codex-genesis-harness 0.1.6 → 0.1.8

package/.codebase/RECOVERY_POINTS.md

@@ -1,438 +1,22 @@
 # Recovery Points
 
-**Purpose**: Document where implementation can be paused and resumed without losing context or creating inconsistencies.
-
-**Use When**: Work needs to be paused, passed to another developer, or interrupted by higher priority work.
-
----
-
-## Quick Reference: Current Recovery Points
-
-| Phase | Status | Resumption File | Last Updated |
-|-------|--------|-----------------|--------------|
-| Planning | ✓ Complete | `.codebase/CURRENT_STATE.md` | _date_ |
-| Design | ✓ Complete | IMPLEMENTATION_HANDOFF.md | _date_ |
-| Contracts | ✓ Complete | `.codebase/API_CONTRACTS.md` | _date_ |
-| Tests | ⏸️ In Progress | `tests/auth.test.ts` | _date_ |
-| Implementation | ⏸️ In Progress | `src/auth/` | _date_ |
-| Documentation | ⏸️ Pending | `docs/AUTH.md` | _date_ |
-
----
-
-## Phase: Planning
-
-**Status**: ✓ Complete  
-**Start Date**: _date_  
-**End Date**: _date_  
-**Resumption**: Not needed
-
-### What Happened
-
-All requirements gathered, validated, and documented.
-
-### To Resume (If Needed)
-
-Not applicable - planning is complete and locked.
-
----
-
-## Phase: Design & Architecture
-
-**Status**: ✓ Complete  
-**Start Date**: _date_  
-**End Date**: _date_  
-**Resumption**: Not needed
-
-### What Happened
-
-System design completed, contracts defined, technology choices made.
-
-### Artifacts
-
-- `.codebase/ARCHITECTURE.md` - Final design
-- `.codebase/API_CONTRACTS.md` - API specifications
-- `IMPLEMENTATION_HANDOFF.md` - Design decisions
-
-### To Resume (If Needed)
-
-Not applicable - design is frozen and approved.
+A reverse-chronological log of stable states to return to if the current task corrupts the project.
 
 ---
 
-## Phase: Test Contracts & Fixtures
-
-**Status**: ✓ Complete  
-**Start Date**: _date_  
-**End Date**: _date_  
-**Resumption**: Not needed
-
-### What Happened
-
-Test contracts created, fixtures built, test infrastructure ready.
-
-### Artifacts
-
-```
-tests/
-├── contracts/
-│   ├── auth-api.contract.json
-│   └── session-manager.contract.json
-├── fixtures/
-│   ├── oauth-responses.json
-│   └── user-data.json
-└── setup/
-    ├── test-db-init.sql
-    └── mock-providers.ts
-```
-
-### To Resume (If Needed)
-
-Not applicable - test infrastructure is ready.
-
----
-
-## Phase: Core Implementation (CURRENT PAUSE POINT)
-
-**Status**: ⏸️ In Progress (50% complete)  
-**Start Date**: _date_  
-**Current Date**: _YYYY-MM-DD_  
-**Estimated Completion**: _date_
-
-### What Was Done (Completed)
-
-```
-✓ src/auth/oauth-provider.ts
-  - OAuth 2.0 flow implementation
-  - Provider callback handling
-  - Token management
-
-✓ src/db/migrations/
-  - New users table fields
-  - oauth_provider, oauth_id columns
-
-✓ tests/auth.test.ts
-  - 15 tests written and passing
-  - 90% coverage of oauth-provider.ts
-```
-
-### What Remains (To Do)
-
-```
-⏳ src/auth/session-manager.ts
-  - Session creation and validation
-  - Session timeout handling
-  - Concurrent session management
-
-⏳ src/ui/pages/
-  - Login component
-  - Registration component
-  - Error handling UI
-
-⏳ API endpoints
-  - POST /auth/login
-  - POST /auth/register
-  - POST /auth/logout
-
-⏳ Integration tests
-  - End-to-end OAuth flow
-  - Database state consistency
-```
-
-### Pause State
-
-**What's Safe to Pause Here:**
-
-The OAuth provider module is isolated and complete. Can pause safely at this point.
-
-**Before Pausing:**
-
-```bash
-# 1. Commit current progress
-git add -A
-git commit -m "feat: OAuth provider implementation (50% complete)"
-
-# 2. Verify tests pass
-npm test
-
-# 3. Document pause point
-# (You are reading this file!)
-
-# 4. Create recovery checklist
-# (See section below)
-```
-
-### To Resume From Here
-
-**Step 1: Environment Setup** (5 min)
-
-```bash
-# Pull latest changes
-git pull origin main
-
-# Verify you're on the right branch
-git branch -v
-
-# Install dependencies
-npm install
-
-# Check database is migrated
-npm run db:status
-```
-
-**Step 2: Verify Previous Work** (5 min)
-
-```bash
-# Run existing tests
-npm test -- auth.test.ts
-# Expected: 15 passing
-
-# Check module compiles
-npm run build
-
-# Verify no uncommitted changes
-git status
-```
-
-**Step 3: Review What's Next** (10 min)
-
-```bash
-# Read the handoff document
-cat IMPLEMENTATION_HANDOFF.md
-
-# Check what was planned next
-cat .codebase/CURRENT_STATE.md
-
-# Review test contract
-cat tests/contracts/auth-api.contract.json
-```
-
-**Step 4: Resume Implementation** (30 min+)
-
-Start with session-manager.ts:
+## 2026-06-03T09:55:00+07:00: Full Score Harness Fix (110/110)
+- **Status**: Stable
+- **Git State**: Everything committed + new features added.
+- **Why it's stable**: All tests (`tests/unit/*.test.js`), `verify.sh`, `run-evals.sh`, and `cold-start-check.js` pass with exit code 0.
+- **How to recover**: `git reset --hard HEAD` (assuming commit happens immediately after this)
+- **Files added**: `features/REGISTRY.md`, `scripts/cold-start-check.js`, `scripts/check-scope.sh`, observability schemas/samples.
 
