@dv.nghiem/flowdeck 0.4.12 → 0.5.1

package/dist/lib/lazy.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Generic lazy initializer.
+ *
+ * Wraps a factory so the value is created on first access, cached thereafter,
+ * and can be reset (primarily useful for test isolation).
+ */
+export interface Lazy<T> {
+    get: () => T;
+    reset: () => void;
+}
+export declare function lazy<T>(factory: () => T): Lazy<T>;
+//# sourceMappingURL=lazy.d.ts.map

package/dist/lib/lazy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lazy.d.ts","sourceRoot":"","sources":["../../src/lib/lazy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,IAAI,CAAC,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC,CAAA;IACZ,KAAK,EAAE,MAAM,IAAI,CAAA;CAClB;AAED,wBAAgB,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAiBjD"}

package/dist/services/agent-contract-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-contract-registry.d.ts","sourceRoot":"","sources":["../../src/services/agent-contract-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,aAAa;IAC5B,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAA;IACb,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAA;IACZ,iDAAiD;IACjD,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,mDAAmD;IACnD,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,+DAA+D;IAC/D,oBAAoB,EAAE,MAAM,EAAE,CAAA;IAC9B,0CAA0C;IAC1C,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,2CAA2C;IAC3C,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,+DAA+D;IAC/D,oBAAoB,EAAE,MAAM,EAAE,CAAA;IAC9B,qDAAqD;IACrD,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,oCAAoC;IACpC,eAAe,EAAE,MAAM,EAAE,CAAA;CAC1B;AA4UD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAE/D;AAED,wBAAgB,eAAe,IAAI,aAAa,EAAE,CAEjD;AAED,wBAAgB,uBAAuB,IAAI,MAAM,EAAE,CAElD"}
+{"version":3,"file":"agent-contract-registry.d.ts","sourceRoot":"","sources":["../../src/services/agent-contract-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,aAAa;IAC5B,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAA;IACb,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAA;IACZ,iDAAiD;IACjD,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,mDAAmD;IACnD,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,+DAA+D;IAC/D,oBAAoB,EAAE,MAAM,EAAE,CAAA;IAC9B,0CAA0C;IAC1C,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,2CAA2C;IAC3C,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,+DAA+D;IAC/D,oBAAoB,EAAE,MAAM,EAAE,CAAA;IAC9B,qDAAqD;IACrD,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,oCAAoC;IACpC,eAAe,EAAE,MAAM,EAAE,CAAA;CAC1B;AA+UD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAE/D;AAED,wBAAgB,eAAe,IAAI,aAAa,EAAE,CAEjD;AAED,wBAAgB,uBAAuB,IAAI,MAAM,EAAE,CAElD"}

package/dist/services/agent-trace-graph.d.ts

@@ -80,6 +80,10 @@ export declare function recordToolUsed(dir: string, span_id: string, toolName: s
  * Record a contract violation on the active span.
  */
 export declare function addSpanViolation(dir: string, span_id: string, violation: string): void;
+/**
+ * Record a contract violation on the active span (convenience alias).
+ */
+export declare function recordContractViolation(dir: string, span_id: string, violation: string): void;
 export declare function getSpan(dir: string, span_id: string): AgentSpan | null;
 export declare function getTraceSpans(dir: string, trace_id: string): AgentSpan[];
 /**

package/dist/services/agent-trace-graph.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-trace-graph.d.ts","sourceRoot":"","sources":["../../src/services/agent-trace-graph.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAA;AAElF,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAA;IAChB,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAA;IACf,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,gBAAgB,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,UAAU,CAAA;IAClB,uDAAuD;IACvD,YAAY,EAAE,OAAO,CAAA;IACrB,4DAA4D;IAC5D,mBAAmB,EAAE,MAAM,EAAE,CAAA;IAC7B,uCAAuC;IACvC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,kDAAkD;IAClD,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACzC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,SAAS,EAAE,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAElD;AAuBD;;GAEG;AACH,wBAAgB,QAAQ,CACtB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IACJ,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,gBAAgB,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GACA,SAAS,CAwBX;AAED;;GAEG;AACH,wBAAgB,SAAS,CACvB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,EACtC,IAAI,GAAE;IACJ,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC9B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACzC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;CAChB,GACL,IAAI,CAmBN;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAQnF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAMtF;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAEtE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,CAExE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAoBhF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,MAAM,EAAE,CAYpE"}
+{"version":3,"file":"agent-trace-graph.d.ts","sourceRoot":"","sources":["../../src/services/agent-trace-graph.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAA;AAElF,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAA;IAChB,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAA;IACf,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,gBAAgB,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,UAAU,CAAA;IAClB,uDAAuD;IACvD,YAAY,EAAE,OAAO,CAAA;IACrB,4DAA4D;IAC5D,mBAAmB,EAAE,MAAM,EAAE,CAAA;IAC7B,uCAAuC;IACvC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,kDAAkD;IAClD,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACzC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,SAAS,EAAE,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAElD;AAuBD;;GAEG;AACH,wBAAgB,QAAQ,CACtB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IACJ,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,gBAAgB,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GACA,SAAS,CAwBX;AAED;;GAEG;AACH,wBAAgB,SAAS,CACvB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,EACtC,IAAI,GAAE;IACJ,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC9B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACzC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;CAChB,GACL,IAAI,CAmBN;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAQnF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAMtF;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAE7F;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAEtE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,CAExE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAoBhF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,MAAM,EAAE,CAYpE"}

