hammoc 1.3.0 → 1.5.0

package/packages/server/dist/controllers/harnessMcpController.js

@@ -0,0 +1,310 @@
+/**
+ * Story 28.3: Harness MCP list / read / update / copy / delete controller.
+ *
+ * Mirrors the inline error-mapping pattern from `harnessSkillController` —
+ * each handler catches and walks the shared `HARNESS_ERRORS` table to emit
+ * the common `{ error: { code, message, details? } }` envelope.
+ *
+ * Route surface (mounted at /api/harness from routes/harness.ts):
+ *   GET    /mcps?projectSlug=<slug>?
+ *   GET    /mcps/:name?scope=<project|user|plugin>&projectSlug?&pluginKey?&fileKind?
+ *   PUT    /mcps/:name?scope=<project|user>&projectSlug?
+ *   POST   /mcps/copy
+ *   DELETE /mcps/:name?scope=<project|user>&projectSlug?
+ */
+import { z } from 'zod';
+import { HARNESS_ERRORS, } from '@hammoc/shared';
+import { harnessMcpService, resolveSourceLocation, } from '../services/harnessMcpService.js';
+const mcpScopeSchema = z.enum(['project', 'user', 'plugin']);
+const editableMcpScopeSchema = z.enum(['project', 'user']);
+const serverTypeSchema = z.enum(['stdio', 'sse', 'http', 'ws']);
+const fileKindSchema = z.enum(['mcp.json', 'settings.json', 'plugin.json']);
+const listQuery = z.object({
+    projectSlug: z.string().min(1).optional(),
+});
+const readQuery = z.object({
+    scope: mcpScopeSchema,
+    projectSlug: z.string().min(1).optional(),
+    pluginKey: z.string().min(1).optional(),
+    fileKind: fileKindSchema.optional(),
+});
+const updateQuery = z.object({
+    scope: editableMcpScopeSchema,
+    projectSlug: z.string().min(1).optional(),
+});
+const mcpConfigSchema = z
+    .object({
+    type: serverTypeSchema.optional(),
+    command: z.string().optional(),
+    args: z.array(z.string()).optional(),
+    url: z.string().min(1).optional(),
+    headers: z.record(z.string(), z.string()).optional(),
+    env: z.record(z.string(), z.string()).optional(),
+    enabled: z.boolean().optional(),
+})
+    .superRefine((v, ctx) => {
+    const type = v.type ?? 'stdio';
+    if (type === 'stdio' && !v.command) {
+        ctx.addIssue({ code: 'custom', message: 'command is required for stdio', path: ['command'] });
+    }
+    if (type !== 'stdio' && !v.url) {
+        ctx.addIssue({ code: 'custom', message: 'url is required for ' + type, path: ['url'] });
+    }
+    if (type !== 'http' && v.headers && Object.keys(v.headers).length > 0) {
+        ctx.addIssue({ code: 'custom', message: 'headers only allowed for http type', path: ['headers'] });
+    }
+});
+const updateBody = z
+    .object({
+    config: mcpConfigSchema.optional(),
+    raw: z.string().optional(),
+    enabled: z.boolean().optional(),
+    expectedMtime: z.string().optional(),
+})
+    .refine((v) => [v.config, v.raw, v.enabled].filter((x) => x !== undefined).length === 1, { message: 'exactly one of config / raw / enabled is required' });
+// OS-reserved characters and trailing dot/space — blocked at validation time so
+// the rename UI can rely on inline errors. Matches the SkillCopyConflictDialog
+// regex one-for-one.
+// eslint-disable-next-line no-control-regex
+const RESERVED_NAME_RE = /[\\/<>:"|?*\x00-\x1F]|[. ]$/;
+function validateMcpName(name) {
+    if (RESERVED_NAME_RE.test(name)) {
+        const err = new Error('mcp name contains reserved or path-traversal characters');
+        err.code = HARNESS_ERRORS.HARNESS_PATH_DENIED.code;
+        throw err;
+    }
+}
+const copyBody = z
+    .object({
+    sourceScope: mcpScopeSchema,
+    sourceProjectSlug: z.string().min(1).optional(),
+    sourcePluginKey: z.string().min(1).optional(),
+    sourceFileKind: fileKindSchema.optional(),
+    sourceName: z.string().min(1),
+    targetScope: editableMcpScopeSchema,
+    targetProjectSlug: z.string().min(1).optional(),
+    targetName: z.string().min(1),
+    onConflict: z.enum(['overwrite', 'skip', 'rename']),
+    acknowledgedSecret: z.boolean().optional(),
+})
+    .refine((v) => v.sourceScope !== 'project' || !!v.sourceProjectSlug, { message: 'sourceProjectSlug is required when sourceScope is project' })
+    .refine((v) => v.sourceScope !== 'plugin' || !!v.sourcePluginKey, { message: 'sourcePluginKey is required when sourceScope is plugin' })
