repo-harness 0.13.0 → 0.13.2

package/AGENTS.md

@@ -71,46 +71,38 @@ bun src/cli/index.ts init --repo . --dry-run
 <!-- BEGIN ARCHITECTURE CONTRACT -->
 ## Architecture Contract
 
-- Functional block: `scripts/inspect-project-state.ts`
-- Capability ID: `workflow-engine-inspection-migration`
-- Matched prefix: `scripts/inspect-project-state.ts`
-- Architecture domain: `workflow-engine`
-- Architecture capability: `inspection-migration`
-- Architecture module: `docs/architecture/modules/workflow-engine/inspection-migration.md`
-- Last architecture event: 2026-07-03T14:07:48+0800
-- Last changed path: `scripts/inspect-project-state.ts`
-- Severity: high
-- Change type: workflow-surface
+- Functional block: `scripts/verify-sprint.sh`
+- Capability ID: `verification-evals-checks`
+- Matched prefix: `scripts/verify-sprint.sh`
+- Architecture domain: `verification`
+- Architecture capability: `evals-checks`
+- Architecture module: `docs/architecture/modules/verification/evals-checks.md`
+- Last architecture event: 2026-08-05T00:46:11+0800
+- Last changed path: `tasks/workstreams/verification/evals-checks/github-issues-158-159.md`
+- Severity: medium
+- Change type: workstream-sync
 - Module responsibility: Keep this block aligned with the local boundary described by surrounding human-owned context.
-- Entrypoints: `scripts/inspect-project-state.ts`
+- Entrypoints: `scripts/verify-sprint.sh`
 - Allowed dependencies: Follow root `AGENTS.md` / `CLAUDE.md` and this local contract.
 - Forbidden dependencies: Do not cross sibling app/service/package boundaries without an architecture snapshot or explicit plan.
-- Runtime path: `scripts/inspect-project-state.ts`
+- Runtime path: `scripts/verify-sprint.sh`
 - LSP/tooling profile: `typescript-lsp`
 - Verification: Use root required checks plus local commands recorded in this capability contract.
 - Latest snapshot: `(none yet)`
-- Semantic diagram source: `docs/architecture/modules/workflow-engine/inspection-migration.md`
+- Semantic diagram source: `docs/architecture/modules/verification/evals-checks.md`
 - Latest human diagram: `(none yet)`
 - Pending architecture request: `(none)`
 
 ## Active Workstreams
 
-- `tasks/workstreams/workflow-engine/inspection-migration/20260703-inspection-migration.md`
+- `tasks/workstreams/verification/evals-checks/github-issues-158-159.md`
   - status: completed
-  - current_slice: completed-20260703-architecture-closeout
-  - source_plan: (none)
-- `tasks/workstreams/workflow-engine/inspection-migration/20260712-inspection-migration.md`
-  - status: completed
-  - current_slice: completed-20260712-repo-owned-agent-fleet
-  - source_plan: `plans/archive/plan-20260712-2053-repo-owned-agent-fleet.md`
-- `tasks/workstreams/workflow-engine/inspection-migration/agent-fleet-specialists.md`
-  - status: completed
-  - current_slice: completed-20260713-policy-seed
-  - source_plan: `plans/archive/plan-20260712-2215-agent-fleet-specialists.md`
+  - current_slice: completed-20260805-deployed-emitter-binding
+  - source_plan: plans/plan-20260805-0001-github-issues-158-159.md
 
 ## Current Session Projection
 
-- Durable progress lives under `tasks/workstreams/workflow-engine/inspection-migration`.
+- Durable progress lives under `tasks/workstreams/verification/evals-checks`.
 - `tasks/current.md` is the tracked derived status snapshot; it is not a live lock or task source.
 - `tasks/todos.md` is the deferred-goal ledger; current execution slices stay in the active plan's `## Task Breakdown`.
 <!-- END ARCHITECTURE CONTRACT -->

package/CLAUDE.md

@@ -71,46 +71,38 @@ bun src/cli/index.ts init --repo . --dry-run
 <!-- BEGIN ARCHITECTURE CONTRACT -->
 ## Architecture Contract
 
