@harness-nexus/cli 0.1.0-alpha.1

package/dist/install/resolver.d.ts

@@ -0,0 +1,15 @@
+import type { ResolvedProfile } from './types.js';
+export interface ResolveOptions {
+    /** Base URL of the Harness Nexus server. */
+    server: string;
+    /** PAT (or JWT) authenticating against the server. */
+    token: string;
+    /** The profile id to resolve. */
+    profileId: string;
+}
+/**
+ * Fetch the profile + every entry's artifact. Throws `RESOLVE_FAILED` if the
+ * profile or any referenced resource is missing or the request errors.
+ */
+export declare function resolveProfile(opts: ResolveOptions): Promise<ResolvedProfile>;
+//# sourceMappingURL=resolver.d.ts.map

package/dist/install/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../src/install/resolver.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAoB,eAAe,EAAE,MAAM,YAAY,CAAC;AAEpE,MAAM,WAAW,cAAc;IAC7B,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAwCnF"}

package/dist/install/resolver.js

@@ -0,0 +1,57 @@
+/**
+ * ProfileResolver — fetches a profile and resolves every entry's `resourceId`
+ * into its concrete artifact via the SDK against a running Harness Nexus server.
+ *
+ * A profile is a reference bundle: `entries[].resourceId` points at a server-side
+ * `McpServer` (for `kind: 'mcp'`) or `Resource` (other kinds). The resolver
+ * dereferences them so adapters can emit target-native files. This is the only
+ * outbound path in the CLI; there is no local-manifest fallback (a profile's
+ * resource bodies and the aggregated `/mcp` endpoint both require the server).
+ *
+ * See `docs/design/phase-3-install.md` Part 4.
+ */
+import { HarnessNexusClient, HarnessNexusError } from '@harness-nexus/sdk';
+import { InstallError } from '../errors.js';
+/**
+ * Fetch the profile + every entry's artifact. Throws `RESOLVE_FAILED` if the
+ * profile or any referenced resource is missing or the request errors.
+ */
+export async function resolveProfile(opts) {
+    const client = new HarnessNexusClient({ baseUrl: opts.server, token: opts.token });
+    let profile;
+    try {
+        ({ profile } = await client.getProfile(opts.profileId));
+    }
+    catch (e) {
+        throw new InstallError(`Failed to fetch profile '${opts.profileId}': ${describeError(e)}`, 'RESOLVE_FAILED', e);
+    }
+    const artifacts = [];
+    for (const [index, entry] of profile.entries.entries()) {
+        try {
+            if (entry.kind === 'mcp') {
+                // MCP entries reference a McpServer.id. Fetch the full server list once
+                // and find by id (there is no single-get MCP endpoint in the SDK today).
+                const servers = await client.listMcpServers();
+                const server = servers.find((s) => s.id === entry.resourceId);
+                if (!server) {
+                    throw new Error(`MCP server '${entry.resourceId}' not found`);
+                }
+                artifacts.push({ entryId: entry.resourceId, kind: 'mcp', mcpServer: server });
+            }
+            else {
+                const { resource } = await client.getResource(entry.resourceId);
+                artifacts.push({ entryId: entry.resourceId, kind: entry.kind, resource });
+            }
+        }
+        catch (e) {
+            throw new InstallError(`Failed to resolve profile entry #${index} (kind=${entry.kind}, id=${entry.resourceId}): ${describeError(e)}`, 'RESOLVE_FAILED', e);
+        }
+    }
+    return { profile, artifacts };
+}
+function describeError(e) {
+    if (e instanceof HarnessNexusError)
+        return `${e.code}: ${e.message}`;
+    return e instanceof Error ? e.message : String(e);
+}
+//# sourceMappingURL=resolver.js.map

