agentic-engineering-harness 0.6.29 → 0.8.0

package/schemas/project.schema.json

@@ -47,7 +47,7 @@
     } },
     "delivery": { "type": "object", "properties": { "stateDir": { "type": "string" }, "github": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "tokenEnv": { "type": "string", "minLength": 1 }, "repository": { "type": "string", "pattern": "^[^/]+/[^/]+$" }, "apiBaseUrl": { "type": "string", "format": "uri" }, "assignTokenOwner": { "type": "boolean" }, "labels": { "type": "array", "items": { "type": "string" } }, "branchPattern": { "type": "string", "minLength": 1 }, "finalizeOnAcceptance": { "type": "boolean" }, "pullRequestDraft": { "type": "boolean" } } }, "paseo": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "createWorkspace": { "type": "boolean" }, "autoUseWorkspace": { "type": "boolean" }, "worktreeSlugPattern": { "type": "string", "minLength": 1 } } } } },
     "memory": { "type": "object" },
-    "codeIntelligence": { "type": "object", "properties": { "provider": { "type": "string" }, "required": { "type": "boolean" }, "graphPath": { "type": "string" }, "snapshotDir": { "type": "string" }, "refreshCommand": { "type": "string" }, "scheduling": { "type": "object", "properties": { "useEdges": { "type": "boolean" }, "maxGraphHops": { "type": "integer", "minimum": 1 }, "maxSharedNodes": { "type": "integer", "minimum": 0 }, "centralityConflictThreshold": { "type": "number", "minimum": 0 } } } } },
+    "codeIntelligence": { "type": "object", "properties": { "provider": { "type": "string" }, "required": { "type": "boolean" }, "graphPath": { "type": "string" }, "snapshotDir": { "type": "string" }, "codeOnly": { "type": "boolean" }, "refreshCommand": { "type": "string" }, "scheduling": { "type": "object", "properties": { "useEdges": { "type": "boolean" }, "maxGraphHops": { "type": "integer", "minimum": 1 }, "maxSharedNodes": { "type": "integer", "minimum": 0 }, "centralityConflictThreshold": { "type": "number", "minimum": 0 } } } } },
     "context": { "type": "object", "properties": {
       "mode": { "enum": ["observe", "enforce"] },
       "budgets": { "type": "object", "properties": {
@@ -65,11 +65,11 @@
     "organization": { "type": "object", "properties": { "policyBundles": { "type": "object", "properties": { "cacheDir": { "type": "string" }, "required": { "type": "boolean" }, "sources": { "type": "array", "items": { "$ref": "#/$defs/policyBundleSource" } } } } } },
     "distributed": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "provider": { "type": "string" }, "queueDir": { "type": "string" }, "endpoint": { "type": "string", "format": "uri" }, "tokenEnv": { "type": "string" }, "pollIntervalMs": { "type": "integer", "minimum": 1 }, "leaseSeconds": { "type": "integer", "minimum": 1 }, "workerId": { "type": "string" } } },
     "sdd": { "type": "object", "properties": { "specsDir": { "type": "string" }, "contractsDir": { "type": "string" }, "reportsDir": { "type": "string" }, "repairsDir": { "type": "string" }, "runsDir": { "type": "string" }, "authoring": { "type": "object", "properties": { "provider": { "type": "string", "minLength": 1 }, "schema": { "type": "string", "minLength": 1 }, "managerAgent": { "type": "string", "minLength": 1 } } } } },
