@lannguyensi/harness 0.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (199) hide show
  1. package/CHANGELOG.md +552 -0
  2. package/LICENSE +21 -0
  3. package/README.md +154 -0
  4. package/dist/cli/add/index.d.ts +14 -0
  5. package/dist/cli/add/index.js +71 -0
  6. package/dist/cli/add/index.js.map +1 -0
  7. package/dist/cli/add/mutate.d.ts +39 -0
  8. package/dist/cli/add/mutate.js +36 -0
  9. package/dist/cli/add/mutate.js.map +1 -0
  10. package/dist/cli/adopt/derive.d.ts +38 -0
  11. package/dist/cli/adopt/derive.js +94 -0
  12. package/dist/cli/adopt/derive.js.map +1 -0
  13. package/dist/cli/adopt/index.d.ts +20 -0
  14. package/dist/cli/adopt/index.js +156 -0
  15. package/dist/cli/adopt/index.js.map +1 -0
  16. package/dist/cli/apply/apply.d.ts +49 -0
  17. package/dist/cli/apply/apply.js +333 -0
  18. package/dist/cli/apply/apply.js.map +1 -0
  19. package/dist/cli/apply/generate-memory-index.d.ts +17 -0
  20. package/dist/cli/apply/generate-memory-index.js +167 -0
  21. package/dist/cli/apply/generate-memory-index.js.map +1 -0
  22. package/dist/cli/apply/generate-settings.d.ts +15 -0
  23. package/dist/cli/apply/generate-settings.js +87 -0
  24. package/dist/cli/apply/generate-settings.js.map +1 -0
  25. package/dist/cli/apply/index.d.ts +1 -0
  26. package/dist/cli/apply/index.js +2 -0
  27. package/dist/cli/apply/index.js.map +1 -0
  28. package/dist/cli/audit.d.ts +36 -0
  29. package/dist/cli/audit.js +121 -0
  30. package/dist/cli/audit.js.map +1 -0
  31. package/dist/cli/describe.d.ts +13 -0
  32. package/dist/cli/describe.js +26 -0
  33. package/dist/cli/describe.js.map +1 -0
  34. package/dist/cli/diff/engine.d.ts +21 -0
  35. package/dist/cli/diff/engine.js +161 -0
  36. package/dist/cli/diff/engine.js.map +1 -0
  37. package/dist/cli/diff/git.d.ts +6 -0
  38. package/dist/cli/diff/git.js +32 -0
  39. package/dist/cli/diff/git.js.map +1 -0
  40. package/dist/cli/diff/index.d.ts +15 -0
  41. package/dist/cli/diff/index.js +39 -0
  42. package/dist/cli/diff/index.js.map +1 -0
  43. package/dist/cli/diff/since-apply.d.ts +57 -0
  44. package/dist/cli/diff/since-apply.js +255 -0
  45. package/dist/cli/diff/since-apply.js.map +1 -0
  46. package/dist/cli/doctor/format.d.ts +2 -0
  47. package/dist/cli/doctor/format.js +126 -0
  48. package/dist/cli/doctor/format.js.map +1 -0
  49. package/dist/cli/doctor/index.d.ts +14 -0
  50. package/dist/cli/doctor/index.js +281 -0
  51. package/dist/cli/doctor/index.js.map +1 -0
  52. package/dist/cli/doctor/types.d.ts +46 -0
  53. package/dist/cli/doctor/types.js +2 -0
  54. package/dist/cli/doctor/types.js.map +1 -0
  55. package/dist/cli/dry-run.d.ts +46 -0
  56. package/dist/cli/dry-run.js +168 -0
  57. package/dist/cli/dry-run.js.map +1 -0
  58. package/dist/cli/exit-codes.d.ts +10 -0
  59. package/dist/cli/exit-codes.js +15 -0
  60. package/dist/cli/exit-codes.js.map +1 -0
  61. package/dist/cli/explain.d.ts +14 -0
  62. package/dist/cli/explain.js +97 -0
  63. package/dist/cli/explain.js.map +1 -0
  64. package/dist/cli/export.d.ts +31 -0
  65. package/dist/cli/export.js +84 -0
  66. package/dist/cli/export.js.map +1 -0
  67. package/dist/cli/index.d.ts +8 -0
  68. package/dist/cli/index.js +549 -0
  69. package/dist/cli/index.js.map +1 -0
  70. package/dist/cli/init/index.d.ts +17 -0
  71. package/dist/cli/init/index.js +57 -0
  72. package/dist/cli/init/index.js.map +1 -0
  73. package/dist/cli/init/templates.d.ts +4 -0
  74. package/dist/cli/init/templates.js +175 -0
  75. package/dist/cli/init/templates.js.map +1 -0
  76. package/dist/cli/list.d.ts +12 -0
  77. package/dist/cli/list.js +118 -0
  78. package/dist/cli/list.js.map +1 -0
  79. package/dist/cli/loader.d.ts +24 -0
  80. package/dist/cli/loader.js +74 -0
  81. package/dist/cli/loader.js.map +1 -0
  82. package/dist/cli/main.d.ts +2 -0
  83. package/dist/cli/main.js +6 -0
  84. package/dist/cli/main.js.map +1 -0
  85. package/dist/cli/policy/intercept.d.ts +34 -0
  86. package/dist/cli/policy/intercept.js +172 -0
  87. package/dist/cli/policy/intercept.js.map +1 -0
  88. package/dist/cli/remove/index.d.ts +18 -0
  89. package/dist/cli/remove/index.js +95 -0
  90. package/dist/cli/remove/index.js.map +1 -0
  91. package/dist/cli/remove/mutate.d.ts +9 -0
  92. package/dist/cli/remove/mutate.js +68 -0
  93. package/dist/cli/remove/mutate.js.map +1 -0
  94. package/dist/cli/validate/checks.d.ts +23 -0
  95. package/dist/cli/validate/checks.js +253 -0
  96. package/dist/cli/validate/checks.js.map +1 -0
  97. package/dist/cli/validate/index.d.ts +18 -0
  98. package/dist/cli/validate/index.js +50 -0
  99. package/dist/cli/validate/index.js.map +1 -0
  100. package/dist/cli/validate/types.d.ts +7 -0
  101. package/dist/cli/validate/types.js +5 -0
  102. package/dist/cli/validate/types.js.map +1 -0
  103. package/dist/index.d.ts +15 -0
  104. package/dist/index.js +16 -0
  105. package/dist/index.js.map +1 -0
  106. package/dist/io/atomic-write.d.ts +8 -0
