agentic-engineering-harness 0.6.28 → 0.6.29
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/agents/permissions.js +8 -6
- package/dist/agents/permissions.js.map +1 -1
- package/dist/cli.js +12 -13
- package/dist/cli.js.map +1 -1
- package/dist/context/compression/headroom.d.ts +1 -0
- package/dist/context/compression/headroom.js +2 -1
- package/dist/context/compression/headroom.js.map +1 -1
- package/dist/context/envelope.js +1 -1
- package/dist/context/envelope.js.map +1 -1
- package/dist/context/gateway.d.ts +1 -1
- package/dist/context/gateway.js +32 -10
- package/dist/context/gateway.js.map +1 -1
- package/dist/context/policy.js +1 -1
- package/dist/context/policy.js.map +1 -1
- package/dist/context/preflight.js +10 -4
- package/dist/context/preflight.js.map +1 -1
- package/dist/context/repository/graphify.d.ts +1 -0
- package/dist/context/repository/graphify.js +4 -33
- package/dist/context/repository/graphify.js.map +1 -1
- package/dist/context/repository/serena.d.ts +1 -1
- package/dist/context/repository/serena.js +1 -1
- package/dist/context/types.d.ts +19 -1
- package/dist/context/types.js +1 -1
- package/dist/context/types.js.map +1 -1
- package/dist/core/config.js +5 -7
- package/dist/core/config.js.map +1 -1
- package/dist/core/doctor.js +6 -6
- package/dist/core/doctor.js.map +1 -1
- package/dist/core/run.js +33 -14
- package/dist/core/run.js.map +1 -1
- package/dist/core/types.d.ts +5 -0
- package/dist/core/verify.d.ts +2 -0
- package/dist/core/verify.js +1 -1
- package/dist/core/verify.js.map +1 -1
- package/dist/evals/fullStack.d.ts +17 -0
- package/dist/evals/fullStack.js +42 -0
- package/dist/evals/fullStack.js.map +1 -0
- package/dist/provenance/generate.d.ts +19 -0
- package/dist/provenance/generate.js +94 -8
- package/dist/provenance/generate.js.map +1 -1
- package/dist/providers/engram.d.ts +26 -1
- package/dist/providers/engram.js +110 -6
- package/dist/providers/engram.js.map +1 -1
- package/dist/providers/graphify.d.ts +9 -1
- package/dist/providers/graphify.js +34 -16
- package/dist/providers/graphify.js.map +1 -1
- package/dist/providers/graphifyModel.d.ts +23 -0
- package/dist/providers/graphifyModel.js +101 -0
- package/dist/providers/graphifyModel.js.map +1 -0
- package/dist/providers/memory.d.ts +1 -0
- package/dist/providers/memory.js +2 -0
- package/dist/providers/memory.js.map +1 -0
- package/dist/providers/types.d.ts +8 -2
- package/dist/telemetry/events.d.ts +1 -0
- package/dist/telemetry/events.js +19 -2
- package/dist/telemetry/events.js.map +1 -1
- package/dist/telemetry/otlp.d.ts +6 -1
- package/dist/telemetry/otlp.js +2 -2
- package/dist/telemetry/otlp.js.map +1 -1
- package/dist/validators/external.js +24 -3
- package/dist/validators/external.js.map +1 -1
- package/dist/validators/graphify.js +5 -73
- package/dist/validators/graphify.js.map +1 -1
- package/dist/validators/opa.d.ts +14 -1
- package/dist/validators/opa.js +6 -2
- package/dist/validators/opa.js.map +1 -1
- package/dist/validators/toolEvidence.d.ts +29 -0
- package/dist/validators/toolEvidence.js +104 -0
- package/dist/validators/toolEvidence.js.map +1 -0
- package/dist/workers/agentPrompt.d.ts +9 -0
- package/dist/workers/agentPrompt.js +119 -9
- package/dist/workers/agentPrompt.js.map +1 -1
- package/docs/ARCHITECTURE.md +6 -1
- package/docs/COMPONENT_MATURITY.md +43 -0
- package/docs/CONTEXT_EFFICIENCY.md +11 -2
- package/docs/MEMORY.md +9 -0
- package/docs/OBSERVABILITY.md +6 -1
- package/docs/OSS_STACK.md +8 -2
- package/docs/SECURITY.md +12 -0
- package/package.json +1 -1
- package/policies/core/trust-boundary.rego +14 -4
- package/templates/project.yaml +4 -0
- package/templates/toolchain.yaml +10 -3
|
@@ -0,0 +1,101 @@
|
|
|
1
|
+
import crypto from "node:crypto";
|
|
2
|
+
import fs from "node:fs/promises";
|
|
3
|
+
import path from "node:path";
|
|
4
|
+
export async function loadCanonicalGraph(root, graphPath = "graphify-out/graph.json") {
|
|
5
|
+
const source = path.resolve(root, graphPath);
|
|
6
|
+
try {
|
|
7
|
+
const content = await fs.readFile(source, "utf8");
|
|
8
|
+
return normalizeGraphDocument(JSON.parse(content), graphPath, crypto.createHash("sha256").update(content).digest("hex"));
|
|
9
|
+
}
|
|
10
|
+
catch {
|
|
11
|
+
return undefined;
|
|
12
|
+
}
|
|
13
|
+
}
|
|
14
|
+
/** One parser for Graphify variants; callers must not normalize provider output independently. */
|
|
15
|
+
export function normalizeGraphDocument(raw, source = "graphify", sourceHash = crypto.createHash("sha256").update(JSON.stringify(raw)).digest("hex")) {
|
|
16
|
+
const labels = new Map();
|
|
17
|
+
const nodeFiles = {};
|
|
18
|
+
const communities = {};
|
|
19
|
+
const edges = new Set();
|
|
20
|
+
const edgePairs = new Map();
|
|
21
|
+
const nodes = new Set();
|
|
22
|
+
const visitNodes = (value) => {
|
|
23
|
+
if (!value || typeof value !== "object")
|
|
24
|
+
return;
|
|
25
|
+
if (Array.isArray(value)) {
|
|
26
|
+
value.forEach(visitNodes);
|
|
27
|
+
return;
|
|
28
|
+
}
|
|
29
|
+
const object = value;
|
|
30
|
+
const id = scalar(object.id ?? object.key ?? object.node_id);
|
|
31
|
+
const label = scalar(object.label ?? object.name ?? object.qualified_name ?? object.title ?? object.file ?? object.path);
|
|
32
|
+
if (id && label)
|
|
33
|
+
labels.set(id, label);
|
|
34
|
+
if (label)
|
|
35
|
+
nodes.add(label);
|
|
36
|
+
const community = scalar(object.community ?? object.community_id ?? object.cluster);
|
|
