@lannguyensi/harness 0.63.0 → 1.0.0

package/dist/schema/policies.js

@@ -1,298 +0,0 @@
-import { z } from "zod";
-import { MatchableEnvironmentSchema } from "./environments.js";
-import { ExtractMapSchema, InputMatchMapSchema } from "./extract.js";
-import { HookEventSchema } from "./hooks.js";
-import { RequiresSchema, isBuiltinVariable, referencedVariables } from "./requires.js";
-import { RiskCategorySchema, RiskSeveritySchema } from "./risk.js";
-// `trigger:`: the WHICH-tool-calls filter. Every declared field is
-// ANDed: `match` on the tool name, `path_match` on the edited file path,
-// `bash_match` on the shell command text, and `input_match` (task
-// 2699b476) on the tool call's own arguments.
-//
-// `input_match` exists because the other three cannot express "this MCP
-// verb, but only in the mode that actually does the dangerous thing".
-// `mcp__agent-tasks__task_finish` is the motivating shape: the same verb
-// either merges the PR (`autoMerge: true`) or just advances the task, and
-// a name-only trigger would have to gate both or neither. Keys are
-// `toolArgs.`-namespaced extract expressions (the SAME grammar and parser
-// `extract` uses, `src/schema/extract.ts` + `src/io/extract.ts`), values
-// are literals compared by strict equality; a missing path never matches.
-// See `firstInputMatchMismatch` in `src/io/extract.ts` for the evaluator
-// `policyMatchesEvent` and `harness policy dry-run` both call.
-export const PolicyTriggerSchema = z
-    .object({
-    event: HookEventSchema,
-    match: z.string().min(1).optional(),
-    path_match: z.string().min(1).optional(),
-    bash_match: z.string().min(1).optional(),
-    input_match: InputMatchMapSchema.optional(),
-    extract: ExtractMapSchema.optional(),
-})
-    .strict();
-// How a policy acts when its `requires:` evidence is absent:
-//   block            — deny the tool call.
-//   warn             — let the call proceed, record + surface a warning.
-//   require_approval  — Phase 7 #5. The evaluator returns a first-class
-//                       `require_approval` outcome, distinct from `deny`
-//                       and `warn`; Phase 7 #6 makes it actually block
-//                       until matching approval evidence exists in the
-//                       ledger. A `block` / `warn` policy is unchanged.
-export const PolicyEnforcementSchema = z.enum([
-    "block",
-    "warn",
-    "require_approval",
-]);
-// `producers:` is the structured remediation hint the policy engine
-// appends to the deny envelope. Each entry tells the agent ONE concrete
-// way to produce the ledger evidence that would unblock the gate.
-// Three kinds today:
-//   bash — shell command the agent can run (gated by the Bash hook).
-//   mcp  — MCP tool call (NOT gated by the Bash hook; the ungated
-//          recovery path for lockout scenarios — see [[feedback_understanding_gate_lockout_recovery]]).
-//   ask  — bare bash command the harness pre-tool-use hook escapes
-//          via ask-path semantics (e.g. `harness approve understanding`).
-//          Operator's "go" on the prompt IS the approval.
-//
-// At least one `mcp` producer is required when the field is set, so an
-// agent that gets blocked by an unrelated gate (e.g. understanding-gate
-// has Bash locked down entirely) still has an ungated recovery path
-// (PR agent-tasks/3804b785).
-export const ProducerSchema = z.discriminatedUnion("kind", [
-    z
-        .object({
-        kind: z.literal("bash"),
-        command: z.string().min(1),
-        description: z.string().min(1),
-    })
-        .strict(),
-    z
-        .object({
-        kind: z.literal("mcp"),
-        verb: z.string().min(1),
-        example: z.string().min(1),
-        description: z.string().min(1),
-    })
-        .strict(),
-    z
-        .object({
-        kind: z.literal("ask"),
-        command: z.string().min(1),
-        description: z.string().min(1),
-    })
-        .strict(),
-]);
-// `ux:` is the agent-facing translation of an engine-internal block.
-//
-// When a policy denies a tool call, the engine has two readers: the
-// audit ledger (which wants every internal detail: tag, hint,
-// matchedCount, session) and the agent (which only needs to know what
-// it cannot do, what condition is missing, and which command satisfies
-// it). The legacy deny envelope leaks engine vocabulary
-// ("no matching ledger entry for tag preflight:harness") to both.
