metaharness 0.1.0

package/dist/export-config.d.ts

@@ -0,0 +1,25 @@
+export type SubcommandResult = {
+    code: number;
+    lines: string[];
+};
+export interface ExportedConfig {
+    schema: 1;
+    generatedAt: string;
+    harnessDir: string;
+    host: string | undefined;
+    mcpServers: unknown;
+    claudeSettings: {
+        allow?: string[];
+        deny?: string[];
+        mcp?: unknown;
+    } | undefined;
+    codexConfig: unknown | undefined;
+    manifestMeta: {
+        surface?: string;
+        kernel_version?: string;
+    } | undefined;
+    hosts: string[];
+}
+export declare function buildExportedConfig(harnessDir: string): Promise<ExportedConfig>;
+export declare function exportConfigCmd(args: string[]): Promise<SubcommandResult>;
+//# sourceMappingURL=export-config.d.ts.map

package/dist/export-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export-config.d.ts","sourceRoot":"","sources":["../src/export-config.ts"],"names":[],"mappings":"AAmBA,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAsBjE,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,CAAC,CAAC;IACV,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,SAAS,CAAC;IACjF,WAAW,EAAE,OAAO,GAAG,SAAS,CAAC;IACjC,YAAY,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACxE,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,wBAAsB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAwErF;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAsB/E"}

package/dist/export-config.js

@@ -0,0 +1,134 @@
+// SPDX-License-Identifier: MIT
+//
+// `harness export-config` — emit the harness's security-relevant config
+// as a single JSON for sharing or auditing without zipping the whole
+// repo.
+//
+// Use case: "is my MCP policy reasonable? what about my Bash allowlist?"
+// Users paste the export-config output into a discussion / GitHub
+// issue / security review without having to scrub the rest of their
+// harness.
+//
+// Sanitisation is the same contract as iter-90's diag --bundle:
+// object keys matching /^(secret|token|key|password|api[-_]?key)/i
+// are replaced with "<redacted>".
+import { existsSync } from 'node:fs';
+import { readFile } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
+// iter 97: deliberately less anchored than iter-90's bundle regex.
+// Export-config is meant for security/audit sharing, where the cost of
+// over-redacting is much lower than the cost of leaking. We match the
+// pattern ANYWHERE in the key — `OPENAI_API_KEY`, `GITHUB_TOKEN`,
+// `db_password`, and the iter-90-style `secret_token` all redact.
+// False positive: a key named literally `notakey` redacts. Acceptable
+// for an audit-share artefact.
+const REDACT_KEY_RE = /(secret|token|key|password|passphrase)/i;
+function redact(v) {
+    if (v === null || typeof v !== 'object')
+        return v;
+    if (Array.isArray(v))
+        return v.map(redact);
+    const out = {};
+    for (const [k, val] of Object.entries(v)) {
+        if (REDACT_KEY_RE.test(k))
+            out[k] = '<redacted>';
+        else
+            out[k] = redact(val);
+    }
+    return out;
+}
+export async function buildExportedConfig(harnessDir) {
+    // .mcp/servers.json — the user's MCP wiring
+    let mcpServers = undefined;
+    const mcpPath = join(harnessDir, '.mcp', 'servers.json');
+    if (existsSync(mcpPath)) {
+        try {
+            mcpServers = redact(JSON.parse(await readFile(mcpPath, 'utf-8')));
+        }
+        catch {
+            mcpServers = '<unreadable>';
+        }
+    }
+    // .claude/settings.json — host-specific allow/deny + MCP wiring
+    let claudeSettings = undefined;
+    const claudePath = join(harnessDir, '.claude', 'settings.json');
+    if (existsSync(claudePath)) {
+        try {
+            claudeSettings = redact(JSON.parse(await readFile(claudePath, 'utf-8')));
+        }
+        catch {
+            /* swallow */
+        }
+    }
+    // .codex/config.toml — present as a string (TOML doesn't need
+    // sanitisation; users put secrets in env vars referenced by the toml)
+    let codexConfig = undefined;
+    const codexPath = join(harnessDir, '.codex', 'config.toml');
+    if (existsSync(codexPath)) {
+        try {
+            // Emit the TOML as a string so the bundle stays single-JSON
+            const raw = await readFile(codexPath, 'utf-8');
+            // Strip obvious secret-looking lines: `<key> = "..."` where
+            // <key> matches the redaction regex
+            codexConfig = raw.split('\n').map(line => {
+                const m = line.match(/^\s*(\w+)\s*=\s*".*"\s*$/);
+                if (m && REDACT_KEY_RE.test(m[1])) {
+                    return line.replace(/"[^"]*"/, '"<redacted>"');
+                }
+                return line;
+            }).join('\n');
+        }
+        catch {
+            /* swallow */
+        }
+    }
+    // Manifest meta (iter 56 + iter 58)
+    let manifestMeta = undefined;
+    let hosts = [];
+    let host;
+    const manifestPath = join(harnessDir, '.harness', 'manifest.json');
+    if (existsSync(manifestPath)) {
+        try {
+            const m = JSON.parse(await readFile(manifestPath, 'utf-8'));
+            manifestMeta = m.meta;
+            hosts = Array.isArray(m.hosts) ? m.hosts : [];
+            host = m.vars?.host ?? hosts[0];
+        }
+        catch {
+            /* swallow */
+        }
+    }
+    return {
+        schema: 1,
+        generatedAt: new Date().toISOString(),
+        harnessDir,
+        host,
+        mcpServers,
+        claudeSettings,
+        codexConfig,
+        manifestMeta,
+        hosts,
+    };
+}
+export async function exportConfigCmd(args) {
+    const positional = args.filter(a => !a.startsWith('--'));
+    const dir = resolve(positional[0] ?? process.cwd());
+    if (!existsSync(join(dir, '.harness', 'manifest.json'))) {
+        return {
+            code: 2,
+            lines: [
+                `harness export-config — checking ${dir}`,
+                '',
+                `  FAIL no .harness/manifest.json found at this path`,
+                `       (this directory is not a scaffolded harness — run`,
+                `       harness export-config from a harness root)`,
+            ],
+        };
+    }
+    const config = await buildExportedConfig(dir);
+    return {
+        code: 0,
+        lines: [JSON.stringify(config, null, 2)],
+    };
+}
+//# sourceMappingURL=export-config.js.map

