p-dev-harness 0.3.0

package/dist/setup/control-plane-setup-state.d.ts

@@ -0,0 +1,6 @@
+import type { ControlPlaneSetupState } from "./control-plane-types.js";
+export type { ControlPlaneSetupState, ControlPlaneReadinessContext, LinearWorkspaceSelection, VercelBridgeSelection, } from "./control-plane-types.js";
+export declare function readControlPlaneSetupState(cwd?: string): Promise<ControlPlaneSetupState | null>;
+export declare function writeControlPlaneSetupState(state: ControlPlaneSetupState, cwd?: string): Promise<void>;
+export declare function updateControlPlaneSetupState(patch: Partial<ControlPlaneSetupState>, cwd?: string): Promise<ControlPlaneSetupState>;
+//# sourceMappingURL=control-plane-setup-state.d.ts.map

package/dist/setup/control-plane-setup-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane-setup-state.d.ts","sourceRoot":"","sources":["../../src/setup/control-plane-setup-state.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAEvE,YAAY,EACV,sBAAsB,EACtB,4BAA4B,EAC5B,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AASlC,wBAAsB,0BAA0B,CAC9C,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAaxC;AAED,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,sBAAsB,EAC7B,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,OAAO,CAAC,sBAAsB,CAAC,EACtC,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,sBAAsB,CAAC,CAWjC"}

package/dist/setup/control-plane-setup-state.js

@@ -0,0 +1,41 @@
+import { access, readFile, writeFile, mkdir } from "node:fs/promises";
+import path from "node:path";
+import { resolveLocalFilePaths } from "./setup-state.js";
+const STATE_FILE = path.join(".harness", "control-plane-setup.json");
+function statePath(cwd) {
+    const paths = resolveLocalFilePaths(cwd);
+    return path.join(paths.cwd, STATE_FILE);
+}
+export async function readControlPlaneSetupState(cwd) {
+    const filePath = statePath(cwd);
+    try {
+        await access(filePath);
+        const raw = await readFile(filePath, "utf8");
+        const parsed = JSON.parse(raw);
+        if (parsed.version !== 1) {
+            return null;
+        }
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+export async function writeControlPlaneSetupState(state, cwd) {
+    const paths = resolveLocalFilePaths(cwd);
+    await mkdir(paths.harnessDir, { recursive: true });
+    await writeFile(statePath(cwd), `${JSON.stringify(state, null, 2)}\n`, "utf8");
+}
+export async function updateControlPlaneSetupState(patch, cwd) {
+    const current = (await readControlPlaneSetupState(cwd)) ?? { version: 1 };
+    const next = {
+        ...current,
+        ...patch,
+        version: 1,
+        linear: patch.linear ?? current.linear,
+        vercel: patch.vercel ?? current.vercel,
+    };
+    await writeControlPlaneSetupState(next, cwd);
+    return next;
+}
+//# sourceMappingURL=control-plane-setup-state.js.map

package/dist/setup/control-plane-setup-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane-setup-state.js","sourceRoot":"","sources":["../../src/setup/control-plane-setup-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAUzD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAC;AAErE,SAAS,SAAS,CAAC,GAAY;IAC7B,MAAM,KAAK,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,GAAY;IAEZ,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAC;QACzD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAA6B,EAC7B,GAAY;IAEZ,MAAM,KAAK,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,KAAsC,EACtC,GAAY;IAEZ,MAAM,OAAO,GAAG,CAAC,MAAM,0BAA0B,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC1E,MAAM,IAAI,GAA2B;QACnC,GAAG,OAAO;QACV,GAAG,KAAK;QACR,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM;QACtC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM;KACvC,CAAC;IACF,MAAM,2BAA2B,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/setup/control-plane-types.d.ts

