@lannguyensi/harness 0.51.0 → 0.53.0

package/dist/cli/pack/upgrade.js

@@ -0,0 +1,273 @@
+// `harness pack upgrade <name>`: text-level insertion of a pack's
+// missing default config block into an existing manifest, WITHOUT
+// parsing and reserializing the operator's YAML (unlike `pack add` /
+// `pack reseed`, which both mutate via the `yaml` Document API). Task
+// 8f637efd: the one upgrade this ships is `auto_approve` for
+// `understanding-before-execution` (D-004,
+// docs/decisions/2026-08-27-ug-auto-mode-approval.md, "Amendment:
+// install default").
+//
+// WHY TEXT-LEVEL, NOT DOCUMENT-LEVEL. The `yaml` package's Document API
+// (`withDocument`, used by `pack reseed`) round-trips comments
+// reasonably well for a single field REPLACEMENT, but this upgrade
+// INSERTS a brand-new key with its own multi-line comment block into an
+// operator manifest that may carry hand edits `pack add` / `reseed`
+// never touch (custom producers, an extra top-level key, a reordered
+// field). Re-serializing the whole document risks reformatting content
+// this verb has no business touching. Insertion by line position,
+// guided by indentation, keeps every byte outside the inserted block
+// untouched.
+//
+// IDEMPOTENT. If `auto_approve:` already exists anywhere inside the
+// pack's `config:` mapping (any indentation), this is a no-op: the
+// output is byte-identical to the input. An operator who already
+// hand-applied the workaround (the ADR's own "Workaround, bereits
+// angewendet" paragraph) gets nothing rewritten out from under them.
+//
+// REFUSES ON AMBIGUITY. Zero or more than one
+// `understanding-before-execution` pack block, more than one `config:`
+// key inside it, or no `config:` key found at all, is a refusal
+// (non-zero exit, a clear message), never a guess at where to insert.
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { parse as parseYaml } from "yaml";
+import { atomicWriteFile } from "../../io/atomic-write.js";
+import { unifiedDiff } from "../../io/patch.js";
+import { withFileLock } from "../../io/lock.js";
+import { formatValidationErrors, validateBeforeWrite, } from "../../io/validate-before-write.js";
+import { resolveHomeDir } from "../../runtime/home-dir.js";
+import { renderAutoApproveSnippet } from "../../policy-packs/builtin/understanding-before-execution-runtime.js";
+import { EX_FAIL, EX_NOINPUT, HarnessExitError } from "../exit-codes.js";
+const DEFAULT_BASENAME = "harness.yaml";
+const LOCK_BASENAME = ".harness.lock";
+function resolveTargetPath(opts) {
+    if (opts.configPath)
+        return path.resolve(opts.configPath);
+    return path.join(resolveHomeDir({ ...(opts.homeDir !== undefined ? { homeDir: opts.homeDir } : {}) }).path, DEFAULT_BASENAME);
+}
+function countLeadingSpaces(line) {
+    return line.length - line.trimStart().length;
+}
+/**
+ * Text-level insertion of the `auto_approve` default snippet into the
+ * `understanding-before-execution` pack's `config:` mapping. Pure: text
+ * in, text (+ a change flag) out, or an error string on ambiguity.
+ * Exported for direct unit testing without going through the CLI/file
+ * layer.
+ */
+/**
+ * The line ending most of `text` uses, so an insertion into a CRLF
+ * manifest does not mix in bare-LF lines (task 8f637efd review round 2
+ * F6): counts `\r\n` occurrences against LF-only ones (every `\n` not
+ * part of a `\r\n` pair) and picks whichever is more common, defaulting
+ * to `\n` on a tie or an all-LF file.
+ */
+function detectDominantEol(text) {
+    const crlfCount = (text.match(/\r\n/g) ?? []).length;
+    const totalLf = (text.match(/\n/g) ?? []).length;
+    const lfOnlyCount = totalLf - crlfCount;
+    return crlfCount > lfOnlyCount ? "\r\n" : "\n";
+}
+export function applyAutoApproveUpgrade(original) {
+    const eol = detectDominantEol(original);
+    // Split on either line ending so every line in `lines` is `\r`-free
+    // (its own trailing `\r`, if any, is consumed by the delimiter, not
+    // left dangling on the line content); the array is rejoined with the
+    // detected `eol` below, so a CRLF manifest stays CRLF end to end
+    // instead of picking up bare-LF lines from the inserted snippet.
+    const lines = original.split(/\r\n|\n/);
+    // Accepts a bare, double-quoted, or single-quoted scalar for the pack
+    // name (task 8f637efd review round 2 F4): `- name: understanding-before-execution`,
+    // `- name: "understanding-before-execution"`, and
+    // `- name: 'understanding-before-execution'` are all schema-valid YAML
+    // for the same value; the bare-only form previously refused the
+    // quoted spellings with "could not find a ... entry".
+    const packNameRe = /^(\s*)-\s*name:\s*(?:"understanding-before-execution"|'understanding-before-execution'|understanding-before-execution)\s*(#.*)?$/;
+    const packMatches = [];
+    for (let i = 0; i < lines.length; i++) {
+        const m = packNameRe.exec(lines[i] ?? "");
+        if (m)
+            packMatches.push({ index: i, indent: (m[1] ?? "").length });
+    }
+    if (packMatches.length === 0) {
+        return {
+            ok: false,
+            error: "could not find a `- name: understanding-before-execution` policy_packs entry in this manifest",
+        };
+    }
+    if (packMatches.length > 1) {
+        return {
+            ok: false,
+            error: `found ${packMatches.length} \`understanding-before-execution\` policy_packs entries; refusing (ambiguous)`,
+        };
+    }
+    const pack = packMatches[0];
+    const itemIndent = pack.indent;
+    function findBoundary(startIdx, indentThreshold) {
+        for (let i = startIdx; i < lines.length; i++) {
+            const line = lines[i] ?? "";
+            if (line.trim() === "")
+                continue;
+            if (countLeadingSpaces(line) <= indentThreshold)
+                return i;
+        }
+        return lines.length;
+    }
+    const packEnd = findBoundary(pack.index + 1, itemIndent);
+    const configIndent = itemIndent + 2;
+    const configRe = /^config:\s*(#.*)?$/;
+    let configIdx = -1;
+    for (let i = pack.index + 1; i < packEnd; i++) {
+        const line = lines[i] ?? "";
+        if (line.trim() === "")
+            continue;
+        if (countLeadingSpaces(line) === configIndent && configRe.test(line.trim())) {
+            if (configIdx !== -1) {
+                return {
+                    ok: false,
+                    error: "found more than one `config:` key in the understanding-before-execution pack block; refusing (ambiguous)",
+                };
+            }
+            configIdx = i;
+        }
+    }
+    if (configIdx === -1) {
+        return {
+            ok: false,
+            error: "could not find a `config:` key in the understanding-before-execution pack block",
+        };
+    }
+    let lastContentIdx = configIdx;
+    let autoApprovePresent = false;