package/dist/export-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export-config.js","sourceRoot":"","sources":["../src/export-config.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,EAAE;AACF,wEAAwE;AACxE,qEAAqE;AACrE,QAAQ;AACR,EAAE;AACF,yEAAyE;AACzE,kEAAkE;AAClE,oEAAoE;AACpE,WAAW;AACX,EAAE;AACF,gEAAgE;AAChE,mEAAmE;AACnE,kCAAkC;AAElC,OAAO,EAAE,UAAU,EAAgB,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAI1C,mEAAmE;AACnE,uEAAuE;AACvE,sEAAsE;AACtE,kEAAkE;AAClE,kEAAkE;AAClE,sEAAsE;AACtE,+BAA+B;AAC/B,MAAM,aAAa,GAAG,yCAAyC,CAAC;AAEhE,SAAS,MAAM,CAAC,CAAU;IACxB,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC,EAAE,CAAC;QACpE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC;;YAC5C,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,UAAkB;IAC1D,4CAA4C;IAC5C,IAAI,UAAU,GAAY,SAAS,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,GAAG,cAAc,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,IAAI,cAAc,GAAqC,SAAS,CAAC;IACjE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAChE,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAqC,CAAC;QAC/G,CAAC;QAAC,MAAM,CAAC;YACP,aAAa;QACf,CAAC;IACH,CAAC;IAED,8DAA8D;IAC9D,sEAAsE;IACtE,IAAI,WAAW,GAAY,SAAS,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC5D,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,4DAA4D;YAC5D,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC/C,4DAA4D;YAC5D,oCAAoC;YACpC,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;gBACvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;gBACjD,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;gBACjD,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,aAAa;QACf,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,IAAI,YAAY,GAAmC,SAAS,CAAC;IAC7D,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,IAAI,IAAwB,CAAC;IAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IACnE,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;YAC5D,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC;YACtB,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,aAAa;QACf,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,CAAC;QACT,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,UAAU;QACV,IAAI;QACJ,UAAU;QACV,cAAc;QACd,WAAW;QACX,YAAY;QACZ,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAc;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAEpD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;QACxD,OAAO;YACL,IAAI,EAAE,CAAC;YACP,KAAK,EAAE;gBACL,oCAAoC,GAAG,EAAE;gBACzC,EAAE;gBACF,qDAAqD;gBACrD,0DAA0D;gBAC1D,mDAAmD;aACpD;SACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO;QACL,IAAI,EAAE,CAAC;QACP,KAAK,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;KACzC,CAAC;AACJ,CAAC"}