@@ -0,0 +1,97 @@
+export interface LinearWorkspaceSelection {
+    teamMode: "existing" | "create";
+    teamId?: string;
+    teamKey: string;
+    teamName: string;
+    projectMode: "existing" | "create";
+    projectId?: string;
+    projectName: string;
+    statusCoverageComplete: boolean;
+    appliedFingerprint?: string;
+    appliedAt?: string;
+    manualComplete?: boolean;
+}
+export interface VercelSignedProbeEvidence {
+    passed: boolean;
+    statusCode?: number;
+    result: "accepted_ignored" | "auth_failed" | "unreachable" | "protection_redirect" | "error";
+    reason?: string;
+    probedAt: string;
+    webhookHost?: string;
+    webhookPath?: string;
+}
+export type VercelBridgeRedeployVerificationStatus = "triggered" | "building" | "ready" | "failed" | "timeout" | "no_source_deployment" | "verify_failed" | "verified";
+export type VercelBridgeCandidateSecretSource = "operator" | "reused-readable" | "generated" | "unreadable";
+/** Non-secret/tokenized inputs used to compute the preview fingerprint hash. */
+export interface VercelBridgePreviewFingerprintInputs {
+    actionId: string;
+    teamId?: string;
+    teamMode?: string;
+    teamSlug?: string;
+    projectId: string;
+    projectMode?: string;
+    projectName?: string;
+    envWritePlan: Array<{
+        key: string;
+        action: string;
+        source: string;
+        existingType?: string;
+        desiredType?: string;
+    }>;
+    linearWebhookSecretToken: string;
+    githubDispatchTokenToken: string;
+    harnessTeamKey: string;
+    vercelTokenToken: string;
+}
+export interface VercelBridgeRedeployVerification {
+    actionId: string;
+    projectId: string;
+    projectName: string;
+    teamId?: string;
+    webhookUrl: string;
+    fingerprint: string;
+    fingerprintInputs?: VercelBridgePreviewFingerprintInputs;
+    candidateSecretSource?: VercelBridgeCandidateSecretSource;
+    sourceDeploymentId?: string;
+    newDeploymentId?: string;
+    status: VercelBridgeRedeployVerificationStatus;
+    startedAt: string;
+    updatedAt: string;
+    deadlineAt: string;
+    verifyAttempted: boolean;
+    completedAt?: string;
+    message?: string;
+    blockedMessage?: string;
+    blockedNextSteps?: string[];
+    writtenEnvKeys?: string[];
+    skippedEnvKeys?: string[];
+}
+export interface VercelBridgeSelection {
+    teamId?: string;
+    teamName?: string;
+    projectId: string;
+    projectName: string;
+    productionUrl: string;
+    webhookUrl: string;
+    endpointReachable: boolean;
+    envVarPresence: Record<string, "present" | "missing" | "unknown">;
+    linearWebhookVerified: boolean;
+    signedProbeVerified?: boolean;
+    signedProbe?: VercelSignedProbeEvidence;
+    verificationFingerprint?: string;
+    deploymentRedeployRequired?: boolean;
+    appliedFingerprint?: string;
+    appliedAt?: string;
+    manualComplete?: boolean;
+    redeployVerification?: VercelBridgeRedeployVerification;
+}
+export interface ControlPlaneSetupState {
+    version: 1;
+    linear?: LinearWorkspaceSelection;
+    vercel?: VercelBridgeSelection;
+}
+export interface ControlPlaneReadinessContext {
+    state: ControlPlaneSetupState | null;
+    linearTeamKeyFromConfig?: string;
+}
+//# sourceMappingURL=control-plane-types.d.ts.map

package/dist/setup/control-plane-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane-types.d.ts","sourceRoot":"","sources":["../../src/setup/control-plane-types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,UAAU,GAAG,QAAQ,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,UAAU,GAAG,QAAQ,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB,EAAE,OAAO,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EACF,kBAAkB,GAClB,aAAa,GACb,aAAa,GACb,qBAAqB,GACrB,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,sCAAsC,GAC9C,WAAW,GACX,UAAU,GACV,OAAO,GACP,QAAQ,GACR,SAAS,GACT,sBAAsB,GACtB,eAAe,GACf,UAAU,CAAC;AAEf,MAAM,MAAM,iCAAiC,GACzC,UAAU,GACV,iBAAiB,GACjB,WAAW,GACX,YAAY,CAAC;AAEjB,gFAAgF;AAChF,MAAM,WAAW,oCAAoC;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,KAAK,CAAC;QAClB,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC,CAAC;IACH,wBAAwB,EAAE,MAAM,CAAC;IACjC,wBAAwB,EAAE,MAAM,CAAC;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,oCAAoC,CAAC;IACzD,qBAAqB,CAAC,EAAE,iCAAiC,CAAC;IAC1D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,sCAAsC,CAAC;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC,CAAC;IAClE,qBAAqB,EAAE,OAAO,CAAC;IAC/B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACxC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,oBAAoB,CAAC,EAAE,gCAAgC,CAAC;CACzD;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,CAAC,EAAE,wBAAwB,CAAC;IAClC,MAAM,CAAC,EAAE,qBAAqB,CAAC;CAChC;AAED,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACrC,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC"}

package/dist/setup/control-plane-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=control-plane-types.js.map

package/dist/setup/control-plane-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane-types.js","sourceRoot":"","sources":["../../src/setup/control-plane-types.ts"],"names":[],"mappings":""}

