@dv.nghiem/flowdeck 0.4.12 → 0.5.0

package/dist/services/agent-contract-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-contract-registry.d.ts","sourceRoot":"","sources":["../../src/services/agent-contract-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,aAAa;IAC5B,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAA;IACb,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAA;IACZ,iDAAiD;IACjD,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,mDAAmD;IACnD,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,+DAA+D;IAC/D,oBAAoB,EAAE,MAAM,EAAE,CAAA;IAC9B,0CAA0C;IAC1C,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,2CAA2C;IAC3C,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,+DAA+D;IAC/D,oBAAoB,EAAE,MAAM,EAAE,CAAA;IAC9B,qDAAqD;IACrD,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,oCAAoC;IACpC,eAAe,EAAE,MAAM,EAAE,CAAA;CAC1B;AA4UD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAE/D;AAED,wBAAgB,eAAe,IAAI,aAAa,EAAE,CAEjD;AAED,wBAAgB,uBAAuB,IAAI,MAAM,EAAE,CAElD"}
+{"version":3,"file":"agent-contract-registry.d.ts","sourceRoot":"","sources":["../../src/services/agent-contract-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,aAAa;IAC5B,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAA;IACb,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAA;IACZ,iDAAiD;IACjD,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,mDAAmD;IACnD,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,+DAA+D;IAC/D,oBAAoB,EAAE,MAAM,EAAE,CAAA;IAC9B,0CAA0C;IAC1C,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,2CAA2C;IAC3C,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,+DAA+D;IAC/D,oBAAoB,EAAE,MAAM,EAAE,CAAA;IAC9B,qDAAqD;IACrD,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,oCAAoC;IACpC,eAAe,EAAE,MAAM,EAAE,CAAA;CAC1B;AA+UD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAE/D;AAED,wBAAgB,eAAe,IAAI,aAAa,EAAE,CAEjD;AAED,wBAAgB,uBAAuB,IAAI,MAAM,EAAE,CAElD"}

package/dist/services/agent-trace-graph.d.ts

@@ -80,6 +80,10 @@ export declare function recordToolUsed(dir: string, span_id: string, toolName: s
  * Record a contract violation on the active span.
  */
 export declare function addSpanViolation(dir: string, span_id: string, violation: string): void;
+/**
+ * Record a contract violation on the active span (convenience alias).
+ */
+export declare function recordContractViolation(dir: string, span_id: string, violation: string): void;
 export declare function getSpan(dir: string, span_id: string): AgentSpan | null;
 export declare function getTraceSpans(dir: string, trace_id: string): AgentSpan[];
 /**

package/dist/services/agent-trace-graph.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-trace-graph.d.ts","sourceRoot":"","sources":["../../src/services/agent-trace-graph.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAA;AAElF,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAA;IAChB,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAA;IACf,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,gBAAgB,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,UAAU,CAAA;IAClB,uDAAuD;IACvD,YAAY,EAAE,OAAO,CAAA;IACrB,4DAA4D;IAC5D,mBAAmB,EAAE,MAAM,EAAE,CAAA;IAC7B,uCAAuC;IACvC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,kDAAkD;IAClD,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACzC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,SAAS,EAAE,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAElD;AAuBD;;GAEG;AACH,wBAAgB,QAAQ,CACtB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IACJ,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,gBAAgB,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GACA,SAAS,CAwBX;AAED;;GAEG;AACH,wBAAgB,SAAS,CACvB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,EACtC,IAAI,GAAE;IACJ,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC9B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACzC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;CAChB,GACL,IAAI,CAmBN;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAQnF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAMtF;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAEtE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,CAExE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAoBhF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,MAAM,EAAE,CAYpE"}
+{"version":3,"file":"agent-trace-graph.d.ts","sourceRoot":"","sources":["../../src/services/agent-trace-graph.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAA;AAElF,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAA;IAChB,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAA;IACf,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,gBAAgB,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,UAAU,CAAA;IAClB,uDAAuD;IACvD,YAAY,EAAE,OAAO,CAAA;IACrB,4DAA4D;IAC5D,mBAAmB,EAAE,MAAM,EAAE,CAAA;IAC7B,uCAAuC;IACvC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,kDAAkD;IAClD,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACzC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,SAAS,EAAE,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAElD;AAuBD;;GAEG;AACH,wBAAgB,QAAQ,CACtB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IACJ,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,gBAAgB,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GACA,SAAS,CAwBX;AAED;;GAEG;AACH,wBAAgB,SAAS,CACvB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,EACtC,IAAI,GAAE;IACJ,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC9B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACzC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;CAChB,GACL,IAAI,CAmBN;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAQnF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAMtF;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAE7F;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAEtE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,CAExE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAoBhF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,MAAM,EAAE,CAYpE"}