package/dist/external-template.d.ts

@@ -0,0 +1,19 @@
+export interface ExternalTemplate {
+    manifest: {
+        id: string;
+        description: string;
+    };
+    templateRoot: string;
+}
+export interface PackModule {
+    load?(): Promise<ExternalTemplate>;
+    default?: {
+        load?(): Promise<ExternalTemplate>;
+    };
+}
+/**
+ * Resolve an external template package. Returns the loaded template or
+ * throws with a clear message.
+ */
+export declare function loadExternalTemplate(packageName: string): Promise<ExternalTemplate>;
+//# sourceMappingURL=external-template.d.ts.map

package/dist/external-template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-template.d.ts","sourceRoot":"","sources":["../src/external-template.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAA;KAAE,CAAC;CAClD;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA2BzF"}

package/dist/external-template.js

@@ -0,0 +1,37 @@
+// SPDX-License-Identifier: MIT
+//
+// External template loader.
+//
+// `create-agent-harness` ships with bundled templates (templates/minimal,
+// templates/vertical_*). When the user passes `--template-package
+// @ruflo/vertical-trading`, this loader resolves the npm package, calls
+// its `.load()`, and returns the on-disk template root for the existing
+// walker to consume.
+/**
+ * Resolve an external template package. Returns the loaded template or
+ * throws with a clear message.
+ */
+export async function loadExternalTemplate(packageName) {
+    if (!packageName || typeof packageName !== 'string') {
+        throw new Error('loadExternalTemplate: packageName is required');
+    }
+    let mod;
+    try {
+        mod = await import(packageName);
+    }
+    catch (err) {
+        throw new Error(`Could not import external template package "${packageName}": ${err instanceof Error ? err.message : String(err)}\n` +
+            `Did you forget to install it? Try: npm install ${packageName}`);
+    }
+    const load = mod.load ?? mod.default?.load;
+    if (typeof load !== 'function') {
+        throw new Error(`"${packageName}" does not export a load() function. ` +
+            `External template packages must export either { load } or default { load }.`);
+    }
+    const result = await load();
+    if (!result || !result.manifest || !result.templateRoot) {
+        throw new Error(`"${packageName}" load() returned a malformed result. Expected { manifest, templateRoot }.`);
+    }
+    return result;
+}
+//# sourceMappingURL=external-template.js.map

package/dist/external-template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-template.js","sourceRoot":"","sources":["../src/external-template.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,EAAE;AACF,4BAA4B;AAC5B,EAAE;AACF,0EAA0E;AAC1E,kEAAkE;AAClE,wEAAwE;AACxE,wEAAwE;AACxE,qBAAqB;AAYrB;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAmB;IAC5D,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,GAAe,CAAC;IACpB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,MAAM,CAAC,WAAW,CAAe,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,+CAA+C,WAAW,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI;YACpH,kDAAkD,WAAW,EAAE,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC;IAC3C,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,IAAI,WAAW,uCAAuC;YACtD,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,IAAI,WAAW,4EAA4E,CAC5F,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/federate.d.ts

