@lannguyensi/harness 0.63.0 → 1.0.0

package/dist/policy-packs/registry.d.ts

@@ -1,16 +1,15 @@
 import type { z } from "zod";
-import type { PolicyPack, PolicyUx, Producer } from "../schema/index.js";
-import { type ResolvePackOptions } from "./builtin/understanding-before-execution.js";
+import type { PolicyPack, PolicyUx } from "../schema/index.js";
 import { type Runtime } from "./runtime.js";
 import type { PackContribution } from "./types.js";
-export declare const KNOWN_BUILTIN_PACKS: readonly ["understanding-before-execution", "branch-protection", "solution-acceptance", "post-merge-gate"];
+export declare const KNOWN_BUILTIN_PACKS: readonly ["branch-protection"];
 export type BuiltinPackName = (typeof KNOWN_BUILTIN_PACKS)[number];
 export declare function isBuiltinPackName(name: string): name is BuiltinPackName;
 export interface ResolveBuiltinResult {
     contribution: PackContribution;
     warnings: string[];
 }
-export declare function resolveBuiltin(pack: PolicyPack, runtime?: Runtime, opts?: ResolvePackOptions): ResolveBuiltinResult | null;
+export declare function resolveBuiltin(pack: PolicyPack, runtime?: Runtime): ResolveBuiltinResult | null;
 /**
  * Per-builtin `config:` schema lookup. Returns null when the pack name
  * is not a builtin (caller should already have flagged that via
@@ -18,47 +17,19 @@ export declare function resolveBuiltin(pack: PolicyPack, runtime?: Runtime, opts
  * Consumed by `checkPolicyPackConfigs` so `harness validate` /
  * `harness doctor` catch typo'd keys at lint time.
  */
-export declare function resolveBuiltinConfigSchema(packName: string): z.ZodTypeAny | null;
+export declare function resolveBuiltinConfigSchema(packName: string): z.ZodType | null;
 /**
- * Canonical version-probe command for a builtin pack's package-side bin.
- * Returns `null` when the pack name is not a builtin (caller should
- * already have flagged that via `checkPolicyPackSources`), or when the
- * pack has no separate package-side bin (e.g. `branch-protection`'s
- * blocker is harness itself, no external binary to probe). Consumed by
- * `checkPolicyPackVersions` so `harness doctor` can compare the
- * installed version against an operator-declared pack-level
- * `min_version` floor.
- */
-export declare function resolveBuiltinVersionCommand(packName: string): readonly [string, string] | null;
-/**
- * The shipped-template `config.ux` / `config.producers` for a builtin pack,
- * as the operator's OWN pack entry would resolve them today (e.g. `ux`'s
- * `required:` line is derived from the pack's currently-configured `mode`,
- * not a hardcoded default mode — an operator on `strict` should be
- * compared against, and reseeded with, the `strict` wording, not
- * `grill_me`'s).
+ * The shipped-template `config.ux` for a builtin pack, as the operator's OWN
+ * pack entry would resolve it today.
  *
  * Returns `null` when the pack name is not a builtin, or when the pack
- * has no canonical shipped default to compare/reseed against (e.g.
- * `solution-acceptance`, which ships `enabled: false` with no `config:`
- * block in any init template). Consumed by `checkPolicyPackUxDrift`
+ * has no canonical shipped default to compare/reseed against. Every
+ * remaining builtin ships one. Consumed by `checkPolicyPackUxDrift`
  * (`harness doctor`'s divergence warning) and `harness pack reseed`
  * (task 68b9ad9c) — the single source both read from so the two stay
  * in lockstep by construction.
- *
- * Mode is resolved via `resolveModeFromConfig` (config.mode only, no
- * `UNDERSTANDING_GATE_MODE` env — task 5d73d78d review HIGH-3): both
- * consumers here compare against / reseed the MANIFEST's own declared
- * state, the same generation-time artefact `resolve()`/`buildHooks`
- * produce. Reading the live env here would make `harness doctor` flag
- * false drift (or `harness pack reseed` write different content)
- * whenever the operator happens to have the env var exported in the
- * shell they ran the command from — the same class of apply-time/live
- * drift `MODE_ENV`'s own doc comment (understanding-before-execution.ts)
- * explains for the sibling generation path.
  */
 export interface BuiltinDefaultConfig {
-    ux?: PolicyUx;
-    producers?: Producer[];
+    ux: PolicyUx;
 }
 export declare function resolveBuiltinDefaultConfig(pack: PolicyPack): BuiltinDefaultConfig | null;

