@lannguyensi/harness 0.63.0 → 1.0.0

package/dist/policy-packs/version-check.js

@@ -1,29 +1,22 @@
-// Per-pack version-floor check. Doctor uses this to surface a warning
-// when the operator declared `policy_packs[].min_version: x.y.z` and
-// the installed package-side bin reports below that. Mirrors the
-// hook-level `checkHookVersion` design (see `src/cli/doctor/index.ts`):
-// the same warning rungs, the same parse-failure fallback, so an
-// operator reading doctor output sees a consistent shape regardless of
-// which layer raised the gap.
-//
-// The split between this and the hook-level check is deliberate: a
-// hook-level floor covers each individual hook command, this catches a
-// pack-level config-schema mismatch (a `config:` key only the newer
-// package honours). Both can fire in the same doctor run.
-import { parseProbedVersion, compareVersionFloor, } from "../io/version-compare.js";
-import { isBuiltinPackName, resolveBuiltinVersionCommand } from "./registry.js";
+// Per-pack version-floor check. A builtin pack ships inside harness itself and
+// has no separate package-side bin to probe, so a declared
+// `policy_packs[].min_version` can never be enforced. Doctor uses this to
+// surface that as a warning, rather than letting the operator believe the
+// floor protects anything. The hook-level floor (`hooks[].min_version` with a
+// `version_command`) is a different mechanism checked by `checkHookVersion`
+// in `src/cli/doctor/index.ts`.
+import { isBuiltinPackName } from "./registry.js";
 /**
  * Walks `manifest.policy_packs` in declared order. For each enabled
- * builtin pack that carries an explicit `min_version`, runs the
- * registered probe (or flags missing-probe), parses the version, and
- * compares against the floor. Returns one gap per offending pack;
- * green ones produce nothing.
+ * builtin pack that carries an explicit `min_version`, flags that no
+ * probe exists to enforce it. Returns one gap per offending pack; packs
+ * without a declared floor produce nothing.
  *
  * `enabled: false` packs are skipped (consistent with the source +
  * config helpers). Non-builtin pack names are skipped: the source
  * check is the source of truth for "this pack does not resolve".
  */
-export function checkPolicyPackVersions(manifest, versionProbe) {
+export function checkPolicyPackVersions(manifest) {
     const gaps = [];
     manifest.policy_packs.forEach((pack, packIndex) => {
         if (!pack.enabled)
@@ -32,61 +25,13 @@ export function checkPolicyPackVersions(manifest, versionProbe) {
             return;
         if (!pack.min_version)
             return;
-        const versionCommand = resolveBuiltinVersionCommand(pack.name);
-        if (versionCommand === null) {
-            gaps.push({
-                packIndex,
-                packName: pack.name,
-                declaredMinVersion: pack.min_version,
-                versionCommand: [],
-                actualVersion: null,
-                kind: "no_probe_registered",
-                message: `no version probe registered for pack "${pack.name}"; the declared min_version cannot be enforced`,
-            });
-            return;
-        }
-        const stdout = versionProbe(versionCommand);
-        if (stdout === null) {
-            gaps.push({
-                packIndex,
-                packName: pack.name,
-                declaredMinVersion: pack.min_version,
-                versionCommand,
-                actualVersion: null,
-                kind: "probe_failed",
-                message: `version probe failed for ${versionCommand.join(" ")}`,
-            });
-            return;
-        }
-        // parseProbedVersion + compareVersionFloor (task db44ab46, extending
-        // the hooks[] prerelease rule to the pack-level floor): a release
-        // candidate of the pack's bin must not satisfy an equal-numeric
-        // min_version floor. See docs/decisions/2026-09-08-preflight-floors.md.
-        const parsed = parseProbedVersion(stdout);
-        if (!parsed) {
-            gaps.push({
-                packIndex,
-                packName: pack.name,
-                declaredMinVersion: pack.min_version,
-                versionCommand,
-                actualVersion: null,
-                kind: "parse_failed",
-                message: `could not parse a version from "${stdout.trim()}"`,
-            });
-            return;
-        }
-        const { version: actual, isPrerelease, token } = parsed;
-        if (compareVersionFloor(actual, isPrerelease, pack.min_version) < 0) {
-            gaps.push({
-                packIndex,
-                packName: pack.name,
-                declaredMinVersion: pack.min_version,
-                versionCommand,
-                actualVersion: actual,
-                kind: "below_floor",
-                message: `outdated: installed v${token} < required ${pack.min_version}`,
-            });
-        }
+        gaps.push({
+            packIndex,
+            packName: pack.name,
+            declaredMinVersion: pack.min_version,
+            kind: "no_probe_registered",
+            message: `no version probe registered for pack "${pack.name}"; the declared min_version cannot be enforced`,
+        });
     });
     return gaps;
 }