@@ -0,0 +1,37 @@
+export interface Peer {
+    id: string;
+    name: string;
+    endpoint: string;
+    trust: 'untrusted' | 'trusted' | 'self';
+}
+export interface FederationState {
+    /** This harness's own peer id. */
+    self_id: string;
+    /** Peer entries indexed by id. */
+    peers: Record<string, Peer>;
+    /** ISO-8601 last-updated timestamp. */
+    updated_at: string;
+}
+export declare function emptyState(selfId: string): FederationState;
+export declare function loadState(harnessDir: string): Promise<FederationState | null>;
+export declare function saveState(harnessDir: string, state: FederationState): Promise<void>;
+export declare function addPeer(state: FederationState, peer: Peer): FederationState;
+export declare function removePeer(state: FederationState, id: string): FederationState;
+export declare function listPeers(state: FederationState, opts?: {
+    trusted?: boolean;
+}): Peer[];
+/**
+ * Dispatch the `federate` subcommand.
+ *
+ * Subactions:
+ *   harness federate init <self-id>      — create state
+ *   harness federate add <id> <name> <endpoint> [trust]
+ *   harness federate remove <id>
+ *   harness federate list [--trusted]
+ *   harness federate status              — summary
+ */
+export declare function federateDispatch(args: string[], cwd?: string): Promise<{
+    code: number;
+    lines: string[];
+}>;
+//# sourceMappingURL=federate.d.ts.map

package/dist/federate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federate.d.ts","sourceRoot":"","sources":["../src/federate.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,WAAW,GAAG,SAAS,GAAG,MAAM,CAAC;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5B,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAE1D;AAED,wBAAsB,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAQnF;AAED,wBAAsB,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAKzF;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,GAAG,eAAe,CAO3E;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,GAAG,eAAe,CAI9E;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,IAAI,EAAE,CAG1F;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,GAAE,MAAsB,GAC1B,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAsG5C"}

