@askexenow/exe-os 0.9.271 → 0.9.273

package/dist/cto-delegation-gate-4PMJZL2T.js

@@ -0,0 +1,206 @@
+import {
+  sessionScopeFilter
+} from "./chunk-IDCLPPIM.js";
+import "./chunk-KZNSOHCB.js";
+import "./chunk-5CHYEKMH.js";
+import "./chunk-4JERP7NT.js";
+import "./chunk-OBUV3W7L.js";
+import "./chunk-MVW62NIZ.js";
+import "./chunk-OYNKIAVW.js";
+import "./chunk-CX6GL3ZJ.js";
+import "./chunk-2NQQP3FF.js";
+import "./chunk-EZ7KAZMC.js";
+import "./chunk-NGP6LSV2.js";
+import "./chunk-WQEUY7DC.js";
+import "./chunk-CVYC6DUW.js";
+import "./chunk-OPU3NYOO.js";
+import "./chunk-GJV3WDWM.js";
+import "./chunk-MP2AFCGL.js";
+import "./chunk-G33BHQCO.js";
+import "./chunk-HYZV25LY.js";
+import {
+  getClient,
+  getEmployeeByRole,
+  loadEmployeesSync
+} from "./chunk-CHBHR5W6.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-C6OYEJJI.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-MOZ2YQ54.js";
+import "./chunk-VXIMSRTO.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-MLKGABMK.js";
+
+// src/lib/cto-delegation-gate.ts
+import os from "os";
+import path from "path";
+import { existsSync, readFileSync, statSync } from "fs";
+var GATED_ROLE = "CTO";
+function resolveGatedAgent() {
+  try {
+    const employees = loadEmployeesSync();
+    const cto = getEmployeeByRole(employees, GATED_ROLE);
+    return cto?.name ?? "";
+  } catch {
+    return "";
+  }
+}
+var GATED_AGENT = resolveGatedAgent();
+function getGatedAgent() {
+  return resolveGatedAgent() || GATED_AGENT;
+}
+var BLOCKED_PATH_PREFIXES = [
+  "src/",
+  "tests/",
+  "scripts/",
+  "bin/",
+  ".github/workflows/",
+  ".claude/skills/"
+];
+var BLOCKED_FILENAMES = [
+  "package.json",
+  "tsconfig.json",
+  "docker-compose.yml"
+];
+var BLOCKED_DOCKERFILE_PREFIX = "Dockerfile";
+var BLOCKED_EXTENSIONS = [
+  ".ts",
+  ".js",
+  ".tsx",
+  ".jsx",
+  ".rs",
+  ".py",
+  ".go",
+  ".sh",
+  ".yaml",
+  ".yml",
+  ".prisma",
+  ".sql"
+];
+var EXEMPT_MD_DIR_PREFIXES = [
+  ".planning/",
+  "exe/output/",
+  "exe/",
+  "docs/"
+];
+var RECENT_DISPATCH_WINDOW_MS = 5 * 60 * 1e3;
+var SCRATCHPAD_MAX_AGE_MS = 10 * 60 * 1e3;
+var SCRATCHPAD_ESCAPE_PATTERN = /^(?:ENGINEER|TOM)-CAPABLE:\s*NO\s*—\s*reason:\s*\S+/m;
+function toWorkspaceRelative(filePath, cwd = process.cwd()) {
+  const normalized = path.normalize(filePath);
+  if (normalized.startsWith(cwd + path.sep)) {
+    return normalized.slice(cwd.length + 1);
+  }
+  if (path.isAbsolute(normalized)) {
+    return path.basename(normalized);
+  }
+  return normalized;
+}
+function isDockerfile(basename) {
+  return basename === BLOCKED_DOCKERFILE_PREFIX || basename.startsWith(`${BLOCKED_DOCKERFILE_PREFIX}.`);
+}
+function classifyPath(filePath, cwd) {
+  const rel = toWorkspaceRelative(filePath, cwd);
+  const basename = path.basename(rel);
