@zhivex-ai/harness 1.3.0-rc.3 → 1.3.0

package/CHANGELOG.md

@@ -4,6 +4,59 @@ All notable changes to Zhivex Harness are documented in this file.
 
 The project follows Semantic Versioning. During `0.x`, minor releases may change user-facing contracts when the change is documented with a migration note. Patch releases remain backwards compatible bug fixes.
 
+## 1.3.0 - 2026-10-02
+
+- Prepare Harness 1.3.0 and the independent Code CLI 0.1.0 for protected publication to npm `latest`; Code pins exactly Harness 1.3.0 and must publish after its verified engine dependency.
+- Preserve the RC7 runtime and Code RC2 provider/terminal fixes; no new product features or changes to historical Harness binaries, state contracts or stable API signatures.
+- Validate Code stable/latest and RC/next channels, canonical versions, exact engine pins, channel ordering and immutable artifact recovery. Preserve annotated-tag, exact main CI/CodeQL, installed acceptance, integrity and provenance gates.
+- Keep beta and experimental API tiers, provisional Anthropic/Gemini/Vertex support and private Desktop alpha unchanged. RC7's six-provider live gates and Meta/Qwen/OpenAI 42-case representative evidence remain bound to RC7; stable artifacts require new protected evidence.
+- Refresh the recorded verified latest publication to Harness 1.2.0 without fabricating an uncreated GitHub Release, and align active release/installation documentation without claiming that the prepared stable versions are already published.
+
+## 1.3.0-rc.7 - 2026-10-01
+
+- Pin Qwen contract certification to zero sampling temperature in approval and conversation continuity smokes, preserving all approval, compaction, effect and context assertions. Application model defaults remain unchanged.
+- Distinguish approval resume status, compaction and private continuation failures; retain sanitized run counters and typed provider causes without publishing model output or messages.
+- Prepare RC7 with exact Code/Desktop pins and historical representative mappings preserved. Prior failed RC6 evidence remains historical; RC7 requires its own exact-artifact and protected release gates.
+
+## 1.3.0-rc.6 - 2026-09-30
+
+- Make protected OCI execution certification use a host-owned Node fixture while retaining exact command, patch, approval and journal checks.
+- Align manual certification with all six protected provider routes and preserve typed, sanitized continuity failures in the aggregate release diagnostics.
+- Admit future canonical release tags through the reviewed Vertex WIF identity condition, retaining repository, owner, environment, event and workflow bindings.
+- Prepare RC6 metadata, representative model mapping and exact Harness pins for Code and Desktop. Publication requires new release-bound artifact, live and representative evidence.
+
+## 1.3.0-rc.5 - 2026-09-30
+
+- Use the explicit Anthropic default endpoint when `ANTHROPIC_BASE_URL` is empty or whitespace-only, including empty optional workflow secrets. Preserve host environment isolation and rejection of unsafe custom endpoints.
+
+- Restore Qwen `qwen3.8-flash` and Meta `muse-spark-1.3-contributor` for protected certification, representative evidence and task acceptance. Preserve historical model mappings and CLI/Desktop/registry defaults; retain Gemini API 3.6 Flash and Vertex 3.7 Flash.
+- Prepare RC5 metadata and exact Harness pins for Code and Desktop, with regressions against certification model drift. Paid live certification and publication require separate approval; this preparation does not certify the new artifact.
+
+## 1.3.0-rc.4 - 2026-09-29
+
+- Add experimental trusted tool policies, explicit review receipts, policy inspection, durable task acceptance with exact-byte OCI delivery, structured delegation validation, and sanitized portable governance reports.
+- Add reviewed CLI/Desktop checkpoint restoration and bounded capture/retention.
+- Prepare Code 0.1.0-rc.2 with an exact RC4 dependency; require all six provider routes, approval compaction, structured delegation, continuity and four mixed-provider edges in protected certification. Include consumer documentation and isolate Desktop candidate provisioning from public registry availability.
+
+- Reduce repeated request context with concise host instructions, progressive tool schemas and recoverable excerpts of durable tool evidence. Preserve host policy, approval and explicit catalogs; add bounded numeric request measurements and a same-budget Sonnet 5.5 follow-up pilot.
+
+- Add experimental host-only `/mcp/stdio/v1`: explicit OCI admission, private snapshots, bounded stdio lifecycle, durable tool approvals, scoped resource recovery and host-authorized reconciliation. Verify a real MCP server from an installed candidate on Node 22/24 and Bun; workspace JSON still cannot enable stdio.
+
+- Expand independent Harness/Code acceptance to both installation orders across local/global managers, historical session and approval boundaries, and Node/Bun runtime checks. Retain exact candidate identity through a read-only acceptance registry and preserve failed default-registry attempts separately.
+
+- Migrate Desktop to an installed Harness tarball through declared package exports, including the versioned host provider contract. Verify artifact identity during build/package, remove source rewriting, and validate packaged conversation, approval, restart and persisted diff behavior.
+
+- Move Desktop whole-database snapshot/validation logic into Harness persistence and add the narrow, versioned `/desktop/v1/state` host contract. Keep raw SQL and `SqliteDatabase` private; preserve recovery errors, permissions and cooperative lease checks.
+
+- Add the explicit beta `/models` package entrypoint for browser-safe catalog data, schemas and display helpers, with clean-consumer Node/type/browser verification.
+
+- Add provisional Vertex through Google Cloud ADC with refresh, explicit project/location, shared CLI/Desktop selection and sanitized diagnostics. Route changes invalidate durable approvals. Keep renderer catalog metadata separate from host authentication and transport dependencies.
+
+- Classify provider HTTP 402 as `payment_required` without leaking response data; add Gemini creation/update, nullable-digest, signed-continuation and durable approval regressions. Preserve the earlier Gemini 3.7 HTTP 402 reproduction; subsequent Gemini API 3.6 Flash candidate gates passed. Certification remains bound to each model and artifact.
+
+- Add provisional Anthropic direct API support via SDK 0.12.4, shared CLI/Desktop models, secret-store credentials and presence-only diagnostics. Preserve existing default transport fingerprints; signed provider data, tool IDs and usage remain intact.
+- Add a versioned common task acceptance suite with seven fixtures, protected independent checks, durable approval/restart/cancellation, explicit model/route/artifact/budgets and append-only attempt evidence. Failed first attempts remain failed when a later retry recovers. No live certification or publication is implied.
+
 ## 1.3.0-rc.3 - 2026-09-28
 