package/dist/install/resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../../src/install/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE3E,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAY5C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAoB;IACvD,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAEnF,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,CAAC,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,YAAY,CACpB,4BAA4B,IAAI,CAAC,SAAS,MAAM,aAAa,CAAC,CAAC,CAAC,EAAE,EAClE,gBAAgB,EAChB,CAAC,CACF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAuB,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBACzB,wEAAwE;gBACxE,yEAAyE;gBACzE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAY,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,UAAU,CAAC,CAAC;gBACzE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,CAAC,UAAU,aAAa,CAAC,CAAC;gBAChE,CAAC;gBACD,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YAChF,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAChE,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,YAAY,CACpB,oCAAoC,KAAK,UAAU,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC,UAAU,MAAM,aAAa,CAAC,CAAC,CAAC,EAAE,EAC7G,gBAAgB,EAChB,CAAC,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,IAAI,CAAC,YAAY,iBAAiB;QAAE,OAAO,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;IACrE,OAAO,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC"}

package/dist/install/types.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Core install-pipeline types. Mirrors the ECC adapter pattern (see
+ * `docs/research/phase-3-ecc-install-patterns.md`): a `TargetAdapter` turns a
+ * resolved profile into an `InstallPlan` (a list of file operations, NO writes);
+ * the installer materializes the plan.
+ *
+ * Phase 3.3 ships these types + a stub adapter + the plan/apply machinery. Real
+ * target adapters (Hermes/CC/Codex) arrive in 3.4–3.6.
+ */
+import type { AgentTarget, Profile, McpServer, Resource } from '@harness-nexus/core';
+/** Where an adapter installs: a user home dir (`~/.xxx`) or a project root. */
+export type AdapterKind = 'home' | 'project';
+/** A single filesystem operation the installer can materialize. */
+export type Operation = {
+    kind: 'copy-file';
+    /** Absolute source path (a resolved profile artifact on disk). */
+    sourcePath: string;
+    /** Absolute destination path in the target tool's layout. */
+    destinationPath: string;
+} | {
+    kind: 'write-file';
+    /** Inline content to write (generated by the adapter). */
+    content: string;
+    destinationPath: string;
+} | {
+    kind: 'merge-json';
+    /** The JSON value to deep-merge into the destination file. */
+    mergePayload: unknown;
+    destinationPath: string;
+};
+/** The output of planning — a serializable, dry-runnable description of an install. */
+export interface InstallPlan {
+    adapter: {
+        id: string;
+        target: AgentTarget;
+        kind: AdapterKind;
+    };
+    /** Root dir the adapter writes into (e.g. ~/.hermes, ~/.codex). */
+    targetRoot: string;
+    /** Where the install-state ledger is written. */
+    installStatePath: string;
+    operations: Operation[];
+    /** True if any operation carries a decrypted direct-mode credential. */
+    sensitive: boolean;
+}
+/** Input passed to an adapter's resolve/plan/validate methods. */
+export interface ResolveInput {
+    /** Override the adapter's default home/project root. */
+    outDir?: string;
+    /** The OS home dir (defaults to os.homedir()). */
+    homeDir?: string;
+}
+/** A non-fatal adapter validation finding. severity 'error' blocks planning. */
+export interface ValidationIssue {
+    severity: 'error' | 'warning';
+    code: string;
+    message: string;
+}
+/**
+ * A profile entry resolved to its concrete artifact. MCP entries resolve to a
+ * McpServer row; other kinds resolve to a Resource. Used by adapters to emit
+ * target-native files.
+ */
+export type ResolvedArtifact = {
+    entryId: string;
+    kind: 'mcp';
+    mcpServer: McpServer;
+} | {
+    entryId: string;
+    kind: Exclude<Profile['entries'][number]['kind'], 'mcp'>;
+    resource: Resource;
+};
+/** A profile plus every entry's artifact, fetched from the server. */
+export interface ResolvedProfile {
+    profile: Profile;
+    artifacts: ResolvedArtifact[];
+}
+/**
+ * A target adapter — one per Agent tool. Produced by `createTargetAdapter`.
+ * The contract: turn a resolved profile into an install plan, no writes.
+ */
+export interface TargetAdapter {
+    readonly id: string;
+    readonly target: AgentTarget;
+    readonly kind: AdapterKind;
+    /** Resolve the root dir files land under (honors `outDir` override). */
+    resolveRoot(input: ResolveInput): string;
+    /** Plan file operations for a resolved profile. Does NOT write. */
+    planOperations(resolved: ResolvedProfile, input: ResolveInput): InstallPlan;
+    /** Gate before planning; 'error' severity blocks. */
+    validate(input: ResolveInput): ValidationIssue[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/install/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/install/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAErF,+EAA+E;AAC/E,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,SAAS,CAAC;AAE7C,mEAAmE;AACnE,MAAM,MAAM,SAAS,GACjB;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,eAAe,EAAE,MAAM,CAAC;CACzB,GACD;IACE,IAAI,EAAE,YAAY,CAAC;IACnB,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;CACzB,GACD;IACE,IAAI,EAAE,YAAY,CAAC;IACnB,8DAA8D;IAC9D,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEN,uFAAuF;AACvF,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC;IAChE,mEAAmE;IACnE,UAAU,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,wEAAwE;IACxE,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,kEAAkE;AAClE,MAAM,WAAW,YAAY;IAC3B,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,gFAAgF;AAChF,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GACxB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,GACtD;IACE,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IACzD,QAAQ,EAAE,QAAQ,CAAC;CACpB,CAAC;AAEN,sEAAsE;AACtE,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,gBAAgB,EAAE,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,wEAAwE;IACxE,WAAW,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAAC;IACzC,mEAAmE;IACnE,cAAc,CAAC,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,YAAY,GAAG,WAAW,CAAC;IAC5E,qDAAqD;IACrD,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,eAAe,EAAE,CAAC;CAClD"}

