hammoc 1.4.0 → 1.5.0

package/packages/server/dist/utils/applySecretsPolicy.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Story 30.3 (Task 2.2): apply the three `secretsPolicy` modes to a payload
+ * before it is written into the bundle.
+ *
+ * Two operating shapes, mirroring `detectSecretsInValue` / `detectSecretsInText`:
+ *
+ *   1. `applyPolicyToValue` walks a JSON-like value (mcp config, settings.json
+ *      hooks block). For `excluded` the matched leaf is deleted from its
+ *      parent; for `placeholder` it is rewritten as `${ENV_REF_NAME}` using
+ *      `secretPlaceholderNamer`; for `included-explicit` the value is left
+ *      untouched.
+ *
+ *   2. `applyPolicyToText` walks line-oriented text (CLAUDE.md, agent body,
+ *      command body). For `excluded` the offending line is replaced with the
+ *      sentinel `<< SECRET REMOVED >>` so line numbers stay stable; for
+ *      `placeholder` every secret substring on that line is rewritten as
+ *      `${ENV_REF_NAME}`; for `included-explicit` the text is unchanged.
+ *
+ * Both return per-call counters that the caller aggregates into the
+ * `ImportApplySummary` (well, the export equivalent — same idea: surface to
+ * the user how many secrets were affected).
+ */
+import type { BundleItemDomain, SecretsPolicy } from '@hammoc/shared';
+export declare const SECRET_REMOVED_TEXT_PLACEHOLDER = "<< SECRET REMOVED >>";
+export interface ApplyPolicyValueInput {
+    policy: SecretsPolicy;
+    domain: BundleItemDomain;
+    cardName: string;
+    hookEvent?: string;
+    /** Root-relative path prefix for matched dot-paths (e.g. `mcpServers.context7`). */
+    pathPrefix?: string[];
+    value: unknown;
+}
+export interface ApplyPolicyValueResult {
+    value: unknown;
+    removedCount: number;
+    replacedCount: number;
+}
+export interface ApplyPolicyTextInput {
+    policy: SecretsPolicy;
+    domain: BundleItemDomain;
+    cardName: string;
+    hookEvent?: string;
+    text: string;
+}
+export interface ApplyPolicyTextResult {
+    text: string;
+    removedCount: number;
+    replacedCount: number;
+}
+export declare function applyPolicyToText(input: ApplyPolicyTextInput): ApplyPolicyTextResult;
+export declare function applyPolicyToValue(input: ApplyPolicyValueInput): ApplyPolicyValueResult;
+//# sourceMappingURL=applySecretsPolicy.d.ts.map

package/packages/server/dist/utils/applySecretsPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"applySecretsPolicy.d.ts","sourceRoot":"","sources":["../../src/utils/applySecretsPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AASH,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEtE,eAAO,MAAM,+BAA+B,yBAAyB,CAAC;AAEtE,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAwFD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,oBAAoB,GAAG,qBAAqB,CAsCpF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,qBAAqB,GAAG,sBAAsB,CA4DvF"}

