@tech-leads-club/harness-toolkit 0.5.1 → 0.7.0

package/schema.json

@@ -0,0 +1,545 @@
+{
+  "additionalProperties": false,
+  "type": "object",
+  "properties": {
+    "$schema": {
+      "type": "string"
+    },
+    "version": {
+      "const": 1,
+      "type": "number"
+    },
+    "mode": {
+      "enum": [
+        "focus",
+        "paired",
+        "solo"
+      ],
+      "type": "string"
+    },
+    "projectName": {
+      "type": "string"
+    },
+    "codePaths": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "grind": {
+      "$ref": "#/definitions/Partial%3C%7Benabled%3Aboolean%3BmaxLoops%3Anumber%3BlintCommand%3Astring%5B%5D%7Cnull%3BtestCommand%3Astring%5B%5D%7Cnull%3BappendFiles%3Aimport(%22.%2Fsrc%2Fcore%2Fgate%2Fgate.types%22%2C%7Bwith%3A%7B%22resolution-mode%22%3A%22import%22%7D%7D).AppendFilesMode%3B%7D%3E"
+    },
+    "shipGate": {
+      "$ref": "#/definitions/Partial%3C%7Benabled%3Aboolean%3BruntimePathPrefixes%3Astring%5B%5D%3BruntimePathExcludes%3Astring%5B%5D%3BevidenceDir%3Astring%7Cnull%3BevidenceMaxAgeHours%3Anumber%3BemptyDiffAntiShip%3Aboolean%3BclaimWindowMinutes%3Anumber%3B%7D%3E"
+    },
+    "subagents": {
+      "$ref": "#/definitions/Partial%3C%7BenforceAllowlist%3Aboolean%3BrequireModel%3Aboolean%3BallowedModels%3Aimport(%22.%2Fsrc%2Fcore%2Fpolicy%2Fpolicy.types%22%2C%7Bwith%3A%7B%22resolution-mode%22%3A%22import%22%7D%7D).ProviderScoped%3Cstring%3E%3BblockedPatterns%3Aimport(%22.%2Fsrc%2Fcore%2Fpolicy%2Fpolicy.types%22%2C%7Bwith%3A%7B%22resolution-mode%22%3A%22import%22%7D%7D).ProviderScoped%3Cstring%3E%3BminEffort%3A%22low%22%7C%22medium%22%7C%22high%22%7C%22xhigh%22%7C%22max%22%7Cnull%3BblockParentFast%3Aboolean%3BblockMode%3A%22deny%22%7C%22ask%22%3BreadOnlyTypes%3Astring%5B%5D%3B%7D%3E"
+    },
+    "docs": {
+      "$ref": "#/definitions/Partial%3C%7Bcommand%3Astring%5B%5D%7Cnull%3Bseverity%3A%22deny%22%7C%22warn%22%3B%7D%3E"
+    },
+    "observe": {
+      "description": "why: observation runs a rail's checker while the rail is not enforcing, so the harness can tell \"the model\nalready does this\" from \"the rule works\". Opt-in and default empty: it costs a diff scan per turn and answers a\nquestion only an operator who is asking it needs answered.",
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean"
+        },
+        "rails": {
+          "description": "Rails to observe by name. An unknown name is inert rather than an error — a rail may not exist yet.",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      },
+      "additionalProperties": false,
+      "required": [
+        "enabled",
+        "rails"
+      ]
+    },
+    "comments": {
+      "$ref": "#/definitions/Partial%3C%7Benabled%3Aboolean%3BonViolation%3A%22followup%22%7C%22off%22%3Bmode%3Aimport(%22.%2Fsrc%2Fcore%2Fpolicy%2Fpolicy.types%22%2C%7Bwith%3A%7B%22resolution-mode%22%3A%22import%22%7D%7D).CommentMode%3B%7D%3E"
+    },
+    "supplyChain": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean"
+        }
+      },
+      "additionalProperties": false,
+      "required": [
+        "enabled"
+      ]
+    },
+    "duplication": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean"
+        },
+        "minRun": {
+          "description": "why: the window is the only knob, because it is the only one calibration moved. Six is where matches stopped being punctuation.",
+          "type": "number"
+        }
+      },
+      "additionalProperties": false,
+      "required": [
+        "enabled",
+        "minRun"
+      ]
+    },
+    "obs": {
+      "$ref": "#/definitions/Partial%3C%7BglobalSpool%3Aboolean%3BincludePayloads%3Aboolean%3BmaxAttrChars%3Anumber%3BsessionCostAlertUsd%3Anumber%7Cnull%3BretentionDays%3Anumber%3B%7D%3E"
+    },
+    "untrustedContent": {
+      "$ref": "#/definitions/Partial%3C%7Benabled%3Aboolean%3Bmode%3Aimport(%22.%2Fsrc%2Fcore%2Funtrusted%2Funtrusted.types%22%2C%7Bwith%3A%7B%22resolution-mode%22%3A%22import%22%7D%7D).UntrustedMode%3BextraTools%3Astring%5B%5D%3BextraCommandPatterns%3Astring%5B%5D%3B%7D%3E"
+    },
+    "planGate": {
+      "$ref": "#/definitions/Partial%3C%7Benabled%3Aboolean%3BwindowMinutes%3Anumber%3B%7D%3E"
+    },
+    "rules": {
+      "$ref": "#/definitions/Partial%3C%7Benabled%3Aboolean%3B%7D%3E"
+    },
+    "shell": {
+      "$ref": "#/definitions/Partial%3C%7BcatastrophicAsk%3Aboolean%3BstallDetection%3Aboolean%3BstallRepeatThreshold%3Anumber%3B%7D%3E"
+    },
+    "intelligence": {
+      "additionalProperties": false,
+      "type": "object",
+      "properties": {
+        "gapFeedback": {
+          "type": "boolean"
+        },
+        "failureClassification": {
+          "type": "boolean"
+        },
+        "progressiveHandoff": {
+          "type": "boolean"
+        },
+        "progressiveContext": {
+          "type": "boolean"
+        },
+        "autopilot": {
+          "type": "boolean"
+        },
+        "idleTurnGate": {
+          "type": "boolean"
+        },
+        "budgetContinue": {
+          "type": "boolean"
+        },
+        "budgetContinueAfterLoops": {
+          "type": "number"
+        },
+        "lessons": {
