@harness-engineering/cli 1.6.2 → 1.8.0

package/dist/{chunk-IUFFBBYV.js → chunk-LNI4T7R6.js}

@@ -13,7 +13,6 @@ import {
   buildSnapshot,
   checkDocCoverage,
   createFixes,
-  createSelfReview,
   createStream,
   defineLayer,
   detectCircularDepsInFiles,
@@ -28,11 +27,12 @@ import {
   requestPeerReview,
   resolveStreamPath,
   runCIChecks,
+  runReviewPipeline,
   setActiveStream,
   validateAgentsMap,
   validateDependencies,
   validateKnowledgeMap
-} from "./chunk-USEYPS7F.js";
+} from "./chunk-SJECMKSS.js";
 import {
   CLIError,
   ExitCode,
@@ -86,6 +86,65 @@ var PhaseGatesConfigSchema = z.object({
   severity: z.enum(["error", "warning"]).default("error"),
   mappings: z.array(PhaseGateMappingSchema).default([{ implPattern: "src/**/*.ts", specPattern: "docs/specs/{feature}.md" }])
 });
+var SecurityConfigSchema = z.object({
+  enabled: z.boolean().default(true),
+  strict: z.boolean().default(false),
+  rules: z.record(z.string(), z.enum(["off", "error", "warning", "info"])).optional(),
+  exclude: z.array(z.string()).optional()
+}).passthrough();
+var PerformanceConfigSchema = z.object({
+  complexity: z.record(z.unknown()).optional(),
+  coupling: z.record(z.unknown()).optional(),
+  sizeBudget: z.record(z.unknown()).optional()
+}).passthrough();
+var DesignConfigSchema = z.object({
+  strictness: z.enum(["strict", "standard", "permissive"]).default("standard"),
+  platforms: z.array(z.enum(["web", "mobile"])).default([]),
+  tokenPath: z.string().optional(),
+  aestheticIntent: z.string().optional()
+});
+var I18nCoverageConfigSchema = z.object({
+  minimumPercent: z.number().min(0).max(100).default(100),
+  requirePlurals: z.boolean().default(true),
+  detectUntranslated: z.boolean().default(true)
+});
+var I18nMcpConfigSchema = z.object({
+  server: z.string(),
+  projectId: z.string().optional()
+});
+var I18nConfigSchema = z.object({
+  enabled: z.boolean().default(false),
+  strictness: z.enum(["strict", "standard", "permissive"]).default("standard"),
+  sourceLocale: z.string().default("en"),
+  targetLocales: z.array(z.string()).default([]),
+  framework: z.enum([
+    "auto",
+    "i18next",
+    "react-intl",
+    "vue-i18n",
+    "flutter-intl",
+    "apple",
+    "android",
+    "custom"
+  ]).default("auto"),
+  format: z.string().default("json"),
+  messageFormat: z.enum(["icu", "i18next", "custom"]).default("icu"),
+  keyConvention: z.enum(["dot-notation", "snake_case", "camelCase", "custom"]).default("dot-notation"),
+  translationPaths: z.record(z.string(), z.string()).optional(),
+  platforms: z.array(z.enum(["web", "mobile", "backend"])).default([]),
+  industry: z.string().optional(),
+  coverage: I18nCoverageConfigSchema.optional(),
+  pseudoLocale: z.string().optional(),
+  mcp: I18nMcpConfigSchema.optional()
+});
+var ModelTierConfigSchema = z.object({
+  fast: z.string().optional(),
+  standard: z.string().optional(),
+  strong: z.string().optional()
+});
+var ReviewConfigSchema = z.object({
+  model_tiers: ModelTierConfigSchema.optional()
+});
 var HarnessConfigSchema = z.object({
   version: z.literal(1),
   name: z.string().optional(),
@@ -97,12 +156,18 @@ var HarnessConfigSchema = z.object({
   docsDir: z.string().default("./docs"),
   agent: AgentConfigSchema.optional(),
   entropy: EntropyConfigSchema.optional(),
+  security: SecurityConfigSchema.optional(),
+  performance: PerformanceConfigSchema.optional(),
   template: z.object({
