@harness-engineering/cli 2.5.0 → 2.6.1

package/dist/{chunk-DOUS4ULX.js → chunk-GWE5LL3R.js}

@@ -7,13 +7,13 @@ import {
 import {
   findConfigFile,
   loadConfig
-} from "./chunk-HIZXUWWC.js";
+} from "./chunk-VTTNIZJL.js";
 import {
   init_dist
-} from "./chunk-KQ6TDRPS.js";
+} from "./chunk-YYRQCQPZ.js";
 import {
   Ok
-} from "./chunk-2LPUIBVH.js";
+} from "./chunk-OH3NXXUY.js";
 
 // src/mcp/tools/docs.ts
 init_dist();
@@ -50,12 +50,12 @@ async function handleCheckDocs(input) {
     const projectPath = sanitizePath(input.path);
     const scope = input.scope ?? "coverage";
     if (scope === "integrity") {
-      const { validateKnowledgeMap } = await import("./dist-TKHVYUWZ.js");
+      const { validateKnowledgeMap } = await import("./dist-OHDQBTSO.js");
       const result2 = await validateKnowledgeMap(projectPath);
       return resultToMcpResponse(result2);
     }
     if (scope === "all") {
-      const { checkDocCoverage: checkDocCoverage2, validateKnowledgeMap } = await import("./dist-TKHVYUWZ.js");
+      const { checkDocCoverage: checkDocCoverage2, validateKnowledgeMap } = await import("./dist-OHDQBTSO.js");
       const domain2 = input.domain ?? "src";
       const { loadGraphStore: loadGraphStore2 } = await import("./graph-loader-EQBOIHFZ.js");
       const store2 = await loadGraphStore2(projectPath);
@@ -94,7 +94,7 @@ async function handleCheckDocs(input) {
       }
       return resultToMcpResponse(Ok({ coverage, integrity }));
     }
-    const { checkDocCoverage } = await import("./dist-TKHVYUWZ.js");
+    const { checkDocCoverage } = await import("./dist-OHDQBTSO.js");
     const domain = input.domain ?? "src";
     const { loadGraphStore } = await import("./graph-loader-EQBOIHFZ.js");
     const store = await loadGraphStore(projectPath);

package/dist/{chunk-7DOGGXQU.js → chunk-GWF2OILZ.js}

@@ -1,10 +1,10 @@
 import {
   init_dist
-} from "./chunk-KQ6TDRPS.js";
+} from "./chunk-YYRQCQPZ.js";
 import {
   Err,
   Ok
-} from "./chunk-2LPUIBVH.js";
+} from "./chunk-OH3NXXUY.js";
 
 // src/mcp/utils/config-resolver.ts
 init_dist();

package/dist/{chunk-TCSNO7YW.js → chunk-HFOB2MPQ.js}

@@ -27,7 +27,7 @@ var runSecurityScanDefinition = {
 };
 async function handleRunSecurityScan(input) {
   try {
-    const core = await import("./dist-TKHVYUWZ.js");
+    const core = await import("./dist-OHDQBTSO.js");
     const projectRoot = sanitizePath(input.path);
     let configData = {};
     try {
@@ -114,7 +114,7 @@ var getSecurityTrendsDefinition = {
 };
 async function handleGetSecurityTrends(input) {
   try {
-    const core = await import("./dist-TKHVYUWZ.js");
+    const core = await import("./dist-OHDQBTSO.js");
     const projectRoot = sanitizePath(input.path);
     const manager = new core.SecurityTimelineManager(projectRoot);
     const trendOptions = {};

