harness-everything 0.11.6 → 0.12.0

package/hooks/scripts/state-persist.js

@@ -2,8 +2,8 @@
 const fs = require('fs');
 const path = require('path');
 const { getWorkspaceRoot, getSessionDir } = require('./lib/harness-state');
-const { loadWorkflow, saveWorkflow, peekMutationProbe, settleMutationProbe } = require('./lib/workflow-runtime');
-const { cwdOf, shellProbeKey, workspaceFingerprint } = require('./lib/workflow-isolation');
+const { loadWorkflow, saveWorkflow, isMajorWorkflow, peekMutationProbe, settleMutationProbe, settleMutationProbeConservative } = require('./lib/workflow-runtime');
+const { cwdOf, shellProbeKey, workspaceFingerprint, directMutationInWorkspace } = require('./lib/workflow-isolation');
 const { observeTool } = require('./lib/telemetry');
 
 // Commands that count as "verification ran" for the Stop gate
@@ -42,6 +42,10 @@ function observeWorkspaceMutation(payload, root) {
   try {
     after = workspaceFingerprint(cwd);
   } catch (error) {
+    if (!isMajorWorkflow(context.workflow)) {
+      const conservative = settleMutationProbeConservative(context, probeKey, toolName, 'unobservable-workspace');
+      return Boolean(conservative && conservative.changed);
+    }
     context.workflow.state = 'blocked';
     context.workflow.blockReason = 'mutation-observation-failed';
     saveWorkflow(context);
@@ -79,9 +83,10 @@ function processState(payload) {
       const exitCode = typeof rawExitCode === 'number' ? rawExitCode : undefined;
       const stderrSignal = typeof stderr === 'string' && stderr.trim().length > 0;
       const hookEvent = payload.hook_event_name || payload.hookEventName || '';
+      const isSuccessEvent = hookEvent === 'PostToolUse';
       const isFailed = hookEvent === 'PostToolUseFailure' ||
         (exitCode !== undefined && exitCode !== 0) ||
-        (exitCode === undefined && stderrSignal);
+        (!isSuccessEvent && exitCode === undefined && stderrSignal);
       const toolName = payload.tool_name || payload.tool || 'command';
       const observedMutation = observeWorkspaceMutation(payload, root);
 
@@ -97,8 +102,13 @@ function processState(payload) {
         state.tool = toolName;
         state.exitCode = exitCode;
         state.errorSummary = output.trim();
-      } else if (exitCode === 0 && state.status === 'failed') {
-        // Clear failed state or mark as idle/resolved
+      } else if (!isFailed && state.status === 'failed') {
+        // Clear failed state or mark as idle/resolved.
+        // NOTE (#166, follows #153): Claude Code Bash PostToolUse payloads
+        // carry no numeric exit code, so `exitCode === 0` never holds there.
+        // A PostToolUse event with no numeric non-zero exit status counts as
+        // success even when stderr contains diagnostics. Hosts that omit the
+        // lifecycle event name retain the conservative stderr fallback.
         state.lastResolved = { tool: state.tool, timestamp: state.timestamp };
         state.status = 'idle';
         state.timestamp = new Date().toISOString();
@@ -107,8 +117,10 @@ function processState(payload) {
       }
 
       // Milestones for the Stop gate: when did the last mutation happen, and
-      // has any verification-ish command succeeded since.
-      if (toolName === 'Edit' || toolName === 'Write' || toolName === 'apply_patch' || observedMutation) {
+      // has any verification-ish command succeeded since. Direct-tool edits
+      // outside the workspace advance neither milestone (#165).
+      const isDirectTool = toolName === 'Edit' || toolName === 'Write' || toolName === 'apply_patch';
+      if ((isDirectTool && directMutationInWorkspace(payload, cwdOf(payload, root), root)) || observedMutation) {
         state.lastEditAt = Date.now();
       }
       if ((toolName === 'Bash' || toolName === 'PowerShell') && !isFailed) {

package/hooks/scripts/workflow-disposition.js

@@ -3,7 +3,7 @@
 
 const fs = require('fs');
 const path = require('path');
-const { loadWorkflow, saveWorkflow, matchingRun, OPEN_STATES, ensureWorkflowBudget, recordBudgetEvent, resetWorkflowBudget, syncBudgetToRun, WORKFLOW_CONTROLLER_COMMANDS } = require('./lib/workflow-runtime');
+const { loadWorkflow, saveWorkflow, matchingRun, OPEN_STATES, budgetLimits, ensureWorkflowBudget, recordBudgetEvent, resetWorkflowBudget, syncBudgetToRun, WORKFLOW_CONTROLLER_COMMANDS } = require('./lib/workflow-runtime');
 const { getWorkspaceRoot, readCurrentSession } = require('./lib/harness-state');
 const { atomicWriteJson, readJson } = require('./lib/fable-contracts');
 