+    for (let i = configIdx + 1; i < packEnd; i++) {
+        const line = lines[i] ?? "";
+        const trimmed = line.trim();
+        if (trimmed === "")
+            continue;
+        const indent = countLeadingSpaces(line);
+        if (indent <= configIndent)
+            break;
+        lastContentIdx = i;
+        // Review round 3, F3: any line whose trimmed form starts with
+        // `auto_approve:` counts as "already present", not only the exact
+        // bare-key spelling `auto_approve:` with nothing else on the line.
+        // That exact-equality check missed a hand-applied flow-style value
+        // (`auto_approve: {when: [bypassPermissions], ...}`) and a bare key
+        // with a trailing comment (`auto_approve:  # already configured`):
+        // both are schema-valid YAML for the same key, but neither passed
+        // `trimmed === "auto_approve:"`, so this verb would insert a SECOND
+        // `auto_approve` key and `parseYaml` below would throw "Map keys
+        // must be unique" uncaught (exit 70, a raw YAML message) instead of
+        // recognizing the upgrade as already applied.
+        // Known limit: a line starting with `auto_approve:` inside a block scalar
+        // under another key would also count as present; the verb then no-ops
+        // (fail-safe, never a corrupted manifest) rather than inserting twice.
+        if (trimmed.startsWith("auto_approve:"))
+            autoApprovePresent = true;
+    }
+    if (autoApprovePresent) {
+        return { ok: true, text: original, changed: false };
+    }
+    const snippetLines = renderAutoApproveSnippet(configIndent + 2).split("\n");
+    const insertAt = lastContentIdx + 1;
+    const next = [...lines.slice(0, insertAt), ...snippetLines, ...lines.slice(insertAt)];
+    return { ok: true, text: next.join(eol), changed: true };
+}
+/**
+ * `parseYaml`, but a parse failure on the PROPOSED (post-insertion) text
+ * surfaces as this verb's own refusal (`HarnessExitError`, `EX_FAIL`,
+ * naming the pack and that the proposed text did not parse) rather than
+ * an uncaught exception (review round 3, F3: before this wrapper, a
+ * proposal `applyAutoApproveUpgrade` mis-recognized as a genuine
+ * insertion (e.g. a duplicate key under a different quoting style this
+ * heuristic does not special-case) reached the operator as a raw
+ * "Map keys must be unique" crash at exit 70 instead of a normal
+ * refusal). `original` is never passed here: it is the operator's own
+ * file, already on disk, and is not re-validated by this verb.
+ */
+function parseProposedYamlOrRefuse(text, name, context) {
+    try {
+        return parseYaml(text);
+    }
+    catch (err) {
+        throw new HarnessExitError(`harness pack upgrade: proposed manifest for pack ${JSON.stringify(name)} did not parse as YAML (${context}): ${err instanceof Error ? err.message : String(err)}`, EX_FAIL);
+    }
+}
+/**
+ * `harness pack upgrade <name>` implementation. `name` is validated
+ * against the (currently one-entry) set of known upgrades before any
+ * file I/O; an unknown name refuses with `EX_FAIL` rather than silently
+ * doing nothing.
+ */
+export async function packUpgrade(name, opts = {}) {
+    if (name !== "understanding-before-execution") {
+        throw new HarnessExitError(`harness pack upgrade does not support ${JSON.stringify(name)} yet; only "understanding-before-execution" (auto_approve default, task 8f637efd) is wired.`, EX_FAIL);
+    }
+    const target = resolveTargetPath(opts);
+    if (!fs.existsSync(target)) {
+        throw new HarnessExitError(`harness manifest not found at ${target}; run \`harness init\` first`, EX_NOINPUT);
+    }
+    const original = fs.readFileSync(target, "utf8");
+    const result = applyAutoApproveUpgrade(original);
+    if (!result.ok) {
+        throw new HarnessExitError(`harness pack upgrade: ${result.error}`, EX_FAIL);
+    }
+    const diff = unifiedDiff({
+        fileName: path.basename(target),
+        oldText: original,
+        newText: result.text,
+        oldHeader: "current",
+        newHeader: "proposed",
+    });
+    if (!result.changed) {
+        return { path: target, name, diff, applied: false, alreadyPresent: true };
+    }
+    // Schema gate before ever touching disk, mirroring `pack add` / `pack
+    // reseed`: catches an insertion that would somehow produce an invalid
+    // manifest (e.g. a config: key this heuristic mis-located) before it
+    // reaches the operator's file.
+    const schemaResult = validateBeforeWrite(parseProposedYamlOrRefuse(result.text, name, "post-insertion validation"));
+    if (!schemaResult.ok) {
+        throw new HarnessExitError(`proposed manifest fails schema validation:\n${formatValidationErrors(schemaResult.errors)}`, EX_FAIL);
+    }
+    if (opts.dryRun) {
+        return { path: target, name, diff, applied: false, alreadyPresent: false };
+    }
+    const lockPath = path.join(path.dirname(target), LOCK_BASENAME);
+    // Review round 3, F4: whether the locked callback actually WROTE is
+    // tracked here rather than assumed. The pre-lock read above can be
+    // stale by the time the lock is acquired: if a concurrent writer
+    // already inserted the block, the callback below returns early
+    // (`recomputed.changed === false`) without writing anything, and the
+    // result reported to the caller/CLI must say so (`applied: false,
+    // alreadyPresent: true`, so `harness pack upgrade` prints the
+    // "already carries this upgrade" message) instead of the hardcoded
+    // `applied: true` this used to return unconditionally.
+    let wroteUnderLock = false;
+    await withFileLock(lockPath, () => {
+        // Re-read and recompute under the lock (mirrors `pack add`): a
+        // concurrent writer may have inserted the block (or changed the
+        // file entirely) between the pre-lock read above and now.
+        const current = fs.readFileSync(target, "utf8");
+        const recomputed = applyAutoApproveUpgrade(current);
+        if (!recomputed.ok) {
+            throw new HarnessExitError(`harness pack upgrade: ${recomputed.error}`, EX_FAIL);
+        }
+        if (!recomputed.changed)
+            return; // raced: someone else already inserted it
+        const recheck = validateBeforeWrite(parseProposedYamlOrRefuse(recomputed.text, name, "post-insertion validation after lock acquisition"));
+        if (!recheck.ok) {
+            throw new HarnessExitError(`proposed manifest fails schema validation after lock acquisition:\n${formatValidationErrors(recheck.errors)}`, EX_FAIL);
+        }
+        atomicWriteFile(target, recomputed.text);
+        wroteUnderLock = true;
+    });
+    return {
+        path: target,
+        name,
+        diff,
+        applied: wroteUnderLock,
+        alreadyPresent: !wroteUnderLock,
+    };
+}
+//# sourceMappingURL=upgrade.js.map

