@lannguyensi/harness 0.40.0 → 0.41.0

package/dist/policy-packs/builtin/branch-protection-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"branch-protection-runtime.js","sourceRoot":"","sources":["../../../src/policy-packs/builtin/branch-protection-runtime.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,EAAE;AACF,kEAAkE;AAClE,yEAAyE;AACzE,sEAAsE;AACtE,yEAAyE;AACzE,mEAAmE;AACnE,kCAAkC;AAGlC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GAIpB,MAAM,6CAA6C,CAAC;AAErD,MAAM,CAAC,MAAM,SAAS,GAAG,mBAAmB,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAC;AAE/D;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAEtD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,oBAAoB,CAAC;AAEpE,yFAAyF;AACzF,MAAM,UAAU,0BAA0B,CAAC,SAAiB;IAC1D,OAAO,GAAG,+BAA+B,GAAG,SAAS,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,YAAoB,EACpB,SAAiB,EACjB,MAAsB;IAEtB,OAAO,mBAAmB,CAAC,YAAY,EAAE,0BAA0B,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,YAAoB,EACpB,SAAiB,EACjB,OAAmC,EAAE;IAErC,OAAO,mBAAmB,CAAC,YAAY,EAAE,0BAA0B,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;AACxF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEnD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,QAAQ;IACR,MAAM;IACN,SAAS;CACV,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAgB;IAIvD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC9C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,0BAA0B,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,QAAQ,EAAE,CAAC,GAAG,0BAA0B,CAAC;YACzC,OAAO,EAAE,gBAAgB,IAAI,CAAC,IAAI,kEAAkE,OAAO,GAAG,+BAA+B,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SACvL,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAa,EAAE,CAAC;IACxB,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;YAC7D,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO;YACL,QAAQ,EAAE,CAAC,GAAG,0BAA0B,CAAC;YACzC,OAAO,EAAE,gBAAgB,IAAI,CAAC,IAAI,6GAA6G,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SACzL,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,gBAAgB,IAAI,CAAC,IAAI,wCAAwC,GAAG,CAAC,MAAM,mBAAmB,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC,MAAM,aAAa,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SACvN,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,aAAgC;IAChF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC"}
+{"version":3,"file":"branch-protection-runtime.js","sourceRoot":"","sources":["../../../src/policy-packs/builtin/branch-protection-runtime.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,EAAE;AACF,kEAAkE;AAClE,yEAAyE;AACzE,sEAAsE;AACtE,yEAAyE;AACzE,mEAAmE;AACnE,kCAAkC;AAGlC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GAIpB,MAAM,6CAA6C,CAAC;AAErD,MAAM,CAAC,MAAM,SAAS,GAAG,mBAAmB,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAC;AAE/D;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAEtD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,oBAAoB,CAAC;AAEpE,yFAAyF;AACzF,MAAM,UAAU,0BAA0B,CAAC,SAAiB;IAC1D,OAAO,GAAG,+BAA+B,GAAG,SAAS,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,YAAoB,EACpB,SAAiB,EACjB,MAAsB;IAEtB,OAAO,mBAAmB,CAAC,YAAY,EAAE,0BAA0B,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CACzC,YAAoB,EACpB,SAAiB,EACjB,OAAmC,EAAE;IAErC,OAAO,mBAAmB,CAAC,YAAY,EAAE,0BAA0B,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;AACxF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEnD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,QAAQ;IACR,MAAM;IACN,SAAS;CACV,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAgB;IAIvD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC9C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,0BAA0B,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,QAAQ,EAAE,CAAC,GAAG,0BAA0B,CAAC;YACzC,OAAO,EAAE,gBAAgB,IAAI,CAAC,IAAI,kEAAkE,OAAO,GAAG,+BAA+B,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SACvL,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAa,EAAE,CAAC;IACxB,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;YAC7D,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO;YACL,QAAQ,EAAE,CAAC,GAAG,0BAA0B,CAAC;YACzC,OAAO,EAAE,gBAAgB,IAAI,CAAC,IAAI,6GAA6G,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SACzL,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,gBAAgB,IAAI,CAAC,IAAI,wCAAwC,GAAG,CAAC,MAAM,mBAAmB,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC,MAAM,aAAa,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SACvN,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,aAAgC;IAChF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC"}

package/dist/policy-packs/builtin/branch-protection.d.ts

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import type { PolicyPack } from "../../schema/index.js";
+import type { PolicyPack, PolicyUx } from "../../schema/index.js";
 import { type Runtime } from "../runtime.js";
 import type { PackContribution } from "../types.js";
 import { PACK_NAME } from "./branch-protection-runtime.js";
@@ -41,6 +41,15 @@ export declare const configSchema: z.ZodObject<{
     } | undefined;
     protected_branches?: string[] | undefined;
 }>;
+/**
+ * Shipped default `config.ux` for this pack (agent-tasks/9806d4f8).
