@pedyc/harness-core 1.1.0 → 1.2.0

package/dist/runtime/executor.js

@@ -0,0 +1,142 @@
+import { reviewerApproved, testerApproved } from './approval-gate.js';
+import { findOutOfScopeChanges } from './policy-engine.js';
+/**
+ * Runs the fixed Planner → Coder → Tester → Reviewer pipeline.
+ *
+ * The loop retries the coder only while the tester has not approved and the
+ * iteration budget allows it; a planner, coder or reviewer failure stops the
+ * run outright.
+ */
+export const runOrchestrator = async ({ input, policy, dryRun, snapshot, changedFiles, runAgent, runVerification, writeVerification = () => { }, }) => {
+    const maxIterations = Math.min(Math.max(Number(input.maxIterations ?? policy.maxIterations ?? 3), 1), policy.maxIterations ?? 3);
+    const phases = [];
+    const issues = [];
+    const fileChanges = [];
+    const implementationPlan = [
+        `Analyze the requested feature: ${input.feature.trim()}.`,
+        `Implement the objective while satisfying ${input.acceptanceCriteria.length} acceptance criteria.`,
+        'Run configured verification gates and review the result before reporting completion.',
+    ];
+    if (dryRun) {
+        // A dry run is a safe preview: no Agent Provider is invoked, no verification
+        // gate is executed, and no product file can change. Report the same four
+        // phases so callers can consume the result with the regular output contract.
+        for (const [name, details] of [
+            ['planner', 'Dry run: planner execution skipped; no agent provider was invoked.'],
+            ['coder', 'Dry run: coder execution skipped; no product files were changed.'],
+            ['tester', 'Dry run: tester execution skipped; no verification gates were executed.'],
+            ['reviewer', 'Dry run: reviewer execution skipped; no product files were changed.'],
+        ]) {
+            phases.push({ name, iteration: 1, status: 'passed', details });
+        }
+        return { completed: true, implementationPlan, fileChanges, verification: [], issues, phases, iterations: 1 };
+    }
+    const recordPhase = (name, status, details, iteration) => {
+        const phase = { name, status, details };
+        if (iteration)
+            phase.iteration = iteration;
+        phases.push(phase);
+        return phase;
+    };
+    recordPhase('planner', 'running', 'Validating task input and preparing an implementation plan.');
+    const plan = await runAgent('planner', { phase: 'planner', input, implementationPlan });
+    phases[phases.length - 1] = { name: 'planner', status: plan.ok ? 'passed' : 'failed', details: plan.details };
+    if (plan.payload.implementationPlan?.length) {
+        implementationPlan.splice(0, implementationPlan.length, ...plan.payload.implementationPlan);
+    }
+    if (!plan.ok)
+        issues.push(plan.details);
+    let lastVerification = [];
+    let completed = false;
+    for (let iteration = 1; iteration <= maxIterations && issues.length === 0; iteration += 1) {
+        const before = snapshot();
+        recordPhase('coder', 'running', 'Applying the approved implementation plan.', iteration);
+        const coder = await runAgent('coder', {
+            phase: 'coder',
+            input,
