@harness-engineering/cli 2.8.0 → 3.0.0

package/dist/{chunk-LADPYELQ.js → chunk-XX4OLNWQ.js}

@@ -4,7 +4,7 @@ import {
 import {
   init_dist,
   paginate
-} from "./chunk-GOHWCHCS.js";
+} from "./chunk-N24HCQA4.js";
 
 // src/mcp/tools/review-pipeline.ts
 init_dist();
@@ -84,7 +84,7 @@ var runCodeReviewDefinition = {
 };
 async function handleRunCodeReview(input) {
   try {
-    const { parseDiff, runReviewPipeline } = await import("./dist-JCFK263L.js");
+    const { parseDiff, runReviewPipeline } = await import("./dist-LHINSVK4.js");
     const parseResult = parseDiff(input.diff);
     if (!parseResult.ok) {
       return {

package/dist/{chunk-FZ5MBXEG.js → chunk-YQSYCBAH.js}

@@ -75,7 +75,7 @@ async function handleAssessProject(input) {
   let validateResult = null;
   if (checksToRun.has("validate")) {
     try {
-      const { handleValidateProject } = await import("./validate-7BE4VTFI.js");
+      const { handleValidateProject } = await import("./validate-7IAF2ES3.js");
       const result = await handleValidateProject({ path: projectPath });
       const out = parseToolResponse(result, "validate");
       if ("error" in out) {
@@ -104,7 +104,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleCheckDependencies } = await import("./architecture-EVYVGPRZ.js");
+          const { handleCheckDependencies } = await import("./architecture-JEZPJ725.js");
           const result = await handleCheckDependencies({ path: projectPath });
           const out = parseToolResponse(result, "deps");
           if ("error" in out) return out.error;
@@ -132,7 +132,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleCheckDocs } = await import("./docs-7CP6VV42.js");
+          const { handleCheckDocs } = await import("./docs-AU3DXFFO.js");
           const result = await handleCheckDocs({ path: projectPath, scope: "coverage" });
           const out = parseToolResponse(result, "docs");
           if ("error" in out) return out.error;
@@ -160,7 +160,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleDetectEntropy } = await import("./entropy-6JOZJYG7.js");
+          const { handleDetectEntropy } = await import("./entropy-VLKDRMRT.js");
           const result = await handleDetectEntropy({ path: projectPath, type: "all" });
           const out = parseToolResponse(result, "entropy");
           if ("error" in out) return out.error;
@@ -191,7 +191,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleRunSecurityScan } = await import("./security-VZPJNIDP.js");
+          const { handleRunSecurityScan } = await import("./security-3PIBN35B.js");
           const result = await handleRunSecurityScan({ path: projectPath });
           const out = parseToolResponse(result, "security");
           if ("error" in out) return out.error;
@@ -224,7 +224,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleCheckPerformance } = await import("./performance-NCOUDOMW.js");
+          const { handleCheckPerformance } = await import("./performance-64DPTLLQ.js");
           const result = await handleCheckPerformance({ path: projectPath });
           if ("isError" in result && result.isError) {
             const msg = result.content[0]?.text ?? "Performance check failed";

package/dist/{chunk-ACOOG3UW.js → chunk-Z4AWEIBY.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-W6Y7ZW3Y.js";
 import {
   init_dist
-} from "./chunk-GOHWCHCS.js";
+} from "./chunk-N24HCQA4.js";
 import {
   Ok
 } from "./chunk-BDGTZRZ6.js";
@@ -127,7 +127,7 @@ function buildSummaryResponse(report) {
 }
 async function handleDetectEntropy(input) {
   try {
-    const { EntropyAnalyzer } = await import("./dist-JCFK263L.js");
+    const { EntropyAnalyzer } = await import("./dist-LHINSVK4.js");
     const typeFilter = input.type ?? "all";
     const analyzer = new EntropyAnalyzer({
       rootDir: sanitizePath(input.path),
@@ -146,7 +146,7 @@ async function handleDetectEntropy(input) {
       return resultToMcpResponse(result);
     }
     if (!result.ok) return resultToMcpResponse(result);
-    const { createFixes, applyFixes, generateSuggestions } = await import("./dist-JCFK263L.js");
+    const { createFixes, applyFixes, generateSuggestions } = await import("./dist-LHINSVK4.js");
     const report = result.value;
     const deadCode = report.deadCode;
     const fixTypesConfig = input.fixTypes ? { fixTypes: input.fixTypes } : void 0;