-- Functional block: `scripts/inspect-project-state.ts`
-- Capability ID: `workflow-engine-inspection-migration`
-- Matched prefix: `scripts/inspect-project-state.ts`
-- Architecture domain: `workflow-engine`
-- Architecture capability: `inspection-migration`
-- Architecture module: `docs/architecture/modules/workflow-engine/inspection-migration.md`
-- Last architecture event: 2026-07-03T14:07:48+0800
-- Last changed path: `scripts/inspect-project-state.ts`
-- Severity: high
-- Change type: workflow-surface
+- Functional block: `scripts/verify-sprint.sh`
+- Capability ID: `verification-evals-checks`
+- Matched prefix: `scripts/verify-sprint.sh`
+- Architecture domain: `verification`
+- Architecture capability: `evals-checks`
+- Architecture module: `docs/architecture/modules/verification/evals-checks.md`
+- Last architecture event: 2026-08-05T00:46:11+0800
+- Last changed path: `tasks/workstreams/verification/evals-checks/github-issues-158-159.md`
+- Severity: medium
+- Change type: workstream-sync
 - Module responsibility: Keep this block aligned with the local boundary described by surrounding human-owned context.
-- Entrypoints: `scripts/inspect-project-state.ts`
+- Entrypoints: `scripts/verify-sprint.sh`
 - Allowed dependencies: Follow root `AGENTS.md` / `CLAUDE.md` and this local contract.
 - Forbidden dependencies: Do not cross sibling app/service/package boundaries without an architecture snapshot or explicit plan.
-- Runtime path: `scripts/inspect-project-state.ts`
+- Runtime path: `scripts/verify-sprint.sh`
 - LSP/tooling profile: `typescript-lsp`
 - Verification: Use root required checks plus local commands recorded in this capability contract.
 - Latest snapshot: `(none yet)`
-- Semantic diagram source: `docs/architecture/modules/workflow-engine/inspection-migration.md`
+- Semantic diagram source: `docs/architecture/modules/verification/evals-checks.md`
 - Latest human diagram: `(none yet)`
 - Pending architecture request: `(none)`
 
 ## Active Workstreams
 
-- `tasks/workstreams/workflow-engine/inspection-migration/20260703-inspection-migration.md`
+- `tasks/workstreams/verification/evals-checks/github-issues-158-159.md`
   - status: completed
-  - current_slice: completed-20260703-architecture-closeout
-  - source_plan: (none)
-- `tasks/workstreams/workflow-engine/inspection-migration/20260712-inspection-migration.md`
-  - status: completed
-  - current_slice: completed-20260712-repo-owned-agent-fleet
-  - source_plan: `plans/archive/plan-20260712-2053-repo-owned-agent-fleet.md`
-- `tasks/workstreams/workflow-engine/inspection-migration/agent-fleet-specialists.md`
-  - status: completed
-  - current_slice: completed-20260713-policy-seed
-  - source_plan: `plans/archive/plan-20260712-2215-agent-fleet-specialists.md`
+  - current_slice: completed-20260805-deployed-emitter-binding
+  - source_plan: plans/plan-20260805-0001-github-issues-158-159.md
 
 ## Current Session Projection
 
-- Durable progress lives under `tasks/workstreams/workflow-engine/inspection-migration`.
+- Durable progress lives under `tasks/workstreams/verification/evals-checks`.
 - `tasks/current.md` is the tracked derived status snapshot; it is not a live lock or task source.
 - `tasks/todos.md` is the deferred-goal ledger; current execution slices stay in the active plan's `## Task Breakdown`.
 <!-- END ARCHITECTURE CONTRACT -->

package/README.es.md

@@ -466,8 +466,8 @@ repositorio adopte la misma política.
 
 ## Versión actual
 
-- Paquete npm: `repo-harness@0.13.0`
-- Sello de workflow generado: `repo-harness@0.13.0+template@0.13.0`
+- Paquete npm: `repo-harness@0.13.2`
+- Sello de workflow generado: `repo-harness@0.13.2+template@0.13.2`
 - Repositorio de GitHub: `Ancienttwo/repo-harness`
 - Notas de versión e historial: [`docs/CHANGELOG.md`](docs/CHANGELOG.md)
 

package/README.fr.md

@@ -461,8 +461,8 @@ adopte la même policy.
 
