@aihq/harness 0.3.0 → 0.4.0

package/dist/cli.js

@@ -1,12 +1,3 @@
 #!/usr/bin/env node
-import {
-  buildProgram
-} from "./chunk-7GVBGS5N.js";
-
-// src/cli.ts
-buildProgram().parseAsync(process.argv).catch((err) => {
-  process.stderr.write(`fatal: ${err instanceof Error ? err.message : String(err)}
-`);
-  process.exitCode = 1;
-});
-//# sourceMappingURL=cli.js.map
+import{ja as s}from"./chunk-2N5U3KQN.js";s().parseAsync(process.argv).catch(r=>{process.stderr.write(`fatal: ${r instanceof Error?r.message:String(r)}
+`),process.exitCode=1});

package/dist/index.d.ts

@@ -186,7 +186,7 @@ type Verdict = "pass" | "fail" | "skip";
  * sealed: a new failure mode means a new member here PLUS the `code` set at the
  * emitter; never derive a code by matching `detail`.
  */
-type CheckCode = "env.node-runtime" | "env.git-missing" | "env.dev-tool-missing" | "env.tool-install-blocked" | "cert.ca-missing" | "tls.verify-failed" | "npm.runtime-broken" | "path.missing" | "mcp.blocked" | "mcp.uv-missing" | "mcp.config-missing" | "mcp.unvendored-offline" | "mcp.policy-denied" | "mcp.hardcoded-secret" | "mcp.allowlist-drift" | "cli.not-detected" | "cli.config-only" | "cli.bootloader-missing" | "cli.bootloader-drift" | "cli.wont-load" | "canon.router-missing" | "canon.context-dir-missing" | "canon.lint-failed" | "canon.adoptable" | "canon.cli-native-unmigrated" | "secrets.plaintext-detected" | "guardrails.gitleaks-missing" | "usage.no-data" | "scale.code-review-graph-missing" | "contract.path-unportable" | "contract.stale" | "org-policy.drift" | "report.context-over-budget" | "report.low-adoption" | "report.contract-untrue" | "ready.blocked" | "trust.fetch-blocked" | "trust.detector-unavailable" | "trust.hidden-unicode" | "trust.prompt-injection" | "trust.source-changed" | "trust.auto-exec-hook" | "trust.dependency-confusion" | "trust.typosquat" | "trust.malicious-code" | "trust.source-drift" | "trust.unpinned-dependency" | "trust.untrusted-publisher" | "trust.unsigned-source";
+type CheckCode = "env.node-runtime" | "env.git-missing" | "env.dev-tool-missing" | "env.tool-install-blocked" | "cert.ca-missing" | "tls.verify-failed" | "npm.runtime-broken" | "path.missing" | "mcp.blocked" | "mcp.uv-missing" | "mcp.config-missing" | "mcp.unvendored-offline" | "mcp.policy-denied" | "mcp.hardcoded-secret" | "mcp.allowlist-drift" | "cli.not-detected" | "cli.config-only" | "cli.bootloader-missing" | "cli.bootloader-drift" | "cli.wont-load" | "canon.router-missing" | "canon.context-dir-missing" | "canon.lint-failed" | "canon.adoptable" | "canon.cli-native-unmigrated" | "secrets.plaintext-detected" | "guardrails.gitleaks-missing" | "usage.no-data" | "scale.code-review-graph-missing" | "contract.path-unportable" | "contract.stale" | "org-policy.drift" | "report.context-over-budget" | "report.low-adoption" | "report.contract-untrue" | "ready.blocked" | "trust.fetch-blocked" | "trust.detector-unavailable" | "trust.hidden-unicode" | "trust.prompt-injection" | "trust.source-changed" | "trust.auto-exec-hook" | "trust.dependency-confusion" | "trust.typosquat" | "trust.malicious-code" | "trust.source-drift" | "trust.unpinned-dependency" | "trust.untrusted-publisher" | "trust.unsigned-source" | "trust.license-missing";
 interface Check {
     name: string;
     verdict: Verdict;
@@ -351,20 +351,25 @@ interface DigestAction {
     };
 }
 /**
- * Remove a repo-LOCAL file that aih exclusively owns — aih's only destructive
- * action. Emitted solely by `aih prune` for artifacts its detection proved
- * aih-owned (a per-CLI adapter note, a kiro steering/hook extra) once the CLI is
- * dropped. The executor fails closed: mandatory {@link assertContained} on the raw
+ * Remove a repo-LOCAL file or directory that aih exclusively owns — aih's only
+ * destructive action. Two emitters: `aih prune` (artifacts its detection proved
+ * aih-owned — a per-CLI adapter note, a kiro steering/hook extra — once the CLI is
+ * dropped) and `aih skill remove` (a user-directed removal of an installed skill's
+ * directory + committed card). The executor fails closed: mandatory {@link assertContained} on the raw
  * path (no `external` field exists, so a global `~/home` file is structurally
- * unreachable), a symlink guard, and a backup before unlink. It MOVES the file to
- * gitignored `.aih/legacy/<path>` (reversible) — the move itself is the backup, so a
- * dropped CLI's artifacts can always be restored by moving them back.
+ * unreachable), a symlink guard, and a backup before unlink. By default it MOVES the
+ * file to gitignored `.aih/legacy/<path>` (reversible; occupied destinations are never
+ * overwritten). Under `hardDelete` it instead renames to the sibling `<path>.aih.bak`
+ * — the same single-slot, latest-wins backup every aih write gets — for users who
+ * explicitly opt out of the archive.
  */
 interface RemoveAction {
     kind: "remove";
     /** Repo-relative path of the file to remove. */
     path: string;
     describe: string;
+    /** Opt-in: single-slot `<path>.aih.bak` rename instead of the `.aih/legacy/` archive. */
+    hardDelete?: boolean;
 }
 type Action = WriteAction | DocAction | ProbeAction | ExecAction | EnvBlockAction | DigestAction | RemoveAction;
 interface Plan {
@@ -471,7 +476,9 @@ declare function exec(describe: string, argv: string[], opts?: {
     blockProbesOnFailure?: boolean;
 }): ExecAction;
 declare function envBlock(path: string, scope: string, shell: EnvShell, vars: EnvVar[], describe: string): EnvBlockAction;
-declare function remove(path: string, describe: string): RemoveAction;
+declare function remove(path: string, describe: string, opts?: {
+    hardDelete?: boolean;
+}): RemoveAction;
 declare function plan(capability: string, ...actions: Action[]): Plan;
 
