thumbgate 0.9.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (369) hide show
  1. package/.claude-plugin/README.md +134 -0
  2. package/.claude-plugin/bundle/icon.png +0 -0
  3. package/.claude-plugin/bundle/icon.svg +18 -0
  4. package/.claude-plugin/bundle/server/index.js +24 -0
  5. package/.claude-plugin/marketplace.json +36 -0
  6. package/.claude-plugin/plugin.json +21 -0
  7. package/.well-known/mcp/server-card.json +231 -0
  8. package/LICENSE +21 -0
  9. package/README.md +375 -0
  10. package/adapters/README.md +9 -0
  11. package/adapters/amp/skills/rlhf-feedback/SKILL.md +22 -0
  12. package/adapters/chatgpt/INSTALL.md +83 -0
  13. package/adapters/chatgpt/openapi.yaml +1281 -0
  14. package/adapters/claude/.mcp.json +14 -0
  15. package/adapters/codex/config.toml +9 -0
  16. package/adapters/gemini/function-declarations.json +224 -0
  17. package/adapters/mcp/server-stdio.js +788 -0
  18. package/adapters/opencode/opencode.json +15 -0
  19. package/bin/cli.js +1483 -0
  20. package/bin/memory.sh +64 -0
  21. package/bin/obsidian-sync.sh +20 -0
  22. package/bin/postinstall.js +37 -0
  23. package/config/build-metadata.json +4 -0
  24. package/config/e2e-critical-flows.json +45 -0
  25. package/config/gate-templates.json +77 -0
  26. package/config/gates/claim-verification.json +29 -0
  27. package/config/gates/computer-use.json +39 -0
  28. package/config/gates/default.json +117 -0
  29. package/config/github-about.json +25 -0
  30. package/config/mcp-allowlists.json +135 -0
  31. package/config/model-tiers.json +33 -0
  32. package/config/partner-routing.json +132 -0
  33. package/config/policy-bundles/constrained-v1.json +64 -0
  34. package/config/policy-bundles/default-v1.json +91 -0
  35. package/config/rubrics/default-v1.json +52 -0
  36. package/config/skill-packs/react-testing.json +23 -0
  37. package/config/skill-packs/stripe-integration/references/api-spec.json +1 -0
  38. package/config/skill-packs/stripe-integration/references/webhook-guide.md +3 -0
  39. package/config/skill-specs/pr-reviewer.json +9 -0
  40. package/config/skill-specs/release-status.json +9 -0
  41. package/config/skill-specs/ticket-triage.json +9 -0
  42. package/config/subagent-profiles.json +32 -0
  43. package/config/tessl-tiles.json +29 -0
  44. package/config/thumbgate-settings.managed.json +12 -0
  45. package/openapi/openapi.yaml +1281 -0
  46. package/package.json +286 -0
  47. package/plugins/amp-skill/INSTALL.md +52 -0
  48. package/plugins/amp-skill/SKILL.md +64 -0
  49. package/plugins/claude-codex-bridge/.claude-plugin/plugin.json +22 -0
  50. package/plugins/claude-codex-bridge/.mcp.json +12 -0
  51. package/plugins/claude-codex-bridge/INSTALL.md +43 -0
  52. package/plugins/claude-codex-bridge/README.md +46 -0
  53. package/plugins/claude-codex-bridge/scripts/codex-bridge.js +288 -0
  54. package/plugins/claude-codex-bridge/skills/adversarial-review/SKILL.md +24 -0
  55. package/plugins/claude-codex-bridge/skills/result/SKILL.md +22 -0
  56. package/plugins/claude-codex-bridge/skills/review/SKILL.md +28 -0
  57. package/plugins/claude-codex-bridge/skills/second-pass/SKILL.md +27 -0
  58. package/plugins/claude-codex-bridge/skills/setup/SKILL.md +21 -0
  59. package/plugins/claude-codex-bridge/skills/status/SKILL.md +19 -0
  60. package/plugins/claude-skill/INSTALL.md +55 -0
  61. package/plugins/claude-skill/SKILL.md +46 -0
  62. package/plugins/codex-profile/.codex-plugin/plugin.json +43 -0
  63. package/plugins/codex-profile/.mcp.json +12 -0
  64. package/plugins/codex-profile/AGENTS.md +20 -0
  65. package/plugins/codex-profile/INSTALL.md +66 -0
  66. package/plugins/codex-profile/README.md +37 -0
  67. package/plugins/cursor-marketplace/.cursor-plugin/plugin.json +23 -0
  68. package/plugins/cursor-marketplace/CHANGELOG.md +30 -0
