hammoc 1.4.0 → 1.6.0

package/packages/server/dist/services/harnessService.js

@@ -0,0 +1,222 @@
+/**
+ * Story 28.0.5: Harness workbench service.
+ *
+ * Domain: the project's `.claude/` subtree and the global `~/.claude/` subtree
+ * — the files that drive plugins, skills, MCP servers, hooks, commands, and
+ * subagents. Responsibilities are intentionally separated from
+ * `fileSystemService` (which serves arbitrary project files) so that path
+ * resolution, scope routing, and the structured-edit surface can evolve
+ * independently for harness consumers.
+ *
+ * Method contract surfaces (all throw typed errors from `HARNESS_ERRORS`):
+ *   list              — directory contents for a `.claude/` subtree
+ *   read              — single file read with binary detection + 1MB truncation
+ *   write             — raw write with expectedMtime / STALE_WRITE guard
+ *   patchStructured   — YAML/JSONC AST-level patch preserving comments & order
+ */
+import fs from 'fs/promises';
+import path from 'path';
+import { HARNESS_ERRORS, } from '@hammoc/shared';
+import { resolveHarnessPath } from '../utils/harnessPaths.js';
+import { isBinaryFile, getMimeType, MAX_FILE_SIZE } from '../utils/pathUtils.js';
+import { applyYamlPatch, applyJsoncPatch } from '../utils/structuredEditor.js';
+import { fileWatcherService } from './fileWatcherService.js';
+function throwMapped(code, message, extras) {
+    const err = new Error(message);
+    err.code = code;
+    if (extras)
+        Object.assign(err, extras);
+    throw err;
+}
+class HarnessService {
+    /** List entries of a harness subtree. Missing root → empty list (AC1/AC2). */
+    async list(ref) {
+        const { resolvedRoot, absolutePath } = await resolveHarnessPath(ref);
+        let stat;
+        try {
+            stat = await fs.stat(absolutePath);
+        }
+        catch (error) {
+            const code = error.code;
+            if (code === 'ENOENT') {
+                // Harness root (or any subdir) that has never been created yet —
+                // return an empty list instead of 404 so the UI can render an empty
+                // state without a blocking error.
+                return {
+                    scope: ref.scope,
+                    projectSlug: ref.projectSlug,
+                    resolvedRoot,
+                    path: ref.relativePath ?? '',
+                    entries: [],
+                };
+            }
+            if (code === 'EACCES') {
+                throwMapped(HARNESS_ERRORS.HARNESS_FORBIDDEN.code, 'permission denied');
+            }
+            throw error;
+        }
+        if (!stat.isDirectory()) {
+            throwMapped(HARNESS_ERRORS.HARNESS_NOT_A_FILE.code, 'path is not a directory');
+        }
+        const names = await fs.readdir(absolutePath);
+        const entries = [];
+        for (const name of names) {
+            try {
+                const entryPath = path.join(absolutePath, name);
+                const entryStat = await fs.stat(entryPath);
+                entries.push({
+                    name,
+                    type: entryStat.isDirectory() ? 'directory' : 'file',
+                    size: entryStat.isDirectory() ? 0 : entryStat.size,
+                    modifiedAt: entryStat.mtime.toISOString(),
+                });
+            }
+            catch {
+                // Skip broken symlinks / unstat-able entries — same policy as fileSystemService.
