harness-everything 0.30.8 → 0.30.9

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "harness-everything",
       "source": "./",
       "description": "Harness OS: an orchestrated agent operating system — tier routing, circuit breaker guardrails, verification gates, WAL session memory, and self-evolving workspace rules.",
-      "version": "0.30.8",
+      "version": "0.30.9",
       "author": {
         "name": "Miya Daniel"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "harness-everything",
   "description": "Harness OS: an orchestrated agent operating system — tier routing, circuit breaker guardrails, verification gates, WAL session memory, and self-evolving workspace rules.",
-  "version": "0.30.8",
+  "version": "0.30.9",
   "author": {
     "name": "Miya Daniel"
   },

package/.github/workflows/ci.yml

@@ -29,6 +29,37 @@ jobs:
       - name: Run focused mutation checks
         run: npm run test:mutations
 
+  # Pin the patched version: floating Node 24 already passed before #284.
+  system-one-windows-node24-patched:
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
+        with:
+          node-version: '24.20.0'
+      - name: Verify exact patched runtime
+        run: node -e "if (process.versions.node !== '24.20.0') process.exit(1)"
+      - name: Exercise real evaluator subprocess and repeated resident teardown
+        run: node --test ci/mechanism-system-one-resident.test.js
+
+  # Node >=22 also includes the odd-numbered Node 23 line. Keep its
+  # documented Windows shutdown failure visible, without narrowing engines.
+  system-one-windows-node-legacy-policy:
+    runs-on: windows-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        node: ['23.6.0', '24.15.0']
+    steps:
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
+        with:
+          node-version: ${{ matrix.node }}
+      - name: Verify exact affected runtime
+        run: node -e "if (process.versions.node !== '${{ matrix.node }}') process.exit(1)"
+      - name: Confirm explicit RS13 skip with version-policy unit coverage
+        run: node --test --test-name-pattern="S1-RS00|S1-RS13" ci/mechanism-system-one-resident.test.js
+
   runtime-floor:
     runs-on: ubuntu-latest
     steps:

package/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 All notable changes to this project are documented in this file.
 
+## [0.30.9](https://github.com/dyphn1/Harness-everything/compare/v0.30.8...v0.30.9) (2026-10-08)
+
+### Bug Fixes
+
+* **system-one:** cover Windows Node 23 shutdown regression ([75ef983](https://github.com/dyphn1/Harness-everything/commit/75ef9833e4fcfb697c8323836f08eed3dfc7ff8d))
+* **test:** correct Windows Node version policy regex ([c0b63cc](https://github.com/dyphn1/Harness-everything/commit/c0b63cc3f18dc7126e4680f4fa7682ea2a4729ef))
+
 ## [0.30.8](https://github.com/dyphn1/Harness-everything/compare/v0.30.7...v0.30.8) (2026-10-07)
 
 ### Bug Fixes

package/README.md

@@ -48,7 +48,7 @@ The exact "Harness" behavior depends on the installation surface. Claude Code ha
 
 Harness integrates directly into your workspace. There is no heavy daemon, no paid external APIs, and zero configuration required.
 