package/dist/policy-packs/registry.js

@@ -1,35 +1,20 @@
 // Registry of builtin policy-pack names.
 //
-// Phase 6 #2 shipped `understanding-before-execution`; subsequent
-// builtins are added by appending to `KNOWN_BUILTIN_PACKS` and a case
-// arm in `resolveBuiltin()`. Non-builtin sources (path/npm/git) are
-// out of scope for v1; their resolution lands in a later sub-task.
+// One builtin pack ships: `branch-protection`. A further builtin is added by
+// appending to `KNOWN_BUILTIN_PACKS` and a case arm in `resolveBuiltin()`.
+// Non-builtin sources (path/npm/git) are out of scope for v1.
 import { configSchema as branchProtectionConfigSchema, defaultUx as branchProtectionDefaultUx, PACK_NAME as BRANCH_PROTECTION, resolve as resolveBranchProtection, } from "./builtin/branch-protection.js";
-import { configSchema as understandingBeforeExecutionConfigSchema, defaultProducers as understandingBeforeExecutionDefaultProducers, defaultUx as understandingBeforeExecutionDefaultUx, PACK_NAME as UNDERSTANDING_BEFORE_EXECUTION, resolve as resolveUnderstandingBeforeExecution, resolveModeFromConfig as resolveUnderstandingBeforeExecutionMode, VERSION_COMMAND as UNDERSTANDING_BEFORE_EXECUTION_VERSION_COMMAND, } from "./builtin/understanding-before-execution.js";
-import { configSchema as solutionAcceptanceConfigSchema, PACK_NAME as SOLUTION_ACCEPTANCE, resolve as resolveSolutionAcceptance, } from "./builtin/solution-acceptance.js";
-import { configSchema as postMergeGateConfigSchema, defaultUx as postMergeGateDefaultUx, PACK_NAME as POST_MERGE_GATE, resolve as resolvePostMergeGate, } from "./builtin/post-merge-gate.js";
 import { DEFAULT_RUNTIME } from "./runtime.js";
-export const KNOWN_BUILTIN_PACKS = [
-    UNDERSTANDING_BEFORE_EXECUTION,
-    BRANCH_PROTECTION,
-    SOLUTION_ACCEPTANCE,
-    POST_MERGE_GATE,
-];
+export const KNOWN_BUILTIN_PACKS = [BRANCH_PROTECTION];
 export function isBuiltinPackName(name) {
     return KNOWN_BUILTIN_PACKS.includes(name);
 }
-export function resolveBuiltin(pack, runtime = DEFAULT_RUNTIME, opts = {}) {
+export function resolveBuiltin(pack, runtime = DEFAULT_RUNTIME) {
     if (!isBuiltinPackName(pack.name))
         return null;
     switch (pack.name) {
-        case UNDERSTANDING_BEFORE_EXECUTION:
-            return resolveUnderstandingBeforeExecution(pack, runtime, opts);
         case BRANCH_PROTECTION:
             return resolveBranchProtection(pack, runtime);
-        case SOLUTION_ACCEPTANCE:
-            return resolveSolutionAcceptance(pack, runtime, opts);
-        case POST_MERGE_GATE:
-            return resolvePostMergeGate(pack, runtime);
     }
 }
 /**
@@ -43,61 +28,16 @@ export function resolveBuiltinConfigSchema(packName) {
     if (!isBuiltinPackName(packName))
         return null;
     switch (packName) {
-        case UNDERSTANDING_BEFORE_EXECUTION:
-            return understandingBeforeExecutionConfigSchema;
         case BRANCH_PROTECTION:
             return branchProtectionConfigSchema;
-        case SOLUTION_ACCEPTANCE:
-            return solutionAcceptanceConfigSchema;
-        case POST_MERGE_GATE:
-            return postMergeGateConfigSchema;
-    }
-}
-/**
- * Canonical version-probe command for a builtin pack's package-side bin.
- * Returns `null` when the pack name is not a builtin (caller should
- * already have flagged that via `checkPolicyPackSources`), or when the
- * pack has no separate package-side bin (e.g. `branch-protection`'s
- * blocker is harness itself, no external binary to probe). Consumed by
- * `checkPolicyPackVersions` so `harness doctor` can compare the
- * installed version against an operator-declared pack-level
- * `min_version` floor.
- */
-export function resolveBuiltinVersionCommand(packName) {
-    if (!isBuiltinPackName(packName))
-        return null;
-    switch (packName) {
-        case UNDERSTANDING_BEFORE_EXECUTION:
-            return UNDERSTANDING_BEFORE_EXECUTION_VERSION_COMMAND;
-        case BRANCH_PROTECTION:
-            return null;
-        case SOLUTION_ACCEPTANCE:
-            // Blocker is harness itself; the producer (grounding-mcp) is probed
-            // via its tools.mcp min_version, not a pack-side bin.
-            return null;
-        case POST_MERGE_GATE:
-            // Both the producer and the blocker are harness itself; no
-            // separate package-side bin to probe.
-            return null;
     }
 }
 export function resolveBuiltinDefaultConfig(pack) {
     if (!isBuiltinPackName(pack.name))
         return null;
     switch (pack.name) {
-        case UNDERSTANDING_BEFORE_EXECUTION: {
-            const { mode } = resolveUnderstandingBeforeExecutionMode(pack);
-            return {
-                ux: understandingBeforeExecutionDefaultUx(mode),
-                producers: understandingBeforeExecutionDefaultProducers(),
-            };
-        }
         case BRANCH_PROTECTION:
             return { ux: branchProtectionDefaultUx() };
-        case SOLUTION_ACCEPTANCE:
-            return null;
-        case POST_MERGE_GATE:
-            return { ux: postMergeGateDefaultUx() };
     }
 }
 //# sourceMappingURL=registry.js.map

