hammoc 1.4.0 → 1.6.0

package/packages/server/dist/utils/errors.js

@@ -14,6 +14,10 @@ export var SDKErrorCode;
     SDKErrorCode["NETWORK_ERROR"] = "NETWORK_ERROR";
     SDKErrorCode["INVALID_REQUEST"] = "INVALID_REQUEST";
     SDKErrorCode["CONTEXT_OVERFLOW"] = "CONTEXT_OVERFLOW";
+    // Resume rejected because thinking blocks in the latest assistant turn no
+    // longer match their original signatures (typically after the CLI restructures
+    // a long conversation on resume). Recoverable by stripping thinking blocks.
+    SDKErrorCode["RESUME_THINKING_INVALID"] = "RESUME_THINKING_INVALID";
     SDKErrorCode["SERVICE_UNAVAILABLE"] = "SERVICE_UNAVAILABLE";
     SDKErrorCode["PERMISSION_DENIED"] = "PERMISSION_DENIED";
     SDKErrorCode["INVALID_PATH"] = "INVALID_PATH";
@@ -29,6 +33,7 @@ export const SDK_ERROR_STATUS = {
     [SDKErrorCode.NETWORK_ERROR]: 503,
     [SDKErrorCode.INVALID_REQUEST]: 400,
     [SDKErrorCode.CONTEXT_OVERFLOW]: 400,
+    [SDKErrorCode.RESUME_THINKING_INVALID]: 400,
     [SDKErrorCode.SERVICE_UNAVAILABLE]: 503,
     [SDKErrorCode.PERMISSION_DENIED]: 403,
     [SDKErrorCode.INVALID_PATH]: 400,
@@ -154,6 +159,18 @@ export function parseSDKError(error, lang) {
         if (message.includes('abort') || error.name === 'AbortError') {
             return new AbortedError(error, t?.('error.aborted'));
         }
+        // Check for resume-time thinking-block signature rejection.
+        // The API rejects a resumed conversation whose latest assistant turn carries
+        // thinking blocks that no longer match their original signatures, e.g. after
+        // the CLI compacts/restructures a long conversation on resume. The message is:
+        // "`thinking` or `redacted_thinking` blocks in the latest assistant message
+        //  cannot be modified. These blocks must remain as they were..."
+        if (message.includes('thinking') &&
+            (message.includes('cannot be modified') || message.includes('must remain as they were'))) {
+            return new SDKError(error.message, SDKErrorCode.RESUME_THINKING_INVALID, {
+                originalError: error,
+            });
+        }
         // Check for context overflow / token limit errors
         if (message.includes('context window') ||
             message.includes('context length') ||