package/packages/server/dist/utils/applySecretsPolicy.js

@@ -0,0 +1,204 @@
+/**
+ * Story 30.3 (Task 2.2): apply the three `secretsPolicy` modes to a payload
+ * before it is written into the bundle.
+ *
+ * Two operating shapes, mirroring `detectSecretsInValue` / `detectSecretsInText`:
+ *
+ *   1. `applyPolicyToValue` walks a JSON-like value (mcp config, settings.json
+ *      hooks block). For `excluded` the matched leaf is deleted from its
+ *      parent; for `placeholder` it is rewritten as `${ENV_REF_NAME}` using
+ *      `secretPlaceholderNamer`; for `included-explicit` the value is left
+ *      untouched.
+ *
+ *   2. `applyPolicyToText` walks line-oriented text (CLAUDE.md, agent body,
+ *      command body). For `excluded` the offending line is replaced with the
+ *      sentinel `<< SECRET REMOVED >>` so line numbers stay stable; for
+ *      `placeholder` every secret substring on that line is rewritten as
+ *      `${ENV_REF_NAME}`; for `included-explicit` the text is unchanged.
+ *
+ * Both return per-call counters that the caller aggregates into the
+ * `ImportApplySummary` (well, the export equivalent — same idea: surface to
+ * the user how many secrets were affected).
+ */
+import { ENV_REF_RE, SECRET_PATTERNS, shannonEntropy, } from './secretHeuristic.js';
+import { namePlaceholder } from './secretPlaceholderNamer.js';
+export const SECRET_REMOVED_TEXT_PLACEHOLDER = '<< SECRET REMOVED >>';
+const BASE64_NON_ALPHA_RE = /[0-9+/=]/;
+function matchPasses(s, pat) {
+    if (pat.minEntropy === undefined)
+        return true;
+    return shannonEntropy(s) >= pat.minEntropy && BASE64_NON_ALPHA_RE.test(s);
+}
+/** Iterate every secret substring inside `text`. */
+function* iterateSecretMatches(text) {
+    for (const pat of SECRET_PATTERNS) {
+        const re = pat.re.global ? pat.re : new RegExp(pat.re.source, pat.re.flags + 'g');
+        re.lastIndex = 0;
+        let m;
+        while ((m = re.exec(text)) !== null) {
+            const raw = m[0];
+            if (matchPasses(raw, pat)) {
+                yield { start: m.index, end: m.index + raw.length, raw, pat };
+            }
+            if (m.index === re.lastIndex)
+                re.lastIndex += 1;
+        }
+    }
+}
+function stripEnvRefs(text) {
+    return text.replace(ENV_REF_RE, '');
+}
+function containsSecret(text) {
+    const stripped = stripEnvRefs(text);
+    for (const _ of iterateSecretMatches(stripped)) {
+        return true;
+    }
+    return false;
+}
+/**
+ * Replace every secret substring inside `text` with the ENV-ref produced by
+ * the namer. Matches on the env-stripped clone first so existing `${FOO}`
+ * indirection isn't double-replaced.
+ */
+function replaceSecretsInText(text, makeName) {
+    // We need the original text positions but the secret-detection regex must
+    // not double-count existing ENV refs. Strategy: collect matches against the
+    // env-stripped clone, then translate offsets back to the original by
+    // walking through both strings in parallel.
+    const stripped = stripEnvRefs(text);
+    if (stripped === text) {
+        return rebuildText(text, makeName);
+    }
+    // When there were ENV refs, the safest fallback is to scan the original text
+    // directly. Existing `${FOO}` snippets won't match `SECRET_PATTERNS` (none of
+    // the regexes accept `{` or `}` in the middle), so direct scanning is fine.
+    return rebuildText(text, makeName);
+}
+function rebuildText(text, makeName) {
+    const matches = [];
+    for (const m of iterateSecretMatches(text)) {
+        matches.push({ start: m.start, end: m.end, raw: m.raw });
+    }
+    if (matches.length === 0)
+        return { text, replacedCount: 0 };
+    // Sort by start ascending, drop overlaps (keep first).
+    matches.sort((a, b) => a.start - b.start);
+    const nonOverlapping = [];
+    let lastEnd = -1;
+    for (const m of matches) {
+        if (m.start >= lastEnd) {
+            nonOverlapping.push(m);
+            lastEnd = m.end;
+        }
+    }
+    let out = '';
+    let cursor = 0;
+    let replaced = 0;
+    for (const m of nonOverlapping) {
+        out += text.slice(cursor, m.start);
+        out += '${' + makeName(m.raw, replaced) + '}';
+        cursor = m.end;
+        replaced += 1;
+    }
+    out += text.slice(cursor);
+    return { text: out, replacedCount: replaced };
+}
+export function applyPolicyToText(input) {
+    const { policy, domain, cardName, hookEvent, text } = input;
+    if (policy === 'included-explicit') {
+        return { text, removedCount: 0, replacedCount: 0 };
+    }
+    if (!text) {
+        return { text, removedCount: 0, replacedCount: 0 };
+    }
+    if (policy === 'excluded') {
+        // Replace each offending line with the sentinel so line numbers stay
+        // stable for downstream tools that index by line.
+        const lines = text.split(/\r?\n/);
+        let removed = 0;
+        for (let i = 0; i < lines.length; i += 1) {
+            if (containsSecret(lines[i])) {
+                lines[i] = SECRET_REMOVED_TEXT_PLACEHOLDER;
+                removed += 1;
+            }
+        }
+        return { text: lines.join('\n'), removedCount: removed, replacedCount: 0 };
+    }
+    // placeholder
+    const seenCounts = new Map();
+    const result = replaceSecretsInText(text, (_raw, idx) => {
+        const base = {
+            domain,
+            fieldPath: `body:${idx}`,
+            cardName,
+            hookEvent,
+        };
+        const baseName = namePlaceholder(base);
+        const count = seenCounts.get(baseName) ?? 0;
+        seenCounts.set(baseName, count + 1);
+        return count === 0 ? baseName : `${baseName}_${count + 1}`;
+    });
+    return { text: result.text, removedCount: 0, replacedCount: result.replacedCount };
+}
+export function applyPolicyToValue(input) {
+    const { policy, domain, cardName, hookEvent, value } = input;
+    if (policy === 'included-explicit') {
+        return { value, removedCount: 0, replacedCount: 0 };
+    }
+    const pathPrefix = input.pathPrefix ?? [];
+    let removedCount = 0;
+    let replacedCount = 0;
+    const seenCounts = new Map();
+    const transform = (v, p) => {
+        if (typeof v === 'string') {
+            const stripped = stripEnvRefs(v);
+            if (!stripped || !containsSecret(stripped)) {
+                return v;
+            }
+            if (policy === 'excluded') {
+                removedCount += 1;
+                // Return a sentinel that the caller (e.g. the mcp/hook config walker)
+                // will interpret as "delete this leaf" — strings, by themselves, can't
+                // disappear from their parent. We use the literal undefined sentinel
+                // and let the array/object handlers filter.
+                return SECRET_REMOVED_SENTINEL;
+            }
+            // placeholder
+            const baseName = namePlaceholder({
+                domain,
+                cardName,
+                hookEvent,
+                fieldPath: p.join('.'),
+            });
+            const count = seenCounts.get(baseName) ?? 0;
+            seenCounts.set(baseName, count + 1);
+            const name = count === 0 ? baseName : `${baseName}_${count + 1}`;
+            replacedCount += 1;
+            return '${' + name + '}';
+        }
+        if (Array.isArray(v)) {
+            return v
+                .map((item, i) => transform(item, [...p, String(i)]))
+                .filter((item) => item !== SECRET_REMOVED_SENTINEL);
+        }
+        if (v && typeof v === 'object') {
+            const out = {};
+            for (const [k, child] of Object.entries(v)) {
+                const next = transform(child, [...p, k]);
+                if (next !== SECRET_REMOVED_SENTINEL)
+                    out[k] = next;
+            }
+            return out;
+        }
+        return v;
+    };
+    const result = transform(value, pathPrefix);
+    // Top-level scalar might be the sentinel — flatten to undefined for callers.
+    return {
+        value: result === SECRET_REMOVED_SENTINEL ? undefined : result,
+        removedCount,
+        replacedCount,
+    };
+}
+const SECRET_REMOVED_SENTINEL = Symbol('secret-removed');
+//# sourceMappingURL=applySecretsPolicy.js.map

