codeharness 0.36.3 → 0.36.5

package/dist/{chunk-2FHBRGG7.js → chunk-3UH6SVBO.js}

@@ -2895,7 +2895,7 @@ function generateDockerfileTemplate(projectDir, stackOrDetections) {
 }
 
 // src/modules/infra/init-project.ts
-var HARNESS_VERSION = true ? "0.36.3" : "0.0.0-dev";
+var HARNESS_VERSION = true ? "0.36.5" : "0.0.0-dev";
 function failResult(opts, error) {
   return {
     status: "fail",

package/dist/{docker-Z6B3GBST.js → docker-LNVG4NBV.js}

@@ -16,7 +16,7 @@ import {
   stopCollectorOnly,
   stopSharedStack,
   stopStack
-} from "./chunk-2FHBRGG7.js";
+} from "./chunk-3UH6SVBO.js";
 export {
   checkRemoteEndpoint,
   cleanupOrphanedContainers,

package/dist/index.js

@@ -40,7 +40,7 @@ import {
   validateDockerfile,
   warn,
   writeState
-} from "./chunk-2FHBRGG7.js";
+} from "./chunk-3UH6SVBO.js";
 
 // src/index.ts
 import { Command } from "commander";
@@ -3175,7 +3175,7 @@ function formatCoverageContextMessage(coverage, target) {
 var TASK_PROMPTS = {
   "create-story": (key) => `Create the story spec for ${key}. Read the epic definitions and architecture docs. Write a complete story file with acceptance criteria, tasks, and dev notes. CRITICAL: Every AC must be testable by a blind QA agent using ONLY a user guide + browser/API/CLI access. No AC should reference source code, internal data structures, or implementation details like O(1) complexity. Each AC must describe observable behavior that can be verified through UI interaction (agent-browser), API calls (curl), CLI commands (docker exec), or log inspection (docker logs). Wrap output in <story-spec>...</story-spec> tags.`,
   "implement": (key) => `Implement story ${key}`,
-  "check": (key) => `Run automated checks for story ${key}. Run ONLY these commands: 1) \`npx vitest run\` (unit tests), 2) \`npm run lint\` (linter). Do NOT run \`npm test\` (BATS integration tests) \u2014 those require the installed CLI binary and Docker, which are not available in the sandbox. If vitest and lint both pass, include <verdict>pass</verdict>. If either fails, include <verdict>fail</verdict> with the actual error output. Only report failures from YOUR test run, not from previous sessions.`,
+  "check": (key) => `Run automated checks for story ${key}. Execute the project's test suite and linter. Include <verdict>pass</verdict> or <verdict>fail</verdict> in your response.`,
   "review": (key) => `Review the implementation of story ${key}. Check for correctness, security issues, architecture violations, and AC coverage. Include <verdict>pass</verdict> or <verdict>fail</verdict> in your response. If fail, include <issues>...</issues>.`,
   "document": (key) => `Write user documentation for story ${key}. Describe what was built and how to use it from a user's perspective. No source code. Wrap documentation in <user-docs>...</user-docs> tags.`,
   "deploy": () => `Provision the Docker environment for this project. Check for docker-compose.yml, start containers, verify health. Wrap report in <deploy-report>...</deploy-report> tags with status, containers, URLs, credentials, health.`,
@@ -3635,6 +3635,10 @@ var loopIterationActor = fromPromise2(async ({ input }) => {
     }
     if (haltedInLoop) break;
   }
+  if (tasksCompleted === 0 && !haltedInLoop && errors.length > 0) {
+    warn(`workflow-machine: loop iteration produced zero completions with ${errors.length} error(s) \u2014 halting to prevent infinite loop`);
+    haltedInLoop = true;
+  }
   return { ...input, currentState, errors, tasksCompleted, halted: haltedInLoop, lastContract, lastVerdict, accumulatedCostUsd };
 });
 var loopMachine = setup({
@@ -11194,7 +11198,7 @@ function registerTeardownCommand(program) {
     } else if (otlpMode === "remote-routed") {
       if (!options.keepDocker) {
         try {
-          const { stopCollectorOnly: stopCollectorOnly2 } = await import("./docker-Z6B3GBST.js");
+          const { stopCollectorOnly: stopCollectorOnly2 } = await import("./docker-LNVG4NBV.js");
           stopCollectorOnly2();
           result.docker.stopped = true;
           if (!isJson) {
@@ -11226,7 +11230,7 @@ function registerTeardownCommand(program) {
         info("Shared stack: kept running (other projects may use it)");
       }
     } else if (isLegacyStack) {
-      const { isStackRunning: isStackRunning2, stopStack } = await import("./docker-Z6B3GBST.js");
+      const { isStackRunning: isStackRunning2, stopStack } = await import("./docker-LNVG4NBV.js");
       let stackRunning = false;
       try {
         stackRunning = isStackRunning2(composeFile);
@@ -13859,7 +13863,7 @@ var CodexDriver = class {
         opts.plugins
       );
     }
-    const args = ["exec", "--json", "--full-auto", "--skip-git-repo-check"];
+    const args = opts.sourceAccess ? ["exec", "--json", "--dangerously-bypass-approvals-and-sandbox", "--skip-git-repo-check"] : ["exec", "--json", "--full-auto", "--skip-git-repo-check"];
     const model = opts.model && !opts.model.startsWith("claude-") ? opts.model : void 0;
     if (model) {
       args.push("--model", model);
@@ -14213,7 +14217,7 @@ function registerDriversCommand(program) {
 }
 
 // src/index.ts
-var VERSION = true ? "0.36.3" : "0.0.0-dev";
+var VERSION = true ? "0.36.5" : "0.0.0-dev";
 function createProgram() {
   const program = new Command();
   program.name("codeharness").description("Makes autonomous coding agents produce software that actually works").version(VERSION).option("--json", "Output in machine-readable JSON format");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeharness",
-  "version": "0.36.3",
+  "version": "0.36.5",
   "type": "module",
   "description": "CLI for codeharness — makes autonomous coding agents produce software that actually works",
   "bin": {