package/dist/services/agent-validator.d.ts

@@ -47,8 +47,9 @@ export declare function resolveValidatorMode(directory: string): ValidatorMode;
  */
 export declare function validateAgent(directory: string, ctx: AgentExecutionContext): ValidationResult;
 /**
- * Convenience check: is this tool call allowed for this agent?
+ * Validate that an agent's structured output contains the contract's expected fields.
  */
+export declare function validateAgentOutput(agent: string, output: Record<string, unknown>): ValidationResult;
 export declare function validateToolAccess(directory: string, agent: string, toolName: string, opts?: {
     run_id?: string;
     session_id?: string;

package/dist/services/agent-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-validator.d.ts","sourceRoot":"","sources":["../../src/services/agent-validator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,UAAU,GAAG,QAAQ,CAAA;AACzD,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAA;AAErE,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,eAAe,CAAA;IACvB,UAAU,EAAE,mBAAmB,EAAE,CAAA;IACjC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAA;IACb,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,uCAAuC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,6BAA6B;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,8CAA8C;IAC9C,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,uCAAuC;IACvC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,uCAAuC;IACvC,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,wCAAwC;IACxC,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,gCAAgC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,CAQrE;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,qBAAqB,GACzB,gBAAgB,CAuFlB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GAClD,gBAAgB,CAElB"}
+{"version":3,"file":"agent-validator.d.ts","sourceRoot":"","sources":["../../src/services/agent-validator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,UAAU,GAAG,QAAQ,CAAA;AACzD,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAA;AAErE,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,eAAe,CAAA;IACvB,UAAU,EAAE,mBAAmB,EAAE,CAAA;IACjC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAA;IACb,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,uCAAuC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,6BAA6B;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,8CAA8C;IAC9C,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,uCAAuC;IACvC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,uCAAuC;IACvC,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,wCAAwC;IACxC,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,gCAAgC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,CAWrE;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,qBAAqB,GACzB,gBAAgB,CAuFlB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB,CA0CpG;AACD,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GAClD,gBAAgB,CAElB"}

package/dist/services/approval-manager.d.ts

@@ -9,12 +9,21 @@ export interface ApprovalRequest {
     trigger: string;
     reason: string;
     risk_score: number;
+    agent?: string;
     file_path?: string;
+    content_hash?: string;
     change_description?: string;
 }
 export interface ApprovalsStore {
     requests: ApprovalRequest[];
 }
+export interface ApprovalCheckCriteria {
+    run_id: string;
+    session_id: string;
+    agent: string;
+    file_path: string;
+    content_hash: string;
+}
 export declare function isSensitivePath(filePath: string): boolean;
 export declare function isApprovalRequired(filePath: string, riskScore: number): boolean;
 export declare function requestApproval(dir: string, run_id: string, trigger: string, reason: string, options?: {
@@ -22,9 +31,13 @@ export declare function requestApproval(dir: string, run_id: string, trigger: st
     risk_score?: number;
     change_description?: string;
     session_id?: string;
+    agent?: string;
+    content_hash?: string;
 }): ApprovalRequest;
 export declare function resolveApproval(dir: string, approval_id: string, decision: "approved" | "rejected"): boolean;
-export declare function checkApproval(dir: string, file_path: string, command: string): ApprovalRequest | null;
+export declare function checkApproval(dir: string, criteria: ApprovalCheckCriteria): ApprovalRequest | null;
+export declare function computeContentHash(args: Record<string, unknown>): string;
+export declare function requestApprovalForTool(dir: string, run_id: string, session_id: string, agent: string, tool: string, args: Record<string, unknown>): ApprovalRequest;
 export declare function getPendingApprovals(dir: string): ApprovalRequest[];
 export declare function getRecentApprovals(dir: string, limit?: number): ApprovalRequest[];
 //# sourceMappingURL=approval-manager.d.ts.map

