@autopilot-harness/cli 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Autopilot Harness contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,55 @@
+# @autopilot-harness/cli
+
+CLI for **Autopilot** — a vibecoding harness that turns open-ended agent chat into **structured planning → checklist execution → multi-lens self-review**.
+
+Bin name: `autopilot-harness`. Requires **Node.js 22+**. **v0.1 is Cursor-first.**
+
+Autopilot does **not** guarantee bug-free software. It raises confidence that work was planned, checklist-scoped, and pressure-tested under several review lenses.
+
+## Install & init
+
+From the app you want to instrument (`cwd` = that project):
+
+```bash
+npx @autopilot-harness/cli init --platform cursor --yes
+```
+
+Interactive TUI (platform still defaults to cursor):
+
+```bash
+npx @autopilot-harness/cli init
+```
+
+Then reload the Cursor window (or start a new Agent chat) and run:
+
+1. `/autopilot-on` — plan (grill → `plans/<slug>/`)
+2. `/autopilot-run` — execute the checklist
+
+## Useful commands
+
+```bash
+npx @autopilot-harness/cli status
+npx @autopilot-harness/cli doctor
+npx @autopilot-harness/cli upgrade --dry-run
+npx @autopilot-harness/cli --help
+```
+
+Global install (optional):
+
+```bash
+npm i -g @autopilot-harness/cli
+autopilot-harness init --platform cursor --yes
+```
+
+Use the scoped package name (`@autopilot-harness/cli`). There is no bare npm package named `autopilot-harness`.
+
+## Docs
+
+- [GitHub README](https://github.com/mt2007/autopilot-harness#readme) — product overview
+- [Quickstart](https://github.com/mt2007/autopilot-harness/blob/main/docs/autopilot/quickstart.md)
+- [Config](https://github.com/mt2007/autopilot-harness/blob/main/docs/config.md)
+- [Troubleshooting](https://github.com/mt2007/autopilot-harness/blob/main/docs/troubleshooting.md)
+
+## License
+
+MIT — see [LICENSE](https://github.com/mt2007/autopilot-harness/blob/main/LICENSE).

package/assets/autopilot-harness-hook.mjs

@@ -0,0 +1,193 @@
+/**
+ * Cursor hook entry — marker: autopilot-harness
+ * Installed at .autopilot/bin/autopilot-harness-hook.mjs (copy, not symlink).
+ *
+ * Prefers bundled vendor/runtime.mjs (shipped by init/upgrade) so empty
+ * consumer projects work without @autopilot-harness/* in node_modules.
+ * Falls back to project-local packages, then fail-open.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { createRequire } from "node:module";
+import { fileURLToPath, pathToFileURL } from "node:url";
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const projectRoot = path.resolve(__dirname, "..", "..");
+
+function parseArgs(argv) {
+  const allowed = new Set([
+    "beforeSubmitPrompt",
+    "afterFileEdit",
+    "stop",
+  ]);
+  const out = { event: "beforeSubmitPrompt" };
+  for (let i = 0; i < argv.length; i++) {
+    if (argv[i] === "--event" && argv[i + 1]) {
+      const ev = argv[++i];
+      out.event = allowed.has(ev) ? ev : "beforeSubmitPrompt";
+    }
+  }
+  return out;
+}
+
+async function readStdin() {
+  const chunks = [];
+  for await (const chunk of process.stdin) chunks.push(chunk);
+  const raw = Buffer.concat(chunks).toString("utf8").trim();
+  if (!raw) return {};
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return {};
+  }
+}
+
+async function tryImport(specifier) {
+  try {
+    return await import(specifier);
+  } catch {
+    return null;
+  }
+}
+
+function isSymlinkOrUnreadable(filePath) {
+  try {
+    return fs.lstatSync(filePath).isSymbolicLink();
+  } catch {
+    // Cannot verify — refuse vendor load (fail-closed, match CLI policy).
+    return true;
+  }
+}
+
+/** Refuse vendor paths whose realpath escapes the project root. */
+function realpathEscapesProject(filePath) {
+  try {
+    const realRoot = fs.realpathSync(projectRoot);
+    const real = fs.realpathSync(filePath);
+    return real !== realRoot && !real.startsWith(realRoot + path.sep);
+  } catch {
+    return true;
+  }
+}
+
+async function loadVendorRuntime() {
+  const vendorDir = path.join(__dirname, "vendor");
+  const vendor = path.join(vendorDir, "runtime.mjs");
+  const migDir = path.join(vendorDir, "migrations");
+  const mig = path.join(migDir, "001_initial.sql");
+  if (!fs.existsSync(vendor) || !fs.existsSync(mig)) return null;
+  // Refuse symlink escape / unreadable lstat (same policy as CLI).
+  if (
+    isSymlinkOrUnreadable(vendorDir) ||
+    isSymlinkOrUnreadable(vendor) ||
+    isSymlinkOrUnreadable(migDir) ||
+    isSymlinkOrUnreadable(mig)
+  ) {
+    return null;
+  }
+  if (realpathEscapesProject(vendor) || realpathEscapesProject(mig)) {
+    return null;
+  }
+  return tryImport(pathToFileURL(vendor).href);
+}
+
+async function loadPortFromNodeModules() {
+  try {
+    const require = createRequire(path.join(projectRoot, "package.json"));
+    const resolved = require.resolve("@autopilot-harness/port-cursor");
+    return tryImport(pathToFileURL(resolved).href);
+  } catch {
+    return null;
+  }
+}
+
+async function loadCoreFromNodeModules() {
+  try {
+    const require = createRequire(path.join(projectRoot, "package.json"));
+    const resolved = require.resolve("@autopilot-harness/core");
+    return tryImport(pathToFileURL(resolved).href);
+  } catch {
+    return null;
+  }
+}
+
+function failOpen(event) {
+  if (event === "beforeSubmitPrompt") {
+    writeReply(JSON.stringify({ continue: true }));
+  } else {
+    writeReply("{}");
+  }
+}
+
+/** At-most-once stdout so fail-open cannot append a second JSON blob. */
+let replied = false;
+function writeReply(text) {
+  if (replied) return;
+  process.stdout.write(text);
+  // Set only after a successful write so failOpen can still retry on throw.
+  replied = true;
+}
+
+async function main() {
+  const { event } = parseArgs(process.argv.slice(2));
+  try {
+    const payload = await readStdin();
+
+    const vendor = await loadVendorRuntime();
+    const port = vendor ?? (await loadPortFromNodeModules());
+    const coreMod = vendor ?? (await loadCoreFromNodeModules());
+    if (!port?.handleBeforeSubmitPrompt || !coreMod?.StateStore) {
+      failOpen(event);
+      return;
+    }
+
+    const store = new coreMod.StateStore(projectRoot);
+    try {
+      if (event === "beforeSubmitPrompt") {
+        const result = port.handleBeforeSubmitPrompt(store, payload, projectRoot);
+        writeReply(JSON.stringify(result));
+        return;
+      }
+      if (event === "afterFileEdit") {
+        port.handleAfterFileEdit?.(store, payload, projectRoot);
+        writeReply("{}");
+        return;
+      }
+      if (event === "stop") {
+        // Vendor injects locale; core still applies config.yml. Fall back if
+        // an older vendor/runtime lacks the factory (upgrade mid-flight).
+        const engine =
+          typeof coreMod.createConfiguredReviewEngine === "function"
+            ? coreMod.createConfiguredReviewEngine(store, projectRoot)
+            : new coreMod.ReviewEngine(store, {
+                confirmRounds: 5,
+                reviewScope: "executing_only",
+                verifyEnabled: false,
+                verifyCommands: [],
+                maxIdleStops: 5,
+                maxErrorsBeforePause: 0,
+                projectRoot,
+              });
+        const result = port.handleStop(engine, payload);
+        writeReply(JSON.stringify(result ?? {}));
+        return;
+      }
+      writeReply("{}");
+    } finally {
+      try {
+        store.close();
+      } catch {
+        /* ignore */
+      }
+    }
+  } catch (err) {
+    console.error("[autopilot-harness] hook error:", err?.message ?? err);
+    failOpen(event);
+  }
+}
+
+main().catch((err) => {
+  console.error("[autopilot-harness] hook error:", err?.message ?? err);
+  failOpen("beforeSubmitPrompt");
+  process.exitCode = 0;
+});

