@farmslot/recipe-cli 0.2.0 → 0.3.0

package/CHANGELOG.md

@@ -6,6 +6,12 @@ All notable changes to `@farmslot/recipe-cli` are tracked here.
 
 - Active-development baseline; add user-facing changes here before release or package publication.
 
+## 0.3.0 - 2026-10-04
+
+- Add the lifecycle commands to `@farmslot/recipe-cli/harness`, moved from mm-harness and driven through `@farmslot/adapter-sdk` adapters the host registers (`configureHarnessAdapters`): `handleLaunch`, `handleReload`, `handleStop` (with a `companions` hook for host processes), `handleLast`, and `handleHarness` for `install`/`verify`/`cleanup` (with `usage` and `install`-variant hooks). They come with their shared modules: adapter detection and resolution (`detectAdapter`, `adapterForPlatform`, `resolveAdapter`, `assertAdapter`), option parsing (`parseArgs`, `parseFlags`, `CliError`), leaf spawning (`spawnScript`, `spawnScriptStreaming`, `spawnInherit`), teaching errors (`usageOut`, `checkoutBusyOut`, `EXIT`) and bounded healing (`parseHeal`, `ensureOverlay`, `classifyFailure`, `checkHealBounds`). Platform policy comes from the adapters (`detect`, `targets`, `flags`, `failurePatterns`), and names from the host (new `product` field, required).
+- Add `@farmslot/recipe-cli/harness`, the generic support a harness CLI runs its commands on: the host identity (`configureHarnessHost`: name, env prefix, package, executable, journaled commands), runtime paths (`recipeRuntimeDir`, `recipeRuntimePath`, `recipeHarnessRoot`, `recipeHarnessPath`, `harnessExecutable`), the resumability journal (`withCommandJournal`, `readCommandJournal`, argument redaction), the checkout lock (`acquireCheckoutLock`, `trackCheckoutChild`), `JsonStreamWriter`, colour helpers, contained artifact writes, Git library provenance and shell-leaf invocation. Moved from mm-harness; a product preset keeps its own env names (`MM_HARNESS_*`) through the host identity.
+- Publish with protocol 0.34.0, recipe-runner 0.23.0, agent-runtime 0.17.0 and adapter-sdk 0.2.0 (agent-runtime and adapter-sdk are new dependencies of the harness support).
+
 ## 0.2.0 - 2026-10-04
 
 - Depend on `@farmslot/recipe-runner` (renamed from `@farmslot/recipe-harness`).

package/README.md

@@ -29,15 +29,17 @@ Docs: https://farmslot.io/docs/reference/recipe-discovery
 
 ## Source layout
 
-| path                                                | owns                                                                        |
-| --------------------------------------------------- | --------------------------------------------------------------------------- |
-| `src/cli.ts`                                        | the `farmslot-recipe` program: the runner's `run`/`validate` plus discovery |
-| `src/commands.ts`                                   | discovery command registration, JSON envelopes and errors                   |
-| `src/libraries.ts`                                  | library resolution: precedence, overrides, digests, `requires` checks       |
-| `src/discovery-index.ts`                            | the recipe and action index for one platform view                           |
-| `src/composition.ts`                                | composition, callers and `explain`                                          |
-| `src/search.ts`, `src/template.ts`, `src/render.ts` | search ranking, skeletons, text output                                      |
-| `src/types.ts`                                      | the documented `--json` schema                                              |
+| path                                                | owns                                                                                                                                                                                                  |
+| --------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `src/cli.ts`                                        | the `farmslot-recipe` program: the runner's `run`/`validate` plus discovery                                                                                                                           |
+| `src/commands.ts`                                   | discovery command registration, JSON envelopes and errors                                                                                                                                             |
+| `src/libraries.ts`                                  | library resolution: precedence, overrides, digests, `requires` checks                                                                                                                                 |
+| `src/discovery-index.ts`                            | the recipe and action index for one platform view                                                                                                                                                     |
+| `src/composition.ts`                                | composition, callers and `explain`                                                                                                                                                                    |
+| `src/search.ts`, `src/template.ts`, `src/render.ts` | search ranking, skeletons, text output                                                                                                                                                                |
+| `src/types.ts`                                      | the documented `--json` schema                                                                                                                                                                        |
+| `src/harness/`                                      | generic harness support (`@farmslot/recipe-cli/harness`): host identity, adapter registry, runtime paths, journal, checkout lock, JSON stream, colour, option parsing, leaf spawning, bounded healing |
+| `src/harness/commands/`                             | lifecycle commands a host CLI dispatches to: `launch`, `reload`, `stop`, `last`; `overlay.ts` is `install`/`verify`/`cleanup`                                                                         |
 