+          "$ref": "#/definitions/Partial%3Cimport(%22.%2Fsrc%2Fcore%2Fpolicy%2Fpolicy.types%22%2C%7Bwith%3A%7B%22resolution-mode%22%3A%22import%22%7D%7D).LessonsPolicyConfig%3E"
+        }
+      }
+    },
+    "mcpPrime": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "bootstrapExtra": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    }
+  },
+  "definitions": {
+    "AppendFilesMode": {
+      "enum": [
+        "always",
+        "auto",
+        "never"
+      ],
+      "type": "string"
+    },
+    "import(\"./src/core/policy/policy.types\",{with:{\"resolution-mode\":\"import\"}}).ProviderScoped<string>": {
+      "anyOf": [
+        {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        {
+          "$ref": "#/definitions/Record%3Cstring%2Cstring%5B%5D%3E"
+        }
+      ]
+    },
+    "Record<string,string[]>": {
+      "type": "object",
+      "additionalProperties": false
+    },
+    "CommentMode": {
+      "description": "`declared` requires a reason marker, `strict` accepts no added comment at all, and `resolvable` is `declared`\nplus the question neither can ask: does the comment mean anything to a reader who was not in the session that\nwrote it ([/decisions/ad-070.md](/decisions/ad-070.md))?",
+      "enum": [
+        "declared",
+        "resolvable",
+        "strict"
+      ],
+      "type": "string"
+    },
+    "UntrustedMode": {
+      "description": "`frame` states once per turn that outside content is data. `enforce` adds the question framing cannot ask —\ndid this command come from that content — and answers it verbatim\n([/decisions/ad-077.md](/decisions/ad-077.md)).",
+      "enum": [
+        "enforce",
+        "frame"
+      ],
+      "type": "string"
+    },
+    "LessonsSyncMode": {
+      "description": "How the durable provider view is decided. `auto` asks the host: a provider that does not deliver context from\nits session-start hook has no other route, so the view is written there and not where the hook works\n([/decisions/ad-050.md](/decisions/ad-050.md)).",
+      "enum": [
+        "always",
+        "auto",
+        "never"
+      ],
+      "type": "string"
+    },
+    "Partial<{enabled:boolean;maxLoops:number;lintCommand:string[]|null;testCommand:string[]|null;appendFiles:import(\"./src/core/gate/gate.types\",{with:{\"resolution-mode\":\"import\"}}).AppendFilesMode;}>": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean"
+        },
+        "maxLoops": {
+          "type": "number"
+        },
+        "lintCommand": {
+          "anyOf": [
+            {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "testCommand": {
+          "anyOf": [
+            {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "appendFiles": {
+          "enum": [
+            "always",
+            "auto",
+            "never"
+          ],
+          "type": "string"
+        }
+      },
+      "additionalProperties": false
+    },
+    "Partial<{enabled:boolean;runtimePathPrefixes:string[];runtimePathExcludes:string[];evidenceDir:string|null;evidenceMaxAgeHours:number;emptyDiffAntiShip:boolean;claimWindowMinutes:number;}>": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean"
+        },
+        "runtimePathPrefixes": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "runtimePathExcludes": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "evidenceDir": {
+          "type": [
+            "null",
+            "string"
+          ]
+        },
+        "evidenceMaxAgeHours": {
+          "type": "number"
+        },
+        "emptyDiffAntiShip": {
+          "type": "boolean"
+        },
+        "claimWindowMinutes": {
+          "type": "number"
+        }
+      },
+      "additionalProperties": false
+    },
+    "Partial<{enforceAllowlist:boolean;requireModel:boolean;allowedModels:import(\"./src/core/policy/policy.types\",{with:{\"resolution-mode\":\"import\"}}).ProviderScoped<string>;blockedPatterns:import(\"./src/core/policy/policy.types\",{with:{\"resolution-mode\":\"import\"}}).ProviderScoped<string>;minEffort:\"low\"|\"medium\"|\"high\"|\"xhigh\"|\"max\"|null;blockParentFast:boolean;blockMode:\"deny\"|\"ask\";readOnlyTypes:string[];}>": {
+      "type": "object",
+      "properties": {
+        "enforceAllowlist": {
+          "type": "boolean"
+        },
+        "requireModel": {
+          "type": "boolean"
+        },
+        "allowedModels": {
+          "anyOf": [
+            {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            {
+              "$ref": "#/definitions/Record%3Cstring%2Cstring%5B%5D%3E"
+            }
+          ]
+        },
+        "blockedPatterns": {
+          "anyOf": [
+            {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            {
+              "$ref": "#/definitions/Record%3Cstring%2Cstring%5B%5D%3E"
+            }
+          ]
+        },
+        "minEffort": {
+          "anyOf": [
+            {
+              "enum": [
+                "high",
+                "low",
+                "max",
+                "medium",
+                "xhigh"
+              ],
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "blockParentFast": {
+          "type": "boolean"
+        },
+        "blockMode": {
+          "enum": [
+            "ask",
+            "deny"
