@pedyc/harness-core 1.1.1 → 1.2.0

package/dist/config/manifest.d.ts

@@ -0,0 +1,22 @@
+import type { HarnessConfigError, HarnessManifest } from '../contracts/index.js';
+/** The repository-relative path of a project's manifest. */
+export declare const manifestFile = ".harness/harness.json";
+export declare const manifestPath: (root: string) => string;
+/** The bundled schema a project manifest is validated against. */
+export declare const manifestSchema = "harness.schema.json";
+export type ManifestResult = {
+    ok: true;
+    manifest: HarnessManifest;
+} | {
+    ok: false;
+    errors: HarnessConfigError[];
+};
+/**
+ * Reads and validates `.harness/harness.json`.
+ *
+ * Every failure is structured: a caller gets the document, the field and a
+ * stable code, which is what lets the CLI fail before execution with a message
+ * a human can act on.
+ */
+export declare const readManifest: (root: string) => ManifestResult;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/config/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/config/manifest.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEhF,4DAA4D;AAC5D,eAAO,MAAM,YAAY,0BAA0B,CAAA;AAEnD,eAAO,MAAM,YAAY,GAAI,MAAM,MAAM,KAAG,MAAkC,CAAA;AAE9E,kEAAkE;AAClE,eAAO,MAAM,cAAc,wBAAwB,CAAA;AAEnD,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,eAAe,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,kBAAkB,EAAE,CAAA;CAAE,CAAA;AAE/C;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,GAAI,MAAM,MAAM,KAAG,cA4C3C,CAAA"}

package/dist/config/manifest.js

@@ -0,0 +1,56 @@
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { bundledSchemaFile, bundledValidator, fieldOf } from './bundled.js';
+import { configError } from './errors.js';
+/** The repository-relative path of a project's manifest. */
+export const manifestFile = '.harness/harness.json';
+export const manifestPath = (root) => join(root, manifestFile);
+/** The bundled schema a project manifest is validated against. */
+export const manifestSchema = 'harness.schema.json';
+/**
+ * Reads and validates `.harness/harness.json`.
+ *
+ * Every failure is structured: a caller gets the document, the field and a
+ * stable code, which is what lets the CLI fail before execution with a message
+ * a human can act on.
+ */
+export const readManifest = (root) => {
+    let raw;
+    try {
+        raw = readFileSync(manifestPath(root), 'utf8');
+    }
+    catch (error) {
+        return {
+            ok: false,
+            errors: [configError('manifest_unreadable', manifestFile, `The manifest could not be read: ${error instanceof Error ? error.message : 'unknown error'}`)],
+        };
+    }
+    let document;
+    try {
+        document = JSON.parse(raw);
+    }
+    catch (error) {
+        return {
+            ok: false,
+            errors: [configError('manifest_invalid_json', manifestFile, `The manifest is not valid JSON: ${error instanceof Error ? error.message : 'unknown error'}`)],
+        };
+    }
+    let validate;
+    try {
+        validate = bundledValidator(manifestSchema);
+    }
+    catch (error) {
+        return {
+            ok: false,
+            errors: [configError('harness_schema_unreadable', bundledSchemaFile(manifestSchema), `The bundled manifest schema could not be loaded, so the installation is incomplete: ${error instanceof Error ? error.message : 'unknown error'}`)],
+        };
+    }
+    if (!validate(document)) {
+        return {
+            ok: false,
+            errors: (validate.errors ?? []).map((error) => configError('manifest_invalid', manifestFile, error.message ?? 'is invalid', fieldOf(error))),
+        };
+    }
+    return { ok: true, manifest: document };
+};
+//# sourceMappingURL=manifest.js.map

package/dist/config/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/config/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAGzC,4DAA4D;AAC5D,MAAM,CAAC,MAAM,YAAY,GAAG,uBAAuB,CAAA;AAEnD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;AAE9E,kEAAkE;AAClE,MAAM,CAAC,MAAM,cAAc,GAAG,qBAAqB,CAAA;AAMnD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAkB,EAAE;IAC3D,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,CAAC,WAAW,CAAC,qBAAqB,EAAE,YAAY,EAAE,mCAAmC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;SAC1J,CAAA;IACH,CAAC;IAED,IAAI,QAAiB,CAAA;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,CAAC,WAAW,CAAC,uBAAuB,EAAE,YAAY,EAAE,mCAAmC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;SAC5J,CAAA;IACH,CAAC;IAED,IAAI,QAA6C,CAAA;IACjD,IAAI,CAAC;QACH,QAAQ,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAA;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,CAAC,WAAW,CAClB,2BAA2B,EAC3B,iBAAiB,CAAC,cAAc,CAAC,EACjC,uFAAuF,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAClJ,CAAC;SACH,CAAA;IACH,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC5C,WAAW,CAAC,kBAAkB,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,IAAI,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;SAChG,CAAA;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAA2B,EAAE,CAAA;AAC5D,CAAC,CAAA"}