-    "validation": { "type": "object" },
+    "validation": { "type": "object", "properties": { "baseRef": { "type": "string" }, "commands": { "type": "array" }, "validators": { "type": "array" }, "providers": { "type": "array", "items": { "type": "object", "required": ["id", "capability", "provider"], "properties": { "id": { "type": "string", "minLength": 1 }, "capability": { "type": "string", "minLength": 1 }, "provider": { "type": "string", "minLength": 1 }, "command": { "type": "string" }, "required": { "type": "boolean" }, "timeoutSeconds": { "type": "integer", "minimum": 1 }, "workingDirectory": { "type": "string" }, "options": { "type": "object" } } } }, "frozenPaths": { "type": "array" }, "requireSeal": { "type": "boolean" } } },
     "security": { "type": "object", "properties": { "sandbox": { "type": "object", "properties": { "provider": { "type": "string" }, "required": { "type": "boolean" }, "image": { "type": "string" }, "imageDigest": { "type": "string" }, "network": { "type": "boolean" }, "extraArgs": { "type": "array", "items": { "type": "string" } }, "readOnlyRoot": { "type": "boolean" }, "ephemeralHome": { "type": "boolean" }, "noNewPrivileges": { "type": "boolean" }, "capDropAll": { "type": "boolean" }, "pidsLimit": { "type": "integer", "minimum": 1 }, "memory": { "type": "string" }, "cpus": { "type": "number", "exclusiveMinimum": 0 }, "tmpfs": { "type": "array", "items": { "type": "string" } }, "forceForRisks": { "type": "array", "items": { "enum": ["low", "medium", "high"] } }, "environmentAllowlist": { "type": "array", "items": { "type": "string" } }, "credentialEnvAllowlist": { "type": "array", "items": { "type": "string" } } } }, "tools": { "type": "array", "items": { "type": "string" } } } },
     "telemetry": { "type": "object" },
     "evals": { "type": "object", "properties": { "corpusDir": { "type": "string" }, "resultsDir": { "type": "string" }, "workspacesDir": { "type": "string" }, "defaultRuns": { "type": "integer", "minimum": 1 }, "confidenceLevel": { "type": "number", "exclusiveMinimum": 0, "exclusiveMaximum": 1 } } },
-    "provenance": { "type": "object" }
+    "provenance": { "type": "object", "properties": { "outputDir": { "type": "string" }, "buildType": { "type": "string" }, "cosignKey": { "type": "string" }, "required": { "type": "boolean" }, "sbom": { "type": "object", "properties": { "required": { "type": "boolean" }, "command": { "type": "string" } } }, "signing": { "type": "object", "properties": { "required": { "type": "boolean" }, "key": { "type": "string" } } }, "verification": { "type": "object", "properties": { "required": { "type": "boolean" }, "publicKey": { "type": "string" } } } } }
   },
   "$defs": {
     "severityNumbers": { "type": "object", "properties": { "critical": { "type": "integer", "minimum": 0 }, "high": { "type": "integer", "minimum": 0 }, "medium": { "type": "integer", "minimum": 0 }, "low": { "type": "integer", "minimum": 0 }, "note": { "type": "integer", "minimum": 0 } } },

