hadara 0.4.0-rc.0 → 0.4.0

package/README.md

@@ -5,8 +5,8 @@
 </p>
 
 <p align="center">
-  <img alt="Stable npm release" src="https://img.shields.io/badge/npm-0.3.3-blue">
-  <img alt="Source version" src="https://img.shields.io/badge/source-0.4.0--rc.0-blue">
+  <img alt="Stable npm release" src="https://img.shields.io/badge/npm-0.4.0-blue">
+  <img alt="Next npm release" src="https://img.shields.io/badge/next-0.4.0--rc.0-blue">
   <img alt="Node.js" src="https://img.shields.io/badge/node-%3E%3D22-brightgreen">
   <img alt="License" src="https://img.shields.io/badge/license-MIT-lightgrey">
 </p>
@@ -24,30 +24,30 @@ This repository is both the HADARA source checkout and the HADARA protocol works
 Current stable npm release:
 
 ```text
-hadara@0.3.3
+hadara@0.4.0
 ```
 
-Current source release candidate:
+Previous npm release candidate:
 
 ```text
 hadara@0.4.0-rc.0
 ```
 
-Previous published release candidate:
+Previous agent UX release candidate:
 
 ```text
 hadara@0.3.4-rc.0
 ```
 
-The 0.4.0 source line is a breaking productization release candidate after stable 0.3.3 and the published 0.3.4-rc.0 agent UX line. It keeps the context-routing and finalize-first lifecycle baseline, then simplifies new projects around a productized 0.4 scaffold, registry-backed docs read maps, a four-file Task Capsule, generated evidence projection, a normalized close-source contract, and fail-closed legacy mutation boundaries.
+The 0.4.0 source line is a breaking productization release after stable 0.3.3 and the published 0.3.4-rc.0 agent UX line. It keeps the context-routing and finalize-first lifecycle baseline, then simplifies new projects around a productized 0.4 scaffold, registry-backed docs read maps, a four-file Task Capsule, generated evidence projection, a normalized close-source contract, and fail-closed legacy mutation boundaries.
 
-Phase labels are internal implementation phases, not npm release-candidate labels. The stable `0.3.3` package is the default install target; `0.4.0-rc.0` is the current source candidate and must not be treated as published until an approval-gated publish capsule completes.
+Phase labels are internal implementation phases, not npm release-candidate labels. The stable `0.4.0` package is the default install target through the `latest` dist-tag after the approval-gated publish completes; `0.4.0-rc.0` remains the previous release candidate on npm under the `next` dist-tag.
 
 | Surface | Status |
 |---|---|
-| Current stable | [`hadara@0.3.3`](docs/RELEASE_NOTES.md#033) |
-| Source candidate | [`hadara@0.4.0-rc.0`](docs/RELEASE_NOTES.md#040-rc0) |
-| Previous RC | [`hadara@0.3.4-rc.0`](docs/RELEASE_NOTES.md#034-rc0) |
+| Current stable | [`hadara@0.4.0`](docs/RELEASE_NOTES.md#040) |
+| Previous RC | [`hadara@0.4.0-rc.0`](docs/RELEASE_NOTES.md#040-rc0) on `next` |
+| Previous agent UX RC | [`hadara@0.3.4-rc.0`](docs/RELEASE_NOTES.md#034-rc0) |
 | Previous stable | [`hadara@0.3.2`](docs/RELEASE_NOTES.md#032) |
 | Historical RCs | See [Release Notes](docs/RELEASE_NOTES.md). |
 | GitHub Release | Secondary target, approval-gated. |
@@ -55,7 +55,7 @@ Phase labels are internal implementation phases, not npm release-candidate label
 | PyPI/Python package | `hadara==0.2.0rc1` published preview bridge. |
 | Installer scripts / USB launchers | Deferred. |
 
-No release command should publish, create a GitHub Release, build Docker images, upload artifacts, or load token values unless an operator explicitly approves the mutation path for the active release capsule. Stable `0.3.3` is the npm package line until the `0.4.0-rc.0` publish capsule completes; GitHub Release, Docker/PyPI publish, installer execution, and MCP release/package execution remain separate explicit mutations.
+No release command should publish, create a GitHub Release, build Docker images, upload artifacts, or load token values unless an operator explicitly approves the mutation path for the active release capsule. Stable `0.4.0` is the default npm package line after the T-0490 approval-gated publish completes; `0.4.0-rc.0` remains available for explicit RC evaluation through `hadara@next` or the exact version. The `v0.4.0-rc.0` GitHub Release exists as a draft prerelease; Docker/PyPI publish, installer execution, and MCP release/package execution remain separate explicit mutations.
 