+  const ext = path.extname(rel).toLowerCase();
+  if (ext === ".md") {
+    for (const prefix of EXEMPT_MD_DIR_PREFIXES) {
+      if (rel.startsWith(prefix)) return "exempt";
+    }
+    if (!BLOCKED_PATH_PREFIXES.some((p) => rel.startsWith(p))) {
+      return "exempt";
+    }
+  }
+  if (BLOCKED_FILENAMES.includes(basename)) return "code";
+  if (isDockerfile(basename)) return "code";
+  if (BLOCKED_EXTENSIONS.includes(ext)) return "code";
+  if (BLOCKED_PATH_PREFIXES.some((p) => rel.startsWith(p))) return "code";
+  return "exempt";
+}
+async function hasRecentEngineerDispatch(now = Date.now()) {
+  try {
+    const client = getClient();
+    const engineers = loadEmployeesSync().filter(
+      (e) => e.role.toLowerCase() === "principal engineer"
+    );
+    const engineerNames = engineers.map((e) => e.name);
+    const gatedAgent = getGatedAgent();
+    if (!gatedAgent) return false;
+    if (engineerNames.length === 0) return false;
+    const placeholders = engineerNames.map(() => "?").join(",");
+    const ydScope = sessionScopeFilter();
+    const result = await client.execute({
+      sql: `SELECT MAX(created_at) AS last_dispatch
+            FROM tasks
+            WHERE assigned_by = ? AND assigned_to IN (${placeholders})${ydScope.sql}`,
+      args: [gatedAgent, ...engineerNames, ...ydScope.args]
+    });
+    const raw = result.rows[0]?.last_dispatch;
+    if (raw === null || raw === void 0) return false;
+    const parsed = Date.parse(String(raw));
+    if (Number.isNaN(parsed)) return false;
+    return now - parsed <= RECENT_DISPATCH_WINDOW_MS;
+  } catch {
+    return false;
+  }
+}
+function scratchpadPath(sessionId, homeDir = os.homedir()) {
+  return path.join(
+    homeDir,
+    ".exe-os",
+    "session-cache",
+    `cto-scratchpad-${sessionId}.txt`
+  );
+}
+function hasValidScratchpadEscape(sessionId, now = Date.now(), homeDir = os.homedir()) {
+  const paths = [scratchpadPath(sessionId, homeDir)];
+  for (const filePath of paths) {
+    if (!existsSync(filePath)) continue;
+    try {
+      const stat = statSync(filePath);
+      if (now - stat.mtimeMs > SCRATCHPAD_MAX_AGE_MS) continue;
+      const body = readFileSync(filePath, "utf-8");
+      if (SCRATCHPAD_ESCAPE_PATTERN.test(body)) return true;
+    } catch {
+    }
+  }
+  return false;
+}
+var GATE_BLOCK_MESSAGE = [
+  "ACTION BLOCKED by CTO delegation gate. Your Write/Edit was DENIED \u2014 it did NOT execute.",
+  "This edit looks implementable by an engineer. You MUST either:",
+  "  1. Dispatch create_task to an engineer, OR",
+  "  2. Add ENGINEER-CAPABLE: NO with explicit reason to proceed yourself.",
+  "Do NOT report this action as successful. It was blocked. No file was changed.",
+  "If you are a sub-agent, report this FAILURE to your parent agent."
