@qvac/harness 0.2.2 → 0.2.4

package/dist-lib/lib/storage.js

@@ -2,6 +2,7 @@ import { homedir } from 'os';
 import { join } from 'path';
 import process from 'process';
 import { persistent } from 'bare-storage';
+import { isAndroid, isIOS } from 'which-runtime';
 export const MODEL_CACHE_PATH_ENV = 'QVAC_MODEL_CACHE_PATH';
 export const SDK_HOME_ENV = 'SNAP_USER_COMMON';
 export function releaseChannel(environment) {
@@ -14,7 +15,8 @@ export function releaseChannel(environment) {
 export function resolveStorage(channel, overrides = {}, env = process.env) {
     const snapCommon = env[SDK_HOME_ENV];
     const root = overrides.root ?? join(snapCommon ?? persistent(), 'qvac', channel);
-    const canonicalSdkHome = snapCommon ?? env['HOME'] ?? env['USERPROFILE'] ?? homedir();
+    const onMobile = isAndroid || isIOS;
+    const canonicalSdkHome = snapCommon ?? (onMobile ? persistent() : (env['HOME'] ?? env['USERPROFILE'] ?? homedir()));
     return {
         root,
         assistant: join(root, 'assistant'),

package/dist-lib/schema/generate.js

@@ -94,6 +94,8 @@ export function writeCapabilities(builder, outFile) {
     s +=
         '// what hrpc hands a duplex handler (its own async iterator hangs - see api/attachments.ts)\n';
     s += 'export interface HandlerFrames<Frame> {\n';
+    s +=
+        "  readonly writeStream?: { readonly destroyed: boolean; readonly destroying: boolean; on(event: 'close', listener: () => void): void; off(event: 'close', listener: () => void): void }\n";
     s += "  on(event: 'data', listener: (frame: Frame) => void): void\n";
     s += "  on(event: 'end', listener: () => void): void\n";
     s += "  on(event: 'error', listener: (err: Error) => void): void\n";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qvac/harness",
-  "version": "0.2.2",
+  "version": "0.2.4",
   "type": "module",
   "description": "An AI harness implementing generate(context) via @qvac/sdk. Knows nothing about workbench, hyperdb, or chunks — just inference in, events out.",
   "exports": {
@@ -175,14 +175,171 @@
       "default": "./dist-lib/schema/release-tags.js"
     },
     "./dist/harness.cjs": "./dist/harness.cjs",
+    "./worker/stow-entry.mjs": "./worker/stow-entry.mjs",
+    "./lib/tools/catalog.ts": {
+      "types": "./dist-lib/lib/tools/catalog.d.ts",
+      "default": "./dist-lib/lib/tools/catalog.js"
+    },
+    "./lib/tools/create-documents.ts": {
+      "types": "./dist-lib/lib/tools/create-documents.d.ts",
+      "default": "./dist-lib/lib/tools/create-documents.js"
+    },
+    "./lib/tools/edit-documents.ts": {
+      "types": "./dist-lib/lib/tools/edit-documents.d.ts",
+      "default": "./dist-lib/lib/tools/edit-documents.js"
+    },
+    "./lib/tools/edit-image.ts": {
+      "types": "./dist-lib/lib/tools/edit-image.d.ts",
+      "default": "./dist-lib/lib/tools/edit-image.js"
+    },
+    "./lib/tools/exec/adapters/adapter.ts": {
+      "types": "./dist-lib/lib/tools/exec/adapters/adapter.d.ts",
+      "default": "./dist-lib/lib/tools/exec/adapters/adapter.js"
+    },
     "./lib/tools/exec/adapters/python/attachments.ts": {
       "types": "./dist-lib/lib/tools/exec/adapters/python/attachments.d.ts",
       "default": "./dist-lib/lib/tools/exec/adapters/python/attachments.js"
     },
+    "./lib/tools/exec/adapters/python/create-effect.ts": {
+      "types": "./dist-lib/lib/tools/exec/adapters/python/create-effect.d.ts",
+      "default": "./dist-lib/lib/tools/exec/adapters/python/create-effect.js"
+    },
+    "./lib/tools/exec/adapters/python/loader.ts": {