package/dist/install/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/install/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/install/types.ts"],"names":[],"mappings":""}

package/dist/install/uninstaller.d.ts

@@ -0,0 +1,29 @@
+import { type InstallState } from './install-state.js';
+import type { AgentTarget } from '@harness-nexus/core';
+import type { ResolveInput } from './types.js';
+/** What uninstall will do to one destination path. */
+export interface UninstallStep {
+    destinationPath: string;
+    action: 'restore' | 'delete';
+    /** Pre-install content to restore (null → the file is ours to delete). */
+    previousContent: string | null;
+    /** True when the current file was modified after our install (→ .hnx.bak). */
+    conflicts: boolean;
+    /** False when the file is already gone — nothing to do at apply time. */
+    exists: boolean;
+}
+export interface UninstallPlan {
+    targetRoot: string;
+    installStatePath: string;
+    profile: InstallState['profile'];
+    installedAt: string;
+    steps: UninstallStep[];
+}
+/** Read the ledger for a target root and compute the reverse steps. */
+export declare function planUninstall(opts: {
+    target: AgentTarget;
+    input?: ResolveInput;
+}): UninstallPlan | null;
+/** Execute an uninstall plan (see module doc for semantics). */
+export declare function applyUninstall(plan: UninstallPlan): number;
+//# sourceMappingURL=uninstaller.d.ts.map

package/dist/install/uninstaller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uninstaller.d.ts","sourceRoot":"","sources":["../../src/install/uninstaller.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAoB,KAAK,YAAY,EAAwB,MAAM,oBAAoB,CAAC;AAE/F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,sDAAsD;AACtD,MAAM,WAAW,aAAa;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,0EAA0E;IAC1E,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,8EAA8E;IAC9E,SAAS,EAAE,OAAO,CAAC;IACnB,yEAAyE;IACzE,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,aAAa,EAAE,CAAC;CACxB;AASD,uEAAuE;AACvE,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAClC,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB,GAAG,aAAa,GAAG,IAAI,CA2BvB;AAED,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CA4B1D"}