+                continue;
+            }
+        }
+        return {
+            scope: ref.scope,
+            projectSlug: ref.projectSlug,
+            resolvedRoot,
+            path: ref.relativePath ?? '',
+            entries,
+        };
+    }
+    /** Read a single harness file. Binary → content:null, >1MB → truncated. */
+    async read(ref) {
+        const { absolutePath } = await resolveHarnessPath(ref);
+        let stat;
+        try {
+            stat = await fs.stat(absolutePath);
+        }
+        catch (error) {
+            const code = error.code;
+            if (code === 'ENOENT') {
+                throwMapped(HARNESS_ERRORS.HARNESS_FILE_NOT_FOUND.code, 'file not found');
+            }
+            if (code === 'EACCES') {
+                throwMapped(HARNESS_ERRORS.HARNESS_FORBIDDEN.code, 'permission denied');
+            }
+            throw error;
+        }
+        if (!stat.isFile()) {
+            throwMapped(HARNESS_ERRORS.HARNESS_NOT_A_FILE.code, 'path is not a file');
+        }
+        const size = stat.size;
+        const mtime = stat.mtime.toISOString();
+        const mimeType = getMimeType(absolutePath);
+        const base = {
+            scope: ref.scope,
+            projectSlug: ref.projectSlug,
+            path: ref.relativePath ?? '',
+            size,
+            mtime,
+            mimeType,
+        };
+        if (size > 0) {
+            const binary = await isBinaryFile(absolutePath);
+            if (binary) {
+                return { ...base, content: null, isBinary: true, isTruncated: false };
+            }
+        }
+        if (size > MAX_FILE_SIZE) {
+            const handle = await fs.open(absolutePath, 'r');
+            try {
+                const buffer = Buffer.alloc(MAX_FILE_SIZE);
+                await handle.read(buffer, 0, MAX_FILE_SIZE, 0);
+                return { ...base, content: buffer.toString('utf-8'), isBinary: false, isTruncated: true };
+            }
+            finally {
+                await handle.close();
+            }
+        }
+        const content = await fs.readFile(absolutePath, 'utf-8');
+        return { ...base, content, isBinary: false, isTruncated: false };
+    }
+    /**
+     * Write a harness file with optional ETag/mtime conflict check.
+     * - expectedMtime present + file exists + mtime differs → STALE_WRITE
+     * - expectedMtime present + file missing             → STALE_WRITE (currentMtime: '')
+     * - expectedMtime absent                             → force overwrite/create
+     * - parent directory missing                         → HARNESS_PARENT_NOT_FOUND (no auto-mkdir)
+     */
+    async write(ref, body) {
+        const { absolutePath } = await resolveHarnessPath(ref);
+        const parentDir = path.dirname(absolutePath);
+        try {
+            const parentStat = await fs.stat(parentDir);
+            if (!parentStat.isDirectory()) {
+                throwMapped(HARNESS_ERRORS.HARNESS_PARENT_NOT_FOUND.code, 'parent is not a directory');
+            }
+        }
+        catch (error) {
+            const code = error.code;
+            if (code === HARNESS_ERRORS.HARNESS_PARENT_NOT_FOUND.code)
+                throw error;
+            if (code === 'ENOENT') {
+                throwMapped(HARNESS_ERRORS.HARNESS_PARENT_NOT_FOUND.code, 'parent directory not found');
+            }
+            if (code === 'EACCES') {
+                throwMapped(HARNESS_ERRORS.HARNESS_FORBIDDEN.code, 'permission denied on parent');
+            }
+            throwMapped(HARNESS_ERRORS.HARNESS_WRITE_ERROR.code, 'failed to stat parent directory');
+        }
+        if (body.expectedMtime !== undefined) {
+            try {
+                const existing = await fs.stat(absolutePath);
+                const currentMtime = existing.mtime.toISOString();
+                if (currentMtime !== body.expectedMtime) {
+                    throwMapped(HARNESS_ERRORS.HARNESS_STALE_WRITE.code, 'file changed on disk', { currentMtime });
+                }
+            }
+            catch (error) {
+                const code = error.code;
+                if (code === 'ENOENT') {
+                    // Caller asserted a specific mtime but the file is gone — treat as stale.
+                    throwMapped(HARNESS_ERRORS.HARNESS_STALE_WRITE.code, 'file missing on disk', { currentMtime: '' });
+                }
+                if (code === HARNESS_ERRORS.HARNESS_STALE_WRITE.code)
+                    throw error;
+                if (code === 'EACCES') {
+                    throwMapped(HARNESS_ERRORS.HARNESS_FORBIDDEN.code, 'permission denied');
+                }
+                // Any other stat failure: fall through and let writeFile surface it.
