prismalens 0.2.0 → 0.4.0

package/README.md

@@ -162,7 +162,7 @@ Preflight checklist that gates a run. Prints pass/fail per check; exits non-zero
   a signed-in `~/.claude/.credentials.json`. Doctor reports which layer supplied
   the credential (`source: env | file | stored | none`). (Performs a live
   provider model ping by default, while `--no-ping` skips it.)
-- **SOFT — workspace writable:** `workspace.base_dir` can be created/written.
+- **SOFT — workspace writable:** `workspace.dir` can be created/written.
 
 ### `init`
 
@@ -233,7 +233,19 @@ stdout).
 ```
 
 **`investigate`** — `params`: `{ alert?: FiringAlert, query?: string, repo?: string,
-harness?: string, model?: string, config?: string }`.
+harness?: string, model?: string, config?: string, service?: string, mode?: string,
+dangerouslySkipPermissions?: boolean, sandbox?: string, maxTurns?: number }`.
+
+CLI-parity params (each falls back to config when absent):
+
+- `sandbox` — the isolation boundary (ADR-0020), the CLI's `--sandbox`: one of
+  `auto` | `process` | `srt` | `e2b`. Absent ⇒ `agent.sandbox` from config. A
+  supplied value that is not a known mode (or a mode the resolved harness cannot
+  honour, e.g. `srt` on a non-ACP harness) is a `-32602` error — never a silent
+  fall-back to the cooperative floor.
+- `maxTurns` — per-run turn ceiling, the CLI's `--max-turns`: a positive integer.
+  A supplied zero, negative, fractional, or non-numeric value is a `-32602` error —
+  never a silently-removed cap.
 
 Streams a **notification per canonical event** (including the terminal `report`
 event), then **resolves the request** with `{ runId, report }`:
@@ -263,7 +275,7 @@ concurrently and interleave their notifications — each notification carries it
 | `-32700` | Parse error (invalid JSON on a line). |
 | `-32600` | Invalid request (not a well-formed JSON-RPC 2.0 request). |
 | `-32601` | Method not found. |
-| `-32602` | Invalid params (includes `resolveInvestigation` input errors — e.g. no alert/query, unknown or unbuilt harness). |
+| `-32602` | Invalid params (includes an invalid `sandbox` mode or `maxTurns` value, and `resolveInvestigation` input errors — e.g. no alert/query, unknown or unbuilt harness). |
 | `-32603` | Internal error (mid-stream failure; `data` carries `{ runId }`). |
 | `-32000` | No evidence — the harness branch failed and produced no report (`data` carries `{ runId }`). |
 
@@ -292,7 +304,8 @@ var is an error).
 # Tier-2 harness backend the supervisor rents (ADR-0008).
 agent:
   default: deepagents            # deepagents | claude-code | codex
-  # model: openai:gpt-oss:120b   # provider-prefixed; omit to let the harness default
+  # model: gpt-oss:120b          # bare id — the harness applies its own provider
+                                 # prefix; omit to let the harness default
   sandbox: auto                  # auto | process | srt — isolation boundary (ADR-0020).
                                  # auto (default): srt (enforced OS boundary) WHEN its
                                  # egress bridge is healthy (a self-check catches WSL
@@ -301,13 +314,13 @@ agent:
 
 # Read-only telemetry + app endpoints the harness may query.
 telemetry:
-  prometheusUrl: http://localhost:9090
-  alertmanagerUrl: http://localhost:9093
-  apiUrl: http://localhost:3000
+  prometheus_url: http://localhost:9090
+  alertmanager_url: http://localhost:9093
+  api_url: http://localhost:3000
 
 # Where runs, events, and reports are stored.
 workspace:
-  base_dir: ~/.prismalens
+  dir: ~/.prismalens
 
 # Per-harness native passthrough (ADR-0017) — untyped, forwarded straight to the
 # rented harness. For `deepagents` (the npm `deepagents-acp` binary, driven over
@@ -321,10 +334,13 @@ harnesses:
 ```
 
 Notes:
-- `agent.model` in config is a **provider-prefixed** id (e.g. `openai:gpt-oss:120b`).
-  The `--model` flag passes a **bare** id (e.g. `gpt-oss:120b`); for `deepagents` the
-  CLI prefixes it with `openai:`.
-- `telemetry.*` defaults to host-local URLs when unset.
+- `agent.model` sets the **Tier-2 harness** model only (a bare id, e.g. `gpt-oss:120b`;
+  each harness applies its own provider prefix). `--model` overrides it.
+- `synth.model` sets the **Tier-1 reduce** (report-synthesis) model — a separate call
+  to a separate provider (ADR-0013/0016). `agent.model` never feeds it, so a harness on
+  one provider (e.g. `claude-code`) can't misroute the reduce call to another (ollama).
+- `telemetry.*` keys are snake_case (`prometheus_url`, `alertmanager_url`, `api_url`)
+  and default to host-local URLs when unset.
 - There is currently no `agent.timeout_ms`, `budget.*`, or `logging.*` config —
   an overall per-run wall-clock budget and a Tier-1 reduce token/retry budget are
   planned alongside the Phase B.1 Sandbox port's resource limits (ADR-0020), not
@@ -341,7 +357,7 @@ The resolution precedence for any credential is: **env** (`PROVIDER_API_KEY`)
 - `pl auth list` — view saved providers.
 - `pl auth logout <provider>` — remove a saved credential.
 