package/dist/install/uninstaller.js

@@ -0,0 +1,107 @@
+/**
+ * Uninstaller — reverses an `hnx install --apply` using the install-state
+ * ledger (Phase 3.5 loose ends; the ledger's "enabling uninstall" promise from
+ * 3.3 finally cashed in).
+ *
+ * Semantics:
+ *  - For every ledger operation, in REVERSE order (later writes depended on
+ *    earlier ones, so undoing last-first restores the original state):
+ *      destination had a pre-install snapshot → restore it;
+ *      destination did not exist           → delete the file we created.
+ *  - If the current file content differs from what we last wrote (the user
+ *    edited it after install), the current content is preserved next to it as
+ *    `<file>.hnx.bak` before restoring — user edits are never silently lost.
+ *  - Empty directories created by the install are pruned up to (but excluding)
+ *    the target root; the ledger file itself is removed last.
+ *
+ * This is why the Hermes adapter records its config.yaml merge as a single
+ * write-file op with a full pre-merge snapshot (3.4): uninstall rolls the
+ * `mcp_servers:` entries back without touching the user's other config —
+ * unlike `hermes plugins remove`, which leaves stale config behind.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { InstallError } from '../errors.js';
+import { readInstallState } from './install-state.js';
+import { getAdapter } from './registry.js';
+/** The exact bytes the install last wrote to a destination, for drift checks. */
+function writtenContent(op) {
+    if (op.kind === 'write-file')
+        return op.content;
+    if (op.kind === 'merge-json')
+        return `${JSON.stringify(op.mergePayload, null, 2)}\n`;
+    return ''; // copy-file: drift check not meaningful; restore/delete regardless
+}
+/** Read the ledger for a target root and compute the reverse steps. */
+export function planUninstall(opts) {
+    const adapter = getAdapter(opts.target);
+    const root = adapter.resolveRoot(opts.input ?? {});
+    const installStatePath = path.join(root, 'harness-nexus-install-state.json');
+    const state = readInstallState(installStatePath);
+    if (!state)
+        return null;
+    const steps = [];
+    for (const op of [...state.operations].reverse()) {
+        const exists = fs.existsSync(op.destinationPath);
+        const current = exists ? fs.readFileSync(op.destinationPath, 'utf8') : null;
+        const conflicts = exists && current !== null && current !== writtenContent(op);
+        steps.push({
+            destinationPath: op.destinationPath,
+            action: op.previousContent != null ? 'restore' : 'delete',
+            previousContent: op.previousContent ?? null,
+            conflicts,
+            exists,
+        });
+    }
+    return {
+        targetRoot: root,
+        installStatePath,
+        profile: state.profile,
+        installedAt: state.installedAt,
+        steps,
+    };
+}
+/** Execute an uninstall plan (see module doc for semantics). */
+export function applyUninstall(plan) {
+    let touched = 0;
+    try {
+        for (const step of plan.steps) {
+            if (!step.exists)
+                continue;
+            if (step.conflicts) {
+                fs.copyFileSync(step.destinationPath, `${step.destinationPath}.hnx.bak`);
+            }
+            if (step.action === 'restore') {
+                fs.writeFileSync(step.destinationPath, step.previousContent, 'utf8');
+            }
+            else {
+                fs.rmSync(step.destinationPath);
+            }
+            pruneEmptyDirs(path.dirname(step.destinationPath), plan.targetRoot);
+            touched += 1;
+        }
+        if (fs.existsSync(plan.installStatePath)) {
+            fs.rmSync(plan.installStatePath);
+            touched += 1;
+        }
+    }
+    catch (e) {
+        throw new InstallError(`Failed to uninstall: ${e.message} (ledger left in place — re-run to continue)`, 'APPLY_FAILED', e);
+    }
+    return touched;
+}
+/** Remove empty directories from `dir` up to (excluding) `stop`. */
+function pruneEmptyDirs(dir, stop) {
+    let current = path.resolve(dir);
+    const top = path.resolve(stop);
+    while (current.startsWith(top) && current !== top) {
+        try {
+            fs.rmdirSync(current); // fails with ENOTEMPTY if the dir has content — stop there
+        }
+        catch {
+            return;
+        }
+        current = path.dirname(current);
+    }
+}
+//# sourceMappingURL=uninstaller.js.map

