@ai-substrate/engineering-harness 0.2.0-canary.45

package/harness/cli/dist/adapters/git/fake-git.js

@@ -0,0 +1,20 @@
+/**
+ * Deterministic git for tests. Seeded with repo/branch state; records each
+ * method called on `calls` (fakes over mocks).
+ */
+export class FakeGit {
+    state;
+    calls = [];
+    constructor(state = {}) {
+        this.state = state;
+    }
+    isRepo() {
+        this.calls.push('isRepo');
+        return this.state.isRepo ?? false;
+    }
+    currentBranch() {
+        this.calls.push('currentBranch');
+        return this.state.branch ?? null;
+    }
+}
+//# sourceMappingURL=fake-git.js.map

package/harness/cli/dist/adapters/git/fake-git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-git.js","sourceRoot":"","sources":["../../../src/adapters/git/fake-git.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,OAAO,OAAO;IAGW;IAFpB,KAAK,GAAa,EAAE,CAAC;IAE9B,YAA6B,QAAsD,EAAE;QAAxD,UAAK,GAAL,KAAK,CAAmD;IAAG,CAAC;IAEzF,MAAM;QACJ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC;IACpC,CAAC;IAED,aAAa;QACX,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC;IACnC,CAAC;CACF"}

package/harness/cli/dist/adapters/git/git-port.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Git port — informational repository facts behind an interface.
+ *
+ * Used by `doctor` for context (are we in a repo? which branch?). Injected so
+ * doctor stays unit-testable with `FakeGit` and never shells out to `git`.
+ */
+export interface GitPort {
+    /** True if the cwd is inside a git work tree. */
+    isRepo(): boolean;
+    /** Current branch name, or null if not a repo / detached HEAD. */
+    currentBranch(): string | null;
+}

package/harness/cli/dist/adapters/git/git-port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=git-port.js.map

package/harness/cli/dist/adapters/git/git-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-port.js","sourceRoot":"","sources":["../../../src/adapters/git/git-port.ts"],"names":[],"mappings":""}

package/harness/cli/dist/adapters/loader/fake-loader.d.ts

@@ -0,0 +1,13 @@
+import type { ModuleLoaderPort } from './module-loader-port.js';
+/**
+ * Deterministic module loader for tests. Seeded with `{ absPath: defaultExport }`;
+ * records every requested path on `loads` (fakes over mocks). To simulate a load
+ * failure, script an `Error` for the path — `load` rejects with it. An unscripted
+ * path also rejects (the registry treats a load rejection as `failed`/E140).
+ */
+export declare class FakeModuleLoader implements ModuleLoaderPort {
+    private readonly scripts;
+    readonly loads: string[];
+    constructor(scripts?: Record<string, unknown>);
+    load(absPath: string): Promise<unknown>;
+}

package/harness/cli/dist/adapters/loader/fake-loader.js

@@ -0,0 +1,25 @@
+/**
+ * Deterministic module loader for tests. Seeded with `{ absPath: defaultExport }`;
+ * records every requested path on `loads` (fakes over mocks). To simulate a load
+ * failure, script an `Error` for the path — `load` rejects with it. An unscripted
+ * path also rejects (the registry treats a load rejection as `failed`/E140).
+ */
+export class FakeModuleLoader {
+    scripts;
+    loads = [];
+    constructor(scripts = {}) {
+        this.scripts = scripts;
+    }
+    load(absPath) {
+        this.loads.push(absPath);
+        if (!(absPath in this.scripts)) {
+            return Promise.reject(new Error(`No module scripted for ${absPath}`));
+        }
+        const entry = this.scripts[absPath];
+        if (entry instanceof Error) {
+            return Promise.reject(entry);
+        }
+        return Promise.resolve(entry);
+    }
+}
+//# sourceMappingURL=fake-loader.js.map

package/harness/cli/dist/adapters/loader/fake-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-loader.js","sourceRoot":"","sources":["../../../src/adapters/loader/fake-loader.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,OAAO,gBAAgB;IAGE;IAFpB,KAAK,GAAa,EAAE,CAAC;IAE9B,YAA6B,UAAmC,EAAE;QAArC,YAAO,GAAP,OAAO,CAA8B;IAAG,CAAC;IAEtE,IAAI,CAAC,OAAe;QAClB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;CACF"}

