zob-harness 0.2.0 → 0.3.1

package/.pi/extensions/zob-harness/src/{launch-apply.ts → domains/governance/launch-apply.ts}

@@ -1,7 +1,7 @@
-import { DEFAULT_RULES } from "./constants.js";
-import { sha256 } from "./utils/hashing.js";
-import { pathMatches, resolveRepoPath, safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { pathMatches, resolveRepoPath, safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export type WorkerPoolLaneKind = "context" | "factory" | "implement" | "qa" | "oracle";
 export type ApplyGateStatus = "eligible_not_applied" | "blocked";

package/.pi/extensions/zob-harness/src/{merge-queue.ts → domains/governance/merge-queue.ts}

@@ -1,12 +1,12 @@
 import { appendFileSync, mkdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { DEFAULT_RULES } from "./constants.js";
-import type { TeamDefinition } from "./types.js";
-import { sha256 } from "./utils/hashing.js";
-import { readJsonl } from "./utils/json.js";
-import { pathMatches, resolveRepoPath, safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
+import type { TeamDefinition } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { readJsonl } from "../../core/utils/json.js";
+import { pathMatches, resolveRepoPath, safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export type MergeCandidatePriority = "low" | "normal" | "high" | "critical";
 export type MergeCandidateRisk = "low" | "medium" | "high";

package/.pi/extensions/zob-harness/src/{rules.ts → domains/governance/rules.ts}

@@ -1,9 +1,9 @@
 import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { basename, join } from "node:path";
 
-import type { ModeName, RuleEnforcementLevel, RuleOracleRequirement, RulePack, RuleResolution, RuleResolverInput } from "./types.js";
-import { pathMatches, safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import type { ModeName, RuleEnforcementLevel, RuleOracleRequirement, RulePack, RuleResolution, RuleResolverInput } from "../../types.js";
+import { pathMatches, safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 const RULE_PACK_SCHEMA = "zob.rule-pack.v1";
 const RULE_RESOLUTION_SCHEMA = "zob.rule-resolution.v1";
@@ -12,11 +12,11 @@ const MODE_NAMES = new Set<ModeName>(["explore", "plan", "implement", "oracle",
 const ENFORCEMENT_LEVELS = new Set<RuleEnforcementLevel>(["advisory", "warn", "preflight_fail", "block", "no_ship", "human_approval"]);
 
 const PROFILE_PATHS: Array<{ profile: string; patterns: string[] }> = [
-  { profile: "factory-engineer", patterns: [".pi/extensions/zob-harness/src/factory/**", ".pi/factories/**", "reports/factory-runs/**"] },
-  { profile: "orchestration-engineer", patterns: [".pi/extensions/zob-harness/src/orchestration/**", ".pi/extensions/zob-harness/src/topology/**", ".pi/teams/**", ".pi/orchestrations/**", "reports/orchestrations/**"] },
+  { profile: "factory-engineer", patterns: [".pi/extensions/zob-harness/src/domains/factory/**", ".pi/factories/**", "reports/factory-runs/**"] },
+  { profile: "orchestration-engineer", patterns: [".pi/extensions/zob-harness/src/domains/orchestration/**", ".pi/extensions/zob-harness/src/domains/topology/**", ".pi/teams/**", ".pi/orchestrations/**", "reports/orchestrations/**"] },
   { profile: "prompt-ops", patterns: [".pi/agents/**", ".pi/prompts/**", ".pi/skills/**", ".pi/output-contracts/**", ".pi/chains/**"] },
-  { profile: "sandbox-engineer", patterns: ["reports/sandbox-runs/**", ".pi/extensions/zob-harness/src/safety.ts", ".pi/extensions/zob-harness/src/child-runner.ts"] },
-  { profile: "runtime-maintainer", patterns: [".pi/extensions/zob-harness/index.ts", ".pi/extensions/zob-harness/src/runtime/**", ".pi/extensions/zob-harness/src/schemas.ts", ".pi/extensions/zob-harness/src/types.ts", ".pi/extensions/zob-harness/src/rules.ts"] },
+  { profile: "sandbox-engineer", patterns: ["reports/sandbox-runs/**", ".pi/extensions/zob-harness/src/domains/governance/safety.ts", ".pi/extensions/zob-harness/src/domains/delegation/child-runner.ts"] },
+  { profile: "runtime-maintainer", patterns: [".pi/extensions/zob-harness/index.ts", ".pi/extensions/zob-harness/src/runtime/**", ".pi/extensions/zob-harness/src/runtime/schemas.ts", ".pi/extensions/zob-harness/src/types.ts", ".pi/extensions/zob-harness/src/domains/governance/rules.ts"] },
   { profile: "docs-maintainer", patterns: ["docs/**", "README.md", "AGENTS.md"] },
 ];
 