 ## Maintenance rules
 
@@ -45,6 +47,8 @@ Docs: https://farmslot.io/docs/reference/recipe-discovery
 - Library loading, recipe identity and precedence belong to `@farmslot/recipe-runner`; this package reads them and must not re-implement them.
 - `--json` envelopes are a contract: add fields freely, but bump `DISCOVERY_SCHEMA_VERSION` before removing or renaming one.
 - Discovery never runs actions or loads adapter code.
+- Harness commands never compare adapter ids: platform behaviour comes from the registered `@farmslot/adapter-sdk` adapters, and a new behaviour is a new adapter member.
+- `src/harness/` never hardcodes a product: names and env variables come from the host identity (`configureHarnessHost`), so a preset such as `mm-harness` keeps its own spelling. Runtime paths are shared by every host (`temp/recipe/runtime`, `temp/recipe/harness`; `RECIPE_RUNTIME_DIR` and `RECIPE_HARNESS_ROOT` override them).
 
 ## Local quality
 

package/dist/harness/adapters.d.ts

@@ -0,0 +1,25 @@
+import { type AdapterRegistry, type PlatformAdapter } from '@farmslot/adapter-sdk';
+/** Set the registry the generic commands use. Call once, before any command runs. */
+export declare function configureHarnessAdapters(next: AdapterRegistry): void;
+export declare function harnessAdapters(): AdapterRegistry;
+export declare function harnessAdapter(id: string): PlatformAdapter;
+/**
+ * The adapter whose checkout `target` is, or undefined. Any adapter's remote
+ * match beats any adapter's file match; within a pass, registration order decides.
+ */
+export declare function detectAdapter(target: string): string | undefined;
+/** The adapter a `--platform` value or positional target names: its own id, or one of its `targets`. */
+export declare function adapterForPlatform(value: string | undefined): string | undefined;
+/** Whether `value` is one of an adapter's positional platform targets. */
+export declare function isPlatformTarget(value: string | undefined): value is string;
+/** Both escapes from a failed detection: where to run, and how to force it. */
+export declare function adapterDetectNext(): string;
+export declare function undetectedAdapterMessage(target: string): string;
+export declare function assertAdaptersRegistered(): void;
+/** Throws unless `adapter` is a registered id. An empty registry is an internal error. */
+export declare function assertAdapter(adapter: unknown): asserts adapter is string;
+/** Extra dev-server port environment names every registered adapter reads. */
+export declare function adapterPortEnv(): string[];
+/** Boolean flags every registered adapter adds, for `launch` or for the other commands. */
+export declare function adapterFlags(kind: 'launch' | 'commands'): string[];
+//# sourceMappingURL=adapters.d.ts.map

package/dist/harness/adapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../../src/harness/adapters.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,KAAK,eAAe,EAEpB,KAAK,eAAe,EACrB,MAAM,uBAAuB,CAAC;AAM/B,qFAAqF;AACrF,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAEpE;AAED,wBAAgB,eAAe,IAAI,eAAe,CAEjD;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,CAE1D;AAMD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAoBhE;AAED,wGAAwG;AACxG,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAGhF;AAED,0EAA0E;AAC1E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,KAAK,IAAI,MAAM,CAE3E;AAED,+EAA+E;AAC/E,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,wBAAwB,IAAI,IAAI,CAM/C;AAED,0FAA0F;AAC1F,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAQzE;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,IAAI,MAAM,EAAE,CAEzC;AAED,2FAA2F;AAC3F,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,UAAU,GAAG,MAAM,EAAE,CAElE"}

