harness-everything 0.45.0 → 0.46.0

package/.agents/harness-everything/project-docs.json

@@ -1,8 +1,10 @@
 {
   "governed": [
     { "path": "docs/architecture.md", "role": "reference" },
-    { "path": "docs/doc-workflow-reconciliation.md", "role": "reference" }
+    { "path": "docs/doc-workflow-reconciliation.md", "role": "reference" },
+    { "path": "docs/adr/*.md", "role": "adr" }
   ],
+  "domains": ["ROUTE", "GATE", "EVID", "SONE", "DOCS", "DIST"],
   "derived": [
     { "path": "docs/governed-index.md", "generator": "node harness-everything/scripts/doc-lifecycle.js index --workspace . --config .agents/harness-everything/project-docs.json --all" }
   ]

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "harness-everything",
       "source": "./",
       "description": "Harness OS: an orchestrated agent operating system — tier routing, circuit breaker guardrails, verification gates, WAL session memory, and self-evolving workspace rules.",
-      "version": "0.45.0",
+      "version": "0.46.0",
       "author": {
         "name": "Miya Daniel"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "harness-everything",
   "description": "Harness OS: an orchestrated agent operating system — tier routing, circuit breaker guardrails, verification gates, WAL session memory, and self-evolving workspace rules.",
-  "version": "0.45.0",
+  "version": "0.46.0",
   "author": {
     "name": "Miya Daniel"
   },

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 All notable changes to this project are documented in this file.
 
+## [0.46.0](https://github.com/dyphn1/Harness-everything/compare/v0.45.0...v0.46.0) (2026-10-28)
+
+### Features
+
+* **doc-reconciliation:** add pre-draft outline review evidence lane ([ac41562](https://github.com/dyphn1/Harness-everything/commit/ac415627369fa0ecadcb19c265d7fe1052d291e1)), closes [#325](https://github.com/dyphn1/Harness-everything/issues/325)
+
+### Bug Fixes
+
+* **doc-reconciliation:** canonicalize outline roots for windows short paths ([c508e43](https://github.com/dyphn1/Harness-everything/commit/c508e43141c684e70ee94f4c359e427706a85320))
+* **doc-reconciliation:** keep legacy session-dir keying on the raw workspace root ([f39f533](https://github.com/dyphn1/Harness-everything/commit/f39f53332435e58beb2bb5b01fff3e1707dd18a2))
+* **doc-reconciliation:** observe file-tool writers and deny seal-only retries ([9cbe0ea](https://github.com/dyphn1/Harness-everything/commit/9cbe0ea6b1af7bfadc2be954a6f8337be11eac0c)), closes [#325](https://github.com/dyphn1/Harness-everything/issues/325)
+
 ## [0.45.0](https://github.com/dyphn1/Harness-everything/compare/v0.44.0...v0.45.0) (2026-10-27)
 
 ### Features
@@ -22,9 +34,14 @@ All notable changes to this project are documented in this file.
 
 ## [Unreleased]
 
+### Added
+
+- **doc-governance:** declare six ADR domains (ROUTE, GATE, EVID, SONE, DOCS, DIST) and record the eight DOCS ADRs (DOCS-001 to DOCS-008) for already-in-effect document-lifecycle mechanisms.
+
 ### Features
 
 * **doc-lifecycle:** add complete full-corpus conflict-check evidence with snapshot-bound scope and corpus identity.
+* **doc-reconciliation:** add a dedicated pre-draft outline review lane bound to the pinned inventory and exact O→D Git cycle; positive live-host credit remains gated.
 
 ### Fixed
 

package/ci/fixtures/doc-obligations/read-boundary/boundary-policy.json

@@ -11,7 +11,7 @@
     },
     "canonicalization": "estree-alpha-target-v2",
     "moduleFingerprints": {
-      "evaluator": "21e5922f94a0ffd6a2fa4c6c14becfd6680854df342d31c7e0dfd74d776feb6d",
+      "evaluator": "d2097839b602b1266f02f31168e1f72e6dab2d88f796d1dc64df21e2cf3afded",
       "capture": "95d0ca61505914e6c7cfc4603556f028208bd44203167397896ce0bf4ec58ef7"
     },
     "targets": [
@@ -25,7 +25,7 @@
         "module": "evaluator",
         "name": "evaluateObligation",
         "ruleIds": ["CAPTURE_CALL_SITES"],
-        "fingerprint": "fdeabb3d9ddebec17cef5c0eb2fe6ff846af5c0b29eb2a701e3aea566276f82e"
+        "fingerprint": "643127bd802817a0236b753516641de062b5af995969895cfca909a387dfd2b4"
       },
       {
         "module": "evaluator",

