@lannguyensi/harness 0.63.0 → 1.0.0

package/dist/cli/uninstall/register.js

@@ -0,0 +1,171 @@
+import * as fs from "node:fs";
+import { EX_FAIL, HarnessExitError } from "../exit-codes.js";
+import { uninstall, UninstallError } from "./index.js";
+export function registerUninstall(program, io) {
+    const { stdout, stderr } = io;
+    program
+        .command("uninstall")
+        .description("Clean teardown of a harness installation. Inventories harness-owned " +
+        "state (manifest, lock, harness.generated/ and the leftover " +
+        ".understanding-gate/ of the removed gate under " +
+        "the state root; hook groups and mcpServers in ~/.claude/settings.json) " +
+        "and prints it. With --apply, backs up settings.json (reversible, with " +
+        "a snapshot of what was removed) and then removes the inventory; the " +
+        "manifest, lock and generated tree are deleted without a backup. " +
+        "settings.json.pre-harness-<TS> backups are listed but never deleted, " +
+        "so the operator can hand them to --restore-from <path> (atomic restore " +
+        "from that file) or `rm` them manually.")
+        .option("--apply", "execute the teardown (default: dry-run listing only)")
+        .option("--restore-from <path>", "atomic restore: copy this file over settings.json instead of selective removal (implies --apply)")
+        .option("--home <path>", "override ~/.claude/ (settings home; without --state it also overrides the state root, for tests / non-default installs)")
+        .option("--state <path>", "override the harness state root (default: ~/.harness/, legacy fallback ~/.claude/)")
+        .option("--settings <path>", "override ~/.claude/settings.json")
+        .action(async (options) => {
+        const cliOpts = {};
+        if (options.apply)
+            cliOpts.apply = true;
+        if (options.restoreFrom)
+            cliOpts.restoreFrom = options.restoreFrom;
+        if (options.home)
+            cliOpts.homeDir = options.home;
+        if (options.state)
+            cliOpts.stateDir = options.state;
+        if (options.settings)
+            cliOpts.settingsPath = options.settings;
+        try {
+            const result = await uninstall(cliOpts);
+            const inv = result.inventory;
+            if (result.mode === "list") {
+                const nothing = inv.manifestPath === null &&
+                    inv.lockPath === null &&
+                    inv.generatedDir === null &&
+                    inv.gateStateDir === null &&
+                    inv.hookGroups.length === 0 &&
+                    inv.mcpServers.length === 0 &&
+                    inv.mcpRegistryServers.length === 0 &&
+                    inv.preHarnessBackups.length === 0;
+                const rootsLabel = inv.stateDir === inv.homeDir
+                    ? inv.homeDir
+                    : `${inv.stateDir} (state) + ${inv.homeDir} (settings)`;
+                if (nothing) {
+                    stdout(`no harness install found under ${rootsLabel}; nothing to do.\n`);
+                    for (const w of inv.warnings)
+                        stderr(`warning: ${w}\n`);
+                    return;
+                }
+                stdout(`harness install under ${rootsLabel}:\n`);
+                if (inv.manifestPath)
+                    stdout(`  manifest:  ${inv.manifestPath}\n`);
+                if (inv.lockPath)
+                    stdout(`  lock:      ${inv.lockPath}\n`);
+                if (inv.generatedDir)
+                    stdout(`  generated: ${inv.generatedDir}/\n`);
+                if (inv.gateStateDir)
+                    stdout(`  gate:      ${inv.gateStateDir}/ (leftover understanding-gate state)\n`);
+                if (inv.hookGroups.length > 0) {
+                    stdout(`  hook groups in ${inv.settingsPath}:\n`);
+                    for (const g of inv.hookGroups) {
+                        const matcherLabel = g.matcher === null ? "(no matcher)" : JSON.stringify(g.matcher);
+                        stdout(`    ${g.event}[${g.index}] matcher=${matcherLabel}: ${g.description}\n`);
+                    }
+                }
+                if (inv.mcpServers.length > 0) {
+                    stdout(`  mcpServers in ${inv.settingsPath}: ${inv.mcpServers.join(", ")}\n`);
+                }
+                if (inv.mcpRegistryServers.length > 0) {
+                    stdout(`  mcpServers registered in the claude CLI user-scope registry (${inv.mcpRegistryPath}): ` +