-//
-// `ux:`, when declared, replaces the agent-facing reason text with a
-// structured, plain-language form: a `cannot` sentence, a `required:`
-// list of human-readable preconditions, and a `run:` list of exact
-// commands. The internal decision (PolicyDecision.reason, recordHint,
-// matchedCount) is unchanged and still written to the audit ledger.
-//
-// All three fields are templates: `${VAR}` references resolve against
-// the same extract.values map the ledger_tag was substituted with, so
-// the rendered text reflects the exact context the agent just hit at
-// block time.
-// Builtins (SESSION_ID / REPO / BRANCH / TOOL_NAME / CWD) are
-// available even when the policy declares no `trigger.extract` map.
-export const PolicyUxSchema = z
-    .object({
-    cannot: z.string().min(1),
-    required: z.array(z.string().min(1)).min(1),
-    run: z.array(z.string().min(1)).min(1),
-})
-    .strict();
-// `when:` — the risk/environment-aware match layer.
-//
-// STATUS: live as of Phase 7 #5. `harness policy intercept` ANDs a
-// declared `when:` onto the policy's `trigger:` match, evaluating it
-// against the Action Envelope enriched by the Risk Classifier (#3) and
-// Context Resolver (#4). A policy with no `when:` matches on `trigger:`
-// alone, exactly as in Phase 4. See src/runtime/when-eval.ts for the
-// evaluator and docs/risk-gate.md for the clause semantics.
-//
-// Each clause is optional and keyed by the envelope path it tests:
-//   risk.severity_at_least — envelope risk severity at or above this
-//                            rung of the ordered scale.
-//   risk.category_in       — envelope risk carries any of these
-//                            categories.
-//   environment.name       — resolved environment equals this name
-//                            (`unknown` is matchable: unknown is not
-//                            safe).
-//   action.reversible      — envelope action reversibility flag.
-//   action.deletion_target_unresolvable — a deletion-verb command (`rm
-//                            -r*`/`-f*`, `find ... -delete`, `git clean
-//                            -f*`) whose target(s) could not be
-//                            statically proven inside a declared
-//                            `risk.safe_deletion_roots` entry. UNLIKE the
-//                            four clauses above, this one is NEVER
-//                            subject to the "unknown is not safe"
-//                            fail-close: an action the deletion resolver
-//                            does not recognize as a deletion verb at
-//                            all does not satisfy this clause, so a
-//                            policy gated purely on it does not need an
-//                            `environment.name` scope to avoid firing on
-//                            every unrelated unclassified command — see
-//                            src/runtime/when-eval.ts and
-//                            src/runtime/deletion-target-resolve.ts.
-//                            ONLY `true` is a meaningful value (task
-//                            d03af8f6, review round 2): a resolver
-//                            verdict is either `unresolvable: true` (gate
-//                            it) or the action never reaches this clause
-//                            at all (a resolved-safe target or a
-//                            non-deletion command both simply fail to
-//                            match `true`) — `false` would match every
-//                            non-deletion-verb command in the manifest
-//                            (verdict `null` -> "actual" false -> equals
-//                            declared `false`), which is never the
-//                            intent of a `when:` clause naming this key.
-//                            The schema accepts only the literal `true`;
-//                            `false` is a validate-time error.
-// An empty `when: {}` is rejected: it would be a silent no-op.
-export const PolicyWhenSchema = z
-    .object({
-    "risk.severity_at_least": RiskSeveritySchema.optional(),
-    "risk.category_in": z.array(RiskCategorySchema).min(1).optional(),
-    "environment.name": MatchableEnvironmentSchema.optional(),
-    "action.reversible": z.boolean().optional(),
-    "action.deletion_target_unresolvable": z.literal(true).optional(),
-})
-    .strict()
-    .superRefine((when, ctx) => {
-    if (Object.keys(when).length === 0) {
-        ctx.addIssue({
-            code: z.ZodIssueCode.custom,
-            path: [],
-            message: "policy.when must declare at least one clause; an empty when: {} is a silent no-op",
-        });
-    }
-});
-// `operator_only: true` — the unconditional operator-only deny (task
-// 2cc73f55). Every other `block` policy names `requires.ledger_tag`
-// evidence, but the only satisfaction primitives the engine has —
-// a ledger tag (writable in-session via
-// `mcp__grounding-mcp__ledger_add`) or a filesystem marker (operator-
-// only only while a gate already locks Bash/Write down, circular on a
-// default install) — are agent-satisfiable. That leaves no honest way to
-// express "the agent may NEVER do this, and cannot self-satisfy it this
-// session" — see the three `deny-*` kill-switch policies in
-// `src/cli/init/templates.ts`, which had to ship with permanent
-// self-attestation warnings for exactly this reason.