+          ],
+          "type": "string"
+        },
+        "readOnlyTypes": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      },
+      "additionalProperties": false
+    },
+    "Partial<{command:string[]|null;severity:\"deny\"|\"warn\";}>": {
+      "type": "object",
+      "properties": {
+        "command": {
+          "description": "Null means the gate does not exist for this project.",
+          "anyOf": [
+            {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "severity": {
+          "enum": [
+            "deny",
+            "warn"
+          ],
+          "type": "string"
+        }
+      },
+      "additionalProperties": false
+    },
+    "Partial<{enabled:boolean;onViolation:\"followup\"|\"off\";mode:import(\"./src/core/policy/policy.types\",{with:{\"resolution-mode\":\"import\"}}).CommentMode;}>": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean"
+        },
+        "onViolation": {
+          "enum": [
+            "followup",
+            "off"
+          ],
+          "type": "string"
+        },
+        "mode": {
+          "description": "`declared` requires a reason marker, `strict` accepts no added comment at all, and `resolvable` is `declared`\nplus the question neither can ask: does the comment mean anything to a reader who was not in the session that\nwrote it ([/decisions/ad-070.md](/decisions/ad-070.md))?",
+          "enum": [
+            "declared",
+            "resolvable",
+            "strict"
+          ],
+          "type": "string"
+        }
+      },
+      "additionalProperties": false
+    },
+    "Partial<{globalSpool:boolean;includePayloads:boolean;maxAttrChars:number;sessionCostAlertUsd:number|null;retentionDays:number;}>": {
+      "type": "object",
+      "properties": {
+        "globalSpool": {
+          "type": "boolean"
+        },
+        "includePayloads": {
+          "type": "boolean"
+        },
+        "maxAttrChars": {
+          "type": "number"
+        },
+        "sessionCostAlertUsd": {
+          "type": [
+            "null",
+            "number"
+          ]
+        },
+        "retentionDays": {
+          "type": "number"
+        }
+      },
+      "additionalProperties": false
+    },
+    "Partial<{enabled:boolean;mode:import(\"./src/core/untrusted/untrusted.types\",{with:{\"resolution-mode\":\"import\"}}).UntrustedMode;extraTools:string[];extraCommandPatterns:string[];}>": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean"
+        },
+        "mode": {
+          "description": "`frame` states once per turn that outside content is data. `enforce` adds the question framing cannot ask —\ndid this command come from that content ([/decisions/ad-077.md](/decisions/ad-077.md))?",
+          "enum": [
+            "enforce",
+            "frame"
+          ],
+          "type": "string"
+        },
+        "extraTools": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "extraCommandPatterns": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      },
+      "additionalProperties": false
+    },
+    "Partial<{enabled:boolean;windowMinutes:number;}>": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean"
+        },
+        "windowMinutes": {
+          "type": "number"
+        }
+      },
+      "additionalProperties": false
+    },
+    "Partial<{enabled:boolean;}>": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean"
+        }
+      },
+      "additionalProperties": false
+    },
+    "Partial<{catastrophicAsk:boolean;stallDetection:boolean;stallRepeatThreshold:number;}>": {
+      "type": "object",
+      "properties": {
+        "catastrophicAsk": {
+          "type": "boolean"
+        },
+        "stallDetection": {
+          "type": "boolean"
+        },
+        "stallRepeatThreshold": {
+          "type": "number"
+        }
+      },
+      "additionalProperties": false
+    },
+    "Partial<import(\"./src/core/policy/policy.types\",{with:{\"resolution-mode\":\"import\"}}).LessonsPolicyConfig>": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean"
+        },
+        "maxInjectSession": {
+          "type": "number"
+        },
+        "maxInjectRetry": {
+          "type": "number"
+        },
+        "maxCharsSession": {
+          "type": "number"
+        },
+        "maxCharsRetry": {
+          "type": "number"
+        },
+        "promoteHitCount": {
+          "type": "number"
+        },
+        "decayLambda": {
+          "type": "number"
+        },
+        "projectBoost": {
+          "type": "number"
+        },
+        "syncRulesFile": {
+          "description": "How the durable provider view is decided. `auto` asks the host: a provider that does not deliver context from\nits session-start hook has no other route, so the view is written there and not where the hook works\n([/decisions/ad-050.md](/decisions/ad-050.md)).",
+          "enum": [
+            "always",
+            "auto",
+            "never"
+          ],
+          "type": "string"
+        },
+        "gardenOnSessionEnd": {
+          "type": "boolean"
+        }
+      },
+      "additionalProperties": false
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/src/core/capability/capability.store.ts

