coding-agent-harness 1.0.5 → 1.0.7

package/scripts/lib/dashboard-workbench.mjs

@@ -1,336 +0,0 @@
-import crypto from "node:crypto";
-import { spawn } from "node:child_process";
-import fs from "node:fs";
-import http from "node:http";
-import path from "node:path";
-import { URL } from "node:url";
-import { confirmTaskReview } from "./task-lifecycle.mjs";
-import { createLessonSedimentationTask } from "./task-lesson-sedimentation.mjs";
-import { normalizeTarget } from "./core-shared.mjs";
-import { collectTasks } from "./task-scanner.mjs";
-import { writeDashboardFolder } from "./dashboard-data.mjs";
-import {
-  checkPresetPackage,
-  installPresetPackage,
-  listPresetPackages,
-  seedBundledPresets,
-  uninstallPresetPackage,
-} from "./preset-registry.mjs";
-
-const jsonHeaders = { "content-type": "application/json; charset=utf-8", "cache-control": "no-store" };
-
-export async function serveDashboardWorkbench(outDir, targetInput, { host = "127.0.0.1", port = 0, localeOverride = "", autoRefresh = false, open = false, label = "dashboard workbench", recoverGeneratedDashboard = false } = {}) {
-  if (host !== "127.0.0.1") throw new Error("dashboard workbench only supports --host 127.0.0.1");
-  const target = normalizeTarget(targetInput);
-  const outputDir = path.resolve(outDir);
-  const csrfToken = crypto.randomBytes(24).toString("hex");
-  const options = localeOverride ? { localeOverride } : {};
-  let snapshotVersion = Date.now();
-  const regenerate = () => {
-    writeDashboardFolder(outputDir, targetInput, { ...options, workbenchRuntime: true, recoverGeneratedDashboard });
-    snapshotVersion = Date.now();
-  };
-  regenerate();
-
-  const server = http.createServer(async (request, response) => {
-    try {
-      const address = server.address();
-      const actualPort = typeof address === "object" && address ? address.port : port;
-      const origin = `http://${host}:${actualPort}`;
-      const requestUrl = new URL(request.url || "/", origin);
-
-      if (requestUrl.pathname === "/api/runtime" && request.method === "GET") {
-        writeJson(response, 200, {
-          mode: "workbench",
-          csrfToken,
-          writableActions: ["review-complete", "lesson-sedimentation-task", "preset-check", "preset-install", "preset-seed", "preset-uninstall"],
-          target: target.projectRoot,
-          autoRefresh: autoRefresh === true,
-          snapshotVersion,
-        });
-        return;
-      }
-
-      if (requestUrl.pathname === "/api/tasks/review-complete" && request.method === "POST") {
-        assertTrustedWorkbenchRequest(request, { origin, csrfToken });
-        const body = await readJsonBody(request);
-        const taskId = String(body.taskId || "");
-        const task = collectTasks(target).find((item) => item.id === taskId);
-        if (!task) {
-          writeJson(response, 404, { error: "Task not found" });
-          return;
-        }
-        if (!isTaskInReviewQueue(task)) {
-          writeJson(response, 409, reviewQueueRejectionPayload(task));
-          return;
-        }
-        if (task.reviewStatus === "confirmed") {
-          writeJson(response, 409, { error: "Review is already confirmed." });
-          return;
-        }
-        const result = confirmTaskReview(target.projectRoot, taskId, {
-          reviewer: body.reviewer || "Human Reviewer",
-          message: body.message || "confirmed from dashboard workbench",
-          evidence: body.evidence || "",
-          confirmText: body.confirmText || "",
-        });
-        regenerate();
-        writeJson(response, 200, result);
-        return;
-      }
-
-      if (requestUrl.pathname === "/api/tasks/lesson-sedimentation" && request.method === "POST") {
-        assertTrustedWorkbenchRequest(request, { origin, csrfToken });
-        const body = await readJsonBody(request);
-        const taskId = String(body.taskId || "");
-        const candidateId = String(body.candidateId || "");
