harnessed 3.0.2 → 3.0.3

package/dist/cli.mjs

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { execSync, spawnSync, spawn } from 'child_process';
-import { writeFileSync, existsSync, readFileSync, mkdirSync, appendFileSync, readdirSync } from 'fs';
-import { resolve, join, dirname, relative } from 'path';
+import { existsSync, mkdirSync, renameSync, writeFileSync, readFileSync, appendFileSync, readdirSync } from 'fs';
+import { join, resolve, dirname, relative } from 'path';
+import { homedir } from 'os';
 import { Type } from '@sinclair/typebox';
 import { Value } from '@sinclair/typebox/value';
 import { LineCounter, parseDocument, parse, isSeq, isScalar } from 'yaml';
-import { homedir } from 'os';
 import { readFile, readdir, unlink, writeFile, stat, rm, cp, access, mkdir, rename } from 'fs/promises';
 import lockfile from 'proper-lockfile';
 import { Command } from 'commander';
@@ -78,6 +78,46 @@ var init_origin_check = __esm({
   "src/cli/lib/origin-check.ts"() {
   }
 });
+function getHarnessedRoot() {
+  const override = process.env.HARNESSED_ROOT_OVERRIDE;
+  if (override !== void 0 && override !== "") return override;
+  return join(homedir(), ".claude", "harnessed");
+}
+function harnessedSubdir(name) {
+  return join(getHarnessedRoot(), name);
+}
+function harnessedFile(name) {
+  return join(getHarnessedRoot(), name);
+}
+function migrateLegacyHarnessedRoot() {
+  const legacyRoot = join(homedir(), ".harnessed");
+  const newRoot = join(homedir(), ".claude", "harnessed");
+  const claudeParent = join(homedir(), ".claude");
+  if (!existsSync(legacyRoot)) return;
+  if (!existsSync(newRoot)) {
+    mkdirSync(claudeParent, { recursive: true });
+    renameSync(legacyRoot, newRoot);
+    console.error(
+      `[harnessed] migrated legacy state directory ${legacyRoot} \u2192 ${newRoot} (v3.0.3 path change)`
+    );
+    return;
+  }
+  const safetyBak = join(homedir(), ".harnessed.legacy-bak");
+  if (existsSync(safetyBak)) {
+    console.error(
+      `[harnessed] WARN: ${legacyRoot} reappeared after a prior migration (existing bak at ${safetyBak}); leaving in place \u2014 inspect manually if needed`
+    );
+    return;
+  }
+  renameSync(legacyRoot, safetyBak);
+  console.error(
+    `[harnessed] both ${legacyRoot} and ${newRoot} existed \u2014 legacy directory preserved at ${safetyBak} (review manually if you need data from it; v3.0.3 path change)`
+  );
+}
+var init_harnessedRoot = __esm({
+  "src/installers/lib/harnessedRoot.ts"() {
+  }
+});
 
 // src/cli/lib/probe-gstack.ts
 var probe_gstack_exports = {};
@@ -408,7 +448,7 @@ function writeCheckpoint(c, customPath) {
     throw new CheckpointWriteError(`Schema validation failed: ${errs}`);
   }
   const enforced = enforceBudget(c);
-  const path = `.harnessed/checkpoints/${enforced.phase}.json`;
+  const path = join(harnessedSubdir("checkpoints"), `${enforced.phase}.json`);
   mkdirSync(dirname(path), { recursive: true });
   writeFileSync(path, JSON.stringify(enforced, null, 2), "utf8");
   return path;
@@ -416,6 +456,7 @@ function writeCheckpoint(c, customPath) {
 var BUDGET_TOKEN, CheckpointTooLargeError, CheckpointWriteError;
 var init_template = __esm({
   "src/checkpoint/template.ts"() {
+    init_harnessedRoot();
     init_schema();
     BUDGET_TOKEN = 1e3;
     CheckpointTooLargeError = class extends Error {
@@ -579,10 +620,25 @@ var init_check_planning_with_files = __esm({
     REMEDIATION = "install via Claude Code plugin marketplace: `claude plugin install planning-with-files` (requires >=2.2.0 per R20.15 + D-15)";
   }
 });
+function statePath() {
+  return harnessedFile("current-workflow.json");
+}
+function lockTarget() {
+  return getHarnessedRoot();
+}
+function lockOpts() {
+  return {