package/dist/policy-packs/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/policy-packs/registry.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,EAAE;AACF,kEAAkE;AAClE,sEAAsE;AACtE,oEAAoE;AACpE,mEAAmE;AAInE,OAAO,EACL,YAAY,IAAI,4BAA4B,EAC5C,SAAS,IAAI,yBAAyB,EACtC,SAAS,IAAI,iBAAiB,EAC9B,OAAO,IAAI,uBAAuB,GACnC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,YAAY,IAAI,wCAAwC,EACxD,gBAAgB,IAAI,4CAA4C,EAChE,SAAS,IAAI,qCAAqC,EAClD,SAAS,IAAI,8BAA8B,EAC3C,OAAO,IAAI,mCAAmC,EAC9C,qBAAqB,IAAI,uCAAuC,EAChE,eAAe,IAAI,8CAA8C,GAElE,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,YAAY,IAAI,8BAA8B,EAC9C,SAAS,IAAI,mBAAmB,EAChC,OAAO,IAAI,yBAAyB,GACrC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,YAAY,IAAI,yBAAyB,EACzC,SAAS,IAAI,sBAAsB,EACnC,SAAS,IAAI,eAAe,EAC5B,OAAO,IAAI,oBAAoB,GAChC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,eAAe,EAAgB,MAAM,cAAc,CAAC;AAG7D,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,8BAA8B;IAC9B,iBAAiB;IACjB,mBAAmB;IACnB,eAAe;CACP,CAAC;AAGX,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAQ,mBAAyC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC;AAOD,MAAM,UAAU,cAAc,CAC5B,IAAgB,EAChB,UAAmB,eAAe,EAClC,OAA2B,EAAE;IAE7B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,QAAQ,IAAI,CAAC,IAAuB,EAAE,CAAC;QACrC,KAAK,8BAA8B;YACjC,OAAO,mCAAmC,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAClE,KAAK,iBAAiB;YACpB,OAAO,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,KAAK,mBAAmB;YACtB,OAAO,yBAAyB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACxD,KAAK,eAAe;YAClB,OAAO,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CACxC,QAAgB;IAEhB,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,QAAQ,QAA2B,EAAE,CAAC;QACpC,KAAK,8BAA8B;YACjC,OAAO,wCAAwC,CAAC;QAClD,KAAK,iBAAiB;YACpB,OAAO,4BAA4B,CAAC;QACtC,KAAK,mBAAmB;YACtB,OAAO,8BAA8B,CAAC;QACxC,KAAK,eAAe;YAClB,OAAO,yBAAyB,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAgB;IAEhB,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,QAAQ,QAA2B,EAAE,CAAC;QACpC,KAAK,8BAA8B;YACjC,OAAO,8CAA8C,CAAC;QACxD,KAAK,iBAAiB;YACpB,OAAO,IAAI,CAAC;QACd,KAAK,mBAAmB;YACtB,oEAAoE;YACpE,sDAAsD;YACtD,OAAO,IAAI,CAAC;QACd,KAAK,eAAe;YAClB,2DAA2D;YAC3D,sCAAsC;YACtC,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAkCD,MAAM,UAAU,2BAA2B,CACzC,IAAgB;IAEhB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,QAAQ,IAAI,CAAC,IAAuB,EAAE,CAAC;QACrC,KAAK,8BAA8B,CAAC,CAAC,CAAC;YACpC,MAAM,EAAE,IAAI,EAAE,GAAG,uCAAuC,CAAC,IAAI,CAAC,CAAC;YAC/D,OAAO;gBACL,EAAE,EAAE,qCAAqC,CAAC,IAAI,CAAC;gBAC/C,SAAS,EAAE,4CAA4C,EAAE;aAC1D,CAAC;QACJ,CAAC;QACD,KAAK,iBAAiB;YACpB,OAAO,EAAE,EAAE,EAAE,yBAAyB,EAAE,EAAE,CAAC;QAC7C,KAAK,mBAAmB;YACtB,OAAO,IAAI,CAAC;QACd,KAAK,eAAe;YAClB,OAAO,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/policy-packs/registry.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,8DAA8D;AAI9D,OAAO,EACL,YAAY,IAAI,4BAA4B,EAC5C,SAAS,IAAI,yBAAyB,EACtC,SAAS,IAAI,iBAAiB,EAC9B,OAAO,IAAI,uBAAuB,GACnC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,eAAe,EAAgB,MAAM,cAAc,CAAC;AAG7D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,iBAAiB,CAAU,CAAC;AAGhE,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAQ,mBAAyC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC;AAOD,MAAM,UAAU,cAAc,CAC5B,IAAgB,EAChB,UAAmB,eAAe;IAElC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,QAAQ,IAAI,CAAC,IAAuB,EAAE,CAAC;QACrC,KAAK,iBAAiB;YACpB,OAAO,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CACxC,QAAgB;IAEhB,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,QAAQ,QAA2B,EAAE,CAAC;QACpC,KAAK,iBAAiB;YACpB,OAAO,4BAA4B,CAAC;IACxC,CAAC;AACH,CAAC;AAiBD,MAAM,UAAU,2BAA2B,CACzC,IAAgB;IAEhB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,QAAQ,IAAI,CAAC,IAAuB,EAAE,CAAC;QACrC,KAAK,iBAAiB;YACpB,OAAO,EAAE,EAAE,EAAE,yBAAyB,EAAE,EAAE,CAAC;IAC/C,CAAC;AACH,CAAC"}