package/dist/{ci-workflow-IW2H5DC4.js → ci-workflow-ORZ4F45F.js}

@@ -1,7 +1,7 @@
 import {
   generateCIWorkflow
-} from "./chunk-STESM73J.js";
-import "./chunk-GOHWCHCS.js";
+} from "./chunk-GSP2XIVS.js";
+import "./chunk-N24HCQA4.js";
 import "./chunk-N55WOGN3.js";
 import "./chunk-BDGTZRZ6.js";
 import "./chunk-PP6ZRL5T.js";

package/dist/{dist-JCFK263L.js → dist-LHINSVK4.js}

@@ -3,12 +3,15 @@ import {
   AGENT_DESCRIPTORS,
   AGREEMENT_LINE_GAP,
   ALLOWED_FIELD_KEYS,
+  ALL_RULES,
   ALL_SOLUTION_CATEGORIES,
   ARCHITECTURE_DESCRIPTOR,
   AdjustedForecastSchema,
   AgentActionEmitter,
   AnthropicCacheAdapter,
   ArchBaselineManager,
+  AuditResultSchema,
+  AuditSummarySchema,
   BUG_DETECTION_DESCRIPTOR,
   BUG_TRACK_CATEGORIES,
   BaselineManager,
@@ -18,12 +21,17 @@ import {
   BundleSchema,
   CACHE_TTL_MS,
   CINotifier,
+  CI_ASSESSMENTS,
+  CI_REVIEW_DOMAINS,
+  CI_REVIEW_VERDICT_SCHEMA_VERSION,
+  CI_RUNNERS,
   COMPLIANCE_DESCRIPTOR,
   CONDITIONAL_SUBAGENT_DESCRIPTORS,
   CORROBORATED_AGREEMENT,
   CacheMetricsRecorder,
   CategoryForecastSchema,
   ChecklistBuilder,
+  CiReviewVerdictSchema,
   CircularDepsCollector,
   CompactionPipeline,
   ComplexityCollector,
@@ -36,6 +44,8 @@ import {
   ContributionsSchema,
   CouplingCollector,
   CriticalPathResolver,
+  DEFAULT_EXEC_MAX_STDOUT_BYTES,
+  DEFAULT_EXEC_TIMEOUT_MS,
   DEFAULT_LOADER_CONFIG,
   DEFAULT_PROVIDER_TIERS,
   DEFAULT_SECURITY_CONFIG,
@@ -64,7 +74,10 @@ import {
   GeminiCacheAdapter,
   GitHubIssuesSyncAdapter,
   HandoffSchema,
+  HarnessConfigSubsetSchema,
   HarnessStateSchema,
+  HarnessStrengthAuditor,
+  HookFileSchema,
   InteractionTypeSchema,
   KNOWLEDGE_TRACK_CATEGORIES,
   LITELLM_PRICING_URL,
@@ -73,6 +86,7 @@ import {
   LockfileSchema,
   MOCK_ADAPTER_NAME,
   ManifestSchema,
+  ModeSchema,
   ModuleSizeCollector,
   NoOpExecutor,
   NoOpSink,
@@ -87,6 +101,7 @@ import {
   PredictionOptionsSchema,
   PredictionResultSchema,
   PredictionWarningSchema,
+  ProjectContextSchema,
   ProjectScanner,
   ProposalConflictError,
   ProposalNotFoundError,
@@ -97,10 +112,12 @@ import {
   QuestionSchema,
   REQUIRED_SECTIONS,
   RISK_KEYWORDS,
+  RUNNER_PRESETS,
   RegressionDetector,
   RegressionResultSchema,
   RuleRegistry,
   SECURITY_DESCRIPTOR,
+  SEVERITY_WEIGHTS,
   STALENESS_WARNING_DAYS,
   STANDALONE_AGREEMENT,
   STATUS_RANK,
@@ -113,6 +130,7 @@ import {
   SecurityTimelineSnapshotSchema,
   SecurityTrendLineSchema,
   SecurityTrendResultSchema,
+  SeveritySchema,
   SharableBoundaryConfigSchema,
   SharableForbiddenImportSchema,
   SharableLayerSchema,
@@ -128,9 +146,11 @@ import {