package/dist/install/uninstaller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uninstaller.js","sourceRoot":"","sources":["../../src/install/uninstaller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAA2C,MAAM,oBAAoB,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAwB3C,iFAAiF;AACjF,SAAS,cAAc,CAAC,EAAmB;IACzC,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,EAAE,CAAC,OAAO,CAAC;IAChD,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACrF,OAAO,EAAE,CAAC,CAAC,mEAAmE;AAChF,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,aAAa,CAAC,IAG7B;IACC,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kCAAkC,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5E,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,cAAc,CAAC,EAAE,CAAC,CAAC;QAC/E,KAAK,CAAC,IAAI,CAAC;YACT,eAAe,EAAE,EAAE,CAAC,eAAe;YACnC,MAAM,EAAE,EAAE,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;YACzD,eAAe,EAAE,EAAE,CAAC,eAAe,IAAI,IAAI;YAC3C,SAAS;YACT,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,UAAU,EAAE,IAAI;QAChB,gBAAgB;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK;KACN,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,IAAmB;IAChD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,SAAS;YAC3B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,eAAe,UAAU,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,eAAyB,EAAE,MAAM,CAAC,CAAC;YACjF,CAAC;iBAAM,CAAC;gBACN,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAClC,CAAC;YACD,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;QACD,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACzC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACjC,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,YAAY,CACpB,wBAAyB,CAAW,CAAC,OAAO,8CAA8C,EAC1F,cAAc,EACd,CAAC,CACF,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,oEAAoE;AACpE,SAAS,cAAc,CAAC,GAAW,EAAE,IAAY;IAC/C,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,2DAA2D;QACpF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;AACH,CAAC"}

package/dist/inventory/common.d.ts

@@ -0,0 +1,86 @@
+import type { InventoryItemKind } from '@harness-nexus/shared';
+/**
+ * Shared scanner plumbing (Phase 8 C3). Each target scanner discovers items
+ * from the same ground-truth locations its install adapter writes; this module
+ * owns the cross-target conventions: bounded text reads, summaries/previews,
+ * install-ledger platform detection, and MCP secret redaction.
+ * See docs/design/phase-8-c3.md.
+ */
+/** Hard cap for one importable artifact body (per item). */
+export declare const MAX_ITEM_BYTES: number;
+/** Platform-written MCP entry names start with this (shim + emitter convention). */
+export declare const PLATFORM_MCP_PREFIX = "harness-nexus";
+/** True iff the MCP entry name is one we wrote (shim entries, marketplaces). */
+export declare function isPlatformMcpName(name: string): boolean;
+/** Wire `meta` for a normalized MCP config entry (undefined-free per target). */
+export declare function mcpMeta(entry: RawMcpEntryLike): {
+    transport?: 'stdio' | 'sse' | 'http';
+    command?: string;
+    url?: string;
+};
+/** Minimal structural shape the scanners normalize config entries to. */
+export interface RawMcpEntryLike {
+    type?: string;
+    command?: string;
+    url?: string;
+}
+/** An item as discovered by a scanner, before wire-shaping (scan.ts does that). */
+export interface DiscoveredItem {
+    kind: InventoryItemKind;
+    name: string;
+    /** Absolute file path (content kinds) or skill directory (skills). */
+    absPath: string;
+    /** Display path relative to the agent home. */
+    relPath: string;
+    importable: boolean;
+    note?: string | undefined;
+    summary?: string | undefined;
+    preview?: string | undefined;
+    meta?: {
+        multi?: boolean | undefined;
+        transport?: 'stdio' | 'sse' | 'http' | undefined;
+        command?: string | undefined;
+        url?: string | undefined;
+    } | undefined;
+    /** Extra evidence for origin:'platform' beyond the ledger (scanner-specific). */
+    platform?: boolean | undefined;
+}
+export type BoundedText = {
+    ok: true;
+    content: string;
+} | {
+    ok: false;
+    error: string;
+};
+/** Read a text file with size + binary guards (an artifact that fails is never importable). */
+export declare function readTextBounded(file: string): BoundedText;
+/** List a skill directory's files (recursive, relative paths, sorted, dirs skipped). */
+export declare function skillDirFiles(dir: string): string[];
+/** Strip YAML frontmatter if present. */
+export declare function stripFrontmatter(content: string): string;
+/** First meaningful line of a markdown doc (after frontmatter), ≤120 chars. */
+export declare function summarize(content: string): string | undefined;
+/** ≤200-char single-line preview (after frontmatter). */
+export declare function previewOf(content: string): string | undefined;
+/**
+ * The install-state ledger hnx writes into each agent home. Its operation
+ * destination paths are the authoritative "platform wrote this" set — origin
+ * detection never guesses from content.
+ */
+export interface LedgerInfo {
+    platformPaths: Set<string>;
+    installedProfile: string | null;
+}
+export declare function readLedger(home: string): LedgerInfo;
+/**
+ * True iff the item and a ledger-written path overlap in either direction —
+ * the item is a skill DIR while ledger operations record the FILEs inside it.
+ */
+export declare function isPlatformPath(absPath: string, ledger: LedgerInfo): boolean;
+/**
+ * Redact a secret-carrying map (MCP env values, header values) to
+ * `${cred:<KEY>}` placeholders — the KEY survives so the user can fill the
+ * credential in; the plaintext NEVER crosses the wire to the server.
+ */
+export declare function redactSecretMap(values: Record<string, string> | undefined): Record<string, string> | undefined;
+//# sourceMappingURL=common.d.ts.map