+    stale: 1e4,
+    retries: { retries: 3, factor: 2, minTimeout: 100 },
+    lockfilePath: harnessedFile(".lock")
+  };
+}
 async function withLock(fn) {
+  const target = lockTarget();
+  await mkdir(target, { recursive: true });
   let release;
   try {
-    release = await lockfile.lock(LOCK_TARGET, LOCK_OPTS);
+    release = await lockfile.lock(target, lockOpts());
   } catch (e) {
     if (e.code === "ELOCKED") throw new LockHeldError();
     throw e;
@@ -596,7 +652,7 @@ async function withLock(fn) {
 async function readCurrentWorkflow() {
   let raw;
   try {
-    raw = await readFile(STATE_PATH, "utf8");
+    raw = await readFile(statePath(), "utf8");
   } catch {
     return null;
   }
@@ -617,9 +673,10 @@ async function writeCurrentWorkflow(s) {
     const errs = [...Value.Errors(CurrentWorkflowV1, s)].map((e) => e.message).join("; ");
     throw new WorkflowStateError(`current-workflow schema validation failed: ${errs}`);
   }
-  await mkdir(dirname(STATE_PATH), { recursive: true });
+  const path = statePath();
+  await mkdir(dirname(path), { recursive: true });
   await withLock(async () => {
-    await writeFile(STATE_PATH, JSON.stringify(s, null, 2), "utf8");
+    await writeFile(path, JSON.stringify(s, null, 2), "utf8");
   });
 }
 async function activate(phase, checkpointPath = null) {
@@ -636,18 +693,12 @@ async function complete() {
   if (!s) return;
   await writeCurrentWorkflow({ ...s, status: "complete", completed_at: (/* @__PURE__ */ new Date()).toISOString() });
 }
-var STATE_PATH, LOCK_TARGET, LOCK_OPTS, WorkflowStateError, LockHeldError;
+var WorkflowStateError, LockHeldError;
 var init_state = __esm({
   "src/checkpoint/state.ts"() {
+    init_harnessedRoot();
     init_schemaVersion();
     init_schema();
-    STATE_PATH = ".harnessed/current-workflow.json";
-    LOCK_TARGET = ".harnessed";
-    LOCK_OPTS = {
-      stale: 1e4,
-      retries: { retries: 3, factor: 2, minTimeout: 100 },
-      lockfilePath: ".harnessed/.lock"
-    };
     WorkflowStateError = class extends Error {
       constructor(message) {
         super(message);
@@ -657,7 +708,7 @@ var init_state = __esm({
     LockHeldError = class _LockHeldError extends Error {
       constructor() {
         super(
-          "another harnessed process holds the lock at .harnessed/.lock \u2014 wait or kill stale process (try: harnessed status)"
+          `another harnessed process holds the lock at ${harnessedFile(".lock")} \u2014 wait or kill stale process (try: harnessed status)`
         );
         this.name = "LockHeldError";
         Object.setPrototypeOf(this, _LockHeldError.prototype);
@@ -740,7 +791,10 @@ __export(resume_exports, {
 async function runResume() {
   const current = await readCurrentWorkflow();
   if (!current) {
-    return { status: "no-paused-phase", error: "no .harnessed/current-workflow.json found" };
+    return {
+      status: "no-paused-phase",
+      error: "no current-workflow.json found under <harnessed-root>"
+    };
   }
   if (current.status !== "paused") {
     return {
@@ -793,7 +847,7 @@ var init_resume = __esm({
 
 // package.json
 var package_default = {
-  version: "3.0.2"};
+  version: "3.0.3"};
 
 // src/manifest/errors.ts
 function instancePathToKeyPath(instancePath) {
@@ -1546,7 +1600,12 @@ audited ${yamls.length} manifest${yamls.length === 1 ? "" : "s"} \u2014 ${findin
     process.exit(errorCount > 0 ? 1 : 0);
   });
 }
-var AUDIT_PATH = ".harnessed/audit.log";
+
+// src/cli/audit-log.ts
+init_harnessedRoot();
+function auditPath() {
+  return harnessedFile("audit.log");
+}
 var REDACT_PATTERNS = [
   [/api[_-]?key\s*[:=]\s*\S+/gi, "api_key=[REDACTED]"],
   [/\btoken\s*[:=]\s*\S+/gi, "token=[REDACTED]"],