37
|
+
if (label && community)
|
|
38
|
+
communities[label] = community;
|
|
39
|
+
const file = scalar(object.file ?? object.path ?? object.filepath ?? object.file_path ?? object.source_file ?? object.sourcePath);
|
|
40
|
+
if (label && file && looksLikePath(file))
|
|
41
|
+
nodeFiles[label] = normalizePath(file);
|
|
42
|
+
Object.values(object).forEach(visitNodes);
|
|
43
|
+
};
|
|
44
|
+
visitNodes(raw);
|
|
45
|
+
const visitEdges = (value) => {
|
|
46
|
+
if (!value || typeof value !== "object")
|
|
47
|
+
return;
|
|
48
|
+
if (Array.isArray(value)) {
|
|
49
|
+
value.forEach(visitEdges);
|
|
50
|
+
return;
|
|
51
|
+
}
|
|
52
|
+
const object = value;
|
|
53
|
+
const sourceId = scalar(object.source ?? object.from ?? object.source_id);
|
|
54
|
+
const targetId = scalar(object.target ?? object.to ?? object.target_id);
|
|
55
|
+
if (sourceId && targetId) {
|
|
56
|
+
const from = labels.get(sourceId) ?? sourceId;
|
|
57
|
+
const to = labels.get(targetId) ?? targetId;
|
|
58
|
+
const relation = scalar(object.relation ?? object.type ?? object.kind ?? object.label) ?? "relates";
|
|
59
|
+
nodes.add(from);
|
|
60
|
+
nodes.add(to);
|
|
61
|
+
const text = `${from} --${relation}--> ${to}`;
|
|
62
|
+
edges.add(text);
|
|
63
|
+
edgePairs.set(text, { from, to, relation });
|
|
64
|
+
}
|
|
65
|
+
Object.values(object).forEach(visitEdges);
|
|
66
|
+
};
|
|
67
|
+
visitEdges(raw);
|
|
68
|
+
const adjacency = new Map();
|
|
69
|
+
const add = (from, to) => { const set = adjacency.get(from) ?? new Set(); set.add(to); adjacency.set(from, set); };
|
|
70
|
+
for (const edge of edgePairs.values()) {
|
|
71
|
+
add(edge.from, edge.to);
|
|
72
|
+
add(edge.to, edge.from);
|
|
73
|
+
}
|
|
74
|
+
const denominator = Math.max(1, nodes.size - 1);
|
|
75
|
+
const centrality = {};
|
|
76
|
+
for (const node of nodes)
|
|
77
|
+
centrality[node] = (adjacency.get(node)?.size ?? 0) / denominator;
|
|
78
|
+
const record = raw && typeof raw === "object" ? raw : {};
|
|
79
|
+
return {
|
|
80
|
+
createdAt: new Date().toISOString(), source, sourceHash,
|
|
81
|
+
generatedAt: typeof record.generatedAt === "string" ? record.generatedAt : typeof record.createdAt === "string" ? record.createdAt : undefined,
|
|
82
|
+
edges: [...edges].sort(),
|
|
83
|
+
edgePairs: [...edgePairs.values()].sort((a, b) => `${a.from}:${a.relation}:${a.to}`.localeCompare(`${b.from}:${b.relation}:${b.to}`)),
|
|
84
|
+
nodes: [...nodes].sort(), nodeFiles, communities, centrality
|
|
85
|
+
};
|
|
86
|
+
}
|
|
87
|
+
export function canonicalGraphToRepositoryMap(graph) {
|
|
88
|
+
const nodes = graph.nodes.map((label) => ({
|
|
89
|
+
id: label,
|
|
90
|
+
file: graph.nodeFiles[label] ?? label,
|
|
91
|
+
symbol: graph.nodeFiles[label] ? label : undefined,
|
|
92
|
+
centrality: graph.centrality[label],
|
|
93
|
+
community: graph.communities[label]
|
|
94
|
+
}));
|
|
95
|
+
const edges = graph.edgePairs.map((edge) => ({ from: edge.from, to: edge.to, kind: edge.relation }));
|
|
96
|
+
return { provider: "graphify", generatedAt: graph.generatedAt, nodes, edges };
|
|
97
|
+
}
|
|
98
|
+
function scalar(value) { return typeof value === "string" || typeof value === "number" ? String(value) : undefined; }
|
|
99
|
+
function looksLikePath(value) { return /[\\/]/.test(value) || /\.[A-Za-z0-9]{1,8}$/.test(value); }
|
|
100
|
+
function normalizePath(value) { return value.replaceAll("\\", "/").replace(/^\.\//, ""); }
|
|
101
|
+
//# sourceMappingURL=graphifyModel.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"graphifyModel.js","sourceRoot":"","sources":["../../src/providers/graphifyModel.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAkB7B,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,SAAS,GAAG,yBAAyB;IAC1F,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtI,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,sBAAsB,CAAC,GAAY,EAAE,MAAM,GAAG,UAAU,EAAE,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;IAC1J,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,GAAG,EAA8B,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,UAAU,GAAG,CAAC,KAAc,EAAQ,EAAE;QAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO;QAChD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAChE,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;QACzH,IAAI,EAAE,IAAI,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,KAAK;YAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;QACpF,IAAI,KAAK,IAAI,SAAS;YAAE,WAAW,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC;QAClI,IAAI,KAAK,IAAI,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC;YAAE,SAAS,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACjF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,UAAU,CAAC,GAAG,CAAC,CAAC;IAChB,MAAM,UAAU,GAAG,CAAC,KAAc,EAAQ,EAAE;QAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO;QAChD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAChE,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;QACxE,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC;YAC9C,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC;YAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;YACpG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/B,MAAM,IAAI,GAAG,GAAG,IAAI,MAAM,QAAQ,OAAO,EAAE,EAAE,CAAC;YAC9C,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,UAAU,CAAC,GAAG,CAAC,CAAC;IAChB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAU,EAAQ,EAAE,GAAG,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjJ,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;QAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAC5F,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IAChD,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,GAAG,WAAW,CAAC;IAC5F,MAAM,MAAM,GAAG,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAA8B,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,OAAO;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,UAAU;QACvD,WAAW,EAAE,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAC9I,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE;QACxB,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrI,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU;KAC7D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAAqB;IACjE,MAAM,KAAK,GAAqB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1D,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK;QACrC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QAClD,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QACnC,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC;KACpC,CAAC,CAAC,CAAC;IACJ,MAAM,KAAK,GAAqB,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACvH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAChF,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,IAAwB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAClJ,SAAS,aAAa,CAAC,KAAa,IAAa,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnH,SAAS,aAAa,CAAC,KAAa,IAAY,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export { createMemoryProvider, EngramMemoryProvider, filterStaleRecords, memoryFingerprint } from "./engram.js";
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../src/providers/memory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}
|
|
@@ -5,6 +5,8 @@ export interface MemoryRecord {
|
|
|
5
5
|
title: string;
|
|
6
6
|
content: string;
|
|
7
7
|
source?: string;
|
|
8
|
+
sourceSha256?: string;
|
|
9
|
+
createdAt?: string;
|
|
8
10
|
supersedes?: string;
|
|
9
11
|
tags?: string[];
|
|
10
12
|
}
|
|
@@ -14,8 +16,8 @@ export interface MemoryProvider {
|
|
|
14
16
|
ok: boolean;
|
|
15
17
|
message: string;
|
|
16
18
|
}>;
|
|
17
|
-
remember
|
|
18
|
-
recall
|
|
19
|
+
remember(record: MemoryRecord): Promise<string | undefined>;
|
|
20
|
+
recall(project: string, query: string): Promise<MemoryRecord[]>;
|
|
19
21
|
}
|
|
20
22
|
export interface CodeImpactReport {
|
|
21
23
|
provider: string;
|
|
@@ -29,7 +31,11 @@ export interface CodeIntelligenceProvider {
|
|
|
29
31
|
ok: boolean;
|
|
30
32
|
message: string;
|
|
31
33
|
}>;
|
|
34
|
+
build?(root: string): Promise<void>;
|
|
35
|
+
refresh?(root: string): Promise<void>;
|
|
32
36
|
update?(root: string): Promise<void>;
|
|
37
|
+
load?(root: string): Promise<unknown | undefined>;
|
|
38
|
+
isFresh?(root: string): Promise<boolean>;
|
|
33
39
|
impact?(root: string, diffRef?: string): Promise<CodeImpactReport>;
|
|
34
40
|
}
|
|
35
41
|
export interface SemanticRepositoryProvider {
|
|
@@ -1,2 +1,3 @@
|
|
|
1
1
|
import type { HarnessProjectConfig } from "../core/types.js";
|
|
2
2
|
export declare function recordEvent(root: string, config: HarnessProjectConfig, name: string, attributes: Record<string, unknown>): Promise<void>;
|
|
3
|
+
export declare function resetOperationTrace(operationId?: string): void;
|
package/dist/telemetry/events.js
CHANGED
|
@@ -1,8 +1,10 @@
|
|
|
1
|
+
import crypto from "node:crypto";
|
|
1
2
|
import fs from "node:fs/promises";
|
|
2
3
|
import path from "node:path";
|
|
3
4
|
import { trace } from "@opentelemetry/api";
|
|
4
5
|
import { updateCurrentOperationPhase } from "../operations/state.js";
|
|
5
6
|
import { exportEventSpan } from "./otlp.js";
|
|
7
|
+
const operationTraces = new Map();
|
|
6
8
|
export async function recordEvent(root, config, name, attributes) {
|
|
7
9
|
const phase = operationPhaseForEvent(name);
|
|
8
10
|
if (phase)
|
|
@@ -10,6 +12,8 @@ export async function recordEvent(root, config, name, attributes) {
|
|
|
10
12
|
if (config.telemetry?.enabled === false)
|
|
11
13
|
return;
|
|
12
14
|
const at = new Date();
|
|
15
|
+
const operationId = typeof attributes.operationId === "string" ? attributes.operationId : typeof attributes.taskId === "string" ? attributes.taskId : undefined;
|
|
16
|
+
const operationTrace = operationId ? traceFor(operationId, name) : undefined;
|
|
13
17
|
const tracer = trace.getTracer("agentic-engineering-harness");
|
|
14
18
|
const span = tracer.startSpan(name);
|
|
15
19
|
for (const [key, value] of Object.entries(attributes)) {
|
|
@@ -20,9 +24,9 @@ export async function recordEvent(root, config, name, attributes) {
|
|
|
20
24
|
const relative = config.telemetry?.localEventsFile ?? ".harness/telemetry/events.ndjson";
|
|
21
25
|
const file = path.resolve(root, relative);
|
|
22
26
|
await fs.mkdir(path.dirname(file), { recursive: true });
|
|
23
|
-
await fs.appendFile(file, `${JSON.stringify({ at: at.toISOString(), name, attributes })}\n`);
|
|
27
|
+
await fs.appendFile(file, `${JSON.stringify({ at: at.toISOString(), name, traceId: operationTrace?.traceId, spanId: operationTrace?.spanId, parentSpanId: operationTrace?.parentSpanId, attributes })}\n`);
|
|
24
28
|
try {
|
|
25
|
-
await exportEventSpan(config, name, attributes, at);
|
|
29
|
+
await exportEventSpan(config, name, attributes, at, operationTrace);
|
|
26
30
|
}
|
|
27
31
|
catch (error) {
|
|
28
32
|
if (config.telemetry?.required)
|
|