package/dist/policy-packs/runtime.d.ts

@@ -2,7 +2,3 @@ export declare const KNOWN_RUNTIMES: readonly ["claude-code", "codex", "opencode
 export type Runtime = (typeof KNOWN_RUNTIMES)[number];
 export declare const DEFAULT_RUNTIME: Runtime;
 export declare function isRuntime(value: unknown): value is Runtime;
-export declare function parseRuntime(raw: string | undefined): {
-    runtime: Runtime;
-    warning: string | null;
-};

package/dist/policy-packs/runtime.js

@@ -1,17 +1,14 @@
 // Phase 6 #6 — runtime target identifier threaded through policy-pack
 // expansion. Selects which adapter shape a pack emits.
 //
-// `claude-code` (default): hook commands point at the `@lannguyensi/understanding-gate`
-// claude-code bins and the harness PreToolUse blocker. Output of
-// `harness apply` is the Claude Code `settings.json` shape under
-// `harness.generated/settings.json`.
+// `claude-code` (default): hook commands point at the harness PreToolUse
+// blocker. Output of `harness apply` is the Claude Code `settings.json`
+// shape under `harness.generated/settings.json`.
 //
-// `codex`: hook commands point at the harness-shipped Codex adapter
-// subcommands (`harness pack hook codex-*`). Output of `harness apply`
-// is a Codex-flavoured config artefact under
-// `harness.generated/codex/`. Phase 6 #6 ships block + allow for the
-// understanding-before-execution pack; cross-pack and additional
-// runtimes are out of v1 scope.
+// `codex`: hook commands point at the Codex adapter commands the pack
+// emits. Output of `harness apply` is a Codex-flavoured config artefact
+// under `harness.generated/codex/`. The branch-protection pack is the only
+// builtin; additional runtimes are out of v1 scope.
 //
 // `opencode`: unlike `codex`, this runtime does NOT get its own hook
 // command shape from `expandPolicyPacks` (task f34eb233 / batch18) --
@@ -19,21 +16,11 @@
 // there is nothing for a pack to emit commands for. Output of `harness
 // apply --runtime opencode` is `harness.generated/opencode/opencode.json`,
 // which projects `tools.mcp[]` only. See
-// `src/cli/apply/generate-opencode-config.ts`'s header for the full
-// adapter-mapping ADR (mcp projected, hooks and permission deferred).
+// `src/cli/apply/generate-opencode-config.ts`'s header for the
+// projection rules (mcp projected, hooks and permission not projected).
 export const KNOWN_RUNTIMES = ["claude-code", "codex", "opencode"];
 export const DEFAULT_RUNTIME = "claude-code";
 export function isRuntime(value) {
     return typeof value === "string" && KNOWN_RUNTIMES.includes(value);
 }
-export function parseRuntime(raw) {
-    if (raw === undefined)
-        return { runtime: DEFAULT_RUNTIME, warning: null };
-    if (isRuntime(raw))
-        return { runtime: raw, warning: null };
-    return {
-        runtime: DEFAULT_RUNTIME,
-        warning: `unrecognised runtime ${JSON.stringify(raw)}, falling back to "${DEFAULT_RUNTIME}". Allowed: ${KNOWN_RUNTIMES.join(", ")}.`,
-    };
-}
 //# sourceMappingURL=runtime.js.map

