@sentropic/harness 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Fabien Antoine
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,44 @@
+# @sentropic/harness
+
+Neutral, host-agnostic **code-work / PR-workflow** tooling for AI-driven development:
+branch / scope / lot / verify discipline, behind a pluggable **profile** SPI.
+
+- **Tooling-only**: zero product-runtime coupling (no Drizzle / Hono / Svelte / Mistral),
+  zero `@sentropic/*` deps. Node built-ins + TypeScript only.
+- **Emit-only**: checks produce a neutral `VerificationRun` artifact; harness never writes
+  into `@sentropic/track` (a track-side adapter ingests the artifact).
+- **Policy as data**: the Sentropic rules (scope paths, exception grammar, thresholds) live
+  in a `sentropic` profile module behind the `HarnessProfile` interface. The check **kernel**
+  is profile-driven (a second `stub` profile exercises it with divergent policy); full
+  plugin-surface genericity (plan-adapter SPI, profile resolution, `harness init`/`audit`) is
+  the G1–G4 follow-on tracked in `SPEC_STUDY_HARNESS_GENERICITY_AUDIT.md`.
+
+> Status: **BR-42h** — published to npm (D7 lifted 2026-06-08). Installs like every other
+> `@sentropic` CLI; `stp harness` subcommand federation is the scale lane (BR-42i).
+
+## Install
+
+```bash
+npm i -g @sentropic/harness    # same as @sentropic/h2a, track, remote, …
+```
+
+## Use
+
+```bash
+# Right branch?
+harness check branch --current-branch "$(git branch --show-current)" --expected-branch feat/x
+# Changed files within the BRANCH.md declared scope?
+harness check scope --branch-md BRANCH.md --staged-files "$(git diff --cached --name-only | paste -sd,)" [--json]
+```
+
+`--json` emits a neutral `VerificationRun`. `--profile sentropic|stub` selects the policy
+pack (default `sentropic`). In an `@sentropic` repo, `make scope-check` wraps the staged+
+unstaged scope check; agents (Claude/Codex/Gemini) are told to use harness — not a generic
+verification skill — for branch/scope discipline (see `AGENTS.md`/`GEMINI.md`).
+
+## This slice
+`BRANCH.md` parser · `ScopeBoundary` · **C1** branch-check · **C2** scope-check (advisory,
+BR25 **D5** Layer A) · neutral `VerificationRun`.
+
+See `BRANCH.md` (branch root) for the lot plan and the design articulation specs
+(`SPEC_STUDY_HARNESS_WORKFLOW_ARTICULATION.md`, `SPEC_STUDY_CLI_ECOSYSTEM_GAPS.md`).

package/dist/artifacts/verification-run.d.ts

@@ -0,0 +1,48 @@
+export type VerificationCategory = 'none' | 'static' | 'unit' | 'integration' | 'e2e' | 'ci' | 'uat';
+export type ViolationSeverity = 'advisory' | 'blocking';
+/** A single policy violation found by a check. */
+export interface Violation {
+    /** Check code, e.g. 'C1' (branch), 'C2' (scope). */
+    code: string;
+    /** Offending path, when the violation is path-scoped (C2). */
+    path?: string;
+    message: string;
+    /** D5 Layer A checks emit `advisory`; `blocking` is reserved (e.g. C8). */
+    severity: ViolationSeverity;
+}
+/** The return shape of an individual check function. */
+export interface CheckResult {
+    pass: boolean;
+    violations: Violation[];
+    /** Set when the check was deliberately bypassed (documented exception). */
+    bypass?: {
+        reason: string;
+    };
+}
+/** One check's contribution inside a VerificationRun. */
+export interface VerificationCheck {
+    code: string;
+    category: VerificationCategory;
+    pass: boolean;
+    violations: Violation[];
+}
+export interface VerificationRun {
+    schemaVersion: 1;
+    runId: string;
+    commit: string;
+    branch: string;
+    env: string;
+    runner: string;
+    category: VerificationCategory;
+    command: string;
+    result: 'pass' | 'fail';
+    /** ISO-8601 timestamps. */
+    startedAt: string;
+    finishedAt: string;
+    checks: VerificationCheck[];
+    /** Flattened union of all check violations (convenience for ingesters). */
+    violations: Violation[];
+    /** Opaque references to produced artifacts (paths/urls). */
+    artifacts: string[];
+}
+//# sourceMappingURL=verification-run.d.ts.map

package/dist/artifacts/verification-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-run.d.ts","sourceRoot":"","sources":["../../src/artifacts/verification-run.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,oBAAoB,GAC5B,MAAM,GACN,QAAQ,GACR,MAAM,GACN,aAAa,GACb,KAAK,GACL,IAAI,GACJ,KAAK,CAAC;AAEV,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,UAAU,CAAC;AAExD,kDAAkD;AAClD,MAAM,WAAW,SAAS;IACxB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,QAAQ,EAAE,iBAAiB,CAAC;CAC7B;AAED,wDAAwD;AACxD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,2EAA2E;IAC3E,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7B;AAED,yDAAyD;AACzD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,EAAE,SAAS,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,CAAC,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,2BAA2B;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,2EAA2E;IAC3E,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,4DAA4D;IAC5D,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB"}

package/dist/artifacts/verification-run.js

@@ -0,0 +1,10 @@
+// Neutral verification artifact emitted by harness checks.
+//
+// `VerificationRun` is the host-agnostic JSON a check run produces. harness EMITS it
+// and never writes into `@sentropic/track`; a track-side adapter ingests it. It is a
+// superset of track's `TestRun{ commit, env, runner, result, at }` so the seam holds.
+//
+// `category` is the BR25 **D3** verification taxonomy (APPROVED 2026-06-04), bound to this
+// field. (`security` is added when the security verify-hook lands — out of this slice.)
+export {};
+//# sourceMappingURL=verification-run.js.map