package/dist/config/policy.d.ts

@@ -0,0 +1,14 @@
+import type { ConfigProblem } from './json.js';
+/**
+ * Checks a policy document read from disk or declared inline in the manifest.
+ *
+ * The document is untrusted JSON, so this takes `unknown` and reports every
+ * problem it finds rather than throwing. Validation lives in the config layer
+ * because deciding whether a document is acceptable configuration is a
+ * different job from deciding whether a specific change is allowed; the latter
+ * stays in the runtime policy engine.
+ */
+export declare const policyProblems: (policy: unknown) => ConfigProblem[];
+/** The first problem, or `null` when the document may be treated as a `Policy`. */
+export declare const validatePolicy: (policy: unknown) => string | null;
+//# sourceMappingURL=policy.d.ts.map

package/dist/config/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/config/policy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAE9C;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc,GAAI,QAAQ,OAAO,KAAG,aAAa,EAqB7D,CAAA;AAED,mFAAmF;AACnF,eAAO,MAAM,cAAc,GAAI,QAAQ,OAAO,KAAG,MAAM,GAAG,IACd,CAAA"}

package/dist/config/policy.js

@@ -0,0 +1,35 @@
+import { asRecord } from './json.js';
+/**
+ * Checks a policy document read from disk or declared inline in the manifest.
+ *
+ * The document is untrusted JSON, so this takes `unknown` and reports every
+ * problem it finds rather than throwing. Validation lives in the config layer
+ * because deciding whether a document is acceptable configuration is a
+ * different job from deciding whether a specific change is allowed; the latter
+ * stays in the runtime policy engine.
+ */
+export const policyProblems = (policy) => {
+    const candidate = asRecord(policy);
+    if (!candidate)
+        return [{ message: 'Policy must be an object.' }];
+    const problems = [];
+    if (!Array.isArray(candidate.allowedProductPaths) || candidate.allowedProductPaths.length === 0) {
+        problems.push({
+            field: 'allowedProductPaths',
+            message: 'Harness policy must define at least one allowedProductPaths entry.',
+        });
+    }
+    if (!Number.isInteger(candidate.maxIterations) || candidate.maxIterations < 1) {
+        problems.push({ field: 'maxIterations', message: 'Harness policy maxIterations must be a positive integer.' });
+    }
+    if (!Array.isArray(candidate.protectedPaths)) {
+        problems.push({ field: 'protectedPaths', message: 'Harness policy protectedPaths must be an array.' });
+    }
+    if (!Array.isArray(candidate.requiredChecks)) {
+        problems.push({ field: 'requiredChecks', message: 'Harness policy requiredChecks must be an array.' });
+    }
+    return problems;
+};
+/** The first problem, or `null` when the document may be treated as a `Policy`. */
+export const validatePolicy = (policy) => policyProblems(policy)[0]?.message ?? null;
+//# sourceMappingURL=policy.js.map

package/dist/config/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/config/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAGpC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAe,EAAmB,EAAE;IACjE,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAA;IAClC,IAAI,CAAC,SAAS;QAAE,OAAO,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAA;IAEjE,MAAM,QAAQ,GAAoB,EAAE,CAAA;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,mBAAmB,CAAC,IAAI,SAAS,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChG,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,qBAAqB;YAC5B,OAAO,EAAE,oEAAoE;SAC9E,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,aAAa,CAAC,IAAK,SAAS,CAAC,aAAwB,GAAG,CAAC,EAAE,CAAC;QAC1F,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,0DAA0D,EAAE,CAAC,CAAA;IAChH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC;QAC7C,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC,CAAA;IACxG,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC;QAC7C,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC,CAAA;IACxG,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC,CAAA;AAED,mFAAmF;AACnF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAe,EAAiB,EAAE,CAC/D,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,IAAI,CAAA"}