   StrategyFrontmatterSchema,
   StreamIndexSchema,
   StreamInfoSchema,
+  StrengthFindingSchema,
   StructuralStrategy,
   SupplyChainSnapshotSchema,
   TYPESCRIPT_STRICT_DESCRIPTOR,
+  TierSchema,
   TimeToFixResultSchema,
   TimeToFixStatsSchema,
   TransitionSchema,
@@ -170,7 +190,9 @@ import {
   assertPortUsable,
   assertSanitized,
   assignFeature,
+  buildCiReviewVerdict,
   buildExclusionSet,
+  buildProjectContext,
   calculateCacheSavings,
   calculateCost,
   calibrateDepth,
@@ -178,6 +200,7 @@ import {
   checkEligibility,
   checkEvidenceCoverage,
   checkOverlap,
+  checkRoadmapHealth,
   checkTaint,
   classifyConfidence,
   classifyFinding,
@@ -218,10 +241,15 @@ import {
   createTrackerClient,
   crossReferenceUndocumentedFixes,
   cryptoRules,
+  decidePromotionForRow,
   deduplicateCleanupFindings,
   deduplicateFindings,
   deepMergeConstraints,
   defaultCollectors,
+  defaultExecFile,
+  defaultIsArchive,
+  deriveBlockingFindings,
+  deriveExitCode,
   deriveSkillUsage,
   deserializationRules,
   detectChangeType,
@@ -275,6 +303,7 @@ import {
   getUpdateNotification,
   gitScan,
   goRules,
+  groomRoadmap,
   init_dist,
   injectionRules,
   insecureDefaultsRules,
@@ -284,6 +313,8 @@ import {
   isRegression,
   isSanitizedResult,
   isSmallSuggestion,
+  isSupportedRunner,
+  isUnactionablePlanned,
   isUpdateCheckEnabled,
   isoWeek,
   listActiveSessions,
@@ -319,13 +350,19 @@ import {
   normalizeLearningContent,
   normalizeViolationPattern,
   paginate,
+  parseAntigravityVerdict,
   parseCCRecords,
+  parseCiReviewVerdict,
+  parseClaudeVerdict,
+  parseCodexVerdict,
   parseDateFromEntry,
   parseDiff,
   parseFileRegions,
   parseFrontmatter2,
+  parseGeminiVerdict,
   parseHarnessIgnore,
   parseLiteLLMData,
+  parseLocalVerdict,
   parseLookback,
   parseManifest,
   parseProtectedRegions,
@@ -334,8 +371,10 @@ import {
   parseSecurityConfig,
   parseStrategyDoc,
   pathTraversalRules,
+  presetKind,
   previewFix,
   projectValue,
+  promoteFeature,
   promoteSessionLearnings,
   proposalsDir,
   pruneLearnings,
@@ -356,6 +395,7 @@ import {
   requestPeerReview,
   resetFeedbackConfig,
   resolveConsent,
+  resolveMode,
   resolveModelTier,
   resolveReverseStatus,
   resolveRuleSeverity,
@@ -363,11 +403,13 @@ import {
   resolveStability,
   resolveStreamPath,
   resolveThresholds,
+  rollupScore,
   runAdversarialAgent,
   runAll,
   runArchitectureAgent,
   runBugDetectionAgent,
   runCIChecks,
+  runCiReview,
   runComplianceAgent,
   runFallbackRules,
   runFrontendRacesAgent,
@@ -439,7 +481,7 @@ import {
   writeStrategyDoc,