@@ -30,6 +34,19 @@ export async function recordEvent(root, config, name, attributes) {
|
|
|
30
34
|
await fs.appendFile(file, `${JSON.stringify({ at: new Date().toISOString(), name: "harness.telemetry.export.error", attributes: { sourceEvent: name, error: String(error) } })}\n`);
|
|
31
35
|
}
|
|
32
36
|
}
|
|
37
|
+
export function resetOperationTrace(operationId) { if (operationId)
|
|
38
|
+
operationTraces.delete(operationId);
|
|
39
|
+
else
|
|
40
|
+
operationTraces.clear(); }
|
|
41
|
+
function traceFor(operationId, name) {
|
|
42
|
+
const existing = operationTraces.get(operationId);
|
|
43
|
+
const root = !existing || /(?:operation|run|audit)\.start$/.test(name);
|
|
44
|
+
const traceId = root ? crypto.randomBytes(16).toString("hex") : existing.traceId;
|
|
45
|
+
const parentSpanId = root ? undefined : existing.lastSpanId;
|
|
46
|
+
const spanId = crypto.randomBytes(8).toString("hex");
|
|
47
|
+
operationTraces.set(operationId, { traceId, lastSpanId: spanId });
|
|
48
|
+
return { traceId, parentSpanId, spanId };
|
|
49
|
+
}
|
|
33
50
|
function operationPhaseForEvent(name) {
|
|
34
51
|
if (name === "harness.run.start")
|
|
35
52
|
return "executing";
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/telemetry/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,eAAe,
|
|
1
|
+
{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/telemetry/events.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAqB,MAAM,WAAW,CAAC;AAE/D,MAAM,eAAe,GAAG,IAAI,GAAG,EAAmD,CAAC;AAEnF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,MAA4B,EAAE,IAAY,EAAE,UAAmC;IAC7H,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,KAAK;QAAE,MAAM,2BAA2B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1D,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,KAAK,KAAK;QAAE,OAAO;IAChD,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IACtB,MAAM,WAAW,GAAG,OAAO,UAAU,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAChK,MAAM,cAAc,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACpC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC;YAAE,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAkC,CAAC,CAAC;IACzH,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,CAAC;IAEX,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,EAAE,eAAe,IAAI,kCAAkC,CAAC;IACzF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;IAE3M,IAAI,CAAC;QAAC,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,cAAc,CAAC,CAAC;IAAC,CAAC;IAC5E,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,MAAM,CAAC,SAAS,EAAE,QAAQ;YAAE,MAAM,KAAK,CAAC;QAC5C,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,gCAAgC,EAAE,UAAU,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACtL,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,WAAoB,IAAU,IAAI,WAAW;IAAE,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;;IAAM,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAEvJ,SAAS,QAAQ,CAAC,WAAmB,EAAE,IAAY;IACjD,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;IACjF,MAAM,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrD,eAAe,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IAClE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,IAAI,IAAI,KAAK,mBAAmB;QAAE,OAAO,WAAW,CAAC;IACrD,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,UAAU,CAAC;IACzE,IAAI,IAAI,KAAK,sBAAsB,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,aAAa,CAAC;IAC1F,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7C,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IACjD,IAAI,IAAI,KAAK,qBAAqB;QAAE,OAAO,iBAAiB,CAAC;IAC7D,OAAO,SAAS,CAAC;AACnB,CAAC"}
|
package/dist/telemetry/otlp.d.ts
CHANGED
|
@@ -1,3 +1,8 @@
|
|
|
1
1
|
import type { HarnessProjectConfig } from "../core/types.js";
|
|
2
|
-
export
|
|
2
|
+
export interface TraceContext {
|
|
3
|
+
traceId: string;
|
|
4
|
+
parentSpanId?: string;
|
|
5
|
+
spanId: string;
|
|
6
|
+
}
|
|
7
|
+
export declare function exportEventSpan(config: HarnessProjectConfig, name: string, attributes: Record<string, unknown>, at?: Date, context?: TraceContext): Promise<void>;
|
|
3
8
|
export declare function resolveEndpoint(config: HarnessProjectConfig): string | undefined;
|
package/dist/telemetry/otlp.js
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
import crypto from "node:crypto";
|
|
2
|
-
export async function exportEventSpan(config, name, attributes, at = new Date()) {
|
|
2
|
+
export async function exportEventSpan(config, name, attributes, at = new Date(), context) {
|
|
3
3
|
if (config.telemetry?.exporter !== "otlp-http-json")
|
|
4
4
|
return;
|
|
5
5
|
const endpoint = resolveEndpoint(config);
|
|
@@ -12,7 +12,7 @@ export async function exportEventSpan(config, name, attributes, at = new Date())
|
|
|
12
12
|
scopeSpans: [{
|
|
13
13
|
scope: { name: "agentic-engineering-harness", version: "0.3.0" },
|
|
14
14
|
spans: [{
|
|
15
|
-
traceId: crypto.randomBytes(16).toString("hex"), spanId: crypto.randomBytes(8).toString("hex"), name, kind: 1,
|
|
15
|
+
traceId: context?.traceId ?? crypto.randomBytes(16).toString("hex"), spanId: context?.spanId ?? crypto.randomBytes(8).toString("hex"), ...(context?.parentSpanId ? { parentSpanId: context.parentSpanId } : {}), name, kind: 1,
|
|
16
16
|
startTimeUnixNano: nanos, endTimeUnixNano: nanos,
|
|
17
17
|
attributes: Object.entries(attributes).flatMap(([key, value]) => value === undefined || value === null ? [] : [attribute(key, value)]),
|
|
18
18
|
status: { code: 1 }
