@lannguyensi/harness 0.63.0 → 1.0.0

package/dist/policy-packs/builtin/understanding-before-execution/stay-in-scope-config.js

@@ -1,166 +0,0 @@
-import { z } from "zod";
-const NonblankString = z.string().min(1).refine((value) => value.trim().length > 0, {
-    message: "must not be blank",
-});
-// Codex expands only a bare pipe-list of simple names. Keeping the same
-// restricted grammar here means a configured name cannot change matcher
-// syntax or introduce a regular-expression fragment.
-const SimpleToolName = z.string().min(1).regex(/^[A-Za-z0-9_.:-]+$/, {
-    message: "must be a simple tool name without matcher metacharacters",
-}).refine((value) => value.trim().length > 0, { message: "must not be blank" });
-const DescriptionWindowSchema = z
-    .object({
-    marker: NonblankString,
-    contains: NonblankString,
-    max_chars: z.number().int().positive(),
-})
-    .strict();
-const ParentReferencePattern = z.string().nullable().superRefine((value, ctx) => {
-    if (value === null)
-        return;
-    try {
-        new RegExp(value, "i");
-    }
-    catch {
-        ctx.addIssue({ code: z.ZodIssueCode.custom, message: "must be valid regular-expression source" });
-    }
-});
-const ParentUrlPattern = z.string().nullable().superRefine((value, ctx) => {
-    if (value === null)
-        return;
-    try {
-        new RegExp(value);
-    }
-    catch {
-        ctx.addIssue({ code: z.ZodIssueCode.custom, message: "must be valid regular-expression source" });
-    }
-});
-/**
- * The optional reminder integration's one shared strict input schema.
- * Runtime consumers deliberately parse this schema again: a previously
- * generated hook must turn into a no-op when an operator disables or breaks
- * the current manifest after apply.
- */
-export const StayInScopeConfigSchema = z
-    .object({
-    enabled: z.boolean(),
-    tools: z.array(SimpleToolName).min(1).optional(),
-    label_markers: z.array(NonblankString).optional(),
-    description_markers: z.array(NonblankString).optional(),
-    description_window: DescriptionWindowSchema.nullable().optional(),
-    parent_reference_pattern: ParentReferencePattern.optional(),
-    parent_url_pattern: ParentUrlPattern.optional(),
-    messages: z
-        .object({ reminder: NonblankString, second_order: NonblankString })
-        .strict()
-        .optional(),
-})
-    .strict()
-    .superRefine((value, ctx) => {
-    if (!value.enabled)
-        return;
-    for (const key of [
-        "tools",
-        "label_markers",
-        "description_markers",
-        "description_window",
-        "parent_reference_pattern",
-        "parent_url_pattern",
-        "messages",
-    ]) {
-        if (value[key] === undefined) {
-            ctx.addIssue({ code: z.ZodIssueCode.custom, path: [key], message: "is required when enabled:true" });
-        }
-    }
-    if ((value.label_markers?.length ?? 0) === 0 &&
-        (value.description_markers?.length ?? 0) === 0 &&
-        value.description_window === null) {
-        ctx.addIssue({
-            code: z.ZodIssueCode.custom,
-            message: "enabled:true requires at least one label, description, or window detector",
-        });
-    }
-});
-/** Returns null for absent, disabled, or invalid configuration. */
-export function resolveStayInScopeConfig(raw) {
-    const parsed = StayInScopeConfigSchema.safeParse(raw);
-    if (!parsed.success || !parsed.data.enabled)
-        return null;
-    const value = parsed.data;
-    // superRefine establishes these fields for enabled:true. The narrow casts
-    // keep the public resolver free of a second, diverging validation path.