+            implementationPlan,
+            iteration,
+            previousVerification: lastVerification,
+        });
+        phases[phases.length - 1] = {
+            name: 'coder',
+            iteration,
+            status: coder.ok ? 'passed' : 'failed',
+            details: coder.details,
+        };
+        for (const file of changedFiles(before, snapshot())) {
+            fileChanges.push({ file, change: `Changed during coder iteration ${iteration}.` });
+        }
+        if (!coder.ok) {
+            issues.push(coder.details);
+            break;
+        }
+        recordPhase('tester', 'running', 'Running required verification gates.', iteration);
+        const verification = await runVerification();
+        const externalTest = await runAgent('tester', {
+            phase: 'tester',
+            input,
+            implementationPlan,
+            verification,
+            iteration,
+        });
+        if (!externalTest.ok) {
+            verification.push({ command: 'external tester', result: 'fail', details: externalTest.details });
+        }
+        lastVerification = verification;
+        const testerOk = testerApproved(verification, externalTest);
+        phases[phases.length - 1] = {
+            name: 'tester',
+            iteration,
+            status: testerOk ? 'passed' : 'failed',
+            details: testerOk
+                ? 'All required gates passed and tester approved the evidence.'
+                : externalTest.ok
+                    ? 'At least one required gate failed or tester rejected the evidence.'
+                    : externalTest.details,
+        };
+        writeVerification(iteration, verification);
+        if (!testerOk && iteration === maxIterations) {
+            issues.push('Verification did not pass before maxIterations was reached.');
+            break;
+        }
+        if (!testerOk)
+            continue;
+        recordPhase('reviewer', 'running', 'Checking scope, output contract, and acceptance criteria.', iteration);
+        const outOfScopeChanges = findOutOfScopeChanges(fileChanges.map(({ file }) => file), policy);
+        const reviewer = await runAgent('reviewer', {
+            phase: 'reviewer',
+            input,
+            implementationPlan,
+            verification,
+            fileChanges,
+            iteration,
+        });
+        const reviewerOk = reviewerApproved(reviewer, outOfScopeChanges);
+        const reviewerDetails = outOfScopeChanges.length
+            ? `Out-of-scope files changed: ${outOfScopeChanges.join(', ')}`
+            : reviewer.details;
+        phases[phases.length - 1] = {
+            name: 'reviewer',
+            iteration,
+            status: reviewerOk ? 'passed' : 'failed',
+            details: reviewerDetails,
+        };
+        if (!reviewerOk) {
+            issues.push(reviewerDetails);
+            break;
+        }
+        completed = true;
+        break;
+    }
+    return {
+        completed,
+        implementationPlan,
+        fileChanges,
+        verification: lastVerification,
+        issues,
+        phases,
+        iterations: phases.filter((phase) => phase.name === 'coder').length,
+    };
+};
+//# sourceMappingURL=executor.js.map