package/packages/server/dist/utils/applySecretsPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applySecretsPolicy.js","sourceRoot":"","sources":["../../src/utils/applySecretsPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EACL,UAAU,EACV,eAAe,EACf,cAAc,GAEf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAA6B,MAAM,6BAA6B,CAAC;AAGzF,MAAM,CAAC,MAAM,+BAA+B,GAAG,sBAAsB,CAAC;AAgCtE,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAEvC,SAAS,WAAW,CAAC,CAAS,EAAE,GAAkB;IAChD,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC9C,OAAO,cAAc,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,oDAAoD;AACpD,QAAQ,CAAC,CAAC,oBAAoB,CAAC,IAAY;IACzC,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;QAClF,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;QACjB,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACjB,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,SAAS;gBAAE,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,IAAY,EAAE,QAAgD;IAC1F,0EAA0E;IAC1E,4EAA4E;IAC5E,qEAAqE;IACrE,4CAA4C;IAC5C,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,OAAO,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,QAAgD;IACjF,MAAM,OAAO,GAAuD,EAAE,CAAC;IACvE,KAAK,MAAM,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IAE5D,uDAAuD;IACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAmB,EAAE,CAAC;IAC1C,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,EAAE,CAAC;YACvB,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACvB,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QAC/B,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACnC,GAAG,IAAI,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,GAAG,CAAC;QAC9C,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC;QACf,QAAQ,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAA2B;IAC3D,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAC5D,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QAC1B,qEAAqE;QACrE,kDAAkD;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,KAAK,CAAC,CAAC,CAAC,GAAG,+BAA+B,CAAC;gBAC3C,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IAC7E,CAAC;IAED,cAAc;IACd,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACtD,MAAM,IAAI,GAAyB;YACjC,MAAM;YACN,SAAS,EAAE,QAAQ,GAAG,EAAE;YACxB,QAAQ;YACR,SAAS;SACV,CAAC;QACF,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5C,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACpC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;IAC7D,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAA4B;IAC7D,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC7D,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACnC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IACtD,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;IAC1C,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE7C,MAAM,SAAS,GAAG,CAAC,CAAU,EAAE,CAAW,EAAW,EAAE;QACrD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,QAAQ,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3C,OAAO,CAAC,CAAC;YACX,CAAC;YACD,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC1B,YAAY,IAAI,CAAC,CAAC;gBAClB,sEAAsE;gBACtE,uEAAuE;gBACvE,qEAAqE;gBACrE,4CAA4C;gBAC5C,OAAO,uBAAuB,CAAC;YACjC,CAAC;YACD,cAAc;YACd,MAAM,QAAQ,GAAG,eAAe,CAAC;gBAC/B,MAAM;gBACN,QAAQ;gBACR,SAAS;gBACT,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;aACvB,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5C,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACjE,aAAa,IAAI,CAAC,CAAC;YACnB,OAAO,IAAI,GAAG,IAAI,GAAG,GAAG,CAAC;QAC3B,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC;iBACL,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;iBACpD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC,EAAE,CAAC;gBACtE,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACzC,IAAI,IAAI,KAAK,uBAAuB;oBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;YACtD,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC5C,6EAA6E;IAC7E,OAAO;QACL,KAAK,EAAE,MAAM,KAAK,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;QAC9D,YAAY;QACZ,aAAa;KACd,CAAC;AACJ,CAAC;AAED,MAAM,uBAAuB,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC"}

