@pedyc/harness-core 1.0.1 → 1.1.1

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 Pedyc
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 Pedyc
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,48 +1,55 @@
-# @pedyc/harness-core
-
-Technology-stack agnostic runtime primitives for Pedyc Harness. The package has no
-dependency on Vue or on any project layout, and is used by `pedyc-harness`.
-
-## API
-
-```js
-import {
-  detectPackageManager,
-  packageScriptCommand,
-  normalizeTask,
-  readTaskFile,
-  runCommand,
-  changedFiles,
-  snapshotFiles,
-  loadSchemas,
-  createValidators,
-  validationDetails,
-  parseAgentResponse,
-  validateStageResponse,
-  validatePolicy,
-  findOutOfScopeChanges,
-  isCommandAllowed,
-  createProviderRunner,
-  runOrchestrator,
-} from '@pedyc/harness-core'
-```
-
-Individual modules are also exported for narrower imports:
-
-```js
-import { detectPackageManager } from '@pedyc/harness-core/package-manager'
-import { runOrchestrator } from '@pedyc/harness-core/orchestrator'
-```
-
-- `package-manager` / `command` — lockfile detection and command execution.
-- `intake` / `schema` / `agent` — task normalization, Ajv validation and Agent
-  response parsing.
-- `policy` / `provider` / `orchestrator` — path policy, Provider routing and the
-  four-phase execution loop.
-
-`runOrchestrator({ dryRun: true })` skips every Agent Provider and verification gate
-and returns a structured passing result.
-
-## License
-
-MIT
+# @pedyc/harness-core
+
+Technology-stack agnostic runtime primitives for Pedyc Harness. The package has no
+dependency on Vue or on any project layout, and is used by `pedyc-harness`.
+
+## API
+
+```js
+import {
+  detectPackageManager,
+  packageScriptCommand,
+  normalizeTask,
+  readTaskFile,
+  runCommand,
+  changedFiles,
+  snapshotFiles,
+  loadSchemas,
+  createValidators,
+  validationDetails,
+  parseAgentResponse,
+  validateStageResponse,
+  validatePolicy,
+  findOutOfScopeChanges,
+  isCommandAllowed,
+  createProviderRunner,
+  runOrchestrator,
+} from '@pedyc/harness-core'
+```
+
+Individual modules are also exported for narrower imports:
+
+```js
+import { detectPackageManager } from '@pedyc/harness-core/package-manager'
+import { runOrchestrator } from '@pedyc/harness-core/orchestrator'
+```
+
+- `package-manager` / `command` — lockfile detection and command execution.
+- `intake` / `schema` / `agent` — task normalization, Ajv validation and Agent
+  response parsing.
+- `policy` / `provider` / `orchestrator` — path policy, Provider routing and the
+  four-phase execution loop.
+
+`runOrchestrator({ dryRun: true })` skips every Agent Provider and verification gate
+and returns a structured passing result.
+
+## Changelog
+
+All four Harness packages share one version number and are released together, so
+release notes for this package live in the repository changelog:
+
+https://github.com/pedyc/pedyc-harness/blob/main/CHANGELOG.md
+
+## License
+
+MIT

package/dist/adapters/provider-runner.d.ts

@@ -0,0 +1,18 @@
+import type { AgentCallResult, AgentRole, AgentsConfig, CommandPolicy, StageRequest } from '../contracts/index.js';
+import type { ResponseValidator, SchemaErrorFormatter } from '../core/validator.js';
+export interface ProviderRunnerOptions {
+    root: string;
+    agents: AgentsConfig;
+    policy: CommandPolicy;
+    validator: ResponseValidator;
+    ajv: SchemaErrorFormatter;
+}
+/**
+ * Builds the function that runs one pipeline stage.
+ *
+ * A stage configured as `internal` is a no-op that passes: the built-in
+ * pipeline has nothing to delegate. An `external` stage is spawned as a child
+ * process and must speak the stdin/stdout JSON protocol.
+ */
+export declare const createProviderRunner: ({ root, agents, policy, validator, ajv }: ProviderRunnerOptions) => (name: AgentRole, payload: StageRequest) => Promise<AgentCallResult>;
+//# sourceMappingURL=provider-runner.d.ts.map