 - Release Meta stream deadlines after HTTP setup errors, stream completion, cancellation and early iterator closure; retain the original provider error and natural process exit.

package/README.md

@@ -3,7 +3,7 @@
 **Work on your code with an agent. Review consequential actions before approving them.**
 
 Zhivex Harness is a local terminal assistant and TypeScript library. It supports
-OpenAI, Qwen and Meta, with provisional Gemini support. Conversations and pending
+OpenAI, Qwen and Meta, with provisional Gemini, Anthropic and Vertex support. Conversations and pending
 approvals survive restarts.
 
 Use it to understand a repository, discuss a design, investigate a failure or
@@ -11,19 +11,21 @@ implement a change. Conversation context retains decisions, hypotheses and bound
 diagnostic excerpts across compaction. Edits and command execution keep their
 own permission checks; a conversational summary never grants approval.
 
-Version `1.3.0-rc.3` prepares the terminal-independent engine API and the local
-Code package for candidate validation on npm `next`. Publication remains pending
-the protected release workflow. This RC does not include the pending Anthropic,
-Gemini/Vertex, Desktop migration or independent Code publication milestones.
-Stable `1.2.0` remains available under npm `latest`.
-Desktop retains its separate private alpha status.
+Version `1.3.0` is prepared for npm `latest`, with terminal-independent engine
+entrypoints and the separately released Code CLI `0.1.0`. Publication remains
+pending the protected workflow. Harness `1.2.0` is currently published on `latest`;
+Harness RC7 and Code RC2 are published on `next`. Stable package numbering does
+not change API stability tiers: beta and experimental APIs retain their policies,
+Gemini/Anthropic/Vertex remain provisional, and Desktop remains a private alpha.
 