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"otlp.js","sourceRoot":"","sources":["../../src/telemetry/otlp.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;
|
|
1
|
+
{"version":3,"file":"otlp.js","sourceRoot":"","sources":["../../src/telemetry/otlp.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAKjC,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAA4B,EAAE,IAAY,EAAE,UAAmC,EAAE,EAAE,GAAG,IAAI,IAAI,EAAE,EAAE,OAAsB;IAC5J,IAAI,MAAM,CAAC,SAAS,EAAE,QAAQ,KAAK,gBAAgB;QAAE,OAAO;IAC5D,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,QAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC7D,MAAM,OAAO,GAAG;QACd,aAAa,EAAE,CAAC;gBACd,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE;gBAC5I,UAAU,EAAE,CAAC;wBACX,KAAK,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,OAAO,EAAE,OAAO,EAAE;wBAChE,KAAK,EAAE,CAAC;gCACN,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gCAC9N,iBAAiB,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK;gCAChD,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;gCACtI,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;6BACpB,CAAC;qBACH,CAAC;aACH,CAAC;KACH,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;QACrC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,kBAAkB,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE;QAC9G,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,KAAK,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAChH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAA4B;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC;IAC9D,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,EAAE,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IACzF,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC;AACtD,CAAC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,KAAc;IAC5C,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IAC7J,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;AACpG,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACpG,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC/F,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC,CAAC;AACN,CAAC"}
|
|
@@ -1,5 +1,8 @@
|
|
|
1
|
-
import
|
|
2
|
-
import
|
|
1
|
+
import fs from "node:fs/promises";
|
|
2
|
+
import path from "node:path";
|
|
3
|
+
import { commandExists, runProcess } from "../utils/process.js";
|
|
4
|
+
import { missingTool } from "./toolCommand.js";
|
|
5
|
+
import { parseToolEvidence } from "./toolEvidence.js";
|
|
3
6
|
export async function runExternalToolValidator(context) {
|
|
4
7
|
const adapter = context.spec.adapter;
|
|
5
8
|
const configured = context.spec.command?.trim();
|
|
@@ -17,6 +20,24 @@ export async function runExternalToolValidator(context) {
|
|
|
17
20
|
return { id: context.spec.id, category: definition.category, status: context.spec.required ? "FAIL" : "WARN", message: `${adapter} requires an explicit command in .harness/project.yaml.` };
|
|
18
21
|
if (!configured && definition.tool && !(await commandExists(definition.tool, context.root)))
|
|
19
22
|
return missingTool(context.spec, definition.tool, definition.category);
|
|
20
|
-
|
|
23
|
+
const command = configured ?? definition.command;
|
|
24
|
+
const rendered = command.replaceAll("{taskId}", context.contract.task.id).replaceAll("{baseRef}", context.baseRef).replaceAll("{acceptance}", context.contract.source?.acceptance ?? "");
|
|
25
|
+
const cwd = path.resolve(context.root, context.spec.workingDirectory ?? ".");
|
|
26
|
+
const result = await runProcess(rendered, { cwd, timeoutMs: (context.spec.timeoutSeconds ?? 900) * 1000 });
|
|
27
|
+
const findings = parseToolEvidence(adapter, result.stdout);
|
|
28
|
+
const rawPath = path.resolve(context.root, context.config.evidence?.outputDir ?? ".harness/evidence", `${context.spec.id.replace(/[^A-Za-z0-9._-]/g, "-")}.raw`);
|
|
29
|
+
await fs.mkdir(path.dirname(rawPath), { recursive: true });
|
|
30
|
+
await fs.writeFile(rawPath, `${result.stdout}${result.stderr ? `\n--- stderr ---\n${result.stderr}` : ""}`, "utf8");
|
|
31
|
+
const failedByEvidence = findings.length > 0 && ["opengrep", "trivy", "playwright", "pact"].includes(adapter);
|
|
32
|
+
const failed = result.exitCode !== 0 || failedByEvidence;
|
|
33
|
+
return {
|
|
34
|
+
id: context.spec.id,
|
|
35
|
+
category: definition.category,
|
|
36
|
+
status: failed ? "FAIL" : "PASS",
|
|
37
|
+
message: failed ? `${adapter} validator failed${findings.length ? ` with ${findings.length} normalized finding(s)` : ` with exit code ${result.exitCode}`}.` : `${adapter} validator passed.`,
|
|
38
|
+
durationMs: result.durationMs,
|
|
39
|
+
details: { command: rendered, rawArtifact: path.relative(context.root, rawPath).replaceAll("\\", "/"), findings, findingCount: findings.length, stdout: truncate(result.stdout), stderr: truncate(result.stderr) }
|
|
40
|
+
};
|
|
21
41
|
}
|
|
42
|
+
function truncate(value, max = 20_000) { return value.length <= max ? value : `${value.slice(0, max)}\n… truncated …`; }
|
|
22
43
|
