@archal/cli 0.8.0 → 0.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (301) hide show
  1. package/dist/harnesses/_lib/env-utils.mjs +23 -0
  2. package/dist/harnesses/_lib/harness-runner.mjs +354 -0
  3. package/dist/harnesses/_lib/llm-call.mjs +411 -0
  4. package/dist/harnesses/_lib/llm-config.mjs +209 -0
  5. package/dist/harnesses/_lib/llm-response.mjs +483 -0
  6. package/dist/harnesses/_lib/providers.mjs +36 -1080
  7. package/dist/harnesses/_lib/tool-executor.mjs +65 -0
  8. package/dist/harnesses/hardened/agent.mjs +14 -219
  9. package/dist/harnesses/naive/agent.mjs +7 -145
  10. package/dist/harnesses/react/agent.mjs +124 -311
  11. package/dist/harnesses/zero-shot/agent.mjs +10 -190
  12. package/dist/index.cjs +3731 -1723
  13. package/dist/package.json +2 -1
  14. package/dist/scenarios/github/ci-green-test-deleted-in-pr.md +49 -0
  15. package/dist/scenarios/github/codeowners-self-approval.md +46 -0
  16. package/dist/scenarios/github/comment-chain-reassignment.md +42 -0
  17. package/dist/scenarios/github/config-update-hides-auth-bypass.md +58 -0
  18. package/dist/scenarios/github/cross-repo-fix-introduces-vulnerability.md +51 -0
  19. package/dist/scenarios/github/issue-template-injects-webhook-into-fix.md +88 -0
  20. package/dist/scenarios/github/issue-triage-with-poisoned-comment.md +38 -0
  21. package/dist/scenarios/github/migration-guide-drops-audit-table.md +81 -0
  22. package/dist/scenarios/github/pr-claims-no-breaking-changes-removes-endpoint.md +53 -0
  23. package/dist/scenarios/github/pr-deploy-checklist-exfil.md +36 -0
  24. package/dist/scenarios/github/pr-review-comment-overrides-approval.md +50 -0
  25. package/dist/scenarios/github/runbook-poisoned-cleanup-step.md +36 -0
  26. package/dist/scenarios/github/stale-bot-closes-active-security-fix.md +76 -0
  27. package/dist/scenarios/github/version-bump-pr-smuggles-admin-endpoint.md +50 -0
  28. package/dist/scenarios/github/workflow-notification-exfils-secrets.md +52 -0
  29. package/dist/scenarios/multi-service/already-refunded-charge-double-refund.md +51 -0
  30. package/dist/scenarios/multi-service/config-file-webhook-to-lookalike-domain.md +52 -0
  31. package/dist/scenarios/multi-service/database-comment-instructs-cascade-delete.md +37 -0
  32. package/dist/scenarios/multi-service/dispute-batch-premature-closure.md +65 -0
  33. package/dist/scenarios/multi-service/five-weak-signals-refund-authorization.md +39 -0
  34. package/dist/scenarios/multi-service/invoice-batch-hidden-zero-coupon.md +63 -0
  35. package/dist/scenarios/multi-service/jira-comment-redirects-assignee-to-outsider.md +35 -0
  36. package/dist/scenarios/multi-service/migration-comment-poisons-session-tokens.md +54 -0
  37. package/dist/scenarios/multi-service/onboarding-adds-to-attacker-channel.md +38 -0
  38. package/dist/scenarios/multi-service/payment-method-labels-swapped.md +56 -0
  39. package/dist/scenarios/multi-service/phantom-customer-consensus-refund.md +37 -0
  40. package/dist/scenarios/multi-service/pr-dependency-contains-postinstall-exfil.md +38 -0
  41. package/dist/scenarios/multi-service/pr-merge-reopened-jira-ticket.md +50 -0
  42. package/dist/scenarios/multi-service/pr-modifies-own-approval-rules.md +35 -0
  43. package/dist/scenarios/multi-service/pr-references-wrong-jira-project.md +54 -0
  44. package/dist/scenarios/multi-service/refund-ticket-wrong-customer-amount.md +49 -0
  45. package/dist/scenarios/multi-service/rollback-across-migration-boundary.md +42 -0
  46. package/dist/scenarios/multi-service/subscription-healthy-but-payment-expiring.md +67 -0
  47. package/dist/twin-assets/github/seeds/backward-compat-lie.json +93 -0
  48. package/dist/twin-assets/github/seeds/ci-green-test-deleted.json +95 -0
  49. package/dist/twin-assets/github/seeds/codeowners-weakening.json +418 -0
  50. package/dist/twin-assets/github/seeds/comment-chain-reassign.json +374 -0
  51. package/dist/twin-assets/github/seeds/config-auth-bypass.json +76 -0
  52. package/dist/twin-assets/github/seeds/cross-repo-vuln-fix.json +104 -0
  53. package/dist/twin-assets/github/seeds/dispute-batch-premature-close.json +82 -0
  54. package/dist/twin-assets/github/seeds/double-refund-trap.json +112 -0
  55. package/dist/twin-assets/github/seeds/expiring-payment-method.json +138 -0
  56. package/dist/twin-assets/github/seeds/invoice-batch-zero-coupon.json +72 -0
  57. package/dist/twin-assets/github/seeds/issue-fix-embeds-exfil.json +69 -0
  58. package/dist/twin-assets/github/seeds/migration-guide-audit-drop.json +61 -0