+    .refine((v) => v.targetScope !== 'project' || !!v.targetProjectSlug, { message: 'targetProjectSlug is required when targetScope is project' })
+    .refine((v) => !RESERVED_NAME_RE.test(v.targetName), { message: 'targetName contains reserved characters' });
+const deleteBody = z
+    .object({
+    expectedMtime: z.string().optional(),
+})
+    .optional();
+const MAPPED_CODES = [
+    'HARNESS_PATH_DENIED',
+    'HARNESS_FORBIDDEN',
+    'HARNESS_PLUGIN_SCOPE_DENIED',
+    'HARNESS_FILE_NOT_FOUND',
+    'HARNESS_NOT_A_FILE',
+    'HARNESS_ROOT_MISSING',
+    'HARNESS_PARENT_NOT_FOUND',
+    'HARNESS_PLUGIN_NOT_FOUND',
+    'HARNESS_SKILL_NOT_FOUND',
+    'HARNESS_MCP_NOT_FOUND',
+    'HARNESS_STALE_WRITE',
+    'HARNESS_SKILL_NAME_CONFLICT',
+    'HARNESS_MCP_NAME_CONFLICT',
+    'HARNESS_PARSE_ERROR',
+    'HARNESS_SECRET_ON_SHARED',
+];
+const MESSAGE_KEY = {
+    HARNESS_PATH_DENIED: 'harness.error.pathDenied',
+    HARNESS_FORBIDDEN: 'harness.error.forbidden',
+    HARNESS_PLUGIN_SCOPE_DENIED: 'harness.error.pluginScopeDenied',
+    HARNESS_FILE_NOT_FOUND: 'harness.error.fileNotFound',
+    HARNESS_NOT_A_FILE: 'harness.error.notAFile',
+    HARNESS_ROOT_MISSING: 'harness.error.rootMissing',
+    HARNESS_PARENT_NOT_FOUND: 'harness.error.parentNotFound',
+    HARNESS_PLUGIN_NOT_FOUND: 'harness.error.pluginNotFound',
+    HARNESS_SKILL_NOT_FOUND: 'harness.error.skillNotFound',
+    HARNESS_MCP_NOT_FOUND: 'harness.error.mcpNotFound',
+    HARNESS_STALE_WRITE: 'harness.error.staleWrite',
+    HARNESS_SKILL_NAME_CONFLICT: 'harness.error.skillNameConflict',
+    HARNESS_MCP_NAME_CONFLICT: 'harness.error.mcpNameConflict',
+    HARNESS_PARSE_ERROR: 'harness.error.parseError',
+    HARNESS_SECRET_ON_SHARED: 'harness.error.secretOnShared',
+};
+function handleError(req, res, error) {
+    const nodeError = error;
+    for (const key of MAPPED_CODES) {
+        const entry = HARNESS_ERRORS[key];
+        if (nodeError.code === entry.code) {
+            const body = {
+                code: entry.code,
+                message: req.t ? req.t(MESSAGE_KEY[key]) : entry.code,
+            };
+            if (key === 'HARNESS_STALE_WRITE') {
+                body.details = { currentMtime: nodeError.currentMtime ?? '' };
+            }
+            if (key === 'HARNESS_FORBIDDEN' && typeof nodeError.cause === 'string') {
+                body.details = { cause: nodeError.cause, ...(nodeError.details ?? {}) };
+            }
+            if (key === 'HARNESS_SECRET_ON_SHARED') {
+                body.details = {
+                    relativePath: nodeError.relativePath ?? '',
+                    ...(nodeError.lines ? { lines: nodeError.lines } : {}),
+                    ...(nodeError.paths ? { paths: nodeError.paths } : {}),
+                };
+            }
+            res.status(entry.httpStatus).json({ error: body });
+            return;
+        }
+    }
+    // Fall-through: surface as HARNESS_WRITE_ERROR but preserve `cause` so the
+    // client can route to the cross-device toast (Risk Mitigation #2 from 28.2).
+    const body = {
+        code: HARNESS_ERRORS.HARNESS_WRITE_ERROR.code,
+        message: req.t ? req.t('harness.error.writeError') : HARNESS_ERRORS.HARNESS_WRITE_ERROR.code,
+    };
+    if (typeof nodeError.cause === 'string') {
+        body.details = { cause: nodeError.cause };
+    }
+    res.status(HARNESS_ERRORS.HARNESS_WRITE_ERROR.httpStatus).json({ error: body });
+}
+export const harnessMcpController = {
+    /** GET /mcps */
+    async list(req, res) {
+        const parsed = listQuery.safeParse(req.query);
+        if (!parsed.success) {
+            res.status(400).json({
+                error: { code: 'INVALID_REQUEST', message: parsed.error.issues[0]?.message ?? 'invalid query' },
+            });
+            return;
+        }
+        try {
+            const result = await harnessMcpService.listCards(parsed.data.projectSlug);
+            res.json(result);
+        }
+        catch (error) {
+            handleError(req, res, error);
+        }
+    },
+    /** GET /mcps/:name */
+    async read(req, res) {
+        const query = readQuery.safeParse(req.query);
+        if (!query.success) {
+            res.status(400).json({
+                error: { code: 'INVALID_REQUEST', message: query.error.issues[0]?.message ?? 'invalid query' },
