harness-everything 0.11.1 → 0.11.3

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "harness-everything",
       "source": "./",
       "description": "Harness OS: an orchestrated agent operating system — tier routing, circuit breaker guardrails, verification gates, WAL session memory, and self-evolving workspace rules.",
-      "version": "0.11.1",
+      "version": "0.11.3",
       "author": {
         "name": "Miya Daniel"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "harness-everything",
   "description": "Harness OS: an orchestrated agent operating system — tier routing, circuit breaker guardrails, verification gates, WAL session memory, and self-evolving workspace rules.",
-  "version": "0.11.1",
+  "version": "0.11.3",
   "author": {
     "name": "Miya Daniel"
   },

package/CHANGELOG.md

@@ -2,6 +2,19 @@
 
 All notable changes to this project are documented in this file.
 
+## [0.11.3](https://github.com/dyphn1/Harness-everything/compare/v0.11.2...v0.11.3) (2026-09-18)
+
+### Bug Fixes
+
+* **workflow:** Resolve verification-after-edit-missing without a host exit code ([e5dae03](https://github.com/dyphn1/Harness-everything/commit/e5dae03799cca594ac3e4f9d0facca6209dec3c8)), closes [#153](https://github.com/dyphn1/Harness-everything/issues/153)
+
+## [0.11.2](https://github.com/dyphn1/Harness-everything/compare/v0.11.1...v0.11.2) (2026-09-18)
+
+### Bug Fixes
+
+* **workflow:** classify major workflow from active plan ([b1eae14](https://github.com/dyphn1/Harness-everything/commit/b1eae14ca5157c73ba9cf7c0f2e4b0ed122e9f77))
+* **workflow:** keep pending plan isolation inert ([8b522c2](https://github.com/dyphn1/Harness-everything/commit/8b522c26589e2140bd0971365ad0569c18da6d3f))
+
 ## [0.11.1](https://github.com/dyphn1/Harness-everything/compare/v0.11.0...v0.11.1) (2026-09-18)
 