+].join("\n");
+async function evaluateDelegationGate(opts) {
+  const gatedAgent = getGatedAgent();
+  if (!gatedAgent || opts.agentId !== gatedAgent) {
+    return { outcome: "allow", reason: "agent_not_gated" };
+  }
+  if (!/^(Write|Edit)$/.test(opts.toolName)) {
+    return { outcome: "allow", reason: "tool_not_gated" };
+  }
+  if (classifyPath(opts.filePath, opts.cwd) === "exempt") {
+    return { outcome: "allow", reason: "exempt_path" };
+  }
+  if (await hasRecentEngineerDispatch(opts.now)) {
+    return { outcome: "allow", reason: "recent_engineer_dispatch" };
+  }
+  if (hasValidScratchpadEscape(opts.sessionId, opts.now, opts.homeDir)) {
+    return { outcome: "allow", reason: "scratchpad_escape" };
+  }
+  return { outcome: "block", reason: "no_delegation_no_escape" };
+}
+export {
+  GATED_AGENT,
+  GATED_ROLE,
+  GATE_BLOCK_MESSAGE,
+  classifyPath,
+  evaluateDelegationGate,
+  getGatedAgent,
+  hasRecentEngineerDispatch,
+  hasValidScratchpadEscape,
+  scratchpadPath
+};

package/dist/cto-delegation-gate-A7YKXTRO.js

@@ -0,0 +1,206 @@
+import {
+  sessionScopeFilter
+} from "./chunk-YHSATGMH.js";
+import "./chunk-KZNSOHCB.js";
+import "./chunk-5CHYEKMH.js";
+import "./chunk-4JERP7NT.js";
+import "./chunk-OBUV3W7L.js";
+import "./chunk-MVW62NIZ.js";
+import "./chunk-OYNKIAVW.js";
+import "./chunk-CX6GL3ZJ.js";
+import "./chunk-2NQQP3FF.js";
+import "./chunk-EZ7KAZMC.js";
+import "./chunk-NGP6LSV2.js";
+import "./chunk-WQEUY7DC.js";
+import "./chunk-CVYC6DUW.js";
+import "./chunk-OPU3NYOO.js";
+import "./chunk-GJV3WDWM.js";
+import "./chunk-MP2AFCGL.js";
+import "./chunk-G33BHQCO.js";
+import "./chunk-HYZV25LY.js";
+import {
+  getClient,
+  getEmployeeByRole,
+  loadEmployeesSync
+} from "./chunk-CHBHR5W6.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-C6OYEJJI.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-MOZ2YQ54.js";
+import "./chunk-VXIMSRTO.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-MLKGABMK.js";
+
+// src/lib/cto-delegation-gate.ts
+import os from "os";
+import path from "path";
+import { existsSync, readFileSync, statSync } from "fs";
+var GATED_ROLE = "CTO";
+function resolveGatedAgent() {
+  try {
+    const employees = loadEmployeesSync();
+    const cto = getEmployeeByRole(employees, GATED_ROLE);
+    return cto?.name ?? "";
+  } catch {
+    return "";
+  }
+}
+var GATED_AGENT = resolveGatedAgent();
+function getGatedAgent() {
+  return resolveGatedAgent() || GATED_AGENT;
+}
+var BLOCKED_PATH_PREFIXES = [
+  "src/",
+  "tests/",
+  "scripts/",
+  "bin/",
+  ".github/workflows/",
+  ".claude/skills/"
+];
+var BLOCKED_FILENAMES = [
+  "package.json",
+  "tsconfig.json",
+  "docker-compose.yml"
+];
+var BLOCKED_DOCKERFILE_PREFIX = "Dockerfile";
+var BLOCKED_EXTENSIONS = [
+  ".ts",
+  ".js",
+  ".tsx",
+  ".jsx",
+  ".rs",
+  ".py",
+  ".go",
+  ".sh",
+  ".yaml",
+  ".yml",
+  ".prisma",
+  ".sql"
+];
+var EXEMPT_MD_DIR_PREFIXES = [
+  ".planning/",
+  "exe/output/",
+  "exe/",
+  "docs/"
+];
+var RECENT_DISPATCH_WINDOW_MS = 5 * 60 * 1e3;
+var SCRATCHPAD_MAX_AGE_MS = 10 * 60 * 1e3;
+var SCRATCHPAD_ESCAPE_PATTERN = /^(?:ENGINEER|TOM)-CAPABLE:\s*NO\s*—\s*reason:\s*\S+/m;
+function toWorkspaceRelative(filePath, cwd = process.cwd()) {
+  const normalized = path.normalize(filePath);