+            }
+        }
+        try {
+            await fs.writeFile(absolutePath, body.content, 'utf-8');
+        }
+        catch (error) {
+            const code = error.code;
+            if (code === 'EACCES') {
+                throwMapped(HARNESS_ERRORS.HARNESS_FORBIDDEN.code, 'permission denied');
+            }
+            throwMapped(HARNESS_ERRORS.HARNESS_WRITE_ERROR.code, 'failed to write file');
+        }
+        const stat = await fs.stat(absolutePath);
+        // Share the existing self-write suppression map so the harness watcher
+        // (Task 7) swallows our own-write echo on the same path.
+        fileWatcherService.noteLocalWrite(absolutePath);
+        return { success: true, size: stat.size, mtime: stat.mtime.toISOString() };
+    }
+    /**
+     * Read-patch-write an AST-level edit. Running the round trip through
+     * `write` means an external mutation that sneaks in between our read and
+     * write will surface as STALE_WRITE (AC5).
+     */
+    async patchStructured(ref, body) {
+        const current = await this.read(ref);
+        if (current.isBinary || current.content == null) {
+            throwMapped(HARNESS_ERRORS.HARNESS_PARSE_ERROR.code, 'cannot patch binary file');
+        }
+        const patched = body.format === 'yaml'
+            ? applyYamlPatch(current.content, body.ops)
+            : applyJsoncPatch(current.content, body.ops);
+        const expectedMtime = body.expectedMtime ?? current.mtime;
+        return this.write(ref, { content: patched, expectedMtime });
+    }
+}
+export const harnessService = new HarnessService();
+//# sourceMappingURL=harnessService.js.map

package/packages/server/dist/services/harnessService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harnessService.js","sourceRoot":"","sources":["../../src/services/harnessService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EACL,cAAc,GAOf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,SAAS,WAAW,CAAC,IAAY,EAAE,OAAe,EAAE,MAAgC;IAClF,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,CAAoD,CAAC;IAClF,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,MAAM;QAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,MAAM,GAAG,CAAC;AACZ,CAAC;AAED,MAAM,cAAc;IAClB,8EAA8E;IAC9E,KAAK,CAAC,IAAI,CAAC,GAAmB;QAC5B,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAErE,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,iEAAiE;gBACjE,oEAAoE;gBACpE,kCAAkC;gBAClC,OAAO;oBACL,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,WAAW,EAAE,GAAG,CAAC,WAAW;oBAC5B,YAAY;oBACZ,IAAI,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE;oBAC5B,OAAO,EAAE,EAAE;iBACZ,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,WAAW,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,WAAW,CAAC,cAAc,CAAC,kBAAkB,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAmC,EAAE,CAAC;QACnD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;gBAChD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI;oBACJ,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;oBACpD,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI;oBAClD,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE;iBAC1C,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,iFAAiF;gBACjF,SAAS;YACX,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,YAAY;YACZ,IAAI,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE;YAC5B,OAAO;SACR,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,IAAI,CAAC,GAAmB;QAC5B,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAEvD,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,WAAW,CAAC,cAAc,CAAC,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,WAAW,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,WAAW,CAAC,cAAc,CAAC,kBAAkB,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG;YACX,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,IAAI,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE;YAC5B,IAAI;YACJ,KAAK;YACL,QAAQ;SACT,CAAC;QAEF,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,CAAC;YAChD,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;YACxE,CAAC;QACH,CAAC;QAED,IAAI,IAAI,GAAG,aAAa,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;gBAC3C,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;gBAC/C,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YAC5F,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACzD,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACnE,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,CAAC,GAAmB,EAAE,IAAyB;QACxD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAEvD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC9B,WAAW,CAAC,cAAc,CAAC,wBAAwB,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;YACzF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,IAAI,KAAK,cAAc,CAAC,wBAAwB,CAAC,IAAI;gBAAE,MAAM,KAAK,CAAC;YACvE,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,WAAW,CAAC,cAAc,CAAC,wBAAwB,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;YAC1F,CAAC;YACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,WAAW,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC;YACpF,CAAC;YACD,WAAW,CAAC,cAAc,CAAC,mBAAmB,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;QAC1F,CAAC;QAED,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC7C,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;gBAClD,IAAI,YAAY,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;oBACxC,WAAW,CAAC,cAAc,CAAC,mBAAmB,CAAC,IAAI,EAAE,sBAAsB,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;gBACjG,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;gBACnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtB,0EAA0E;oBAC1E,WAAW,CAAC,cAAc,CAAC,mBAAmB,CAAC,IAAI,EAAE,sBAAsB,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;gBACrG,CAAC;gBACD,IAAI,IAAI,KAAK,cAAc,CAAC,mBAAmB,CAAC,IAAI;oBAAE,MAAM,KAAK,CAAC;gBAClE,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtB,WAAW,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;gBAC1E,CAAC;gBACD,qEAAqE;YACvE,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,WAAW,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;YAC1E,CAAC;YACD,WAAW,CAAC,cAAc,CAAC,mBAAmB,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzC,uEAAuE;QACvE,yDAAyD;QACzD,kBAAkB,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAEhD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;IAC7E,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CACnB,GAAmB,EACnB,IAAmC;QAEnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;YAChD,WAAW,CAAC,cAAc,CAAC,mBAAmB,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,KAAK,MAAM;YACpC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC;YAC3C,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAE/C,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,OAAO,CAAC,KAAK,CAAC;QAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;IAC9D,CAAC;CACF;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC"}

package/packages/server/dist/services/harnessShareScopeService.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Story 30.1 (Task 2.1): share-scope evaluator.