package/dist/artifacts/verification-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-run.js","sourceRoot":"","sources":["../../src/artifacts/verification-run.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,EAAE;AACF,qFAAqF;AACrF,qFAAqF;AACrF,sFAAsF;AACtF,EAAE;AACF,2FAA2F;AAC3F,wFAAwF"}

package/dist/bin/harness.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=harness.d.ts.map

package/dist/bin/harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.d.ts","sourceRoot":"","sources":["../../src/bin/harness.ts"],"names":[],"mappings":""}

package/dist/bin/harness.js

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import { runHarnessCli } from '../cli/run.js';
+const code = runHarnessCli(process.argv.slice(2), (s) => process.stdout.write(s + '\n'));
+process.exit(code);
+//# sourceMappingURL=harness.js.map

package/dist/bin/harness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.js","sourceRoot":"","sources":["../../src/bin/harness.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AACzF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC"}

package/dist/branch-md/parse.d.ts

@@ -0,0 +1,19 @@
+export interface ParsedLotItem {
+    text: string;
+    checked: boolean;
+}
+export interface ParsedLot {
+    title: string;
+    checked: boolean;
+    items: ParsedLotItem[];
+}
+export interface ParsedBranchMd {
+    title: string;
+    allowedPaths: string[];
+    forbiddenPaths: string[];
+    conditionalPaths: string[];
+    exceptions: string[];
+    lots: ParsedLot[];
+}
+export declare function parseBranchMd(text: string): ParsedBranchMd;
+//# sourceMappingURL=parse.d.ts.map

package/dist/branch-md/parse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.d.ts","sourceRoot":"","sources":["../../src/branch-md/parse.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,aAAa,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,EAAE,SAAS,EAAE,CAAC;CACnB;AAWD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAuF1D"}

package/dist/branch-md/parse.js

@@ -0,0 +1,95 @@
+// Minimal, tolerant BRANCH.md parser. Extracts the structure C1/C2 need:
+// title, scope buckets (Allowed/Forbidden/Conditional path globs), exception ids, and lots.
+// Malformed/partial input yields empty fields — never throws.
+const BACKTICK = /`([^`]+)`/g;
+const EXCEPTION = /\bBR\d+[a-z]?-EX\d+\b/g;
+function backtickGlobs(line) {
+    const out = [];
+    for (const m of line.matchAll(BACKTICK))
+        out.push(m[1]);
+    return out;
+}
+export function parseBranchMd(text) {
+    const lines = text.split(/\r?\n/);
+    const result = {
+        title: '',
+        allowedPaths: [],
+        forbiddenPaths: [],
+        conditionalPaths: [],
+        exceptions: [],
+        lots: [],
+    };
+    // Title: first `# ` heading (single hash), stripped of a leading "Feature:".
+    for (const line of lines) {
+        const m = /^#\s+(.+)$/.exec(line);
+        if (m) {
+            result.title = m[1].replace(/^Feature:\s*/i, '').trim();
+            break;
+        }
+    }
+    let bucket = null;
+    let inPlan = false;
+    let currentLot = null;
+    const pushBucket = (globs) => {
+        if (bucket === 'allowed')
+            result.allowedPaths.push(...globs);
+        else if (bucket === 'forbidden')
+            result.forbiddenPaths.push(...globs);
+        else if (bucket === 'conditional')
+            result.conditionalPaths.push(...globs);
+    };
+    for (const line of lines) {
+        for (const m of line.matchAll(EXCEPTION))
+            result.exceptions.push(m[0]);
+        if (/^##\s+/.test(line)) {
+            bucket = null;
+            inPlan = /plan\s*\/\s*todo/i.test(line);
+            currentLot = null;
+            continue;
+        }
+        if (/\*\*Allowed Paths\*\*/i.test(line)) {
+            bucket = 'allowed';
+            pushBucket(backtickGlobs(line));
+            continue;
+        }
+        if (/\*\*Forbidden Paths\*\*/i.test(line)) {
+            bucket = 'forbidden';
+            pushBucket(backtickGlobs(line));
+            continue;
+        }
+        if (/\*\*Conditional Paths/i.test(line)) {
+            bucket = 'conditional';
+            pushBucket(backtickGlobs(line));
+            continue;
+        }
+        if (bucket && /^\s+-\s/.test(line)) {
+            pushBucket(backtickGlobs(line));
+            continue;
+        }
+        if (bucket && /^-\s/.test(line)) {
+            bucket = null;
+        }
+        if (inPlan) {
+            const lotMatch = /^-\s*\[( |x)\]\s*\*\*(Lot[^*]+)\*\*/i.exec(line);
+            if (lotMatch) {
+                currentLot = {
+                    title: lotMatch[2].trim(),
+                    checked: lotMatch[1].toLowerCase() === 'x',
+                    items: [],
+                };
+                result.lots.push(currentLot);
+                continue;
+            }
+            const itemMatch = /^\s+-\s*\[( |x)\]\s*(.+)$/.exec(line);
+            if (itemMatch && currentLot) {
+                currentLot.items.push({
+                    text: itemMatch[2].trim(),
+                    checked: itemMatch[1].toLowerCase() === 'x',
+                });
+            }
+        }
+    }
+    result.exceptions = [...new Set(result.exceptions)];
+    return result;
+}
+//# sourceMappingURL=parse.js.map