package/harness/cli/dist/adapters/loader/jiti-loader.d.ts

@@ -0,0 +1,15 @@
+import type { ModuleLoaderPort } from './module-loader-port.js';
+/**
+ * Real module loader — the ONLY place `jiti` is imported.
+ *
+ * `.ts`/`.tsx` load through jiti with `moduleCache: false` (pi-parity): full TS
+ * transpile (enums, etc.) and each extension resolves its own `node_modules`.
+ * `.js`/`.mjs`/`.cjs` skip jiti entirely via native dynamic `import()`. Both
+ * return the module's **default** export (a module with no default → `undefined`,
+ * which the registry then rejects as a malformed export — never the namespace).
+ */
+export declare class JitiLoader implements ModuleLoaderPort {
+    private jiti;
+    private getJiti;
+    load(absPath: string): Promise<unknown>;
+}

package/harness/cli/dist/adapters/loader/jiti-loader.js

@@ -0,0 +1,29 @@
+import { pathToFileURL } from 'node:url';
+import { createJiti } from 'jiti';
+const TS_FILE = /\.(ts|tsx)$/;
+/**
+ * Real module loader — the ONLY place `jiti` is imported.
+ *
+ * `.ts`/`.tsx` load through jiti with `moduleCache: false` (pi-parity): full TS
+ * transpile (enums, etc.) and each extension resolves its own `node_modules`.
+ * `.js`/`.mjs`/`.cjs` skip jiti entirely via native dynamic `import()`. Both
+ * return the module's **default** export (a module with no default → `undefined`,
+ * which the registry then rejects as a malformed export — never the namespace).
+ */
+export class JitiLoader {
+    jiti;
+    getJiti() {
+        if (!this.jiti) {
+            this.jiti = createJiti(import.meta.url, { moduleCache: false });
+        }
+        return this.jiti;
+    }
+    async load(absPath) {
+        if (TS_FILE.test(absPath)) {
+            return this.getJiti().import(absPath, { default: true });
+        }
+        const mod = (await import(pathToFileURL(absPath).href));
+        return mod.default;
+    }
+}
+//# sourceMappingURL=jiti-loader.js.map

package/harness/cli/dist/adapters/loader/jiti-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jiti-loader.js","sourceRoot":"","sources":["../../../src/adapters/loader/jiti-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAGlC,MAAM,OAAO,GAAG,aAAa,CAAC;AAE9B;;;;;;;;GAQG;AACH,MAAM,OAAO,UAAU;IACb,IAAI,CAA4C;IAEhD,OAAO;QACb,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAe;QACxB,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAA0B,CAAC;QACjF,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;CACF"}

package/harness/cli/dist/adapters/loader/module-loader-port.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Module-loader port — turns an extension file on disk into its default export.
+ *
+ * `.ts`/`.tsx` go through jiti (full transpile, like pi's loader); `.js`/`.mjs`/
+ * `.cjs` use a plain dynamic `import()` (no transpile — the fast path). Injected
+ * so the registry/discovery logic is unit-testable with `FakeModuleLoader` and
+ * never touches jiti or the real module system (WS-A Decision 1/4).
+ */
+export interface ModuleLoaderPort {
+    /** Import by absolute path and return the module's default export. */
+    load(absPath: string): Promise<unknown>;
+}

package/harness/cli/dist/adapters/loader/module-loader-port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=module-loader-port.js.map

package/harness/cli/dist/adapters/loader/module-loader-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-loader-port.js","sourceRoot":"","sources":["../../../src/adapters/loader/module-loader-port.ts"],"names":[],"mappings":""}

package/harness/cli/dist/adapters/process/fake-process.d.ts

@@ -0,0 +1,13 @@
+import type { ProcessPort } from './process-port.js';
+/**
+ * Deterministic process access for tests. Seeded with a `{command: path}` map;
+ * records every looked-up command on `lookups` (fakes over mocks).
+ */
+export declare class FakeProcess implements ProcessPort {
+    private readonly paths;
+    private readonly cwdPath;
+    readonly lookups: string[];
+    constructor(paths?: Record<string, string>, cwdPath?: string);
+    which(command: string): string | null;
+    cwd(): string;
+}

package/harness/cli/dist/adapters/process/fake-process.js

@@ -0,0 +1,21 @@
+/**
+ * Deterministic process access for tests. Seeded with a `{command: path}` map;
+ * records every looked-up command on `lookups` (fakes over mocks).
+ */
+export class FakeProcess {
+    paths;
+    cwdPath;
+    lookups = [];
+    constructor(paths = {}, cwdPath = '/repo') {
+        this.paths = paths;
+        this.cwdPath = cwdPath;
+    }
+    which(command) {
+        this.lookups.push(command);
+        return this.paths[command] ?? null;
+    }
+    cwd() {
+        return this.cwdPath;
+    }
+}
+//# sourceMappingURL=fake-process.js.map