     level: z.enum(["basic", "intermediate", "advanced"]),
     framework: z.string().optional(),
     version: z.number()
   }).optional(),
-  phaseGates: PhaseGatesConfigSchema.optional()
+  phaseGates: PhaseGatesConfigSchema.optional(),
+  design: DesignConfigSchema.optional(),
+  i18n: I18nConfigSchema.optional(),
+  review: ReviewConfigSchema.optional(),
+  updateCheckInterval: z.number().int().min(0).optional()
 });
 
 // src/config/loader.ts
@@ -294,7 +359,7 @@ function createValidateCommand() {
       process.exit(result.error.exitCode);
     }
     if (opts.crossCheck) {
-      const { runCrossCheck: runCrossCheck2 } = await import("./validate-cross-check-CPEPNLOD.js");
+      const { runCrossCheck: runCrossCheck2 } = await import("./validate-cross-check-2OPGCGGU.js");
       const cwd = process.cwd();
       const specsDir = path2.join(cwd, "docs", "specs");
       const plansDir = path2.join(cwd, "docs", "plans");
@@ -660,7 +725,7 @@ function createPerfCommand() {
   perf.command("bench [glob]").description("Run benchmarks via vitest bench").action(async (glob2, _opts, cmd) => {
     const globalOpts = cmd.optsWithGlobals();
     const cwd = process.cwd();
-    const { BenchmarkRunner } = await import("./dist-RBZXXJHG.js");
+    const { BenchmarkRunner } = await import("./dist-NT3GXHQZ.js");
     const runner = new BenchmarkRunner();
     const benchFiles = runner.discover(cwd, glob2);
     if (benchFiles.length === 0) {
@@ -729,7 +794,7 @@ Results (${result.results.length} benchmarks):`);
   baselines.command("update").description("Update baselines from latest benchmark run").action(async (_opts, cmd) => {
     const globalOpts = cmd.optsWithGlobals();
     const cwd = process.cwd();
-    const { BenchmarkRunner } = await import("./dist-RBZXXJHG.js");
+    const { BenchmarkRunner } = await import("./dist-NT3GXHQZ.js");
     const runner = new BenchmarkRunner();
     const manager = new BaselineManager(cwd);
     logger.info("Running benchmarks to update baselines...");
@@ -742,8 +807,8 @@ Results (${result.results.length} benchmarks):`);
     }
     let commitHash = "unknown";
     try {
-      const { execSync: execSync5 } = await import("child_process");
-      commitHash = execSync5("git rev-parse --short HEAD", { cwd, encoding: "utf-8" }).trim();
+      const { execSync: execSync3 } = await import("child_process");
+      commitHash = execSync3("git rev-parse --short HEAD", { cwd, encoding: "utf-8" }).trim();
     } catch {
     }
     manager.save(benchResult.results, commitHash);
@@ -757,7 +822,7 @@ Results (${result.results.length} benchmarks):`);
   perf.command("report").description("Full performance report with metrics, trends, and hotspots").action(async (_opts, cmd) => {
     const globalOpts = cmd.optsWithGlobals();
     const cwd = process.cwd();
-    const { EntropyAnalyzer: EntropyAnalyzer2 } = await import("./dist-RBZXXJHG.js");
+    const { EntropyAnalyzer: EntropyAnalyzer2 } = await import("./dist-NT3GXHQZ.js");
     const analyzer = new EntropyAnalyzer2({
       rootDir: path6.resolve(cwd),
       analyze: { complexity: true, coupling: true }
@@ -1230,8 +1295,7 @@ import * as path10 from "path";
 import * as os from "os";
 import chalk2 from "chalk";
 var HARNESS_MCP_ENTRY = {
-  command: "npx",
-  args: ["@harness-engineering/mcp-server"]
+  command: "harness-mcp"
 };
 function readJsonFile(filePath) {
   if (!fs4.existsSync(filePath)) return null;