package/.pi/extensions/zob-harness/src/{safety.ts → domains/governance/safety.ts}

@@ -2,9 +2,9 @@ import { existsSync, readFileSync } from "node:fs";
 import { join, resolve } from "node:path";
 import { getAgentDir } from "@earendil-works/pi-coding-agent";
 
-import { DEFAULT_RULES } from "./constants.js";
-import type { BudgetSidecar, DamageRules, HarnessAgent } from "./types.js";
-import { expandHome, pathMatches } from "./utils/paths.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
+import type { BudgetSidecar, DamageRules, HarnessAgent } from "../../types.js";
+import { expandHome, pathMatches } from "../../core/utils/paths.js";
 
 function loadDamageRules(cwd: string): DamageRules {
   const candidates = [join(cwd, ".pi", "damage-control-rules.json"), join(getAgentDir(), "damage-control-rules.json")];

package/.pi/extensions/zob-harness/src/{sandbox.ts → domains/governance/sandbox.ts}

@@ -1,12 +1,12 @@
 import { appendFileSync, existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 
-import { DEFAULT_RULES } from "./constants.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
 import { createDiffGateResult, createRollbackMetadata, createSandboxMetadata, validateRuntimeWritePolicy } from "./safety.js";
-import { sha256 } from "./utils/hashing.js";
-import { parseJsonFile } from "./utils/json.js";
-import { pathMatches, resolveRepoPath, safeFileStem, safeRunId } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { parseJsonFile } from "../../core/utils/json.js";
+import { pathMatches, resolveRepoPath, safeFileStem, safeRunId } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export type SandboxWriteAction = "create" | "update";
 

package/.pi/extensions/zob-harness/src/{worker-pool.ts → domains/governance/worker-pool.ts}

@@ -1,13 +1,13 @@
 import { appendFileSync, existsSync, mkdirSync } from "node:fs";
 import { join } from "node:path";
 
-import { DEFAULT_RULES } from "./constants.js";
-import { appendGoalRoomMessage } from "./goal-room.js";
-import type { TeamDefinition } from "./types.js";
-import { sha256 } from "./utils/hashing.js";
-import { readJsonl } from "./utils/json.js";
-import { newRunId, pathMatches, resolveRepoPath, safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
+import { appendGoalRoomMessage } from "../goal/goal-room.js";
+import type { TeamDefinition } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { readJsonl } from "../../core/utils/json.js";
+import { newRunId, pathMatches, resolveRepoPath, safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 import { listWorkspaceClaims, type WorkspaceClaimRecord } from "./workspace-claims.js";
 
 export type WorkerPoolCommunicationPolicyMode = "goal_room_only" | "goal_room_with_optional_live";

package/.pi/extensions/zob-harness/src/{workspace-claims.ts → domains/governance/workspace-claims.ts}

@@ -1,12 +1,12 @@
 import { appendFileSync, mkdirSync } from "node:fs";
 import { join } from "node:path";
 