package/dist/cli/pack/upgrade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.js","sourceRoot":"","sources":["../../../src/cli/pack/upgrade.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,kEAAkE;AAClE,qEAAqE;AACrE,sEAAsE;AACtE,6DAA6D;AAC7D,2CAA2C;AAC3C,kEAAkE;AAClE,qBAAqB;AACrB,EAAE;AACF,wEAAwE;AACxE,+DAA+D;AAC/D,mEAAmE;AACnE,wEAAwE;AACxE,oEAAoE;AACpE,qEAAqE;AACrE,uEAAuE;AACvE,kEAAkE;AAClE,qEAAqE;AACrE,aAAa;AACb,EAAE;AACF,oEAAoE;AACpE,mEAAmE;AACnE,iEAAiE;AACjE,kEAAkE;AAClE,qEAAqE;AACrE,EAAE;AACF,8CAA8C;AAC9C,uEAAuE;AACvE,gEAAgE;AAChE,sEAAsE;AAEtE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EACL,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,sEAAsE,CAAC;AAChH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAqBzE,MAAM,gBAAgB,GAAG,cAAc,CAAC;AACxC,MAAM,aAAa,GAAG,eAAe,CAAC;AAEtC,SAAS,iBAAiB,CAAC,IAAwB;IACjD,IAAI,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,IAAI,CACd,cAAc,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EACzF,gBAAgB,CACjB,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC;AAC/C,CAAC;AAMD;;;;;;GAMG;AACH;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACrD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACjD,MAAM,WAAW,GAAG,OAAO,GAAG,SAAS,CAAC;IACxC,OAAO,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,MAAM,GAAG,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACxC,oEAAoE;IACpE,oEAAoE;IACpE,qEAAqE;IACrE,iEAAiE;IACjE,iEAAiE;IACjE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAExC,sEAAsE;IACtE,oFAAoF;IACpF,kDAAkD;IAClD,uEAAuE;IACvE,gEAAgE;IAChE,sDAAsD;IACtD,MAAM,UAAU,GACd,kIAAkI,CAAC;IACrI,MAAM,WAAW,GAAwC,EAAE,CAAC;IAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,+FAA+F;SAClG,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,SAAS,WAAW,CAAC,MAAM,gFAAgF;SACnH,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;IAE/B,SAAS,YAAY,CAAC,QAAgB,EAAE,eAAuB;QAC7D,KAAK,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,SAAS;YACjC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,eAAe;gBAAE,OAAO,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;IAEzD,MAAM,YAAY,GAAG,UAAU,GAAG,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;IACtC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACjC,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,YAAY,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5E,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;gBACrB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EACH,0GAA0G;iBAC7G,CAAC;YACJ,CAAC;YACD,SAAS,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,iFAAiF;SACzF,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,GAAG,SAAS,CAAC;IAC/B,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,SAAS,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,EAAE;YAAE,SAAS;QAC7B,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM,IAAI,YAAY;YAAE,MAAM;QAClC,cAAc,GAAG,CAAC,CAAC;QACnB,8DAA8D;QAC9D,kEAAkE;QAClE,mEAAmE;QACnE,mEAAmE;QACnE,oEAAoE;QACpE,mEAAmE;QACnE,kEAAkE;QAClE,oEAAoE;QACpE,iEAAiE;QACjE,oEAAoE;QACpE,8CAA8C;QAC9C,0EAA0E;QAC1E,sEAAsE;QACtE,uEAAuE;QACvE,IAAI,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,kBAAkB,GAAG,IAAI,CAAC;IACrE,CAAC;IAED,IAAI,kBAAkB,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACtD,CAAC;IAED,MAAM,YAAY,GAAG,wBAAwB,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,cAAc,GAAG,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,GAAG,YAAY,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,yBAAyB,CAAC,IAAY,EAAE,IAAY,EAAE,OAAe;IAC5E,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CACxB,oDAAoD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,2BAA2B,OAAO,MACxG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,EACF,OAAO,CACR,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAY,EACZ,OAA2B,EAAE;IAE7B,IAAI,IAAI,KAAK,gCAAgC,EAAE,CAAC;QAC9C,MAAM,IAAI,gBAAgB,CACxB,yCAAyC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,6FAA6F,EAC1J,OAAO,CACR,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,gBAAgB,CACxB,iCAAiC,MAAM,8BAA8B,EACrE,UAAU,CACX,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,gBAAgB,CAAC,yBAAyB,MAAM,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC/B,OAAO,EAAE,QAAQ;QACjB,OAAO,EAAE,MAAM,CAAC,IAAI;QACpB,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,UAAU;KACtB,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAC5E,CAAC;IAED,sEAAsE;IACtE,sEAAsE;IACtE,qEAAqE;IACrE,+BAA+B;IAC/B,MAAM,YAAY,GAAG,mBAAmB,CACtC,yBAAyB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,2BAA2B,CAAC,CAC1E,CAAC;IACF,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,gBAAgB,CACxB,+CAA+C,sBAAsB,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAC5F,OAAO,CACR,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IAC7E,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;IAChE,oEAAoE;IACpE,mEAAmE;IACnE,iEAAiE;IACjE,+DAA+D;IAC/D,qEAAqE;IACrE,kEAAkE;IAClE,8DAA8D;IAC9D,mEAAmE;IACnE,uDAAuD;IACvD,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,MAAM,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE;QAChC,+DAA+D;QAC/D,gEAAgE;QAChE,0DAA0D;QAC1D,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,gBAAgB,CAAC,yBAAyB,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,OAAO;YAAE,OAAO,CAAC,0CAA0C;QAC3E,MAAM,OAAO,GAAG,mBAAmB,CACjC,yBAAyB,CACvB,UAAU,CAAC,IAAI,EACf,IAAI,EACJ,kDAAkD,CACnD,CACF,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,gBAAgB,CACxB,sEAAsE,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAC9G,OAAO,CACR,CAAC;QACJ,CAAC;QACD,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QACzC,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,IAAI;QACJ,IAAI;QACJ,OAAO,EAAE,cAAc;QACvB,cAAc,EAAE,CAAC,cAAc;KAChC,CAAC;AACJ,CAAC"}