 ## Quick start
 
 Requires Node.js 22.13.0 or newer, Git and a provider API key.
 
+After protected publication of 1.3.0:
+
 ```sh
-npm install -g @zhivex-ai/harness@1.3.0-rc.3
+npm install -g @zhivex-ai/harness@1.3.0
 cd /path/to/your/project
 zhx
 ```
@@ -67,7 +69,7 @@ The default runtime has no OS isolation and exposes no shell-class tools. Runnin
 commands in isolation requires an explicitly configured Docker or Podman environment;
 see [Execution environments](docs/EXECUTION_ENVIRONMENTS.md).
 
-Gemini remains provisional. See the [support matrix](docs/SUPPORT_MATRIX.md) and
+Gemini, [Anthropic](docs/ANTHROPIC.md) and [Vertex](docs/VERTEX.md) remain provisional. See the [support matrix](docs/SUPPORT_MATRIX.md) and
 [security policy](SECURITY.md) for supported configurations and reporting concerns.
 
 ## Documentation
@@ -81,5 +83,5 @@ Gemini remains provisional. See the [support matrix](docs/SUPPORT_MATRIX.md) and
 Version `1.2.0` is the current stable public npm release. Source checkout changes can be
 newer than the published package. Consult the [changelog](CHANGELOG.md) and
 [repository release status](https://raw.githubusercontent.com/Zhivex/zhivex-harness/main/release-status.json)
-for the recorded 1.0.0 release; [release evidence](https://github.com/Zhivex/zhivex-harness/blob/main/docs/LIVE_CERTIFICATION.md)
+for the verified 1.2.0 publication; [release evidence](https://github.com/Zhivex/zhivex-harness/blob/main/docs/LIVE_CERTIFICATION.md)
 records validation scope and limitations.

package/SECURITY.md

@@ -2,7 +2,7 @@
 
 ## Supported versions
 
-Security fixes are provided for the latest published `1.1.x` patch. Older minors and private checkpoints are not supported release channels. Registry integrity and provenance do not substitute for the separate provider and execution evidence recorded in [docs/LIVE_CERTIFICATION.md](https://github.com/Zhivex/zhivex-harness/blob/main/docs/LIVE_CERTIFICATION.md).
+Security fixes are provided for the latest published stable Harness minor (currently `1.2.x`; `1.3.x` after verified publication) and the latest stable Code `0.1.x` patch after its publication. RCs on `next` are validation candidates; older minors and private checkpoints are not supported release channels. Desktop remains a separate private alpha. Beta and experimental features retain their documented limitations. Registry integrity and provenance do not substitute for the separate provider and execution evidence recorded in [docs/LIVE_CERTIFICATION.md](https://github.com/Zhivex/zhivex-harness/blob/main/docs/LIVE_CERTIFICATION.md).
 
 ## Reporting a vulnerability
 

package/SUPPORT.md

@@ -1,6 +1,6 @@
 # Support
 
-Zhivex Harness `1.1.x` is the latest supported Node-first CLI and TypeScript library. Stable 1.x contracts follow [the stability policy](./docs/STABILITY.md); incompatible changes require a major release except documented urgent security corrections. Beta and experimental surfaces retain their declared policies. The mutable machine-readable `release-status.json` record preserves the verified 1.0.0 release; check npm for the current published version.
+Zhivex Harness `1.2.x` is the latest supported Node-first CLI and TypeScript library. Stable 1.x contracts follow [the stability policy](./docs/STABILITY.md); incompatible changes require a major release except documented urgent security corrections. Beta and experimental surfaces retain their declared policies. The mutable machine-readable `release-status.json` record records the verified 1.2.0 publication. Harness 1.3.0 and Code 0.1.0 are prepared for latest but remain pending their protected workflows.
 
 The 1.1 support scope is tracked in the [machine-readable support matrix](./docs/support-matrix-1.1.json) and its [human-readable view](./docs/SUPPORT_MATRIX_1_1.md). The [1.0 matrix](./docs/SUPPORT_MATRIX.md) remains historical. Compatibility and removals follow [DEPRECATIONS.md](./docs/DEPRECATIONS.md) for the published 1.x line.
 
