@aihq/harness 0.2.0-rc.0 → 0.3.0

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   buildProgram
-} from "./chunk-S7XFTZJW.js";
+} from "./chunk-7GVBGS5N.js";
 
 // src/cli.ts
 buildProgram().parseAsync(process.argv).catch((err) => {

package/dist/index.d.ts

@@ -186,7 +186,7 @@ type Verdict = "pass" | "fail" | "skip";
  * sealed: a new failure mode means a new member here PLUS the `code` set at the
  * emitter; never derive a code by matching `detail`.
  */
-type CheckCode = "env.node-runtime" | "env.git-missing" | "env.dev-tool-missing" | "env.tool-install-blocked" | "cert.ca-missing" | "tls.verify-failed" | "npm.runtime-broken" | "path.missing" | "mcp.blocked" | "mcp.uv-missing" | "mcp.config-missing" | "mcp.unvendored-offline" | "mcp.policy-denied" | "mcp.hardcoded-secret" | "mcp.allowlist-drift" | "cli.not-detected" | "cli.config-only" | "cli.bootloader-missing" | "cli.bootloader-drift" | "cli.wont-load" | "canon.router-missing" | "canon.context-dir-missing" | "canon.lint-failed" | "canon.adoptable" | "canon.cli-native-unmigrated" | "secrets.plaintext-detected" | "guardrails.gitleaks-missing" | "usage.no-data" | "scale.code-review-graph-missing" | "contract.path-unportable" | "contract.stale" | "org-policy.drift" | "report.context-over-budget" | "report.low-adoption" | "report.contract-untrue" | "trust.fetch-blocked" | "trust.detector-unavailable" | "trust.hidden-unicode" | "trust.prompt-injection" | "trust.source-changed" | "trust.auto-exec-hook" | "trust.dependency-confusion" | "trust.typosquat" | "trust.malicious-code" | "trust.source-drift" | "trust.unpinned-dependency" | "trust.untrusted-publisher" | "trust.unsigned-source";
+type CheckCode = "env.node-runtime" | "env.git-missing" | "env.dev-tool-missing" | "env.tool-install-blocked" | "cert.ca-missing" | "tls.verify-failed" | "npm.runtime-broken" | "path.missing" | "mcp.blocked" | "mcp.uv-missing" | "mcp.config-missing" | "mcp.unvendored-offline" | "mcp.policy-denied" | "mcp.hardcoded-secret" | "mcp.allowlist-drift" | "cli.not-detected" | "cli.config-only" | "cli.bootloader-missing" | "cli.bootloader-drift" | "cli.wont-load" | "canon.router-missing" | "canon.context-dir-missing" | "canon.lint-failed" | "canon.adoptable" | "canon.cli-native-unmigrated" | "secrets.plaintext-detected" | "guardrails.gitleaks-missing" | "usage.no-data" | "scale.code-review-graph-missing" | "contract.path-unportable" | "contract.stale" | "org-policy.drift" | "report.context-over-budget" | "report.low-adoption" | "report.contract-untrue" | "ready.blocked" | "trust.fetch-blocked" | "trust.detector-unavailable" | "trust.hidden-unicode" | "trust.prompt-injection" | "trust.source-changed" | "trust.auto-exec-hook" | "trust.dependency-confusion" | "trust.typosquat" | "trust.malicious-code" | "trust.source-drift" | "trust.unpinned-dependency" | "trust.untrusted-publisher" | "trust.unsigned-source";
 interface Check {
     name: string;
     verdict: Verdict;
@@ -246,10 +246,14 @@ declare class VerificationReport {
  *  - `digest`:   a read-only computed result printed verbatim (an analytics
  *                report / roll-up) plus optional structured `data` echoed into
  *                `--json` — mutates nothing, never contacts a remote system.
+ *  - `remove`:   delete a repo-LOCAL file aih exclusively owns (a stale per-CLI
+ *                adapter / kiro extra when its CLI is dropped), reversibly by
+ *                default (moved to gitignored `.aih/legacy/`). Fail-closed:
+ *                contained, symlink-guarded, backed up before unlink. Never remote.
  * Because no action kind can mutate a remote system, an autonomous run cannot
  * "fake provisioning" — the capability simply does not exist.
  */
-type ActionKind = "write" | "probe" | "doc" | "exec" | "envblock" | "digest";
+type ActionKind = "write" | "probe" | "doc" | "exec" | "envblock" | "digest" | "remove";
 interface WriteAction {
     kind: "write";
     path: string;
@@ -346,7 +350,23 @@ interface DigestAction {
         data?: unknown;
     };
 }
-type Action = WriteAction | DocAction | ProbeAction | ExecAction | EnvBlockAction | DigestAction;
+/**
+ * Remove a repo-LOCAL file that aih exclusively owns — aih's only destructive
+ * action. Emitted solely by `aih prune` for artifacts its detection proved
+ * aih-owned (a per-CLI adapter note, a kiro steering/hook extra) once the CLI is
+ * dropped. The executor fails closed: mandatory {@link assertContained} on the raw
+ * path (no `external` field exists, so a global `~/home` file is structurally
+ * unreachable), a symlink guard, and a backup before unlink. It MOVES the file to
+ * gitignored `.aih/legacy/<path>` (reversible) — the move itself is the backup, so a
+ * dropped CLI's artifacts can always be restored by moving them back.
+ */
+interface RemoveAction {
+    kind: "remove";
+    /** Repo-relative path of the file to remove. */
+    path: string;
+    describe: string;
+}
+type Action = WriteAction | DocAction | ProbeAction | ExecAction | EnvBlockAction | DigestAction | RemoveAction;
 interface Plan {
     capability: string;
     actions: Action[];
@@ -366,6 +386,13 @@ interface PlanContext {
     /** When true, probe actions run and contribute to the verification report. */
     verify: boolean;
     json: boolean;
+    /**
+     * Local process runner. During `plan()` (dry-run) only READ-ONLY tools on FIXED targets
+     * may be run, and only to DECIDE the plan (heal's node/npm/TLS checks pick the repair
+     * ladder; certs reads the OS trust store; report shells `git` for stats). Never shell out
+     * an arbitrary or interpolated command at plan time — that is the `AIH_GRAPH_CMD` class of
+     * bug. The read-only allowlist is pinned by `tests/internals/plan-purity.test.ts` (#35).
+     */
     run: Runner;
     host: HostAdapter;
     env: NodeJS.ProcessEnv;
@@ -413,6 +440,13 @@ interface CommandSpec {
      * blocking the report on a dirty tree is wrong.
      */
     skipWorktreeGate?: boolean;
+    /**
+     * Wire an interactive prompter for this command in a TTY even without `--detect`,
+     * so a bare run can offer a confirmation (e.g. `aih ready` asking to install the
+     * missing core tools). Still suppressed under `--json`/`--yes`/non-TTY, so
+     * automation stays non-interactive.
+     */
+    wantsInstallPrompt?: boolean;
 }
 declare function writeText(path: string, contents: string, describe: string, opts?: {
     mode?: number;
@@ -437,6 +471,7 @@ declare function exec(describe: string, argv: string[], opts?: {
     blockProbesOnFailure?: boolean;
 }): ExecAction;
 declare function envBlock(path: string, scope: string, shell: EnvShell, vars: EnvVar[], describe: string): EnvBlockAction;
+declare function remove(path: string, describe: string): RemoveAction;
 declare function plan(capability: string, ...actions: Action[]): Plan;
 