  69. package/plugins/cursor-marketplace/LICENSE +21 -0
  70. package/plugins/cursor-marketplace/README.md +124 -0
  71. package/plugins/cursor-marketplace/agents/reliability-reviewer.md +31 -0
  72. package/plugins/cursor-marketplace/assets/logo-400x400.png +0 -0
  73. package/plugins/cursor-marketplace/commands/capture-feedback.md +33 -0
  74. package/plugins/cursor-marketplace/commands/check-gates.md +25 -0
  75. package/plugins/cursor-marketplace/commands/show-lessons.md +27 -0
  76. package/plugins/cursor-marketplace/hooks/hooks.json +10 -0
  77. package/plugins/cursor-marketplace/mcp.json +12 -0
  78. package/plugins/cursor-marketplace/rules/feedback-capture.mdc +34 -0
  79. package/plugins/cursor-marketplace/rules/pre-action-gates.mdc +30 -0
  80. package/plugins/cursor-marketplace/rules/session-continuity.mdc +28 -0
  81. package/plugins/cursor-marketplace/scripts/gate-check.sh +11 -0
  82. package/plugins/cursor-marketplace/skills/capture-feedback/SKILL.md +47 -0
  83. package/plugins/cursor-marketplace/skills/prevention-rules/SKILL.md +31 -0
  84. package/plugins/cursor-marketplace/skills/recall-context/SKILL.md +30 -0
  85. package/plugins/cursor-marketplace/skills/search-lessons/SKILL.md +33 -0
  86. package/plugins/gemini-extension/INSTALL.md +92 -0
  87. package/plugins/gemini-extension/gemini_prompt.txt +14 -0
  88. package/plugins/gemini-extension/tool_contract.json +45 -0
  89. package/plugins/opencode-profile/INSTALL.md +57 -0
  90. package/public/assets/instagram-card.png +0 -0
  91. package/public/assets/tiktok-agent-memory.mp4 +0 -0
  92. package/public/blog.html +400 -0
  93. package/public/dashboard.html +1093 -0
  94. package/public/guide.html +317 -0
  95. package/public/index.html +1195 -0
  96. package/public/learn/agent-harness-pattern.html +180 -0
  97. package/public/learn/ai-agent-persistent-memory.html +202 -0
  98. package/public/learn/learn.css +45 -0
  99. package/public/learn/mcp-pre-action-gates-explained.html +172 -0
  100. package/public/learn/stop-ai-agent-force-push.html +134 -0
  101. package/public/learn/vibe-coding-safety-net.html +142 -0
  102. package/public/learn.html +213 -0
  103. package/public/lessons.html +650 -0
  104. package/public/vercel.json +8 -0
  105. package/scripts/__pycache__/train_from_feedback.cpython-314.pyc +0 -0
  106. package/scripts/a2ui-engine.js +73 -0
  107. package/scripts/access-anomaly-detector.js +12 -0
  108. package/scripts/adk-consolidator.js +266 -0
  109. package/scripts/agent-readiness.js +220 -0
  110. package/scripts/agent-security-hardening.js +227 -0
  111. package/scripts/agentic-data-pipeline.js +847 -0
  112. package/scripts/analytics-report.js +328 -0
  113. package/scripts/analytics-window.js +158 -0
  114. package/scripts/async-job-runner.js +1001 -0
  115. package/scripts/audit-trail.js +398 -0
  116. package/scripts/auto-promote-gates.js +293 -0
  117. package/scripts/auto-wire-hooks.js +316 -0
  118. package/scripts/autonomous-sales-agent.js +39 -0
  119. package/scripts/autoresearch-runner.js +216 -0
  120. package/scripts/background-agent-governance.js +237 -0
  121. package/scripts/behavioral-extraction.js +93 -0
  122. package/scripts/belief-update.js +84 -0
  123. package/scripts/billing.js +2438 -0
  124. package/scripts/bot-detector.js +50 -0
  125. package/scripts/budget-guard.js +173 -0
  126. package/scripts/build-claude-mcpb.js +189 -0
  127. package/scripts/build-metadata.js +97 -0
  128. package/scripts/check-congruence.js +322 -0
  129. package/scripts/cli-feedback.js +135 -0
  130. package/scripts/cli-telemetry.js +87 -0
  131. package/scripts/cloudflare-dynamic-sandbox.js +315 -0
  132. package/scripts/code-reasoning.js +350 -0
  133. package/scripts/codegraph-context.js +466 -0