@@ -2274,34 +2338,54 @@ async function runAgentReview(options) {
     return Err(new CLIError(parsedDiffResult.error.message, ExitCode.ERROR));
   }
   const codeChanges = parsedDiffResult.value;
-  const review = await createSelfReview(codeChanges, {
-    rootDir: config.rootDir,
-    diffAnalysis: {
-      enabled: true,
-      checkTestCoverage: true
-    }
-  });
-  if (!review.ok) {
-    return Err(new CLIError(review.error.message, ExitCode.ERROR));
+  let commitMessage = "";
+  try {
+    commitMessage = execSync2("git log --oneline -1", { encoding: "utf-8" }).trim();
+  } catch {
   }
+  const diffInfo = {
+    changedFiles: codeChanges.files.map((f) => f.path),
+    newFiles: codeChanges.files.filter((f) => f.status === "added").map((f) => f.path),
+    deletedFiles: codeChanges.files.filter((f) => f.status === "deleted").map((f) => f.path),
+    totalDiffLines: diff.split("\n").length,
+    fileDiffs: new Map(codeChanges.files.map((f) => [f.path, ""]))
+  };
+  const pipelineResult = await runReviewPipeline({
+    projectRoot: config.rootDir,
+    diff: diffInfo,
+    commitMessage,
+    flags: {
+      comment: options.comment ?? false,
+      ci: options.ci ?? false,
+      deep: options.deep ?? false,
+      noMechanical: options.noMechanical ?? false
+    },
+    config
+  });
   return Ok({
-    passed: review.value.passed,
-    checklist: review.value.items.map((item) => ({
-      check: item.check,
-      passed: item.passed,
-      details: item.details
-    }))
+    passed: pipelineResult.exitCode === 0,
+    checklist: pipelineResult.findings.map((f) => ({
+      check: `[${f.domain}] ${f.title}`,
+      passed: f.severity === "suggestion",
+      details: f.rationale
+    })),
+    pipelineResult
   });
 }
 function createReviewCommand() {
-  return new Command12("review").description("Run self-review on current changes").action(async (_opts, cmd) => {
+  return new Command12("review").description("Run unified code review pipeline on current changes").option("--comment", "Post inline comments to GitHub PR").option("--ci", "Enable eligibility gate, non-interactive output").option("--deep", "Add threat modeling pass to security agent").option("--no-mechanical", "Skip mechanical checks").action(async (opts, cmd) => {
     const globalOpts = cmd.optsWithGlobals();
     const mode = globalOpts.json ? OutputMode.JSON : globalOpts.quiet ? OutputMode.QUIET : OutputMode.TEXT;
     const result = await runAgentReview({
       configPath: globalOpts.config,
       json: globalOpts.json,
       verbose: globalOpts.verbose,
-      quiet: globalOpts.quiet
+      quiet: globalOpts.quiet,
+      comment: opts.comment,
+      ci: opts.ci,
+      deep: opts.deep,
+      noMechanical: opts.mechanical === false
+      // Commander negation: --no-mechanical sets mechanical=false
     });
     if (!result.ok) {
       if (mode === OutputMode.JSON) {
@@ -2311,20 +2395,32 @@ function createReviewCommand() {
       }
       process.exit(result.error.exitCode);
     }
+    const { pipelineResult } = result.value;
     if (mode === OutputMode.JSON) {
-      console.log(JSON.stringify(result.value, null, 2));
+      console.log(
+        JSON.stringify(
+          {
+            ...result.value,
+            pipelineResult: pipelineResult ? {
+              assessment: pipelineResult.assessment,
+              findings: pipelineResult.findings,
+              exitCode: pipelineResult.exitCode
+            } : void 0
