@nodetool-ai/cli 0.7.0-rc.23 → 0.8.2

package/dist/harness/capability-coverage.d.ts

@@ -0,0 +1,161 @@
+/**
+ * Capability coverage: what proves each agent capability still works.
+ *
+ * The harness registry answers the question one level up — which harness
+ * covers which product *surface* — and `SurfaceEntry.paths` is deliberately
+ * coarse: `packages/agents/` is one path, and a diff that adds a capability
+ * to it lights up the same checks a diff that renames a local variable does.
+ * That is the hole this table fills. Every exported capability is named here
+ * with the file that implements it, the checked-in suites a selfcheck runs
+ * over it, the eval cases that drive a model through it, or — when nothing
+ * does yet — a written gap note.
+ *
+ * The invariant is the registry's, one rung down: no capability without a
+ * check or a documented gap. It is enforced by `capability-coverage.test.ts`
+ * (the audit, plus the on-disk checks the pure audit cannot make) and by
+ * `nodetool harness capabilities --strict`.
+ *
+ * `contract` is a fingerprint of what the capability *declares* — its name,
+ * description, input schema, permission category, and whether it needs the
+ * caller's tool-call id. It is generated, never hand-written: run
+ * `npm run capabilities:sync` after touching a spec. It exists so the gate can
+ * tell a contract change from a refactor: `nodetool harness gate --base <ref>`
+ * demands a new or changed mapping only when a capability is added or its
+ * fingerprint moves.
+ */
+import type { HarnessEntry } from "./registry.js";
+/** The fields of a spec the fingerprint is taken over. */
+export interface CapabilityContractInput {
+    name: string;
+    description: string;
+    inputSchema: unknown;
+    category: string;
+    needsToolCallId?: boolean;
+}
+/**
+ * What a capability promises its callers, as twelve hex digits: the wire name,
+ * the description a model reads, the input schema, the permission category,
+ * and whether it needs the caller's tool-call id. Everything else about an
+ * implementation can move without a caller noticing.
+ */
+export declare function capabilityContractFingerprint(spec: CapabilityContractInput): string;
+/** Eval cases that drive one capability, by defining file. */
+export interface CapabilityEvalRef {
+    /** Repo-relative file that declares the case ids. */
+    file: string;
+    /** Case ids inside that file. */
+    cases: string[];
+}
+export interface CapabilityCoverageEntry {
+    /** Wire name, as a guest or a model calls it. */
+    name: string;
+    /** The capability module that owns it. */
+    module: string;
+    /** Repo-relative implementation file. */
+    impl: string;
+    /** Generated fingerprint of the declared contract. Never hand-edit. */
+    contract: string;
+    /** Harness id whose selfcheck runs {@link suites}. */
+    selfcheck?: string;
+    /** Checked-in suites that name this capability. Required with a selfcheck. */
+    suites?: string[];
+    /** Eval cases that drive a model through it. */
+    evals?: CapabilityEvalRef[];
+    /** Required when there is neither a selfcheck nor an eval case. */
+    gap?: string;
+}
+/** What the audit compares the table against: the live capability registry. */
+export interface DeclaredCapability {
+    name: string;
+    module: string;
+    contract: string;
+}
+export interface CapabilityAuditResult {
+    rows: Array<{
+        name: string;
+        module: string;
+        covered: boolean;
+        selfcheck?: string;
+        evalCases: number;
+        gap?: string;
+    }>;
+    coveredCount: number;
+    gapCount: number;
+    /** Declared capabilities with no entry — the failure this table exists for. */
+    unmapped: string[];
+    /** Entries naming a capability no module declares any more. */
+    stale: string[];
+    /** Entries with no selfcheck, no eval case, and no gap note. */
+    undocumentedGaps: string[];
+    /** Entries whose `selfcheck` is not a harness that has one. */
+    unknownSelfchecks: string[];
+    /** Entries claiming a selfcheck but naming no suite. */
+    selfchecksWithoutSuites: string[];
+    /** Entries whose `contract` disagrees with the live spec. */
+    contractDrift: string[];
+    /** Entries whose `module` disagrees with the registry. */
+    moduleMismatches: string[];
+    /** Names appearing in the table twice. */
+    duplicates: string[];
+}
+/**
+ * The table against the live registry. Pure: on-disk checks (does the impl
+ * file exist, does the suite name the capability, does the eval file declare
+ * the case) live in the test, which can read the repo.