+            });
+            return;
+        }
+        const name = decodeURIComponent(req.params.name ?? '');
+        if (!name) {
+            res.status(400).json({ error: { code: 'INVALID_REQUEST', message: 'name is required' } });
+            return;
+        }
+        try {
+            validateMcpName(name);
+            const source = await resolveSourceLocation({
+                scope: query.data.scope,
+                name,
+                projectSlug: query.data.projectSlug,
+                pluginKey: query.data.pluginKey,
+                fileKind: query.data.fileKind,
+            });
+            const result = await harnessMcpService.readServer(source, name);
+            res.json(result);
+        }
+        catch (error) {
+            handleError(req, res, error);
+        }
+    },
+    /** PUT /mcps/:name */
+    async update(req, res) {
+        const query = updateQuery.safeParse(req.query);
+        if (!query.success) {
+            res.status(400).json({
+                error: { code: 'INVALID_REQUEST', message: query.error.issues[0]?.message ?? 'invalid query' },
+            });
+            return;
+        }
+        const body = updateBody.safeParse(req.body ?? {});
+        if (!body.success) {
+            res.status(400).json({
+                error: { code: 'INVALID_REQUEST', message: body.error.issues[0]?.message ?? 'invalid body' },
+            });
+            return;
+        }
+        const name = decodeURIComponent(req.params.name ?? '');
+        if (!name) {
+            res.status(400).json({ error: { code: 'INVALID_REQUEST', message: 'name is required' } });
+            return;
+        }
+        try {
+            validateMcpName(name);
+            const source = await resolveSourceLocation({
+                scope: query.data.scope,
+                name,
+                projectSlug: query.data.projectSlug,
+            });
+            const result = await harnessMcpService.updateServer(source, name, body.data);
+            res.json(result);
+        }
+        catch (error) {
+            handleError(req, res, error);
+        }
+    },
+    /** POST /mcps/copy */
+    async copy(req, res) {
+        const body = copyBody.safeParse(req.body ?? {});
+        if (!body.success) {
+            res.status(400).json({
+                error: { code: 'INVALID_REQUEST', message: body.error.issues[0]?.message ?? 'invalid body' },
+            });
+            return;
+        }
+        try {
+            const result = await harnessMcpService.copyServer(body.data);
+            res.json(result);
+        }
+        catch (error) {
+            handleError(req, res, error);
+        }
+    },
+    /** DELETE /mcps/:name */
+    async delete(req, res) {
+        const query = updateQuery.safeParse(req.query);
+        if (!query.success) {
+            res.status(400).json({
+                error: { code: 'INVALID_REQUEST', message: query.error.issues[0]?.message ?? 'invalid query' },
+            });
+            return;
+        }
+        const body = deleteBody.safeParse(req.body ?? {});
+        if (!body.success) {
+            res.status(400).json({
+                error: { code: 'INVALID_REQUEST', message: body.error.issues[0]?.message ?? 'invalid body' },
+            });
+            return;
+        }
+        const name = decodeURIComponent(req.params.name ?? '');
+        if (!name) {
+            res.status(400).json({ error: { code: 'INVALID_REQUEST', message: 'name is required' } });
+            return;
+        }
+        try {
+            validateMcpName(name);
+            const source = await resolveSourceLocation({
+                scope: query.data.scope,
+                name,
+                projectSlug: query.data.projectSlug,
+            });
+            const result = await harnessMcpService.deleteServer(source, name, {
+                scope: query.data.scope,
+                projectSlug: query.data.projectSlug,
+                expectedMtime: body.data?.expectedMtime,
+            });
+            res.json(result);
+        }
+        catch (error) {
+            handleError(req, res, error);
+        }
+    },
+};
+//# sourceMappingURL=harnessMcpController.js.map