package/packages/server/dist/utils/assertNoSecretOnShared.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Story 30.1 (Task 6.2): server-side guard that escalates a secret detection
+ * to a hard `HARNESS_SECRET_ON_SHARED` block when the target file is tracked
+ * by git (`shared` verdict from `harnessShareScopeService`).
+ *
+ * Sub-spike 6.2.0 decision: option (b) — distributed at the four domain
+ * services (agent / command / hook / mcp). Rationale:
+ *   - `harnessService.write` IS a single common call site, so option (a)
+ *     would also work for the raw write path. But AC4.d carves out
+ *     domain-specific scopes (settings.json values, hook command/prompt
+ *     fields, agent frontmatter) that the single point cannot meaningfully
+ *     filter without re-parsing the file. Distributing the helper keeps each
+ *     domain's existing per-field detection in place and just adds the
+ *     "shared → block" escalation on top.
+ *
+ * The helper performs the cheap path-classification round trip
+ * (`harnessShareScopeService.evaluate` is a single `.gitignore` load + one
+ * `isIgnored()` call). User-scope writes are no-ops (no `.gitignore`
+ * involved).
+ */
+import { type HarnessScope } from '@hammoc/shared';
+export interface AssertNoSecretOnSharedInput {
+    scope: HarnessScope;
+    projectSlug?: string;
+    /** Project-relative POSIX path of the file being written (e.g. `.claude/agents/dev.md`). */
+    relativePath: string;
+    /**
+     * Pre-computed detection result from the calling service. The helper does
+     * not re-run secret detection because each service knows which fields are
+     * in-scope per AC4.d.
+     */
+    secretDetected: boolean;
+    /** Optional secret locations (line numbers / dot-paths) to surface in the error. */
+    detectedAt?: {
+        lines?: number[];
+        paths?: string[];
+    };
+}
+export declare function assertNoSecretOnShared(input: AssertNoSecretOnSharedInput): Promise<void>;
+//# sourceMappingURL=assertNoSecretOnShared.d.ts.map