package/dist/config/presets.d.ts

@@ -0,0 +1,35 @@
+import type { HarnessConfigError, ResolvedPreset } from '../contracts/index.js';
+/** The document a preset package exposes so the resolver can find it. */
+export declare const presetDocument = "preset.json";
+/** The bundled schema every preset manifest is validated against. */
+export declare const presetSchema = "preset.schema.json";
+export type PresetsResult = {
+    ok: true;
+    presets: ResolvedPreset[];
+} | {
+    ok: false;
+    errors: HarnessConfigError[];
+};
+/**
+ * Expands the short name a user types into a package name.
+ *
+ * `vue` means `@pedyc/harness-preset-vue`. The rule is what removes the CLI's
+ * hardcoded table: a name containing a slash is already a package name and is
+ * taken verbatim, so a team or third-party preset is usable the moment it is
+ * installed, without an entry in any list this repository ships.
+ */
+export declare const presetPackageName: (name: string) => string;
+/**
+ * Resolves preset packages and their inheritance into one ordered list.
+ *
+ * The walk is a depth-first post-order traversal, which gives three properties at
+ * once: a preset is loaded once no matter how many chains reach it, dependencies
+ * come before the presets that inherit from them, and re-entering a package that
+ * is still on the stack is a cycle rather than infinite recursion — the error
+ * then names the whole loop, because "A → B → A" is what tells a reader which
+ * `extends` to remove.
+ */
+export declare const resolvePresets: (root: string, requested: string[]) => PresetsResult;
+/** How a preset's document is named in an error or in `doctor`. */
+export declare const presetFile: (preset: ResolvedPreset, path: string) => string;
+//# sourceMappingURL=presets.d.ts.map

package/dist/config/presets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presets.d.ts","sourceRoot":"","sources":["../../src/config/presets.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,kBAAkB,EAAkB,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAE/F,yEAAyE;AACzE,eAAO,MAAM,cAAc,gBAAgB,CAAA;AAE3C,qEAAqE;AACrE,eAAO,MAAM,YAAY,uBAAuB,CAAA;AAWhD,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,cAAc,EAAE,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,kBAAkB,EAAE,CAAA;CAAE,CAAA;AAI/C;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,GAAI,MAAM,MAAM,KAAG,MACY,CAAA;AA2J7D;;;;;;;;;GASG;AACH,eAAO,MAAM,cAAc,GAAI,MAAM,MAAM,EAAE,WAAW,MAAM,EAAE,KAAG,aAiDlE,CAAA;AAED,mEAAmE;AACnE,eAAO,MAAM,UAAU,GAAI,QAAQ,cAAc,EAAE,MAAM,MAAM,KAAG,MACZ,CAAA"}

