@zhivex-ai/harness 1.4.0 → 1.5.0

package/docs/adr/0002-isolated-mcp-stdio.md

@@ -16,9 +16,12 @@ activate stdio, change configuration schema 1, or claim isolated execution passe
   private workspace volume and optional read-only dependencies. Its adapter has
   finite `run`/`runBatch`, not an interactive stdio process lease. All MCP is
   currently rejected with OCI enforcement before discovery.
-- Installed `@zhivex-ai/core` 1.26.0 exposes `McpClient`, call options with abort,
-  timeout/idempotency key, and an HTTP transport; no executable stdio factory was
-  found in this dependency. The control-plane transport enum is not an executor.
+- At this proposal, installed `@zhivex-ai/core` 1.26.0 exposed `McpClient`, call
+  options with abort, timeout/idempotency key, and an HTTP transport; no executable
+  stdio factory was found in that dependency. The control-plane transport enum is
+  not an executor.
+- The current pin is `@zhivex-ai/core` 1.34.0, which includes an experimental
+  stdio client. Harness still does not treat that factory as the OCI boundary.
 
 MCP stdio uses UTF-8 newline-delimited JSON-RPC on stdin/stdout; stderr is a
 separate diagnostic stream. Preserve message correlation and initialization.
@@ -117,7 +120,7 @@ host spawn from `createHarnessMcpTools` or by buffering a never-ending `run`.
 | --- | --- |
 | Client commands run during session creation | Reject before admission; zero host/container processes and zero discovery calls. |
 | TOCTOU, swapped image/argv or replayed admission | Digest/identity recheck at launch; receipt scope/expiry/single-use tests. |
-| Secret/environment exfiltration | Empty inherited environment, restricted references, network denial, redacted audit; canary checks inside/outside boundary. |
+| Secret/environment exfiltration | Empty inherited environment, restricted references, network denial, redacted audit, and optional flagging of high-entropy or encoded strings from credential-bearing servers. Output stays untrusted data. Canary checks inside and outside the boundary. |
 | Filesystem escape and host mutation | No bind mounts, no-follow snapshot/import rules, resource limits and reviewed publication; symlink/traversal fixtures. |
 | Tool metadata or prompt injection escalates authority | Independent host policy and per-call approvals; untrusted descriptions/results remain data. |
 | Hung/forking/noisy process | Absolute deadlines, frame/queue/stderr/resource bounds and whole-boundary cleanup. |

package/docs/support-matrix-1.1.json

@@ -24,6 +24,8 @@
     { "id": "provider-meta", "dimension": "provider", "target": "Meta muse-spark-1.3", "level": "supported", "evidence": ["docs/LIVE_CERTIFICATION.md", ".github/workflows/release.yml"] },
     { "id": "provider-qwen", "dimension": "provider", "target": "Qwen qwen3.8-max", "level": "supported", "evidence": ["docs/LIVE_CERTIFICATION.md", ".github/workflows/release.yml"] },
     { "id": "provider-openai", "dimension": "provider", "target": "OpenAI gpt-6-luna", "level": "supported", "evidence": ["docs/LIVE_CERTIFICATION.md", ".github/workflows/release.yml"] },
-    { "id": "provider-gemini", "dimension": "provider", "target": "Gemini gemini-3.6-flash / 3.7-flash", "level": "provisional", "evidence": ["docs/LIVE_CERTIFICATION.md"] }
+    { "id": "provider-gemini", "dimension": "provider", "target": "Gemini gemini-3.6-flash / 3.7-flash", "level": "provisional", "evidence": ["docs/LIVE_CERTIFICATION.md"] },
+    { "id": "provider-bedrock", "dimension": "provider", "target": "Amazon Bedrock Converse / OpenAI-compatible runtime", "level": "provisional", "evidence": ["docs/BEDROCK.md", "tests/bedrock-provider.test.ts"] },
+    { "id": "provider-azure-openai", "dimension": "provider", "target": "Azure OpenAI", "level": "provisional", "evidence": ["docs/AZURE_OPENAI.md", "tests/azure-openai-provider.test.ts"] }
   ]
 }