package/dist/runtime/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/runtime/executor.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAErE,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAa1D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAAE,EACpC,KAAK,EACL,MAAM,EACN,MAAM,EACN,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,eAAe,EACf,iBAAiB,GAAG,GAAS,EAAE,GAAE,CAAC,GACd,EAAgC,EAAE;IACtD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,EACrE,MAAM,CAAC,aAAa,IAAI,CAAC,CAC1B,CAAA;IACD,MAAM,MAAM,GAAkB,EAAE,CAAA;IAChC,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,WAAW,GAAiB,EAAE,CAAA;IACpC,MAAM,kBAAkB,GAAa;QACnC,kCAAkC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG;QACzD,4CAA4C,KAAK,CAAC,kBAAkB,CAAC,MAAM,uBAAuB;QAClG,sFAAsF;KACvF,CAAA;IAED,IAAI,MAAM,EAAE,CAAC;QACX,6EAA6E;QAC7E,yEAAyE;QACzE,6EAA6E;QAC7E,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI;YAC5B,CAAC,SAAS,EAAE,oEAAoE,CAAC;YACjF,CAAC,OAAO,EAAE,kEAAkE,CAAC;YAC7E,CAAC,QAAQ,EAAE,yEAAyE,CAAC;YACrF,CAAC,UAAU,EAAE,qEAAqE,CAAC;SAC3E,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QAChE,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAA;IAC9G,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,MAAmB,EAAE,OAAe,EAAE,SAAkB,EAAe,EAAE;QAC1G,MAAM,KAAK,GAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;QACpD,IAAI,SAAS;YAAE,KAAK,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClB,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;IAED,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,6DAA6D,CAAC,CAAA;IAChG,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAA;IACvF,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAA;IAC7G,IAAI,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,MAAM,EAAE,CAAC;QAC5C,kBAAkB,CAAC,MAAM,CAAC,CAAC,EAAE,kBAAkB,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC7F,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAEvC,IAAI,gBAAgB,GAAwB,EAAE,CAAA;IAC9C,IAAI,SAAS,GAAG,KAAK,CAAA;IACrB,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,IAAI,aAAa,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC;QAC1F,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAA;QACzB,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,4CAA4C,EAAE,SAAS,CAAC,CAAA;QACxF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE;YACpC,KAAK,EAAE,OAAO;YACd,KAAK;YACL,kBAAkB;YAClB,SAAS;YACT,oBAAoB,EAAE,gBAAgB;SACvC,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG;YAC1B,IAAI,EAAE,OAAO;YACb,SAAS;YACT,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;YACtC,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAA;QAED,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YACpD,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,kCAAkC,SAAS,GAAG,EAAE,CAAC,CAAA;QACpF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAC1B,MAAK;QACP,CAAC;QAED,WAAW,CAAC,QAAQ,EAAE,SAAS,EAAE,sCAAsC,EAAE,SAAS,CAAC,CAAA;QACnF,MAAM,YAAY,GAAG,MAAM,eAAe,EAAE,CAAA;QAC5C,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE;YAC5C,KAAK,EAAE,QAAQ;YACf,KAAK;YACL,kBAAkB;YAClB,YAAY;YACZ,SAAS;SACV,CAAC,CAAA;QACF,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACrB,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC,CAAA;QAClG,CAAC;QACD,gBAAgB,GAAG,YAAY,CAAA;QAE/B,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;QAC3D,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG;YAC1B,IAAI,EAAE,QAAQ;YACd,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;YACtC,OAAO,EAAE,QAAQ;gBACf,CAAC,CAAC,6DAA6D;gBAC/D,CAAC,CAAC,YAAY,CAAC,EAAE;oBACf,CAAC,CAAC,oEAAoE;oBACtE,CAAC,CAAC,YAAY,CAAC,OAAO;SAC3B,CAAA;QACD,iBAAiB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;QAE1C,IAAI,CAAC,QAAQ,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAA;YAC1E,MAAK;QACP,CAAC;QACD,IAAI,CAAC,QAAQ;YAAE,SAAQ;QAEvB,WAAW,CAAC,UAAU,EAAE,SAAS,EAAE,2DAA2D,EAAE,SAAS,CAAC,CAAA;QAC1G,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;QAC5F,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE;YAC1C,KAAK,EAAE,UAAU;YACjB,KAAK;YACL,kBAAkB;YAClB,YAAY;YACZ,WAAW;YACX,SAAS;SACV,CAAC,CAAA;QACF,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAA;QAChE,MAAM,eAAe,GAAG,iBAAiB,CAAC,MAAM;YAC9C,CAAC,CAAC,+BAA+B,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC/D,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAA;QACpB,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG;YAC1B,IAAI,EAAE,UAAU;YAChB,SAAS;YACT,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;YACxC,OAAO,EAAE,eAAe;SACzB,CAAA;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;YAC5B,MAAK;QACP,CAAC;QAED,SAAS,GAAG,IAAI,CAAA;QAChB,MAAK;IACP,CAAC;IAED,OAAO;QACL,SAAS;QACT,kBAAkB;QAClB,WAAW;QACX,YAAY,EAAE,gBAAgB;QAC9B,MAAM;QACN,MAAM;QACN,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,MAAM;KACpE,CAAA;AACH,CAAC,CAAA"}