 ## Release actuelle
 
-- Package npm : `repo-harness@0.13.0`
-- Generated workflow stamp : `repo-harness@0.13.0+template@0.13.0`
+- Package npm : `repo-harness@0.13.2`
+- Generated workflow stamp : `repo-harness@0.13.2+template@0.13.2`
 - Dépôt GitHub : `Ancienttwo/repo-harness`
 - Notes et historique de release : [`docs/CHANGELOG.md`](docs/CHANGELOG.md)
 

package/README.ja.md

@@ -469,8 +469,8 @@ commit script や hooks に組み込まないでください。
 
 ## 現在の Release
 
-- npm package：`repo-harness@0.13.0`
-- Generated workflow stamp：`repo-harness@0.13.0+template@0.13.0`
+- npm package：`repo-harness@0.13.2`
+- Generated workflow stamp：`repo-harness@0.13.2+template@0.13.2`
 - GitHub repository：`Ancienttwo/repo-harness`
 - Release notes and history：[`docs/CHANGELOG.md`](docs/CHANGELOG.md)
 

package/README.md

@@ -441,8 +441,8 @@ repo-harness commit scripts or hooks unless that repo adopts the same policy.
 
 ## Current Release
 
-- npm package: `repo-harness@0.13.0`
-- Generated workflow stamp: `repo-harness@0.13.0+template@0.13.0`
+- npm package: `repo-harness@0.13.2`
+- Generated workflow stamp: `repo-harness@0.13.2+template@0.13.2`
 - GitHub repository: `Ancienttwo/repo-harness`
 - Release notes and history: [`docs/CHANGELOG.md`](docs/CHANGELOG.md)
 

package/README.zh-CN.md

@@ -448,8 +448,8 @@ policy。
 
 ## 当前 Release
 
-- npm package：`repo-harness@0.13.0`
-- Generated workflow stamp：`repo-harness@0.13.0+template@0.13.0`
+- npm package：`repo-harness@0.13.2`
+- Generated workflow stamp：`repo-harness@0.13.2+template@0.13.2`
 - GitHub repository：`Ancienttwo/repo-harness`
 - Release notes 和 history：[`docs/CHANGELOG.md`](docs/CHANGELOG.md)
 

package/assets/AGENTS.md

@@ -31,27 +31,27 @@ Owns the workflow-engine-contract-assets capability boundary declared in .ai/con
 <!-- BEGIN ARCHITECTURE CONTRACT -->
 ## Architecture Contract
 
-- Functional block: `.ai/harness/policy.json`
+- Functional block: `assets/templates`
 - Capability ID: `workflow-engine-contract-assets`
-- Matched prefix: `.ai/harness/policy.json`
+- Matched prefix: `assets/templates`
 - Architecture domain: `workflow-engine`
 - Architecture capability: `contract-assets`
 - Architecture module: `docs/architecture/modules/workflow-engine/contract-assets.md`
-- Last architecture event: 2026-07-30T20:51:16+0800
-- Last changed path: `.ai/harness/policy.json`
-- Severity: high
-- Change type: workflow-surface
+- Last architecture event: 2026-08-05T00:46:13+0800
+- Last changed path: `tasks/workstreams/workflow-engine/contract-assets/github-issues-158-159.md`
+- Severity: medium
+- Change type: workstream-sync
 - Module responsibility: Keep this block aligned with the local boundary described by surrounding human-owned context.
-- Entrypoints: `.ai/harness/policy.json`
+- Entrypoints: `assets/templates`
 - Allowed dependencies: Follow root `AGENTS.md` / `CLAUDE.md` and this local contract.
 - Forbidden dependencies: Do not cross sibling app/service/package boundaries without an architecture snapshot or explicit plan.
-- Runtime path: `.ai/harness/policy.json`
+- Runtime path: `assets/templates`
 - LSP/tooling profile: `typescript-lsp`
 - Verification: Use root required checks plus local commands recorded in this capability contract.
 - Latest snapshot: `(none yet)`
 - Semantic diagram source: `docs/architecture/modules/workflow-engine/contract-assets.md`
 - Latest human diagram: `(none yet)`
-- Pending architecture request: `docs/architecture/requests/workflow-engine-contract-assets.md`
+- Pending architecture request: `(none)`
 