 /** Capability commands (repo/workstation mutators), dry-run by default. */
@@ -520,6 +555,14 @@ interface WriteSummary {
      */
     effect: "create" | "overwrite" | "merge" | "unchanged" | "kept";
 }
+interface RemoveSummary {
+    path: string;
+    describe: string;
+    /** `remove` = present, will move to `.aih/legacy/`; `absent` = nothing on disk. */
+    effect: "remove" | "absent";
+    /** Repo-relative `.aih/legacy/` destination, when effect is `remove`. */
+    to?: string;
+}
 interface PlanResult {
     capability: string;
     applied: boolean;
@@ -545,6 +588,8 @@ interface PlanResult {
         data?: unknown;
     }[];
     backups: string[];
+    /** Files aih removed (moved to `.aih/legacy/`) or would remove (dry-run). */
+    removed: RemoveSummary[];
     report?: VerificationReport;
 }
 /**
@@ -601,9 +646,15 @@ interface StagedWrite {
     contents: string;
     mode?: number;
 }
+interface AppliedRemoval {
+    path: string;
+    legacyPath: string;
+}
 interface FsTxnResult {
     written: string[];
     backups: string[];
+    /** Files moved out of the tree (source → `.aih/legacy/` destination). */
+    removed: AppliedRemoval[];
 }
 /**
  * Stages writes in memory and commits them atomically. Each existing target is
@@ -614,7 +665,15 @@ interface FsTxnResult {
  */
 declare class FsTransaction {
     private staged;
+    private stagedRemovals;
     stage(path: string, contents: string, mode?: number): void;
+    /**
+     * Stage a file REMOVAL as a reversible move to `legacyPath` (under gitignored
+     * `.aih/legacy/`). The move IS the backup: rollback (and the user) restore by
+     * moving it back. Symlinks are refused at commit (moving a link then restoring it
+     * would recreate a regular file). No-op if the source is already gone.
+     */
+    stageRemoval(path: string, legacyPath: string): void;
     preview(): ReadonlyArray<StagedWrite>;
     commit(): FsTxnResult;
 }
@@ -699,8 +758,8 @@ declare function parseCertLines(stdout: string): CertEntry[];
  */
 declare function parsePemBlocks(stdout: string, subject?: string): CertEntry[];
 
-declare const VERSION = "0.1.0";
+declare const VERSION = "0.3.0";
 /** Build the configured commander program. Imported by both the CLI entry and tests. */
 declare function buildProgram(): Command;
 