+      "types": "./dist-lib/lib/tools/exec/adapters/python/loader.d.ts",
+      "default": "./dist-lib/lib/tools/exec/adapters/python/loader.js"
+    },
+    "./lib/tools/exec/adapters/python/memfs.ts": {
+      "types": "./dist-lib/lib/tools/exec/adapters/python/memfs.d.ts",
+      "default": "./dist-lib/lib/tools/exec/adapters/python/memfs.js"
+    },
+    "./lib/tools/exec/adapters/python/output-policy.ts": {
+      "types": "./dist-lib/lib/tools/exec/adapters/python/output-policy.d.ts",
+      "default": "./dist-lib/lib/tools/exec/adapters/python/output-policy.js"
+    },
+    "./lib/tools/exec/adapters/python/pyodide.ts": {
+      "types": "./dist-lib/lib/tools/exec/adapters/python/pyodide.d.ts",
+      "default": "./dist-lib/lib/tools/exec/adapters/python/pyodide.js"
+    },
+    "./lib/tools/exec/adapters/python/python-adapter.ts": {
+      "types": "./dist-lib/lib/tools/exec/adapters/python/python-adapter.d.ts",
+      "default": "./dist-lib/lib/tools/exec/adapters/python/python-adapter.js"
+    },
+    "./lib/tools/exec/adapters/python/run-session.ts": {
+      "types": "./dist-lib/lib/tools/exec/adapters/python/run-session.d.ts",
+      "default": "./dist-lib/lib/tools/exec/adapters/python/run-session.js"
+    },
+    "./lib/tools/exec/adapters/python/wheels.ts": {
+      "types": "./dist-lib/lib/tools/exec/adapters/python/wheels.d.ts",
+      "default": "./dist-lib/lib/tools/exec/adapters/python/wheels.js"
+    },
+    "./lib/tools/exec/adapters/python/worker/client.ts": {
+      "types": "./dist-lib/lib/tools/exec/adapters/python/worker/client.d.ts",
+      "default": "./dist-lib/lib/tools/exec/adapters/python/worker/client.js"
+    },
+    "./lib/tools/exec/adapters/python/worker/entry.ts": {
+      "types": "./dist-lib/lib/tools/exec/adapters/python/worker/entry.d.ts",
+      "default": "./dist-lib/lib/tools/exec/adapters/python/worker/entry.js"
+    },
+    "./lib/tools/exec/adapters/python/worker/protocol.ts": {
+      "types": "./dist-lib/lib/tools/exec/adapters/python/worker/protocol.d.ts",
+      "default": "./dist-lib/lib/tools/exec/adapters/python/worker/protocol.js"
+    },
+    "./lib/tools/exec/adapters/python/worker/spawn-bare.ts": {
+      "types": "./dist-lib/lib/tools/exec/adapters/python/worker/spawn-bare.d.ts",
+      "default": "./dist-lib/lib/tools/exec/adapters/python/worker/spawn-bare.js"
+    },
+    "./lib/tools/exec/adapters/python/worker/spawn-node.ts": {
+      "types": "./dist-lib/lib/tools/exec/adapters/python/worker/spawn-node.d.ts",
+      "default": "./dist-lib/lib/tools/exec/adapters/python/worker/spawn-node.js"
+    },
+    "./lib/tools/exec/adapters/shell/shell-adapter.ts": {
+      "types": "./dist-lib/lib/tools/exec/adapters/shell/shell-adapter.d.ts",
+      "default": "./dist-lib/lib/tools/exec/adapters/shell/shell-adapter.js"
+    },
+    "./lib/tools/exec/obsidian/cli-process.ts": {
+      "types": "./dist-lib/lib/tools/exec/obsidian/cli-process.d.ts",
+      "default": "./dist-lib/lib/tools/exec/obsidian/cli-process.js"
+    },
+    "./lib/tools/exec/obsidian/cli.ts": {
+      "types": "./dist-lib/lib/tools/exec/obsidian/cli.d.ts",
+      "default": "./dist-lib/lib/tools/exec/obsidian/cli.js"
+    },
+    "./lib/tools/exec/obsidian/command.ts": {
+      "types": "./dist-lib/lib/tools/exec/obsidian/command.d.ts",
+      "default": "./dist-lib/lib/tools/exec/obsidian/command.js"
+    },
+    "./lib/tools/exec/obsidian/guidance.ts": {
+      "types": "./dist-lib/lib/tools/exec/obsidian/guidance.d.ts",
+      "default": "./dist-lib/lib/tools/exec/obsidian/guidance.js"
+    },