+ * Canonical source for the `full` init template and `harness pack
+ * reseed` (task 68b9ad9c): a future wording fix to the deny-message
+ * text lands here once and reaches both a fresh `harness init --template
+ * full` and an operator running `harness pack reseed branch-protection`
+ * against an already-installed manifest.
+ */
+export declare function defaultUx(): PolicyUx;
 export declare function resolve(pack: PolicyPack, runtime?: Runtime): {
     contribution: PackContribution;
     warnings: string[];

package/dist/policy-packs/builtin/branch-protection.js

@@ -53,6 +53,23 @@ export const configSchema = z
     ux: PolicyUxSchema.optional(),
 })
     .strict();
+/**
+ * Shipped default `config.ux` for this pack (agent-tasks/9806d4f8).
+ * Canonical source for the `full` init template and `harness pack
+ * reseed` (task 68b9ad9c): a future wording fix to the deny-message
+ * text lands here once and reaches both a fresh `harness init --template
+ * full` and an operator running `harness pack reseed branch-protection`
+ * against an already-installed manifest.
+ */
+export function defaultUx() {
+    return {
+        cannot: "You cannot edit files on protected branch ${BRANCH} yet.",
+        required: [
+            "a checkout of a non-protected branch (current `${BRANCH}` is protected)",
+        ],
+        run: ["git checkout -b feat/<your-task>", "harness session-start branch-check"],
+    };
+}
 const HOOK_NAME_PREFIX = `policy-pack:${PACK_NAME}`;
 const PRE_TOOL_USE_MATCH_CLAUDE = "Write|Edit";
 const PRE_TOOL_USE_MATCH_CODEX = "apply_patch";

package/dist/policy-packs/builtin/branch-protection.js.map

@@ -1 +1 @@
-{"version":3,"file":"branch-protection.js","sourceRoot":"","sources":["../../../src/policy-packs/builtin/branch-protection.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,sEAAsE;AACtE,wEAAwE;AACxE,EAAE;AACF,yDAAyD;AACzD,EAAE;AACF,0EAA0E;AAC1E,oEAAoE;AACpE,qEAAqE;AACrE,uCAAuC;AACvC,EAAE;AACF,kEAAkE;AAClE,sEAAsE;AACtE,wDAAwD;AACxD,+DAA+D;AAC/D,uDAAuD;AACvD,yEAAyE;AACzE,sEAAsE;AACtE,0EAA0E;AAC1E,kEAAkE;AAClE,yEAAyE;AACzE,2EAA2E;AAC3E,oDAAoD;AACpD,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,iEAAiE;AACjE,WAAW;AACX,EAAE;AACF,qEAAqE;AACrE,8DAA8D;AAC9D,oEAAoE;AAEpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,eAAe,EAAgB,MAAM,eAAe,CAAC;AAE9D,OAAO,EACL,cAAc,EACd,0BAA0B,EAC1B,wBAAwB,EACxB,SAAS,EACT,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,SAAS,EAAE,CAAC;AAErB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzD,0DAA0D;IAC1D,sDAAsD;IACtD,EAAE,EAAE,cAAc,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,gBAAgB,GAAG,eAAe,SAAS,EAAE,CAAC;AAEpD,MAAM,yBAAyB,GAAG,YAAY,CAAC;AAC/C,MAAM,wBAAwB,GAAG,aAAa,CAAC;AAE/C,MAAM,gBAAgB,GAAG,oCAAoC,CAAC;AAC9D,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAE9D,SAAS,UAAU,CAAC,OAAgB;IAClC,MAAM,OAAO,GAAG,OAAO,KAAK,OAAO,CAAC;IACpC,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