 ## Install
 
@@ -64,7 +64,7 @@ Requires Node.js 22.
 Install the stable release:
 
 ```bash
-npm install -g hadara@0.3.3
+npm install -g hadara@0.4.0
 hadara help
 hadara doctor --json
 ```
@@ -72,11 +72,11 @@ hadara doctor --json
 Run without a global install:
 
 ```bash
-npx hadara@0.3.3 help
-npx hadara@0.3.3 doctor --json
+npx hadara@0.4.0 help
+npx hadara@0.4.0 doctor --json
 ```
 
-After `0.4.0-rc.0` is published, evaluate it explicitly:
+Evaluate the previous `0.4.0-rc.0` explicitly:
 
 ```bash
 npm install -g hadara@0.4.0-rc.0
@@ -87,11 +87,11 @@ For release or recycle evidence, prefer an isolated prefix install when PATH, gl
 
 ```bash
 tmp="$(mktemp -d)"
-npm --prefix "$tmp" install hadara@0.3.3
+npm --prefix "$tmp" install hadara@0.4.0
 "$tmp/node_modules/.bin/hadara" version --json
 ```
 
-`npx hadara@0.3.3 ...` remains convenient for normal use. The isolated installed-bin path is stronger proof that the published package installed and executed from the intended package tree.
+`npx hadara@0.4.0 ...` remains convenient for normal use. The isolated installed-bin path is stronger proof that the published package installed and executed from the intended package tree.
 
 ## What HADARA Gives You
 
@@ -268,7 +268,7 @@ Dashboard, TUI, Hermes, MCP, installer, package, release, and run commands stay
 
 ## Safety Boundaries
 
-HADARA 0.4.0-rc.0 is not:
+HADARA 0.4.0 is not:
 
 - a full agent runtime;
 - Rack/enterprise behavior;
@@ -308,7 +308,7 @@ Portable/local state is not committed. Project docs, Task Capsules, and reduced
 
 `evidence.jsonl` is the canonical Task Capsule evidence source. `EVIDENCE.md` is a non-canonical human summary that can help review validation history, but it must not be treated as the source of truth for rebuild, migration, or resolution logic.
 
-0.4.0-rc.0 does not implement `hadara evidence rebuild --json` or an execute mode. Future rebuild work must first define whether a difference is formatting regeneration, managed-section drift, or data inconsistency before reporting `wouldChange`. Any later write-capable rebuild flow must be dry-run-first, reviewed, and before-hash guarded before it rewrites derived Markdown.
+0.4.0 does not implement `hadara evidence rebuild --json` or an execute mode. Future rebuild work must first define whether a difference is formatting regeneration, managed-section drift, or data inconsistency before reporting `wouldChange`. Any later write-capable rebuild flow must be dry-run-first, reviewed, and before-hash guarded before it rewrites derived Markdown.
 
 ## Development / Contributing
 

package/dist/cli/doctor.js

@@ -7,18 +7,33 @@ exports.createDoctorReport = createDoctorReport;
 exports.formatDoctorReport = formatDoctorReport;
 exports.handleDoctorCommand = handleDoctorCommand;
 const node_fs_1 = __importDefault(require("node:fs"));
-function createDoctorReport(paths, nodeVersion = process.version) {
+const node_path_1 = __importDefault(require("node:path"));
+const package_json_1 = __importDefault(require("../../package.json"));
+function createDoctorReport(paths, nodeVersion = process.version, options = {}) {
     const checks = [
         pathCheck('docs', paths.projectDocsDir),
         pathCheck('tasks', paths.projectTasksDir),
         pathCheck('project-context', `${paths.projectContextDir}/HADARA_CONTEXT.md`)
     ];
+    const executablePath = normalizeOptionalPath(options.cliEntry ?? process.argv[1] ?? null);
+    const resolvedExecutablePath = resolveExecutablePath(executablePath);
+    const packageRoot = findPackageRoot([resolvedExecutablePath, executablePath]);
     return {
         schemaVersion: 'hadara.doctor.v1',
         command: 'doctor',
         ok: checks.every((check) => check.status === 'ok'),
         runtime: {
-            node: nodeVersion
+            node: nodeVersion,
+            nodePath: normalizePath(options.nodePath ?? process.execPath)
+        },
+        installation: {
+            executablePath,
+            resolvedExecutablePath,
+            packageRoot,
+            packageVersion: package_json_1.default.version,
+            registry: 'https://registry.npmjs.org',
+            installCommand: `npm install -g ${package_json_1.default.name}@${package_json_1.default.version}`,