package/dist/{chunk-6SRKI77C.js → chunk-HMW3VKUF.js}

@@ -33,7 +33,7 @@ var createSelfReviewDefinition = {
 };
 async function handleCreateSelfReview(input) {
   try {
-    const { parseDiff, createSelfReview } = await import("./dist-TKHVYUWZ.js");
+    const { parseDiff, createSelfReview } = await import("./dist-OHDQBTSO.js");
     const parseResult = parseDiff(input.diff);
     if (!parseResult.ok) {
       return resultToMcpResponse(parseResult);
@@ -119,7 +119,7 @@ var analyzeDiffDefinition = {
 };
 async function handleAnalyzeDiff(input) {
   try {
-    const { parseDiff, analyzeDiff } = await import("./dist-TKHVYUWZ.js");
+    const { parseDiff, analyzeDiff } = await import("./dist-OHDQBTSO.js");
     const parseResult = parseDiff(input.diff);
     if (!parseResult.ok) {
       return resultToMcpResponse(parseResult);
@@ -195,7 +195,7 @@ var requestPeerReviewDefinition = {
 };
 async function handleRequestPeerReview(input) {
   try {
-    const { parseDiff, requestPeerReview } = await import("./dist-TKHVYUWZ.js");
+    const { parseDiff, requestPeerReview } = await import("./dist-OHDQBTSO.js");
     const parseResult = parseDiff(input.diff);
     if (!parseResult.ok) {
       return resultToMcpResponse(parseResult);

package/dist/{chunk-NOOPJD5R.js → chunk-I6K43QQS.js}

@@ -1,6 +1,6 @@
 import {
   resolveProjectConfig
-} from "./chunk-7DOGGXQU.js";
+} from "./chunk-GWF2OILZ.js";
 import {
   sanitizePath
 } from "./chunk-W6Y7ZW3Y.js";
@@ -49,7 +49,7 @@ async function handleValidateProject(input) {
   checks.config = "pass";
   const config = configResult.value;
   try {
-    const core = await import("./dist-TKHVYUWZ.js");
+    const core = await import("./dist-OHDQBTSO.js");
     if (typeof core.validateFileStructure === "function" && Array.isArray(config.conventions)) {
       const conventions = config.conventions;
       const structureResult = await core.validateFileStructure(projectPath, conventions);
@@ -68,7 +68,7 @@ async function handleValidateProject(input) {
   } catch {
   }
   try {
-    const core = await import("./dist-TKHVYUWZ.js");
+    const core = await import("./dist-OHDQBTSO.js");
     if (typeof core.validateAgentsMap === "function") {
       const agentsMapPath = path.join(projectPath, "AGENTS.md");
       const agentsResult = await core.validateAgentsMap(agentsMapPath);

package/dist/{chunk-IGBQIXPS.js → chunk-JFZOWO7D.js}

@@ -1,10 +1,10 @@
 import {
   init_dist
-} from "./chunk-KQ6TDRPS.js";
+} from "./chunk-YYRQCQPZ.js";
 import {
   Err,
   Ok
-} from "./chunk-2LPUIBVH.js";
+} from "./chunk-OH3NXXUY.js";
 
 // src/persona/generators/agents-md.ts
 init_dist();

package/dist/{chunk-57TS3UGN.js → chunk-K246XQ2L.js}

@@ -1,10 +1,10 @@
 import {
   init_dist
-} from "./chunk-KQ6TDRPS.js";
+} from "./chunk-YYRQCQPZ.js";
 import {
   Err,
   Ok
-} from "./chunk-2LPUIBVH.js";
+} from "./chunk-OH3NXXUY.js";
 
 // src/persona/loader.ts
 init_dist();

package/dist/{chunk-A3EBWI7U.js → chunk-L5BCZ5XS.js}

@@ -3,11 +3,11 @@ import {
 } from "./chunk-KET4QQZB.js";
 import {
   init_dist
-} from "./chunk-KQ6TDRPS.js";
+} from "./chunk-YYRQCQPZ.js";
 import {
   Err,
   Ok
-} from "./chunk-2LPUIBVH.js";
+} from "./chunk-OH3NXXUY.js";
 
