@lannguyensi/harness 0.37.0 → 0.39.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (110) hide show
  1. package/CHANGELOG.md +35 -1
  2. package/dist/cli/add/index.js +10 -2
  3. package/dist/cli/add/index.js.map +1 -1
  4. package/dist/cli/add/mutate.d.ts +2 -0
  5. package/dist/cli/add/mutate.js.map +1 -1
  6. package/dist/cli/adopt/derive.d.ts +11 -1
  7. package/dist/cli/adopt/derive.js +28 -2
  8. package/dist/cli/adopt/derive.js.map +1 -1
  9. package/dist/cli/adopt/index.js +21 -13
  10. package/dist/cli/adopt/index.js.map +1 -1
  11. package/dist/cli/apply/apply.js +31 -3
  12. package/dist/cli/apply/apply.js.map +1 -1
  13. package/dist/cli/apply/generate-settings.d.ts +43 -0
  14. package/dist/cli/apply/generate-settings.js +53 -0
  15. package/dist/cli/apply/generate-settings.js.map +1 -1
  16. package/dist/cli/audit.d.ts +7 -0
  17. package/dist/cli/audit.js +11 -1
  18. package/dist/cli/audit.js.map +1 -1
  19. package/dist/cli/diff/git.d.ts +13 -0
  20. package/dist/cli/diff/git.js +25 -0
  21. package/dist/cli/diff/git.js.map +1 -1
  22. package/dist/cli/diff/index.d.ts +7 -0
  23. package/dist/cli/diff/index.js +82 -7
  24. package/dist/cli/diff/index.js.map +1 -1
  25. package/dist/cli/doctor/format.js +21 -0
  26. package/dist/cli/doctor/format.js.map +1 -1
  27. package/dist/cli/doctor/index.d.ts +33 -0
  28. package/dist/cli/doctor/index.js +103 -35
  29. package/dist/cli/doctor/index.js.map +1 -1
  30. package/dist/cli/doctor/types.d.ts +23 -0
  31. package/dist/cli/explain.js +7 -0
  32. package/dist/cli/explain.js.map +1 -1
  33. package/dist/cli/index.js +4 -0
  34. package/dist/cli/index.js.map +1 -1
  35. package/dist/cli/init/profiles.d.ts +1 -1
  36. package/dist/cli/init/profiles.js +9 -0
  37. package/dist/cli/init/profiles.js.map +1 -1
  38. package/dist/cli/init/templates.d.ts +1 -1
  39. package/dist/cli/init/templates.js +19 -0
  40. package/dist/cli/init/templates.js.map +1 -1
  41. package/dist/cli/loader.js +9 -1
  42. package/dist/cli/loader.js.map +1 -1
  43. package/dist/cli/pack/hook-bootstrap.d.ts +60 -0
  44. package/dist/cli/pack/hook-bootstrap.js +116 -0
  45. package/dist/cli/pack/hook-bootstrap.js.map +1 -0
  46. package/dist/cli/pack/hook-branch-protection.js +14 -53
  47. package/dist/cli/pack/hook-branch-protection.js.map +1 -1
  48. package/dist/cli/pack/hook-codex-pre-tool-use.js +20 -50
  49. package/dist/cli/pack/hook-codex-pre-tool-use.js.map +1 -1
  50. package/dist/cli/pack/hook-codex-stop.js +2 -13
  51. package/dist/cli/pack/hook-codex-stop.js.map +1 -1
  52. package/dist/cli/pack/hook-codex-user-prompt-submit.js +2 -13
  53. package/dist/cli/pack/hook-codex-user-prompt-submit.js.map +1 -1
  54. package/dist/cli/pack/hook-post-tool-use.js +4 -32
  55. package/dist/cli/pack/hook-post-tool-use.js.map +1 -1
  56. package/dist/cli/pack/hook-pre-tool-use.js +32 -93
  57. package/dist/cli/pack/hook-pre-tool-use.js.map +1 -1
  58. package/dist/cli/pack/hook-runtime-reality.js +3 -13
  59. package/dist/cli/pack/hook-runtime-reality.js.map +1 -1
  60. package/dist/cli/pack/hook-solution-acceptance-writeguard.js +2 -13
  61. package/dist/cli/pack/hook-solution-acceptance-writeguard.js.map +1 -1
  62. package/dist/cli/pack/hook-solution-acceptance.js +25 -57
  63. package/dist/cli/pack/hook-solution-acceptance.js.map +1 -1
  64. package/dist/cli/pack/hook-stay-in-scope.js +3 -23
  65. package/dist/cli/pack/hook-stay-in-scope.js.map +1 -1
  66. package/dist/cli/pack/hook-track-active-claim.js +4 -32
  67. package/dist/cli/pack/hook-track-active-claim.js.map +1 -1
  68. package/dist/cli/policy/intercept.d.ts +10 -0