@@ -13,11 +13,11 @@ The 1.1 support scope is tracked in the [machine-readable support matrix](./docs
 - the provider/model combinations marked certified in the package documentation; and
 - HTTPS or explicitly allowed loopback-HTTP MCP endpoints using the documented bounded JSON-RPC subset.
 
-Only the most recent published `1.1.x` patch receives routine fixes. The exact `v1.1.1` tag passed the protected artifact, live-provider and representative release jobs. Gemini remains provisional until its complete harness live matrix passes against an exact release candidate. Live provider evidence is account-, model-, endpoint-, artifact-, and date-dependent; see [docs/LIVE_CERTIFICATION.md](https://github.com/Zhivex/zhivex-harness/blob/main/docs/LIVE_CERTIFICATION.md).
+Only the most recent published stable minor receives routine fixes. The exact `v1.2.0` tag passed the protected artifact, live-provider and representative release jobs. After verified publication, 1.3.x and Code 0.1.x become the supported stable lines. Gemini, Anthropic and Vertex remain provisional despite RC7 live gates; the representative repository matrix covers only Meta, Qwen and OpenAI. Live provider evidence is account-, model-, endpoint-, artifact-, and date-dependent; see [docs/LIVE_CERTIFICATION.md](https://github.com/Zhivex/zhivex-harness/blob/main/docs/LIVE_CERTIFICATION.md).
 
 ## Installation diagnostics
 
-Follow the [stable installation commands](./README.md#installation) or [isolated Bun example](./examples/README.md). Run `zhx --version`, `zhx --help`, and `zhx doctor` before reporting an installation issue. Doctor is local: a missing provider credential produces a diagnostic failure until that credential is configured. Include the version, OS, Node/Bun versions and sanitized diagnostics in a report; never include keys or your `.env` file.
+Follow the [stable installation commands](./README.md#quick-start) or [isolated Bun example](./examples/README.md). Run `zhx --version`, `zhx --help`, and `zhx doctor` before reporting an installation issue. Doctor is local: a missing provider credential produces a diagnostic failure until that credential is configured. Include the version, OS, Node/Bun versions and sanitized diagnostics in a report; never include keys or your `.env` file.
 
 ## Support channels
 
@@ -25,4 +25,4 @@ Use [GitHub Issues](https://github.com/Zhivex/zhivex-harness/issues) for reprodu
 
 ## Explicit limits
 
-The harness does not promise arbitrary shell access, `stdio` MCP, permanent deletion, Windows support, a managed sandbox, a desktop UI, or exact feature parity between upstream providers. Tools run with the permissions of the local harness process unless an application supplies a stronger execution environment.
+The harness does not promise arbitrary shell access, general-purpose `stdio` MCP interoperability, permanent deletion, Windows support, a managed sandbox, a stable desktop UI, or exact feature parity between upstream providers. Tools run with the permissions of the local harness process unless an application supplies a stronger execution environment.