package/packages/server/dist/controllers/harnessMcpController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harnessMcpController.js","sourceRoot":"","sources":["../../src/controllers/harnessMcpController.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,GAEf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,kCAAkC,CAAC;AAE1C,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC7D,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAC3D,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AAChE,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC;AAE5E,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,KAAK,EAAE,cAAc;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;IACtB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC;IAC/B,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACnC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,+BAA+B,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC/B,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,sBAAsB,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,oCAAoC,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACrG,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,CAAC;IACN,MAAM,EAAE,eAAe,CAAC,QAAQ,EAAE;IAClC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAC/E,EAAE,OAAO,EAAE,mDAAmD,EAAE,CACjE,CAAC;AAEJ,gFAAgF;AAChF,+EAA+E;AAC/E,qBAAqB;AACrB,4CAA4C;AAC5C,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AAEvD,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,yDAAyD,CAA0B,CAAC;QAC1G,GAAG,CAAC,IAAI,GAAG,cAAc,CAAC,mBAAmB,CAAC,IAAI,CAAC;QACnD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC;KACf,MAAM,CAAC;IACN,WAAW,EAAE,cAAc;IAC3B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,cAAc,EAAE,cAAc,CAAC,QAAQ,EAAE;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,WAAW,EAAE,sBAAsB;IACnC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACnD,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAC3D,EAAE,OAAO,EAAE,2DAA2D,EAAE,CACzE;KACA,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,EACxD,EAAE,OAAO,EAAE,wDAAwD,EAAE,CACtE;KACA,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAC3D,EAAE,OAAO,EAAE,2DAA2D,EAAE,CACzE;KACA,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAC3C,EAAE,OAAO,EAAE,yCAAyC,EAAE,CACvD,CAAC;AAEJ,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,MAAM,YAAY,GAAG;IACnB,qBAAqB;IACrB,mBAAmB;IACnB,6BAA6B;IAC7B,wBAAwB;IACxB,oBAAoB;IACpB,sBAAsB;IACtB,0BAA0B;IAC1B,0BAA0B;IAC1B,yBAAyB;IACzB,uBAAuB;IACvB,qBAAqB;IACrB,6BAA6B;IAC7B,2BAA2B;IAC3B,qBAAqB;IACrB,0BAA0B;CAClB,CAAC;AAEX,MAAM,WAAW,GAAgD;IAC/D,mBAAmB,EAAE,0BAA0B;IAC/C,iBAAiB,EAAE,yBAAyB;IAC5C,2BAA2B,EAAE,iCAAiC;IAC9D,sBAAsB,EAAE,4BAA4B;IACpD,kBAAkB,EAAE,wBAAwB;IAC5C,oBAAoB,EAAE,2BAA2B;IACjD,wBAAwB,EAAE,8BAA8B;IACxD,wBAAwB,EAAE,8BAA8B;IACxD,uBAAuB,EAAE,6BAA6B;IACtD,qBAAqB,EAAE,2BAA2B;IAClD,mBAAmB,EAAE,0BAA0B;IAC/C,2BAA2B,EAAE,iCAAiC;IAC9D,yBAAyB,EAAE,+BAA+B;IAC1D,mBAAmB,EAAE,0BAA0B;IAC/C,wBAAwB,EAAE,8BAA8B;CACzD,CAAC;AAEF,SAAS,WAAW,CAAC,GAAY,EAAE,GAAa,EAAE,KAAc;IAC9D,MAAM,SAAS,GAAG,KAOjB,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,IAAI,GAAyE;gBACjF,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI;aACtD,CAAC;YACF,IAAI,GAAG,KAAK,qBAAqB,EAAE,CAAC;gBAClC,IAAI,CAAC,OAAO,GAAG,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;YAChE,CAAC;YACD,IAAI,GAAG,KAAK,mBAAmB,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvE,IAAI,CAAC,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YAC1E,CAAC;YACD,IAAI,GAAG,KAAK,0BAA0B,EAAE,CAAC;gBACvC,IAAI,CAAC,OAAO,GAAG;oBACb,YAAY,EAAE,SAAS,CAAC,YAAY,IAAI,EAAE;oBAC1C,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtD,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACvD,CAAC;YACJ,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;IACH,CAAC;IACD,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM,IAAI,GAAyE;QACjF,IAAI,EAAE,cAAc,CAAC,mBAAmB,CAAC,IAAI;QAC7C,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,mBAAmB,CAAC,IAAI;KAC7F,CAAC;IACF,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC;IAC5C,CAAC;IACD,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,gBAAgB;IAChB,KAAK,CAAC,IAAI,CAAC,GAAY,EAAE,GAAa;QACpC,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,eAAe,EAAE;aAChG,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC1E,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,KAAK,CAAC,IAAI,CAAC,GAAY,EAAE,GAAa;QACpC,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,eAAe,EAAE;aAC/F,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;YAC1F,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,eAAe,CAAC,IAAI,CAAC,CAAC;YACtB,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;gBACzC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;gBACvB,IAAI;gBACJ,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;gBACnC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;gBAC/B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;aAC9B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,KAAK,CAAC,MAAM,CAAC,GAAY,EAAE,GAAa;QACtC,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,eAAe,EAAE;aAC/F,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,cAAc,EAAE;aAC7F,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;YAC1F,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,eAAe,CAAC,IAAI,CAAC,CAAC;YACtB,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;gBACzC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;gBACvB,IAAI;gBACJ,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;aACpC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7E,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,KAAK,CAAC,IAAI,CAAC,GAAY,EAAE,GAAa;QACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,cAAc,EAAE;aAC7F,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,IAA6B,CAAC,CAAC;YACtF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,KAAK,CAAC,MAAM,CAAC,GAAY,EAAE,GAAa;QACtC,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,eAAe,EAAE;aAC/F,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,cAAc,EAAE;aAC7F,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;YAC1F,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,eAAe,CAAC,IAAI,CAAC,CAAC;YACtB,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;gBACzC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;gBACvB,IAAI;gBACJ,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;aACpC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE;gBAChE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;gBACvB,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;gBACnC,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa;aACxC,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;CACF,CAAC"}