-//
-// `operator_only: true` closes that gap by omission rather than by
-// naming a fake evidence source: the policy declares NO `requires:` at
-// all, and `intercept()` (`src/runtime/intercept.ts`) short-circuits
-// before the `requires` pipeline entirely — no ledger query, no
-// template substitution, no `evaluateRequires` call — so there is
-// nothing an in-session actor (ledger write, marker file, env flag) can
-// ever produce that flips the outcome to allow. Restricted to
-// `enforcement: block`: `warn` and `require_approval` already have
-// their own always-evaluated evidence paths, and require_approval's
-// canonical unblock is the `harness approve risk` operator verb, not a
-// requires-satisfaction story this marker would replace.
-//
-// Mutually exclusive with `requires:` AND `producers:` by construction
-// (both enforced below): declaring `requires:` alongside it would be
-// self-contradictory — an unconditional deny that also names an
-// in-session-satisfiable evidence tag nobody will ever evaluate.
-// `producers:` is the same class of contradiction one level up: it
-// describes a documented way to PRODUCE the evidence that unblocks the
-// gate ("here is a legitimate way to satisfy this"), but `operator_only:
-// true` never evaluates any evidence at all, so a declared producer
-// would misrepresent the gate as satisfiable when it structurally is
-// not. `checkPolicySelfAttestation` (`src/cli/validate/checks.ts`)
-// treats `operator_only: true` as correct-by-construction and emits
-// neither the "declares no producers" warning nor a --strict error for
-// it, since there is no undocumented evidence source to flag.
-export const PolicySchema = z
-    .object({
-    name: z.string().min(1),
-    description: z.string().min(1),
-    trigger: PolicyTriggerSchema,
-    requires: RequiresSchema.optional(),
-    hook: z.string().min(1),
-    enforcement: PolicyEnforcementSchema,
-    operator_only: z.boolean().optional(),
-    producers: z.array(ProducerSchema).min(1).optional(),
-    ux: PolicyUxSchema.optional(),
-    when: PolicyWhenSchema.optional(),
-})
-    .strict()
-    .superRefine((policy, ctx) => {
-    if (policy.operator_only === true) {
-        if (policy.enforcement !== "block") {
-            ctx.addIssue({
-                code: z.ZodIssueCode.custom,
-                path: ["operator_only"],
-                message: "operator_only: true is only meaningful for enforcement: block (an unconditional operator-only deny); warn / require_approval already have their own always-evaluated evidence paths",
-            });
-        }
-        if (policy.requires !== undefined) {
-            ctx.addIssue({
-                code: z.ZodIssueCode.custom,
-                path: ["requires"],
-                message: "operator_only: true policies must not also declare requires: — an unconditional deny that also names in-session-satisfiable evidence is self-contradictory; drop requires: (the policy never evaluates it)",
-            });
-        }
-        if (policy.producers !== undefined) {
-            ctx.addIssue({
-                code: z.ZodIssueCode.custom,
-                path: ["producers"],
-                message: "operator_only: true policies must not also declare producers: — producers describe a documented way to satisfy the gate, but an unconditional deny never evaluates any evidence, so a declared producer would misrepresent it as satisfiable; drop producers: (or drop operator_only: true if you actually want a satisfiable requires: gate)",
-            });
-        }
-    }
-    else if (policy.requires === undefined) {
-        ctx.addIssue({
-            code: z.ZodIssueCode.custom,
-            path: ["requires"],
-            message: "requires is mandatory unless the policy declares operator_only: true (an unconditional operator-only deny)",
-        });
-    }
-    if (policy.requires !== undefined) {
-        const refs = referencedVariables(policy.requires.ledger_tag);
-        const declared = new Set(Object.keys(policy.trigger.extract ?? {}));
-        for (const v of refs) {
-            if (isBuiltinVariable(v))
-                continue;
-            if (!declared.has(v)) {