-        const task = collectTasks(target).find((item) => item.id === taskId);
-        if (!task) {
-          writeJson(response, 404, { error: "Task not found" });
-          return;
-        }
-        if (!candidateId) {
-          writeJson(response, 400, { error: "Missing lesson candidate id" });
-          return;
-        }
-        const result = createLessonSedimentationTask(target.projectRoot, taskId, candidateId, {
-          title: body.title || "",
-        });
-        regenerate();
-        writeJson(response, 200, result);
-        return;
-      }
-
-      if (requestUrl.pathname === "/api/presets/check" && request.method === "POST") {
-        assertTrustedWorkbenchRequest(request, { origin, csrfToken });
-        const body = await readJsonBody(request);
-        const id = String(body.id || "");
-        if (!id) {
-          writeJson(response, 400, { error: "Missing preset id" });
-          return;
-        }
-        const result = checkPresetPackage(id, { targetInput: target.projectRoot });
-        writeJson(response, 200, result);
-        return;
-      }
-
-      if (requestUrl.pathname === "/api/presets/install" && request.method === "POST") {
-        assertTrustedWorkbenchRequest(request, { origin, csrfToken });
-        const body = await readJsonBody(request);
-        const source = String(body.source || "");
-        if (!source) {
-          writeJson(response, 400, { error: "Missing preset source" });
-          return;
-        }
-        if (/^https?:\/\//i.test(source)) {
-          writeJson(response, 400, { error: "Network preset sources are not supported by the dashboard workbench." });
-          return;
-        }
-        const scope = normalizePresetScope(body.scope);
-        const result = installPresetPackage(source, { force: body.force === true, scope, targetInput: target.projectRoot });
-        regenerate();
-        writeJson(response, 200, { ...result, scope });
-        return;
-      }
-
-      if (requestUrl.pathname === "/api/presets/seed" && request.method === "POST") {
-        assertTrustedWorkbenchRequest(request, { origin, csrfToken });
-        const body = await readJsonBody(request);
-        const scope = normalizePresetScope(body.scope);
-        const result = seedBundledPresets({ force: body.force === true, dryRun: body.dryRun === true, scope, targetInput: target.projectRoot });
-        if (body.dryRun !== true) regenerate();
-        writeJson(response, 200, result);
-        return;
-      }
-
-      if (requestUrl.pathname === "/api/presets/uninstall" && request.method === "POST") {
-        assertTrustedWorkbenchRequest(request, { origin, csrfToken });
-        const body = await readJsonBody(request);
-        const id = String(body.id || "");
-        if (!id) {
-          writeJson(response, 400, { error: "Missing preset id" });
-          return;
-        }
-        if (String(body.confirmText || "").trim() !== id) {
-          writeJson(response, 400, { error: "Preset uninstall requires typing the preset id." });
-          return;
-        }
-        const scope = normalizePresetScope(body.scope);
-        const discovered = listPresetPackages({ targetInput: target.projectRoot }).find((preset) => preset.id === id);
-        if (discovered?.source === "builtin") {
-          writeJson(response, 409, { error: "Builtin preset cannot be uninstalled from the dashboard workbench.", id, source: "builtin" });
-          return;
-        }
-        const result = uninstallPresetPackage(id, { scope, targetInput: target.projectRoot });
-        regenerate();
-        writeJson(response, 200, { ...result, scope });
-        return;
-      }
-
-      if (request.method !== "GET" && request.method !== "HEAD") {
-        writeJson(response, 405, { error: "Method not allowed" });
-        return;
-      }
-      serveStaticFile(response, outputDir, requestUrl.pathname, request.method === "HEAD");