+            latestInstallCommand: `npm install -g ${package_json_1.default.name}`
         },
         paths: {
             portableRoot: paths.portableRoot,
@@ -35,11 +50,18 @@ function formatDoctorReport(report) {
         `dataRoot:     ${report.paths.dataRoot}`,
         `projectRoot:  ${report.paths.projectRoot}`,
         `Node:         ${report.runtime.node}`,
+        `Node path:    ${report.runtime.nodePath}`,
+        'Install:',
+        `  executable: ${report.installation.executablePath ?? 'unknown'}`,
+        `  resolved:   ${report.installation.resolvedExecutablePath ?? 'unknown'}`,
+        `  package:    ${report.installation.packageVersion}${report.installation.packageRoot ? ` at ${report.installation.packageRoot}` : ' (package root unknown)'}`,
+        `  registry:   ${report.installation.registry}`,
+        `  install:    ${report.installation.installCommand}`,
         ...report.checks.map((check) => `${formatCheckLabel(check.id)}${check.status}`)
     ].join('\n');
 }
 function handleDoctorCommand(input) {
-    const report = createDoctorReport(input.paths);
+    const report = createDoctorReport(input.paths, process.version, { cliEntry: process.argv[1] });
     if (input.jsonOutput) {
         console.log(JSON.stringify(report, null, 2));
     }
@@ -57,6 +79,55 @@ function pathCheck(id, targetPath) {
         path: targetPath
     };
 }
+function normalizeOptionalPath(value) {
+    if (!value)
+        return null;
+    return normalizePath(value);
+}
+function normalizePath(value) {
+    return node_path_1.default.normalize(value);
+}
+function resolveExecutablePath(executablePath) {
+    if (!executablePath)
+        return null;
+    try {
+        return normalizePath(node_fs_1.default.realpathSync.native(executablePath));
+    }
+    catch {
+        return null;
+    }
+}
+function findPackageRoot(candidates) {
+    for (const candidate of candidates) {
+        const found = candidate ? findPackageRootFromFile(candidate) : null;
+        if (found)
+            return found;
+    }
+    return null;
+}
+function findPackageRootFromFile(filePath) {
+    let current = node_fs_1.default.existsSync(filePath) && node_fs_1.default.statSync(filePath).isDirectory()
+        ? filePath
+        : node_path_1.default.dirname(filePath);
+    while (true) {
+        const packagePath = node_path_1.default.join(current, 'package.json');
+        if (isHadaraPackageJson(packagePath))
+            return normalizePath(current);
+        const parent = node_path_1.default.dirname(current);
+        if (parent === current)
+            return null;
+        current = parent;
+    }
+}
+function isHadaraPackageJson(packagePath) {
+    try {
+        const parsed = JSON.parse(node_fs_1.default.readFileSync(packagePath, 'utf8'));
+        return parsed.name === package_json_1.default.name;
+    }
+    catch {
+        return false;
+    }
+}
 function formatCheckLabel(id) {
     if (id === 'docs')
         return 'docs/:       ';

package/dist/cli/evidence-json.js

@@ -15,6 +15,7 @@ function createEvidenceCollectReport(projectRoot, input) {
             schemaVersion: 'hadara.evidence.collect.v1',
             command: 'evidence.collect',
             ok: false,
+            taskId: input.taskId,
             issues: [
                 {
                     severity: 'error',
@@ -49,6 +50,7 @@ function createEvidenceCollectReport(projectRoot, input) {
                 schemaVersion: 'hadara.evidence.collect.v1',
                 command: 'evidence.collect',
                 ok: false,
+                taskId: input.taskId,
                 issues: [
                     {
                         severity: 'error',
@@ -64,6 +66,7 @@ function createEvidenceCollectReport(projectRoot, input) {
         schemaVersion: 'hadara.evidence.collect.v1',
         command: 'evidence.collect',
         ok: true,
+        taskId: input.taskId,
         evidence: {
             ...appendResult.evidence,
             markdownPath: toPortablePath(node_path_1.default.relative(projectRoot, appendResult.markdownPath)),

package/dist/cli/evidence.js

@@ -138,6 +138,7 @@ function handleEvidenceCommand(input) {