+                        `${inv.mcpRegistryServers.join(", ")}\n`);
+                }
+                if (inv.preHarnessBackups.length > 0) {
+                    stdout(`  pre-harness backups:\n`);
+                    for (const b of inv.preHarnessBackups)
+                        stdout(`    ${b}\n`);
+                    stdout(`\n  Restore from one of these with: harness uninstall --restore-from <path>\n`);
+                }
+                stdout(`\nPass --apply to remove the above. This is a dry-run.\n`);
+                for (const w of inv.warnings)
+                    stderr(`warning: ${w}\n`);
+                return;
+            }
+            if (result.mode === "restore") {
+                stdout(`restored ${inv.settingsPath} from ${result.restoredFrom}.\n`);
+                stdout(`backup:   ${result.backupPath}\n`);
+                stdout(`snapshot: ${result.snapshotPath}\n`);
+                if (result.removedFiles.length > 0) {
+                    stdout(`removed:\n`);
+                    for (const f of result.removedFiles)
+                        stdout(`  ${f}\n`);
+                }
+                if (result.mcpRegistryRemovals.length > 0) {
+                    stdout(`claude mcp remove (user scope, ${inv.mcpRegistryPath}):\n`);
+                    for (const r of result.mcpRegistryRemovals)
+                        stdout(`  ${r.name}: ${r.status}\n`);
+                }
+                stdout(`\nTo finish: \`npm uninstall -g @lannguyensi/harness\` (uninstall does not touch the npm install).\n`);
+                for (const w of inv.warnings)
+                    stderr(`warning: ${w}\n`);
+                return;
+            }
+            // apply
+            if (result.backupPath !== null && result.snapshotPath !== null) {
+                stdout(`mutated ${inv.settingsPath}:\n`);
+                if (inv.hookGroups.length > 0) {
+                    stdout(`  removed ${inv.hookGroups.length} hook group(s): `);
+                    stdout(inv.hookGroups.map((g) => `${g.event}[${g.index}]`).join(", "));
+                    stdout(`\n`);
+                }
+                if (inv.mcpServers.length > 0) {
+                    stdout(`  removed mcpServers: ${inv.mcpServers.join(", ")}\n`);
+                }
+                stdout(`backup:   ${result.backupPath}\n`);
+                stdout(`snapshot: ${result.snapshotPath}\n`);
+            }
+            if (result.removedFiles.length > 0) {
+                stdout(`removed from disk:\n`);
+                for (const f of result.removedFiles)
+                    stdout(`  ${f}\n`);
+                // Explicit kept-list: name whatever survives under the state
+                // root (machines/ + projects/ override layers are
+                // operator-authored; foreign files are not ours to judge) so
+                // the operator never has to discover residue by accident.
+                try {
+                    const residue = fs
+                        .readdirSync(inv.stateDir)
+                        .filter((name) => !name.startsWith("settings.json"));
+                    if (residue.length > 0) {
+                        stdout(`kept under ${inv.stateDir}: ${residue.join(", ")} (not removed; operator-authored or out of scope)\n`);
+                    }
+                }
+                catch {
+                    /* state root itself may be gone or unreadable; nothing to report */
+                }
+            }
+            if (result.mcpRegistryRemovals.length > 0) {
+                stdout(`claude mcp remove (user scope, ${inv.mcpRegistryPath}):\n`);
+                for (const r of result.mcpRegistryRemovals)
+                    stdout(`  ${r.name}: ${r.status}\n`);
+            }
+            if (result.backupPath === null &&
+                result.snapshotPath === null &&
+                result.removedFiles.length === 0 &&
+                result.mcpRegistryRemovals.length === 0) {
+                const rootsLabel = inv.stateDir === inv.homeDir
+                    ? inv.homeDir
+                    : `${inv.stateDir} (state) + ${inv.homeDir} (settings)`;
+                stdout(`no harness install found under ${rootsLabel}; nothing to remove.\n`);
+            }
+            else {
+                stdout(`\nTo finish: \`npm uninstall -g @lannguyensi/harness\` (uninstall does not touch the npm install).\n`);