package/dist/services/agent-validator.d.ts

@@ -47,8 +47,9 @@ export declare function resolveValidatorMode(directory: string): ValidatorMode;
  */
 export declare function validateAgent(directory: string, ctx: AgentExecutionContext): ValidationResult;
 /**
- * Convenience check: is this tool call allowed for this agent?
+ * Validate that an agent's structured output contains the contract's expected fields.
  */
+export declare function validateAgentOutput(agent: string, output: Record<string, unknown>): ValidationResult;
 export declare function validateToolAccess(directory: string, agent: string, toolName: string, opts?: {
     run_id?: string;
     session_id?: string;

package/dist/services/agent-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-validator.d.ts","sourceRoot":"","sources":["../../src/services/agent-validator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,UAAU,GAAG,QAAQ,CAAA;AACzD,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAA;AAErE,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,eAAe,CAAA;IACvB,UAAU,EAAE,mBAAmB,EAAE,CAAA;IACjC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAA;IACb,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,uCAAuC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,6BAA6B;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,8CAA8C;IAC9C,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,uCAAuC;IACvC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,uCAAuC;IACvC,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,wCAAwC;IACxC,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,gCAAgC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,CAQrE;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,qBAAqB,GACzB,gBAAgB,CAuFlB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GAClD,gBAAgB,CAElB"}
+{"version":3,"file":"agent-validator.d.ts","sourceRoot":"","sources":["../../src/services/agent-validator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,UAAU,GAAG,QAAQ,CAAA;AACzD,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAA;AAErE,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,eAAe,CAAA;IACvB,UAAU,EAAE,mBAAmB,EAAE,CAAA;IACjC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAA;IACb,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,uCAAuC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,6BAA6B;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,8CAA8C;IAC9C,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,uCAAuC;IACvC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,uCAAuC;IACvC,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,wCAAwC;IACxC,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,gCAAgC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,CAWrE;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,qBAAqB,GACzB,gBAAgB,CAuFlB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB,CA0CpG;AACD,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GAClD,gBAAgB,CAElB"}

package/dist/services/approval-manager.d.ts

@@ -9,12 +9,21 @@ export interface ApprovalRequest {
     trigger: string;
     reason: string;
     risk_score: number;
+    agent?: string;
     file_path?: string;
+    content_hash?: string;
     change_description?: string;
 }
 export interface ApprovalsStore {
     requests: ApprovalRequest[];
 }
+export interface ApprovalCheckCriteria {
+    run_id: string;
+    session_id: string;
+    agent: string;
+    file_path: string;
+    content_hash: string;
+}
 export declare function isSensitivePath(filePath: string): boolean;
 export declare function isApprovalRequired(filePath: string, riskScore: number): boolean;
 export declare function requestApproval(dir: string, run_id: string, trigger: string, reason: string, options?: {
@@ -22,9 +31,13 @@ export declare function requestApproval(dir: string, run_id: string, trigger: st
     risk_score?: number;
     change_description?: string;
     session_id?: string;
+    agent?: string;
+    content_hash?: string;
 }): ApprovalRequest;
 export declare function resolveApproval(dir: string, approval_id: string, decision: "approved" | "rejected"): boolean;
-export declare function checkApproval(dir: string, file_path: string, command: string): ApprovalRequest | null;
+export declare function checkApproval(dir: string, criteria: ApprovalCheckCriteria): ApprovalRequest | null;
+export declare function computeContentHash(args: Record<string, unknown>): string;
+export declare function requestApprovalForTool(dir: string, run_id: string, session_id: string, agent: string, tool: string, args: Record<string, unknown>): ApprovalRequest;
 export declare function getPendingApprovals(dir: string): ApprovalRequest[];
 export declare function getRecentApprovals(dir: string, limit?: number): ApprovalRequest[];
 //# sourceMappingURL=approval-manager.d.ts.map

package/dist/services/approval-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approval-manager.d.ts","sourceRoot":"","sources":["../../src/services/approval-manager.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAA;AAEhE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,cAAc,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,eAAe,EAAE,CAAA;CAC5B;AAaD,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAE/E;AAsBD,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1G,eAAe,CAiBjB;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,GAAG,UAAU,GAAG,OAAO,CAQ5G;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAarG;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,EAAE,CAElE;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,eAAe,EAAE,CAG7E"}
+{"version":3,"file":"approval-manager.d.ts","sourceRoot":"","sources":["../../src/services/approval-manager.ts"],"names":[],"mappings":"AAWA,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAA;AAEhE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,cAAc,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,eAAe,EAAE,CAAA;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;CACrB;AAaD,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAE/E;AAsBD,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IACP,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,YAAY,CAAC,EAAE,MAAM,CAAA;CACjB,GACL,eAAe,CAmBjB;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,GAAG,UAAU,GAAG,OAAO,CAQ5G;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,qBAAqB,GAAG,eAAe,GAAG,IAAI,CAgBlG;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAIxE;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,eAAe,CAWjB;AAMD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,EAAE,CAElE;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,eAAe,EAAE,CAG7E"}