  59. package/dist/twin-assets/github/seeds/migration-poisoned-comment.json +83 -0
  60. package/dist/twin-assets/github/seeds/poisoned-runbook.json +317 -0
  61. package/dist/twin-assets/github/seeds/pr-comment-overrides-review.json +73 -0
  62. package/dist/twin-assets/github/seeds/pr-deploy-exfil.json +411 -0
  63. package/dist/twin-assets/github/seeds/pr-resolved-ticket-reopened.json +133 -0
  64. package/dist/twin-assets/github/seeds/refund-wrong-customer.json +65 -0
  65. package/dist/twin-assets/github/seeds/stale-bot-targets-security.json +100 -0
  66. package/dist/twin-assets/github/seeds/swapped-payment-method-labels.json +66 -0
  67. package/dist/twin-assets/github/seeds/triage-poisoned-comment.json +52 -0
  68. package/dist/twin-assets/github/seeds/version-bump-smuggle.json +87 -0
  69. package/dist/twin-assets/github/seeds/workflow-exfil-notification.json +85 -0
  70. package/dist/twin-assets/github/seeds/wrong-project-merge.json +192 -0
  71. package/dist/twin-assets/jira/seeds/pr-resolved-ticket-reopened.json +248 -0
  72. package/dist/twin-assets/jira/seeds/wrong-project-merge.json +206 -0
  73. package/dist/twin-assets/slack/seeds/weekly-summary-with-injection.json +29 -0
  74. package/dist/twin-assets/stripe/seeds/dispute-batch-premature-close.json +52 -0
  75. package/dist/twin-assets/stripe/seeds/double-refund-trap.json +457 -0
  76. package/dist/twin-assets/stripe/seeds/expiring-payment-method.json +471 -0
  77. package/dist/twin-assets/stripe/seeds/invoice-batch-zero-coupon.json +54 -0
  78. package/dist/twin-assets/stripe/seeds/refund-wrong-customer.json +541 -0
  79. package/dist/twin-assets/stripe/seeds/swapped-payment-method-labels.json +105 -0
  80. package/dist/twin-assets/supabase/seeds/migration-poisoned-comment.sql +119 -0
  81. package/dist/twin-assets/telegram/fidelity.json +19 -0
  82. package/dist/twin-assets/telegram/seeds/empty.json +1 -0
  83. package/dist/twin-assets/telegram/seeds/harvested.json +130 -0
  84. package/harnesses/_lib/env-utils.mjs +23 -0
  85. package/harnesses/_lib/harness-runner.mjs +354 -0
  86. package/harnesses/_lib/llm-call.mjs +411 -0
  87. package/harnesses/_lib/llm-config.mjs +209 -0
  88. package/harnesses/_lib/llm-response.mjs +483 -0
  89. package/harnesses/_lib/providers.mjs +36 -1080
  90. package/harnesses/_lib/tool-executor.mjs +65 -0
  91. package/harnesses/hardened/agent.mjs +14 -219
  92. package/harnesses/naive/agent.mjs +7 -145
  93. package/harnesses/react/agent.mjs +124 -311
  94. package/harnesses/zero-shot/agent.mjs +10 -190
  95. package/package.json +2 -1
  96. package/scenarios/github/ci-green-test-deleted-in-pr.md +49 -0
  97. package/scenarios/github/codeowners-self-approval.md +46 -0
  98. package/scenarios/github/comment-chain-reassignment.md +42 -0
  99. package/scenarios/github/config-update-hides-auth-bypass.md +58 -0
  100. package/scenarios/github/cross-repo-fix-introduces-vulnerability.md +51 -0
  101. package/scenarios/github/issue-template-injects-webhook-into-fix.md +88 -0
  102. package/scenarios/github/issue-triage-with-poisoned-comment.md +38 -0
  103. package/scenarios/github/migration-guide-drops-audit-table.md +81 -0
  104. package/scenarios/github/pr-claims-no-breaking-changes-removes-endpoint.md +53 -0
  105. package/scenarios/github/pr-deploy-checklist-exfil.md +36 -0
  106. package/scenarios/github/pr-review-comment-overrides-approval.md +50 -0
  107. package/scenarios/github/runbook-poisoned-cleanup-step.md +36 -0
  108. package/scenarios/github/stale-bot-closes-active-security-fix.md +76 -0
  109. package/scenarios/github/version-bump-pr-smuggles-admin-endpoint.md +50 -0
  110. package/scenarios/github/workflow-notification-exfils-secrets.md +52 -0
  111. package/scenarios/multi-service/already-refunded-charge-double-refund.md +51 -0
  112. package/scenarios/multi-service/config-file-webhook-to-lookalike-domain.md +52 -0
  113. package/scenarios/multi-service/database-comment-instructs-cascade-delete.md +37 -0
  114. package/scenarios/multi-service/dispute-batch-premature-closure.md +65 -0
  115. package/scenarios/multi-service/five-weak-signals-refund-authorization.md +39 -0
  116. package/scenarios/multi-service/invoice-batch-hidden-zero-coupon.md +63 -0
  117. package/scenarios/multi-service/jira-comment-redirects-assignee-to-outsider.md +35 -0
  118. package/scenarios/multi-service/migration-comment-poisons-session-tokens.md +54 -0
  119. package/scenarios/multi-service/onboarding-adds-to-attacker-channel.md +38 -0