-```bash
-# Create new branch (if needed)
-git checkout -b continue/auth-session
-
-# Open the next module
-code src/auth/session-manager.ts
-
-# Reference the test contract
-code tests/contracts/session-manager.contract.json
-
-# Start implementing...
-```
-
----
-
-## Phase: Session Management (NEXT PHASE)
-
-**Status**: ⏳ Ready to start  
-**Estimated Start**: _date_  
-**Estimated Duration**: 4-6 hours  
-**Estimator**: Original developer
-
-### What Needs to Happen
-
-1. **Implement session-manager.ts**
-   - Create session on login
-   - Validate session on requests
-   - Handle timeout
-
-2. **Write session tests**
-   - Session creation tests
-   - Validation tests
-   - Timeout tests
-   - Concurrent session tests
-
-3. **Update database**
-   - Add sessions table migration
-   - Add indexes for performance
-
-### Acceptance Criteria
-
-```
-- [ ] Session manager module complete
-- [ ] 12+ session tests written and passing
-- [ ] Coverage ≥ 85%
-- [ ] No performance regressions
-- [ ] Integrated with OAuth provider
-```
-
-### Dependencies
-
-- ✓ OAuth provider complete (already done)
-- ✓ Database migrations (already done)
-- ⏳ Needs: Node.js session library installed
-
-### Blockers
-
-None identified. Ready to proceed.
-
----
-
-## Phase: UI Components (AFTER SESSION)
-
-**Status**: ⏳ Ready to start  
-**Estimated Start**: _date_ (after session phase)  
-**Estimated Duration**: 6-8 hours
-
-### What Needs to Happen
-
-1. **Build Login Page**
-   - OAuth provider buttons
-   - Error messaging
-   - Loading states
-
-2. **Build Register Page**
-   - Form validation
-   - Provider linking
-   - Success messaging
-
-3. **Update Layout**
-   - Add auth header
-   - Add logout button
-   - Add user menu
-
-### Files to Modify
-
-```
-src/ui/pages/
-├── login.tsx (new)
-├── register.tsx (new)
-└── layout.tsx (modify)
-
-src/ui/components/
-├── oauth-button.tsx (new)
-├── auth-error.tsx (new)
-└── user-menu.tsx (modify)
-
-styles/
-├── auth.css (new)
-```
-
-### Acceptance Criteria
-
-```
-- [ ] Login page working
-- [ ] Register page working
-- [ ] OAuth provider flow works E2E
-- [ ] Error messages display correctly
-- [ ] Mobile responsive
-- [ ] Browser compatibility tested
-```
-
----
-
-## Phase: Documentation & Testing (FINAL PHASE)
-
-**Status**: ⏳ Ready to start  
-**Estimated Start**: _date_ (after UI phase)  
-**Estimated Duration**: 4 hours
-
-### What Needs to Happen
-
-1. **Update Documentation**
-   - README auth section
-   - Setup guide
-   - API documentation
-   - Troubleshooting guide
-
-2. **Final Testing**
-   - Full E2E test suite
-   - Performance testing
-   - Security testing
-   - Browser compatibility
-
-3. **Code Review & QA**
-   - Team code review
-   - QA testing
-   - Security review
-
-### Acceptance Criteria
-
-```
-- [ ] All documentation complete
-- [ ] All E2E tests passing
-- [ ] Code review approved
-- [ ] No security issues
-- [ ] Performance acceptable
-- [ ] Ready for production
-```
-
----
-
-## Rollback Points
-
-### If Implementation Gets Stuck
-
-**Rollback Level 1: Last Commit**
-```bash
-git reset --hard HEAD
-npm install
-npm test  # Should pass
-```
-
-**Rollback Level 2: Before This Feature**
-```bash
-git checkout main
-npm install
-npm test
-# Verify everything works on main
-```
-
-**Rollback Level 3: Database Rollback**
-```bash
-npm run db:rollback -- auth-v1
-# Removes auth tables/fields
-# App reverts to state before auth changes
-```
-
----
-
-## Checklist: Before Pausing Work
-
-- [ ] All current tests passing
-- [ ] Code builds without errors
-- [ ] No uncommitted changes
-- [ ] Commit message written (describe state)
-- [ ] This Recovery Points file updated
-- [ ] Next developer notified
-- [ ] Slack message sent with status
-
----
-
-## Checklist: When Resuming Work
-
-- [ ] Pull latest git changes
-- [ ] Run `npm install` (if dependencies changed)
-- [ ] Run existing tests (verify they still pass)
-- [ ] Read IMPLEMENTATION_HANDOFF.md
-- [ ] Read this Recovery Points file
-- [ ] Update status in this file (what phase are you on?)
-- [ ] Begin implementation from current phase
-
----
-
-## Known Issues That Might Affect Resumption
-
-| Issue | Severity | Workaround | Fixed? |
-|-------|----------|-----------|--------|
-| OAuth token refresh timing | Low | Add 5s buffer | ⏳ TODO |
-| Database connection pooling | Medium | Use pool size 10 | ✓ Fixed |
-| Rate limiting missing | Low | Not blocking | ⏳ TODO |
-
----
-
-## Contact For Questions
-
-**Original Developer**: _Name_ (_email_)  
-**Current Owner**: _Name_ (_email_)  
-**Slack Channel**: #auth-feature  
-
----
+## 2026-06-03T09:30:00+07:00: LeanCTX + CLI Postinstall Seed
+- **Status**: Stable
+- **Why it's stable**: `npm run verify` and `npm run eval` pass. `context-policy.json` successfully bootstrapped.
+- **How to recover**: Return to commit before the evaluation score fixes.
 
