@lannguyensi/harness 0.5.0

package/dist/schema/policies.js

@@ -0,0 +1,53 @@
+import { z } from "zod";
+import { ExtractMapSchema } from "./extract.js";
+import { HookEventSchema } from "./hooks.js";
+import { RequiresSchema, isBuiltinVariable, referencedVariables } from "./requires.js";
+export const PolicyTriggerSchema = z
+    .object({
+    event: HookEventSchema,
+    match: z.string().min(1).optional(),
+    path_match: z.string().min(1).optional(),
+    bash_match: z.string().min(1).optional(),
+    extract: ExtractMapSchema.optional(),
+})
+    .strict();
+export const PolicyEnforcementSchema = z.enum(["block", "warn"]);
+export const PolicySchema = z
+    .object({
+    name: z.string().min(1),
+    description: z.string().min(1),
+    trigger: PolicyTriggerSchema,
+    requires: RequiresSchema,
+    hook: z.string().min(1),
+    enforcement: PolicyEnforcementSchema,
+})
+    .strict()
+    .superRefine((policy, ctx) => {
+    const refs = referencedVariables(policy.requires.ledger_tag);
+    const declared = new Set(Object.keys(policy.trigger.extract ?? {}));
+    for (const v of refs) {
+        if (isBuiltinVariable(v))
+            continue;
+        if (!declared.has(v)) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["requires", "ledger_tag"],
+                message: `requires.ledger_tag references \${${v}} but no matching trigger.extract entry was declared`,
+            });
+        }
+    }
+});
+export const PoliciesSchema = z.array(PolicySchema).superRefine((policies, ctx) => {
+    const seen = new Set();
+    policies.forEach((p, i) => {
+        if (seen.has(p.name)) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: [i, "name"],
+                message: `duplicate policy name: ${p.name}`,
+            });
+        }
+        seen.add(p.name);
+    });
+});
+//# sourceMappingURL=policies.js.map

package/dist/schema/policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.js","sourceRoot":"","sources":["../../src/schema/policies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEvF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,KAAK,EAAE,eAAe;IACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,OAAO,EAAE,gBAAgB,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAEjE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,mBAAmB;IAC5B,QAAQ,EAAE,cAAc;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,uBAAuB;CACrC,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IAC3B,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IACpE,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,iBAAiB,CAAC,CAAC,CAAC;YAAE,SAAS;QACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC;gBAChC,OAAO,EAAE,qCAAqC,CAAC,sDAAsD;aACtG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAChF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACxB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC;gBACjB,OAAO,EAAE,0BAA0B,CAAC,CAAC,IAAI,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/schema/requires.d.ts