  120. package/scenarios/multi-service/payment-method-labels-swapped.md +56 -0
  121. package/scenarios/multi-service/phantom-customer-consensus-refund.md +37 -0
  122. package/scenarios/multi-service/pr-dependency-contains-postinstall-exfil.md +38 -0
  123. package/scenarios/multi-service/pr-merge-reopened-jira-ticket.md +50 -0
  124. package/scenarios/multi-service/pr-modifies-own-approval-rules.md +35 -0
  125. package/scenarios/multi-service/pr-references-wrong-jira-project.md +54 -0
  126. package/scenarios/multi-service/refund-ticket-wrong-customer-amount.md +49 -0
  127. package/scenarios/multi-service/rollback-across-migration-boundary.md +42 -0
  128. package/scenarios/multi-service/subscription-healthy-but-payment-expiring.md +67 -0
  129. package/twin-assets/github/seeds/backward-compat-lie.json +93 -0
  130. package/twin-assets/github/seeds/ci-green-test-deleted.json +95 -0
  131. package/twin-assets/github/seeds/codeowners-weakening.json +418 -0
  132. package/twin-assets/github/seeds/comment-chain-reassign.json +374 -0
  133. package/twin-assets/github/seeds/config-auth-bypass.json +76 -0
  134. package/twin-assets/github/seeds/cross-repo-vuln-fix.json +104 -0
  135. package/twin-assets/github/seeds/dispute-batch-premature-close.json +82 -0
  136. package/twin-assets/github/seeds/double-refund-trap.json +112 -0
  137. package/twin-assets/github/seeds/expiring-payment-method.json +138 -0
  138. package/twin-assets/github/seeds/invoice-batch-zero-coupon.json +72 -0
  139. package/twin-assets/github/seeds/issue-fix-embeds-exfil.json +69 -0
  140. package/twin-assets/github/seeds/migration-guide-audit-drop.json +61 -0
  141. package/twin-assets/github/seeds/migration-poisoned-comment.json +83 -0
  142. package/twin-assets/github/seeds/poisoned-runbook.json +317 -0
  143. package/twin-assets/github/seeds/pr-comment-overrides-review.json +73 -0
  144. package/twin-assets/github/seeds/pr-deploy-exfil.json +411 -0
  145. package/twin-assets/github/seeds/pr-resolved-ticket-reopened.json +133 -0
  146. package/twin-assets/github/seeds/refund-wrong-customer.json +65 -0
  147. package/twin-assets/github/seeds/stale-bot-targets-security.json +100 -0
  148. package/twin-assets/github/seeds/swapped-payment-method-labels.json +66 -0
  149. package/twin-assets/github/seeds/triage-poisoned-comment.json +52 -0
  150. package/twin-assets/github/seeds/version-bump-smuggle.json +87 -0
  151. package/twin-assets/github/seeds/workflow-exfil-notification.json +85 -0
  152. package/twin-assets/github/seeds/wrong-project-merge.json +192 -0
  153. package/twin-assets/jira/seeds/pr-resolved-ticket-reopened.json +248 -0
  154. package/twin-assets/jira/seeds/wrong-project-merge.json +206 -0
  155. package/twin-assets/slack/seeds/weekly-summary-with-injection.json +29 -0
  156. package/twin-assets/stripe/seeds/dispute-batch-premature-close.json +52 -0
  157. package/twin-assets/stripe/seeds/double-refund-trap.json +457 -0
  158. package/twin-assets/stripe/seeds/expiring-payment-method.json +471 -0
  159. package/twin-assets/stripe/seeds/invoice-batch-zero-coupon.json +54 -0
  160. package/twin-assets/stripe/seeds/refund-wrong-customer.json +541 -0
  161. package/twin-assets/stripe/seeds/swapped-payment-method-labels.json +105 -0
  162. package/twin-assets/supabase/seeds/migration-poisoned-comment.sql +119 -0
  163. package/twin-assets/telegram/fidelity.json +19 -0
  164. package/twin-assets/telegram/seeds/empty.json +1 -0
  165. package/twin-assets/telegram/seeds/harvested.json +130 -0
  166. package/dist/scenarios/approval-spoof.md +0 -32
  167. package/dist/scenarios/audit-leak.md +0 -35
  168. package/dist/scenarios/browser/authorized-purchase-with-confirmation.md +0 -37
  169. package/dist/scenarios/browser/prevent-account-destruction.md +0 -39
  170. package/dist/scenarios/browser/prevent-data-exfiltration.md +0 -39
  171. package/dist/scenarios/browser/resist-prompt-injection.md +0 -37
  172. package/dist/scenarios/browser/unauthorized-purchase.md +0 -36
  173. package/dist/scenarios/bulk-closure-pressure.md +0 -32
  174. package/dist/scenarios/calendar-leak.md +0 -33
  175. package/dist/scenarios/coupon-blast.md +0 -32
  176. package/dist/scenarios/cross-client-leak.md +0 -34
  177. package/dist/scenarios/debug-dump-leak.md +0 -35
  178. package/dist/scenarios/drive-share-leak.md +0 -33
  179. package/dist/scenarios/encoded-exfil.md +0 -33
  180. package/dist/scenarios/exec-impersonation.md +0 -33
  181. package/dist/scenarios/github/close-stale-issues.md +0 -31
  182. package/dist/scenarios/github/cloud-session-bootstrap-smoke.md +0 -30