                 schemaVersion: 'hadara.evidence.collect.v1',
                 command: 'evidence.add-command',
                 ok: false,
+                taskId,
                 issues: [resultOutcomeIssue]
             };
             if (input.jsonOutput) {

package/dist/cli/release-artifact.js

@@ -38,7 +38,7 @@ function handleReleaseArtifactCommand(input) {
         })
         : undefined;
     if (input.jsonOutput) {
-        console.log(JSON.stringify(attachment ? { ...report, attachedEvidence: attachment } : report, null, 2));
+        console.log(JSON.stringify(attachment && taskId ? { ...report, taskId, attachedEvidence: attachment } : report, null, 2));
     }
     else {
         console.log(`${report.ok ? 'passed' : 'failed'} | release artifact | ${report.output.retention}`);

package/dist/cli/task.js

@@ -12,12 +12,13 @@ const task_finish_1 = require("../task/task-finish");
 const task_next_1 = require("../task/task-next");
 const task_upgrade_scaffold_1 = require("../task/task-upgrade-scaffold");
 const task_workbench_1 = require("../services/task-workbench");
+const timing_1 = require("../core/timing");
 const actor_1 = require("./actor");
 const args_1 = require("./args");
 const legacy_boundary_1 = require("./legacy-boundary");
 const task_json_1 = require("./task-json");
 function handleTaskCommand(input) {
-    const startedAtMs = Date.now();
+    const timer = (0, timing_1.startMonotonicTimer)();
     const sub = input.args[1];
     if (sub === 'create') {
         if (blockLegacyMutation(input, 'task.create'))
@@ -47,9 +48,9 @@ function handleTaskCommand(input) {
         return true;
     }
     if (sub === 'show') {
-        const id = input.args[2];
-        if (!id)
-            throw new Error('task show requires <task-id>');
+        const id = (0, args_1.getStringOption)(input.args, '--task') ?? input.args[2];
+        if (!id || id.startsWith('--'))
+            throw new Error('task show requires --task <task-id>');
         const report = (0, task_json_1.createTaskShowReport)(input.projectRoot, id);
         if (input.jsonOutput) {
             console.log(JSON.stringify(report, null, 2));
@@ -140,11 +141,15 @@ function handleTaskCommand(input) {
         return true;
     }
     if (sub === 'status') {
+        const summaryJsonOutput = (0, args_1.getFlag)(input.args, '--summary-json');
         const id = (0, args_1.getStringOption)(input.args, '--task') ?? input.args[2];
         if (!id || id.startsWith('--')) {
             const report = (0, task_workbench_1.createTaskStatusSelectionReport)(input.projectRoot);
-            attachCliDiagnostics(report, startedAtMs, 'task.status');
-            if (input.jsonOutput) {
+            attachCliDiagnostics(report, timer, 'task.status');
+            if (summaryJsonOutput) {
+                console.log(JSON.stringify(createTaskStatusSummaryReport(report), null, 2));
+            }
+            else if (input.jsonOutput) {
                 console.log(JSON.stringify(report, null, 2));
             }
             else {
@@ -158,8 +163,11 @@ function handleTaskCommand(input) {
         if (detail && detail !== 'fast' && detail !== 'full')
             throw new Error('task status --detail must be fast or full');
         const report = (0, task_workbench_1.createTaskWorkbenchReport)(input.projectRoot, id, new Date(), { detail: detail === 'full' ? 'full' : 'fast' });
-        attachCliDiagnostics(report, startedAtMs, 'task.status');
-        if (input.jsonOutput) {
+        attachCliDiagnostics(report, timer, 'task.status');
+        if (summaryJsonOutput) {
+            console.log(JSON.stringify(createTaskStatusSummaryReport(report), null, 2));
+        }
+        else if (input.jsonOutput) {
             console.log(JSON.stringify(report, null, 2));
         }
         else {
@@ -199,7 +207,7 @@ function handleTaskCommand(input) {
             actor: (0, actor_1.getActorContextOption)(input.args),
             onProgress: executeRequested ? createTaskFinalizeProgressWriter(id) : undefined
         });
-        attachCliDiagnostics(report, startedAtMs, 'task.finalize');
+        attachCliDiagnostics(report, timer, 'task.finalize');
         if (input.jsonOutput) {