//# sourceMappingURL=external.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"external.js","sourceRoot":"","sources":["../../src/validators/external.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"external.js","sourceRoot":"","sources":["../../src/validators/external.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAA0B;IACvE,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;IACrC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAyE;QACrF,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,gCAAgC,EAAE,QAAQ,EAAE,UAAU,EAAE;QAC/F,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,oFAAoF,EAAE,QAAQ,EAAE,UAAU,EAAE;QAC7I,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,yDAAyD,EAAE,QAAQ,EAAE,KAAK,EAAE;QAChH,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;QACxC,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE;QAChD,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE;QAChD,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;KAC1C,CAAC;IACF,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACzE,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,yDAAyD,EAAE,CAAC;IACrO,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpK,MAAM,OAAO,GAAG,UAAU,IAAI,UAAU,CAAC,OAAQ,CAAC;IAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;IACzL,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,IAAI,GAAG,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAC3G,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,IAAI,mBAAmB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACjK,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IACpH,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9G,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,gBAAgB,CAAC;IACzD,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;QACnB,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAChC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,oBAAoB,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,QAAQ,CAAC,MAAM,wBAAwB,CAAC,CAAC,CAAC,mBAAmB,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,oBAAoB;QAC7L,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;KACnN,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,GAAG,GAAG,MAAM,IAAY,OAAO,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC"}
|
|
@@ -1,13 +1,13 @@
|
|
|
1
|
-
import crypto from "node:crypto";
|
|
2
1
|
import fs from "node:fs/promises";
|
|
3
2
|
import path from "node:path";
|
|
4
3
|
import { minimatch } from "minimatch";
|
|
4
|
+
import { loadCanonicalGraph } from "../providers/graphifyModel.js";
|
|
5
5
|
export async function snapshotGraph(root, config, taskId, phase) {
|
|
6
|
-
const graphPath =
|
|
6
|
+
const graphPath = config.codeIntelligence?.graphPath ?? "graphify-out/graph.json";
|
|
7
7
|
try {
|
|
8
|
-
const
|
|
9
|
-
|
|
10
|
-
|
|
8
|
+
const snapshot = await loadCanonicalGraph(root, graphPath);
|
|
9
|
+
if (!snapshot)
|
|
10
|
+
return undefined;
|
|
11
11
|
const snapshotDir = path.resolve(root, config.codeIntelligence?.snapshotDir ?? ".harness/graph");
|
|
12
12
|
const file = path.join(snapshotDir, taskId, `${phase}.json`);
|
|
13
13
|
await fs.mkdir(path.dirname(file), { recursive: true });
|
|
@@ -59,72 +59,4 @@ export async function runGraphifyValidator(context) {
|
|
|
59
59
|
}
|
|
60
60
|
return { id: context.spec.id, category: "architecture", status: violations.length ? "FAIL" : "PASS", message: violations.length ? `Graphify detected ${violations.length} structural policy violation(s).` : `Graphify structural diff accepted (${addedEdges.length} new edge(s)).`, details: { addedEdges, addedNodes, violations } };
|
|
61
61
|
}
|
|
62
|
-
function normalizeGraph(raw, source, sourceHash) {
|
|
63
|
-
const labels = new Map();
|
|
64
|
-
const nodeFiles = {};
|
|
65
|
-
const communities = {};
|
|
66
|
-
const edges = new Set();
|
|
67
|
-
const edgePairs = new Map();
|
|
68
|
-
const nodes = new Set();
|
|
69
|
-
const visitNodes = (value) => {
|
|
70
|
-
if (!value || typeof value !== "object")
|
|
71
|
-
return;
|
|
72
|
-
if (Array.isArray(value)) {
|
|
73
|
-
value.forEach(visitNodes);
|
|
74
|
-
return;
|
|
75
|
-
}
|
|
76
|
-
const object = value;
|
|
77
|
-
const id = scalar(object.id ?? object.key ?? object.node_id);
|
|
78
|
-
const label = scalar(object.label ?? object.name ?? object.qualified_name ?? object.title);
|
|
79
|
-
if (id && label)
|
|
80
|
-
labels.set(id, label);
|
|
81
|
-
if (label)
|
|
82
|
-
nodes.add(label);
|
|
83
|
-
const community = scalar(object.community ?? object.community_id ?? object.cluster);
|
|
84
|
-
if (label && community)
|
|
85
|
-
communities[label] = community;
|
|
86
|
-
const file = scalar(object.file ?? object.path ?? object.filepath ?? object.file_path ?? object.source_file ?? object.sourcePath);
|
|
87
|
-
if (label && file && looksLikePath(file))
|
|
88
|
-
nodeFiles[label] = normalizePath(file);
|
|
89
|
-
Object.values(object).forEach(visitNodes);
|
|
90
|
-
};
|
|
91
|
-
visitNodes(raw);
|
|
92
|
-
const visitEdges = (value) => {
|
|
93
|
-
if (!value || typeof value !== "object")
|
|
94
|
-
return;
|
|
95
|
-
if (Array.isArray(value)) {
|
|
96
|
-
value.forEach(visitEdges);
|
|
97
|
-
return;
|
|
98
|
-
}
|
|
99
|
-
const object = value;
|
|
100
|
-
const sourceId = scalar(object.source ?? object.from ?? object.source_id);
|
|
101
|
-
const targetId = scalar(object.target ?? object.to ?? object.target_id);
|
|
102
|
-
if (sourceId && targetId) {
|
|
103
|
-
const from = labels.get(sourceId) ?? sourceId;
|
|
104
|
-
const to = labels.get(targetId) ?? targetId;
|
|
105
|
-
const relation = scalar(object.relation ?? object.type ?? object.kind ?? object.label) ?? "relates";
|
|
106
|
-
nodes.add(from);
|
|
107
|
-
nodes.add(to);
|
|
108
|
-
const text = `${from} --${relation}--> ${to}`;
|
|
109
|
-
edges.add(text);
|
|
110
|
-
edgePairs.set(text, { from, to, relation });
|
|
111
|
-
}
|
|
112
|
-
Object.values(object).forEach(visitEdges);
|
|
113
|
-
};
|
|
114