package/dist/config/presets.js

@@ -0,0 +1,187 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { bundledSchemaFile, bundledValidator, fieldOf } from './bundled.js';
+import { configError } from './errors.js';
+/** The document a preset package exposes so the resolver can find it. */
+export const presetDocument = 'preset.json';
+/** The bundled schema every preset manifest is validated against. */
+export const presetSchema = 'preset.schema.json';
+/**
+ * The fields of a preset manifest that name a file inside the package.
+ *
+ * `entry` and `verification` are validated even though no runtime consumes them
+ * yet: a declared document that the package does not contain is a broken preset
+ * either way, and resolving it early keeps the failure next to the manifest.
+ */
+const pathFields = ['policy', 'agents', 'instruction', 'entry', 'verification'];
+const describe = (error) => (error instanceof Error ? error.message : 'unknown error');
+/**
+ * Expands the short name a user types into a package name.
+ *
+ * `vue` means `@pedyc/harness-preset-vue`. The rule is what removes the CLI's
+ * hardcoded table: a name containing a slash is already a package name and is
+ * taken verbatim, so a team or third-party preset is usable the moment it is
+ * installed, without an entry in any list this repository ships.
+ */
+export const presetPackageName = (name) => name.includes('/') ? name : `@pedyc/harness-preset-${name}`;
+/**
+ * Resolves a path a preset declares inside its own package.
+ *
+ * Returns the POSIX path relative to the package, or `null` when it escapes.
+ * A preset is a dependency like any other, so it may only point at its own
+ * files: a committed package must not be able to read anything the process can.
+ */
+const withinPackage = (directory, path) => {
+    if (isAbsolute(path))
+        return null;
+    const offset = relative(directory, resolve(directory, path));
+    if (!offset || offset.startsWith('..') || isAbsolute(offset))
+        return null;
+    return offset.split(sep).join('/');
+};
+/**
+ * Finds the directory an installed package occupies.
+ *
+ * Used only to explain a failed resolution: `require.resolve` is what decides
+ * whether a package can be loaded, but when it fails the caller needs to know
+ * whether the package is missing or merely does not expose `preset.json`.
+ */
+const installedDirectory = (resolveFrom, root, packageName) => {
+    const bases = [...(resolveFrom.resolve.paths(packageName) ?? []), join(root, 'node_modules')];
+    for (const base of bases) {
+        const directory = join(base, packageName);
+        if (existsSync(join(directory, 'package.json')))
+            return directory;
+    }
+    return null;
+};
+const notInstalled = (packageName, requiredBy) => configError('preset_not_installed', packageName, `Preset ${packageName} is not installed${requiredBy ? `, but ${requiredBy} requires it` : ''}. ` +
+    `Install it with your package manager, for example: npm install --save-dev ${packageName}`);
+/** Locates one preset package, reads its manifest and checks the paths it declares. */
+const locate = (root, resolveFrom, packageName, requiredBy) => {
+    const file = `${packageName}/${presetDocument}`;
+    const specifier = `${packageName}/${presetDocument}`;
+    let path;
+    try {
+        path = resolveFrom.resolve(specifier);
+    }
+    catch {
+        return installedDirectory(resolveFrom, root, packageName)
+            ? {
+                errors: [configError('preset_manifest_unreadable', file, `${packageName} is installed but does not expose ${presetDocument}. Add "./${presetDocument}": "./${presetDocument}" to its package.json "exports", then reinstall it.`)],
+            }
+            : { errors: [notInstalled(packageName, requiredBy)] };
+    }
+    let raw;
+    try {
+        raw = readFileSync(path, 'utf8');
+    }
+    catch (error) {
+        return { errors: [configError('preset_manifest_unreadable', file, `${presetDocument} could not be read: ${describe(error)}`)] };
+    }
+    let document;
+    try {
+        document = JSON.parse(raw);
+    }
+    catch (error) {
+        return { errors: [configError('preset_manifest_invalid_json', file, `${presetDocument} is not valid JSON: ${describe(error)}`)] };
+    }
+    let validate;
+    try {
+        validate = bundledValidator(presetSchema);
+    }
+    catch (error) {
+        return {
+            errors: [configError('harness_schema_unreadable', bundledSchemaFile(presetSchema), `The bundled preset schema could not be loaded, so the installation is incomplete: ${describe(error)}`)],
+        };
+    }
+    if (!validate(document)) {
+        return {
+            errors: (validate.errors ?? []).map((error) => configError('preset_manifest_invalid', file, error.message ?? 'is invalid', fieldOf(error))),
+        };
+    }
+    const manifest = document;
+    if (manifest.name !== packageName) {
+        return {
+            errors: [configError('preset_manifest_invalid', file, `name is '${manifest.name}', but the package it was read from is '${packageName}'. They must match.`, 'name')],
+        };
+    }
+    const directory = dirname(path);
+    const errors = [];
+    const declared = [];
+    for (const field of pathFields) {
+        const value = manifest[field];
+        if (value !== undefined)
+            declared.push([field, value]);
+    }
+    for (const rule of manifest.rules ?? [])
+        declared.push(['rules', rule]);
+    for (const [field, value] of declared) {
+        const resolved = withinPackage(directory, value);
+        if (!resolved) {
+            errors.push(configError('preset_path_outside_package', file, `${field} must point at a file inside the preset package; '${value}' does not.`, field));
+            continue;
+        }
+        if (!existsSync(join(directory, resolved))) {
+            errors.push(configError('config_file_missing', file, `${field} points at '${value}', which the package does not contain.`, field));
+        }
+    }
+    return errors.length > 0 ? { errors } : { value: { directory, manifest } };
+};
+/**
+ * Resolves preset packages and their inheritance into one ordered list.
+ *
+ * The walk is a depth-first post-order traversal, which gives three properties at
+ * once: a preset is loaded once no matter how many chains reach it, dependencies
+ * come before the presets that inherit from them, and re-entering a package that
+ * is still on the stack is a cycle rather than infinite recursion — the error
+ * then names the whole loop, because "A → B → A" is what tells a reader which
+ * `extends` to remove.
+ */
+export const resolvePresets = (root, requested) => {
+    if (requested.length === 0)
+        return { ok: true, presets: [] };
+    const resolveFrom = createRequire(join(root, 'package.json'));
+    const done = new Map();
+    const order = [];
+    const stack = [];
+    const visit = (packageName, requiredBy) => {
+        if (done.has(packageName))
+            return [];
+        const entered = stack.indexOf(packageName);
+        if (entered >= 0) {
+            const loop = [...stack.slice(entered), packageName].join(' → ');
+            return [configError('preset_cyclic', packageName, `Cyclic preset dependency: ${loop}. A preset cannot inherit from itself, directly or through another preset.`)];
+        }
+        const located = locate(root, resolveFrom, packageName, requiredBy);
+        if ('errors' in located)
+            return located.errors;
+        stack.push(packageName);
+        for (const parent of located.value.manifest.extends ?? []) {
+            const errors = visit(presetPackageName(parent), packageName);
+            if (errors.length > 0)
+                return errors;
+        }
+        stack.pop();
+        const preset = {
+            packageName,
+            name: located.value.manifest.name,
+            directory: located.value.directory,
+            extends: [...new Set((located.value.manifest.extends ?? []).map(presetPackageName))],
+            manifest: located.value.manifest,
+        };
+        done.set(packageName, preset);
+        order.push(preset);
+        return [];
+    };
+    for (const name of requested) {
+        const errors = visit(presetPackageName(name));
+        if (errors.length > 0)
+            return { ok: false, errors };
+    }
+    return { ok: true, presets: order };
+};
+/** How a preset's document is named in an error or in `doctor`. */
+export const presetFile = (preset, path) => `${preset.packageName}/${path.split(sep).join('/')}`;
+//# sourceMappingURL=presets.js.map