,yBAAyB,CAAC;IACpF,OAAO;QACL;YACE,IAAI,EAAE,GAAG,gBAAgB,gBAAgB;YACzC,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,gBAAgB;YACzB,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,IAAI;YACf,WAAW,EACT,wKAAwK;SAC3K;QACD;YACE,IAAI,EAAE,GAAG,gBAAgB,eAAe;YACxC,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,eAAe;YACxB,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,iBAAiB,YAAY,0KAA0K;SACrN;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAgB,EAAE,QAA2B,EAAE,OAAgB;IACxF,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,OAAO,KAAK,OAAO,CAAC;IACpC,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,yBAAyB,CAAC;IACpF,MAAM,gBAAgB,GAAG,OAAO;QAC9B,CAAC,CAAC,uCAAuC;QACzC,CAAC,CAAC,iCAAiC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,GAAG,KAAK,CAAC,CAAC;IAC1D,OAAO,kBAAkB,SAAS;;;;;;;;EAQlC,OAAO;;;;EAIP,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;uDAMS,gBAAgB;;kCAErC,gBAAgB;;oBAE9B,wBAAwB;;;+BAGb,eAAe;OACvC,YAAY;WACR,wBAAwB;uBACZ,OAAO;;;;;;;oCAOM,gBAAgB;;;;;;;;;MAS9C,cAAc;;;;;;;;;;;;;;;;EAgBlB,WAAW,CAAC,CAAC,CAAC,OAAO,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;;YAEtD,SAAS;eACN,OAAO;cACR,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC;CAClD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,IAAgB,EAChB,UAAmB,eAAe;IAElC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,KAAK,GAA2B;QACpC;YACE,YAAY,EAAE,gBAAgB,SAAS,kBAAkB;YACzD,OAAO,EAAE,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC;SACpD;KACF,CAAC;IACF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO;QAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC;AACtD,CAAC"}
+{"version":3,"file":"branch-protection.js","sourceRoot":"","sources":["../../../src/policy-packs/builtin/branch-protection.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,sEAAsE;AACtE,wEAAwE;AACxE,EAAE;AACF,yDAAyD;AACzD,EAAE;AACF,0EAA0E;AAC1E,oEAAoE;AACpE,qEAAqE;AACrE,uCAAuC;AACvC,EAAE;AACF,kEAAkE;AAClE,sEAAsE;AACtE,wDAAwD;AACxD,+DAA+D;AAC/D,uDAAuD;AACvD,yEAAyE;AACzE,sEAAsE;AACtE,0EAA0E;AAC1E,kEAAkE;AAClE,yEAAyE;AACzE,2EAA2E;AAC3E,oDAAoD;AACpD,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,iEAAiE;AACjE,WAAW;AACX,EAAE;AACF,qEAAqE;AACrE,8DAA8D;AAC9D,oEAAoE;AAEpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,eAAe,EAAgB,MAAM,eAAe,CAAC;AAE9D,OAAO,EACL,cAAc,EACd,0BAA0B,EAC1B,wBAAwB,EACxB,SAAS,EACT,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,SAAS,EAAE,CAAC;AAErB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzD,0DAA0D;IAC1D,sDAAsD;IACtD,EAAE,EAAE,cAAc,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO;QACL,MAAM,EAAE,0DAA0D;QAClE,QAAQ,EAAE;YACR,yEAAyE;SAC1E;QACD,GAAG,EAAE,CAAC,kCAAkC,EAAE,oCAAoC,CAAC;KAChF,CAAC;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAG,eAAe,SAAS,EAAE,CAAC;AAEpD,MAAM,yBAAyB,GAAG,YAAY,CAAC;AAC/C,MAAM,wBAAwB,GAAG,aAAa,CAAC;AAE/C,MAAM,gBAAgB,GAAG,oCAAoC,CAAC;AAC9D,