|
-
visitEdges(raw);
|
|
115
|
-
const adjacency = new Map();
|
|
116
|
-
const add = (from, to) => { const set = adjacency.get(from) ?? new Set(); set.add(to); adjacency.set(from, set); };
|
|
117
|
-
for (const edge of edgePairs.values()) {
|
|
118
|
-
add(edge.from, edge.to);
|
|
119
|
-
add(edge.to, edge.from);
|
|
120
|
-
}
|
|
121
|
-
const denominator = Math.max(1, nodes.size - 1);
|
|
122
|
-
const centrality = {};
|
|
123
|
-
for (const node of nodes)
|
|
124
|
-
centrality[node] = (adjacency.get(node)?.size ?? 0) / denominator;
|
|
125
|
-
return { createdAt: new Date().toISOString(), source, sourceHash, edges: [...edges].sort(), edgePairs: [...edgePairs.values()].sort((a, b) => `${a.from}:${a.relation}:${a.to}`.localeCompare(`${b.from}:${b.relation}:${b.to}`)), nodes: [...nodes].sort(), nodeFiles, communities, centrality };
|
|
126
|
-
}
|
|
127
|
-
function scalar(value) { return typeof value === "string" || typeof value === "number" ? String(value) : undefined; }
|
|
128
|
-
function looksLikePath(value) { return /[\\/]/.test(value) || /\.[A-Za-z0-9]{1,8}$/.test(value); }
|
|
129
|
-
function normalizePath(value) { return value.replaceAll("\\", "/").replace(/^\.\//, ""); }
|
|
130
62
|
//# sourceMappingURL=graphify.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"graphify.js","sourceRoot":"","sources":["../../src/validators/graphify.ts"],"names":[],"mappings":"AAAA,OAAO,
|
|
1
|
+
{"version":3,"file":"graphify.js","sourceRoot":"","sources":["../../src/validators/graphify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,OAAO,EAAE,kBAAkB,EAAuB,MAAM,+BAA+B,CAAC;AAGxF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,MAA4B,EAAE,MAAc,EAAE,KAAyB;IACvH,MAAM,SAAS,GAAG,MAAM,CAAC,gBAAgB,EAAE,SAAS,IAAI,yBAAyB,CAAC;IAClF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,gBAAgB,EAAE,WAAW,IAAI,gBAAgB,CAAC,CAAC;QACjG,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;QAC7D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAA0B;IACnE,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,WAAW,IAAI,gBAAgB,CAAC,CAAC;IACjH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IACnF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IACjF,IAAI,MAAqB,CAAC;IAC1B,IAAI,KAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAkB,CAAC;QAC5E,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAkB,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,8LAA8L,EAAE,CAAC;IACrT,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QAC9E,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,mGAAmG,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;IACzS,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,IAAI,EAAE;QAAE,UAAU,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACjK,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,IAAI,EAAE;QAAE,UAAU,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/L,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,IAAI,EAAE,CAAC;IAClE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,IAAI,EAAE;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,QAAQ,OAAO,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;gBAAC,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAC,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;QAChR,KAAK,MAAM,SAAS,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,UAAU,CAAC,IAAI,CAAC,aAAa,SAAS,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,UAAU,CAAC,MAAM,kCAAkC,CAAC,CAAC,CAAC,sCAAsC,UAAU,CAAC,MAAM,gBAAgB,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,CAAC;AAC1U,CAAC"}
|
package/dist/validators/opa.d.ts
CHANGED
|
@@ -1,3 +1,16 @@
|
|
|
1
1
|
import type { HarnessProjectConfig, TaskContract, ValidationCheck } from "../core/types.js";
|
|
2
2
|
import type { PolicyEvidence } from "./evidence.js";
|
|
3
|
-
export
|
|
3
|
+
export interface OpaExecutionIdentity {
|
|
4
|
+
operationId?: string;
|
|
5
|
+
operationKind?: string;
|
|
6
|
+
logicalAgent?: string;
|
|
7
|
+
role?: string;
|
|
8
|
+
profile?: string;
|
|
9
|
+
domains?: string[];
|
|
10
|
+
risk?: string;
|
|
11
|
+
runtime?: string;
|
|
12
|
+
modelAlias?: string;
|
|
13
|
+
permissions?: object;
|
|
14
|
+
}
|
|
15
|
+
export declare function buildOpaInput(contract: TaskContract, changedFiles: string[], frozenChangedFiles: string[], evidence: PolicyEvidence, executionIdentity?: OpaExecutionIdentity): Record<string, unknown>;
|
|
16
|
+
export declare function runOpaPolicies(root: string, config: HarnessProjectConfig, contract: TaskContract, changedFiles: string[], frozenChangedFiles: string[], evidence: PolicyEvidence, policyRoot?: string, executionIdentity?: OpaExecutionIdentity): Promise<ValidationCheck>;
|
package/dist/validators/opa.js
CHANGED
|
@@ -1,6 +1,10 @@
|
|
|
1
1
|
import path from "node:path";
|
|
2
2
|
import { commandExists, runProcess } from "../utils/process.js";
|
|
3
|
-
export
|
|
3
|
+
export function buildOpaInput(contract, changedFiles, frozenChangedFiles, evidence, executionIdentity = {}) {
|
|
4
|
+
const identity = { operationId: executionIdentity.operationId, operationKind: executionIdentity.operationKind, logicalAgent: executionIdentity.logicalAgent ?? contract.routing?.agent, role: executionIdentity.role, profile: executionIdentity.profile ?? contract.routing?.profile, domains: executionIdentity.domains ?? contract.routing?.domains ?? [], risk: executionIdentity.risk ?? contract.routing?.risk ?? "low", runtime: executionIdentity.runtime, modelAlias: executionIdentity.modelAlias, permissions: executionIdentity.permissions ?? {} };