package/dist/config/presets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presets.js","sourceRoot":"","sources":["../../src/config/presets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAC7E,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAGzC,yEAAyE;AACzE,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAA;AAE3C,qEAAqE;AACrE,MAAM,CAAC,MAAM,YAAY,GAAG,oBAAoB,CAAA;AAEhD;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,CAAU,CAAA;AAMxF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAA;AAEvG;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAU,EAAE,CACxD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,IAAI,EAAE,CAAA;AAE7D;;;;;;GAMG;AACH,MAAM,aAAa,GAAG,CAAC,SAAiB,EAAE,IAAY,EAAiB,EAAE;IACvE,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAA;IAC5D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IACzE,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACpC,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,CACzB,WAA6C,EAC7C,IAAY,EACZ,WAAmB,EACJ,EAAE;IACjB,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAA;IAC7F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QACzC,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,SAAS,CAAA;IACnE,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED,MAAM,YAAY,GAAG,CAAC,WAAmB,EAAE,UAAmB,EAAsB,EAAE,CACpF,WAAW,CACT,sBAAsB,EACtB,WAAW,EACX,UAAU,WAAW,oBAAoB,UAAU,CAAC,CAAC,CAAC,SAAS,UAAU,cAAc,CAAC,CAAC,CAAC,EAAE,IAAI;IAC9F,6EAA6E,WAAW,EAAE,CAC7F,CAAA;AASH,uFAAuF;AACvF,MAAM,MAAM,GAAG,CACb,IAAY,EACZ,WAA6C,EAC7C,WAAmB,EACnB,UAAmB,EACJ,EAAE;IACjB,MAAM,IAAI,GAAG,GAAG,WAAW,IAAI,cAAc,EAAE,CAAA;IAC/C,MAAM,SAAS,GAAG,GAAG,WAAW,IAAI,cAAc,EAAE,CAAA;IAEpD,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,CAAC,WAAW,EAAE,IAAI,EAAE,WAAW,CAAC;YACvD,CAAC,CAAC;gBACE,MAAM,EAAE,CAAC,WAAW,CAClB,4BAA4B,EAC5B,IAAI,EACJ,GAAG,WAAW,qCAAqC,cAAc,YAAY,cAAc,SAAS,cAAc,qDAAqD,CACxK,CAAC;aACH;YACH,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,EAAE,CAAA;IACzD,CAAC;IAED,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,4BAA4B,EAAE,IAAI,EAAE,GAAG,cAAc,uBAAuB,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;IACjI,CAAC;IAED,IAAI,QAAiB,CAAA;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,8BAA8B,EAAE,IAAI,EAAE,GAAG,cAAc,uBAAuB,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;IACnI,CAAC;IAED,IAAI,QAA6C,CAAA;IACjD,IAAI,CAAC;QACH,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAA;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,CAAC,WAAW,CAClB,2BAA2B,EAC3B,iBAAiB,CAAC,YAAY,CAAC,EAC/B,qFAAqF,QAAQ,CAAC,KAAK,CAAC,EAAE,CACvG,CAAC;SACH,CAAA;IACH,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC5C,WAAW,CAAC,yBAAyB,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,IAAI,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;SAC/F,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,QAA0B,CAAA;IAC3C,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,CAAC,WAAW,CAClB,yBAAyB,EACzB,IAAI,EACJ,YAAY,QAAQ,CAAC,IAAI,2CAA2C,WAAW,qBAAqB,EACpG,MAAM,CACP,CAAC;SACH,CAAA;IACH,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,MAAM,GAAyB,EAAE,CAAA;IACvC,MAAM,QAAQ,GAAuB,EAAE,CAAA;IACvC,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC7B,IAAI,KAAK,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAA;IACxD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,IAAI,EAAE;QAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;IAEvE,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,WAAW,CACrB,6BAA6B,EAC7B,IAAI,EACJ,GAAG,KAAK,qDAAqD,KAAK,aAAa,EAC/E,KAAK,CACN,CAAC,CAAA;YACF,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,WAAW,CACrB,qBAAqB,EACrB,IAAI,EACJ,GAAG,KAAK,eAAe,KAAK,wCAAwC,EACpE,KAAK,CACN,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,CAAA;AAC5E,CAAC,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,SAAmB,EAAiB,EAAE;IACjF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IAE5D,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAA;IAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,EAA0B,CAAA;IAC9C,MAAM,KAAK,GAAqB,EAAE,CAAA;IAClC,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,MAAM,KAAK,GAAG,CAAC,WAAmB,EAAE,UAAmB,EAAwB,EAAE;QAC/E,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,OAAO,EAAE,CAAA;QAEpC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAC1C,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAC/D,OAAO,CAAC,WAAW,CACjB,eAAe,EACf,WAAW,EACX,6BAA6B,IAAI,4EAA4E,CAC9G,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,CAAC,CAAA;QAClE,IAAI,QAAQ,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAA;QAE9C,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACvB,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAA;YAC5D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,MAAM,CAAA;QACtC,CAAC;QACD,KAAK,CAAC,GAAG,EAAE,CAAA;QAEX,MAAM,MAAM,GAAmB;YAC7B,WAAW;YACX,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI;YACjC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS;YAClC,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACpF,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ;SACjC,CAAA;QACD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAClB,OAAO,EAAE,CAAA;IACX,CAAC,CAAA;IAED,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAA;QAC7C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;IACrD,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;AACrC,CAAC,CAAA;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAsB,EAAE,IAAY,EAAU,EAAE,CACzE,GAAG,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA"}