-                ctx.addIssue({
-                    code: z.ZodIssueCode.custom,
-                    path: ["requires", "ledger_tag"],
-                    message: `requires.ledger_tag references \${${v}} but no matching trigger.extract entry was declared`,
-                });
-            }
-        }
-    }
-    if (policy.producers !== undefined) {
-        const hasMcp = policy.producers.some((p) => p.kind === "mcp");
-        if (!hasMcp) {
-            ctx.addIssue({
-                code: z.ZodIssueCode.custom,
-                path: ["producers"],
-                message: "at least one producer with kind:mcp is required so agents have an ungated recovery path when the Bash hook is locked down",
-            });
-        }
-    }
-});
-export const PoliciesSchema = z.array(PolicySchema).superRefine((policies, ctx) => {
-    const seen = new Set();
-    policies.forEach((p, i) => {
-        if (seen.has(p.name)) {
-            ctx.addIssue({
-                code: z.ZodIssueCode.custom,
-                path: [i, "name"],
-                message: `duplicate policy name: ${p.name}`,
-            });
-        }
-        seen.add(p.name);
-    });
-});
-//# sourceMappingURL=policies.js.map

package/dist/schema/policies.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"policies.js","sourceRoot":"","sources":["../../src/schema/policies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAEnE,mEAAmE;AACnE,yEAAyE;AACzE,kEAAkE;AAClE,8CAA8C;AAC9C,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,yEAAyE;AACzE,0EAA0E;AAC1E,mEAAmE;AACnE,0EAA0E;AAC1E,yEAAyE;AACzE,0EAA0E;AAC1E,yEAAyE;AACzE,+DAA+D;AAC/D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,KAAK,EAAE,eAAe;IACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC3C,OAAO,EAAE,gBAAgB,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,6DAA6D;AAC7D,2CAA2C;AAC3C,yEAAyE;AACzE,wEAAwE;AACxE,yEAAyE;AACzE,uEAAuE;AACvE,uEAAuE;AACvE,wEAAwE;AACxE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC5C,OAAO;IACP,MAAM;IACN,kBAAkB;CACnB,CAAC,CAAC;AAEH,oEAAoE;AACpE,wEAAwE;AACxE,kEAAkE;AAClE,qBAAqB;AACrB,qEAAqE;AACrE,kEAAkE;AAClE,wGAAwG;AACxG,mEAAmE;AACnE,0EAA0E;AAC1E,0DAA0D;AAC1D,EAAE;AACF,uEAAuE;AACvE,wEAAwE;AACxE,oEAAoE;AACpE,6BAA6B;AAC7B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACzD,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC/B,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC/B,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC/B,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,qEAAqE;AACrE,EAAE;AACF,oEAAoE;AACpE,8DAA8D;AAC9D,sEAAsE;AACtE,uEAAuE;AACvE,wDAAwD;AACxD,kEAAkE;AAClE,EAAE;AACF,qEAAqE;AACrE,sEAAsE;AACtE,mEAAmE;AACnE,sEAAsE;AACtE,oEAAoE;AACpE,EAAE;AACF,sEAAsE;AACtE,sEAAsE;AACtE,qEAAqE;AACrE,cAAc;AACd,8DAA8D;AAC9D,oEAAoE;AACpE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACvC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,oDAAoD;AACpD,EAAE;AACF,mEAAmE;AACnE,qEAAqE;AACrE,uEAAuE;AACvE,wEAAwE;AACxE,qEAAqE;AACrE,4DAA4D;AAC5D,EAAE;AACF,mEAAmE;AACnE,qEAAqE;AACrE,wDAAwD;AACxD,gEAAgE;AAChE,yCAAyC;AACzC,mEAAmE;AACnE,qEAAqE;AACrE,oCAAoC;AACpC,iEAAiE;AACjE,uEAAuE;AACvE,wEAAwE;AACxE,gEAAgE;AAChE,iEAAiE;AACjE,0EAA0E;AAC1E,mEAAmE;AACnE,kEAAkE;AAClE,yEAAyE;AACzE,sEAAsE;AACtE,oEAAoE;AACpE,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AACxE,0DAA0D;AAC1D,qEAAqE;AACrE,qEAAqE;AACrE,mEAAmE;AACnE,0EAA0E;AAC1E,yEAAyE;AACzE,iEAAiE;AACjE,sEAAsE;AACtE,uEAAuE;AACvE,uEAAuE;AACvE,yEAAyE;AACzE,mEAAmE;AACnE,yEAAyE;AACzE,yEAAyE;AACzE,+DAA+D;AAC/D,+DAA+D;AAC/D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,wBAAwB,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACvD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjE,kBAAkB,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IACzD,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3C,qCAAqC,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CAClE,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,EAAE;YACR,OAAO,EACL,mFAAmF;SACtF,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,qEAAqE;AACrE,oEAAoE;AACpE,kEAAkE;AAClE,wCAAwC;AACxC,sEAAsE;AACtE,sEAAsE;AACtE,yEAAyE;AACzE,wEAAwE;AACxE,4DAA4D;AAC5D,gEAAgE;AAChE,qDAAqD;AACrD,EAAE;AACF,mEAAmE;AACnE,uEAAuE;AACvE,qEAAqE;AACrE,gEAAgE;AAChE,kEAAkE;AAClE,wEAAwE;AACxE,8DAA8D;AAC9D,mEAAmE;AACnE,oEAAoE;AACpE,uEAAuE;AACvE,yDAAyD;AACzD,EAAE;AACF,uEAAuE;AACvE,qEAAqE;AACrE,gEAAgE;AAChE,iEAAiE;AACjE,mEAAmE;AACnE,uEAAuE;AACvE,yEAAyE;AACzE,oEAAoE;AACpE,qEAAqE;AACrE,mEAAmE;AACnE,oEAAoE;AACpE,uEAAuE;AACvE,8DAA8D;AAC9D,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,mBAAmB;IAC5B,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,uBAAuB;IACpC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,EAAE,EAAE,cAAc,CAAC,QAAQ,EAAE;IAC7B,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IAC3B,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC;YACnC,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,eAAe,CAAC;gBACvB,OAAO,EACL,qLAAqL;aACxL,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClB,OAAO,EACL,4MAA4M;aAC/M,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,WAAW,CAAC;gBACnB,OAAO,EACL,+UAA+U;aAClV,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,OAAO,EACL,4GAA4G;SAC/G,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QACpE,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,iBAAiB,CAAC,CAAC,CAAC;gBAAE,SAAS;YACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;oBAC3B,IAAI,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC;oBAChC,OAAO,EAAE,qCAAqC,CAAC,sDAAsD;iBACtG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,WAAW,CAAC;gBACnB,OAAO,EACL,2HAA2H;aAC9H,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAChF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACxB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC;gBACjB,OAAO,EAAE,0BAA0B,CAAC,CAAC,IAAI,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/schema/requires.d.ts

@@ -1,131 +0,0 @@
-import { z } from "zod";
-export declare const DurationSchema: z.ZodEffects<z.ZodString, string, string>;
-export declare const CountSchema: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
-    min: z.ZodOptional<z.ZodNumber>;
-    max: z.ZodOptional<z.ZodNumber>;
-    exact: z.ZodOptional<z.ZodNumber>;
-}, "strict", z.ZodTypeAny, {
-    exact?: number | undefined;
-    min?: number | undefined;
-    max?: number | undefined;
-}, {
-    exact?: number | undefined;
-    min?: number | undefined;
-    max?: number | undefined;
-}>, {
-    exact?: number | undefined;
-    min?: number | undefined;
-    max?: number | undefined;
-}, {
-    exact?: number | undefined;
-    min?: number | undefined;
-    max?: number | undefined;
-}>, {
-    exact?: number | undefined;
-    min?: number | undefined;
-    max?: number | undefined;
-}, {
-    exact?: number | undefined;
-    min?: number | undefined;
-    max?: number | undefined;
-}>, {
-    exact?: number | undefined;
-    min?: number | undefined;
-    max?: number | undefined;
-}, {
-    exact?: number | undefined;
-    min?: number | undefined;
-    max?: number | undefined;
-}>, {
-    exact?: number | undefined;
-    min?: number | undefined;
-    max?: number | undefined;
-}, {
-    exact?: number | undefined;
-    min?: number | undefined;
-    max?: number | undefined;
-}>;
-export declare const RequiresSchema: z.ZodObject<{
-    ledger_tag: z.ZodString;
-    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
-    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
-        min: z.ZodOptional<z.ZodNumber>;
-        max: z.ZodOptional<z.ZodNumber>;
-        exact: z.ZodOptional<z.ZodNumber>;
-    }, "strict", z.ZodTypeAny, {
-        exact?: number | undefined;
-        min?: number | undefined;
-        max?: number | undefined;
-    }, {
-        exact?: number | undefined;
-        min?: number | undefined;
-        max?: number | undefined;
-    }>, {
-        exact?: number | undefined;
-        min?: number | undefined;
-        max?: number | undefined;
-    }, {
-        exact?: number | undefined;
-        min?: number | undefined;
-        max?: number | undefined;
-    }>, {
-        exact?: number | undefined;
-        min?: number | undefined;
-        max?: number | undefined;
-    }, {
-        exact?: number | undefined;
-        min?: number | undefined;
-        max?: number | undefined;
-    }>, {
-        exact?: number | undefined;
-        min?: number | undefined;