package/dist/policy-packs/runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/policy-packs/runtime.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,uDAAuD;AACvD,EAAE;AACF,wFAAwF;AACxF,iEAAiE;AACjE,iEAAiE;AACjE,qCAAqC;AACrC,EAAE;AACF,oEAAoE;AACpE,uEAAuE;AACvE,6CAA6C;AAC7C,qEAAqE;AACrE,iEAAiE;AACjE,gCAAgC;AAChC,EAAE;AACF,qEAAqE;AACrE,sEAAsE;AACtE,wEAAwE;AACxE,uEAAuE;AACvE,2EAA2E;AAC3E,yCAAyC;AACzC,oEAAoE;AACpE,sEAAsE;AAEtE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,aAAa,EAAE,OAAO,EAAE,UAAU,CAAU,CAAC;AAE5E,MAAM,CAAC,MAAM,eAAe,GAAY,aAAa,CAAC;AAEtD,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,cAAoC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAuB;IAIlD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1E,IAAI,SAAS,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3D,OAAO;QACL,OAAO,EAAE,eAAe;QACxB,OAAO,EAAE,wBAAwB,IAAI,CAAC,SAAS,CAC7C,GAAG,CACJ,sBAAsB,eAAe,eAAe,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;KAClF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/policy-packs/runtime.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,uDAAuD;AACvD,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,iDAAiD;AACjD,EAAE;AACF,sEAAsE;AACtE,wEAAwE;AACxE,2EAA2E;AAC3E,oDAAoD;AACpD,EAAE;AACF,qEAAqE;AACrE,sEAAsE;AACtE,wEAAwE;AACxE,uEAAuE;AACvE,2EAA2E;AAC3E,yCAAyC;AACzC,+DAA+D;AAC/D,wEAAwE;AAExE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,aAAa,EAAE,OAAO,EAAE,UAAU,CAAU,CAAC;AAE5E,MAAM,CAAC,MAAM,eAAe,GAAY,aAAa,CAAC;AAEtD,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,cAAoC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC5F,CAAC"}

package/dist/policy-packs/types.d.ts

@@ -4,36 +4,17 @@ export interface PackContributionFile {
     relativePath: string;
     content: string;
 }
-/**
- * Phase 6 #5 — permissions contributed by a pack's selected
- * permission profile. Translated downstream into the Claude Code
- * settings.json `permissions` block.
- */
-export interface PackPermissionsContribution {
-    allow: string[];
-    ask: string[];
-    deny: string[];
-}
 export interface PackContribution {
     /** Hooks to merge into the manifest before settings.json generation. */
     hooks: Hook[];
     /** Files to write under `harness.generated/`. */
     files: PackContributionFile[];
-    /** Optional permission contribution (Phase 6 #5). */
-    permissions?: PackPermissionsContribution;
 }
 export interface PackExpansionResult {
     /** Combined hooks contributed by every enabled, resolvable pack. */
     hooks: Hook[];
     /** Combined files contributed by every enabled, resolvable pack. */
     files: PackContributionFile[];
-    /**
-     * Combined permissions contributed by every enabled, resolvable
-     * pack (set-union per bucket; later contributions cannot relax a
-     * deny from an earlier pack). undefined when no pack contributed
-     * any permission entries.
-     */
-    permissions?: PackPermissionsContribution;
     /** Non-fatal expansion warnings (e.g. unknown source, unknown name on a non-strict path). */
     warnings: string[];
     /** Names of packs that were skipped because `enabled: false`. */

package/dist/policy-packs/ux-compare.d.ts

@@ -1,14 +1,4 @@
-import type { PolicyUx, Producer } from "../schema/index.js";
+import type { PolicyUx } from "../schema/index.js";
 export declare function uxEqual(a: PolicyUx, b: PolicyUx): boolean;
-/**
- * Structural equality over a `producers:` array. Compares each entry
- * field-by-field per its discriminated `kind` rather than a generic deep
- * equal — the shape is small and fixed (bash/mcp/ask), and this keeps the
- * comparison legible instead of round-tripping through JSON.stringify
- * (which would also be sensitive to incidental key ordering).
- */
-export declare function producersEqual(a: readonly Producer[], b: readonly Producer[]): boolean;
 /** Parses an unknown `config.ux` value; returns null on any schema rejection. */
 export declare function safeParseUx(raw: unknown): PolicyUx | null;
-/** Parses an unknown `config.producers` value; returns null on any schema rejection. */
-export declare function safeParseProducers(raw: unknown): Producer[] | null;