 ## Active Workstreams
 
@@ -71,6 +71,10 @@ Owns the workflow-engine-contract-assets capability boundary declared in .ai/con
   - status: completed
   - current_slice: completed-20260529-cleanup-script-policy
   - source_plan: (none)
+- `tasks/workstreams/workflow-engine/contract-assets/github-issues-158-159.md`
+  - status: completed
+  - current_slice: completed-20260805-packaged-helper-projection
+  - source_plan: plans/plan-20260805-0001-github-issues-158-159.md
 
 ## Current Session Projection
 

package/assets/CLAUDE.md

@@ -31,27 +31,27 @@ Owns the workflow-engine-contract-assets capability boundary declared in .ai/con
 <!-- BEGIN ARCHITECTURE CONTRACT -->
 ## Architecture Contract
 
-- Functional block: `.ai/harness/policy.json`
+- Functional block: `assets/templates`
 - Capability ID: `workflow-engine-contract-assets`
-- Matched prefix: `.ai/harness/policy.json`
+- Matched prefix: `assets/templates`
 - Architecture domain: `workflow-engine`
 - Architecture capability: `contract-assets`
 - Architecture module: `docs/architecture/modules/workflow-engine/contract-assets.md`
-- Last architecture event: 2026-07-30T20:51:16+0800
-- Last changed path: `.ai/harness/policy.json`
-- Severity: high
-- Change type: workflow-surface
+- Last architecture event: 2026-08-05T00:46:13+0800
+- Last changed path: `tasks/workstreams/workflow-engine/contract-assets/github-issues-158-159.md`
+- Severity: medium
+- Change type: workstream-sync
 - Module responsibility: Keep this block aligned with the local boundary described by surrounding human-owned context.
-- Entrypoints: `.ai/harness/policy.json`
+- Entrypoints: `assets/templates`
 - Allowed dependencies: Follow root `AGENTS.md` / `CLAUDE.md` and this local contract.
 - Forbidden dependencies: Do not cross sibling app/service/package boundaries without an architecture snapshot or explicit plan.
-- Runtime path: `.ai/harness/policy.json`
+- Runtime path: `assets/templates`
 - LSP/tooling profile: `typescript-lsp`
 - Verification: Use root required checks plus local commands recorded in this capability contract.
 - Latest snapshot: `(none yet)`
 - Semantic diagram source: `docs/architecture/modules/workflow-engine/contract-assets.md`
 - Latest human diagram: `(none yet)`
-- Pending architecture request: `docs/architecture/requests/workflow-engine-contract-assets.md`
+- Pending architecture request: `(none)`
 
 ## Active Workstreams
 
@@ -71,6 +71,10 @@ Owns the workflow-engine-contract-assets capability boundary declared in .ai/con
   - status: completed
   - current_slice: completed-20260529-cleanup-script-policy
   - source_plan: (none)
+- `tasks/workstreams/workflow-engine/contract-assets/github-issues-158-159.md`
+  - status: completed
+  - current_slice: completed-20260805-packaged-helper-projection
+  - source_plan: plans/plan-20260805-0001-github-issues-158-159.md
 
 ## Current Session Projection
 

package/assets/hooks/AGENTS.md

@@ -49,10 +49,10 @@ Owns the runtime-harness-hook-adapters capability boundary declared in .ai/conte
 - Architecture domain: `runtime-harness`
 - Architecture capability: `hook-adapters`
 - Architecture module: `docs/architecture/modules/runtime-harness/hook-adapters.md`
-- Last architecture event: 2026-07-21T21:39:22+0800
-- Last changed path: `src/cli/hook/prompt-intents.ts`
-- Severity: high
-- Change type: workflow-surface
+- Last architecture event: 2026-08-05T00:46:12+0800
+- Last changed path: `tasks/workstreams/runtime-harness/hook-adapters/github-issues-158-159.md`
+- Severity: medium
+- Change type: workstream-sync
 - Module responsibility: Keep this block aligned with the local boundary described by surrounding human-owned context.
 - Entrypoints: `src/cli/hook`
 - Allowed dependencies: Follow root `AGENTS.md` / `CLAUDE.md` and this local contract.
@@ -67,7 +67,10 @@ Owns the runtime-harness-hook-adapters capability boundary declared in .ai/conte
 