+ */
+export declare function auditCapabilityCoverage(declared: readonly DeclaredCapability[], entries: readonly CapabilityCoverageEntry[], harnesses: readonly HarnessEntry[]): CapabilityAuditResult;
+/**
+ * One entry's literal text, keyed by wire name, read out of the table's
+ * source. Textual on purpose: the gate compares this file at two git refs, and
+ * `git show <ref>:<path>` hands back source, not a module it can import.
+ *
+ * The scan is structural — brace depth inside the array literal — so it does
+ * not care how the entries are wrapped, only that each carries a
+ * `name: "..."` field.
+ */
+export declare function extractCoverageBlocks(source: string): ReadonlyMap<string, string>;
+export interface CapabilityMappingViolation {
+    name: string;
+    /** What moved without the mapping moving with it. */
+    reason: "contract-changed";
+    detail: string;
+}
+export interface CapabilityMappingGateResult {
+    /** Capabilities the diff adds to the table. */
+    added: string[];
+    /** Capabilities whose contract fingerprint moved in the diff. */
+    contractChanged: string[];
+    /** Capabilities the diff removes from the table. */
+    removed: string[];
+    /** Contract changes that left the coverage mapping untouched. */
+    violations: CapabilityMappingViolation[];
+}
+/**
+ * Which commit to read the base table from: the merge base of `ref` and HEAD,
+ * not `ref`'s tip. A branch that is merely behind otherwise inherits every
+ * contract that moved on the base branch since it forked — a refactor that
+ * touched no capability at all failed on `list_entities`, `create_entity` and
+ * `update_entity`, which had gained a `project_id` field on `main` meanwhile.
+ * The changed-file half of the gate already asks `base...HEAD`; this asks the
+ * same question of one file. Falls back to `ref` when there is no merge base
+ * (a shallow clone, an unrelated ref).
+ */
+export declare function resolveGateBaseRef(ref: string, runGit: (command: string) => string): string;
+/**
+ * Compare the table at two refs. A capability that is new, or whose coverage
+ * fields changed, satisfies the rule by construction; a contract that moved
+ * while the mapping stood still does not.
+ *
+ * `baseSource` is null when the file does not exist at the base ref — every
+ * entry is then new, and nothing is a violation.
+ *
+ * `changedFiles` answers the rule the other way round. The mapping's `suites`
+ * are file paths, and they do not move when a case is *added* to a file
+ * already listed — which is what covering a new contract usually looks like.
+ * Reading the diff, a contract change whose own covering suite also changed
+ * has been answered: the suite is named, and it is in the diff. Without this a
+ * one-word description edit demanded a contrived change to a generated field,
+ * and the honest fix — write the test — could not satisfy the gate.
+ */
+export declare function planCapabilityMappingGate(baseSource: string | null, headSource: string, changedFiles?: readonly string[]): CapabilityMappingGateResult;
+//# sourceMappingURL=capability-coverage.d.ts.map

package/dist/harness/capability-coverage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-coverage.d.ts","sourceRoot":"","sources":["../../src/harness/capability-coverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,0DAA0D;AAC1D,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAeD;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,uBAAuB,GAC5B,MAAM,CAYR;AAED,8DAA8D;AAC9D,MAAM,WAAW,iBAAiB;IAChC,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,0CAA0C;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,QAAQ,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gDAAgD;IAChD,KAAK,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC5B,mEAAmE;IACnE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,KAAK,CAAC;QACV,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,OAAO,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,+DAA+D;IAC/D,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,gEAAgE;IAChE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,+DAA+D;IAC/D,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,wDAAwD;IACxD,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,6DAA6D;IAC7D,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,0DAA0D;IAC1D,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,0CAA0C;IAC1C,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,EACvC,OAAO,EAAE,SAAS,uBAAuB,EAAE,EAC3C,SAAS,EAAE,SAAS,YAAY,EAAE,GACjC,qBAAqB,CA8EvB;AAMD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,GACb,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CA8B7B;AAwBD,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,MAAM,EAAE,kBAAkB,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,2BAA2B;IAC1C,+CAA+C;IAC/C,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,iEAAiE;IACjE,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,oDAAoD;IACpD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,iEAAiE;IACjE,UAAU,EAAE,0BAA0B,EAAE,CAAC;CAC1C;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAClC,MAAM,CAMR;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,UAAU,EAAE,MAAM,EAClB,YAAY,GAAE,SAAS,MAAM,EAAO,GACnC,2BAA2B,CAyC7B"}

package/dist/harness/capability-coverage.js

@@ -0,0 +1,266 @@
+/**
+ * Capability coverage: what proves each agent capability still works.