package/dist/cli/smoke/index.d.ts

@@ -1,4 +1,5 @@
 import { apply } from "../apply/index.js";
+import { issueDelegation } from "../delegate/index.js";
 import { type AssertionFailure, type SmokeExpectations } from "./assertions.js";
 import { type RunClaudeOptions } from "./runner.js";
 import { type StreamSummary } from "./stream-parser.js";
@@ -23,11 +24,27 @@ export interface SmokeOptions {
     spawn?: RunClaudeOptions["spawn"];
     /** Test seam for the manifest-apply step. Defaults to the real `apply`. */
     applyImpl?: typeof apply;
-    /** Override cwd for the spawned claude. Defaults to `outputDir`. */
+    /**
+     * Override cwd for the spawned claude. Defaults to the parent
+     * process's own cwd: when unset, `runOpts.cwd` is left unset below
+     * and `runClaude` leaves `cwd` unset on the spawn options too, so
+     * Node inherits this process's cwd exactly like an unset `cwd` always
+     * does.
+     */
     spawnCwd?: string;
     /** Stdout/stderr writers (defaults to process.stdout / stderr). */
     stdout?: (s: string) => void;
     stderr?: (s: string) => void;
+    /**
+     * Skip the slice-3 pre-spawn delegation (ADR
+     * docs/decisions/2026-08-27-ug-auto-mode-approval.md, "TTL, cwd, and
+     * subagents": the smoke runner is the delegation's first consumer).
+     * Default: false (delegate). Set for launchers that want the
+     * pre-slice-3 shape, or when the caller issues its own delegation.
+     */
+    noDelegate?: boolean;
+    /** Test seam for the delegation step. Defaults to the real `issueDelegation`. */
+    issueDelegationImpl?: typeof issueDelegation;
 }
 export interface SmokeResult {
     /** EX_OK on green, EX_FAIL on an assertion miss, EX_UNAVAILABLE on missing claude. */

package/dist/cli/smoke/index.js

@@ -13,6 +13,7 @@ import { randomUUID } from "node:crypto";
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { apply, SETTINGS_BASENAME } from "../apply/index.js";
+import { issueDelegation } from "../delegate/index.js";
 import { EX_FAIL, EX_UNAVAILABLE, EX_USAGE, HarnessExitError } from "../exit-codes.js";
 import { evaluateExpectations, formatFailures, } from "./assertions.js";
 import { runClaude } from "./runner.js";
@@ -99,6 +100,59 @@ export async function runSmoke(opts) {
     }
     const sessionId = opts.sessionId ?? randomUUID();
     const timeoutMs = opts.timeoutMs ?? 60_000;
+    // Slice 3 delegation (ADR docs/decisions/2026-08-27-ug-auto-mode-
+    // approval.md, "TTL, cwd, and subagents": "The harness smoke runner
+    // ... is the natural first consumer"). Issued for the session id
+    // this run already chose, bound to the cwd the child actually spawns
+    // into (`opts.spawnCwd`, defaulting to this process's own cwd exactly
+    // like `runClaude`'s own unset-cwd default does), no task. Parent
+    // resolves through `issueDelegation`'s own precedence chain (flag >
+    // env > staged `.pending-approval`), this runner never overrides it,
+    // so the delegation is always issued on behalf of whatever session
+    // actually invoked `harness smoke`.
+    //
+    // TTL is the run's own wall-clock budget plus one minute of slack
+    // (`Math.ceil(timeoutMs / 1000) + 60`), never `issueDelegation`'s own
+    // one-hour default: a 60s smoke run has no business minting a
+    // pre-authorization that outlives the run by an hour. If that value
+    // exceeds the applied pack's own ceiling, `issueDelegationImpl`
+    // refuses with `ttl-above-max-age`, which prints exactly like any
+    // other refusal below; nothing here special-cases it.
+    //
+    // Never blocks the run: every refusal (no parent marker, no signing
+    // key, an unresolved parent session id, an over-ceiling TTL) AND
+    // every thrown error (e.g. `resolvePaths`'s real-home-dir guard when
+    // neither `--config` nor a home dir is set outside the real
+    // `harness` binary) prints one line and the run proceeds exactly as
+    // it did before this delegation step existed, the same shape
+    // `--no-delegate` opts back into explicitly.
+    const stdoutWrite = opts.stdout ?? ((s) => process.stdout.write(s));
+    if (!opts.noDelegate) {
+        const issueDelegationImpl = opts.issueDelegationImpl ?? issueDelegation;
+        const childCwd = opts.spawnCwd ?? process.cwd();
+        const delegationOpts = {
+            childSessionId: sessionId,
+            cwd: childCwd,
+            ttlSeconds: Math.ceil(timeoutMs / 1000) + 60,
+        };
+        if (opts.configPath)
+            delegationOpts.configPath = opts.configPath;
+        if (opts.project)
+            delegationOpts.project = opts.project;
+        try {
+            const delegationResult = await issueDelegationImpl(delegationOpts);
+            if (delegationResult.ok) {
+                stdoutWrite(`delegation: ✓ ${delegationResult.filePath} (child ${delegationResult.childSessionId}, parent ${delegationResult.parentSessionId}, expires ${delegationResult.expiresAt})\n`);
+            }
+            else {
+                stdoutWrite(`delegation: skipped (${delegationResult.reason}: ${delegationResult.detail})\n`);
+            }
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            stdoutWrite(`delegation: skipped (error: ${message})\n`);
+        }
+    }
     const runOpts = {
         claudeBin,
         prompt: opts.prompt,

