TypeScript library. It supports
-OpenAI, Qwen and Meta, with provisional Gemini support. Conversations and pending
+OpenAI, Qwen and Meta, with provisional Gemini, Anthropic and Vertex support. Conversations and pending
 approvals survive restarts.
 
 Use it to understand a repository, discuss a design, investigate a failure or
@@ -11,10 +11,10 @@ implement a change. Conversation context retains decisions, hypotheses and bound
 diagnostic excerpts across compaction. Edits and command execution keep their
 own permission checks; a conversational summary never grants approval.
 
-Version `1.3.0-rc.3` prepares the terminal-independent engine API and the local
+Version `1.3.0-rc.7` prepares the terminal-independent engine API and the local
 Code package for candidate validation on npm `next`. Publication remains pending
-the protected release workflow. This RC does not include the pending Anthropic,
-Gemini/Vertex, Desktop migration or independent Code publication milestones.
+the protected release workflow. RC4 includes Anthropic, Gemini/Vertex, Desktop package migration, isolated MCP/ACP,
+checkpoints and experimental governance controls. Code publication is independent.
 Stable `1.2.0` remains available under npm `latest`.
 Desktop retains its separate private alpha status.
 
@@ -23,7 +23,7 @@ Desktop retains its separate private alpha status.
 Requires Node.js 22.13.0 or newer, Git and a provider API key.
 
 ```sh
-npm install -g @zhivex-ai/harness@1.3.0-rc.3
+npm install -g @zhivex-ai/harness@1.3.0-rc.7
 cd /path/to/your/project
 zhx
 ```
@@ -67,7 +67,7 @@ The default runtime has no OS isolation and exposes no shell-class tools. Runnin
 commands in isolation requires an explicitly configured Docker or Podman environment;
 see [Execution environments](docs/EXECUTION_ENVIRONMENTS.md).
 
-Gemini remains provisional. See the [support matrix](docs/SUPPORT_MATRIX.md) and
+Gemini, [Anthropic](docs/ANTHROPIC.md) and [Vertex](docs/VERTEX.md) remain provisional. See the [support matrix](docs/SUPPORT_MATRIX.md) and
 [security policy](SECURITY.md) for supported configurations and reporting concerns.
 
 ## Documentation

package/contracts/engine-api.json

@@ -2130,6 +2130,76 @@
           "name": "HarnessMcpResourceClient",
           "kind": "type",
           "tier": "experimental"
+        },
+        {
+          "name": "inspectHarnessPolicy",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "HarnessPolicyInspection",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "taskAcceptanceContractSchema",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "compileTaskAcceptanceContract",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "TaskAcceptanceContract",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "inspectHarnessTaskAcceptance",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "reviseHarnessTaskAcceptance",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "TaskAcceptanceLedger",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "exportHarnessGovernanceReport",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "harnessGovernanceReportSchema",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "renderHarnessGovernanceMarkdown",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "HarnessGovernanceReport",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "HarnessGovernanceOptions",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "GovernanceSessionSource",
+          "kind": "type",
+          "tier": "experimental"
         }
       ]
     },
@@ -2256,6 +2326,11 @@
           "name": "HarnessActivityPage",
           "kind": "type",
           "tier": "experimental"
+        },
+        {
+          "name": "ApprovalDecisionView",
+          "kind": "type",
+          "tier": "beta"
         }
       ]
     },
@@ -2444,6 +2519,16 @@
           "name": "serveAcpStdio",
           "kind": "runtime",
           "tier": "experimental"
+        },
+        {
+          "name": "createAcpMcpHost",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "AcpMcpHostRule",
+          "kind": "type",
+          "tier": "experimental"
         }
       ]
     },
@@ -2582,6 +2667,255 @@
           "tier": "experimental"
         }
       ]
+    },
+    "./models": {
+      "source": "src/engine/models.ts",
+      "environment": "browser",
+      "exports": [
+        {
+          "name": "bundledModelCatalog",
+          "kind": "runtime",
+          "tier": "beta"
+        },
+        {
+          "name": "bundledDefaultModel",
+          "kind": "runtime",
+          "tier": "beta"
+        },
+        {
+          "name": "catalogModelSchema",
+          "kind": "runtime",
+          "tier": "beta"
+        },
+        {
+          "name": "modelCatalogSchema",
+          "kind": "runtime",
+          "tier": "beta"
+        },
+        {
+          "name": "catalogModels",
+          "kind": "runtime",
+          "tier": "beta"
+        },
+        {
+          "name": "modelDescription",
+          "kind": "runtime",
+          "tier": "beta"
+        },
+        {
+          "name": "CatalogModel",
+          "kind": "type",
+          "tier": "beta"
+        },
+        {
+          "name": "ModelCatalog",
+          "kind": "type",
+          "tier": "beta"
+        }
+      ]
+    },
+    "./desktop/v1/state": {
+      "source": "src/engine/desktop-state-v1.ts",
+      "environment": "node",
+      "exports": [
+        {
+          "name": "HOST_DATABASE_SNAPSHOT_LIMIT",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "createHostDatabaseSnapshot",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "verifyHostDatabaseSnapshot",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "verifyHostDatabaseState",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "HostDatabaseSnapshot",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "HostDatabaseSnapshotConfig",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "HARNESS_SQLITE_FILE",
+          "kind": "runtime",
+          "tier": "beta"
+        },
+        {
+          "name": "validateStateDirectory",
+          "kind": "runtime",
+          "tier": "beta"
+        },
+        {
+          "name": "validateRecordedWorkspace",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "acquireSqliteAccess",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "adoptExclusiveSqliteAccess",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "exclusiveSqliteAccessDescriptor",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "SqliteAccessLease",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "protectPersistenceSecret",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "readRegularFileNoFollow",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "statRegularFileNoFollow",
+          "kind": "runtime",
+          "tier": "experimental"
+        }
+      ]
+    },
+    "./desktop/v1/providers": {
+      "source": "src/engine/desktop-providers-v1.ts",
+      "environment": "node",
+      "exports": [
+        {
+          "name": "loadModelCatalog",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "CatalogLoadOptions",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "CatalogSnapshot",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "vertexConfigured",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "vertexEnvironment",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "vertexTokenSource",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "vertexRoute",
+          "kind": "runtime",
+          "tier": "experimental"
+        }
+      ]
+    },
+    "./mcp/stdio/v1": {
+      "source": "src/engine/mcp-stdio-v1.ts",
+      "environment": "node",
+      "exports": [
+        {
+          "name": "createMcpStdioAdmissionAuthority",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "McpStdioAdmissionError",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "McpStdioLaunchProposal",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "McpStdioLaunchReceipt",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "prepareMcpWorkspaceSnapshot",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "discardMcpWorkspaceSnapshot",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "McpWorkspaceSnapshot",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "recoverDockerMcpResources",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "createMcpReconciliationAuthority",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "McpReconciliationDecision",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "McpReconciliationReview",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "HarnessIsolatedMcpSession",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "IsolatedMcpLaunchOptions",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "launchIsolatedMcpSession",
+          "kind": "runtime",
+          "tier": "experimental"
+        }
+      ]
     }
   }
 }