package/dist/setup/doctor-summary.d.ts

@@ -0,0 +1,16 @@
+export interface DoctorCheckResult {
+    label: string;
+    ok: boolean;
+    detail?: string;
+    skipped?: boolean;
+}
+export type DoctorCheckGroup = "configuration" | "linear" | "cursor" | "github" | "filesystem";
+export interface DoctorCheckGroupSummary {
+    group: DoctorCheckGroup;
+    checks: DoctorCheckResult[];
+}
+export declare function summarizeDoctorChecks(checks: DoctorCheckResult[]): DoctorCheckGroupSummary[];
+export declare function doctorChecksFailed(checks: DoctorCheckResult[]): boolean;
+export declare function formatDoctorCheckLine(check: DoctorCheckResult): string;
+export declare function formatDoctorCheckLines(checks: DoctorCheckResult[]): string[];
+//# sourceMappingURL=doctor-summary.d.ts.map

package/dist/setup/doctor-summary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-summary.d.ts","sourceRoot":"","sources":["../../src/setup/doctor-summary.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,MAAM,gBAAgB,GACxB,eAAe,GACf,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,YAAY,CAAC;AAEjB,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,gBAAgB,CAAC;IACxB,MAAM,EAAE,iBAAiB,EAAE,CAAC;CAC7B;AAqCD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,iBAAiB,EAAE,GAC1B,uBAAuB,EAAE,CAyB3B;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAEvE;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAItE;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,EAAE,CAE5E"}

package/dist/setup/doctor-summary.js

@@ -0,0 +1,62 @@
+const GROUP_RULES = [
+    {
+        group: "configuration",
+        match: (label) => label.includes("harness config") ||
+            label.includes("allowedTargetRepos") ||
+            label.includes("harness.config.json"),
+    },
+    {
+        group: "filesystem",
+        match: (label) => label.includes("runs/ directory writable"),
+    },
+    {
+        group: "linear",
+        match: (label) => label.startsWith("LINEAR_API_KEY"),
+    },
+    {
+        group: "cursor",
+        match: (label) => label.startsWith("CURSOR_API_KEY") ||
+            label.startsWith("Cursor models.list") ||
+            label.startsWith("Cursor repositories.list"),
+    },
+    {
+        group: "github",
+        match: (label) => label.startsWith("GITHUB_TOKEN") ||
+            label.includes("base branch exists") ||
+            label.includes("PR head-branch write"),
+    },
+];
+export function summarizeDoctorChecks(checks) {
+    const grouped = new Map();
+    for (const check of checks) {
+        const group = GROUP_RULES.find((rule) => rule.match(check.label))?.group ?? "configuration";
+        const existing = grouped.get(group) ?? [];
+        existing.push(check);
+        grouped.set(group, existing);
+    }
+    const order = [
+        "configuration",
+        "filesystem",
+        "linear",
+        "cursor",
+        "github",
+    ];
+    return order
+        .filter((group) => grouped.has(group))
+        .map((group) => ({
+        group,
+        checks: grouped.get(group) ?? [],
+    }));
+}
+export function doctorChecksFailed(checks) {
+    return checks.some((check) => !check.ok && !check.skipped);
+}
+export function formatDoctorCheckLine(check) {
+    const icon = check.skipped ? "○" : check.ok ? "✓" : "✗";
+    const suffix = check.detail ? ` — ${check.detail}` : "";
+    return `${icon} ${check.label}${suffix}`;
+}
+export function formatDoctorCheckLines(checks) {
+    return checks.map(formatDoctorCheckLine);
+}
+//# sourceMappingURL=doctor-summary.js.map

package/dist/setup/doctor-summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-summary.js","sourceRoot":"","sources":["../../src/setup/doctor-summary.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,GAGZ;IACH;QACE,KAAK,EAAE,eAAe;QACtB,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAChC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YACpC,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC;KACxC;IACD;QACE,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,0BAA0B,CAAC;KAC7D;IACD;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC;KACrD;IACD;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAClC,KAAK,CAAC,UAAU,CAAC,oBAAoB,CAAC;YACtC,KAAK,CAAC,UAAU,CAAC,0BAA0B,CAAC;KAC/C;IACD;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC;YAChC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YACpC,KAAK,CAAC,QAAQ,CAAC,sBAAsB,CAAC;KACzC;CACF,CAAC;AAEF,MAAM,UAAU,qBAAqB,CACnC,MAA2B;IAE3B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyC,CAAC;IAEjE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GACT,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,IAAI,eAAe,CAAC;QAChF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC1C,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,KAAK,GAAuB;QAChC,eAAe;QACf,YAAY;QACZ,QAAQ;QACR,QAAQ;QACR,QAAQ;KACT,CAAC;IAEF,OAAO,KAAK;SACT,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;SACrC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACf,KAAK;QACL,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;KACjC,CAAC,CAAC,CAAC;AACR,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAA2B;IAC5D,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAwB;IAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACxD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,OAAO,GAAG,IAAI,IAAI,KAAK,CAAC,KAAK,GAAG,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAA2B;IAChE,OAAO,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;AAC3C,CAAC"}