+    "./lib/tools/exec/obsidian/note-name.ts": {
+      "types": "./dist-lib/lib/tools/exec/obsidian/note-name.d.ts",
+      "default": "./dist-lib/lib/tools/exec/obsidian/note-name.js"
+    },
+    "./lib/tools/exec/obsidian/output.ts": {
+      "types": "./dist-lib/lib/tools/exec/obsidian/output.d.ts",
+      "default": "./dist-lib/lib/tools/exec/obsidian/output.js"
+    },
+    "./lib/tools/exec/obsidian/route.ts": {
+      "types": "./dist-lib/lib/tools/exec/obsidian/route.d.ts",
+      "default": "./dist-lib/lib/tools/exec/obsidian/route.js"
+    },
+    "./lib/tools/exec/obsidian/safe-path.ts": {
+      "types": "./dist-lib/lib/tools/exec/obsidian/safe-path.d.ts",
+      "default": "./dist-lib/lib/tools/exec/obsidian/safe-path.js"
+    },
+    "./lib/tools/exec/obsidian/vault-create.ts": {
+      "types": "./dist-lib/lib/tools/exec/obsidian/vault-create.d.ts",
+      "default": "./dist-lib/lib/tools/exec/obsidian/vault-create.js"
+    },
+    "./lib/tools/exec/obsidian/vault-fs.ts": {
+      "types": "./dist-lib/lib/tools/exec/obsidian/vault-fs.d.ts",
+      "default": "./dist-lib/lib/tools/exec/obsidian/vault-fs.js"
+    },
+    "./lib/tools/exec/obsidian/vault-paths.ts": {
+      "types": "./dist-lib/lib/tools/exec/obsidian/vault-paths.d.ts",
+      "default": "./dist-lib/lib/tools/exec/obsidian/vault-paths.js"
+    },
+    "./lib/tools/exec/obsidian/vault-read.ts": {
+      "types": "./dist-lib/lib/tools/exec/obsidian/vault-read.d.ts",
+      "default": "./dist-lib/lib/tools/exec/obsidian/vault-read.js"
+    },
+    "./lib/tools/exec/obsidian/vault-write.ts": {
+      "types": "./dist-lib/lib/tools/exec/obsidian/vault-write.d.ts",
+      "default": "./dist-lib/lib/tools/exec/obsidian/vault-write.js"
+    },
+    "./lib/tools/exec/runner.ts": {
+      "types": "./dist-lib/lib/tools/exec/runner.d.ts",
+      "default": "./dist-lib/lib/tools/exec/runner.js"
+    },
+    "./lib/tools/exec/scope.ts": {
+      "types": "./dist-lib/lib/tools/exec/scope.d.ts",
+      "default": "./dist-lib/lib/tools/exec/scope.js"
+    },
+    "./lib/tools/exec/shell-argv.ts": {
+      "types": "./dist-lib/lib/tools/exec/shell-argv.d.ts",
+      "default": "./dist-lib/lib/tools/exec/shell-argv.js"
+    },
+    "./lib/tools/file-glob.ts": {
+      "types": "./dist-lib/lib/tools/file-glob.d.ts",
+      "default": "./dist-lib/lib/tools/file-glob.js"
+    },
     "./lib/tools/fs/drive.ts": {
       "types": "./dist-lib/lib/tools/fs/drive.d.ts",
       "default": "./dist-lib/lib/tools/fs/drive.js"
     },
+    "./lib/tools/fs/glob.ts": {
+      "types": "./dist-lib/lib/tools/fs/glob.d.ts",
+      "default": "./dist-lib/lib/tools/fs/glob.js"
+    },
+    "./lib/tools/fs/local.ts": {
+      "types": "./dist-lib/lib/tools/fs/local.d.ts",
+      "default": "./dist-lib/lib/tools/fs/local.js"
+    },
+    "./lib/tools/fs/read.ts": {
+      "types": "./dist-lib/lib/tools/fs/read.d.ts",
+      "default": "./dist-lib/lib/tools/fs/read.js"
+    },
     "./lib/tools/fs/remote-protocol.ts": {
       "types": "./dist-lib/lib/tools/fs/remote-protocol.d.ts",
       "default": "./dist-lib/lib/tools/fs/remote-protocol.js"
@@ -191,37 +348,193 @@
       "types": "./dist-lib/lib/tools/fs/remote.d.ts",
       "default": "./dist-lib/lib/tools/fs/remote.js"
     },
+    "./lib/tools/fs/scope.ts": {
+      "types": "./dist-lib/lib/tools/fs/scope.d.ts",
+      "default": "./dist-lib/lib/tools/fs/scope.js"
+    },
+    "./lib/tools/fs/walk.ts": {
+      "types": "./dist-lib/lib/tools/fs/walk.d.ts",
+      "default": "./dist-lib/lib/tools/fs/walk.js"
+    },
     "./lib/tools/fs/write.ts": {