package/dist/policy-packs/ux-compare.js

@@ -1,12 +1,9 @@
-// Structural comparison + safe-parse helpers for `config.ux` /
-// `config.producers` (task 68b9ad9c). Shared by `checkPolicyPackUxDrift`
-// (the `harness doctor` read-side warning, ux-drift-check.ts) and
-// `harness pack reseed` (the opt-in write-side fix, src/cli/pack/reseed.ts)
-// so the two can never independently drift on what "matches the shipped
-// template" means.
-import { z } from "zod";
-import { PolicyUxSchema, ProducerSchema } from "../schema/policies.js";
-const ProducersArraySchema = z.array(ProducerSchema);
+// Structural comparison + safe-parse helpers for `config.ux` (task
+// 68b9ad9c). Shared by `checkPolicyPackUxDrift` (the `harness doctor`
+// read-side warning, ux-drift-check.ts) and `harness pack reseed` (the
+// opt-in write-side fix, src/cli/pack/reseed.ts) so the two can never
+// independently drift on what "matches the shipped template" means.
+import { PolicyUxSchema } from "../schema/policy-ux.js";
 function stringArrayEqual(a, b) {
     if (a.length !== b.length)
         return false;
@@ -17,42 +14,9 @@ export function uxEqual(a, b) {
         stringArrayEqual(a.required, b.required) &&
         stringArrayEqual(a.run, b.run));
 }
-/**
- * Structural equality over a `producers:` array. Compares each entry
- * field-by-field per its discriminated `kind` rather than a generic deep
- * equal — the shape is small and fixed (bash/mcp/ask), and this keeps the
- * comparison legible instead of round-tripping through JSON.stringify
- * (which would also be sensitive to incidental key ordering).
- */
-export function producersEqual(a, b) {
-    if (a.length !== b.length)
-        return false;
-    return a.every((entryA, i) => {
-        const entryB = b[i];
-        if (!entryB || entryA.kind !== entryB.kind)
-            return false;
-        if (entryA.kind === "bash" && entryB.kind === "bash") {
-            return entryA.command === entryB.command && entryA.description === entryB.description;
-        }
-        if (entryA.kind === "ask" && entryB.kind === "ask") {
-            return entryA.command === entryB.command && entryA.description === entryB.description;
-        }
-        if (entryA.kind === "mcp" && entryB.kind === "mcp") {
-            return (entryA.verb === entryB.verb &&
-                entryA.example === entryB.example &&
-                entryA.description === entryB.description);
-        }
-        return false;
-    });
-}
 /** Parses an unknown `config.ux` value; returns null on any schema rejection. */
 export function safeParseUx(raw) {
     const result = PolicyUxSchema.safeParse(raw);
     return result.success ? result.data : null;
 }
-/** Parses an unknown `config.producers` value; returns null on any schema rejection. */
-export function safeParseProducers(raw) {
-    const result = ProducersArraySchema.safeParse(raw);
-    return result.success ? result.data : null;
-}
 //# sourceMappingURL=ux-compare.js.map

package/dist/policy-packs/ux-compare.js.map

@@ -1 +1 @@
-{"version":3,"file":"ux-compare.js","sourceRoot":"","sources":["../../src/policy-packs/ux-compare.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,yEAAyE;AACzE,kEAAkE;AAClE,4EAA4E;AAC5E,wEAAwE;AACxE,mBAAmB;AAEnB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvE,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;AAErD,SAAS,gBAAgB,CAAC,CAAoB,EAAE,CAAoB;IAClE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,CAAW,EAAE,CAAW;IAC9C,OAAO,CACL,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QACrB,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC;QACxC,gBAAgB,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,CAAsB,EAAE,CAAsB;IAC3E,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACzD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACrD,OAAO,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAAC;QACxF,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACnD,OAAO,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAAC;QACxF,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACnD,OAAO,CACL,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;gBAC3B,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;gBACjC,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAC1C,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"ux-compare.js","sourceRoot":"","sources":["../../src/policy-packs/ux-compare.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,sEAAsE;AACtE,uEAAuE;AACvE,sEAAsE;AACtE,oEAAoE;AAEpE,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGxD,SAAS,gBAAgB,CAAC,CAAoB,EAAE,CAAoB;IAClE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,CAAW,EAAE,CAAW;IAC9C,OAAO,CACL,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QACrB,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC;QACxC,gBAAgB,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC"}

package/dist/policy-packs/ux-drift-check.d.ts

@@ -1,5 +1,5 @@
 import type { Manifest } from "../schema/index.js";
-export type PolicyPackUxDriftField = "ux" | "producers";
+export type PolicyPackUxDriftField = "ux";
 export interface PolicyPackUxDrift {
     packIndex: number;
     packName: string;
@@ -11,16 +11,16 @@ export interface PolicyPackUxDrift {
  * Walks `manifest.policy_packs` in declared order. For each enabled
  * builtin pack that has a registered shipped default (see
  * `resolveBuiltinDefaultConfig`), compares the operator's declared
- * `config.ux` / `config.producers` (when present) against that default
- * and reports a divergence for each sub-field that differs.
+ * `config.ux` (when present) against that default and reports a
+ * divergence when it differs.
  *
- * A pack that never declared `config.ux` (or `config.producers`) at all
+ * A pack that never declared `config.ux` at all
  * is NOT flagged here: that is a distinct, pre-existing gap (the pack
  * falls back to its legacy engine-vocabulary deny text) rather than a
  * stale COPY of the shipped text, and is out of scope for this check —
  * see task 68b9ad9c's framing (an operator whose manifest predates a
  * wording fix has a STALE `ux.run`, not a MISSING one). A malformed
- * `config.ux` / `config.producers` (already reported separately by
+ * `config.ux` (already reported separately by
  * `checkPolicyPackConfigs`) is treated as diverging here too, rather
  * than being silently skipped.
  */