@@ -32,6 +32,20 @@ function consumer() {
   throw new Error('Fable consumer unavailable');
 }
 
+function activatePlan(workflow, plan) {
+  workflow.workflowPlan = plan;
+  workflow.strategy = plan.strategy;
+  workflow.strategySelection = plan.strategySelection;
+  workflow.tier = plan.tier;
+  workflow.requiredInvariants = plan.requiredInvariants || [];
+  workflow.suggestedSkills = plan.suggestedSkills || [];
+  workflow.verification = plan.verification;
+  workflow.mutationIsolation = plan.mutationIsolation || { required: false };
+  const budget = ensureWorkflowBudget(workflow);
+  budget.limits = budgetLimits(workflow);
+  budget.updatedAt = new Date().toISOString();
+}
+
 function main() {
   const args = parseArgs(process.argv.slice(2));
   if (!WORKFLOW_CONTROLLER_COMMANDS.has(args.command)) throw new Error(usage());
@@ -47,10 +61,12 @@ function main() {
     if (isReplan) recordBudgetEvent(context, 'replan', { evidence: 'workflow-disposition:start' });
     const plan = workflow.pendingPlan || workflow.workflowPlan;
     if (!String(plan.strategy || '').startsWith('fable-')) {
+      activatePlan(workflow, plan);
       workflow.revision++;
       workflow.state = 'running';
+      workflow.escapes = [];
+      delete workflow.pendingPlan;
       delete workflow.blockReason;
-      ensureWorkflowBudget(workflow);
       saveWorkflow(context);
       process.stdout.write(JSON.stringify({ state: workflow.state, workflowId: workflow.workflowId, revision: workflow.revision }) + '\n');
       return;
@@ -66,18 +82,13 @@ function main() {
       routerContract: { workflowPlan: plan }, stages, workspaceRoot: context.root,
       sessionId, workflowId: workflow.workflowId,
     });
-    workflow.workflowPlan = plan;
-    workflow.strategy = plan.strategy;
-    workflow.tier = plan.tier;
-    workflow.verification = plan.verification;
-    workflow.mutationIsolation = plan.mutationIsolation || workflow.mutationIsolation;
+    activatePlan(workflow, plan);
     workflow.runId = run.runId;
     workflow.revision++;
     workflow.state = 'running';
     workflow.escapes = [];
     delete workflow.pendingPlan;
     delete workflow.blockReason;
-    ensureWorkflowBudget(workflow);
   } else if (args.command === 'revision') {
     recordBudgetEvent(context, 'revision', { evidence: args.evidence || 'workflow-disposition:revision' });
   } else if (args.command === 'reset-budget') {

package/hooks/scripts/workflow-gate.js

@@ -4,7 +4,7 @@
 const path = require('path');
 const fs = require('fs');
 const { loadWorkflow, saveWorkflow, isMajorWorkflow, matchingRun, registerMutationProbe, recordBudgetEvent, readHookInput, WORKFLOW_CONTROLLER_COMMANDS } = require('./lib/workflow-runtime');
-const { key, classifyShell, workspaceFingerprint, shellProbeKey, cwdOf, commandOf, mutationPaths, linkedWorktree, assertTargets, assertShellScope } = require('./lib/workflow-isolation');
+const { key, classifyShell, workspaceFingerprint, shellProbeKey, cwdOf, commandOf, mutationPaths, directMutationInWorkspace, linkedWorktree, assertTargets, assertShellScope } = require('./lib/workflow-isolation');
 
 const DIRECT = new Set(['Edit', 'Write', 'apply_patch']);
 const SHELL = new Set(['Bash', 'PowerShell', 'exec_command']);
@@ -48,6 +48,10 @@ function decide(payload) {
     throw new Error('selected Fable workflow has no correlated run. Write workflow-stages.json at the displayed session path, then use workflow-disposition.js start.');
   }
   if (DIRECT.has(tool)) {
+    // Bookkeeping outside the workspace (scratchpad, memory files, temp
+    // notes) is not a workspace mutation: it consumes no Tier-2 iteration
+    // and advances no mutation milestone (#165).
+    if (!directMutationInWorkspace(payload, cwd, root)) return;
     if (workflow.strategy === 'iterative-single') {
       recordBudgetEvent(context, 'iteration', { evidence: `${tool}:direct-mutation` });
     }
@@ -58,9 +62,22 @@ function decide(payload) {
 