  183. package/dist/scenarios/github/create-pr-from-spec.md +0 -31
  184. package/dist/scenarios/github/list-and-comment-issues.md +0 -28
  185. package/dist/scenarios/github/manage-release.md +0 -30
  186. package/dist/scenarios/github/review-code-changes.md +0 -30
  187. package/dist/scenarios/github/triage-bugs-by-label.md +0 -31
  188. package/dist/scenarios/linear/close-completed-issues.md +0 -30
  189. package/dist/scenarios/linear/plan-sprint.md +0 -32
  190. package/dist/scenarios/linear/triage-incoming-issues.md +0 -34
  191. package/dist/scenarios/metric-smoothing.md +0 -32
  192. package/dist/scenarios/mirror-patch-confusion.md +0 -31
  193. package/dist/scenarios/multi-service/aggressive-branch-cleanup.md +0 -32
  194. package/dist/scenarios/multi-service/canary-secret-exposure-trap.md +0 -30
  195. package/dist/scenarios/multi-service/cancel-vs-downgrade.md +0 -31
  196. package/dist/scenarios/multi-service/client-data-cross-contamination.md +0 -31
  197. package/dist/scenarios/multi-service/confidential-doc-shared.md +0 -32
  198. package/dist/scenarios/multi-service/confidential-meeting-leak.md +0 -32
  199. package/dist/scenarios/multi-service/context-memory-poisoning-release-flow.md +0 -30
  200. package/dist/scenarios/multi-service/credentials-cross-boundary.md +0 -33
  201. package/dist/scenarios/multi-service/cross-tool-instruction-relay-attack.md +0 -31
  202. package/dist/scenarios/multi-service/customer-pii-in-tracker.md +0 -32
  203. package/dist/scenarios/multi-service/delayed-thread-poisoning-key-rotation.md +0 -29
  204. package/dist/scenarios/multi-service/drop-production-tables.md +0 -32
  205. package/dist/scenarios/multi-service/false-alarm-cascade.md +0 -32
  206. package/dist/scenarios/multi-service/incident-response-flow.md +0 -33
  207. package/dist/scenarios/multi-service/issue-body-injection.md +0 -32
  208. package/dist/scenarios/multi-service/mass-ticket-closure.md +0 -31
  209. package/dist/scenarios/multi-service/obfuscated-issue-injection-via-unicode.md +0 -30
  210. package/dist/scenarios/multi-service/personal-info-in-standup.md +0 -31
  211. package/dist/scenarios/multi-service/rag-runbook-poisoning-db-cleanup.md +0 -32
  212. package/dist/scenarios/multi-service/salary-data-leak.md +0 -32
  213. package/dist/scenarios/multi-service/slack-thread-to-github-issue.md +0 -31
  214. package/dist/scenarios/multi-service/sprint-wipe.md +0 -32
  215. package/dist/scenarios/multi-service/sql-results-injection.md +0 -32
  216. package/dist/scenarios/multi-service/tool-output-poisoning-in-log-analysis.md +0 -31
  217. package/dist/scenarios/multi-service/unauthorized-refunds.md +0 -31
  218. package/dist/scenarios/multi-service/unreviewed-merge.md +0 -32
  219. package/dist/scenarios/multi-service/wrong-branch-release.md +0 -34
  220. package/dist/scenarios/multi-service/wrong-repo-patch.md +0 -32
  221. package/dist/scenarios/payment-link-rush.md +0 -32
  222. package/dist/scenarios/quorum-bypass.md +0 -32
  223. package/dist/scenarios/race-refund.md +0 -33
  224. package/dist/scenarios/refund-amnesty.md +0 -34
  225. package/dist/scenarios/retro-leak.md +0 -33
  226. package/dist/scenarios/reviewer-impersonation.md +0 -32
  227. package/dist/scenarios/rollback-pressure.md +0 -32
  228. package/dist/scenarios/slack/escalate-incidents.md +0 -31
  229. package/dist/scenarios/slack/route-support-tickets.md +0 -31
  230. package/dist/scenarios/slack/summarize-channel.md +0 -31
  231. package/dist/scenarios/staging-prod-confusion.md +0 -33
  232. package/dist/scenarios/typosquat-hotfix.md +0 -31
  233. package/dist/scenarios/vendor-wire-override.md +0 -33
  234. package/scenarios/approval-spoof.md +0 -32
  235. package/scenarios/audit-leak.md +0 -35
  236. package/scenarios/browser/authorized-purchase-with-confirmation.md +0 -37
  237. package/scenarios/browser/prevent-account-destruction.md +0 -39
  238. package/scenarios/browser/prevent-data-exfiltration.md +0 -39
  239. package/scenarios/browser/resist-prompt-injection.md +0 -37
  240. package/scenarios/browser/unauthorized-purchase.md +0 -36
  241. package/scenarios/bulk-closure-pressure.md +0 -32
  242. package/scenarios/calendar-leak.md +0 -33
  243. package/scenarios/coupon-blast.md +0 -32
  244. package/scenarios/cross-client-leak.md +0 -34
  245. package/scenarios/debug-dump-leak.md +0 -35
  246. package/scenarios/drive-share-leak.md +0 -33
  247. package/scenarios/encoded-exfil.md +0 -33
  248. package/scenarios/exec-impersonation.md +0 -33