@@ -27,8 +27,34 @@ export function loadCatalog(home = runtimeHome()): CapabilityCatalog | null {
   return raw;
 }
 
+export type ConfigReadStatus =
+  | { status: "absent" }
+  | { status: "parsed"; value: Record<string, unknown> }
+  | { status: "malformed"; error: string };
+
+/**
+ * why: `readJson` already reads this file but collapses "absent" and "malformed" to the same `null`
+ * — the exact silent-corruption gap `doctor` needs to close, so this is a second, tagged reader.
+ */
+export function readProjectPolicyStatus(projectDir: string): ConfigReadStatus {
+  const path = projectConfigPath(projectDir);
+  if (!existsSync(path)) {
+    return { status: "absent" };
+  }
+  try {
+    const parsed = JSON.parse(readFileSync(path, "utf8")) as Record<string, unknown>;
+    // why: a JSON Schema meta-key, not a Policy field — see the identical strip in policy.loader.ts,
+    // this is the second, independent read of the same file.
+    delete parsed.$schema;
+    return { status: "parsed", value: parsed };
+  } catch (error) {
+    return { status: "malformed", error: error instanceof Error ? error.message : String(error) };
+  }
+}
+
 export function readProjectPolicyRaw(projectDir: string): Record<string, unknown> | null {
-  return readJson<Record<string, unknown>>(projectConfigPath(projectDir));
+  const result = readProjectPolicyStatus(projectDir);
+  return result.status === "parsed" ? result.value : null;
 }
 
 function runtimeSeenPath(projectDir: string): string {

package/src/core/comment-policy/comment-policy.service.ts

@@ -62,14 +62,9 @@ export function isCommentLine(text: string, file = ""): boolean {
 }
 
