@lannguyensi/harness 0.64.0 → 1.0.0

package/dist/cli/uninstall/snapshot.js

@@ -18,6 +18,44 @@ export const SNAPSHOT_BASENAME_PREFIX = "harness.uninstall.";
 export const SNAPSHOT_BASENAME_SUFFIX = ".json";
 export const BACKUP_INFIX = ".bak.uninstall.";
 export const SNAPSHOT_VERSION = 1;
+/**
+ * Top-level keys only the uninstall snapshot writer emits. A settings.json
+ * has no use for any of them. Generic keys the record also carries
+ * (`version`, `createdAt`, `settingsPath`) are left out on purpose, so a
+ * settings backup that has its own `version` key still restores.
+ */
+export const SNAPSHOT_MARKER_KEYS = [
+    "removedHookGroups",
+    "removedMcpServers",
+    "settingsBackupPath",
+    "settingsBeforeSha256",
+    "settingsAfterSha256",
+    "restoredFrom",
+];
+function isPlainObject(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function hasMarkerKey(value) {
+    return SNAPSHOT_MARKER_KEYS.some((k) => Object.prototype.hasOwnProperty.call(value, k));
+}
+/**
+ * True when `value` is an uninstall snapshot record, or a hand-edited or
+ * partial one: a top-level object carrying any snapshot marker key in any
+ * shape (with or without `version`), or an object whose only key holds a
+ * plain object that carries one (one wrapper level, no deeper). A plain
+ * settings.json, nested objects included, is not.
+ */
+export function looksLikeUninstallSnapshot(value) {
+    if (!isPlainObject(value))
+        return false;
+    if (hasMarkerKey(value))
+        return true;
+    const keys = Object.keys(value);
+    if (keys.length !== 1)
+        return false;
+    const inner = value[keys[0]];
+    return isPlainObject(inner) && hasMarkerKey(inner);
+}
 export function sha256Hex(input) {
     return crypto.createHash("sha256").update(input).digest("hex");
 }

package/dist/cli/uninstall/snapshot.js.map

@@ -1 +1 @@
-{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../../src/cli/uninstall/snapshot.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,iEAAiE;AACjE,yEAAyE;AACzE,2EAA2E;AAC3E,wEAAwE;AACxE,sEAAsE;AACtE,oCAAoC;AACpC,EAAE;AACF,sEAAsE;AACtE,sEAAsE;AACtE,yEAAyE;AACzE,uEAAuE;AACvE,yDAAyD;AAEzD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,CAAC,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AAC7D,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAChD,MAAM,CAAC,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAC9C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAU,CAAC;AAoC3C,MAAM,UAAU,SAAS,CAAC,KAAsB;IAC9C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,YAAY,CAAC,YAAoB,EAAE,GAAS;IAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,IAAI,CACd,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAC1B,GAAG,wBAAwB,GAAG,KAAK,GAAG,wBAAwB,EAAE,CACjE,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,UAAU,CAAC,YAAoB,EAAE,GAAS;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnD,OAAO,GAAG,YAAY,GAAG,YAAY,GAAG,KAAK,EAAE,CAAC;AAClD,CAAC"}
+{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../../src/cli/uninstall/snapshot.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,iEAAiE;AACjE,yEAAyE;AACzE,2EAA2E;AAC3E,wEAAwE;AACxE,sEAAsE;AACtE,oCAAoC;AACpC,EAAE;AACF,sEAAsE;AACtE,sEAAsE;AACtE,yEAAyE;AACzE,uEAAuE;AACvE,yDAAyD;AAEzD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,CAAC,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AAC7D,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAChD,MAAM,CAAC,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAC9C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAU,CAAC;AAoC3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,mBAAmB;IACnB,mBAAmB;IACnB,oBAAoB;IACpB,sBAAsB;IACtB,qBAAqB;IACrB,cAAc;CACN,CAAC;AAEX,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY,CAAC,KAA8B;IAClD,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAW,CAAC,CAAC;IACvC,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAsB;IAC9C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,YAAY,CAAC,YAAoB,EAAE,GAAS;IAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,IAAI,CACd,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAC1B,GAAG,wBAAwB,GAAG,KAAK,GAAG,wBAAwB,EAAE,CACjE,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,UAAU,CAAC,YAAoB,EAAE,GAAS;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnD,OAAO,GAAG,YAAY,GAAG,YAAY,GAAG,KAAK,EAAE,CAAC;AAClD,CAAC"}