@@ -0,0 +1,115 @@
+import { z } from "zod";
+export declare const DurationSchema: z.ZodEffects<z.ZodString, string, string>;
+export declare const CountSchema: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+    min: z.ZodOptional<z.ZodNumber>;
+    max: z.ZodOptional<z.ZodNumber>;
+    exact: z.ZodOptional<z.ZodNumber>;
+}, "strict", z.ZodTypeAny, {
+    exact?: number | undefined;
+    min?: number | undefined;
+    max?: number | undefined;
+}, {
+    exact?: number | undefined;
+    min?: number | undefined;
+    max?: number | undefined;
+}>, {
+    exact?: number | undefined;
+    min?: number | undefined;
+    max?: number | undefined;
+}, {
+    exact?: number | undefined;
+    min?: number | undefined;
+    max?: number | undefined;
+}>, {
+    exact?: number | undefined;
+    min?: number | undefined;
+    max?: number | undefined;
+}, {
+    exact?: number | undefined;
+    min?: number | undefined;
+    max?: number | undefined;
+}>, {
+    exact?: number | undefined;
+    min?: number | undefined;
+    max?: number | undefined;
+}, {
+    exact?: number | undefined;
+    min?: number | undefined;
+    max?: number | undefined;
+}>, {
+    exact?: number | undefined;
+    min?: number | undefined;
+    max?: number | undefined;
+}, {
+    exact?: number | undefined;
+    min?: number | undefined;
+    max?: number | undefined;
+}>;
+export declare const RequiresSchema: z.ZodObject<{
+    ledger_tag: z.ZodString;
+    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+        min: z.ZodOptional<z.ZodNumber>;
+        max: z.ZodOptional<z.ZodNumber>;
+        exact: z.ZodOptional<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        exact?: number | undefined;
+        min?: number | undefined;
+        max?: number | undefined;
+    }, {
+        exact?: number | undefined;
+        min?: number | undefined;
+        max?: number | undefined;
+    }>, {
+        exact?: number | undefined;
+        min?: number | undefined;
+        max?: number | undefined;
+    }, {
+        exact?: number | undefined;
+        min?: number | undefined;
+        max?: number | undefined;
+    }>, {
+        exact?: number | undefined;
+        min?: number | undefined;
+        max?: number | undefined;
+    }, {
+        exact?: number | undefined;
+        min?: number | undefined;
+        max?: number | undefined;
+    }>, {
+        exact?: number | undefined;
+        min?: number | undefined;
+        max?: number | undefined;
+    }, {
+        exact?: number | undefined;
+        min?: number | undefined;
+        max?: number | undefined;
+    }>, {
+        exact?: number | undefined;
+        min?: number | undefined;
+        max?: number | undefined;
+    }, {
+        exact?: number | undefined;
+        min?: number | undefined;
+        max?: number | undefined;
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    ledger_tag: string;
+    within?: string | undefined;
+    count?: {
+        exact?: number | undefined;
+        min?: number | undefined;
+        max?: number | undefined;
+    } | undefined;
+}, {
+    ledger_tag: string;
+    within?: string | undefined;
+    count?: {
+        exact?: number | undefined;
+        min?: number | undefined;
+        max?: number | undefined;
+    } | undefined;
+}>;
+export type Requires = z.infer<typeof RequiresSchema>;
+export declare function referencedVariables(template: string): string[];
+export declare function isBuiltinVariable(name: string): boolean;

package/dist/schema/requires.js

@@ -0,0 +1,57 @@
+import { z } from "zod";
+import { InvalidDurationError, parseDurationSeconds, } from "../policies/duration.js";
+export const DurationSchema = z.string().min(1).superRefine((v, ctx) => {
+    try {
+        parseDurationSeconds(v);
+    }
+    catch (err) {
+        if (err instanceof InvalidDurationError) {
+            ctx.addIssue({ code: z.ZodIssueCode.custom, message: err.message });
+            return;
+        }
+        throw err;
+    }
+});
+export const CountSchema = z
+    .object({
+    min: z.number().int().nonnegative().optional(),
+    max: z.number().int().positive().optional(),
+    exact: z.number().int().positive().optional(),
+})
+    .strict()
+    .refine((c) => c.min !== undefined || c.max !== undefined || c.exact !== undefined, {
+    message: "count must declare at least one of min, max, exact",
+})
+    .refine((c) => !(c.exact !== undefined && (c.min !== undefined || c.max !== undefined)), { message: "count.exact may not coexist with min or max" })
+    .refine((c) => c.min === undefined || c.max === undefined || c.min <= c.max, { message: "count.min must be <= count.max" })
+    .refine((c) => c.min !== 0, {
+    message: "count.min: 0 is a no-op; remove the field or use a different policy",
+    path: ["min"],
+});
+export const RequiresSchema = z
+    .object({
+    ledger_tag: z.string().min(1),
+    within: DurationSchema.optional(),
+    count: CountSchema.optional(),
+})
+    .strict();
+const BUILTIN_VARIABLES = new Set([
+    "SESSION_ID",
+    "REPO",
+    "BRANCH",
+    "TOOL_NAME",
+    "CWD",
+]);
+const VAR_REF_RE = /\$\{([A-Z][A-Z0-9_]*)\}/g;
+export function referencedVariables(template) {
+    const seen = new Set();
+    for (const m of template.matchAll(VAR_REF_RE)) {
+        if (m[1])
+            seen.add(m[1]);
+    }
+    return [...seen];
+}
+export function isBuiltinVariable(name) {
+    return BUILTIN_VARIABLES.has(name);
+}
+//# sourceMappingURL=requires.js.map

