skill-family-harness-node 0.8.3 → 0.8.4

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+<!-- release-skill:changelog:start version=0.8.4 locale=en baseline=sha256:dfb053d7719d3c7cb5b7d8dbe7a2349597696614651ef4ae04451c34cd7bbc02 -->
+## [0.8.4] - 2026-08-24
+
+Lockstep Foundation 0.8.4 version update with no new Harness mechanism or public API.
+
+### Changed
+
+- Moves the package version to 0.8.4 together with Contracts and Engineering Kit.
+- Keeps all 21 Harness capabilities and public exports unchanged; source-authority receipt validation belongs to Contracts.
+
+### Upgrade Notes
+
+Consumers must pin all three Foundation packages to exactly 0.8.4. No Harness API migration is required.
+<!-- release-skill:changelog:end version=0.8.4 locale=en -->
+
+
 <!-- release-skill:changelog:start version=0.8.3 locale=en baseline=sha256:449943bedf3698888fec4dcb09a0460f337b9406d5258946a3d3ffcd23143b8d -->
 ## [0.8.3] - 2026-08-23
 

package/CHANGELOG.zh-CN.md

@@ -1,5 +1,21 @@
 # 变更日志
 
+<!-- release-skill:changelog:start version=0.8.4 locale=zh-CN baseline=sha256:e8d7be87a26ef296ee4ae27e2325ac8ff1dc33fc69e5f4a65520656f9860bb91 -->
+## [0.8.4] - 2026-08-24
+
+随 Foundation 0.8.4 锁步升版；Harness 不新增机制或公共 API。
+
+### 变更
+
+- 包版本与 Contracts、Engineering Kit 一同升至 0.8.4。
+- 21 项 Harness 能力与公共导出保持不变；source-authority receipt 校验归 Contracts。
+
+### 升级说明
+
+消费者必须把三个 Foundation 包精确锁定到 0.8.4；Harness API 无需迁移。
+<!-- release-skill:changelog:end version=0.8.4 locale=zh-CN -->
+
+
 <!-- release-skill:changelog:start version=0.8.3 locale=zh-CN baseline=sha256:b84695a286aca7c1a9f90844f8682cde07d32276cebc11583568bc5ef11753fc -->
 ## [0.8.3] - 2026-08-23
 

package/README.md

@@ -4,28 +4,23 @@
 
 # skill-family-harness-node
 
-<!-- release-skill:release-version: 0.8.3 -->
+<!-- release-skill:release-version: 0.8.4 -->
 
 The **single default Node implementation** of the Contracts mechanism protocol. This is a thin runtime: it only implements the mechanism protocol, introduces no business semantics, and does not provide a second-language implementation.
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.8.3** (2026-08-23)
+**0.8.4** (2026-08-24)
 
-Path containment now tolerates one exact anchor-removal race while preserving fail-closed escape checks.
+Lockstep Foundation 0.8.4 version update with no new Harness mechanism or public API.
 
 **Changed**
 
-- A second ENOENT and every non-ENOENT failure remain closed; symlink swaps, out-of-root targets, and all existing containment checks remain rejected.
-- Keeps the hook private to the paths module test surface and adds no public export, general retry policy, lock layer, ledger, or runner.
-- Moves the package version to 0.8.3 together with Contracts and Engineering Kit.
-
-**Fixed**
-
-- When realpath of the selected existing anchor fails with ENOENT because another process removed it, resolveContained recomputes the deepest existing ancestor exactly once.
+- Moves the package version to 0.8.4 together with Contracts and Engineering Kit.
+- Keeps all 21 Harness capabilities and public exports unchanged; source-authority receipt validation belongs to Contracts.
 
 **Upgrade Notes**
 
-Consumers must pin all three Foundation packages to exactly 0.8.3. Concurrent lock acquisition can now survive the current owner removing the selected lock-file anchor; no Harness API migration is required.
+Consumers must pin all three Foundation packages to exactly 0.8.4. No Harness API migration is required.
 <!-- release-skill:managed:end id=latest-release -->
 
 ## Problem It Solves
@@ -39,14 +34,14 @@ The Harness consumes `skill-family-contracts` (a workspace dependency), reusing
 ## Installation and Minimal Example
 
 ```sh
-npm install skill-family-harness-node@0.8.3
+npm install skill-family-harness-node@0.8.4
 npm info skill-family-harness-node --help
 ```
 