-    if (value.tools === undefined ||
-        value.label_markers === undefined ||
-        value.description_markers === undefined ||
-        value.description_window === undefined ||
-        value.parent_reference_pattern === undefined ||
-        value.parent_url_pattern === undefined ||
-        value.messages === undefined) {
-        return null;
-    }
-    return {
-        tools: value.tools,
-        labelMarkers: value.label_markers,
-        descriptionMarkers: value.description_markers,
-        descriptionWindow: value.description_window === null
-            ? null
-            : {
-                marker: value.description_window.marker,
-                contains: value.description_window.contains,
-                maxChars: value.description_window.max_chars,
-            },
-        parentReferencePattern: value.parent_reference_pattern,
-        parentUrlPattern: value.parent_url_pattern,
-        messages: {
-            reminder: value.messages.reminder,
-            secondOrder: value.messages.second_order,
-        },
-    };
-}
-function firstParentReference(description, pattern) {
-    if (pattern === null)
-        return null;
-    const match = description.match(new RegExp(pattern, "i"));
-    const capture = match?.[1];
-    return typeof capture === "string" && /^[0-9]+$/.test(capture) ? capture : null;
-}
-export function evaluateStayInScopeMatch(config, labels, description) {
-    const labelMatch = labels.some((label) => config.labelMarkers.some((marker) => label.toLowerCase().includes(marker.toLowerCase())));
-    const explicitMarker = config.descriptionMarkers.some((marker) => description.includes(marker));
-    const window = config.descriptionWindow;
-    const windowMatch = !explicitMarker &&
-        window !== null &&
-        (() => {
-            const index = description.indexOf(window.marker);
-            return index !== -1 && description.slice(index, index + window.maxChars).toLowerCase().includes(window.contains.toLowerCase());
-        })();
-    const matchedRule = labelMatch
-        ? "label"
-        : explicitMarker
-            ? "explicit-marker"
-            : windowMatch
-                ? "hintergrund-marker"
-                : "none";
-    const parentReference = firstParentReference(description, config.parentReferencePattern);
-    return {
-        matched: matchedRule !== "none",
-        matchedRule,
-        secondOrder: labelMatch && parentReference !== null,
-        parentReference,
-    };
-}
-export function extractConfiguredParentUrl(config, description, parentReference) {
-    if (config.parentUrlPattern !== null) {
-        const pattern = new RegExp(config.parentUrlPattern, "g");
-        let match;
-        while ((match = pattern.exec(description)) !== null) {
-            if (match[0].length > 0)
-                return match[0];
-            if (pattern.lastIndex >= description.length)
-                break;
-            pattern.lastIndex += 1;
-        }
-    }
-    return parentReference === null ? null : `#${parentReference}`;
-}
-//# sourceMappingURL=stay-in-scope-config.js.map

package/dist/policy-packs/builtin/understanding-before-execution/stay-in-scope-config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"stay-in-scope-config.js","sourceRoot":"","sources":["../../../../src/policy-packs/builtin/understanding-before-execution/stay-in-scope-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE;IAClF,OAAO,EAAE,mBAAmB;CAC7B,CAAC,CAAC;AAEH,wEAAwE;AACxE,wEAAwE;AACxE,qDAAqD;AACrD,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,EAAE;IACnE,OAAO,EAAE,2DAA2D;CACrE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAEhF,MAAM,uBAAuB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,MAAM,EAAE,cAAc;IACtB,QAAQ,EAAE,cAAc;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC9E,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO;IAC3B,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC,CAAC;IACpG,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IACxE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO;IAC3B,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC,CAAC;IACpG,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE;IACjD,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE;IACvD,kBAAkB,EAAE,uBAAuB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjE,wBAAwB,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IAC3D,kBAAkB,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IAC/C,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;SAClE,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO;IAC3B,KAAK,MAAM,GAAG,IAAI;QAChB,OAAO;QACP,eAAe;QACf,qBAAqB;QACrB,oBAAoB;QACpB,0BAA0B;QAC1B,oBAAoB;QACpB,UAAU;KACF,EAAE,CAAC;QACX,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;IACD,IACE,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC;QACxC,CAAC,KAAK,CAAC,mBAAmB,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC;QAC9C,KAAK,CAAC,kBAAkB,KAAK,IAAI,EACjC,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,2EAA2E;SACrF,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAYL,mEAAmE;AACnE,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;IAC1B,0EAA0E;IAC1E,wEAAwE;IACxE,IACE,KAAK,CAAC,KAAK,KAAK,SAAS;QACzB,KAAK,CAAC,aAAa,KAAK,SAAS;QACjC,KAAK,CAAC,mBAAmB,KAAK,SAAS;QACvC,KAAK,CAAC,kBAAkB,KAAK,SAAS;QACtC,KAAK,CAAC,wBAAwB,KAAK,SAAS;QAC5C,KAAK,CAAC,kBAAkB,KAAK,SAAS;QACtC,KAAK,CAAC,QAAQ,KAAK,SAAS,EAC5B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY,EAAE,KAAK,CAAC,aAAa;QACjC,kBAAkB,EAAE,KAAK,CAAC,mBAAmB;QAC7C,iBAAiB,EACf,KAAK,CAAC,kBAAkB,KAAK,IAAI;YAC/B,CAAC,CAAC,IAAI;YACN,CAAC,CAAC;gBACE,MAAM,EAAE,KAAK,CAAC,kBAAkB,CAAC,MAAM;gBACvC,QAAQ,EAAE,KAAK,CAAC,kBAAkB,CAAC,QAAQ;gBAC3C,QAAQ,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS;aAC7C;QACP,sBAAsB,EAAE,KAAK,CAAC,wBAAwB;QACtD,gBAAgB,EAAE,KAAK,CAAC,kBAAkB;QAC1C,QAAQ,EAAE;YACR,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ;YACjC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;SACzC;KACF,CAAC;AACJ,CAAC;AAWD,SAAS,oBAAoB,CAAC,WAAmB,EAAE,OAAsB;IACvE,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAAyB,EACzB,MAAyB,EACzB,WAAmB;IAEnB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CACzF,CAAC;IACF,MAAM,cAAc,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACxC,MAAM,WAAW,GACf,CAAC,cAAc;QACf,MAAM,KAAK,IAAI;QACf,CAAC,GAAG,EAAE;YACJ,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACjD,OAAO,KAAK,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QACjI,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,WAAW,GAA2B,UAAU;QACpD,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,cAAc;YACd,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,WAAW;gBACX,CAAC,CAAC,oBAAoB;gBACtB,CAAC,CAAC,MAAM,CAAC;IACf,MAAM,eAAe,GAAG,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACzF,OAAO;QACL,OAAO,EAAE,WAAW,KAAK,MAAM;QAC/B,WAAW;QACX,WAAW,EAAE,UAAU,IAAI,eAAe,KAAK,IAAI;QACnD,eAAe;KAChB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,MAAyB,EACzB,WAAmB,EACnB,eAA8B;IAE9B,IAAI,MAAM,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,KAA6B,CAAC;QAClC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;YACzC,IAAI,OAAO,CAAC,SAAS,IAAI,WAAW,CAAC,MAAM;gBAAE,MAAM;YACnD,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC;AACjE,CAAC"}

package/dist/policy-packs/builtin/understanding-before-execution/task-markers.d.ts

@@ -1,164 +0,0 @@
-import { type ApprovalMarker, type CheckApprovalMarkerOptions, type MarkerCheck } from "./markers.js";
-import { type ApprovalMarkerKind } from "./persisted-reports.js";
-export declare const APPROVAL_MARKER_TASK_PREFIX = "task-";
-/** Filesystem path of a per-task approval marker. */
-export declare function taskApprovalMarkerPathFor(generatedDir: string, taskId: string): string;
-/**
- * Operator-side: write a task-scoped marker file. Atomic. Caller is
- * `harness approve understanding --task <id>`. The session marker is
- * written separately by the same caller for back-compat.
