@harness-engineering/cli 1.24.3 → 1.25.0

package/dist/{chunk-3VYWO6QN.js → chunk-TYV4EUAD.js}

@@ -7,12 +7,16 @@ import {
 import {
   findConfigFile,
   loadConfig
-} from "./chunk-5PMRARB5.js";
+} from "./chunk-WIQA4BSH.js";
+import {
+  init_dist
+} from "./chunk-MI6MA6OP.js";
 import {
   Ok
-} from "./chunk-5LMZA5LZ.js";
+} from "./chunk-RL4VMEXL.js";
 
 // src/mcp/tools/performance.ts
+init_dist();
 var checkPerformanceDefinition = {
   name: "check_performance",
   description: "Run performance checks: structural complexity, coupling metrics, and size budgets",
@@ -31,7 +35,7 @@ var checkPerformanceDefinition = {
 };
 async function handleCheckPerformance(input) {
   try {
-    const { EntropyAnalyzer } = await import("./dist-7EBSGAHX.js");
+    const { EntropyAnalyzer } = await import("./dist-WCSJHQPK.js");
     const typeFilter = input.type ?? "all";
     const projectPath = sanitizePath(input.path);
     let entryPoints;
@@ -54,10 +58,10 @@ async function handleCheckPerformance(input) {
     });
     let graphOptions;
     try {
-      const { loadGraphStore } = await import("./graph-loader-M6FXJAKK.js");
+      const { loadGraphStore } = await import("./graph-loader-JHQVQRUS.js");
       const store = await loadGraphStore(projectPath);
       if (store) {
-        const { GraphComplexityAdapter, GraphCouplingAdapter } = await import("./dist-QW5G3GX3.js");
+        const { GraphComplexityAdapter, GraphCouplingAdapter } = await import("./dist-RADHOOXG.js");
         const complexityAdapter = new GraphComplexityAdapter(store);
         const couplingAdapter = new GraphCouplingAdapter(store);
         graphOptions = {
@@ -94,7 +98,7 @@ var getPerfBaselinesDefinition = {
 };
 async function handleGetPerfBaselines(input) {
   try {
-    const { BaselineManager } = await import("./dist-7EBSGAHX.js");
+    const { BaselineManager } = await import("./dist-WCSJHQPK.js");
     const manager = new BaselineManager(sanitizePath(input.path));
     const baselines = manager.load();
     return resultToMcpResponse(
@@ -142,7 +146,7 @@ var updatePerfBaselinesDefinition = {
 };
 async function handleUpdatePerfBaselines(input) {
   try {
-    const { BaselineManager } = await import("./dist-7EBSGAHX.js");
+    const { BaselineManager } = await import("./dist-WCSJHQPK.js");
     const manager = new BaselineManager(sanitizePath(input.path));
     manager.save(input.results, input.commitHash);
     const updated = manager.load();
@@ -172,7 +176,7 @@ var getCriticalPathsDefinition = {
 };
 async function handleGetCriticalPaths(input) {
   try {
-    const { CriticalPathResolver } = await import("./dist-7EBSGAHX.js");
+    const { CriticalPathResolver } = await import("./dist-WCSJHQPK.js");
     const resolver = new CriticalPathResolver(sanitizePath(input.path));
     const result = await resolver.resolve();
     return resultToMcpResponse(Ok(result));