 // src/persona/generators/runtime.ts
 init_dist();

package/dist/{chunk-65MJPWFN.js → chunk-OA6SWTU4.js}

@@ -72,7 +72,7 @@ async function handleAssessProject(input) {
   let validateResult = null;
   if (checksToRun.has("validate")) {
     try {
-      const { handleValidateProject } = await import("./validate-AFJVI4OX.js");
+      const { handleValidateProject } = await import("./validate-QRVCD4GP.js");
       const result = await handleValidateProject({ path: projectPath });
       const out = parseToolResponse(result, "validate");
       if ("error" in out) {
@@ -101,7 +101,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleCheckDependencies } = await import("./architecture-OC7TFCFF.js");
+          const { handleCheckDependencies } = await import("./architecture-CXAVNB5X.js");
           const result = await handleCheckDependencies({ path: projectPath });
           const out = parseToolResponse(result, "deps");
           if ("error" in out) return out.error;
@@ -129,7 +129,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleCheckDocs } = await import("./docs-4WPBYSCF.js");
+          const { handleCheckDocs } = await import("./docs-5RYMDHN3.js");
           const result = await handleCheckDocs({ path: projectPath, scope: "coverage" });
           const out = parseToolResponse(result, "docs");
           if ("error" in out) return out.error;
@@ -157,7 +157,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleDetectEntropy } = await import("./entropy-7FIUFACI.js");
+          const { handleDetectEntropy } = await import("./entropy-DQTAPSSE.js");
           const result = await handleDetectEntropy({ path: projectPath, type: "all" });
           const out = parseToolResponse(result, "entropy");
           if ("error" in out) return out.error;
@@ -188,7 +188,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleRunSecurityScan } = await import("./security-ZWRABJNE.js");
+          const { handleRunSecurityScan } = await import("./security-27HW7CYT.js");
           const result = await handleRunSecurityScan({ path: projectPath });
           const out = parseToolResponse(result, "security");
           if ("error" in out) return out.error;
@@ -221,7 +221,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleCheckPerformance } = await import("./performance-AZJAT35R.js");
+          const { handleCheckPerformance } = await import("./performance-54TMJOEU.js");
           const result = await handleCheckPerformance({ path: projectPath });
           if ("isError" in result && result.isError) {
             const msg = result.content[0]?.text ?? "Performance check failed";