package/packages/server/dist/utils/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,OAAO,MAAM,YAAY,CAAC;AAEjC;;GAEG;AACH,MAAM,CAAN,IAAY,YAWX;AAXD,WAAY,YAAY;IACtB,mCAAmB,CAAA;IACnB,2DAA2C,CAAA;IAC3C,6DAA6C,CAAA;IAC7C,+CAA+B,CAAA;IAC/B,mDAAmC,CAAA;IACnC,qDAAqC,CAAA;IACrC,2DAA2C,CAAA;IAC3C,uDAAuC,CAAA;IACvC,6CAA6B,CAAA;IAC7B,mCAAmB,CAAA;AACrB,CAAC,EAXW,YAAY,KAAZ,YAAY,QAWvB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAiC;IAC5D,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,GAAG;IAC3B,CAAC,YAAY,CAAC,mBAAmB,CAAC,EAAE,GAAG;IACvC,CAAC,YAAY,CAAC,oBAAoB,CAAC,EAAE,GAAG;IACxC,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,GAAG;IACjC,CAAC,YAAY,CAAC,eAAe,CAAC,EAAE,GAAG;IACnC,CAAC,YAAY,CAAC,gBAAgB,CAAC,EAAE,GAAG;IACpC,CAAC,YAAY,CAAC,mBAAmB,CAAC,EAAE,GAAG;IACvC,CAAC,YAAY,CAAC,iBAAiB,CAAC,EAAE,GAAG;IACrC,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,GAAG;IAChC,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,GAAG;CAC5B,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,QAAS,SAAQ,KAAK;IACxB,IAAI,CAAe;IACnB,UAAU,CAAS;IACnB,UAAU,CAAU;IACpB,aAAa,CAAS;IAE/B,YACE,OAAe,EACf,OAAqB,YAAY,CAAC,OAAO,EACzC,OAGC;QAED,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,UAAU,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,OAAO,EAAE,aAAa,CAAC;QAE5C,8BAA8B;QAC9B,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,cAAe,SAAQ,QAAQ;IAC1C,YAAY,aAAqB,EAAE,EAAE,aAAqB,EAAE,OAAgB;QAC1E,KAAK,CACH,OAAO,IAAI,oDAAoD,EAC/D,YAAY,CAAC,mBAAmB,EAChC,EAAE,UAAU,EAAE,aAAa,EAAE,CAC9B,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,mBAAoB,SAAQ,QAAQ;IAC/C,YAAY,aAAqB,EAAE,OAAgB;QACjD,KAAK,CACH,OAAO,IAAI,iEAAiE,EAC5E,YAAY,CAAC,oBAAoB,EACjC,EAAE,aAAa,EAAE,CAClB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,QAAQ;IACxC,YAAY,aAAqB,EAAE,OAAgB;QACjD,KAAK,CACH,OAAO,IAAI,oEAAoE,EAC/E,YAAY,CAAC,aAAa,EAC1B,EAAE,aAAa,EAAE,CAClB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,gBAAiB,SAAQ,QAAQ;IACnC,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,aAAqB,EAAE,OAAgB;QAC/D,KAAK,CACH,OAAO,IAAI,iBAAiB,IAAI,EAAE,EAClC,YAAY,CAAC,YAAY,EACzB,EAAE,aAAa,EAAE,CAClB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,uBAAwB,SAAQ,QAAQ;IACnD,YAAY,aAAqB,EAAE,OAAgB;QACjD,KAAK,CACH,OAAO,IAAI,wDAAwD,EACnE,YAAY,CAAC,mBAAmB,EAChC,EAAE,aAAa,EAAE,CAClB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,QAAQ;IACxC,YAAY,aAAqB,EAAE,OAAgB;QACjD,KAAK,CACH,OAAO,IAAI,sBAAsB,EACjC,YAAY,CAAC,OAAO,EACpB,EAAE,aAAa,EAAE,CAClB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,IAAa;IACzD,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEhD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAE5C,8BAA8B;QAC9B,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC5E,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,OAAO,IAAI,cAAc,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACvE,CAAC;QAED,kCAAkC;QAClC,IACE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAClC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EACzB,CAAC;YACD,OAAO,IAAI,mBAAmB,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACnE,CAAC;QAED,2BAA2B;QAC3B,IACE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC3B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC7B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC7B,CAAC;YACD,OAAO,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC5D,CAAC;QAED,yBAAyB;QACzB,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC7D,OAAO,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,kDAAkD;QAClD,IACE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAClC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAClC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC/B,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAC9B,CAAC;YACD,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,gBAAgB,EAAE;gBAChE,aAAa,EAAE,KAAK;aACrB,CAAC,CAAC;QACL,CAAC;QAED,gCAAgC;QAChC,IAAI,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,uBAAuB,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAC7E,CAAC;QAED,+BAA+B;QAC/B,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE;YACvD,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;IACL,CAAC;IAED,2BAA2B;IAC3B,OAAO,IAAI,QAAQ,CACjB,MAAM,CAAC,KAAK,CAAC,EACb,YAAY,CAAC,OAAO,CACrB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,OAAO,MAAM,YAAY,CAAC;AAEjC;;GAEG;AACH,MAAM,CAAN,IAAY,YAeX;AAfD,WAAY,YAAY;IACtB,mCAAmB,CAAA;IACnB,2DAA2C,CAAA;IAC3C,6DAA6C,CAAA;IAC7C,+CAA+B,CAAA;IAC/B,mDAAmC,CAAA;IACnC,qDAAqC,CAAA;IACrC,0EAA0E;IAC1E,+EAA+E;IAC/E,4EAA4E;IAC5E,mEAAmD,CAAA;IACnD,2DAA2C,CAAA;IAC3C,uDAAuC,CAAA;IACvC,6CAA6B,CAAA;IAC7B,mCAAmB,CAAA;AACrB,CAAC,EAfW,YAAY,KAAZ,YAAY,QAevB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAiC;IAC5D,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,GAAG;IAC3B,CAAC,YAAY,CAAC,mBAAmB,CAAC,EAAE,GAAG;IACvC,CAAC,YAAY,CAAC,oBAAoB,CAAC,EAAE,GAAG;IACxC,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,GAAG;IACjC,CAAC,YAAY,CAAC,eAAe,CAAC,EAAE,GAAG;IACnC,CAAC,YAAY,CAAC,gBAAgB,CAAC,EAAE,GAAG;IACpC,CAAC,YAAY,CAAC,uBAAuB,CAAC,EAAE,GAAG;IAC3C,CAAC,YAAY,CAAC,mBAAmB,CAAC,EAAE,GAAG;IACvC,CAAC,YAAY,CAAC,iBAAiB,CAAC,EAAE,GAAG;IACrC,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,GAAG;IAChC,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,GAAG;CAC5B,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,QAAS,SAAQ,KAAK;IACxB,IAAI,CAAe;IACnB,UAAU,CAAS;IACnB,UAAU,CAAU;IACpB,aAAa,CAAS;IAE/B,YACE,OAAe,EACf,OAAqB,YAAY,CAAC,OAAO,EACzC,OAGC;QAED,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,UAAU,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,OAAO,EAAE,aAAa,CAAC;QAE5C,8BAA8B;QAC9B,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,cAAe,SAAQ,QAAQ;IAC1C,YAAY,aAAqB,EAAE,EAAE,aAAqB,EAAE,OAAgB;QAC1E,KAAK,CACH,OAAO,IAAI,oDAAoD,EAC/D,YAAY,CAAC,mBAAmB,EAChC,EAAE,UAAU,EAAE,aAAa,EAAE,CAC9B,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,mBAAoB,SAAQ,QAAQ;IAC/C,YAAY,aAAqB,EAAE,OAAgB;QACjD,KAAK,CACH,OAAO,IAAI,iEAAiE,EAC5E,YAAY,CAAC,oBAAoB,EACjC,EAAE,aAAa,EAAE,CAClB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,QAAQ;IACxC,YAAY,aAAqB,EAAE,OAAgB;QACjD,KAAK,CACH,OAAO,IAAI,oEAAoE,EAC/E,YAAY,CAAC,aAAa,EAC1B,EAAE,aAAa,EAAE,CAClB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,gBAAiB,SAAQ,QAAQ;IACnC,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,aAAqB,EAAE,OAAgB;QAC/D,KAAK,CACH,OAAO,IAAI,iBAAiB,IAAI,EAAE,EAClC,YAAY,CAAC,YAAY,EACzB,EAAE,aAAa,EAAE,CAClB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,uBAAwB,SAAQ,QAAQ;IACnD,YAAY,aAAqB,EAAE,OAAgB;QACjD,KAAK,CACH,OAAO,IAAI,wDAAwD,EACnE,YAAY,CAAC,mBAAmB,EAChC,EAAE,aAAa,EAAE,CAClB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,QAAQ;IACxC,YAAY,aAAqB,EAAE,OAAgB;QACjD,KAAK,CACH,OAAO,IAAI,sBAAsB,EACjC,YAAY,CAAC,OAAO,EACpB,EAAE,aAAa,EAAE,CAClB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,IAAa;IACzD,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEhD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAE5C,8BAA8B;QAC9B,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC5E,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,OAAO,IAAI,cAAc,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACvE,CAAC;QAED,kCAAkC;QAClC,IACE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAClC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EACzB,CAAC;YACD,OAAO,IAAI,mBAAmB,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACnE,CAAC;QAED,2BAA2B;QAC3B,IACE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC3B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC7B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC7B,CAAC;YACD,OAAO,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC5D,CAAC;QAED,yBAAyB;QACzB,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC7D,OAAO,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,4DAA4D;QAC5D,6EAA6E;QAC7E,6EAA6E;QAC7E,+EAA+E;QAC/E,4EAA4E;QAC5E,iEAAiE;QACjE,IACE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC5B,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,EACxF,CAAC;YACD,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,uBAAuB,EAAE;gBACvE,aAAa,EAAE,KAAK;aACrB,CAAC,CAAC;QACL,CAAC;QAED,kDAAkD;QAClD,IACE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAClC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAClC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC/B,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAC9B,CAAC;YACD,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,gBAAgB,EAAE;gBAChE,aAAa,EAAE,KAAK;aACrB,CAAC,CAAC;QACL,CAAC;QAED,gCAAgC;QAChC,IAAI,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,uBAAuB,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAC7E,CAAC;QAED,+BAA+B;QAC/B,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE;YACvD,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;IACL,CAAC;IAED,2BAA2B;IAC3B,OAAO,IAAI,QAAQ,CACjB,MAAM,CAAC,KAAK,CAAC,EACb,YAAY,CAAC,OAAO,CACrB,CAAC;AACJ,CAAC"}