package/contracts/engine-api.json

@@ -2130,6 +2130,76 @@
           "name": "HarnessMcpResourceClient",
           "kind": "type",
           "tier": "experimental"
+        },
+        {
+          "name": "inspectHarnessPolicy",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "HarnessPolicyInspection",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "taskAcceptanceContractSchema",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "compileTaskAcceptanceContract",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "TaskAcceptanceContract",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "inspectHarnessTaskAcceptance",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "reviseHarnessTaskAcceptance",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "TaskAcceptanceLedger",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "exportHarnessGovernanceReport",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "harnessGovernanceReportSchema",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "renderHarnessGovernanceMarkdown",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "HarnessGovernanceReport",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "HarnessGovernanceOptions",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "GovernanceSessionSource",
+          "kind": "type",
+          "tier": "experimental"
         }
       ]
     },
@@ -2256,6 +2326,11 @@
           "name": "HarnessActivityPage",
           "kind": "type",
           "tier": "experimental"
+        },
+        {
+          "name": "ApprovalDecisionView",
+          "kind": "type",
+          "tier": "beta"
         }
       ]
     },
@@ -2444,6 +2519,16 @@
           "name": "serveAcpStdio",
           "kind": "runtime",
           "tier": "experimental"
+        },
+        {
+          "name": "createAcpMcpHost",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "AcpMcpHostRule",
+          "kind": "type",
+          "tier": "experimental"
         }
       ]
     },
@@ -2582,6 +2667,255 @@
           "tier": "experimental"
         }
       ]
+    },
+    "./models": {
+      "source": "src/engine/models.ts",
+      "environment": "browser",
+      "exports": [
+        {
+          "name": "bundledModelCatalog",
+          "kind": "runtime",
+          "tier": "beta"
+        },
+        {
+          "name": "bundledDefaultModel",
+          "kind": "runtime",
+          "tier": "beta"
+        },
+        {
+          "name": "catalogModelSchema",
+          "kind": "runtime",
+          "tier": "beta"
+        },
+        {
+          "name": "modelCatalogSchema",
+          "kind": "runtime",
+          "tier": "beta"
+        },
+        {
+          "name": "catalogModels",
+          "kind": "runtime",
+          "tier": "beta"
+        },
+        {
+          "name": "modelDescription",
+          "kind": "runtime",
+          "tier": "beta"
+        },
+        {
+          "name": "CatalogModel",
+          "kind": "type",
+          "tier": "beta"
+        },
+        {
+          "name": "ModelCatalog",
+          "kind": "type",
+          "tier": "beta"
+        }
+      ]
+    },
+    "./desktop/v1/state": {
+      "source": "src/engine/desktop-state-v1.ts",
+      "environment": "node",
+      "exports": [
+        {
+          "name": "HOST_DATABASE_SNAPSHOT_LIMIT",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "createHostDatabaseSnapshot",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "verifyHostDatabaseSnapshot",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "verifyHostDatabaseState",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "HostDatabaseSnapshot",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "HostDatabaseSnapshotConfig",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "HARNESS_SQLITE_FILE",
+          "kind": "runtime",
+          "tier": "beta"
+        },
+        {
+          "name": "validateStateDirectory",
+          "kind": "runtime",
+          "tier": "beta"
+        },
+        {
+          "name": "validateRecordedWorkspace",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "acquireSqliteAccess",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "adoptExclusiveSqliteAccess",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "exclusiveSqliteAccessDescriptor",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "SqliteAccessLease",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "protectPersistenceSecret",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "readRegularFileNoFollow",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "statRegularFileNoFollow",
+          "kind": "runtime",
+          "tier": "experimental"
+        }
+      ]
+    },
+    "./desktop/v1/providers": {
+      "source": "src/engine/desktop-providers-v1.ts",
+      "environment": "node",
+      "exports": [
+        {
+          "name": "loadModelCatalog",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "CatalogLoadOptions",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "CatalogSnapshot",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "vertexConfigured",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "vertexEnvironment",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "vertexTokenSource",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "vertexRoute",
+          "kind": "runtime",
+          "tier": "experimental"
+        }
+      ]
+    },
+    "./mcp/stdio/v1": {
+      "source": "src/engine/mcp-stdio-v1.ts",
+      "environment": "node",
+      "exports": [
+        {
+          "name": "createMcpStdioAdmissionAuthority",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "McpStdioAdmissionError",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "McpStdioLaunchProposal",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "McpStdioLaunchReceipt",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "prepareMcpWorkspaceSnapshot",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "discardMcpWorkspaceSnapshot",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "McpWorkspaceSnapshot",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "recoverDockerMcpResources",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "createMcpReconciliationAuthority",
+          "kind": "runtime",
+          "tier": "experimental"
+        },
+        {
+          "name": "McpReconciliationDecision",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "McpReconciliationReview",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "HarnessIsolatedMcpSession",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "IsolatedMcpLaunchOptions",
+          "kind": "type",
+          "tier": "experimental"
+        },
+        {
+          "name": "launchIsolatedMcpSession",
+          "kind": "runtime",
+          "tier": "experimental"
+        }
+      ]
     }
   }
 }