 ## Active Workstreams
 
-- (none yet)
+- `tasks/workstreams/runtime-harness/hook-adapters/github-issues-158-159.md`
+  - status: completed
+  - current_slice: completed-20260805-contract-scoped-check-repair
+  - source_plan: plans/plan-20260805-0001-github-issues-158-159.md
 
 ## Current Session Projection
 

package/assets/hooks/CLAUDE.md

@@ -49,10 +49,10 @@ Owns the runtime-harness-hook-adapters capability boundary declared in .ai/conte
 - Architecture domain: `runtime-harness`
 - Architecture capability: `hook-adapters`
 - Architecture module: `docs/architecture/modules/runtime-harness/hook-adapters.md`
-- Last architecture event: 2026-07-21T21:39:22+0800
-- Last changed path: `src/cli/hook/prompt-intents.ts`
-- Severity: high
-- Change type: workflow-surface
+- Last architecture event: 2026-08-05T00:46:12+0800
+- Last changed path: `tasks/workstreams/runtime-harness/hook-adapters/github-issues-158-159.md`
+- Severity: medium
+- Change type: workstream-sync
 - Module responsibility: Keep this block aligned with the local boundary described by surrounding human-owned context.
 - Entrypoints: `src/cli/hook`
 - Allowed dependencies: Follow root `AGENTS.md` / `CLAUDE.md` and this local contract.
@@ -67,7 +67,10 @@ Owns the runtime-harness-hook-adapters capability boundary declared in .ai/conte
 
 ## Active Workstreams
 
-- (none yet)
+- `tasks/workstreams/runtime-harness/hook-adapters/github-issues-158-159.md`
+  - status: completed
+  - current_slice: completed-20260805-contract-scoped-check-repair
+  - source_plan: plans/plan-20260805-0001-github-issues-158-159.md
 
 ## Current Session Projection
 

package/assets/skill-version.json

@@ -1,6 +1,6 @@
 {
-  "version": "0.13.0",
-  "templateVersion": "0.13.0",
+  "version": "0.13.2",
+  "templateVersion": "0.13.2",
   "skillName": "repo-harness",
   "contractId": "tasks-first-harness-v1",
   "compatibility": {

package/assets/templates/helpers/verify-contract.sh

@@ -2,7 +2,7 @@
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-VERIFICATION_BUDGET_MS=600000
+VERIFICATION_BUDGET_MS=1200000
 
 # Delegate evidence_requirements parsing to the one shared lib function
 # (workflow_contract_evidence_requirement) instead of re-implementing a second
@@ -521,6 +521,38 @@ is_evidence_producer_command() {
   return 1
 }
 
+# Bounded runner logs live in the round's mktemp dir, which the EXIT trap
+# destroys, so a failing criterion leaves only its exit_code in the report and
+# nothing that names WHICH test or command failed. Retain the log of a failing
+# criterion next to the run snapshot that shares this round's run id. Passing
+# criteria retain nothing: green rounds would otherwise fill runs/ with
+# multi-MB logs nobody reads.
+FAILURE_LOG_DIR=".ai/harness/runs"
+
+# Deterministic, filesystem-safe slug for a criterion (a test path or a whole
+# shell command), bounded in length so a long command line cannot produce an
+# unusable filename.
+criterion_slug() {
+  local slug
+  slug="$(printf '%s' "$1" | tr -C 'A-Za-z0-9._-' '-' | sed -E 's/-+/-/g; s/^-//; s/-$//')"
+  slug="${slug:-criterion}"
+  printf '%s' "${slug:0:80}"
+}
+
+# Diagnostic only: a retention failure is reported but never changes the
+# round's verdict, since losing a log must not turn a passing round red.
+retain_failure_log() {
+  local log_path="$1" criterion="$2" retained
+
+  [[ -f "$log_path" ]] || return 0
+  retained="$FAILURE_LOG_DIR/${run_id}-$(criterion_slug "$criterion").log"
+  if ! mkdir -p "$FAILURE_LOG_DIR" 2>/dev/null || ! cp "$log_path" "$retained" 2>/dev/null; then
+    echo "[ContractVerify] WARN: could not retain failure log for: $criterion" >&2
+    return 0
+  fi
+  log_check "LOG" "retained failure log: $retained"
+}
+
 run_bounded() {
   local log_path="$1" result_path="$2"
   shift 2
@@ -950,6 +982,7 @@ if ((${#tests_pass[@]})); then
       record_timed_result "tests_pass" "$path" true "tests_pass: $path (${bounded_duration}ms)" "$bounded_duration" false 0 "$bounded_signal"
     else
       record_timed_result "tests_pass" "$path" false "tests_pass: $path (${bounded_duration}ms, exit=$bounded_exit)" "$bounded_duration" "$bounded_timed_out" "$bounded_exit" "$bounded_signal"
+      retain_failure_log "$log_path" "$path"
     fi
     test_index=$((test_index + 1))
     if [[ "$bounded_timed_out" == "true" ]]; then
@@ -987,6 +1020,7 @@ if ((${#commands_succeed[@]})) && [[ "$verification_budget_exhausted" -eq 0 ]];
       record_timed_result "commands_succeed" "$cmd" true "commands_succeed: $cmd (${bounded_duration}ms)" "$bounded_duration" false 0 "$bounded_signal"
     else
       record_timed_result "commands_succeed" "$cmd" false "commands_succeed: $cmd (${bounded_duration}ms, exit=$bounded_exit)" "$bounded_duration" "$bounded_timed_out" "$bounded_exit" "$bounded_signal"
+      retain_failure_log "$log_path" "$cmd"
     fi
     command_index=$((command_index + 1))
     if [[ "$bounded_timed_out" == "true" ]]; then