package/dist/harness/adapters.js

@@ -0,0 +1,87 @@
+// The host's platform adapters: a product preset registers its adapters here,
+// and every generic command resolves platform behaviour through them. No
+// command compares adapter ids.
+import { execFileSync } from 'node:child_process';
+import { createAdapterRegistry, } from '@farmslot/adapter-sdk';
+import { harnessHost } from './host.js';
+let registry = createAdapterRegistry();
+/** Set the registry the generic commands use. Call once, before any command runs. */
+export function configureHarnessAdapters(next) {
+    registry = next;
+}
+export function harnessAdapters() {
+    return registry;
+}
+export function harnessAdapter(id) {
+    return registry.get(id);
+}
+function registered() {
+    return registry.list().map((id) => registry.get(id));
+}
+/**
+ * The adapter whose checkout `target` is, or undefined. Any adapter's remote
+ * match beats any adapter's file match; within a pass, registration order decides.
+ */
+export function detectAdapter(target) {
+    // An empty registry would detect nothing for every checkout; that is a host
+    // wiring error, not an unknown checkout.
+    assertAdaptersRegistered();
+    let remote = '';
+    try {
+        remote = execFileSync('git', ['-C', target, 'config', '--get', 'remote.origin.url'], {
+            encoding: 'utf8',
+            stdio: ['ignore', 'pipe', 'ignore'],
+        }).trim();
+    }
+    catch {
+        // Not a Git checkout, or no origin: only the file checks apply.
+        remote = '';
+    }
+    const adapters = registered();
+    if (remote) {
+        const byRemote = adapters.find((adapter) => adapter.detect?.remote?.(remote));
+        if (byRemote)
+            return byRemote.id;
+    }
+    return adapters.find((adapter) => adapter.detect?.files?.(target))?.id;
+}
+/** The adapter a `--platform` value or positional target names: its own id, or one of its `targets`. */
+export function adapterForPlatform(value) {
+    if (value === undefined)
+        return undefined;
+    return registered().find((adapter) => adapter.targets?.includes(value))?.id ?? value;
+}
+/** Whether `value` is one of an adapter's positional platform targets. */
+export function isPlatformTarget(value) {
+    return value !== undefined && registered().some((adapter) => adapter.targets?.includes(value));
+}
+/** Both escapes from a failed detection: where to run, and how to force it. */
+export function adapterDetectNext() {
+    return `cd into a ${harnessHost().product} checkout or pass --target <path>, or force it with --adapter <${registry.list().join('|')}>`;
+}
+export function undetectedAdapterMessage(target) {
+    return `could not detect the ${harnessHost().product} repo type for ${target}`;
+}
+export function assertAdaptersRegistered() {
+    if (registry.list().length === 0) {
+        throw new Error('internal: no adapters are registered yet; the host registers its adapters before resolving one');
+    }
+}
+/** Throws unless `adapter` is a registered id. An empty registry is an internal error. */
+export function assertAdapter(adapter) {
+    assertAdaptersRegistered();
+    const ids = registry.list();
+    if (typeof adapter !== 'string' || !registry.has(adapter)) {
+        const choices = ids.length > 1 ? `${ids.slice(0, -1).join(', ')}, or ${ids.at(-1)}` : ids.join('');
+        throw new Error(`Adapter must be ${choices}.`);
+    }
+}
+/** Extra dev-server port environment names every registered adapter reads. */
+export function adapterPortEnv() {
+    return [...new Set(registered().flatMap((adapter) => [...(adapter.devServer.portEnv ?? [])]))];
+}
+/** Boolean flags every registered adapter adds, for `launch` or for the other commands. */
+export function adapterFlags(kind) {
+    return registered().flatMap((adapter) => [...(adapter.flags?.[kind] ?? [])]);
+}
+//# sourceMappingURL=adapters.js.map

package/dist/harness/adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../../src/harness/adapters.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,yEAAyE;AACzE,gCAAgC;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAEL,qBAAqB,GAEtB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,IAAI,QAAQ,GAAoB,qBAAqB,EAAE,CAAC;AAExD,qFAAqF;AACrF,MAAM,UAAU,wBAAwB,CAAC,IAAqB;IAC5D,QAAQ,GAAG,IAAI,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,OAAO,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,4EAA4E;IAC5E,yCAAyC;IACzC,wBAAwB,EAAE,CAAC;IAC3B,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,EAAE;YACnF,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;QAChE,MAAM,GAAG,EAAE,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;IAC9B,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9E,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC,EAAE,CAAC;IACnC,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC;AACzE,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IAC1D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,IAAI,KAAK,CAAC;AACvF,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,KAAyB;IACxD,OAAO,KAAK,KAAK,SAAS,IAAI,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB;IAC/B,OAAO,aAAa,WAAW,EAAE,CAAC,OAAO,kEAAkE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAC1I,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,OAAO,wBAAwB,WAAW,EAAE,CAAC,OAAO,kBAAkB,MAAM,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,gGAAgG,CACjG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,wBAAwB,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,MAAM,OAAO,GACX,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,GAAG,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,cAAc;IAC5B,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,YAAY,CAAC,IAA2B;IACtD,OAAO,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC"}