+          },
+          null,
+          2
+        )
+      );
     } else if (mode !== OutputMode.QUIET) {
-      console.log(result.value.passed ? "v Self-review passed" : "x Self-review found issues");
-      console.log("");
-      for (const item of result.value.checklist) {
-        const icon = item.passed ? "v" : "x";
-        console.log(`  ${icon} ${item.check}`);
-        if (item.details && !item.passed) {
-          console.log(`    ${item.details}`);
-        }
+      if (pipelineResult) {
+        console.log(pipelineResult.terminalOutput);
+      } else {
+        console.log(result.value.passed ? "v Self-review passed" : "x Self-review found issues");
       }
     }
-    process.exit(result.value.passed ? ExitCode.SUCCESS : ExitCode.VALIDATION_FAILED);
+    process.exit(
+      pipelineResult ? pipelineResult.exitCode : result.value.passed ? ExitCode.SUCCESS : ExitCode.VALIDATION_FAILED
+    );
   });
 }
 
@@ -3211,7 +3307,7 @@ import * as path24 from "path";
 import { parse as parse5 } from "yaml";
 
 // src/skill/complexity.ts
-import { execSync as execSync3 } from "child_process";
+import { execFileSync as execFileSync2 } from "child_process";
 function evaluateSignals(signals) {
   if (signals.fileCount >= 3) return "full";
   if (signals.newDir) return "full";
@@ -3223,17 +3319,17 @@ function evaluateSignals(signals) {
 }
 function detectComplexity(projectPath) {
   try {
-    const base = execSync3("git merge-base HEAD main", {
+    const base = execFileSync2("git", ["merge-base", "HEAD", "main"], {
       cwd: projectPath,
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "pipe"]
     }).trim();
-    const diffFiles = execSync3(`git diff --name-only ${base}`, {
+    const diffFiles = execFileSync2("git", ["diff", "--name-only", base], {
       cwd: projectPath,
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "pipe"]
     }).trim().split("\n").filter(Boolean);
-    const diffStat = execSync3(`git diff --stat ${base}`, {
+    const diffStat = execFileSync2("git", ["diff", "--stat", base], {
       cwd: projectPath,
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "pipe"]
@@ -4526,7 +4622,7 @@ function createCICommand() {
 
 // src/commands/update.ts
 import { Command as Command36 } from "commander";
-import { execSync as execSync4 } from "child_process";
+import { execFileSync as execFileSync3 } from "child_process";
 import { realpathSync } from "fs";
 import readline3 from "readline";
 import chalk4 from "chalk";
@@ -4546,7 +4642,7 @@ function detectPackageManager() {
   return "npm";
 }
 function getLatestVersion(pkg = "@harness-engineering/cli") {
-  const output = execSync4(`npm view ${pkg} dist-tags.latest`, {
+  const output = execFileSync3("npm", ["view", pkg, "dist-tags.latest"], {
     encoding: "utf-8",
     timeout: 15e3
   });
@@ -4554,7 +4650,7 @@ function getLatestVersion(pkg = "@harness-engineering/cli") {
 }
 function getInstalledVersion(pm) {
   try {
-    const output = execSync4(`${pm} list -g @harness-engineering/cli --json`, {
+    const output = execFileSync3(pm, ["list", "-g", "@harness-engineering/cli", "--json"], {
       encoding: "utf-8",
       timeout: 15e3
     });
@@ -4567,7 +4663,7 @@ function getInstalledVersion(pm) {
 }
 function getInstalledPackages(pm) {
   try {
-    const output = execSync4(`${pm} list -g --json`, {
+    const output = execFileSync3(pm, ["list", "-g", "--json"], {
       encoding: "utf-8",