package/dist/services/audit-log.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Audit Log Service
+ *
+ * Append-only log of every harness policy decision.
+ * Writes to `.codebase/AUDIT.jsonl` and rotates at 1000 lines.
+ */
+import type { AuditEntry } from "../services/harness-types";
+export interface AuditFilter {
+    run_id?: string;
+    session_id?: string;
+    tool?: string;
+    verdict?: string;
+}
+export interface AuditLog {
+    append(entry: AuditEntry): void;
+    query(filter: AuditFilter): AuditEntry[];
+}
+export declare function auditPath(directory: string): string;
+/**
+ * Create an audit log writer for the given project directory.
+ */
+export declare function createAuditLog(directory: string, appLog?: (msg: string) => void): AuditLog;
+//# sourceMappingURL=audit-log.d.ts.map

package/dist/services/audit-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.d.ts","sourceRoot":"","sources":["../../src/services/audit-log.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAaH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAK3D,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAAA;IAC/B,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,UAAU,EAAE,CAAA;CACzC;AAED,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEnD;AAuED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAC7B,QAAQ,CAKV"}

package/dist/services/context-ingress.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Context Ingress Service
+ *
+ * Assembles the runtime context for a command execution:
+ *  - planning state (STATE.md)
+ *  - plan content (PLAN.md)
+ *  - .codebase/ documentation
+ *  - recent tool/session events
+ *  - task complexity classification
+ *  - relevant rules and skills
+ *  - token budget snapshot
+ *  - trivial-chat short-circuit
+ *
+ * The service is advisory: it does not block execution and does not mutate
+ * external state except through explicit dependencies injected by the caller.
+ */
+import type { FlowDeckConfig } from "../config/schema";
+import { type AssembledContext, type TokenBudgetSnapshot } from "./harness-types";
+export interface TrivialChatResult {
+    isTrivialChat: boolean;
+    confidence: number;
+    reason: string;
+}
+export interface ContextIngressInput {
+    runId: string;
+    sessionId: string;
+    projectRoot: string;
+    command?: string;
+    description: string;
+    config?: FlowDeckConfig;
+    currentStage?: string;
+}
+export interface ContextIngressOptions {
+    maxEvents?: number;
+    eventMaxAgeMinutes?: number;
+    planTruncateThreshold?: number;
+    planTruncateTo?: number;
+    totalTokenBudget?: number;
+}
+export declare function isTrivialChat(description: string): TrivialChatResult;
+export declare class ContextIngressService {
+    private options;
+    private readonly _assembledBySession;
+    constructor(options?: ContextIngressOptions);
+    assemble(input: ContextIngressInput): AssembledContext;
+    /**
+     * Build the prompt fragment to inject for this context.
+     * Trivial chats get a minimal greeting; heavy tasks get rules, skills, plan,
+     * state, and recent events. Heavy fragments are cached for 5 minutes.
+     */
+    buildPromptFragment(ctx: AssembledContext): string;
+    /**
+     * Return per-component token budget snapshots.
+     * Uses real token-metrics totals when available; otherwise falls back to
+     * character counts as a proxy.
+     */
+    getComponentBudgets(ctx: AssembledContext): Record<string, TokenBudgetSnapshot>;
+    /** Return the total context limit for a session (from ingress or default). */
+    getTotalBudget(sessionID: string): number;
+    /** Retrieve the most recently assembled context for a session. */
+    getAssembledContext(sessionID: string): AssembledContext | undefined;
+    private readPlanContent;
+    private readCodebaseDocs;
+    private readRecentEvents;
+    private buildRoute;
+    private mapComplexityToWorkflowClass;
+    private inferStages;
+    private selectRelevantRules;
+    private inferStageFromRoute;
+    private selectRelevantSkills;
+    private extractKeywords;
+}
+/** Convenience factory used by the plugin entry point. */
+export declare function createContextIngressService(options?: ContextIngressOptions): ContextIngressService;
+//# sourceMappingURL=context-ingress.d.ts.map

package/dist/services/context-ingress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-ingress.d.ts","sourceRoot":"","sources":["../../src/services/context-ingress.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAOH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAKtD,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EAEzB,MAAM,iBAAiB,CAAA;AAIxB,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,OAAO,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,cAAc,CAAA;IACvB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AA6DD,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,iBAAiB,CA2DpE;AAED,qBAAa,qBAAqB;IAChC,OAAO,CAAC,OAAO,CAAiC;IAChD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAsC;gBAE9D,OAAO,GAAE,qBAA0B;IAI/C,QAAQ,CAAC,KAAK,EAAE,mBAAmB,GAAG,gBAAgB;IA8DtD;;;;OAIG;IACH,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM;IAiElD;;;;OAIG;IACH,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC;IAgD/E,8EAA8E;IAC9E,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAIzC,kEAAkE;IAClE,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAIpE,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,gBAAgB;IAqBxB,OAAO,CAAC,gBAAgB;IA4BxB,OAAO,CAAC,UAAU;IAmBlB,OAAO,CAAC,4BAA4B;IAWpC,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,mBAAmB;IA0B3B,OAAO,CAAC,mBAAmB;IAK3B,OAAO,CAAC,oBAAoB;IAuC5B,OAAO,CAAC,eAAe;CAQxB;AAED,0DAA0D;AAC1D,wBAAgB,2BAA2B,CACzC,OAAO,CAAC,EAAE,qBAAqB,GAC9B,qBAAqB,CAEvB"}