package/packages/server/dist/utils/gitignoreFilter.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Story 28.0.5 (Task 5): thin wrapper around `ignore` (kaelzhang/node-ignore).
+ *
+ * Originally introduced as preemptive infrastructure under the placeholder
+ * label "Epic 30 Story 10" (the pre-BMad-renumbering forward reference);
+ * Story 30.1 fills the call-sites (`harnessShareScopeService` + the
+ * client-side `ShareBadge` / `ModeBanner`) by consuming `loadGitignore()` +
+ * `isIgnored()` to drive the "shared vs. local vs. fully-ignored" badges on
+ * the harness workbench tree.
+ */
+import { type Ignore } from 'ignore';
+/**
+ * Load `<rootPath>/.gitignore` into an `Ignore` matcher. Missing files yield
+ * a matcher that never excludes anything (so callers can treat "no
+ * .gitignore" as "nothing is ignored" without a separate branch).
+ */
+export declare function loadGitignore(rootPath: string): Promise<Ignore>;
+/**
+ * Test a relative path against the matcher. Input paths are normalized to
+ * POSIX separators as required by `ignore`'s contract.
+ */
+export declare function isIgnored(matcher: Ignore, relativePath: string): boolean;
+//# sourceMappingURL=gitignoreFilter.d.ts.map