  69. package/dist/cli/policy/intercept.js +60 -24
  70. package/dist/cli/policy/intercept.js.map +1 -1
  71. package/dist/cli/validate/checks.d.ts +24 -0
  72. package/dist/cli/validate/checks.js +138 -0
  73. package/dist/cli/validate/checks.js.map +1 -1
  74. package/dist/io/merge-settings.d.ts +23 -1
  75. package/dist/io/merge-settings.js +120 -10
  76. package/dist/io/merge-settings.js.map +1 -1
  77. package/dist/io/read-regular-file.d.ts +32 -0
  78. package/dist/io/read-regular-file.js +34 -0
  79. package/dist/io/read-regular-file.js.map +1 -0
  80. package/dist/policies/index.d.ts +1 -1
  81. package/dist/policies/index.js +1 -1
  82. package/dist/policies/index.js.map +1 -1
  83. package/dist/policies/ledger-client.d.ts +41 -0
  84. package/dist/policies/ledger-client.js +199 -94
  85. package/dist/policies/ledger-client.js.map +1 -1
  86. package/dist/policy-packs/builtin/solution-acceptance-runtime.d.ts +4 -3
  87. package/dist/policy-packs/builtin/solution-acceptance-runtime.js +11 -20
  88. package/dist/policy-packs/builtin/solution-acceptance-runtime.js.map +1 -1
  89. package/dist/policy-packs/builtin/understanding-before-execution-runtime.d.ts +21 -0
  90. package/dist/policy-packs/builtin/understanding-before-execution-runtime.js +44 -20
  91. package/dist/policy-packs/builtin/understanding-before-execution-runtime.js.map +1 -1
  92. package/dist/policy-packs/builtin/understanding-before-execution.d.ts +2 -2
  93. package/dist/runtime/index.d.ts +1 -1
  94. package/dist/runtime/index.js +1 -1
  95. package/dist/runtime/index.js.map +1 -1
  96. package/dist/runtime/intercept.d.ts +18 -0
  97. package/dist/runtime/intercept.js +53 -9
  98. package/dist/runtime/intercept.js.map +1 -1
  99. package/dist/runtime/ledger-record.d.ts +24 -0
  100. package/dist/runtime/ledger-record.js +50 -0
  101. package/dist/runtime/ledger-record.js.map +1 -1
  102. package/dist/schema/grounding.js +22 -0
  103. package/dist/schema/grounding.js.map +1 -1
  104. package/dist/schema/index.js +41 -4
  105. package/dist/schema/index.js.map +1 -1
  106. package/dist/schema/memory.js +9 -0
  107. package/dist/schema/memory.js.map +1 -1
  108. package/dist/schema/risk.js +10 -6
  109. package/dist/schema/risk.js.map +1 -1
  110. package/package.json +5 -1
package/dist/schema/risk.js CHANGED
@@ -1,12 +1,16 @@
1
1
  import { z } from "zod";
2
2
  // Risk Gate vocabulary — Phase 7 #1 anchor.
3
3
  //
4
- // STATUS: schema vocabulary only. `harness validate` parses and
5
- // validates a `risk:` block, but no runtime surface reads it yet. The
6
- // Risk Classifier that consumes `risk.classifiers[]` to assign an
7
- // Action Envelope a severity + categories lands in Phase 7 #3 (see
8
- // docs/ROADMAP.md and docs/risk-gate.md). Until then a `risk:` block is
9
- // inert, validated config.
4
+ // STATUS: LIVE (corrected 2026-07-02, task 50a94127; this header
5
+ // previously still said "no runtime surface reads it yet" long after
6
+ // that stopped being true). `risk.classifiers[]` is consumed by the
7
+ // Risk Classifier (`classifyRisk`, runtime/risk-classifier.ts) invoked
8
+ // from runtime/intercept.ts on every PreToolUse once the manifest
9
+ // declares at least one `when:`-bearing policy (the riskGateActive
10
+ // guard), and policies consume the classification through `when.risk.*`
11
+ // clauses evaluated in runtime/when-eval.ts (Phase 7 #5). A declared
12
+ // `risk:` block is enforced configuration, not decoration. See
13
+ // docs/risk-gate.md.
10
14
  //
11
15
  // Design source: lava-ice-logs/2026-04-30/harness-risk-gate-extension.md.