package/dist/services/deadlock-detector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deadlock-detector.d.ts","sourceRoot":"","sources":["../../src/services/deadlock-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH,MAAM,MAAM,YAAY,GACpB,cAAc,GACd,iBAAiB,GACjB,qBAAqB,GACrB,aAAa,CAAA;AAEjB,MAAM,MAAM,cAAc,GACtB,oBAAoB,GACpB,gBAAgB,GAChB,gBAAgB,GAChB,MAAM,CAAA;AAEV,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,YAAY,CAAA;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,kBAAkB,EAAE,cAAc,CAAA;IAClC,gEAAgE;IAChE,SAAS,EAAE,OAAO,CAAA;CACnB;AAoCD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEvD;AAQD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,cAAc,EAAE,CAa3E;AAkID;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,cAAc,EAAE,CAe/E;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEnE"}
+{"version":3,"file":"deadlock-detector.d.ts","sourceRoot":"","sources":["../../src/services/deadlock-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH,MAAM,MAAM,YAAY,GACpB,cAAc,GACd,iBAAiB,GACjB,qBAAqB,GACrB,aAAa,CAAA;AAEjB,MAAM,MAAM,cAAc,GACtB,oBAAoB,GACpB,gBAAgB,GAChB,gBAAgB,GAChB,MAAM,CAAA;AAEV,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,YAAY,CAAA;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,kBAAkB,EAAE,cAAc,CAAA;IAClC,gEAAgE;IAChE,SAAS,EAAE,OAAO,CAAA;CACnB;AAoCD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEvD;AAQD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,cAAc,EAAE,CAa3E;AAmID;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,cAAc,EAAE,CAe/E;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEnE"}

package/dist/services/delegation-budget.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Delegation Budget Service
+ *
+ * Per-run envelope for tool calls, delegation depth, and same-step retries.
+ * All state is kept in memory; final budget snapshots are persisted to the
+ * run trace on run end via a stubbed persistence call.
+ *
+ * The service is advisory by default. Callers decide whether to honour the
+ * budget result.
+ */
+import type { FlowDeckConfig } from "../config/schema";
+import type { PolicyDecision } from "./harness-types";
+export interface DelegationBudgetConfig {
+    maxToolCalls: number;
+    maxDepth: number;
+    maxSameStepRetries: number;
+}
+export interface DelegationBudget {
+    runId: string;
+    config: DelegationBudgetConfig;
+    spentToolCalls: number;
+    currentDepth: number;
+    sameStepRetries: number;
+}
+export interface SpendResult {
+    ok: boolean;
+    remaining: number;
+}
+export interface DelegationBudgetSnapshot {
+    runId: string;
+    maxToolCalls: number;
+    maxDepth: number;
+    maxSameStepRetries: number;
+    spentToolCalls: number;
+    currentDepth: number;
+    sameStepRetries: number;
+    remainingToolCalls: number;
+}
+export declare function resolveDelegationBudgetConfig(config?: FlowDeckConfig): DelegationBudgetConfig;
+export declare function init(runId: string, config?: FlowDeckConfig): DelegationBudget;
+export declare function getBudget(runId: string): DelegationBudgetSnapshot | null;
+export declare function checkSpend(runId: string, _toolName?: string): PolicyDecision;
+export declare function recordDelegation(parentRunId: string, childRunId: string): boolean;
+export declare function incrementSameStepRetry(runId: string): boolean;
+export declare function resetSameStepRetry(runId: string): void;
+export declare function toSnapshot(budget: DelegationBudget): DelegationBudgetSnapshot;
+/** Persist the final budget snapshot into the run trace. */
+export declare function persistBudget(runId: string, dir?: string): boolean;
+/** Release the in-memory budget for a run. */
+export declare function end(runId: string): DelegationBudgetSnapshot | null;
+/** Clear all in-memory budgets. Useful for tests. */
+export declare function clearAllBudgets(): void;
+/** Return the number of active in-memory budgets. Useful for tests/telemetry. */
+export declare function activeBudgetCount(): number;
+//# sourceMappingURL=delegation-budget.d.ts.map