package/docs/support-matrix.json

@@ -21,11 +21,13 @@
     { "id": "pm-yarn", "dimension": "target-package-manager", "target": "Yarn", "level": "provisional", "evidence": ["tests/package-manager.test.ts"] },
     { "id": "mcp-http", "dimension": "mcp-transport", "target": "bounded Streamable HTTP JSON-RPC", "level": "supported", "evidence": ["scripts/mcp-interoperability-smoke.ts", "scripts/mcp-official-sdk-smoke.ts"] },
     { "id": "mcp-stdio", "dimension": "mcp-transport", "target": "stdio", "level": "unsupported", "evidence": ["SUPPORT.md"] },
-    { "id": "provider-meta", "dimension": "provider", "target": "Meta muse-spark-1.2", "level": "supported", "evidence": ["docs/LIVE_CERTIFICATION.md", "release-status.json"] },
-    { "id": "provider-qwen", "dimension": "provider", "target": "Qwen qwen3.8-max", "level": "supported", "evidence": ["docs/LIVE_CERTIFICATION.md", "release-status.json"] },
-    { "id": "provider-openai", "dimension": "provider", "target": "OpenAI gpt-5.6-luna", "level": "supported", "evidence": ["docs/LIVE_CERTIFICATION.md", "release-status.json"] },
+    { "id": "provider-meta", "dimension": "provider", "target": "Meta muse-spark-1.3-contributor", "level": "supported", "evidence": ["docs/LIVE_CERTIFICATION.md", "release-status.json"] },
+    { "id": "provider-qwen", "dimension": "provider", "target": "Qwen qwen3.8-flash", "level": "supported", "evidence": ["docs/LIVE_CERTIFICATION.md", "release-status.json"] },
+    { "id": "provider-openai", "dimension": "provider", "target": "OpenAI gpt-6-luna", "level": "supported", "evidence": ["docs/LIVE_CERTIFICATION.md", "release-status.json"] },
     { "id": "provider-vertex", "dimension": "provider", "target": "Google Cloud Vertex AI (ADC)", "level": "provisional", "evidence": ["docs/VERTEX.md", "tests/vertex-provider.test.ts", "tests/vertex-auth.test.ts"] },
     { "id": "provider-anthropic", "dimension": "provider", "target": "Anthropic direct API / claude-sonnet-5", "level": "provisional", "evidence": ["docs/ANTHROPIC.md"] },
-    { "id": "provider-gemini", "dimension": "provider", "target": "Gemini gemini-3.6-flash / 3.7-flash", "level": "provisional", "evidence": ["docs/LIVE_CERTIFICATION.md"] }
+    { "id": "provider-gemini", "dimension": "provider", "target": "Gemini gemini-3.6-flash / 3.7-flash", "level": "provisional", "evidence": ["docs/LIVE_CERTIFICATION.md"] },
+    { "id": "provider-bedrock", "dimension": "provider", "target": "Amazon Bedrock Converse / OpenAI-compatible runtime", "level": "provisional", "evidence": ["docs/BEDROCK.md", "tests/bedrock-provider.test.ts"] },
+    { "id": "provider-azure-openai", "dimension": "provider", "target": "Azure OpenAI", "level": "provisional", "evidence": ["docs/AZURE_OPENAI.md", "tests/azure-openai-provider.test.ts"] }
   ]
 }

package/evaluations/code-task-ui.json

@@ -0,0 +1,20 @@
+{
+  "schemaVersion": 1,
+  "story": "CODE-HU-05",
+  "scope": "automated installed UI/service/engine plus retained HU75 recovery laboratory",
+  "fixtureSha256": "473a9e2144b0042b1b46ef54f915de693045df89d6175bde42a3393d2b083263",
+  "browserScenarios": [
+    "normal-task-review-accept",
+    "reload-without-replay",
+    "two-tabs-obsolete-review-and-edit-back",
+    "corrected-task-explicit-continuation-double-click",
+    "workspace-switch-without-stale-evidence-or-replay",
+    "slow-cancel-unknown-usage-blocks-continuation",
+    "process-restart-handoff-without-transcript-or-replay"
+  ],
+  "requiredEvidence": ["exact artifact binding before and after execution", "native check receipts", "desktop and mobile screenshots", "zero automatic effect replay", "retained unknown usage", "scripted operator acknowledgement separately labeled"],
+  "liveProvider": false,
+  "humanPilotPerformed": false,
+  "humanMinutes": null,
+  "realCostPerAcceptedTask": null
+}