package/dist/harness/artifact-files.d.ts

@@ -0,0 +1,11 @@
+export interface ArtifactManifestEntry {
+    category?: string;
+    label: string;
+    path: string;
+    type: string;
+    metadata?: Record<string, unknown>;
+}
+export declare function writeContainedArtifact(artifactsDir: string, relativePath: string, value: string | Uint8Array, label: string): Promise<void>;
+export declare function readContainedJsonArtifact<T>(artifactsDir: string, relativePath: string, maxBytes: number, label: string): Promise<T>;
+export declare function indexArtifactManifest(manifestPath: string, entries: readonly ArtifactManifestEntry[]): Promise<void>;
+//# sourceMappingURL=artifact-files.d.ts.map

package/dist/harness/artifact-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-files.d.ts","sourceRoot":"","sources":["../../src/harness/artifact-files.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,GAAG,UAAU,EAC1B,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAef;AAED,wBAAsB,yBAAyB,CAAC,CAAC,EAC/C,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,CAAC,CAAC,CAcZ;AAED,wBAAsB,qBAAqB,CACzC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,SAAS,qBAAqB,EAAE,GACxC,OAAO,CAAC,IAAI,CAAC,CAaf"}

package/dist/harness/artifact-files.js

@@ -0,0 +1,75 @@
+import { constants as fsConstants } from 'node:fs';
+import { lstat, mkdir, open, readFile, realpath, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+export async function writeContainedArtifact(artifactsDir, relativePath, value, label) {
+    const file = resolveContainedArtifact(artifactsDir, relativePath, label);
+    await mkdir(path.dirname(file), { recursive: true });
+    await assertContainedParent(artifactsDir, file, label);
+    await assertNotSymlink(file, label);
+    const handle = await open(file, fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_TRUNC | fsConstants.O_NOFOLLOW, 0o600);
+    try {
+        await handle.writeFile(value);
+    }
+    finally {
+        await handle.close();
+    }
+}
+export async function readContainedJsonArtifact(artifactsDir, relativePath, maxBytes, label) {
+    const file = resolveContainedArtifact(artifactsDir, relativePath, label);
+    await assertContainedParent(artifactsDir, file, label);
+    await assertNotSymlink(file, label);
+    const handle = await open(file, fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW);
+    try {
+        const info = await handle.stat();
+        if (!info.isFile() || info.size > maxBytes) {
+            throw new Error(`${label} is not a bounded regular file.`);
+        }
+        return JSON.parse(await handle.readFile('utf8'));
+    }
+    finally {
+        await handle.close();
+    }
+}
+export async function indexArtifactManifest(manifestPath, entries) {
+    const parsed = JSON.parse(await readFile(manifestPath, 'utf8'));
+    const manifest = asRecord(parsed);
+    const replacementPaths = new Set(entries.map((entry) => entry.path));
+    const current = Array.isArray(manifest.artifacts)
+        ? manifest.artifacts.filter((artifact) => !replacementPaths.has(String(asRecord(artifact).path ?? '')))
+        : [];
+    await writeFile(manifestPath, `${JSON.stringify({ ...manifest, artifacts: [...current, ...entries] }, null, 2)}\n`);
+}
+function resolveContainedArtifact(artifactsDir, relativePath, label) {
+    const root = path.resolve(artifactsDir);
+    const file = path.resolve(root, relativePath);
+    const relative = path.relative(root, file);
+    if (relative.startsWith('..') || path.isAbsolute(relative)) {
+        throw new Error(`${label} path must stay inside artifactsDir.`);
+    }
+    return file;
+}
+async function assertContainedParent(artifactsDir, file, label) {
+    const root = await realpath(artifactsDir);
+    const parent = await realpath(path.dirname(file));
+    const relative = path.relative(root, parent);
+    if (relative.startsWith('..') || path.isAbsolute(relative)) {
+        throw new Error(`${label} parent must stay inside artifactsDir.`);
+    }
+}
+async function assertNotSymlink(file, label) {
+    try {
+        if ((await lstat(file)).isSymbolicLink()) {
+            throw new Error(`${label} must not be a symbolic link.`);
+        }
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+}
+function asRecord(value) {
+    return value && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : {};
+}
+//# sourceMappingURL=artifact-files.js.map