+            }
+            for (const w of inv.warnings)
+                stderr(`warning: ${w}\n`);
+        }
+        catch (err) {
+            if (err instanceof UninstallError) {
+                throw new HarnessExitError(err.message, EX_FAIL);
+            }
+            throw err;
+        }
+    });
+}
+//# sourceMappingURL=register.js.map

package/dist/cli/uninstall/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../../src/cli/uninstall/register.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEvD,MAAM,UAAU,iBAAiB,CAC/B,OAAgB,EAChB,EAAgE;IAEhE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC9B,OAAO;SACJ,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CACV,sEAAsE;QACpE,6DAA6D;QAC7D,iDAAiD;QACjD,yEAAyE;QACzE,wEAAwE;QACxE,sEAAsE;QACtE,kEAAkE;QAClE,uEAAuE;QACvE,yEAAyE;QACzE,wCAAwC,CAC3C;SACA,MAAM,CAAC,SAAS,EAAE,sDAAsD,CAAC;SACzE,MAAM,CACL,uBAAuB,EACvB,kGAAkG,CACnG;SACA,MAAM,CACL,eAAe,EACf,yHAAyH,CAC1H;SACA,MAAM,CACL,gBAAgB,EAChB,oFAAoF,CACrF;SACA,MAAM,CAAC,mBAAmB,EAAE,kCAAkC,CAAC;SAC/D,MAAM,CAAC,KAAK,EAAE,OAAoG,EAAE,EAAE;QACrH,MAAM,OAAO,GAAoC,EAAE,CAAC;QACpD,IAAI,OAAO,CAAC,KAAK;YAAE,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;QACxC,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACnE,IAAI,OAAO,CAAC,IAAI;YAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;QACjD,IAAI,OAAO,CAAC,KAAK;YAAE,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC;QACpD,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,CAAC,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC;YAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC3B,MAAM,OAAO,GACX,GAAG,CAAC,YAAY,KAAK,IAAI;oBACzB,GAAG,CAAC,QAAQ,KAAK,IAAI;oBACrB,GAAG,CAAC,YAAY,KAAK,IAAI;oBACzB,GAAG,CAAC,YAAY,KAAK,IAAI;oBACzB,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;oBAC3B,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;oBAC3B,GAAG,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC;oBACnC,GAAG,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,CAAC;gBACrC,MAAM,UAAU,GACd,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,OAAO;oBAC1B,CAAC,CAAC,GAAG,CAAC,OAAO;oBACb,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,cAAc,GAAG,CAAC,OAAO,aAAa,CAAC;gBAC5D,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,CAAC,kCAAkC,UAAU,oBAAoB,CAAC,CAAC;oBACzE,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ;wBAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;oBACxD,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,yBAAyB,UAAU,KAAK,CAAC,CAAC;gBACjD,IAAI,GAAG,CAAC,YAAY;oBAAE,MAAM,CAAC,gBAAgB,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC;gBACnE,IAAI,GAAG,CAAC,QAAQ;oBAAE,MAAM,CAAC,gBAAgB,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAC3D,IAAI,GAAG,CAAC,YAAY;oBAAE,MAAM,CAAC,gBAAgB,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC;gBACpE,IAAI,GAAG,CAAC,YAAY;oBAAE,MAAM,CAAC,gBAAgB,GAAG,CAAC,YAAY,yCAAyC,CAAC,CAAC;gBACxG,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9B,MAAM,CAAC,oBAAoB,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC;oBAClD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;wBAC/B,MAAM,YAAY,GAAG,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;wBACrF,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,aAAa,YAAY,KAAK,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC;oBACnF,CAAC;gBACH,CAAC;gBACD,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9B,MAAM,CAAC,mBAAmB,GAAG,CAAC,YAAY,KAAK,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChF,CAAC;gBACD,IAAI,GAAG,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtC,MAAM,CACJ,kEAAkE,GAAG,CAAC,eAAe,KAAK;wBACxF,GAAG,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAC3C,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACrC,MAAM,CAAC,0BAA0B,CAAC,CAAC;oBACnC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,iBAAiB;wBAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC5D,MAAM,CACJ,+EAA+E,CAChF,CAAC;gBACJ,CAAC;gBACD,MAAM,CAAC,0DAA0D,CAAC,CAAC;gBACnE,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ;oBAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,CAAC,YAAY,GAAG,CAAC,YAAY,SAAS,MAAM,CAAC,YAAY,KAAK,CAAC,CAAC;gBACtE,MAAM,CAAC,aAAa,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;gBAC3C,MAAM,CAAC,aAAa,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;gBAC7C,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnC,MAAM,CAAC,YAAY,CAAC,CAAC;oBACrB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY;wBAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1D,CAAC;gBACD,IAAI,MAAM,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1C,MAAM,CAAC,kCAAkC,GAAG,CAAC,eAAe,MAAM,CAAC,CAAC;oBACpE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,mBAAmB;wBAAE,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;gBACnF,CAAC;gBACD,MAAM,CACJ,sGAAsG,CACvG,CAAC;gBACF,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ;oBAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;YACD,QAAQ;YACR,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;gBAC/D,MAAM,CAAC,WAAW,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC;gBACzC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9B,MAAM,CAAC,aAAa,GAAG,CAAC,UAAU,CAAC,MAAM,kBAAkB,CAAC,CAAC;oBAC7D,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;oBACvE,MAAM,CAAC,IAAI,CAAC,CAAC;gBACf,CAAC;gBACD,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9B,MAAM,CAAC,yBAAyB,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjE,CAAC;gBACD,MAAM,CAAC,aAAa,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;gBAC3C,MAAM,CAAC,aAAa,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,sBAAsB,CAAC,CAAC;gBAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY;oBAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACxD,6DAA6D;gBAC7D,kDAAkD;gBAClD,6DAA6D;gBAC7D,0DAA0D;gBAC1D,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,EAAE;yBACf,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;yBACzB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC;oBACvD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACvB,MAAM,CACJ,cAAc,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,qDAAqD,CACvG,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,oEAAoE;gBACtE,CAAC;YACH,CAAC;YACD,IAAI,MAAM,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1C,MAAM,CAAC,kCAAkC,GAAG,CAAC,eAAe,MAAM,CAAC,CAAC;gBACpE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,mBAAmB;oBAAE,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;YACnF,CAAC;YACD,IACE,MAAM,CAAC,UAAU,KAAK,IAAI;gBAC1B,MAAM,CAAC,YAAY,KAAK,IAAI;gBAC5B,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;gBAChC,MAAM,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,EACvC,CAAC;gBACD,MAAM,UAAU,GACd,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,OAAO;oBAC1B,CAAC,CAAC,GAAG,CAAC,OAAO;oBACb,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,cAAc,GAAG,CAAC,OAAO,aAAa,CAAC;gBAC5D,MAAM,CAAC,kCAAkC,UAAU,wBAAwB,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,MAAM,CACJ,sGAAsG,CACvG,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ;gBAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;gBAClC,MAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/uninstall/snapshot.d.ts

@@ -33,6 +33,21 @@ export interface UninstallSnapshot {
     /** Removed mcpServers entries, sorted by name. */
     removedMcpServers: RemovedMcpServer[];
 }
+/**
+ * Top-level keys only the uninstall snapshot writer emits. A settings.json
+ * has no use for any of them. Generic keys the record also carries
+ * (`version`, `createdAt`, `settingsPath`) are left out on purpose, so a
+ * settings backup that has its own `version` key still restores.
+ */
+export declare const SNAPSHOT_MARKER_KEYS: readonly ["removedHookGroups", "removedMcpServers", "settingsBackupPath", "settingsBeforeSha256", "settingsAfterSha256", "restoredFrom"];
+/**
+ * True when `value` is an uninstall snapshot record, or a hand-edited or
+ * partial one: a top-level object carrying any snapshot marker key in any
+ * shape (with or without `version`), or an object whose only key holds a
+ * plain object that carries one (one wrapper level, no deeper). A plain
+ * settings.json, nested objects included, is not.
+ */
+export declare function looksLikeUninstallSnapshot(value: unknown): boolean;
 export declare function sha256Hex(input: string | Buffer): string;
 /** Build the snapshot file path for `settingsPath` at `now`. */
 export declare function snapshotPath(settingsPath: string, now: Date): string;

package/dist/cli/uninstall/snapshot.js

@@ -18,6 +18,44 @@ export const SNAPSHOT_BASENAME_PREFIX = "harness.uninstall.";
 export const SNAPSHOT_BASENAME_SUFFIX = ".json";
 export const BACKUP_INFIX = ".bak.uninstall.";
 export const SNAPSHOT_VERSION = 1;
+/**
+ * Top-level keys only the uninstall snapshot writer emits. A settings.json
+ * has no use for any of them. Generic keys the record also carries
+ * (`version`, `createdAt`, `settingsPath`) are left out on purpose, so a
+ * settings backup that has its own `version` key still restores.