       "types": "./dist-lib/lib/tools/fs/write.d.ts",
       "default": "./dist-lib/lib/tools/fs/write.js"
     },
+    "./lib/tools/generate-image.ts": {
+      "types": "./dist-lib/lib/tools/generate-image.d.ts",
+      "default": "./dist-lib/lib/tools/generate-image.js"
+    },
+    "./lib/tools/generate-music.ts": {
+      "types": "./dist-lib/lib/tools/generate-music.d.ts",
+      "default": "./dist-lib/lib/tools/generate-music.js"
+    },
+    "./lib/tools/grep.ts": {
+      "types": "./dist-lib/lib/tools/grep.d.ts",
+      "default": "./dist-lib/lib/tools/grep.js"
+    },
+    "./lib/tools/http-methods.ts": {
+      "types": "./dist-lib/lib/tools/http-methods.d.ts",
+      "default": "./dist-lib/lib/tools/http-methods.js"
+    },
+    "./lib/tools/http-request/encode-fields.ts": {
+      "types": "./dist-lib/lib/tools/http-request/encode-fields.d.ts",
+      "default": "./dist-lib/lib/tools/http-request/encode-fields.js"
+    },
+    "./lib/tools/http-request/truncate-response.ts": {
+      "types": "./dist-lib/lib/tools/http-request/truncate-response.d.ts",
+      "default": "./dist-lib/lib/tools/http-request/truncate-response.js"
+    },
+    "./lib/tools/http-request/utils.ts": {
+      "types": "./dist-lib/lib/tools/http-request/utils.d.ts",
+      "default": "./dist-lib/lib/tools/http-request/utils.js"
+    },
+    "./lib/tools/mcp/utils.ts": {
+      "types": "./dist-lib/lib/tools/mcp/utils.d.ts",
+      "default": "./dist-lib/lib/tools/mcp/utils.js"
+    },
+    "./lib/tools/model-args.ts": {
+      "types": "./dist-lib/lib/tools/model-args.d.ts",
+      "default": "./dist-lib/lib/tools/model-args.js"
+    },
+    "./lib/tools/operations/builders.ts": {
+      "types": "./dist-lib/lib/tools/operations/builders.d.ts",
+      "default": "./dist-lib/lib/tools/operations/builders.js"
+    },
     "./lib/tools/operations/compile.ts": {
       "types": "./dist-lib/lib/tools/operations/compile.d.ts",
       "default": "./dist-lib/lib/tools/operations/compile.js"
     },
+    "./lib/tools/operations/gmail-message.ts": {
+      "types": "./dist-lib/lib/tools/operations/gmail-message.d.ts",
+      "default": "./dist-lib/lib/tools/operations/gmail-message.js"
+    },
+    "./lib/tools/operations/manifest.ts": {
+      "types": "./dist-lib/lib/tools/operations/manifest.d.ts",
+      "default": "./dist-lib/lib/tools/operations/manifest.js"
+    },
+    "./lib/tools/outbound-guard.ts": {
+      "types": "./dist-lib/lib/tools/outbound-guard.d.ts",
+      "default": "./dist-lib/lib/tools/outbound-guard.js"
+    },
+    "./lib/tools/private-ip.ts": {
+      "types": "./dist-lib/lib/tools/private-ip.d.ts",
+      "default": "./dist-lib/lib/tools/private-ip.js"
+    },
+    "./lib/tools/read-files.ts": {
+      "types": "./dist-lib/lib/tools/read-files.d.ts",
+      "default": "./dist-lib/lib/tools/read-files.js"
+    },
+    "./lib/tools/skills/auth-resolver.ts": {
+      "types": "./dist-lib/lib/tools/skills/auth-resolver.d.ts",
+      "default": "./dist-lib/lib/tools/skills/auth-resolver.js"
+    },
+    "./lib/tools/skills/bin-check.ts": {
+      "types": "./dist-lib/lib/tools/skills/bin-check.d.ts",
+      "default": "./dist-lib/lib/tools/skills/bin-check.js"
+    },
     "./lib/tools/skills/bundled-dir.ts": {
       "types": "./dist-lib/lib/tools/skills/bundled-dir.d.ts",
       "default": "./dist-lib/lib/tools/skills/bundled-dir.js"
     },
+    "./lib/tools/skills/bundled-hash.ts": {
+      "types": "./dist-lib/lib/tools/skills/bundled-hash.d.ts",
+      "default": "./dist-lib/lib/tools/skills/bundled-hash.js"
+    },