package/packages/server/dist/utils/assertNoSecretOnShared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertNoSecretOnShared.d.ts","sourceRoot":"","sources":["../../src/utils/assertNoSecretOnShared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAkB,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAGnE,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,YAAY,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4FAA4F;IAC5F,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,cAAc,EAAE,OAAO,CAAC;IACxB,oFAAoF;IACpF,UAAU,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CACrD;AAED,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,2BAA2B,GACjC,OAAO,CAAC,IAAI,CAAC,CAsBf"}

package/packages/server/dist/utils/assertNoSecretOnShared.js

@@ -0,0 +1,47 @@
+/**
+ * Story 30.1 (Task 6.2): server-side guard that escalates a secret detection
+ * to a hard `HARNESS_SECRET_ON_SHARED` block when the target file is tracked
+ * by git (`shared` verdict from `harnessShareScopeService`).
+ *
+ * Sub-spike 6.2.0 decision: option (b) — distributed at the four domain
+ * services (agent / command / hook / mcp). Rationale:
+ *   - `harnessService.write` IS a single common call site, so option (a)
+ *     would also work for the raw write path. But AC4.d carves out
+ *     domain-specific scopes (settings.json values, hook command/prompt
+ *     fields, agent frontmatter) that the single point cannot meaningfully
+ *     filter without re-parsing the file. Distributing the helper keeps each
+ *     domain's existing per-field detection in place and just adds the
+ *     "shared → block" escalation on top.
+ *
+ * The helper performs the cheap path-classification round trip
+ * (`harnessShareScopeService.evaluate` is a single `.gitignore` load + one
+ * `isIgnored()` call). User-scope writes are no-ops (no `.gitignore`
+ * involved).
+ */
+import { HARNESS_ERRORS } from '@hammoc/shared';
+import { harnessShareScopeService } from '../services/harnessShareScopeService.js';
+export async function assertNoSecretOnShared(input) {
+    if (!input.secretDetected)
+        return;
+    // User scope (`~/.claude`) is not git-tracked — `.gitignore` does not apply.
+    if (input.scope !== 'project' || !input.projectSlug)
+        return;
+    const result = await harnessShareScopeService.evaluate({
+        projectSlug: input.projectSlug,
+        relativePaths: [input.relativePath],
+    });
+    const verdict = result.cards[input.relativePath];
+    // Only `shared` triggers the hard block. `local` / `fullyIgnored` keep
+    // the existing per-service acknowledgement flow.
+    if (verdict !== 'shared')
+        return;
+    const err = new Error('plaintext secret detected on a git-tracked file');
+    err.code = HARNESS_ERRORS.HARNESS_SECRET_ON_SHARED.code;
+    err.relativePath = input.relativePath;
+    if (input.detectedAt?.lines)
+        err.lines = input.detectedAt.lines;
+    if (input.detectedAt?.paths)
+        err.paths = input.detectedAt.paths;
+    throw err;
+}
+//# sourceMappingURL=assertNoSecretOnShared.js.map

package/packages/server/dist/utils/assertNoSecretOnShared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertNoSecretOnShared.js","sourceRoot":"","sources":["../../src/utils/assertNoSecretOnShared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,cAAc,EAAqB,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AAiBnF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAkC;IAElC,IAAI,CAAC,KAAK,CAAC,cAAc;QAAE,OAAO;IAClC,6EAA6E;IAC7E,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO;IAE5D,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,QAAQ,CAAC;QACrD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,aAAa,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAEjD,uEAAuE;IACvE,iDAAiD;IACjD,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO;IAEjC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,iDAAiD,CACN,CAAC;IAClE,GAAG,CAAC,IAAI,GAAG,cAAc,CAAC,wBAAwB,CAAC,IAAI,CAAC;IACxD,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACtC,IAAI,KAAK,CAAC,UAAU,EAAE,KAAK;QAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;IAChE,IAAI,KAAK,CAAC,UAAU,EAAE,KAAK;QAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;IAChE,MAAM,GAAG,CAAC;AACZ,CAAC"}