@@ -1594,7 +1653,9 @@ function pipeToJq(filterExpr, lines) {
   });
 }
 function registerAuditLog(program2) {
-  program2.command("audit-log").description("Query routing audit log (.harnessed/audit.log) with optional jq filter (R10.1)").option("--filter <expr>", `jq filter expression (e.g. '.category=="engineering"')`).option("--tail <n>", "show N most recent records (default 50)", "50").option("--head <n>", "show N oldest records (--head takes priority over --tail)").option("--reverse", "flip output order").option("--json", "output full 12-field JSON instead of human table").action(
+  program2.command("audit-log").description(
+    "Query routing audit log (<harnessed-root>/audit.log) with optional jq filter (R10.1)"
+  ).option("--filter <expr>", `jq filter expression (e.g. '.category=="engineering"')`).option("--tail <n>", "show N most recent records (default 50)", "50").option("--head <n>", "show N oldest records (--head takes priority over --tail)").option("--reverse", "flip output order").option("--json", "output full 12-field JSON instead of human table").action(
     async (opts) => {
       const tailN = opts.tail !== void 0 ? Number(opts.tail) : 50;
       if (Number.isNaN(tailN) || tailN < 1) {
@@ -1606,11 +1667,12 @@ function registerAuditLog(program2) {
         console.error("\u2717 --head must be a positive integer");
         process.exit(2);
       }
-      if (!existsSync(AUDIT_PATH)) {
-        console.log("no audit records found (.harnessed/audit.log does not exist)");
+      const path = auditPath();
+      if (!existsSync(path)) {
+        console.log(`no audit records found (${path} does not exist)`);
         process.exit(0);
       }
-      const raw = readFileSync(AUDIT_PATH, "utf8");
+      const raw = readFileSync(path, "utf8");
       const lines = raw.split("\n").map((l) => l.trim()).filter((l) => l.length > 0);
       if (lines.length === 0) {
         console.log("no audit records found (audit.log is empty)");
@@ -1646,8 +1708,11 @@ function registerAuditLog(program2) {
     }
   );
 }
+
+// src/installers/lib/backup.ts
+init_harnessedRoot();
 function getBackupRoot() {
-  return join(homedir(), ".harnessed", "backups");
+  return harnessedSubdir("backups");
 }
 var HOME_DIR = process.env.HOME ?? process.env.USERPROFILE ?? "";
 function mirrorPath(target, scope, backupDir) {
@@ -2317,7 +2382,12 @@ function matchesWhen(when, task) {
   }
   return true;
 }
-var AUDIT_PATH2 = ".harnessed/audit.log";
+
+// src/audit/log.ts
+init_harnessedRoot();
+function auditPath2() {
+  return harnessedFile("audit.log");
+}
 Type.Object(
   {
     ts: Type.String(),
@@ -2352,8 +2422,9 @@ function buildAuditRecord(task, decision, matched, ctx) {
   };
 }
 function emitAuditRecord(record) {
-  mkdirSync(dirname(AUDIT_PATH2), { recursive: true });
-  appendFileSync(AUDIT_PATH2, `${JSON.stringify(record)}
+  const path = auditPath2();
+  mkdirSync(dirname(path), { recursive: true });
+  appendFileSync(path, `${JSON.stringify(record)}
 `);
 }
 
@@ -2371,18 +2442,19 @@ function emitAudit(task, decision, matched, outcome, sessionId) {
 }
 
 // src/checkpoint/engineHook.ts
+init_harnessedRoot();
 init_schemaVersion();
 init_state();
 init_template();
 async function activatePhase(phaseId) {
-  const checkpointPath = `.harnessed/checkpoints/${phaseId}.json`;
+  const checkpointPath = join(harnessedSubdir("checkpoints"), `${phaseId}.json`);
   await activate(phaseId, checkpointPath);
   return { checkpointPath };
 }
 async function completePhase(ctx) {
   if (ctx.phaseId === "unknown") {
     console.error(
-      '[harnessed] WARN engineHook: phaseId="unknown" \u2014 checkpoint paths fall back to .harnessed/checkpoints/unknown.json (Karpathy fail-loud non-blocking; W-04 mitigation)'