package/dist/{chunk-FJYP32IV.js → chunk-UQZBZINS.js}

@@ -50,7 +50,7 @@ async function handleAssessProject(input) {
   let validateResult = null;
   if (checksToRun.has("validate")) {
     try {
-      const { handleValidateProject } = await import("./validate-MNE25KLZ.js");
+      const { handleValidateProject } = await import("./validate-TIIHRPMA.js");
       const result = await handleValidateProject({ path: projectPath });
       const first = result.content[0];
       const parsed = first ? JSON.parse(first.text) : {};
@@ -75,7 +75,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleCheckDependencies } = await import("./architecture-FBSLURIB.js");
+          const { handleCheckDependencies } = await import("./architecture-HNIO6AUX.js");
           const result = await handleCheckDependencies({ path: projectPath });
           const first = result.content[0];
           const parsed = first ? JSON.parse(first.text) : {};
@@ -102,7 +102,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleCheckDocs } = await import("./docs-H34GBVRS.js");
+          const { handleCheckDocs } = await import("./docs-UBOGGHTY.js");
           const result = await handleCheckDocs({ path: projectPath, scope: "coverage" });
           const first = result.content[0];
           const parsed = first ? JSON.parse(first.text) : {};
@@ -129,7 +129,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleDetectEntropy } = await import("./entropy-ZAY73R6A.js");
+          const { handleDetectEntropy } = await import("./entropy-EMSXF2PX.js");
           const result = await handleDetectEntropy({ path: projectPath, type: "all" });
           const first = result.content[0];
           const parsed = first ? JSON.parse(first.text) : {};
@@ -156,7 +156,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleRunSecurityScan } = await import("./security-L2YN3CTI.js");
+          const { handleRunSecurityScan } = await import("./security-JLZUAQYT.js");
           const result = await handleRunSecurityScan({ path: projectPath });
           const first = result.content[0];
           const parsed = first ? JSON.parse(first.text) : {};
@@ -188,7 +188,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleCheckPerformance } = await import("./performance-N67YJJDG.js");
+          const { handleCheckPerformance } = await import("./performance-7AGWJUY4.js");
           const result = await handleCheckPerformance({ path: projectPath });
           if ("isError" in result && result.isError) {
             const msg = result.content[0]?.text ?? "Performance check failed";

package/dist/{chunk-UFQQBGC3.js → chunk-UV3BZMGT.js}

@@ -4,6 +4,7 @@ import {
 
 // src/mcp/tools/security.ts
 import * as path from "path";
+import { execSync } from "child_process";
 var runSecurityScanDefinition = {
   name: "run_security_scan",
   description: "Run the built-in security scanner on a project or specific files. Detects secrets, injection, XSS, weak crypto, and other vulnerabilities.",
@@ -26,7 +27,7 @@ var runSecurityScanDefinition = {
 };
 async function handleRunSecurityScan(input) {
   try {
-    const core = await import("./dist-7EBSGAHX.js");
+    const core = await import("./dist-WCSJHQPK.js");
     const projectRoot = sanitizePath(input.path);
     let configData = {};
     try {
@@ -49,10 +50,20 @@ async function handleRunSecurityScan(input) {
     if (input.files && input.files.length > 0) {
       filesToScan = input.files.map((f) => path.resolve(projectRoot, f));
     } else {
-      const { globFiles } = await import("./glob-helper-SRXMZPKM.js");
+      const { globFiles } = await import("./glob-helper-VCQXK5XY.js");
       filesToScan = await globFiles(projectRoot, securityConfig.exclude);
     }
     const result = await scanner.scanFiles(filesToScan);
+    try {
+      const commitHash = execSync("git rev-parse HEAD", {
+        cwd: projectRoot,
+        encoding: "utf-8"
+      }).trim();
+      const timelineManager = new core.SecurityTimelineManager(projectRoot);
+      timelineManager.capture(result, commitHash);
+      timelineManager.updateLifecycles(result.findings, commitHash);
+    } catch {
+    }
     return {
       content: [
         {
@@ -82,8 +93,58 @@ async function handleRunSecurityScan(input) {
     };
   }
 }
+var getSecurityTrendsDefinition = {
+  name: "get_security_trends",
+  description: "Get security posture trends showing how security score, findings, and supply chain metrics are changing over time.",
+  inputSchema: {
+    type: "object",
+    properties: {
+      path: { type: "string", description: "Path to project root" },
+      last: {
+        type: "number",
+        description: "Return trends from the last N snapshots"
+      },
+      since: {
+        type: "string",
+        description: "Return trends since this ISO date (e.g. 2025-01-01)"
+      }
+    },
+    required: ["path"]
+  }
+};
+async function handleGetSecurityTrends(input) {
+  try {
+    const core = await import("./dist-WCSJHQPK.js");
+    const projectRoot = sanitizePath(input.path);
+    const manager = new core.SecurityTimelineManager(projectRoot);
+    const trendOptions = {};
+    if (input.last !== void 0) trendOptions.last = input.last;
+    if (input.since !== void 0) trendOptions.since = input.since;
+    const trends = manager.trends(trendOptions);
+    return {
+      content: [
+        {
+          type: "text",
+          text: JSON.stringify(trends)
+        }
+      ]
+    };
+  } catch (error) {
+    return {
+      content: [
+        {
+          type: "text",
+          text: `Error: ${error instanceof Error ? error.message : String(error)}`
+        }
+      ],
+      isError: true
+    };
+  }
+}
 