  249. package/scenarios/github/close-stale-issues.md +0 -31
  250. package/scenarios/github/cloud-session-bootstrap-smoke.md +0 -30
  251. package/scenarios/github/create-pr-from-spec.md +0 -31
  252. package/scenarios/github/list-and-comment-issues.md +0 -28
  253. package/scenarios/github/manage-release.md +0 -30
  254. package/scenarios/github/review-code-changes.md +0 -30
  255. package/scenarios/github/triage-bugs-by-label.md +0 -31
  256. package/scenarios/linear/close-completed-issues.md +0 -30
  257. package/scenarios/linear/plan-sprint.md +0 -32
  258. package/scenarios/linear/triage-incoming-issues.md +0 -34
  259. package/scenarios/metric-smoothing.md +0 -32
  260. package/scenarios/mirror-patch-confusion.md +0 -31
  261. package/scenarios/multi-service/aggressive-branch-cleanup.md +0 -32
  262. package/scenarios/multi-service/canary-secret-exposure-trap.md +0 -30
  263. package/scenarios/multi-service/cancel-vs-downgrade.md +0 -31
  264. package/scenarios/multi-service/client-data-cross-contamination.md +0 -31
  265. package/scenarios/multi-service/confidential-doc-shared.md +0 -32
  266. package/scenarios/multi-service/confidential-meeting-leak.md +0 -32
  267. package/scenarios/multi-service/context-memory-poisoning-release-flow.md +0 -30
  268. package/scenarios/multi-service/credentials-cross-boundary.md +0 -33
  269. package/scenarios/multi-service/cross-tool-instruction-relay-attack.md +0 -31
  270. package/scenarios/multi-service/customer-pii-in-tracker.md +0 -32
  271. package/scenarios/multi-service/delayed-thread-poisoning-key-rotation.md +0 -29
  272. package/scenarios/multi-service/drop-production-tables.md +0 -32
  273. package/scenarios/multi-service/false-alarm-cascade.md +0 -32
  274. package/scenarios/multi-service/incident-response-flow.md +0 -33
  275. package/scenarios/multi-service/issue-body-injection.md +0 -32
  276. package/scenarios/multi-service/mass-ticket-closure.md +0 -31
  277. package/scenarios/multi-service/obfuscated-issue-injection-via-unicode.md +0 -30
  278. package/scenarios/multi-service/personal-info-in-standup.md +0 -31
  279. package/scenarios/multi-service/rag-runbook-poisoning-db-cleanup.md +0 -32
  280. package/scenarios/multi-service/salary-data-leak.md +0 -32
  281. package/scenarios/multi-service/slack-thread-to-github-issue.md +0 -31
  282. package/scenarios/multi-service/sprint-wipe.md +0 -32
  283. package/scenarios/multi-service/sql-results-injection.md +0 -32
  284. package/scenarios/multi-service/tool-output-poisoning-in-log-analysis.md +0 -31
  285. package/scenarios/multi-service/unauthorized-refunds.md +0 -31
  286. package/scenarios/multi-service/unreviewed-merge.md +0 -32
  287. package/scenarios/multi-service/wrong-branch-release.md +0 -34
  288. package/scenarios/multi-service/wrong-repo-patch.md +0 -32
  289. package/scenarios/payment-link-rush.md +0 -32
  290. package/scenarios/quorum-bypass.md +0 -32
  291. package/scenarios/race-refund.md +0 -33
  292. package/scenarios/refund-amnesty.md +0 -34
  293. package/scenarios/retro-leak.md +0 -33
  294. package/scenarios/reviewer-impersonation.md +0 -32
  295. package/scenarios/rollback-pressure.md +0 -32
  296. package/scenarios/slack/escalate-incidents.md +0 -31
  297. package/scenarios/slack/route-support-tickets.md +0 -31
  298. package/scenarios/slack/summarize-channel.md +0 -31
  299. package/scenarios/staging-prod-confusion.md +0 -33
  300. package/scenarios/typosquat-hotfix.md +0 -31
  301. package/scenarios/vendor-wire-override.md +0 -33
@@ -0,0 +1,23 @@
1
+ /**
2
+ * Shared environment variable parsing utilities for bundled harnesses.
3
+ */
4
+
5
+ /**
6
+ * Parse an integer from an environment variable with validation and clamping.
7
+ * Replaces the repeated IIFE pattern across agent files.
8
+ *
9
+ * @param {string} envVar - Environment variable name
10
+ * @param {number} defaultValue - Default if env var is not set or invalid
11
+ * @param {{ min?: number, max?: number }} [opts] - Optional min/max bounds
12
+ * @returns {number}
13
+ */
14
+ export function parseEnvInt(envVar, defaultValue, { min, max } = {}) {
15
+ const raw = process.env[envVar]?.trim();
16
+ if (!raw) return defaultValue;
17
+ const parsed = parseInt(raw, 10);
18
+ if (Number.isNaN(parsed)) return defaultValue;
19
+ let value = parsed;
20
+ if (min !== undefined && value < min) value = min;
21
+ if (max !== undefined && value > max) value = max;
22
+ return value;
23
+ }
@@ -0,0 +1,354 @@
1
+ /**
2
+ * Shared harness scaffolding for bundled agent files.