+      `[harnessed] WARN engineHook: phaseId="unknown" \u2014 checkpoint paths fall back to ${join(harnessedSubdir("checkpoints"), "unknown.json")} (Karpathy fail-loud non-blocking; W-04 mitigation)`
     );
   }
   writeCheckpoint({
@@ -2395,7 +2467,7 @@ async function completePhase(ctx) {
     ...ctx.sessionId ? { session_id: ctx.sessionId } : {},
     cwd: process.cwd(),
     timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-    archive_path: `.harnessed/archive/phase-${ctx.phaseId}/`
+    archive_path: `${join(harnessedSubdir("archive"), `phase-${ctx.phaseId}`)}/`
   });
   await complete();
 }
@@ -2479,11 +2551,11 @@ var VerbatimCompleteFailError = class extends Error {
   }
   lastMessage;
 };
-async function ralphLoopWrap(spawn9, maxIter) {
+async function ralphLoopWrap(spawn6, maxIter) {
   let last = "";
   let sessionId;
   for (let i = 0; i < maxIter; i++) {
-    last = await spawn9(sessionId, (id) => {
+    last = await spawn6(sessionId, (id) => {
       sessionId = id;
     });
     if (isComplete(last)) return last;
@@ -3239,12 +3311,15 @@ function preflight(ctx) {
   }
   return { ok: errors.length === 0, errors };
 }
+
+// src/installers/lib/state.ts
+init_harnessedRoot();
 var DEFAULT_STATE = { version: "1", installed: {} };
-function statePath(cwd) {
-  return join(cwd, ".harnessed", "state.json");
+function statePath2(_cwd) {
+  return harnessedFile("state.json");
 }
 async function readState(cwd) {
-  const path = statePath(cwd);
+  const path = statePath2();
   let raw;
   try {
     raw = await readFile(path, "utf8");
@@ -3265,7 +3340,7 @@ async function readState(cwd) {
   }
 }
 async function writeState(cwd, state) {
-  const path = statePath(cwd);
+  const path = statePath2();
   const tmp = `${path}.tmp`;
   await mkdir(dirname(path), { recursive: true });
   await writeFile(tmp, `${JSON.stringify(state, null, 2)}
@@ -3273,7 +3348,7 @@ async function writeState(cwd, state) {
   await rename(tmp, path);
 }
 async function updateInstalled(cwd, name, version, manifestSha1) {
-  const state = await readState(cwd);
+  const state = await readState();
   state.installed[name] = {
     version,
     installedAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -3382,6 +3457,39 @@ var installCcHookAdd = async (ctx) => {
   await updateInstalled(ctx.cwd, ctx.manifest.metadata.name, "", "");
   return { ok: true, backupId: bk.backupId, appliedFiles: [settingsPath] };
 };
+function getUserClaudeJsonPath() {
+  return join(homedir(), ".claude.json");
+}
+async function readUserClaudeJson() {
+  const path = getUserClaudeJsonPath();
+  let raw;
+  try {
+    raw = await readFile(path, "utf8");
+  } catch (err2) {
+    if (err2.code === "ENOENT") return {};
+    throw err2;
+  }
+  try {
+    const parsed = JSON.parse(raw);
+    if (parsed === null || typeof parsed !== "object") return {};
+    return parsed;
+  } catch {
+    return {};
+  }
+}
+async function isMcpServerRegistered(name) {
+  const config = await readUserClaudeJson();
+  const servers = config.mcpServers;
+  if (!servers || typeof servers !== "object") return false;
+  return Object.hasOwn(servers, name);
+}
+async function isPluginRegistered(pluginName) {
+  const config = await readUserClaudeJson();
+  const plugins = config.enabledPlugins;
+  if (!plugins || typeof plugins !== "object") return false;
+  if (Object.hasOwn(plugins, pluginName)) return true;
+  return Object.keys(plugins).some((k) => k.split("@")[0] === pluginName);
+}
 function runArgs(claudeArgs, cwd, timeoutMs = 15e3) {
   return new Promise((resolve9) => {
     const isWin = process.platform === "win32";
@@ -3525,34 +3633,8 @@ ${newEntry}
       )
     };
   }
-  const vr = await new Promise((resolve9) => {