   writeTaint,
   xssRules
-} from "./chunk-GOHWCHCS.js";
+} from "./chunk-N24HCQA4.js";
 import {
   EXTENSION_MAP,
   EntropyAnalyzer,
@@ -546,6 +588,7 @@ export {
   AGENT_DESCRIPTORS,
   AGREEMENT_LINE_GAP,
   ALLOWED_FIELD_KEYS,
+  ALL_RULES,
   ALL_SOLUTION_CATEGORIES,
   ARCHITECTURE_DESCRIPTOR,
   AdjustedForecastSchema,
@@ -556,6 +599,8 @@ export {
   ArchConfigSchema,
   ArchDiffResultSchema,
   ArchMetricCategorySchema,
+  AuditResultSchema,
+  AuditSummarySchema,
   AuthAuditEntrySchema,
   AuthTokenPublicSchema,
   AuthTokenSchema,
@@ -569,6 +614,10 @@ export {
   BundleSchema,
   CACHE_TTL_MS,
   CINotifier,
+  CI_ASSESSMENTS,
+  CI_REVIEW_DOMAINS,
+  CI_REVIEW_VERDICT_SCHEMA_VERSION,
+  CI_RUNNERS,
   COMPLIANCE_DESCRIPTOR,
   CONDITIONAL_SUBAGENT_DESCRIPTORS,
   CORROBORATED_AGREEMENT,
@@ -578,6 +627,7 @@ export {
   CategoryRegressionSchema,
   CategorySnapshotSchema,
   ChecklistBuilder,
+  CiReviewVerdictSchema,
   CircularDepsCollector,
   CompactionPipeline,
   ComplexityCollector,
@@ -591,6 +641,8 @@ export {
   ContributionsSchema,
   CouplingCollector,
   CriticalPathResolver,
+  DEFAULT_EXEC_MAX_STDOUT_BYTES,
+  DEFAULT_EXEC_TIMEOUT_MS,
   DEFAULT_LOADER_CONFIG,
   DEFAULT_PROVIDER_TIERS,
   DEFAULT_SECURITY_CONFIG,
@@ -629,7 +681,10 @@ export {
   GeminiCacheAdapter,
   GitHubIssuesSyncAdapter,
   HandoffSchema,
+  HarnessConfigSubsetSchema,
   HarnessStateSchema,
+  HarnessStrengthAuditor,
+  HookFileSchema,
   INDEXED_FILE_KINDS,
   INSIGHTS_KEYS,
   InteractionTypeSchema,
@@ -641,6 +696,7 @@ export {
   MOCK_ADAPTER_NAME,
   ManifestSchema,
   MetricResultSchema,
+  ModeSchema,
   ModuleSizeCollector,
   NoOpExecutor,
   NoOpSink,
@@ -667,6 +723,7 @@ export {
   RegressionResultSchema as PredictionRegressionResultSchema,
   PredictionResultSchema,
   PredictionWarningSchema,
+  ProjectContextSchema,
   ProjectScanner,
   PromptCacheStatsSchema,
   ProposalConflictError,
@@ -686,11 +743,13 @@ export {
   REQUIRED_SECTIONS,
   REQUIRED_STRATEGY_SECTIONS,
   RISK_KEYWORDS,
+  RUNNER_PRESETS,
   RegressionDetector,
   RuleRegistry,
   SECURITY_DESCRIPTOR,
   SESSIONS_DEFAULTS,
   SESSION_SECTION_NAMES,
+  SEVERITY_WEIGHTS,
   STALENESS_WARNING_DAYS,
   STANDALONE_AGREEMENT,
   STANDARD_COGNITIVE_MODES,
@@ -706,6 +765,7 @@ export {
   SecurityTrendLineSchema,
   SecurityTrendResultSchema,
   SessionSummarySchema,
+  SeveritySchema,
   SharableBoundaryConfigSchema,
   SharableForbiddenImportSchema,
   SharableLayerSchema,
@@ -723,10 +783,12 @@ export {
   StrategyFrontmatterSchema,
   StreamIndexSchema,
   StreamInfoSchema,
+  StrengthFindingSchema,