package/dist/adapters/provider-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-runner.d.ts","sourceRoot":"","sources":["../../src/adapters/provider-runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,SAAS,EACT,YAAY,EACZ,aAAa,EACb,YAAY,EACb,MAAM,uBAAuB,CAAA;AAI9B,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAEnF,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,YAAY,CAAA;IACpB,MAAM,EAAE,aAAa,CAAA;IACrB,SAAS,EAAE,iBAAiB,CAAA;IAC5B,GAAG,EAAE,oBAAoB,CAAA;CAC1B;AAED;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,GAAI,0CAA0C,qBAAqB,MAC3F,MAAM,SAAS,EAAE,SAAS,YAAY,KAAG,OAAO,CAAC,eAAe,CAmCtE,CAAA"}

package/dist/adapters/provider-runner.js

@@ -0,0 +1,45 @@
+import { parseAgentResponse, validateStageResponse } from '../core/agent.js';
+import { runCommand } from '../core/command.js';
+import { isCommandAllowed } from '../core/policy-engine.js';
+/**
+ * Builds the function that runs one pipeline stage.
+ *
+ * A stage configured as `internal` is a no-op that passes: the built-in
+ * pipeline has nothing to delegate. An `external` stage is spawned as a child
+ * process and must speak the stdin/stdout JSON protocol.
+ */
+export const createProviderRunner = ({ root, agents, policy, validator, ajv }) => async (name, payload) => {
+    const config = agents[name];
+    if (!config || config.mode === 'internal') {
+        return { ok: true, details: `${name} completed using the built-in stage.`, payload: {} };
+    }
+    if (config.mode !== 'external' || typeof config.provider !== 'string') {
+        return { ok: false, details: `${name} requires a configured provider in .harness/agents.json.`, payload: {} };
+    }
+    const provider = agents.providers?.[config.provider];
+    if (!provider || typeof provider.command !== 'string' || !Array.isArray(provider.args)) {
+        return { ok: false, details: `${name} provider '${config.provider}' is not configured.`, payload: {} };
+    }
+    if (!isCommandAllowed(provider.command, policy)) {
+        return { ok: false, details: `${name} provider command is not in policy.allowedAgentCommands.`, payload: {} };
+    }
+    const result = await runCommand(root, provider.command, provider.args, {
+        ...payload,
+        provider: config.provider,
+    });
+    if (result.code !== 0) {
+        return {
+            ok: false,
+            details: result.stderr.trim() || `${name} exited with code ${result.code}.`,
+            payload: {},
+        };
+    }
+    const response = parseAgentResponse(name, result.stdout, validator, ajv);
+    if (!response.ok)
+        return response;
+    const stageError = validateStageResponse(name, response.payload);
+    return stageError
+        ? { ok: false, details: stageError, payload: response.payload }
+        : response;
+};
+//# sourceMappingURL=provider-runner.js.map

package/dist/adapters/provider-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-runner.js","sourceRoot":"","sources":["../../src/adapters/provider-runner.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAA;AAC5E,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAW3D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAyB,EAAE,EAAE,CACtG,KAAK,EAAE,IAAe,EAAE,OAAqB,EAA4B,EAAE;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IAC3B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,sCAAsC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IAC1F,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,0DAA0D,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IAC/G,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACpD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACvF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,cAAc,MAAM,CAAC,QAAQ,sBAAsB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IACxG,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,0DAA0D,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IAC/G,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;QACrE,GAAG,OAAO;QACV,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CAAA;IACF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,qBAAqB,MAAM,CAAC,IAAI,GAAG;YAC3E,OAAO,EAAE,EAAE;SACZ,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IACxE,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAA;IAEjC,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;IAChE,OAAO,UAAU;QACf,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;QAC/D,CAAC,CAAC,QAAQ,CAAA;AACd,CAAC,CAAA"}