 ### Bug Fixes

package/ci/mechanism-2ah-workflow-lifecycle.test.js

@@ -16,6 +16,7 @@ fs.mkdirSync(repo);
 const env = { ...process.env, HARNESS_STATE_HOME: path.join(temp, 'state'), HARNESS_WORKSPACE_ROOT: repo };
 process.env.HARNESS_STATE_HOME = env.HARNESS_STATE_HOME;
 const state = require(path.join(runtimeRoot, 'hooks/scripts/lib/harness-state'));
+const workflowRuntime = require(path.join(runtimeRoot, 'hooks/scripts/lib/workflow-runtime'));
 const sessionId = 'workflow-lifecycle';
 const payload = { session_id: sessionId, cwd: repo };
 const sessionDir = state.getSessionDir(repo, sessionId);
@@ -138,6 +139,23 @@ try {
   check(gate('Write', { file_path: path.join(linked, 'src.js') }).status === 2 && stop().status === 2, 'partial JSON state cannot bypass workflow gates');
   fs.unlinkSync(file);
   check(route('Fix this checkout bug with a regression test').status === 0 && read(file).strategy === 'iterative-single', 'bounded fix selects iterative lifecycle');
+  const activeTier2 = read(file);
+  check(activeTier2.tier === 'tier2' && activeTier2.mutationIsolation?.required === false && !workflowRuntime.isMajorWorkflow(activeTier2), 'Tier 2 iterative workflow starts non-major');
+  check(route('Refactor the entire repository architecture in dependent stages.').status === 0, 'stronger Tier 3 route is retained for explicit replan');
+  const queuedTier3 = read(file);
+  check(queuedTier3.state === 'blocked' && queuedTier3.pendingPlan?.tier === 'tier3' && queuedTier3.pendingPlan?.mutationIsolation?.required === true, 'stronger Tier 3 plan is queued as pending only');
+  check(queuedTier3.workflowPlan?.tier === 'tier2' && queuedTier3.strategy === 'iterative-single' &&
+    queuedTier3.mutationIsolation?.required === false, 'pending Tier 3 plan does not overwrite active Tier 2 fields');
+  check(!workflowRuntime.isMajorWorkflow(queuedTier3), 'major-workflow classification follows the authoritative active plan, not pending metadata');
+  write(spec, stages);
+  check(control('start').status === 0, 'explicit replan activates queued Tier 3 plan');
+  const promotedTier3 = read(file);
+  check(promotedTier3.workflowPlan?.tier === 'tier3' && promotedTier3.strategy.startsWith('fable-') &&
+    promotedTier3.mutationIsolation?.required === true && !promotedTier3.pendingPlan, 'pending Tier 3 isolation becomes active atomically on start');
+  check(workflowRuntime.isMajorWorkflow(promotedTier3), 'major-workflow classification flips only after explicit activation');
+  check(gate('Write', { file_path: path.join(repo, 'premature-primary.js') }, repo).status === 2, 'activated Tier 3 plan still blocks primary-tree mutation');
+  fs.unlinkSync(file);
+  check(route('Fix this checkout bug with a regression test').status === 0 && read(file).strategy === 'iterative-single', 'fresh bounded fix returns to Tier 2 iterative lifecycle');
   const iterationLimit = read(file).workflowPlan.limits.maxIterations;
   check(Number.isInteger(iterationLimit) && iterationLimit > 0, 'iterative route exposes a numeric iteration budget');
   for (let i = 0; i < iterationLimit; i++) {
@@ -157,8 +175,11 @@ try {
   check(stop().status === 2, 'direct/iterative route cannot complete unverified mutation');
   check(stop({ stop_hook_active: true }).status === 0 && read(file).state === 'blocked', 'iterative retry reports incomplete state');
   check(control('start').status === 0, 'blocked iterative route can resume without a Fable stage map');
+  // Issue #153: a host is not guaranteed to report a numeric exit code at
+  // all (state-persist.js's own isFailed logic already treats "no exit code
+  // and no stderr" as success), so this must resolve rather than deadlock.
   node('hooks/scripts/state-persist.js', { ...payload, tool_name: 'Bash', tool_input: { command: 'npm test' }, tool_response: { stdout: 'no code' } });
-  check(stop().status === 2, 'verification without numeric exit status is unknown');
+  check(stop().status === 0 && read(file).state === 'satisfied', 'verification without a host-reported numeric exit status still resolves completion');
   node('hooks/scripts/state-persist.js', { ...payload, tool_name: 'Bash', tool_input: { command: 'npm test' }, tool_response: { exitCode: 0, stdout: 'passed' } });
   check(stop().status === 0 && read(file).state === 'satisfied', 'observed iterative verification resolves completion');
   console.log(`PASS: workflow lifecycle (${passed} assertions)`);

package/ci/mechanism-2f-stop-gate.test.js

@@ -20,4 +20,57 @@ helper.check(
 );
 fs.unlinkSync(dirtyFile);
 
+console.log('\n[2f] workflow-stop-gate (iterative-single) verification signal...');
+
+const now = Date.now();
+
+// Bug reproduction (issue #153): a verify-classified command that genuinely
+// succeeded but whose host never reported a numeric exit code (observed on
+// at least one live host - state-persist.js writes lastVerifyExitCode: null
+// for any non-failing command when the PostToolUse payload has no numeric
+// exitCode) must not be treated as unverified.
+helper.writeState('workflow-run.json', {
+  schemaVersion: 1, sessionId: helper.SESSION_ID, strategy: 'iterative-single',
+  state: 'running', lastMutationAt: now - 5000,
+});
+helper.writeState('handoff-state.json', {
+  status: 'idle', lastEditAt: now - 5000, lastVerifyAt: now, lastVerifyExitCode: null,
+});
+const hostExitCodeUnavailable = helper.runHook('workflow-stop-gate.js', { session_id: helper.SESSION_ID });
+helper.check(
+  '2f. workflow-stop-gate resolves when verify ran after edit even without a numeric exit code',
+  hostExitCodeUnavailable.code === 0 && helper.readState('workflow-run.json').state === 'satisfied',
+  `Got exit=${hostExitCodeUnavailable.code}, stderr="${hostExitCodeUnavailable.stderr.slice(0, 300)}"`
+);
+
+// Regression guard: explicit exit 0 (host does report it) must still resolve.
+helper.writeState('workflow-run.json', {
+  schemaVersion: 1, sessionId: helper.SESSION_ID, strategy: 'iterative-single',
+  state: 'running', lastMutationAt: now - 5000,
+});
+helper.writeState('handoff-state.json', {
+  status: 'idle', lastEditAt: now - 5000, lastVerifyAt: now, lastVerifyExitCode: 0,
+});
+const hostExitCodeReported = helper.runHook('workflow-stop-gate.js', { session_id: helper.SESSION_ID });
+helper.check(
+  '2f. workflow-stop-gate still resolves when the host does report exit code 0',
+  hostExitCodeReported.code === 0 && helper.readState('workflow-run.json').state === 'satisfied',
+  `Got exit=${hostExitCodeReported.code}`
+);
+
+// Negative control: no verification ran after the edit at all -> stays blocked.
+helper.writeState('workflow-run.json', {
+  schemaVersion: 1, sessionId: helper.SESSION_ID, strategy: 'iterative-single',
+  state: 'running', lastMutationAt: now,
+});
+helper.writeState('handoff-state.json', {
+  status: 'idle', lastEditAt: now, lastVerifyAt: now - 5000, lastVerifyExitCode: null,
+});
+const staleVerify = helper.runHook('workflow-stop-gate.js', { session_id: helper.SESSION_ID });
+helper.check(
+  '2f. workflow-stop-gate still blocks when no verification ran after the edit',
+  staleVerify.code === 2 && staleVerify.stderr.includes('verification-after-edit-missing'),
+  `Got exit=${staleVerify.code}, stderr="${staleVerify.stderr.slice(0, 300)}"`
+);
+
 helper.finish();