- *
- * Signed the same way as `writeApprovalMarker` (harness/f9485cc7), using
- * `task-<id>` (the exact string `checkActiveClaimApprovalMarker` looks
- * up) as the signed markerId — so a validly-signed task marker cannot be
- * copied onto a different task id (or the session marker's id) and still
- * verify.
- */
-export declare function writeTaskApprovalMarker(generatedDir: string, taskId: string, marker: ApprovalMarker): string;
-/**
- * Gate-side: resolve the active agent-tasks claim (via `active-claim`)
- * and check ONLY that task's approval marker. When no active claim is
- * recorded, this returns `matched:false` so the caller falls through
- * to the session marker — preserving the legacy contract for solo /
- * non-agent-tasks workflows that never call `task_start`.
- *
- * Replaces the v1 "any task marker satisfies the gate" behaviour
- * (PR #198): a stale approval from a different, already-completed task
- * was silently authorising every Edit/Write/Bash in the next session
- * because the scan returned the first existing marker regardless of
- * which task the agent had actually claimed.
- *
- * Same safety filters as `checkApprovalMarker` (signature verification,
- * symlink rejection, optional freshness via `maxAgeMs`); the only
- * difference is the filename suffix derived from `active-claim`.
- */
-export declare function checkActiveClaimApprovalMarker(generatedDir: string, opts?: CheckApprovalMarkerOptions): MarkerCheck;
-export interface SessionMarkerCheck extends MarkerCheck {
-    /**
-     * True when a validly signed session marker existed but was refused
-     * because of its task binding (task 5018c0c4): it was granted for a
-     * different active claim than the current one, or it carries no
-     * binding at all (written by a release before the binding existed).
-     * `matched`, `expired` and `forged` are all false in that case: the
-     * gate treats it exactly like a missing marker.
-     */
-    bindingRefused: boolean;
-}
-/**
- * Gate-side: the session-keyed marker, accepted only while it belongs to
- * the current task (task 5018c0c4, operator decision: bind the session
- * marker to the task). `writeApprovalMarker` records the active-claim
- * task id at approval time (`null` when none was held); this reader
- * compares it with the active claim NOW and refuses the marker when the
- * two differ, so an approval never carries over to another task, even
- * when the previous task completed outside the session where no
- * PostToolUse hook could expire it (a merge in the UI, a webhook moving
- * the task to done). A marker without the binding field (older release)
- * is refused too: one fresh approve re-binds it.
- *
- * The binding is checked BEFORE the `maxAgeMs` verdict is passed on, so a
- * marker that belongs to another task never reads as `expired` (that
- * signal means "this task's own approval aged out" and opens the
- * recovery-git-commit exemption, see src/runtime/recovery-git-commit.ts).
- *
- * `opts.taskBinding` is required so every reader states it: pass
- * `!lifecycle.legacyMode`. Under `approval_lifecycle: { mode: session }`
- * (operator decision on task 5018c0c4) the binding is NOT applied: the
- * documented contract of that mode is one approval for the whole
- * session, bounded only by `max_age`, so a bound or unbound session
- * marker counts for every task there. The writer still records
- * `claimTaskId` in every mode, so switching away from `mode: session`
- * takes effect on the next check without a re-approve.