+ *
+ * Given a project slug and a set of project-relative POSIX paths, classify
+ * each path as `shared` / `local` / `fullyIgnored` based on the project's
+ * `.gitignore`. Also derives the project-level Mode A / Mode B classification
+ * by evaluating the virtual path `.claude/settings.json` (file may not exist
+ * physically — `isIgnored()` is a pattern test, not a stat call).
+ *
+ * Single source of truth: `gitignoreFilter.loadGitignore` + `isIgnored`. No
+ * direct `.gitignore` parsing.
+ */
+import { type HarnessShareScopeResponse } from '@hammoc/shared';
+export interface EvaluateShareScopeRequest {
+    projectSlug: string;
+    /** Project-relative POSIX paths. May include sibling files outside `.claude/` (e.g. `.mcp.json`). */
+    relativePaths: string[];
+}
+declare class HarnessShareScopeService {
+    /**
+     * Evaluate share-scope for each path + the project-level mode in one
+     * `.gitignore` load. Returns `cards: {}` if no paths were requested but
+     * still computes `mode` (so a freshly mounted workbench can render the
+     * banner before any file is asked about).
+     */
+    evaluate(req: EvaluateShareScopeRequest): Promise<HarnessShareScopeResponse>;
+    /**
+     * Story 30.7 (Task D.3): append `pattern` to `<projectRoot>/.gitignore`,
+     * creating the file if missing. Idempotent: when the trimmed pattern
+     * already appears as a non-comment line, the method returns
+     * `{ appended: false }` without writing. Used by the client's
+     * `SecretOnSharedDialog → Move to local` flow when the sibling pre-check
+     * detects that `**\/.claude/**\/*.local.*` is missing.
+     *
+     * The target file sits outside the `.claude/` whitelist that
+     * `harnessService.write` clamps to, so the method (a) resolves the
+     * canonical path via `resolveProjectGitignorePath` (a defense-in-depth
+     * helper that rejects traversal-bearing slugs) and (b) registers the
+     * write with `fileWatcherService.noteLocalWrite` directly so the chokidar
+     * watcher does not surface our own change as an external edit.
+     */
+    appendGitignorePattern(projectSlug: string, pattern: string): Promise<{
+        success: true;
+        appended: boolean;
+    }>;
+}
+export declare const harnessShareScopeService: HarnessShareScopeService;
+export declare function getProjectRootForShareScope(projectSlug: string): Promise<string>;
+export {};
+//# sourceMappingURL=harnessShareScopeService.d.ts.map

package/packages/server/dist/services/harnessShareScopeService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harnessShareScopeService.d.ts","sourceRoot":"","sources":["../../src/services/harnessShareScopeService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EAAkB,KAAK,yBAAyB,EAAmB,MAAM,gBAAgB,CAAC;AAoBjG,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,qGAAqG;IACrG,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,cAAM,wBAAwB;IAC5B;;;;;OAKG;IACG,QAAQ,CAAC,GAAG,EAAE,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAsClF;;;;;;;;;;;;;;OAcG;IACG,sBAAsB,CAC1B,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;CA+CjD;AA6BD,eAAO,MAAM,wBAAwB,0BAAiC,CAAC;AAIvE,wBAAsB,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGtF"}

package/packages/server/dist/services/harnessShareScopeService.js

@@ -0,0 +1,158 @@
+/**
+ * Story 30.1 (Task 2.1): share-scope evaluator.