package/dist/harness/artifact-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-files.js","sourceRoot":"","sources":["../../src/harness/artifact-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,IAAI,MAAM,WAAW,CAAC;AAU7B,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,YAAoB,EACpB,YAAoB,EACpB,KAA0B,EAC1B,KAAa;IAEb,MAAM,IAAI,GAAG,wBAAwB,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IACzE,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,qBAAqB,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,IAAI,EACJ,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,GAAG,WAAW,CAAC,UAAU,EACzF,KAAK,CACN,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,YAAoB,EACpB,YAAoB,EACpB,QAAgB,EAChB,KAAa;IAEb,MAAM,IAAI,GAAG,wBAAwB,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IACzE,MAAM,qBAAqB,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAC/E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAM,CAAC;IACxD,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,YAAoB,EACpB,OAAyC;IAEzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAY,CAAC;IAC3E,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC/C,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CACvB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAC3E;QACH,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,CACb,YAAY,EACZ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACrF,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,YAAoB,EACpB,YAAoB,EACpB,KAAa;IAEb,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,YAAoB,EACpB,IAAY,EACZ,KAAa;IAEb,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACzD,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,+BAA+B,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAChE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC"}

package/dist/harness/checkout-lock.d.ts

@@ -0,0 +1,13 @@
+export interface CheckoutLock {
+    path: string;
+    release: () => void;
+}
+export interface CheckoutLockFailure {
+    path: string;
+    owner: Record<string, unknown> | null;
+    message: string;
+}
+export declare function acquireCheckoutLock(target: string, operation: string): CheckoutLock | CheckoutLockFailure;
+/** Each nested launcher records its child independently under the inherited lock. */
+export declare function trackCheckoutChild(target: string, pid: number, ownsProcessGroup?: boolean): () => void;
+//# sourceMappingURL=checkout-lock.d.ts.map

package/dist/harness/checkout-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkout-lock.d.ts","sourceRoot":"","sources":["../../src/harness/checkout-lock.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAChB,YAAY,GAAG,mBAAmB,CA8EpC;AA+FD,qFAAqF;AACrF,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,gBAAgB,UAAQ,GACvB,MAAM,IAAI,CAiCZ"}