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAE9D,SAAS,UAAU,CAAC,OAAgB;IAClC,MAAM,OAAO,GAAG,OAAO,KAAK,OAAO,CAAC;IACpC,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,yBAAyB,CAAC;IACpF,OAAO;QACL;YACE,IAAI,EAAE,GAAG,gBAAgB,gBAAgB;YACzC,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,gBAAgB;YACzB,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,IAAI;YACf,WAAW,EACT,wKAAwK;SAC3K;QACD;YACE,IAAI,EAAE,GAAG,gBAAgB,eAAe;YACxC,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,eAAe;YACxB,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,iBAAiB,YAAY,0KAA0K;SACrN;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAgB,EAAE,QAA2B,EAAE,OAAgB;IACxF,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,OAAO,KAAK,OAAO,CAAC;IACpC,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,yBAAyB,CAAC;IACpF,MAAM,gBAAgB,GAAG,OAAO;QAC9B,CAAC,CAAC,uCAAuC;QACzC,CAAC,CAAC,iCAAiC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,GAAG,KAAK,CAAC,CAAC;IAC1D,OAAO,kBAAkB,SAAS;;;;;;;;EAQlC,OAAO;;;;EAIP,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;uDAMS,gBAAgB;;kCAErC,gBAAgB;;oBAE9B,wBAAwB;;;+BAGb,eAAe;OACvC,YAAY;WACR,wBAAwB;uBACZ,OAAO;;;;;;;oCAOM,gBAAgB;;;;;;;;;MAS9C,cAAc;;;;;;;;;;;;;;;;EAgBlB,WAAW,CAAC,CAAC,CAAC,OAAO,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;;YAEtD,SAAS;eACN,OAAO;cACR,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC;CAClD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,IAAgB,EAChB,UAAmB,eAAe;IAElC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,KAAK,GAA2B;QACpC;YACE,YAAY,EAAE,gBAAgB,SAAS,kBAAkB;YACzD,OAAO,EAAE,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC;SACpD;KACF,CAAC;IACF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO;QAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC;AACtD,CAAC"}

package/dist/policy-packs/builtin/understanding-before-execution-runtime.d.ts

@@ -1,7 +1,7 @@
 import { type LedgerEntry } from "../../policies/index.js";
 export declare const APPROVED_LEDGER_TAG_PREFIX = "understanding-approved:";
 export declare const APPROVAL_MARKER_DIRNAME = ".approvals";
-export type ApprovalSource = "marker" | "ledger" | "persisted-report" | "none";
+export type ApprovalSource = "marker" | "ledger" | "persisted-report" | "none" | "recovery-commit";
 export interface ApprovalCheckResult {
     approved: boolean;
     source: ApprovalSource;
@@ -184,6 +184,14 @@ export declare function approvalMarkerPathFor(generatedDir: string, sessionId: s
 export interface ApprovalMarker {
     approvedAt: string;
     approvedBy: string;
+    /**
+     * sha256 hex of the persisted-report content this approval is bound to
+     * at sign-time (harness/f9485cc7). Optional on write (defaults to
+     * `null` — a marker with no report to bind, e.g. `harness approve
+     * branch-protection`, or a ledger-only approval); always present
+     * (possibly `null`) on a marker `checkApprovalMarker` returns.