package/dist/services/approval-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approval-manager.d.ts","sourceRoot":"","sources":["../../src/services/approval-manager.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAA;AAEhE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,cAAc,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,eAAe,EAAE,CAAA;CAC5B;AAaD,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAE/E;AAsBD,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1G,eAAe,CAiBjB;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,GAAG,UAAU,GAAG,OAAO,CAQ5G;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAarG;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,EAAE,CAElE;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,eAAe,EAAE,CAG7E"}
+{"version":3,"file":"approval-manager.d.ts","sourceRoot":"","sources":["../../src/services/approval-manager.ts"],"names":[],"mappings":"AAWA,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAA;AAEhE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,cAAc,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,eAAe,EAAE,CAAA;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;CACrB;AAaD,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAE/E;AAsBD,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IACP,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,YAAY,CAAC,EAAE,MAAM,CAAA;CACjB,GACL,eAAe,CAmBjB;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,GAAG,UAAU,GAAG,OAAO,CAQ5G;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,qBAAqB,GAAG,eAAe,GAAG,IAAI,CAgBlG;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAIxE;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,eAAe,CAWjB;AAMD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,EAAE,CAElE;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,eAAe,EAAE,CAG7E"}

package/dist/services/audit-log.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Audit Log Service
+ *
+ * Append-only log of every harness policy decision.
+ * Writes to `.codebase/AUDIT.jsonl` and rotates at 1000 lines.
+ */
+import type { AuditEntry } from "../services/harness-types";
+export interface AuditFilter {
+    run_id?: string;
+    session_id?: string;
+    tool?: string;
+    verdict?: string;
+}
+export interface AuditLog {
+    append(entry: AuditEntry): void;
+    query(filter: AuditFilter): AuditEntry[];
+}
+export declare function auditPath(directory: string): string;
+/**
+ * Create an audit log writer for the given project directory.
+ */
+export declare function createAuditLog(directory: string, appLog?: (msg: string) => void): AuditLog;
+//# sourceMappingURL=audit-log.d.ts.map

package/dist/services/audit-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.d.ts","sourceRoot":"","sources":["../../src/services/audit-log.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAaH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAK3D,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAAA;IAC/B,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,UAAU,EAAE,CAAA;CACzC;AAED,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEnD;AAuED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAC7B,QAAQ,CAKV"}

package/dist/services/context-ingress.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Context Ingress Service
+ *
+ * Assembles the runtime context for a command execution:
+ *  - planning state (STATE.md)
+ *  - plan content (PLAN.md)
+ *  - .codebase/ documentation
+ *  - recent tool/session events
+ *  - task complexity classification
+ *  - relevant rules and skills
+ *  - token budget snapshot
+ *  - trivial-chat short-circuit
+ *
+ * The service is advisory: it does not block execution and does not mutate
+ * external state except through explicit dependencies injected by the caller.
+ */
+import type { FlowDeckConfig } from "../config/schema";
+import { type AssembledContext, type TokenBudgetSnapshot } from "./harness-types";
+export interface TrivialChatResult {
+    isTrivialChat: boolean;
+    confidence: number;
+    reason: string;
+}
+export interface ContextIngressInput {
+    runId: string;
+    sessionId: string;
+    projectRoot: string;
+    command?: string;
+    description: string;
+    config?: FlowDeckConfig;
+    currentStage?: string;
+}
+export interface ContextIngressOptions {
+    maxEvents?: number;
+    eventMaxAgeMinutes?: number;
+    planTruncateThreshold?: number;
+    planTruncateTo?: number;
+    totalTokenBudget?: number;
+}
+/** Clear all module-level context-ingress caches. Useful for tests. */
+export declare function clearContextIngressCaches(): void;
+export declare function isTrivialChat(description: string): TrivialChatResult;
+export declare class ContextIngressService {
+    private options;
+    private readonly _assembledBySession;
+    constructor(options?: ContextIngressOptions);
+    assemble(input: ContextIngressInput): AssembledContext;
+    /**
+     * Persist a per-component token budget snapshot for dashboard consumption.
+     * Failures are logged to stderr but do not block context assembly.
+     */
+    private persistBudgetSnapshot;
+    /**
+     * Build the prompt fragment to inject for this context.
+     * Trivial chats get a minimal greeting; heavy tasks get rules, skills, plan,
+     * state, and recent events. Heavy fragments are cached for 5 minutes.
+     */
+    buildPromptFragment(ctx: AssembledContext): string;
+    /**
+     * Return per-component token budget snapshots.
+     * Uses real token-metrics totals when available; otherwise falls back to
+     * estimated token counts derived from content length and kind.
+     */
+    getComponentBudgets(ctx: AssembledContext): Record<string, TokenBudgetSnapshot>;
+    /** Return the total context limit for a session (from ingress or default). */
+    getTotalBudget(sessionID: string): number;
+    /** Retrieve the most recently assembled context for a session. */
+    getAssembledContext(sessionID: string): AssembledContext | undefined;
+    private readPlanContent;
+    private readCodebaseDocs;
+    private readRecentEvents;
+    private buildRoute;
+    private mapComplexityToWorkflowClass;
+    private inferStages;
+    private selectRelevantRules;
+    private inferStageFromRoute;
+    private selectRelevantSkills;
+}
+/** Convenience factory used by the plugin entry point. */
+export declare function createContextIngressService(options?: ContextIngressOptions): ContextIngressService;
+//# sourceMappingURL=context-ingress.d.ts.map