-Stored credentials live in `auth.json` inside the app-data dir (`~/.prismalens` by default, honors `PRISMALENS_USER_FOLDER`), enforced to mode `0600`.
+Stored credentials live in `auth.json` inside the app-data dir (`~/.prismalens` by default, honors `PRISMALENS_WORKSPACE_DIR`), enforced to mode `0600`.
 
 - **Tier-1 reduce + the `deepagents` harness** use an OpenAI-compatible endpoint:
   - `OLLAMA_API_KEY` or `OPENAI_API_KEY` (the API key),

package/dist/bin/prismalens.js

@@ -1,59 +1,48 @@
 #!/usr/bin/env node
-// SPDX-License-Identifier: Apache-2.0
-// Copyright 2026 Sumit Patel
-/**
- * `prismalens` / `pl` — the engine CLI (ADR-0010: the engine is a CLI; the desktop
- * app + API drive it). Command bodies live in ../src/cli/* and are loaded lazily so
- * a fast `--help` doesn't pull in the engine. Bodies are implemented separately.
- */
+import {
+  cliVersion
+} from "../chunk-HPE5CTO4.js";
+
+// bin/prismalens.ts
 import { defineCommand, runMain, showUsage } from "citty";
 import consola from "consola";
-import { cliVersion } from "../src/version.js";
-// The AI SDK's one-time "AI SDK Warning System" banner prints via console.info
-// (STDOUT) mid-run — noise in the live timeline and corruption in piped JSON.
-// Off for the whole CLI; real per-warning notices still reach stderr via
-// process.emitWarning.
 globalThis.AI_SDK_LOG_WARNINGS = false;
-const originalEmit = process.emit;
+var originalEmit = process.emit;
 process.emit = ((name, ...args) => {
-    if (name === "warning" &&
-        args[0]?.name === "ExperimentalWarning" &&
-        args[0]?.message?.includes("SQLite")) {
-        return false;
-    }
-    return originalEmit.apply(process, [name, ...args]);
+  if (name === "warning" && args[0]?.name === "ExperimentalWarning" && args[0]?.message?.includes("SQLite")) {
+    return false;
+  }
+  return originalEmit.apply(process, [name, ...args]);
 });
-/** Lazily import a command body's default export from src/cli. */
-const lazy = (name) => () => import(`../src/cli/${name}.js`).then((m) => m.default);
-const main = defineCommand({
-    meta: {
-        name: "prismalens",
-        version: cliVersion(),
-        description: "PrismaLens investigation engine CLI — drives the two-tier engine (ADR-0008/0010).",
-    },
-    subCommands: {
-        investigate: lazy("investigate"),
-        listen: lazy("listen"),
-        serve: lazy("serve"),
-        doctor: lazy("doctor"),
-        init: lazy("init"),
-        status: lazy("status"),
-        report: lazy("report"),
-        auth: lazy("auth"),
-    },
+var lazy = (name) => () => {
+  const modulePath = `../src/cli/${name}.js`;
+  return import(modulePath).then((m) => m.default);
+};
+var main = defineCommand({
+  meta: {
+    name: "prismalens",
+    version: cliVersion(),
+    description: "PrismaLens investigation engine CLI \u2014 drives the two-tier engine (ADR-0008/0010)."
+  },
+  subCommands: {
+    investigate: lazy("investigate"),
+    listen: lazy("listen"),
+    serve: lazy("serve"),
+    doctor: lazy("doctor"),
+    init: lazy("init"),
+    status: lazy("status"),
+    report: lazy("report"),
+    auth: lazy("auth")
+  }
 });
 runMain(main, {
-    showUsage: async (cmd, parent) => {
-        const rawArgs = process.argv.slice(2);
-        if (rawArgs.includes("--help") ||
-            rawArgs.includes("-h") ||
-            rawArgs.length === 0) {
-            await showUsage(cmd, parent);
-        }
-        else {
-            const cmdName = `pl${rawArgs[0] && !rawArgs[0].startsWith("-") ? ` ${rawArgs[0]}` : ""}`;
-            consola.info(`See \`${cmdName} --help\` for usage.`);
-        }
-    },
+  showUsage: async (cmd, parent) => {
+    const rawArgs = process.argv.slice(2);
+    if (rawArgs.includes("--help") || rawArgs.includes("-h") || rawArgs.length === 0) {
+      await showUsage(cmd, parent);
+    } else {
+      const cmdName = `pl${rawArgs[0] && !rawArgs[0].startsWith("-") ? ` ${rawArgs[0]}` : ""}`;
+      consola.info(`Run \`${cmdName} --help\` for usage.`);
+    }
+  }
 });
-//# sourceMappingURL=prismalens.js.map

package/dist/chunk-2Z7QZSIS.js

@@ -0,0 +1,20 @@
+// ../@prismalens/config/dist/utils/app-data.js
+import { mkdirSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+function getAppDataDir() {
+  if (process.env.PRISMALENS_WORKSPACE_DIR) {
+    return process.env.PRISMALENS_WORKSPACE_DIR;
+  }
+  return join(homedir(), ".prismalens");
+}
+function ensureAppDataDir() {
+  const appDataDir = getAppDataDir();
+  mkdirSync(appDataDir, { recursive: true, mode: 493 });
+  return appDataDir;
+}
+
+export {
+  getAppDataDir,
+  ensureAppDataDir
+};