@lannguyensi/harness 0.63.0 → 1.0.0

package/dist/io/read-json-dir-entries.js

@@ -1,48 +0,0 @@
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { readRegularFileRejectingSymlink } from "./read-regular-file.js";
-import { safeJsonParse } from "./safe-json-parse.js";
-export function readJsonDirEntriesRejectingSymlinks(dir, opts) {
-    let dirStat;
-    try {
-        dirStat = fs.lstatSync(dir);
-    }
-    catch {
-        return { dirPresent: false, entries: [], unreadableCount: 0 };
-    }
-    if (!dirStat.isDirectory()) {
-        return { dirPresent: false, entries: [], unreadableCount: 0 };
-    }
-    let dirents;
-    try {
-        dirents = fs.readdirSync(dir, { withFileTypes: true });
-    }
-    catch {
-        return { dirPresent: false, entries: [], unreadableCount: 0 };
-    }
-    const entries = [];
-    let unreadableCount = 0;
-    for (const d of dirents) {
-        const name = d.name;
-        if (opts.skip?.(name))
-            continue;
-        const full = path.join(dir, name);
-        const read = readRegularFileRejectingSymlink(full);
-        if (read.kind === "symlink" || read.kind === "not-regular" || read.kind === "missing") {
-            continue;
-        }
-        if (read.kind === "unreadable") {
-            unreadableCount++;
-            continue;
-        }
-        const parsed = safeJsonParse(read.content);
-        const value = opts.parse(parsed, name);
-        if (value === null) {
-            unreadableCount++;
-            continue;
-        }
-        entries.push(value);
-    }
-    return { dirPresent: true, entries, unreadableCount };
-}
-//# sourceMappingURL=read-json-dir-entries.js.map

package/dist/io/read-json-dir-entries.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"read-json-dir-entries.js","sourceRoot":"","sources":["../../src/io/read-json-dir-entries.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAuCrD,MAAM,UAAU,mCAAmC,CACjD,GAAW,EACX,IAAkC;IAElC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3B,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IAChE,CAAC;IAED,MAAM,OAAO,GAAQ,EAAE,CAAC;IACxB,IAAI,eAAe,GAAG,CAAC,CAAC;IAExB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QACpB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC;YAAE,SAAS;QAEhC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,+BAA+B,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtF,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC/B,eAAe,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,eAAe,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;AACxD,CAAC"}

package/dist/io/safe-json-parse.d.ts

@@ -1,5 +0,0 @@
-/**
- * Parse `text` as JSON, returning `null` instead of throwing on malformed
- * input.
- */
-export declare function safeJsonParse(text: string): unknown;

package/dist/io/safe-json-parse.js

@@ -1,21 +0,0 @@
-// Small shared JSON-parse helper. Moved here (structural-concentration
-// slice, task 9bc0d546) from
-// src/policy-packs/builtin/understanding-before-execution/persisted-reports.ts,
-// which used to be the only definition; markers.ts imported it from there
-// too, creating an internal markers.ts -> persisted-reports.ts edge purely
-// for this one helper. Giving it a neutral home in src/io removes that
-// edge: both call sites now import the same function from here instead of
-// from each other. Pure move, no behavior change.
-/**
- * Parse `text` as JSON, returning `null` instead of throwing on malformed
- * input.
- */
-export function safeJsonParse(text) {
-    try {
-        return JSON.parse(text);
-    }
-    catch {
-        return null;
-    }
-}
-//# sourceMappingURL=safe-json-parse.js.map

package/dist/io/safe-json-parse.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"safe-json-parse.js","sourceRoot":"","sources":["../../src/io/safe-json-parse.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,6BAA6B;AAC7B,gFAAgF;AAChF,0EAA0E;AAC1E,2EAA2E;AAC3E,uEAAuE;AACvE,0EAA0E;AAC1E,kDAAkD;AAElD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/policies/index.d.ts

@@ -1,5 +0,0 @@
-export { buildRecordHint, evaluateRequires, RequiresEvaluationError, type EvaluateRequiresOptions, type LedgerEntry, type RequiresEvaluation, type RequiresTrace, } from "./requires.js";
-export { parseDurationSeconds, InvalidDurationError } from "../io/duration.js";
-export { parseLedgerTimestamp } from "./timestamp.js";
-export { openLedgerSession, queryLedgerByTag, type LedgerClientOptions, type LedgerQueryResult, type LedgerSession, type LedgerSessionCallResult, type LedgerSessionQuery, type QueryLedgerOptions, } from "./ledger-client.js";
-export { validateExtractGrammar, parseExtractExpression, resolveExtractPathValue, firstInputMatchMismatch, evaluateExtract, substituteTemplate, ExtractGrammarError, type InputMatchMap, type InputMatchMismatch, type ExtractBuiltins, type ExtractEventContext, type ExtractEvaluation, type ExtractPath, type ExtractSegment, type ExtractTraceEntry, type ExtractTraceSource, type SubstituteTemplateResult, } from "../io/extract.js";

package/dist/policies/index.js

@@ -1,6 +0,0 @@
-export { buildRecordHint, evaluateRequires, RequiresEvaluationError, } from "./requires.js";
-export { parseDurationSeconds, InvalidDurationError } from "../io/duration.js";
-export { parseLedgerTimestamp } from "./timestamp.js";
-export { openLedgerSession, queryLedgerByTag, } from "./ledger-client.js";
-export { validateExtractGrammar, parseExtractExpression, resolveExtractPathValue, firstInputMatchMismatch, evaluateExtract, substituteTemplate, ExtractGrammarError, } from "../io/extract.js";
-//# sourceMappingURL=index.js.map