package/dist/setup/env-merge.d.ts

@@ -0,0 +1,26 @@
+import { type LocalFilePaths, type SetupEnvInput } from "./setup-state.js";
+declare const MANAGED_KEYS: readonly ["HARNESS_CONFIG_PATH", "GITHUB_DISPATCH_REPOSITORY", "GITHUB_DISPATCH_REPOSITORY_ID", "LINEAR_API_KEY", "CURSOR_API_KEY", "GITHUB_TOKEN", "VERCEL_TOKEN"];
+export interface EnvKeyPresence {
+    HARNESS_CONFIG_PATH: boolean;
+    GITHUB_DISPATCH_REPOSITORY: boolean;
+    GITHUB_DISPATCH_REPOSITORY_ID: boolean;
+    LINEAR_API_KEY: boolean;
+    CURSOR_API_KEY: boolean;
+    GITHUB_TOKEN: boolean;
+    VERCEL_TOKEN: boolean;
+}
+export interface ParsedEnvFile {
+    values: Record<string, string>;
+    presence: EnvKeyPresence;
+}
+export declare function parseEnvFileContent(content: string): ParsedEnvFile;
+export declare function readExistingEnvFileContent(paths: LocalFilePaths): Promise<string | null>;
+export declare function readExistingEnvFile(paths: LocalFilePaths): Promise<ParsedEnvFile | null>;
+export declare function mergeEnvInput(existing: ParsedEnvFile | null, input: SetupEnvInput): SetupEnvInput;
+export declare function mergeEnvFileContent(existingContent: string | null, merged: SetupEnvInput): string;
+export declare function redactEnvContent(content: string): string;
+export declare function collectMergedSecrets(merged: SetupEnvInput): string[];
+export declare function summarizeManagedKeyPresence(merged: SetupEnvInput): EnvKeyPresence;
+export declare function getLocalFileBaseline(filePath: string): Promise<string>;
+export { MANAGED_KEYS };
+//# sourceMappingURL=env-merge.d.ts.map

package/dist/setup/env-merge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-merge.d.ts","sourceRoot":"","sources":["../../src/setup/env-merge.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAS1B,QAAA,MAAM,YAAY,qKAKR,CAAC;AAIX,MAAM,WAAW,cAAc;IAC7B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,0BAA0B,EAAE,OAAO,CAAC;IACpC,6BAA6B,EAAE,OAAO,CAAC;IACvC,cAAc,EAAE,OAAO,CAAC;IACxB,cAAc,EAAE,OAAO,CAAC;IACxB,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAeD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CAkClE;AAED,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAKxB;AAED,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAM/B;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,aAAa,GAAG,IAAI,EAC9B,KAAK,EAAE,aAAa,GACnB,aAAa,CAiCf;AA+BD,wBAAgB,mBAAmB,CACjC,eAAe,EAAE,MAAM,GAAG,IAAI,EAC9B,MAAM,EAAE,aAAa,GACpB,MAAM,CAiDR;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,EAAE,CAEpE;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,aAAa,GACpB,cAAc,CAYhB;AAED,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAO5E;AAED,OAAO,EAAE,YAAY,EAAE,CAAC"}