- */
-export interface CheckSessionApprovalMarkerOptions extends CheckApprovalMarkerOptions {
-    /** Apply the claimed-task binding (false under `mode: session`). */
-    taskBinding: boolean;
-}
-export declare function checkSessionApprovalMarker(generatedDir: string, sessionId: string, opts: CheckSessionApprovalMarkerOptions): SessionMarkerCheck;
-export interface OperatorMarkerApproval {
-    matched: boolean;
-    /** Which marker satisfied the gate; null when neither matched. */
-    source: "task" | "session" | null;
-    /** Detail of the decisive check (the match, or the session-scoped miss). */
-    detail: string;
-    /** Task-scoped check detail, for callers that trace the fall-through. */
-    taskCheckDetail: string;
-    /**
-     * The matched marker's signed `reportContentHash`; null when no marker
-     * matched or the matched marker binds no report. The gate-read
-     * cross-check (`verifyApprovedReportHash`) consumes it.
-     */
-    reportContentHash: string | null;
-    /**
-     * A session marker that ALSO matched behind a matched task marker whose
-     * signed hash is non-null (null otherwise). The gate-read cross-check
-     * falls back to it when the task marker's report content is gone: a task
-     * marker is not bound to a session, so it can be signed for another
-     * session's report while this session's own marker still verifies.
-     */
-    sessionFallback: {
-        detail: string;
-        reportContentHash: string | null;
-    } | null;
-    /**
-     * True when EITHER the task-scoped or the session-scoped marker
-     * existed but aged past `approval_lifecycle.max_age` (task 6e888423).
-     * False when `matched` is true, and false when a marker was simply
-     * absent (never approved, or cleared by a task-completion boundary
-     * tool) — distinguishing "this identity had a real approval that
-     * merely expired" from "this identity was never approved" / "a new
-     * task just started". PreToolUse hooks use this (never on its own —
-     * always alongside `isRecoveryGitCommit`) to decide whether a bare
-     * recovery `git commit` may proceed without a fresh Understanding
-     * Report; see src/runtime/recovery-git-commit.ts.
-     */
-    expired: boolean;
-    /**
-     * True when EITHER the task-scoped or the session-scoped marker
-     * existed but FAILED signature verification (harness/f9485cc7) —
-     * missing/invalid signature, wrong `alg`, or tampered payload. Distinct
-     * from a marker simply being absent, so a caller can log a forgery
-     * attempt distinctly from the routine "not approved yet" case.
-     */
-    forged: boolean;
-    /**
-     * True when the session marker was refused only because of its task
-     * binding (`SessionMarkerCheck.bindingRefused`, task 5018c0c4): it
-     * belongs to another task, or predates the binding. Always false when
-     * `matched` is true. Lets the PreToolUse hooks say "the approval
-     * belongs to another task" instead of "no approval marker".
-     */
-    sessionBindingRefused: boolean;
-}
-/**
- * Shared marker resolution for the Claude and Codex understanding-gate
- * PreToolUse hooks (task e7c2ec3c): parse `approval_lifecycle` from the
- * pack config, consult the task-scoped (active-claim) marker first and
- * the session-scoped marker second, both under the same TTL. One code
- * path on purpose — the Codex hook previously called the bare session
- * check, so `max_age` and task-scoping silently applied only to Claude
- * sessions.
- */
-export declare function checkOperatorApprovalMarkers(generatedDir: string, sessionId: string, packConfig: unknown, stderr?: {
-    write: (s: string) => void;
-} | null): OperatorMarkerApproval;
-/** Clear a specific task-scoped marker. Used by the post-tool-use hook. */
-export declare function clearTaskApprovalMarker(generatedDir: string, taskId: string): void;
-export type MatchedMarkerReportCheck = {
-    ok: true;
-    source: ApprovalMarkerKind;
-    detail: string;
-} | {
-    ok: false;
-    detail: string;
-};
-/**
- * Gate-read report cross-check for a matched operator marker, shared by the
- * Claude and Codex PreToolUse hooks (task fa423e9b). Applies
- * `verifyApprovedReportHash` to the matched marker and, when that fails and
- * a session marker matched behind a task marker, to the session marker, so
- * the verdict never depends on which marker the check order happened to
- * pick. On success `source`/`detail` describe the marker that verified; on
- * failure `detail` is the block reason.
- */
-export declare function verifyMatchedMarkerReport(reportsDir: string, markers: OperatorMarkerApproval): MatchedMarkerReportCheck;

package/dist/policy-packs/builtin/understanding-before-execution/task-markers.js

@@ -1,275 +0,0 @@
-// Task-scoped approval markers (harness/1ee26e77), split out of the
-// former monolithic understanding-before-execution-runtime.ts (structural
-// concentration slice 2, agent-tasks 348a4d42). Pure move: see
-// src/policy-packs/builtin/understanding-before-execution/index.ts for
-// the re-exported public surface.
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { atomicWriteFile } from "../../../io/atomic-write.js";
-import { signMarker } from "../../../runtime/approval-signing.js";
-import { readActiveClaim } from "./active-claim.js";
-import { parseApprovalLifecycle } from "./lifecycle.js";
-import { APPROVAL_MARKER_DIRNAME, checkApprovalMarker, } from "./markers.js";
-import { verifyApprovedReportHash, } from "./persisted-reports.js";
-// Task-scoped approval markers (harness/1ee26e77). When the operator
-// passes `--task <id>` to `harness approve understanding`, a second
-// marker file is written next to the session marker, keyed by the
-// agent-tasks task id and prefixed `task-` so a directory scan can
-// distinguish them from session-keyed markers (UUIDs do not start with
-// `task-`). Either marker satisfies the gate; the session marker
-// remains for back-compat with operators who don't pass --task and for
-// non-agent-tasks workflows.
