harness-everything 0.36.3 → 0.37.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (51) hide show
  1. package/.claude-plugin/marketplace.json +1 -1
  2. package/.claude-plugin/plugin.json +1 -1
  3. package/CHANGELOG.md +18 -0
  4. package/ci/fixtures/doc-obligations/providers-s3/cases.json +535 -0
  5. package/ci/fixtures/doc-obligations/read-boundary/boundary-controls.json +211 -0
  6. package/ci/fixtures/doc-obligations/read-boundary/boundary-policy.json +325 -0
  7. package/ci/fixtures/doc-obligations/read-boundary/cases.json +14058 -0
  8. package/ci/fixtures/doc-obligations/read-boundary/expected.json +1 -0
  9. package/ci/fixtures/doc-obligations/read-boundary/identity-cases.json +119 -0
  10. package/ci/fixtures/doc-obligations/read-boundary/identity-expected.json +1 -0
  11. package/ci/fixtures/doc-obligations/read-boundary/scope-cases.json +208 -0
  12. package/ci/fixtures/doc-obligations/read-boundary/scope-expected.json +1 -0
  13. package/ci/fixtures/doc-obligations/reconciliation-prep/cases.json +2751 -0
  14. package/ci/fixtures/doc-obligations/reconciliation-prep/flood-entrypoint.js +5 -0
  15. package/ci/fixtures/doc-obligations/reconciliation-prep/hang-entrypoint.js +5 -0
  16. package/ci/fixtures/doc-obligations/reconciliation-prep/pending-red.json +648 -0
  17. package/ci/fixtures/doc-obligations/reconciliation-prep/provider-contract.json +100 -0
  18. package/ci/fixtures/doc-obligations/reconciliation-prep/trust-contract.json +188 -0
  19. package/ci/lib/doc-evidence-boundary-check.js +1240 -0
  20. package/ci/lib/doc-evidence-fixtures.js +459 -0
  21. package/ci/lib/doc-evidence-trace.js +171 -0
  22. package/ci/lib/doc-reconciliation-prep-fixtures.js +502 -0
  23. package/ci/lib/snapshot-stdin.js +27 -0
  24. package/ci/mechanism-325-3b-preparation.test.js +382 -0
  25. package/ci/mechanism-325-3b-s3-providers.test.js +378 -0
  26. package/ci/mechanism-341-boundary-enforcement.test.js +660 -0
  27. package/ci/mechanism-341-capture-module.test.js +357 -0
  28. package/ci/mechanism-341-mutation-runner.test.js +413 -0
  29. package/ci/mechanism-341-read-boundary.test.js +388 -0
  30. package/ci/mechanism-341-snapshot-stdin.test.js +40 -0
  31. package/ci/mutation-check.js +805 -45
  32. package/ci/mutation-loader.js +544 -57
  33. package/ci/prep/doc-reconciliation-red.js +407 -0
  34. package/ci/stress-341-boundary-control.js +85 -0
  35. package/docs/doc-evidence-baseline-binding.md +105 -19
  36. package/docs/doc-evidence-boundary.md +135 -0
  37. package/docs/doc-workflow-reconciliation.md +338 -0
  38. package/docs/document-lifecycle.md +8 -1
  39. package/harness-everything/SKILL.md +1 -1
  40. package/harness-everything/scripts/doc-evidence-capture.js +331 -0
  41. package/harness-everything/scripts/doc-evidence.js +72 -223
  42. package/harness-everything/scripts/doc-providers.js +113 -0
  43. package/opencode-plugin/plugin.json +1 -1
  44. package/package.json +5 -3
  45. package/plugins/harness-everything/.codex-plugin/plugin.json +1 -1
  46. package/plugins/harness-everything/plugin.json +1 -1