package/harness/cli/dist/adapters/process/fake-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-process.js","sourceRoot":"","sources":["../../../src/adapters/process/fake-process.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,OAAO,WAAW;IAIH;IACA;IAJV,OAAO,GAAa,EAAE,CAAC;IAEhC,YACmB,QAAgC,EAAE,EAClC,UAAU,OAAO;QADjB,UAAK,GAAL,KAAK,CAA6B;QAClC,YAAO,GAAP,OAAO,CAAU;IACjC,CAAC;IAEJ,KAAK,CAAC,OAAe;QACnB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IACrC,CAAC;IAED,GAAG;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF"}

package/harness/cli/dist/adapters/process/node-process.d.ts

@@ -0,0 +1,6 @@
+import type { ProcessPort } from './process-port.js';
+/** Real process access — the only place a child process is spawned. */
+export declare class NodeProcess implements ProcessPort {
+    which(command: string): string | null;
+    cwd(): string;
+}

package/harness/cli/dist/adapters/process/node-process.js

@@ -0,0 +1,17 @@
+import { spawnSync } from 'node:child_process';
+/** Real process access — the only place a child process is spawned. */
+export class NodeProcess {
+    which(command) {
+        const locator = process.platform === 'win32' ? 'where' : 'which';
+        const result = spawnSync(locator, [command], { encoding: 'utf8' });
+        if (result.status === 0 && result.stdout) {
+            const first = result.stdout.split('\n')[0]?.trim();
+            return first ? first : null;
+        }
+        return null;
+    }
+    cwd() {
+        return process.cwd();
+    }
+}
+//# sourceMappingURL=node-process.js.map

package/harness/cli/dist/adapters/process/node-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-process.js","sourceRoot":"","sources":["../../../src/adapters/process/node-process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG/C,uEAAuE;AACvE,MAAM,OAAO,WAAW;IACtB,KAAK,CAAC,OAAe;QACnB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QACjE,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,GAAG;QACD,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC;CACF"}

package/harness/cli/dist/adapters/process/process-port.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Process port — toolchain probing behind an interface (read-only this slice).
+ *
+ * `which` answers "is this tool on PATH, and where?" for `doctor`'s toolchain
+ * layer. Injected so the doctor service stays unit-testable with `FakeProcess`
+ * and never spawns a real process.
+ */
+export interface ProcessPort {
+    /** Absolute path to `command` if found on PATH, else null. */
+    which(command: string): string | null;
+    /** The current working directory — the root discovery resolves `.harness/extensions/` against. */
+    cwd(): string;
+}

package/harness/cli/dist/adapters/process/process-port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=process-port.js.map

package/harness/cli/dist/adapters/process/process-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-port.js","sourceRoot":"","sources":["../../../src/adapters/process/process-port.ts"],"names":[],"mappings":""}

package/harness/cli/dist/adapters/version-lookup/fake-version-lookup.d.ts

@@ -0,0 +1,13 @@
+import type { VersionLookupPort } from './version-lookup-port.js';
+/**
+ * Deterministic version lookup for tests. Returns a scripted latest version
+ * (or null), or rejects with a scripted error to exercise the caller's failure
+ * handling; records how many times it was called (fakes over mocks).
+ */
+export declare class FakeVersionLookup implements VersionLookupPort {
+    private readonly result;
+    private readonly error?;
+    calls: number;
+    constructor(result?: string | null, error?: Error | undefined);
+    latest(): Promise<string | null>;
+}

package/harness/cli/dist/adapters/version-lookup/fake-version-lookup.js

@@ -0,0 +1,21 @@
+/**
+ * Deterministic version lookup for tests. Returns a scripted latest version
+ * (or null), or rejects with a scripted error to exercise the caller's failure
+ * handling; records how many times it was called (fakes over mocks).
+ */
+export class FakeVersionLookup {
+    result;
+    error;
+    calls = 0;
+    constructor(result = null, error) {
+        this.result = result;
+        this.error = error;
+    }
+    latest() {
+        this.calls++;
+        if (this.error)
+            return Promise.reject(this.error);
+        return Promise.resolve(this.result);
+    }
+}
+//# sourceMappingURL=fake-version-lookup.js.map