 /** Capability commands (repo/workstation mutators), dry-run by default. */
@@ -558,9 +565,10 @@ interface WriteSummary {
 interface RemoveSummary {
     path: string;
     describe: string;
-    /** `remove` = present, will move to `.aih/legacy/`; `absent` = nothing on disk. */
-    effect: "remove" | "absent";
-    /** Repo-relative `.aih/legacy/` destination, when effect is `remove`. */
+    /** `remove` = move to `.aih/legacy/`; `delete` = hard-delete (single-slot `.aih.bak`
+     * backup); `absent` = nothing on disk. */
+    effect: "remove" | "delete" | "absent";
+    /** Repo-relative destination (`.aih/legacy/…` or `<path>.aih.bak`), when present. */
     to?: string;
 }
 interface PlanResult {
@@ -672,8 +680,13 @@ declare class FsTransaction {
      * `.aih/legacy/`). The move IS the backup: rollback (and the user) restore by
      * moving it back. Symlinks are refused at commit (moving a link then restoring it
      * would recreate a regular file). No-op if the source is already gone.
+     * `backupSibling` marks a hard-delete destination (`<path>.aih.bak`): still
+     * never-overwrite, but a taken slot falls back to `<path>.N.aih.bak` (matches the
+     * gitignored `*.aih.bak` glob) instead of the archive's `<path>.N`.
      */
-    stageRemoval(path: string, legacyPath: string): void;
+    stageRemoval(path: string, legacyPath: string, opts?: {
+        backupSibling?: boolean;
+    }): void;
     preview(): ReadonlyArray<StagedWrite>;
     commit(): FsTxnResult;
 }
@@ -758,7 +771,7 @@ declare function parseCertLines(stdout: string): CertEntry[];
  */
 declare function parsePemBlocks(stdout: string, subject?: string): CertEntry[];
 
-declare const VERSION = "0.3.0";
+declare const VERSION = "0.4.0";
 /** Build the configured commander program. Imported by both the CLI entry and tests. */
 declare function buildProgram(): Command;
 

