@aihq/harness 0.6.0 → 1.0.1

package/dist/cli.js

@@ -1,4 +1,4 @@
 #!/usr/bin/env node
-import{qa as s,ra as e,sa as n}from"./chunk-PHJ6DL2Y.js";e(process.argv)?s().parse(process.argv):n().then(({program:r,warnings:o})=>{for(let i of o)process.stderr.write(`aih: plugin: ${i}
+import{qa as s,ra as e,sa as n}from"./chunk-WZTIDZFM.js";e(process.argv)?s().parse(process.argv):n().then(({program:r,warnings:o})=>{for(let i of o)process.stderr.write(`aih: plugin: ${i}
 `);return r.parseAsync(process.argv)}).catch(r=>{process.stderr.write(`fatal: ${r instanceof Error?r.message:String(r)}
 `),process.exitCode=1});

package/dist/index.d.ts

@@ -443,6 +443,23 @@ interface CommandOption {
 interface CommandSpec {
     name: string;
     summary: string;
+    /**
+     * Old command NAMES this command still answers to after a rename — the
+     * alias-before-removal deprecation machinery (STABILITY.md). Each entry
+     * registers as a commander alias of this command on the shared registerSpec
+     * path (src/commands/index.ts): the old name dispatches the SAME action with
+     * the same flags, after ONE stderr line naming the replacement. An alias
+     * lives for at least one minor release and is removed only by the next
+     * major (VERSIONING.md), staying reserved in {@link builtinCommandNames}
+     * for its whole grace window. Core-only: the plugin registry strips this
+     * field from plugin specs — a plugin ships new commands, it never renames
+     * (or shadows) core ones. TOP-LEVEL commands only: specs registered through
+     * the manual parent-group paths (trust/skill/pack/marketplace/policy/
+     * evidence subcommands) never pass through registerSpec, so the field is
+     * silently ignored there — wire alias support into that path before the
+     * first nested rename.
+     */
+    deprecatedAliases?: string[];
     options?: CommandOption[];
     plan: PlanFn;
     /** Read-only commands (doctor/status) skip the apply path entirely. */
@@ -505,13 +522,18 @@ declare const CAPABILITIES: CommandSpec[];
 declare const READONLY: CommandSpec[];
 declare const ALL_COMMANDS: CommandSpec[];
 /**
- * Every top-level name the core CLI claims: ALL_COMMANDS plus the parent group
- * names (`workspace` is both a CommandSpec and a group — the Set folds it)
- * plus commander's own reserved `help`/`version`. The plugin registry refuses
- * any external spec colliding with one of these, so a plugin can never shadow
- * `doctor`, capture the `marketplace` group, or impersonate `help`.
+ * Every top-level name the core CLI claims: ALL_COMMANDS' names AND their
+ * deprecated aliases (an old name stays reserved for its whole grace window —
+ * see CommandSpec.deprecatedAliases), plus the parent group names
+ * (`workspace` is both a CommandSpec and a group — the Set folds it) plus
+ * commander's own reserved `help`/`version`. The plugin registry refuses any
+ * external spec colliding with one of these, so a plugin can never shadow
+ * `doctor`, capture the `marketplace` group, impersonate `help`, or squat on
+ * a deprecated old name mid-migration. `specs` is a test seam (defaults to
+ * ALL_COMMANDS) so the alias reservation is provable while zero built-ins
+ * carry one.
  */
-declare function builtinCommandNames(): ReadonlySet<string>;
+declare function builtinCommandNames(specs?: readonly CommandSpec[]): ReadonlySet<string>;
 /**
  * Register every command on the program. `extra` carries EXTERNAL plugin specs
  * (see src/plugins/registry.ts, already gated + collision-free): they flow
@@ -868,6 +890,12 @@ declare function parsePemBlocks(stdout: string, subject?: string): CertEntry[];
  *    commander's reserved `--help`/`-h`/`--version`/`-V`.
  *  - `skipWorktreeGate` is never honored for plugin commands — the field is
  *    stripped from the registered copy (see {@link stripWorktreeGateField}).
+ *  - `deprecatedAliases` is never honored for plugin commands — aliases are
+ *    the CORE rename machinery (STABILITY.md), and an alias is an extra
+ *    dispatch name the collision rules above do not walk. The field is
+ *    stripped from the registered copy with a warning (see
+ *    {@link stripDeprecatedAliasesField}); built-in aliases stay reserved
+ *    against plugin NAMES via builtinCommandNames.
  *  - Warnings render hostile input: every plugin-influenced string that lands
  *    in a warning routes through {@link sanitizeLabel} first.
  *
@@ -940,7 +968,7 @@ declare function allowedPluginRoots(): string[];
  */
 declare function loadExternalCommands(builtinNames: ReadonlySet<string>, opts?: PluginLoadOptions): Promise<PluginLoadResult>;
 