-//
-// Why task-scope: a session can span many distinct tasks; the operator's
-// Understanding Report for task A doesn't transfer trust to task B
-// (different surface, different acceptance criteria). Without per-task
-// markers a multi-task session re-uses the first task's approval for
-// every subsequent task. The expire_on_tool_match PostToolUse hook
-// deletes the session marker on a listed completion boundary (a
-// `task_finish` to done, `task_abandon`, `task_merge`, ...), but if
-// delivery is unreliable (e.g. PostToolUse skipped for an MCP tool) or
-// the task completes outside the session (a merge in the UI), the file
-// persists. A task-keyed marker side-steps that delivery concern because
-// the next task's id is different even if the previous marker file
-// outlives its scope; outside `mode: session` the session marker gets
-// the same property from its signed task binding
-// (`checkSessionApprovalMarker`, task 5018c0c4).
-export const APPROVAL_MARKER_TASK_PREFIX = "task-";
-/**
- * Reject taskIds that would escape the approvals/ namespace via path
- * traversal or directory separators. The operator's --task flag value
- * lands here verbatim; an accidental shell-expanded `..` or `/` would
- * otherwise write to a sibling directory. This is defensive — the
- * caller is the operator's own shell — but pins the trust boundary.
- */
-function rejectMalformedTaskId(taskId) {
-    if (taskId.length === 0) {
-        throw new Error("taskId is empty");
-    }
-    if (taskId.includes("/") || taskId.includes("\\") || taskId.includes("..")) {
-        throw new Error(`taskId contains path-separator or traversal characters: ${JSON.stringify(taskId)}`);
-    }
-}
-/** Filesystem path of a per-task approval marker. */
-export function taskApprovalMarkerPathFor(generatedDir, taskId) {
-    rejectMalformedTaskId(taskId);
-    return path.join(generatedDir, APPROVAL_MARKER_DIRNAME, `${APPROVAL_MARKER_TASK_PREFIX}${taskId}`);
-}
-/**
- * Operator-side: write a task-scoped marker file. Atomic. Caller is
- * `harness approve understanding --task <id>`. The session marker is
- * written separately by the same caller for back-compat.
- *
- * Signed the same way as `writeApprovalMarker` (harness/f9485cc7), using
- * `task-<id>` (the exact string `checkActiveClaimApprovalMarker` looks
- * up) as the signed markerId — so a validly-signed task marker cannot be
- * copied onto a different task id (or the session marker's id) and still
- * verify.
- */
-export function writeTaskApprovalMarker(generatedDir, taskId, marker) {
-    const filePath = taskApprovalMarkerPathFor(generatedDir, taskId);
-    const markerId = `${APPROVAL_MARKER_TASK_PREFIX}${taskId}`;
-    const signed = signMarker(generatedDir, markerId, marker);
-    atomicWriteFile(filePath, `${JSON.stringify(signed, null, 2)}\n`, { mode: 0o600 });
-    return filePath;
-}
-/**
- * Gate-side: resolve the active agent-tasks claim (via `active-claim`)
- * and check ONLY that task's approval marker. When no active claim is
- * recorded, this returns `matched:false` so the caller falls through
- * to the session marker — preserving the legacy contract for solo /
- * non-agent-tasks workflows that never call `task_start`.
- *
- * Replaces the v1 "any task marker satisfies the gate" behaviour
- * (PR #198): a stale approval from a different, already-completed task
- * was silently authorising every Edit/Write/Bash in the next session
- * because the scan returned the first existing marker regardless of
- * which task the agent had actually claimed.
- *
- * Same safety filters as `checkApprovalMarker` (signature verification,
- * symlink rejection, optional freshness via `maxAgeMs`); the only
- * difference is the filename suffix derived from `active-claim`.
- */
-export function checkActiveClaimApprovalMarker(generatedDir, opts = {}) {
-    const claim = readActiveClaim(generatedDir);
-    if (claim === null) {
-        return {
-            matched: false,
-            detail: `no active-claim recorded; task-scoped check skipped`,
-            marker: null,
-            expired: false,
-            forged: false,
-        };
-    }
-    const markerName = `${APPROVAL_MARKER_TASK_PREFIX}${claim}`;
-    const check = checkApprovalMarker(generatedDir, markerName, opts);
-    if (check.matched) {
-        return {
-            matched: true,
-            detail: `task-scoped marker for active-claim ${claim}: ${check.detail}`,
-            marker: check.marker,
-            expired: false,
-            forged: false,
-        };
-    }
-    return {
-        matched: false,
-        detail: `active-claim ${claim} has no fresh task marker (${check.detail})`,
-        marker: null,
-        expired: check.expired,
-        forged: check.forged,
-    };
-}
-function describeClaim(taskId) {
-    return taskId === null ? "no claimed task" : `task ${taskId}`;
-}
-export function checkSessionApprovalMarker(generatedDir, sessionId, opts) {
-    const { taskBinding, ...ageOpts } = opts;
-    const check = checkApprovalMarker(generatedDir, sessionId, ageOpts);
-    if (check.marker === null || !taskBinding) {
-        // Absent, unreadable, forged, or a malformed session id: nothing to
-        // bind, the plain verdict stands. Same under `mode: session`, where
-        // the binding does not apply.