-**Runtime:** Harness supports **Node.js 22+**. Node.js **24** is the primary development and CI runtime (`.nvmrc`). The generated current-state runtime/workflow summary is [docs/repository-contract.md](docs/repository-contract.md).
+**Runtime:** Harness supports **Node.js 22+** (including odd-numbered versions); Node.js **24** is the primary development and CI runtime (`.nvmrc`). **On Windows, System One evaluator subprocess verification should use Node 22 or Node 24.20+**. Node 23.x has a documented Windows process-shutdown assertion ([nodejs/node#56645](https://github.com/nodejs/node/issues/56645)); Node 24.0–24.19 predates the backported libuv fix ([nodejs/node#61999](https://github.com/nodejs/node/pull/61999)) and may likewise crash at process exit (`0xC0000409`). RS13 visibly skips **only** on those Windows versions while retaining the real evaluator subprocess elsewhere. A skip is not a pass or evidence of a fixed Node runtime. CI pins Windows Node 23.6.0 and 24.15.0 to validate their skip policy, and Node 24.20.0 to run the complete subprocess/regression suite. These tests do not reduce the package's general `>=22` engine compatibility claim. The generated current-state runtime/workflow summary is [docs/repository-contract.md](docs/repository-contract.md).
 
 ```bash
 # Option A: Claude Code plugin (marketplace manifest included)

package/ci/fixtures/system-one-resident-stub.py

@@ -1,5 +1,6 @@
 """Stub scorer behind the real resident server code; never model-quality evidence."""
 import importlib.util
+import json
 from pathlib import Path
 import sys
 import time
@@ -28,4 +29,9 @@ def factory(weights, manifest):
 if __name__ == '__main__':
     if sys.argv[1:2] != ['--serve']:
         sys.exit(2)
-    sys.exit(adapter.serve_main(sys.argv[2:], scorer_factory=factory))
+    result = adapter.serve_main(sys.argv[2:], scorer_factory=factory)
+    # Deterministic teardown fixture: the state/socket are closed, but PID is
+    # deliberately alive to distinguish state unlink from full process exit.
+    if json.loads(sys.argv[2]).get('modelId') == 'stub-exit-linger':
+        time.sleep(0.5)
+    sys.exit(result)

package/ci/mechanism-system-one-resident.test.js

@@ -29,10 +29,57 @@ function fixture(modelId = 'stub', extra = {}) {
   const deps = { command: m => { spawns.push(m.modelId); return [python, [stub, '--serve']]; } };
   return { dir, manifest, manifestPath, spawns, deps };
 }
+// State-file unlink precedes process exit. Windows cleanup must wait for the
+// captured resident PID, not merely for the disappearance of its state file.
+function pidAlive(pid) {
+  try { process.kill(pid, 0); return true; }
+  catch (err) { return err.code === 'EPERM'; }
+}
 function cleanup(f) {
-  try { resident.stop(f.manifest, f.manifestPath); } catch (_) { /* best effort */ }
-  fs.rmSync(f.dir, { recursive: true, force: true });
+  const { state } = resident.stateFiles(f.manifest, f.manifestPath);
+  const server = resident.readState(state);
+  try { resident.stop(f.manifest, f.manifestPath); } catch (_) { /* best effort after an assertion failure */ }
+  const deadline = Date.now() + 7500;
+  while ((fs.existsSync(state) || (process.platform === 'win32' && server && pidAlive(server.pid)))
+      && Date.now() < deadline) sleep(25);
+  assert.equal(fs.existsSync(state), false, 'resident state must disappear before fixture removal');
+  if (process.platform === 'win32' && server) {
+    assert.equal(pidAlive(server.pid), false, `detached resident PID ${server.pid} survived shutdown`);
+  }
+  fs.rmSync(f.dir, { recursive: true, force: true, maxRetries: 20, retryDelay: 50 });
+}
+// Windows Node 23 (nodejs/node#56645) and Node 24 before the fix in
+// 24.20.0 (nodejs/node#61999) can abort during libuv/process shutdown.
+// Preserve RS13's actual evaluator subprocess on unaffected runtimes.
+function windowsNodeShutdownIssue(platform, version) {
+  const parts = /^(\d+)\.(\d+)\.(\d+)$/.exec(version);
+  if (platform !== 'win32' || !parts) return false;
+  const major = Number(parts[1]);
+  if (major === 23) {
+    return 'Windows Node 23.x has a known process-shutdown assertion (nodejs/node#56645); use Node 22 or Node 24.20+';
+  }
+  if (major === 24 && Number(parts[2]) < 20) {
+    return 'Windows Node 24 < 24.20.0 lacks upstream shutdown fix nodejs/node#61999; use Node 24.20+ or Node 22';
+  }
+  return false;
 }
+const nodeShutdownIssue = windowsNodeShutdownIssue(process.platform, process.versions.node);
+
+test('S1-RS00 Windows Node 23 and 24 shutdown compatibility boundary', () => {
+  for (const version of ['23.0.0', '23.4.0', '23.6.0', '23.11.1']) {
+    assert.match(windowsNodeShutdownIssue('win32', version), /Node 23/);
+    assert.equal(windowsNodeShutdownIssue('linux', version), false);
+    assert.equal(windowsNodeShutdownIssue('darwin', version), false);