package/assets/templates/helpers/verify-sprint.sh

@@ -424,24 +424,24 @@ allowed_paths_check_json() {
 # the ledger yet, so skipping emission here satisfies nothing and changes no
 # verify-run semantics.
 #
-# Companion-script resolution mirrors the existing $helper_dir/acceptance-receipt.ts
-# sibling lookup (both are deployed side-by-side by the same helper-sync
-# mechanism); REPO_HARNESS_SOURCE_ROOT is the same source-authority fallback
-# workflow_source_authority_call already uses below for hook-CLI resolution,
-# reused here rather than inventing a second mechanism. A deployed-helper
-# context (e.g. an adopted repo, or these fixture-based helper tests) has no
-# src/ tree at all, so when neither resolves this is indistinguishable from
-# "cannot bind" -- treated the same way (skip, do not fail).
+# The package runner executes this helper from assets/templates/helpers while
+# the authoritative emitter ships under scripts/. Direct source-helper runs
+# already find the emitter as a sibling. REPO_HARNESS_SOURCE_ROOT remains the
+# explicit source-checkout override used by the other source-authority calls.
+# When none resolves, emission still fails closed as "cannot bind".
 emit_verify_evidence() {
   local command_line="$1"
   local run_trace_file="$2"
   local status="${3:-pass}"
   local emit_script="$helper_dir/emit-verify-evidence.ts"
+  local package_emit_script="$helper_dir/../../../scripts/emit-verify-evidence.ts"
   if [[ ! -f "$emit_script" ]]; then
-    if [[ -n "${REPO_HARNESS_SOURCE_ROOT:-}" && -f "${REPO_HARNESS_SOURCE_ROOT}/scripts/emit-verify-evidence.ts" ]]; then
+    if [[ -f "$package_emit_script" ]]; then
+      emit_script="$package_emit_script"
+    elif [[ -n "${REPO_HARNESS_SOURCE_ROOT:-}" && -f "${REPO_HARNESS_SOURCE_ROOT}/scripts/emit-verify-evidence.ts" ]]; then
       emit_script="${REPO_HARNESS_SOURCE_ROOT}/scripts/emit-verify-evidence.ts"
     else
-      echo "verify-sprint: evidence emission cannot bind: no $helper_dir/emit-verify-evidence.ts and no usable REPO_HARNESS_SOURCE_ROOT fallback in this deployed-helper context; skipping emission, verify result unchanged" >&2
+      echo "verify-sprint: evidence emission cannot bind: no $helper_dir/emit-verify-evidence.ts, no $package_emit_script, and no usable REPO_HARNESS_SOURCE_ROOT override; skipping emission, verify result unchanged" >&2
       return 3
     fi
   fi