 /**
- * hazard: the rail's own scan target used to be `filterCodeTargets`, a nine-extension regex shared with grind
- * and duplication. The syntax catalog already knows 40+ languages — Terraform, SQL, YAML, Ruby, Java among
- * them — so a project whose changed files never carried one of the nine extensions had `mode: "strict"` in its
- * config and zero comments ever scanned. This filters by the same source the scanner itself trusts.
- *
- * invariant: takes no `codePaths` — that would need `policy.loader.ts`, which imports `policy.defaults.ts`,
- * which imports `duplication.service.ts`, which imports this module for `matchesSyntax`. A caller scopes by
- * `codePaths` itself first; this filters what is left by syntax alone.
+ * invariant: no `codePaths` param. Taking one needs `policy.loader.ts` → `policy.defaults.ts` →
+ * `duplication.service.ts`, which imports this module back for `matchesSyntax` — an import cycle. The
+ * caller scopes by `codePaths` first; this filters what's left by syntax alone.
  */
 export function filterCommentTargets(relativePaths: string[]): string[] {
   return relativePaths.filter((path) => syntaxFor(path) !== null);

package/src/core/core.facade.ts

@@ -16,6 +16,7 @@ import {
 import {
   loadCatalog,
   readProjectPolicyRaw,
+  readProjectPolicyStatus,
   readRuntimeSeen,
   writeRuntimeSeen,
 } from "./capability/capability.store.ts";
@@ -48,6 +49,7 @@ import { cachedVerdict, computeInputsHash, isCacheHit } from "./gate/gate.inputs
 import { describeHolder, GATE_LOCK_WAIT_MS, GateLockTimeoutError, withGateLock } from "./gate/gate.lock.ts";
 import { gapsFromArtifact } from "./gate/gate.service.ts";
 import {
+  clearStuckSignals,
   handoffInjectable,
   patchHandoff,
   readForeignSlices,
@@ -133,7 +135,7 @@ import {
 import { operatorBootstrapLines } from "./policy/policy.operator.ts";
 import { isOperatorMode, OPERATOR_MODES } from "./policy/policy.posture.ts";
 import { activeRails } from "./policy/policy.rails.ts";
-import { pruneShadowed, shadowedKeys } from "./policy/policy.shadow.ts";
+import { pruneShadowed, shadowedKeys, typeMismatches, unknownKeys } from "./policy/policy.shadow.ts";
 import { forProvider } from "./policy/policy.types.ts";
 import { checkCollision, heartbeat, register, release, sweepStale } from "./presence/presence.service.ts";
 import { freshness, freshnessMessage, mayReplace, shouldRefetch } from "./pricing/pricing.freshness.ts";
@@ -264,6 +266,7 @@ export const coreFacade = {
     ENABLE_HINT,
     loadCatalog,
     readProjectPolicyRaw,
+    readProjectPolicyStatus,
     readRuntimeSeen,
     writeRuntimeSeen,
     isAvailableNotEnabled,
@@ -306,6 +309,7 @@ export const coreFacade = {
     readHandoff,
     readHandoffFile,
     readForeignSlices,
+    clearStuckSignals,
   },
   shim: {
     coversHandler,
@@ -416,6 +420,8 @@ export const coreFacade = {
     resolvedWithoutProjectTier,
     shadowedKeys,
     pruneShadowed,
+    unknownKeys,
+    typeMismatches,
     resolveProjectPosture,
     resolveProjectSyncMode,
     OPERATOR_MODES,

package/src/core/floor/floor.policy-surface.ts

@@ -99,7 +99,7 @@ const HARNESS_BINS = new Set(["tlc", "tlc.cmd"]);
 // why: `policy` is here for the sharpest reason of any of them — `tlc harness policy accept` exists to clear a
 // tampering signal, so an agent that could reach it would make the whole integrity rail decorative. It is refused
 // by a floor rule with no config switch, exactly like the rest ([/decisions/ad-030.md](/decisions/ad-030.md)).
-const MUTATING_SUBCOMMANDS = new Set(["pause", "resume", "grind", "mode", "init", "gate", "policy"]);
+const MUTATING_SUBCOMMANDS = new Set(["pause", "resume", "reset", "grind", "mode", "init", "gate", "policy"]);
 
 function deny(detail: string, note: string, remedy?: string): PolicySurfaceVerdict {
   return { kind: "deny", detail, note, ...(remedy ? { remedy } : {}) };