package/dist/policy-packs/version-check.js.map

@@ -1 +1 @@
-{"version":3,"file":"version-check.js","sourceRoot":"","sources":["../../src/policy-packs/version-check.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,qEAAqE;AACrE,iEAAiE;AACjE,wEAAwE;AACxE,iEAAiE;AACjE,uEAAuE;AACvE,8BAA8B;AAC9B,EAAE;AACF,mEAAmE;AACnE,uEAAuE;AACvE,oEAAoE;AACpE,0DAA0D;AAE1D,OAAO,EACL,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAoChF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAkB,EAClB,YAAuD;IAEvD,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE;QAChD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO;QAC9B,MAAM,cAAc,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC;gBACR,SAAS;gBACT,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,kBAAkB,EAAE,IAAI,CAAC,WAAW;gBACpC,cAAc,EAAE,EAAE;gBAClB,aAAa,EAAE,IAAI;gBACnB,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,yCAAyC,IAAI,CAAC,IAAI,gDAAgD;aAC5G,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC;gBACR,SAAS;gBACT,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,kBAAkB,EAAE,IAAI,CAAC,WAAW;gBACpC,cAAc;gBACd,aAAa,EAAE,IAAI;gBACnB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,4BAA4B,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;aAChE,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,qEAAqE;QACrE,kEAAkE;QAClE,gEAAgE;QAChE,wEAAwE;QACxE,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC;gBACR,SAAS;gBACT,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,kBAAkB,EAAE,IAAI,CAAC,WAAW;gBACpC,cAAc;gBACd,aAAa,EAAE,IAAI;gBACnB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,mCAAmC,MAAM,CAAC,IAAI,EAAE,GAAG;aAC7D,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;QACxD,IAAI,mBAAmB,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACpE,IAAI,CAAC,IAAI,CAAC;gBACR,SAAS;gBACT,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,kBAAkB,EAAE,IAAI,CAAC,WAAW;gBACpC,cAAc;gBACd,aAAa,EAAE,MAAM;gBACrB,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,wBAAwB,KAAK,eAAe,IAAI,CAAC,WAAW,EAAE;aACxE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"version-check.js","sourceRoot":"","sources":["../../src/policy-packs/version-check.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,2DAA2D;AAC3D,0EAA0E;AAC1E,0EAA0E;AAC1E,8EAA8E;AAC9E,4EAA4E;AAC5E,gCAAgC;AAEhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAgBlD;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAkB;IAElB,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE;QAChD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO;QAC9B,IAAI,CAAC,IAAI,CAAC;YACR,SAAS;YACT,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,kBAAkB,EAAE,IAAI,CAAC,WAAW;YACpC,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,yCAAyC,IAAI,CAAC,IAAI,gDAAgD;SAC5G,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/probes/memory.d.ts

@@ -42,7 +42,7 @@ export interface MemoryReport {
      * a name is rejected precisely BECAUSE it escapes a path segment or
      * carries a control character, so this field can hold a newline or an
      * ANSI escape. Every site that renders or serializes it passes it
-     * through `sanitizeProjectForDisplay` (`src/runtime/git-context.ts`)
+     * through `sanitizeProjectForDisplay` (`src/io/project-name.ts`)
      * first. Nothing downstream of a name that was ACCEPTED needs the same
      * treatment: `isValidProjectName` rejects control characters at the
      * source, so an accepted name (and any path it was substituted into)