package/dist/runtime/intake.d.ts

@@ -0,0 +1,11 @@
+import type { IntakeResult, RawTaskInput } from '../contracts/index.js';
+/**
+ * Folds any of the three input layers into the normalized task contract.
+ *
+ * Missing key information is reported as questions instead of an error, so the
+ * caller can ask a human rather than fail the run.
+ */
+export declare const normalizeTask: (task: RawTaskInput) => IntakeResult;
+/** Reads a human task file and normalizes it. */
+export declare const readTaskFile: (path: string) => IntakeResult;
+//# sourceMappingURL=intake.d.ts.map

package/dist/runtime/intake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intake.d.ts","sourceRoot":"","sources":["../../src/runtime/intake.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAkB,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAIvF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,GAAI,MAAM,YAAY,KAAG,YAoBlD,CAAA;AAED,iDAAiD;AACjD,eAAO,MAAM,YAAY,GAAI,MAAM,MAAM,KAAG,YAC2B,CAAA"}

package/dist/runtime/intake.js

@@ -0,0 +1,33 @@
+import { readFileSync } from 'node:fs';
+const defaultChecks = ['pnpm run harness:verify', 'pnpm run type-check', 'pnpm run test:unit', 'pnpm run build'];
+/**
+ * Folds any of the three input layers into the normalized task contract.
+ *
+ * Missing key information is reported as questions instead of an error, so the
+ * caller can ask a human rather than fail the run.
+ */
+export const normalizeTask = (task) => {
+    const normalized = {
+        feature: task.task?.trim() || task.feature?.trim() || '',
+        objective: task.goal?.trim() || task.objective?.trim() || '',
+        constraints: task.specialConstraints ?? task.constraints ?? [],
+        acceptanceCriteria: task.acceptance ?? task.acceptanceCriteria ?? [],
+        testHints: task.testHints ?? defaultChecks,
+        maxIterations: task.maxIterations ?? 3,
+    };
+    const questions = [];
+    if (!normalized.feature)
+        questions.push('要实现的任务或功能是什么？');
+    if (!normalized.objective)
+        questions.push('任务的目标是什么？');
+    if (!normalized.acceptanceCriteria.length)
+        questions.push('完成任务的验收标准是什么？');
+    return {
+        status: questions.length > 0 ? 'needs_input' : 'ready',
+        questions,
+        normalizedTask: normalized,
+    };
+};
+/** Reads a human task file and normalizes it. */
+export const readTaskFile = (path) => normalizeTask(JSON.parse(readFileSync(path, 'utf8')));
+//# sourceMappingURL=intake.js.map

package/dist/runtime/intake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intake.js","sourceRoot":"","sources":["../../src/runtime/intake.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAGtC,MAAM,aAAa,GAAG,CAAC,yBAAyB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,gBAAgB,CAAC,CAAA;AAEhH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAkB,EAAgB,EAAE;IAChE,MAAM,UAAU,GAAmB;QACjC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE;QACxD,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE;QAC5D,WAAW,EAAE,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE;QAC9D,kBAAkB,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,kBAAkB,IAAI,EAAE;QACpE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,aAAa;QAC1C,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,CAAC;KACvC,CAAA;IAED,MAAM,SAAS,GAAa,EAAE,CAAA;IAC9B,IAAI,CAAC,UAAU,CAAC,OAAO;QAAE,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IACxD,IAAI,CAAC,UAAU,CAAC,SAAS;QAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACtD,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,MAAM;QAAE,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IAE1E,OAAO;QACL,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO;QACtD,SAAS;QACT,cAAc,EAAE,UAAU;KAC3B,CAAA;AACH,CAAC,CAAA;AAED,iDAAiD;AACjD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAgB,EAAE,CACzD,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAiB,CAAC,CAAA"}

package/dist/runtime/package-manager.d.ts

@@ -0,0 +1,14 @@
+export interface PackageManager {
+    name: 'pnpm' | 'yarn' | 'npm';
+    command: string;
+    args: string[];
+}
+export interface PackageScriptCommand extends PackageManager {
+    /** The command as a human would type it, for evidence output. */
+    display: string;
+}
+/** Picks the package manager from the lockfile a project committed. */
+export declare const detectPackageManager: (root: string) => PackageManager;
+/** Builds the invocation that runs one package script in `root`. */
+export declare const packageScriptCommand: (root: string, script: string) => PackageScriptCommand;
+//# sourceMappingURL=package-manager.d.ts.map