package/harness/cli/dist/adapters/version-lookup/fake-version-lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-version-lookup.js","sourceRoot":"","sources":["../../../src/adapters/version-lookup/fake-version-lookup.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,OAAO,iBAAiB;IAIT;IACA;IAJnB,KAAK,GAAG,CAAC,CAAC;IAEV,YACmB,SAAwB,IAAI,EAC5B,KAAa;QADb,WAAM,GAAN,MAAM,CAAsB;QAC5B,UAAK,GAAL,KAAK,CAAQ;IAC7B,CAAC;IAEJ,MAAM;QACJ,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;CACF"}

package/harness/cli/dist/adapters/version-lookup/node-version-lookup.d.ts

@@ -0,0 +1,18 @@
+import type { ExecPort } from '../exec/exec-port.js';
+import type { VersionLookupPort } from './version-lookup-port.js';
+/**
+ * Real version lookup — shells `npm view <pkg> version --json` via the injected
+ * `ExecPort` (so the only child spawn stays in `NodeExec`). Reads the PUBLIC npm
+ * registry — no auth needed for a public package (FX001); cwd only lets npm pick
+ * up a project `.npmrc` if one is present.
+ *
+ * Never throws: a non-zero exit (not-found, registry unreachable) or unparseable
+ * output maps to null so the update check degrades silently (AC9).
+ */
+export declare class NodeVersionLookup implements VersionLookupPort {
+    private readonly exec;
+    private readonly pkg;
+    private readonly cwd;
+    constructor(exec: ExecPort, pkg: string, cwd: string);
+    latest(): Promise<string | null>;
+}

package/harness/cli/dist/adapters/version-lookup/node-version-lookup.js

@@ -0,0 +1,51 @@
+/**
+ * Real version lookup — shells `npm view <pkg> version --json` via the injected
+ * `ExecPort` (so the only child spawn stays in `NodeExec`). Reads the PUBLIC npm
+ * registry — no auth needed for a public package (FX001); cwd only lets npm pick
+ * up a project `.npmrc` if one is present.
+ *
+ * Never throws: a non-zero exit (not-found, registry unreachable) or unparseable
+ * output maps to null so the update check degrades silently (AC9).
+ */
+export class NodeVersionLookup {
+    exec;
+    pkg;
+    cwd;
+    constructor(exec, pkg, cwd) {
+        this.exec = exec;
+        this.pkg = pkg;
+        this.cwd = cwd;
+    }
+    async latest() {
+        const result = await this.exec.run('npm', ['view', this.pkg, 'version', '--json'], {
+            cwd: this.cwd,
+        });
+        if (!result.ok)
+            return null;
+        return parseNpmVersion(result.stdout);
+    }
+}
+/**
+ * `npm view pkg version --json` emits a JSON-encoded string for a single match
+ * ("0.2.0") or a JSON array when several versions resolve — take the last.
+ * Anything else (empty, non-JSON) ⇒ null (unknown, not an error).
+ */
+function parseNpmVersion(stdout) {
+    const text = stdout.trim();
+    if (!text)
+        return null;
+    try {
+        const parsed = JSON.parse(text);
+        if (typeof parsed === 'string')
+            return parsed;
+        if (Array.isArray(parsed) && parsed.length > 0) {
+            const last = parsed[parsed.length - 1];
+            return typeof last === 'string' ? last : null;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=node-version-lookup.js.map

package/harness/cli/dist/adapters/version-lookup/node-version-lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-version-lookup.js","sourceRoot":"","sources":["../../../src/adapters/version-lookup/node-version-lookup.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AACH,MAAM,OAAO,iBAAiB;IAET;IACA;IACA;IAHnB,YACmB,IAAc,EACd,GAAW,EACX,GAAW;QAFX,SAAI,GAAJ,IAAI,CAAU;QACd,QAAG,GAAH,GAAG,CAAQ;QACX,QAAG,GAAH,GAAG,CAAQ;IAC3B,CAAC;IAEJ,KAAK,CAAC,MAAM;QACV,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE;YACjF,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC5B,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAAc;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC;QAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACvC,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAChD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/harness/cli/dist/adapters/version-lookup/version-lookup-port.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Version-lookup port — the latest published version of the harness package on
+ * its registry (the public npm registry).
+ *
+ * Injected so the update service stays unit-testable with `FakeVersionLookup`
+ * and never shells a child or touches the network directly. The Node adapter
+ * shells `npm view` (architecture §2.1 defers a real HTTP adapter), composing
+ * `ExecPort` rather than spawning itself.
+ */
+export interface VersionLookupPort {
+    /**
+     * Latest published version string (e.g. "0.3.0"), or null when it cannot be
+     * determined — package not found, empty registry, or an auth/transport
+     * failure. Implementations SHOULD map failures to null so the caller can
+     * degrade silently (AC9); tests may also reject to exercise the caller's
+     * defensive catch.
+     */
+    latest(): Promise<string | null>;
+}