  107. package/dist/io/atomic-write.js +30 -0
  108. package/dist/io/atomic-write.js.map +1 -0
  109. package/dist/io/harness-lock.d.ts +33 -0
  110. package/dist/io/harness-lock.js +260 -0
  111. package/dist/io/harness-lock.js.map +1 -0
  112. package/dist/io/last-apply.d.ts +20 -0
  113. package/dist/io/last-apply.js +123 -0
  114. package/dist/io/last-apply.js.map +1 -0
  115. package/dist/io/lock.d.ts +11 -0
  116. package/dist/io/lock.js +33 -0
  117. package/dist/io/lock.js.map +1 -0
  118. package/dist/io/patch.d.ts +10 -0
  119. package/dist/io/patch.js +8 -0
  120. package/dist/io/patch.js.map +1 -0
  121. package/dist/io/restart-hints.d.ts +5 -0
  122. package/dist/io/restart-hints.js +59 -0
  123. package/dist/io/restart-hints.js.map +1 -0
  124. package/dist/io/three-state.d.ts +7 -0
  125. package/dist/io/three-state.js +20 -0
  126. package/dist/io/three-state.js.map +1 -0
  127. package/dist/io/validate-before-write.d.ts +12 -0
  128. package/dist/io/validate-before-write.js +23 -0
  129. package/dist/io/validate-before-write.js.map +1 -0
  130. package/dist/overrides/index.d.ts +2 -0
  131. package/dist/overrides/index.js +3 -0
  132. package/dist/overrides/index.js.map +1 -0
  133. package/dist/overrides/machines.d.ts +12 -0
  134. package/dist/overrides/machines.js +46 -0
  135. package/dist/overrides/machines.js.map +1 -0
  136. package/dist/overrides/merge.d.ts +6 -0
  137. package/dist/overrides/merge.js +173 -0
  138. package/dist/overrides/merge.js.map +1 -0
  139. package/dist/policies/duration.d.ts +5 -0
  140. package/dist/policies/duration.js +50 -0
  141. package/dist/policies/duration.js.map +1 -0
  142. package/dist/policies/extract.d.ts +50 -0
  143. package/dist/policies/extract.js +190 -0
  144. package/dist/policies/extract.js.map +1 -0
  145. package/dist/policies/index.d.ts +5 -0
  146. package/dist/policies/index.js +6 -0
  147. package/dist/policies/index.js.map +1 -0
  148. package/dist/policies/ledger-client.d.ts +39 -0
  149. package/dist/policies/ledger-client.js +378 -0
  150. package/dist/policies/ledger-client.js.map +1 -0
  151. package/dist/policies/requires.d.ts +44 -0
  152. package/dist/policies/requires.js +146 -0
  153. package/dist/policies/requires.js.map +1 -0
  154. package/dist/policies/timestamp.d.ts +14 -0
  155. package/dist/policies/timestamp.js +36 -0
  156. package/dist/policies/timestamp.js.map +1 -0
  157. package/dist/probes/mcp.d.ts +29 -0
  158. package/dist/probes/mcp.js +226 -0
  159. package/dist/probes/mcp.js.map +1 -0
  160. package/dist/probes/memory.d.ts +24 -0
  161. package/dist/probes/memory.js +89 -0
  162. package/dist/probes/memory.js.map +1 -0
  163. package/dist/runtime/index.d.ts +3 -0
  164. package/dist/runtime/index.js +4 -0
  165. package/dist/runtime/index.js.map +1 -0
  166. package/dist/runtime/intercept.d.ts +53 -0
  167. package/dist/runtime/intercept.js +181 -0
  168. package/dist/runtime/intercept.js.map +1 -0
  169. package/dist/runtime/ledger-record.d.ts +43 -0
  170. package/dist/runtime/ledger-record.js +239 -0
  171. package/dist/runtime/ledger-record.js.map +1 -0
  172. package/dist/runtime/session-id.d.ts +10 -0
  173. package/dist/runtime/session-id.js +37 -0
  174. package/dist/runtime/session-id.js.map +1 -0
  175. package/dist/schema/extract.d.ts +5 -0
  176. package/dist/schema/extract.js +23 -0
  177. package/dist/schema/extract.js.map +1 -0
  178. package/dist/schema/grounding.d.ts +65 -0
  179. package/dist/schema/grounding.js +21 -0
  180. package/dist/schema/grounding.js.map +1 -0
  181. package/dist/schema/hooks.d.ts +86 -0
  182. package/dist/schema/hooks.js +42 -0
  183. package/dist/schema/hooks.js.map +1 -0
  184. package/dist/schema/index.d.ts +961 -0
  185. package/dist/schema/index.js +55 -0
  186. package/dist/schema/index.js.map +1 -0
  187. package/dist/schema/memory.d.ts +131 -0
  188. package/dist/schema/memory.js +38 -0
  189. package/dist/schema/memory.js.map +1 -0
  190. package/dist/schema/policies.d.ts +412 -0
  191. package/dist/schema/policies.js +53 -0
  192. package/dist/schema/policies.js.map +1 -0
  193. package/dist/schema/requires.d.ts +115 -0
  194. package/dist/schema/requires.js +57 -0
  195. package/dist/schema/requires.js.map +1 -0
  196. package/dist/schema/tools.d.ts +283 -0
  197. package/dist/schema/tools.js +66 -0
  198. package/dist/schema/tools.js.map +1 -0
  199. package/package.json +63 -0
@@ -0,0 +1,29 @@
1
+ import type { McpServer } from "../schema/index.js";
2
+ export type McpProbeOutcome = {
3
+ kind: "healthy";
4
+ latencyMs: number;
5
+ } | {
6
+ kind: "error";
7
+ latencyMs: number;
8
+ message: string;
9
+ } | {
10
+ kind: "missing-verb";
11
+ } | {
12
+ kind: "disabled";
13
+ };
14
+ export interface McpProbeResult {
15
+ name: string;
16
+ outcome: McpProbeOutcome;
17
+ }
18
+ export interface McpProbe {
19
+ call(server: McpServer): Promise<McpProbeResult>;
20
+ }
21
+ export interface RealMcpProbeOptions {