package/dist/services/delegation-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-budget.d.ts","sourceRoot":"","sources":["../../src/services/delegation-budget.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,KAAK,EAAE,cAAc,EAAiB,MAAM,iBAAiB,CAAA;AAGpE,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,kBAAkB,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,sBAAsB,CAAA;IAC9B,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,kBAAkB,EAAE,MAAM,CAAA;CAC3B;AA6BD,wBAAgB,6BAA6B,CAC3C,MAAM,CAAC,EAAE,cAAc,GACtB,sBAAsB,CAQxB;AAED,wBAAgB,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,cAAc,GAAG,gBAAgB,CAW7E;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,GAAG,IAAI,CAIxE;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,cAAc,CAe5E;AAED,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAYjF;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAK7D;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAKtD;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,wBAAwB,CAW7E;AAED,4DAA4D;AAC5D,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAMlE;AAED,8CAA8C;AAC9C,wBAAgB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,GAAG,IAAI,CAOlE;AAED,qDAAqD;AACrD,wBAAgB,eAAe,IAAI,IAAI,CAEtC;AAED,iFAAiF;AACjF,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C"}

package/dist/services/event-logger.d.ts

@@ -1,6 +1,6 @@
 export interface ToolEvent {
     timestamp: string;
-    type: "tool.before" | "tool.after" | "session.created" | "session.idle" | "session.error";
+    type: "tool.before" | "tool.after" | "session.created" | "session.idle" | "session.error" | "span.open" | "span.close";
     agent?: string;
     tool?: string;
     args?: Record<string, unknown>;
@@ -9,6 +9,8 @@ export interface ToolEvent {
     status?: "success" | "error" | "blocked";
     error?: string;
     session_id?: string;
+    span_id?: string;
+    parent_span_id?: string;
 }
 export declare function getCurrentAgent(): string | null;
 export declare function setCurrentAgent(agent: string | null): void;

package/dist/services/event-logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event-logger.d.ts","sourceRoot":"","sources":["../../src/services/event-logger.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,aAAa,GAAG,YAAY,GAAG,iBAAiB,GAAG,cAAc,GAAG,eAAe,CAAA;IACzF,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAA;IACxC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAYD,wBAAgB,eAAe,IAAI,MAAM,GAAG,IAAI,CAE/C;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAE1D;AAED,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAEvD;AAED,wBAAgB,mBAAmB,IAAI,IAAI,CAG1C;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmBnE;AAkBD,wBAAgB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CA+BlG;AAwBD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAqD7D"}
+{"version":3,"file":"event-logger.d.ts","sourceRoot":"","sources":["../../src/services/event-logger.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,aAAa,GAAG,YAAY,GAAG,iBAAiB,GAAG,cAAc,GAAG,eAAe,GAAG,WAAW,GAAG,YAAY,CAAA;IACtH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAA;IACxC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAYD,wBAAgB,eAAe,IAAI,MAAM,GAAG,IAAI,CAE/C;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAE1D;AAED,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAEvD;AAED,wBAAgB,mBAAmB,IAAI,IAAI,CAG1C;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmBnE;AAkBD,wBAAgB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CA+BlG;AAwBD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAqD7D"}

package/dist/services/execution-substrate.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Execution Substrate
+ *
+ * Tracks active tool/command executions, durations, and timeout helpers.
+ * Best-effort only: the plugin API does not expose a kill signal, so this
+ * layer records lifecycle state and flags overdue executions for downstream
+ * policy/scorecard use.
+ */
+export interface ActiveExecution {
+    runId: string;
+    sessionID: string;
+    tool: string;
+    startedAt: number;
+}
+export interface ExecutionSubstrate {
+    start(req: {
+        runId: string;
+        sessionID: string;
+        tool: string;
+        args: Record<string, unknown>;
+    }): void;
+    finish(req: {
+        runId: string;
+        sessionID: string;
+        tool: string;
+    }, status: "success" | "error" | "blocked", durationMs?: number): void;
+    active(): ActiveExecution[];
+    isOverdue(exec: {
+        startedAt: number;
+    }, maxMs: number): boolean;
+}
+export declare function createExecutionSubstrate(): ExecutionSubstrate;
+/** Release all tracked executions. Intended for tests. */
+export declare function clearExecutionSubstrate(): void;
+//# sourceMappingURL=execution-substrate.d.ts.map

package/dist/services/execution-substrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-substrate.d.ts","sourceRoot":"","sources":["../../src/services/execution-substrate.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,IAAI,CAAA;IACnG,MAAM,CAAC,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnI,MAAM,IAAI,eAAe,EAAE,CAAA;IAC3B,SAAS,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;CAC/D;AAQD,wBAAgB,wBAAwB,IAAI,kBAAkB,CA+B7D;AAED,0DAA0D;AAC1D,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C"}