package/dist/federate.js

@@ -0,0 +1,167 @@
+// SPDX-License-Identifier: MIT
+//
+// `harness federate` subcommand + TS federation client.
+//
+// The kernel owns the peer registry + message envelope shape; the TS side
+// owns the wire transport (WebSocket by default). This split keeps the
+// wasm bundle small — no transport code in wasm at all — and lets each
+// host pick its preferred wire.
+import { readFile, writeFile, mkdir } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+const STATE_PATH = '.harness/federation.json';
+export function emptyState(selfId) {
+    return { self_id: selfId, peers: {}, updated_at: new Date().toISOString() };
+}
+export async function loadState(harnessDir) {
+    const p = join(harnessDir, STATE_PATH);
+    if (!existsSync(p))
+        return null;
+    try {
+        return JSON.parse(await readFile(p, 'utf-8'));
+    }
+    catch {
+        return null;
+    }
+}
+export async function saveState(harnessDir, state) {
+    const p = join(harnessDir, STATE_PATH);
+    await mkdir(dirname(p), { recursive: true });
+    state.updated_at = new Date().toISOString();
+    await writeFile(p, JSON.stringify(state, null, 2), 'utf-8');
+}
+export function addPeer(state, peer) {
+    if (!peer.id || !peer.name)
+        throw new Error('peer.id and peer.name are required');
+    return {
+        ...state,
+        peers: { ...state.peers, [peer.id]: peer },
+        updated_at: new Date().toISOString(),
+    };
+}
+export function removePeer(state, id) {
+    if (!(id in state.peers))
+        return state;
+    const { [id]: _drop, ...rest } = state.peers;
+    return { ...state, peers: rest, updated_at: new Date().toISOString() };
+}
+export function listPeers(state, opts = {}) {
+    const all = Object.values(state.peers);
+    return opts.trusted ? all.filter(p => p.trust !== 'untrusted') : all;
+}
+/**
+ * Dispatch the `federate` subcommand.
+ *
+ * Subactions:
+ *   harness federate init <self-id>      — create state
+ *   harness federate add <id> <name> <endpoint> [trust]
+ *   harness federate remove <id>
+ *   harness federate list [--trusted]
+ *   harness federate status              — summary
+ */
+export async function federateDispatch(args, cwd = process.cwd()) {
+    const lines = [];
+    const sub = args[0];
+    switch (sub) {
+        case 'init': {
+            const id = args[1];
+            if (!id) {
+                lines.push('Usage: harness federate init <self-id>');
+                return { code: 2, lines };
+            }
+            const state = emptyState(id);
+            await saveState(cwd, state);
+            lines.push(`Initialized federation state at ${join(cwd, STATE_PATH)}`);
+            lines.push(`  self_id: ${id}`);
+            return { code: 0, lines };
+        }
+        case 'add': {
+            const [, id, name, endpoint, trustArg] = args;
+            if (!id || !name || !endpoint) {
+                lines.push('Usage: harness federate add <id> <name> <endpoint> [trusted|untrusted|self]');
+                return { code: 2, lines };
+            }
+            const trust = (trustArg ?? 'untrusted');
+            if (!['trusted', 'untrusted', 'self'].includes(trust)) {
+                lines.push(`Unknown trust tier: ${trust}`);
+                return { code: 2, lines };
+            }
+            let state = await loadState(cwd);
+            if (!state) {
+                lines.push('No federation state found. Run `harness federate init <self-id>` first.');
+                return { code: 1, lines };
+            }
+            state = addPeer(state, { id, name, endpoint, trust });
+            await saveState(cwd, state);
+            lines.push(`Added peer: ${id} (${name}) trust=${trust}`);
+            return { code: 0, lines };
+        }
+        case 'remove': {
+            const [, id] = args;
+            if (!id) {
+                lines.push('Usage: harness federate remove <id>');
+                return { code: 2, lines };
+            }
+            let state = await loadState(cwd);
+            if (!state) {
+                lines.push('No federation state found.');
+                return { code: 1, lines };
+            }
+            const before = Object.keys(state.peers).length;
+            state = removePeer(state, id);
+            await saveState(cwd, state);
+            const after = Object.keys(state.peers).length;
+            if (before === after) {
+                lines.push(`Peer ${id} not in registry (no-op).`);
+            }
+            else {
+                lines.push(`Removed peer ${id}`);
+            }
+            return { code: 0, lines };
+        }
+        case 'list': {
+            const state = await loadState(cwd);
+            if (!state) {
+                lines.push('No federation state found. Run `harness federate init <self-id>` first.');
+                return { code: 1, lines };
+            }
+            const trustedOnly = args.includes('--trusted');
+            const peers = listPeers(state, { trusted: trustedOnly });
+            if (peers.length === 0) {
+                lines.push('No peers.');
+            }
+            else {
+                for (const p of peers) {
+                    lines.push(`  ${p.id}  ${p.name}  ${p.endpoint}  trust=${p.trust}`);
+                }
+            }
+            return { code: 0, lines };
+        }
+        case 'status': {
+            const state = await loadState(cwd);
+            if (!state) {
+                lines.push('No federation state. Run `harness federate init <self-id>` first.');
+                return { code: 1, lines };
+            }
+            lines.push(`Self: ${state.self_id}`);
+            lines.push(`Peers: ${Object.keys(state.peers).length}`);
+            lines.push(`Updated: ${state.updated_at}`);
+            return { code: 0, lines };
+        }
+        case 'help':
+        case undefined:
+            lines.push('Usage: harness federate <init|add|remove|list|status> [args]');
+            lines.push('');
+            lines.push('Subactions:');
+            lines.push('  init <self-id>                              — create state file');
+            lines.push('  add <id> <name> <endpoint> [trust]          — register a peer');
+            lines.push('  remove <id>                                  — drop a peer');
+            lines.push('  list [--trusted]                             — show peers');
+            lines.push('  status                                       — summary');
+            return { code: 0, lines };
+        default:
+            lines.push(`Unknown federate subaction: ${sub}`);
+            return { code: 2, lines };
+    }
+}
+//# sourceMappingURL=federate.js.map