package/dist/policies/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/policies/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,uBAAuB,GAKxB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GAOjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,eAAe,EACf,kBAAkB,EAClB,mBAAmB,GAWpB,MAAM,kBAAkB,CAAC"}

package/dist/policies/ledger-client.d.ts

@@ -1,113 +0,0 @@
-import type { LedgerEntry } from "./requires.js";
-export interface LedgerClientOptions {
-    /** argv[0..]: the grounding-mcp binary + flags. e.g. `["node", "/path/to/grounding-mcp/dist/server.js"]`. */
-    mcpCommand: string[];
-    /** Extra env merged onto process.env. */
-    mcpEnv?: Record<string, string>;
-    /** Working dir for the spawned server. */
-    cwd?: string;
-    /** Per-call timeout. Default 5 000 ms. */
-    timeoutMs?: number;
-}
-export interface QueryLedgerOptions extends LedgerClientOptions {
-    /** Required: grounding session whose entries should be returned. */
-    sessionId: string;
-    /**
-     * Phase 5 #5 — optional ISO-8601 UTC cutoff. When the connected
-     * grounding-mcp advertises support for `sinceIso` on `ledger_summary`
-     * (detected via tools/list), the filter is pushed server-side and
-     * the wire payload is narrowed to rows newer than the cutoff. Old
-     * servers silently ignore the option and the full session is
-     * returned, so consumers must continue to apply their own client-
-     * side window filter (this only ever reduces wire bytes).
-     */
-    sinceIso?: string;
-    /**
-     * Phase 5 #5 — optional content-prefix filter. Same shape as
-     * `sinceIso`: server-side narrowing only when supported, no
-     * contract change for client-side post-filtering.
-     */
-    contentPrefix?: string;
-}
-export type LedgerQueryResult = {
-    kind: "ok";
-    entries: LedgerEntry[];
-} | {
-    kind: "degraded";
-    reason: string;
-};
-/** Arguments to `LedgerSession.querySummary` — per-call, unlike the
- *  connection-scoped `LedgerClientOptions`. */
-export interface LedgerSessionQuery {
-    sessionId: string;
-    sinceIso?: string;
-    contentPrefix?: string;
-    /**
-     * Optional per-call override of the session's `timeoutMs` (task
-     * 2026-07-18 subprocess-test-deflake, T-003). Applies only to this
-     * call's `ledger_summary` round-trip (the `tools/list` capability
-     * probe, only run when `sinceIso`/`contentPrefix` is set, still uses
-     * the session default). Omitted, behaviour is byte-for-byte identical
-     * to before this option existed: the session's own `timeoutMs` is
-     * used. A timeout on an overridden call still sets the session-wide
-     * latch exactly like a timeout on the session default would — see
-     * `LedgerSession.callTool`'s `options.timeoutMs` doc for the shared
-     * latch contract and the enforcement-path cost-bound caveat.
-     */
-    timeoutMs?: number;
-}
-/**
- * Result of a generic `LedgerSession.callTool` round-trip. Three-way so a
- * caller can distinguish a server-side JSON-RPC error (retryable with a
- * different payload — the `policy_decision` → `fact` fallback) from a
- * degraded transport (spawn failure / exit / timeout — nothing to retry).
- */
-export type LedgerSessionCallResult = {
-    status: "ok";
-    payload: unknown;
-} | {
-    status: "error";
-    errorMessage: string;
-} | {
-    status: "degraded";
-    reason: string;
-};
-/**
- * One grounding-mcp connection serving multiple calls.
- *
- * The PreToolUse runtime gate evaluates K policies per tool event, and each
- * used to spawn its own subprocess for the query plus a second one for the
- * audit record — 2K sequential spawns per event, the fail-open-under-load
- * risk the 2026-07-01 review flagged against the 30s hook budget. A session
- * spawns ONE subprocess lazily on first use, performs the initialize
- * handshake once, and multiplexes every subsequent `ledger_summary` /
- * `ledger_add` over the same stdio pipe. `dispose()` terminates the child;
- * the owner (e.g. the intercept CLI wrapper) MUST call it when done.
- */
-export interface LedgerSession {
-    querySummary(query: LedgerSessionQuery): Promise<LedgerQueryResult>;
-    /**
-     * `options.timeoutMs` (task 2026-07-18 subprocess-test-deflake, T-003)
-     * is an optional per-call override of the session's `timeoutMs` for
-     * THIS call only; every other call on the session keeps using the
-     * session default. Omitted, behaviour is byte-for-byte identical to
-     * before this option existed. Fail-open/degrade semantics and the
-     * session-wide timeout latch are unchanged either way: a timeout on an
-     * overridden call latches the session exactly like a timeout on the
-     * session default does — every subsequent call (on this session, with
-     * or without its own override) short-circuits to `degraded` without a
-     * new round-trip.
-     *
-     * Cost-bound caveat (OKF gate-fail-posture-matrix): the latch's promise
-     * that a dead ledger costs a session at most ~1× its `timeoutMs` holds
-     * only while per-call overrides on the enforcement critical path stay
-     * ≤ the session default. The override exists for tests and non-critical
-     * callers; do not pass a LARGER override on the PreToolUse gate path.
-     */
-    callTool(name: string, args: Record<string, unknown>, options?: {
-        timeoutMs?: number;
-    }): Promise<LedgerSessionCallResult>;
-    dispose(): void;
-}
-export declare function openLedgerSession(opts: LedgerClientOptions): LedgerSession;
-export declare function queryLedgerByTag(opts: QueryLedgerOptions): Promise<LedgerQueryResult>;