package/dist/schema/requires.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requires.js","sourceRoot":"","sources":["../../src/schema/requires.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;IACrE,IAAI,CAAC;QACH,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;YACxC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC9C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC9C,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE;IAClF,OAAO,EAAE,oDAAoD;CAC9D,CAAC;KACD,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,EAC/E,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAC3D;KACA,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EACnE,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAC9C;KACA,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE;IAC1B,OAAO,EAAE,qEAAqE;IAC9E,IAAI,EAAE,CAAC,KAAK,CAAC;CACd,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,cAAc,CAAC,QAAQ,EAAE;IACjC,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,YAAY;IACZ,MAAM;IACN,QAAQ;IACR,WAAW;IACX,KAAK;CACN,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAE9C,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC"}

package/dist/schema/tools.d.ts

@@ -0,0 +1,283 @@
+import { z } from "zod";
+export declare const McpHealthSchema: z.ZodObject<{
+    verb: z.ZodString;
+    timeout_ms: z.ZodDefault<z.ZodNumber>;
+}, "strict", z.ZodTypeAny, {
+    verb: string;
+    timeout_ms: number;
+}, {
+    verb: string;
+    timeout_ms?: number | undefined;
+}>;
+export declare const McpServerSchema: z.ZodObject<{
+    name: z.ZodString;
+    command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    health: z.ZodOptional<z.ZodObject<{
+        verb: z.ZodString;
+        timeout_ms: z.ZodDefault<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        verb: string;
+        timeout_ms: number;
+    }, {
+        verb: string;
+        timeout_ms?: number | undefined;
+    }>>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+}, "strict", z.ZodTypeAny, {
+    name: string;
+    command: string | string[];
+    enabled: boolean;
+    env?: Record<string, string> | undefined;
+    health?: {
+        verb: string;
+        timeout_ms: number;
+    } | undefined;
+}, {
+    name: string;
+    command: string | string[];
+    enabled?: boolean | undefined;
+    env?: Record<string, string> | undefined;
+    health?: {
+        verb: string;
+        timeout_ms?: number | undefined;
+    } | undefined;
+}>;
+export declare const CliToolSchema: z.ZodObject<{
+    name: z.ZodString;
+    binary: z.ZodString;
+    min_version: z.ZodOptional<z.ZodString>;
+    version_command: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    required: z.ZodDefault<z.ZodBoolean>;
+}, "strict", z.ZodTypeAny, {
+    name: string;
+    binary: string;
+    required: boolean;
+    min_version?: string | undefined;
+    version_command?: string[] | undefined;
+}, {
+    name: string;
+    binary: string;
+    min_version?: string | undefined;
+    version_command?: string[] | undefined;
+    required?: boolean | undefined;
+}>;
+export declare const SkillsSchema: z.ZodEffects<z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    required: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    source_dirs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+}, "strict", z.ZodTypeAny, {
+    enabled: string[];
+    source_dirs: string[];
+    required?: string[] | undefined;
+}, {
+    enabled?: string[] | undefined;
+    required?: string[] | undefined;
+    source_dirs?: string[] | undefined;
+}>, {
+    enabled: string[];
+    source_dirs: string[];
+    required?: string[] | undefined;
+}, {
+    enabled?: string[] | undefined;
+    required?: string[] | undefined;
+    source_dirs?: string[] | undefined;
+}>;
+export declare const BuiltinSchema: z.ZodObject<{
+    known: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+}, "strict", z.ZodTypeAny, {
+    known: string[];
+}, {
+    known?: string[] | undefined;
+}>;
+export declare const ToolsSchema: z.ZodEffects<z.ZodObject<{
+    mcp: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        health: z.ZodOptional<z.ZodObject<{
+            verb: z.ZodString;
+            timeout_ms: z.ZodDefault<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            verb: string;
+            timeout_ms: number;
+        }, {
+            verb: string;
+            timeout_ms?: number | undefined;
+        }>>;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        name: string;
+        command: string | string[];
+        enabled: boolean;
+        env?: Record<string, string> | undefined;
+        health?: {
+            verb: string;
+            timeout_ms: number;
+        } | undefined;
+    }, {
+        name: string;
+        command: string | string[];
+        enabled?: boolean | undefined;