package/dist/branch-md/parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.js","sourceRoot":"","sources":["../../src/branch-md/parse.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,4FAA4F;AAC5F,8DAA8D;AAsB9D,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,SAAS,GAAG,wBAAwB,CAAC;AAE3C,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,MAAM,GAAmB;QAC7B,KAAK,EAAE,EAAE;QACT,YAAY,EAAE,EAAE;QAChB,cAAc,EAAE,EAAE;QAClB,gBAAgB,EAAE,EAAE;QACpB,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,EAAE;KACT,CAAC;IAEF,6EAA6E;IAC7E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,EAAE,CAAC;YACN,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACxD,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,MAAM,GAAmD,IAAI,CAAC;IAClE,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,UAAU,GAAqB,IAAI,CAAC;IAExC,MAAM,UAAU,GAAG,CAAC,KAAe,EAAQ,EAAE;QAC3C,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;aACxD,IAAI,MAAM,KAAK,WAAW;YAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;aACjE,IAAI,MAAM,KAAK,aAAa;YAAE,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;IAC5E,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvE,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,UAAU,GAAG,IAAI,CAAC;YAClB,SAAS;QACX,CAAC;QAED,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,GAAG,SAAS,CAAC;YACnB,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YAChC,SAAS;QACX,CAAC;QACD,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,GAAG,WAAW,CAAC;YACrB,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YAChC,SAAS;QACX,CAAC;QACD,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,GAAG,aAAa,CAAC;YACvB,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YAChC,SAAS;QACX,CAAC;QAED,IAAI,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YAChC,SAAS;QACX,CAAC;QACD,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,QAAQ,GAAG,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnE,IAAI,QAAQ,EAAE,CAAC;gBACb,UAAU,GAAG;oBACX,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;oBACzB,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,GAAG;oBAC1C,KAAK,EAAE,EAAE;iBACV,CAAC;gBACF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,MAAM,SAAS,GAAG,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,SAAS,IAAI,UAAU,EAAE,CAAC;gBAC5B,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;oBACpB,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;oBACzB,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,GAAG;iBAC5C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,CAAC,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/checks/branch-check.d.ts

@@ -0,0 +1,15 @@
+import type { HarnessProfile } from '../profile/profile.js';
+import type { CheckResult } from '../artifacts/verification-run.js';
+export interface BranchCheckInput {
+    currentBranch: string;
+    /** Caller-supplied this slice (parsing a BRANCH.md identity block is a follow-on). */
+    expectedBranch: string;
+    profile: HarnessProfile;
+    /** Documented reason to skip the check (advisory bypass). */
+    bypass?: {
+        reason: string;
+    };
+}
+/** C1 — verify the working branch is the expected one (per the profile's `branchMatch`). */
+export declare function checkBranch(input: BranchCheckInput): CheckResult;
+//# sourceMappingURL=branch-check.d.ts.map

package/dist/checks/branch-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"branch-check.d.ts","sourceRoot":"","sources":["../../src/checks/branch-check.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAEpE,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,sFAAsF;IACtF,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,cAAc,CAAC;IACxB,6DAA6D;IAC7D,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7B;AAED,4FAA4F;AAC5F,wBAAgB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,WAAW,CAoBhE"}

package/dist/checks/branch-check.js

@@ -0,0 +1,23 @@
+/** C1 — verify the working branch is the expected one (per the profile's `branchMatch`). */
+export function checkBranch(input) {
+    if (input.bypass) {
+        return { pass: true, violations: [], bypass: input.bypass };
+    }
+    const { currentBranch, expectedBranch, profile } = input;
+    const ok = profile.branchMatch === 'prefix'
+        ? currentBranch.startsWith(expectedBranch)
+        : currentBranch === expectedBranch;
+    if (ok)
+        return { pass: true, violations: [] };
+    return {
+        pass: false,
+        violations: [
+            {
+                code: 'C1',
+                message: `on branch '${currentBranch}', expected '${expectedBranch}' (${profile.branchMatch})`,
+                severity: 'advisory',
+            },
+        ],
+    };
+}
+//# sourceMappingURL=branch-check.js.map

package/dist/checks/branch-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"branch-check.js","sourceRoot":"","sources":["../../src/checks/branch-check.ts"],"names":[],"mappings":"AAYA,4FAA4F;AAC5F,MAAM,UAAU,WAAW,CAAC,KAAuB;IACjD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC9D,CAAC;IACD,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACzD,MAAM,EAAE,GACN,OAAO,CAAC,WAAW,KAAK,QAAQ;QAC9B,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,cAAc,CAAC;QAC1C,CAAC,CAAC,aAAa,KAAK,cAAc,CAAC;IACvC,IAAI,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC9C,OAAO;QACL,IAAI,EAAE,KAAK;QACX,UAAU,EAAE;YACV;gBACE,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,cAAc,aAAa,gBAAgB,cAAc,MAAM,OAAO,CAAC,WAAW,GAAG;gBAC9F,QAAQ,EAAE,UAAU;aACrB;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/checks/scope-check.d.ts