  134. package/scripts/commercial-offer.js +56 -0
  135. package/scripts/computer-use-firewall.js +250 -0
  136. package/scripts/context-engine.js +694 -0
  137. package/scripts/contextfs.js +1287 -0
  138. package/scripts/conversation-context.js +119 -0
  139. package/scripts/creator-campaigns.js +239 -0
  140. package/scripts/daemon-manager.js +108 -0
  141. package/scripts/daily-digest.js +11 -0
  142. package/scripts/dashboard-render-spec.js +395 -0
  143. package/scripts/dashboard.js +1058 -0
  144. package/scripts/data-governance.js +173 -0
  145. package/scripts/delegation-runtime.js +900 -0
  146. package/scripts/deploy-gcp.sh +44 -0
  147. package/scripts/deploy-policy.js +231 -0
  148. package/scripts/disagreement-mining.js +315 -0
  149. package/scripts/dispatch-brief.js +159 -0
  150. package/scripts/distribution-surfaces.js +44 -0
  151. package/scripts/dpo-optimizer.js +206 -0
  152. package/scripts/ensure-repo-bootstrap.js +129 -0
  153. package/scripts/ephemeral-agent-store.js +219 -0
  154. package/scripts/eval-harness.js +56 -0
  155. package/scripts/evolution-state.js +241 -0
  156. package/scripts/experiment-tracker.js +267 -0
  157. package/scripts/export-databricks-bundle.js +242 -0
  158. package/scripts/export-dpo-pairs.js +344 -0
  159. package/scripts/export-kto-pairs.js +309 -0
  160. package/scripts/export-training.js +450 -0
  161. package/scripts/failure-diagnostics.js +558 -0
  162. package/scripts/feedback-attribution.js +313 -0
  163. package/scripts/feedback-fallback.js +110 -0
  164. package/scripts/feedback-history-distiller.js +391 -0
  165. package/scripts/feedback-inbox-read.js +162 -0
  166. package/scripts/feedback-loop.js +1887 -0
  167. package/scripts/feedback-paths.js +145 -0
  168. package/scripts/feedback-quality.js +139 -0
  169. package/scripts/feedback-root-consolidator.js +238 -0
  170. package/scripts/feedback-schema.js +426 -0
  171. package/scripts/feedback-session.js +286 -0
  172. package/scripts/feedback-to-memory.js +185 -0
  173. package/scripts/feedback-to-rules.js +164 -0
  174. package/scripts/filesystem-search.js +405 -0
  175. package/scripts/funnel-analytics.js +35 -0
  176. package/scripts/gate-satisfy.js +42 -0
  177. package/scripts/gate-stats.js +116 -0
  178. package/scripts/gate-templates.js +70 -0
  179. package/scripts/gates-engine.js +816 -0
  180. package/scripts/generate-paperbanana-diagrams.sh +99 -0
  181. package/scripts/generate-pretool-hook.sh +40 -0
  182. package/scripts/github-about.js +350 -0
  183. package/scripts/github-outreach.js +65 -0
  184. package/scripts/gtm-revenue-loop.js +520 -0
  185. package/scripts/hallucination-detector.js +226 -0
  186. package/scripts/hf-papers.js +317 -0
  187. package/scripts/history-distiller.js +200 -0
  188. package/scripts/hook-auto-capture.sh +100 -0
  189. package/scripts/hook-stop-pr-thread-check.sh +68 -0
  190. package/scripts/hook-stop-self-score.sh +51 -0
  191. package/scripts/hook-stop-verify-deploy.sh +31 -0
  192. package/scripts/hook-thumbgate-cache-updater.js +48 -0
  193. package/scripts/hook-verify-before-done.sh +20 -0
  194. package/scripts/hosted-config.js +156 -0
  195. package/scripts/hybrid-feedback-context.js +675 -0
  196. package/scripts/install-mcp.js +159 -0
  197. package/scripts/intent-router.js +392 -0
  198. package/scripts/internal-agent-bootstrap.js +490 -0
  199. package/scripts/jsonl-watcher.js +155 -0
  200. package/scripts/lesson-db.js +613 -0
  201. package/scripts/lesson-inference.js +310 -0
  202. package/scripts/lesson-retrieval.js +95 -0
  203. package/scripts/lesson-rotation.js +137 -0
  204. package/scripts/lesson-search.js +644 -0
  205. package/scripts/lesson-synthesis.js +196 -0
  206. package/scripts/license.js +50 -0
  207. package/scripts/local-model-profile.js +384 -0