+     */
+    reportContentHash?: string | null;
 }
 /**
  * Operator-side: write the marker file the gate consults. Atomic so a
@@ -192,12 +200,50 @@ export interface ApprovalMarker {
  * operator runs from their un-hooked shell; if the agent could call
  * this path the gate's value would collapse, so it lives behind the
  * approve CLI rather than as a generally importable verb.
+ *
+ * The marker is HMAC-signed (harness/f9485cc7) over (sessionId,
+ * approvedAt, approvedBy, reportContentHash) using an operator-side key
+ * lazily generated at `<generatedDir>/.approval-signing.key` — see
+ * `src/runtime/approval-signing.ts` for the key-management contract and
+ * the honest trust model. Mode 0600 on the marker file itself, best-
+ * effort (matches the signing key's own permission convention); this is
+ * defense-in-depth alongside the signature, not a substitute for it.
  */
 export declare function writeApprovalMarker(generatedDir: string, sessionId: string, marker: ApprovalMarker): string;
 export interface MarkerCheck {
     matched: boolean;
     detail: string;
     marker: ApprovalMarker | null;
+    /**
+     * True when `matched` is false SPECIFICALLY because a readable marker
+     * existed but its `approvedAt` exceeded `opts.maxAgeMs`
+     * (agent-tasks/d8ee60ca) — as opposed to the marker being absent
+     * (never approved, or cleared by a task-completion boundary tool via
+     * `clearApprovalMarker`), corrupted, or the session id malformed.
+     * False whenever `matched` is true. This is the signal task 6e888423's
+     * recovery-git-commit exemption keys off: "this session/task DID have
+     * a real operator approval and it merely aged out" is safe to treat
+     * differently from "this session/task was never approved" or "a task
+     * boundary just cleared it for a new task" — see
+     * src/runtime/recovery-git-commit.ts for the full argument.
+     */
+    expired: boolean;
+    /**
+     * True when a marker FILE existed at the expected path but failed
+     * signature verification (harness/f9485cc7): missing `signature`/`alg`
+     * fields (a legacy pre-signing marker, or a marker planted without the
+     * operator-side key), a mismatched `alg`, or a signature that does not
+     * verify against the current key. Distinct from the marker being
+     * simply absent (`forged: false`, `matched: false`) so a caller can
+     * log/alert on an active forgery attempt instead of the routine
+     * "nobody has approved yet" case. `matched` is always false when
+     * `forged` is true — a forged marker never satisfies the gate,
+     * regardless of `approval_lifecycle.max_age`. A transient I/O read
+     * failure (`forged: false`, `matched: false`) is kept distinct from
+     * both: it is neither "no marker" nor evidence of tampering, just a
+     * marker whose integrity cannot be proven right now.
+     */
+    forged: boolean;
 }
 export interface CheckApprovalMarkerOptions {
     /**
@@ -206,35 +252,31 @@ export interface CheckApprovalMarkerOptions {
      * treated as expired and returns `matched:false` with an
      * "expired" detail. When omitted, the marker has no TTL — the
      * legacy contract (one approval per session, no expiry).
-     *
-     * A marker whose body is unreadable (malformed JSON, missing
-     * `approvedAt`) is treated as approved-but-undateable: the
-     * existence-only contract documented above wins, so an operator
-     * who hand-wrote an empty marker file still gets through. This
-     * matters because the legacy DoS-resistance argument still holds.
      */
     maxAgeMs?: number;
     /** Override "now" for deterministic tests. */
     now?: Date;
 }
 /**
- * Gate-side: is the per-session marker file present and readable?
- * Returns `matched: true` even if the marker JSON is malformed: the
- * file's *existence* is the operator's intent. Corrupted contents
- * surface as `marker: null` in the diagnostic but do not invalidate the
- * approval, since invalidating on a parse error would hand a denial-
- * of-service vector to anyone (including the agent) who could append a
- * stray byte to the file. Edit / Write / Bash are gated, so writing
- * stray bytes from inside Claude is not possible today, but the
- * existence-only contract is the defensible boundary regardless.
