harness-everything 0.44.0 → 0.46.0

package/.agents/harness-everything/project-docs.json

@@ -1,8 +1,10 @@
 {
   "governed": [
     { "path": "docs/architecture.md", "role": "reference" },
-    { "path": "docs/doc-workflow-reconciliation.md", "role": "reference" }
+    { "path": "docs/doc-workflow-reconciliation.md", "role": "reference" },
+    { "path": "docs/adr/*.md", "role": "adr" }
   ],
+  "domains": ["ROUTE", "GATE", "EVID", "SONE", "DOCS", "DIST"],
   "derived": [
     { "path": "docs/governed-index.md", "generator": "node harness-everything/scripts/doc-lifecycle.js index --workspace . --config .agents/harness-everything/project-docs.json --all" }
   ]

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "harness-everything",
       "source": "./",
       "description": "Harness OS: an orchestrated agent operating system — tier routing, circuit breaker guardrails, verification gates, WAL session memory, and self-evolving workspace rules.",
-      "version": "0.44.0",
+      "version": "0.46.0",
       "author": {
         "name": "Miya Daniel"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "harness-everything",
   "description": "Harness OS: an orchestrated agent operating system — tier routing, circuit breaker guardrails, verification gates, WAL session memory, and self-evolving workspace rules.",
-  "version": "0.44.0",
+  "version": "0.46.0",
   "author": {
     "name": "Miya Daniel"
   },

package/CHANGELOG.md

@@ -2,6 +2,24 @@
 
 All notable changes to this project are documented in this file.
 
+## [0.46.0](https://github.com/dyphn1/Harness-everything/compare/v0.45.0...v0.46.0) (2026-10-28)
+
+### Features
+
+* **doc-reconciliation:** add pre-draft outline review evidence lane ([ac41562](https://github.com/dyphn1/Harness-everything/commit/ac415627369fa0ecadcb19c265d7fe1052d291e1)), closes [#325](https://github.com/dyphn1/Harness-everything/issues/325)
+
+### Bug Fixes
+
+* **doc-reconciliation:** canonicalize outline roots for windows short paths ([c508e43](https://github.com/dyphn1/Harness-everything/commit/c508e43141c684e70ee94f4c359e427706a85320))
+* **doc-reconciliation:** keep legacy session-dir keying on the raw workspace root ([f39f533](https://github.com/dyphn1/Harness-everything/commit/f39f53332435e58beb2bb5b01fff3e1707dd18a2))
+* **doc-reconciliation:** observe file-tool writers and deny seal-only retries ([9cbe0ea](https://github.com/dyphn1/Harness-everything/commit/9cbe0ea6b1af7bfadc2be954a6f8337be11eac0c)), closes [#325](https://github.com/dyphn1/Harness-everything/issues/325)
+
+## [0.45.0](https://github.com/dyphn1/Harness-everything/compare/v0.44.0...v0.45.0) (2026-10-27)
+
+### Features
+
+* **doc-lifecycle:** produce conflict-check from a full-corpus assessment ([ec596e0](https://github.com/dyphn1/Harness-everything/commit/ec596e02de554f14778f7790551b6990a50dd0b6)), closes [#325](https://github.com/dyphn1/Harness-everything/issues/325)
+
 ## [0.44.0](https://github.com/dyphn1/Harness-everything/compare/v0.43.1...v0.44.0) (2026-10-27)
 
 ### Features
@@ -16,6 +34,15 @@ All notable changes to this project are documented in this file.
 
 ## [Unreleased]
 
+### Added
+
+- **doc-governance:** declare six ADR domains (ROUTE, GATE, EVID, SONE, DOCS, DIST) and record the eight DOCS ADRs (DOCS-001 to DOCS-008) for already-in-effect document-lifecycle mechanisms.
+
+### Features
+
+* **doc-lifecycle:** add complete full-corpus conflict-check evidence with snapshot-bound scope and corpus identity.
+* **doc-reconciliation:** add a dedicated pre-draft outline review lane bound to the pinned inventory and exact O→D Git cycle; positive live-host credit remains gated.
+
 ### Fixed
 
 - **doc-governance:** allow regular governed-content revisions and expand base-owned governed/derived globs against Git trees, while retaining review for membership, structural, policy, trust-surface, fixture, and derived-output changes; run the guard in its own CI job.