package/packages/server/dist/utils/gitignoreFilter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitignoreFilter.d.ts","sourceRoot":"","sources":["../../src/utils/gitignoreFilter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAsB,EAAE,KAAK,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEpD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAarE;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAGxE"}

package/packages/server/dist/utils/gitignoreFilter.js

@@ -0,0 +1,42 @@
+/**
+ * Story 28.0.5 (Task 5): thin wrapper around `ignore` (kaelzhang/node-ignore).
+ *
+ * Originally introduced as preemptive infrastructure under the placeholder
+ * label "Epic 30 Story 10" (the pre-BMad-renumbering forward reference);
+ * Story 30.1 fills the call-sites (`harnessShareScopeService` + the
+ * client-side `ShareBadge` / `ModeBanner`) by consuming `loadGitignore()` +
+ * `isIgnored()` to drive the "shared vs. local vs. fully-ignored" badges on
+ * the harness workbench tree.
+ */
+import fs from 'fs/promises';
+import path from 'path';
+import ignoreFactory from 'ignore';
+/**
+ * Load `<rootPath>/.gitignore` into an `Ignore` matcher. Missing files yield
+ * a matcher that never excludes anything (so callers can treat "no
+ * .gitignore" as "nothing is ignored" without a separate branch).
+ */
+export async function loadGitignore(rootPath) {
+    const matcher = ignoreFactory();
+    const gitignorePath = path.join(rootPath, '.gitignore');
+    try {
+        const content = await fs.readFile(gitignorePath, 'utf-8');
+        matcher.add(content);
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT') {
+            throw error;
+        }
+        // No .gitignore — return an empty matcher.
+    }
+    return matcher;
+}
+/**
+ * Test a relative path against the matcher. Input paths are normalized to
+ * POSIX separators as required by `ignore`'s contract.
+ */
+export function isIgnored(matcher, relativePath) {
+    const posix = relativePath.replace(/\\/g, '/');
+    return matcher.ignores(posix);
+}
+//# sourceMappingURL=gitignoreFilter.js.map