package/schemas/validation-report.schema.json

@@ -9,7 +9,8 @@
     "taskId": { "type": "string" },
     "status": { "enum": ["PASS", "FAIL"] },
     "checks": { "type": "array" },
-    "changedFiles": { "type": "array", "items": { "type": "string" } }
+    "changedFiles": { "type": "array", "items": { "type": "string" } },
+    "findings": { "type": "array", "items": { "type": "object", "required": ["fingerprint", "tool", "kind"], "properties": { "fingerprint": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "tool": { "type": "string" }, "kind": { "type": "string" }, "rule": { "type": "string" }, "severity": { "type": "string" }, "file": { "type": "string" }, "line": { "type": "integer", "minimum": 1 }, "message": { "type": "string" }, "artifact": { "type": "string" } }, "additionalProperties": true } }
   },
   "additionalProperties": true
 }

package/schemas/validation-result.schema.json

@@ -0,0 +1,84 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/JamesMorales04/agentic-engineering-harness/schemas/validation-result.schema.json",
+  "title": "AEH normalized validation result",
+  "oneOf": [
+    {
+      "title": "TestExecutionResult",
+      "type": "object",
+      "required": ["version", "provider", "capability", "command", "status", "summary", "failures", "requirements", "rawArtifact"],
+      "properties": {
+        "version": { "const": 1 },
+        "provider": { "type": "string" },
+        "capability": { "enum": ["unit-test", "integration-test", "bdd", "contract-test"] },
+        "command": { "type": "string" },
+        "runtime": { "type": "string" },
+        "status": { "enum": ["PASS", "FAIL", "SKIP"] },
+        "summary": { "$ref": "#/$defs/testSummary" },
+        "failures": { "type": "array", "items": { "$ref": "#/$defs/failure" } },
+        "requirements": { "type": "array", "items": { "type": "string" } },
+        "rawArtifact": { "type": "string" }
+      }
+    },
+    {
+      "title": "BddExecutionResult",
+      "type": "object",
+      "required": ["version", "provider", "capability", "command", "status", "scenarios", "summary", "rawArtifact"],
+      "properties": {
+        "version": { "const": 1 },
+        "provider": { "type": "string" },
+        "capability": { "const": "bdd" },
+        "command": { "type": "string" },
+        "runtime": { "type": "string" },
+        "status": { "enum": ["PASS", "FAIL", "SKIP"] },
+        "scenarios": { "type": "array" },
+        "summary": { "$ref": "#/$defs/testSummary" },
+        "rawArtifact": { "type": "string" }
+      }
+    },
+    {
+      "title": "IntegrationEnvironmentResult",
+      "type": "object",
+      "required": ["version", "provider", "capability", "status", "requirements", "lifecycle", "rawArtifact"],
+      "properties": {
+        "version": { "const": 1 },
+        "provider": { "type": "string" },
+        "capability": { "const": "integration-test" },
+        "status": { "enum": ["PASS", "FAIL", "SKIP"] },
+        "requirements": { "type": "array" },
+        "lifecycle": { "type": "object", "required": ["provisioned", "ready", "tested", "cleaned", "durationMs"] },
+        "rawArtifact": { "type": "string" }
+      }
+    },
+    {
+      "title": "ContractVerificationResult",
+      "type": "object",
+      "required": ["version", "provider", "capability", "status", "verifierCommand", "summary", "failures", "requirements", "rawArtifact"],
+      "properties": {
+        "version": { "const": 1 },
+        "provider": { "type": "string" },
+        "capability": { "const": "contract-test" },
+        "status": { "enum": ["PASS", "FAIL", "SKIP"] },
+        "verifierCommand": { "type": "string" },
+        "pactFile": { "type": "string" },
+        "providerUrl": { "type": "string" },
+        "summary": { "type": "object", "required": ["total", "passed", "failed", "durationMs"] },
+        "failures": { "type": "array", "items": { "$ref": "#/$defs/failure" } },
+        "requirements": { "type": "array", "items": { "type": "string" } },
+        "rawArtifact": { "type": "string" }
+      }
+    }
+  ],
+  "$defs": {
+    "testSummary": {
+      "type": "object",
+      "required": ["total", "passed", "failed", "skipped", "durationMs"],
+      "properties": { "total": { "type": "integer", "minimum": 0 }, "passed": { "type": "integer", "minimum": 0 }, "failed": { "type": "integer", "minimum": 0 }, "skipped": { "type": "integer", "minimum": 0 }, "durationMs": { "type": "number", "minimum": 0 } }
+    },
+    "failure": {
+      "type": "object",
+      "required": ["message"],
+      "properties": { "id": { "type": "string" }, "message": { "type": "string" }, "source": { "type": "object" } }
+    }
+  }
+}