@@ -0,0 +1,23 @@
+import type { HarnessProfile } from '../profile/profile.js';
+import type { CheckResult } from '../artifacts/verification-run.js';
+import { type ScopeBoundary } from '../scope/scope-boundary.js';
+export interface ScopeCheckInput {
+    /** Repo-relative staged file paths. */
+    stagedFiles: string[];
+    boundary: ScopeBoundary;
+    profile: HarnessProfile;
+    /** Exception ids declared in the BRANCH.md (e.g. parser `exceptions`). */
+    declaredExceptions?: string[];
+    bypass?: {
+        reason: string;
+    };
+}
+/**
+ * C2 — verify staged files stay within the declared scope.
+ *  - `forbidden` (explicit or profile-default) → violation;
+ *  - `conditional` → violation unless a declared exception matches the profile's
+ *    `exceptionIdPattern` (grammar binding) AND `conditionalRequiresException` is set;
+ *  - `unknown` (outside Allowed/Forbidden/Conditional) → violation.
+ */
+export declare function checkScope(input: ScopeCheckInput): CheckResult;
+//# sourceMappingURL=scope-check.d.ts.map

package/dist/checks/scope-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-check.d.ts","sourceRoot":"","sources":["../../src/checks/scope-check.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAa,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAE9E,MAAM,WAAW,eAAe;IAC9B,uCAAuC;IACvC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,EAAE,cAAc,CAAC;IACxB,0EAA0E;IAC1E,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,WAAW,CAqB9D"}

package/dist/checks/scope-check.js

@@ -0,0 +1,34 @@
+import { classifyPath } from '../scope/scope-boundary.js';
+/**
+ * C2 — verify staged files stay within the declared scope.
+ *  - `forbidden` (explicit or profile-default) → violation;
+ *  - `conditional` → violation unless a declared exception matches the profile's
+ *    `exceptionIdPattern` (grammar binding) AND `conditionalRequiresException` is set;
+ *  - `unknown` (outside Allowed/Forbidden/Conditional) → violation.
+ */
+export function checkScope(input) {
+    if (input.bypass)
+        return { pass: true, violations: [], bypass: input.bypass };
+    const { stagedFiles, boundary, profile, declaredExceptions = [] } = input;
+    const hasValidException = declaredExceptions.some((id) => profile.exceptionIdPattern.test(id));
+    const violations = [];
+    for (const path of stagedFiles) {
+        const cls = classifyPath(path, boundary, profile);
+        if (cls === 'forbidden') {
+            violations.push({ code: 'C2', path, message: `forbidden path touched: ${path}`, severity: 'advisory' });
+        }
+        else if (cls === 'conditional' && profile.conditionalRequiresException && !hasValidException) {
+            violations.push({
+                code: 'C2',
+                path,
+                message: `conditional path touched without a matching exception: ${path}`,
+                severity: 'advisory',
+            });
+        }
+        else if (cls === 'unknown') {
+            violations.push({ code: 'C2', path, message: `path outside declared scope (unknown): ${path}`, severity: 'advisory' });
+        }
+    }
+    return { pass: violations.length === 0, violations };
+}
+//# sourceMappingURL=scope-check.js.map

package/dist/checks/scope-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-check.js","sourceRoot":"","sources":["../../src/checks/scope-check.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAsB,MAAM,4BAA4B,CAAC;AAY9E;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,KAAsB;IAC/C,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC9E,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB,GAAG,EAAE,EAAE,GAAG,KAAK,CAAC;IAC1E,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/F,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClD,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,2BAA2B,IAAI,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1G,CAAC;aAAM,IAAI,GAAG,KAAK,aAAa,IAAI,OAAO,CAAC,4BAA4B,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC/F,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,IAAI;gBACV,IAAI;gBACJ,OAAO,EAAE,0DAA0D,IAAI,EAAE;gBACzE,QAAQ,EAAE,UAAU;aACrB,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,0CAA0C,IAAI,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QACzH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;AACvD,CAAC"}

package/dist/cli/run.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Pure, arg-based CLI driver — reads everything from `argv`, writes via `out`, returns an exit code.
+ * No internal git calls (the caller supplies branch + staged files), no `process.exit`.
+ * Advisory (D5 Layer A): a failing check returns 0; only a usage error returns non-zero.
+ * Acquiring git state under Docker-first (the `make scope-check` passthrough) is a separate,
+ * to-be-double-reviewed concern.
+ */
+export declare function runHarnessCli(argv: string[], out: (s: string) => void): number;
+//# sourceMappingURL=run.d.ts.map

package/dist/cli/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/cli/run.ts"],"names":[],"mappings":"AA8CA;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,CAsE9E"}