package/dist/services/harness-controller.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Harness Controller
+ *
+ * Central control plane for the FlowDeck runtime. Receives every model-facing
+ * decision point from the plugin entry point and delegates to the context,
+ * policy, execution, and persistence layers.
+ */
+import type { Permission } from "@opencode-ai/sdk";
+import type { HarnessPolicy, PolicyDecision } from "./harness-policy";
+import type { AssembledContext, RunContext } from "./harness-types";
+import { type ContextIngressService } from "./context-ingress";
+import { type StatePersistenceService } from "./state-persistence";
+import { createContextWindowMonitorHook } from "../hooks/context-window-monitor";
+import { type VerificationLayer } from "./verification-layer";
+import { type RecoveryLayer } from "./recovery-layer";
+export interface HarnessControllerConfig {
+    directory: string;
+    client: any;
+    appLog: (msg: string) => void;
+    policy: HarnessPolicy;
+    verificationLayer?: VerificationLayer;
+    recoveryLayer?: RecoveryLayer;
+    contextIngress?: ContextIngressService;
+    contextMonitor?: ReturnType<typeof createContextWindowMonitorHook>;
+}
+export interface ToolCallRequest {
+    sessionID: string;
+    tool: string;
+    args: Record<string, unknown>;
+    agent?: string;
+    parentRunId?: string;
+}
+export interface CommandRequest {
+    sessionID: string;
+    command: string;
+    arguments: string;
+    agent?: string;
+}
+export interface SessionEvent {
+    type: "session.created" | "session.started" | "session.idle" | "session.error" | "session.deleted" | "command.executed" | "message.updated";
+    properties?: Record<string, unknown>;
+}
+export interface HarnessController {
+    init(): void;
+    onCommandBefore(req: CommandRequest): RunContext;
+    evaluateToolCall(req: ToolCallRequest): PolicyDecision;
+    recordToolOutcome(req: ToolCallRequest, output: unknown, status: "success" | "error" | "blocked"): void;
+    onSessionEvent(evt: SessionEvent): Promise<void>;
+    onPermissionAsk(input: Permission): void;
+    getAssembledContext(sessionID: string): AssembledContext | undefined;
+    endRun(sessionID: string, status: "complete" | "failed" | "cancelled", outcome?: string, error?: string): void;
+    getCurrentStage(sessionID?: string): string | undefined;
+    getStatePersistence(): StatePersistenceService;
+    getContextIngress(): ContextIngressService;
+    getContextMonitor(): ReturnType<typeof createContextWindowMonitorHook>;
+}
+export declare function createHarnessController(config: HarnessControllerConfig): HarnessController;
+//# sourceMappingURL=harness-controller.d.ts.map

package/dist/services/harness-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-controller.d.ts","sourceRoot":"","sources":["../../src/services/harness-controller.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAc,MAAM,iBAAiB,CAAA;AAC/E,OAAO,EAA+B,KAAK,qBAAqB,EAAE,MAAM,mBAAmB,CAAA;AAE3F,OAAO,EAA0B,KAAK,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAG1F,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAA;AAOhF,OAAO,EAA2B,KAAK,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACtF,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAG1E,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,GAAG,CAAA;IACX,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,MAAM,EAAE,aAAa,CAAA;IACrB,iBAAiB,CAAC,EAAE,iBAAiB,CAAA;IACrC,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,cAAc,CAAC,EAAE,qBAAqB,CAAA;IACtC,cAAc,CAAC,EAAE,UAAU,CAAC,OAAO,8BAA8B,CAAC,CAAA;CACnE;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,cAAc,GAAG,eAAe,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,iBAAiB,CAAA;IAC3I,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACrC;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,IAAI,IAAI,CAAA;IACZ,eAAe,CAAC,GAAG,EAAE,cAAc,GAAG,UAAU,CAAA;IAChD,gBAAgB,CAAC,GAAG,EAAE,eAAe,GAAG,cAAc,CAAA;IACtD,iBAAiB,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,IAAI,CAAA;IACvG,cAAc,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChD,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAAA;IACxC,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAAA;IACpE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,WAAW,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9G,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IACvD,mBAAmB,IAAI,uBAAuB,CAAA;IAC9C,iBAAiB,IAAI,qBAAqB,CAAA;IAC1C,iBAAiB,IAAI,UAAU,CAAC,OAAO,8BAA8B,CAAC,CAAA;CACvE;AAID,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,uBAAuB,GAAG,iBAAiB,CA8Z1F"}