package/dist/inventory/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/inventory/common.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE/D;;;;;;GAMG;AAEH,4DAA4D;AAC5D,eAAO,MAAM,cAAc,QAAa,CAAC;AAEzC,oFAAoF;AACpF,eAAO,MAAM,mBAAmB,kBAAkB,CAAC;AAEnD,gFAAgF;AAChF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,iFAAiF;AACjF,wBAAgB,OAAO,CAAC,KAAK,EAAE,eAAe,GAAG;IAC/C,SAAS,CAAC,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAOA;AAED,yEAAyE;AACzE,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,mFAAmF;AACnF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,IAAI,CAAC,EACD;QACE,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC5B,SAAS,CAAC,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;QACjD,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAC1B,GACD,SAAS,CAAC;IACd,iFAAiF;IACjF,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAChC;AAED,MAAM,MAAM,WAAW,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvF,+FAA+F;AAC/F,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAiBzD;AAED,wFAAwF;AACxF,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAYnD;AAED,yCAAyC;AACzC,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAKxD;AAED,+EAA+E;AAC/E,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQ7D;AAED,yDAAyD;AACzD,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAI7D;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAgBnD;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAW3E;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GACzC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAKpC"}

package/dist/inventory/common.js

@@ -0,0 +1,137 @@
+import fs from 'node:fs';
+import path from 'node:path';
+/**
+ * Shared scanner plumbing (Phase 8 C3). Each target scanner discovers items
+ * from the same ground-truth locations its install adapter writes; this module
+ * owns the cross-target conventions: bounded text reads, summaries/previews,
+ * install-ledger platform detection, and MCP secret redaction.
+ * See docs/design/phase-8-c3.md.
+ */
+/** Hard cap for one importable artifact body (per item). */
+export const MAX_ITEM_BYTES = 256 * 1024;
+/** Platform-written MCP entry names start with this (shim + emitter convention). */
+export const PLATFORM_MCP_PREFIX = 'harness-nexus';
+/** True iff the MCP entry name is one we wrote (shim entries, marketplaces). */
+export function isPlatformMcpName(name) {
+    return name === PLATFORM_MCP_PREFIX || name.startsWith(`${PLATFORM_MCP_PREFIX}-`);
+}
+/** Wire `meta` for a normalized MCP config entry (undefined-free per target). */
+export function mcpMeta(entry) {
+    const transport = entry.command ? 'stdio' : entry.type === 'sse' ? 'sse' : 'http';
+    return {
+        transport,
+        ...(entry.command ? { command: entry.command } : {}),
+        ...(entry.url ? { url: entry.url } : {}),
+    };
+}
+/** Read a text file with size + binary guards (an artifact that fails is never importable). */
+export function readTextBounded(file) {
+    let stat;
+    try {
+        stat = fs.statSync(file);
+    }
+    catch {
+        return { ok: false, error: 'unreadable' };
+    }
+    if (!stat.isFile())
+        return { ok: false, error: 'not-a-file' };
+    if (stat.size > MAX_ITEM_BYTES)
+        return { ok: false, error: 'too-large' };
+    let content;
+    try {