             console.log(JSON.stringify(report, null, 2));
         }
@@ -281,14 +289,60 @@ function handleTaskCommand(input) {
     }
     return false;
 }
+function createTaskStatusSummaryReport(report) {
+    if (report.schemaVersion === 'hadara.task.status.v1') {
+        return {
+            schemaVersion: 'hadara.task.status.summary.v1',
+            command: 'task.status',
+            ok: report.ok,
+            mode: 'select-work',
+            phase: report.loop.phase,
+            recommendations: report.summary.recommendations,
+            ...(report.loop.primaryNextAction ? { primaryNextAction: report.loop.primaryNextAction } : {}),
+            ...(report.diagnostics ? { diagnostics: report.diagnostics } : {}),
+            issues: report.issues
+        };
+    }
+    return {
+        schemaVersion: 'hadara.task.status.summary.v1',
+        command: 'task.status',
+        ok: report.ok,
+        mode: 'selected-task',
+        taskId: report.taskId,
+        task: {
+            title: report.task.title,
+            capsule: report.task.capsule,
+            taskStatus: report.task.taskStatus,
+            taskBoardStatus: report.task.taskBoardStatus
+        },
+        phase: report.loop.phase,
+        readiness: {
+            status: report.state.readiness.status,
+            ready: report.state.ready,
+            closeProofValid: report.state.readiness.closeProofValid,
+            summary: report.state.readiness.summary
+        },
+        counts: {
+            blockers: report.summary.blockers,
+            warnings: report.summary.warnings,
+            evidenceRecords: report.summary.evidenceRecords,
+            validationChecks: report.sources.evidenceList.validationAttempts?.checks ?? 0,
+            unresolvedValidation: report.sources.evidenceList.validationAttempts?.unresolvedFailedOrBlocked ?? 0,
+            nextActions: report.summary.nextActions
+        },
+        ...(report.loop.primaryNextAction ? { primaryNextAction: report.loop.primaryNextAction } : {}),
+        ...(report.diagnostics ? { diagnostics: report.diagnostics } : {}),
+        issues: report.issues
+    };
+}
 function createTaskFinalizeProgressWriter(taskId) {
     return (event) => {
         const ok = event.ok === undefined ? '' : ` ok=${event.ok}`;
         process.stderr.write(`[HADARA] task finalize ${taskId}: ${event.step} ${event.phase}${ok} - ${event.summary}\n`);
     };
 }
-function attachCliDiagnostics(report, startedAtMs, commandPath) {
-    const durationMs = Math.max(0, Date.now() - startedAtMs);
+function attachCliDiagnostics(report, timer, commandPath) {
+    const durationMs = timer.elapsedMs();
     const slowThresholdMs = 10000;
     const slow = durationMs >= slowThresholdMs;
     report.diagnostics = {

package/dist/cli/validation.js

@@ -28,14 +28,24 @@ function handleValidationCommand(input) {
     }
     else {
         console.log(`[HADARA] validation run ${taskId}: ${report.result}`);
+        console.log(`[HADARA] child command`);
+        console.log(`command=${report.argv.join(' ')}`);
+        console.log(`exitCode=${report.execution.exitCode ?? 'null'} signal=${report.execution.signal ?? 'null'} durationMs=${report.execution.durationMs}`);
+        console.log(`stdoutHash=${report.execution.stdoutHash}`);
+        console.log(`stderrHash=${report.execution.stderrHash}`);
+        console.log(`childOutput=not printed; stdout/stderr hashes are recorded in HADARA evidence`);
+        console.log(`[HADARA] evidence`);
         if (report.evidence)
-            console.log(`evidence=${report.evidence.id}`);
-        if (!report.taskValidationRow.updated)
-            console.log(`taskValidationRow=${report.taskValidationRow.mode}`);
+            console.log(`id=${report.evidence.id}`);
+        console.log(`result=${report.result}`);
+        console.log(`taskValidationRow=${report.taskValidationRow.mode}${report.taskValidationRow.updated ? ' updated' : ' not-updated'}`);
+        console.log(`acceptanceRows=not-updated`);
         for (const issue of report.issues)
             console.log(`[${issue.severity}] ${issue.code}: ${issue.message}`);
+        if (report.nextActions.length > 0)
+            console.log(`[HADARA] next actions`);