+    "./lib/tools/skills/catalog.ts": {
+      "types": "./dist-lib/lib/tools/skills/catalog.d.ts",
+      "default": "./dist-lib/lib/tools/skills/catalog.js"
+    },
+    "./lib/tools/skills/cli-argv.ts": {
+      "types": "./dist-lib/lib/tools/skills/cli-argv.d.ts",
+      "default": "./dist-lib/lib/tools/skills/cli-argv.js"
+    },
+    "./lib/tools/skills/cli-schema-check.ts": {
+      "types": "./dist-lib/lib/tools/skills/cli-schema-check.d.ts",
+      "default": "./dist-lib/lib/tools/skills/cli-schema-check.js"
+    },
+    "./lib/tools/skills/cli-schema-load.ts": {
+      "types": "./dist-lib/lib/tools/skills/cli-schema-load.d.ts",
+      "default": "./dist-lib/lib/tools/skills/cli-schema-load.js"
+    },
+    "./lib/tools/skills/cli-schema-types.ts": {
+      "types": "./dist-lib/lib/tools/skills/cli-schema-types.d.ts",
+      "default": "./dist-lib/lib/tools/skills/cli-schema-types.js"
+    },
+    "./lib/tools/skills/cli-schema.ts": {
+      "types": "./dist-lib/lib/tools/skills/cli-schema.d.ts",
+      "default": "./dist-lib/lib/tools/skills/cli-schema.js"
+    },
+    "./lib/tools/skills/credential-check.ts": {
+      "types": "./dist-lib/lib/tools/skills/credential-check.d.ts",
+      "default": "./dist-lib/lib/tools/skills/credential-check.js"
+    },
+    "./lib/tools/skills/credential-grants.ts": {
+      "types": "./dist-lib/lib/tools/skills/credential-grants.d.ts",
+      "default": "./dist-lib/lib/tools/skills/credential-grants.js"
+    },
+    "./lib/tools/skills/credential-health.ts": {
+      "types": "./dist-lib/lib/tools/skills/credential-health.d.ts",
+      "default": "./dist-lib/lib/tools/skills/credential-health.js"
+    },
     "./lib/tools/skills/credential-slots.ts": {
       "types": "./dist-lib/lib/tools/skills/credential-slots.d.ts",
       "default": "./dist-lib/lib/tools/skills/credential-slots.js"
     },
+    "./lib/tools/skills/frontmatter-parser.ts": {
+      "types": "./dist-lib/lib/tools/skills/frontmatter-parser.d.ts",
+      "default": "./dist-lib/lib/tools/skills/frontmatter-parser.js"
+    },
     "./lib/tools/skills/manifest-parse.ts": {
       "types": "./dist-lib/lib/tools/skills/manifest-parse.d.ts",
       "default": "./dist-lib/lib/tools/skills/manifest-parse.js"
     },
+    "./lib/tools/skills/manifest.ts": {
+      "types": "./dist-lib/lib/tools/skills/manifest.d.ts",
+      "default": "./dist-lib/lib/tools/skills/manifest.js"
+    },
+    "./lib/tools/skills/obsidian-readiness.ts": {
+      "types": "./dist-lib/lib/tools/skills/obsidian-readiness.d.ts",
+      "default": "./dist-lib/lib/tools/skills/obsidian-readiness.js"
+    },
     "./lib/tools/skills/overlay-crud.ts": {
       "types": "./dist-lib/lib/tools/skills/overlay-crud.d.ts",
       "default": "./dist-lib/lib/tools/skills/overlay-crud.js"
     },
+    "./lib/tools/skills/overlay-dir.ts": {
+      "types": "./dist-lib/lib/tools/skills/overlay-dir.d.ts",
+      "default": "./dist-lib/lib/tools/skills/overlay-dir.js"
+    },
+    "./lib/tools/skills/overlay-watch.ts": {
+      "types": "./dist-lib/lib/tools/skills/overlay-watch.d.ts",
+      "default": "./dist-lib/lib/tools/skills/overlay-watch.js"
+    },
     "./lib/tools/skills/scope-key.ts": {
       "types": "./dist-lib/lib/tools/skills/scope-key.d.ts",
       "default": "./dist-lib/lib/tools/skills/scope-key.js"
     },
+    "./lib/tools/skills/setup-routes.ts": {
+      "types": "./dist-lib/lib/tools/skills/setup-routes.d.ts",
+      "default": "./dist-lib/lib/tools/skills/setup-routes.js"
+    },
+    "./lib/tools/skills/skill-settings.ts": {