package/ci/fixtures/doc-obligations/read-boundary/boundary-policy.json

@@ -11,7 +11,7 @@
     },
     "canonicalization": "estree-alpha-target-v2",
     "moduleFingerprints": {
-      "evaluator": "21e5922f94a0ffd6a2fa4c6c14becfd6680854df342d31c7e0dfd74d776feb6d",
+      "evaluator": "d2097839b602b1266f02f31168e1f72e6dab2d88f796d1dc64df21e2cf3afded",
       "capture": "95d0ca61505914e6c7cfc4603556f028208bd44203167397896ce0bf4ec58ef7"
     },
     "targets": [
@@ -25,7 +25,7 @@
         "module": "evaluator",
         "name": "evaluateObligation",
         "ruleIds": ["CAPTURE_CALL_SITES"],
-        "fingerprint": "fdeabb3d9ddebec17cef5c0eb2fe6ff846af5c0b29eb2a701e3aea566276f82e"
+        "fingerprint": "643127bd802817a0236b753516641de062b5af995969895cfca909a387dfd2b4"
       },
       {
         "module": "evaluator",

package/ci/fixtures/doc-obligations/reconciliation-s2a/harness.js

@@ -400,7 +400,7 @@ function buildEvents(snapshot, repo, vec) {
       originRef: `fake-origin:event:${ref}`
     };
     if (kind === 'execution') {
-      events[ref] = {
+      const event = {
         ...common,
         kind: 'execution',
         principalId: PRINCIPALS.executor,
@@ -415,6 +415,24 @@ function buildEvents(snapshot, repo, vec) {
         resultRef: `result-${capability}`,
         artifactDigests: clone(artifactDigests)
       };
+      if (capability === 'conflict-check') {
+        const { documentCorpusPaths } = require(path.join(ROOT, 'harness-everything', 'scripts', 'doc-lifecycle.js'));
+        const configSource = snapshot.config.capture.sources.find(item => item.path === CONFIG_REL && item.presence === 'present');
+        const configBytes = Buffer.isBuffer(configSource?.bytes) ? configSource.bytes : Buffer.from(configSource?.bytes?.data || []);
+        const corpusPaths = documentCorpusPaths(snapshot.candidate.records, snapshot.config.resolution.config);
+        event.corpusBinding = {
+          complete: true,
+          paths: corpusPaths,
+          digests: Object.fromEntries(corpusPaths.map(relative => [relative,
+            snapshot.candidate.records.find(item => item.path === relative && item.presence === 'present')?.digest])),
+          config: { path: CONFIG_REL, digest: sha256(configBytes) },
+          baseCommit: snapshot.originContext.baseline.commit,
+          baselineDigest: snapshot.identity.baselineDigest,
+          candidateDigest: snapshot.identity.candidateDigest,
+          configIdentityDigest: snapshot.identity.configDigest,
+        };
+      }
+      events[ref] = event;
     } else {
       events[ref] = {
         ...common,

package/ci/mechanism-2ax-doc-lifecycle.test.js

@@ -1694,7 +1694,8 @@ checkCase('2ax. frozen Git-object guard with bootstrap and tamper controls', ()
       path.join(root, 'ci/fixtures/doc-lifecycle/scenarios')
     );
     const policy = JSON.parse(fs.readFileSync(path.join(REPOSITORY_ROOT, '.agents/harness-everything/project-docs.json'), 'utf8'));
-    for (const record of [...policy.governed, ...policy.derived]) writeRelative(root, record.path, `baseline ${record.path}\n`);
+    // glob records (e.g. docs/adr/*.md) are policy patterns, not files; '*' is not a valid Windows filename
+    for (const record of [...policy.governed, ...policy.derived]) if (!record.path.includes('*')) writeRelative(root, record.path, `baseline ${record.path}\n`);
     writeRelative(root, 'docs/ordinary.md', 'baseline ordinary document\n');
     return { root, base: commitFixture(root, 'fixture baseline') };
   }

package/ci/mechanism-325-3b-s2b-capture.test.js

@@ -282,6 +282,11 @@ function isolatedRunProvider(leg, input, reference) {
     const lib = path.join(dir, 'hooks', 'scripts', 'lib');
     fs.mkdirSync(lib, { recursive: true });
     fs.copyFileSync(path.join(leg.lib, 'doc-reconciliation-provider.js'), path.join(lib, 'doc-reconciliation-provider.js'));
+    fs.copyFileSync(path.join(leg.lib, 'workflow-isolation.js'), path.join(lib, 'workflow-isolation.js'));
+    const sharedScriptsLib = path.join(dir, 'scripts', 'lib');
+    fs.mkdirSync(sharedScriptsLib, { recursive: true });
+    fs.copyFileSync(path.resolve(leg.lib, '../../../scripts/lib/verification-contract.js'),
+      path.join(sharedScriptsLib, 'verification-contract.js'));
     const provider = require(path.join(lib, 'doc-reconciliation-provider.js')).createClaudeOriginProvider(H.providerInput(input));
     const response = provider.resolveEvent({ reference, identity: H.providerIdentity() });
     const context = provider.resolveContext({ workspaceRoot: H.FIXED.workspaceRoot, workflowId: H.FIXED.workflowId, sessionId: H.FIXED.sessionId });
@@ -523,7 +528,7 @@ runner.run('R2C1-MANIFEST-SUBAGENT-HOOKS', [], (_mods, leg) => {
     const hasStatePersist = group => ((group && group.hooks) || []).some(handler =>
       handler.type === 'command' && /state-persist\.js/.test(handler.command || ''));
     for (const route of [
-      { event: 'PreToolUse', matcher: 'Bash|PowerShell|Task|Agent' },
+      { event: 'PreToolUse', matcher: 'Bash|PowerShell|Task|Agent|Write|Edit|apply_patch' },
       { event: 'PostToolUse', matcher: 'Task|Agent' },
       { event: 'SubagentStart' },
       { event: 'SubagentStop' },