package/dist/contracts/agent.d.ts

@@ -0,0 +1,79 @@
+import type { AgentMode, AgentRole } from './policy.js';
+import type { FileChange } from './run.js';
+import type { NormalizedTask } from './task.js';
+import type { VerificationCheck } from './validation.js';
+/** A provider entry from `.harness/agents.json`. */
+export interface ProviderConfig {
+    command: string;
+    args: string[];
+}
+/** How one stage is routed. `provider` is only meaningful for external mode. */
+export interface AgentRoleConfig {
+    mode: AgentMode;
+    provider?: string;
+}
+export interface AgentsConfig {
+    providers?: Record<string, ProviderConfig>;
+    planner?: AgentRoleConfig;
+    coder?: AgentRoleConfig;
+    tester?: AgentRoleConfig;
+    reviewer?: AgentRoleConfig;
+}
+/**
+ * A provider's decoded stdout.
+ *
+ * This is untrusted JSON, so every field is optional: `validateStageResponse`
+ * is the runtime gate that decides whether a stage may proceed. The type
+ * describes the wire shape; it does not promise that a field is present.
+ */
+export interface AgentPayload {
+    details?: string;
+    approved?: boolean;
+    implementationPlan?: string[];
+    evidence?: VerificationCheck[];
+    issues?: string[];
+    changedFiles?: string[];
+}
+/** The outcome of running one stage. `payload` stays empty for built-in stages. */
+export interface AgentCallResult {
+    ok: boolean;
+    details: string;
+    payload: AgentPayload;
+}
+interface StageRequestBase {
+    input: NormalizedTask;
+    implementationPlan: string[];
+}
+/**
+ * What each stage receives. The shape is per-phase so a provider adapter can
+ * rely on the fields its own phase needs.
+ */
+export interface PlannerRequest extends StageRequestBase {
+    phase: 'planner';
+}
+export interface CoderRequest extends StageRequestBase {
+    phase: 'coder';
+    iteration: number;
+    previousVerification: VerificationCheck[];
+}
+export interface TesterRequest extends StageRequestBase {
+    phase: 'tester';
+    iteration: number;
+    verification: VerificationCheck[];
+}
+export interface ReviewerRequest extends StageRequestBase {
+    phase: 'reviewer';
+    iteration: number;
+    verification: VerificationCheck[];
+    fileChanges: FileChange[];
+}
+export type StageRequest = PlannerRequest | CoderRequest | TesterRequest | ReviewerRequest;
+/**
+ * Runs one stage of the pipeline.
+ *
+ * The request is serialized to JSON and handed to the provider over stdin, so
+ * this signature is the whole adapter protocol.
+ */
+export type RunAgent = (name: AgentRole, request: StageRequest) => Promise<AgentCallResult>;
+export {};
+//# sourceMappingURL=agent.d.ts.map