+      "types": "./dist-lib/lib/tools/skills/skill-settings.d.ts",
+      "default": "./dist-lib/lib/tools/skills/skill-settings.js"
+    },
+    "./lib/tools/skills/skill-state-constants.ts": {
+      "types": "./dist-lib/lib/tools/skills/skill-state-constants.d.ts",
+      "default": "./dist-lib/lib/tools/skills/skill-state-constants.js"
+    },
     "./lib/tools/skills/skill-state.ts": {
       "types": "./dist-lib/lib/tools/skills/skill-state.d.ts",
       "default": "./dist-lib/lib/tools/skills/skill-state.js"
+    },
+    "./lib/tools/skills/tool-grants.ts": {
+      "types": "./dist-lib/lib/tools/skills/tool-grants.d.ts",
+      "default": "./dist-lib/lib/tools/skills/tool-grants.js"
+    },
+    "./lib/tools/url-guard.ts": {
+      "types": "./dist-lib/lib/tools/url-guard.d.ts",
+      "default": "./dist-lib/lib/tools/url-guard.js"
     }
   },
   "scripts": {

package/worker/harness-sidecar.mjs

@@ -0,0 +1,174 @@
+// bare-stow entry: serves the Harness over the ipc duplex bare-stow wires.
+// argv (empty = absent): [2] skillsDir, [3] SDK storage JSON (required: the fs deny list fences it), [4] embedding config JSON,
+// [5] imageModel JSON, [6] imageClamps JSON,
+// [7] '1' to enable harness logging (written to `harness.log`, beside assistant.log),
+// [8] llm config JSON (llmDevice/llmGpuLayers/contextSize/kvCacheK/kvCacheV),
+// [9] musicModel JSON, [10] musicClamps JSON, [11] vendored python wheels dir.
+import FileLog from 'bare-file-logger'
+import fs from 'fs'
+import { dirname, join } from 'path'
+import process from 'bare-process'
+import { configureSdkStorage } from '../dist-lib/lib/sdk-storage.js'
+import {
+  Harness,
+  loadSkillCatalog,
+  serveHarness,
+  setHarnessLog,
+  setHarnessLogSink
+} from '../dist-lib/index.js'
+import { createCreateDocumentsTool } from '../dist-lib/lib/tools/create-documents.js'
+import { createEditDocumentsTool } from '../dist-lib/lib/tools/edit-documents.js'
+import { createExecTool } from '../dist-lib/lib/tools/exec.js'
+import { createFileGlobTool } from '../dist-lib/lib/tools/file-glob.js'
+import { deniedRootsFor } from '../dist-lib/lib/tools/fs/scope.js'
+import { createGrepTool } from '../dist-lib/lib/tools/grep.js'
+import { createHttpRequestTool } from '../dist-lib/lib/tools/http-request.js'
+import { createMcpCallTool } from '../dist-lib/lib/tools/mcp-call.js'
+import { compileOperationTools } from '../dist-lib/lib/tools/operations/compile.js'
+import { createReadFilesTool } from '../dist-lib/lib/tools/read-files.js'
+import { createSkillTool } from '../dist-lib/lib/tools/skill.js'
+import { ensureBundledSkillsDir } from '../dist-lib/lib/tools/skills/bundled-dir.js'
+import { credentialAllowListFor, mcpReadMethods } from '../dist-lib/lib/tools/skills/index.js'
+import { createWebFetchTool } from '../dist-lib/lib/tools/web-fetch.js'
+import { createWebSearchTool } from '../dist-lib/lib/tools/web-search.js'
+
+// at maxSize rotate to a single overwritten archive, as the assistant's Logger does
+const LOG_MAX_SIZE = 100_000_000
+const SCOPE = '[harness]'
+// when the file will not open, everything still has somewhere to go that is not the pipe
+const DISCARD = { info() {}, debug() {}, warn() {}, error() {} }
+
+// On Windows the host does not read our stdout, and writing past the OS buffer takes the
+// Bare thread with it: the event loop stops, nothing raises, and a download never produces
+// a byte. Elsewhere the same write only queues in memory (measured), which is why it only
+// showed up there. Every line goes to a file instead, via the FileLog the assistant uses.