package/ci/mechanism-325-f2-doc-craft.test.js

@@ -502,8 +502,8 @@ function mp2Apply() {
   const dir = scriptCopy('f2 doc craft mp2 ');
   const file = path.join(dir, MODULE);
   const original = fs.readFileSync(file, 'utf8');
-  const emitMatches = [...original.matchAll(/return emit\(result[^;]*\);/g)];
-  if (emitMatches.length !== 1) throw new ProbeApplyError(`could not uniquely locate the final emit (${emitMatches.length} candidates); update this probe for the green shape`);
+  const emitMatches = [...original.matchAll(/return emit\(result, lintExit === 1 \|\| broken\.length \? 1 : 0\);/g)];
+  if (emitMatches.length !== 1) throw new ProbeApplyError(`could not uniquely locate the plain-check exit mapping (${emitMatches.length} candidates); update this probe for the green shape`);
   const injected = `if (result.reminders && result.reminders.length) return emit(result, 1);\n  ${emitMatches[0][0]}`;
   fs.writeFileSync(file, original.replace(emitMatches[0][0], injected));
   return dir;

package/ci/mechanism-325-f3-derived-views.test.js

@@ -356,8 +356,11 @@ function caseD13(leg) {
   const candidate = path.join(dir, 'candidate.md');
   fs.writeFileSync(candidate, Buffer.from(TARGET_BYTES.toString('utf8').replace(/\n/g, '\r\n'), 'utf8'));
   const result = runCompare(leg.dir, { workspace: ws, config: CONFIG, view: 'docs/index.md', candidate, status: 'ok' });
-  same(result.status, 1, 'exit');
-  if (!JSON.stringify(jsonOut(result)).includes('stale')) throw new Error(`CRLF candidate accepted: ${truncate(result.stdout)}`);
+  let comparison;
+  try { comparison = JSON.parse(result.stdout); } catch { comparison = null; }
+  const detail = `compare-derived JSON: ${JSON.stringify(comparison)}; stdout: ${truncate(result.stdout)}; stderr: ${truncate(result.stderr)}`;
+  same(result.status, 1, `exit; ${detail}`);
+  if (!comparison || !JSON.stringify(comparison).includes('stale')) throw new Error(`CRLF candidate accepted; ${detail}`);
 }
 assertPerLeg('case-d13:crlf-candidate-not-normalized', leg => caseD13(leg));
 

package/ci/mechanism-325-f4-projections.test.js

@@ -267,6 +267,11 @@ function partB() {
         const copy = path.join(tmp, 'hooks', 'scripts', 'lib');
         fs.mkdirSync(copy, { recursive: true });
         fs.copyFileSync(path.join(leg.lib, 'doc-reconciliation-provider.js'), path.join(copy, 'doc-reconciliation-provider.js'));
+      fs.copyFileSync(path.join(leg.lib, 'workflow-isolation.js'), path.join(copy, 'workflow-isolation.js'));
+      const sharedScriptsLib = path.join(tmp, 'scripts', 'lib');
+      fs.mkdirSync(sharedScriptsLib, { recursive: true });
+      fs.copyFileSync(path.resolve(leg.lib, '../../../scripts/lib/verification-contract.js'),
+        path.join(sharedScriptsLib, 'verification-contract.js'));
         const live = path.join(tmp, LIVE_REL);
         fs.mkdirSync(live, { recursive: true });
         fs.writeFileSync(path.join(live, 'README.md'), 'garbage\n');
@@ -301,9 +306,14 @@ const RED_LIVE_GATE = 'missing-implementation: the retained live gate accepts an
 function partBPreloadBoundary(leg) {
   const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'f4-preload-'));
   try {
-    const entry = path.join(tmp, 'entry');
+    const entry = path.join(tmp, 'hooks', 'scripts');
     fs.mkdirSync(path.join(entry, 'lib'), { recursive: true });
     fs.copyFileSync(path.join(leg.lib, 'doc-reconciliation-provider.js'), path.join(entry, 'lib', 'doc-reconciliation-provider.js'));
+    fs.copyFileSync(path.join(leg.lib, 'workflow-isolation.js'), path.join(entry, 'lib', 'workflow-isolation.js'));
+    const sharedScriptsLib = path.join(tmp, 'scripts', 'lib');
+    fs.mkdirSync(sharedScriptsLib, { recursive: true });
+    fs.copyFileSync(path.resolve(leg.lib, '../../../scripts/lib/verification-contract.js'),
+      path.join(sharedScriptsLib, 'verification-contract.js'));
     const probe = path.join(entry, 'probe.js');
     fs.writeFileSync(probe, [
       "const provider = require('./lib/doc-reconciliation-provider.js');",