package/ci/mechanism-2ax-doc-lifecycle.test.js

@@ -1694,7 +1694,8 @@ checkCase('2ax. frozen Git-object guard with bootstrap and tamper controls', ()
       path.join(root, 'ci/fixtures/doc-lifecycle/scenarios')
     );
     const policy = JSON.parse(fs.readFileSync(path.join(REPOSITORY_ROOT, '.agents/harness-everything/project-docs.json'), 'utf8'));
-    for (const record of [...policy.governed, ...policy.derived]) writeRelative(root, record.path, `baseline ${record.path}\n`);
+    // glob records (e.g. docs/adr/*.md) are policy patterns, not files; '*' is not a valid Windows filename
+    for (const record of [...policy.governed, ...policy.derived]) if (!record.path.includes('*')) writeRelative(root, record.path, `baseline ${record.path}\n`);
     writeRelative(root, 'docs/ordinary.md', 'baseline ordinary document\n');
     return { root, base: commitFixture(root, 'fixture baseline') };
   }

package/ci/mechanism-325-3b-s2b-capture.test.js

@@ -282,6 +282,11 @@ function isolatedRunProvider(leg, input, reference) {
     const lib = path.join(dir, 'hooks', 'scripts', 'lib');
     fs.mkdirSync(lib, { recursive: true });
     fs.copyFileSync(path.join(leg.lib, 'doc-reconciliation-provider.js'), path.join(lib, 'doc-reconciliation-provider.js'));
+    fs.copyFileSync(path.join(leg.lib, 'workflow-isolation.js'), path.join(lib, 'workflow-isolation.js'));
+    const sharedScriptsLib = path.join(dir, 'scripts', 'lib');
+    fs.mkdirSync(sharedScriptsLib, { recursive: true });
+    fs.copyFileSync(path.resolve(leg.lib, '../../../scripts/lib/verification-contract.js'),
+      path.join(sharedScriptsLib, 'verification-contract.js'));
     const provider = require(path.join(lib, 'doc-reconciliation-provider.js')).createClaudeOriginProvider(H.providerInput(input));
     const response = provider.resolveEvent({ reference, identity: H.providerIdentity() });
     const context = provider.resolveContext({ workspaceRoot: H.FIXED.workspaceRoot, workflowId: H.FIXED.workflowId, sessionId: H.FIXED.sessionId });
@@ -523,7 +528,7 @@ runner.run('R2C1-MANIFEST-SUBAGENT-HOOKS', [], (_mods, leg) => {
     const hasStatePersist = group => ((group && group.hooks) || []).some(handler =>
       handler.type === 'command' && /state-persist\.js/.test(handler.command || ''));
     for (const route of [
-      { event: 'PreToolUse', matcher: 'Bash|PowerShell|Task|Agent' },
+      { event: 'PreToolUse', matcher: 'Bash|PowerShell|Task|Agent|Write|Edit|apply_patch' },
       { event: 'PostToolUse', matcher: 'Task|Agent' },
       { event: 'SubagentStart' },
       { event: 'SubagentStop' },

package/ci/mechanism-325-f4-projections.test.js

@@ -267,6 +267,11 @@ function partB() {
         const copy = path.join(tmp, 'hooks', 'scripts', 'lib');
         fs.mkdirSync(copy, { recursive: true });
         fs.copyFileSync(path.join(leg.lib, 'doc-reconciliation-provider.js'), path.join(copy, 'doc-reconciliation-provider.js'));
+      fs.copyFileSync(path.join(leg.lib, 'workflow-isolation.js'), path.join(copy, 'workflow-isolation.js'));
+      const sharedScriptsLib = path.join(tmp, 'scripts', 'lib');
+      fs.mkdirSync(sharedScriptsLib, { recursive: true });
+      fs.copyFileSync(path.resolve(leg.lib, '../../../scripts/lib/verification-contract.js'),
+        path.join(sharedScriptsLib, 'verification-contract.js'));
         const live = path.join(tmp, LIVE_REL);
         fs.mkdirSync(live, { recursive: true });
         fs.writeFileSync(path.join(live, 'README.md'), 'garbage\n');
@@ -301,9 +306,14 @@ const RED_LIVE_GATE = 'missing-implementation: the retained live gate accepts an
 function partBPreloadBoundary(leg) {
   const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'f4-preload-'));
   try {
-    const entry = path.join(tmp, 'entry');
+    const entry = path.join(tmp, 'hooks', 'scripts');
     fs.mkdirSync(path.join(entry, 'lib'), { recursive: true });
     fs.copyFileSync(path.join(leg.lib, 'doc-reconciliation-provider.js'), path.join(entry, 'lib', 'doc-reconciliation-provider.js'));
+    fs.copyFileSync(path.join(leg.lib, 'workflow-isolation.js'), path.join(entry, 'lib', 'workflow-isolation.js'));
+    const sharedScriptsLib = path.join(tmp, 'scripts', 'lib');
+    fs.mkdirSync(sharedScriptsLib, { recursive: true });
+    fs.copyFileSync(path.resolve(leg.lib, '../../../scripts/lib/verification-contract.js'),
+      path.join(sharedScriptsLib, 'verification-contract.js'));
     const probe = path.join(entry, 'probe.js');
     fs.writeFileSync(probe, [
       "const provider = require('./lib/doc-reconciliation-provider.js');",