-import { DEFAULT_RULES } from "./constants.js";
-import type { TeamDefinition } from "./types.js";
-import { sha256 } from "./utils/hashing.js";
-import { readJsonl } from "./utils/json.js";
-import { pathMatches, resolveRepoPath, safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
+import type { TeamDefinition } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { readJsonl } from "../../core/utils/json.js";
+import { pathMatches, resolveRepoPath, safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export type WorkspaceClaimMode = "read" | "write";
 export type WorkspaceClaimStatus = "active" | "blocked_conflict";

package/.pi/extensions/zob-harness/src/domains/models/AGENTS.md

@@ -0,0 +1,20 @@
+# Models domain guardrail
+
+## Scope
+
+- Model routing, model availability validation, model catalog/economy helpers.
+
+## MUST DO
+
+- Preserve explicit model override validation and configured/runtime availability distinctions.
+- Keep budget and routing decisions evidence-backed.
+
+## MUST NOT
+
+- Do not treat desired/configured/catalogued models as runtime availability proof.
+- Do not import from `index.ts` or `index.js`.
+
+## Validation
+
+- `npm run check -- --pretty false`.
+- Run model catalog validation scripts when model policy files or helpers move.

package/.pi/extensions/zob-harness/src/{model-availability.ts → domains/models/model-availability.ts}

@@ -1,7 +1,7 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { isRecord } from "./utils/records.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export type ExplicitModelOverrideValidation = {
   ok: boolean;

package/.pi/extensions/zob-harness/src/{model-routing.ts → domains/models/model-routing.ts}

@@ -1,12 +1,12 @@
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { evaluateBudgetPreflightDryRun } from "./chronicle.js";
-import type { BudgetPreflightDryRunCaps, FactoryRunModelRoutingInput, ModeName } from "./types.js";
-import { sha256 } from "./utils/hashing.js";
-import { parseJsonFile } from "./utils/json.js";
-import { safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { evaluateBudgetPreflightDryRun } from "../telemetry/chronicle.js";
+import type { BudgetPreflightDryRunCaps, FactoryRunModelRoutingInput, ModeName } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { parseJsonFile } from "../../core/utils/json.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export type ModelRiskLevel = "low" | "medium" | "high";
 export type ModelClass = "cheap_scout" | "balanced_worker" | "strong_reasoning" | "strong_oracle" | "high_context";

package/.pi/extensions/zob-harness/src/domains/orchestration/AGENTS.md

@@ -0,0 +1,21 @@
+# Orchestration domain compatibility guardrail
+
+## Scope
+
+- Future home for orchestration domain files and compatibility wrappers around `src/orchestration/**`.
+- Existing `src/orchestration/AGENTS.md` remains authoritative for current internals until moved.
+
+## MUST DO
+
+- Preserve plan-only/read-only supervised semantics, parent-owned dispatch, room artifact names, and no child-spawns-child policy.
+
+## MUST NOT
+
+- Do not make plan-only flows produce completion sentinels.
+- Do not launch live children from supervised_readonly by moving code.
+- Do not import from `index.ts` or `index.js`.
+
+## Validation
+
+- `npm run check -- --pretty false`.
+- `npm run smoke:harness` after orchestration moves.

package/.pi/extensions/zob-harness/src/{orchestration → domains/orchestration}/adaptive-delegation.ts

@@ -1,10 +1,10 @@
 import { existsSync } from "node:fs";
 import { join } from "node:path";
 