+ *
+ * The harness registry answers the question one level up — which harness
+ * covers which product *surface* — and `SurfaceEntry.paths` is deliberately
+ * coarse: `packages/agents/` is one path, and a diff that adds a capability
+ * to it lights up the same checks a diff that renames a local variable does.
+ * That is the hole this table fills. Every exported capability is named here
+ * with the file that implements it, the checked-in suites a selfcheck runs
+ * over it, the eval cases that drive a model through it, or — when nothing
+ * does yet — a written gap note.
+ *
+ * The invariant is the registry's, one rung down: no capability without a
+ * check or a documented gap. It is enforced by `capability-coverage.test.ts`
+ * (the audit, plus the on-disk checks the pure audit cannot make) and by
+ * `nodetool harness capabilities --strict`.
+ *
+ * `contract` is a fingerprint of what the capability *declares* — its name,
+ * description, input schema, permission category, and whether it needs the
+ * caller's tool-call id. It is generated, never hand-written: run
+ * `npm run capabilities:sync` after touching a spec. It exists so the gate can
+ * tell a contract change from a refactor: `nodetool harness gate --base <ref>`
+ * demands a new or changed mapping only when a capability is added or its
+ * fingerprint moves.
+ */
+import { createHash } from "node:crypto";
+import { isRecord } from "../predicates.js";
+/** Key order is not part of a contract, so the payload is sorted first. */
+function canonical(value) {
+    if (Array.isArray(value))
+        return value.map(canonical);
+    if (isRecord(value)) {
+        return Object.fromEntries(Object.entries(value)
+            .sort(([a], [b]) => (a < b ? -1 : 1))
+            .map(([key, inner]) => [key, canonical(inner)]));
+    }
+    return value;
+}
+/**
+ * What a capability promises its callers, as twelve hex digits: the wire name,
+ * the description a model reads, the input schema, the permission category,
+ * and whether it needs the caller's tool-call id. Everything else about an
+ * implementation can move without a caller noticing.
+ */
+export function capabilityContractFingerprint(spec) {
+    const payload = canonical({
+        name: spec.name,
+        description: spec.description,
+        inputSchema: spec.inputSchema,
+        category: spec.category,
+        needsToolCallId: spec.needsToolCallId ?? false
+    });
+    return createHash("sha256")
+        .update(JSON.stringify(payload))
+        .digest("hex")
+        .slice(0, 12);
+}
+/**
+ * The table against the live registry. Pure: on-disk checks (does the impl
+ * file exist, does the suite name the capability, does the eval file declare
+ * the case) live in the test, which can read the repo.