22
+ cwd?: string;
23
+ }
24
+ export declare class RealMcpProbe implements McpProbe {
25
+ private readonly opts;
26
+ constructor(opts?: RealMcpProbeOptions);
27
+ call(server: McpServer): Promise<McpProbeResult>;
28
+ }
29
+ export declare function probeAll(servers: McpServer[], probe: McpProbe): Promise<McpProbeResult[]>;
@@ -0,0 +1,226 @@
1
+ import { spawn } from "node:child_process";
2
+ function expandHomePath(p) {
3
+ if (p === "~")
4
+ return process.env.HOME ?? "";
5
+ if (p.startsWith("~/"))
6
+ return `${process.env.HOME ?? ""}/${p.slice(2)}`;
7
+ return p;
8
+ }
9
+ function commandToArgs(server) {
10
+ const list = Array.isArray(server.command)
11
+ ? server.command
12
+ : server.command.trim().split(/\s+/);
13
+ const exe = expandHomePath(list[0] ?? "");
14
+ const args = list.slice(1).map(expandHomePath);
15
+ return { exe, args };
16
+ }
17
+ async function runRealProbe(server, opts) {
18
+ if (server.enabled === false) {
19
+ return { name: server.name, outcome: { kind: "disabled" } };
20
+ }
21
+ if (!server.health) {
22
+ return { name: server.name, outcome: { kind: "missing-verb" } };
23
+ }
24
+ const { exe, args } = commandToArgs(server);
25
+ const timeoutMs = server.health.timeout_ms ?? 5000;
26
+ const start = Date.now();
27
+ let child;
28
+ try {
29
+ child = spawn(exe, args, {
30
+ cwd: opts.cwd,
31
+ env: { ...process.env, ...(server.env ?? {}) },
32
+ stdio: ["pipe", "pipe", "pipe"],
33
+ });
34
+ }
35
+ catch (err) {
36
+ return {
37
+ name: server.name,
38
+ outcome: {
39
+ kind: "error",
40
+ latencyMs: Date.now() - start,
41
+ message: `spawn failed: ${err.message}`,
42
+ },
43
+ };
44
+ }
45
+ const pending = new Map();
46
+ let stderrBuf = "";
47
+ let stdoutBuf = "";
48
+ let processExited = false;
49
+ let exitCode = null;
50
+ let exitSignal = null;
51
+ child.stderr.on("data", (chunk) => {
52
+ stderrBuf += chunk.toString("utf8");
53
+ });
54
+ child.stdin.on("error", () => {
55
+ /* server closed stdin (EPIPE); the exit listener below handles the diagnostic */
56
+ });
57
+ child.on("exit", (code, signal) => {
58
+ processExited = true;
59
+ exitCode = code;
60
+ exitSignal = signal;
61
+ });
62
+ child.stdout.on("data", (chunk) => {
63
+ stdoutBuf += chunk.toString("utf8");
64
+ let nl = stdoutBuf.indexOf("\n");
65
+ while (nl !== -1) {
66
+ const line = stdoutBuf.slice(0, nl).trim();
67
+ stdoutBuf = stdoutBuf.slice(nl + 1);
68
+ if (line) {
69
+ try {
70
+ const msg = JSON.parse(line);
71
+ if (typeof msg.id === "number") {
72
+ const handler = pending.get(msg.id);
73
+ if (handler) {
74
+ pending.delete(msg.id);
75
+ handler.resolve(msg);
76
+ }
77
+ }
78
+ }
79
+ catch {
80
+ /* ignore non-JSON lines */
81
+ }
82
+ }
83
+ nl = stdoutBuf.indexOf("\n");
84
+ }
85
+ });
86
+ function send(id, method, params) {
87
+ return new Promise((resolve) => {
88
+ pending.set(id, { id, resolve });
89
+ try {
90
+ if (!processExited && !child.stdin.destroyed && child.stdin.writable) {
91
+ child.stdin.write(`${JSON.stringify({ jsonrpc: "2.0", id, method, params })}\n`);
92
+ }
93
+ }
94
+ catch {
95
+ /* server already closed; the waitForExit branch will resolve the race */
96
+ }
97
+ });
98
+ }
99
+ function waitForExit() {
100
+ return new Promise((resolve) => {
101
+ if (processExited)
102
+ resolve("exit");
103
+ else
104
+ child.once("exit", () => resolve("exit"));
105
+ });
106
+ }
107
+ const timers = new Set();
108
+ function timeoutPromise() {
109
+ return new Promise((resolve) => {
110
+ const t = setTimeout(() => {
111
+ timers.delete(t);
112
+ resolve("timeout");
113
+ }, timeoutMs);
114
+ t.unref();
115
+ timers.add(t);
116
+ });
117
+ }
118
+ function clearTimers() {
119
+ for (const t of timers)
120
+ clearTimeout(t);
121
+ timers.clear();
122
+ }
123
+ try {
124
+ const initResult = await Promise.race([
125
+ send(1, "initialize", {
126
+ protocolVersion: "2024-11-05",
127
+ capabilities: {},
128
+ clientInfo: { name: "harness-doctor", version: "0.4.0" },
129
+ }),
130
+ waitForExit(),
131
+ timeoutPromise(),
132
+ ]);
133
+ if (initResult === "exit") {
134
+ const trimmed = stderrBuf.trim().split("\n").pop()?.trim() || "(no stderr)";
135
+ const status = exitCode !== null ? `exit ${exitCode}` : exitSignal ? `signal ${exitSignal}` : "exited";
136
+ return {
137
+ name: server.name,
138
+ outcome: {
139
+ kind: "error",
140
+ latencyMs: Date.now() - start,
141
+ message: `process ${status}: ${trimmed}`,
142
+ },
143
+ };
144
+ }
145
+ if (initResult === "timeout") {
146
+ return {
147
+ name: server.name,
148
+ outcome: {
149
+ kind: "error",
150
+ latencyMs: Date.now() - start,
151
+ message: `initialize timed out after ${timeoutMs}ms`,
152
+ },
153
+ };
154
+ }
155
+ try {
156
+ if (!processExited && !child.stdin.destroyed && child.stdin.writable) {
157
+ child.stdin.write(`${JSON.stringify({ jsonrpc: "2.0", method: "notifications/initialized" })}\n`);
158
+ }
159
+ }
160
+ catch {
161
+ /* server already closed */
162
+ }