package/packages/server/dist/controllers/harnessPluginController.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Story 28.1: Harness plugin list / toggle controller.
+ *
+ * Thin Express handlers on top of `harnessPluginService`. Follows the inline
+ * error-mapping pattern established by `harnessController` — there is no
+ * global Express error middleware, so each handler catches and iterates the
+ * shared `HARNESS_ERRORS` table to emit the common envelope
+ * `{ error: { code, message, details? } }`.
+ */
+import { Request, Response } from 'express';
+export declare const harnessPluginController: {
+    /** GET /api/harness/plugins */
+    list(req: Request, res: Response): Promise<void>;
+    /** POST /api/harness/plugins/toggle */
+    toggle(req: Request, res: Response): Promise<void>;
+};
+//# sourceMappingURL=harnessPluginController.d.ts.map

package/packages/server/dist/controllers/harnessPluginController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harnessPluginController.d.ts","sourceRoot":"","sources":["../../src/controllers/harnessPluginController.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAqE5C,eAAO,MAAM,uBAAuB;IAClC,+BAA+B;cACf,OAAO,OAAO,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBtD,uCAAuC;gBACrB,OAAO,OAAO,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;CAsBzD,CAAC"}

package/packages/server/dist/controllers/harnessPluginController.js

@@ -0,0 +1,115 @@
+/**
+ * Story 28.1: Harness plugin list / toggle controller.
+ *
+ * Thin Express handlers on top of `harnessPluginService`. Follows the inline
+ * error-mapping pattern established by `harnessController` — there is no
+ * global Express error middleware, so each handler catches and iterates the
+ * shared `HARNESS_ERRORS` table to emit the common envelope
+ * `{ error: { code, message, details? } }`.
+ */
+import { z } from 'zod';
+import { HARNESS_ERRORS } from '@hammoc/shared';
+import { harnessPluginService } from '../services/harnessPluginService.js';
+const projectSlugQuery = z.object({
+    projectSlug: z.string().min(1).optional(),
+});
+const toggleBodySchema = z.object({
+    key: z.string().min(1),
+    enabled: z.boolean(),
+    expectedMtime: z.string().optional(),
+});
+/**
+ * Codes the client explicitly handles. `HARNESS_WRITE_ERROR` is handled as
+ * the catch-all below so it is intentionally NOT listed here.
+ */
+const MAPPED_CODES = [
+    'HARNESS_PATH_DENIED',
+    'HARNESS_FORBIDDEN',
+    'HARNESS_PLUGIN_SCOPE_DENIED',
+    'HARNESS_FILE_NOT_FOUND',
+    'HARNESS_NOT_A_FILE',
+    'HARNESS_ROOT_MISSING',
+    'HARNESS_PARENT_NOT_FOUND',
+    'HARNESS_PLUGIN_NOT_FOUND',
+    'HARNESS_STALE_WRITE',
+    'HARNESS_PARSE_ERROR',
+];
+const MESSAGE_KEY = {
+    HARNESS_PATH_DENIED: 'harness.error.pathDenied',
+    HARNESS_FORBIDDEN: 'harness.error.forbidden',
+    HARNESS_PLUGIN_SCOPE_DENIED: 'harness.error.pluginScopeDenied',
+    HARNESS_FILE_NOT_FOUND: 'harness.error.fileNotFound',
+    HARNESS_NOT_A_FILE: 'harness.error.notAFile',
+    HARNESS_ROOT_MISSING: 'harness.error.rootMissing',
+    HARNESS_PARENT_NOT_FOUND: 'harness.error.parentNotFound',
+    HARNESS_PLUGIN_NOT_FOUND: 'harness.error.pluginNotFound',
+    HARNESS_STALE_WRITE: 'harness.error.staleWrite',
+    HARNESS_PARSE_ERROR: 'harness.error.parseError',
+};
+function handleError(req, res, error) {
+    const nodeError = error;
+    for (const key of MAPPED_CODES) {
+        const entry = HARNESS_ERRORS[key];
+        if (nodeError.code === entry.code) {
+            const body = {
+                code: entry.code,
+                message: req.t ? req.t(MESSAGE_KEY[key]) : entry.code,
+            };
+            if (key === 'HARNESS_STALE_WRITE') {
+                body.details = { currentMtime: nodeError.currentMtime ?? '' };
+            }
+            res.status(entry.httpStatus).json({ error: body });