package/dist/cli/run.js

@@ -0,0 +1,116 @@
+import { readFileSync } from 'node:fs';
+import { parseBranchMd } from '../branch-md/parse.js';
+import { checkScope } from '../checks/scope-check.js';
+import { checkBranch } from '../checks/branch-check.js';
+import { toVerificationRun } from '../run/emit.js';
+import { sentropicProfile } from '../profile/sentropic.js';
+import { stubProfile } from '../profile/stub.js';
+function parseFlags(args) {
+    const positionals = [];
+    const flags = {};
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i];
+        if (a.startsWith('--')) {
+            const key = a.slice(2);
+            const next = args[i + 1];
+            if (next === undefined || next.startsWith('--')) {
+                flags[key] = true;
+            }
+            else {
+                flags[key] = next;
+                i++;
+            }
+        }
+        else {
+            positionals.push(a);
+        }
+    }
+    return { positionals, flags };
+}
+function str(v) {
+    return typeof v === 'string' ? v : undefined;
+}
+function list(v) {
+    const s = str(v);
+    return s ? s.split(/[\s,]+/).filter(Boolean) : [];
+}
+const USAGE = 'usage: harness check <scope|branch> [--current-branch <b>] [--expected-branch <b>] ' +
+    '[--staged-files <list>] [--branch-md <path>] [--profile sentropic|stub] [--json]';
+/**
+ * Pure, arg-based CLI driver — reads everything from `argv`, writes via `out`, returns an exit code.
+ * No internal git calls (the caller supplies branch + staged files), no `process.exit`.
+ * Advisory (D5 Layer A): a failing check returns 0; only a usage error returns non-zero.
+ * Acquiring git state under Docker-first (the `make scope-check` passthrough) is a separate,
+ * to-be-double-reviewed concern.
+ */
+export function runHarnessCli(argv, out) {
+    const { positionals, flags } = parseFlags(argv);
+    const command = positionals[0];
+    const sub = positionals[1];
+    if (command !== 'check' || (sub !== 'scope' && sub !== 'branch')) {
+        out(USAGE);
+        return command === undefined ? 0 : 2;
+    }
+    const profile = str(flags.profile) === 'stub' ? stubProfile : sentropicProfile;
+    const category = 'static';
+    let result;
+    let code;
+    let commandLabel;
+    if (sub === 'scope') {
+        code = 'C2';
+        commandLabel = 'harness check scope';
+        const branchMdPath = str(flags['branch-md']);
+        let parsed;
+        if (branchMdPath) {
+            try {
+                parsed = parseBranchMd(readFileSync(branchMdPath, 'utf8'));
+            }
+            catch {
+                out(`harness: cannot read plan file: ${branchMdPath}`);
+                return 2;
+            }
+        }
+        result = checkScope({
+            stagedFiles: list(flags['staged-files']),
+            boundary: {
+                allowed: parsed?.allowedPaths ?? [],
+                forbidden: parsed?.forbiddenPaths ?? [],
+                conditional: parsed?.conditionalPaths ?? [],
+            },
+            profile,
+            declaredExceptions: parsed?.exceptions ?? [],
+        });
+    }
+    else {
+        code = 'C1';
+        commandLabel = 'harness check branch';
+        result = checkBranch({
+            currentBranch: str(flags['current-branch']) ?? '',
+            expectedBranch: str(flags['expected-branch']) ?? '',
+            profile,
+        });
+    }
+    if (flags.json === true) {
+        // Pure: a deterministic placeholder timestamp; a real run injects commit/env/clock context.
+        const ts = '1970-01-01T00:00:00.000Z';
+        const run = toVerificationRun([{ code, category, result }], {
+            runId: 'cli',
+            commit: str(flags.commit) ?? 'unknown',
+            branch: str(flags['current-branch']) ?? 'unknown',
+            env: str(flags.env) ?? 'cli',
+            runner: 'harness',
+            category,
+            command: commandLabel,
+            startedAt: ts,
+            finishedAt: ts,
+        });
+        out(JSON.stringify(run, null, 2));
+    }
+    else {
+        out(`${result.pass ? 'PASS' : 'FAIL'} ${code} (${profile.id})`);
+        for (const v of result.violations)
+            out(`  - ${v.severity}: ${v.message}`);
+    }
+    return 0;
+}
+//# sourceMappingURL=run.js.map

package/dist/cli/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/cli/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAMjD,SAAS,UAAU,CAAC,IAAc;IAChC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,KAAK,GAA8B,EAAE,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACvB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;gBAClB,CAAC,EAAE,CAAC;YACN,CAAC;QACH,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,GAAG,CAAC,CAAwB;IACnC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,SAAS,IAAI,CAAC,CAAwB;IACpC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACjB,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,KAAK,GACT,qFAAqF;IACrF,kFAAkF,CAAC;AAErF;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAc,EAAE,GAAwB;IACpE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAE3B,IAAI,OAAO,KAAK,OAAO,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,QAAQ,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,KAAK,CAAC,CAAC;QACX,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,OAAO,GAAmB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC;IAC/F,MAAM,QAAQ,GAAyB,QAAQ,CAAC;IAChD,IAAI,MAAmB,CAAC;IACxB,IAAI,IAAY,CAAC;IACjB,IAAI,YAAoB,CAAC;IAEzB,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,IAAI,GAAG,IAAI,CAAC;QACZ,YAAY,GAAG,qBAAqB,CAAC;QACrC,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QAC7C,IAAI,MAAoD,CAAC;QACzD,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,GAAG,aAAa,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;YAC7D,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,mCAAmC,YAAY,EAAE,CAAC,CAAC;gBACvD,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QACD,MAAM,GAAG,UAAU,CAAC;YAClB,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACxC,QAAQ,EAAE;gBACR,OAAO,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE;gBACnC,SAAS,EAAE,MAAM,EAAE,cAAc,IAAI,EAAE;gBACvC,WAAW,EAAE,MAAM,EAAE,gBAAgB,IAAI,EAAE;aAC5C;YACD,OAAO;YACP,kBAAkB,EAAE,MAAM,EAAE,UAAU,IAAI,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,IAAI,CAAC;QACZ,YAAY,GAAG,sBAAsB,CAAC;QACtC,MAAM,GAAG,WAAW,CAAC;YACnB,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE;YACjD,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE;YACnD,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACxB,4FAA4F;QAC5F,MAAM,EAAE,GAAG,0BAA0B,CAAC;QACtC,MAAM,GAAG,GAAG,iBAAiB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE;YAC1D,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,SAAS;YACtC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,IAAI,SAAS;YACjD,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK;YAC5B,MAAM,EAAE,SAAS;YACjB,QAAQ;YACR,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,EAAE;SACf,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,KAAK,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAChE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU;YAAE,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+export declare const HARNESS_PACKAGE: "@sentropic/harness";
+export type { VerificationRun, VerificationCheck, VerificationCategory, Violation, ViolationSeverity, CheckResult, } from './artifacts/verification-run.js';
+export type { HarnessProfile } from './profile/profile.js';
+export { sentropicProfile } from './profile/sentropic.js';
+export { stubProfile } from './profile/stub.js';
+export { parseBranchMd } from './branch-md/parse.js';
+export type { ParsedBranchMd, ParsedLot, ParsedLotItem } from './branch-md/parse.js';
+export { classifyPath, matchGlob, globToRegExp } from './scope/scope-boundary.js';
+export type { ScopeBoundary, PathClass } from './scope/scope-boundary.js';
+export { checkBranch } from './checks/branch-check.js';
+export type { BranchCheckInput } from './checks/branch-check.js';
+export { checkScope } from './checks/scope-check.js';
+export type { ScopeCheckInput } from './checks/scope-check.js';
+export { toVerificationRun } from './run/emit.js';
+export type { NamedCheck, VerificationContext } from './run/emit.js';
+export { runHarnessCli } from './cli/run.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,eAAe,sBAAgC,CAAC;AAG7D,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,SAAS,EACT,iBAAiB,EACjB,WAAW,GACZ,MAAM,iCAAiC,CAAC;AAGzC,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrF,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAClF,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAG1E,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,YAAY,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,YAAY,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAGrE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,18 @@
+// @sentropic/harness — neutral, host-agnostic code-work / PR-workflow tooling.
+//
+// Tooling-only: no product-runtime imports (no Drizzle/Hono/Svelte/Mistral), no
+// `@sentropic/*` deps, and NO track import — harness only EMITS neutral artifacts.
+export const HARNESS_PACKAGE = '@sentropic/harness';
+export { sentropicProfile } from './profile/sentropic.js';
+export { stubProfile } from './profile/stub.js';
+// BRANCH.md parser.
+export { parseBranchMd } from './branch-md/parse.js';
+// Scope classification.
+export { classifyPath, matchGlob, globToRegExp } from './scope/scope-boundary.js';
+// Checks (C1 branch, C2 scope) + neutral run assembly.
+export { checkBranch } from './checks/branch-check.js';
+export { checkScope } from './checks/scope-check.js';
+export { toVerificationRun } from './run/emit.js';
+// Pure, arg-based CLI driver (the `harness` bin is a thin wrapper over this).
+export { runHarnessCli } from './cli/run.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,EAAE;AACF,gFAAgF;AAChF,mFAAmF;AAEnF,MAAM,CAAC,MAAM,eAAe,GAAG,oBAA6B,CAAC;AAc7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,oBAAoB;AACpB,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD,wBAAwB;AACxB,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAGlF,uDAAuD;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAGlD,8EAA8E;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC"}