package/packages/server/dist/utils/gitignoreFilter.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Story 28.0.5 (Task 5): thin wrapper around `ignore` (kaelzhang/node-ignore).
+ *
+ * Originally introduced as preemptive infrastructure under the placeholder
+ * label "Epic 30 Story 10" (the pre-BMad-renumbering forward reference);
+ * Story 30.1 fills the call-sites (`harnessShareScopeService` + the
+ * client-side `ShareBadge` / `ModeBanner`) by consuming `loadGitignore()` +
+ * `isIgnored()` to drive the "shared vs. local vs. fully-ignored" badges on
+ * the harness workbench tree.
+ */
+import { type Ignore } from 'ignore';
+/**
+ * Load `<rootPath>/.gitignore` into an `Ignore` matcher. Missing files yield
+ * a matcher that never excludes anything (so callers can treat "no
+ * .gitignore" as "nothing is ignored" without a separate branch).
+ */
+export declare function loadGitignore(rootPath: string): Promise<Ignore>;
+/**
+ * Test a relative path against the matcher. Input paths are normalized to
+ * POSIX separators as required by `ignore`'s contract.
+ */
+export declare function isIgnored(matcher: Ignore, relativePath: string): boolean;
+//# sourceMappingURL=gitignoreFilter.d.ts.map

package/packages/server/dist/utils/gitignoreFilter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitignoreFilter.d.ts","sourceRoot":"","sources":["../../src/utils/gitignoreFilter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAsB,EAAE,KAAK,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEpD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAarE;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAGxE"}

package/packages/server/dist/utils/gitignoreFilter.js

@@ -0,0 +1,42 @@
+/**
+ * Story 28.0.5 (Task 5): thin wrapper around `ignore` (kaelzhang/node-ignore).
+ *
+ * Originally introduced as preemptive infrastructure under the placeholder
+ * label "Epic 30 Story 10" (the pre-BMad-renumbering forward reference);
+ * Story 30.1 fills the call-sites (`harnessShareScopeService` + the
+ * client-side `ShareBadge` / `ModeBanner`) by consuming `loadGitignore()` +
+ * `isIgnored()` to drive the "shared vs. local vs. fully-ignored" badges on
+ * the harness workbench tree.
+ */
+import fs from 'fs/promises';
+import path from 'path';
+import ignoreFactory from 'ignore';
+/**
+ * Load `<rootPath>/.gitignore` into an `Ignore` matcher. Missing files yield
+ * a matcher that never excludes anything (so callers can treat "no
+ * .gitignore" as "nothing is ignored" without a separate branch).
+ */
+export async function loadGitignore(rootPath) {
+    const matcher = ignoreFactory();
+    const gitignorePath = path.join(rootPath, '.gitignore');
+    try {
+        const content = await fs.readFile(gitignorePath, 'utf-8');
+        matcher.add(content);
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT') {
+            throw error;
+        }
+        // No .gitignore — return an empty matcher.
+    }
+    return matcher;
+}
+/**
+ * Test a relative path against the matcher. Input paths are normalized to
+ * POSIX separators as required by `ignore`'s contract.
+ */
+export function isIgnored(matcher, relativePath) {
+    const posix = relativePath.replace(/\\/g, '/');
+    return matcher.ignores(posix);
+}
+//# sourceMappingURL=gitignoreFilter.js.map

package/packages/server/dist/utils/gitignoreFilter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitignoreFilter.js","sourceRoot":"","sources":["../../src/utils/gitignoreFilter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,aAA8B,MAAM,QAAQ,CAAC;AAEpD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAAgB;IAClD,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,2CAA2C;IAC7C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,YAAoB;IAC7D,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC"}