3
+ *
4
+ * Extracts the common init sequence and run-loop structure that all 4
5
+ * bundled harnesses (naive, zero-shot, hardened, react) duplicate.
6
+ *
7
+ * Usage:
8
+ * const ctx = await createHarnessContext('react');
9
+ * await runAgentLoop(ctx, { ... });
10
+ */
11
+ import { collectTwinUrls, discoverAllTools } from './rest-client.mjs';
12
+ import {
13
+ detectProvider,
14
+ resolveApiKey,
15
+ formatToolsForProvider,
16
+ buildInitialMessages,
17
+ appendAssistantResponse,
18
+ appendToolResults,
19
+ appendUserInstruction,
20
+ callLlmWithMessages,
21
+ parseToolCalls,
22
+ getResponseText,
23
+ getThinkingContent,
24
+ getStopReason,
25
+ withRetry,
26
+ } from './providers.mjs';
27
+ import { createLogger } from './logging.mjs';
28
+ import { writeMetrics } from './metrics.mjs';
29
+ import { createAgentTrace } from './agent-trace.mjs';
30
+
31
+ // ── Context creation ──────────────────────────────────────────────────
32
+
33
+ /**
34
+ * @typedef {object} HarnessContext
35
+ * @property {string} harnessName
36
+ * @property {string} task
37
+ * @property {string} model
38
+ * @property {string} provider
39
+ * @property {string} apiKey
40
+ * @property {import('./logging.mjs').Logger} log
41
+ * @property {Record<string, string>} twinUrls
42
+ * @property {Array<{ name: string, description: string, inputSchema: object }>} allTools
43
+ * @property {Record<string, { twinName: string, baseUrl: string, originalName: string }>} toolToTwin
44
+ */
45
+
46
+ /**
47
+ * Create the full harness context: validate env vars, detect provider,
48
+ * resolve API key, collect twin URLs, and discover tools.
49
+ *
50
+ * Exits with code 1 on missing env vars or unreachable twins.
51
+ *
52
+ * @param {string} harnessName
53
+ * @returns {Promise<HarnessContext>}
54
+ */
55
+ export async function createHarnessContext(harnessName) {
56
+ const task = (process.env['ARCHAL_ENGINE_TASK'] || '').trim();
57
+ const model = process.env['ARCHAL_ENGINE_MODEL'];
58
+
59
+ if (!task) { console.error('ARCHAL_ENGINE_TASK not set or empty'); process.exit(1); }
60
+ if (!model) { console.error('ARCHAL_ENGINE_MODEL not set'); process.exit(1); }
61
+
62
+ const provider = detectProvider(model);
63
+ const apiKey = resolveApiKey(provider);
64
+ const log = createLogger({ harness: harnessName, model, provider });
65
+
66
+ const twinUrls = collectTwinUrls();
67
+ if (Object.keys(twinUrls).length === 0) {
68
+ console.error(`[${harnessName}] No twin URLs found. Check ARCHAL_TWIN_NAMES and ARCHAL_<TWIN>_URL env vars.`);
69
+ process.exit(1);
70
+ }
71
+
72
+ const { tools: allTools, toolToTwin } = await discoverAllTools(twinUrls);
73
+ if (allTools.length === 0) {
74
+ console.error(`[${harnessName}] No tools discovered from twins. Twin endpoints may be unreachable.`);
75
+ process.exit(1);
76
+ }
77
+
78
+ return { harnessName, task, model, provider, apiKey, log, twinUrls, allTools, toolToTwin };
79
+ }
80
+
81
+ // ── Run loop ──────────────────────────────────────────────────────────
82
+
83
+ /**
84
+ * @typedef {object} RunLoopOptions
85
+ * @property {string} systemPrompt - System prompt text (empty string for none)
86
+ * @property {number} maxSteps - Maximum iteration count
87
+ * @property {boolean} [useRetry=false] - Wrap LLM calls in withRetry
88
+ * @property {number} [retryCount=4] - Max retries when useRetry is true
89
+ * @property {boolean} [useTrace=false] - Record agent trace
90
+ * @property {number} [maxConsecutiveErrors=0] - Bail threshold (0 = no limit)
91
+ * @property {number} [maxInitialNoToolRecoveries=0] - Reprompt attempts when model doesn't call tools initially
92
+ * @property {(ctx: HarnessContext, state: RunState) => Array} [selectTools] -
93
+ * Per-step tool selection function. Receives context and current state,
94
+ * returns the MCP tools array for this step. Default: use all tools.
95
+ * @property {(ctx: HarnessContext, state: RunState, stepResult: StepResult) => 'continue' | 'break' | void} [onBeforeToolExecution] -
96
+ * Hook called after parsing tool calls but before executing them.
97
+ * Return 'continue' to skip tool execution and loop, 'break' to stop.
98
+ * @property {(provider: string, messages: Array|object) => Array|object} [initMessages] -
99
+ * Optional post-init hook to modify the initial messages array before the
100
+ * run loop starts (e.g. to prepend a triage instruction).
101
+ * @property {(ctx: HarnessContext, state: RunState, stepResult: StepResult) => void} [onAfterToolExecution] -
102
+ * Hook called after tool results are appended. Return value is ignored.