package/dist/profile/profile.d.ts

@@ -0,0 +1,13 @@
+export interface HarnessProfile {
+    /** Profile identifier, e.g. 'sentropic' | 'stub'. */
+    id: string;
+    /** Globs forbidden by default unless a BRANCH.md explicitly Allows them (C2). */
+    forbiddenPathDefaults: string[];
+    /** Grammar of a valid scope-exception id in BRANCH.md (C2 conditional binding). */
+    exceptionIdPattern: RegExp;
+    /** When true, a Conditional path may be touched only if a matching exception id exists (C2). */
+    conditionalRequiresException: boolean;
+    /** How the current branch is compared to the expected branch (C1). */
+    branchMatch: 'exact' | 'prefix';
+}
+//# sourceMappingURL=profile.d.ts.map

package/dist/profile/profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../../src/profile/profile.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,cAAc;IAC7B,qDAAqD;IACrD,EAAE,EAAE,MAAM,CAAC;IACX,iFAAiF;IACjF,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,mFAAmF;IACnF,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gGAAgG;IAChG,4BAA4B,EAAE,OAAO,CAAC;IACtC,sEAAsE;IACtE,WAAW,EAAE,OAAO,GAAG,QAAQ,CAAC;CACjC"}

package/dist/profile/profile.js

@@ -0,0 +1,10 @@
+// HarnessProfile — the policy SPI.
+//
+// The engine (parser, C1/C2 checks) is generic; all Sentropic-specific policy is data in a
+// profile module. This slice exposes ONLY the fields C1/C2 actually consume — deferred
+// checks (C4/C5/C6/C8) add their fields with their lots, so there is no dead config.
+//
+// Genericity is proven, not asserted: a second `stub` profile differs on a C2-consumed
+// dimension and the Lot 4 test asserts DIVERGENT outcomes on the same input.
+export {};
+//# sourceMappingURL=profile.js.map

package/dist/profile/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../src/profile/profile.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,EAAE;AACF,2FAA2F;AAC3F,uFAAuF;AACvF,qFAAqF;AACrF,EAAE;AACF,uFAAuF;AACvF,6EAA6E"}

package/dist/profile/sentropic.d.ts

@@ -0,0 +1,3 @@
+import type { HarnessProfile } from './profile.js';
+export declare const sentropicProfile: HarnessProfile;
+//# sourceMappingURL=sentropic.d.ts.map

package/dist/profile/sentropic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentropic.d.ts","sourceRoot":"","sources":["../../src/profile/sentropic.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAInD,eAAO,MAAM,gBAAgB,EAAE,cAQ9B,CAAC"}

package/dist/profile/sentropic.js

@@ -0,0 +1,12 @@
+// The Sentropic policy, as data (from rules/MASTER.md). The engine never branches on
+// `id` — it only reads these fields.
+export const sentropicProfile = {
+    id: 'sentropic',
+    // MASTER.md "Default forbidden": Makefile, docker-compose*.yml, .cursor/rules/**.
+    forbiddenPathDefaults: ['Makefile', 'docker-compose*.yml', '.cursor/rules/**'],
+    // Scope exceptions look like `BR42h-EX1` / `BR04-EX2` (MASTER.md `BRxx-EXn`).
+    exceptionIdPattern: /^BR\d+[a-z]?-EX\d+$/,
+    conditionalRequiresException: true,
+    branchMatch: 'exact',
+};
+//# sourceMappingURL=sentropic.js.map