+ *
+ * Given a project slug and a set of project-relative POSIX paths, classify
+ * each path as `shared` / `local` / `fullyIgnored` based on the project's
+ * `.gitignore`. Also derives the project-level Mode A / Mode B classification
+ * by evaluating the virtual path `.claude/settings.json` (file may not exist
+ * physically — `isIgnored()` is a pattern test, not a stat call).
+ *
+ * Single source of truth: `gitignoreFilter.loadGitignore` + `isIgnored`. No
+ * direct `.gitignore` parsing.
+ */
+import path from 'path';
+import fs from 'fs/promises';
+import { HARNESS_ERRORS } from '@hammoc/shared';
+import { projectService } from './projectService.js';
+import { loadGitignore, isIgnored } from '../utils/gitignoreFilter.js';
+import { resolveProjectGitignorePath } from '../utils/harnessPaths.js';
+import { fileWatcherService } from './fileWatcherService.js';
+const CLAUDE_DIR = '.claude';
+/**
+ * Virtual path used for Mode A/B classification. The file may not exist on
+ * disk — `isIgnored()` evaluates the pattern alone, so a brand-new project
+ * with an empty `.claude/` still gets a deterministic mode verdict.
+ */
+const MODE_PROBE_PATH = `${CLAUDE_DIR}/settings.json`;
+/**
+ * Probe used to detect "directory itself ignored" patterns like `.claude/`
+ * (which auto-propagates to descendants). When the directory itself is
+ * matched, every leaf gets the `fullyIgnored` verdict.
+ */
+const FULL_IGNORE_PROBE_PATH = `${CLAUDE_DIR}/`;
+class HarnessShareScopeService {
+    /**
+     * Evaluate share-scope for each path + the project-level mode in one
+     * `.gitignore` load. Returns `cards: {}` if no paths were requested but
+     * still computes `mode` (so a freshly mounted workbench can render the
+     * banner before any file is asked about).
+     */
+    async evaluate(req) {
+        if (!req.projectSlug) {
+            const err = new Error('projectSlug is required');
+            err.code = HARNESS_ERRORS.HARNESS_ROOT_MISSING.code;
+            throw err;
+        }
+        let projectRoot;
+        try {
+            projectRoot = await projectService.resolveOriginalPath(req.projectSlug);
+        }
+        catch (cause) {
+            const wrapped = new Error(`Unable to resolve project root for "${req.projectSlug}": ${cause.message}`);
+            wrapped.code = HARNESS_ERRORS.HARNESS_ROOT_MISSING.code;
+            throw wrapped;
+        }
+        const matcher = await loadGitignore(projectRoot);
+        // Mode A/B verdict: probe `.claude/settings.json`. The file may be missing
+        // — `isIgnored` is a pattern test that returns the same verdict either way.
+        const mode = isIgnored(matcher, MODE_PROBE_PATH) ? 'B' : 'A';
+        // When `.claude/` itself is matched, the directory's children all become
+        // `fullyIgnored` regardless of their own paths. We still evaluate each
+        // requested path individually so callers can mix in sibling files
+        // (e.g. `.mcp.json`) that escape the directory pattern.
+        const claudeDirIgnored = isIgnored(matcher, FULL_IGNORE_PROBE_PATH);
+        const cards = {};
+        for (const rel of req.relativePaths) {
+            cards[rel] = classifyPath(matcher, rel, claudeDirIgnored);
+        }
+        return { mode, cards };
+    }
+    /**
+     * Story 30.7 (Task D.3): append `pattern` to `<projectRoot>/.gitignore`,
+     * creating the file if missing. Idempotent: when the trimmed pattern
+     * already appears as a non-comment line, the method returns
+     * `{ appended: false }` without writing. Used by the client's
+     * `SecretOnSharedDialog → Move to local` flow when the sibling pre-check
+     * detects that `**\/.claude/**\/*.local.*` is missing.