  208. package/scripts/markdown-escape.js +12 -0
  209. package/scripts/marketing-experiment.js +671 -0
  210. package/scripts/mcp-config.js +149 -0
  211. package/scripts/mcp-policy.js +99 -0
  212. package/scripts/memalign-recall.js +111 -0
  213. package/scripts/memory-firewall.js +222 -0
  214. package/scripts/memory-migration.js +296 -0
  215. package/scripts/meta-policy.js +190 -0
  216. package/scripts/metered-billing.js +16 -0
  217. package/scripts/model-tier-router.js +301 -0
  218. package/scripts/money-watcher.js +71 -0
  219. package/scripts/multi-hop-recall.js +240 -0
  220. package/scripts/natural-language-harness.js +330 -0
  221. package/scripts/obsidian-export.js +713 -0
  222. package/scripts/operational-dashboard.js +103 -0
  223. package/scripts/operational-summary.js +93 -0
  224. package/scripts/optimize-context.js +17 -0
  225. package/scripts/org-dashboard.js +201 -0
  226. package/scripts/partner-orchestration.js +146 -0
  227. package/scripts/per-step-scoring.js +165 -0
  228. package/scripts/perplexity-marketing.js +466 -0
  229. package/scripts/pii-scanner.js +153 -0
  230. package/scripts/plan-gate.js +154 -0
  231. package/scripts/post-everywhere.js +308 -0
  232. package/scripts/post-to-x-retry.sh +22 -0
  233. package/scripts/post-to-x.js +369 -0
  234. package/scripts/pr-manager.js +236 -0
  235. package/scripts/predictive-insights.js +356 -0
  236. package/scripts/principle-extractor.js +162 -0
  237. package/scripts/pro-features.js +40 -0
  238. package/scripts/pro-local-dashboard.js +174 -0
  239. package/scripts/problem-detail.js +53 -0
  240. package/scripts/product-feedback.js +134 -0
  241. package/scripts/profile-router.js +245 -0
  242. package/scripts/prompt-dlp.js +221 -0
  243. package/scripts/prompt-guard.js +83 -0
  244. package/scripts/prove-adapters.js +863 -0
  245. package/scripts/prove-attribution.js +365 -0
  246. package/scripts/prove-automation.js +653 -0
  247. package/scripts/prove-autoresearch.js +304 -0
  248. package/scripts/prove-claim-verification.js +277 -0
  249. package/scripts/prove-cloudflare-sandbox.js +163 -0
  250. package/scripts/prove-data-pipeline.js +410 -0
  251. package/scripts/prove-data-quality.js +227 -0
  252. package/scripts/prove-evolution.js +352 -0
  253. package/scripts/prove-harnesses.js +287 -0
  254. package/scripts/prove-intelligence.js +259 -0
  255. package/scripts/prove-lancedb.js +371 -0
  256. package/scripts/prove-local-intelligence.js +342 -0
  257. package/scripts/prove-loop-closure.js +263 -0
  258. package/scripts/prove-predictive-insights.js +357 -0
  259. package/scripts/prove-runtime.js +350 -0
  260. package/scripts/prove-seo-gsd.js +234 -0
  261. package/scripts/prove-settings.js +279 -0
  262. package/scripts/prove-subway-upgrades.js +277 -0
  263. package/scripts/prove-tessl.js +229 -0
  264. package/scripts/prove-training-export.js +327 -0
  265. package/scripts/prove-workflow-contract.js +116 -0
  266. package/scripts/prove-xmemory.js +332 -0
  267. package/scripts/publish-decision.js +133 -0
  268. package/scripts/pulse.js +80 -0
  269. package/scripts/rate-limiter.js +125 -0
  270. package/scripts/reddit-dm-outreach.js +182 -0
  271. package/scripts/reddit-monitor-cron.sh +26 -0
  272. package/scripts/reflector-agent.js +221 -0
  273. package/scripts/reminder-engine.js +132 -0
  274. package/scripts/revenue-status.js +472 -0
  275. package/scripts/risk-scorer.js +459 -0
  276. package/scripts/rlaif-self-audit.js +129 -0
  277. package/scripts/rlhf_session_start.sh +32 -0
  278. package/scripts/rubric-engine.js +230 -0
  279. package/scripts/schedule-manager.js +251 -0
  280. package/scripts/secret-scanner.js +414 -0
  281. package/scripts/self-heal.js +147 -0
  282. package/scripts/self-healing-check.js +188 -0