-export { ALL_COMMANDS, type AccelBackend, type Action, type ActionKind, type AdapterFactory, AihError, CAPABILITIES, type CertEntry, type Check, type CheckCode, type CommandOption, type CommandSpec, ContextDir, type DigestAction, DirtyWorktreeError, type DocAction, type EnvBlockAction, type EnvShell, type EnvVar, type ExecAction, FsTransaction, FsTxnError, type FsTxnResult, type GpuInfo, type GpuVendor, type HostAdapter, type HostAdapterOptions, MergeError, NotImplementedError, PathContainmentError, type Plan, type PlanContext, type PlanFn, type PlanResult, type Platform, PlatformError, type ProbeAction, READONLY, type RunOptions, type RunResult, type Runner, type Settings, SettingsError, VERSION, type VdiInfo, type Verdict, VerificationError, VerificationReport, type WriteAction, type WriteSummary, beginMarker, buildProgram, deepMerge, defaultRunner, derBase64ToPem, digest, doc, dynamicDigest, endMarker, ensureTrailingNewline, envBlock, exec, executePlan, fakeRunner, formatExport, frontmatter, indent, isPlainObject, jsonFile, lines, loadSettings, makeHostAdapter, managedBlock, missingToolRunner, parseCertLines, parseFirstInt, parseJsoncText, parseNvidiaSmi, parsePemBlocks, plan, probe, probeMany, readIfExists, registerCommands, removeManagedBlock, resolveContents, resolvePlatform, retryTransient, safeCaPattern, stripTrailingNewlines, summarizeResult, upsertManagedBlock, upsertTextBlock, vdiFromEnv, writeArtifact, writeJson, writeText };
+export { ALL_COMMANDS, type AccelBackend, type Action, type ActionKind, type AdapterFactory, AihError, CAPABILITIES, type CertEntry, type Check, type CheckCode, type CommandOption, type CommandSpec, ContextDir, type DigestAction, DirtyWorktreeError, type DocAction, type EnvBlockAction, type EnvShell, type EnvVar, type ExecAction, FsTransaction, FsTxnError, type FsTxnResult, type GpuInfo, type GpuVendor, type HostAdapter, type HostAdapterOptions, MergeError, NotImplementedError, PathContainmentError, type Plan, type PlanContext, type PlanFn, type PlanResult, type Platform, PlatformError, type ProbeAction, READONLY, type RemoveAction, type RemoveSummary, type RunOptions, type RunResult, type Runner, type Settings, SettingsError, VERSION, type VdiInfo, type Verdict, VerificationError, VerificationReport, type WriteAction, type WriteSummary, beginMarker, buildProgram, deepMerge, defaultRunner, derBase64ToPem, digest, doc, dynamicDigest, endMarker, ensureTrailingNewline, envBlock, exec, executePlan, fakeRunner, formatExport, frontmatter, indent, isPlainObject, jsonFile, lines, loadSettings, makeHostAdapter, managedBlock, missingToolRunner, parseCertLines, parseFirstInt, parseJsoncText, parseNvidiaSmi, parsePemBlocks, plan, probe, probeMany, readIfExists, registerCommands, remove, removeManagedBlock, resolveContents, resolvePlatform, retryTransient, safeCaPattern, stripTrailingNewlines, summarizeResult, upsertManagedBlock, upsertTextBlock, vdiFromEnv, writeArtifact, writeJson, writeText };

package/dist/index.js

@@ -49,6 +49,7 @@ import {
   probeMany,
   readIfExists,
   registerCommands,
+  remove,
   removeManagedBlock,
   resolveContents,
   resolvePlatform,
@@ -62,7 +63,7 @@ import {
   writeArtifact,
   writeJson,
   writeText
-} from "./chunk-S7XFTZJW.js";
+} from "./chunk-7GVBGS5N.js";
 export {
   ALL_COMMANDS,
   AihError,
@@ -114,6 +115,7 @@ export {
   probeMany,
   readIfExists,
   registerCommands,
+  remove,
   removeManagedBlock,
   resolveContents,
   resolvePlatform,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aihq/harness",
-  "version": "0.2.0-rc.0",
+  "version": "0.3.0",
   "description": "Enterprise AI Bootstrapping Harness — bootstraps governed, proxy-safe AI coding into workstations and repos",
   "repository": {
     "type": "git",
@@ -16,7 +16,8 @@
   },
   "files": [
     "dist",
-    "README.md"
+    "README.md",
+    "NOTICE"
   ],
   "engines": {
     "node": ">=20"
@@ -57,6 +58,8 @@
     "@biomejs/biome": "^2.5.1",
     "@types/node": "^26.0.1",
     "@vitest/coverage-v8": "^4.1.9",
+    "ajv": "^8.20.0",
+    "ajv-formats": "^3.0.1",
     "happy-dom": "^20.10.6",
     "tsup": "^8.5.1",
     "tsx": "^4.22.4",