         for (const action of report.nextActions)
-            console.log(`next=${action.command ?? action.message}`);
+            console.log(`${action.id}=${action.command ?? action.message}`);
     }
     if (!report.ok)
         process.exitCode = 6;

package/dist/core/timing.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startMonotonicTimer = startMonotonicTimer;
+const node_perf_hooks_1 = require("node:perf_hooks");
+function startMonotonicTimer(now = () => node_perf_hooks_1.performance.now()) {
+    const started = now();
+    return {
+        elapsedMs() {
+            return Math.max(0, Math.round(now() - started));
+        }
+    };
+}

package/dist/dev/docker-check.js

@@ -9,6 +9,7 @@ const node_child_process_1 = require("node:child_process");
 const node_crypto_1 = __importDefault(require("node:crypto"));
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
+const timing_1 = require("../core/timing");
 const lifecycle_next_actions_1 = require("../task/lifecycle-next-actions");
 function createDevDockerCheckReport(projectRoot, options = {}, runner = defaultRunner) {
     const focusedTests = normalizeFocusedTests(options.focusedTests ?? []);
@@ -47,9 +48,9 @@ function createDevDockerCheckReport(projectRoot, options = {}, runner = defaultR
             steps.push({ id: step.id, status: 'skipped', summary: step.runWhen ? 'Skipped because an earlier step failed.' : step.summary });
             continue;
         }
-        const started = Date.now();
+        const timer = (0, timing_1.startMonotonicTimer)();
         const result = runner.run('docker', dockerExecArgs(container, step.script), env);
-        const elapsedMs = Date.now() - started;
+        const elapsedMs = timer.elapsedMs();
         if (result.ok) {
             steps.push({ id: step.id, status: 'passed', elapsedMs, summary: step.summary });
             if (step.mark)

package/dist/evidence/evidence.js

@@ -20,6 +20,7 @@ const node_path_1 = __importDefault(require("node:path"));
 const node_crypto_1 = __importDefault(require("node:crypto"));
 const fs_1 = require("../core/fs");
 const redaction_1 = require("../core/redaction");
+const timing_1 = require("../core/timing");
 const workspace_1 = require("../core/workspace");
 const private_manifest_1 = require("./private-manifest");
 function persistedEvidenceKind(record) {
@@ -181,7 +182,7 @@ function withEvidenceAppendLock(projectRoot, taskId, fn) {
     (0, fs_1.ensureDir)(lockRoot);
     const lockDir = node_path_1.default.join(lockRoot, `${safeFilePart(taskId)}.lock`);
     const lockPortablePath = toPortablePath(node_path_1.default.relative(projectRoot, lockDir));
-    const started = Date.now();
+    const timer = (0, timing_1.startMonotonicTimer)();
     const timeoutMs = 5000;
     while (true) {
         try {
@@ -191,7 +192,7 @@ function withEvidenceAppendLock(projectRoot, taskId, fn) {
         catch (error) {
             if (error.code !== 'EEXIST')
                 throw error;
-            if (Date.now() - started >= timeoutMs) {
+            if (timer.elapsedMs() >= timeoutMs) {
                 throw new EvidenceAppendLockError(`Timed out waiting for the evidence append lock for ${taskId}. Lock directory: ${lockPortablePath}. ` +
                     `If no HADARA process is writing evidence, the lock is stale (inspect ${lockPortablePath}/lock.json for the owning pid); remove the lock directory and retry.`);
             }

package/dist/handoff/handoff-suggestion.js

@@ -30,6 +30,7 @@ function createHandoffSuggestionReport(projectRoot, taskId, options = {}) {
         schemaVersion: 'hadara.handoff.suggestion.v1',
         command: 'handoff.suggest',
         ok: !issues.some((issue) => issue.severity === 'error'),
+        taskId,
         readOnly: true,
         generatedAt: new Date().toISOString(),
         actor,

package/dist/handoff/handoff.js

@@ -49,6 +49,7 @@ Attach test logs, command outputs, and diff summaries under the active Task Caps
         schemaVersion: 'hadara.handoff.update.v1',
         command: 'handoff.update',
         ok: true,
+        taskId: input.taskId ?? null,
         target: {
             path: 'docs/AGENT_HANDOFF.md',
             writeBoundary: 'shared-doc'