package/dist/config/schema.d.ts

@@ -0,0 +1,16 @@
+import type { HarnessSchemas, HarnessValidators } from '../contracts/validator.js';
+export { createAjv, createValidators, validationDetails } from '../contracts/validator.js';
+export type { HarnessSchemas, HarnessValidators, ResponseValidator, SchemaErrorFormatter, } from '../contracts/validator.js';
+/** Compiles one schema document with the settings every Harness schema expects. */
+export declare const compileSchema: (schema: object) => HarnessValidators["input"];
+/** Reads one JSON Schema document out of `.harness/`. */
+export declare const readSchema: (root: string, name: string) => object;
+/**
+ * Reads the three contracts every target project commits.
+ *
+ * The manifest schema is deliberately not part of this set: it only has to be
+ * present once a project has a `harness.json`, so loading it here would make a
+ * project that predates the manifest fail.
+ */
+export declare const loadSchemas: (root: string) => HarnessSchemas;
+//# sourceMappingURL=schema.d.ts.map

package/dist/config/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAKlF,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAC1F,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,2BAA2B,CAAA;AAElC,mFAAmF;AACnF,eAAO,MAAM,aAAa,GAAI,QAAQ,MAAM,KAAG,iBAAiB,CAAC,OAAO,CAC3C,CAAA;AAE7B,yDAAyD;AACzD,eAAO,MAAM,UAAU,GAAI,MAAM,MAAM,EAAE,MAAM,MAAM,KAAG,MACkB,CAAA;AAE1E;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,GAAI,MAAM,MAAM,KAAG,cAIzC,CAAA"}