       timeout: 15e3
     });
@@ -4622,19 +4718,19 @@ function createUpdateCommand() {
     if (globalOpts.verbose) {
       logger.info(`Installed packages: ${packages.join(", ")}`);
     }
-    const installArgs = packages.map((pkg) => {
+    const installPkgs = packages.map((pkg) => {
       if (opts.version && pkg === "@harness-engineering/cli") {
         return `${pkg}@${opts.version}`;
       }
       return `${pkg}@latest`;
-    }).join(" ");
-    const installCmd = `${pm} install -g ${installArgs}`;
+    });
+    const installCmd = `${pm} install -g ${installPkgs.join(" ")}`;
     if (globalOpts.verbose) {
       logger.info(`Running: ${installCmd}`);
     }
     try {
       logger.info("Updating packages...");
-      execSync4(installCmd, { stdio: "inherit", timeout: 12e4 });
+      execFileSync3(pm, ["install", "-g", ...installPkgs], { stdio: "inherit", timeout: 12e4 });
       console.log("");
       logger.success("Update complete");
     } catch {
@@ -4647,12 +4743,14 @@ function createUpdateCommand() {
     const regenAnswer = await prompt("Regenerate slash commands and agent definitions? (y/N) ");
     if (regenAnswer === "y" || regenAnswer === "yes") {
       const scopeAnswer = await prompt("Generate for (g)lobal or (l)ocal project? (g/l) ");
-      const globalFlag = scopeAnswer === "g" || scopeAnswer === "global" ? " --global" : "";
+      const isGlobal = scopeAnswer === "g" || scopeAnswer === "global";
       try {
-        execSync4(`harness generate${globalFlag}`, { stdio: "inherit" });
+        execFileSync3("harness", ["generate", ...isGlobal ? ["--global"] : []], {
+          stdio: "inherit"
+        });
       } catch {
         logger.warn("Generation failed. Run manually:");
-        console.log(`  ${chalk4.cyan(`harness generate${globalFlag}`)}`);
+        console.log(`  ${chalk4.cyan(`harness generate${isGlobal ? " --global" : ""}`)}`);
       }
     }
     process.exit(ExitCode.SUCCESS);
@@ -4672,9 +4770,19 @@ var AGENT_DESCRIPTIONS = {
   "parallel-coordinator": "Dispatch independent tasks across isolated agents for parallel execution. Use when multiple independent tasks need to run concurrently, splitting work across agents, or coordinating parallel implementation.",
   "architecture-enforcer": "Validate architectural constraints and dependency rules. Use when checking layer boundaries, detecting circular dependencies, or verifying import direction compliance.",
   "documentation-maintainer": "Keep documentation in sync with source code. Use when detecting documentation drift, validating doc coverage, or aligning docs with code changes.",
-  "entropy-cleaner": "Detect and fix codebase entropy including drift, dead code, and pattern violations. Use when running cleanup, detecting dead code, or fixing pattern violations."
+  "entropy-cleaner": "Detect and fix codebase entropy including drift, dead code, and pattern violations. Use when running cleanup, detecting dead code, or fixing pattern violations.",
+  planner: "Create detailed implementation plans from specs with task breakdown, dependency ordering, and checkpoint placement. Use when planning a phase, breaking a spec into tasks, or creating an execution plan.",
+  verifier: "Verify implementation completeness against spec and plan at three tiers (EXISTS, SUBSTANTIVE, WIRED). Use when checking if built code matches what was planned, validating phase completion, or auditing implementation quality."