+     *
+     * The target file sits outside the `.claude/` whitelist that
+     * `harnessService.write` clamps to, so the method (a) resolves the
+     * canonical path via `resolveProjectGitignorePath` (a defense-in-depth
+     * helper that rejects traversal-bearing slugs) and (b) registers the
+     * write with `fileWatcherService.noteLocalWrite` directly so the chokidar
+     * watcher does not surface our own change as an external edit.
+     */
+    async appendGitignorePattern(projectSlug, pattern) {
+        const trimmedPattern = pattern.trim();
+        if (trimmedPattern.length === 0) {
+            const err = new Error('pattern must be a non-empty string');
+            err.code = HARNESS_ERRORS.HARNESS_PARSE_ERROR.code;
+            throw err;
+        }
+        const { absolutePath } = await resolveProjectGitignorePath(projectSlug);
+        let existing = '';
+        try {
+            existing = await fs.readFile(absolutePath, 'utf-8');
+        }
+        catch (err) {
+            if (err.code !== 'ENOENT') {
+                throw err;
+            }
+            // File missing → create it with just the pattern below.
+        }
+        // Idempotency check: scan non-comment, non-blank lines for an exact
+        // match. Comments (lines starting with `#`) are skipped because
+        // `# **/.claude/**/*.local.*` is not the same as the live pattern.
+        const alreadyPresent = existing
+            .split(/\r?\n/)
+            .map((l) => l.trim())
+            .filter((l) => l.length > 0 && !l.startsWith('#'))
+            .some((l) => l === trimmedPattern);
+        if (alreadyPresent) {
+            return { success: true, appended: false };
+        }
+        const sep = existing.length === 0 || existing.endsWith('\n') ? '' : '\n';
+        const next = `${existing}${sep}${trimmedPattern}\n`;
+        try {
+            await fs.writeFile(absolutePath, next, 'utf-8');
+        }
+        catch (err) {
+            if (err.code === 'EACCES') {
+                const denied = new Error('permission denied on .gitignore');
+                denied.code = HARNESS_ERRORS.HARNESS_FORBIDDEN.code;
+                throw denied;
+            }
+            const wrapped = new Error('failed to write .gitignore');
+            wrapped.code = HARNESS_ERRORS.HARNESS_WRITE_ERROR.code;
+            throw wrapped;
+        }
+        fileWatcherService.noteLocalWrite(absolutePath);
+        return { success: true, appended: true };
+    }
+}
+function classifyPath(matcher, relativePath, claudeDirIgnored) {
+    // Normalize separators so Windows callers don't accidentally bypass `ignore`.
+    const posix = relativePath.replace(/\\/g, '/');
+    const fileIgnored = isIgnored(matcher, posix);
+    if (!fileIgnored) {
+        return 'shared';
+    }
+    // The path is ignored. If `.claude/` itself is the source of the rule, treat
+    // the verdict as the project-wide `fullyIgnored` state so Mode B projects
+    // get a coherent badge across every harness file.
+    if (claudeDirIgnored && isUnderClaudeDir(posix)) {
+        return 'fullyIgnored';
+    }
+    return 'local';
+}
+function isUnderClaudeDir(posixPath) {
+    return posixPath === CLAUDE_DIR || posixPath.startsWith(`${CLAUDE_DIR}/`);
+}
+export const harnessShareScopeService = new HarnessShareScopeService();
+// Re-export so consumers (e.g. the .gitignore append fallback in Task 6.4)
+// can also resolve the standard project-root path the matcher was built from.