+ */
+export function auditCapabilityCoverage(declared, entries, harnesses) {
+    const selfcheckable = new Set(harnesses.filter((h) => h.selfcheck).map((h) => h.id));
+    const byName = new Map();
+    const duplicates = [];
+    for (const entry of entries) {
+        if (byName.has(entry.name)) {
+            duplicates.push(entry.name);
+            continue;
+        }
+        byName.set(entry.name, entry);
+    }
+    const declaredByName = new Map(declared.map((d) => [d.name, d]));
+    const unmapped = declared
+        .filter((d) => !byName.has(d.name))
+        .map((d) => d.name);
+    const stale = [];
+    const undocumentedGaps = [];
+    const unknownSelfchecks = [];
+    const selfchecksWithoutSuites = [];
+    const contractDrift = [];
+    const moduleMismatches = [];
+    const rows = entries.map((entry) => {
+        const live = declaredByName.get(entry.name);
+        if (!live) {
+            stale.push(entry.name);
+        }
+        else {
+            if (live.module !== entry.module) {
+                moduleMismatches.push(`${entry.name}: table says ${entry.module}, registry says ${live.module}`);
+            }
+            if (live.contract !== entry.contract) {
+                contractDrift.push(`${entry.name}: table says ${entry.contract}, registry says ${live.contract}`);
+            }
+        }
+        if (entry.selfcheck !== undefined) {
+            if (!selfcheckable.has(entry.selfcheck)) {
+                unknownSelfchecks.push(`${entry.name} → ${entry.selfcheck}`);
+            }
+            if (!entry.suites || entry.suites.length === 0) {
+                selfchecksWithoutSuites.push(entry.name);
+            }
+        }
+        const evalCases = (entry.evals ?? []).reduce((sum, ref) => sum + ref.cases.length, 0);
+        const covered = entry.selfcheck !== undefined || evalCases > 0;
+        if (!covered && !entry.gap)
+            undocumentedGaps.push(entry.name);
+        return {
+            name: entry.name,
+            module: entry.module,
+            covered,
+            ...(entry.selfcheck && { selfcheck: entry.selfcheck }),
+            evalCases,
+            ...(entry.gap && { gap: entry.gap })
+        };
+    });
+    return {
+        rows,
+        coveredCount: rows.filter((r) => r.covered).length,
+        gapCount: rows.filter((r) => !r.covered).length,
+        unmapped,
+        stale,
+        undocumentedGaps,
+        unknownSelfchecks,
+        selfchecksWithoutSuites,
+        contractDrift,
+        moduleMismatches,
+        duplicates
+    };
+}
+// ---------------------------------------------------------------------------
+// The gate: a contract that moved must move its mapping with it.
+// ---------------------------------------------------------------------------
+/**
+ * One entry's literal text, keyed by wire name, read out of the table's
+ * source. Textual on purpose: the gate compares this file at two git refs, and
+ * `git show <ref>:<path>` hands back source, not a module it can import.
+ *
+ * The scan is structural — brace depth inside the array literal — so it does
+ * not care how the entries are wrapped, only that each carries a
+ * `name: "..."` field.
+ */
+export function extractCoverageBlocks(source) {
+    const blocks = new Map();
+    const marker = source.indexOf("CAPABILITY_COVERAGE");
+    if (marker === -1)
+        return blocks;
+    // Past the type annotation — `CapabilityCoverageEntry[]` carries a bracket
+    // of its own — to the `[` that opens the array literal.
+    const assign = source.indexOf("=", marker);
+    if (assign === -1)
+        return blocks;
+    const start = source.indexOf("[", assign);
+    if (start === -1)
+        return blocks;
+    let depth = 0;
+    let blockStart = -1;
+    for (let i = start + 1; i < source.length; i += 1) {
+        const ch = source[i];
+        if (ch === "]" && depth === 0)
+            break;
+        if (ch === "{") {
+            if (depth === 0)
+                blockStart = i;
+            depth += 1;
+        }
+        else if (ch === "}") {
+            depth -= 1;
+            if (depth === 0 && blockStart !== -1) {
+                const text = source.slice(blockStart, i + 1);
+                const name = /name:\s*"([^"]+)"/.exec(text)?.[1];
+                if (name !== undefined && !blocks.has(name))
+                    blocks.set(name, text);
+                blockStart = -1;
+            }
+        }
+    }
+    return blocks;
+}
+/** An entry's text with the generated fingerprint removed. */
+function coverageSignature(block) {
+    return block.replace(/contract:\s*"[^"]*",?\s*/g, "");
+}
+/** Repo-relative, forward-slashed, with no leading `./`. */
+function normalizeRepoPath(path) {
+    return path.replace(/\\/g, "/").replace(/^\.\//, "");
+}
+/** Whether one of the entry's listed suite files is in the diff. */
+function coversAChangedSuite(block, changed) {
+    if (changed.size === 0)
+        return false;
+    const suites = block.match(/"([^"]*\.test\.[cm]?tsx?)"/g) ?? [];
+    return suites.some((quoted) => changed.has(normalizeRepoPath(quoted.slice(1, -1))));
+}
+/**
+ * Which commit to read the base table from: the merge base of `ref` and HEAD,
+ * not `ref`'s tip. A branch that is merely behind otherwise inherits every
+ * contract that moved on the base branch since it forked — a refactor that
+ * touched no capability at all failed on `list_entities`, `create_entity` and
+ * `update_entity`, which had gained a `project_id` field on `main` meanwhile.