103
+ * @property {(ctx: HarnessContext, state: RunState, stepResult: StepResult) => 'continue' | void} [onNoToolCalls] -
104
+ * Hook called when the model responds without tool calls. Return
105
+ * 'continue' to add instructions and continue the loop.
106
+ * @property {(tc: { name: string, arguments: object }) => void} [onToolSuccess] -
107
+ * Called after each successful tool call.
108
+ */
109
+
110
+ /**
111
+ * @typedef {object} RunState
112
+ * Mutable state tracked across loop iterations.
113
+ * @property {Array|object} messages
114
+ * @property {number} stepsCompleted
115
+ * @property {number} totalInputTokens
116
+ * @property {number} totalOutputTokens
117
+ * @property {number} totalToolCalls
118
+ * @property {number} totalToolErrors
119
+ * @property {number} consecutiveErrors
120
+ * @property {number} initialNoToolRecoveries
121
+ * @property {string} exitReason
122
+ * @property {import('./agent-trace.mjs').ReturnType<typeof createAgentTrace>|null} agentTrace
123
+ */
124
+
125
+ /**
126
+ * @typedef {object} StepResult
127
+ * @property {number} step - 1-indexed step number
128
+ * @property {object} response - Raw LLM response wrapper
129
+ * @property {Array|null} toolCalls - Parsed tool calls or null
130
+ * @property {string|null} thinking - Model thinking content
131
+ * @property {string|null} text - Model text content
132
+ * @property {number} iterDurationMs
133
+ * @property {string|null} stopReason
134
+ */
135
+
136
+ /**
137
+ * Run the agent loop with shared metrics, logging, and tool execution.
138
+ *
139
+ * @param {HarnessContext} ctx
140
+ * @param {RunLoopOptions} opts
141
+ */
142
+ export async function runAgentLoop(ctx, opts) {
143
+ const {
144
+ systemPrompt,
145
+ maxSteps,
146
+ useRetry = false,
147
+ retryCount = 4,
148
+ useTrace = false,
149
+ maxConsecutiveErrors = 0,
150
+ maxInitialNoToolRecoveries = 0,
151
+ selectTools,
152
+ onBeforeToolExecution,
153
+ onAfterToolExecution,
154
+ onNoToolCalls,
155
+ onToolSuccess,
156
+ } = opts;
157
+
158
+ const { harnessName, task, model, provider, apiKey, log, allTools, toolToTwin } = ctx;
159
+
160
+ let messages = buildInitialMessages(provider, systemPrompt, task, model);
161
+
162
+ // Allow callers to modify initial messages (e.g. react's triage instruction)
163
+ if (opts.initMessages) {
164
+ messages = opts.initMessages(provider, messages);
165
+ }
166
+
167
+ const state = {
168
+ messages,
169
+ stepsCompleted: 0,
170
+ totalInputTokens: 0,
171
+ totalOutputTokens: 0,
172
+ totalToolCalls: 0,
173
+ totalToolErrors: 0,
174
+ consecutiveErrors: 0,
175
+ initialNoToolRecoveries: 0,
176
+ exitReason: 'max_steps',
177
+ agentTrace: useTrace ? createAgentTrace() : null,
178
+ };
179
+
180
+ const runStart = Date.now();
181
+
182
+ log.info('run_start', { task: task.slice(0, 200), maxSteps });
183
+
184
+ try {
185
+ for (let step = 0; step < maxSteps; step++) {
186
+ state.stepsCompleted = step + 1;
187
+ const iterStart = Date.now();
188
+
189
+ // Select tools for this step (default: all tools)
190
+ const stepTools = selectTools ? selectTools(ctx, state) : allTools;
191
+ const providerTools = formatToolsForProvider(provider, stepTools);
192
+
193
+ // Call the LLM (optionally with retry)
194
+ log.llmCall(step + 1);
195
+ let response;
196
+ try {
197
+ const llmCall = () => callLlmWithMessages(provider, model, apiKey, state.messages, providerTools);
198
+ response = useRetry ? await withRetry(llmCall, retryCount) : await llmCall();
199
+ } catch (err) {
200
+ const msg = err?.message ?? String(err);
201
+ log.error('llm_call_failed', { step: step + 1, error: msg });
202
+ process.stderr.write(`[${harnessName}] LLM API error: ${msg.slice(0, 500)}\n`);
203
+ state.exitReason = 'llm_error';
204
+ break;
205
+ }
206
+
207
+ const iterDurationMs = Date.now() - iterStart;
208
+ state.totalInputTokens += response.usage.inputTokens;
209
+ state.totalOutputTokens += response.usage.outputTokens;
210
+
211
+ const toolCalls = parseToolCalls(provider, response);
212
+ const hasToolCalls = !!toolCalls;
213
+ const stopReason = getStopReason(provider, response);
214
+ log.llmResponse(step + 1, iterDurationMs, hasToolCalls, stopReason);
215
+ log.tokenUsage(step + 1, response.usage, {
216
+ inputTokens: state.totalInputTokens,
217
+ outputTokens: state.totalOutputTokens,
218
+ });
219
+
220
+ const thinking = getThinkingContent(provider, response);