+ */
+export const SNAPSHOT_MARKER_KEYS = [
+    "removedHookGroups",
+    "removedMcpServers",
+    "settingsBackupPath",
+    "settingsBeforeSha256",
+    "settingsAfterSha256",
+    "restoredFrom",
+];
+function isPlainObject(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function hasMarkerKey(value) {
+    return SNAPSHOT_MARKER_KEYS.some((k) => Object.prototype.hasOwnProperty.call(value, k));
+}
+/**
+ * True when `value` is an uninstall snapshot record, or a hand-edited or
+ * partial one: a top-level object carrying any snapshot marker key in any
+ * shape (with or without `version`), or an object whose only key holds a
+ * plain object that carries one (one wrapper level, no deeper). A plain
+ * settings.json, nested objects included, is not.
+ */
+export function looksLikeUninstallSnapshot(value) {
+    if (!isPlainObject(value))
+        return false;
+    if (hasMarkerKey(value))
+        return true;
+    const keys = Object.keys(value);
+    if (keys.length !== 1)
+        return false;
+    const inner = value[keys[0]];
+    return isPlainObject(inner) && hasMarkerKey(inner);
+}
 export function sha256Hex(input) {
     return crypto.createHash("sha256").update(input).digest("hex");
 }

package/dist/cli/uninstall/snapshot.js.map

@@ -1 +1 @@
-{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../../src/cli/uninstall/snapshot.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,iEAAiE;AACjE,yEAAyE;AACzE,2EAA2E;AAC3E,wEAAwE;AACxE,sEAAsE;AACtE,oCAAoC;AACpC,EAAE;AACF,sEAAsE;AACtE,sEAAsE;AACtE,yEAAyE;AACzE,uEAAuE;AACvE,yDAAyD;AAEzD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,CAAC,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AAC7D,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAChD,MAAM,CAAC,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAC9C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAU,CAAC;AAoC3C,MAAM,UAAU,SAAS,CAAC,KAAsB;IAC9C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,YAAY,CAAC,YAAoB,EAAE,GAAS;IAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,IAAI,CACd,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAC1B,GAAG,wBAAwB,GAAG,KAAK,GAAG,wBAAwB,EAAE,CACjE,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,UAAU,CAAC,YAAoB,EAAE,GAAS;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnD,OAAO,GAAG,YAAY,GAAG,YAAY,GAAG,KAAK,EAAE,CAAC;AAClD,CAAC"}
+{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../../src/cli/uninstall/snapshot.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,iEAAiE;AACjE,yEAAyE;AACzE,2EAA2E;AAC3E,wEAAwE;AACxE,sEAAsE;AACtE,oCAAoC;AACpC,EAAE;AACF,sEAAsE;AACtE,sEAAsE;AACtE,yEAAyE;AACzE,uEAAuE;AACvE,yDAAyD;AAEzD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,CAAC,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AAC7D,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAChD,MAAM,CAAC,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAC9C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAU,CAAC;AAoC3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,mBAAmB;IACnB,mBAAmB;IACnB,oBAAoB;IACpB,sBAAsB;IACtB,qBAAqB;IACrB,cAAc;CACN,CAAC;AAEX,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY,CAAC,KAA8B;IAClD,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAW,CAAC,CAAC;IACvC,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAsB;IAC9C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,YAAY,CAAC,YAAoB,EAAE,GAAS;IAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,IAAI,CACd,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAC1B,GAAG,wBAAwB,GAAG,KAAK,GAAG,wBAAwB,EAAE,CACjE,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,UAAU,CAAC,YAAoB,EAAE,GAAS;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnD,OAAO,GAAG,YAAY,GAAG,YAAY,GAAG,KAAK,EAAE,CAAC;AAClD,CAAC"}

package/dist/cli/validate/checks.d.ts

@@ -6,87 +6,10 @@ export interface CheckOptions {
     pathEnv?: string;
     builtinRuntimeProbe?: () => string[];
     versionProbe?: (cmd: readonly string[]) => string | null;
-    /**
-     * Answers "is this repo-relative path git-ignored in the current working
-     * directory's repository?". `null` means "cannot tell" (not a git repo,
-     * git unavailable) and skips the dependent check. Injectable for tests;
-     * defaults to a real `git check-ignore` probe.
-     */
-    gitIgnoreProbe?: GitIgnoreProbe;
 }
 declare function isRootedPath(p: string): boolean;
 declare function firstToken(command: string): string;
 declare function resolveOnPath(binary: string, pathEnv: string): string | null;
-export declare function checkPolicyGroundingMcp(manifest: Manifest): Diagnostic[];
-export declare function checkSolutionAcceptanceProducer(manifest: Manifest): Diagnostic[];
-export declare function checkWorkflowGateWiring(manifest: Manifest): Diagnostic[];
-/**
- * F1 (review round 2): a hand-authored policy on the identical trigger
- * surface + ledger_tag as a derived block gate, but weaker than it
- * (`enforcement: "warn"`/`"require_approval"`, or `when:`-scoped), no
- * longer suppresses the derived gate (see `isAtLeastAsStrongAsDerivedGate`
- * in workflow-policies.ts) — both apply. This check surfaces that overlap
- * as a warning so an operator reading the weaker policy does not mistake
- * it for the ONLY gate on the surface.