+            return;
+        }
+    }
+    res.status(HARNESS_ERRORS.HARNESS_WRITE_ERROR.httpStatus).json({
+        error: {
+            code: HARNESS_ERRORS.HARNESS_WRITE_ERROR.code,
+            message: req.t ? req.t('harness.error.writeError') : HARNESS_ERRORS.HARNESS_WRITE_ERROR.code,
+        },
+    });
+}
+export const harnessPluginController = {
+    /** GET /api/harness/plugins */
+    async list(req, res) {
+        const parsed = projectSlugQuery.safeParse(req.query);
+        if (!parsed.success) {
+            res.status(400).json({
+                error: { code: 'INVALID_REQUEST', message: parsed.error.issues[0]?.message ?? 'invalid query' },
+            });
+            return;
+        }
+        try {
+            const result = await harnessPluginService.listCards(parsed.data.projectSlug);
+            res.json(result);
+        }
+        catch (error) {
+            handleError(req, res, error);
+        }
+    },
+    /** POST /api/harness/plugins/toggle */
+    async toggle(req, res) {
+        const query = projectSlugQuery.safeParse(req.query);
+        if (!query.success) {
+            res.status(400).json({
+                error: { code: 'INVALID_REQUEST', message: query.error.issues[0]?.message ?? 'invalid query' },
+            });
+            return;
+        }
+        const body = toggleBodySchema.safeParse(req.body ?? {});
+        if (!body.success) {
+            res.status(400).json({
+                error: { code: 'INVALID_REQUEST', message: body.error.issues[0]?.message ?? 'invalid body' },
+            });
+            return;
+        }
+        try {
+            const result = await harnessPluginService.toggleEnabled(body.data, query.data.projectSlug);
+            res.json(result);
+        }
+        catch (error) {
+            handleError(req, res, error);
+        }
+    },
+};
+//# sourceMappingURL=harnessPluginController.js.map

package/packages/server/dist/controllers/harnessPluginController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harnessPluginController.js","sourceRoot":"","sources":["../../src/controllers/harnessPluginController.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,YAAY,GAAG;IACnB,qBAAqB;IACrB,mBAAmB;IACnB,6BAA6B;IAC7B,wBAAwB;IACxB,oBAAoB;IACpB,sBAAsB;IACtB,0BAA0B;IAC1B,0BAA0B;IAC1B,qBAAqB;IACrB,qBAAqB;CACb,CAAC;AAEX,MAAM,WAAW,GAAgD;IAC/D,mBAAmB,EAAE,0BAA0B;IAC/C,iBAAiB,EAAE,yBAAyB;IAC5C,2BAA2B,EAAE,iCAAiC;IAC9D,sBAAsB,EAAE,4BAA4B;IACpD,kBAAkB,EAAE,wBAAwB;IAC5C,oBAAoB,EAAE,2BAA2B;IACjD,wBAAwB,EAAE,8BAA8B;IACxD,wBAAwB,EAAE,8BAA8B;IACxD,mBAAmB,EAAE,0BAA0B;IAC/C,mBAAmB,EAAE,0BAA0B;CAChD,CAAC;AAEF,SAAS,WAAW,CAAC,GAAY,EAAE,GAAa,EAAE,KAAc;IAC9D,MAAM,SAAS,GAAG,KAA0D,CAAC;IAC7E,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,IAAI,GAAyE;gBACjF,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI;aACtD,CAAC;YACF,IAAI,GAAG,KAAK,qBAAqB,EAAE,CAAC;gBAClC,IAAI,CAAC,OAAO,GAAG,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;YAChE,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;IACH,CAAC;IACD,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;QAC7D,KAAK,EAAE;YACL,IAAI,EAAE,cAAc,CAAC,mBAAmB,CAAC,IAAI;YAC7C,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,mBAAmB,CAAC,IAAI;SAC7F;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,+BAA+B;IAC/B,KAAK,CAAC,IAAI,CAAC,GAAY,EAAE,GAAa;QACpC,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,eAAe,EAAE;aAChG,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC7E,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,KAAK,CAAC,MAAM,CAAC,GAAY,EAAE,GAAa;QACtC,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,eAAe,EAAE;aAC/F,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,cAAc,EAAE;aAC7F,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC3F,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;CACF,CAAC"}