package/harness/cli/dist/adapters/version-lookup/version-lookup-port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=version-lookup-port.js.map

package/harness/cli/dist/adapters/version-lookup/version-lookup-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-lookup-port.js","sourceRoot":"","sources":["../../../src/adapters/version-lookup/version-lookup-port.ts"],"names":[],"mappings":""}

package/harness/cli/dist/app.d.ts

@@ -0,0 +1,70 @@
+import { Command } from 'commander';
+import { type VerbActDeps } from './acts/verb.js';
+import type { Clock } from './adapters/clock/clock-port.js';
+import type { ModuleLoaderPort } from './adapters/loader/module-loader-port.js';
+import { type Envelope } from './output/envelope.js';
+import { type CliIo, type Writers } from './output/output-port.js';
+import { type ExtensionRegistry, type VerbRegistry } from './services/extensions/registry.js';
+import { type ExtensionRecordType } from './services/record/registry.js';
+/**
+ * Tri-state read of the output flag from argv. The entrypoint resolves this
+ * ONCE — commander collapses `--json`/`--no-json` to a single boolean and loses
+ * the "absent" state that lets env/TTY decide, so acts must never re-derive it.
+ */
+export declare function jsonFlag(argv: string[]): boolean | undefined;
+/**
+ * Safe mode: skip extension discovery entirely (core commands only). Detected
+ * from raw argv (`--no-extensions`) or env (`HARNESS_NO_EXTENSIONS=1`) BEFORE
+ * parse, since the registry must be known before commander is built.
+ *
+ * NOTE (v1): the argv scan is a simple `includes`, so a `--no-extensions` placed
+ * after a verb name (as a verb's own option) would also trigger safe mode. The
+ * env var is the unambiguous path; revisit if a verb ever needs that flag.
+ */
+export declare function isExtensionsDisabled(argv: string[], env: NodeJS.ProcessEnv): boolean;
+/**
+ * Map a thrown commander error (raised because `exitOverride` is set) to an
+ * actionable envelope. Returns `null` for help/version display (commander
+ * already printed; the caller exits 0). Unknown command/option/missing-arg →
+ * `E108`; anything else (an unexpected bug) → `E100` — so no raw stack trace
+ * ever escapes.
+ */
+export declare function commanderErrorEnvelope(err: {
+    code?: string;
+    message?: string;
+}, clock: Clock): Envelope | null;
+/**
+ * Discover + load the repo's extensions into the extension registry (verbs +
+ * record types + provenance) in one pass, unless safe mode is on (then the
+ * registry is empty — core commands + core record types only). Core record-type
+ * names are reserved so an extension can never shadow them. Runs BEFORE parse so
+ * each verb is a registered command (WS-A Decision 6).
+ */
+export declare function loadRegistry(argv: string[], env: NodeJS.ProcessEnv, deps: VerbActDeps, loader: ModuleLoaderPort): Promise<ExtensionRegistry>;
+/**
+ * Build the composition root: global flags + core commands (incl. `record`, built
+ * from the merged record registry = core ∪ extension) + one subcommand per
+ * discovered verb, each registered with the pre-resolved `io` + injected ports. No
+ * business logic, no fs/process/git here.
+ */
+export declare function buildProgram(version: string, io: CliIo, deps: VerbActDeps, registry: VerbRegistry & {
+    recordTypes?: ExtensionRecordType[];
+}): Command;
+/** Injectable seams so the composition root is testable without real adapters/streams. */
+export interface MainOverrides {
+    deps: VerbActDeps;
+    loader: ModuleLoaderPort;
+    env: NodeJS.ProcessEnv;
+    isTty: boolean;
+    writers: Writers;
+    version: string;
+}
+/**
+ * The async composition root (WS-A Decision 6): resolve output mode, discover +
+ * load extensions, validate the assembled registry, then `await parseAsync`.
+ * Three distinct error boundaries keep the kernel the sole exit point:
+ *   1. an unexpected discovery/load error → `E100` (routed through the kernel);
+ *   2. a malformed registry → the `E120` validation envelope;
+ *   3. a commander parse error → `commanderErrorEnvelope` (help/version → exit 0).
+ */
+export declare function main(argv?: string[], overrides?: Partial<MainOverrides>): Promise<void>;