package/dist/cli/smoke/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cli/smoke/index.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,EAAE;AACF,wEAAwE;AACxE,qEAAqE;AACrE,qEAAqE;AACrE,sEAAsE;AACtE,8DAA8D;AAC9D,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,+BAA+B;AAE/B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EACL,oBAAoB,EACpB,cAAc,GAIf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,SAAS,EAA+C,MAAM,aAAa,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAsB,MAAM,oBAAoB,CAAC;AAkD1E,SAAS,gBAAgB,CAAC,IAAkB;IAC1C,IAAI,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC;IAC1C,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IAC1D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,4BAA4B;IAC5B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,gBAAgB,CACxB,6CAA6C,GAAG,EAAE,EAClD,cAAc,CACf,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnE,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO;IACvC,CAAC;IACD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,GAAG,yDAAyD,EAC9E,cAAc,CACf,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAS;IACjC,OAAO,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,MAAM,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAkB;IAC/C,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,gBAAgB,CAAC,qCAAqC,EAAE,QAAQ,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,IAAI,gBAAgB,CACxB,yCAAyC,EACzC,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,YAAY,EAAE,cAAc,KAAK,SAAS,EAAE,CAAC;QACpD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,gBAAgB,CACxB,iEAAiE,EACjE,QAAQ,CACT,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAEjC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAElE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,SAAS,GAAgC;QAC7C,MAAM,EAAE,YAAY;QACpB,KAAK,EAAE,IAAI;KACZ,CAAC;IACF,IAAI,IAAI,CAAC,UAAU;QAAE,SAAS,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IAC5D,IAAI,IAAI,CAAC,OAAO;QAAE,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IACnD,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC/C,sEAAsE;IACtE,kEAAkE;IAClE,sEAAsE;IACtE,uDAAuD;IACvD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;QAC/B,cAAc;QACd,mBAAmB;QACnB,sBAAsB;KACvB,CAAC,CAAC;IACH,IAAI,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,gBAAgB,CACxB,8CAA8C,WAAW,CAAC,OAAO,oCAAoC,EACrG,OAAO,CACR,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,EAAE,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAE3C,MAAM,OAAO,GAAqB;QAChC,SAAS;QACT,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,YAAY;QACZ,SAAS;QACT,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS;KACV,CAAC;IACF,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAC3C,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;IAE7D,IAAI,SAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CACxB,uCAAwC,GAAa,CAAC,OAAO,EAAE,EAC/D,cAAc,CACf,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAExE,kEAAkE;IAClE,4DAA4D;IAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QAChD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,iCAAiC;YAC3C,MAAM,EAAE,uBAAuB,SAAS,IAAI;YAC5C,MAAM,EAAE,sCAAsC,SAAS,uDAAuD;SAC/G,CAAC,CAAC;IACL,CAAC;IACD,oEAAoE;IACpE,mEAAmE;IACnE,gEAAgE;IAChE,mEAAmE;IACnE,IACE,QAAQ,CAAC,MAAM,KAAK,CAAC;QACrB,CAAC,SAAS,CAAC,QAAQ;QACnB,SAAS,CAAC,QAAQ,KAAK,IAAI;QAC3B,SAAS,CAAC,QAAQ,KAAK,CAAC;QACxB,OAAO,CAAC,MAAM,KAAK,IAAI,EACvB,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,sCAAsC;YAChD,MAAM,EAAE,iBAAiB,SAAS,CAAC,QAAQ,kCAAkC;YAC7E,MAAM,EACJ,gCAAgC,SAAS,CAAC,QAAQ,0BAA0B;gBAC5E,2FAA2F;SAC9F,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACrD,OAAO;QACL,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY;QACZ,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,OAAO;QACP,cAAc,EAAE,SAAS,CAAC,QAAQ;QAClC,cAAc,EAAE,SAAS,CAAC,QAAQ;QAClC,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,QAAQ;QACR,UAAU,EAAE,SAAS,CAAC,IAAI;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAmB;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,UAAU,KAAK,CAAC,CAAC;IACxG,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACnD,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACnD,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,IAAI,iBAAiB,EAAE,CAAC,CAAC;IACtF,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7D,KAAK,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,IAAI,mBAAmB,EAAE,CAAC,CAAC;IAC3F,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cli/smoke/index.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,EAAE;AACF,wEAAwE;AACxE,qEAAqE;AACrE,qEAAqE;AACrE,sEAAsE;AACtE,8DAA8D;AAC9D,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,+BAA+B;AAE/B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EACL,oBAAoB,EACpB,cAAc,GAIf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,SAAS,EAA+C,MAAM,aAAa,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAsB,MAAM,oBAAoB,CAAC;AAkE1E,SAAS,gBAAgB,CAAC,IAAkB;IAC1C,IAAI,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC;IAC1C,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IAC1D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,4BAA4B;IAC5B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,gBAAgB,CACxB,6CAA6C,GAAG,EAAE,EAClD,cAAc,CACf,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnE,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO;IACvC,CAAC;IACD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,GAAG,yDAAyD,EAC9E,cAAc,CACf,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAS;IACjC,OAAO,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,MAAM,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAkB;IAC/C,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,gBAAgB,CAAC,qCAAqC,EAAE,QAAQ,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,IAAI,gBAAgB,CACxB,yCAAyC,EACzC,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,YAAY,EAAE,cAAc,KAAK,SAAS,EAAE,CAAC;QACpD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,gBAAgB,CACxB,iEAAiE,EACjE,QAAQ,CACT,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAEjC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAElE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,SAAS,GAAgC;QAC7C,MAAM,EAAE,YAAY;QACpB,KAAK,EAAE,IAAI;KACZ,CAAC;IACF,IAAI,IAAI,CAAC,UAAU;QAAE,SAAS,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IAC5D,IAAI,IAAI,CAAC,OAAO;QAAE,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IACnD,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC/C,sEAAsE;IACtE,kEAAkE;IAClE,sEAAsE;IACtE,uDAAuD;IACvD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;QAC/B,cAAc;QACd,mBAAmB;QACnB,sBAAsB;KACvB,CAAC,CAAC;IACH,IAAI,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,gBAAgB,CACxB,8CAA8C,WAAW,CAAC,OAAO,oCAAoC,EACrG,OAAO,CACR,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,EAAE,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAE3C,kEAAkE;IAClE,oEAAoE;IACpE,iEAAiE;IACjE,qEAAqE;IACrE,sEAAsE;IACtE,kEAAkE;IAClE,oEAAoE;IACpE,qEAAqE;IACrE,mEAAmE;IACnE,oCAAoC;IACpC,EAAE;IACF,kEAAkE;IAClE,sEAAsE;IACtE,8DAA8D;IAC9D,oEAAoE;IACpE,gEAAgE;IAChE,kEAAkE;IAClE,sDAAsD;IACtD,EAAE;IACF,oEAAoE;IACpE,iEAAiE;IACjE,qEAAqE;IACrE,4DAA4D;IAC5D,oEAAoE;IACpE,6DAA6D;IAC7D,6CAA6C;IAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACrB,MAAM,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,IAAI,eAAe,CAAC;QACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChD,MAAM,cAAc,GAA0C;YAC5D,cAAc,EAAE,SAAS;YACzB,GAAG,EAAE,QAAQ;YACb,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;SAC7C,CAAC;QACF,IAAI,IAAI,CAAC,UAAU;YAAE,cAAc,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACjE,IAAI,IAAI,CAAC,OAAO;YAAE,cAAc,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,gBAAgB,GAAG,MAAM,mBAAmB,CAAC,cAAc,CAAC,CAAC;YACnE,IAAI,gBAAgB,CAAC,EAAE,EAAE,CAAC;gBACxB,WAAW,CACT,iBAAiB,gBAAgB,CAAC,QAAQ,WAAW,gBAAgB,CAAC,cAAc,YAAY,gBAAgB,CAAC,eAAe,aAAa,gBAAgB,CAAC,SAAS,KAAK,CAC7K,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,WAAW,CACT,wBAAwB,gBAAgB,CAAC,MAAM,KAAK,gBAAgB,CAAC,MAAM,KAAK,CACjF,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,WAAW,CAAC,+BAA+B,OAAO,KAAK,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAqB;QAChC,SAAS;QACT,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,YAAY;QACZ,SAAS;QACT,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS;KACV,CAAC;IACF,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAC3C,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;IAE7D,IAAI,SAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CACxB,uCAAwC,GAAa,CAAC,OAAO,EAAE,EAC/D,cAAc,CACf,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAExE,kEAAkE;IAClE,4DAA4D;IAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QAChD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,iCAAiC;YAC3C,MAAM,EAAE,uBAAuB,SAAS,IAAI;YAC5C,MAAM,EAAE,sCAAsC,SAAS,uDAAuD;SAC/G,CAAC,CAAC;IACL,CAAC;IACD,oEAAoE;IACpE,mEAAmE;IACnE,gEAAgE;IAChE,mEAAmE;IACnE,IACE,QAAQ,CAAC,MAAM,KAAK,CAAC;QACrB,CAAC,SAAS,CAAC,QAAQ;QACnB,SAAS,CAAC,QAAQ,KAAK,IAAI;QAC3B,SAAS,CAAC,QAAQ,KAAK,CAAC;QACxB,OAAO,CAAC,MAAM,KAAK,IAAI,EACvB,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,sCAAsC;YAChD,MAAM,EAAE,iBAAiB,SAAS,CAAC,QAAQ,kCAAkC;YAC7E,MAAM,EACJ,gCAAgC,SAAS,CAAC,QAAQ,0BAA0B;gBAC5E,2FAA2F;SAC9F,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACrD,OAAO;QACL,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY;QACZ,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,OAAO;QACP,cAAc,EAAE,SAAS,CAAC,QAAQ;QAClC,cAAc,EAAE,SAAS,CAAC,QAAQ;QAClC,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,QAAQ;QACR,UAAU,EAAE,SAAS,CAAC,IAAI;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAmB;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,UAAU,KAAK,CAAC,CAAC;IACxG,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACnD,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACnD,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,IAAI,iBAAiB,EAAE,CAAC,CAAC;IACtF,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7D,KAAK,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,IAAI,mBAAmB,EAAE,CAAC,CAAC;IAC3F,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC"}