163
+ const verbResult = await Promise.race([
164
+ send(2, "tools/call", {
165
+ name: server.health.verb,
166
+ arguments: {},
167
+ }),
168
+ waitForExit(),
169
+ timeoutPromise(),
170
+ ]);
171
+ if (verbResult === "exit") {
172
+ const trimmed = stderrBuf.trim().split("\n").pop()?.trim() || "(no stderr)";
173
+ return {
174
+ name: server.name,
175
+ outcome: {
176
+ kind: "error",
177
+ latencyMs: Date.now() - start,
178
+ message: `process exited during ${server.health.verb}: ${trimmed}`,
179
+ },
180
+ };
181
+ }
182
+ if (verbResult === "timeout") {
183
+ return {
184
+ name: server.name,
185
+ outcome: {
186
+ kind: "error",
187
+ latencyMs: Date.now() - start,
188
+ message: `${server.health.verb} timed out after ${timeoutMs}ms`,
189
+ },
190
+ };
191
+ }
192
+ const response = verbResult;
193
+ if (response.error) {
194
+ return {
195
+ name: server.name,
196
+ outcome: {
197
+ kind: "error",
198
+ latencyMs: Date.now() - start,
199
+ message: response.error.message ?? "unknown MCP error",
200
+ },
201
+ };
202
+ }
203
+ return {
204
+ name: server.name,
205
+ outcome: { kind: "healthy", latencyMs: Date.now() - start },
206
+ };
207
+ }
208
+ finally {
209
+ clearTimers();
210
+ if (!processExited)
211
+ child.kill("SIGTERM");
212
+ }
213
+ }
214
+ export class RealMcpProbe {
215
+ opts;
216
+ constructor(opts = {}) {
217
+ this.opts = opts;
218
+ }
219
+ call(server) {
220
+ return runRealProbe(server, this.opts);
221
+ }
222
+ }
223
+ export async function probeAll(servers, probe) {
224
+ return Promise.all(servers.map((s) => probe.call(s)));
225
+ }
226
+ //# sourceMappingURL=mcp.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/probes/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AA2BhF,SAAS,cAAc,CAAC,CAAS;IAC/B,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,MAAiB;IACtC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QACxC,CAAC,CAAC,MAAM,CAAC,OAAO;QAChB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC/C,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,MAAiB,EACjB,IAAyB;IAEzB,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEzB,IAAI,KAAqC,CAAC;IAC1C,IAAI,CAAC;QACH,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;YACvB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE;YAC9C,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE;gBACP,IAAI,EAAE,OAAO;gBACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC7B,OAAO,EAAE,iBAAkB,GAAa,CAAC,OAAO,EAAE;aACnD;SACF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;IACnD,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,UAAU,GAA0B,IAAI,CAAC;IAE7C,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACxC,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAC3B,iFAAiF;IACnF,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAChC,aAAa,GAAG,IAAI,CAAC;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,UAAU,GAAG,MAAM,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACxC,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3C,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACpC,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;oBAChD,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;wBAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBACpC,IAAI,OAAO,EAAE,CAAC;4BACZ,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;4BACvB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;wBACvB,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,2BAA2B;gBAC7B,CAAC;YACH,CAAC;YACD,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,SAAS,IAAI,CAAC,EAAU,EAAE,MAAc,EAAE,MAA+B;QACvE,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YACtC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACjC,IAAI,CAAC;gBACH,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACrE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;gBACnF,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,yEAAyE;YAC3E,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,WAAW;QAClB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,aAAa;gBAAE,OAAO,CAAC,MAAM,CAAC,CAAC;;gBAC9B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,SAAS,cAAc;QACrB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE;gBACxB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACjB,OAAO,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,CAAC,CAAC,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,SAAS,WAAW;QAClB,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,YAAY,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YACpC,IAAI,CAAC,CAAC,EAAE,YAAY,EAAE;gBACpB,eAAe,EAAE,YAAY;gBAC7B,YAAY,EAAE,EAAE;gBAChB,UAAU,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE;aACzD,CAAC;YACF,WAAW,EAAE;YACb,cAAc,EAAE;SACjB,CAAC,CAAC;QACH,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,aAAa,CAAC;YAC5E,MAAM,MAAM,GACV,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,QAAQ,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,UAAU,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC1F,