  283. package/scripts/semantic-layer.js +98 -0
  284. package/scripts/seo-gsd.js +1153 -0
  285. package/scripts/settings-hierarchy.js +214 -0
  286. package/scripts/shieldcortex-memory-firewall-runner.mjs +53 -0
  287. package/scripts/skill-exporter.js +262 -0
  288. package/scripts/skill-generator.js +446 -0
  289. package/scripts/skill-materializer.js +134 -0
  290. package/scripts/skill-packs.js +136 -0
  291. package/scripts/skill-proposer.js +99 -0
  292. package/scripts/skill-quality-tracker.js +282 -0
  293. package/scripts/slo-alert-engine.js +14 -0
  294. package/scripts/slow-loop.js +72 -0
  295. package/scripts/social-analytics/db/schema.sql +32 -0
  296. package/scripts/social-analytics/db/social-analytics.db +0 -0
  297. package/scripts/social-analytics/digest.js +256 -0
  298. package/scripts/social-analytics/generate-instagram-card.js +97 -0
  299. package/scripts/social-analytics/instagram-thumbgate-post.js +107 -0
  300. package/scripts/social-analytics/load-env.js +46 -0
  301. package/scripts/social-analytics/mcp-server.js +289 -0
  302. package/scripts/social-analytics/normalizer.js +580 -0
  303. package/scripts/social-analytics/notify.js +162 -0
  304. package/scripts/social-analytics/poll-all.js +92 -0
  305. package/scripts/social-analytics/pollers/github.js +195 -0
  306. package/scripts/social-analytics/pollers/instagram.js +253 -0
  307. package/scripts/social-analytics/pollers/linkedin.js +330 -0
  308. package/scripts/social-analytics/pollers/plausible.js +247 -0
  309. package/scripts/social-analytics/pollers/reddit.js +306 -0
  310. package/scripts/social-analytics/pollers/threads.js +233 -0
  311. package/scripts/social-analytics/pollers/tiktok.js +203 -0
  312. package/scripts/social-analytics/pollers/x.js +227 -0
  313. package/scripts/social-analytics/pollers/youtube.js +304 -0
  314. package/scripts/social-analytics/pollers/zernio.js +183 -0
  315. package/scripts/social-analytics/publish-instagram-thumbgate.js +98 -0
  316. package/scripts/social-analytics/publish-thumbgate-launch.js +316 -0
  317. package/scripts/social-analytics/publishers/devto.js +122 -0
  318. package/scripts/social-analytics/publishers/instagram.js +317 -0
  319. package/scripts/social-analytics/publishers/linkedin.js +294 -0
  320. package/scripts/social-analytics/publishers/reddit.js +390 -0
  321. package/scripts/social-analytics/publishers/threads.js +275 -0
  322. package/scripts/social-analytics/publishers/tiktok.js +217 -0
  323. package/scripts/social-analytics/publishers/x.js +259 -0
  324. package/scripts/social-analytics/publishers/youtube.js +223 -0
  325. package/scripts/social-analytics/publishers/zernio.js +378 -0
  326. package/scripts/social-analytics/run-digest.js +34 -0
  327. package/scripts/social-analytics/store.js +257 -0
  328. package/scripts/social-analytics/utm.js +143 -0
  329. package/scripts/social-pipeline.js +2628 -0
  330. package/scripts/social-quality-gate.js +18 -0
  331. package/scripts/social-reply-monitor.js +445 -0
  332. package/scripts/status-dashboard.js +155 -0
  333. package/scripts/statusline-lesson.js +16 -0
  334. package/scripts/statusline-tower.js +8 -0
  335. package/scripts/statusline.sh +116 -0
  336. package/scripts/stripe-live-status.js +115 -0
  337. package/scripts/subagent-profiles.js +79 -0
  338. package/scripts/sync-gh-secrets-from-env.sh +70 -0
  339. package/scripts/sync-github-about.js +52 -0
  340. package/scripts/sync-version.js +447 -0
  341. package/scripts/synthetic-dpo.js +234 -0
  342. package/scripts/telemetry-analytics.js +821 -0
  343. package/scripts/tessl-export.js +371 -0
  344. package/scripts/test-coverage.js +120 -0
  345. package/scripts/thompson-sampling.js +417 -0
  346. package/scripts/thumbgate-search.js +189 -0
  347. package/scripts/tool-kpi-tracker.js +12 -0