+        env?: Record<string, string> | undefined;
+        health?: {
+            verb: string;
+            timeout_ms?: number | undefined;
+        } | undefined;
+    }>, "many">>;
+    cli: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        binary: z.ZodString;
+        min_version: z.ZodOptional<z.ZodString>;
+        version_command: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        required: z.ZodDefault<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        name: string;
+        binary: string;
+        required: boolean;
+        min_version?: string | undefined;
+        version_command?: string[] | undefined;
+    }, {
+        name: string;
+        binary: string;
+        min_version?: string | undefined;
+        version_command?: string[] | undefined;
+        required?: boolean | undefined;
+    }>, "many">>;
+    skills: z.ZodDefault<z.ZodEffects<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        required: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        source_dirs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        enabled: string[];
+        source_dirs: string[];
+        required?: string[] | undefined;
+    }, {
+        enabled?: string[] | undefined;
+        required?: string[] | undefined;
+        source_dirs?: string[] | undefined;
+    }>, {
+        enabled: string[];
+        source_dirs: string[];
+        required?: string[] | undefined;
+    }, {
+        enabled?: string[] | undefined;
+        required?: string[] | undefined;
+        source_dirs?: string[] | undefined;
+    }>>;
+    builtin: z.ZodDefault<z.ZodObject<{
+        known: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        known: string[];
+    }, {
+        known?: string[] | undefined;
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    builtin: {
+        known: string[];
+    };
+    mcp: {
+        name: string;
+        command: string | string[];
+        enabled: boolean;
+        env?: Record<string, string> | undefined;
+        health?: {
+            verb: string;
+            timeout_ms: number;
+        } | undefined;
+    }[];
+    cli: {
+        name: string;
+        binary: string;
+        required: boolean;
+        min_version?: string | undefined;
+        version_command?: string[] | undefined;
+    }[];
+    skills: {
+        enabled: string[];
+        source_dirs: string[];
+        required?: string[] | undefined;
+    };
+}, {
+    builtin?: {
+        known?: string[] | undefined;
+    } | undefined;
+    mcp?: {
+        name: string;
+        command: string | string[];
+        enabled?: boolean | undefined;
+        env?: Record<string, string> | undefined;
+        health?: {
+            verb: string;
+            timeout_ms?: number | undefined;
+        } | undefined;
+    }[] | undefined;
+    cli?: {
+        name: string;
+        binary: string;
+        min_version?: string | undefined;
+        version_command?: string[] | undefined;
+        required?: boolean | undefined;
+    }[] | undefined;
+    skills?: {
+        enabled?: string[] | undefined;
+        required?: string[] | undefined;
+        source_dirs?: string[] | undefined;
+    } | undefined;
+}>, {
+    builtin: {
+        known: string[];
+    };
+    mcp: {
+        name: string;
+        command: string | string[];
+        enabled: boolean;
+        env?: Record<string, string> | undefined;
+        health?: {
+            verb: string;
+            timeout_ms: number;
+        } | undefined;
+    }[];
+    cli: {
+        name: string;
+        binary: string;
+        required: boolean;
+        min_version?: string | undefined;
+        version_command?: string[] | undefined;
+    }[];
+    skills: {
+        enabled: string[];
+        source_dirs: string[];
+        required?: string[] | undefined;
+    };
+}, {
+    builtin?: {
+        known?: string[] | undefined;
+    } | undefined;
+    mcp?: {
+        name: string;
+        command: string | string[];
+        enabled?: boolean | undefined;
+        env?: Record<string, string> | undefined;
+        health?: {
+            verb: string;
+            timeout_ms?: number | undefined;
+        } | undefined;
+    }[] | undefined;
+    cli?: {
+        name: string;
+        binary: string;
+        min_version?: string | undefined;
+        version_command?: string[] | undefined;
+        required?: boolean | undefined;
+    }[] | undefined;
+    skills?: {
+        enabled?: string[] | undefined;
+        required?: string[] | undefined;
+        source_dirs?: string[] | undefined;
+    } | undefined;
+}>;
+export type Tools = z.infer<typeof ToolsSchema>;
+export type McpServer = z.infer<typeof McpServerSchema>;
+export type CliTool = z.infer<typeof CliToolSchema>;
+export type Skills = z.infer<typeof SkillsSchema>;