+function openHarnessLog(path) {
+  try {
+    fs.mkdirSync(dirname(path), { recursive: true })
+    return new FileLog(path, { maxSize: LOG_MAX_SIZE, rotate: (p) => `${p}.1` })
+  } catch {
+    return null
+  }
+}
+
+// Ungated by the host's log flag: the SDK and its addons log through `console`, and a
+// chatty dependency must not be able to wedge this process.
+function captureConsole(log) {
+  console.log = console.info = (...args) => log.info(SCOPE, ...args)
+  console.debug = (...args) => log.debug(SCOPE, ...args)
+  console.warn = (...args) => log.warn(SCOPE, ...args)
+  console.error = (...args) => log.error(SCOPE, ...args)
+}
+
+// The SDK's logger has console on by default, whoever asked; follow the host instead.
+async function alignSdkConsoleWithHost(hostWantsLogs) {
+  try {
+    const logging = await import('@qvac/sdk/logging')
+    logging.setGlobalConsoleOutput(hostWantsLogs)
+  } catch {
+    // a log setting must not decide whether this process boots
+  }
+}
+
+export default async function start(ipc, ready) {
+  let harness
+  let dying = false
+  // close() cancels in-flight SDK model loads (see Harness._close) so exit is not
+  // parked behind a multi-GB load; a wedged native call still ends at the host's
+  // kill deadline (bare-supervisor/stow reap)
+  const die = () => {
+    if (dying) return
+    dying = true
+    Promise.resolve(harness?.close())
+      .catch(() => {})
+      .then(() => Bare.exit(0))
+  }
+  Bare.IPC.on('end', die).on('close', die)
+
+  const sdkStorage = JSON.parse(Bare.argv[3] || '{}')
+  const deniedRoots = deniedRootsFor(sdkStorage.home)
+  const hostWantsLogs = Bare.argv[7] === '1'
+  setHarnessLog(hostWantsLogs)
+  // before the first await, so nothing logs ahead of the sink. The SDK home sits in
+  // the storage root, which is where the host writes assistant.log — harness.log
+  // belongs next to it.
+  const log = openHarnessLog(join(dirname(sdkStorage.home), 'harness.log')) ?? DISCARD
+  setHarnessLogSink((line) => log.info(SCOPE, line))
+  captureConsole(log)
+  await alignSdkConsoleWithHost(hostWantsLogs)
+
+  const skillsDir = Bare.argv[2] || (await ensureBundledSkillsDir())
+  const embedConfig = JSON.parse(Bare.argv[4] || '{}')
+  const imageModel = Bare.argv[5] ? JSON.parse(Bare.argv[5]) : undefined
+  const imageClamps = Bare.argv[6] ? JSON.parse(Bare.argv[6]) : undefined
+  const llmConfig = Bare.argv[8] ? JSON.parse(Bare.argv[8]) : {}
+  const musicModel = Bare.argv[9] ? JSON.parse(Bare.argv[9]) : undefined
+  const musicClamps = Bare.argv[10] ? JSON.parse(Bare.argv[10]) : undefined
+  // Only the host knows where the shipped wheels landed.