package/dist/contracts/agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/contracts/agent.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAC1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAExD,oDAAoD;AACpD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,EAAE,CAAA;CACf;AAED,gFAAgF;AAChF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,SAAS,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IAC1C,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB,KAAK,CAAC,EAAE,eAAe,CAAA;IACvB,MAAM,CAAC,EAAE,eAAe,CAAA;IACxB,QAAQ,CAAC,EAAE,eAAe,CAAA;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAA;IAC9B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;CACxB;AAED,mFAAmF;AACnF,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAA;IACX,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,YAAY,CAAA;CACtB;AAED,UAAU,gBAAgB;IACxB,KAAK,EAAE,cAAc,CAAA;IACrB,kBAAkB,EAAE,MAAM,EAAE,CAAA;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAe,SAAQ,gBAAgB;IACtD,KAAK,EAAE,SAAS,CAAA;CACjB;AAED,MAAM,WAAW,YAAa,SAAQ,gBAAgB;IACpD,KAAK,EAAE,OAAO,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,oBAAoB,EAAE,iBAAiB,EAAE,CAAA;CAC1C;AAED,MAAM,WAAW,aAAc,SAAQ,gBAAgB;IACrD,KAAK,EAAE,QAAQ,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,iBAAiB,EAAE,CAAA;CAClC;AAED,MAAM,WAAW,eAAgB,SAAQ,gBAAgB;IACvD,KAAK,EAAE,UAAU,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,iBAAiB,EAAE,CAAA;IACjC,WAAW,EAAE,UAAU,EAAE,CAAA;CAC1B;AAED,MAAM,MAAM,YAAY,GAAG,cAAc,GAAG,YAAY,GAAG,aAAa,GAAG,eAAe,CAAA;AAE1F;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA"}

package/dist/contracts/agent.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=agent.js.map

package/dist/contracts/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/contracts/agent.ts"],"names":[],"mappings":""}

package/dist/contracts/index.d.ts

@@ -0,0 +1,7 @@
+export type { AgentMode, AgentRole, CommandPolicy, Policy } from './policy.js';
+export type { VerificationCheck } from './validation.js';
+export type { IntakeResult, NormalizedTask, RawTaskInput } from './task.js';
+export type { Preset, PresetDetection } from './preset.js';
+export type { FileChange, OrchestrationResult, PhaseRecord, PhaseStatus, RunResult, RunStatus } from './run.js';
+export type { AgentCallResult, AgentPayload, AgentRoleConfig, AgentsConfig, CoderRequest, PlannerRequest, ProviderConfig, ReviewerRequest, RunAgent, StageRequest, TesterRequest, } from './agent.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/contracts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAC9E,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACxD,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAC3E,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC1D,YAAY,EAAE,UAAU,EAAE,mBAAmB,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAC/G,YAAY,EACV,eAAe,EACf,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,cAAc,EACd,eAAe,EACf,QAAQ,EACR,YAAY,EACZ,aAAa,GACd,MAAM,YAAY,CAAA"}

package/dist/contracts/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/contracts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":""}

package/dist/contracts/policy.d.ts

@@ -0,0 +1,30 @@
+/** How a stage runs: by the built-in stage or by an external provider. */
+export type AgentMode = 'internal' | 'external';
+/** The four stages of the fixed Planner → Coder → Tester → Reviewer pipeline. */
+export type AgentRole = 'planner' | 'coder' | 'tester' | 'reviewer';
+/**
+ * The part of the policy that bounds which commands an agent may run.
+ *
+ * The provider runner consults nothing else, so it accepts this narrower type
+ * rather than a whole policy.
+ */
+export interface CommandPolicy {
+    allowedAgentCommands?: string[];
+}
+/**
+ * A project's `.harness/policy.json`.
+ *
+ * Only `allowedProductPaths` is required: `validatePolicy` rejects a policy
+ * without it, and out-of-scope detection dereferences it directly. Every other
+ * field stays optional because the document is untrusted JSON and callers fall
+ * back to defaults.
+ */
+export interface Policy extends CommandPolicy {
+    allowedProductPaths: string[];
+    maxIterations?: number;
+    protectedPaths?: string[];
+    requiredChecks?: string[];
+    forbiddenCommands?: string[];
+    agentTimeoutMs?: number;
+}
+//# sourceMappingURL=policy.d.ts.map

package/dist/contracts/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/contracts/policy.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,UAAU,CAAA;AAE/C,iFAAiF;AACjF,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAA;AAEnE;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;CAChC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,MAAO,SAAQ,aAAa;IAC3C,mBAAmB,EAAE,MAAM,EAAE,CAAA;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB"}

package/dist/contracts/policy.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=policy.js.map

package/dist/contracts/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/contracts/policy.ts"],"names":[],"mappings":""}