package/dist/{chunk-2LPUIBVH.js → chunk-OH3NXXUY.js}

@@ -8,6 +8,7 @@ import { z as z2 } from "zod";
 import { z as z3 } from "zod";
 import { z as z4 } from "zod";
 import { z as z5 } from "zod";
+import { z as z6 } from "zod";
 function Ok(value) {
   return { ok: true, value };
 }
@@ -20,7 +21,7 @@ function isOk(result) {
 function isErr(result) {
   return result.ok === false;
 }
-var STANDARD_COGNITIVE_MODES, DEFAULT_SKILL_CONTEXT_BUDGET, SESSION_SECTION_NAMES, TrajectoryMetadataSchema, PromptCacheStatsSchema, OTLPKeyValueSchema, OTLPSpanSchema, TokenScopeSchema, BridgeKindSchema, AuthTokenSchema, AuthTokenPublicSchema, AuthAuditEntrySchema, WebhookSubscriptionSchema, WebhookSubscriptionPublicSchema, GatewayEventSchema, WebhookDeliveryStatusSchema, WebhookDeliverySchema, INDEXED_FILE_KINDS, SessionSummarySchema, INSIGHTS_KEYS, SESSIONS_DEFAULTS, NotificationSinkKindSchema, NotificationSeveritySchema, NotificationActionSchema, NotificationEnvelopeSchema, NotificationSinkConfigSchema, NotificationsConfigSchema, NotificationDeliveryResultSchema;
+var STANDARD_COGNITIVE_MODES, DEFAULT_SKILL_CONTEXT_BUDGET, SESSION_SECTION_NAMES, TrajectoryMetadataSchema, PromptCacheStatsSchema, OTLPKeyValueSchema, OTLPSpanSchema, TokenScopeSchema, BridgeKindSchema, AuthTokenSchema, AuthTokenPublicSchema, AuthAuditEntrySchema, WebhookSubscriptionSchema, WebhookSubscriptionPublicSchema, GatewayEventSchema, WebhookDeliveryStatusSchema, WebhookDeliverySchema, INDEXED_FILE_KINDS, SessionSummarySchema, INSIGHTS_KEYS, SESSIONS_DEFAULTS, NotificationSinkKindSchema, NotificationSeveritySchema, NotificationActionSchema, NotificationEnvelopeSchema, NotificationSinkConfigSchema, NotificationsConfigSchema, NotificationDeliveryResultSchema, SkillProvenanceSchema, ProposalKindSchema, ProposalStatusSchema, ProposalGateFindingSchema, ProposalGateSchema, ProposalDecisionSchema, ProposalContentSchema, ProposalSourceSchema, SkillProposalSchema, EmitSkillProposalInputSchema, EditProposalInputSchema;
 var init_dist = __esm({
   "../types/dist/index.mjs"() {
     STANDARD_COGNITIVE_MODES = [
@@ -102,7 +103,8 @@ var init_dist = __esm({
       "resolve-interaction",
       "subscribe-webhook",
       "modify-roadmap",
-      "read-telemetry"
+      "read-telemetry",
+      "manage-proposals"
     ]);
     BridgeKindSchema = z2.enum(["slack", "discord", "github-app", "custom"]);
     AuthTokenSchema = z2.object({
@@ -224,6 +226,112 @@ var init_dist = __esm({
         httpStatus: z5.number().int().optional()
       })
     ]);
+    SkillProvenanceSchema = z6.enum(["community", "agent-proposed", "user-authored"]);
+    ProposalKindSchema = z6.enum(["new-skill", "refinement"]);
+    ProposalStatusSchema = z6.enum([
+      "open",
+      "gate-running",
+      "gate-failed",
+      "approved",
+      "rejected"
+    ]);
+    ProposalGateFindingSchema = z6.object({
+      severity: z6.enum(["error", "warning"]),
+      title: z6.string(),
+      detail: z6.string()
+    });
+    ProposalGateSchema = z6.object({
+      lastRunAt: z6.string().datetime().optional(),
+      findings: z6.array(ProposalGateFindingSchema).optional()
+    });
+    ProposalDecisionSchema = z6.object({
+      decidedAt: z6.string().datetime(),
+      decidedBy: z6.string(),
+      action: z6.enum(["approved", "rejected"]),
+      reason: z6.string().optional()
+    });
+    ProposalContentSchema = z6.object({
+      name: z6.string().regex(/^[a-z][a-z0-9-]*$/).max(64),
+      description: z6.string().min(20).max(280),
+      skillYaml: z6.string().optional(),
+      skillMd: z6.string().optional(),
+      diff: z6.string().optional()
+    }).strict();
+    ProposalSourceSchema = z6.object({
+      sessionId: z6.string().optional(),
+      taskId: z6.string().optional(),
+      justification: z6.string().min(20).max(2e3)
+    });
+    SkillProposalSchema = z6.object({
+      id: z6.string().min(1),
+      createdAt: z6.string().datetime(),
+      kind: ProposalKindSchema,
+      targetSkill: z6.string().optional(),
+      proposedBy: z6.string().min(1),
+      source: ProposalSourceSchema,
+      content: ProposalContentSchema,
+      status: ProposalStatusSchema,
+      gate: ProposalGateSchema.optional(),
+      decision: ProposalDecisionSchema.optional()
+    }).superRefine((val, ctx) => {
+      if (val.kind === "new-skill") {
+        if (!val.content.skillYaml || !val.content.skillMd) {
+          ctx.addIssue({
+            code: z6.ZodIssueCode.custom,
+            path: ["content"],
+            message: "new-skill proposals require skillYaml and skillMd"
+          });
+        }
+        if (val.targetSkill) {
+          ctx.addIssue({
+            code: z6.ZodIssueCode.custom,
+            path: ["targetSkill"],
+            message: "targetSkill is forbidden on new-skill proposals"
+          });
+        }
+        if (val.content.diff) {
+          ctx.addIssue({
+            code: z6.ZodIssueCode.custom,
+            path: ["content", "diff"],
+            message: "diff is forbidden on new-skill proposals"
+          });
+        }
+      } else if (val.kind === "refinement") {
+        if (!val.targetSkill) {
+          ctx.addIssue({
+            code: z6.ZodIssueCode.custom,
+            path: ["targetSkill"],
+            message: "refinement proposals require targetSkill"
+          });
+        }
+        if (!val.content.diff) {
+          ctx.addIssue({
+            code: z6.ZodIssueCode.custom,
+            path: ["content", "diff"],
+            message: "refinement proposals require a unified diff"
+          });
+        }
+        if (val.content.skillYaml || val.content.skillMd) {
+          ctx.addIssue({
+            code: z6.ZodIssueCode.custom,
+            path: ["content"],
+            message: "skillYaml/skillMd are forbidden on refinement proposals (use diff)"
+          });
+        }
+      }
+    });
+    EmitSkillProposalInputSchema = z6.object({
+      kind: ProposalKindSchema,
+      targetSkill: z6.string().optional(),
+      proposedBy: z6.string().min(1).max(120),
+      justification: z6.string().min(20).max(2e3),
+      sessionId: z6.string().optional(),
+      taskId: z6.string().optional(),
+      content: ProposalContentSchema
+    });
+    EditProposalInputSchema = z6.object({
+      content: ProposalContentSchema.partial()
+    });
   }
 });
 