package/dist/runtime/package-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-manager.d.ts","sourceRoot":"","sources":["../../src/runtime/package-manager.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,CAAA;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,EAAE,CAAA;CACf;AAED,MAAM,WAAW,oBAAqB,SAAQ,cAAc;IAC1D,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,uEAAuE;AACvE,eAAO,MAAM,oBAAoB,GAAI,MAAM,MAAM,KAAG,cAInD,CAAA;AAED,oEAAoE;AACpE,eAAO,MAAM,oBAAoB,GAAI,MAAM,MAAM,EAAE,QAAQ,MAAM,KAAG,oBAOnE,CAAA"}

package/dist/runtime/package-manager.js

@@ -0,0 +1,20 @@
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+/** Picks the package manager from the lockfile a project committed. */
+export const detectPackageManager = (root) => {
+    if (existsSync(join(root, 'pnpm-lock.yaml')))
+        return { name: 'pnpm', command: 'pnpm', args: ['run'] };
+    if (existsSync(join(root, 'yarn.lock')))
+        return { name: 'yarn', command: 'yarn', args: [] };
+    return { name: 'npm', command: 'npm', args: ['run'] };
+};
+/** Builds the invocation that runs one package script in `root`. */
+export const packageScriptCommand = (root, script) => {
+    const manager = detectPackageManager(root);
+    return {
+        ...manager,
+        args: [...manager.args, script],
+        display: `${manager.command} ${[...manager.args, script].join(' ')}`,
+    };
+};
+//# sourceMappingURL=package-manager.js.map

package/dist/runtime/package-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-manager.js","sourceRoot":"","sources":["../../src/runtime/package-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAahC,uEAAuE;AACvE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,IAAY,EAAkB,EAAE;IACnE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAA;IACrG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;IAC3F,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAA;AACvD,CAAC,CAAA;AAED,oEAAoE;AACpE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,IAAY,EAAE,MAAc,EAAwB,EAAE;IACzF,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAA;IAC1C,OAAO;QACL,GAAG,OAAO;QACV,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;QAC/B,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;KACrE,CAAA;AACH,CAAC,CAAA"}

package/dist/runtime/policy-engine.d.ts

@@ -0,0 +1,7 @@
+import type { CommandPolicy, Policy } from '../contracts/index.js';
+export { validatePolicy } from '../config/policy.js';
+/** Names the files the coder touched that the policy does not allow. */
+export declare const findOutOfScopeChanges: (files: string[], policy: Policy) => string[];
+/** Whether an agent may run a command. An empty allow list means "no restriction". */
+export declare const isCommandAllowed: (command: string, policy: CommandPolicy) => boolean;
+//# sourceMappingURL=policy-engine.d.ts.map

package/dist/runtime/policy-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.d.ts","sourceRoot":"","sources":["../../src/runtime/policy-engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAIlE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEpD,wEAAwE;AACxE,eAAO,MAAM,qBAAqB,GAAI,OAAO,MAAM,EAAE,EAAE,QAAQ,MAAM,KAAG,MAAM,EAG3E,CAAA;AAEH,sFAAsF;AACtF,eAAO,MAAM,gBAAgB,GAAI,SAAS,MAAM,EAAE,QAAQ,aAAa,KAAG,OACa,CAAA"}

package/dist/runtime/policy-engine.js

@@ -0,0 +1,8 @@
+// Deciding whether a document is acceptable configuration moved to the config
+// layer, but `./policy` is a published subpath, so the name stays exported here.
+export { validatePolicy } from '../config/policy.js';
+/** Names the files the coder touched that the policy does not allow. */
+export const findOutOfScopeChanges = (files, policy) => files.filter((file) => !policy.allowedProductPaths.some((allowedPath) => file.startsWith(allowedPath)));
+/** Whether an agent may run a command. An empty allow list means "no restriction". */
+export const isCommandAllowed = (command, policy) => !policy.allowedAgentCommands?.length || policy.allowedAgentCommands.includes(command);
+//# sourceMappingURL=policy-engine.js.map