+ * Gate-side: is the per-session marker file present, readable, AND
+ * validly signed? (harness/f9485cc7 — this replaced the earlier
+ * "existence is enough" contract: a marker's mere presence used to
+ * satisfy the gate even with a malformed or corrupted body, on the
+ * theory that Edit/Write/Bash being gated meant only the operator could
+ * ever create the file. That theory holds only as long as no OTHER
+ * write primitive reaches `harness.generated/` — exactly the invariant
+ * this signing scheme no longer has to trust blindly.) A marker with no
+ * `signature`, a wrong `alg`, or a signature that fails to verify is
+ * REJECTED — see `MarkerCheck.forged` — with the SAME `matched: false`
+ * outcome as no marker at all, but a distinct, forgery-specific detail
+ * string so callers can tell the two apart for audit.
  *
- * `opts.maxAgeMs` (agent-tasks/d8ee60ca): when set, a marker whose
- * `approvedAt` is older than the cutoff returns `matched:false` with
- * an "expired" detail so the agent gets the same "no approval" UX as
- * a never-approved session and must re-approve. A marker with no
- * readable `approvedAt` (body corrupted) skips the freshness check
- * and is treated as approved — same DoS-resistance rationale as the
- * body-unreadable branch below.
+ * `opts.maxAgeMs` (agent-tasks/d8ee60ca): when set, a validly-signed
+ * marker whose `approvedAt` is older than the cutoff returns
+ * `matched:false` with an "expired" detail so the agent gets the same
+ * "no approval" UX as a never-approved session and must re-approve.
+ * Expiry is only evaluated AFTER signature verification succeeds — an
+ * unsigned/forged marker is rejected outright, never "expired".
  */
 export declare function checkApprovalMarker(generatedDir: string, sessionId: string, opts?: CheckApprovalMarkerOptions): MarkerCheck;
 export interface ApprovalLifecycle {
@@ -292,6 +334,12 @@ export declare function taskApprovalMarkerPathFor(generatedDir: string, taskId:
  * Operator-side: write a task-scoped marker file. Atomic. Caller is
  * `harness approve understanding --task <id>`. The session marker is
  * written separately by the same caller for back-compat.
+ *
+ * Signed the same way as `writeApprovalMarker` (harness/f9485cc7), using
+ * `task-<id>` (the exact string `checkActiveClaimApprovalMarker` looks
+ * up) as the signed markerId — so a validly-signed task marker cannot be
+ * copied onto a different task id (or the session marker's id) and still
+ * verify.
  */
 export declare function writeTaskApprovalMarker(generatedDir: string, taskId: string, marker: ApprovalMarker): string;
 /**
@@ -307,7 +355,7 @@ export declare function writeTaskApprovalMarker(generatedDir: string, taskId: st
  * because the scan returned the first existing marker regardless of
  * which task the agent had actually claimed.
  *
- * Same safety filters as `checkApprovalMarker` (existence-is-enough,
+ * Same safety filters as `checkApprovalMarker` (signature verification,
  * symlink rejection, optional freshness via `maxAgeMs`); the only
  * difference is the filename suffix derived from `active-claim`.
  */
@@ -320,6 +368,27 @@ export interface OperatorMarkerApproval {
     detail: string;
     /** Task-scoped check detail, for callers that trace the fall-through. */
     taskCheckDetail: string;
+    /**
+     * True when EITHER the task-scoped or the session-scoped marker
+     * existed but aged past `approval_lifecycle.max_age` (task 6e888423).
