@claudexor/gateway 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 joi-lab
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,7 @@
+# @claudexor/gateway
+
+Internal package of [Claudexor](https://github.com/razzant/claudexor) — HarnessGateway: discovery, conformance intent-gating, and harness selection.
+
+Published as part of the Claudexor toolchain; it follows the monorepo's
+lockstep version and has no separate semver contract. Use the `claudexor`
+CLI (or `@claudexor/cli`) as the supported entry point.

package/dist/gateway.d.ts

@@ -0,0 +1,38 @@
+import type { ConformanceCheck, HarnessManifest, Intent } from "@claudexor/schema";
+import type { AdapterRegistry, DoctorSpec, HarnessAdapter } from "@claudexor/core";
+export interface HarnessStatus {
+    id: string;
+    available: boolean;
+    status: "ok" | "degraded" | "unavailable";
+    manifest: HarnessManifest | null;
+    enabledIntents: Intent[];
+    disabledIntents: Intent[];
+    checks: ConformanceCheck[];
+    reasons: string[];
+}
+/**
+ * Wraps an adapter registry with discovery and conformance role-gating.
+ * (Route SELECTION lives in the budget router and orchestrator routing —
+ * this class only reports what exists and what each harness may do.)
+ */
+export declare class HarnessGateway {
+    private readonly registry;
+    constructor(registry: AdapterRegistry);
+    list(): string[];
+    get(id: string): HarnessAdapter | undefined;
+    /**
+     * Discover + conformance-probe harnesses. When `only` is given, ONLY those
+     * adapters are probed (so `doctor --harness X` / `auth status X` pay one
+     * harness's discovery cost — incl. any paid smoke — instead of probing every
+     * registered adapter and post-filtering). Unknown ids in `only` are skipped.
+     */
+    statusAll(spec: DoctorSpec, only?: string[]): Promise<HarnessStatus[]>;
+    private statusAllForAdapters;
+    /**
+     * Doctor-VERIFIED real harnesses only (`status === "ok"`). Degraded routes
+     * (key present but unproven) are excluded — claims of "doctor-verified"
+     * availability must never include them.
+     */
+    doctorOkReal(spec?: DoctorSpec, intent?: Intent): Promise<string[]>;
+}
+//# sourceMappingURL=gateway.d.ts.map

package/dist/gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AACnF,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAInF,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,IAAI,GAAG,UAAU,GAAG,aAAa,CAAC;IAC1C,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAC;IACjC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;;GAIG;AACH,qBAAa,cAAc;IACb,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,eAAe;IAEtD,IAAI,IAAI,MAAM,EAAE;IAIhB,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAI3C;;;;;OAKG;IACG,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;YAM9D,oBAAoB;IA6BlC;;;;OAIG;IACG,YAAY,CAAC,IAAI,GAAE,UAAmC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;CAYlG"}

package/dist/gateway.js

@@ -0,0 +1,74 @@
+import { runDoctor } from "@claudexor/core";
+import { allowedIntents } from "./gating.js";
+/**
+ * Wraps an adapter registry with discovery and conformance role-gating.
+ * (Route SELECTION lives in the budget router and orchestrator routing —
+ * this class only reports what exists and what each harness may do.)
+ */
+export class HarnessGateway {
+    registry;
+    constructor(registry) {
+        this.registry = registry;
+    }
+    list() {
+        return [...this.registry.keys()];
+    }
+    get(id) {
+        return this.registry.get(id);
+    }
+    /**
+     * Discover + conformance-probe harnesses. When `only` is given, ONLY those
+     * adapters are probed (so `doctor --harness X` / `auth status X` pay one
+     * harness's discovery cost — incl. any paid smoke — instead of probing every
+     * registered adapter and post-filtering). Unknown ids in `only` are skipped.
+     */
+    async statusAll(spec, only) {
+        const all = [...this.registry.values()];
+        const adapters = only && only.length > 0 ? all.filter((a) => only.includes(a.id)) : all;
+        return this.statusAllForAdapters(adapters, spec);
+    }
+    async statusAllForAdapters(adapters, spec) {
+        const out = [];
+        for (const adapter of adapters) {
+            let manifest = null;
+            let discoverError = null;
+            try {
+                manifest = await adapter.discover();
+            }
+            catch (err) {
+                // A crashed discover() must stay distinguishable from "not installed":
+                // the message rides the status reasons instead of vanishing.
+                manifest = null;
+                discoverError = `discover failed: ${err instanceof Error ? err.message : String(err)}`;
+            }
+            const report = (await runDoctor(new Map([[adapter.id, adapter]]), spec))[0] ?? null;
+            const status = report?.status ?? "unavailable";
+            out.push({
+                id: adapter.id,
+                available: manifest !== null && status !== "unavailable",
+                status,
+                manifest,
+                enabledIntents: manifest ? allowedIntents(manifest, report) : [],
+                disabledIntents: report?.disabled_intents ?? [],
+                checks: report?.checks ?? [],
+                reasons: [...(discoverError ? [discoverError] : []), ...(report?.reasons ?? [])],
+            });
+        }
+        return out;
+    }
+    /**
+     * Doctor-VERIFIED real harnesses only (`status === "ok"`). Degraded routes
+     * (key present but unproven) are excluded — claims of "doctor-verified"
+     * availability must never include them.
+     */
+    async doctorOkReal(spec = { cwd: process.cwd() }, intent) {
+        const statuses = await this.statusAllForAdapters([...this.registry.values()], spec);
+        return statuses
+            .filter((s) => s.manifest?.kind !== "fake" &&
+            s.status === "ok" &&
+            s.enabledIntents.length > 0 &&
+            (intent === undefined || s.enabledIntents.includes(intent)))
+            .map((s) => s.id);
+    }
+}
+//# sourceMappingURL=gateway.js.map