-        max?: number | undefined;
-    }, {
-        exact?: number | undefined;
-        min?: number | undefined;
-        max?: number | undefined;
-    }>, {
-        exact?: number | undefined;
-        min?: number | undefined;
-        max?: number | undefined;
-    }, {
-        exact?: number | undefined;
-        min?: number | undefined;
-        max?: number | undefined;
-    }>>;
-    /**
-     * When true, a tag-matching ledger entry whose `head:<sha>` token
-     * equals the runtime-resolved current HEAD sha satisfies the gate
-     * regardless of `within`. Falls through to the time-window check
-     * when no entry head-matches (entry predates the head shift,
-     * operator switched branches, producer ran on a different HEAD,
-     * runtime could not resolve the current HEAD). The producer must
-     * emit `head:<sha>` into the entry content for this to bite; the
-     * standard `harness session-start preflight` producer does so as
-     * of the `at_head` rollout. Designed for `preflight-before-push`
-     * to eliminate per-commit re-preflight churn while keeping the
-     * time-window as a freshness ceiling for the head-mismatch case.
-     */
-    at_head: z.ZodOptional<z.ZodBoolean>;
-}, "strict", z.ZodTypeAny, {
-    ledger_tag: string;
-    within?: string | undefined;
-    count?: {
-        exact?: number | undefined;
-        min?: number | undefined;
-        max?: number | undefined;
-    } | undefined;
-    at_head?: boolean | undefined;
-}, {
-    ledger_tag: string;
-    within?: string | undefined;
-    count?: {
-        exact?: number | undefined;
-        min?: number | undefined;
-        max?: number | undefined;
-    } | undefined;
-    at_head?: boolean | undefined;
-}>;
-export type Requires = z.infer<typeof RequiresSchema>;
-export declare function referencedVariables(template: string): string[];
-export declare function isBuiltinVariable(name: string): boolean;

package/dist/schema/requires.js

@@ -1,88 +0,0 @@
-import { z } from "zod";
-import { InvalidDurationError, parseDurationSeconds, } from "../io/duration.js";
-export const DurationSchema = z.string().min(1).superRefine((v, ctx) => {
-    try {
-        parseDurationSeconds(v);
-    }
-    catch (err) {
-        if (err instanceof InvalidDurationError) {
-            ctx.addIssue({ code: z.ZodIssueCode.custom, message: err.message });
-            return;
-        }
-        throw err;
-    }
-});
-export const CountSchema = z
-    .object({
-    min: z.number().int().nonnegative().optional(),
-    max: z.number().int().positive().optional(),
-    exact: z.number().int().positive().optional(),
-})
-    .strict()
-    .refine((c) => c.min !== undefined || c.max !== undefined || c.exact !== undefined, {
-    message: "count must declare at least one of min, max, exact",
-})
-    .refine((c) => !(c.exact !== undefined && (c.min !== undefined || c.max !== undefined)), { message: "count.exact may not coexist with min or max" })
-    .refine((c) => c.min === undefined || c.max === undefined || c.min <= c.max, { message: "count.min must be <= count.max" })
-    .refine((c) => c.min !== 0, {
-    message: "count.min: 0 is a no-op; remove the field or use a different policy",
-    path: ["min"],
-});
-export const RequiresSchema = z
-    .object({
-    ledger_tag: z.string().min(1),
-    within: DurationSchema.optional(),
-    count: CountSchema.optional(),
-    /**
-     * When true, a tag-matching ledger entry whose `head:<sha>` token
-     * equals the runtime-resolved current HEAD sha satisfies the gate
-     * regardless of `within`. Falls through to the time-window check
-     * when no entry head-matches (entry predates the head shift,
-     * operator switched branches, producer ran on a different HEAD,
-     * runtime could not resolve the current HEAD). The producer must
-     * emit `head:<sha>` into the entry content for this to bite; the
-     * standard `harness session-start preflight` producer does so as
-     * of the `at_head` rollout. Designed for `preflight-before-push`
-     * to eliminate per-commit re-preflight churn while keeping the
-     * time-window as a freshness ceiling for the head-mismatch case.