  47. package/plugins/harness-everything/skills/harness-everything/SKILL.md +1 -1
  48. package/plugins/harness-everything/skills/harness-everything/scripts/doc-evidence-capture.js +331 -0
  49. package/plugins/harness-everything/skills/harness-everything/scripts/doc-evidence.js +72 -223
  50. package/plugins/harness-everything/skills/harness-everything/scripts/doc-providers.js +113 -0
  51. package/sbom.cdx.json +43 -7
package/sbom.cdx.json CHANGED
@@ -2,23 +2,23 @@
2
2
  "$schema": "https://cyclonedx.org/schema/bom-1.7.schema.json",
3
3
  "bomFormat": "CycloneDX",
4
4
  "specVersion": "1.7",
5
- "serialNumber": "urn:uuid:f2d00cc7-b0ba-5fb7-aa66-45210b7b3234",
5
+ "serialNumber": "urn:uuid:3cf297f8-71a4-55e2-83ce-9ec948a2f0b1",
6
6
  "version": 1,
7
7
  "metadata": {
8
- "timestamp": "2026-10-20T14:22:39.675Z",
8
+ "timestamp": "2026-10-21T08:12:09.729Z",
9
9
  "tools": [
10
10
  {
11
11
  "vendor": "Harness Everything",
12
12
  "name": "generate-sbom.js",
13
- "version": "0.36.3"
13
+ "version": "0.37.0"
14
14
  }
15
15
  ],
16
16
  "component": {
17
17
  "type": "application",
18
- "bom-ref": "pkg:npm/harness-everything@0.36.3",
18
+ "bom-ref": "pkg:npm/harness-everything@0.37.0",
19
19
  "name": "harness-everything",
20
- "version": "0.36.3",
21
- "purl": "pkg:npm/harness-everything@0.36.3"
20
+ "version": "0.37.0",
21
+ "purl": "pkg:npm/harness-everything@0.37.0"
22
22
  }
23
23
  },
24
24
  "components": [
@@ -596,6 +596,34 @@
596
596
  }
597
597
  ]
598
598
  },
599
+ {
600
+ "type": "library",
601
+ "bom-ref": "pkg:npm/acorn-walk@8.3.5",
602
+ "name": "acorn-walk",
603
+ "version": "8.3.5",
604
+ "scope": "excluded",
605
+ "purl": "pkg:npm/acorn-walk@8.3.5",
606
+ "hashes": [
607
+ {
608
+ "alg": "SHA-512",
609
+ "content": "HEHNfbars9v4pgpW6SO1KSPkfoS0xVOM/9UzkJltjlsHZmJasxg8aXkuZa7SMf8vKGIBhpUsPluQSqhJFCqebw=="
610
+ }
611
+ ]
612
+ },
613
+ {
614
+ "type": "library",
615
+ "bom-ref": "pkg:npm/acorn@8.19.0",
616
+ "name": "acorn",
617
+ "version": "8.19.0",
618
+ "scope": "excluded",
619
+ "purl": "pkg:npm/acorn@8.19.0",
620
+ "hashes": [
621
+ {
622
+ "alg": "SHA-512",
623
+ "content": "oJlA3XiRm7Cyk6qFD2Jn8ak9B7jSy0qy00ADO3+8dpT0LSjFihQYv4C02LFCSYJV3Q37xYwwRy5m+IpIiUzqWw=="
624
+ }
625
+ ]
626
+ },
599
627
  {
600
628
  "type": "library",
601
629
  "bom-ref": "pkg:npm/ajv@8.20.0",
@@ -1892,6 +1920,12 @@
1892
1920
  "pkg:npm/undici-types@8.3.0"
1893
1921
  ]
1894
1922
  },
1923
+ {
1924
+ "ref": "pkg:npm/acorn-walk@8.3.5",
1925
+ "dependsOn": [
1926
+ "pkg:npm/acorn@8.19.0"
1927
+ ]
1928
+ },
1895
1929
  {
1896
1930
  "ref": "pkg:npm/ajv@8.20.0",
1897
1931
  "dependsOn": [
@@ -1999,10 +2033,12 @@
1999
2033
  ]
2000
2034
  },
2001
2035
  {
2002
- "ref": "pkg:npm/harness-everything@0.36.3",
2036
+ "ref": "pkg:npm/harness-everything@0.37.0",
2003
2037
  "dependsOn": [
2004
2038
  "pkg:npm/%40commitlint/cli@19.8.1",
2005
2039
  "pkg:npm/%40commitlint/config-conventional@19.8.1",
2040
+ "pkg:npm/acorn-walk@8.3.5",
2041
+ "pkg:npm/acorn@8.19.0",
2006
2042
  "pkg:npm/husky@9.1.7",
2007
2043
  "pkg:npm/js-yaml@5.4.1"
2008
2044
  ]