package/dist/probes/memory.js

@@ -2,7 +2,7 @@ import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
 import { parseProbedVersion, compareVersionFloor } from "../io/version-compare.js";
-import { isValidProjectName } from "../runtime/git-context.js";
+import { isValidProjectName } from "../io/project-name.js";
 function expandHome(p, home) {
     if (p === "~")
         return home;

package/dist/probes/memory.js.map

@@ -1 +1 @@
-{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../src/probes/memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AA0E/D,SAAS,UAAU,CAAC,CAAS,EAAE,IAAY;IACzC,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,SAAS,iBAAiB,CAAC,CAAS,EAAE,OAA2B;IAC/D,IAAI,CAAC,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,CAAC;IACvD,OAAO,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAoB;IACxD,OAAO,MAAM,CAAC,eAAe,KAAK,IAAI,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,KAAK,GAAa,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QACzB,IAAI,OAAO,GAAgB,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,CAAC,WAAW,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACjC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAkB,EAAE,OAAsB,EAAE;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC;IAC/D,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,aAAa,GAAG,QAAQ,CAAC;IAE1D,yEAAyE;IACzE,uEAAuE;IACvE,oEAAoE;IACpE,0EAA0E;IAC1E,kEAAkE;IAClE,uEAAuE;IACvE,0CAA0C;IAC1C,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO;QAClC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;YAChC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,CAAC,OAAO;QAChB,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,WAAW,GAAgC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACrF,mEAAmE;QACnE,iEAAiE;QACjE,oEAAoE;QACpE,+CAA+C;QAC/C,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACrD,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,8DAA8D;YAC9D,4DAA4D;YAC5D,iCAAiC;YACjC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;YACtD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,gBAAgB,GAAqC,IAAI,CAAC;IAC9D,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC3C,oEAAoE;QACpE,oEAAoE;QACpE,kEAAkE;QAClE,mEAAmE;QACnE,mEAAmE;QACnE,oEAAoE;QACpE,WAAW;QACX,MAAM,SAAS,GAAG,CAAC,CAAS,EAAW,EAAE,CACvC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,KAAK,CAAC;QAC/F,MAAM,UAAU,GACd,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC/D,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAClC,GAAG,CAAC,CAAC,CAAC,CAAC;QACT,IAAI,UAAU,EAAE,CAAC;YACf,2DAA2D;YAC3D,iEAAiE;YACjE,uEAAuE;YACvE,6DAA6D;YAC7D,gEAAgE;YAChE,cAAc;YACd,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/D,MAAM,SAAS,GAAG,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBAC/C,gBAAgB,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3E,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;gBACvD,IAAI,QAAQ,GAAkB,IAAI,CAAC;gBACnC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBAChD,IAAI,CAAC,GAAG;wBAAE,SAAS;oBACnB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;oBAC7C,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC7B,QAAQ,GAAG,SAAS,CAAC;wBACrB,MAAM;oBACR,CAAC;gBACH,CAAC;gBACD,gBAAgB,GAAG,QAAQ;oBACzB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE;oBAClC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,oEAAoE;IACpE,kEAAkE;IAClE,gEAAgE;IAChE,uCAAuC;IACvC,IAAI,aAA8C,CAAC;IACnD,IACE,QAAQ,CAAC,MAAM,CAAC,MAAM;QACtB,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,KAAK;QACxC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW;QAClC,gBAAgB,EAAE,MAAM,EACxB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QACtD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC3C,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,IAAI;YAC3D,gBAAgB,CAAC,IAAI;YACrB,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;YACf,WAAW;SACZ,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,aAAa,GAAG;gBACd,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,4BAA4B,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;aAC5D,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,qEAAqE;YACrE,qEAAqE;YACrE,qEAAqE;YACrE,4DAA4D;YAC5D,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,aAAa,GAAG;oBACd,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,mCAAmC,MAAM,CAAC,IAAI,EAAE,GAAG;iBAC7D,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;gBACxD,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;gBAClE,aAAa;oBACX,GAAG,GAAG,CAAC;wBACL,CAAC,CAAC;4BACE,MAAM,EAAE,MAAM;4BACd,OAAO,EAAE,wBAAwB,KAAK,eAAe,UAAU,EAAE;yBAClE;wBACH,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,KAAK,MAAM,UAAU,EAAE,EAAE,CAAC;YAC/D,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAkB,EAAE,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,SAAS;QAC1B,KAAK,MAAM,IAAI,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,IAAI,IAAc,CAAC;YACnB,IAAI,CAAC;gBACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,OAAO,GAAG,QAAQ,EAAE,CAAC;gBAC5B,aAAa,CAAC,IAAI,CAAC;oBACjB,IAAI,EAAE,IAAI;oBACV,WAAW,EAAE,IAAI,CAAC,KAAK;oBACvB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;iBAC/D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAEhF,OAAO;QACL,WAAW;QACX,eAAe;QACf,gBAAgB;QAChB,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,aAAa;KACd,CAAC;AACJ,CAAC"}