+     * False when `matched` is true, and false when a marker was simply
+     * absent (never approved, or cleared by a task-completion boundary
+     * tool) — distinguishing "this identity had a real approval that
+     * merely expired" from "this identity was never approved" / "a new
+     * task just started". PreToolUse hooks use this (never on its own —
+     * always alongside `isRecoveryGitCommit`) to decide whether a bare
+     * recovery `git commit` may proceed without a fresh Understanding
+     * Report; see src/runtime/recovery-git-commit.ts.
+     */
+    expired: boolean;
+    /**
+     * True when EITHER the task-scoped or the session-scoped marker
+     * existed but FAILED signature verification (harness/f9485cc7) —
+     * missing/invalid signature, wrong `alg`, or tampered payload. Distinct
+     * from a marker simply being absent, so a caller can log a forgery
+     * attempt distinctly from the routine "not approved yet" case.
+     */
+    forged: boolean;
 }
 /**
  * Shared marker resolution for the Claude and Codex understanding-gate
@@ -335,6 +404,110 @@ export declare function checkOperatorApprovalMarkers(generatedDir: string, sessi
 } | null): OperatorMarkerApproval;
 /** Clear a specific task-scoped marker. Used by the post-tool-use hook. */
 export declare function clearTaskApprovalMarker(generatedDir: string, taskId: string): void;
+/**
+ * Tool names treated as "the Bash tool" for `expire_on_bash_match`
+ * command-regex matching. Claude Code has exactly one Bash tool name;
+ * a runtime with shell-tool aliases (e.g. Codex's `shell` /
+ * `exec_command` / `functions.exec_command`) passes its own set.
+ */
+export declare const DEFAULT_BASH_TOOL_NAMES: ReadonlySet<string>;
+/**
+ * Tool-name membership test against `expire_on_tool_match`. No GLOB
+ * wildcard expansion by design (agent-tasks/d8ee60ca): operators write
+ * the exact tool name they mean.
+ *
+ * It IS alias-aware, though: a tool name is compared against `patterns`
+ * after expanding it through `expandToolNameAliases` (shell-tool
+ * aliases `Bash`/`shell`/`exec_command`/`functions.exec_command`, and
+ * MCP tool-name variants — server hyphen/underscore swap, the
+ * `mcp__server__.tool` dotted form). This mirrors the normalization
+ * `harness policy intercept`'s `policyMatchesEvent` already applies to
+ * the incoming `event.tool_name` (`src/runtime/intercept.ts`, commit
+ * 9aacbcd "Fix Codex hook tool matching") — that fix exists precisely
+ * because Codex can emit an MCP tool name in one of these variant
+ * forms for the identical tool. Before this, a Codex session sending
+ * `mcp__agent-tasks__.task_finish` (dotted) or an underscore-server
+ * variant would silently never expire the marker: the Codex generator
+ * alias-expands the EMITTED TOML `matcher` (`expandCodexHookMatchPattern`
+ * in `generate-codex-config.ts`) so Codex's own dispatcher still
+ * invokes the hook command, but this function's comparison against the
+ * canonical `expire_on_tool_match` config list would reject the
+ * variant `tool_name` once inside the hook body — the boundary would
+ * silently never fire even though the hook ran (review finding on task
+ * a1348c89).