package/dist/federate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federate.js","sourceRoot":"","sources":["../src/federate.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,EAAE;AACF,wDAAwD;AACxD,EAAE;AACF,0EAA0E;AAC1E,uEAAuE;AACvE,uEAAuE;AACvE,gCAAgC;AAEhC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAW,MAAM,WAAW,CAAC;AAkBnD,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAE9C,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,UAAkB;IAChD,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAoB,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,UAAkB,EAAE,KAAsB;IACxE,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACvC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,KAAK,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAsB,EAAE,IAAU;IACxD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAClF,OAAO;QACL,GAAG,KAAK;QACR,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE;QAC1C,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAsB,EAAE,EAAU;IAC3D,IAAI,CAAC,CAAC,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;IAC7C,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAsB,EAAE,OAA8B,EAAE;IAChF,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACvE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAc,EACd,MAAc,OAAO,CAAC,GAAG,EAAE;IAE3B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;gBACrD,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;YAC5B,CAAC;YACD,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;YAC7B,MAAM,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,mCAAmC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;YACvE,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAC/B,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,IAAI,CAAC;YAC9C,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;gBAC1F,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;YAC5B,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,QAAQ,IAAI,WAAW,CAAkB,CAAC;YACzD,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtD,KAAK,CAAC,IAAI,CAAC,uBAAuB,KAAK,EAAE,CAAC,CAAC;gBAC3C,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;YAC5B,CAAC;YACD,IAAI,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;gBACtF,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;YAC5B,CAAC;YACD,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YACtD,MAAM,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,IAAI,WAAW,KAAK,EAAE,CAAC,CAAC;YACzD,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;gBAClD,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;YAC5B,CAAC;YACD,IAAI,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;gBACzC,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;YAC5B,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;YAC/C,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC9B,MAAM,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;YAC9C,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;gBACtF,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;YAC5B,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YACzD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;oBACtB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,WAAW,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACtE,CAAC;YACH,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;gBAChF,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;YAC5B,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACxD,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YAC3C,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS;YACZ,KAAK,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;YAC3E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;YAChF,KAAK,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;YAC9E,KAAK,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;YAC3E,KAAK,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;YAC1E,KAAK,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;YACvE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;QAC5B;YACE,KAAK,CAAC,IAAI,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;YACjD,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC"}

package/dist/genome-scorers.d.ts

@@ -0,0 +1,33 @@
+import type { RepoProfile, HarnessPlan } from './analyze-repo.js';
+/**
+ * Composite classifier — joins the languages + structural signals into a
+ * single underscore-delimited tag. Deterministic; the same profile always
+ * produces the same tag (we sort the inputs).
+ */
+export declare function classifyRepoType(p: RepoProfile): string;
+/**
+ * Maps the analyze-repo plan + profile into the four canonical maintenance
+ * roles the user named in the roadmap. Always returns a stable, deduplicated
+ * subset of ["maintainer","tester","security","release"].
+ */
+export declare function resolveAgentTopology(profile: RepoProfile, plan: HarnessPlan): string[];
+export type McpSurface = 'local_default_deny' | 'local_permissive' | 'remote' | 'off';
+export interface McpRisk {
+    surface: McpSurface;
+    numeric: number;
+}
+export declare function scoreMcpRisk(profile: RepoProfile, plan: HarnessPlan): McpRisk;
+/**
+ * Test confidence is a soft heuristic — we can't actually run the tests
+ * (the analyze-repo invariant forbids code execution), so we score based on:
+ *  - presence of declared test commands (the repo can run tests at all)
+ *  - presence of CI (someone has wired the tests to run on push)
+ *  - heuristic: more test commands = more diverse tests
+ */
+export declare function scoreTestConfidence(profile: RepoProfile): number;
+/**
+ * Publish readiness — how close is this repo to being npm-publishable as a
+ * package today? Conservative score; releases need everything.
+ */
+export declare function scorePublishReadiness(profile: RepoProfile, plan: HarnessPlan): number;
+//# sourceMappingURL=genome-scorers.d.ts.map

package/dist/genome-scorers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"genome-scorers.d.ts","sourceRoot":"","sources":["../src/genome-scorers.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIlE;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,CAcvD;AAID;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,GAAG,MAAM,EAAE,CAWtF;AAID,MAAM,MAAM,UAAU,GAAG,oBAAoB,GAAG,kBAAkB,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEtF,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,UAAU,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAQ7E;AAID;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAMhE;AAID;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,GAAG,MAAM,CASrF"}