package/dist/harness/checkout-lock.js

@@ -0,0 +1,211 @@
+import { randomUUID } from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { ensureRuntimeDirectory, processIdentity } from '@farmslot/recipe-runner/runtime/operation';
+import { hostEnvName } from './host.js';
+import { recipeRuntimeDir } from './paths.js';
+const lockTokenEnv = () => hostEnvName('CHECKOUT_LOCK_TOKEN');
+export function acquireCheckoutLock(target, operation) {
+    const repoRoot = fs.realpathSync(target);
+    const lockPath = path.join(repoRoot, recipeRuntimeDir(), 'sandbox.lock');
+    ensureRuntimeDirectory(path.dirname(lockPath));
+    const tokenEnv = lockTokenEnv();
+    const inheritedToken = process.env[tokenEnv];
+    for (let attempt = 0; attempt < 4; attempt += 1) {
+        try {
+            const identity = processIdentity(process.pid);
+            if (!identity)
+                throw new Error('Cannot identify checkout lock owner process');
+            const fd = fs.openSync(lockPath, 'wx', 0o600);
+            fs.fchmodSync(fd, 0o600);
+            const token = randomUUID();
+            const owner = {
+                schemaVersion: 1,
+                pid: process.pid,
+                processStartedAt: identity,
+                operation,
+                repoRoot,
+                token,
+                startedAt: new Date().toISOString(),
+            };
+            fs.writeFileSync(fd, `${JSON.stringify(owner, null, 2)}\n`);
+            fs.closeSync(fd);
+            process.env[tokenEnv] = token;
+            return {
+                path: lockPath,
+                release: () => {
+                    const current = readOwner(lockPath);
+                    if (current?.pid === process.pid && current.token === token && !childrenAlive(current)) {
+                        fs.rmSync(lockPath, { force: true });
+                        fs.rmSync(path.join(path.dirname(lockPath), 'lock-members', token), {
+                            recursive: true,
+                            force: true,
+                        });
+                    }
+                    if (process.env[tokenEnv] === token) {
+                        if (inheritedToken)
+                            process.env[tokenEnv] = inheritedToken;
+                        else
+                            delete process.env[tokenEnv];
+                    }
+                },
+            };
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST')
+                throw error;
+            const owner = readOwner(lockPath);
+            if (inheritedToken &&
+                owner?.token === inheritedToken &&
+                owner.repoRoot === repoRoot &&
+                typeof owner.pid === 'number' &&
+                ownerAlive(owner)) {
+                trackCheckoutChild(repoRoot, process.pid);
+                return { path: lockPath, release: () => undefined };
+            }
+            if (owner && typeof owner.pid === 'number' && ownerAlive(owner)) {
+                return {
+                    path: lockPath,
+                    owner,
+                    message: `checkout sandbox is busy with ${String(owner.operation ?? 'another operation')} (pid ${owner.pid}).`,
+                };
+            }
+            if (!owner || childrenAlive(owner)) {
+                return {
+                    path: lockPath,
+                    owner,
+                    message: `checkout sandbox owner is unreadable or has surviving child processes. Inspect ${lockPath} and its lock-members directory; remove the lock only after verifying all recorded processes have exited.`,
+                };
+            }
+            claimStaleLock(lockPath, owner);
+        }
+    }
+    return {
+        path: lockPath,
+        owner: readOwner(lockPath),
+        message: 'checkout sandbox lock could not be acquired.',
+    };
+}
+function claimStaleLock(lockPath, expectedOwner) {
+    const claimedPath = `${lockPath}.stale-${process.pid}-${randomUUID()}`;
+    try {
+        fs.renameSync(lockPath, claimedPath);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return;
+        throw error;
+    }
+    try {
+        const claimedOwner = readOwner(claimedPath);
+        if (!sameOwner(claimedOwner, expectedOwner) ||
+            (claimedOwner &&
+                typeof claimedOwner.pid === 'number' &&
+                (ownerAlive(claimedOwner) || childrenAlive(claimedOwner)))) {
+            try {
+                // Restore only when nobody else acquired the now-empty canonical path.
+                // linkSync is atomic and never overwrites a newer owner's lock.
+                fs.linkSync(claimedPath, lockPath);
+            }
+            catch (error) {
+                if (error.code !== 'EEXIST')
+                    throw error;
+            }
+        }
+        else if (typeof claimedOwner?.token === 'string' &&
+            /^[a-f0-9-]{36}$/.test(claimedOwner.token)) {
+            fs.rmSync(path.join(path.dirname(lockPath), 'lock-members', claimedOwner.token), {
+                recursive: true,
+                force: true,
+            });
+        }
+    }
+    finally {
+        fs.rmSync(claimedPath, { force: true });
+    }
+}
+function sameOwner(left, right) {
+    if (!left || !right)
+        return left === right;
+    return (left.pid === right.pid &&
+        left.token === right.token &&
+        left.startedAt === right.startedAt &&
+        left.repoRoot === right.repoRoot);
+}
+function readOwner(lockPath) {
+    try {
+        const value = JSON.parse(fs.readFileSync(lockPath, 'utf8'));
+        return value && typeof value === 'object' && !Array.isArray(value) ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+function ownerAlive(owner) {
+    if (typeof owner.pid !== 'number')
+        return true;
+    if (typeof owner.processStartedAt === 'string')
+        return processIdentity(owner.pid) === owner.processStartedAt;
+    return processAlive(owner.pid);
+}
+function childrenAlive(owner) {
+    if (typeof owner.repoRoot !== 'string' ||
+        typeof owner.token !== 'string' ||
+        !/^[a-f0-9-]{36}$/.test(owner.token))
+        return false;
+    const directory = path.join(owner.repoRoot, recipeRuntimeDir(), 'lock-members', owner.token);
+    if (!fs.existsSync(directory))
+        return false;
+    return fs
+        .readdirSync(directory)
+        .filter((name) => name.endsWith('.json'))
+        .some((name) => {
+        const child = readOwner(path.join(directory, name));
+        if (child && typeof child.processGroupId === 'number' && child.processGroupId > 0)
+            return processAlive(-child.processGroupId);
+        // An incomplete membership write is uncertain ownership, never permission to reclaim.
+        return (!child ||
+            typeof child.pid !== 'number' ||
+            typeof child.processStartedAt !== 'string' ||
+            (child.pid !== owner.pid && processIdentity(child.pid) === child.processStartedAt));
+    });
+}
+/** Each nested launcher records its child independently under the inherited lock. */
+export function trackCheckoutChild(target, pid, ownsProcessGroup = false) {
+    const repoRoot = fs.realpathSync(target);
+    const lockPath = path.join(repoRoot, recipeRuntimeDir(), 'sandbox.lock');
+    const owner = readOwner(lockPath);
+    if (!owner ||
+        owner.token !== process.env[lockTokenEnv()] ||
+        typeof owner.token !== 'string' ||
+        !/^[a-f0-9-]{36}$/.test(owner.token))
+        return () => undefined;
+    const identity = processIdentity(pid);
+    if (!identity && !ownsProcessGroup)
+        return () => undefined;
+    const directory = path.join(repoRoot, recipeRuntimeDir(), 'lock-members', owner.token);
+    ensureRuntimeDirectory(directory);
+    const file = path.join(directory, `${pid}.json`);
+    const previous = readOwner(file);
+    const group = ownsProcessGroup ||
+        (previous?.processStartedAt === identity && previous?.processGroupId === pid);
+    const temporary = `${file}.${process.pid}.${randomUUID()}.tmp`;
+    fs.writeFileSync(temporary, JSON.stringify({ pid, processStartedAt: identity, ...(group ? { processGroupId: pid } : {}) }), { mode: 0o600 });
+    fs.chmodSync(temporary, 0o600);
+    fs.renameSync(temporary, file);
+    return () => {
+        const current = readOwner(file);
+        if (current?.pid === pid && current.processStartedAt === identity)
+            fs.rmSync(file, { force: true });
+    };
+}
+function processAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === 'EPERM';
+    }
+}
+//# sourceMappingURL=checkout-lock.js.map