@@ -260,5 +368,16 @@ export {
   NotificationSinkConfigSchema,
   NotificationsConfigSchema,
   NotificationDeliveryResultSchema,
+  SkillProvenanceSchema,
+  ProposalKindSchema,
+  ProposalStatusSchema,
+  ProposalGateFindingSchema,
+  ProposalGateSchema,
+  ProposalDecisionSchema,
+  ProposalContentSchema,
+  ProposalSourceSchema,
+  SkillProposalSchema,
+  EmitSkillProposalInputSchema,
+  EditProposalInputSchema,
   init_dist
 };

package/dist/{chunk-4CWFVEVV.js → chunk-PFZEADQM.js}

@@ -4,7 +4,7 @@ import {
 import {
   listPersonas,
   loadPersona
-} from "./chunk-57TS3UGN.js";
+} from "./chunk-K246XQ2L.js";
 import {
   GENERATED_HEADER_AGENT,
   VALID_PLATFORMS,

package/dist/{chunk-JE5GQVCQ.js → chunk-Q6ZR2L6Q.js}

@@ -4,7 +4,7 @@ import {
 import {
   init_dist,
   paginate
-} from "./chunk-KQ6TDRPS.js";
+} from "./chunk-YYRQCQPZ.js";
 
 // src/mcp/tools/review-pipeline.ts
 init_dist();
@@ -79,7 +79,7 @@ var runCodeReviewDefinition = {
 };
 async function handleRunCodeReview(input) {
   try {
-    const { parseDiff, runReviewPipeline } = await import("./dist-TKHVYUWZ.js");
+    const { parseDiff, runReviewPipeline } = await import("./dist-OHDQBTSO.js");
     const parseResult = parseDiff(input.diff);
     if (!parseResult.ok) {
       return {

package/dist/{chunk-UF7BKRH4.js → chunk-QOKMDDBJ.js}

@@ -6,10 +6,10 @@ import {
 } from "./chunk-W6Y7ZW3Y.js";
 import {
   init_dist
-} from "./chunk-KQ6TDRPS.js";
+} from "./chunk-YYRQCQPZ.js";
 import {
   Ok
-} from "./chunk-2LPUIBVH.js";
+} from "./chunk-OH3NXXUY.js";
 
 // src/mcp/tools/entropy.ts
 init_dist();
@@ -127,7 +127,7 @@ function buildSummaryResponse(report) {
 }
 async function handleDetectEntropy(input) {
   try {
-    const { EntropyAnalyzer } = await import("./dist-TKHVYUWZ.js");
+    const { EntropyAnalyzer } = await import("./dist-OHDQBTSO.js");
     const typeFilter = input.type ?? "all";
     const analyzer = new EntropyAnalyzer({
       rootDir: sanitizePath(input.path),
@@ -146,7 +146,7 @@ async function handleDetectEntropy(input) {
       return resultToMcpResponse(result);
     }
     if (!result.ok) return resultToMcpResponse(result);
-    const { createFixes, applyFixes, generateSuggestions } = await import("./dist-TKHVYUWZ.js");
+    const { createFixes, applyFixes, generateSuggestions } = await import("./dist-OHDQBTSO.js");
     const report = result.value;
     const deadCode = report.deadCode;
     const fixTypesConfig = input.fixTypes ? { fixTypes: input.fixTypes } : void 0;