-import { discoverAgents } from "../agents.js";
-import { DEFAULT_RULES, SUPERVISED_READONLY_CHILD_TOOLS } from "../constants.js";
-import { validateOutputContractId } from "../output-contracts.js";
-import { validateAllowedPathPolicy } from "../safety.js";
+import { discoverAgents } from "../delegation/agents.js";
+import { DEFAULT_RULES, SUPERVISED_READONLY_CHILD_TOOLS } from "../../core/constants.js";
+import { validateOutputContractId } from "../delegation/output-contracts.js";
+import { validateAllowedPathPolicy } from "../governance/safety.js";
 import type {
   AdaptiveDelegationGovernorState,
   AdaptiveDelegationPolicy,
@@ -17,10 +17,10 @@ import type {
   DelegationScore,
   GovernorDecision,
   ParentDispatchContract,
-} from "../types.js";
-import { sha256 } from "../utils/hashing.js";
-import { pathMatches } from "../utils/paths.js";
-import { isRecord } from "../utils/records.js";
+} from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { pathMatches } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 const ADAPTIVE_DELEGATION_SCHEMA = "zob.adaptive-delegation-policy.v1" as const;
 const GOVERNOR_STATE_SCHEMA = "zob.adaptive-delegation-governor-state.v1" as const;

package/.pi/extensions/zob-harness/src/{orchestration → domains/orchestration}/adaptive-workflow.ts

@@ -1,10 +1,10 @@
 import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 
-import type { AdaptiveDelegationPolicy, OrchestrateExecutionMode, OrchestrateRunInput, OrchestrationProfileDefinition, TeamDefinition, TeamRoleBase, TeamLead, TeamWorker } from "../types.js";
-import { sha256 } from "../utils/hashing.js";
-import { safeFileStem } from "../utils/paths.js";
-import { isRecord } from "../utils/records.js";
+import type { AdaptiveDelegationPolicy, OrchestrateExecutionMode, OrchestrateRunInput, OrchestrationProfileDefinition, TeamDefinition, TeamRoleBase, TeamLead, TeamWorker } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 const BODY_FREE_SCHEMA_VERSION = "v1";
 const GUIDANCE_SCAN_LIMIT = 200;

package/.pi/extensions/zob-harness/src/{orchestration → domains/orchestration}/lead-plan.ts

@@ -1,8 +1,8 @@
-import { loadProjectAgents } from "../agents.js";
-import { validateOutputContractId } from "../output-contracts.js";
-import { validateAllowedPathPolicy, validateDelegateTaskWriteScope, validateForbiddenPathPolicy, validateToolList } from "../safety.js";
-import { sha256 } from "../utils/hashing.js";
-import { isRecord } from "../utils/records.js";
+import { loadProjectAgents } from "../delegation/agents.js";
+import { validateOutputContractId } from "../delegation/output-contracts.js";
+import { validateAllowedPathPolicy, validateDelegateTaskWriteScope, validateForbiddenPathPolicy, validateToolList } from "../governance/safety.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export interface LeadPlanWorkerContract {
   worker_id: string;

package/.pi/extensions/zob-harness/src/{orchestration → domains/orchestration}/plan.ts

@@ -1,9 +1,9 @@
-import { SUPERVISED_READONLY_CHILD_TOOLS, SUPERVISED_SMOKE_CHILD_TOOLS } from "../constants.js";
-import type { OrchestrateExecutionMode, OrchestrateRunInput, TeamDefinition } from "../types.js";
+import { SUPERVISED_READONLY_CHILD_TOOLS, SUPERVISED_SMOKE_CHILD_TOOLS } from "../../core/constants.js";
+import type { OrchestrateExecutionMode, OrchestrateRunInput, TeamDefinition } from "../../types.js";
 import { normalizeAdaptiveDelegationPolicy } from "./adaptive-delegation.js";
-import { sha256 } from "../utils/hashing.js";
-import { safeFileStem } from "../utils/paths.js";
-import { isRecord } from "../utils/records.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 function renderOrchestrationTemplate(template: string, values: Record<string, string>): string {
   return template.replace(/\{([a-zA-Z0-9_.-]+)\}/g, (match, key: string) => values[key] ?? match);

package/.pi/extensions/zob-harness/src/{orchestration → domains/orchestration}/room.ts