package/scripts/headroom-bridge.py

@@ -0,0 +1,88 @@
+#!/usr/bin/env python3
+"""Small, line-oriented JSON bridge for the pinned Headroom SDK.
+
+The bridge deliberately uses Headroom's public ``headroom.compression`` API,
+never its agent wrappers or memory store.  stdout is reserved for one JSON
+response; diagnostics belong on stderr so the Node adapter can reject framing
+corruption deterministically.
+"""
+
+from __future__ import annotations
+
+import hashlib
+import json
+import sys
+from typing import Any
+
+
+def fail(message: str, code: str = "HEADROOM_BRIDGE_ERROR") -> None:
+    print(json.dumps({"version": 1, "error": {"code": code, "message": message}}), flush=True)
+
+
+def main() -> int:
+    try:
+        raw = sys.stdin.read()
+        request = json.loads(raw)
+        if not isinstance(request, dict) or request.get("version") != 1:
+            fail("request version must be 1", "INVALID_REQUEST")
+            return 2
+        operation = request.get("operation", "compress")
+        from headroom import __version__
+
+        if operation == "doctor":
+            print(json.dumps({"version": 1, "providerVersion": __version__}), flush=True)
+            return 0
+        if operation != "compress":
+            fail(f"unsupported operation: {operation}", "INVALID_REQUEST")
+            return 2
+
+        content = request.get("content")
+        source_sha256 = request.get("sourceSha256")
+        max_tokens = request.get("maxTokens")
+        if not isinstance(content, str) or not content:
+            fail("content must be a non-empty string", "INVALID_REQUEST")
+            return 2
+        if not isinstance(source_sha256, str) or hashlib.sha256(content.encode()).hexdigest() != source_sha256:
+            fail("sourceSha256 does not match content", "SOURCE_HASH_MISMATCH")
+            return 2
+        if not isinstance(max_tokens, int) or max_tokens < 1:
+            fail("maxTokens must be a positive integer", "INVALID_REQUEST")
+            return 2
+
+        # UniversalCompressor is the documented local SDK entry point.  Keep
+        # Kompress enabled: AEH provisions headroom-ai[all] and this contract
+        # must exercise the intended compression stack, not the fallback-only
+        # path. CCR remains disabled because AEH persists and authorizes the
+        # original fragment itself.
+        from headroom.compression import UniversalCompressor, UniversalCompressorConfig
+
+        original_tokens = max(1, len(content) // 4)
+        target_ratio = min(1.0, max_tokens / original_tokens)
+        compressor = UniversalCompressor(
+            UniversalCompressorConfig(
+                use_magika=True,
+                use_kompress=True,
+                ccr_enabled=False,
+                compression_ratio_target=target_ratio,
+            )
+        )
+        result = compressor.compress(content)
+        response: dict[str, Any] = {
+            "version": 1,
+            "content": result.compressed,
+            "originalTokens": result.tokens_before,
+            "compressedTokens": result.tokens_after,
+            "reversible": False,
+            "providerVersion": __version__,
+            "sourceSha256": source_sha256,
+        }
+        print(json.dumps(response, separators=(",", ":")), flush=True)
+        return 0
+    except Exception as error:  # pragma: no cover - exercised by contract tests
+        print(f"headroom bridge failure: {error}", file=sys.stderr, flush=True)
+        fail(str(error), "SDK_RUNTIME_FAILURE")
+        return 1
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

package/templates/project.yaml

@@ -272,6 +272,7 @@ validation:
     - tests/acceptance/frozen/**
   commands: []
   validators: []
+  providers: []
   opa:
     enabled: false
     policyDirs:

package/templates/provider-versions.json

@@ -0,0 +1,10 @@
+{
+  "headroom": "0.28.0",
+  "graphify": "0.9.43",
+  "engram": "0.4.1",
+  "serena": "1.6.1",
+  "trivy": "0.70.0",
+  "opengrep": "1.22.0",
+  "playwright": "1.62.1",
+  "pnpm": "10.15.0"
+}

package/templates/toolchain.yaml

@@ -106,7 +106,7 @@ tools:
     kind: mise
     command: graphify
     source: "pipx:graphifyy"
-    version: latest
+    version: "0.9.43"
     dependsOn: [uv]
     activateWhen: [code-intelligence:graphify]
 
@@ -132,7 +132,8 @@ tools:
     kind: mise
     command: engram
     source: "npm:@engram-ai-memory/cli"
-    version: latest
+    version: "0.4.1"
+    dependsOn: [pnpm]
     activateWhen: [memory:engram]
 
   opa:
@@ -148,14 +149,14 @@ tools:
     kind: mise
     command: opengrep
     source: "aqua:opengrep/opengrep"
-    version: latest
+    version: "1.22.0"
     activateWhen: [security-tool:opengrep, validator:opengrep]
 
   trivy:
     kind: mise
     command: trivy
     source: "aqua:aquasecurity/trivy"
-    version: latest
+    version: "0.70.0"
     activateWhen: [security-tool:trivy, validator:trivy]
     container:
       image: ghcr.io/aquasecurity/trivy:latest
@@ -172,6 +173,13 @@ tools:
     command: podman
     activateWhen: [orchestration:podman, sandbox:podman]
 
+  pnpm:
+    kind: mise
+    command: pnpm
+    source: "npm:pnpm"
+    version: "10.15.0"
+    activateWhen: [memory:engram, project:pnpm]
+
 projectDependencies:
   autoDetect: true
   commands: []