  348. package/scripts/tool-registry.js +811 -0
  349. package/scripts/train_from_feedback.py +933 -0
  350. package/scripts/user-profile.js +78 -0
  351. package/scripts/validate-feedback.js +581 -0
  352. package/scripts/validate-workflow-contract.js +287 -0
  353. package/scripts/vector-store.js +197 -0
  354. package/scripts/verification-loop.js +291 -0
  355. package/scripts/verify-obsidian-setup.sh +269 -0
  356. package/scripts/verify-run.js +269 -0
  357. package/scripts/webhook-delivery.js +62 -0
  358. package/scripts/weekly-auto-post.js +124 -0
  359. package/scripts/workflow-runs.js +154 -0
  360. package/scripts/workflow-sprint-intake.js +475 -0
  361. package/scripts/workspace-evolver.js +374 -0
  362. package/scripts/x-autonomous-marketing.js +139 -0
  363. package/scripts/xmemory-lite.js +405 -0
  364. package/skills/agent-memory/SKILL.md +97 -0
  365. package/skills/rlhf-feedback/SKILL.md +49 -0
  366. package/skills/solve-architecture-autonomy/SKILL.md +17 -0
  367. package/skills/solve-architecture-autonomy/tool.js +33 -0
  368. package/skills/thumbgate/SKILL.md +114 -0
  369. package/src/api/server.js +4206 -0
@@ -0,0 +1,330 @@
1
+ #!/usr/bin/env node
2
+ 'use strict';
3
+
4
+ const fs = require('fs');
5
+ const path = require('path');
6
+ const {
7
+ getSetting,
8
+ getSettingOrigin,
9
+ } = require('./settings-hierarchy');
10
+
11
+ const HARNESS_DIR = path.join(__dirname, '..', 'harnesses');
12
+ const REQUIRED_SECTIONS = ['Purpose', 'Steps', 'Success Evidence'];
13
+
14
+ function slugify(value, fallback) {
15
+ const slug = String(value || '')
16
+ .toLowerCase()
17
+ .replace(/[^a-z0-9]+/g, '_')
18
+ .replace(/^_+|_+$/g, '')
19
+ .slice(0, 48);
20
+ return slug || fallback;
21
+ }
22
+
23
+ function renderTemplate(template, inputs) {
24
+ return String(template || '').replace(/\{\{\s*([a-zA-Z0-9_.-]+)\s*\}\}/g, (_, key) => {
25
+ if (Object.prototype.hasOwnProperty.call(inputs, key)) {
26
+ return String(inputs[key]);
27
+ }
28
+ return '';
29
+ });
30
+ }
31
+
32
+ function parseFrontmatter(source, sourcePath) {
33
+ const match = source.match(/^---\n([\s\S]*?)\n---\n?/);
34
+ if (!match) {
35
+ throw new Error(`Harness ${sourcePath} must start with JSON frontmatter`);
36
+ }
37
+
38
+ let metadata;
39
+ try {
40
+ metadata = JSON.parse(match[1]);
41
+ } catch (error) {
42
+ throw new Error(`Harness ${sourcePath} has invalid JSON frontmatter: ${error.message}`);
43
+ }
44
+
45
+ return {
46
+ metadata,
47
+ body: source.slice(match[0].length),
48
+ };
49
+ }
50
+
51
+ function parseSections(body) {
52
+ const sections = {};
53
+ let current = null;
54
+
55
+ for (const line of body.split(/\r?\n/)) {
56
+ const heading = line.match(/^##\s+(.+?)\s*$/);
57
+ if (heading) {
58
+ current = heading[1].trim();
59
+ sections[current] = [];
60
+ continue;
61
+ }
62
+
63
+ if (current) {
64
+ sections[current].push(line);
65
+ }
66
+ }
67
+
68
+ return Object.fromEntries(
69
+ Object.entries(sections).map(([key, lines]) => [key, lines.join('\n').trim()]),
70
+ );
71
+ }
72
+
73
+ function extractListItems(sectionBody) {
74
+ return String(sectionBody || '')
75
+ .split(/\r?\n/)
76
+ .map((line) => line.trim())
77
+ .filter(Boolean)
78
+ .map((line) => line.replace(/^[-*]\s+/, '').replace(/^\d+\.\s+/, '').trim())
79
+ .filter(Boolean);
80
+ }
81
+
82
+ function resolveInputs(inputSchema = {}, overrides = {}) {
83
+ const resolved = {};
84
+
85
+ for (const [key, schema] of Object.entries(inputSchema || {})) {
86
+ const normalized = (schema && typeof schema === 'object' && !Array.isArray(schema))
87
+ ? schema
88
+ : { default: schema };
89
+
90
+ if (Object.prototype.hasOwnProperty.call(overrides, key)) {
91
+ resolved[key] = overrides[key];
92
+ continue;
93
+ }
94
+
95
+ if (Object.prototype.hasOwnProperty.call(normalized, 'default')) {