package/dist/runtime/policy-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.js","sourceRoot":"","sources":["../../src/runtime/policy-engine.ts"],"names":[],"mappings":"AAEA,8EAA8E;AAC9E,iFAAiF;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEpD,wEAAwE;AACxE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAe,EAAE,MAAc,EAAY,EAAE,CACjF,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACpB,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAChF,CAAA;AAEH,sFAAsF;AACtF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAe,EAAE,MAAqB,EAAW,EAAE,CAClF,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,IAAI,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA"}

package/dist/runtime/provider-runner.d.ts

@@ -0,0 +1,18 @@
+import type { AgentCallResult, AgentRole, AgentsConfig, CommandPolicy, StageRequest } from '../contracts/index.js';
+import type { ResponseValidator, SchemaErrorFormatter } from '../contracts/validator.js';
+export interface ProviderRunnerOptions {
+    root: string;
+    agents: AgentsConfig;
+    policy: CommandPolicy;
+    validator: ResponseValidator;
+    ajv: SchemaErrorFormatter;
+}
+/**
+ * Builds the function that runs one pipeline stage.
+ *
+ * A stage configured as `internal` is a no-op that passes: the built-in
+ * pipeline has nothing to delegate. An `external` stage is spawned as a child
+ * process and must speak the stdin/stdout JSON protocol.
+ */
+export declare const createProviderRunner: ({ root, agents, policy, validator, ajv }: ProviderRunnerOptions) => (name: AgentRole, payload: StageRequest) => Promise<AgentCallResult>;
+//# sourceMappingURL=provider-runner.d.ts.map

package/dist/runtime/provider-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-runner.d.ts","sourceRoot":"","sources":["../../src/runtime/provider-runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,SAAS,EACT,YAAY,EACZ,aAAa,EACb,YAAY,EACb,MAAM,uBAAuB,CAAA;AAI9B,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAExF,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,YAAY,CAAA;IACpB,MAAM,EAAE,aAAa,CAAA;IACrB,SAAS,EAAE,iBAAiB,CAAA;IAC5B,GAAG,EAAE,oBAAoB,CAAA;CAC1B;AAED;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,GAAI,0CAA0C,qBAAqB,MAC3F,MAAM,SAAS,EAAE,SAAS,YAAY,KAAG,OAAO,CAAC,eAAe,CAmCtE,CAAA"}

package/dist/runtime/provider-runner.js

@@ -0,0 +1,45 @@
+import { parseAgentResponse, validateStageResponse } from './agent.js';
+import { runCommand } from './command.js';
+import { isCommandAllowed } from './policy-engine.js';
+/**
+ * Builds the function that runs one pipeline stage.
+ *
+ * A stage configured as `internal` is a no-op that passes: the built-in
+ * pipeline has nothing to delegate. An `external` stage is spawned as a child
+ * process and must speak the stdin/stdout JSON protocol.
+ */
+export const createProviderRunner = ({ root, agents, policy, validator, ajv }) => async (name, payload) => {
+    const config = agents[name];
+    if (!config || config.mode === 'internal') {
+        return { ok: true, details: `${name} completed using the built-in stage.`, payload: {} };
+    }
+    if (config.mode !== 'external' || typeof config.provider !== 'string') {
+        return { ok: false, details: `${name} requires a configured provider in .harness/agents.json.`, payload: {} };
+    }
+    const provider = agents.providers?.[config.provider];
+    if (!provider || typeof provider.command !== 'string' || !Array.isArray(provider.args)) {
+        return { ok: false, details: `${name} provider '${config.provider}' is not configured.`, payload: {} };
+    }
+    if (!isCommandAllowed(provider.command, policy)) {
+        return { ok: false, details: `${name} provider command is not in policy.allowedAgentCommands.`, payload: {} };
+    }
+    const result = await runCommand(root, provider.command, provider.args, {
+        ...payload,
+        provider: config.provider,
+    });
+    if (result.code !== 0) {
+        return {
+            ok: false,
+            details: result.stderr.trim() || `${name} exited with code ${result.code}.`,
+            payload: {},
+        };
+    }
+    const response = parseAgentResponse(name, result.stdout, validator, ajv);
+    if (!response.ok)
+        return response;
+    const stageError = validateStageResponse(name, response.payload);
+    return stageError
+        ? { ok: false, details: stageError, payload: response.payload }
+        : response;
+};
+//# sourceMappingURL=provider-runner.js.map