|
|
5
|
+
return { operationId: identity.operationId, operationKind: identity.operationKind, identity, changedFiles, frozenChangedFiles, taskContract: contract, deterministicEvidence: evidence, ...evidence };
|
|
6
|
+
}
|
|
7
|
+
export async function runOpaPolicies(root, config, contract, changedFiles, frozenChangedFiles, evidence, policyRoot = root, executionIdentity = {}) {
|
|
4
8
|
if (!config.validation?.opa?.enabled)
|
|
5
9
|
return { id: "policy.opa", category: "policy", status: "SKIP", message: "OPA policy evaluation disabled." };
|
|
6
10
|
if (!(await commandExists("opa", root)))
|
|
@@ -9,7 +13,7 @@ export async function runOpaPolicies(root, config, contract, changedFiles, froze
|
|
|
9
13
|
if (!policyDirs.length)
|
|
10
14
|
return { id: "policy.opa", category: "policy", status: "WARN", message: "OPA is enabled but no policyDirs are configured." };
|
|
11
15
|
const args = policyDirs.map((dir) => `--data ${quote(path.resolve(policyRoot, dir))}`).join(" ");
|
|
12
|
-
const input =
|
|
16
|
+
const input = buildOpaInput(contract, changedFiles, frozenChangedFiles, evidence, executionIdentity);
|
|
13
17
|
const command = `printf %s ${quote(JSON.stringify(input))} | opa eval --format=json ${args} --stdin-input data`;
|
|
14
18
|
const result = await runProcess(command, { cwd: root, timeoutMs: 30_000 });
|
|
15
19
|
if (result.exitCode !== 0)
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"opa.js","sourceRoot":"","sources":["../../src/validators/opa.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;
|
|
1
|
+
{"version":3,"file":"opa.js","sourceRoot":"","sources":["../../src/validators/opa.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAgBhE,MAAM,UAAU,aAAa,CAAC,QAAsB,EAAE,YAAsB,EAAE,kBAA4B,EAAE,QAAwB,EAAE,oBAA0C,EAAE;IAChL,MAAM,QAAQ,GAAG,EAAE,WAAW,EAAE,iBAAiB,CAAC,WAAW,EAAE,aAAa,EAAE,iBAAiB,CAAC,aAAa,EAAE,YAAY,EAAE,iBAAiB,CAAC,YAAY,IAAI,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,iBAAiB,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,IAAI,IAAI,KAAK,EAAE,OAAO,EAAE,iBAAiB,CAAC,OAAO,EAAE,UAAU,EAAE,iBAAiB,CAAC,UAAU,EAAE,WAAW,EAAE,iBAAiB,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;IAChiB,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,kBAAkB,EAAE,YAAY,EAAE,QAAQ,EAAE,qBAAqB,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,CAAC;AACxM,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,MAA4B,EAAE,QAAsB,EAAE,YAAsB,EAAE,kBAA4B,EAAE,QAAwB,EAAE,UAAU,GAAG,IAAI,EAAE,oBAA0C,EAAE;IACtP,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;IAClJ,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,yDAAyD,EAAE,CAAC;IAC7K,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;IAC1D,IAAI,CAAC,UAAU,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;IACrJ,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjG,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,EAAE,YAAY,EAAE,kBAAkB,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACrG,MAAM,OAAO,GAAG,aAAa,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,6BAA6B,IAAI,qBAAqB,CAAC;IAChH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,0CAA0C,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IAC3M,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAqE,CAAC;QAC7G,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,kCAAkC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC;IACvO,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,oCAAoC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IAAC,CAAC;AAC/L,CAAC;AACD,SAAS,aAAa,CAAC,KAAc,IAAc,MAAM,GAAG,GAAa,EAAE,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;IAAE,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;IAAC,KAAK,MAAM,IAAI,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,OAAO;AAAC,CAAC,CAAC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;IAAC,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;aAAM,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,CAAC;aAAM,IAAI,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9lB,SAAS,KAAK,CAAC,KAAa,IAAY,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1,29 @@
|
|
|
1
|
+
export interface NormalizedFinding {
|
|
2
|
+
fingerprint: string;
|
|
3
|
+
tool: string;
|
|
4
|
+
kind: string;
|
|
5
|
+
rule?: string;
|
|
6
|
+
severity?: string;
|
|
7
|
+
file?: string;
|
|
8
|
+
line?: number;
|
|
9
|
+
endLine?: number;
|
|
10
|
+
column?: number;
|
|
11
|
+
endColumn?: number;
|
|
12
|
+
message?: string;
|
|
13
|
+
category?: string;
|
|
14
|
+
cwe?: string[];
|
|
15
|
+
package?: string;
|
|
16
|
+
installedVersion?: string;
|
|
17
|
+
fixedVersion?: string;
|
|
18
|
+
target?: string;
|
|
19
|
+
artifact?: string;
|
|
20
|
+
durationMs?: number;
|
|
21
|
+
status?: string;
|
|
22
|
+
details?: Record<string, unknown>;
|
|
23
|
+
}
|
|
24
|
+
export declare function normalizeOpengrepOutput(value: unknown): NormalizedFinding[];
|
|
25
|
+
export declare function normalizeTrivyOutput(value: unknown): NormalizedFinding[];
|
|
26
|
+
export declare function normalizePlaywrightOutput(value: unknown): NormalizedFinding[];
|
|
27
|
+
export declare function normalizePactOutput(value: unknown): NormalizedFinding[];
|
|
28
|
+
export declare function parseToolEvidence(adapter: string, stdout: string): NormalizedFinding[];
|
|
29
|
+
export declare function findingFingerprint(finding: Omit<NormalizedFinding, "fingerprint"> | NormalizedFinding): string;
|