package/dist/harness/checkout-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkout-lock.js","sourceRoot":"","sources":["../../src/harness/checkout-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AAEpG,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,YAAY,GAAG,GAAW,EAAE,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC;AAatE,MAAM,UAAU,mBAAmB,CACjC,MAAc,EACd,SAAiB;IAEjB,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,EAAE,EAAE,cAAc,CAAC,CAAC;IACzE,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAE7C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC9E,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC9C,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACzB,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG;gBACZ,aAAa,EAAE,CAAC;gBAChB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,gBAAgB,EAAE,QAAQ;gBAC1B,SAAS;gBACT,QAAQ;gBACR,KAAK;gBACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YACF,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5D,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;YAC9B,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,GAAG,EAAE;oBACZ,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;oBACpC,IAAI,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;wBACvF,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;wBACrC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE;4BAClE,SAAS,EAAE,IAAI;4BACf,KAAK,EAAE,IAAI;yBACZ,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,EAAE,CAAC;wBACpC,IAAI,cAAc;4BAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC;;4BACtD,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;oBACpC,CAAC;gBACH,CAAC;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;YAClC,IACE,cAAc;gBACd,KAAK,EAAE,KAAK,KAAK,cAAc;gBAC/B,KAAK,CAAC,QAAQ,KAAK,QAAQ;gBAC3B,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;gBAC7B,UAAU,CAAC,KAAK,CAAC,EACjB,CAAC;gBACD,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC1C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;YACtD,CAAC;YACD,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChE,OAAO;oBACL,IAAI,EAAE,QAAQ;oBACd,KAAK;oBACL,OAAO,EAAE,iCAAiC,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,mBAAmB,CAAC,SAAS,KAAK,CAAC,GAAG,IAAI;iBAC/G,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,KAAK,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,OAAO;oBACL,IAAI,EAAE,QAAQ;oBACd,KAAK;oBACL,OAAO,EAAE,kFAAkF,QAAQ,2GAA2G;iBAC/M,CAAC;YACJ,CAAC;YACD,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC;QAC1B,OAAO,EAAE,8CAA8C;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,aAA6C;IACrF,MAAM,WAAW,GAAG,GAAG,QAAQ,UAAU,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,EAAE,CAAC;IACvE,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC/D,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;QAC5C,IACE,CAAC,SAAS,CAAC,YAAY,EAAE,aAAa,CAAC;YACvC,CAAC,YAAY;gBACX,OAAO,YAAY,CAAC,GAAG,KAAK,QAAQ;gBACpC,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,EAC5D,CAAC;YACD,IAAI,CAAC;gBACH,uEAAuE;gBACvE,gEAAgE;gBAChE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YACtE,CAAC;QACH,CAAC;aAAM,IACL,OAAO,YAAY,EAAE,KAAK,KAAK,QAAQ;YACvC,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAC1C,CAAC;YACD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE;gBAC/E,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAChB,IAAoC,EACpC,KAAqC;IAErC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,KAAK,KAAK,CAAC;IAC3C,OAAO,CACL,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;QACtB,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAC1B,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QAClC,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CACjC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IACjC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5D,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAA8B;IAChD,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;QAC5C,OAAO,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,gBAAgB,CAAC;IAC/D,OAAO,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,aAAa,CAAC,KAA8B;IACnD,IACE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAEpC,OAAO,KAAK,CAAC;IACf,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,gBAAgB,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7F,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,EAAE;SACN,WAAW,CAAC,SAAS,CAAC;SACtB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SACxC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACb,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;QACpD,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC;YAC/E,OAAO,YAAY,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC7C,sFAAsF;QACtF,OAAO,CACL,CAAC,KAAK;YACN,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;YAC7B,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;YAC1C,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,gBAAgB,CAAC,CACnF,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,GAAW,EACX,gBAAgB,GAAG,KAAK;IAExB,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,EAAE,EAAE,cAAc,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IACE,CAAC,KAAK;QACN,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAEpC,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC;IACzB,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,QAAQ,IAAI,CAAC,gBAAgB;QAAE,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACvF,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GACT,gBAAgB;QAChB,CAAC,QAAQ,EAAE,gBAAgB,KAAK,QAAQ,IAAI,QAAQ,EAAE,cAAc,KAAK,GAAG,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IAC/D,EAAE,CAAC,aAAa,CACd,SAAS,EACT,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAC9F,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACF,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC/B,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,GAAG,EAAE;QACV,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,OAAO,EAAE,GAAG,KAAK,GAAG,IAAI,OAAO,CAAC,gBAAgB,KAAK,QAAQ;YAC/D,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC"}