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,OAAO;oBACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;oBAC7B,OAAO,EAAE,WAAW,MAAM,KAAK,OAAO,EAAE;iBACzC;aACF,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,OAAO;oBACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;oBAC7B,OAAO,EAAE,8BAA8B,SAAS,IAAI;iBACrD;aACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACrE,KAAK,CAAC,KAAK,CAAC,KAAK,CACf,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,IAAI,CAC/E,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YACpC,IAAI,CAAC,CAAC,EAAE,YAAY,EAAE;gBACpB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;gBACxB,SAAS,EAAE,EAAE;aACd,CAAC;YACF,WAAW,EAAE;YACb,cAAc,EAAE;SACjB,CAAC,CAAC;QACH,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,aAAa,CAAC;YAC5E,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,OAAO;oBACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;oBAC7B,OAAO,EAAE,yBAAyB,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE;iBACnE;aACF,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,OAAO;oBACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;oBAC7B,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,oBAAoB,SAAS,IAAI;iBAChE;aACF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,UAAgE,CAAC;QAClF,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,OAAO;oBACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;oBAC7B,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,IAAI,mBAAmB;iBACvD;aACF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE;SAC5D,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,WAAW,EAAE,CAAC;QACd,IAAI,CAAC,aAAa;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,OAAO,YAAY;IACM;IAA7B,YAA6B,OAA4B,EAAE;QAA9B,SAAI,GAAJ,IAAI,CAA0B;IAAG,CAAC;IAC/D,IAAI,CAAC,MAAiB;QACpB,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAoB,EACpB,KAAe;IAEf,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC"}
@@ -0,0 +1,24 @@
1
+ import type { Manifest } from "../schema/index.js";
2
+ export interface StaleMemory {
3
+ path: string;
4
+ lastTouched: Date;
5
+ ageDays: number;
6
+ }
7
+ export interface MemoryReport {
8
+ directories: Array<{
9
+ path: string;
10
+ scope: string;
11
+ exists: boolean;
12
+ }>;
13
+ routerExecutable: {
14
+ path: string;
15
+ exists: boolean;
16
+ } | null;
17
+ staleMemories: StaleMemory[];
18
+ }
19
+ export interface MemoryOptions {
20
+ homeDir?: string;
21
+ project?: string;
22
+ now?: Date;
23
+ }
24
+ export declare function inspectMemory(manifest: Manifest, opts?: MemoryOptions): MemoryReport;
@@ -0,0 +1,89 @@
1
+ import * as fs from "node:fs";
2
+ import * as os from "node:os";
3
+ import * as path from "node:path";
4
+ function expandHome(p, home) {
5
+ if (p === "~")
6
+ return home;
7
+ if (p.startsWith("~/"))
8
+ return path.join(home, p.slice(2));
9
+ return p;
10
+ }
11
+ function substituteProject(p, project) {
12
+ if (!project)
13
+ return p;
14
+ return p.replace(/\{project\}/g, project);
15
+ }
16
+ function findMarkdownFiles(root) {
17
+ if (!fs.existsSync(root))
18
+ return [];
19
+ const stack = [root];
20
+ const out = [];
21
+ while (stack.length > 0) {
22
+ const dir = stack.pop();
23
+ let entries = [];
24
+ try {
25
+ entries = fs.readdirSync(dir, { withFileTypes: true });
26
+ }
27
+ catch {
28
+ continue;
29
+ }
30
+ for (const e of entries) {
31
+ const full = path.join(dir, e.name);
32
+ if (e.isDirectory())
33
+ stack.push(full);
34
+ else if (e.isFile() && e.name.endsWith(".md"))
35
+ out.push(full);
36
+ }
37
+ }
38
+ return out;
39
+ }
40
+ export function inspectMemory(manifest, opts = {}) {
41
+ const home = opts.homeDir ?? os.homedir();
42
+ const now = opts.now ?? new Date();
43
+ const stalenessDays = manifest.memory.retention.staleness_days;
44
+ const cutoffMs = now.getTime() - stalenessDays * 86400000;
45
+ const directories = manifest.memory.directories.map((d) => {
46
+ const expanded = expandHome(substituteProject(d.path, opts.project), home);
47
+ return {
48
+ path: expanded,
49
+ scope: d.scope,
50
+ exists: fs.existsSync(expanded),
51
+ };
52
+ });
53
+ let routerExecutable = null;
54
+ if (manifest.memory.router) {
55
+ const cmd = manifest.memory.router.command;
56
+ const scriptPath = cmd.find((arg) => path.isAbsolute(arg) || arg.startsWith("~/")) ?? cmd[0];
57
+ if (scriptPath) {
58
+ const candidate = expandHome(scriptPath, home);
59
+ routerExecutable = {
60
+ path: candidate,
61
+ exists: fs.existsSync(candidate),
62
+ };
63
+ }
64
+ }
65
+ const staleMemories = [];
66
+ for (const dir of directories) {
67
+ if (!dir.exists)
68
+ continue;
69
+ for (const file of findMarkdownFiles(dir.path)) {
70
+ let stat;
71
+ try {
72
+ stat = fs.statSync(file);
73
+ }
74
+ catch {
75
+ continue;
76
+ }
77
+ if (stat.mtimeMs < cutoffMs) {
78
+ staleMemories.push({
79
+ path: file,
80
+ lastTouched: stat.mtime,
81
+ ageDays: Math.floor((now.getTime() - stat.mtimeMs) / 86400000),
82
+ });
83
+ }
84
+ }
85
+ }
86
+ staleMemories.sort((a, b) => a.lastTouched.getTime() - b.lastTouched.getTime());