package/dist/services/harness-policy.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Harness Policy Service
+ *
+ * Unified allow/deny/ask evaluator for every tool call. Runs checks in order
+ * and short-circuits on deny:
+ *
+ *   1. Runtime limits (loop detector, delegation budget, deadlock signals)
+ *   2. Agent contract (tool allowlist / forbidden actions)
+ *   3. Governance (tool guard, guard rails, approvals, active policies)
+ *   4. Supervisor review
+ *
+ * Every evaluation produces exactly one entry in `.codebase/AUDIT.jsonl`.
+ */
+import type { PolicyDecision, PolicyInput } from "./harness-types";
+export type { PolicyDecision } from "./harness-types";
+export interface HarnessPolicy {
+    evaluate(input: PolicyInput): PolicyDecision;
+    checkAgentContract(input: PolicyInput): PolicyDecision;
+    checkRuntimeLimits(input: PolicyInput): PolicyDecision;
+    checkGovernance(input: PolicyInput): PolicyDecision;
+    checkSupervisor(input: PolicyInput, targetName: string): PolicyDecision;
+}
+export declare function createHarnessPolicy(directory: string, appLog?: (msg: string) => void): HarnessPolicy;
+//# sourceMappingURL=harness-policy.d.ts.map

package/dist/services/harness-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-policy.d.ts","sourceRoot":"","sources":["../../src/services/harness-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,KAAK,EAEV,cAAc,EACd,WAAW,EAEZ,MAAM,iBAAiB,CAAA;AAExB,YAAY,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAcrD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,cAAc,CAAA;IAC5C,kBAAkB,CAAC,KAAK,EAAE,WAAW,GAAG,cAAc,CAAA;IACtD,kBAAkB,CAAC,KAAK,EAAE,WAAW,GAAG,cAAc,CAAA;IACtD,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,cAAc,CAAA;IACnD,eAAe,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,cAAc,CAAA;CACxE;AA6FD,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAC7B,aAAa,CAyTf"}

package/dist/services/harness-types.d.ts

@@ -0,0 +1,178 @@
+/**
+ * Shared harness types used across the FlowDeck runtime services.
+ *
+ * This module contains only type definitions and re-exports. It is imported
+ * by services, tools, and the plugin entry point to keep cross-layer contracts
+ * explicit and avoid circular dependencies.
+ */
+import type { ToolEvent } from "./event-logger";
+import type { PlanningState } from "../tools/planning-state-lib";
+export type { ToolEvent };
+/** Snapshot of token consumption for a single context component. */
+export interface TokenBudgetSnapshot {
+    /** Component name, e.g. 'total', 'state', 'plan', 'docs', 'events', 'rules', 'skills'. */
+    component: string;
+    /** Tokens already consumed by this component. */
+    usedTokens: number;
+    /** Token limit allocated to this component. */
+    limitTokens: number;
+    /** How the limit was derived, e.g. 'config', 'env', 'fallback'. */
+    source: string;
+}
+/** Workflow route selected for a task. */
+export interface WorkflowRoute {
+    workflowClass: string;
+    stages: string[];
+    criteria: Record<string, unknown>;
+    scores: Record<string, number>;
+    reason: string;
+}
+/** A free-form observation attached to a run for loop/recovery context. */
+export interface Observation {
+    id: string;
+    runId: string;
+    type: string;
+    content: string;
+    timestamp: string;
+    source: string;
+}
+/** Input passed to the context ingress service to assemble a run context. */
+export interface ContextIngressInput {
+    directory: string;
+    sessionID: string;
+    command: string;
+    description: string;
+    currentStage: string;
+    languages?: string[];
+}
+/** Fully assembled runtime context for a command execution. */
+export interface AssembledContext {
+    directory: string;
+    sessionID: string;
+    command: string;
+    description: string;
+    isTrivialChat: boolean;
+    planningState: PlanningState;
+    planContent: string;
+    codebaseDocs: Record<string, string>;
+    recentEvents: ToolEvent[];
+    selectedRules: string[];
+    selectedSkills: string[];
+    tokenBudget: TokenBudgetSnapshot;
+}
+/** Status of an individual agent span. */
+export type SpanStatus = "running" | "complete" | "failed" | "blocked" | "skipped";
+/** Options provided when closing an agent span. */
+export interface SpanCloseOpts {
+    output_valid?: boolean;
+    contract_violations?: string[];
+    tools_used?: string[];
+    handoff_payload?: Record<string, unknown>;
+    cost_estimate?: number;
+    retry_count?: number;
+}
+/** A single node in the causal agent trace graph. */
+export interface AgentSpan {
+    span_id: string;
+    /** trace_id = run_id of the root workflow run. */
+    trace_id: string;
+    /** span_id of the parent invocation; absent for the root agent. */
+    parent_span_id?: string;
+    /** Agent or system that delegated to this agent. */
+    invoker: string;
+    /** This agent's name. */
+    agent: string;
+    task_description: string;
+    stage: string;
+    started_at: string;
+    ended_at?: string;
+    status: SpanStatus;
+    /** Whether the agent produced a schema-valid output. */
+    output_valid: boolean;
+    /** Contract violation messages recorded during this span. */
+    contract_violations: string[];
+    /** Tool names used during this span. */
+    tools_used: string[];
+    /** Structured payload passed to the next agent. */
+    handoff_payload?: Record<string, unknown>;
+    latency_ms?: number;
+    model?: string;
+    cost_estimate?: number;
+    retry_count: number;
+    /** Delegation depth: root agent is 0, its delegate is 1, etc. */
+    depth: number;
+}
+/** Runtime handle for a single harness run. */
+export interface RunContext {
+    runId: string;
+    sessionID: string;
+    command: string;
+    directory: string;
+    rootSpanId: string;
+    currentSpanId?: string;
+    status: "running" | "complete" | "failed" | "cancelled";
+    workflowClass?: string;
+    currentStage?: string;
+}
+/** Possible recovery actions when a run is stuck or fails. */
+export type RecoveryAction = "retry" | "fallback-agent" | "escalate" | "stop";
+/** Arguments accepted by the delegate tool. */
+export interface DelegateToolArgs {
+    agent: string;
+    task: string;
+    mode?: "direct" | "council" | "pipeline";
+    context?: Record<string, unknown>;
+}
+/** Result returned by the delegate tool. */
+export interface DelegateResult {
+    span_id: string;
+    run_id: string;
+    status: "running" | "complete" | "failed" | "blocked";
+    output: string;
+    error?: string;
+}
+/** Policy evaluation verdict. */
+export type PolicyVerdict = "allow" | "deny" | "ask";
+/** Structured decision returned by every harness policy evaluation. */
+export interface PolicyDecision {
+    verdict: PolicyVerdict;
+    /** Human-readable reason for the decision. */
+    reason: string;
+    /** When verdict is 'ask', the approval request id to resolve. */
+    approvalRequestId?: string;
+    /** Risk classification used for logging and scorecards. */
+    riskFlags: string[];
+    /** Which layer produced the decision. */
+    source: string;
+    /** When verdict is 'deny', a structured escalation message. */
+    escalationMessage?: string;
+}
+/** Input passed to every harness policy evaluation. */
+export interface PolicyInput {
+    directory: string;
+    sessionID: string;
+    runId: string;
+    agent: string;
+    tool: string;
+    args: Record<string, unknown>;
+    command?: string;
+    workflowClass?: string;
+    currentStage?: string;
+    assembledContext?: AssembledContext;
+}
+/** Single append-only audit entry for a policy decision or action. */
+export interface AuditEntry {
+    id?: string;
+    timestamp: string;
+    run_id: string;
+    session_id: string;
+    agent: string;
+    tool?: string;
+    command?: string;
+    verdict: "allow" | "deny" | "ask";
+    reason: string;
+    risk_flags: string[];
+    source: string;
+    approval_request_id?: string;
+}
+//# sourceMappingURL=harness-types.d.ts.map