@@ -1,10 +1,10 @@
 import { appendFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { SUPERVISED_READONLY_CHILD_TOOLS, SUPERVISED_SMOKE_CHILD_TOOLS } from "../constants.js";
-import type { OrchestrateExecutionMode, TeamDefinition } from "../types.js";
-import { sha256 } from "../utils/hashing.js";
-import { isRecord } from "../utils/records.js";
+import { SUPERVISED_READONLY_CHILD_TOOLS, SUPERVISED_SMOKE_CHILD_TOOLS } from "../../core/constants.js";
+import type { OrchestrateExecutionMode, TeamDefinition } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { isRecord } from "../../core/utils/records.js";
 
 function orchestrationLedger(runDir: string, entry: Record<string, unknown>): void {
   appendFileSync(join(runDir, "ledger.jsonl"), `${JSON.stringify({ ...entry, timestamp: new Date().toISOString() })}\n`, "utf8");

package/.pi/extensions/zob-harness/src/{orchestration → domains/orchestration}/run.ts

@@ -1,15 +1,15 @@
 import { existsSync, mkdirSync, unlinkSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { resolveComputeProfile } from "../compute-profile.js";
-import { SUPERVISED_SMOKE_CHILD_TOOLS } from "../constants.js";
-import type { OrchestrateExecutionMode, OrchestrateRunInput, OrchestrateRunResult, TeamDefinition } from "../types.js";
+import { resolveComputeProfile } from "../compute/compute-profile.js";
+import { SUPERVISED_SMOKE_CHILD_TOOLS } from "../../core/constants.js";
+import type { OrchestrateExecutionMode, OrchestrateRunInput, OrchestrateRunResult, TeamDefinition } from "../../types.js";
 import { mirrorOrchestrationToComs } from "../topology/coms.js";
 import { loadOrchestrationProfile, teamDefinitionFromOrchestrationProfile, validateOrchestrateRunInputs } from "../topology/orchestration-profiles.js";
 import { loadTeamDefinition } from "../topology/teams.js";
-import { sha256 } from "../utils/hashing.js";
-import { safeRunId } from "../utils/paths.js";
-import { isRecord } from "../utils/records.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { safeRunId } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 import { buildInitialAdaptiveDelegationGovernorState, normalizeAdaptiveDelegationPolicy } from "./adaptive-delegation.js";
 import { writeAdaptiveWorkflowArtifacts } from "./adaptive-workflow.js";
 import { buildOrchestrationPlan, redactBodyLikeFieldsForPersistence, redactOrchestrationPlanForPersistence } from "./plan.js";

package/.pi/extensions/zob-harness/src/{orchestration → domains/orchestration}/supervised-readonly.ts

@@ -1,13 +1,13 @@
 import { existsSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { SUPERVISED_READONLY_CHILD_TOOLS } from "../constants.js";
+import { SUPERVISED_READONLY_CHILD_TOOLS } from "../../core/constants.js";
 import { ackZobComsMessage, appendZobComsMessage, getZobComsMessage, listZobComsMessages, replyZobComsMessage, transitionZobComsStatus } from "../topology/coms.js";
-import type { AdaptiveDelegationGovernorState, AdaptiveDelegationPolicy, DelegationRequestProposal, GovernorDecision, OrchestrateRunInput, ParentDispatchContract, SupervisedReadonlyDispatcher, SupervisedReadonlyDispatchResult, TeamDefinition } from "../types.js";
-import { sha256 } from "../utils/hashing.js";
-import { parseJsonFile, readJsonl, readJsonObjectIfPresent } from "../utils/json.js";
-import { safeRunId } from "../utils/paths.js";
-import { isRecord } from "../utils/records.js";
+import type { AdaptiveDelegationGovernorState, AdaptiveDelegationPolicy, DelegationRequestProposal, GovernorDecision, OrchestrateRunInput, ParentDispatchContract, SupervisedReadonlyDispatcher, SupervisedReadonlyDispatchResult, TeamDefinition } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { parseJsonFile, readJsonl, readJsonObjectIfPresent } from "../../core/utils/json.js";
+import { safeRunId } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 import {
   ADAPTIVE_DELEGATION_HARD_MAX_DEPTH,
   buildInitialAdaptiveDelegationGovernorState,

package/.pi/extensions/zob-harness/src/{orchestration → domains/orchestration}/widget-readers.ts

