@dungle-scrubs/harness-cli-normalizer 0.3.1 → 0.4.0

package/src/knowledge/descriptor.ts

@@ -340,4 +340,36 @@ export interface HarnessDescriptor {
    * harness; a call passing them must refuse. Discovery is a table of
    * per-facet specs rather than a single flag. */
   readonly turnOptions: Readonly<Partial<Record<TurnOptionKey, TurnOptionSpec>>>;
+  /** Tool-selection surface, grounded in test/fixtures/phase0/ evidence.
+   * `includeFlag`/`excludeFlag` are the per-tool NAME-LIST flags (null when
+   * the harness has none - codex/muse). `includeIsStrictAllowlist` records
+   * the claude asymmetry: claude's include flag pre-approves without
+   * restricting the visible set, so an exact allowlist must render as a
+   * disallow-complement there; pi's include IS strict (over built-ins).
+   * `composable`: both flags legal at once (pi: exclude subtracts from
+   * include). `builtins`: curated names + default-enabled state - grep/find/
+   * ls ship off on pi, everything ships on elsewhere. `categories`:
+   * non-list switches (muse disable flags, codex config booleans).
+   * `denySemantics`: whether a deny removes the tool from the model-visible
+   * set (claude/pi), policy-gates execution while the tool stays listed
+   * (muse), or there are no lists to deny with (codex). Extension and MCP
+   * tools register at runtime and are NEVER enumerated here - name
+   * validation is a default, not a refusal authority (same stance as the
+   * pi model registry, D-008). */
+  readonly tools: {
+    readonly includeFlag: string | null;
+    readonly excludeFlag: string | null;
+    readonly includeIsStrictAllowlist: boolean;
+    readonly composable: boolean;
+    readonly builtins: ReadonlyArray<{
+      readonly name: string;
+      readonly defaultEnabled: boolean;
+    }>;
+    readonly categories: ReadonlyArray<{
+      readonly key: "shell" | "write" | "web" | "exec" | "view-image";
+      readonly disableFlag: string | null;
+      readonly configKey: string | null;
+    }>;
+    readonly denySemantics: "remove-from-set" | "policy-gate" | "no-lists";
+  };
 }

package/src/knowledge/muse.ts

@@ -110,4 +110,23 @@ export const museCode: HarnessDescriptor = deepFreeze({
       render: { kind: "flag-value", flag: "--max-model-steps" },
     },
   },
+  // Phase 0 fixtures: muse-category-flags.md. No name lists; category
+  // switches are enforcement gates - tools stay listed in the catalog but
+  // calls are denied per session policy (unlike claude's set removal).
+  // Tool names follow muse.<name> (write_file, edit_file, bash, bash_input,
+  // add_memory, edit_memory, web_search). --disable-web-tools has no
+  // normalized turnOption yet - candidate for a web toggle or passthrough.
+  tools: {
+    includeFlag: null,
+    excludeFlag: null,
+    includeIsStrictAllowlist: false,
+    composable: false,
+    builtins: [],
+    categories: [
+      { key: "write", disableFlag: "--disable-write", configKey: null },
+      { key: "shell", disableFlag: "--disable-shell", configKey: null },
+      { key: "web", disableFlag: "--disable-web-tools", configKey: null },
+    ],
+    denySemantics: "policy-gate",
+  },
 });

package/src/knowledge/pi.ts

@@ -118,4 +118,25 @@ export const piCli: HarnessDescriptor = deepFreeze({
       },
     },
   },
+  // Phase 0 fixtures: pi-both-tool-flags.md. Both list flags legal at once;
+  // exclude subtracts from include. --tools is strict over BUILT-INS but
+  // does not strip MCP/extension registrations (additive over them);
+  // -nbt (built-ins only off) exists but has no normalized spelling yet.
+  tools: {
+    includeFlag: "--tools",
+    excludeFlag: "--exclude-tools",
+    includeIsStrictAllowlist: true,
+    composable: true,
+    builtins: [
+      { name: "read", defaultEnabled: true },
+      { name: "bash", defaultEnabled: true },
+      { name: "edit", defaultEnabled: true },
+      { name: "write", defaultEnabled: true },
+      { name: "grep", defaultEnabled: false },
+      { name: "find", defaultEnabled: false },
+      { name: "ls", defaultEnabled: false },
+    ],
+    categories: [],
+    denySemantics: "remove-from-set",
+  },
 });

package/src/knowledge/profile.ts

@@ -0,0 +1,33 @@
+/**
+ * The built-in default turn profile: hcn's curated defaults for a bare run,
+ * decided in review (2026-08-18) and applied LAUNCH-ONLY, before user config
+ * and args. Every entry here is a ratified dimension; unratified dimensions
+ * stay absent and defer to the harness.
+ *
+ * effort: "medium" - the only value present in all four effort ladders
+ * (claude/pi/muse/codex-per-model). Live probe on claude 2.1.233 showed the
+ * internal default is above medium and nondeterministic (599-1482 thinking
+ * tokens on identical tasks vs 436 at medium); pinning makes bare runs
+ * cheaper on claude, uniform everywhere, and knowable from the outside.
+ */
+import { deepFreeze } from "./descriptor.js";
+
+export const DEFAULT_TURN_PROFILE = deepFreeze({
+  effort: "medium",
+  // codex-only (the only harness with a sandbox dimension). Promotes the
+  // descriptor's implicit workspace-write default into the visible
+  // profile tier. On the other three the dimension is unrenderable and
+  // reports as divergence.
+  sandbox: "workspace-write",
+  // Ratified: discovery fully ON. The harnesses' bare runs already
+  // discover instruction files, skills, and extensions; the profile makes
+  // that a stated contract. The off-spellings exist per harness
+  // (-ns/-nc/-ne on pi, --setting-sources on claude) for callers who want
+  // less.
+  discovery: { tools: true, instructionFiles: true, extensions: true, skills: true },
+  // Ratified: autonomy OFF. No bare run is unattended; --autonomy or a
+  // config must say so deliberately.
+  autonomy: false,
+} as const);
+
+export type ProfileKey = keyof typeof DEFAULT_TURN_PROFILE;

package/dist/index.d.ts

@@ -1,8 +0,0 @@
-/**
- * Public package surface. The three architectural layers remain available as
- * explicit subpath exports for consumers that want the narrowest dependency.
- */
-export * from "./execution/index.js";
-export * from "./interpretation/index.js";
-export * from "./knowledge/index.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC"}

package/dist/index.js

@@ -1,8 +0,0 @@
-/**
- * Public package surface. The three architectural layers remain available as
- * explicit subpath exports for consumers that want the narrowest dependency.
- */
-export * from "./execution/index.js";
-export * from "./interpretation/index.js";
-export * from "./knowledge/index.js";
-//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC"}

package/src/index.ts

@@ -1,7 +0,0 @@
-/**
- * Public package surface. The three architectural layers remain available as
- * explicit subpath exports for consumers that want the narrowest dependency.
- */
-export * from "./execution/index.js";
-export * from "./interpretation/index.js";
-export * from "./knowledge/index.js";