package/assets/vendor/migrations/001_initial.sql

@@ -0,0 +1,62 @@
+CREATE TABLE IF NOT EXISTS _schema_meta (
+  key TEXT PRIMARY KEY,
+  value TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS workspace (
+  root_path TEXT PRIMARY KEY,
+  token_hash TEXT,
+  platform TEXT NOT NULL,
+  surface TEXT NOT NULL DEFAULT 'ide',
+  integration TEXT NOT NULL DEFAULT 'hook',
+  locale TEXT NOT NULL DEFAULT 'en',
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS sessions (
+  conversation_id TEXT PRIMARY KEY,
+  platform TEXT NOT NULL,
+  session_title TEXT,
+  session_title_source TEXT,
+  title_updated_at TEXT,
+  track_id TEXT NOT NULL DEFAULT '_pending',
+  track_title TEXT,
+  checklist_path TEXT NOT NULL DEFAULT '',
+  phase TEXT NOT NULL DEFAULT 'idle',
+  armed INTEGER NOT NULL DEFAULT 0,
+  paused INTEGER NOT NULL DEFAULT 0,
+  paused_reason TEXT,
+  pending_action TEXT,
+  track_candidates_json TEXT,
+  project_root TEXT NOT NULL,
+  code_root TEXT NOT NULL,
+  worktree_path TEXT,
+  worktree_branch TEXT,
+  error_count INTEGER NOT NULL DEFAULT 0,
+  last_error TEXT,
+  idle_stop_count INTEGER NOT NULL DEFAULT 0,
+  cli_bound_at TEXT,
+  last_active_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS tracks (
+  track_id TEXT PRIMARY KEY,
+  slug TEXT NOT NULL,
+  checklist_path TEXT NOT NULL,
+  plan_path TEXT,
+  brief_path TEXT,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS review_chains (
+  conversation_id TEXT PRIMARY KEY,
+  fix_round INTEGER NOT NULL DEFAULT 0,
+  confirm_left INTEGER,
+  chain_pending INTEGER NOT NULL DEFAULT 0,
+  code_edited INTEGER NOT NULL DEFAULT 0,
+  item_confirm_complete INTEGER NOT NULL DEFAULT 0,
+  updated_at TEXT NOT NULL
+);
+
+INSERT OR IGNORE INTO _schema_meta (key, value) VALUES ('schema_version', '1');

package/assets/vendor/migrations/002_pending_followup.sql

@@ -0,0 +1,4 @@
+-- Pending followup redelivery (Cursor may drop stop followups).
+ALTER TABLE review_chains ADD COLUMN pending_followup TEXT;
+ALTER TABLE review_chains ADD COLUMN pending_followup_at TEXT;
+ALTER TABLE review_chains ADD COLUMN pending_redeliver_at TEXT;

package/assets/vendor/migrations/003_reviewing_item.sql

@@ -0,0 +1 @@
+ALTER TABLE review_chains ADD COLUMN reviewing_item_id TEXT;