package/dist/contracts/preset.d.ts

@@ -0,0 +1,27 @@
+import type { AgentsConfig } from './agent.js';
+import type { Policy } from './policy.js';
+/** What a preset looks for when deciding whether it applies to a project. */
+export interface PresetDetection {
+    requiredFiles: string[];
+    requiredDependencies: string[];
+}
+/**
+ * A project preset: the files `pedyc-harness init` writes into a target project
+ * and the defaults it derives from them.
+ *
+ * The shape is declared here rather than in the preset packages so the packages
+ * stay independent of each other. Presets import this as a type only, so nothing
+ * is coupled at runtime.
+ */
+export interface Preset {
+    name: string;
+    detection: PresetDetection;
+    defaultProductPaths: string[];
+    verificationScripts: string[];
+    skills: string[];
+    policy: Policy;
+    agents: AgentsConfig;
+    /** Written to the target project's `AGENTS.md`. */
+    instruction: string;
+}
+//# sourceMappingURL=preset.d.ts.map

package/dist/contracts/preset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preset.d.ts","sourceRoot":"","sources":["../../src/contracts/preset.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAC9C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEzC,6EAA6E;AAC7E,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,oBAAoB,EAAE,MAAM,EAAE,CAAA;CAC/B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,eAAe,CAAA;IAC1B,mBAAmB,EAAE,MAAM,EAAE,CAAA;IAC7B,mBAAmB,EAAE,MAAM,EAAE,CAAA;IAC7B,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,YAAY,CAAA;IACpB,mDAAmD;IACnD,WAAW,EAAE,MAAM,CAAA;CACpB"}

package/dist/contracts/preset.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=preset.js.map

package/dist/contracts/preset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preset.js","sourceRoot":"","sources":["../../src/contracts/preset.ts"],"names":[],"mappings":""}

package/dist/contracts/run.d.ts

@@ -0,0 +1,41 @@
+import type { VerificationCheck } from './validation.js';
+export type RunStatus = 'passed' | 'failed';
+export type PhaseStatus = 'running' | 'passed' | 'failed';
+export interface PhaseRecord {
+    name: string;
+    status: PhaseStatus;
+    details: string;
+    iteration?: number;
+}
+/** A file whose contents changed while the coder ran. */
+export interface FileChange {
+    file: string;
+    change: string;
+}
+/**
+ * What `runOrchestrator` reports. It carries no `status` or `summary` because
+ * only the caller knows how to phrase those; `runHarness` turns this into a
+ * `RunResult`.
+ */
+export interface OrchestrationResult {
+    completed: boolean;
+    implementationPlan: string[];
+    fileChanges: FileChange[];
+    verification: VerificationCheck[];
+    issues: string[];
+    phases: PhaseRecord[];
+    iterations: number;
+}
+/** The document written to `output.json`; matches `output.schema.json`. */
+export interface RunResult {
+    status: RunStatus;
+    summary: string;
+    implementationPlan: string[];
+    fileChanges: FileChange[];
+    verification: VerificationCheck[];
+    issues: string[];
+    phases: PhaseRecord[];
+    iterations: number;
+    dryRun: boolean;
+}
+//# sourceMappingURL=run.d.ts.map

package/dist/contracts/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/contracts/run.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAExD,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAE3C,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAEzD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,WAAW,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,yDAAyD;AACzD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,OAAO,CAAA;IAClB,kBAAkB,EAAE,MAAM,EAAE,CAAA;IAC5B,WAAW,EAAE,UAAU,EAAE,CAAA;IACzB,YAAY,EAAE,iBAAiB,EAAE,CAAA;IACjC,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,MAAM,EAAE,WAAW,EAAE,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,2EAA2E;AAC3E,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,SAAS,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,kBAAkB,EAAE,MAAM,EAAE,CAAA;IAC5B,WAAW,EAAE,UAAU,EAAE,CAAA;IACzB,YAAY,EAAE,iBAAiB,EAAE,CAAA;IACjC,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,MAAM,EAAE,WAAW,EAAE,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,OAAO,CAAA;CAChB"}