+        content = fs.readFileSync(file, 'utf8');
+    }
+    catch {
+        return { ok: false, error: 'unreadable' };
+    }
+    if (content.slice(0, 512).includes('\u0000'))
+        return { ok: false, error: 'binary' };
+    return { ok: true, content };
+}
+/** List a skill directory's files (recursive, relative paths, sorted, dirs skipped). */
+export function skillDirFiles(dir) {
+    const out = [];
+    const walk = (rel) => {
+        for (const entry of fs
+            .readdirSync(path.join(dir, rel), { withFileTypes: true })
+            .sort((a, b) => a.name.localeCompare(b.name))) {
+            if (entry.isDirectory())
+                walk(path.join(rel, entry.name));
+            else if (entry.isFile())
+                out.push(path.join(rel, entry.name));
+        }
+    };
+    walk('');
+    return out;
+}
+/** Strip YAML frontmatter if present. */
+export function stripFrontmatter(content) {
+    if (!content.startsWith('---'))
+        return content;
+    const end = content.indexOf('\n---', 3);
+    if (end === -1)
+        return content;
+    return content.slice(content.indexOf('\n', end + 1) + 1);
+}
+/** First meaningful line of a markdown doc (after frontmatter), ≤120 chars. */
+export function summarize(content) {
+    const body = stripFrontmatter(content);
+    for (const raw of body.split('\n')) {
+        const line = raw.trim();
+        if (!line || line.startsWith('#') || line === '---')
+            continue;
+        return line.slice(0, 120);
+    }
+    return undefined;
+}
+/** ≤200-char single-line preview (after frontmatter). */
+export function previewOf(content) {
+    const body = stripFrontmatter(content).trim();
+    if (!body)
+        return undefined;
+    return body.replace(/\s+/g, ' ').slice(0, 200);
+}
+export function readLedger(home) {
+    const info = { platformPaths: new Set(), installedProfile: null };
+    const ledgerPath = path.join(home, 'harness-nexus-install-state.json');
+    try {
+        const raw = JSON.parse(fs.readFileSync(ledgerPath, 'utf8'));
+        for (const op of raw.operations ?? []) {
+            if (op.destinationPath)
+                info.platformPaths.add(path.resolve(op.destinationPath));
+        }
+        info.installedProfile = raw.profile?.name ?? null;
+    }
+    catch {
+        // absent or unreadable — no ledger evidence
+    }
+    return info;
+}
+/**
+ * True iff the item and a ledger-written path overlap in either direction —
+ * the item is a skill DIR while ledger operations record the FILEs inside it.
+ */
+export function isPlatformPath(absPath, ledger) {
+    for (const p of ledger.platformPaths) {
+        if (absPath === p ||
+            absPath.startsWith(`${p}${path.sep}`) ||
+            p.startsWith(`${absPath}${path.sep}`)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Redact a secret-carrying map (MCP env values, header values) to
+ * `${cred:<KEY>}` placeholders — the KEY survives so the user can fill the
+ * credential in; the plaintext NEVER crosses the wire to the server.
+ */
+export function redactSecretMap(values) {
+    if (!values)
+        return undefined;
+    const out = {};
+    for (const key of Object.keys(values))
+        out[key] = `\${cred:${key}}`;
+    return out;
+}
+//# sourceMappingURL=common.js.map