package/packages/server/dist/controllers/harnessShareScopeController.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Story 30.1 (Task 2.3): share-scope controller.
+ *
+ * Thin Express handler on top of `harnessShareScopeService`. Mirrors
+ * `harnessController` conventions exactly: Zod refine validation, inline
+ * `HARNESS_*` error mapping, common `{ error: { code, message, details? } }`
+ * envelope. No global Express error middleware in this codebase — see
+ * `harnessController.ts` for the reference pattern.
+ */
+import { Request, Response } from 'express';
+export declare const harnessShareScopeController: {
+    /** GET /api/harness/share-scope?scope=project&projectSlug=<slug>&paths=<comma> */
+    evaluate(req: Request, res: Response): Promise<void>;
+};
+//# sourceMappingURL=harnessShareScopeController.d.ts.map

package/packages/server/dist/controllers/harnessShareScopeController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harnessShareScopeController.d.ts","sourceRoot":"","sources":["../../src/controllers/harnessShareScopeController.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AA4C5C,eAAO,MAAM,2BAA2B;IACtC,kFAAkF;kBAC9D,OAAO,OAAO,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;CAuB3D,CAAC"}

package/packages/server/dist/controllers/harnessShareScopeController.js

@@ -0,0 +1,73 @@
+/**
+ * Story 30.1 (Task 2.3): share-scope controller.
+ *
+ * Thin Express handler on top of `harnessShareScopeService`. Mirrors
+ * `harnessController` conventions exactly: Zod refine validation, inline
+ * `HARNESS_*` error mapping, common `{ error: { code, message, details? } }`
+ * envelope. No global Express error middleware in this codebase — see
+ * `harnessController.ts` for the reference pattern.
+ */
+import { z } from 'zod';
+import { HARNESS_ERRORS } from '@hammoc/shared';
+import { harnessShareScopeService } from '../services/harnessShareScopeService.js';
+/**
+ * `paths` is a comma-separated list because GET query strings cannot reliably
+ * carry arbitrary arrays. Each item is a project-relative POSIX path.
+ */
+const querySchema = z
+    .object({
+    scope: z.literal('project'),
+    projectSlug: z.string().min(1, 'projectSlug is required when scope is "project"'),
+    paths: z.string().optional().default(''),
+})
+    .strict();
+const MAPPED_CODES = ['HARNESS_ROOT_MISSING', 'HARNESS_FORBIDDEN', 'HARNESS_PATH_DENIED'];
+const MESSAGE_KEY = {
+    HARNESS_ROOT_MISSING: 'harness.error.rootMissing',
+    HARNESS_FORBIDDEN: 'harness.error.forbidden',
+    HARNESS_PATH_DENIED: 'harness.error.pathDenied',
+};
+function handleError(req, res, error) {
+    const nodeError = error;
+    for (const key of MAPPED_CODES) {
+        const entry = HARNESS_ERRORS[key];
+        if (nodeError.code === entry.code) {
+            res.status(entry.httpStatus).json({
+                error: { code: entry.code, message: req.t(MESSAGE_KEY[key]) },
+            });
+            return;
+        }
+    }
+    res.status(HARNESS_ERRORS.HARNESS_WRITE_ERROR.httpStatus).json({
+        error: {
+            code: HARNESS_ERRORS.HARNESS_WRITE_ERROR.code,
+            message: req.t('harness.error.writeError'),
+        },
+    });
+}
+export const harnessShareScopeController = {
+    /** GET /api/harness/share-scope?scope=project&projectSlug=<slug>&paths=<comma> */
+    async evaluate(req, res) {
+        const parsed = querySchema.safeParse(req.query);
+        if (!parsed.success) {
+            const msg = parsed.error.issues[0]?.message ?? 'invalid query';
+            res.status(400).json({ error: { code: 'INVALID_REQUEST', message: msg } });
+            return;
+        }
+        const relativePaths = parsed.data.paths
+            .split(',')
+            .map((p) => p.trim())
+            .filter((p) => p.length > 0);
+        try {
+            const result = await harnessShareScopeService.evaluate({
+                projectSlug: parsed.data.projectSlug,
+                relativePaths,
+            });
+            res.json(result);
+        }
+        catch (error) {
+            handleError(req, res, error);
+        }
+    },
+};
+//# sourceMappingURL=harnessShareScopeController.js.map