package/evaluations/representative-assembly-matrix.json

@@ -62,7 +62,9 @@
     "v1.4.0-rc.6",
     "v1.4.0-rc.7",
     "v1.4.0-rc.8",
-    "v1.4.0"
+    "v1.4.0",
+    "v1.4.1",
+    "v1.5.0"
   ],
   "expectedModels": [
     {
@@ -552,6 +554,22 @@
         "qwen": "qwen3.8-flash",
         "openai": "gpt-6-luna"
       }
+    },
+    {
+      "releaseTag": "v1.4.1",
+      "models": {
+        "meta": "muse-spark-1.3-contributor",
+        "qwen": "qwen3.8-flash",
+        "openai": "gpt-6-luna"
+      }
+    },
+    {
+      "releaseTag": "v1.5.0",
+      "models": {
+        "meta": "muse-spark-1.3-contributor",
+        "qwen": "qwen3.8-flash",
+        "openai": "gpt-6-luna"
+      }
     }
   ],
   "expectedCases": [

package/evaluations/task-projection.json

@@ -0,0 +1,10 @@
+{
+  "schemaVersion": 1,
+  "story": "HAR-HU-73",
+  "lineage": "Restacked onto current main. Fixture identity is fixtureSha256, not a closed stack commit.",
+  "fixtureSha256": "473a9e2144b0042b1b46ef54f915de693045df89d6175bde42a3393d2b083263",
+  "installedScenarios": ["negotiation-version", "snapshot-read-only", "host-redaction", "duplicate-out-of-order", "artifact-scope", "cursor-expiry-replay", "paused-host-read", "restart-new-epoch", "artifact-drift", "legacy-budget"],
+  "excluded": ["CODE-05 UI", "live providers", "external pilot", "concurrent host takeover", "non-native execution", "semantic acceptance", "release"],
+  "fixtureSource": "HAR75 phase-one greeting oracle; unchanged bytes",
+  "runner": "scripts/task-recovery-lab-installed.mjs, optional sixth argument projection"
+}

package/evaluations/task-recovery-lab.json

@@ -0,0 +1,60 @@
+{
+  "schemaVersion": 1,
+  "id": "HAR-HU-75-base-lab",
+  "scopeDecision": "HAR-HU-61",
+  "measurementConsumer": "HAR-HU-74 (not executed)",
+  "lineage": "Restacked onto current main with the task evidence read. Fixture identity is fixtureSha256, not a closed stack commit.",
+  "fixtureSha256": "473a9e2144b0042b1b46ef54f915de693045df89d6175bde42a3393d2b083263",
+  "installedScenarios": [
+    "failed-start",
+    "exhaustion-after-work",
+    "native-path-boundary",
+    "normal-control",
+    "contract-artifact-drift",
+    "obsolete-approval",
+    "concurrent-cancel-unknown-usage",
+    "concurrent-cancel-late-usage",
+    "disk-full-final-save",
+    "compaction-untrusted-evidence",
+    "crash-before-receipt",
+    "crash-after-receipt",
+    "service-disconnect"
+  ],
+  "limits": {
+    "singleWriter": true,
+    "backend": "native",
+    "store": "sqlite",
+    "maxSteps": 16,
+    "maxToolCalls": 40,
+    "timeoutMs": 150000,
+    "inputTokens": 60000,
+    "outputTokens": 8192,
+    "totalTokens": 68192,
+    "liveProvider": false,
+    "humanMeasurement": false
+  },
+  "sourceRegressions": [
+    "tests/task-continuity.test.ts",
+    "tests/task-cancellation-host.test.ts",
+    "tests/task-cancellation-transport.test.ts",
+    "tests/task-budget-accounting.test.ts",
+    "tests/task-budget-compatibility.test.ts",
+    "tests/local-service.test.ts",
+    "tests/local-service-recovery.test.ts",
+    "tests/governance-report.test.ts",
+    "tests/governance-context.test.ts",
+    "tests/tool-policy-paths.test.ts",
+    "tests/security.test.ts"
+  ],
+  "pending": [
+    "HAR73 versioned task service projection",
+    "CODE05 task review UI and rendering of active text/citations",
+    "HAR74 ratified human rubric, time, cost and pilot"
+  ],
+  "notSupported": [
+    "Concurrent writers or host takeover",
+    "Remote provider stop confirmation",
+    "Arbitrary disk hardware failure",
+    "New SSRF/document/web adapters"
+  ]
+}