87
+ return { directories, routerExecutable, staleMemories };
88
+ }
89
+ //# sourceMappingURL=memory.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"memory.js","sourceRoot":"","sources":["../../src/probes/memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAqBlC,SAAS,UAAU,CAAC,CAAS,EAAE,IAAY;IACzC,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAS,EAAE,OAA2B;IAC/D,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,CAAC;IACvB,OAAO,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,KAAK,GAAa,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QACzB,IAAI,OAAO,GAAgB,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,CAAC,WAAW,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACjC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAkB,EAAE,OAAsB,EAAE;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC;IAC/D,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,aAAa,GAAG,QAAQ,CAAC;IAE1D,MAAM,WAAW,GAAgC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACrF,MAAM,QAAQ,GAAG,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3E,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;SAChC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,gBAAgB,GAAqC,IAAI,CAAC;IAC9D,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC3C,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7F,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC/C,gBAAgB,GAAG;gBACjB,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;aACjC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAkB,EAAE,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,SAAS;QAC1B,KAAK,MAAM,IAAI,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,IAAI,IAAc,CAAC;YACnB,IAAI,CAAC;gBACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,OAAO,GAAG,QAAQ,EAAE,CAAC;gBAC5B,aAAa,CAAC,IAAI,CAAC;oBACjB,IAAI,EAAE,IAAI;oBACV,WAAW,EAAE,IAAI,CAAC,KAAK;oBACvB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;iBAC/D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAEhF,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC;AAC1D,CAAC"}
@@ -0,0 +1,3 @@
1
+ export { intercept, type ClaudeDenyJson, type InterceptOptions, type InterceptResult, type LedgerClient, type PolicyDecision, type PolicyOutcome, type ToolEvent, } from "./intercept.js";
2
+ export { recordPolicyDecision, payloadFromDecision, encodeLedgerContent, decodeLedgerContent, decisionSortKey, type LedgerRecordOptions, type PolicyDecisionPayload, } from "./ledger-record.js";
3
+ export { resolveSessionId } from "./session-id.js";
@@ -0,0 +1,4 @@
1
+ export { intercept, } from "./intercept.js";
2
+ export { recordPolicyDecision, payloadFromDecision, encodeLedgerContent, decodeLedgerContent, decisionSortKey, } from "./ledger-record.js";
3
+ export { resolveSessionId } from "./session-id.js";
4
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,GAQV,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,GAGhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC"}
@@ -0,0 +1,53 @@
1
+ import { type ExtractBuiltins, type LedgerQueryResult } from "../policies/index.js";
2
+ import type { Manifest } from "../schema/index.js";
3
+ export interface ToolEvent {
4
+ hook_event_name?: string;
5
+ tool_name?: string;
6
+ tool_input?: unknown;
7
+ session_id?: string;
8
+ cwd?: string;
9
+ [key: string]: unknown;
10
+ }
11
+ export type PolicyOutcome = "allow" | "deny" | "warn-degraded";
12
+ export interface PolicyDecision {
13
+ policyName: string;
14
+ enforcement: "block" | "warn";
15
+ outcome: PolicyOutcome;
16
+ reason: string;
17
+ extractValues: Record<string, string>;
18
+ ledgerTag: string;
19
+ requiresEval?: {
20
+ matchedCount: number;
21
+ reason: string;
22
+ };
23
+ evaluatedAt: string;
24
+ }
25
+ export interface ClaudeDenyJson {
26
+ decision: "deny";
27
+ reason: string;
28
+ }
29
+ export interface InterceptResult {
30
+ decisions: PolicyDecision[];
31
+ /** non-null iff at least one matching policy with enforcement=block denied. */
32
+ blockJson: ClaudeDenyJson | null;
33
+ }
34
+ export interface LedgerClient {
35
+ query(tag: string, sessionId: string, timeoutMs?: number): Promise<LedgerQueryResult>;
36
+ /**
37
+ * Record a `policy_decision` entry to the evidence ledger. Implementations
38
+ * MUST be best-effort: failures bubble back as `null`/false so a degraded
39
+ * audit log doesn't itself block the tool call.
40
+ */
41
+ record(decision: PolicyDecision, sessionId: string): Promise<void>;
42
+ }
43
+ export interface InterceptOptions {
44
+ manifest: Manifest;
45
+ event: ToolEvent;
46
+ ledger: LedgerClient;
47
+ builtins: ExtractBuiltins;
48
+ /** Timeout passed through to the ledger client. */
49
+ ledgerTimeoutMs?: number;
50
+ /** Override "now" for deterministic tests. */
51
+ now?: Date;
52
+ }
53
+ export declare function intercept(options: InterceptOptions): Promise<InterceptResult>;
@@ -0,0 +1,181 @@
1
+ // Phase 4 #5 — runtime hook interceptor + policy_decision audit log.