+  if (normalized.startsWith(cwd + path.sep)) {
+    return normalized.slice(cwd.length + 1);
+  }
+  if (path.isAbsolute(normalized)) {
+    return path.basename(normalized);
+  }
+  return normalized;
+}
+function isDockerfile(basename) {
+  return basename === BLOCKED_DOCKERFILE_PREFIX || basename.startsWith(`${BLOCKED_DOCKERFILE_PREFIX}.`);
+}
+function classifyPath(filePath, cwd) {
+  const rel = toWorkspaceRelative(filePath, cwd);
+  const basename = path.basename(rel);
+  const ext = path.extname(rel).toLowerCase();
+  if (ext === ".md") {
+    for (const prefix of EXEMPT_MD_DIR_PREFIXES) {
+      if (rel.startsWith(prefix)) return "exempt";
+    }
+    if (!BLOCKED_PATH_PREFIXES.some((p) => rel.startsWith(p))) {
+      return "exempt";
+    }
+  }
+  if (BLOCKED_FILENAMES.includes(basename)) return "code";
+  if (isDockerfile(basename)) return "code";
+  if (BLOCKED_EXTENSIONS.includes(ext)) return "code";
+  if (BLOCKED_PATH_PREFIXES.some((p) => rel.startsWith(p))) return "code";
+  return "exempt";
+}
+async function hasRecentEngineerDispatch(now = Date.now()) {
+  try {
+    const client = getClient();
+    const engineers = loadEmployeesSync().filter(
+      (e) => e.role.toLowerCase() === "principal engineer"
+    );
+    const engineerNames = engineers.map((e) => e.name);
+    const gatedAgent = getGatedAgent();
+    if (!gatedAgent) return false;
+    if (engineerNames.length === 0) return false;
+    const placeholders = engineerNames.map(() => "?").join(",");
+    const ydScope = sessionScopeFilter();
+    const result = await client.execute({
+      sql: `SELECT MAX(created_at) AS last_dispatch
+            FROM tasks
+            WHERE assigned_by = ? AND assigned_to IN (${placeholders})${ydScope.sql}`,
+      args: [gatedAgent, ...engineerNames, ...ydScope.args]
+    });
+    const raw = result.rows[0]?.last_dispatch;
+    if (raw === null || raw === void 0) return false;
+    const parsed = Date.parse(String(raw));
+    if (Number.isNaN(parsed)) return false;
+    return now - parsed <= RECENT_DISPATCH_WINDOW_MS;
+  } catch {
+    return false;
+  }
+}
+function scratchpadPath(sessionId, homeDir = os.homedir()) {
+  return path.join(
+    homeDir,
+    ".exe-os",
+    "session-cache",
+    `cto-scratchpad-${sessionId}.txt`
+  );
+}
+function hasValidScratchpadEscape(sessionId, now = Date.now(), homeDir = os.homedir()) {
+  const paths = [scratchpadPath(sessionId, homeDir)];
+  for (const filePath of paths) {
+    if (!existsSync(filePath)) continue;
+    try {
+      const stat = statSync(filePath);
+      if (now - stat.mtimeMs > SCRATCHPAD_MAX_AGE_MS) continue;
+      const body = readFileSync(filePath, "utf-8");
+      if (SCRATCHPAD_ESCAPE_PATTERN.test(body)) return true;
+    } catch {
+    }
+  }
+  return false;
+}
+var GATE_BLOCK_MESSAGE = [
+  "ACTION BLOCKED by CTO delegation gate. Your Write/Edit was DENIED \u2014 it did NOT execute.",
+  "This edit looks implementable by an engineer. You MUST either:",
+  "  1. Dispatch create_task to an engineer, OR",
+  "  2. Add ENGINEER-CAPABLE: NO with explicit reason to proceed yourself.",
+  "Do NOT report this action as successful. It was blocked. No file was changed.",
+  "If you are a sub-agent, report this FAILURE to your parent agent."