package/dist/setup/env-merge.js

@@ -0,0 +1,201 @@
+import { readFile, stat } from "node:fs/promises";
+import { access } from "node:fs/promises";
+import { collectEnvInputSecrets, redactSecretEnvContent, } from "./redact-secrets.js";
+import { DEFAULT_HARNESS_CONFIG_PATH, } from "./setup-state.js";
+const SECRET_KEYS = [
+    "LINEAR_API_KEY",
+    "CURSOR_API_KEY",
+    "GITHUB_TOKEN",
+    "VERCEL_TOKEN",
+];
+const MANAGED_KEYS = [
+    "HARNESS_CONFIG_PATH",
+    "GITHUB_DISPATCH_REPOSITORY",
+    "GITHUB_DISPATCH_REPOSITORY_ID",
+    ...SECRET_KEYS,
+];
+async function fileExists(filePath) {
+    try {
+        await access(filePath);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function isManagedKey(key) {
+    return MANAGED_KEYS.includes(key);
+}
+export function parseEnvFileContent(content) {
+    const values = {};
+    const presence = {
+        HARNESS_CONFIG_PATH: false,
+        GITHUB_DISPATCH_REPOSITORY: false,
+        GITHUB_DISPATCH_REPOSITORY_ID: false,
+        LINEAR_API_KEY: false,
+        CURSOR_API_KEY: false,
+        GITHUB_TOKEN: false,
+        VERCEL_TOKEN: false,
+    };
+    for (const line of content.split("\n")) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith("#")) {
+            continue;
+        }
+        const separator = trimmed.indexOf("=");
+        if (separator === -1) {
+            continue;
+        }
+        const key = trimmed.slice(0, separator).trim();
+        const value = trimmed.slice(separator + 1).trim();
+        if (key in presence) {
+            values[key] = value;
+            if (value.length > 0) {
+                presence[key] = true;
+            }
+        }
+        else if (key === "LINEAR_WEBHOOK_SECRET") {
+            values[key] = value;
+        }
+    }
+    return { values, presence };
+}
+export async function readExistingEnvFileContent(paths) {
+    if (!(await fileExists(paths.envLocal))) {
+        return null;
+    }
+    return readFile(paths.envLocal, "utf8");
+}
+export async function readExistingEnvFile(paths) {
+    const content = await readExistingEnvFileContent(paths);
+    if (content === null) {
+        return null;
+    }
+    return parseEnvFileContent(content);
+}
+export function mergeEnvInput(existing, input) {
+    const merged = {
+        harnessConfigPath: input.harnessConfigPath?.trim() ||
+            existing?.values.HARNESS_CONFIG_PATH ||
+            DEFAULT_HARNESS_CONFIG_PATH,
+        githubDispatchRepository: input.githubDispatchRepository?.trim() ||
+            existing?.values.GITHUB_DISPATCH_REPOSITORY ||
+            undefined,
+        githubDispatchRepositoryId: input.githubDispatchRepositoryId?.trim() ||
+            existing?.values.GITHUB_DISPATCH_REPOSITORY_ID ||
+            undefined,
+    };
+    const secretMap = {
+        linearApiKey: "LINEAR_API_KEY",
+        cursorApiKey: "CURSOR_API_KEY",
+        githubToken: "GITHUB_TOKEN",
+        vercelToken: "VERCEL_TOKEN",
+    };
+    for (const [inputKey, envKey] of Object.entries(secretMap)) {
+        const submitted = input[inputKey]?.trim();
+        if (submitted) {
+            merged[inputKey] = submitted;
+        }
+        else if (existing?.values[envKey]) {
+            merged[inputKey] = existing.values[envKey];
+        }
+    }
+    return merged;
+}
+function managedValuesFromMerged(merged) {
+    return {
+        HARNESS_CONFIG_PATH: merged.harnessConfigPath ?? DEFAULT_HARNESS_CONFIG_PATH,
+        GITHUB_DISPATCH_REPOSITORY: merged.githubDispatchRepository ?? "",
+        GITHUB_DISPATCH_REPOSITORY_ID: merged.githubDispatchRepositoryId ?? "",
+        LINEAR_API_KEY: merged.linearApiKey ?? "",
+        CURSOR_API_KEY: merged.cursorApiKey ?? "",
+        GITHUB_TOKEN: merged.githubToken ?? "",
+        VERCEL_TOKEN: merged.vercelToken ?? "",
+    };
+}
+function generateNewEnvFileContent(merged) {
+    const values = managedValuesFromMerged(merged);
+    return `# Operator local setup — generated by harness setup core
+# Do not commit .env.local (gitignored).
+
+# --- Harness managed keys ---
+HARNESS_CONFIG_PATH=${values.HARNESS_CONFIG_PATH}
+GITHUB_DISPATCH_REPOSITORY=${values.GITHUB_DISPATCH_REPOSITORY}
+GITHUB_DISPATCH_REPOSITORY_ID=${values.GITHUB_DISPATCH_REPOSITORY_ID}
+LINEAR_API_KEY=${values.LINEAR_API_KEY}
+CURSOR_API_KEY=${values.CURSOR_API_KEY}
+GITHUB_TOKEN=${values.GITHUB_TOKEN}
+VERCEL_TOKEN=${values.VERCEL_TOKEN}
+`;
+}
+export function mergeEnvFileContent(existingContent, merged) {
+    if (existingContent === null) {
+        return generateNewEnvFileContent(merged);
+    }
+    const values = managedValuesFromMerged(merged);
+    const lines = existingContent.split("\n");
+    const seenManaged = new Set();
+    const outputLines = [];
+    for (const line of lines) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith("#")) {
+            outputLines.push(line);
+            continue;
+        }
+        const separator = trimmed.indexOf("=");
+        if (separator === -1) {
+            outputLines.push(line);
+            continue;
+        }
+        const key = trimmed.slice(0, separator).trim();
+        if (!isManagedKey(key)) {
+            outputLines.push(line);
+            continue;
+        }
+        seenManaged.add(key);
+        outputLines.push(`${key}=${values[key]}`);
+    }
+    const missingManaged = MANAGED_KEYS.filter((key) => !seenManaged.has(key));
+    if (missingManaged.length > 0) {
+        if (outputLines.length > 0 && outputLines[outputLines.length - 1] !== "") {
+            outputLines.push("");
+        }
+        outputLines.push("# --- Harness managed keys ---");
+        for (const key of missingManaged) {
+            outputLines.push(`${key}=${values[key]}`);
+        }
+    }
+    let result = outputLines.join("\n");
+    if (existingContent.endsWith("\n") && !result.endsWith("\n")) {
+        result += "\n";
+    }
+    return result;
+}
+export function redactEnvContent(content) {
+    return redactSecretEnvContent(content);
+}
+export function collectMergedSecrets(merged) {
+    return collectEnvInputSecrets(merged);
+}
+export function summarizeManagedKeyPresence(merged) {
+    return {
+        HARNESS_CONFIG_PATH: Boolean(merged.harnessConfigPath?.trim()),
+        GITHUB_DISPATCH_REPOSITORY: Boolean(merged.githubDispatchRepository?.trim()),
+        GITHUB_DISPATCH_REPOSITORY_ID: Boolean(merged.githubDispatchRepositoryId?.trim()),
+        LINEAR_API_KEY: Boolean(merged.linearApiKey?.trim()),
+        CURSOR_API_KEY: Boolean(merged.cursorApiKey?.trim()),
+        GITHUB_TOKEN: Boolean(merged.githubToken?.trim()),
+        VERCEL_TOKEN: Boolean(merged.vercelToken?.trim()),
+    };
+}
+export async function getLocalFileBaseline(filePath) {
+    try {
+        const fileStat = await stat(filePath);
+        return `${fileStat.size}:${fileStat.mtimeMs}`;
+    }
+    catch {
+        return "missing";
+    }
+}
+export { MANAGED_KEYS };
+//# sourceMappingURL=env-merge.js.map