package/dist/genome-scorers.js

@@ -0,0 +1,115 @@
+// SPDX-License-Identifier: MIT
+//
+// Pure scorers for `harness genome` (iter 110). Every function is deterministic
+// and I/O-free — inputs are the RepoProfile / HarnessPlan from analyze-repo,
+// outputs are numeric scores in [0, 1] and discrete classifications. Unit-
+// testable without fixtures.
+//
+// The dimensions match the user's roadmap spec for the genome report:
+//   1. classifyRepoType        -> string  (e.g. "rust_wasm_node_monorepo")
+//   2. resolveAgentTopology    -> string[] ("maintainer","tester","security","release")
+//   3. scoreMcpRisk            -> { surface, numeric }
+//   4. scoreTestConfidence     -> number   [0..1]
+//   5. scorePublishReadiness   -> number   [0..1]
+// --- 1. repo type classifier ----------------------------------------------
+/**
+ * Composite classifier — joins the languages + structural signals into a
+ * single underscore-delimited tag. Deterministic; the same profile always
+ * produces the same tag (we sort the inputs).
+ */
+export function classifyRepoType(p) {
+    const parts = [];
+    const langs = [...p.languages].sort();
+    if (langs.includes('rust'))
+        parts.push('rust');
+    if (langs.includes('typescript'))
+        parts.push('node');
+    if (langs.includes('python'))
+        parts.push('python');
+    if (langs.includes('go'))
+        parts.push('go');
+    if (parts.length === 0)
+        parts.push('unknown');
+    if (p.hasMcp)
+        parts.push('mcp');
+    if (p.hasCi)
+        parts.push('ci');
+    // We can't tell monorepo-ness from inventory alone, but a Cargo+Node combo
+    // is a strong signal that we report as a flat tag.
+    if (langs.includes('rust') && langs.includes('typescript'))
+        parts.push('polyglot');
+    return parts.join('_');
+}
+// --- 2. agent topology resolver --------------------------------------------
+/**
+ * Maps the analyze-repo plan + profile into the four canonical maintenance
+ * roles the user named in the roadmap. Always returns a stable, deduplicated
+ * subset of ["maintainer","tester","security","release"].
+ */
+export function resolveAgentTopology(profile, plan) {
+    const out = new Set();
+    // Maintainer is the floor — every repo gets one.
+    out.add('maintainer');
+    // Tester if the repo has any test signal (commands or pre-existing CI).
+    if (profile.testCommands.length > 0 || profile.hasCi)
+        out.add('tester');
+    // Security if MCP is enabled or the plan picks a default-deny MCP mode.
+    if (profile.hasMcp || plan.mcp === 'local' || plan.mcp === 'remote')
+        out.add('security');
+    // Release if the repo has CI plumbing already (it can ship).
+    if (profile.hasCi)
+        out.add('release');
+    return Array.from(out);
+}
+export function scoreMcpRisk(profile, plan) {
+    if (plan.mcp === 'off')
+        return { surface: 'off', numeric: 0 };
+    if (plan.mcp === 'remote')
+        return { surface: 'remote', numeric: 0.6 };
+    // plan.mcp === 'local'
+    const p = plan.policy;
+    const permissive = p.allowShell || p.allowNetwork || p.allowFileWrite || !p.defaultDeny;
+    if (permissive)
+        return { surface: 'local_permissive', numeric: 0.45 };
+    return { surface: 'local_default_deny', numeric: 0.15 };
+}
+// --- 4. test confidence ----------------------------------------------------
+/**
+ * Test confidence is a soft heuristic — we can't actually run the tests
+ * (the analyze-repo invariant forbids code execution), so we score based on:
+ *  - presence of declared test commands (the repo can run tests at all)
+ *  - presence of CI (someone has wired the tests to run on push)
+ *  - heuristic: more test commands = more diverse tests
+ */
+export function scoreTestConfidence(profile) {
+    let s = 0;
+    if (profile.testCommands.length > 0)
+        s += 0.5;
+    if (profile.testCommands.length >= 2)
+        s += 0.2;
+    if (profile.hasCi)
+        s += 0.3;
+    return Math.min(1, s);
+}
+// --- 5. publish readiness --------------------------------------------------
+/**
+ * Publish readiness — how close is this repo to being npm-publishable as a
+ * package today? Conservative score; releases need everything.
+ */
+export function scorePublishReadiness(profile, plan) {
+    let s = 0;
+    if (profile.languages.includes('typescript'))
+        s += 0.3; // has package.json
+    if (profile.languages.includes('rust'))
+        s += 0.15; // has Cargo.toml
+    if (profile.buildCommands.length > 0)
+        s += 0.2; // can build
+    if (profile.testCommands.length > 0)
+        s += 0.15; // can test
+    if (profile.hasCi)
+        s += 0.2; // ci will gate it
+    if (plan.policy.defaultDeny)
+        s += 0.05; // policy locked
+    return Math.min(1, s);
+}
+//# sourceMappingURL=genome-scorers.js.map