package/harness-everything/SKILL.md

@@ -4,7 +4,7 @@ description: "Route software/project work through the Harness kernel: classify T
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.9.0
+  version: 0.11.2
 ---
 
 # Harness Everything

package/harness-everything/scripts/kernel-router.js

@@ -47,7 +47,6 @@ function persistWorkflow(plan, payload, prompt) {
       context.workflow.state = 'blocked';
       context.workflow.pendingPlan = plan;
       context.workflow.blockReason = 'stronger-route-requires-replan';
-      context.workflow.mutationIsolation = plan.mutationIsolation;
     }
     context.workflow.lastPromptHash = crypto.createHash('sha256').update(prompt).digest('hex').slice(0, 24);
     const memoryCapability = issueMemoryCapability(context.workflow);

package/hooks/scripts/lib/workflow-runtime.js

@@ -9,8 +9,16 @@ const OPEN_STATES = new Set(['pending', 'active', 'running', 'failed', 'blocked'
 const SAFE_ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
 const WORKFLOW_CONTROLLER_COMMANDS = new Set(['start', 'revision', 'reset-budget', 'escape', 'block']);
 
+function activeWorkflowPlan(workflow) {
+  if (!workflow) return null;
+  const plan = workflow.workflowPlan;
+  if (plan && typeof plan === 'object' && plan.strategy === workflow.strategy) return plan;
+  return workflow;
+}
+
 function isMajorWorkflow(workflow) {
-  return Boolean(workflow && (workflow.mutationIsolation?.required || workflow.tier === 'tier3' || String(workflow.strategy || '').startsWith('fable-')));
+  const active = activeWorkflowPlan(workflow);
+  return Boolean(active && (active.mutationIsolation?.required || active.tier === 'tier3' || String(active.strategy || '').startsWith('fable-')));
 }
 
 function loadWorkflow(payload) {

package/hooks/scripts/workflow-stop-gate.js

@@ -21,7 +21,15 @@ function decide(payload) {
   } else {
     const handoff = readJson(path.join(sessionDir, 'handoff-state.json'));
     const lastEdit = Math.max(workflow.lastMutationAt || 0, handoff?.lastEditAt || 0);
-    if (lastEdit && ((handoff?.lastVerifyAt || 0) < lastEdit || handoff?.lastVerifyExitCode !== 0)) unresolved = ['verification-after-edit-missing'];
+    // state-persist.js only ever records lastVerifyAt/lastVerifyExitCode from
+    // its `!isFailed` branch, so reaching this timestamp already proves the
+    // command succeeded. Do not additionally require lastVerifyExitCode===0:
+    // hosts are not guaranteed to report a numeric exit code at all (some
+    // PostToolUse payloads omit it entirely), in which case state-persist.js
+    // correctly records success with lastVerifyExitCode: null, and requiring
+    // a literal 0 here would make this gate permanently unresolvable on that
+    // host after any edit.
+    if (lastEdit && (handoff?.lastVerifyAt || 0) < lastEdit) unresolved = ['verification-after-edit-missing'];
   }
   if (unresolved.length) {
     workflow.unresolved = unresolved;