@@ -1,8 +1,8 @@
 import { existsSync, lstatSync, readdirSync } from "node:fs";
 import { join } from "node:path";
 
-import { parseJsonFile, readJsonObjectIfPresent } from "../utils/json.js";
-import { isRecord } from "../utils/records.js";
+import { parseJsonFile, readJsonObjectIfPresent } from "../../core/utils/json.js";
+import { isRecord } from "../../core/utils/records.js";
 
 function widgetCounts(value: unknown): string {
   if (!isRecord(value)) return "none";

package/.pi/extensions/zob-harness/src/domains/project-dna/AGENTS.md

@@ -0,0 +1,19 @@
+# ProjectDNA domain guardrail
+
+## Scope
+
+- ProjectDNA query, federated query, workflow planning helpers, schemas, and writeback proposals.
+
+## MUST DO
+
+- Preserve read-only scan artifact usage, bounded cited context, proposal-only writeback, and quarantine/output path policy.
+
+## MUST NOT
+
+- Do not scan external projects, import/sync/embed/write to backends, or promote ProjectDNA learnings by moving code.
+- Do not import from `index.ts` or `index.js`.
+
+## Validation
+
+- `npm run check -- --pretty false`.
+- Run relevant `validate:project-dna*`/smoke scripts when ProjectDNA behavior moves.

package/.pi/extensions/zob-harness/src/{project-dna.ts → domains/project-dna/project-dna.ts}

@@ -1,9 +1,9 @@
 import { appendFileSync, existsSync, mkdirSync, readFileSync } from "node:fs";
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 
-import { sha256 } from "./utils/hashing.js";
-import { isRecord } from "./utils/records.js";
-import { safeRunId } from "./utils/paths.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { isRecord } from "../../core/utils/records.js";
+import { safeRunId } from "../../core/utils/paths.js";
 
 const STOPWORDS = new Set(["the", "and", "for", "with", "how", "does", "this", "that", "dans", "avec", "pour", "comment", "faire", "using", "use", "project", "style"]);
 const DEFAULT_SCAN_DIR = "reports/project-dna-scans/project-dna-factory-smoke";
@@ -463,7 +463,7 @@ export function buildProjectDnaReadinessAudit(repoRoot: string, input: { scanDir
   } catch (error) {
     scanErrors = [error instanceof Error ? error.message : String(error)];
   }
-  const p4RuntimeReady = existsSync(resolve(repoRoot, ".pi/extensions/zob-harness/src/project-dna.ts")) && existsSync(resolve(repoRoot, ".pi/extensions/zob-harness/src/runtime/tools-project-dna.ts"));
+  const p4RuntimeReady = existsSync(resolve(repoRoot, ".pi/extensions/zob-harness/src/domains/project-dna/project-dna.ts")) && existsSync(resolve(repoRoot, ".pi/extensions/zob-harness/src/runtime/tools-project-dna.ts"));
   const p5FederationReady = p4RuntimeReady;
   const errors = [...missingRepoFiles.map((file) => `missing repo file: ${file}`), ...scanErrors];
   return {

package/.pi/extensions/zob-harness/src/{promotion → domains/promotion}/candidate.ts

@@ -1,11 +1,11 @@
 import { appendFileSync, existsSync, mkdirSync, readdirSync, statSync, writeFileSync } from "node:fs";
 import { join, resolve } from "node:path";
 