96
+ resolved[key] = normalized.default;
97
+ continue;
98
+ }
99
+
100
+ if (normalized.required) {
101
+ throw new Error(`Missing required harness input: ${key}`);
102
+ }
103
+ }
104
+
105
+ for (const [key, value] of Object.entries(overrides || {})) {
106
+ if (!Object.prototype.hasOwnProperty.call(resolved, key)) {
107
+ resolved[key] = value;
108
+ }
109
+ }
110
+
111
+ return resolved;
112
+ }
113
+
114
+ function parseHarnessSource(source, sourcePath) {
115
+ const { metadata, body } = parseFrontmatter(source, sourcePath);
116
+ const sections = parseSections(body);
117
+
118
+ for (const section of REQUIRED_SECTIONS) {
119
+ if (!sections[section]) {
120
+ throw new Error(`Harness ${sourcePath} is missing required section "${section}"`);
121
+ }
122
+ }
123
+
124
+ if (!metadata.id || !metadata.title) {
125
+ throw new Error(`Harness ${sourcePath} must define id and title in frontmatter`);
126
+ }
127
+
128
+ const steps = extractListItems(sections['Steps']);
129
+ const successEvidence = extractListItems(sections['Success Evidence']);
130
+ if (steps.length === 0) {
131
+ throw new Error(`Harness ${sourcePath} must define at least one step`);
132
+ }
133
+ if (successEvidence.length === 0) {
134
+ throw new Error(`Harness ${sourcePath} must define at least one success-evidence bullet`);
135
+ }
136
+
137
+ return {
138
+ id: metadata.id,
139
+ title: metadata.title,
140
+ description: metadata.description || sections['Purpose'],
141
+ tags: Array.isArray(metadata.tags) ? metadata.tags : [],
142
+ inputSchema: metadata.inputs || {},
143
+ purpose: sections['Purpose'],
144
+ steps,
145
+ successEvidence,
146
+ sourcePath,
147
+ };
148
+ }
149
+
150
+ function loadHarnessFile(sourcePath) {
151
+ return parseHarnessSource(fs.readFileSync(sourcePath, 'utf8'), sourcePath);
152
+ }
153
+
154
+ function loadHarnesses(options = {}) {
155
+ if (!fs.existsSync(HARNESS_DIR)) {
156
+ return [];
157
+ }
158
+
159
+ const harnesses = fs.readdirSync(HARNESS_DIR)
160
+ .filter((entry) => entry.endsWith('.md'))
161
+ .sort()
162
+ .map((entry) => loadHarnessFile(path.join(HARNESS_DIR, entry)));
163
+
164
+ if (options.tag) {
165
+ return harnesses.filter((harness) => harness.tags.includes(String(options.tag)));
166
+ }
167
+
168
+ return harnesses;
169
+ }
170
+
171
+ function listHarnesses(options = {}) {
172
+ return loadHarnesses(options).map((harness) => ({
173
+ id: harness.id,
174
+ title: harness.title,
175
+ description: harness.description,
176
+ tags: harness.tags,
177
+ inputs: Object.keys(harness.inputSchema),
178
+ sourcePath: harness.sourcePath,
179
+ }));
180
+ }
181
+
182
+ function getHarness(identifier) {
183
+ const key = String(identifier || '').trim();
184
+ const harness = loadHarnesses().find((entry) => {
185
+ const basename = path.basename(entry.sourcePath, path.extname(entry.sourcePath));
186
+ return entry.id === key || basename === key;
187
+ });
188
+
189
+ if (!harness) {
190
+ throw new Error(`Unknown harness: ${identifier}`);
191
+ }
192
+
193
+ return harness;
194
+ }
195
+
196
+ function renderHarnessPlan(identifier, inputOverrides = {}) {
197
+ const harness = getHarness(identifier);
198
+ const resolvedInputs = resolveInputs(harness.inputSchema, inputOverrides);
199
+
200
+ return {
201
+ ...harness,
202
+ resolvedInputs,
203
+ purpose: renderTemplate(harness.purpose, resolvedInputs),
204
+ steps: harness.steps.map((step) => renderTemplate(step, resolvedInputs)),
205
+ successEvidence: harness.successEvidence.map((line) => renderTemplate(line, resolvedInputs)),
206
+ };
207
+ }
208
+
209
+ function extractCommand(step) {
210
+ const exact = step.match(/^(?:Run|Execute|Command):\s*`([^`]+)`\s*$/i);
211
+ if (exact) {
212
+ return exact[1];
213
+ }
214
+
215