-    const child = spawn("claude", ["plugin", "list", "--json"], {
-      cwd: spawnCwd,
-      shell: process.platform === "win32",
-      windowsHide: true
-    });
-    let stdout2 = "";
-    let stderr = "";
-    child.stdout?.setEncoding("utf8").on("data", (c) => {
-      stdout2 += c;
-    });
-    child.stderr?.setEncoding("utf8").on("data", (c) => {
-      stderr += c;
-    });
-    const timer = setTimeout(() => {
-      child.kill("SIGKILL");
-      resolve9({ exitCode: -1, stderr: `${stderr}[timeout]`, stdout: stdout2 });
-    }, 15e3);
-    child.on("error", (e) => {
-      clearTimeout(timer);
-      resolve9({ exitCode: -1, stderr: e.message, stdout: stdout2 });
-    });
-    child.on("close", (code) => {
-      clearTimeout(timer);
-      resolve9({ exitCode: code ?? -1, stderr, stdout: stdout2 });
-    });
-  });
-  if (vr.exitCode !== 0 || !vr.stdout.includes(pluginName)) {
+  const registered = await isPluginRegistered(pluginName);
+  if (!registered) {
     return {
       ok: false,
       phase: "verify",
@@ -3560,7 +3642,7 @@ ${newEntry}
       error: err(
         ctx,
         "/spec/verify/cmd",
-        `verify exit ${vr.exitCode} or '${pluginName}' not in plugin list stdout: ${vr.stderr.slice(0, 200)}`,
+        `verify: plugin '${pluginName}' not found in enabledPlugins map of ~/.claude.json after install spawn exit 0 (file may have been overwritten, or claude plugin install wrote to a non-default location)`,
         "verify-failed"
       )
     };
@@ -3828,6 +3910,8 @@ var installGitCloneWithSetup = async (ctx) => {
   await updateInstalled(ctx.cwd, name, install.git_ref, "");
   return { ok: true, backupId: bk.backupId, appliedFiles: [cloneTarget] };
 };
+
+// src/installers/mcpHttpAdd.ts
 function resolveEnvVars(value) {
   const pattern = /\$\{([A-Z_][A-Z0-9_]*)\}/g;
   let resolved = value;
@@ -3977,34 +4061,8 @@ ${newEntry}
       )
     };
   }
-  const vr = await new Promise((resolve9) => {
-    const child = spawn("claude", ["mcp", "list"], {
-      cwd: spawnCwd,
-      shell: process.platform === "win32",
-      windowsHide: true
-    });
-    let stdout2 = "";
-    let stderr = "";
-    child.stdout?.setEncoding("utf8").on("data", (c) => {
-      stdout2 += c;
-    });
-    child.stderr?.setEncoding("utf8").on("data", (c) => {
-      stderr += c;
-    });
-    const timer = setTimeout(() => {
-      child.kill("SIGKILL");
-      resolve9({ exitCode: -1, stderr: `${stderr}[timeout]`, stdout: stdout2 });
-    }, 15e3);
-    child.on("error", (e) => {
-      clearTimeout(timer);
-      resolve9({ exitCode: -1, stderr: e.message, stdout: stdout2 });
-    });
-    child.on("close", (code) => {
-      clearTimeout(timer);
-      resolve9({ exitCode: code ?? -1, stderr, stdout: stdout2 });
-    });
-  });
-  if (vr.exitCode !== 0 || !vr.stdout.includes(name)) {
+  const registered = await isMcpServerRegistered(name);
+  if (!registered) {
     return {
       ok: false,
       phase: "verify",
@@ -4012,7 +4070,7 @@ ${newEntry}
       error: err(
         ctx,
         "/spec/verify/cmd",
-        `verify exit ${vr.exitCode} or '${name}' not in mcp list stdout: ${vr.stderr.slice(0, 200)}`,
+        `verify: '${name}' not found in mcpServers map of ~/.claude.json after install spawn exit 0 (file may have been overwritten, or claude mcp add wrote to a non-default location)`,
         "verify-failed"
       )
     };
@@ -4020,6 +4078,8 @@ ${newEntry}
   await updateInstalled(ctx.cwd, name, install.npm_version, "");
   return { ok: true, backupId: bk.backupId, appliedFiles: [mcpFile] };
 };
+
+// src/installers/mcpStdioAdd.ts
 var installMcpStdioAdd = async (ctx) => {
   const install = ctx.manifest.spec.install;
   if (install.method !== "mcp-stdio-add") {