2
+ //
3
+ // Pure orchestration: takes a parsed event + a ledger client + the manifest,
4
+ // runs every matching policy through the Phase 4 #1/#2/#3 pipeline, returns
5
+ // the decisions and the Claude Code deny-JSON (or null when all allow).
6
+ // Side effects (stdin, stdout, ledger I/O) live in the thin CLI entrypoint
7
+ // that wraps this.
8
+ import { evaluateExtract, evaluateRequires, parseDurationSeconds, substituteTemplate, } from "../policies/index.js";
9
+ import { resolveSessionId } from "./session-id.js";
10
+ function policyMatchesEvent(policy, event) {
11
+ if (policy.trigger.event !== event.hook_event_name)
12
+ return false;
13
+ if (policy.trigger.match !== undefined) {
14
+ if (typeof event.tool_name !== "string")
15
+ return false;
16
+ if (!event.tool_name.includes(policy.trigger.match))
17
+ return false;
18
+ }
19
+ if (policy.trigger.bash_match !== undefined) {
20
+ const args = event.tool_input;
21
+ if (!args || typeof args.command !== "string")
22
+ return false;
23
+ let re;
24
+ try {
25
+ re = new RegExp(policy.trigger.bash_match);
26
+ }
27
+ catch {
28
+ return false;
29
+ }
30
+ if (!re.test(args.command))
31
+ return false;
32
+ }
33
+ return true;
34
+ }
35
+ function buildEventContext(event) {
36
+ return {
37
+ toolArgs: event.tool_input,
38
+ event,
39
+ session: { id: event.session_id ?? "" },
40
+ git: {},
41
+ };
42
+ }
43
+ async function evaluateOnePolicy(policy, options) {
44
+ const evaluatedAt = (options.now ?? new Date()).toISOString();
45
+ const ctx = buildEventContext(options.event);
46
+ const extract = evaluateExtract(policy.trigger.extract ?? {}, ctx, options.builtins);
47
+ const missingExtracts = extract.traceData
48
+ .filter((t) => t.source === "missing")
49
+ .map((t) => t.var);
50
+ const sub = substituteTemplate(policy.requires.ledger_tag, extract.values);
51
+ const ledgerTag = sub.result;
52
+ const unresolved = [...missingExtracts, ...sub.missing];
53
+ if (unresolved.length > 0) {
54
+ return {
55
+ policyName: policy.name,
56
+ enforcement: policy.enforcement,
57
+ outcome: "warn-degraded",
58
+ reason: `template variables unresolved: ${unresolved.join(", ")}`,
59
+ extractValues: extract.values,
60
+ ledgerTag,
61
+ evaluatedAt,
62
+ };
63
+ }
64
+ const sessionId = resolveSessionId(options.event.session_id);
65
+ let queryResult;
66
+ try {
67
+ queryResult = await options.ledger.query(ledgerTag, sessionId, options.ledgerTimeoutMs);
68
+ }
69
+ catch (err) {
70
+ queryResult = {
71
+ kind: "degraded",
72
+ reason: `ledger query threw: ${err.message}`,
73
+ };
74
+ }
75
+ if (queryResult.kind === "degraded") {
76
+ return {
77
+ policyName: policy.name,
78
+ enforcement: policy.enforcement,
79
+ outcome: "warn-degraded",
80
+ reason: queryResult.reason,
81
+ extractValues: extract.values,
82
+ ledgerTag,
83
+ evaluatedAt,
84
+ };
85
+ }
86
+ // Pre-validate `within` against the runtime parser so a manifest that
87
+ // bypassed `harness validate` doesn't throw uncaught.
88
+ if (policy.requires.within !== undefined) {
89
+ try {
90
+ parseDurationSeconds(policy.requires.within);
91
+ }
92
+ catch {
93
+ return {
94
+ policyName: policy.name,
95
+ enforcement: policy.enforcement,
96
+ outcome: "warn-degraded",
97
+ reason: `invalid within: ${policy.requires.within}`,
98
+ extractValues: extract.values,
99
+ ledgerTag,
100
+ evaluatedAt,
101
+ };
102
+ }
103
+ }
104
+ const evalOpts = options.now ? { now: options.now } : {};
105
+ const filtered = filterEntriesByTag(queryResult.entries, ledgerTag);
106
+ let evaluation;
107
+ try {
108
+ evaluation = evaluateRequires({ ...policy.requires, ledger_tag: ledgerTag }, filtered, evalOpts);
109
+ }
110
+ catch (err) {
111
+ return {
112
+ policyName: policy.name,
113
+ enforcement: policy.enforcement,
114
+ outcome: "warn-degraded",
115
+ reason: `requires eval threw: ${err.message}`,
116
+ extractValues: extract.values,
117
+ ledgerTag,
118
+ evaluatedAt,
119
+ };
120
+ }
121
+ const outcome = evaluation.allowed ? "allow" : "deny";
122
+ return {
123
+ policyName: policy.name,
124
+ enforcement: policy.enforcement,
125
+ outcome,
126
+ reason: evaluation.reason,
127
+ extractValues: extract.values,
128
+ ledgerTag,
129
+ requiresEval: {
130
+ matchedCount: evaluation.matchedCount,
131
+ reason: evaluation.reason,
132
+ },
133
+ evaluatedAt,
134
+ };
135
+ }
136
+ function filterEntriesByTag(entries, tag) {
137
+ // The ledger client returns the entire session's entries; filter to those
138
+ // whose content/source matches the substituted tag. evaluateRequires also
139
+ // does a substring match, but pre-filtering here keeps the trace quieter
140
+ // and avoids the requires evaluator iterating unrelated session entries.