package/packages/server/dist/utils/harnessBundleSchema.d.ts

@@ -0,0 +1,105 @@
+/**
+ * Story 30.3 (Task 4.2): Zod runtime validation of `manifest.json` inside the
+ * harness export/import bundle. Lives on the server because zod is a
+ * server-only dep — the shared package exposes only the TypeScript surface
+ * (`packages/shared/src/types/harnessBundle.ts`).
+ *
+ * Two boundaries call this schema:
+ *   - the bundle service when unpacking an import ZIP (AC5.c "malformed
+ *     manifest" branch)
+ *   - the controller when accepting an export request body (AC1, AC2, AC5)
+ *
+ * Both reuse the discriminator/value sets exported from `@hammoc/shared` so
+ * the schema and types stay in lockstep.
+ */
+import { z } from 'zod';
+/**
+ * Strict manifest schema — `bundleVersion` is locked to the literal 1 so
+ * future-version bundles fall through to the AC5.a "futureBundle" branch
+ * before this schema is even consulted (the import service inspects the raw
+ * JSON's version field first, then runs full Zod validation).
+ */
+export declare const bundleManifestSchema: z.ZodObject<{
+    bundleVersion: z.ZodLiteral<1>;
+    hammocVersion: z.ZodString;
+    claudeCodeSpecVersion: z.ZodUnion<readonly [z.ZodString, z.ZodNull]>;
+    createdAt: z.ZodString;
+    sourceProjectSlug: z.ZodString;
+    includes: z.ZodArray<z.ZodEnum<{
+        agents: "agents";
+        hooks: "hooks";
+        commands: "commands";
+        skills: "skills";
+        mcp: "mcp";
+        "claude-md": "claude-md";
+        bmad: "bmad";
+    }>>;
+    secretsPolicy: z.ZodEnum<{
+        excluded: "excluded";
+        placeholder: "placeholder";
+        "included-explicit": "included-explicit";
+    }>;
+    pluginDependencies: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        marketplace: z.ZodString;
+        version: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    items: z.ZodArray<z.ZodObject<{
+        domain: z.ZodEnum<{
+            agent: "agent";
+            command: "command";
+            skill: "skill";
+            mcp: "mcp";
+            hook: "hook";
+            "claude-md": "claude-md";
+            bmad: "bmad";
+        }>;
+        identity: z.ZodString;
+        relativePath: z.ZodString;
+        sourceShareScope: z.ZodEnum<{
+            local: "local";
+            shared: "shared";
+            fullyIgnored: "fullyIgnored";
+        }>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type BundleManifestParsed = z.infer<typeof bundleManifestSchema>;
+/**
+ * Loose schema used for "is this even a manifest?" detection before the
+ * strict schema runs. Lets the import service distinguish "totally garbage
+ * JSON" (no bundleVersion field at all) from "future bundle" (bundleVersion
+ * is a number outside our supported range).
+ */
+export declare const loosenedManifestSchema: z.ZodObject<{
+    bundleVersion: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const exportBundleRequestSchema: z.ZodObject<{
+    projectSlug: z.ZodString;
+    includes: z.ZodArray<z.ZodEnum<{
+        agents: "agents";
+        hooks: "hooks";
+        commands: "commands";
+        skills: "skills";
+        mcp: "mcp";
+        "claude-md": "claude-md";
+        bmad: "bmad";
+    }>>;
+    secretsPolicy: z.ZodEnum<{
+        excluded: "excluded";
+        placeholder: "placeholder";
+        "included-explicit": "included-explicit";
+    }>;
+}, z.core.$strip>;
+export declare const importApplyRequestSchema: z.ZodObject<{
+    bundleToken: z.ZodString;
+    itemActions: z.ZodRecord<z.ZodString, z.ZodEnum<{
+        rename: "rename";
+        overwrite: "overwrite";
+        skip: "skip";
+        appendSection: "appendSection";
+    }>>;
+}, z.core.$strip>;
+export declare const pluginDepsQuerySchema: z.ZodObject<{
+    projectSlug: z.ZodString;
+}, z.core.$strip>;
+//# sourceMappingURL=harnessBundleSchema.d.ts.map

package/packages/server/dist/utils/harnessBundleSchema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harnessBundleSchema.d.ts","sourceRoot":"","sources":["../../src/utils/harnessBundleSchema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA0CxB;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAU/B,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB;;iBAEjC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;iBAIpC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;iBAGnC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;iBAEhC,CAAC"}