package/examples/README.md

@@ -2,19 +2,19 @@
 
 ## Isolated Bun installation
 
-Requirements: Bun 1.4.0+, Node.js 22.13.0+, and Git on macOS or Linux. After protected stable publication, this installs the 1.4.0 artifact in a temporary consumer, without building the source checkout or changing global tools:
+Requirements: Bun 1.4.0+, Node.js 22.13.0+, and Git on macOS or Linux. After protected stable publication, this installs the 1.5.0 artifact in a temporary consumer, without building the source checkout or changing global tools:
 
 ```bash
 harness_demo_dir=$(mktemp -d)
 cd "$harness_demo_dir"
 printf '{"name":"harness-first-run","private":true}\n' > package.json
-bun add --exact --ignore-scripts @zhivex-ai/harness@1.4.0
+bun add --exact --ignore-scripts @zhivex-ai/harness@1.5.0
 ./node_modules/.bin/zhx --version
 ./node_modules/.bin/zhx --help
 ./node_modules/.bin/zhx doctor --provider openai --json
 ```
 
-Version must print `1.4.0`; help lists commands. Doctor does not contact a provider. Without `OPENAI_API_KEY`, it reports the missing credential and exits with code `3`; inspect the JSON checks before proceeding. A directory without Git initialization can also produce a diagnostic warning. No paid model call is required for these checks. Both `zhx` and `zhivex-harness` are installed aliases; Bun manages installation, and their shebang runs Node.
+Version must print `1.5.0`; help lists commands. Doctor does not contact a provider. Without `OPENAI_API_KEY`, it reports the missing credential and exits with code `3`; inspect the JSON checks before proceeding. A directory without Git initialization can also produce a diagnostic warning. No paid model call is required for these checks. Both `zhx` and `zhivex-harness` are installed aliases; Bun manages installation, and their shebang runs Node.
 