package/dist/services/context-ingress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-ingress.d.ts","sourceRoot":"","sources":["../../src/services/context-ingress.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAOH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAKtD,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EAEzB,MAAM,iBAAiB,CAAA;AAIxB,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,OAAO,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,cAAc,CAAA;IACvB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AA0GD,uEAAuE;AACvE,wBAAgB,yBAAyB,IAAI,IAAI,CAIhD;AAiFD,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,iBAAiB,CA2DpE;AAWD,qBAAa,qBAAqB;IAChC,OAAO,CAAC,OAAO,CAAiC;IAChD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAsC;gBAE9D,OAAO,GAAE,qBAA0B;IAI/C,QAAQ,CAAC,KAAK,EAAE,mBAAmB,GAAG,gBAAgB;IAgEtD;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IAsB7B;;;;OAIG;IACH,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM;IAiElD;;;;OAIG;IACH,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC;IAgD/E,8EAA8E;IAC9E,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAIzC,kEAAkE;IAClE,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAIpE,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,gBAAgB;IAqBxB,OAAO,CAAC,gBAAgB;IA4BxB,OAAO,CAAC,UAAU;IAmBlB,OAAO,CAAC,4BAA4B;IAWpC,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,mBAAmB;IAgC3B,OAAO,CAAC,mBAAmB;IAK3B,OAAO,CAAC,oBAAoB;CAQ7B;AAED,0DAA0D;AAC1D,wBAAgB,2BAA2B,CACzC,OAAO,CAAC,EAAE,qBAAqB,GAC9B,qBAAqB,CAEvB"}

package/dist/services/council-runner.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Council Runner
+ *
+ * Shared fan-out logic for the council delegation mode. Prompts a list of agents
+ * in parallel with bounded concurrency and returns their individual outputs.
+ */
+import type { OpencodeClient } from "@opencode-ai/sdk";
+export interface CouncilAgentResult {
+    agent: string;
+    output?: string;
+    error?: string;
+}
+export declare function runCouncil(client: OpencodeClient, context: {
+    directory: string;
+    sessionID: string;
+}, task: string, agents: string[], options?: {
+    maxConcurrency?: number;
+}): Promise<CouncilAgentResult[]>;
+//# sourceMappingURL=council-runner.d.ts.map

package/dist/services/council-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"council-runner.d.ts","sourceRoot":"","sources":["../../src/services/council-runner.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEtD,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EACjD,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EAAE,EAChB,OAAO,CAAC,EAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GACpC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAuC/B"}

package/dist/services/deadlock-detector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deadlock-detector.d.ts","sourceRoot":"","sources":["../../src/services/deadlock-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH,MAAM,MAAM,YAAY,GACpB,cAAc,GACd,iBAAiB,GACjB,qBAAqB,GACrB,aAAa,CAAA;AAEjB,MAAM,MAAM,cAAc,GACtB,oBAAoB,GACpB,gBAAgB,GAChB,gBAAgB,GAChB,MAAM,CAAA;AAEV,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,YAAY,CAAA;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,kBAAkB,EAAE,cAAc,CAAA;IAClC,gEAAgE;IAChE,SAAS,EAAE,OAAO,CAAA;CACnB;AAoCD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEvD;AAQD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,cAAc,EAAE,CAa3E;AAkID;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,cAAc,EAAE,CAe/E;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEnE"}
+{"version":3,"file":"deadlock-detector.d.ts","sourceRoot":"","sources":["../../src/services/deadlock-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH,MAAM,MAAM,YAAY,GACpB,cAAc,GACd,iBAAiB,GACjB,qBAAqB,GACrB,aAAa,CAAA;AAEjB,MAAM,MAAM,cAAc,GACtB,oBAAoB,GACpB,gBAAgB,GAChB,gBAAgB,GAChB,MAAM,CAAA;AAEV,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,YAAY,CAAA;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,kBAAkB,EAAE,cAAc,CAAA;IAClC,gEAAgE;IAChE,SAAS,EAAE,OAAO,CAAA;CACnB;AAoCD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEvD;AAQD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,cAAc,EAAE,CAa3E;AAmID;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,cAAc,EAAE,CAe/E;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEnE"}