package/dist/contracts/run.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=run.js.map

package/dist/contracts/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/contracts/run.ts"],"names":[],"mappings":""}

package/dist/contracts/task.d.ts

@@ -0,0 +1,35 @@
+/** The normalized task every stage receives; matches `input.schema.json`. */
+export interface NormalizedTask {
+    feature: string;
+    objective: string;
+    constraints: string[];
+    acceptanceCriteria: string[];
+    testHints: string[];
+    maxIterations: number;
+}
+/**
+ * The three input layers accept different field names for the same concept.
+ * Only `normalizeTask` sees this raw shape.
+ */
+export interface RawTaskInput {
+    task?: string;
+    feature?: string;
+    goal?: string;
+    objective?: string;
+    specialConstraints?: string[];
+    constraints?: string[];
+    acceptance?: string[];
+    acceptanceCriteria?: string[];
+    testHints?: string[];
+    maxIterations?: number;
+}
+/**
+ * The result of intake. `needs_input` lists the questions a human still has to
+ * answer; `ready` carries a task that can go straight to the planner.
+ */
+export interface IntakeResult {
+    status: 'ready' | 'needs_input';
+    questions: string[];
+    normalizedTask: NormalizedTask;
+}
+//# sourceMappingURL=task.d.ts.map

package/dist/contracts/task.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task.d.ts","sourceRoot":"","sources":["../../src/contracts/task.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,kBAAkB,EAAE,MAAM,EAAE,CAAA;IAC5B,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,OAAO,GAAG,aAAa,CAAA;IAC/B,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,cAAc,EAAE,cAAc,CAAA;CAC/B"}

package/dist/contracts/task.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=task.js.map

package/dist/contracts/task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task.js","sourceRoot":"","sources":["../../src/contracts/task.ts"],"names":[],"mappings":""}

package/dist/contracts/validation.d.ts

@@ -0,0 +1,7 @@
+/** One executed verification gate and its outcome. */
+export interface VerificationCheck {
+    command: string;
+    result: 'pass' | 'fail';
+    details: string;
+}
+//# sourceMappingURL=validation.d.ts.map

package/dist/contracts/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/contracts/validation.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;IACvB,OAAO,EAAE,MAAM,CAAA;CAChB"}

package/dist/contracts/validation.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=validation.js.map

package/dist/contracts/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/contracts/validation.ts"],"names":[],"mappings":""}

package/dist/core/agent.d.ts

@@ -0,0 +1,22 @@
+import type { AgentPayload, AgentRole } from '../contracts/index.js';
+import type { ResponseValidator, SchemaErrorFormatter } from './validator.js';
+export interface ParsedAgentResponse {
+    ok: boolean;
+    details: string;
+    payload: AgentPayload;
+}
+/**
+ * Decodes one provider response from stdout.
+ *
+ * An empty stdout is accepted: a built-in stage legitimately produces no
+ * payload. Anything else must be a single JSON object matching the agent
+ * response schema.
+ */
+export declare const parseAgentResponse: (name: AgentRole, stdout: string, validate: ResponseValidator, ajv: SchemaErrorFormatter) => ParsedAgentResponse;
+/**
+ * Applies the stage-specific requirements the response schema cannot express.
+ *
+ * Returns the problem as a message, or `null` when the stage may proceed.
+ */
+export declare const validateStageResponse: (name: AgentRole, payload: AgentPayload) => string | null;
+//# sourceMappingURL=agent.d.ts.map

package/dist/core/agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/core/agent.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAE7E,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAA;IACX,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,YAAY,CAAA;CACtB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,GAC7B,MAAM,SAAS,EACf,QAAQ,MAAM,EACd,UAAU,iBAAiB,EAC3B,KAAK,oBAAoB,KACxB,mBAgBF,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAAI,MAAM,SAAS,EAAE,SAAS,YAAY,KAAG,MAAM,GAAG,IAYvF,CAAA"}