-declare const VERSION = "0.6.0";
+declare const VERSION = "1.0.1";
 /**
  * Build the configured commander program. Imported by both the CLI entry and
  * tests. Stays SYNC: `extra` lets callers merge pre-loaded plugin specs — the

package/dist/index.js

@@ -1 +1 @@
-import{$ as xr,A as Y,B as _,C as c,D as j,E as k,F as q,G as v,H as w,I as y,J as z,K as F,L as G,M as H,N as J,O as K,P as Q,Q as U,R as X,S as Z,T as $,U as rr,V as or,W as mr,X as er,Y as tr,Z as fr,_ as pr,a as i,aa as ir,b as a,ba as ar,c as A,ca as Ar,d,da as dr,e as g,ea as gr,f as l,fa as lr,g as n,ga as nr,h as s,ha as sr,i as u,ia as ur,j as C,ja as Cr,k as I,ka as r,l as L,la as o,m as N,ma as m,n as P,na as e,o as b,oa as t,p as E,pa as f,q as O,qa as p,r as S,s as D,sa as x,t as M,u as R,v as h,w as B,x as T,y as V,z as W}from"./chunk-PHJ6DL2Y.js";export{m as ALL_COMMANDS,i as AihError,r as CAPABILITIES,P as ContextDir,u as DirtyWorktreeError,I as FsTransaction,d as FsTxnError,n as MergeError,l as NotImplementedError,lr as PLUGIN_PACKAGE,s as PathContainmentError,A as PlatformError,o as READONLY,nr as SHARED_FLAG_TOKENS,a as SettingsError,f as VERSION,g as VerificationError,U as VerificationReport,ur as allowedPluginRoots,v as beginMarker,p as buildProgram,x as buildProgramWithPlugins,e as builtinCommandNames,Q as deepMerge,or as defaultRunner,tr as derBase64ToPem,D as digest,S as doc,M as dynamicDigest,w as endMarker,q as ensureTrailingNewline,T as envBlock,B as exec,$ as executePlan,mr as fakeRunner,z as formatExport,j as frontmatter,c as indent,K as isPlainObject,k as jsonFile,_ as lines,Cr as loadExternalCommands,b as loadSettings,gr as makeHostAdapter,y as managedBlock,er as missingToolRunner,ar as parseCertLines,xr as parseFirstInt,J as parseJsoncText,ir as parseNvidiaSmi,Ar as parsePemBlocks,W as plan,R as probe,h as probeMany,L as readIfExists,N as readRegularFile,t as registerCommands,V as remove,H as removeManagedBlock,Z as resolveContents,dr as resolvePlatform,C as retryTransient,fr as safeCaPattern,sr as sanitizeLabel,Y as stripTrailingNewlines,rr as summarizeResult,F as upsertManagedBlock,G as upsertTextBlock,pr as vdiFromEnv,X as writeArtifact,O as writeJson,E as writeText};
+import{$ as xr,A as Y,B as _,C as c,D as j,E as k,F as q,G as v,H as w,I as y,J as z,K as F,L as G,M as H,N as J,O as K,P as Q,Q as U,R as X,S as Z,T as $,U as rr,V as or,W as mr,X as er,Y as tr,Z as fr,_ as pr,a as i,aa as ir,b as a,ba as ar,c as A,ca as Ar,d,da as dr,e as g,ea as gr,f as l,fa as lr,g as n,ga as nr,h as s,ha as sr,i as u,ia as ur,j as C,ja as Cr,k as I,ka as r,l as L,la as o,m as N,ma as m,n as P,na as e,o as b,oa as t,p as E,pa as f,q as O,qa as p,r as S,s as D,sa as x,t as M,u as R,v as h,w as B,x as T,y as V,z as W}from"./chunk-WZTIDZFM.js";export{m as ALL_COMMANDS,i as AihError,r as CAPABILITIES,P as ContextDir,u as DirtyWorktreeError,I as FsTransaction,d as FsTxnError,n as MergeError,l as NotImplementedError,lr as PLUGIN_PACKAGE,s as PathContainmentError,A as PlatformError,o as READONLY,nr as SHARED_FLAG_TOKENS,a as SettingsError,f as VERSION,g as VerificationError,U as VerificationReport,ur as allowedPluginRoots,v as beginMarker,p as buildProgram,x as buildProgramWithPlugins,e as builtinCommandNames,Q as deepMerge,or as defaultRunner,tr as derBase64ToPem,D as digest,S as doc,M as dynamicDigest,w as endMarker,q as ensureTrailingNewline,T as envBlock,B as exec,$ as executePlan,mr as fakeRunner,z as formatExport,j as frontmatter,c as indent,K as isPlainObject,k as jsonFile,_ as lines,Cr as loadExternalCommands,b as loadSettings,gr as makeHostAdapter,y as managedBlock,er as missingToolRunner,ar as parseCertLines,xr as parseFirstInt,J as parseJsoncText,ir as parseNvidiaSmi,Ar as parsePemBlocks,W as plan,R as probe,h as probeMany,L as readIfExists,N as readRegularFile,t as registerCommands,V as remove,H as removeManagedBlock,Z as resolveContents,dr as resolvePlatform,C as retryTransient,fr as safeCaPattern,sr as sanitizeLabel,Y as stripTrailingNewlines,rr as summarizeResult,F as upsertManagedBlock,G as upsertTextBlock,pr as vdiFromEnv,X as writeArtifact,O as writeJson,E as writeText};

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aihq/harness",
-  "version": "0.6.0",
-  "description": "Enterprise AI Bootstrapping Harness — bootstraps governed, proxy-safe AI coding into workstations and repos",
+  "version": "1.0.1",
+  "description": "Enterprise AI Bootstrapping Harness — governed AI-assisted coding for enterprise workstations and repos: TLS trust, repo canon, skill supply chain, evidence",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/samartomar/ai-harness.git"