package/dist/schema/tools.js

@@ -0,0 +1,66 @@
+import { z } from "zod";
+const CommandSchema = z.union([z.string().min(1), z.array(z.string().min(1)).min(1)]);
+export const McpHealthSchema = z
+    .object({
+    verb: z.string().min(1),
+    timeout_ms: z.number().int().positive().default(5000),
+})
+    .strict();
+export const McpServerSchema = z
+    .object({
+    name: z.string().min(1),
+    command: CommandSchema,
+    env: z.record(z.string()).optional(),
+    health: McpHealthSchema.optional(),
+    enabled: z.boolean().default(true),
+})
+    .strict();
+export const CliToolSchema = z
+    .object({
+    name: z.string().min(1),
+    binary: z.string().min(1),
+    min_version: z.string().min(1).optional(),
+    version_command: z.array(z.string().min(1)).min(1).optional(),
+    required: z.boolean().default(false),
+})
+    .strict();
+export const SkillsSchema = z
+    .object({
+    enabled: z.array(z.string().min(1)).default([]),
+    required: z.array(z.string().min(1)).optional(),
+    source_dirs: z.array(z.string().min(1)).default([]),
+})
+    .strict()
+    .refine((s) => !s.required || s.required.every((r) => s.enabled.includes(r)), { message: "tools.skills.required must be a subset of tools.skills.enabled" });
+export const BuiltinSchema = z
+    .object({
+    known: z.array(z.string().min(1)).default([]),
+})
+    .strict();
+export const ToolsSchema = z
+    .object({
+    mcp: z.array(McpServerSchema).default([]),
+    cli: z.array(CliToolSchema).default([]),
+    skills: SkillsSchema.default({}),
+    builtin: BuiltinSchema.default({}),
+})
+    .strict()
+    .superRefine((t, ctx) => {
+    for (const list of [
+        { key: "mcp", entries: t.mcp },
+        { key: "cli", entries: t.cli },
+    ]) {
+        const seen = new Set();
+        list.entries.forEach((e, i) => {
+            if (seen.has(e.name)) {
+                ctx.addIssue({
+                    code: z.ZodIssueCode.custom,
+                    path: [list.key, i, "name"],
+                    message: `duplicate ${list.key} entry name: ${e.name}`,
+                });
+            }
+            seen.add(e.name);
+        });
+    }
+});
+//# sourceMappingURL=tools.js.map

package/dist/schema/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/schema/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEtF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACtD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,aAAa;IACtB,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,MAAM,EAAE,eAAe,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7D,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACpD,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EACpE,EAAE,OAAO,EAAE,gEAAgE,EAAE,CAC9E,CAAC;AAEJ,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC9C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvC,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;IAChC,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;CACnC,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;IACtB,KAAK,MAAM,IAAI,IAAI;QACjB,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE;QAC9B,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE;KACtB,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;oBAC3B,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC;oBAC3B,OAAO,EAAE,aAAa,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,EAAE;iBACvD,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "@lannguyensi/harness",
+  "version": "0.5.0",
+  "description": "Declarative control plane for agent harnesses — one YAML for grounding, tools, memory, and hooks.",
+  "license": "MIT",
+  "homepage": "https://github.com/LanNguyenSi/harness",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/LanNguyenSi/harness.git"
+  },
+  "bugs": {
+    "url": "https://github.com/LanNguyenSi/harness/issues"
+  },
+  "keywords": [
+    "claude-code",
+    "agent",
+    "harness",
+    "policy",
+    "evidence-ledger",
+    "mcp"
+  ],
+  "type": "module",
+  "bin": {
+    "harness": "./dist/cli/main.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:cov": "vitest run --coverage",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "chalk": "^5.3.0",
+    "commander": "^12.1.0",
+    "diff": "^9.0.0",
+    "execa": "^9.4.0",
+    "proper-lockfile": "^4.1.2",
+    "yaml": "^2.5.0",
+    "zod": "^3.23.8"
+  },
+  "devDependencies": {
+    "@types/diff": "^7.0.2",
+    "@types/node": "^22.0.0",
+    "@types/proper-lockfile": "^4.1.4",
+    "@vitest/coverage-v8": "^3.2.4",
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0",
+    "vitest": "^3.2.4"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}