package/dist/policy-packs/ux-drift-check.js

@@ -1,17 +1,18 @@
-// Per-pack `config.ux` / `config.producers` divergence check (task
+// Per-pack `config.ux` divergence check (task
 // 68b9ad9c). Used by `harness doctor` to warn when an enabled builtin
 // pack's agent-facing deny-message text no longer matches the shipped
 // template for that pack.
 //
-// Motivation (dogfood 2026-07-10, harness 0.40.0): the understanding-gate
-// deny message is entirely driven by `config.ux` when the operator has
-// declared one — the init templates (Solo/Team/Full/Custom) were fixed to
-// teach a new submission form, but that fix only reaches manifests
-// generated AFTER the fix landed. An operator who installed before the fix
-// has an on-disk `config.ux` that still teaches the old wording, and
-// nothing short of a hand-edit ever updated it: `harness apply` projects
-// the manifest OUT to settings.json, it never re-seeds pack config FROM
-// the shipped template back INTO the manifest.
+// Motivation (dogfood 2026-07-10, harness 0.40.0): an enabled builtin
+// pack's agent-facing deny message is entirely driven by its
+// `config.ux` when the operator has declared one. The shipped init
+// templates (Solo/Team/Full/Custom) pick up wording fixes over time,
+// but a fix only reaches manifests generated AFTER it landed. An
+// operator who installed before the fix keeps an on-disk `config.ux`
+// that still carries the old deny text, and nothing short of a
+// hand-edit ever updated it: `harness apply` projects the manifest OUT
+// to settings.json, it never re-seeds pack config FROM the shipped
+// template back INTO the manifest.
 //
 // This check is the read side of that gap (the warning); `harness pack
 // reseed <name>` (src/cli/pack/reseed.ts) is the opt-in write side. Both
@@ -23,21 +24,21 @@
 // `checkPolicyPackVersions`: this is an informational nudge about
 // wording that still functions, not a schema violation.
 import { resolveBuiltinDefaultConfig } from "./registry.js";
-import { producersEqual, safeParseProducers, safeParseUx, uxEqual } from "./ux-compare.js";
+import { safeParseUx, uxEqual } from "./ux-compare.js";
 /**
  * Walks `manifest.policy_packs` in declared order. For each enabled
  * builtin pack that has a registered shipped default (see
  * `resolveBuiltinDefaultConfig`), compares the operator's declared
- * `config.ux` / `config.producers` (when present) against that default
- * and reports a divergence for each sub-field that differs.
+ * `config.ux` (when present) against that default and reports a
+ * divergence when it differs.
  *
- * A pack that never declared `config.ux` (or `config.producers`) at all
+ * A pack that never declared `config.ux` at all
  * is NOT flagged here: that is a distinct, pre-existing gap (the pack
  * falls back to its legacy engine-vocabulary deny text) rather than a
  * stale COPY of the shipped text, and is out of scope for this check —
  * see task 68b9ad9c's framing (an operator whose manifest predates a
  * wording fix has a STALE `ux.run`, not a MISSING one). A malformed
- * `config.ux` / `config.producers` (already reported separately by
+ * `config.ux` (already reported separately by
  * `checkPolicyPackConfigs`) is treated as diverging here too, rather
  * than being silently skipped.
  */
@@ -51,17 +52,11 @@ export function checkPolicyPackUxDrift(manifest) {
             return;
         const fields = [];
         const currentUx = pack.config["ux"];
-        if (canonical.ux && currentUx !== undefined) {
+        if (currentUx !== undefined) {
             const parsed = safeParseUx(currentUx);
             if (!parsed || !uxEqual(parsed, canonical.ux))
                 fields.push("ux");
         }
-        const currentProducers = pack.config["producers"];
-        if (canonical.producers && currentProducers !== undefined) {
-            const parsed = safeParseProducers(currentProducers);
-            if (!parsed || !producersEqual(parsed, canonical.producers))
-                fields.push("producers");
-        }
         if (fields.length === 0)
             return;
         out.push({