package/dist/{chunk-IWRYCUDO.js → chunk-SZEFU6XC.js}

@@ -2,7 +2,7 @@ import {
   Err,
   Ok,
   init_dist
-} from "./chunk-2LPUIBVH.js";
+} from "./chunk-OH3NXXUY.js";
 import {
   DEFAULT_SKIP_DIRS,
   init_dist as init_dist2,

package/dist/{chunk-HIZXUWWC.js → chunk-VTTNIZJL.js}

@@ -7,11 +7,11 @@ import {
 } from "./chunk-3WGJMBKH.js";
 import {
   init_dist as init_dist2
-} from "./chunk-KQ6TDRPS.js";
+} from "./chunk-YYRQCQPZ.js";
 import {
   Err,
   Ok
-} from "./chunk-2LPUIBVH.js";
+} from "./chunk-OH3NXXUY.js";
 import {
   init_dist,
   skipDirGlobs
@@ -361,6 +361,25 @@ var HarnessConfigSchema = z.object({
   graph: z.object({
     /** Per-connector configuration (keyed by connector name: jira, slack, ci, confluence, figma, miro) */
     connectors: z.record(z.string(), z.record(z.string(), z.unknown())).default({})
+  }).optional(),
+  /**
+   * Hermes Phase 2 — Disk-hygiene rules consumed by `harness cleanup-sessions --all`.
+   * Keys correspond to registered target names (sessions, cache, maintenance,
+   * dashboard-state, snapshots, analyzer-output); values override the default
+   * TTL in hours. Unknown keys are ignored (forward-compatible).
+   */
+  cleanup: z.object({
+    ttlHours: z.record(z.string(), z.number().positive()).optional()
+  }).optional(),
+  /**
+   * Hermes Phase 2 — Pre-launch OSV malware guard configuration.
+   * `enabled: false` disables the guard; `strict: true` reverses the default
+   * fail-open posture on OSV.dev network errors.
+   */
+  osvGuard: z.object({
+    enabled: z.boolean().default(true),
+    strict: z.boolean().default(false),
+    cacheTtlHours: z.number().positive().default(24)
   }).optional()
 });
 

package/dist/{chunk-IXKGMPMT.js → chunk-VUCGB2KH.js}

@@ -1,10 +1,10 @@
 import {
   init_dist
-} from "./chunk-KQ6TDRPS.js";
+} from "./chunk-YYRQCQPZ.js";
 import {
   Err,
   Ok
-} from "./chunk-2LPUIBVH.js";
+} from "./chunk-OH3NXXUY.js";
 
 // src/templates/engine.ts
 init_dist();
@@ -93,6 +93,7 @@ var NON_JSON_PACKAGE_CONFIGS = /* @__PURE__ */ new Set([
   "build.gradle.kts"
 ]);
 var HARNESS_CONFIG_FILES = /* @__PURE__ */ new Set(["harness.config.json", "AGENTS.md", ".harness/.gitignore"]);
+var IGNORED_TEMPLATE_FILES = /* @__PURE__ */ new Set([".DS_Store", "Thumbs.db", "desktop.ini"]);
 function isHarnessConfigFile(relativePath) {
   return HARNESS_CONFIG_FILES.has(relativePath);
 }
@@ -372,6 +373,7 @@ var TemplateEngine = class {
     const walk = (currentDir) => {
       const entries = fs.readdirSync(currentDir, { withFileTypes: true });
       for (const entry of entries) {
+        if (IGNORED_TEMPLATE_FILES.has(entry.name)) continue;
         const fullPath = path.join(currentDir, entry.name);
         if (entry.isDirectory()) {
           walk(fullPath);

package/dist/{chunk-ELMV6QU2.js → chunk-YP7I25SL.js}

@@ -1,10 +1,10 @@
 import {
   init_dist
-} from "./chunk-KQ6TDRPS.js";
+} from "./chunk-YYRQCQPZ.js";
 import {
   Err,
   Ok
-} from "./chunk-2LPUIBVH.js";
+} from "./chunk-OH3NXXUY.js";
 
 // src/persona/generators/ci-workflow.ts
 init_dist();