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../src/probes/memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AA0E3D,SAAS,UAAU,CAAC,CAAS,EAAE,IAAY;IACzC,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,SAAS,iBAAiB,CAAC,CAAS,EAAE,OAA2B;IAC/D,IAAI,CAAC,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,CAAC;IACvD,OAAO,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAoB;IACxD,OAAO,MAAM,CAAC,eAAe,KAAK,IAAI,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,KAAK,GAAa,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QACzB,IAAI,OAAO,GAAgB,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,CAAC,WAAW,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACjC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAkB,EAAE,OAAsB,EAAE;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC;IAC/D,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,aAAa,GAAG,QAAQ,CAAC;IAE1D,yEAAyE;IACzE,uEAAuE;IACvE,oEAAoE;IACpE,0EAA0E;IAC1E,kEAAkE;IAClE,uEAAuE;IACvE,0CAA0C;IAC1C,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO;QAClC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;YAChC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,CAAC,OAAO;QAChB,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,WAAW,GAAgC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACrF,mEAAmE;QACnE,iEAAiE;QACjE,oEAAoE;QACpE,+CAA+C;QAC/C,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACrD,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,8DAA8D;YAC9D,4DAA4D;YAC5D,iCAAiC;YACjC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;YACtD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,gBAAgB,GAAqC,IAAI,CAAC;IAC9D,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC3C,oEAAoE;QACpE,oEAAoE;QACpE,kEAAkE;QAClE,mEAAmE;QACnE,mEAAmE;QACnE,oEAAoE;QACpE,WAAW;QACX,MAAM,SAAS,GAAG,CAAC,CAAS,EAAW,EAAE,CACvC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,KAAK,CAAC;QAC/F,MAAM,UAAU,GACd,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC/D,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAClC,GAAG,CAAC,CAAC,CAAC,CAAC;QACT,IAAI,UAAU,EAAE,CAAC;YACf,2DAA2D;YAC3D,iEAAiE;YACjE,uEAAuE;YACvE,6DAA6D;YAC7D,gEAAgE;YAChE,cAAc;YACd,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/D,MAAM,SAAS,GAAG,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBAC/C,gBAAgB,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3E,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;gBACvD,IAAI,QAAQ,GAAkB,IAAI,CAAC;gBACnC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBAChD,IAAI,CAAC,GAAG;wBAAE,SAAS;oBACnB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;oBAC7C,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC7B,QAAQ,GAAG,SAAS,CAAC;wBACrB,MAAM;oBACR,CAAC;gBACH,CAAC;gBACD,gBAAgB,GAAG,QAAQ;oBACzB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE;oBAClC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,oEAAoE;IACpE,kEAAkE;IAClE,gEAAgE;IAChE,uCAAuC;IACvC,IAAI,aAA8C,CAAC;IACnD,IACE,QAAQ,CAAC,MAAM,CAAC,MAAM;QACtB,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,KAAK;QACxC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW;QAClC,gBAAgB,EAAE,MAAM,EACxB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QACtD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC3C,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,IAAI;YAC3D,gBAAgB,CAAC,IAAI;YACrB,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;YACf,WAAW;SACZ,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,aAAa,GAAG;gBACd,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,4BAA4B,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;aAC5D,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,qEAAqE;YACrE,qEAAqE;YACrE,qEAAqE;YACrE,4DAA4D;YAC5D,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,aAAa,GAAG;oBACd,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,mCAAmC,MAAM,CAAC,IAAI,EAAE,GAAG;iBAC7D,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;gBACxD,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;gBAClE,aAAa;oBACX,GAAG,GAAG,CAAC;wBACL,CAAC,CAAC;4BACE,MAAM,EAAE,MAAM;4BACd,OAAO,EAAE,wBAAwB,KAAK,eAAe,UAAU,EAAE;yBAClE;wBACH,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,KAAK,MAAM,UAAU,EAAE,EAAE,CAAC;YAC/D,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAkB,EAAE,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,SAAS;QAC1B,KAAK,MAAM,IAAI,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,IAAI,IAAc,CAAC;YACnB,IAAI,CAAC;gBACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,OAAO,GAAG,QAAQ,EAAE,CAAC;gBAC5B,aAAa,CAAC,IAAI,CAAC;oBACjB,IAAI,EAAE,IAAI;oBACV,WAAW,EAAE,IAAI,CAAC,KAAK;oBACvB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;iBAC/D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAEhF,OAAO;QACL,WAAW;QACX,eAAe;QACf,gBAAgB;QAChB,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,aAAa;KACd,CAAC;AACJ,CAAC"}