 The minimal example shows validating a contract document inside Node:
 
 ```js
-// Run from an empty directory: npm install skill-family-harness-node@0.8.3
+// Run from an empty directory: npm install skill-family-harness-node@0.8.4
 import { validateContractDocument } from "skill-family-harness-node";
 
 const document = {

package/README.zh-CN.md

@@ -5,28 +5,23 @@
 
 # skill-family-harness-node
 
-<!-- release-skill:release-version: 0.8.3 -->
+<!-- release-skill:release-version: 0.8.4 -->
 
 Contracts 机制协议的**唯一默认 Node 实现**。这是一个薄运行时（thin runtime）：只实现机制协议，不引入业务语义，不做第二语言实现。
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.8.3** (2026-08-23)
+**0.8.4** (2026-08-24)
 
-路径收容现在可处理一次精确的锚点并发删除，同时保持越界检查失败关闭。
+随 Foundation 0.8.4 锁步升版；Harness 不新增机制或公共 API。
 
 **变更**
 
-- 第二次 ENOENT 与所有非 ENOENT 错误仍失败关闭；符号链接替换、根目录外目标和既有收容检查仍全部拒绝。
-- 测试钩子只留在 paths 模块的测试表面，不新增公共导出、通用重试策略、锁层、账本或 runner。
-- 包版本与 Contracts、Engineering Kit 一同升至 0.8.3。
-
-**修复**
-
-- 当另一进程删除已选锚点，导致该锚点的 realpath 返回 ENOENT 时，resolveContained 仅重新计算一次最深既存祖先。
+- 包版本与 Contracts、Engineering Kit 一同升至 0.8.4。
+- 21 项 Harness 能力与公共导出保持不变；source-authority receipt 校验归 Contracts。
 
 **升级说明**
 
-消费者必须把三个 Foundation 包精确锁定到 0.8.3。并发获取锁时，即使当前持有者删除已选锁文件锚点，也能完成一次安全重求；Harness API 无需迁移。
+消费者必须把三个 Foundation 包精确锁定到 0.8.4；Harness API 无需迁移。
 <!-- release-skill:managed:end id=latest-release -->
 
 ## 解决的问题
@@ -40,14 +35,14 @@ Harness 消费 `skill-family-contracts`（工作区依赖），复用其方言
 ## 安装和最小示例
 
 ```sh
-npm install skill-family-harness-node@0.8.3
+npm install skill-family-harness-node@0.8.4
 npm info skill-family-harness-node --help
 ```
 
 最小示例演示在 Node 内校验一份契约文档：
 
 ```js
-// 从空目录运行：npm install skill-family-harness-node@0.8.3
+// 从空目录运行：npm install skill-family-harness-node@0.8.4
 import { validateContractDocument } from "skill-family-harness-node";
 
 const document = {

package/package.json

@@ -10,7 +10,7 @@
   "dependencies": {
     "@pnpm/lockfile.fs": "1001.1.35",
     "ipaddr.js": "2.5.0",
-    "skill-family-contracts": "0.8.3",
+    "skill-family-contracts": "0.8.4",
     "yaml": "2.9.0"
   },
   "description": "Thin Node.js mechanism runtime for Skill Family engineering contracts.",
@@ -45,7 +45,7 @@
     "url": "https://github.com/ifoohoo/skill-family-harness-node.git"
   },
   "type": "module",
-  "version": "0.8.3",
+  "version": "0.8.4",
   "scripts": {
     "check": "node --test",
     "test": "node --test"

package/release-notes/0.8.4.yaml

@@ -0,0 +1,17 @@
+version: 0.8.4
+date: 2026-08-24
+locales:
+  en:
+    summary: Lockstep Foundation 0.8.4 version update with no new Harness mechanism or public API.
+    changes:
+      changed:
+        - Moves the package version to 0.8.4 together with Contracts and Engineering Kit.
+        - Keeps all 21 Harness capabilities and public exports unchanged; source-authority receipt validation belongs to Contracts.
+    upgradeNotes: Consumers must pin all three Foundation packages to exactly 0.8.4. No Harness API migration is required.
+  zh-CN:
+    summary: 随 Foundation 0.8.4 锁步升版；Harness 不新增机制或公共 API。
+    changes:
+      changed:
+        - 包版本与 Contracts、Engineering Kit 一同升至 0.8.4。
+        - 21 项 Harness 能力与公共导出保持不变；source-authority receipt 校验归 Contracts。
+    upgradeNotes: 消费者必须把三个 Foundation 包精确锁定到 0.8.4；Harness API 无需迁移。