-        return { ...check, bindingRefused: false };
-    }
-    const refused = (detail) => ({
-        matched: false,
-        detail,
-        marker: null,
-        expired: false,
-        forged: false,
-        bindingRefused: true,
-    });
-    if (!Object.prototype.hasOwnProperty.call(check.marker, "claimTaskId")) {
-        return refused(`session approval marker for ${sessionId} carries no task binding (written by a harness release before approvals were bound to the claimed task); approve once more to bind it to ${describeClaim(readActiveClaim(generatedDir))}`);
-    }
-    const boundTo = check.marker.claimTaskId ?? null;
-    const current = readActiveClaim(generatedDir);
-    if (boundTo !== current) {
-        return refused(`session approval for ${sessionId} belongs to another task: it was granted for ${describeClaim(boundTo)}, the active claim is now ${describeClaim(current)}; approve the Understanding Report for this task`);
-    }
-    return { ...check, bindingRefused: false };
-}
-/**
- * Shared marker resolution for the Claude and Codex understanding-gate
- * PreToolUse hooks (task e7c2ec3c): parse `approval_lifecycle` from the
- * pack config, consult the task-scoped (active-claim) marker first and
- * the session-scoped marker second, both under the same TTL. One code
- * path on purpose — the Codex hook previously called the bare session
- * check, so `max_age` and task-scoping silently applied only to Claude
- * sessions.
- */
-export function checkOperatorApprovalMarkers(generatedDir, sessionId, packConfig, stderr) {
-    const lifecycleRaw = packConfig !== null && typeof packConfig === "object" && !Array.isArray(packConfig)
-        ? packConfig["approval_lifecycle"]
-        : undefined;
-    const lifecycle = parseApprovalLifecycle(lifecycleRaw, stderr);
-    const ageOpts = lifecycle.maxAgeMs !== undefined ? { maxAgeMs: lifecycle.maxAgeMs } : {};
-    const taskMarker = checkActiveClaimApprovalMarker(generatedDir, ageOpts);
-    if (taskMarker.matched) {
-        const taskHash = taskMarker.marker?.reportContentHash ?? null;
-        // Only a task marker that binds a report can fail the gate-read hash
-        // check, so only then is the session marker read as its fallback.
-        const sessionFallback = taskHash === null
-            ? null
-            : (() => {
-                const fallback = checkSessionApprovalMarker(generatedDir, sessionId, {
-                    ...ageOpts,
-                    taskBinding: !lifecycle.legacyMode,
-                });
-                return fallback.matched
-                    ? {
-                        detail: fallback.detail,
-                        reportContentHash: fallback.marker?.reportContentHash ?? null,
-                    }
-                    : null;
-            })();
-        return {
-            matched: true,
-            source: "task",
-            detail: taskMarker.detail,
-            taskCheckDetail: taskMarker.detail,
-            reportContentHash: taskHash,
-            sessionFallback,
-            expired: false,
-            forged: false,
-            sessionBindingRefused: false,
-        };
-    }
-    const sessionMarker = checkSessionApprovalMarker(generatedDir, sessionId, {
-        ...ageOpts,
-        taskBinding: !lifecycle.legacyMode,
-    });
-    if (sessionMarker.matched) {
-        return {
-            matched: true,
-            source: "session",
-            detail: sessionMarker.detail,
-            taskCheckDetail: taskMarker.detail,
-            reportContentHash: sessionMarker.marker?.reportContentHash ?? null,
-            sessionFallback: null,
-            expired: false,
-            forged: false,
-            sessionBindingRefused: false,
-        };
-    }
-    return {
-        matched: false,
-        source: null,
-        detail: sessionMarker.detail,
-        taskCheckDetail: taskMarker.detail,
-        reportContentHash: null,
-        sessionFallback: null,
-        // `expired` is computed ONLY on this non-matched path, preserving the
-        // "false when matched is true" invariant (task 6e888423 review):
-        // e.g. a FRESH session marker (matched:true, returned above) must not
-        // read expired:true just because a STALE sibling task marker also
-        // exists — that sibling is irrelevant once the session marker itself
-        // satisfied the gate. Either marker aged out counts here: a
-        // task-scoped approval that expired (even though the session-scoped
-        // check may simply have never existed) is just as legitimate a "this
-        // had approval, it lapsed" signal as a session-scoped expiry.
-        expired: taskMarker.expired || sessionMarker.expired,
-        // Surfaced so a forgery attempt against EITHER marker is visible to
-        // the caller even though the overall result is (correctly) unmatched
-        // — mirrors the `expired` OR-merge above.