   StructuralStrategy,
   SupplyChainSnapshotSchema,
   TYPESCRIPT_STRICT_DESCRIPTOR,
   ThresholdConfigSchema,
+  TierSchema,
   TimeToFixResultSchema,
   TimeToFixStatsSchema,
   TimelineFileSchema,
@@ -781,8 +843,10 @@ export {
   assertPortUsable,
   assertSanitized,
   assignFeature,
+  buildCiReviewVerdict,
   buildDependencyGraph,
   buildExclusionSet,
+  buildProjectContext,
   buildSnapshot,
   calculateCacheSavings,
   calculateCost,
@@ -791,6 +855,7 @@ export {
   checkEligibility,
   checkEvidenceCoverage,
   checkOverlap,
+  checkRoadmapHealth,
   checkTaint,
   classifyConfidence,
   classifyFinding,
@@ -833,11 +898,16 @@ export {
   createTrackerClient,
   crossReferenceUndocumentedFixes,
   cryptoRules,
+  decidePromotionForRow,
   deduplicateCleanupFindings,
   deduplicateFindings,
   deepMergeConstraints,
   defaultCollectors,
+  defaultExecFile,
+  defaultIsArchive,
   defineLayer,
+  deriveBlockingFindings,
+  deriveExitCode,
   deriveSkillUsage,
   deserializationRules,
   detectChangeType,
@@ -902,6 +972,7 @@ export {
   getUpdateNotification,
   gitScan,
   goRules,
+  groomRoadmap,
   injectionRules,
   insecureDefaultsRules,
   invalidateCheckState,
@@ -912,6 +983,8 @@ export {
   isRegression,
   isSanitizedResult,
   isSmallSuggestion,
+  isSupportedRunner,
+  isUnactionablePlanned,
   isUpdateCheckEnabled,
   isoWeek,
   listActiveSessions,
@@ -947,14 +1020,20 @@ export {
   normalizeLearningContent,
   normalizeViolationPattern,
   paginate,
+  parseAntigravityVerdict,
   parseCCRecords,
+  parseCiReviewVerdict,
+  parseClaudeVerdict,
+  parseCodexVerdict,
   parseDateFromEntry,
   parseDiff,
   parseFile,
   parseFileRegions,
   parseFrontmatter2 as parseFrontmatter,
+  parseGeminiVerdict,
   parseHarnessIgnore,
   parseLiteLLMData,
+  parseLocalVerdict,
   parseLookback,
   parseManifest,
   parseProtectedRegions,
@@ -964,8 +1043,10 @@ export {
   parseSize,
   parseStrategyDoc,
   pathTraversalRules,
+  presetKind,
   previewFix,
   projectValue,
+  promoteFeature,
   promoteSessionLearnings,
   proposalsDir,
   pruneLearnings,
@@ -988,6 +1069,7 @@ export {
   resetParserCache,
   resolveConsent,
   resolveFileToLayer,
+  resolveMode,
   resolveModelTier,
   resolveReverseStatus,
   resolveRuleSeverity,
@@ -995,12 +1077,14 @@ export {
   resolveStability,
   resolveStreamPath,
   resolveThresholds,
+  rollupScore,
   runAdversarialAgent,
   runFallbackRules as runAgentConfigFallbackRules,
   runAll,
   runArchitectureAgent,
   runBugDetectionAgent,
   runCIChecks,
+  runCiReview,
   runComplianceAgent,
   runFrontendRacesAgent,
   runMechanicalChecks,