 To continue in your actual project, use the [global installation and credential setup](../README.md#quick-start), then `zhx init --profile daily --provider openai` and `zhx doctor --profile daily`. Real tasks require the selected provider credential in the process environment. Profiles store provider/model choices, never credentials. See [CLI](../docs/CLI.md) and [support](../SUPPORT.md).
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhivex-ai/harness",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "description": "Governed, provider-portable runtime for coding agents with durable approvals and isolated repository execution.",
   "type": "module",
   "license": "MIT",
@@ -85,6 +85,10 @@
     "./mcp/stdio/v1": {
       "types": "./dist/engine/mcp-stdio-v1.d.ts",
       "import": "./dist/engine/mcp-stdio-v1.js"
+    },
+    "./audit": {
+      "types": "./dist/audit/index.d.ts",
+      "import": "./dist/audit/index.js"
     }
   },
   "files": [
@@ -98,6 +102,7 @@
     "docs/CLI.md",
     "docs/WEB_LIMITS.md",
     "docs/CODE_RELEASE.md",
+    "docs/CODE_WEB_TASKS.md",
     "docs/images/cli-conversation.png",
     "docs/CLIENT_PROTOCOL.md",
     "docs/CONTEXT_ENGINEERING.md",
@@ -135,18 +140,21 @@
     "docs/MCP_STDIO.md",
     "docs/adr/0002-isolated-mcp-stdio.md",
     "docs/VERTEX.md",
+    "docs/BEDROCK.md",
+    "docs/AZURE_OPENAI.md",
     "docs/TOOL_POLICY.md",
     "docs/fixtures/mcp-stdio-contract-v1.json",
     "docs/PROJECT_MEMORY.md",
     "docs/MINIMUM_TASK_AUTHORITY.md",
-    "docs/MINIMUM_OFFLINE_EVALS.md"
+    "docs/MINIMUM_OFFLINE_EVALS.md",
+    "docs/AUDIT_PACK.md"
   ],
   "scripts": {
     "models:check": "bun run scripts/validate-model-catalog.ts",
     "models:import": "bun run scripts/generate-console-models.ts",
     "dev": "bun run build && node --env-file-if-exists=.env dist/cli.js",
     "start": "node dist/cli.js",
-    "build": "bun run scripts/clean-dist.ts && bun build ./src/index.ts ./src/service-cli.ts ./src/acp-cli.ts ./src/engine/index.ts ./src/engine/protocol.ts ./src/engine/client.ts ./src/engine/service.ts ./src/engine/acp.ts ./src/engine/models.ts ./src/engine/desktop-state-v1.ts ./src/engine/desktop-providers-v1.ts ./src/compat/code-support.ts ./src/engine/mcp-stdio-v1.ts --root ./src --outdir ./dist --target node --packages external --splitting && bun build ./src/engine/protocol.ts ./src/engine/models.ts --outdir ./dist/engine --target browser --packages external && bun build ./src/cli-entry.ts --outdir ./dist --target node --packages external --splitting && mv ./dist/cli-entry.js ./dist/cli.js && cp ./dist/cli.js ./dist/zhx.js && bun build ./scripts/verify-historical-migrations.ts --outfile ./dist/verify-historical-migrations.js --target node --packages external && bun build ./scripts/hostile-repository-demo.ts --outfile ./dist/hostile-repository-demo.js --target node --packages external && tsc --emitDeclarationOnly",
+    "build": "bun run scripts/clean-dist.ts && bun build ./src/index.ts ./src/service-cli.ts ./src/acp-cli.ts ./src/audit/index.ts ./src/engine/index.ts ./src/engine/protocol.ts ./src/engine/client.ts ./src/engine/service.ts ./src/engine/acp.ts ./src/engine/models.ts ./src/engine/desktop-state-v1.ts ./src/engine/desktop-providers-v1.ts ./src/compat/code-support.ts ./src/engine/mcp-stdio-v1.ts --root ./src --outdir ./dist --target node --packages external --splitting && bun build ./src/engine/protocol.ts ./src/engine/models.ts --outdir ./dist/engine --target browser --packages external && bun build ./src/cli-entry.ts --outdir ./dist --target node --packages external --splitting && mv ./dist/cli-entry.js ./dist/cli.js && cp ./dist/cli.js ./dist/zhx.js && bun build ./scripts/verify-historical-migrations.ts --outfile ./dist/verify-historical-migrations.js --target node --packages external && bun build ./scripts/hostile-repository-demo.ts --outfile ./dist/hostile-repository-demo.js --target node --packages external && tsc --emitDeclarationOnly",
     "prepack": "bun run build",
     "architecture:check": "bun run scripts/check-architecture.ts",
     "docs:check": "bun run scripts/check-docs.ts",
@@ -156,7 +164,7 @@
     "readiness:1.0": "bun run scripts/check-1-0-readiness.ts",
     "readiness:1.0:release": "bun run scripts/check-1-0-readiness.ts --release",
     "typecheck": "tsc --noEmit",
-    "test": "bun test ./tests ./desktop/tests",
+    "test": "bun test --preload ./tests/preload-bedrock-mock.ts ./tests ./desktop/tests",
     "evaluate": "bun run scripts/evaluate.ts",
     "benchmark:workspace": "bun run scripts/benchmark-workspace.ts",
     "benchmark:workspace:ci": "bun run scripts/benchmark-workspace.ts --files 1000 --page-size 100 --repetitions 3 --warmups 0",
@@ -209,24 +217,26 @@
   },
   "dependencies": {
     "@zhivex-ai/agents": "1.11.0",
-    "@zhivex-ai/anthropic": "0.13.2",
-    "@zhivex-ai/core": "1.31.0",
+    "@zhivex-ai/anthropic": "0.14.0",
+    "@zhivex-ai/azure-openai": "0.7.8",
+    "@zhivex-ai/bedrock": "2.0.7",
+    "@zhivex-ai/core": "1.34.0",
     "@zhivex-ai/gemini": "0.13.0",
     "@zhivex-ai/meta": "0.2.9",
-    "@zhivex-ai/openai": "0.14.1",
+    "@zhivex-ai/openai": "0.16.0",
     "@zhivex-ai/qwen": "0.16.4",
-    "@zhivex-ai/vertex": "1.2.4",
+    "@zhivex-ai/vertex": "1.2.7",
     "google-auth-library": "11.1.0",
     "zod": "4.6.5"
   },
   "overrides": {
-    "@zhivex-ai/core": "1.31.0"
+    "@zhivex-ai/core": "1.34.0"
   },
   "devDependencies": {
-    "@agentclientprotocol/sdk": "1.7.0",
-    "@modelcontextprotocol/server": "2.2.0",
+    "@agentclientprotocol/sdk": "1.8.0",
+    "@modelcontextprotocol/server": "2.3.1",
     "@types/bun": "1.4.2",
-    "@types/node": "^26.6.3",
+    "@types/node": "^26.6.5",
     "typescript": "7.0.2",
     "typescript-compiler-api": "npm:typescript@6.0.3"
   },
@@ -236,6 +246,6 @@
   },
   "packageManager": "bun@1.4.0",
   "optionalDependencies": {
-    "@napi-rs/keyring": "2.1.0"
+    "@napi-rs/keyring": "2.1.1"
   }
 }