   // Shell safety and shell mutation accounting are intentionally separate.
   // `untrusted` means "not proven read-only", not "a mutation occurred".
-  // Capture an opaque pre-execution workspace fingerprint; the post-tool
-  // observer consumes an iteration only when workspace content actually changed.
-  const fingerprint = workspaceFingerprint(cwd);
+  // Capture an opaque pre-execution workspace fingerprint when possible. A
+  // non-major workflow may run outside Git, where mutation observation is an
+  // accounting aid rather than an isolation boundary; degrade conservatively
+  // instead of blocking the user's command (#162).
+  let fingerprint;
+  try {
+    fingerprint = workspaceFingerprint(cwd);
+  } catch (error) {
+    if (isMajorWorkflow(workflow)) throw error;
+    if (workflow.strategy === 'iterative-single') {
+      recordBudgetEvent(context, 'iteration', { evidence: 'shell:unobservable-workspace' });
+    }
+    workflow.lastMutationAt = Date.now();
+    saveWorkflow(context);
+    return;
+  }
   const probeKey = shellProbeKey(payload, cwd);
   registerMutationProbe(context, probeKey, fingerprint, workflow.strategy === 'iterative-single');
 }

package/multi-agent-workspace/SKILL.md

@@ -4,7 +4,7 @@ description: "Scaffold a verified multi-agent workspace and select bounded speci
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.10.0
+  version: 0.12.0
 ---
 
 # Multi-Agent Workspace

package/multi-agent-workspace/scripts/index_memory.js

@@ -5,6 +5,18 @@ const fs = require('fs');
 const path = require('path');
 const { getWorkspaceRoot, getRuntimeRoot, resolveProjectDocs } = require('./project-docs-resolver');
 
+let emitLessonTelemetry = () => ({ ok: false, unavailable: true });
+for (const relative of [
+  '../../hooks/scripts/lib/telemetry.js',
+  '../../../hooks/scripts/lib/telemetry.js',
+]) {
+  const candidate = path.resolve(__dirname, relative);
+  if (fs.existsSync(candidate)) {
+    ({ emitLessonTelemetry } = require(candidate));
+    break;
+  }
+}
+
 function option(args, ...names) {
   for (const name of names) {
     const index = args.indexOf(name);
@@ -166,6 +178,22 @@ function retrieveMemoryRecords({ workspace, task = '', requirement = '', role =
     });
   }
 
+  for (const record of included) {
+    if (!record.origin?.lessonCandidateId) continue;
+    emitLessonTelemetry({
+      event: 'lesson_retrieved',
+      root,
+      sessionId: record.writer?.sessionId || null,
+      candidateId: record.origin.lessonCandidateId,
+      observedAt: new Date(nowMs).toISOString(),
+      status: 'success',
+      reasonCodes: [
+        'scoped-memory-retrieval',
+        ...(record.retrieval?.reasonCodes || []),
+      ],
+    });
+  }
+
   return {
     schemaVersion: 1,
     workspace: root,

package/opencode-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "harness-enforcement",
   "description": "Repository inventory for the opencode enforcement plugin and its standalone helper",
-  "version": "0.11.6",
+  "version": "0.12.0",
   "runtime": "index.mjs",
   "hooks": {
     "verify": "hooks/verify.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "harness-everything",
-  "version": "0.11.6",
+  "version": "0.12.0",
   "description": "Harness OS: An Orchestrated Agent Operating System for AI-driven Development",
   "main": "harness-everything/scripts/bootstrap.js",
   "bin": {

package/plugins/harness-everything/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "harness-everything",
-  "version": "0.11.6",
+  "version": "0.12.0",
   "description": "Invariant-first engineering harness for routing, verification, and failure recovery while preserving agent autonomy.",
   "author": {
     "name": "Miya Daniel",