package/dist/services/delegation-budget.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Delegation Budget Service
+ *
+ * Per-run envelope for tool calls, delegation depth, and same-step retries.
+ * All state is kept in memory; final budget snapshots are persisted to the
+ * run trace on run end via a stubbed persistence call.
+ *
+ * The service is advisory by default. Callers decide whether to honour the
+ * budget result.
+ */
+import type { FlowDeckConfig } from "../config/schema";
+import type { PolicyDecision } from "./harness-types";
+export interface DelegationBudgetConfig {
+    maxToolCalls: number;
+    maxDepth: number;
+    maxSameStepRetries: number;
+}
+export interface DelegationBudget {
+    runId: string;
+    config: DelegationBudgetConfig;
+    spentToolCalls: number;
+    currentDepth: number;
+    sameStepRetries: number;
+}
+export interface SpendResult {
+    ok: boolean;
+    remaining: number;
+}
+export interface DelegationBudgetSnapshot {
+    runId: string;
+    maxToolCalls: number;
+    maxDepth: number;
+    maxSameStepRetries: number;
+    spentToolCalls: number;
+    currentDepth: number;
+    sameStepRetries: number;
+    remainingToolCalls: number;
+}
+export declare function resolveDelegationBudgetConfig(config?: FlowDeckConfig): DelegationBudgetConfig;
+export declare function init(runId: string, config?: FlowDeckConfig): DelegationBudget;
+export declare function getBudget(runId: string): DelegationBudgetSnapshot | null;
+export declare function checkSpend(runId: string, _toolName?: string): PolicyDecision;
+export declare function recordDelegation(parentRunId: string, childRunId: string): boolean;
+export declare function incrementSameStepRetry(runId: string): boolean;
+export declare function resetSameStepRetry(runId: string): void;
+export declare function toSnapshot(budget: DelegationBudget): DelegationBudgetSnapshot;
+/** Persist the final budget snapshot into the run trace. */
+export declare function persistBudget(runId: string, dir?: string): boolean;
+/** Release the in-memory budget for a run. */
+export declare function end(runId: string): DelegationBudgetSnapshot | null;
+/** Clear all in-memory budgets. Useful for tests. */
+export declare function clearAllBudgets(): void;
+/** Return the number of active in-memory budgets. Useful for tests/telemetry. */
+export declare function activeBudgetCount(): number;
+//# sourceMappingURL=delegation-budget.d.ts.map

package/dist/services/delegation-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-budget.d.ts","sourceRoot":"","sources":["../../src/services/delegation-budget.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,KAAK,EAAE,cAAc,EAAiB,MAAM,iBAAiB,CAAA;AAGpE,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,kBAAkB,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,sBAAsB,CAAA;IAC9B,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,kBAAkB,EAAE,MAAM,CAAA;CAC3B;AA6BD,wBAAgB,6BAA6B,CAC3C,MAAM,CAAC,EAAE,cAAc,GACtB,sBAAsB,CAQxB;AAED,wBAAgB,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,cAAc,GAAG,gBAAgB,CAW7E;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,GAAG,IAAI,CAIxE;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,cAAc,CAe5E;AAED,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAYjF;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAK7D;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAKtD;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,wBAAwB,CAW7E;AAED,4DAA4D;AAC5D,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAMlE;AAED,8CAA8C;AAC9C,wBAAgB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,GAAG,IAAI,CAOlE;AAED,qDAAqD;AACrD,wBAAgB,eAAe,IAAI,IAAI,CAEtC;AAED,iFAAiF;AACjF,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C"}

package/dist/services/event-handlers/command-executed-handler.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Command executed handler.
+ *
+ * Tracks the last command name/output and validates any /fd-* command references
+ * emitted by the agent, recording contract violations when references are invalid.
+ */
+import type { HandlerDeps } from "./types";
+export declare function createCommandExecutedHandler(deps: HandlerDeps): (sessionID: string, properties: Record<string, unknown>) => void;
+//# sourceMappingURL=command-executed-handler.d.ts.map

package/dist/services/event-handlers/command-executed-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-executed-handler.d.ts","sourceRoot":"","sources":["../../../src/services/event-handlers/command-executed-handler.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAG1C,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,WAAW,IAGpD,WAAW,MAAM,EAAE,YAAY,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,IAAI,CA2BtE"}

package/dist/services/event-handlers/index.d.ts

@@ -0,0 +1,6 @@
+export { createToolOutcomeHandler } from "./tool-outcome-handler";
+export { createCommandExecutedHandler } from "./command-executed-handler";
+export { createSessionIdleHandler } from "./session-idle-handler";
+export { createSessionErrorHandler } from "./session-error-handler";
+export type { HarnessControllerState, HandlerDeps } from "./types";
+//# sourceMappingURL=index.d.ts.map

package/dist/services/event-handlers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/event-handlers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAA;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACnE,YAAY,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA"}

package/dist/services/event-handlers/session-error-handler.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Session error handler.
+ *
+ * Logs the session event and ends the active run as failed.
+ */
+import type { HandlerDeps } from "./types";
+export declare function createSessionErrorHandler(deps: HandlerDeps): (sessionID: string, properties: Record<string, unknown>) => Promise<void>;
+//# sourceMappingURL=session-error-handler.d.ts.map

package/dist/services/event-handlers/session-error-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-error-handler.d.ts","sourceRoot":"","sources":["../../../src/services/event-handlers/session-error-handler.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAE1C,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,WAAW,IAG3C,WAAW,MAAM,EAAE,YAAY,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,OAAO,CAAC,IAAI,CAAC,CAerF"}