package/dist/core/agent.js

@@ -0,0 +1,47 @@
+/**
+ * Decodes one provider response from stdout.
+ *
+ * An empty stdout is accepted: a built-in stage legitimately produces no
+ * payload. Anything else must be a single JSON object matching the agent
+ * response schema.
+ */
+export const parseAgentResponse = (name, stdout, validate, ajv) => {
+    const trimmed = stdout.trim();
+    if (!trimmed)
+        return { ok: true, details: `${name} completed without a response payload.`, payload: {} };
+    try {
+        const payload = JSON.parse(trimmed);
+        if (!validate(payload)) {
+            return {
+                ok: false,
+                details: `${name} returned an invalid response: ${ajv.errorsText(validate.errors)}`,
+                payload: {},
+            };
+        }
+        return { ok: true, details: payload.details ?? `${name} returned a structured response.`, payload };
+    }
+    catch {
+        return { ok: false, details: `${name} must return one JSON object on stdout.`, payload: {} };
+    }
+};
+/**
+ * Applies the stage-specific requirements the response schema cannot express.
+ *
+ * Returns the problem as a message, or `null` when the stage may proceed.
+ */
+export const validateStageResponse = (name, payload) => {
+    if (name === 'planner' && (!Array.isArray(payload.implementationPlan) || payload.implementationPlan.length === 0)) {
+        return 'planner must return a non-empty implementationPlan.';
+    }
+    if (name === 'tester') {
+        if (typeof payload.approved !== 'boolean')
+            return 'tester must return a boolean approved field.';
+        if (!Array.isArray(payload.evidence) || payload.evidence.length === 0)
+            return 'tester must return non-empty evidence.';
+    }
+    if (name === 'reviewer' && typeof payload.approved !== 'boolean') {
+        return 'reviewer must return a boolean approved field.';
+    }
+    return null;
+};
+//# sourceMappingURL=agent.js.map

package/dist/core/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/core/agent.ts"],"names":[],"mappings":"AASA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,IAAe,EACf,MAAc,EACd,QAA2B,EAC3B,GAAyB,EACJ,EAAE;IACvB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,wCAAwC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IACxG,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAiB,CAAA;QACnD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,GAAG,IAAI,kCAAkC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;gBACnF,OAAO,EAAE,EAAE;aACZ,CAAA;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,GAAG,IAAI,kCAAkC,EAAE,OAAO,EAAE,CAAA;IACrG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,yCAAyC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IAC9F,CAAC;AACH,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,IAAe,EAAE,OAAqB,EAAiB,EAAE;IAC7F,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAClH,OAAO,qDAAqD,CAAA;IAC9D,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,8CAA8C,CAAA;QAChG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,wCAAwC,CAAA;IACxH,CAAC;IACD,IAAI,IAAI,KAAK,UAAU,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjE,OAAO,gDAAgD,CAAA;IACzD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA"}

package/dist/core/approval-gate.d.ts

@@ -0,0 +1,17 @@
+import type { AgentCallResult, VerificationCheck } from '../contracts/index.js';
+/**
+ * Whether the tester stage may pass.
+ *
+ * Two independent conditions: every configured gate actually passed, and the
+ * tester agent approved the evidence it was handed. A run never passes on the
+ * coder's own claim.
+ */
+export declare const testerApproved: (verification: VerificationCheck[], externalTest: AgentCallResult) => boolean;
+/**
+ * Whether the reviewer stage may pass.
+ *
+ * Scope is checked here rather than trusted to the agent: any out-of-scope file
+ * rejects the change even when the reviewer approves it.
+ */
+export declare const reviewerApproved: (reviewer: AgentCallResult, outOfScopeChanges: string[]) => boolean;
+//# sourceMappingURL=approval-gate.d.ts.map