+ const inline = step.match(/^(?:Run|Execute|Command)\b.*?`([^`]+)`/i);
216
+ return inline ? inline[1] : null;
217
+ }
218
+
219
+ function buildHarnessJob(identifier, inputOverrides = {}, options = {}) {
220
+ const plan = renderHarnessPlan(identifier, inputOverrides);
221
+ const settingsOptions = options.settingsOptions || {};
222
+ const runtimePolicy = {
223
+ enabled: Boolean(getSetting('harnesses.enabled', settingsOptions)),
224
+ allowRuntimeExecution: Boolean(getSetting('harnesses.allowRuntimeExecution', settingsOptions)),
225
+ origins: {
226
+ enabled: getSettingOrigin('harnesses.enabled', settingsOptions),
227
+ allowRuntimeExecution: getSettingOrigin('harnesses.allowRuntimeExecution', settingsOptions),
228
+ },
229
+ };
230
+ const summary = [
231
+ `Harness: ${plan.title}`,
232
+ `Harness ID: ${plan.id}`,
233
+ `Purpose: ${plan.purpose}`,
234
+ ];
235
+
236
+ if (Object.keys(plan.resolvedInputs).length > 0) {
237
+ summary.push(`Inputs:\n${JSON.stringify(plan.resolvedInputs, null, 2)}`);
238
+ }
239
+
240
+ const stages = [
241
+ {
242
+ name: 'harness_brief',
243
+ context: summary.join('\n\n'),
244
+ },
245
+ ];
246
+
247
+ plan.steps.forEach((step, index) => {
248
+ const command = extractCommand(step);
249
+ const name = slugify(step.split(/[.:]/)[0], `step_${index + 1}`);
250
+ if (command) {
251
+ stages.push({ name, command });
252
+ return;
253
+ }
254
+ stages.push({ name, appendContext: step });
255
+ });
256
+
257
+ stages.push({
258
+ name: 'success_evidence',
259
+ appendContext: [
260
+ 'Success evidence required:',
261
+ ...plan.successEvidence.map((line) => `- ${line}`),
262
+ ].join('\n'),
263
+ });
264
+
265
+ return {
266
+ id: options.jobId || `harness-${plan.id}`,
267
+ tags: Array.from(new Set([...(plan.tags || []), 'natural-language-harness', plan.id])),
268
+ skill: options.skill || 'natural-language-harness',
269
+ partnerProfile: options.partnerProfile || null,
270
+ autoImprove: options.autoImprove !== false,
271
+ stages,
272
+ harnessId: plan.id,
273
+ harnessSourcePath: plan.sourcePath,
274
+ runtimePolicy,
275
+ };
276
+ }
277
+
278
+ function runHarness(identifier, inputOverrides = {}, options = {}) {
279
+ const settingsOptions = options.settingsOptions || {};
280
+ if (!getSetting('harnesses.enabled', settingsOptions)) {
281
+ throw new Error('Natural-language harnesses are disabled by the settings hierarchy');
282
+ }
283
+ if (!getSetting('harnesses.allowRuntimeExecution', settingsOptions)) {
284
+ throw new Error('Natural-language harness runtime execution is disabled by the settings hierarchy');
285
+ }
286
+ const { executeJob } = require('./async-job-runner');
287
+ return executeJob(buildHarnessJob(identifier, inputOverrides, options), options);
288
+ }
289
+
290
+ function runCli(argv) {
291
+ const [command, identifier, rawInputs] = argv.slice(2);
292
+
293
+ if (command === 'list') {
294
+ console.log(JSON.stringify({ harnesses: listHarnesses() }, null, 2));
295
+ return;
296
+ }
297
+
298
+ if (command === 'render') {
299
+ const inputs = rawInputs ? JSON.parse(rawInputs) : {};
300
+ console.log(JSON.stringify(renderHarnessPlan(identifier, inputs), null, 2));
301
+ return;
302
+ }
303
+
304
+ throw new Error('Usage: node scripts/natural-language-harness.js <list|render> [harnessId] [jsonInputs]');
305
+ }
306
+
307
+ if (require.main === module) {
308
+ try {
309
+ runCli(process.argv);
310
+ } catch (error) {
311
+ console.error(error.message);
312
+ process.exit(1);
313
+ }
314
+ }
315
+
316
+ module.exports = {
317
+ HARNESS_DIR,
318
+ REQUIRED_SECTIONS,
319
+ buildHarnessJob,
320
+ getHarness,
321
+ listHarnesses,
322
+ loadHarnesses,
323
+ loadHarnessFile,
324
+ parseHarnessSource,
325
+ renderHarnessPlan,
326
+ renderTemplate,
327
+ resolveInputs,
328
+ runCli,
329
+ runHarness,
330
+ };