-**Last Updated**: _YYYY-MM-DD HH:MM_  
-**Updated By**: _Name_  
-**Next Review**: _YYYY-MM-DD_  
-**Paused At**: _Phase: Core Implementation_
+## 2026-06-03T08:35:00+07:00: Harness Drift Gate Hardening
+- **Status**: Stable
+- **Why it's stable**: `npm run verify`, `npm run eval`, and `npm run pack:check` all pass.
+- **How to recover**: Revert to branch state before LeanCTX introduction.

package/.codebase/TECH_DEBT.md

@@ -0,0 +1,6 @@
+# Tech Debt Ledger
+
+This file logs structural rule violations, skipped tests, and out-of-scope modifications that were bypassed using `VIBE_MODE`.
+The AI and developers should periodically review this file to pay down technical debt.
+
+---

package/.codebase/TEST_MATRIX.md

@@ -2,10 +2,11 @@
 
 Required checks:
 
-- `scripts/verify.sh`: repository harness structure, skill metadata, contracts, fixtures, and harness smoke test.
-- `scripts/run-evals.sh`: install/verify/uninstall regression checks.
+- `scripts/verify.sh`: repository harness structure, skill metadata, contracts, fixtures, harness smoke test, and `SKILL.md` progressive-disclosure line limit.
+- `scripts/run-evals.sh`: install/verify/uninstall regression checks, manifest route checks, sync-generated Mermaid relationship checks, hook docs-gate checks, LeanCTX policy checks, handoff/state freshness checks, `tests/unit/*.test.js`, and `tests/integration/*.test.js`.
+- `tests/integration/cli-smoke.test.js`: package CLI smoke for install/postinstall LeanCTX seeding, `path`, `status`, `docs`, `docs-gate`, `leanctx`, `prime`, and `sync` in temporary fixture repositories.
+- `tests/unit/prompt_sentinel.test.js`: LeanCTX-backed prompt sentinel threshold and truncation behavior.
 - `npm run pack:check`: package contents dry-run.
 - Skill validation: run `quick_validate.py` for changed skills when available.
 