-        forged: taskMarker.forged || sessionMarker.forged,
-        sessionBindingRefused: sessionMarker.bindingRefused,
-    };
-}
-/** Clear a specific task-scoped marker. Used by the post-tool-use hook. */
-export function clearTaskApprovalMarker(generatedDir, taskId) {
-    try {
-        fs.rmSync(taskApprovalMarkerPathFor(generatedDir, taskId));
-    }
-    catch {
-        /* already gone */
-    }
-}
-/**
- * Gate-read report cross-check for a matched operator marker, shared by the
- * Claude and Codex PreToolUse hooks (task fa423e9b). Applies
- * `verifyApprovedReportHash` to the matched marker and, when that fails and
- * a session marker matched behind a task marker, to the session marker, so
- * the verdict never depends on which marker the check order happened to
- * pick. On success `source`/`detail` describe the marker that verified; on
- * failure `detail` is the block reason.
- */
-export function verifyMatchedMarkerReport(reportsDir, markers) {
-    const source = markers.source === "task" ? "task" : "session";
-    const primary = {
-        kind: source,
-        reportContentHash: markers.reportContentHash,
-    };
-    const fallback = markers.sessionFallback === null
-        ? null
-        : { kind: "session", reportContentHash: markers.sessionFallback.reportContentHash };
-    const verdict = verifyApprovedReportHash(reportsDir, primary, fallback);
-    if (!verdict.ok)
-        return verdict;
-    if (verdict.kind === primary.kind || markers.sessionFallback === null) {
-        return { ok: true, source: verdict.kind, detail: markers.detail };
-    }
-    return { ok: true, source: "session", detail: markers.sessionFallback.detail };
-}
-//# sourceMappingURL=task-markers.js.map

package/dist/policy-packs/builtin/understanding-before-execution/task-markers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"task-markers.js","sourceRoot":"","sources":["../../../../src/policy-packs/builtin/understanding-before-execution/task-markers.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,0EAA0E;AAC1E,+DAA+D;AAC/D,uEAAuE;AACvE,kCAAkC;AAElC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,sCAAsC,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EACL,uBAAuB,EAEvB,mBAAmB,GAGpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAGL,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAEhC,qEAAqE;AACrE,oEAAoE;AACpE,kEAAkE;AAClE,mEAAmE;AACnE,uEAAuE;AACvE,iEAAiE;AACjE,uEAAuE;AACvE,6BAA6B;AAC7B,EAAE;AACF,yEAAyE;AACzE,mEAAmE;AACnE,uEAAuE;AACvE,qEAAqE;AACrE,mEAAmE;AACnE,gEAAgE;AAChE,oEAAoE;AACpE,uEAAuE;AACvE,uEAAuE;AACvE,yEAAyE;AACzE,mEAAmE;AACnE,sEAAsE;AACtE,iDAAiD;AACjD,iDAAiD;AAEjD,MAAM,CAAC,MAAM,2BAA2B,GAAG,OAAO,CAAC;AAEnD;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,MAAc;IAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CACb,2DAA2D,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CACpF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,yBAAyB,CAAC,YAAoB,EAAE,MAAc;IAC5E,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,uBAAuB,EAAE,GAAG,2BAA2B,GAAG,MAAM,EAAE,CAAC,CAAC;AACrG,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CACrC,YAAoB,EACpB,MAAc,EACd,MAAsB;IAEtB,MAAM,QAAQ,GAAG,yBAAyB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,GAAG,2BAA2B,GAAG,MAAM,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1D,eAAe,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,8BAA8B,CAC5C,YAAoB,EACpB,OAAmC,EAAE;IAErC,MAAM,KAAK,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,qDAAqD;YAC7D,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,2BAA2B,GAAG,KAAK,EAAE,CAAC;IAC5D,MAAM,KAAK,GAAG,mBAAmB,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,uCAAuC,KAAK,KAAK,KAAK,CAAC,MAAM,EAAE;YACvE,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,gBAAgB,KAAK,8BAA8B,KAAK,CAAC,MAAM,GAAG;QAC1E,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC;AAcD,SAAS,aAAa,CAAC,MAAqB;IAC1C,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC;AAChE,CAAC;AAiCD,MAAM,UAAU,0BAA0B,CACxC,YAAoB,EACpB,SAAiB,EACjB,IAAuC;IAEvC,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC;IACzC,MAAM,KAAK,GAAG,mBAAmB,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACpE,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,oEAAoE;QACpE,oEAAoE;QACpE,8BAA8B;QAC9B,OAAO,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,MAAc,EAAsB,EAAE,CAAC,CAAC;QACvD,OAAO,EAAE,KAAK;QACd,MAAM;QACN,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,KAAK;QACb,cAAc,EAAE,IAAI;KACrB,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;QACvE,OAAO,OAAO,CACZ,+BAA+B,SAAS,4IAA4I,aAAa,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