 };
 var DEFAULT_TOOLS = ["Bash", "Read", "Write", "Edit", "Glob", "Grep"];
+var GEMINI_TOOL_MAP = {
+  Bash: "run_shell_command",
+  Read: "read_file",
+  Write: "write_file",
+  Edit: "replace",
+  Glob: "glob",
+  Grep: "search_file_content"
+};
 function generateAgentDefinition(persona, skillContents) {
   const kebabName = toKebabCase(persona.name);
   const name = `harness-${kebabName}`;
@@ -4689,7 +4797,7 @@ function generateAgentDefinition(persona, skillContents) {
   return {
     name,
     description,
-    tools: DEFAULT_TOOLS,
+    tools: [...DEFAULT_TOOLS],
     role: persona.role,
     skills: persona.skills,
     steps: persona.steps,
@@ -4747,6 +4855,9 @@ function renderClaudeCodeAgent(def) {
 }
 
 // src/agent-definitions/render-gemini-cli.ts
+function toGeminiToolName(tool) {
+  return GEMINI_TOOL_MAP[tool] ?? tool;
+}
 function formatStep2(step, index) {
   if ("command" in step && step.command) {
     const cmd = step.command;
@@ -4765,7 +4876,12 @@ function renderGeminiAgent(def) {
   lines.push(`name: ${def.name}`);
   lines.push(`description: >`);
   lines.push(`  ${def.description}`);
-  lines.push(`tools: ${def.tools.join(", ")}`);
+  if (def.tools.length > 0) {
+    lines.push("tools:");
+    for (const tool of def.tools) {
+      lines.push(`  - ${toGeminiToolName(tool)}`);
+    }
+  }
   lines.push("---");
   lines.push("");
   lines.push(GENERATED_HEADER_AGENT);
@@ -4966,7 +5082,7 @@ function createGenerateCommand3() {
 import { Command as Command39 } from "commander";
 import * as path37 from "path";
 async function runScan(projectPath) {
-  const { GraphStore, CodeIngestor, TopologicalLinker, KnowledgeIngestor, GitIngestor } = await import("./dist-4MYPT3OE.js");
+  const { GraphStore, CodeIngestor, TopologicalLinker, KnowledgeIngestor, GitIngestor } = await import("./dist-BDO5GFEM.js");
   const store = new GraphStore();
   const start = Date.now();
   await new CodeIngestor(store).ingest(projectPath);
@@ -5047,7 +5163,7 @@ async function runIngest(projectPath, source, opts) {
     SyncManager,
     JiraConnector,
     SlackConnector
-  } = await import("./dist-4MYPT3OE.js");
+  } = await import("./dist-BDO5GFEM.js");
   const graphDir = path38.join(projectPath, ".harness", "graph");
   const store = new GraphStore();
   await store.load(graphDir);
@@ -5140,7 +5256,7 @@ function createIngestCommand() {
 import { Command as Command41 } from "commander";
 import * as path39 from "path";
 async function runQuery(projectPath, rootNodeId, opts) {
-  const { GraphStore, ContextQL } = await import("./dist-4MYPT3OE.js");
+  const { GraphStore, ContextQL } = await import("./dist-BDO5GFEM.js");
   const store = new GraphStore();
   const graphDir = path39.join(projectPath, ".harness", "graph");
   const loaded = await store.load(graphDir);
@@ -5189,7 +5305,7 @@ import { Command as Command42 } from "commander";
 // src/commands/graph/status.ts
 import * as path40 from "path";
 async function runGraphStatus(projectPath) {
-  const { GraphStore } = await import("./dist-4MYPT3OE.js");
+  const { GraphStore } = await import("./dist-BDO5GFEM.js");
   const graphDir = path40.join(projectPath, ".harness", "graph");
   const store = new GraphStore();
   const loaded = await store.load(graphDir);
@@ -5229,7 +5345,7 @@ async function runGraphStatus(projectPath) {
 // src/commands/graph/export.ts
 import * as path41 from "path";
 async function runGraphExport(projectPath, format) {
-  const { GraphStore } = await import("./dist-4MYPT3OE.js");
+  const { GraphStore } = await import("./dist-BDO5GFEM.js");
   const graphDir = path41.join(projectPath, ".harness", "graph");
   const store = new GraphStore();
   const loaded = await store.load(graphDir);
@@ -5358,6 +5474,8 @@ export {
   runCheckPhaseGate,
   generateSlashCommands,
   AGENT_DESCRIPTIONS,
+  DEFAULT_TOOLS,
+  GEMINI_TOOL_MAP,
   generateAgentDefinition,
   renderClaudeCodeAgent,
   renderGeminiAgent,