12
16
  // Severity is an ordered scale: a future `when.risk.severity_at_least:
package/dist/schema/risk.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"risk.js","sourceRoot":"","sources":["../../src/schema/risk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,4CAA4C;AAC5C,EAAE;AACF,gEAAgE;AAChE,sEAAsE;AACtE,kEAAkE;AAClE,mEAAmE;AACnE,wEAAwE;AACxE,2BAA2B;AAC3B,EAAE;AACF,0EAA0E;AAE1E,uEAAuE;AACvE,uEAAuE;AACvE,sEAAsE;AACtE,qEAAqE;AACrE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAEhF,wEAAwE;AACxE,uEAAuE;AACvE,wEAAwE;AACxE,uEAAuE;AACvE,8DAA8D;AAC9D,+DAA+D;AAC/D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC;IACvC,aAAa;IACb,WAAW;IACX,qBAAqB;IACrB,mBAAmB;IACnB,qBAAqB;IACrB,sBAAsB;IACtB,mBAAmB;IACnB,uBAAuB;IACvB,sBAAsB;IACtB,qBAAqB;IACrB,aAAa;CACd,CAAC,CAAC;AAEH,kEAAkE;AAClE,qEAAqE;AACrE,uEAAuE;AACvE,mEAAmE;AACnE,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,QAAQ,EAAE,kBAAkB;CAC7B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,SAAS,CAAC;YACjB,OAAO,EAAE,kBAAmB,GAAa,CAAC,OAAO,EAAE;SACpD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,kEAAkE;IAClE,oEAAoE;IACpE,4DAA4D;IAC5D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACvD,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAChC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,aAAa,EAAE,CAAC,EAAE,MAAM,CAAC;gBAChC,OAAO,EAAE,mCAAmC,CAAC,CAAC,IAAI,EAAE;aACrD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
1
+ {"version":3,"file":"risk.js","sourceRoot":"","sources":["../../src/schema/risk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,4CAA4C;AAC5C,EAAE;AACF,iEAAiE;AACjE,qEAAqE;AACrE,oEAAoE;AACpE,uEAAuE;AACvE,kEAAkE;AAClE,mEAAmE;AACnE,wEAAwE;AACxE,qEAAqE;AACrE,+DAA+D;AAC/D,qBAAqB;AACrB,EAAE;AACF,0EAA0E;AAE1E,uEAAuE;AACvE,uEAAuE;AACvE,sEAAsE;AACtE,qEAAqE;AACrE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAEhF,wEAAwE;AACxE,uEAAuE;AACvE,wEAAwE;AACxE,uEAAuE;AACvE,8DAA8D;AAC9D,+DAA+D;AAC/D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC;IACvC,aAAa;IACb,WAAW;IACX,qBAAqB;IACrB,mBAAmB;IACnB,qBAAqB;IACrB,sBAAsB;IACtB,mBAAmB;IACnB,uBAAuB;IACvB,sBAAsB;IACtB,qBAAqB;IACrB,aAAa;CACd,CAAC,CAAC;AAEH,kEAAkE;AAClE,qEAAqE;AACrE,uEAAuE;AACvE,mEAAmE;AACnE,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,QAAQ,EAAE,kBAAkB;CAC7B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,SAAS,CAAC;YACjB,OAAO,EAAE,kBAAmB,GAAa,CAAC,OAAO,EAAE;SACpD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,kEAAkE;IAClE,oEAAoE;IACpE,4DAA4D;IAC5D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACvD,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAChC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,aAAa,EAAE,CAAC,EAAE,MAAM,CAAC;gBAChC,OAAO,EAAE,mCAAmC,CAAC,CAAC,IAAI,EAAE;aACrD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@lannguyensi/harness",
3
- "version": "0.37.0",
3
+ "version": "0.39.0",
4
4
  "description": "Declarative control plane for agent harnesses — one YAML for grounding, tools, memory, and hooks.",
5
5
  "license": "MIT",
6
6
  "homepage": "https://github.com/LanNguyenSi/harness",
@@ -40,6 +40,8 @@
40
40
  "test:integration": "HARNESS_INTEGRATION_TESTS=1 vitest run tests/integration/",
41
41
  "typecheck": "tsc --noEmit",
42
42
  "check:ug-schema-drift": "node scripts/check-ug-schema-drift.mjs",
43
+ "check:boundaries": "depcruise --config .dependency-cruiser.cjs src",
44
+ "check:duplication": "node scripts/check-duplication.mjs",
43
45
  "prepublishOnly": "npm run build"
44
46
  },
45
47
  "dependencies": {
@@ -58,6 +60,8 @@
58
60
  "@types/node": "^22.0.0",
59
61
  "@types/proper-lockfile": "^4.1.4",
60
62
  "@vitest/coverage-v8": "^4.1.4",
63
+ "dependency-cruiser": "18.0.0",
64
+ "jscpd": "5.0.11",
61
65
  "tsx": "^4.22.4",
62
66
  "typescript": "^5.7.0",
63
67
  "vitest": "^4.1.4"