+ * The changed-file half of the gate already asks `base...HEAD`; this asks the
+ * same question of one file. Falls back to `ref` when there is no merge base
+ * (a shallow clone, an unrelated ref).
+ */
+export function resolveGateBaseRef(ref, runGit) {
+    try {
+        return runGit(`git merge-base ${ref} HEAD`).trim() || ref;
+    }
+    catch {
+        return ref;
+    }
+}
+/**
+ * Compare the table at two refs. A capability that is new, or whose coverage
+ * fields changed, satisfies the rule by construction; a contract that moved
+ * while the mapping stood still does not.
+ *
+ * `baseSource` is null when the file does not exist at the base ref — every
+ * entry is then new, and nothing is a violation.
+ *
+ * `changedFiles` answers the rule the other way round. The mapping's `suites`
+ * are file paths, and they do not move when a case is *added* to a file
+ * already listed — which is what covering a new contract usually looks like.
+ * Reading the diff, a contract change whose own covering suite also changed
+ * has been answered: the suite is named, and it is in the diff. Without this a
+ * one-word description edit demanded a contrived change to a generated field,
+ * and the honest fix — write the test — could not satisfy the gate.
+ */
+export function planCapabilityMappingGate(baseSource, headSource, changedFiles = []) {
+    const base = baseSource === null ? new Map() : extractCoverageBlocks(baseSource);
+    const head = extractCoverageBlocks(headSource);
+    const added = [];
+    const contractChanged = [];
+    const violations = [];
+    const changed = new Set(changedFiles.map(normalizeRepoPath));
+    for (const [name, block] of head) {
+        const before = base.get(name);
+        if (before === undefined) {
+            added.push(name);
+            continue;
+        }
+        const contractMoved = /contract:\s*"([^"]*)"/.exec(before)?.[1] !==
+            /contract:\s*"([^"]*)"/.exec(block)?.[1];
+        if (!contractMoved)
+            continue;
+        contractChanged.push(name);
+        if (coverageSignature(before) === coverageSignature(block) &&
+            !coversAChangedSuite(block, changed)) {
+            violations.push({
+                name,
+                reason: "contract-changed",
+                detail: `${name} changed its declared contract, but its coverage mapping ` +
+                    "(selfcheck, suites, evals, gap) is unchanged — name the eval case " +
+                    "or suite that covers the new contract, or write a gap note"
+            });
+        }
+    }
+    return {
+        added,
+        contractChanged,
+        removed: [...base.keys()].filter((name) => !head.has(name)),
+        violations
+    };
+}
+//# sourceMappingURL=capability-coverage.js.map

package/dist/harness/capability-coverage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-coverage.js","sourceRoot":"","sources":["../../src/harness/capability-coverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAY5C,2EAA2E;AAC3E,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aAClB,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACpC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAClD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,IAA6B;IAE7B,MAAM,OAAO,GAAG,SAAS,CAAC;QACxB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,KAAK;KAC/C,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;SAC/B,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAiED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAuC,EACvC,OAA2C,EAC3C,SAAkC;IAElC,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACtD,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC1D,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,QAAQ;SACtB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,MAAM,uBAAuB,GAAa,EAAE,CAAC;IAC7C,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,gBAAgB,GAAa,EAAE,CAAC;IAEtC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjC,gBAAgB,CAAC,IAAI,CACnB,GAAG,KAAK,CAAC,IAAI,gBAAgB,KAAK,CAAC,MAAM,mBAAmB,IAAI,CAAC,MAAM,EAAE,CAC1E,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACrC,aAAa,CAAC,IAAI,CAChB,GAAG,KAAK,CAAC,IAAI,gBAAgB,KAAK,CAAC,QAAQ,mBAAmB,IAAI,CAAC,QAAQ,EAAE,CAC9E,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxC,iBAAiB,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/C,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAC1C,