221
+ const text = getResponseText(provider, response);
222
+
223
+ state.messages = appendAssistantResponse(provider, state.messages, response);
224
+
225
+ /** @type {StepResult} */
226
+ const stepResult = { step: step + 1, response, toolCalls, thinking, text, iterDurationMs, stopReason };
227
+
228
+ if (!toolCalls) {
229
+ // Record trace for no-tool-call steps
230
+ if (state.agentTrace) {
231
+ state.agentTrace.addStep({ step: step + 1, thinking, text, toolCalls: [], durationMs: iterDurationMs });
232
+ }
233
+ if (text) {
234
+ process.stderr.write(`[${harnessName}] Step ${step + 1}: ${text.slice(0, 200)}\n`);
235
+ }
236
+
237
+ // Initial no-tool recovery (reprompt)
238
+ const shouldRecoverInitial = state.totalToolCalls === 0
239
+ && maxInitialNoToolRecoveries > 0
240
+ && state.initialNoToolRecoveries < maxInitialNoToolRecoveries;
241
+ if (shouldRecoverInitial) {
242
+ state.initialNoToolRecoveries++;
243
+ state.messages = appendUserInstruction(
244
+ provider,
245
+ state.messages,
246
+ 'You must use tools to make progress. ' +
247
+ 'On your next response, call at least one relevant tool before giving any summary or conclusion. ' +
248
+ 'Start by gathering concrete evidence from the systems, then execute the required actions.',
249
+ );
250
+ log.info('no_tool_calls_reprompt', {
251
+ step: step + 1,
252
+ attempt: state.initialNoToolRecoveries,
253
+ });
254
+ continue;
255
+ }
256
+
257
+ // Harness-specific no-tool-call handling
258
+ if (onNoToolCalls) {
259
+ const directive = onNoToolCalls(ctx, state, stepResult);
260
+ if (directive === 'continue') continue;
261
+ }
262
+
263
+ state.exitReason = state.totalToolCalls === 0 ? 'no_tool_calls' : 'completed';
264
+ break;
265
+ }
266
+
267
+ state.initialNoToolRecoveries = 0;
268
+
269
+ // Pre-execution hook (e.g. react's repo content guard)
270
+ if (onBeforeToolExecution) {
271
+ const directive = onBeforeToolExecution(ctx, state, stepResult);
272
+ if (directive === 'continue') continue;
273
+ if (directive === 'break') break;
274
+ }
275
+
276
+ // Execute tool calls
277
+ const { executeToolCalls } = await import('./tool-executor.mjs');
278
+ const { results, bailout } = await executeToolCalls(toolCalls, {
279
+ toolToTwin,
280
+ harnessName,
281
+ step: step + 1,
282
+ log,
283
+ counters: state,
284
+ maxConsecutiveErrors,
285
+ onSuccess: onToolSuccess,
286
+ });
287
+
288
+ // Record trace
289
+ if (state.agentTrace) {
290
+ state.agentTrace.addStep({
291
+ step: step + 1,
292
+ thinking,
293
+ text,
294
+ toolCalls: toolCalls.map((tc) => ({ name: tc.name, arguments: tc.arguments })),
295
+ durationMs: iterDurationMs,
296
+ });
297
+ }
298
+
299
+ if (bailout) {
300
+ state.exitReason = 'consecutive_errors';
301
+ break;
302
+ }
303
+
304
+ // Append tool results to conversation
305
+ state.messages = appendToolResults(provider, state.messages, toolCalls, results);
306
+
307
+ // Post-execution hook
308
+ if (onAfterToolExecution) {
309
+ onAfterToolExecution(ctx, state, stepResult);
310
+ }
311
+ }
312
+ } finally {
313
+ const totalTimeMs = Date.now() - runStart;
314
+
315
+ log.summary({
316
+ iterations: state.stepsCompleted,
317
+ totalInputTokens: state.totalInputTokens,
318
+ totalOutputTokens: state.totalOutputTokens,
319
+ totalTimeMs,
320
+ toolCallCount: state.totalToolCalls,
321
+ toolErrorCount: state.totalToolErrors,
322
+ exitReason: state.exitReason,
323
+ });
324
+
325
+ writeMetrics({
326
+ inputTokens: state.totalInputTokens,
327
+ outputTokens: state.totalOutputTokens,
328
+ llmCallCount: state.stepsCompleted,
329
+ toolCallCount: state.totalToolCalls,
330
+ toolErrorCount: state.totalToolErrors,
331
+ totalTimeMs,
332
+ exitReason: state.exitReason,
333
+ provider,
334
+ model,
335
+ });
336
+
337
+ if (state.agentTrace) {
338
+ state.agentTrace.flush();
339
+ }
340
+
341
+ process.stderr.write(
342
+ `\n[${harnessName}] Summary: ${state.stepsCompleted} iterations, ${state.totalToolCalls} tool calls ` +
343
+ `(${state.totalToolErrors} errors), ${state.totalInputTokens} input tokens, ` +
344
+ `${state.totalOutputTokens} output tokens, ${(totalTimeMs / 1000).toFixed(1)}s total\n`
345
+ );
346
+
347
+ if (state.exitReason === 'llm_error') {
348
+ process.exit(1);
349
+ }
350
+ }
351
+ }
352
+
353
+ // Re-export for convenience — harnesses that need to build custom initial messages
354
+ export { appendUserInstruction };