package/dist/harness/cli-color.d.ts

@@ -0,0 +1,25 @@
+/**
+ * cli-color.ts — shared ANSI styling for recipe CLI human output.
+ *
+ * Honors NO_COLOR, RECIPE_NO_COLOR, FORCE_COLOR, RECIPE_COLOR, and TTY detection.
+ */
+export declare function colorEnabled(stream?: NodeJS.WriteStream): boolean;
+export declare function stripAnsi(text: string): string;
+export declare function color(style: string, text: string, { stream }?: {
+    stream?: NodeJS.WriteStream;
+}): string;
+export declare function colorKv(label: string, value: string, valueStyle?: string, { stream }?: {
+    stream?: NodeJS.WriteStream;
+}): string;
+export declare function colorStatusWord(word: string, { stream }?: {
+    stream?: NodeJS.WriteStream;
+}): string;
+export declare function colorHumanMessage(message: string, { stream }?: {
+    stream?: NodeJS.WriteStream;
+}): string;
+export declare function classifyLogEvent(event: string): string;
+export declare function colorLogEvent(event: string, { latest, stream, }?: {
+    latest?: boolean;
+    stream?: NodeJS.WriteStream;
+}): string;
+//# sourceMappingURL=cli-color.d.ts.map

package/dist/harness/cli-color.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-color.d.ts","sourceRoot":"","sources":["../../src/harness/cli-color.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAiCH,wBAAgB,YAAY,CAAC,MAAM,GAAE,MAAM,CAAC,WAA4B,GAAG,OAAO,CAOjF;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED,wBAAgB,KAAK,CACnB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,EAAE,MAAuB,EAAE,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,CAAA;CAAO,GAChE,MAAM,CAMR;AAED,wBAAgB,OAAO,CACrB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,UAAU,SAAS,EACnB,EAAE,MAAuB,EAAE,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,CAAA;CAAO,GAChE,MAAM,CAER;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,EAAE,MAAuB,EAAE,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,CAAA;CAAO,GAChE,MAAM,CAgBR;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,EAAE,MAAuB,EAAE,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,CAAA;CAAO,GAChE,MAAM,CAoBR;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAqBtD;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,MAAM,EACb,EACE,MAAc,EACd,MAAuB,GACxB,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,CAAA;CAAO,GACxD,MAAM,CAIR"}