package/dist/services/event-handlers/session-idle-handler.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Session idle handler.
+ *
+ * Logs the session event, checks for stuck-run signals, ends the run as failed
+ * when deadlocked, or runs completion validation for fd-done before completing.
+ */
+import type { HandlerDeps } from "./types";
+export declare function createSessionIdleHandler(deps: HandlerDeps): (sessionID: string, properties: Record<string, unknown>) => Promise<void>;
+//# sourceMappingURL=session-idle-handler.d.ts.map

package/dist/services/event-handlers/session-idle-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-idle-handler.d.ts","sourceRoot":"","sources":["../../../src/services/event-handlers/session-idle-handler.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAE1C,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,WAAW,IAY1C,WAAW,MAAM,EAAE,YAAY,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,OAAO,CAAC,IAAI,CAAC,CAmCrF"}

package/dist/services/event-handlers/tool-outcome-handler.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Tool outcome handler.
+ *
+ * Records loop-detector history, agent trace data, decision-trace enrichment,
+ * failure-replay observations, execution-substrate completion, and context-window
+ * monitoring after a tool has executed.
+ */
+import type { HandlerDeps } from "./types";
+import type { ToolCallRequest } from "../harness-controller";
+export declare function createToolOutcomeHandler(deps: HandlerDeps): (req: ToolCallRequest, output: unknown, status: "success" | "error" | "blocked") => void;
+//# sourceMappingURL=tool-outcome-handler.d.ts.map

package/dist/services/event-handlers/tool-outcome-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-outcome-handler.d.ts","sourceRoot":"","sources":["../../../src/services/event-handlers/tool-outcome-handler.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAC1C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAI5D,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,WAAW,IAgBhD,KAAK,eAAe,EAAE,QAAQ,OAAO,EAAE,QAAQ,SAAS,GAAG,OAAO,GAAG,SAAS,KAAG,IAAI,CAuE9F"}

package/dist/services/event-handlers/types.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Shared types for harness event handlers.
+ */
+import type { LoopDetector } from "../loop-detector";
+import type { createEventLogHooks } from "../../hooks/event-log-hook";
+import type { createContextWindowMonitorHook } from "../../hooks/context-window-monitor";
+import type { Lazy } from "../../lib/lazy";
+import type { PolicyDecision } from "../harness-policy";
+import type { ContextIngressService } from "../context-ingress";
+import type { StatePersistenceService } from "../state-persistence";
+import type { RecoveryLayer } from "../recovery-layer";
+import type { VerificationLayer } from "../verification-layer";
+import type { AuditLog } from "../audit-log";
+import type { ExecutionSubstrate } from "../execution-substrate";
+import type { HarnessPolicy } from "../harness-policy";
+import { OrchestratorGuard } from "../../hooks/orchestrator-guard-hook";
+export interface HarnessControllerState {
+    loopDetector: Lazy<LoopDetector>;
+    eventLog: Lazy<ReturnType<typeof createEventLogHooks>>;
+    contextMonitor: Lazy<ReturnType<typeof createContextWindowMonitorHook>>;
+    currentWorkflowClass: string | undefined;
+    lastActiveSessionID: string | null;
+    lastCommandName: string | null;
+    lastCommandOutput: string | null;
+    toolFailureCounts: Map<string, number>;
+    lastToolDecisions: Map<string, PolicyDecision>;
+}
+export interface HandlerDeps {
+    directory: string;
+    appLog: (msg: string) => void;
+    policy: HarnessPolicy;
+    contextIngress: ContextIngressService;
+    statePersistence: StatePersistenceService;
+    recoveryLayer: RecoveryLayer;
+    verificationLayer: VerificationLayer;
+    auditLog: AuditLog;
+    executionSubstrate: ExecutionSubstrate;
+    orchestratorGuard: OrchestratorGuard;
+    state: HarnessControllerState;
+    endRun: (sessionID: string, status: "complete" | "failed" | "cancelled", outcome?: string, error?: string) => void;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/services/event-handlers/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/services/event-handlers/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AACrE,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oCAAoC,CAAA;AACxF,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAC/D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAA;AAEvE,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;IAChC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAA;IACtD,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,8BAA8B,CAAC,CAAC,CAAA;IACvE,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAA;IACxC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACtC,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;CAC/C;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,MAAM,EAAE,aAAa,CAAA;IACrB,cAAc,EAAE,qBAAqB,CAAA;IACrC,gBAAgB,EAAE,uBAAuB,CAAA;IACzC,aAAa,EAAE,aAAa,CAAA;IAC5B,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,QAAQ,EAAE,QAAQ,CAAA;IAClB,kBAAkB,EAAE,kBAAkB,CAAA;IACtC,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,KAAK,EAAE,sBAAsB,CAAA;IAC7B,MAAM,EAAE,CACN,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,WAAW,EAC3C,OAAO,CAAC,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,MAAM,KACX,IAAI,CAAA;CACV"}