package/dist/genome-scorers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"genome-scorers.js","sourceRoot":"","sources":["../src/genome-scorers.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,EAAE;AACF,gFAAgF;AAChF,6EAA6E;AAC7E,2EAA2E;AAC3E,6BAA6B;AAC7B,EAAE;AACF,sEAAsE;AACtE,2EAA2E;AAC3E,wFAAwF;AACxF,uDAAuD;AACvD,kDAAkD;AAClD,kDAAkD;AAIlD,6EAA6E;AAE7E;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAc;IAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,2EAA2E;IAC3E,mDAAmD;IACnD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAoB,EAAE,IAAiB;IAC1E,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,iDAAiD;IACjD,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACtB,wEAAwE;IACxE,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK;QAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxE,wEAAwE;IACxE,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ;QAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzF,6DAA6D;IAC7D,IAAI,OAAO,CAAC,KAAK;QAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAWD,MAAM,UAAU,YAAY,CAAC,OAAoB,EAAE,IAAiB;IAClE,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC9D,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IACtE,uBAAuB;IACvB,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;IACxF,IAAI,UAAU;QAAE,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtE,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAoB;IACtD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,CAAC,IAAI,GAAG,CAAC;IAC9C,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC;QAAE,CAAC,IAAI,GAAG,CAAC;IAC/C,IAAI,OAAO,CAAC,KAAK;QAAE,CAAC,IAAI,GAAG,CAAC;IAC5B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAoB,EAAE,IAAiB;IAC3E,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,CAAC,IAAI,GAAG,CAAC,CAAC,mBAAmB;IAC3E,IAAI,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,CAAC,IAAI,IAAI,CAAC,CAAC,iBAAiB;IACpE,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;QAAE,CAAC,IAAI,GAAG,CAAC,CAAC,YAAY;IAC5D,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW;IAC3D,IAAI,OAAO,CAAC,KAAK;QAAE,CAAC,IAAI,GAAG,CAAC,CAAC,kBAAkB;IAC/C,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW;QAAE,CAAC,IAAI,IAAI,CAAC,CAAC,gBAAgB;IACxD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxB,CAAC"}

package/dist/genome.d.ts

@@ -0,0 +1,28 @@
+import { type RepoProfile, type HarnessPlan } from './analyze-repo.js';
+import { type McpSurface } from './genome-scorers.js';
+export type SubcommandResult = {
+    code: number;
+    lines: string[];
+};
+export interface Genome {
+    repo_type: string;
+    agent_topology: string[];
+    risk_score: number;
+    mcp_surface: McpSurface;
+    test_confidence: number;
+    publish_readiness: number;
+}
+export interface GenomeReport {
+    schema: 1;
+    generatedAt: string;
+    dir: string;
+    profile: RepoProfile;
+    plan: HarnessPlan;
+    genome: Genome;
+    verdict: 'ready' | 'needs-work' | 'blocked';
+    exitCode: 0 | 1 | 2;
+}
+export declare function buildGenomeReport(dir: string, generatedAt?: string): GenomeReport;
+export declare function formatGenomeReport(r: GenomeReport): string[];
+export declare function genomeCmd(args: string[]): Promise<SubcommandResult>;
+//# sourceMappingURL=genome.d.ts.map