package/packages/server/dist/utils/harnessBundleSchema.js

@@ -0,0 +1,79 @@
+/**
+ * Story 30.3 (Task 4.2): Zod runtime validation of `manifest.json` inside the
+ * harness export/import bundle. Lives on the server because zod is a
+ * server-only dep — the shared package exposes only the TypeScript surface
+ * (`packages/shared/src/types/harnessBundle.ts`).
+ *
+ * Two boundaries call this schema:
+ *   - the bundle service when unpacking an import ZIP (AC5.c "malformed
+ *     manifest" branch)
+ *   - the controller when accepting an export request body (AC1, AC2, AC5)
+ *
+ * Both reuse the discriminator/value sets exported from `@hammoc/shared` so
+ * the schema and types stay in lockstep.
+ */
+import { z } from 'zod';
+import { BUNDLE_SECTIONS, HARNESS_BUNDLE_VERSION, } from '@hammoc/shared';
+const sectionSchema = z.enum(BUNDLE_SECTIONS);
+const secretsPolicySchema = z.enum(['excluded', 'placeholder', 'included-explicit']);
+const itemDomainSchema = z.enum([
+    'claude-md',
+    'skill',
+    'mcp',
+    'hook',
+    'command',
+    'agent',
+    'bmad',
+]);
+const sourceShareScopeSchema = z.enum(['shared', 'local', 'fullyIgnored']);
+const itemActionSchema = z.enum(['overwrite', 'skip', 'rename', 'appendSection']);
+const pluginRefSchema = z.object({
+    name: z.string().min(1),
+    marketplace: z.string().min(1),
+    version: z.string().optional(),
+});
+const bundleItemSchema = z.object({
+    domain: itemDomainSchema,
+    identity: z.string().min(1),
+    relativePath: z.string().min(1),
+    sourceShareScope: sourceShareScopeSchema,
+});
+/**
+ * Strict manifest schema — `bundleVersion` is locked to the literal 1 so
+ * future-version bundles fall through to the AC5.a "futureBundle" branch
+ * before this schema is even consulted (the import service inspects the raw
+ * JSON's version field first, then runs full Zod validation).
+ */
+export const bundleManifestSchema = z.object({
+    bundleVersion: z.literal(HARNESS_BUNDLE_VERSION),
+    hammocVersion: z.string().min(1),
+    claudeCodeSpecVersion: z.union([z.string().min(1), z.null()]),
+    createdAt: z.string().min(1),
+    sourceProjectSlug: z.string().min(1),
+    includes: z.array(sectionSchema),
+    secretsPolicy: secretsPolicySchema,
+    pluginDependencies: z.array(pluginRefSchema),
+    items: z.array(bundleItemSchema),
+});
+/**
+ * Loose schema used for "is this even a manifest?" detection before the
+ * strict schema runs. Lets the import service distinguish "totally garbage
+ * JSON" (no bundleVersion field at all) from "future bundle" (bundleVersion
+ * is a number outside our supported range).
+ */
+export const loosenedManifestSchema = z.object({
+    bundleVersion: z.number().int().optional(),
+});
+export const exportBundleRequestSchema = z.object({
+    projectSlug: z.string().min(1),
+    includes: z.array(sectionSchema).min(1, 'at least one section is required'),
+    secretsPolicy: secretsPolicySchema,
+});
+export const importApplyRequestSchema = z.object({
+    bundleToken: z.string().min(1),
+    itemActions: z.record(z.string(), itemActionSchema),
+});
+export const pluginDepsQuerySchema = z.object({
+    projectSlug: z.string().min(1),
+});
+//# sourceMappingURL=harnessBundleSchema.js.map

package/packages/server/dist/utils/harnessBundleSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harnessBundleSchema.js","sourceRoot":"","sources":["../../src/utils/harnessBundleSchema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,eAAe,EACf,sBAAsB,GAMvB,MAAM,gBAAgB,CAAC;AAExB,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,eAA+D,CAAC,CAAC;AAE9F,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,mBAAmB,CAAU,CAAoC,CAAC;AAEjI,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC9B,WAAW;IACX,OAAO;IACP,KAAK;IACL,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;CACE,CAAuC,CAAC;AAElD,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAU,CAA6C,CAAC;AAEhI,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,CAAU,CAAuC,CAAC;AAEjI,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,MAAM,EAAE,gBAAgB;IACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,gBAAgB,EAAE,sBAAsB;CACzC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IAChD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;IAChC,aAAa,EAAE,mBAAmB;IAClC,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IAC5C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACjC,CAAC,CAAC;AAIH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,kCAAkC,CAAC;IAC3E,aAAa,EAAE,mBAAmB;CACnC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC;CACpD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/B,CAAC,CAAC"}