-    } catch (error) {
-      const status = error.status || (/CSRF|Origin|Host/.test(error.message) ? 403 : 400);
-      writeJson(response, status, errorPayload(error));
-    }
-  });
-
-  await new Promise((resolve, reject) => {
-    server.once("error", reject);
-    server.listen(Number(port), host, resolve);
-  });
-  const address = server.address();
-  const actualPort = typeof address === "object" && address ? address.port : port;
-  const url = `http://${host}:${actualPort}/`;
-  let watcher = null;
-  if (autoRefresh) watcher = startPollingWatch(target.docsRoot, regenerate);
-  console.log(`${label}: ${url} csrf=${csrfToken} outDir=${outputDir}`);
-  if (open) openBrowser(url);
-
-  const close = () => {
-    if (watcher) clearInterval(watcher);
-    server.close(() => process.exit(0));
-  };
-  process.once("SIGINT", close);
-  process.once("SIGTERM", close);
-  await new Promise(() => {});
-}
-
-function normalizePresetScope(value) {
-  const scope = String(value || "project");
-  if (scope !== "project" && scope !== "user") throw new Error(`Invalid preset scope: ${scope}`);
-  return scope;
-}
-
-function isTaskInReviewQueue(task) {
-  return task?.reviewQueueState === "ready-to-confirm" && Array.isArray(task?.taskQueues) && task.taskQueues.includes("review");
-}
-
-function reviewQueueRejectionPayload(task) {
-  return {
-    error: "Review completion is only available for tasks in the review queue.",
-    reviewQueueState: task?.reviewQueueState || "unknown",
-    taskQueues: Array.isArray(task?.taskQueues) ? task.taskQueues : [],
-    queueReasons: Array.isArray(task?.queueReasons) ? task.queueReasons : [],
-    repairPrompt: task?.repairPrompt || "",
-    reviewStatus: task?.reviewStatus || "unknown",
-    taskId: task?.id || "",
-  };
-}
-
-function startPollingWatch(root, regenerate) {
-  let lastMtime = latestTreeMtime(root);
-  let timer = null;
-  return setInterval(() => {
-    const nextMtime = latestTreeMtime(root);
-    if (nextMtime <= lastMtime) return;
-    lastMtime = nextMtime;
-    clearTimeout(timer);
-    timer = setTimeout(() => {
-      try {
-        regenerate();
-      } catch (error) {
-        console.error(`dashboard regeneration failed: ${error.message}`);
-      }
-    }, 250);
-  }, 1000);
-}
-
-function latestTreeMtime(root) {
-  let latest = 0;
-  if (!fs.existsSync(root)) return latest;
-  const visit = (dir) => {
-    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
-      if ([".git", "node_modules", "tmp"].includes(entry.name)) continue;
-      const fullPath = path.join(dir, entry.name);
-      const stat = fs.statSync(fullPath);
-      latest = Math.max(latest, stat.mtimeMs);
-      if (entry.isDirectory()) visit(fullPath);
-    }
-  };
-  visit(root);
-  return latest;
-}
-
-function openBrowser(url) {
-  const command =
-    process.platform === "darwin" ? "open" :
-    process.platform === "win32" ? "cmd" :
-    "xdg-open";
-  const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
-  const child = spawn(command, args, { stdio: "ignore", detached: true });
-  child.on("error", () => {});
-  child.unref();
-}
-
-function assertTrustedWorkbenchRequest(request, { origin, csrfToken }) {
-  const host = request.headers.host || "";
-  if (host !== origin.replace(/^http:\/\//, "")) throw new Error("Host mismatch");
-  if (request.headers.origin !== origin) throw new Error("Origin mismatch");
-  if (request.headers["x-harness-csrf"] !== csrfToken) throw new Error("CSRF token mismatch");
-}
-
-function readJsonBody(request) {
-  return new Promise((resolve, reject) => {
-    let raw = "";
-    request.setEncoding("utf8");
-    request.on("data", (chunk) => {
-      raw += chunk;
-      if (raw.length > 32_768) {
-        reject(new Error("Request body too large"));
-        request.destroy();
-      }
-    });
-    request.on("end", () => {
-      try {
-        resolve(raw ? JSON.parse(raw) : {});
-      } catch {