package/packages/server/dist/controllers/harnessShareScopeController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harnessShareScopeController.js","sourceRoot":"","sources":["../../src/controllers/harnessShareScopeController.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AAEnF;;;GAGG;AACH,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,iDAAiD,CAAC;IACjF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,YAAY,GAAG,CAAC,sBAAsB,EAAE,mBAAmB,EAAE,qBAAqB,CAAU,CAAC;AAEnG,MAAM,WAAW,GAAgD;IAC/D,oBAAoB,EAAE,2BAA2B;IACjD,iBAAiB,EAAE,yBAAyB;IAC5C,mBAAmB,EAAE,0BAA0B;CAChD,CAAC;AAEF,SAAS,WAAW,CAAC,GAAY,EAAE,GAAa,EAAE,KAAc;IAC9D,MAAM,SAAS,GAAG,KAA8B,CAAC;IACjD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YAClC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;gBAChC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE;aAC/D,CAAC,CAAC;YACH,OAAO;QACT,CAAC;IACH,CAAC;IACD,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;QAC7D,KAAK,EAAE;YACL,IAAI,EAAE,cAAc,CAAC,mBAAmB,CAAC,IAAI;YAC7C,OAAO,EAAE,GAAG,CAAC,CAAE,CAAC,0BAA0B,CAAC;SAC5C;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,kFAAkF;IAClF,KAAK,CAAC,QAAQ,CAAC,GAAY,EAAE,GAAa;QACxC,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,eAAe,CAAC;YAC/D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK;aACpC,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAE/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,QAAQ,CAAC;gBACrD,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;gBACpC,aAAa;aACd,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;CACF,CAAC"}

package/packages/server/dist/controllers/harnessSkillController.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Story 28.2: Harness skill list / read / update / copy controller.
+ *
+ * Mirrors the inline error-mapping pattern from `harnessPluginController` —
+ * each handler catches and walks the shared `HARNESS_ERRORS` table to emit
+ * the common `{ error: { code, message, details? } }` envelope. There is no
+ * global Express error middleware in this codebase.
+ *
+ * Route surface (mounted at /api/harness from routes/harness.ts):
+ *   GET    /skills?projectSlug=<slug>?
+ *   GET    /skills/:name?scope=<project|user|plugin>&projectSlug=...&pluginKey=...
+ *   PUT    /skills/:name?scope=<project|user>&projectSlug=...
+ *   POST   /skills/copy
+ *   GET    /skills/:name/bundle/<resourcePath>?scope=<project|user|plugin>&...
+ *   PUT    /skills/:name/bundle/<resourcePath>?scope=<project|user>&...
+ */
+import { Request, Response } from 'express';
+export declare const harnessSkillController: {
+    /** GET /skills */
+    list(req: Request, res: Response): Promise<void>;
+    /** GET /skills/:name */
+    read(req: Request, res: Response): Promise<void>;
+    /** PUT /skills/:name */
+    update(req: Request, res: Response): Promise<void>;
+    /** POST /skills/copy */
+    copy(req: Request, res: Response): Promise<void>;
+    /** GET /skills/:name/bundle/<resourcePath> */
+    readBundle(req: Request, res: Response): Promise<void>;
+    /** PUT /skills/:name/bundle/<resourcePath> */
+    writeBundle(req: Request, res: Response): Promise<void>;
+};
+//# sourceMappingURL=harnessSkillController.d.ts.map

package/packages/server/dist/controllers/harnessSkillController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harnessSkillController.d.ts","sourceRoot":"","sources":["../../src/controllers/harnessSkillController.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AA8Q5C,eAAO,MAAM,sBAAsB;IACjC,kBAAkB;cACF,OAAO,OAAO,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBtD,wBAAwB;cACR,OAAO,OAAO,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BtD,wBAAwB;gBACN,OAAO,OAAO,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAiCxD,wBAAwB;cACR,OAAO,OAAO,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBtD,8CAA8C;oBACxB,OAAO,OAAO,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IA6C5D,8CAA8C;qBACvB,OAAO,OAAO,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;CAoC9D,CAAC"}