package/dist/setup/env-merge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-merge.js","sourceRoot":"","sources":["../../src/setup/env-merge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,2BAA2B,GAG5B,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,GAAG;IAClB,gBAAgB;IAChB,gBAAgB;IAChB,cAAc;IACd,cAAc;CACN,CAAC;AAEX,MAAM,YAAY,GAAG;IACnB,qBAAqB;IACrB,4BAA4B;IAC5B,+BAA+B;IAC/B,GAAG,WAAW;CACN,CAAC;AAmBX,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAQ,YAAkC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAmB;QAC/B,mBAAmB,EAAE,KAAK;QAC1B,0BAA0B,EAAE,KAAK;QACjC,6BAA6B,EAAE,KAAK;QACpC,cAAc,EAAE,KAAK;QACrB,cAAc,EAAE,KAAK;QACrB,YAAY,EAAE,KAAK;QACnB,YAAY,EAAE,KAAK;KACpB,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACpB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,QAAQ,CAAC,GAA2B,CAAC,GAAG,IAAI,CAAC;YAC/C,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,KAAK,uBAAuB,EAAE,CAAC;YAC3C,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAqB;IAErB,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAqB;IAErB,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,QAA8B,EAC9B,KAAoB;IAEpB,MAAM,MAAM,GAAkB;QAC5B,iBAAiB,EACf,KAAK,CAAC,iBAAiB,EAAE,IAAI,EAAE;YAC/B,QAAQ,EAAE,MAAM,CAAC,mBAAmB;YACpC,2BAA2B;QAC7B,wBAAwB,EACtB,KAAK,CAAC,wBAAwB,EAAE,IAAI,EAAE;YACtC,QAAQ,EAAE,MAAM,CAAC,0BAA0B;YAC3C,SAAS;QACX,0BAA0B,EACxB,KAAK,CAAC,0BAA0B,EAAE,IAAI,EAAE;YACxC,QAAQ,EAAE,MAAM,CAAC,6BAA6B;YAC9C,SAAS;KACZ,CAAC;IAEF,MAAM,SAAS,GAAG;QAChB,YAAY,EAAE,gBAAgB;QAC9B,YAAY,EAAE,gBAAgB;QAC9B,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE,cAAc;KACnB,CAAC;IAEX,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,QAAkC,CAAC,EAAE,IAAI,EAAE,CAAC;QACpE,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,QAAkC,CAAC,GAAG,SAAS,CAAC;QACzD,CAAC;aAAM,IAAI,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,QAAkC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAqB;IACpD,OAAO;QACL,mBAAmB,EACjB,MAAM,CAAC,iBAAiB,IAAI,2BAA2B;QACzD,0BAA0B,EAAE,MAAM,CAAC,wBAAwB,IAAI,EAAE;QACjE,6BAA6B,EAAE,MAAM,CAAC,0BAA0B,IAAI,EAAE;QACtE,cAAc,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;QACzC,cAAc,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;QACzC,YAAY,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;QACtC,YAAY,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,MAAqB;IACtD,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC/C,OAAO;;;;sBAIa,MAAM,CAAC,mBAAmB;6BACnB,MAAM,CAAC,0BAA0B;gCAC9B,MAAM,CAAC,6BAA6B;iBACnD,MAAM,CAAC,cAAc;iBACrB,MAAM,CAAC,cAAc;eACvB,MAAM,CAAC,YAAY;eACnB,MAAM,CAAC,YAAY;CACjC,CAAC;AACF,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,eAA8B,EAC9B,MAAqB;IAErB,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAc,CAAC;IAC1C,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;YACrB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QAED,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,WAAW,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACzE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvB,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACnD,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;YACjC,WAAW,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,IAAI,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,IAAI,CAAC;IACjB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAqB;IACxD,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,MAAqB;IAErB,OAAO;QACL,mBAAmB,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;QAC9D,0BAA0B,EAAE,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,IAAI,EAAE,CAAC;QAC5E,6BAA6B,EAAE,OAAO,CACpC,MAAM,CAAC,0BAA0B,EAAE,IAAI,EAAE,CAC1C;QACD,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;QACpD,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;QACpD,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QACjD,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IACzD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,OAAO,EAAE,YAAY,EAAE,CAAC"}