-        reject(new Error("Invalid JSON body"));
-      }
-    });
-    request.on("error", reject);
-  });
-}
-
-function serveStaticFile(response, outputDir, urlPath, headOnly) {
-  const decoded = decodeURIComponent(urlPath);
-  const relative = decoded === "/" ? "index.html" : decoded.replace(/^\/+/, "");
-  const filePath = path.resolve(outputDir, relative);
-  if (!isPathInside(filePath, outputDir) || !fs.existsSync(filePath) || fs.statSync(filePath).isDirectory()) {
-    writeJson(response, 404, { error: "Not found" });
-    return;
-  }
-  response.writeHead(200, { "content-type": mimeType(filePath), "cache-control": "no-store" });
-  if (!headOnly) response.end(fs.readFileSync(filePath));
-  else response.end();
-}
-
-function writeJson(response, status, payload) {
-  response.writeHead(status, jsonHeaders);
-  response.end(`${JSON.stringify(payload)}\n`);
-}
-
-function errorPayload(error) {
-  const payload = { error: error.message };
-  if (error.code) payload.code = error.code;
-  if (Array.isArray(error.recovery) && error.recovery.length > 0) payload.recovery = error.recovery;
-  if (error.details) payload.details = error.details;
-  return payload;
-}
-
-function mimeType(filePath) {
-  if (filePath.endsWith(".html")) return "text/html; charset=utf-8";
-  if (filePath.endsWith(".js")) return "text/javascript; charset=utf-8";
-  if (filePath.endsWith(".css")) return "text/css; charset=utf-8";
-  if (filePath.endsWith(".json")) return "application/json; charset=utf-8";
-  if (filePath.endsWith(".md")) return "text/markdown; charset=utf-8";
-  return "application/octet-stream";
-}
-
-function isPathInside(candidate, parent) {
-  const relative = path.relative(path.resolve(parent), path.resolve(candidate));
-  return !relative.startsWith("..") && !path.isAbsolute(relative);
-}

package/scripts/lib/dashboard-writer.mjs

@@ -1,202 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import { readJsonSafe } from "./core-shared.mjs";
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-const repoRoot = path.resolve(__dirname, "../..");
-const dashboardTemplateRoot = path.join(repoRoot, "templates/dashboard");
-const dashboardMarker = ".harness-dashboard";
-
-export function writeJsonFile(filePath, value) {
-  fs.mkdirSync(path.dirname(filePath), { recursive: true });
-  fs.writeFileSync(filePath, `${JSON.stringify(value, null, 2)}\n`);
-}
-
-export function copyDashboardAssets(outDir, options = {}) {
-  copyDirectory(dashboardTemplateRootForLocale(options.locale), outDir);
-}
-
-export function writeDashboardDirectory(outDir, bundle, options = {}) {
-  const target = path.resolve(outDir);
-  assertSafeDashboardTarget(target, options);
-  if (fs.existsSync(target)) fs.rmSync(target, { recursive: true, force: true });
-  fs.mkdirSync(target, { recursive: true });
-  fs.writeFileSync(path.join(target, dashboardMarker), "generated dashboard directory\n");
-  copyDashboardAssets(target, options);
-  fs.writeFileSync(path.join(target, "assets/app.js"), readDashboardApp(dashboardTemplateRootForLocale(options.locale)));
-  fs.writeFileSync(path.join(target, "index.html"), renderDashboardIndex(options.locale, options));
-  writeJsonFile(path.join(target, "data/status.json"), bundle.status);
-  writeJsonFile(path.join(target, "data/tables.json"), bundle.tables);
-  writeJsonFile(path.join(target, "data/documents.json"), bundle.documents);
-  writeJsonFile(path.join(target, "data/graph.json"), bundle.graph);
-  writeJsonFile(path.join(target, "data/adoption.json"), bundle.adoption);
-  writeJsonFile(path.join(target, "data/presetCatalog.json"), bundle.presetCatalog);
-  fs.writeFileSync(
-    path.join(target, "assets/dashboard-data.js"),
-    `window.__HARNESS_DASHBOARD__ = ${JSON.stringify(bundle, null, 2)};\n`,
-  );
-  fs.writeFileSync(
-    path.join(target, "README.md"),
-    [
-      "# Harness Dashboard",
-      "",
-      "This is a read-only static snapshot generated by `harness dashboard --out-dir`.",