141
+ //
142
+ // Phase 5 #4 — also drop `policy_decision` rows so a past audit
143
+ // payload doesn't incidentally match the same tag the decision was
144
+ // about (the substring-pollution bug from PR #39's dogfood). The
145
+ // requires evaluator's entryMatches has the same guard, but
146
+ // pre-filtering keeps matchedCount honest in the trace data.
147
+ return entries.filter((e) => e.type !== "policy_decision" &&
148
+ // Legacy backstop for pre-Phase-5-#4 rows: they were stored as
149
+ // type='fact' but carry the `policy_decision:` content prefix.
150
+ // Drop them at the same gate so a user upgrading harness without
151
+ // flushing their dev ledger doesn't keep paying the pollution
152
+ // tax. New rows are caught by the type check above.
153
+ !e.content.startsWith("policy_decision:") &&
154
+ (e.content.includes(tag) || (e.source !== undefined && e.source.includes(tag))));
155
+ }
156
+ export async function intercept(options) {
157
+ const matching = options.manifest.policies.filter((p) => policyMatchesEvent(p, options.event));
158
+ const decisions = [];
159
+ for (const policy of matching) {
160
+ const decision = await evaluateOnePolicy(policy, options);
161
+ decisions.push(decision);
162
+ try {
163
+ await options.ledger.record(decision, resolveSessionId(options.event.session_id));
164
+ }
165
+ catch {
166
+ /* audit-write failure must not block; the decision is still applied. */
167
+ }
168
+ }
169
+ const blocking = decisions.find((d) => d.enforcement === "block" && d.outcome === "deny");
170
+ if (blocking) {
171
+ return {
172
+ decisions,
173
+ blockJson: {
174
+ decision: "deny",
175
+ reason: `${blocking.policyName}: ${blocking.reason}`,
176
+ },
177
+ };
178
+ }
179
+ return { decisions, blockJson: null };
180
+ }
181
+ //# sourceMappingURL=intercept.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"intercept.js","sourceRoot":"","sources":["../../src/runtime/intercept.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,wEAAwE;AACxE,2EAA2E;AAC3E,mBAAmB;AAEnB,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,GAOnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAwDnD,SAAS,kBAAkB,CAAC,MAAc,EAAE,KAAgB;IAC1D,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,eAAe;QAAE,OAAO,KAAK,CAAC;IACjE,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACtD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,UAA+C,CAAC;QACnE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5D,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,EAAE,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAgB;IACzC,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,UAAU;QAC1B,KAAK;QACL,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE;QACvC,GAAG,EAAE,EAAE;KACR,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,MAAc,EACd,OAAyB;IAEzB,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9D,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,eAAe,CAC7B,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,EAC5B,GAAG,EACH,OAAO,CAAC,QAAQ,CACjB,CAAC;IACF,MAAM,eAAe,GAAG,OAAO,CAAC,SAAS;SACtC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;SACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACrB,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC;IAC7B,MAAM,UAAU,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAExD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,kCAAkC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACjE,aAAa,EAAE,OAAO,CAAC,MAAM;YAC7B,SAAS;YACT,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,WAA8B,CAAC;IACnC,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CACtC,SAAS,EACT,SAAS,EACT,OAAO,CAAC,eAAe,CACxB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,GAAG;YACZ,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,uBAAwB,GAAa,CAAC,OAAO,EAAE;SACxD,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACpC,OAAO;YACL,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,aAAa,EAAE,OAAO,CAAC,MAAM;YAC7B,SAAS;YACT,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,sDAAsD;IACtD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,OAAO,EAAE,eAAe;gBACxB,MAAM,EAAE,mBAAmB,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE;gBACnD,aAAa,EAAE,OAAO,CAAC,MAAM;gBAC7B,SAAS;gBACT,WAAW;aACZ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAA4B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACpE,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,UAAU,GAAG,gBAAgB,CAC3B,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,EAC7C,QAAQ,EACR,QAAQ,CACT,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,wBAAyB,GAAa,CAAC,OAAO,EAAE;YACxD,aAAa,EAAE,OAAO,CAAC,MAAM;YAC7B,SAAS;YACT,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAkB,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IACrE,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,IAAI;QACvB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,OAAO;QACP,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,aAAa,EAAE,OAAO,CAAC,MAAM;QAC7B,SAAS;QACT,YAAY,EAAE;YACZ,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B;QACD,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAsB,EAAE,GAAW;IAC7D,0EAA0E;IAC1E,0EAA0E;IAC1E,yEAAyE;IACzE,yEAAyE;IACzE,EAAE;IACF,gEAAgE;IAChE,mEAAmE;IACnE,iEAAiE;IACjE,4DAA4D;IAC5D,6DAA6D;IAC7D,OAAO,OAAO,CAAC,MAAM,CACnB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,IAAI,KAAK,iBAAiB;QAC5B,+DAA+D;QAC/D,+DAA+D;QAC/D,iEAAiE;QACjE,8DAA8D;QAC9D,oDAAoD;QACpD,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC;QACzC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAClF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAyB;IAEzB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACtD,kBAAkB,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CACrC,CAAC;IACF,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1D,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QACpF,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,CACzD,CAAC;IACF,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,SAAS;YACT,SAAS,EAAE;gBACT,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,GAAG,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,MAAM,EAAE;aACrD;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACxC,CAAC"}