+].join("\n");
+async function evaluateDelegationGate(opts) {
+  const gatedAgent = getGatedAgent();
+  if (!gatedAgent || opts.agentId !== gatedAgent) {
+    return { outcome: "allow", reason: "agent_not_gated" };
+  }
+  if (!/^(Write|Edit)$/.test(opts.toolName)) {
+    return { outcome: "allow", reason: "tool_not_gated" };
+  }
+  if (classifyPath(opts.filePath, opts.cwd) === "exempt") {
+    return { outcome: "allow", reason: "exempt_path" };
+  }
+  if (await hasRecentEngineerDispatch(opts.now)) {
+    return { outcome: "allow", reason: "recent_engineer_dispatch" };
+  }
+  if (hasValidScratchpadEscape(opts.sessionId, opts.now, opts.homeDir)) {
+    return { outcome: "allow", reason: "scratchpad_escape" };
+  }
+  return { outcome: "block", reason: "no_delegation_no_escape" };
+}
+export {
+  GATED_AGENT,
+  GATED_ROLE,
+  GATE_BLOCK_MESSAGE,
+  classifyPath,
+  evaluateDelegationGate,
+  getGatedAgent,
+  hasRecentEngineerDispatch,
+  hasValidScratchpadEscape,
+  scratchpadPath
+};

package/dist/cto-delegation-gate-JFZFZGC2.js

@@ -0,0 +1,206 @@
+import {
+  sessionScopeFilter
+} from "./chunk-57UAFTO2.js";
+import "./chunk-SD6UFZRH.js";
+import "./chunk-5CHYEKMH.js";
+import "./chunk-4JERP7NT.js";
+import "./chunk-GQ2XYRG3.js";
+import "./chunk-MVW62NIZ.js";
+import "./chunk-OYNKIAVW.js";
+import "./chunk-CX6GL3ZJ.js";
+import "./chunk-JP45GCVR.js";
+import "./chunk-XJUUWHVN.js";
+import "./chunk-NGP6LSV2.js";
+import "./chunk-7SLLNRR3.js";
+import "./chunk-CVYC6DUW.js";
+import "./chunk-OPU3NYOO.js";
+import "./chunk-GJV3WDWM.js";
+import "./chunk-MP2AFCGL.js";
+import "./chunk-TN45CTOI.js";
+import "./chunk-HYZV25LY.js";
+import {
+  getClient,
+  getEmployeeByRole,
+  loadEmployeesSync
+} from "./chunk-UNCGZXPU.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-VGYL7CN2.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-MOZ2YQ54.js";
+import "./chunk-VXIMSRTO.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-MLKGABMK.js";
+
+// src/lib/cto-delegation-gate.ts
+import os from "os";
+import path from "path";
+import { existsSync, readFileSync, statSync } from "fs";
+var GATED_ROLE = "CTO";
+function resolveGatedAgent() {
+  try {
+    const employees = loadEmployeesSync();
+    const cto = getEmployeeByRole(employees, GATED_ROLE);
+    return cto?.name ?? "";
+  } catch {
+    return "";
+  }
+}
+var GATED_AGENT = resolveGatedAgent();
+function getGatedAgent() {
+  return resolveGatedAgent() || GATED_AGENT;
+}
+var BLOCKED_PATH_PREFIXES = [
+  "src/",
+  "tests/",
+  "scripts/",
+  "bin/",
+  ".github/workflows/",
+  ".claude/skills/"
+];
+var BLOCKED_FILENAMES = [
+  "package.json",
+  "tsconfig.json",
+  "docker-compose.yml"
+];
+var BLOCKED_DOCKERFILE_PREFIX = "Dockerfile";
+var BLOCKED_EXTENSIONS = [
+  ".ts",
+  ".js",
+  ".tsx",
+  ".jsx",
+  ".rs",
+  ".py",
+  ".go",
+  ".sh",
+  ".yaml",
+  ".yml",
+  ".prisma",
+  ".sql"
+];
+var EXEMPT_MD_DIR_PREFIXES = [
+  ".planning/",
+  "exe/output/",
+  "exe/",
+  "docs/"
+];
+var RECENT_DISPATCH_WINDOW_MS = 5 * 60 * 1e3;
+var SCRATCHPAD_MAX_AGE_MS = 10 * 60 * 1e3;
+var SCRATCHPAD_ESCAPE_PATTERN = /^(?:ENGINEER|TOM)-CAPABLE:\s*NO\s*—\s*reason:\s*\S+/m;
+function toWorkspaceRelative(filePath, cwd = process.cwd()) {
+  const normalized = path.normalize(filePath);
+  if (normalized.startsWith(cwd + path.sep)) {
+    return normalized.slice(cwd.length + 1);
+  }
+  if (path.isAbsolute(normalized)) {
+    return path.basename(normalized);
+  }
+  return normalized;
+}
+function isDockerfile(basename) {
+  return basename === BLOCKED_DOCKERFILE_PREFIX || basename.startsWith(`${BLOCKED_DOCKERFILE_PREFIX}.`);
+}
+function classifyPath(filePath, cwd) {
+  const rel = toWorkspaceRelative(filePath, cwd);
+  const basename = path.basename(rel);