-import { DEFAULT_RULES } from "../constants.js";
-import { sha256 } from "../utils/hashing.js";
-import { readJsonObjectIfPresent } from "../utils/json.js";
-import { pathMatches, resolveRepoPath, safeFileStem } from "../utils/paths.js";
-import { isRecord } from "../utils/records.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { readJsonObjectIfPresent } from "../../core/utils/json.js";
+import { pathMatches, resolveRepoPath, safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 import type { PromotionApplyScope, PromotionCandidateInput, PromotionCandidateRecord, PromotionGates, PromotionKind, PromotionStatus, PromotionTransitionInput } from "./types.js";
 import { PROMOTION_APPLY_SCOPES, PROMOTION_KINDS, PROMOTION_STATUSES } from "./types.js";
 

package/.pi/extensions/zob-harness/src/{promotion → domains/promotion}/coms.ts

@@ -1,9 +1,9 @@
 import { mkdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { sha256 } from "../utils/hashing.js";
-import { safeFileStem } from "../utils/paths.js";
-import { isRecord } from "../utils/records.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 import { promotionCandidateDir, promotionCandidateRef } from "./candidate.js";
 import type { PromotionCandidateRecord, PromotionComsMessageRef, PromotionComsThreadInput, PromotionComsThreadRecord } from "./types.js";
 

package/.pi/extensions/zob-harness/src/{promotion → domains/promotion}/documentation.ts

@@ -1,10 +1,10 @@
 import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 
-import { sha256 } from "../utils/hashing.js";
-import { resolveRepoPath, safeFileStem } from "../utils/paths.js";
-import { parseJsonFile } from "../utils/json.js";
-import { isRecord } from "../utils/records.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { resolveRepoPath, safeFileStem } from "../../core/utils/paths.js";
+import { parseJsonFile } from "../../core/utils/json.js";
+import { isRecord } from "../../core/utils/records.js";
 import { advancePromotionCandidate, createPromotionCandidate, promotionCandidateDir, promotionCandidateRef, validatePromotionCandidate, writePromotionCandidate } from "./candidate.js";
 import type { PromotionCandidateRecord } from "./types.js";
 

package/.pi/extensions/zob-harness/src/{promotion → domains/promotion}/factory.ts

@@ -1,8 +1,8 @@
 import { existsSync, mkdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { sha256 } from "../utils/hashing.js";
-import { isRecord } from "../utils/records.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { isRecord } from "../../core/utils/records.js";
 import { advancePromotionCandidate, createPromotionCandidate, promotionCandidateDir, promotionCandidateRef, validatePromotionCandidate, writePromotionCandidate } from "./candidate.js";
 import type { PromotionCandidateRecord } from "./types.js";
 

package/.pi/extensions/zob-harness/src/{promotion → domains/promotion}/temp-agent.ts

@@ -1,10 +1,10 @@
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { sha256 } from "../utils/hashing.js";
-import { safeFileStem } from "../utils/paths.js";
-import { parseJsonFile } from "../utils/json.js";
-import { isRecord } from "../utils/records.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { parseJsonFile } from "../../core/utils/json.js";
+import { isRecord } from "../../core/utils/records.js";
 import { advancePromotionCandidate, createPromotionCandidate, promotionCandidateDir, promotionCandidateRef, validatePromotionCandidate, writePromotionCandidate } from "./candidate.js";
 import type { PromotionCandidateRecord } from "./types.js";
 

package/.pi/extensions/zob-harness/src/{promotion → domains/promotion}/write-lane.ts