+ */
+export declare function toolNameMatchesAny(toolName: string, patterns: readonly string[]): boolean;
+/** First `expire_on_bash_match` regex the command satisfies, or
+ * undefined. Patterns are pre-compiled by `parseApprovalLifecycle`
+ * (invalid ones already dropped with a warning). Empty command
+ * short-circuits to undefined. */
+export declare function bashCommandMatchesAny(command: string, patterns: readonly RegExp[]): RegExp | undefined;
+/** Pull the Bash command out of a tool_input payload, `""` when absent
+ * or malformed. */
+export declare function extractBashCommandFromToolInput(toolInput: unknown): string;
+/** Pull `taskId` out of an MCP tool_input payload (`""` when absent /
+ * malformed). Task-boundary agent-tasks verbs carry this as a
+ * top-level string field. */
+export declare function extractTaskIdFromToolInput(toolInput: unknown): string;
+/** Pull the legacy v1 `tasks_transition` `status` field out of a
+ * tool_input payload (`""` when absent / malformed). Only `"done"`
+ * releases the work claim; the caller treats any other value as
+ * keep-claim. */
+export declare function extractTasksTransitionStatusFromToolInput(toolInput: unknown): string;
+export interface PostToolUseBoundaryMatch {
+    /** Final match decision: `toolNameMatched || bashRegex !== undefined`. */
+    matched: boolean;
+    /** Tool-name match, refined by the tasks_transition status filter. */
+    toolNameMatched: boolean;
+    /** Tool-name match BEFORE the tasks_transition status filter — lets
+     * the caller distinguish "not in the list" from "in the list, but
+     * status keeps the claim" for its diagnostic. */
+    rawToolNameMatched: boolean;
+    /** The `expire_on_bash_match` regex the command satisfied, if any. */
+    bashRegex: RegExp | undefined;
+}
+/**
+ * Decide whether `toolName` (+ its `tool_input`) crosses one of the
+ * configured `approval_lifecycle` boundaries. Pure — no filesystem
+ * access. Callers branch on `.matched` before touching marker/report
+ * state (see `applyPostToolUseExpiry`).
+ */
+export declare function matchPostToolUseBoundary(toolName: string, toolInput: unknown, lifecycle: Pick<ApprovalLifecycle, "expireOnToolMatch" | "expireOnBashMatch">, bashToolNames?: ReadonlySet<string>): PostToolUseBoundaryMatch;
+export interface ApplyPostToolUseExpiryResult {
+    /** Did the session marker exist before this call cleared it? */
+    wasMarkerPresent: boolean;
+    /** Was a task-scoped marker also cleared? Only possible when
+     * `toolNameMatched` (Bash regex boundaries never carry a taskId). */
+    taskMarkerCleared: boolean;
+    /** The task id whose marker was cleared, `""` when none. */
+    clearedTaskId: string;
+    /** Did the persisted-report expiry succeed? */
+    persistedReportExpired: boolean;
+    /** Full expiry result (success detail or skip reason) for diagnostics. */
+    reportExpiry: ReturnType<typeof expirePersistedReport>;
+}
+/**
+ * Side-effecting: clear the session marker, the task-scoped marker
+ * (when `toolNameMatched` and `tool_input.taskId` names an existing
+ * marker), and expire the persisted report. Call ONLY after
+ * `matchPostToolUseBoundary(...).matched` is true — this function does
+ * not re-check the match itself. Mirrors the Claude hook's original
+ * side effects exactly so both runtimes share one clearing
+ * implementation (task a1348c89).
+ */
+export declare function applyPostToolUseExpiry(generatedDir: string, sessionId: string, toolInput: unknown, toolNameMatched: boolean, reportsDir: string, now?: Date): ApplyPostToolUseExpiryResult;
+/**
+ * Compose the stderr diagnostic line for a matched-and-applied PostToolUse
+ * expiry. Shared by `harness pack hook post-tool-use` (Claude) and
+ * `harness pack hook codex-post-tool-use` (Codex) — before this extraction
+ * the two hooks each built this line by hand from the same four pieces
+ * (`matchSource`/`taskNote`/`reportNote`/the present-vs-absent branch),
+ * which `check:duplication` flagged as new clones the moment the Codex
+ * sibling landed (task a1348c89). `hookLabel` is the caller's own
+ * `harness pack hook ...` command string so the message still names the
+ * right verb.
+ */
+export declare function describePostToolUseExpiry(hookLabel: string, sessionId: string, toolName: string, bashRegex: RegExp | undefined, expiry: ApplyPostToolUseExpiryResult): string;
 export declare const ACTIVE_CLAIM_FILENAME = "active-claim";
 export declare function activeClaimPathFor(generatedDir: string): string;
 /**