package/dist/runtime/provider-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-runner.js","sourceRoot":"","sources":["../../src/runtime/provider-runner.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAWrD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAyB,EAAE,EAAE,CACtG,KAAK,EAAE,IAAe,EAAE,OAAqB,EAA4B,EAAE;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IAC3B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,sCAAsC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IAC1F,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,0DAA0D,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IAC/G,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACpD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACvF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,cAAc,MAAM,CAAC,QAAQ,sBAAsB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IACxG,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,0DAA0D,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IAC/G,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;QACrE,GAAG,OAAO;QACV,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CAAA;IACF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,qBAAqB,MAAM,CAAC,IAAI,GAAG;YAC3E,OAAO,EAAE,EAAE;SACZ,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IACxE,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAA;IAEjC,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;IAChE,OAAO,UAAU;QACf,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;QAC/D,CAAC,CAAC,QAAQ,CAAA;AACd,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pedyc/harness-core",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "Runtime primitives for Pedyc Harness",
   "license": "MIT",
   "type": "module",
@@ -10,44 +10,48 @@
       "default": "./dist/index.js"
     },
     "./package-manager": {
-      "types": "./dist/core/package-manager.d.ts",
-      "default": "./dist/core/package-manager.js"
+      "types": "./dist/runtime/package-manager.d.ts",
+      "default": "./dist/runtime/package-manager.js"
     },
     "./intake": {
-      "types": "./dist/core/intake.d.ts",
-      "default": "./dist/core/intake.js"
+      "types": "./dist/runtime/intake.d.ts",
+      "default": "./dist/runtime/intake.js"
     },
     "./command": {
-      "types": "./dist/core/command.d.ts",
-      "default": "./dist/core/command.js"
+      "types": "./dist/runtime/command.d.ts",
+      "default": "./dist/runtime/command.js"
     },
     "./snapshots": {
-      "types": "./dist/core/diff-inspector.d.ts",
-      "default": "./dist/core/diff-inspector.js"
+      "types": "./dist/runtime/diff-inspector.d.ts",
+      "default": "./dist/runtime/diff-inspector.js"
     },
     "./schema": {
-      "types": "./dist/core/validator.d.ts",
-      "default": "./dist/core/validator.js"
+      "types": "./dist/config/schema.d.ts",
+      "default": "./dist/config/schema.js"
     },
     "./agent": {
-      "types": "./dist/core/agent.d.ts",
-      "default": "./dist/core/agent.js"
+      "types": "./dist/runtime/agent.d.ts",
+      "default": "./dist/runtime/agent.js"
     },
     "./policy": {
-      "types": "./dist/core/policy-engine.d.ts",
-      "default": "./dist/core/policy-engine.js"
+      "types": "./dist/runtime/policy-engine.d.ts",
+      "default": "./dist/runtime/policy-engine.js"
     },
     "./provider": {
-      "types": "./dist/adapters/provider-runner.d.ts",
-      "default": "./dist/adapters/provider-runner.js"
+      "types": "./dist/runtime/provider-runner.d.ts",
+      "default": "./dist/runtime/provider-runner.js"
     },
     "./orchestrator": {
-      "types": "./dist/core/executor.d.ts",
-      "default": "./dist/core/executor.js"
+      "types": "./dist/runtime/executor.d.ts",
+      "default": "./dist/runtime/executor.js"
     },
     "./contracts": {
       "types": "./dist/contracts/index.d.ts",
       "default": "./dist/contracts/index.js"
+    },
+    "./config": {
+      "types": "./dist/config/index.d.ts",
+      "default": "./dist/config/index.js"
     }
   },
   "repository": {
@@ -76,6 +80,7 @@
   },
   "files": [
     "dist",
+    "schemas",
     "README.md"
   ],
   "scripts": {