package/dist/services/event-logger.d.ts

@@ -1,6 +1,6 @@
 export interface ToolEvent {
     timestamp: string;
-    type: "tool.before" | "tool.after" | "session.created" | "session.idle" | "session.error";
+    type: "tool.before" | "tool.after" | "session.created" | "session.idle" | "session.error" | "span.open" | "span.close";
     agent?: string;
     tool?: string;
     args?: Record<string, unknown>;
@@ -9,6 +9,8 @@ export interface ToolEvent {
     status?: "success" | "error" | "blocked";
     error?: string;
     session_id?: string;
+    span_id?: string;
+    parent_span_id?: string;
 }
 export declare function getCurrentAgent(): string | null;
 export declare function setCurrentAgent(agent: string | null): void;

package/dist/services/event-logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event-logger.d.ts","sourceRoot":"","sources":["../../src/services/event-logger.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,aAAa,GAAG,YAAY,GAAG,iBAAiB,GAAG,cAAc,GAAG,eAAe,CAAA;IACzF,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAA;IACxC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAYD,wBAAgB,eAAe,IAAI,MAAM,GAAG,IAAI,CAE/C;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAE1D;AAED,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAEvD;AAED,wBAAgB,mBAAmB,IAAI,IAAI,CAG1C;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmBnE;AAkBD,wBAAgB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CA+BlG;AAwBD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAqD7D"}
+{"version":3,"file":"event-logger.d.ts","sourceRoot":"","sources":["../../src/services/event-logger.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,aAAa,GAAG,YAAY,GAAG,iBAAiB,GAAG,cAAc,GAAG,eAAe,GAAG,WAAW,GAAG,YAAY,CAAA;IACtH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAA;IACxC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAYD,wBAAgB,eAAe,IAAI,MAAM,GAAG,IAAI,CAE/C;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAE1D;AAED,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAEvD;AAED,wBAAgB,mBAAmB,IAAI,IAAI,CAG1C;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmBnE;AAkBD,wBAAgB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CA+BlG;AAwBD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAqD7D"}

package/dist/services/execution-substrate.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Execution Substrate
+ *
+ * Tracks active tool/command executions, durations, and timeout helpers.
+ * Best-effort only: the plugin API does not expose a kill signal, so this
+ * layer records lifecycle state and flags overdue executions for downstream
+ * policy/scorecard use.
+ */
+export interface ActiveExecution {
+    runId: string;
+    sessionID: string;
+    tool: string;
+    startedAt: number;
+}
+export interface ExecutionSubstrate {
+    start(req: {
+        runId: string;
+        sessionID: string;
+        tool: string;
+        args: Record<string, unknown>;
+    }): void;
+    finish(req: {
+        runId: string;
+        sessionID: string;
+        tool: string;
+    }, status: "success" | "error" | "blocked", durationMs?: number): void;
+    active(): ActiveExecution[];
+    isOverdue(exec: {
+        startedAt: number;
+    }, maxMs: number): boolean;
+}
+export declare function createExecutionSubstrate(): ExecutionSubstrate;
+/** Release all tracked executions. Intended for tests. */
+export declare function clearExecutionSubstrate(): void;
+//# sourceMappingURL=execution-substrate.d.ts.map

package/dist/services/execution-substrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-substrate.d.ts","sourceRoot":"","sources":["../../src/services/execution-substrate.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,IAAI,CAAA;IACnG,MAAM,CAAC,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnI,MAAM,IAAI,eAAe,EAAE,CAAA;IAC3B,SAAS,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;CAC/D;AAQD,wBAAgB,wBAAwB,IAAI,kBAAkB,CA+B7D;AAED,0DAA0D;AAC1D,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C"}

package/dist/services/harness-controller.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Harness Controller
+ *
+ * Central control plane for the FlowDeck runtime. Receives every model-facing
+ * decision point from the plugin entry point and delegates to the context,
+ * policy, execution, and persistence layers.
+ */
+import type { Permission } from "@opencode-ai/sdk";
+import type { HarnessPolicy, PolicyDecision } from "./harness-policy";
+import type { AssembledContext, RunContext } from "./harness-types";
+import { type ContextIngressService } from "./context-ingress";
+import { type StatePersistenceService } from "./state-persistence";
+import { createContextWindowMonitorHook } from "../hooks/context-window-monitor";
+import { type VerificationLayer } from "./verification-layer";
+import { type RecoveryLayer } from "./recovery-layer";
+export interface HarnessControllerConfig {
+    directory: string;
+    client: any;
+    appLog: (msg: string) => void;
+    policy: HarnessPolicy;
+    verificationLayer?: VerificationLayer;
+    recoveryLayer?: RecoveryLayer;
+    contextIngress?: ContextIngressService;
+    contextMonitor?: ReturnType<typeof createContextWindowMonitorHook>;
+}
+export interface ToolCallRequest {
+    sessionID: string;
+    tool: string;
+    args: Record<string, unknown>;
+    agent?: string;
+    parentRunId?: string;
+}
+export interface CommandRequest {
+    sessionID: string;
+    command: string;
+    arguments: string;
+    agent?: string;
+}
+export interface SessionEvent {
+    type: "session.created" | "session.started" | "session.idle" | "session.error" | "session.deleted" | "command.executed" | "message.updated";
+    properties?: Record<string, unknown>;
+}
+export interface HarnessController {
+    init(): void;
+    onCommandBefore(req: CommandRequest): RunContext;
+    evaluateToolCall(req: ToolCallRequest): PolicyDecision;
+    recordToolOutcome(req: ToolCallRequest, output: unknown, status: "success" | "error" | "blocked"): void;
+    onSessionEvent(evt: SessionEvent): Promise<void>;
+    onPermissionAsk(input: Permission): void;
+    getAssembledContext(sessionID: string): AssembledContext | undefined;
+    endRun(sessionID: string, status: "complete" | "failed" | "cancelled", outcome?: string, error?: string): void;
+    getCurrentStage(sessionID?: string): string | undefined;
+    getStatePersistence(): StatePersistenceService;
+    getContextIngress(): ContextIngressService;
+    getContextMonitor(): ReturnType<typeof createContextWindowMonitorHook>;
+}
+export declare function createHarnessController(config: HarnessControllerConfig): HarnessController;
+//# sourceMappingURL=harness-controller.d.ts.map