package/packages/server/dist/utils/gitignoreFilter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitignoreFilter.js","sourceRoot":"","sources":["../../src/utils/gitignoreFilter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,aAA8B,MAAM,QAAQ,CAAC;AAEpD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAAgB;IAClD,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,2CAA2C;IAC7C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,YAAoB;IAC7D,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC"}

package/packages/server/dist/utils/harnessBundleSchema.d.ts

@@ -0,0 +1,107 @@
+/**
+ * Story 30.3 (Task 4.2): Zod runtime validation of `manifest.json` inside the
+ * harness export/import bundle. Lives on the server because zod is a
+ * server-only dep — the shared package exposes only the TypeScript surface
+ * (`packages/shared/src/types/harnessBundle.ts`).
+ *
+ * Two boundaries call this schema:
+ *   - the bundle service when unpacking an import ZIP (AC5.c "malformed
+ *     manifest" branch)
+ *   - the controller when accepting an export request body (AC1, AC2, AC5)
+ *
+ * Both reuse the discriminator/value sets exported from `@hammoc/shared` so
+ * the schema and types stay in lockstep.
+ */
+import { z } from 'zod';
+/**
+ * Strict manifest schema — `bundleVersion` is locked to the literal 1 so
+ * future-version bundles fall through to the AC5.a "futureBundle" branch
+ * before this schema is even consulted (the import service inspects the raw
+ * JSON's version field first, then runs full Zod validation).
+ *
+ * `includes` is intentionally LOOSE (`z.array(z.string())`) rather than
+ * `z.array(sectionSchema)` so a `bundleVersion === 1` manifest carrying a
+ * future-domain stranger section (e.g. `['claude-md', 'future-section']`)
+ * still parses. The import service's `computePreview` then surfaces unknown
+ * sections via `preview.unknownSections` per AC5.b instead of bailing with
+ * `compatibility: 'malformed'`. Export-request validation
+ * (`exportBundleRequestSchema`) keeps `sectionSchema` strict — we never
+ * accept unknown sections from outbound callers, only tolerate them
+ * inbound.
+ */
+export declare const bundleManifestSchema: z.ZodObject<{
+    bundleVersion: z.ZodLiteral<1>;
+    hammocVersion: z.ZodString;
+    claudeCodeSpecVersion: z.ZodUnion<readonly [z.ZodString, z.ZodNull]>;
+    createdAt: z.ZodString;
+    sourceProjectSlug: z.ZodString;
+    includes: z.ZodArray<z.ZodString>;
+    secretsPolicy: z.ZodEnum<{
+        excluded: "excluded";
+        placeholder: "placeholder";
+        "included-explicit": "included-explicit";
+    }>;
+    pluginDependencies: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        marketplace: z.ZodString;
+        version: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    items: z.ZodArray<z.ZodObject<{
+        domain: z.ZodEnum<{
+            agent: "agent";
+            command: "command";
+            skill: "skill";
+            "claude-md": "claude-md";
+            mcp: "mcp";
+            hook: "hook";
+            bmad: "bmad";
+        }>;
+        identity: z.ZodString;
+        relativePath: z.ZodString;
+        sourceShareScope: z.ZodEnum<{
+            local: "local";
+            shared: "shared";
+            fullyIgnored: "fullyIgnored";
+        }>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type BundleManifestParsed = z.infer<typeof bundleManifestSchema>;
+/**
+ * Loose schema used for "is this even a manifest?" detection before the
+ * strict schema runs. Lets the import service distinguish "totally garbage
+ * JSON" (no bundleVersion field at all) from "future bundle" (bundleVersion
+ * is a number outside our supported range).
+ */
+export declare const loosenedManifestSchema: z.ZodObject<{
+    bundleVersion: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const exportBundleRequestSchema: z.ZodObject<{
+    projectSlug: z.ZodString;
+    includes: z.ZodArray<z.ZodEnum<{
+        agents: "agents";
+        hooks: "hooks";
+        skills: "skills";
+        commands: "commands";
+        "claude-md": "claude-md";
+        mcp: "mcp";
+        bmad: "bmad";
+    }>>;
+    secretsPolicy: z.ZodEnum<{
+        excluded: "excluded";
+        placeholder: "placeholder";
+        "included-explicit": "included-explicit";
+    }>;
+}, z.core.$strip>;
+export declare const importApplyRequestSchema: z.ZodObject<{
+    bundleToken: z.ZodString;
+    itemActions: z.ZodRecord<z.ZodString, z.ZodEnum<{
+        rename: "rename";
+        overwrite: "overwrite";
+        skip: "skip";
+        appendSection: "appendSection";
+    }>>;
+}, z.core.$strip>;
+export declare const pluginDepsQuerySchema: z.ZodObject<{
+    projectSlug: z.ZodString;
+}, z.core.$strip>;
+//# sourceMappingURL=harnessBundleSchema.d.ts.map