package/dist/io/read-json-dir-entries.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Shared read-and-classify loop for a directory of small JSON marker/record
+ * files, used by every doctor/observation reader that scans one file per
+ * session and tolerates missing/corrupt entries rather than throwing
+ * (extracted from `ug-auto-approvals.ts` and `permission-mode-observations.ts`,
+ * which had the same 15-line loop verbatim: readdir, reject symlink /
+ * non-regular / raced-away entries silently, count a read failure as
+ * unreadable, `safeJsonParse` the body, hand it to the caller's own
+ * validator/transform).
+ *
+ * A missing directory resolves to `{ dirPresent: false, entries: [],
+ * unreadableCount: 0 }` rather than throwing: every caller here is a
+ * best-effort read for a doctor listing or an audit surface, never a gate
+ * decision.
+ */
+export interface ReadJsonDirEntriesResult<T> {
+    dirPresent: boolean;
+    entries: T[];
+    unreadableCount: number;
+}
+export interface ReadJsonDirEntriesOptions<T> {
+    /**
+     * Return true to silently skip an entry (not counted as unreadable) before
+     * it is even read. Used to exclude filenames that are not this reader's
+     * kind of marker at all (a differently-prefixed sibling marker in the
+     * same directory), as distinct from a marker that IS this reader's kind
+     * but fails to parse.
+     */
+    skip?: (name: string) => boolean;
+    /**
+     * Parse and validate the file's already-`safeJsonParse`d body. Return the
+     * value to keep, or null to count the entry as unreadable.
+     */
+    parse: (raw: unknown, name: string) => T | null;
+}
+export declare function readJsonDirEntriesRejectingSymlinks<T>(dir: string, opts: ReadJsonDirEntriesOptions<T>): ReadJsonDirEntriesResult<T>;