+  if (Bare.argv[11]) process.env.QVAC_PYTHON_WHEELS_DIR = Bare.argv[11]
+
+  configureSdkStorage(sdkStorage)
+  process.env.QVAC_PYODIDE_CACHE_DIR = `${sdkStorage.home}/pyodide-cache`
+
+  const skillCatalog = skillsDir ? await loadSkillCatalog(skillsDir) : undefined
+  const credentialed = skillCatalog
+    ? {
+        credentialStore: (key, ctx) => harness?.resolveCredential(key, ctx) ?? null,
+        credentialAllowList: credentialAllowListFor(skillCatalog)
+      }
+    : undefined
+
+  const httpRequestTool = createHttpRequestTool(credentialed)
+  const mcpCallTool = createMcpCallTool({
+    ...credentialed,
+    readMethods: skillCatalog ? mcpReadMethods(skillCatalog) : undefined
+  })
+  const tools = [
+    httpRequestTool,
+    createExecTool({
+      ...credentialed,
+      deniedRoots,
+      skillsDir,
+      skillSettings: (skill, agentId) => harness?.skillSettings(skill, agentId) ?? {}
+    }),
+    mcpCallTool,
+    createWebSearchTool(),
+    createWebFetchTool(),
+    createReadFilesTool({ deniedRoots }),
+    createFileGlobTool({ deniedRoots }),
+    createGrepTool({ deniedRoots }),
+    createCreateDocumentsTool({ deniedRoots }),
+    createEditDocumentsTool({ deniedRoots })
+  ]
+  if (skillCatalog) {
+    tools.push(...compileOperationTools(skillCatalog, { httpRequestTool, mcpCallTool }))
+  }
+  if (skillsDir) {
+    tools.push(
+      createSkillTool({
+        skillsDir,
+        ...(credentialed ? { credentialStore: credentialed.credentialStore } : {})
+      })
+    )
+  }
+  harness = new Harness({
+    tools,
+    skillsDir,
+    imageModel,
+    imageClamps,
+    musicModel,
+    musicClamps,
+    embedDevice: embedConfig.device,
+    embedGpuLayers: embedConfig.gpuLayers,
+    embedBatchSize: embedConfig.batchSize,
+    llmDevice: llmConfig.llmDevice,
+    llmGpuLayers: llmConfig.llmGpuLayers,
+    contextSize: llmConfig.contextSize,
+    kvCacheK: llmConfig.kvCacheK,
+    kvCacheV: llmConfig.kvCacheV
+  })
+  serveHarness(ipc, harness)
+  ready()
+
+  return () => {}
+}

package/worker/stow-entry.mjs

@@ -0,0 +1,68 @@
+/* global Bare */
+// What bare-stow generates as a bundle's `__main__.mjs`, as a plain file.
+//
+// A stow bundle is two halves: the JS inlined into it, and the native addons
+// offloaded beside it, because dlopen cannot read a path inside a bundle. The
+// tarball carries dist/prebuilds-manifest.json naming those addons, not the
+// addons themselves, so whoever spawns the bundle has to put them back from
+// their own node_modules — and then the two halves come from different
+// installs. @qvac/core 0.1.2 shipped that way and hung on boot: a bare-pipe one
+// patch release ahead of the JS calling it, no error, no exit.
+//
+// Nothing needs a bundle to spawn this. Run under `bare` from inside
+// node_modules, every addon already sits beside the JS that calls it, out of
+// one install, so they cannot disagree. The bundle stays published for hosts
+// that relocate the code out of node_modules — a packaged desktop or mobile
+// app, which stow their own entries anyway — and this is for everyone else.
+//
+// The protocol is bare-stow's own published export and the host end is
+// unchanged: bare-supervisor's sidecar runner wraps this exactly as it wraps
+// a bundle.
+import protocol from 'bare-stow/protocol'
+
+const ipc = protocol.attach(Bare.IPC)
+
+let stop = null
+let readied = false
+let exited = false
+
+function ready() {
+  if (readied) return
+  readied = true
+
+  ipc.send('ready')
+}
+
+async function shutdown(code, err = null) {
+  if (exited) return
+  exited = true
+
+  try {
+    if (stop) await stop()
+  } catch (e) {
+    err = err || e
+  }
+
+  if (err) ipc.send('error', { message: err.message, stack: err.stack })
+
+  await ipc.send('exit', { code })
+
+  Bare.exit(code)
+}
+
+ipc.on('terminate', () => shutdown(0))
+
+Bare.on('beforeExit', (exitCode) => shutdown(exitCode))
+  .on('uncaughtException', (err) => shutdown(1, err))
+  .on('unhandledRejection', (err) => shutdown(1, err))
+
+try {
+  const entry = await import('./harness-sidecar.mjs')
+  const start = entry.default
+
+  stop = (await start(ipc, ready)) || null
+
+  ready()
+} catch (err) {
+  shutdown(1, err)
+}