@@ -1,9 +1,9 @@
 import { mkdirSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 
-import { sha256 } from "../utils/hashing.js";
-import { safeFileStem } from "../utils/paths.js";
-import { isRecord } from "../utils/records.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 import { advancePromotionCandidate, createPromotionCandidate, promotionCandidateDir, promotionCandidateRef, validatePromotionCandidate, writePromotionCandidate } from "./candidate.js";
 import type { PromotionCandidateRecord } from "./types.js";
 

package/.pi/extensions/zob-harness/src/domains/telemetry/AGENTS.md

@@ -0,0 +1,19 @@
+# Telemetry domain guardrail
+
+## Scope
+
+- Chronicle classification, queue metadata, telemetry summaries, and body-free runtime evidence records.
+
+## MUST DO
+
+- Preserve completion classifiers, budget preflight dry-run semantics, body-free telemetry, and artifact/ref names.
+
+## MUST NOT
+
+- Do not persist raw prompts, outputs, diffs, patches, or secrets.
+- Do not import from `index.ts` or `index.js`.
+
+## Validation
+
+- `npm run check -- --pretty false`.
+- `npm run smoke:harness` after chronicle/queue/runtime-facing moves.

package/.pi/extensions/zob-harness/src/{chronicle.ts → domains/telemetry/chronicle.ts}

@@ -9,9 +9,9 @@ import type {
   DelegationTelemetryInput,
   FactoryTelemetryInput,
   RunawayGuardInput,
-} from "./types.js";
-import { sha256 } from "./utils/hashing.js";
-import { safeFileStem } from "./utils/paths.js";
+} from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { safeFileStem } from "../../core/utils/paths.js";
 
 export const CHRONICLE_STATES = [
   "created",

package/.pi/extensions/zob-harness/src/{queue.ts → domains/telemetry/queue.ts}

@@ -1,15 +1,15 @@
 import { appendFileSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, writeFileSync } from "node:fs";
 import { basename, join, resolve } from "node:path";
 
-import { evaluateStrictBudgetDispatchGate } from "./budget-policy.js";
+import { evaluateStrictBudgetDispatchGate } from "../governance/budget-policy.js";
 import { classifyChildStopCondition, evaluateBudgetPreflightDryRun } from "./chronicle.js";
-import { DEFAULT_RULES } from "./constants.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
 import { incrementCounter, normalizeDailyTelemetryDate, stringFrom } from "./telemetry.js";
-import type { ChildStopCondition, FactoryRunBudgetInput, QueueState, QueueTickResult, ReadOnlyQueueJob, ReadOnlyQueueJobType } from "./types.js";
-import { sha256 } from "./utils/hashing.js";
-import { parseJsonFile } from "./utils/json.js";
-import { expandHome, isSafeArtifactName, pathMatches, safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import type { ChildStopCondition, FactoryRunBudgetInput, QueueState, QueueTickResult, ReadOnlyQueueJob, ReadOnlyQueueJobType } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { parseJsonFile } from "../../core/utils/json.js";
+import { expandHome, isSafeArtifactName, pathMatches, safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export const READ_ONLY_QUEUE_JOB_TYPES: ReadOnlyQueueJobType[] = ["docs_watch", "repo_audit_readonly", "todo_risk_report", "session_analysis"];
 const QUEUE_STATES: QueueState[] = ["pending", "running", "done", "failed"];

package/.pi/extensions/zob-harness/src/{telemetry.ts → domains/telemetry/telemetry.ts}

@@ -2,10 +2,10 @@ import { existsSync, mkdirSync, readdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
 import { classifyDelegationChronicleCompletion, classifyFactoryChronicleCompletion, writeChronicleSnapshot } from "./chronicle.js";
-import type { AssistantLikeMessage, ChildResult, ChildStopCondition, DelegationTelemetryInput, FactoryTelemetryInput } from "./types.js";
-import { parseJsonFile } from "./utils/json.js";
-import { safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import type { AssistantLikeMessage, ChildResult, ChildStopCondition, DelegationTelemetryInput, FactoryTelemetryInput } from "../../types.js";
+import { parseJsonFile } from "../../core/utils/json.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 function usageEmpty(): ChildResult["usage"] {
   return { turns: 0, input: 0, output: 0, cacheRead: 0, cacheWrite: 0, cost: 0, contextTokens: 0 };