- */
-export declare function checkWorkflowGateWeakOverlap(manifest: Manifest): Diagnostic[];
-/**
- * F6 (review round 2): a workflow that declares BOTH a `merge` step and a
- * `review_subagent` step with `spawn: "required"`, but with the review
- * step coming AFTER the merge step, derives no gate at all
- * (`workflowRequiresMergeGate` only looks for review-then-merge). That
- * ordering is likely a mistake (a review that runs after the PR already
- * merged cannot gate it), but step-ordering validation in general is out
- * of scope for this slice (module doc, src/runtime/workflow-policies.ts).
- * This warns instead of silently doing nothing.
- */
-export declare function checkWorkflowMergeBeforeReview(manifest: Manifest): Diagnostic[];
-/**
- * Review round 3 (99f47307 Slice 1): a hand-authored policy whose name
- * equals a derived policy's name (`workflow:<name>:review-before-merge[-
- * bash]`) is not deduped by name (dedupe keys on surface, not name), so
- * the derived view carries two policies with one name. This fires both
- * when the hand-authored policy sits on a DIFFERENT surface (dedupe never
- * even compares them), and when it sits on the SAME surface but is not
- * `isAtLeastAsStrongAsDerivedGate` (weaker enforcement or a `when:` scope
- * — that case IS a surface match, so `findWeakGatePolicyOverlaps` also
- * reports it as an overlap; the two checks are not mutually exclusive).
- * Either way the runtime evaluates both policies (fail-safe), but every
- * by-name reader (`explain`, `explain-policy`, `audit`, `diff`'s
- * name-keyed policy list) resolves the name to the hand-authored one and
- * silently hides the derived gate. The schema's duplicate-name refinement
- * cannot see this (it runs on the hand-authored view), so it is an error
- * here.
- */
-export declare function checkWorkflowDerivedNameCollision(manifest: Manifest): Diagnostic[];
-/**
- * Every `workflows[]` check in one list, so `harness validate`
- * (`runAssetChecks`) and `harness doctor`'s Workflows section run the
- * SAME set (review round 3, 99f47307 Slice 1: doctor previously picked
- * two of the three by hand and was missing `checkWorkflowMergeBeforeReview`).
- */
-export declare function checkWorkflows(manifest: Manifest): Diagnostic[];
-/**
- * Answers "is `relPath` git-ignored here?": `true` / `false`, or `null`
- * when the question has no answer (not a git repository, git not
- * installed). See `createDefaultGitIgnoreProbe` for the real
- * implementation; checks receive the probe so tests stay hermetic.
- */
-export type GitIgnoreProbe = (relPath: string) => boolean | null;
-/**
- * The orchestrator-workflow knob the grounding-mcp producer reads
- * (`resolveOwKnob`). Repo-relative on purpose: the knob belongs to the
- * repository whose completions the OW arm gates.
- */
-export declare const OW_KNOB_REL_PATH = ".ai/solution-acceptance.json";
-export declare function createDefaultGitIgnoreProbe(cwd?: string): GitIgnoreProbe;
-export declare function checkSolutionAcceptanceKnobIgnored(manifest: Manifest, probe: GitIgnoreProbe): Diagnostic[];
-export declare function checkPolicySelfAttestation(manifest: Manifest): Diagnostic[];
-export declare function checkPolicyRiskWithoutEnvScope(manifest: Manifest): Diagnostic[];
-export declare function checkSafeDeletionRootsSyntax(manifest: Manifest): Diagnostic[];
-export declare function checkTemplatePolicyDrift(manifest: Manifest): Diagnostic[];
-export declare function checkTriggerBoundaryDrift(manifest: Manifest): Diagnostic[];
-export declare function checkHookBudgetLedgerMargin(manifest: Manifest): Diagnostic[];
 export declare function runAssetChecks(manifest: Manifest, opts?: CheckOptions): Diagnostic[];
 export declare const __testables: {
     expandHome: typeof expandHome;