package/opencode-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "harness-enforcement",
   "description": "Repository inventory for the opencode enforcement plugin and its standalone helper",
-  "version": "0.11.1",
+  "version": "0.11.3",
   "runtime": "index.mjs",
   "hooks": {
     "verify": "hooks/verify.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "harness-everything",
-  "version": "0.11.1",
+  "version": "0.11.3",
   "description": "Harness OS: An Orchestrated Agent Operating System for AI-driven Development",
   "main": "harness-everything/scripts/bootstrap.js",
   "bin": {

package/plugins/harness-everything/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "harness-everything",
-  "version": "0.11.1",
+  "version": "0.11.3",
   "description": "Invariant-first engineering harness for routing, verification, and failure recovery while preserving agent autonomy.",
   "author": {
     "name": "Miya Daniel",

package/plugins/harness-everything/hooks/scripts/lib/workflow-runtime.js

@@ -9,8 +9,16 @@ const OPEN_STATES = new Set(['pending', 'active', 'running', 'failed', 'blocked'
 const SAFE_ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
 const WORKFLOW_CONTROLLER_COMMANDS = new Set(['start', 'revision', 'reset-budget', 'escape', 'block']);
 
+function activeWorkflowPlan(workflow) {
+  if (!workflow) return null;
+  const plan = workflow.workflowPlan;
+  if (plan && typeof plan === 'object' && plan.strategy === workflow.strategy) return plan;
+  return workflow;
+}
+
 function isMajorWorkflow(workflow) {
-  return Boolean(workflow && (workflow.mutationIsolation?.required || workflow.tier === 'tier3' || String(workflow.strategy || '').startsWith('fable-')));
+  const active = activeWorkflowPlan(workflow);
+  return Boolean(active && (active.mutationIsolation?.required || active.tier === 'tier3' || String(active.strategy || '').startsWith('fable-')));
 }
 
 function loadWorkflow(payload) {

package/plugins/harness-everything/hooks/scripts/workflow-stop-gate.js

@@ -21,7 +21,15 @@ function decide(payload) {
   } else {
     const handoff = readJson(path.join(sessionDir, 'handoff-state.json'));
     const lastEdit = Math.max(workflow.lastMutationAt || 0, handoff?.lastEditAt || 0);
-    if (lastEdit && ((handoff?.lastVerifyAt || 0) < lastEdit || handoff?.lastVerifyExitCode !== 0)) unresolved = ['verification-after-edit-missing'];
+    // state-persist.js only ever records lastVerifyAt/lastVerifyExitCode from
+    // its `!isFailed` branch, so reaching this timestamp already proves the
+    // command succeeded. Do not additionally require lastVerifyExitCode===0:
+    // hosts are not guaranteed to report a numeric exit code at all (some
+    // PostToolUse payloads omit it entirely), in which case state-persist.js
+    // correctly records success with lastVerifyExitCode: null, and requiring
+    // a literal 0 here would make this gate permanently unresolvable on that
+    // host after any edit.
+    if (lastEdit && (handoff?.lastVerifyAt || 0) < lastEdit) unresolved = ['verification-after-edit-missing'];
   }
   if (unresolved.length) {
     workflow.unresolved = unresolved;

package/plugins/harness-everything/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "harness-everything",
-  "version": "0.11.1",
+  "version": "0.11.3",
   "description": "Invariant-first engineering harness for routing, verification, and failure recovery while preserving agent autonomy.",
   "author": {
     "name": "Miya Daniel",

package/plugins/harness-everything/skills/harness-everything/SKILL.md

@@ -4,7 +4,7 @@ description: "Route software/project work through the Harness kernel: classify T
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.9.0
+  version: 0.11.2
 ---
 
 # Harness Everything

package/plugins/harness-everything/skills/harness-everything/scripts/kernel-router.js

@@ -47,7 +47,6 @@ function persistWorkflow(plan, payload, prompt) {
       context.workflow.state = 'blocked';
       context.workflow.pendingPlan = plan;
       context.workflow.blockReason = 'stronger-route-requires-replan';
-      context.workflow.mutationIsolation = plan.mutationIsolation;
     }
     context.workflow.lastPromptHash = crypto.createHash('sha256').update(prompt).digest('hex').slice(0, 24);
     const memoryCapability = issueMemoryCapability(context.workflow);