package/dist/setup/env-writer.d.ts

@@ -0,0 +1,17 @@
+import type { SetupActionResult } from "./setup-actions.js";
+import { type LocalFilePaths, type SetupEnvInput, type SetupExecutionMode } from "./setup-state.js";
+export interface WriteEnvLocalOptions {
+    paths: LocalFilePaths;
+    force?: boolean;
+    mode?: SetupExecutionMode;
+    input?: SetupEnvInput;
+    content?: string;
+}
+export declare function readEnvExampleContent(paths: LocalFilePaths): Promise<string>;
+export declare function scaffoldEnvFromExample(options: {
+    paths: LocalFilePaths;
+    force?: boolean;
+    mode?: SetupExecutionMode;
+}): Promise<SetupActionResult>;
+export declare function writeEnvLocal(options: WriteEnvLocalOptions): Promise<SetupActionResult>;
+//# sourceMappingURL=env-writer.d.ts.map

package/dist/setup/env-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-writer.d.ts","sourceRoot":"","sources":["../../src/setup/env-writer.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACxB,MAAM,kBAAkB,CAAC;AAW1B,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,cAAc,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAC1B,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA2CD,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,MAAM,CAAC,CAKjB;AAED,wBAAsB,sBAAsB,CAAC,OAAO,EAAE;IACpD,KAAK,EAAE,cAAc,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,kBAAkB,CAAC;CAC3B,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAwC7B;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,iBAAiB,CAAC,CAgD5B"}