package/dist/io/read-json-dir-entries.js

@@ -0,0 +1,38 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { readRegularFileRejectingSymlink } from "./read-regular-file.js";
+import { safeJsonParse } from "./safe-json-parse.js";
+export function readJsonDirEntriesRejectingSymlinks(dir, opts) {
+    let dirents;
+    try {
+        dirents = fs.readdirSync(dir, { withFileTypes: true });
+    }
+    catch {
+        return { dirPresent: false, entries: [], unreadableCount: 0 };
+    }
+    const entries = [];
+    let unreadableCount = 0;
+    for (const d of dirents) {
+        const name = d.name;
+        if (opts.skip?.(name))
+            continue;
+        const full = path.join(dir, name);
+        const read = readRegularFileRejectingSymlink(full);
+        if (read.kind === "symlink" || read.kind === "not-regular" || read.kind === "missing") {
+            continue;
+        }
+        if (read.kind === "unreadable") {
+            unreadableCount++;
+            continue;
+        }
+        const parsed = safeJsonParse(read.content);
+        const value = opts.parse(parsed, name);
+        if (value === null) {
+            unreadableCount++;
+            continue;
+        }
+        entries.push(value);
+    }
+    return { dirPresent: true, entries, unreadableCount };
+}
+//# sourceMappingURL=read-json-dir-entries.js.map

package/dist/io/read-json-dir-entries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-json-dir-entries.js","sourceRoot":"","sources":["../../src/io/read-json-dir-entries.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAuCrD,MAAM,UAAU,mCAAmC,CACjD,GAAW,EACX,IAAkC;IAElC,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IAChE,CAAC;IAED,MAAM,OAAO,GAAQ,EAAE,CAAC;IACxB,IAAI,eAAe,GAAG,CAAC,CAAC;IAExB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QACpB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC;YAAE,SAAS;QAEhC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,+BAA+B,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtF,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC/B,eAAe,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,eAAe,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;AACxD,CAAC"}

package/dist/policy-packs/builtin/understanding-before-execution/auto-approve-default.d.ts

@@ -0,0 +1,35 @@
+/** `auto_approve.when` value this default ships. */
+export declare const AUTO_APPROVE_DEFAULT_WHEN: readonly string[];
+/** `auto_approve.harnesses` value this default ships. */
+export declare const AUTO_APPROVE_DEFAULT_HARNESSES: readonly string[];
+export interface AutoApproveDefaultConfig {
+    when: string[];
+    harnesses: string[];
+    require_report: true;
+}
+/**
+ * The parsed-YAML shape of the shipped default, for structural equality
+ * assertions against a template's parsed `config.auto_approve` (mirrors
+ * how `defaultUx()` / `defaultProducers()` are consumed by
+ * `tests/cli/init-templates-ux-parity.test.ts`).
+ */
+export declare function defaultAutoApproveConfig(): AutoApproveDefaultConfig;
+/**
+ * Explanatory comment lines rendered above the `auto_approve:` mapping,
+ * WITHOUT the leading `# ` marker or indentation: callers supply both,
+ * since the same lines render at different indents in `harness init`
+ * templates vs. the `pack upgrade` text-level insertion. Deliberately
+ * short: what the block does, that `bypassPermissions` is the
+ * operator's own launch choice, and that deleting the block restores
+ * the manual prompt.
+ */
+export declare const AUTO_APPROVE_COMMENT_LINES: readonly string[];
+/**
+ * Render the full snippet (comment block + `auto_approve:` mapping) so
+ * that `auto_approve:` itself sits at `indent` spaces, matching the
+ * indentation of its sibling `config:` keys (`mode:`,
+ * `approval_lifecycle:`, ...). Each line is independently indented, no
+ * trailing newline, so callers can join it directly into a YAML
+ * document with no further reformatting.
+ */
+export declare function renderAutoApproveSnippet(indent: number): string;

package/dist/policy-packs/builtin/understanding-before-execution/auto-approve-default.js