package/dist/services/harness-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-types.d.ts","sourceRoot":"","sources":["../../src/services/harness-types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAEhE,YAAY,EAAE,SAAS,EAAE,CAAA;AAEzB,oEAAoE;AACpE,MAAM,WAAW,mBAAmB;IAClC,0FAA0F;IAC1F,SAAS,EAAE,MAAM,CAAA;IACjB,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAA;IAClB,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAA;IACnB,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAA;CACf;AAED,0CAA0C;AAC1C,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,MAAM,CAAA;IACrB,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9B,MAAM,EAAE,MAAM,CAAA;CACf;AAED,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;CACf;AAED,6EAA6E;AAC7E,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;CACrB;AAED,+DAA+D;AAC/D,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,OAAO,CAAA;IACtB,aAAa,EAAE,aAAa,CAAA;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACpC,YAAY,EAAE,SAAS,EAAE,CAAA;IACzB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,WAAW,EAAE,mBAAmB,CAAA;CACjC;AAED,0CAA0C;AAC1C,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAA;AAElF,mDAAmD;AACnD,MAAM,WAAW,aAAa;IAC5B,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC9B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACzC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,qDAAqD;AACrD,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAA;IAChB,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAA;IACf,yBAAyB;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,gBAAgB,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,UAAU,CAAA;IAClB,wDAAwD;IACxD,YAAY,EAAE,OAAO,CAAA;IACrB,6DAA6D;IAC7D,mBAAmB,EAAE,MAAM,EAAE,CAAA;IAC7B,wCAAwC;IACxC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,mDAAmD;IACnD,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACzC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAA;CACd;AAED,+CAA+C;AAC/C,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAA;IACvD,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,8DAA8D;AAC9D,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,gBAAgB,GAAG,UAAU,GAAG,MAAM,CAAA;AAE7E,+CAA+C;AAC/C,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAA;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AAED,4CAA4C;AAC5C,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAA;IACrD,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,iCAAiC;AACjC,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAA;AAEpD,uEAAuE;AACvE,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,aAAa,CAAA;IACtB,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAA;IACd,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,2DAA2D;IAC3D,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAA;IACd,+DAA+D;IAC/D,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,uDAAuD;AACvD,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;CACpC;AAED,sEAAsE;AACtE,MAAM,WAAW,UAAU;IACzB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAA;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAC7B"}