package/dist/setup/env-writer.js

@@ -0,0 +1,129 @@
+import { access, copyFile, readFile, writeFile } from "node:fs/promises";
+import { SETUP_PERMISSIONS } from "./permission-model.js";
+import { collectEnvInputSecrets, sanitizeSetupActionResult, } from "./redact-secrets.js";
+import { DEFAULT_HARNESS_CONFIG_PATH, ENV_LOCAL, } from "./setup-state.js";
+async function fileExists(filePath) {
+    try {
+        await access(filePath);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function generateEnvWriteContent(input) {
+    const harnessConfigPath = input?.harnessConfigPath ?? DEFAULT_HARNESS_CONFIG_PATH;
+    const linearApiKey = input?.linearApiKey ?? "";
+    const cursorApiKey = input?.cursorApiKey ?? "";
+    const githubToken = input?.githubToken ?? "";
+    return `# Operator local setup — generated by harness setup core
+# Do not commit .env.local (gitignored).
+
+# --- Local private harness config (local only) ---
+# Points at your structured target-repo config file.
+# Edit .harness/config.local.json after init; keep this path unchanged.
+HARNESS_CONFIG_PATH=${harnessConfigPath}
+
+# --- GitHub Actions only (cloud runs) — do NOT put in .env.local ---
+# HARNESS_CONFIG_JSON_B64 replaces the whole harness config for that run.
+# It is NOT an overlay with committed harness.config.json.
+# Base64-encode your full .harness/config.local.json and set it as a
+# GitHub Actions secret on the harness repo. Include every repo you want
+# the harness to manage in repos[] and allowedTargetRepos[].
+
+# --- Live automation API keys (local CLI) ---
+# Fill these in .env.local for local doctor and harness runs.
+LINEAR_API_KEY=${linearApiKey}
+CURSOR_API_KEY=${cursorApiKey}
+
+# Local CLI name for GitHub API access (doctor merge profile, handoff, merge).
+# In GitHub Actions the secret is named HARNESS_GITHUB_TOKEN (workflow maps it
+# to runtime GITHUB_TOKEN). Do not use HARNESS_GITHUB_TOKEN in .env.local.
+GITHUB_TOKEN=${githubToken}
+`;
+}
+function presentEnvActionResult(result, knownSecrets = []) {
+    return sanitizeSetupActionResult(result, knownSecrets);
+}
+export async function readEnvExampleContent(paths) {
+    if (!(await fileExists(paths.envExample))) {
+        throw new Error(`Missing source file: ${paths.envExample}`);
+    }
+    return readFile(paths.envExample, "utf8");
+}
+export async function scaffoldEnvFromExample(options) {
+    const { paths, force = false, mode = "apply" } = options;
+    const label = ENV_LOCAL;
+    const destExists = await fileExists(paths.envLocal);
+    if (destExists && !force) {
+        return presentEnvActionResult({
+            actionId: "scaffold-env-local",
+            outcome: "skipped",
+            targetPath: paths.envLocal,
+            permission: SETUP_PERMISSIONS.localFileWrite,
+            reason: "already exists",
+            logMessage: `skipped ${label} (already exists)`,
+        });
+    }
+    const writeContent = await readEnvExampleContent(paths);
+    if (mode === "dry-run") {
+        return presentEnvActionResult({
+            actionId: "scaffold-env-local",
+            outcome: destExists ? "wouldChange" : "preview",
+            targetPath: paths.envLocal,
+            content: writeContent,
+            permission: SETUP_PERMISSIONS.localFileWrite,
+            reason: destExists ? "would overwrite with --force" : "would create",
+            logMessage: destExists ? `would overwrite ${label}` : `would create ${label}`,
+        });
+    }
+    await copyFile(paths.envExample, paths.envLocal);
+    return presentEnvActionResult({
+        actionId: "scaffold-env-local",
+        outcome: "changed",
+        targetPath: paths.envLocal,
+        content: writeContent,
+        permission: SETUP_PERMISSIONS.localFileWrite,
+        reason: destExists ? "overwrote existing file" : "created new file",
+        logMessage: `${destExists ? "overwrote" : "created"} ${label}`,
+    });
+}
+export async function writeEnvLocal(options) {
+    const { paths, force = false, mode = "apply" } = options;
+    const label = ENV_LOCAL;
+    const destExists = await fileExists(paths.envLocal);
+    const knownSecrets = collectEnvInputSecrets(options.input);
+    if (destExists && !force) {
+        return presentEnvActionResult({
+            actionId: "write-env-local",
+            outcome: "skipped",
+            targetPath: paths.envLocal,
+            permission: SETUP_PERMISSIONS.localFileWrite,
+            reason: "already exists",
+            logMessage: `skipped ${label} (already exists)`,
+        });
+    }
+    const writeContent = options.content ?? generateEnvWriteContent(options.input);
+    if (mode === "dry-run") {
+        return presentEnvActionResult({
+            actionId: "write-env-local",
+            outcome: destExists ? "wouldChange" : "preview",
+            targetPath: paths.envLocal,
+            content: writeContent,
+            permission: SETUP_PERMISSIONS.localFileWrite,
+            reason: destExists ? "would overwrite with --force" : "would create",
+            logMessage: destExists ? `would overwrite ${label}` : `would create ${label}`,
+        }, knownSecrets);
+    }
+    await writeFile(paths.envLocal, writeContent, "utf8");
+    return presentEnvActionResult({
+        actionId: "write-env-local",
+        outcome: "changed",
+        targetPath: paths.envLocal,
+        content: writeContent,
+        permission: SETUP_PERMISSIONS.localFileWrite,
+        reason: destExists ? "overwrote existing file" : "created new file",
+        logMessage: `${destExists ? "overwrote" : "created"} ${label}`,
+    }, knownSecrets);
+}
+//# sourceMappingURL=env-writer.js.map