-      "Open `index.html` directly in a browser. No target project files are read at browser runtime.",
-      "",
-    ].join("\n"),
-  );
-  return target;
-}
-
-export function writeDashboardFile(outFile, bundle, options = {}) {
-  const target = path.resolve(outFile);
-  fs.mkdirSync(path.dirname(target), { recursive: true });
-  fs.writeFileSync(target, renderDashboardFile(bundle, options));
-  return target;
-}
-
-export function renderDashboardFile(bundle, options = {}) {
-  const templateRoot = dashboardTemplateRootForLocale(options.locale);
-  const readAsset = (relativePath) => fs.readFileSync(path.join(templateRoot, relativePath), "utf8");
-  const css = readAsset("assets/app.css");
-  const i18n = readAsset("assets/i18n.js");
-  const markdown = readAsset("assets/markdown-reader.js");
-  const mermaid = readAsset("assets/mermaid-renderer.js");
-  const app = readDashboardApp(templateRoot);
-  const title = options.locale === "zh-CN" ? "Harness 控制台" : "Harness Dashboard";
-  const payload = JSON.stringify(bundle).replace(/</g, "\\u003c");
-  const runtimeLocale = options.locale === "zh-CN" ? "zh" : "en";
-  return `<!doctype html>
-<html lang="${options.locale === "zh-CN" ? "zh-CN" : "en"}">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>${title}</title>
-  <link rel="icon" href="data:,">
-  <style>${css}</style>
-</head>
-<body>
-  <div id="app" class="app-shell" aria-live="polite"></div>
-  <script>window.__HARNESS_DASHBOARD__ = ${payload};</script>
-  <script>window.__HARNESS_LOCALE__ = ${JSON.stringify(runtimeLocale)};</script>
-  <script>${i18n}</script>
-  <script>${markdown}</script>
-  <script>${mermaid}</script>
-  <script>${app}</script>
-</body>
-</html>`;
-}
-
-function renderDashboardIndex(locale = "en-US", options = {}) {
-  const normalizedLocale = locale === "zh-CN" ? "zh-CN" : "en";
-  const runtimeLocale = locale === "zh-CN" ? "zh" : "en";
-  const title = locale === "zh-CN" ? "Harness 控制台" : "Harness Dashboard";
-  const assetVersion = Date.now();
-  return `<!doctype html>
-<html lang="${normalizedLocale}">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>${title}</title>
-  <link rel="icon" href="data:,">
-  <link rel="stylesheet" href="./assets/app.css?v=${assetVersion}">
-</head>
-<body>
-  <div id="app" class="app-shell" aria-live="polite"></div>
-  <script src="./assets/dashboard-data.js?v=${assetVersion}"></script>
-  <script>window.__HARNESS_LOCALE__ = ${JSON.stringify(runtimeLocale)};</script>
-  <script>window.__HARNESS_WORKBENCH__ = ${options.workbenchRuntime === true ? "true" : "false"};</script>
-  <script src="./assets/i18n.js?v=${assetVersion}"></script>
-  <script src="./assets/markdown-reader.js?v=${assetVersion}"></script>
-  <script src="./assets/mermaid-renderer.js?v=${assetVersion}"></script>
-  <script src="./assets/app.js?v=${assetVersion}"></script>
-</body>
-</html>`;
-}
-
-function readDashboardApp(templateRoot) {
-  const manifestPath = path.join(templateRoot, "assets/app.manifest.json");
-  if (!fs.existsSync(manifestPath)) return fs.readFileSync(path.join(templateRoot, "assets/app.js"), "utf8");
-  const manifest = readJsonSafe(manifestPath, null);
-  if (!Array.isArray(manifest) || manifest.length === 0) throw new Error(`Invalid dashboard app manifest: ${manifestPath}`);
-  return `${manifest.map((relativePath) => {
-    const source = path.join(templateRoot, "assets", relativePath);
-    if (!fs.existsSync(source)) throw new Error(`Dashboard app source missing: ${relativePath}`);
-    return fs.readFileSync(source, "utf8").trimEnd();
-  }).join("\n\n")}\n`;
-}
-
-function assertSafeDashboardTarget(target, options) {
-  const localizedDashboardTemplateRoot = dashboardTemplateRootForLocale(options.locale);
-  const sourceRepoRoot = options.repoRoot ? path.resolve(options.repoRoot) : "";
-  const projectRoot = options.projectRoot ? path.resolve(options.projectRoot) : "";