package/dist/{docs-7CP6VV42.js → docs-AU3DXFFO.js}

@@ -1,13 +1,13 @@
 import {
   checkDocsDefinition,
   handleCheckDocs
-} from "./chunk-C7J55C6E.js";
+} from "./chunk-MGUPSE6D.js";
 import "./chunk-RC3OI5NK.js";
 import "./chunk-W6Y7ZW3Y.js";
-import "./chunk-B7KMTHN3.js";
+import "./chunk-GGKRA7A7.js";
 import "./chunk-ZCZD7FHU.js";
 import "./chunk-3WGJMBKH.js";
-import "./chunk-GOHWCHCS.js";
+import "./chunk-N24HCQA4.js";
 import "./chunk-N55WOGN3.js";
 import "./chunk-BDGTZRZ6.js";
 import "./chunk-PP6ZRL5T.js";

package/dist/{engine-MKJEBWU7.js → engine-6GPWOYQH.js}

@@ -1,7 +1,7 @@
 import {
   TemplateEngine
-} from "./chunk-UBZQE3JN.js";
-import "./chunk-GOHWCHCS.js";
+} from "./chunk-UX3PQKVZ.js";
+import "./chunk-N24HCQA4.js";
 import "./chunk-N55WOGN3.js";
 import "./chunk-BDGTZRZ6.js";
 import "./chunk-PP6ZRL5T.js";

package/dist/{entropy-6JOZJYG7.js → entropy-VLKDRMRT.js}

@@ -1,10 +1,10 @@
 import {
   detectEntropyDefinition,
   handleDetectEntropy
-} from "./chunk-ACOOG3UW.js";
+} from "./chunk-Z4AWEIBY.js";
 import "./chunk-RC3OI5NK.js";
 import "./chunk-W6Y7ZW3Y.js";
-import "./chunk-GOHWCHCS.js";
+import "./chunk-N24HCQA4.js";
 import "./chunk-N55WOGN3.js";
 import "./chunk-BDGTZRZ6.js";
 import "./chunk-PP6ZRL5T.js";

package/dist/{feedback-T65AEJEG.js → feedback-YXYY44ZC.js}

@@ -5,7 +5,7 @@ import {
   handleCreateSelfReview,
   handleRequestPeerReview,
   requestPeerReviewDefinition
-} from "./chunk-UXPWSV3B.js";
+} from "./chunk-BYVT5LVO.js";
 import "./chunk-RC3OI5NK.js";
 import "./chunk-W6Y7ZW3Y.js";
 import "./chunk-KFQGP6VL.js";

package/dist/{generate-agent-definitions-4VI4YTO2.js → generate-agent-definitions-XIHQPKG3.js}

@@ -1,13 +1,13 @@
 import {
   createGenerateAgentDefinitionsCommand,
   generateAgentDefinitions
-} from "./chunk-EEFRPEWT.js";
+} from "./chunk-NWLGL3IR.js";
 import "./chunk-KET4QQZB.js";
-import "./chunk-X4EFYVCZ.js";
+import "./chunk-PC2R5RUJ.js";
 import "./chunk-3ISINLYT.js";
 import "./chunk-6B6UN6SG.js";
 import "./chunk-3WGJMBKH.js";
-import "./chunk-GOHWCHCS.js";
+import "./chunk-N24HCQA4.js";
 import "./chunk-N55WOGN3.js";
 import "./chunk-BDGTZRZ6.js";
 import "./chunk-PP6ZRL5T.js";

package/dist/hooks/cost-tracker.js

@@ -7,13 +7,36 @@ import { readFileSync, mkdirSync, appendFileSync } from 'node:fs';
 import { join } from 'node:path';
 import process from 'node:process';
 
-function main() {
-  let raw = '';
-  try {
-    raw = readFileSync(0, 'utf-8');
-  } catch {
-    process.exit(0);
+/** Synchronous sleep (no busy-spin) used to back off between stdin read retries. */
+function sleepMs(ms) {
+  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+
+/**
+ * Read all of stdin synchronously, tolerating the EAGAIN that fd 0 throws when
+ * it is a non-blocking pipe with data not yet delivered. Under load (notably CI
+ * under v8 coverage) the first read can race ahead of the writer; without the
+ * retry the hook silently fail-opens and drops the cost entry. A genuinely empty
+ * stdin returns '' immediately (EOF, no EAGAIN), so the empty/malformed paths
+ * stay fast. Bounded so a stuck pipe can't hang the hook.
+ */
+function readStdin() {
+  const deadline = Date.now() + 2000;
+  for (;;) {
+    try {
+      return readFileSync(0, 'utf-8');
+    } catch (err) {
+      if (err && err.code === 'EAGAIN' && Date.now() < deadline) {
+        sleepMs(10);
+        continue;
+      }
+      return '';
+    }
   }
+}
+
+function main() {
+  const raw = readStdin();
 
   if (!raw.trim()) {
     process.exit(0);