package/dist/profile/sentropic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentropic.js","sourceRoot":"","sources":["../../src/profile/sentropic.ts"],"names":[],"mappings":"AAEA,qFAAqF;AACrF,qCAAqC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAmB;IAC9C,EAAE,EAAE,WAAW;IACf,kFAAkF;IAClF,qBAAqB,EAAE,CAAC,UAAU,EAAE,qBAAqB,EAAE,kBAAkB,CAAC;IAC9E,8EAA8E;IAC9E,kBAAkB,EAAE,qBAAqB;IACzC,4BAA4B,EAAE,IAAI;IAClC,WAAW,EAAE,OAAO;CACrB,CAAC"}

package/dist/profile/stub.d.ts

@@ -0,0 +1,3 @@
+import type { HarnessProfile } from './profile.js';
+export declare const stubProfile: HarnessProfile;
+//# sourceMappingURL=stub.d.ts.map

package/dist/profile/stub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stub.d.ts","sourceRoot":"","sources":["../../src/profile/stub.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAOnD,eAAO,MAAM,WAAW,EAAE,cAMzB,CAAC"}

package/dist/profile/stub.js

@@ -0,0 +1,13 @@
+// A deliberately-different 2nd profile that PROVES the engine is profile-generic.
+// It differs from `sentropic` on dimensions C2 actually consumes — a different
+// exception-id grammar, a different forbidden-default set, and conditional-without-
+// exception allowed — so the Lot 4 genericity test can assert DIVERGENT outcomes on the
+// same BRANCH.md + staged-file input (not "both pass", which would prove nothing).
+export const stubProfile = {
+    id: 'stub',
+    forbiddenPathDefaults: ['secret/**'],
+    exceptionIdPattern: /^EXC-\d+$/,
+    conditionalRequiresException: false,
+    branchMatch: 'prefix',
+};
+//# sourceMappingURL=stub.js.map

package/dist/profile/stub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stub.js","sourceRoot":"","sources":["../../src/profile/stub.ts"],"names":[],"mappings":"AAEA,kFAAkF;AAClF,+EAA+E;AAC/E,oFAAoF;AACpF,wFAAwF;AACxF,mFAAmF;AACnF,MAAM,CAAC,MAAM,WAAW,GAAmB;IACzC,EAAE,EAAE,MAAM;IACV,qBAAqB,EAAE,CAAC,WAAW,CAAC;IACpC,kBAAkB,EAAE,WAAW;IAC/B,4BAA4B,EAAE,KAAK;IACnC,WAAW,EAAE,QAAQ;CACtB,CAAC"}

package/dist/run/emit.d.ts

@@ -0,0 +1,24 @@
+import type { CheckResult, VerificationRun, VerificationCategory } from '../artifacts/verification-run.js';
+export interface NamedCheck {
+    code: string;
+    category: VerificationCategory;
+    result: CheckResult;
+}
+export interface VerificationContext {
+    runId: string;
+    commit: string;
+    branch: string;
+    env: string;
+    runner: string;
+    category: VerificationCategory;
+    command: string;
+    startedAt: string;
+    finishedAt: string;
+    artifacts?: string[];
+}
+/**
+ * Assemble a NEUTRAL `VerificationRun` from check results. harness EMITS this artifact and
+ * never writes into `@sentropic/track` — a track-side adapter ingests it (no track import here).
+ */
+export declare function toVerificationRun(checks: NamedCheck[], ctx: VerificationContext): VerificationRun;
+//# sourceMappingURL=emit.d.ts.map

package/dist/run/emit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emit.d.ts","sourceRoot":"","sources":["../../src/run/emit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EAEf,oBAAoB,EAErB,MAAM,kCAAkC,CAAC;AAE1C,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,mBAAmB,GAAG,eAAe,CAyBjG"}

package/dist/run/emit.js

@@ -0,0 +1,31 @@
+/**
+ * Assemble a NEUTRAL `VerificationRun` from check results. harness EMITS this artifact and
+ * never writes into `@sentropic/track` — a track-side adapter ingests it (no track import here).
+ */
+export function toVerificationRun(checks, ctx) {
+    const verificationChecks = checks.map((c) => ({
+        code: c.code,
+        category: c.category,
+        pass: c.result.pass,
+        violations: c.result.violations,
+    }));
+    const violations = checks.flatMap((c) => c.result.violations);
+    const pass = verificationChecks.every((c) => c.pass);
+    return {
+        schemaVersion: 1,
+        runId: ctx.runId,
+        commit: ctx.commit,
+        branch: ctx.branch,
+        env: ctx.env,
+        runner: ctx.runner,
+        category: ctx.category,
+        command: ctx.command,
+        result: pass ? 'pass' : 'fail',
+        startedAt: ctx.startedAt,
+        finishedAt: ctx.finishedAt,
+        checks: verificationChecks,
+        violations,
+        artifacts: ctx.artifacts ?? [],
+    };
+}
+//# sourceMappingURL=emit.js.map

package/dist/run/emit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emit.js","sourceRoot":"","sources":["../../src/run/emit.ts"],"names":[],"mappings":"AA2BA;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAoB,EAAE,GAAwB;IAC9E,MAAM,kBAAkB,GAAwB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjE,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI;QACnB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU;KAChC,CAAC,CAAC,CAAC;IACJ,MAAM,UAAU,GAAgB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,MAAM,EAAE,kBAAkB;QAC1B,UAAU;QACV,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE;KAC/B,CAAC;AACJ,CAAC"}