-  if (
-    sourceRepoRoot &&
-    projectRoot &&
-    isPathInside(projectRoot, sourceRepoRoot) &&
-    path.basename(projectRoot) === ".harness-private" &&
-    isPathInside(target, sourceRepoRoot) &&
-    !isPathInside(target, projectRoot)
-  ) {
-    throw new Error(`Refusing private dashboard output inside publishable source package: ${target}`);
-  }
-  const protectedRoots = [
-    path.parse(target).root,
-    process.env.HOME,
-    options.repoRoot,
-    options.projectRoot,
-    options.docsRoot,
-    dashboardTemplateRoot,
-    localizedDashboardTemplateRoot,
-  ].filter(Boolean).map((item) => path.resolve(item));
-  if (protectedRoots.includes(target)) {
-    throw new Error(`Refusing unsafe dashboard output directory: ${target}`);
-  }
-  for (const root of [options.docsRoot, dashboardTemplateRoot, localizedDashboardTemplateRoot].filter(Boolean).map((item) => path.resolve(item))) {
-    if (isPathInside(target, root)) {
-      throw new Error(`Refusing dashboard output inside protected directory: ${target}`);
-    }
-  }
-  if (fs.existsSync(target)) {
-    const entries = fs.readdirSync(target);
-    const hasMarker = fs.existsSync(path.join(target, dashboardMarker));
-    const canRecoverGeneratedDashboard = options.recoverGeneratedDashboard === true && looksLikeGeneratedDashboardDirectory(target);
-    if (entries.length > 0 && !hasMarker && !canRecoverGeneratedDashboard) {
-      throw new Error(`Refusing to overwrite non-dashboard directory: ${target}`);
-    }
-  }
-}
-
-function looksLikeGeneratedDashboardDirectory(target) {
-  return [
-    "index.html",
-    "README.md",
-    "assets/app.js",
-    "assets/dashboard-data.js",
-    "data/status.json",
-  ].every((relativePath) => fs.existsSync(path.join(target, relativePath)));
-}
-
-function dashboardTemplateRootForLocale(locale = "en-US") {
-  return dashboardTemplateRoot;
-}
-
-function isPathInside(candidate, parent) {
-  const relative = path.relative(parent, candidate);
-  return Boolean(relative) && !relative.startsWith("..") && !path.isAbsolute(relative);
-}
-
-function copyDirectory(from, to) {
-  if (!fs.existsSync(from)) throw new Error(`Missing dashboard template directory: ${from}`);
-  fs.mkdirSync(to, { recursive: true });
-  for (const entry of fs.readdirSync(from, { withFileTypes: true })) {
-    const source = path.join(from, entry.name);
-    const destination = path.join(to, entry.name);
-    if (entry.isDirectory()) {
-      copyDirectory(source, destination);
-    } else {
-      fs.copyFileSync(source, destination);
-    }
-  }
-}

package/scripts/lib/git-status-summary.mjs

@@ -1,46 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-import { inspectGit } from "./governance-sync.mjs";
-
-export function summarizeGitState(target) {
-  const state = inspectGit(target.projectRoot);
-  if (!state.inGit) {
-    return {
-      summary: {
-        inGit: false,
-        root: "",
-        dirty: false,
-        entries: [],
-        blocksCliAutoCommit: false,
-      },
-      warnings: [],
-    };
-  }
-  const targetRoot = real(target.projectRoot);
-  const gitRoot = real(state.gitRoot);
-  const rootMatches = gitRoot === targetRoot;
-  const entries = rootMatches ? state.entries.map((entry) => ({
-    path: entry.path,
-    index: entry.index,
-    worktree: entry.worktree,
-  })) : [];
-  const dirty = entries.length > 0;
-  const warnings = [];
-  if (dirty) {
-    warnings.push(`dirty-state: ${entries.length} uncommitted Git path(s) may block CLI-owned auto-commit when they overlap a command write scope or are staged; commit them or record owner/no-commit reason before lifecycle commands.`);
-  }
-  return {
-    summary: {
-      inGit: true,
-      root: rootMatches ? "TARGET:." : "outside-target",
-      dirty,
-      entries,
-      blocksCliAutoCommit: !rootMatches || dirty,
-    },
-    warnings,
-  };
-}
-
-function real(filePath) {
-  return fs.realpathSync(filePath);
-}