 export {
   runSecurityScanDefinition,
-  handleRunSecurityScan
+  handleRunSecurityScan,
+  getSecurityTrendsDefinition,
+  handleGetSecurityTrends
 };

package/dist/{chunk-5PMRARB5.js → chunk-WIQA4BSH.js}

@@ -1,20 +1,23 @@
 import {
-  ArchConfigSchema
-} from "./chunk-H4U2QNY2.js";
+  ArchConfigSchema,
+  init_dist
+} from "./chunk-MI6MA6OP.js";
 import {
   Err,
   Ok
-} from "./chunk-5LMZA5LZ.js";
+} from "./chunk-RL4VMEXL.js";
 import {
   CLIError,
   ExitCode
 } from "./chunk-3WGJMBKH.js";
 
 // src/config/loader.ts
+init_dist();
 import * as fs from "fs";
 import * as path from "path";
 
 // src/config/schema.ts
+init_dist();
 import { z } from "zod";
 var LayerSchema = z.object({
   /** Human-readable name of the layer */
@@ -45,6 +48,8 @@ var AgentConfigSchema = z.object({
   skills: z.array(z.string()).optional()
 });
 var EntropyConfigSchema = z.object({
+  /** Explicit entry points for reachability analysis (overrides auto-detection) */
+  entryPoints: z.array(z.string()).optional(),
   /** Patterns to exclude from entropy analysis */
   excludePatterns: z.array(z.string()).default(["**/node_modules/**", "**/*.test.ts"]),
   /** Whether to automatically attempt to fix simple entropy issues */
@@ -173,7 +178,10 @@ var TrackerConfigSchema = z.object({
   /** Labels auto-applied to synced issues for filtering */
   labels: z.array(z.string()).optional(),
   /** Maps roadmap status -> external status */
-  statusMap: z.record(z.enum(["backlog", "planned", "in-progress", "done", "blocked"]), z.string()),
+  statusMap: z.record(
+    z.enum(["backlog", "planned", "in-progress", "done", "blocked", "needs-human"]),
+    z.string()
+  ),
   /** Maps external status (optionally with label) -> roadmap status */
   reverseStatusMap: z.record(z.string(), z.string()).optional()
 });
@@ -330,7 +338,6 @@ function resolveConfig(configPath) {
 }
 
 export {
-  TrackerConfigSchema,
   findConfigFile,
   loadConfig,
   resolveConfig

package/dist/{chunk-UQEUYRBP.js → chunk-WWACIIBA.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-6B6UN6SG.js";
 import {
   SkillMetadataSchema
-} from "./chunk-ZOVATVQC.js";
+} from "./chunk-HIK6OEUF.js";
 
 // src/persona/skill-executor.ts
 import * as fs from "fs";

package/dist/{chunk-LVYPPKZI.js → chunk-XTITAVUR.js}

@@ -1,8 +1,12 @@
+import {
+  init_dist
+} from "./chunk-MI6MA6OP.js";
 import {
   Ok
-} from "./chunk-5LMZA5LZ.js";
+} from "./chunk-RL4VMEXL.js";
 