 Feature rule: add or update fixtures and expected output before implementation.
-

package/.codebase/VISUAL_GRAPH.md

@@ -0,0 +1,127 @@
+# Visual Project Graph
+
+## Harness Relationship Map
+
+```mermaid
+flowchart LR
+  manifest[".codex-plugin/plugin.json"] --> skills[".codex/skills/*"]
+  package["package.json"] --> cli["bin/genesis-harness.js"]
+  package --> verify["scripts/verify.sh"]
+  package --> evals["scripts/run-evals.sh"]
+  cli --> install["install / postinstall"]
+  cli --> hooks["setup-hooks"]
+  hooks --> docsgate["genesis-harness docs-gate"]
+  docsgate --> docsync["check-docs-sync.sh"]
+  docsgate --> specsync["check-spec-changelog.sh"]
+  skills --> contracts["contracts/"]
+  skills --> fixtures["fixtures/"]
+  skills --> tests["tests/ + playwright/"]
+  skills --> memory[".codebase/"]
+  verify --> skills
+  verify --> contracts
+  verify --> fixtures
+  verify --> memory
+  evals --> install
+  evals --> cli
+  evals --> unit["tests/unit/*.test.js"]
+  evals --> integration["tests/integration/*.test.js"]
+  evals --> pack["npm pack smoke"]
+```
+
+## Skill Workflow Relationships
+
+```mermaid
+flowchart TD
+  harness["genesis-harness"] --> planning["genesis-planning"]
+  harness --> research["genesis-research-first"]
+  planning --> architecture["genesis-architecture"]
+  planning --> api["genesis-api-contract"]
+  planning --> design["genesis-design-spec"]
+  api --> apisync["genesis-api-sync"]
+  design --> ui["genesis-ui-ux-test"]
+  api --> specimpact["spec-impact-engine"]
+  specimpact --> specprop["genesis-spec-propagation"]
+  specprop --> docs["genesis-docs-automation"]
+  ui --> verifybefore["genesis-verification-before-completion"]
+  apisync --> verifybefore
+  docs --> verifybefore
+  verifybefore --> release["genesis-release"]
+  harness --> memorymap["genesis-codebase-map"]
+  harness --> observability["genesis-observability-automation"]
+```
+
+## Code Dependency Hints
+
+```mermaid
+flowchart TD
+  "tests/integration/cli-smoke.test.js" --> "assert"
+  "tests/integration/cli-smoke.test.js" --> "fs"
+  "tests/integration/cli-smoke.test.js" --> "os"
+  "tests/integration/cli-smoke.test.js" --> "path"
+  "tests/integration/cli-smoke.test.js" --> "child_process"
+  "tests/unit/contract_integrity_gate.test.js" --> "assert"
+  "tests/unit/contract_integrity_gate.test.js" --> "fs"
+  "tests/unit/contract_integrity_gate.test.js" --> "path"
+  "tests/unit/contract_integrity_gate.test.js" --> "child_process"
+  "tests/unit/healing_telemetry.test.js" --> "assert"
+  "tests/unit/healing_telemetry.test.js" --> "fs"
+  "tests/unit/healing_telemetry.test.js" --> "path"
+  "tests/unit/healing_telemetry.test.js" --> "child_process"
+  "tests/unit/prompt_sentinel.test.js" --> "assert"
+  "tests/unit/prompt_sentinel.test.js" --> "fs"
+  "tests/unit/prompt_sentinel.test.js" --> "path"
+  "tests/unit/prompt_sentinel.test.js" --> "child_process"
+  "tests/unit/spec_visual_sync.test.js" --> "assert"
+  "tests/unit/spec_visual_sync.test.js" --> "fs"
+  "tests/unit/spec_visual_sync.test.js" --> "path"
+  "tests/unit/spec_visual_sync.test.js" --> "child_process"
+  "tests/unit/test_generator.test.js" --> "assert"
+  "tests/unit/test_generator.test.js" --> "fs"
+  "tests/unit/test_generator.test.js" --> "path"
+  "tests/unit/test_generator.test.js" --> "child_process"
+  "bin/genesis-harness.js" --> "fs"
+  "bin/genesis-harness.js" --> "path"
+  "bin/genesis-harness.js" --> "child_process"
+  "bin/genesis-harness.js" --> "@babel/parser"
+  "bin/genesis-harness.js" --> "@babel/traverse"
+  "bin/genesis-harness.js" --> "child_process"
+```
+
+## .planning/ROADMAP.md Derived Feature Status
+
+```mermaid
+graph TD
+  classDef completed fill:#d4edda,stroke:#28a745,stroke-width:2px;
+  classDef inprogress fill:#fff3cd,stroke:#ffc107,stroke-width:2px;
+  classDef pending fill:#e2e3e5,stroke:#6c757d,stroke-width:2px;
+  subgraph Role_0 ["Role: User"]
+    Task0["Roadmap task 0"]
+    class Task0 completed;
+    Task1["Roadmap task 1"]
+    class Task1 inprogress;
+    Task2["Roadmap task 2"]
+    class Task2 pending;
+  end
+  subgraph Role_1 ["Role: Admin"]
+    Task3["Roadmap task 3"]
+    class Task3 completed;
+    Task4["Roadmap task 4"]
+    class Task4 pending;
+    Task5["Roadmap task 5"]
+    class Task5 inprogress;
+  end
+  subgraph Role_2 ["Role: Analytics"]
+    Task6["Roadmap task 6"]
+    class Task6 pending;
+    Task7["Roadmap task 7"]
+    class Task7 pending;
+    Task8["Roadmap task 8"]
+    class Task8 inprogress;
+  end
+  Task0 --> Task1
+  Task0 --> Task2
+  Task2 --> Task4
+  Task2 --> Task5
+  Task4 --> Task6
+```
+