+export async function getProjectRootForShareScope(projectSlug) {
+    const root = await projectService.resolveOriginalPath(projectSlug);
+    return path.resolve(root);
+}
+//# sourceMappingURL=harnessShareScopeService.js.map

package/packages/server/dist/services/harnessShareScopeService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harnessShareScopeService.js","sourceRoot":"","sources":["../../src/services/harnessShareScopeService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,aAAa,CAAC;AAE7B,OAAO,EAAE,cAAc,EAAmD,MAAM,gBAAgB,CAAC;AACjG,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,MAAM,UAAU,GAAG,SAAS,CAAC;AAC7B;;;;GAIG;AACH,MAAM,eAAe,GAAG,GAAG,UAAU,gBAAgB,CAAC;AACtD;;;;GAIG;AACH,MAAM,sBAAsB,GAAG,GAAG,UAAU,GAAG,CAAC;AAQhD,MAAM,wBAAwB;IAC5B;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,GAA8B;QAC3C,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,yBAAyB,CAA0B,CAAC;YAC1E,GAAG,CAAC,IAAI,GAAG,cAAc,CAAC,oBAAoB,CAAC,IAAI,CAAC;YACpD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,cAAc,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,IAAI,KAAK,CACvB,uCAAuC,GAAG,CAAC,WAAW,MAAO,KAAe,CAAC,OAAO,EAAE,CAC9D,CAAC;YAC3B,OAAO,CAAC,IAAI,GAAG,cAAc,CAAC,oBAAoB,CAAC,IAAI,CAAC;YACxD,MAAM,OAAO,CAAC;QAChB,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;QAEjD,2EAA2E;QAC3E,4EAA4E;QAC5E,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAE7D,yEAAyE;QACzE,uEAAuE;QACvE,kEAAkE;QAClE,wDAAwD;QACxD,MAAM,gBAAgB,GAAG,SAAS,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;QAEpE,MAAM,KAAK,GAA+B,EAAE,CAAC;QAC7C,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACpC,KAAK,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,sBAAsB,CAC1B,WAAmB,EACnB,OAAe;QAEf,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,oCAAoC,CAA0B,CAAC;YACrF,GAAG,CAAC,IAAI,GAAG,cAAc,CAAC,mBAAmB,CAAC,IAAI,CAAC;YACnD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,2BAA2B,CAAC,WAAW,CAAC,CAAC;QAExE,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,wDAAwD;QAC1D,CAAC;QACD,oEAAoE;QACpE,gEAAgE;QAChE,mEAAmE;QACnE,MAAM,cAAc,GAAG,QAAQ;aAC5B,KAAK,CAAC,OAAO,CAAC;aACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;aACjD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC;QACrC,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC5C,CAAC;QAED,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACzE,MAAM,IAAI,GAAG,GAAG,QAAQ,GAAG,GAAG,GAAG,cAAc,IAAI,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrD,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,iCAAiC,CAA0B,CAAC;gBACrF,MAAM,CAAC,IAAI,GAAG,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC;gBACpD,MAAM,MAAM,CAAC;YACf,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,KAAK,CAAC,4BAA4B,CAA0B,CAAC;YACjF,OAAO,CAAC,IAAI,GAAG,cAAc,CAAC,mBAAmB,CAAC,IAAI,CAAC;YACvD,MAAM,OAAO,CAAC;QAChB,CAAC;QACD,kBAAkB,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAChD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;CACF;AAED,SAAS,YAAY,CACnB,OAAe,EACf,YAAoB,EACpB,gBAAyB;IAEzB,8EAA8E;IAC9E,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAE9C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,6EAA6E;IAC7E,0EAA0E;IAC1E,kDAAkD;IAClD,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IACzC,OAAO,SAAS,KAAK,UAAU,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,wBAAwB,EAAE,CAAC;AAEvE,2EAA2E;AAC3E,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,WAAmB;IACnE,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC"}

package/packages/server/dist/services/harnessSkillService.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Story 28.2: Harness skill service.
+ *
+ * Combines three sources of `<root>/skills/<name>/` directories — the active
+ * project, the user-scope home, and every installed plugin bundle — into a
+ * single card list used by the "Harness Workbench → Skills" panel. File I/O,
+ * traversal guards, STALE_WRITE detection, and binary detection are delegated
+ * to `harnessService`. The plugin source enumerates from
+ * `installed_plugins.json` and supports both in-tree (~/.claude/plugins/...)
+ * and dev-installed (out-of-tree) install paths — the latter goes through a
+ * direct `fs` read after a manual containment check so it never escapes its
+ * own `installPath`.