package/dist/cli/validate/checks.d.ts

@@ -6,87 +6,10 @@ export interface CheckOptions {
     pathEnv?: string;
     builtinRuntimeProbe?: () => string[];
     versionProbe?: (cmd: readonly string[]) => string | null;
-    /**
-     * Answers "is this repo-relative path git-ignored in the current working
-     * directory's repository?". `null` means "cannot tell" (not a git repo,
-     * git unavailable) and skips the dependent check. Injectable for tests;
-     * defaults to a real `git check-ignore` probe.
-     */
-    gitIgnoreProbe?: GitIgnoreProbe;
 }
 declare function isRootedPath(p: string): boolean;
 declare function firstToken(command: string): string;
 declare function resolveOnPath(binary: string, pathEnv: string): string | null;
-export declare function checkPolicyGroundingMcp(manifest: Manifest): Diagnostic[];
-export declare function checkSolutionAcceptanceProducer(manifest: Manifest): Diagnostic[];
-export declare function checkWorkflowGateWiring(manifest: Manifest): Diagnostic[];
-/**
- * F1 (review round 2): a hand-authored policy on the identical trigger
- * surface + ledger_tag as a derived block gate, but weaker than it
- * (`enforcement: "warn"`/`"require_approval"`, or `when:`-scoped), no
- * longer suppresses the derived gate (see `isAtLeastAsStrongAsDerivedGate`
- * in workflow-policies.ts) — both apply. This check surfaces that overlap
- * as a warning so an operator reading the weaker policy does not mistake
- * it for the ONLY gate on the surface.
- */
-export declare function checkWorkflowGateWeakOverlap(manifest: Manifest): Diagnostic[];
-/**
- * F6 (review round 2): a workflow that declares BOTH a `merge` step and a
- * `review_subagent` step with `spawn: "required"`, but with the review
- * step coming AFTER the merge step, derives no gate at all
- * (`workflowRequiresMergeGate` only looks for review-then-merge). That
- * ordering is likely a mistake (a review that runs after the PR already
- * merged cannot gate it), but step-ordering validation in general is out
- * of scope for this slice (module doc, src/runtime/workflow-policies.ts).
- * This warns instead of silently doing nothing.
- */
-export declare function checkWorkflowMergeBeforeReview(manifest: Manifest): Diagnostic[];
-/**
- * Review round 3 (99f47307 Slice 1): a hand-authored policy whose name
- * equals a derived policy's name (`workflow:<name>:review-before-merge[-
- * bash]`) is not deduped by name (dedupe keys on surface, not name), so
- * the derived view carries two policies with one name. This fires both
- * when the hand-authored policy sits on a DIFFERENT surface (dedupe never
- * even compares them), and when it sits on the SAME surface but is not
- * `isAtLeastAsStrongAsDerivedGate` (weaker enforcement or a `when:` scope
- * — that case IS a surface match, so `findWeakGatePolicyOverlaps` also
- * reports it as an overlap; the two checks are not mutually exclusive).
- * Either way the runtime evaluates both policies (fail-safe), but every
- * by-name reader (`explain`, `explain-policy`, `audit`, `diff`'s
- * name-keyed policy list) resolves the name to the hand-authored one and
- * silently hides the derived gate. The schema's duplicate-name refinement
- * cannot see this (it runs on the hand-authored view), so it is an error
- * here.
- */
-export declare function checkWorkflowDerivedNameCollision(manifest: Manifest): Diagnostic[];
-/**
- * Every `workflows[]` check in one list, so `harness validate`
- * (`runAssetChecks`) and `harness doctor`'s Workflows section run the
- * SAME set (review round 3, 99f47307 Slice 1: doctor previously picked
- * two of the three by hand and was missing `checkWorkflowMergeBeforeReview`).
- */
-export declare function checkWorkflows(manifest: Manifest): Diagnostic[];
-/**
- * Answers "is `relPath` git-ignored here?": `true` / `false`, or `null`
- * when the question has no answer (not a git repository, git not
- * installed). See `createDefaultGitIgnoreProbe` for the real
- * implementation; checks receive the probe so tests stay hermetic.
- */
-export type GitIgnoreProbe = (relPath: string) => boolean | null;
-/**
- * The orchestrator-workflow knob the grounding-mcp producer reads
- * (`resolveOwKnob`). Repo-relative on purpose: the knob belongs to the
- * repository whose completions the OW arm gates.
- */
-export declare const OW_KNOB_REL_PATH = ".ai/solution-acceptance.json";
-export declare function createDefaultGitIgnoreProbe(cwd?: string): GitIgnoreProbe;
-export declare function checkSolutionAcceptanceKnobIgnored(manifest: Manifest, probe: GitIgnoreProbe): Diagnostic[];
-export declare function checkPolicySelfAttestation(manifest: Manifest): Diagnostic[];
-export declare function checkPolicyRiskWithoutEnvScope(manifest: Manifest): Diagnostic[];
-export declare function checkSafeDeletionRootsSyntax(manifest: Manifest): Diagnostic[];
-export declare function checkTemplatePolicyDrift(manifest: Manifest): Diagnostic[];
-export declare function checkTriggerBoundaryDrift(manifest: Manifest): Diagnostic[];
-export declare function checkHookBudgetLedgerMargin(manifest: Manifest): Diagnostic[];
 export declare function runAssetChecks(manifest: Manifest, opts?: CheckOptions): Diagnostic[];
 export declare const __testables: {
     expandHome: typeof expandHome;