@poncho-ai/harness 0.2.0 → 0.3.0

package/.turbo/turbo-build.log

@@ -1,14 +1,14 @@
 
-> @poncho-ai/harness@0.2.0 build /Users/cesar/Dev/latitude/poncho-ai/packages/harness
+> @poncho-ai/harness@0.3.0 build /Users/cesar/Dev/latitude/poncho-ai/packages/harness
 > tsup src/index.ts --format esm --dts
 
-CLI Building entry: src/index.ts
-CLI Using tsconfig: tsconfig.json
-CLI tsup v8.5.1
-CLI Target: es2022
-ESM Build start
-ESM dist/index.js 93.22 KB
-ESM ⚡️ Build success in 31ms
-DTS Build start
-DTS ⚡️ Build success in 2649ms
-DTS dist/index.d.ts 13.93 KB
+CLI Building entry: src/index.ts
+CLI Using tsconfig: tsconfig.json
+CLI tsup v8.5.1
+CLI Target: es2022
+ESM Build start
+ESM dist/index.js 115.76 KB
+ESM ⚡️ Build success in 66ms
+DTS Build start
+DTS ⚡️ Build success in 2501ms
+DTS dist/index.d.ts 15.69 KB

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @poncho-ai/harness
 
+## 0.3.0
+
+### Minor Changes
+
+- Implement tool policy and declarative intent system
+
+  Add comprehensive tool policy framework for MCP and script tools with pattern matching, environment-based configuration, and declarative tool intent in AGENT.md and SKILL.md frontmatter.
+
 ## 0.2.0
 
 ### Minor Changes

package/dist/index.d.ts

@@ -16,6 +16,10 @@ interface AgentFrontmatter {
     description?: string;
     model?: AgentModelConfig;
     limits?: AgentLimitsConfig;
+    tools?: {
+        mcp?: string[];
+        scripts?: string[];
+    };
 }
 interface ParsedAgent {
     frontmatter: AgentFrontmatter;
@@ -128,10 +132,28 @@ declare const createMemoryTools: (store: MemoryStore, options?: {
     maxRecallConversations?: number;
 }) => ToolDefinition[];
 
+type RuntimeEnvironment = "development" | "staging" | "production";
+type ToolPolicyMode = "all" | "allowlist" | "denylist";
+interface ToolPatternPolicy {
+    mode?: ToolPolicyMode;
+    include?: string[];
+    exclude?: string[];
+    byEnvironment?: {
+        development?: Omit<ToolPatternPolicy, "byEnvironment">;
+        staging?: Omit<ToolPatternPolicy, "byEnvironment">;
+        production?: Omit<ToolPatternPolicy, "byEnvironment">;
+    };
+}
+
 interface RemoteMcpServerConfig {
     name?: string;
     url: string;
     env?: string[];
+    auth?: {
+        type: "bearer";
+        tokenEnv?: string;
+    };
+    tools?: ToolPatternPolicy;
     timeoutMs?: number;
     reconnectAttempts?: number;
     reconnectDelayMs?: number;
@@ -142,8 +164,14 @@ interface McpConfig {
 declare class LocalMcpBridge {
     private readonly remoteServers;
     private readonly rpcClients;
+    private readonly toolCatalog;
+    private readonly unavailableServers;
+    private readonly authFailedServers;
     constructor(config: McpConfig | undefined);
-    loadTools(): Promise<ToolDefinition[]>;
+    private validatePolicy;
+    private getServerName;
+    private log;
+    discoverTools(): Promise<void>;
     startLocalServers(): Promise<void>;
     stopLocalServers(): Promise<void>;
     listServers(): RemoteMcpServerConfig[];
@@ -155,6 +183,8 @@ declare class LocalMcpBridge {
     }>>;
     toSerializableConfig(): McpConfig;
     getLocalServers(): never[];
+    listDiscoveredTools(serverName?: string): string[];
+    loadTools(requestedPatterns: string[], environment?: RuntimeEnvironment): Promise<ToolDefinition[]>;
     private toToolDefinitions;
 }
 
@@ -213,6 +243,7 @@ interface PonchoConfig extends McpConfig {
         handler?: (event: unknown) => Promise<void> | void;
     };
     skills?: Record<string, Record<string, unknown>>;
+    scripts?: ToolPatternPolicy;
     /** Extra directories (relative to project root) to scan for skills.
      *  `skills/` and `.poncho/skills/` are always scanned. */
     skillPaths?: string[];
@@ -256,6 +287,10 @@ declare class AgentHarness {
     private readonly approvalHandler?;
     private skillContextWindow;
     private memoryStore?;
+    private loadedConfig?;
+    private loadedSkills;
+    private readonly activeSkillNames;
+    private readonly registeredMcpToolNames;
     private parsedAgent?;
     private mcpBridge?;
     private getConfiguredToolFlag;
@@ -264,6 +299,15 @@ declare class AgentHarness {
     private registerConfiguredBuiltInTools;
     private shouldEnableWriteTool;
     constructor(options?: HarnessOptions);
+    private runtimeEnvironment;
+    private listActiveSkills;
+    private getAgentMcpIntent;
+    private getAgentScriptIntent;
+    private getRequestedMcpPatterns;
+    private getRequestedScriptPatterns;
+    private isScriptAllowedByPolicy;
+    private refreshMcpTools;
+    private validateScriptPolicyConfig;
     initialize(): Promise<void>;
     shutdown(): Promise<void>;
     listTools(): ToolDefinition[];
@@ -343,8 +387,11 @@ interface SkillMetadata {
     name: string;
     /** What the skill does and when to use it. */
     description: string;
-    /** Tool hints declared in frontmatter (spec `allowed-tools` or legacy `tools`). */
-    tools: string[];
+    /** Tool intent declared in frontmatter. */
+    tools: {
+        mcp: string[];
+        scripts: string[];
+    };
     /** Absolute path to the skill directory. */
     skillDir: string;
     /** Absolute path to the SKILL.md file. */
@@ -371,7 +418,12 @@ declare const loadSkillContext: (workingDir: string) => Promise<SkillContextEntr
  * - `list_skill_scripts` — lists runnable JavaScript/TypeScript scripts under scripts/
  * - `run_skill_script` — executes a JavaScript/TypeScript module under scripts/
  */
-declare const createSkillTools: (skills: SkillMetadata[]) => ToolDefinition[];
+declare const createSkillTools: (skills: SkillMetadata[], options?: {
+    onActivateSkill?: (name: string) => Promise<string[]> | string[];
+    onDeactivateSkill?: (name: string) => Promise<string[]> | string[];
+    onListActiveSkills?: () => string[];
+    isScriptAllowed?: (skill: string, scriptPath: string) => boolean;
+}) => ToolDefinition[];
 
 interface TelemetryConfig {
     enabled?: boolean;
@@ -407,6 +459,8 @@ declare class ToolDispatcher {
     private readonly tools;
     register(tool: ToolDefinition): void;
     registerMany(tools: ToolDefinition[]): void;
+    unregister(name: string): void;
+    unregisterMany(names: Iterable<string>): void;
     list(): ToolDefinition[];
     get(name: string): ToolDefinition | undefined;
     execute(call: ToolCall, context: ToolContext): Promise<ToolExecutionResult>;