package/dist/index.js

@@ -1,133 +1 @@
-import {
-  ALL_COMMANDS,
-  AihError,
-  CAPABILITIES,
-  ContextDir,
-  DirtyWorktreeError,
-  FsTransaction,
-  FsTxnError,
-  MergeError,
-  NotImplementedError,
-  PathContainmentError,
-  PlatformError,
-  READONLY,
-  SettingsError,
-  VERSION,
-  VerificationError,
-  VerificationReport,
-  beginMarker,
-  buildProgram,
-  deepMerge,
-  defaultRunner,
-  derBase64ToPem,
-  digest,
-  doc,
-  dynamicDigest,
-  endMarker,
-  ensureTrailingNewline,
-  envBlock,
-  exec,
-  executePlan,
-  fakeRunner,
-  formatExport,
-  frontmatter,
-  indent,
-  isPlainObject,
-  jsonFile,
-  lines,
-  loadSettings,
-  makeHostAdapter,
-  managedBlock,
-  missingToolRunner,
-  parseCertLines,
-  parseFirstInt,
-  parseJsoncText,
-  parseNvidiaSmi,
-  parsePemBlocks,
-  plan,
-  probe,
-  probeMany,
-  readIfExists,
-  registerCommands,
-  remove,
-  removeManagedBlock,
-  resolveContents,
-  resolvePlatform,
-  retryTransient,
-  safeCaPattern,
-  stripTrailingNewlines,
-  summarizeResult,
-  upsertManagedBlock,
-  upsertTextBlock,
-  vdiFromEnv,
-  writeArtifact,
-  writeJson,
-  writeText
-} from "./chunk-7GVBGS5N.js";
-export {
-  ALL_COMMANDS,
-  AihError,
-  CAPABILITIES,
-  ContextDir,
-  DirtyWorktreeError,
-  FsTransaction,
-  FsTxnError,
-  MergeError,
-  NotImplementedError,
-  PathContainmentError,
-  PlatformError,
-  READONLY,
-  SettingsError,
-  VERSION,
-  VerificationError,
-  VerificationReport,
-  beginMarker,
-  buildProgram,
-  deepMerge,
-  defaultRunner,
-  derBase64ToPem,
-  digest,
-  doc,
-  dynamicDigest,
-  endMarker,
-  ensureTrailingNewline,
-  envBlock,
-  exec,
-  executePlan,
-  fakeRunner,
-  formatExport,
-  frontmatter,
-  indent,
-  isPlainObject,
-  jsonFile,
-  lines,
-  loadSettings,
-  makeHostAdapter,
-  managedBlock,
-  missingToolRunner,
-  parseCertLines,
-  parseFirstInt,
-  parseJsoncText,
-  parseNvidiaSmi,
-  parsePemBlocks,
-  plan,
-  probe,
-  probeMany,
-  readIfExists,
-  registerCommands,
-  remove,
-  removeManagedBlock,
-  resolveContents,
-  resolvePlatform,
-  retryTransient,
-  safeCaPattern,
-  stripTrailingNewlines,
-  summarizeResult,
-  upsertManagedBlock,
-  upsertTextBlock,
-  vdiFromEnv,
-  writeArtifact,
-  writeJson,
-  writeText
-};
-//# sourceMappingURL=index.js.map
+import{$ as fr,A as Y,B as _,C as c,D as h,E as j,F as k,G as q,H as v,I as w,J as y,K as z,L as F,M as G,N as H,O as J,P as K,Q,R as U,S as W,T as X,U as Z,V as $,W as rr,X as or,Y as mr,Z as er,_ as tr,a as p,aa as pr,b as x,ba as xr,c as A,ca as Ar,d as I,da as Ir,e as L,ea as r,f as C,fa as o,g as E,ga as m,h as N,ha as e,i as O,ia as t,j as S,ja as f,k as a,l as d,m as g,n as i,o as s,p as D,q as M,r as P,s as R,t as b,u as l,v as n,w as u,x as B,y as T,z as V}from"./chunk-2N5U3KQN.js";export{m as ALL_COMMANDS,p as AihError,r as CAPABILITIES,g as ContextDir,O as DirtyWorktreeError,a as FsTransaction,I as FsTxnError,E as MergeError,C as NotImplementedError,N as PathContainmentError,A as PlatformError,o as READONLY,x as SettingsError,t as VERSION,L as VerificationError,K as VerificationReport,k as beginMarker,f as buildProgram,J as deepMerge,Z as defaultRunner,or as derBase64ToPem,P as digest,M as doc,R as dynamicDigest,q as endMarker,j as ensureTrailingNewline,u as envBlock,n as exec,W as executePlan,$ as fakeRunner,w as formatExport,c as frontmatter,_ as indent,H as isPlainObject,h as jsonFile,Y as lines,i as loadSettings,Ir as makeHostAdapter,v as managedBlock,rr as missingToolRunner,pr as parseCertLines,tr as parseFirstInt,G as parseJsoncText,fr as parseNvidiaSmi,xr as parsePemBlocks,T as plan,b as probe,l as probeMany,d as readIfExists,e as registerCommands,B as remove,F as removeManagedBlock,U as resolveContents,Ar as resolvePlatform,S as retryTransient,mr as safeCaPattern,V as stripTrailingNewlines,X as summarizeResult,y as upsertManagedBlock,z as upsertTextBlock,er as vdiFromEnv,Q as writeArtifact,D as writeJson,s as writeText};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aihq/harness",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Enterprise AI Bootstrapping Harness — bootstraps governed, proxy-safe AI coding into workstations and repos",
   "repository": {
     "type": "git",