package/packages/server/dist/utils/harnessBundleSchema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harnessBundleSchema.d.ts","sourceRoot":"","sources":["../../src/utils/harnessBundleSchema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA0CxB;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAU/B,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB;;iBAEjC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;iBAIpC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;iBAGnC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;iBAEhC,CAAC"}

package/packages/server/dist/utils/harnessBundleSchema.js

@@ -0,0 +1,89 @@
+/**
+ * Story 30.3 (Task 4.2): Zod runtime validation of `manifest.json` inside the
+ * harness export/import bundle. Lives on the server because zod is a
+ * server-only dep — the shared package exposes only the TypeScript surface
+ * (`packages/shared/src/types/harnessBundle.ts`).
+ *
+ * Two boundaries call this schema:
+ *   - the bundle service when unpacking an import ZIP (AC5.c "malformed
+ *     manifest" branch)
+ *   - the controller when accepting an export request body (AC1, AC2, AC5)
+ *
+ * Both reuse the discriminator/value sets exported from `@hammoc/shared` so
+ * the schema and types stay in lockstep.
+ */
+import { z } from 'zod';
+import { BUNDLE_SECTIONS, HARNESS_BUNDLE_VERSION, } from '@hammoc/shared';
+const sectionSchema = z.enum(BUNDLE_SECTIONS);
+const secretsPolicySchema = z.enum(['excluded', 'placeholder', 'included-explicit']);
+const itemDomainSchema = z.enum([
+    'claude-md',
+    'skill',
+    'mcp',
+    'hook',
+    'command',
+    'agent',
+    'bmad',
+]);
+const sourceShareScopeSchema = z.enum(['shared', 'local', 'fullyIgnored']);
+const itemActionSchema = z.enum(['overwrite', 'skip', 'rename', 'appendSection']);
+const pluginRefSchema = z.object({
+    name: z.string().min(1),
+    marketplace: z.string().min(1),
+    version: z.string().optional(),
+});
+const bundleItemSchema = z.object({
+    domain: itemDomainSchema,
+    identity: z.string().min(1),
+    relativePath: z.string().min(1),
+    sourceShareScope: sourceShareScopeSchema,
+});
+/**
+ * Strict manifest schema — `bundleVersion` is locked to the literal 1 so
+ * future-version bundles fall through to the AC5.a "futureBundle" branch
+ * before this schema is even consulted (the import service inspects the raw
+ * JSON's version field first, then runs full Zod validation).
+ *
+ * `includes` is intentionally LOOSE (`z.array(z.string())`) rather than
+ * `z.array(sectionSchema)` so a `bundleVersion === 1` manifest carrying a
+ * future-domain stranger section (e.g. `['claude-md', 'future-section']`)
+ * still parses. The import service's `computePreview` then surfaces unknown
+ * sections via `preview.unknownSections` per AC5.b instead of bailing with
+ * `compatibility: 'malformed'`. Export-request validation
+ * (`exportBundleRequestSchema`) keeps `sectionSchema` strict — we never
+ * accept unknown sections from outbound callers, only tolerate them
+ * inbound.
+ */
+export const bundleManifestSchema = z.object({
+    bundleVersion: z.literal(HARNESS_BUNDLE_VERSION),
+    hammocVersion: z.string().min(1),
+    claudeCodeSpecVersion: z.union([z.string().min(1), z.null()]),
+    createdAt: z.string().min(1),
+    sourceProjectSlug: z.string().min(1),
+    includes: z.array(z.string().min(1)),
+    secretsPolicy: secretsPolicySchema,
+    pluginDependencies: z.array(pluginRefSchema),
+    items: z.array(bundleItemSchema),
+});
+/**
+ * Loose schema used for "is this even a manifest?" detection before the
+ * strict schema runs. Lets the import service distinguish "totally garbage
+ * JSON" (no bundleVersion field at all) from "future bundle" (bundleVersion
+ * is a number outside our supported range).
+ */
+export const loosenedManifestSchema = z.object({
+    bundleVersion: z.number().int().optional(),
+});
+export const exportBundleRequestSchema = z.object({
+    projectSlug: z.string().min(1),
+    includes: z.array(sectionSchema).min(1, 'at least one section is required'),
+    secretsPolicy: secretsPolicySchema,
+});
+export const importApplyRequestSchema = z.object({
+    bundleToken: z.string().min(1),
+    itemActions: z.record(z.string(), itemActionSchema),
+});
+export const pluginDepsQuerySchema = z.object({
+    projectSlug: z.string().min(1),
+});
+//# sourceMappingURL=harnessBundleSchema.js.map