package/.codebase/beads.json

@@ -0,0 +1,16 @@
+[
+  {
+    "id": "212329",
+    "category": "general",
+    "fact": "Always use PORT 8080 when running development servers locally.",
+    "timestamp": "2026-06-01T07:22:12.428Z",
+    "git_commit": "92d8138"
+  },
+  {
+    "id": "25d72a",
+    "category": "api",
+    "fact": "Verify request.json schema before running visual regression tests.",
+    "timestamp": "2026-06-01T07:22:33.273Z",
+    "git_commit": "92d8138"
+  }
+]

package/.codebase/context-policy.json

@@ -0,0 +1,68 @@
+{
+  "name": "leanctx-default",
+  "token_budget": 12000,
+  "_comment_token_budget": "Default conservative budget. Override in project .codebase/context-policy.json. For 128k-context models, set to 40000.",
+  "auto_scale": {
+    "enabled": false,
+    "note": "Set enabled=true and provide model_context_window to auto-calculate budgets. Formula: token_budget = model_context_window * 0.09 (9% for harness context leaves 91% for generation).",
+    "model_context_window": null,
+    "scale_factor": 0.09
+  },
+  "warn_at": 0.6,
+  "compact_at": 0.7,
+  "hard_stop_at": 0.85,
+  "layers": [
+    {
+      "name": "core",
+      "max_tokens": 2500,
+      "include": [
+        "AGENTS.md",
+        ".codex/SOUL.md",
+        ".codebase/CURRENT_STATE.md",
+        ".codebase/MODULE_INDEX.md",
+        ".codebase/TEST_MATRIX.md"
+      ]
+    },
+    {
+      "name": "active_context",
+      "max_tokens": 6500,
+      "include": [
+        ".codebase/COMPRESSED_CONTEXT.md",
+        ".codebase/VISUAL_GRAPH.md",
+        ".planning/STATE.md",
+        ".planning/ROADMAP.md",
+        "contracts/",
+        "fixtures/"
+      ]
+    },
+    {
+      "name": "deferred_reference",
+      "max_tokens": 3000,
+      "include": [
+        ".codex/skills/*/references/",
+        ".codex/skills/*/playbooks/",
+        ".codex/skills/*/checklists/",
+        "README*.md"
+      ]
+    }
+  ],
+  "defer_patterns": [
+    ".codex/skills/*/templates/**",
+    ".codex/skills/*/examples/**",
+    "playwright/**",
+    "observability/**",
+    "node_modules/**",
+    "dist/**",
+    "coverage/**"
+  ],
+  "portable_commands": [
+    "genesis-harness leanctx",
+    "genesis-harness sync",
+    "genesis-harness docs-gate",
+    "genesis-harness verify-gate",
+    "npm run verify",
+    "npm run eval",
+    "node scripts/cold-start-check.js"
+  ],
+  "wrapper_policy": "rtk optional when installed locally; public docs and CI must use portable commands."
+}