package/dist/config/schema.js

@@ -0,0 +1,24 @@
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { createAjv } from '../contracts/validator.js';
+// Compiling a schema is pure, so it lives in `contracts/`; this module adds the
+// file system access the config layer owns. Both halves are re-exported here so
+// the public `./schema` subpath keeps the shape it had before the split.
+export { createAjv, createValidators, validationDetails } from '../contracts/validator.js';
+/** Compiles one schema document with the settings every Harness schema expects. */
+export const compileSchema = (schema) => createAjv().compile(schema);
+/** Reads one JSON Schema document out of `.harness/`. */
+export const readSchema = (root, name) => JSON.parse(readFileSync(join(root, '.harness', name), 'utf8'));
+/**
+ * Reads the three contracts every target project commits.
+ *
+ * The manifest schema is deliberately not part of this set: it only has to be
+ * present once a project has a `harness.json`, so loading it here would make a
+ * project that predates the manifest fail.
+ */
+export const loadSchemas = (root) => ({
+    input: readSchema(root, 'input.schema.json'),
+    output: readSchema(root, 'output.schema.json'),
+    agentResponse: readSchema(root, 'agent-response.schema.json'),
+});
+//# sourceMappingURL=schema.js.map

package/dist/config/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAGrD,gFAAgF;AAChF,gFAAgF;AAChF,yEAAyE;AACzE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAQ1F,mFAAmF;AACnF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAc,EAA8B,EAAE,CAC1E,SAAS,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;AAE7B,yDAAyD;AACzD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE,CAC/D,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAW,CAAA;AAE1E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAkB,EAAE,CAAC,CAAC;IAC5D,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,mBAAmB,CAAC;IAC5C,MAAM,EAAE,UAAU,CAAC,IAAI,EAAE,oBAAoB,CAAC;IAC9C,aAAa,EAAE,UAAU,CAAC,IAAI,EAAE,4BAA4B,CAAC;CAC9D,CAAC,CAAA"}

package/dist/contracts/harness.d.ts

@@ -0,0 +1,86 @@
+import type { AgentsConfig } from './agent.js';
+import type { Policy } from './policy.js';
+import type { ResolvedPreset } from './preset.js';
+/**
+ * The `.harness/harness.json` manifest.
+ *
+ * It is the entry point that answers "which configuration does this project
+ * load", not the whole configuration. A field that points at another document
+ * is a path relative to `.harness/`; the same field may also carry the document
+ * inline. `verification` and `rules` are accepted and reported, but no runtime
+ * consumes them yet.
+ */
+export interface HarnessManifest {
+    version: number;
+    /** Preset package names. Versions belong to `package.json` and the lockfile. */
+    presets?: string[];
+    policy?: Policy | string;
+    agents?: AgentsConfig | string;
+    verification?: string;
+    rules?: string[];
+}
+/**
+ * Why a configuration document could not be turned into runtime input.
+ *
+ * The codes are stable so CI can branch on them without parsing prose.
+ */
+export type ConfigErrorCode = 'harness_directory_missing' | 'harness_schema_unreadable' | 'manifest_invalid_json' | 'manifest_unreadable' | 'manifest_invalid' | 'config_file_missing' | 'config_file_unreadable' | 'config_file_invalid_json' | 'config_file_invalid' | 'config_path_outside_harness' | 'preset_not_installed' | 'preset_manifest_unreadable' | 'preset_manifest_invalid_json' | 'preset_manifest_invalid' | 'preset_cyclic' | 'preset_path_outside_package';
+/**
+ * A configuration problem found before any stage runs.
+ *
+ * `file` and `field` are what make the error actionable: the acceptance rule is
+ * that a bad configuration names both the document and the field inside it.
+ */
+export interface HarnessConfigError {
+    code: ConfigErrorCode;
+    /**
+     * Repository-relative path of the offending document, or a package-qualified
+     * path when the document lives in an installed package.
+     *
+     * A preset's documents are reported as `<package>/preset.json` and
+     * `<package>/policy.json`, because they are not part of this repository and a
+     * bare relative path would point at nothing a reader could open.
+     */
+    file: string;
+    /** Dot path inside that document, when a single field is at fault. */
+    field?: string;
+    message: string;
+}
+/** One document, or set of built-in defaults, that a value was read from. */
+export interface ConfigSource {
+    kind: 'manifest' | 'policy' | 'agents' | 'preset' | 'verification' | 'rules';
+    /** Repository-relative path, or a description when no file backs the value. */
+    location: string;
+    /** False when the manifest declares the source but no runtime consumes it yet. */
+    active: boolean;
+}
+/** The configuration a run starts from, plus where each part came from. */
+export interface LoadedHarnessConfig {
+    root: string;
+    manifest: HarnessManifest | null;
+    policy: Policy;
+    agents: AgentsConfig;
+    /**
+     * The presets that were resolved, dependencies first.
+     *
+     * Reported rather than kept private because a preset's inheritance is not
+     * visible anywhere else: a project can see which packages it declares in
+     * `harness.json`, but only the resolver knows what they pull in.
+     */
+    presets: ResolvedPreset[];
+    sources: ConfigSource[];
+}
+/**
+ * Config loading either yields a complete configuration or a list of problems.
+ *
+ * A partial result is never returned: the acceptance rule is that a bad
+ * configuration fails before execution rather than midway through a run.
+ */
+export type LoadConfigResult = {
+    ok: true;
+    config: LoadedHarnessConfig;
+} | {
+    ok: false;
+    errors: HarnessConfigError[];
+};
+//# sourceMappingURL=harness.d.ts.map