package/packages/server/dist/utils/harnessBundleSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harnessBundleSchema.js","sourceRoot":"","sources":["../../src/utils/harnessBundleSchema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,eAAe,EACf,sBAAsB,GAMvB,MAAM,gBAAgB,CAAC;AAExB,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,eAA+D,CAAC,CAAC;AAE9F,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,mBAAmB,CAAU,CAAoC,CAAC;AAEjI,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC9B,WAAW;IACX,OAAO;IACP,KAAK;IACL,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;CACE,CAAuC,CAAC;AAElD,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAU,CAA6C,CAAC;AAEhI,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,CAAU,CAAuC,CAAC;AAEjI,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,MAAM,EAAE,gBAAgB;IACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,gBAAgB,EAAE,sBAAsB;CACzC,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IAChD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpC,aAAa,EAAE,mBAAmB;IAClC,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IAC5C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACjC,CAAC,CAAC;AAIH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,kCAAkC,CAAC;IAC3E,aAAa,EAAE,mBAAmB;CACnC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC;CACpD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/B,CAAC,CAAC"}

package/packages/server/dist/utils/harnessPaths.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Story 28.0.5: Harness workbench path resolver.
+ *
+ * Resolves `~/.claude` (user scope) and `<projectRoot>/.claude` (project scope)
+ * into absolute paths and enforces that any relative path requested by the
+ * caller stays inside the resolved root. Every entry point into `harnessService`
+ * MUST route through `resolveHarnessPath` so that Windows/POSIX separator
+ * mixing, drive letters, UNC paths, and null-byte inputs cannot escape the
+ * subtree.
+ */
+import { type HarnessPathRef } from '@hammoc/shared';
+/** Return the absolute path to the user-scope harness root (`~/.claude`). */
+export declare function getUserHarnessRoot(): string;
+/** Return the absolute path to the project-scope harness root (`<project>/.claude`). */
+export declare function getProjectHarnessRoot(projectSlug: string): Promise<string>;
+export interface ResolvedHarnessPath {
+    resolvedRoot: string;
+    absolutePath: string;
+}
+/**
+ * Resolve a `HarnessPathRef` to an absolute path, guaranteed to sit inside the
+ * resolved root. Throws `HARNESS_PATH_DENIED` for any traversal attempt.
+ */
+export declare function resolveHarnessPath(ref: HarnessPathRef): Promise<ResolvedHarnessPath>;
+/**
+ * Story 29.1 (AC6): resolve the project-root `<projectRoot>/CLAUDE.md` path —
+ * the single file in the harness workbench whose location sits OUTSIDE the
+ * project's `.claude/` subtree, so `resolveHarnessPath` would reject it as a
+ * traversal. This helper accepts only `projectSlug` (no caller-supplied
+ * relative path) and returns the canonical CLAUDE.md location alongside the
+ * project root, so traversal is impossible by construction.
+ */
+export declare function resolveProjectClaudeMdPath(projectSlug: string): Promise<ResolvedHarnessPath>;
+/**
+ * Story 30.7 (Task A.5): resolve the project-root `<projectRoot>/.gitignore`
+ * path. Like `resolveProjectClaudeMdPath`, `.gitignore` sits outside the
+ * `.claude/` subtree, so `resolveHarnessPath` cannot reach it. This helper
+ * accepts only `projectSlug` (no caller-supplied relative path), so traversal
+ * is impossible by construction. Used by
+ * `harnessShareScopeService.appendGitignorePattern()` to safely append
+ * patterns like `**\/.claude/**\/*.local.*` when the sibling-save flow detects
+ * the pattern is missing.
+ */
+export declare function resolveProjectGitignorePath(projectSlug: string): Promise<ResolvedHarnessPath>;
+/**
+ * Story 31.1 (Task A.1): resolve the project-root
+ * `<projectRoot>/.bmad-core/core-config.yaml` path. Like
+ * `resolveProjectClaudeMdPath` / `resolveProjectGitignorePath`, the
+ * `.bmad-core/` tree sits OUTSIDE the project's `.claude/` subtree, so
+ * `resolveHarnessPath` would reject it as a traversal. This helper accepts
+ * only `projectSlug` (no caller-supplied relative path), so traversal is
+ * impossible by construction. Used by `bmadCoreConfigService` to read/patch
+ * the single config file the BMad config form edits.
+ */
+export declare function resolveBmadCoreConfigPath(projectSlug: string): Promise<ResolvedHarnessPath>;
+/**
+ * Story 31.2 (Task A.1): resolve the context-builder manifest path
+ * `<projectRoot>/.hammoc/context-builder.json`. Like the `.bmad-core/`
+ * resolver, the `.hammoc/` tree sits OUTSIDE the project's `.claude/` subtree,
+ * so `resolveHarnessPath` would reject it as a traversal. Accepts only
+ * `projectSlug` (no caller-supplied relative path), so traversal is impossible
+ * by construction. Used by `contextBuilderService` as the single manifest R/W
+ * chokepoint (no other module touches this path via `fs`).
+ */
+export declare function resolveContextBuilderManifestPath(projectSlug: string): Promise<ResolvedHarnessPath>;
+/**
+ * Story 31.2 (Task A.1): resolve the generated script path
+ * `<projectRoot>/.hammoc/hooks/context-builder.mjs`. Same traversal-proof
+ * construction as `resolveContextBuilderManifestPath`. The generated `.mjs`
+ * runs standalone at every session start, assembling the `additionalContext`
+ * JSON the SessionStart hook emits.
+ */
+export declare function resolveContextBuilderScriptPath(projectSlug: string): Promise<ResolvedHarnessPath>;
+//# sourceMappingURL=harnessPaths.d.ts.map

package/packages/server/dist/utils/harnessPaths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harnessPaths.d.ts","sourceRoot":"","sources":["../../src/utils/harnessPaths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAWrE,6EAA6E;AAC7E,wBAAgB,kBAAkB,IAAI,MAAM,CAO3C;AAED,wFAAwF;AACxF,wBAAsB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBhF;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAwC1F;AAED;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAyBlG;AAED;;;;;;;;;GASG;AACH,wBAAsB,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAwBnG;AAED;;;;;;;;;GASG;AACH,wBAAsB,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAwBjG;AAED;;;;;;;;GAQG;AACH,wBAAsB,iCAAiC,CACrD,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,mBAAmB,CAAC,CAI9B;AAED;;;;;;GAMG;AACH,wBAAsB,+BAA+B,CACnD,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,mBAAmB,CAAC,CAI9B"}