package/dist/scope/scope-boundary.d.ts

@@ -0,0 +1,25 @@
+import type { HarnessProfile } from '../profile/profile.js';
+export type PathClass = 'allowed' | 'forbidden' | 'conditional' | 'unknown';
+/** The Allowed / Forbidden / Conditional path globs declared by a BRANCH.md. */
+export interface ScopeBoundary {
+    allowed: string[];
+    forbidden: string[];
+    conditional: string[];
+}
+/** Translate a path glob into an anchored RegExp. `**` spans `/`; `*` stays within a segment. */
+export declare function globToRegExp(glob: string): RegExp;
+export declare function matchGlob(glob: string, path: string): boolean;
+/**
+ * Classify a repo-relative path against a branch ScopeBoundary + the profile's default
+ * forbidden globs (C2 scope-check core).
+ *
+ * Precedence (first match wins):
+ *   explicit allowed > explicit forbidden > explicit conditional > profile default-forbidden > unknown
+ *
+ * `allowed` wins over `forbidden` so an explicitly-granted subtree (e.g. `packages/harness/**`)
+ * is `allowed` even when a broader `packages/**` is forbidden — the Allowed list is the granted
+ * implementation scope. `conditional` is checked before profile defaults so a Conditional listing
+ * (e.g. `Makefile` with an exception) overrides the profile's default-forbidden classification.
+ */
+export declare function classifyPath(path: string, boundary: ScopeBoundary, profile: HarnessProfile): PathClass;
+//# sourceMappingURL=scope-boundary.d.ts.map

package/dist/scope/scope-boundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-boundary.d.ts","sourceRoot":"","sources":["../../src/scope/scope-boundary.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,CAAC;AAE5E,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,iGAAiG;AACjG,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkBjD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,aAAa,EACvB,OAAO,EAAE,cAAc,GACtB,SAAS,CAMX"}

package/dist/scope/scope-boundary.js

@@ -0,0 +1,50 @@
+/** Translate a path glob into an anchored RegExp. `**` spans `/`; `*` stays within a segment. */
+export function globToRegExp(glob) {
+    let re = '';
+    for (let i = 0; i < glob.length; i++) {
+        const c = glob[i];
+        if (c === '*') {
+            if (glob[i + 1] === '*') {
+                re += '.*';
+                i++;
+            }
+            else {
+                re += '[^/]*';
+            }
+        }
+        else if ('\\^$+?.()|[]{}/'.includes(c)) {
+            re += '\\' + c;
+        }
+        else {
+            re += c;
+        }
+    }
+    return new RegExp('^' + re + '$');
+}
+export function matchGlob(glob, path) {
+    return globToRegExp(glob).test(path);
+}
+/**
+ * Classify a repo-relative path against a branch ScopeBoundary + the profile's default
+ * forbidden globs (C2 scope-check core).
+ *
+ * Precedence (first match wins):
+ *   explicit allowed > explicit forbidden > explicit conditional > profile default-forbidden > unknown
+ *
+ * `allowed` wins over `forbidden` so an explicitly-granted subtree (e.g. `packages/harness/**`)
+ * is `allowed` even when a broader `packages/**` is forbidden — the Allowed list is the granted
+ * implementation scope. `conditional` is checked before profile defaults so a Conditional listing
+ * (e.g. `Makefile` with an exception) overrides the profile's default-forbidden classification.
+ */
+export function classifyPath(path, boundary, profile) {
+    if (boundary.allowed.some((g) => matchGlob(g, path)))
+        return 'allowed';
+    if (boundary.forbidden.some((g) => matchGlob(g, path)))
+        return 'forbidden';
+    if (boundary.conditional.some((g) => matchGlob(g, path)))
+        return 'conditional';
+    if (profile.forbiddenPathDefaults.some((g) => matchGlob(g, path)))
+        return 'forbidden';
+    return 'unknown';
+}
+//# sourceMappingURL=scope-boundary.js.map

package/dist/scope/scope-boundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-boundary.js","sourceRoot":"","sources":["../../src/scope/scope-boundary.ts"],"names":[],"mappings":"AAWA,iGAAiG;AACjG,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACxB,EAAE,IAAI,IAAI,CAAC;gBACX,CAAC,EAAE,CAAC;YACN,CAAC;iBAAM,CAAC;gBACN,EAAE,IAAI,OAAO,CAAC;YAChB,CAAC;QACH,CAAC;aAAM,IAAI,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,EAAE,IAAI,IAAI,GAAG,CAAC,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,EAAE,IAAI,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,GAAG,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,IAAY;IAClD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,QAAuB,EACvB,OAAuB;IAEvB,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACvE,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC;IAC3E,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAAE,OAAO,aAAa,CAAC;IAC/E,IAAI,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC;IACtF,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@sentropic/harness",
+  "version": "0.1.0",
+  "description": "Neutral, host-agnostic code-work / PR-workflow tooling for AI dev: branch/scope/lot/verify discipline. Tooling-only, zero product-runtime deps. (BR-42h)",
+  "type": "module",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/rhanka/sentropic.git",
+    "directory": "packages/harness"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "harness": "./dist/bin/harness.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc --noEmit -p tsconfig.json"
+  },
+  "devDependencies": {
+    "@types/node": "^20.12.0",
+    "typescript": "5.4.5",
+    "vitest": "4.0.18"
+  }
+}