@@ -0,0 +1,86 @@
+// Canonical shipped default for `auto_approve` (D-004, task 8f637efd,
+// docs/decisions/2026-08-27-ug-auto-mode-approval.md, "Amendment: install
+// default"). One source of truth for the exact shape and wording that
+// three surfaces need to agree on byte-for-byte:
+//
+//   - `harness init` (FULL_TEMPLATE, SOLO_TEMPLATE, TEAM_TEMPLATE): the
+//     block a fresh manifest ships with.
+//   - `harness pack upgrade understanding-before-execution`: the block
+//     it inserts into an existing manifest that predates this default.
+//   - `harness doctor`'s "bypassPermissions observed, auto_approve
+//     missing" finding: the snippet it prints as the remediation.
+//
+// Keeping these as one importable source (rather than three hand-synced
+// literals) means a future wording or shape change cannot land in one
+// surface without the other two, the same failure class task 68b9ad9c
+// fixed for `config.ux` / `config.producers` via `defaultUx()` /
+// `defaultProducers()` in the sibling `understanding-before-execution.ts`.
+//
+// Rationale for shipping this ACTIVE (not commented out) by default:
+// under `bypassPermissions` the permission system is off by the
+// operator's own launch choice (`--dangerously-skip-permissions` /
+// `--permission-mode bypassPermissions`); a human approval prompt there
+// is exactly the friction that mode exists to remove. `require_report:
+// true` is unchanged (it is the only schema-valid value), and every
+// template that carries this block also ships `mode: grill_me`, so the
+// report the auto path consumes was actually checked, not merely
+// present. The opt-in stays a visible, deletable config key: an
+// existing install is never changed silently, only through the
+// explicit `pack upgrade` verb.
+import { CLAUDE_CODE_HARNESS } from "./auto-approve.js";
+/** `auto_approve.when` value this default ships. */
+export const AUTO_APPROVE_DEFAULT_WHEN = ["bypassPermissions"];
+/** `auto_approve.harnesses` value this default ships. */
+export const AUTO_APPROVE_DEFAULT_HARNESSES = [CLAUDE_CODE_HARNESS];
+/**
+ * The parsed-YAML shape of the shipped default, for structural equality
+ * assertions against a template's parsed `config.auto_approve` (mirrors
+ * how `defaultUx()` / `defaultProducers()` are consumed by
+ * `tests/cli/init-templates-ux-parity.test.ts`).
+ */
+export function defaultAutoApproveConfig() {
+    return {
+        when: [...AUTO_APPROVE_DEFAULT_WHEN],
+        harnesses: [...AUTO_APPROVE_DEFAULT_HARNESSES],
+        require_report: true,
+    };
+}
+/**
+ * Explanatory comment lines rendered above the `auto_approve:` mapping,
+ * WITHOUT the leading `# ` marker or indentation: callers supply both,
+ * since the same lines render at different indents in `harness init`
+ * templates vs. the `pack upgrade` text-level insertion. Deliberately
+ * short: what the block does, that `bypassPermissions` is the
+ * operator's own launch choice, and that deleting the block restores
+ * the manual prompt.
+ */
+export const AUTO_APPROVE_COMMENT_LINES = [
+    "auto_approve (shipped default): a session started with",
+    "bypassPermissions gets its Understanding Report approved by the",
+    "hook's signed auto path instead of a human `harness approve",
+    "understanding` prompt; the report itself stays mandatory.",
+    "bypassPermissions is the operator's own launch choice",
+    "(--dangerously-skip-permissions / --permission-mode",
+    "bypassPermissions). Delete this block to restore the manual prompt.",
+];
+/**
+ * Render the full snippet (comment block + `auto_approve:` mapping) so
+ * that `auto_approve:` itself sits at `indent` spaces, matching the
+ * indentation of its sibling `config:` keys (`mode:`,
+ * `approval_lifecycle:`, ...). Each line is independently indented, no
+ * trailing newline, so callers can join it directly into a YAML
+ * document with no further reformatting.
+ */
+export function renderAutoApproveSnippet(indent) {
+    const pad = " ".repeat(indent);
+    const childPad = " ".repeat(indent + 2);
+    const lines = [];
+    for (const c of AUTO_APPROVE_COMMENT_LINES)
+        lines.push(`${pad}# ${c}`);
+    lines.push(`${pad}auto_approve:`);
+    lines.push(`${childPad}when: [${AUTO_APPROVE_DEFAULT_WHEN.join(", ")}]`);
+    lines.push(`${childPad}harnesses: [${AUTO_APPROVE_DEFAULT_HARNESSES.join(", ")}]`);
+    lines.push(`${childPad}require_report: true`);
+    return lines.join("\n");
+}
+//# sourceMappingURL=auto-approve-default.js.map

package/dist/policy-packs/builtin/understanding-before-execution/auto-approve-default.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-approve-default.js","sourceRoot":"","sources":["../../../../src/policy-packs/builtin/understanding-before-execution/auto-approve-default.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,0EAA0E;AAC1E,sEAAsE;AACtE,iDAAiD;AACjD,EAAE;AACF,wEAAwE;AACxE,yCAAyC;AACzC,uEAAuE;AACvE,uEAAuE;AACvE,mEAAmE;AACnE,kEAAkE;AAClE,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,sEAAsE;AACtE,iEAAiE;AACjE,2EAA2E;AAC3E,EAAE;AACF,qEAAqE;AACrE,gEAAgE;AAChE,mEAAmE;AACnE,wEAAwE;AACxE,uEAAuE;AACvE,oEAAoE;AACpE,uEAAuE;AACvE,iEAAiE;AACjE,gEAAgE;AAChE,+DAA+D;AAC/D,gCAAgC;AAEhC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,oDAAoD;AACpD,MAAM,CAAC,MAAM,yBAAyB,GAAsB,CAAC,mBAAmB,CAAC,CAAC;AAElF,yDAAyD;AACzD,MAAM,CAAC,MAAM,8BAA8B,GAAsB,CAAC,mBAAmB,CAAC,CAAC;AAQvF;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO;QACL,IAAI,EAAE,CAAC,GAAG,yBAAyB,CAAC;QACpC,SAAS,EAAE,CAAC,GAAG,8BAA8B,CAAC;QAC9C,cAAc,EAAE,IAAI;KACrB,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,wDAAwD;IACxD,iEAAiE;IACjE,6DAA6D;IAC7D,2DAA2D;IAC3D,uDAAuD;IACvD,qDAAqD;IACrD,qEAAqE;CACtE,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,0BAA0B;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IACvE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,eAAe,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,UAAU,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzE,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,eAAe,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnF,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,sBAAsB,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}