package/dist/services/harness-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-controller.d.ts","sourceRoot":"","sources":["../../src/services/harness-controller.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAc,MAAM,iBAAiB,CAAA;AAC/E,OAAO,EAA+B,KAAK,qBAAqB,EAAE,MAAM,mBAAmB,CAAA;AAE3F,OAAO,EAA0B,KAAK,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAG1F,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAA;AAMhF,OAAO,EAA2B,KAAK,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACtF,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAW1E,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,GAAG,CAAA;IACX,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,MAAM,EAAE,aAAa,CAAA;IACrB,iBAAiB,CAAC,EAAE,iBAAiB,CAAA;IACrC,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,cAAc,CAAC,EAAE,qBAAqB,CAAA;IACtC,cAAc,CAAC,EAAE,UAAU,CAAC,OAAO,8BAA8B,CAAC,CAAA;CACnE;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,cAAc,GAAG,eAAe,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,iBAAiB,CAAA;IAC3I,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACrC;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,IAAI,IAAI,CAAA;IACZ,eAAe,CAAC,GAAG,EAAE,cAAc,GAAG,UAAU,CAAA;IAChD,gBAAgB,CAAC,GAAG,EAAE,eAAe,GAAG,cAAc,CAAA;IACtD,iBAAiB,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,IAAI,CAAA;IACvG,cAAc,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChD,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAAA;IACxC,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAAA;IACpE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,WAAW,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9G,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IACvD,mBAAmB,IAAI,uBAAuB,CAAA;IAC9C,iBAAiB,IAAI,qBAAqB,CAAA;IAC1C,iBAAiB,IAAI,UAAU,CAAC,OAAO,8BAA8B,CAAC,CAAA;CACvE;AAID,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,uBAAuB,GAAG,iBAAiB,CA+S1F"}

package/dist/services/harness-policy.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Harness Policy Service
+ *
+ * Unified allow/deny/ask evaluator for every tool call. Runs checks in order
+ * and short-circuits on deny:
+ *
+ *   1. Runtime limits (loop detector, delegation budget, deadlock signals)
+ *   2. Agent contract (tool allowlist / forbidden actions)
+ *   3. Governance (tool guard, guard rails, approvals, active policies)
+ *   4. Supervisor review
+ *
+ * Every evaluation produces exactly one entry in `.codebase/AUDIT.jsonl`.
+ */
+import type { PolicyDecision, PolicyInput } from "./harness-types";
+export type { PolicyDecision } from "./harness-types";
+export interface HarnessPolicy {
+    evaluate(input: PolicyInput): PolicyDecision;
+    checkAgentContract(input: PolicyInput): PolicyDecision;
+    checkRuntimeLimits(input: PolicyInput): PolicyDecision;
+    checkGovernance(input: PolicyInput): PolicyDecision;
+    checkSupervisor(input: PolicyInput, targetName: string): PolicyDecision;
+}
+export declare function createHarnessPolicy(directory: string, appLog?: (msg: string) => void): HarnessPolicy;
+//# sourceMappingURL=harness-policy.d.ts.map

package/dist/services/harness-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-policy.d.ts","sourceRoot":"","sources":["../../src/services/harness-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,KAAK,EAEV,cAAc,EACd,WAAW,EAEZ,MAAM,iBAAiB,CAAA;AAExB,YAAY,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAcrD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,cAAc,CAAA;IAC5C,kBAAkB,CAAC,KAAK,EAAE,WAAW,GAAG,cAAc,CAAA;IACtD,kBAAkB,CAAC,KAAK,EAAE,WAAW,GAAG,cAAc,CAAA;IACtD,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,cAAc,CAAA;IACnD,eAAe,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,cAAc,CAAA;CACxE;AA6FD,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAC7B,aAAa,CAyTf"}