 // src/commands/validate-cross-check.ts
+init_dist();
 import * as fs from "fs";
 import * as path from "path";
 import { execFileSync } from "child_process";

package/dist/{chunk-WEN5Z7CL.js → chunk-YTP2UDPV.js}

@@ -1,6 +1,6 @@
 import {
   resolveProjectConfig
-} from "./chunk-Q3XYV5UC.js";
+} from "./chunk-47N6R2F4.js";
 import {
   sanitizePath
 } from "./chunk-W6Y7ZW3Y.js";
@@ -49,7 +49,7 @@ async function handleValidateProject(input) {
   checks.config = "pass";
   const config = configResult.value;
   try {
-    const core = await import("./dist-7EBSGAHX.js");
+    const core = await import("./dist-WCSJHQPK.js");
     if (typeof core.validateFileStructure === "function" && Array.isArray(config.conventions)) {
       const conventions = config.conventions;
       const structureResult = await core.validateFileStructure(projectPath, conventions);
@@ -68,7 +68,7 @@ async function handleValidateProject(input) {
   } catch {
   }
   try {
-    const core = await import("./dist-7EBSGAHX.js");
+    const core = await import("./dist-WCSJHQPK.js");
     if (typeof core.validateAgentsMap === "function") {
       const agentsMapPath = path.join(projectPath, "AGENTS.md");
       const agentsResult = await core.validateAgentsMap(agentsMapPath);

package/dist/ci-workflow-RTM7VVTD.js

@@ -0,0 +1,10 @@
+import {
+  generateCIWorkflow
+} from "./chunk-EHRZMOQ2.js";
+import "./chunk-MI6MA6OP.js";
+import "./chunk-RL4VMEXL.js";
+import "./chunk-K2SON7TI.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  generateCIWorkflow
+};

package/dist/{constants-5JGUXPEK.js → constants-P4M3C2T3.js}

@@ -1,6 +1,7 @@
 import {
   ALLOWED_PERSONA_COMMANDS
 } from "./chunk-TEFCFC4H.js";
+import "./chunk-KFQGP6VL.js";
 export {
   ALLOWED_PERSONA_COMMANDS
 };

package/dist/{create-skill-QCXINA5Q.js → create-skill-6QWJHQYS.js}

@@ -1,10 +1,11 @@
 import {
   createCreateSkillCommand,
   generateSkillFiles
-} from "./chunk-XNEMDKV5.js";
+} from "./chunk-RRHUCDRD.js";
 import "./chunk-EBJQ6N4M.js";
-import "./chunk-ZOVATVQC.js";
+import "./chunk-HIK6OEUF.js";
 import "./chunk-3WGJMBKH.js";
+import "./chunk-KFQGP6VL.js";
 export {
   createCreateSkillCommand,
   generateSkillFiles

package/dist/{dist-666AAZQ6.js → dist-3EWNRFFQ.js}

@@ -1,12 +1,17 @@
 import {
+  DEFAULT_SKILL_CONTEXT_BUDGET,
   Err,
   Ok,
   SESSION_SECTION_NAMES,
   STANDARD_COGNITIVE_MODES,
+  init_dist,
   isErr,
   isOk
-} from "./chunk-5LMZA5LZ.js";
+} from "./chunk-RL4VMEXL.js";
+import "./chunk-KFQGP6VL.js";
+init_dist();
 export {
+  DEFAULT_SKILL_CONTEXT_BUDGET,
   Err,
   Ok,
   SESSION_SECTION_NAMES,

package/dist/{dist-RRMRZRV7.js → dist-ABTKRYZH.js}

@@ -7,6 +7,7 @@ import {
   generate,
   validate
 } from "./chunk-CQ553GZO.js";
+import "./chunk-KFQGP6VL.js";
 export {
   LinterConfigSchema,
   ParseError,

package/dist/{dist-QW5G3GX3.js → dist-RADHOOXG.js}

@@ -43,13 +43,16 @@ import {
   askGraph,
   classifyNodeCategory,
   groupNodesByImpact,
+  init_dist,
   linkToCode,
   loadGraph,
   normalizeIntent,
   project,
   queryTraceability,
   saveGraph
-} from "./chunk-OZIHPMA7.js";
+} from "./chunk-K2SON7TI.js";
+import "./chunk-KFQGP6VL.js";
+init_dist();
 export {
   Assembler,
   CIConnector,