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,EACpC,CAAC,CACF,CAAC;QACF,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,GAAG,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG;YAAE,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9D,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO;YACP,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;YACtD,SAAS;YACT,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;SACrC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI;QACJ,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM;QAClD,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM;QAC/C,QAAQ;QACR,KAAK;QACL,gBAAgB;QAChB,iBAAiB;QACjB,uBAAuB;QACvB,aAAa;QACb,gBAAgB;QAChB,UAAU;KACX,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,iEAAiE;AACjE,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAc;IAEd,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACrD,IAAI,MAAM,KAAK,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACjC,2EAA2E;IAC3E,wDAAwD;IACxD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,MAAM,KAAK,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAEhC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC;YAAE,MAAM;QACrC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,KAAK,KAAK,CAAC;gBAAE,UAAU,GAAG,CAAC,CAAC;YAChC,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,KAAK,KAAK,CAAC,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC7C,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACjD,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACpE,UAAU,GAAG,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8DAA8D;AAC9D,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,4DAA4D;AAC5D,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,oEAAoE;AACpE,SAAS,mBAAmB,CAC1B,KAAa,EACb,OAA4B;IAE5B,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,6BAA6B,CAAC,IAAI,EAAE,CAAC;IAChE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAC5B,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CACpD,CAAC;AACJ,CAAC;AAoBD;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAW,EACX,MAAmC;IAEnC,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,kBAAkB,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,yBAAyB,CACvC,UAAyB,EACzB,UAAkB,EAClB,YAAY,GAAsB,EAAE;IAEpC,MAAM,IAAI,GAAG,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAE/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,MAAM,UAAU,GAAiC,EAAE,CAAC;IACpD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAE7D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,MAAM,aAAa,GACjB,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YACzC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,aAAa;YAAE,SAAS;QAC7B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,IACE,iBAAiB,CAAC,MAAM,CAAC,KAAK,iBAAiB,CAAC,KAAK,CAAC;YACtD,CAAC,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,EACpC,CAAC;YACD,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI;gBACJ,MAAM,EAAE,kBAAkB;gBAC1B,MAAM,EACJ,GAAG,IAAI,2DAA2D;oBAClE,oEAAoE;oBACpE,4DAA4D;aAC/D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK;QACL,eAAe;QACf,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3D,UAAU;KACX,CAAC;AACJ,CAAC"}

package/dist/harness/capability-table.d.ts

@@ -0,0 +1,17 @@
+/**
+ * GENERATED — the capability coverage table. Do not hand-edit anything but a
+ * gap note; `npm run capabilities:sync` rewrites the rest.
+ *
+ * One entry per exported agent capability: the file that implements it, the
+ * checked-in suites a selfcheck runs over it, the eval cases that drive a
+ * model through it, and a written gap note where nothing does yet. The rules,
+ * the audit, and the gate live in `capability-coverage.ts`; the derivation
+ * lives in `scripts/sync-capability-coverage.mjs`.
+ *
+ * A new capability lands here with no suite and no eval case, and
+ * `npm run capabilities:check` fails until someone either writes the case or
+ * writes down why there isn't one.
+ */
+import type { CapabilityCoverageEntry } from "./capability-coverage.js";
+export declare const CAPABILITY_COVERAGE: readonly CapabilityCoverageEntry[];
+//# sourceMappingURL=capability-table.d.ts.map

package/dist/harness/capability-table.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-table.d.ts","sourceRoot":"","sources":["../../src/harness/capability-table.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAExE,eAAO,MAAM,mBAAmB,EAAE,SAAS,uBAAuB,EAsxHjE,CAAC"}