@@ -4117,34 +4177,8 @@ ${newEntry}
       )
     };
   }
-  const vr = await new Promise((resolve9) => {
-    const child = spawn("claude", ["mcp", "list"], {
-      cwd: spawnCwd,
-      shell: process.platform === "win32",
-      windowsHide: true
-    });
-    let stdout2 = "";
-    let stderr = "";
-    child.stdout?.setEncoding("utf8").on("data", (c) => {
-      stdout2 += c;
-    });
-    child.stderr?.setEncoding("utf8").on("data", (c) => {
-      stderr += c;
-    });
-    const timer = setTimeout(() => {
-      child.kill("SIGKILL");
-      resolve9({ exitCode: -1, stderr: `${stderr}[timeout]`, stdout: stdout2 });
-    }, 15e3);
-    child.on("error", (e) => {
-      clearTimeout(timer);
-      resolve9({ exitCode: -1, stderr: e.message, stdout: stdout2 });
-    });
-    child.on("close", (code) => {
-      clearTimeout(timer);
-      resolve9({ exitCode: code ?? -1, stderr, stdout: stdout2 });
-    });
-  });
-  if (vr.exitCode !== 0 || !vr.stdout.includes(name)) {
+  const registered = await isMcpServerRegistered(name);
+  if (!registered) {
     return {
       ok: false,
       phase: "verify",
@@ -4152,7 +4186,7 @@ ${newEntry}
       error: err(
         ctx,
         "/spec/verify/cmd",
-        `verify exit ${vr.exitCode} or '${name}' not in mcp list stdout: ${vr.stderr.slice(0, 200)}`,
+        `verify: '${name}' not found in mcpServers map of ~/.claude.json after install spawn exit 0 (file may have been overwritten, or claude mcp add wrote to a non-default location)`,
         "verify-failed"
       )
     };
@@ -5029,12 +5063,15 @@ MCP servers configured. Run \`/mcp\` in Claude Code to verify each server's conn
     process.exit(0);
   });
 }
+
+// src/cli/status.ts
+init_harnessedRoot();
 function registerStatus(program2) {
-  program2.command("status").description("Show installed upstreams (from .harnessed/state.json)").action(async () => {
+  program2.command("status").description("Show installed upstreams (from <harnessed-root>/state.json)").action(async () => {
     const state = await readState(process.cwd());
     const names = Object.keys(state.installed).sort();
     if (names.length === 0) {
-      console.log("no installs recorded (.harnessed/state.json absent or empty)");
+      console.log(`no installs recorded (${harnessedFile("state.json")} absent or empty)`);
     } else {
       for (const n of names) {
         const e = state.installed[n];
@@ -5044,18 +5081,19 @@ function registerStatus(program2) {
       console.log(`
 ${names.length} install${names.length === 1 ? "" : "s"} recorded`);
     }
+    const lockPath = harnessedFile(".lock");
     try {
-      const isLocked = await lockfile.check(".harnessed", {
-        lockfilePath: ".harnessed/.lock",
+      const isLocked = await lockfile.check(getHarnessedRoot(), {
+        lockfilePath: lockPath,
         stale: 1e4
       });
       if (isLocked) {
-        const s = await stat(".harnessed/.lock");
+        const s = await stat(lockPath);
         const ageMs = Date.now() - s.mtime.getTime();
         const stale = ageMs > 1e4;
         console.log(`
 lock: held (since ${s.mtime.toISOString()})${stale ? " \u2014 STALE" : ""}`);
-        console.log("  to release: wait for process to finish or delete .harnessed/.lock");
+        console.log(`  to release: wait for process to finish or delete ${lockPath}`);
       } else {
         console.log("\nlock: free");
       }
@@ -5384,6 +5422,8 @@ function registerUninstall(program2) {
 }
 
 // src/cli.ts
+init_harnessedRoot();
+migrateLegacyHarnessedRoot();
 var program = new Command();
 program.name("harnessed").description("AI coding harness package manager + composition orchestrator").version(package_default.version);
 registerInstall(program);