package/dist/inventory/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/inventory/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B;;;;;;GAMG;AAEH,4DAA4D;AAC5D,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC;AAEzC,oFAAoF;AACpF,MAAM,CAAC,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAEnD,gFAAgF;AAChF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,KAAK,mBAAmB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,mBAAmB,GAAG,CAAC,CAAC;AACpF,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,OAAO,CAAC,KAAsB;IAK5C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAClF,OAAO;QACL,SAAS;QACT,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzC,CAAC;AACJ,CAAC;AAmCD,+FAA+F;AAC/F,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAC9D,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IACzE,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACpF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;QACjC,KAAK,MAAM,KAAK,IAAI,EAAE;aACnB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aACzD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAChD,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;iBACrD,IAAI,KAAK,CAAC,MAAM,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACxC,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IAC/B,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,KAAK;YAAE,SAAS;QAC9D,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACjD,CAAC;AAYD,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,IAAI,GAAe,EAAE,aAAa,EAAE,IAAI,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;IAC9E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kCAAkC,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAGzD,CAAC;QACF,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,EAAE,CAAC,eAAe;gBAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,MAAkB;IAChE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACrC,IACE,OAAO,KAAK,CAAC;YACb,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACrC,CAAC,CAAC,UAAU,CAAC,GAAG,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EACrC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,MAA0C;IAE1C,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,GAAG,GAAG,CAAC;IACpE,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/inventory/scan.d.ts

@@ -0,0 +1,23 @@
+import type { AgentTarget, InventoryItem, InventorySnapshot } from '@harness-nexus/shared';
+import type { PayloadItem, TargetScanner } from './types.js';
+/**
+ * Inventory scan entry point (Phase 8 C3). Owns the cross-scanner assembly:
+ * origin resolution (ledger paths + scanner markers), (kind, name) dedupe,
+ * snapshot shaping, and the collect fan-out. Kept in lockstep with the
+ * server's SCANNABLE_TARGETS (modules/inventory.ts).
+ */
+export declare const SCANNERS: TargetScanner[];
+export declare function scannerFor(target: AgentTarget): TargetScanner | undefined;
+/** Scan one target. A missing agent home still reports an (empty) snapshot. */
+export declare function scanTarget(target: AgentTarget, homeDir?: string): InventorySnapshot;
+/** Scan every supported target (daemon start / default scan request). */
+export declare function scanAllTargets(homeDir?: string): InventorySnapshot[];
+/**
+ * Collect bodies for a selection. Paths are re-derived by a FRESH discover —
+ * the daemon never trusts server-supplied paths.
+ */
+export declare function collectItems(target: AgentTarget, selections: readonly {
+    kind: InventoryItem['kind'];
+    name: string;
+}[], homeDir?: string): Promise<PayloadItem[]>;
+//# sourceMappingURL=scan.d.ts.map

package/dist/inventory/scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../src/inventory/scan.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAM3F,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE7D;;;;;GAKG;AAEH,eAAO,MAAM,QAAQ,EAAE,aAAa,EAKnC,CAAC;AAEF,wBAAgB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,aAAa,GAAG,SAAS,CAEzE;AAgBD,+EAA+E;AAC/E,wBAAgB,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,SAAY,GAAG,iBAAiB,CAyCtF;AAED,yEAAyE;AACzE,wBAAgB,cAAc,CAAC,OAAO,SAAY,GAAG,iBAAiB,EAAE,CAEvE;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,WAAW,EACnB,UAAU,EAAE,SAAS;IAAE,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,EACpE,OAAO,SAAY,GAClB,OAAO,CAAC,WAAW,EAAE,CAAC,CAiCxB"}