+ *
+ * frontmatter parsing uses the `yaml` (eemeli) parser so the round-trip story
+ * stays consistent with `structuredEditor.ts` (no `js-yaml` for harness code).
+ */
+import { type HarnessSkillCopyRequest, type HarnessSkillCopyResponse, type HarnessSkillListResponse, type HarnessSkillReadResponse, type HarnessSkillSourceLocation, type HarnessSkillUpdateRequest } from '@hammoc/shared';
+declare class HarnessSkillService {
+    /**
+     * Enumerate skills across project / user / plugin sources and merge entries
+     * sharing the same directory name into a single card.
+     */
+    listCards(currentProjectSlug?: string): Promise<HarnessSkillListResponse>;
+    /**
+     * Read a single skill's SKILL.md plus the bundle file tree. Returns the
+     * frontmatter, the body separately, the raw text (for the Raw editor) and a
+     * flat list of bundle entries with binary / truncation flags pre-resolved.
+     */
+    readSkill(source: HarnessSkillSourceLocation): Promise<HarnessSkillReadResponse>;
+    /**
+     * Apply a frontmatter / body / raw update against an existing SKILL.md.
+     * Plugin scope is read-only — any update against a plugin source is denied
+     * with HARNESS_FORBIDDEN.
+     */
+    updateSkill(source: HarnessSkillSourceLocation, body: HarnessSkillUpdateRequest): Promise<{
+        success: true;
+        mtime: string;
+    }>;
+    /**
+     * Recursively copy a skill folder. The destination is always a project or
+     * user scope — copies *into* a plugin bundle are blocked by Zod at the
+     * controller layer, but we re-assert here as a defensive belt.
+     */
+    copySkill(req: HarnessSkillCopyRequest): Promise<HarnessSkillCopyResponse>;
+    private enumerateProjectSkills;
+    private enumerateUserSkills;
+    private enumeratePluginSkills;
+    private collectSourceFromRoot;
+    private malformedEntry;
+    private countBundle;
+    private collectBundleEntries;
+    /**
+     * Build the harnessService path reference for an editable (project or user)
+     * source. Plugin scope is rejected by the caller before this runs.
+     */
+    private refForEditableSource;
+    /**
+     * Apply a frontmatter form patch by routing through the YAML round-trip
+     * editor on the frontmatter block alone. Comments / quoting / key order are
+     * preserved exactly the same way `harnessService.patchStructured` would for
+     * a pure-YAML file — but since SKILL.md is a hybrid file, we run the patch
+     * on the extracted block and recompose the full text afterwards.
+     */
+    private applyFrontmatterPatch;
+    private resolveSkillRoot;
+    private resolvePluginInstallPath;
+}
+export declare const harnessSkillService: HarnessSkillService;
+export {};
+//# sourceMappingURL=harnessSkillService.d.ts.map

package/packages/server/dist/services/harnessSkillService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harnessSkillService.d.ts","sourceRoot":"","sources":["../../src/services/harnessSkillService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,OAAO,EAML,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAE7B,KAAK,wBAAwB,EAE7B,KAAK,wBAAwB,EAE7B,KAAK,0BAA0B,EAE/B,KAAK,yBAAyB,EAC/B,MAAM,gBAAgB,CAAC;AAmCxB,cAAM,mBAAmB;IAGvB;;;OAGG;IACG,SAAS,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IA8C/E;;;;OAIG;IACG,SAAS,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAiDtF;;;;OAIG;IACG,WAAW,CACf,MAAM,EAAE,0BAA0B,EAClC,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IA+C5C;;;;OAIG;IACG,SAAS,CAAC,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC;YAmFlE,sBAAsB;YAsBtB,mBAAmB;YAiBnB,qBAAqB;YA0DrB,qBAAqB;IAqDnC,OAAO,CAAC,cAAc;YAeR,WAAW;YAaX,oBAAoB;IAyDlC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IA2B5B;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;YAyBf,gBAAgB;YAiChB,wBAAwB;CAmBvC;AA2FD,eAAO,MAAM,mBAAmB,qBAA4B,CAAC"}