package/schemas/harness.schema.json

@@ -0,0 +1,41 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://pedyc.dev/schema/harness.json",
+  "title": "Harness manifest",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["version"],
+  "properties": {
+    "$schema": { "type": "string", "minLength": 1 },
+    "version": { "type": "integer", "const": 1, "default": 1 },
+    "presets": {
+      "type": "array",
+      "items": { "type": "string", "minLength": 1 },
+      "default": []
+    },
+    "policy": {
+      "description": "Inline policy, or a path to one relative to .harness/.",
+      "oneOf": [
+        { "type": "string", "minLength": 1 },
+        { "type": "object" }
+      ]
+    },
+    "agents": {
+      "description": "Inline agent configuration, or a path to one relative to .harness/.",
+      "oneOf": [
+        { "type": "string", "minLength": 1 },
+        { "type": "object" }
+      ]
+    },
+    "verification": {
+      "description": "Declared for forward compatibility; no runtime consumes it yet.",
+      "type": "string",
+      "minLength": 1
+    },
+    "rules": {
+      "description": "Declared for forward compatibility; no runtime consumes it yet.",
+      "type": "array",
+      "items": { "type": "string", "minLength": 1 }
+    }
+  }
+}

package/schemas/preset.schema.json

@@ -0,0 +1,62 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://pedyc.dev/schema/preset.json",
+  "title": "Harness preset manifest",
+  "description": "Describes what a preset package inherits and what it provides. A preset is a governance specification: it declares paths to documents inside its own package, and `entry` declares the module through which a preset that also ships code registers its extensions.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["name"],
+  "properties": {
+    "$schema": {
+      "type": "string",
+      "minLength": 1
+    },
+    "name": {
+      "description": "The package name. It must match the package the manifest was resolved from, otherwise two presets could claim one identity.",
+      "type": "string",
+      "minLength": 1
+    },
+    "extends": {
+      "description": "Package names this preset inherits from. Names only, never versions: versions belong to package.json and the lockfile.",
+      "type": "array",
+      "items": {
+        "type": "string",
+        "minLength": 1
+      },
+      "default": []
+    },
+    "policy": {
+      "description": "Path to a policy document inside this package.",
+      "type": "string",
+      "minLength": 1
+    },
+    "agents": {
+      "description": "Path to an agent configuration document inside this package.",
+      "type": "string",
+      "minLength": 1
+    },
+    "instruction": {
+      "description": "Path to a markdown document used to seed the target project's AGENTS.md.",
+      "type": "string",
+      "minLength": 1
+    },
+    "entry": {
+      "description": "Path to the module that registers this preset's extensions (evidence providers, reviewer definitions). Declared for forward compatibility: the resolver checks only that the path stays inside the package and exists, and no runtime loads it yet (M21).",
+      "type": "string",
+      "minLength": 1
+    },
+    "verification": {
+      "description": "Declared for forward compatibility; no runtime consumes it yet.",
+      "type": "string",
+      "minLength": 1
+    },
+    "rules": {
+      "description": "Declared for forward compatibility; no runtime consumes it yet.",
+      "type": "array",
+      "items": {
+        "type": "string",
+        "minLength": 1
+      }
+    }
+  }
+}