-     */
-    at_head: z.boolean().optional(),
-})
-    .strict();
-// The five built-ins ship resolved by the runtime, so policies may
-// reference them in `requires.ledger_tag` without declaring a matching
-// `trigger.extract` entry. The schema check in `PolicySchema.superRefine`
-// skips them via `isBuiltinVariable`.
-//
-// Resolution sources (all live as of Phase 5, see ARCHITECTURE §6):
-//   - SESSION_ID — `src/runtime/session-id.ts:resolveSessionId`, fed from
-//     the hook event's `session_id` or `$CLAUDE_SESSION_ID`. End-to-end
-//     coverage in `tests/runtime/intercept.test.ts` (the `dogfood:${SESSION_ID}`
-//     fixture).
-//   - REPO / BRANCH / CWD — populated by the runtime from git + process state
-//     before `evaluateExtract` runs (`src/io/extract.ts:ExtractBuiltins`).
-//   - TOOL_NAME — taken from the hook event payload.
-//
-// Adding a new variable here is a spec change: update ARCHITECTURE §6, wire
-// the runtime source, and add `isBuiltinVariable` test coverage in the same
-// PR.
-const BUILTIN_VARIABLES = new Set([
-    "SESSION_ID",
-    "REPO",
-    "BRANCH",
-    "TOOL_NAME",
-    "CWD",
-]);
-const VAR_REF_RE = /\$\{([A-Z][A-Z0-9_]*)\}/g;
-export function referencedVariables(template) {
-    const seen = new Set();
-    for (const m of template.matchAll(VAR_REF_RE)) {
-        if (m[1])
-            seen.add(m[1]);
-    }
-    return [...seen];
-}
-export function isBuiltinVariable(name) {
-    return BUILTIN_VARIABLES.has(name);
-}
-//# sourceMappingURL=requires.js.map

package/dist/schema/requires.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"requires.js","sourceRoot":"","sources":["../../src/schema/requires.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;IACrE,IAAI,CAAC;QACH,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;YACxC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC9C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC9C,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE;IAClF,OAAO,EAAE,oDAAoD;CAC9D,CAAC;KACD,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,EAC/E,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAC3D;KACA,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EACnE,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAC9C;KACA,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE;IAC1B,OAAO,EAAE,qEAAqE;IAC9E,IAAI,EAAE,CAAC,KAAK,CAAC;CACd,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,cAAc,CAAC,QAAQ,EAAE;IACjC,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC7B;;;;;;;;;;;;OAYG;IACH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,mEAAmE;AACnE,uEAAuE;AACvE,0EAA0E;AAC1E,sCAAsC;AACtC,EAAE;AACF,oEAAoE;AACpE,0EAA0E;AAC1E,wEAAwE;AACxE,iFAAiF;AACjF,gBAAgB;AAChB,8EAA8E;AAC9E,2EAA2E;AAC3E,qDAAqD;AACrD,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,MAAM;AACN,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,YAAY;IACZ,MAAM;IACN,QAAQ;IACR,WAAW;IACX,KAAK;CACN,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAE9C,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC"}