package/dist/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAa7C;;;;GAIG;AACH,MAAM,OAAO,cAAc;IACI;IAA7B,YAA6B,QAAyB;QAAzB,aAAQ,GAAR,QAAQ,CAAiB;IAAG,CAAC;IAE1D,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,IAAgB,EAAE,IAAe;QAC/C,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACxF,OAAO,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,QAA0B,EAAE,IAAgB;QAC7E,MAAM,GAAG,GAAoB,EAAE,CAAC;QAChC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,QAAQ,GAA2B,IAAI,CAAC;YAC5C,IAAI,aAAa,GAAkB,IAAI,CAAC;YACxC,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,uEAAuE;gBACvE,6DAA6D;gBAC7D,QAAQ,GAAG,IAAI,CAAC;gBAChB,aAAa,GAAG,oBAAoB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACzF,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YACpF,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,aAAa,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,SAAS,EAAE,QAAQ,KAAK,IAAI,IAAI,MAAM,KAAK,aAAa;gBACxD,MAAM;gBACN,QAAQ;gBACR,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;gBAChE,eAAe,EAAE,MAAM,EAAE,gBAAgB,IAAI,EAAE;gBAC/C,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE;gBAC5B,OAAO,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;aACjF,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,OAAmB,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,MAAe;QAC3E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QACpF,OAAO,QAAQ;aACZ,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,QAAQ,EAAE,IAAI,KAAK,MAAM;YAC3B,CAAC,CAAC,MAAM,KAAK,IAAI;YACjB,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;YAC3B,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAC9D;aACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC;CACF"}

package/dist/gating.d.ts

@@ -0,0 +1,10 @@
+import type { ConformanceReport, HarnessCapabilities, HarnessManifest, Intent } from "@claudexor/schema";
+/** Map declared capabilities to the intents an adapter could in principle play. */
+export declare function capabilityIntents(caps: HarnessCapabilities): Intent[];
+/**
+ * Compute the intents an adapter may actually be assigned, gating critical roles
+ * behind conformance. A degraded adapter keeps only the intents it explicitly
+ * still enables; an unavailable adapter gets none.
+ */
+export declare function allowedIntents(manifest: HarnessManifest, report: ConformanceReport | null): Intent[];
+//# sourceMappingURL=gating.d.ts.map

package/dist/gating.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gating.d.ts","sourceRoot":"","sources":["../src/gating.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEzG,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,EAAE,CAWrE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,iBAAiB,GAAG,IAAI,GAAG,MAAM,EAAE,CAepG"}

package/dist/gating.js

@@ -0,0 +1,45 @@
+/** Map declared capabilities to the intents an adapter could in principle play. */
+export function capabilityIntents(caps) {
+    const intents = [];
+    if (caps.plan)
+        intents.push("plan", "spec");
+    if (caps.implement)
+        intents.push("implement", "repair");
+    if (caps.create_from_scratch)
+        intents.push("create_from_scratch");
+    if (caps.review)
+        intents.push("review");
+    if (caps.verify)
+        intents.push("verify");
+    if (caps.synthesize)
+        intents.push("synthesize");
+    if (caps.read_files)
+        intents.push("explain", "audit");
+    if (caps.orchestrate)
+        intents.push("orchestrate");
+    return [...new Set(intents)];
+}
+/**
+ * Compute the intents an adapter may actually be assigned, gating critical roles
+ * behind conformance. A degraded adapter keeps only the intents it explicitly
+ * still enables; an unavailable adapter gets none.
+ */
+export function allowedIntents(manifest, report) {
+    const base = capabilityIntents(manifest.capabilities);
+    if (!report || report.status === "unavailable")
+        return [];
+    if (report.status === "ok") {
+        // If the report enumerates enabled intents, intersect; otherwise trust capabilities.
+        if (report.enabled_intents.length > 0) {
+            return base.filter((i) => report.enabled_intents.includes(i));
+        }
+        return base;
+    }
+    // Degraded means the adapter is only trusted for the roles the doctor
+    // explicitly re-enabled. Capability declarations alone are not enough once
+    // conformance/auth is degraded.
+    if (report.enabled_intents.length === 0)
+        return [];
+    return base.filter((i) => report.enabled_intents.includes(i) && !report.disabled_intents.includes(i));
+}
+//# sourceMappingURL=gating.js.map

package/dist/gating.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gating.js","sourceRoot":"","sources":["../src/gating.ts"],"names":[],"mappings":"AAEA,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,IAAyB;IACzD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,IAAI,CAAC,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,IAAI,CAAC,mBAAmB;QAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,UAAU;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,UAAU;QAAE,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACtD,IAAI,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAAyB,EAAE,MAAgC;IACxF,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa;QAAE,OAAO,EAAE,CAAC;IAC1D,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC3B,qFAAqF;QACrF,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,sEAAsE;IACtE,2EAA2E;IAC3E,gCAAgC;IAChC,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACxG,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./gating.js";
+export * from "./gateway.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export * from "./gating.js";
+export * from "./gateway.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC"}

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@claudexor/gateway",
+  "version": "1.0.0",
+  "license": "MIT",
+  "description": "HarnessGateway: discovery, conformance intent-gating, and harness selection.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@claudexor/core": "1.0.0",
+    "@claudexor/schema": "1.0.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/razzant/claudexor.git",
+    "directory": "packages/gateway"
+  },
+  "homepage": "https://github.com/razzant/claudexor#readme",
+  "bugs": {
+    "url": "https://github.com/razzant/claudexor/issues"
+  },
+  "engines": {
+    "node": ">=20.19"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit"
+  }
+}