+  const ext = path.extname(rel).toLowerCase();
+  if (ext === ".md") {
+    for (const prefix of EXEMPT_MD_DIR_PREFIXES) {
+      if (rel.startsWith(prefix)) return "exempt";
+    }
+    if (!BLOCKED_PATH_PREFIXES.some((p) => rel.startsWith(p))) {
+      return "exempt";
+    }
+  }
+  if (BLOCKED_FILENAMES.includes(basename)) return "code";
+  if (isDockerfile(basename)) return "code";
+  if (BLOCKED_EXTENSIONS.includes(ext)) return "code";
+  if (BLOCKED_PATH_PREFIXES.some((p) => rel.startsWith(p))) return "code";
+  return "exempt";
+}
+async function hasRecentEngineerDispatch(now = Date.now()) {
+  try {
+    const client = getClient();
+    const engineers = loadEmployeesSync().filter(
+      (e) => e.role.toLowerCase() === "principal engineer"
+    );
+    const engineerNames = engineers.map((e) => e.name);
+    const gatedAgent = getGatedAgent();
+    if (!gatedAgent) return false;
+    if (engineerNames.length === 0) return false;
+    const placeholders = engineerNames.map(() => "?").join(",");
+    const ydScope = sessionScopeFilter();
+    const result = await client.execute({
+      sql: `SELECT MAX(created_at) AS last_dispatch
+            FROM tasks
+            WHERE assigned_by = ? AND assigned_to IN (${placeholders})${ydScope.sql}`,
+      args: [gatedAgent, ...engineerNames, ...ydScope.args]
+    });
+    const raw = result.rows[0]?.last_dispatch;
+    if (raw === null || raw === void 0) return false;
+    const parsed = Date.parse(String(raw));
+    if (Number.isNaN(parsed)) return false;
+    return now - parsed <= RECENT_DISPATCH_WINDOW_MS;
+  } catch {
+    return false;
+  }
+}
+function scratchpadPath(sessionId, homeDir = os.homedir()) {
+  return path.join(
+    homeDir,
+    ".exe-os",
+    "session-cache",
+    `cto-scratchpad-${sessionId}.txt`
+  );
+}
+function hasValidScratchpadEscape(sessionId, now = Date.now(), homeDir = os.homedir()) {
+  const paths = [scratchpadPath(sessionId, homeDir)];
+  for (const filePath of paths) {
+    if (!existsSync(filePath)) continue;
+    try {
+      const stat = statSync(filePath);
+      if (now - stat.mtimeMs > SCRATCHPAD_MAX_AGE_MS) continue;
+      const body = readFileSync(filePath, "utf-8");
+      if (SCRATCHPAD_ESCAPE_PATTERN.test(body)) return true;
+    } catch {
+    }
+  }
+  return false;
+}
+var GATE_BLOCK_MESSAGE = [
+  "ACTION BLOCKED by CTO delegation gate. Your Write/Edit was DENIED \u2014 it did NOT execute.",
+  "This edit looks implementable by an engineer. You MUST either:",
+  "  1. Dispatch create_task to an engineer, OR",
+  "  2. Add ENGINEER-CAPABLE: NO with explicit reason to proceed yourself.",
+  "Do NOT report this action as successful. It was blocked. No file was changed.",
+  "If you are a sub-agent, report this FAILURE to your parent agent."
+].join("\n");
+async function evaluateDelegationGate(opts) {
+  const gatedAgent = getGatedAgent();
+  if (!gatedAgent || opts.agentId !== gatedAgent) {
+    return { outcome: "allow", reason: "agent_not_gated" };
+  }
+  if (!/^(Write|Edit)$/.test(opts.toolName)) {
+    return { outcome: "allow", reason: "tool_not_gated" };
+  }
+  if (classifyPath(opts.filePath, opts.cwd) === "exempt") {
+    return { outcome: "allow", reason: "exempt_path" };
+  }
+  if (await hasRecentEngineerDispatch(opts.now)) {
+    return { outcome: "allow", reason: "recent_engineer_dispatch" };
+  }
+  if (hasValidScratchpadEscape(opts.sessionId, opts.now, opts.homeDir)) {
+    return { outcome: "allow", reason: "scratchpad_escape" };
+  }
+  return { outcome: "block", reason: "no_delegation_no_escape" };
+}
+export {
+  GATED_AGENT,
+  GATED_ROLE,
+  GATE_BLOCK_MESSAGE,
+  classifyPath,
+  evaluateDelegationGate,
+  getGatedAgent,
+  hasRecentEngineerDispatch,
+  hasValidScratchpadEscape,
+  scratchpadPath
+};