,EAAE,CACnO,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC;IACjD,MAAM,OAAO,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO,OAAO,CACZ,wBAAwB,SAAS,gDAAgD,aAAa,CAAC,OAAO,CAAC,6BAA6B,aAAa,CAAC,OAAO,CAAC,kDAAkD,CAC7M,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;AAC7C,CAAC;AAuDD;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAC1C,YAAoB,EACpB,SAAiB,EACjB,UAAmB,EACnB,MAA8C;IAE9C,MAAM,YAAY,GAChB,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QACjF,CAAC,CAAE,UAAsC,CAAC,oBAAoB,CAAC;QAC/D,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,SAAS,GAAG,sBAAsB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC/D,MAAM,OAAO,GACX,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,MAAM,UAAU,GAAG,8BAA8B,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACzE,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,iBAAiB,IAAI,IAAI,CAAC;QAC9D,qEAAqE;QACrE,kEAAkE;QAClE,MAAM,eAAe,GACnB,QAAQ,KAAK,IAAI;YACf,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,CAAC,GAAG,EAAE;gBACJ,MAAM,QAAQ,GAAG,0BAA0B,CAAC,YAAY,EAAE,SAAS,EAAE;oBACnE,GAAG,OAAO;oBACV,WAAW,EAAE,CAAC,SAAS,CAAC,UAAU;iBACnC,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC,OAAO;oBACrB,CAAC,CAAC;wBACE,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,iBAAiB,EAAE,QAAQ,CAAC,MAAM,EAAE,iBAAiB,IAAI,IAAI;qBAC9D;oBACH,CAAC,CAAC,IAAI,CAAC;YACX,CAAC,CAAC,EAAE,CAAC;QACX,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,eAAe,EAAE,UAAU,CAAC,MAAM;YAClC,iBAAiB,EAAE,QAAQ;YAC3B,eAAe;YACf,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;YACb,qBAAqB,EAAE,KAAK;SAC7B,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,0BAA0B,CAAC,YAAY,EAAE,SAAS,EAAE;QACxE,GAAG,OAAO;QACV,WAAW,EAAE,CAAC,SAAS,CAAC,UAAU;KACnC,CAAC,CAAC;IACH,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,eAAe,EAAE,UAAU,CAAC,MAAM;YAClC,iBAAiB,EAAE,aAAa,CAAC,MAAM,EAAE,iBAAiB,IAAI,IAAI;YAClE,eAAe,EAAE,IAAI;YACrB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;YACb,qBAAqB,EAAE,KAAK;SAC7B,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,aAAa,CAAC,MAAM;QAC5B,eAAe,EAAE,UAAU,CAAC,MAAM;QAClC,iBAAiB,EAAE,IAAI;QACvB,eAAe,EAAE,IAAI;QACrB,sEAAsE;QACtE,iEAAiE;QACjE,sEAAsE;QACtE,kEAAkE;QAClE,qEAAqE;QACrE,4DAA4D;QAC5D,oEAAoE;QACpE,qEAAqE;QACrE,8DAA8D;QAC9D,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,aAAa,CAAC,OAAO;QACpD,oEAAoE;QACpE,qEAAqE;QACrE,0CAA0C;QAC1C,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM;QACjD,qBAAqB,EAAE,aAAa,CAAC,cAAc;KACpD,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,uBAAuB,CAAC,YAAoB,EAAE,MAAc;IAC1E,IAAI,CAAC;QACH,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;AACH,CAAC;AAMD;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CACvC,UAAkB,EAClB,OAA+B;IAE/B,MAAM,MAAM,GAAuB,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,MAAM,OAAO,GAAwB;QACnC,IAAI,EAAE,MAAM;QACZ,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;KAC7C,CAAC;IACF,MAAM,QAAQ,GACZ,OAAO,CAAC,eAAe,KAAK,IAAI;QAC9B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,iBAAiB,EAAE,OAAO,CAAC,eAAe,CAAC,iBAAiB,EAAE,CAAC;IACxF,MAAM,OAAO,GAAG,wBAAwB,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxE,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QACtE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;AACjF,CAAC"}

package/dist/policy-packs/builtin/understanding-before-execution-runtime.d.ts

@@ -1 +0,0 @@
-export * from "./understanding-before-execution/index.js";

package/dist/policy-packs/builtin/understanding-before-execution-runtime.js

@@ -1,10 +0,0 @@
-// Re-export shim. The implementation moved to
-// ./understanding-before-execution/ (structural concentration slice 2,
-// agent-tasks 348a4d42), split into one sibling file per concern:
-// ledger.ts, markers.ts, persisted-reports.ts, lifecycle.ts,
-// task-markers.ts, post-tool-use-boundary.ts, active-claim.ts, composed
-// by index.ts. Kept at this path so every existing import across the repo
-// (hook-pre-tool-use.ts, hook-codex-pre-tool-use.ts,
-// cli/approve/understanding.ts, tests, etc.) keeps working unchanged.
-export * from "./understanding-before-execution/index.js";
-//# sourceMappingURL=understanding-before-execution-runtime.js.map

package/dist/policy-packs/builtin/understanding-before-execution-runtime.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"understanding-before-execution-runtime.js","sourceRoot":"","sources":["../../../src/policy-packs/builtin/understanding-before-execution-runtime.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,uEAAuE;AACvE,kEAAkE;AAClE,6DAA6D;AAC7D,wEAAwE;AACxE,0EAA0E;AAC1E,qDAAqD;AACrD,sEAAsE;AACtE,cAAc,2CAA2C,CAAC"}