+  }
+  for (const version of ['24.0.0', '24.15.0', '24.18.0', '24.19.9']) {
+    assert.match(windowsNodeShutdownIssue('win32', version), /Node 24/);
+    assert.equal(windowsNodeShutdownIssue('linux', version), false);
+  }
+  for (const version of ['22.16.0', '24.20.0', '24.21.0', '25.0.0', '26.0.0', 'bogus']) {
+    assert.equal(windowsNodeShutdownIssue('win32', version), false, version);
+  }
+});
+
 // A client view whose state file names the live server with a wrong token. The server polls only its own
 // state file and exits once that file stops naming it, so rewriting it would race the wrong-token request.
 function wrongTokenView(f) {
@@ -295,7 +342,7 @@ test('S1-RS12 the evaluator times the async path: no worker thread per warm scor
   } finally { cleanup(f); }
 });
 
-test('S1-RS13 manifest acceptance thresholds are validated, carried by scored results and applied by the evaluator', async () => {
+test('S1-RS13 manifest acceptance thresholds are validated, carried by scored results and applied by the evaluator', { skip: nodeShutdownIssue }, async () => {
   const acceptance = { minConfidence: 0.6, minMargin: 0.3 };
   const base = fixture();
   try {
@@ -344,3 +391,23 @@ test('S1-RS14 resident transport names its adapter and stays inside the scripts
     assert.throws(() => resident.defaultCommand({ ...f.manifest, adapter: '../evil.py' }));
   } finally { cleanup(f); }
 });
+
+
+// The test server keeps its PID alive for 500 ms after state-file unlink.
+// A state-only teardown passes too early, whereas PID-aware cleanup cannot.
+test('S1-RS15 repeated teardown waits for resident PID and removes every fixture', () => {
+  for (let round = 0; round < 6; round++) {
+    const f = fixture('stub-exit-linger');
+    let pid;
+    try {
+      assert.equal(resident.ensureReady(f.manifest, f.manifestPath, 20000, f.deps), true);
+      const state = resident.readState(resident.stateFiles(f.manifest, f.manifestPath).state);
+      assert.ok(state && state.pid > 0);
+      pid = state.pid;
+    } finally { cleanup(f); }
+    assert.equal(fs.existsSync(f.dir), false, `fixture remained after teardown ${round}`);
+    if (process.platform === 'win32') {
+      assert.equal(pidAlive(pid), false, `resident PID ${pid} leaked in teardown ${round}`);
+    }
+  }
+});

package/opencode-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "harness-enforcement",
   "description": "Repository inventory for the opencode enforcement plugin and its standalone helper",
-  "version": "0.30.8",
+  "version": "0.30.9",
   "runtime": "index.mjs",
   "hooks": {
     "verify": "hooks/verify.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "harness-everything",
-  "version": "0.30.8",
+  "version": "0.30.9",
   "description": "Harness OS: An Orchestrated Agent Operating System for AI-driven Development",
   "main": "harness-everything/scripts/bootstrap.js",
   "bin": {

package/plugins/harness-everything/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "harness-everything",
-  "version": "0.30.8",
+  "version": "0.30.9",
   "description": "Invariant-first engineering harness for routing, verification, and failure recovery while preserving agent autonomy.",
   "author": {
     "name": "Miya Daniel",

package/plugins/harness-everything/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "harness-everything",
-  "version": "0.30.8",
+  "version": "0.30.9",
   "description": "Invariant-first engineering harness for routing, verification, and failure recovery while preserving agent autonomy.",
   "author": {
     "name": "Miya Daniel",

package/sbom.cdx.json

@@ -2,23 +2,23 @@
   "$schema": "https://cyclonedx.org/schema/bom-1.7.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.7",
-  "serialNumber": "urn:uuid:ce51652b-572b-5c28-8da4-6b2f30888f30",
+  "serialNumber": "urn:uuid:fdd6adf4-625c-5667-8d1c-1dd030c7b4a4",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-10-07T08:18:17.804Z",
+    "timestamp": "2026-10-08T03:48:56.742Z",
     "tools": [
       {
         "vendor": "Harness Everything",
         "name": "generate-sbom.js",
-        "version": "0.30.8"
+        "version": "0.30.9"
       }
     ],
     "component": {
       "type": "application",
-      "bom-ref": "pkg:npm/harness-everything@0.30.8",
+      "bom-ref": "pkg:npm/harness-everything@0.30.9",
       "name": "harness-everything",
-      "version": "0.30.8",
-      "purl": "pkg:npm/harness-everything@0.30.8"
+      "version": "0.30.9",
+      "purl": "pkg:npm/harness-everything@0.30.9"
     }
   },
   "components": [
@@ -1999,7 +1999,7 @@
       ]
     },
     {
-      "ref": "pkg:npm/harness-everything@0.30.8",
+      "ref": "pkg:npm/harness-everything@0.30.9",
       "dependsOn": [
         "pkg:npm/%40commitlint/cli@19.8.1",
         "pkg:npm/%40commitlint/config-conventional@19.8.1",