package/dist/contracts/harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.d.ts","sourceRoot":"","sources":["../../src/contracts/harness.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAC9C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACxB,MAAM,CAAC,EAAE,YAAY,GAAG,MAAM,CAAA;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CACjB;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GACvB,2BAA2B,GAC3B,2BAA2B,GAC3B,uBAAuB,GACvB,qBAAqB,GACrB,kBAAkB,GAClB,qBAAqB,GACrB,wBAAwB,GACxB,0BAA0B,GAC1B,qBAAqB,GACrB,6BAA6B,GAC7B,sBAAsB,GACtB,4BAA4B,GAC5B,8BAA8B,GAC9B,yBAAyB,GACzB,eAAe,GACf,6BAA6B,CAAA;AAEjC;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,eAAe,CAAA;IACrB;;;;;;;OAOG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,6EAA6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,cAAc,GAAG,OAAO,CAAA;IAC5E,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAA;IAChB,kFAAkF;IAClF,MAAM,EAAE,OAAO,CAAA;CAChB;AAED,2EAA2E;AAC3E,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAA;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,YAAY,CAAA;IACpB;;;;;;OAMG;IACH,OAAO,EAAE,cAAc,EAAE,CAAA;IACzB,OAAO,EAAE,YAAY,EAAE,CAAA;CACxB;AAED;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE,GACzC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,kBAAkB,EAAE,CAAA;CAAE,CAAA"}

package/dist/contracts/harness.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=harness.js.map

package/dist/contracts/harness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.js","sourceRoot":"","sources":["../../src/contracts/harness.ts"],"names":[],"mappings":""}

package/dist/contracts/index.d.ts

@@ -1,7 +1,9 @@
 export type { AgentMode, AgentRole, CommandPolicy, Policy } from './policy.js';
 export type { VerificationCheck } from './validation.js';
 export type { IntakeResult, NormalizedTask, RawTaskInput } from './task.js';
-export type { Preset, PresetDetection } from './preset.js';
+export type { PresetManifest, ResolvedPreset } from './preset.js';
 export type { FileChange, OrchestrationResult, PhaseRecord, PhaseStatus, RunResult, RunStatus } from './run.js';
+export type { ConfigErrorCode, ConfigSource, HarnessConfigError, HarnessManifest, LoadConfigResult, LoadedHarnessConfig, } from './harness.js';
 export type { AgentCallResult, AgentPayload, AgentRoleConfig, AgentsConfig, CoderRequest, PlannerRequest, ProviderConfig, ReviewerRequest, RunAgent, StageRequest, TesterRequest, } from './agent.js';
+export type { HarnessSchemas, HarnessValidators, ResponseValidator, SchemaErrorFormatter, } from './validator.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/contracts/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAC9E,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACxD,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAC3E,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC1D,YAAY,EAAE,UAAU,EAAE,mBAAmB,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAC/G,YAAY,EACV,eAAe,EACf,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,cAAc,EACd,eAAe,EACf,QAAQ,EACR,YAAY,EACZ,aAAa,GACd,MAAM,YAAY,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAC9E,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACxD,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAC3E,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjE,YAAY,EAAE,UAAU,EAAE,mBAAmB,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAC/G,YAAY,EACV,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,cAAc,CAAA;AACrB,YAAY,EACV,eAAe,EACf,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,cAAc,EACd,eAAe,EACf,QAAQ,EACR,YAAY,EACZ,aAAa,GACd,MAAM,YAAY,CAAA;AACnB,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,gBAAgB,CAAA"}