package/dist/policy-packs/ux-drift-check.js.map

@@ -1 +1 @@
-{"version":3,"file":"ux-drift-check.js","sourceRoot":"","sources":["../../src/policy-packs/ux-drift-check.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,sEAAsE;AACtE,sEAAsE;AACtE,0BAA0B;AAC1B,EAAE;AACF,0EAA0E;AAC1E,uEAAuE;AACvE,0EAA0E;AAC1E,mEAAmE;AACnE,2EAA2E;AAC3E,qEAAqE;AACrE,yEAAyE;AACzE,wEAAwE;AACxE,+CAA+C;AAC/C,EAAE;AACF,uEAAuE;AACvE,yEAAyE;AACzE,wEAAwE;AACxE,qEAAqE;AACrE,4DAA4D;AAC5D,EAAE;AACF,+DAA+D;AAC/D,kEAAkE;AAClE,wDAAwD;AAExD,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAa3F;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAkB;IACvD,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE;QAChD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,MAAM,SAAS,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,MAAM,MAAM,GAA6B,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,SAAS,CAAC,EAAE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,SAAS,CAAC,SAAS,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC1D,MAAM,MAAM,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,SAAS,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEhC,GAAG,CAAC,IAAI,CAAC;YACP,SAAS;YACT,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,MAAM;YACN,OAAO,EACL,SAAS,IAAI,CAAC,IAAI,YAAY,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,6BAA6B;gBACpF,2DAA2D;gBAC3D,yBAAyB,IAAI,CAAC,IAAI,qDAAqD,IAAI,CAAC,IAAI,KAAK;SACxG,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"ux-drift-check.js","sourceRoot":"","sources":["../../src/policy-packs/ux-drift-check.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,sEAAsE;AACtE,sEAAsE;AACtE,0BAA0B;AAC1B,EAAE;AACF,sEAAsE;AACtE,6DAA6D;AAC7D,mEAAmE;AACnE,qEAAqE;AACrE,iEAAiE;AACjE,qEAAqE;AACrE,+DAA+D;AAC/D,uEAAuE;AACvE,mEAAmE;AACnE,mCAAmC;AACnC,EAAE;AACF,uEAAuE;AACvE,yEAAyE;AACzE,wEAAwE;AACxE,qEAAqE;AACrE,4DAA4D;AAC5D,EAAE;AACF,+DAA+D;AAC/D,kEAAkE;AAClE,wDAAwD;AAExD,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAavD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAkB;IACvD,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE;QAChD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,MAAM,SAAS,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,MAAM,MAAM,GAA6B,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEhC,GAAG,CAAC,IAAI,CAAC;YACP,SAAS;YACT,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,MAAM;YACN,OAAO,EACL,SAAS,IAAI,CAAC,IAAI,YAAY,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,6BAA6B;gBACpF,2DAA2D;gBAC3D,yBAAyB,IAAI,CAAC,IAAI,qDAAqD,IAAI,CAAC,IAAI,KAAK;SACxG,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/policy-packs/version-check.d.ts

@@ -1,44 +1,23 @@
 import type { Manifest } from "../schema/index.js";
 export type PolicyPackVersionGapKind = 
 /** Pack declares min_version but no version probe is registered (warn). */
-"no_probe_registered"
-/** Version probe returned null (binary missing / failed to launch). */
- | "probe_failed"
-/** Probe stdout did not match a `digit(.digit)*` token. */
- | "parse_failed"
-/** Probed version is below the declared floor. */
- | "below_floor";
+"no_probe_registered";
 export interface PolicyPackVersionGap {
     packIndex: number;
     packName: string;
     /** The declared floor from `policy_packs[i].min_version`. */
     declaredMinVersion: string;
-    /**
-     * The version probe command that was (or would have been) invoked.
-     * Empty array when no probe is registered for the pack.
-     */
-    versionCommand: readonly string[];
-    /**
-     * Parsed version when the probe succeeded; otherwise null. Always the
-     * NUMERIC run (`parseProbedVersion`'s `version` field), never the probed
-     * prerelease or build suffix: for a `below_floor` gap caused by a
-     * prerelease of the floor (probed "0.3.1-rc.1" against a "0.3.1"
-     * `min_version`) this field equals `declaredMinVersion`; `message`
-     * carries the full probed token for the human-facing distinction.
-     */
-    actualVersion: string | null;
     kind: PolicyPackVersionGapKind;
     message: string;
 }
 /**
  * Walks `manifest.policy_packs` in declared order. For each enabled
- * builtin pack that carries an explicit `min_version`, runs the
- * registered probe (or flags missing-probe), parses the version, and
- * compares against the floor. Returns one gap per offending pack;
- * green ones produce nothing.
+ * builtin pack that carries an explicit `min_version`, flags that no
+ * probe exists to enforce it. Returns one gap per offending pack; packs
+ * without a declared floor produce nothing.
  *
  * `enabled: false` packs are skipped (consistent with the source +
  * config helpers). Non-builtin pack names are skipped: the source
  * check is the source of truth for "this pack does not resolve".
  */
-export declare function checkPolicyPackVersions(manifest: Manifest, versionProbe: (cmd: readonly string[]) => string | null): PolicyPackVersionGap[];
+export declare function checkPolicyPackVersions(manifest: Manifest): PolicyPackVersionGap[];