package/dist/runtime/agent-facing.d.ts

@@ -1,4 +1,13 @@
 import type { PolicyUx } from "../schema/index.js";
+export interface SubstituteTemplateResult {
+    result: string;
+    missing: string[];
+}
+/**
+ * Replace each `${NAME}` in `template` with `values[NAME]`. A name without a
+ * value stays literal and is listed in `missing`.
+ */
+export declare function substituteTemplate(template: string, values: Record<string, string>): SubstituteTemplateResult;
 export interface AgentFacingBlock {
     cannot: string;
     required: string[];

package/dist/runtime/agent-facing.js

@@ -1,20 +1,19 @@
 // Agent-facing block message renderer.
 //
-// Translates a policy's `ux:` declaration into the plain-language form
-// the agent sees on block. The internal model (session IDs, ledger
-// entries, attestations, provenance chains, policy DAGs) is unchanged
-// and continues to feed the audit ledger; this module is concerned
+// Translates a policy pack's `config.ux` declaration (branch-protection) into
+// the plain-language form the agent sees on block. This module is concerned
 // only with the user-facing surface.
 //
-// Output shape, verbatim:
+// Output shape, verbatim (the shipped branch-protection default `ux`,
+// with `${BRANCH}` resolved to `main`):
 //
-//   You cannot investigate this repository yet.
+//   You cannot edit files on protected branch main yet.
 //
 //   Required:
-//   - verified repository preflight
+//   - a checkout of a non-protected branch (current `main` is protected)
 //
 //   Run:
-//     harness preflight
+//     git checkout -b feat/<your-task>
 //
 // Three sections every time: state (what's blocked), requirement
 // (what's missing, in plain words, never "ledger entry for tag X"),
@@ -22,12 +21,27 @@
 // `Required:` and a two-space indent under `Run:` so the eye lands on
 // the command as something to type.
 //
-// `${VAR}` references in any of the three fields resolve against the
-// same extract.values map the ledger_tag was substituted with, plus
-// the builtins (SESSION_ID / REPO / BRANCH / TOOL_NAME / CWD).
-// Unresolved vars are left literal so the agent can still read what
-// was expected (mirrors renderProducers' best-effort substitution).
-import { substituteTemplate } from "../io/extract.js";
+// `${VAR}` references in any of the three fields resolve against the values
+// map the caller passes (the branch-protection hook supplies `BRANCH`).
+// Unresolved vars are left literal so the agent can still read what was
+// expected.
+const TEMPLATE_VAR_RE = /\$\{([A-Z][A-Z0-9_]*)\}/g;
+/**
+ * Replace each `${NAME}` in `template` with `values[NAME]`. A name without a
+ * value stays literal and is listed in `missing`.
+ */
+export function substituteTemplate(template, values) {
+    const missing = [];
+    const result = template.replace(TEMPLATE_VAR_RE, (whole, name) => {
+        if (Object.prototype.hasOwnProperty.call(values, name)) {
+            return values[name];
+        }
+        if (!missing.includes(name))
+            missing.push(name);
+        return whole;
+    });
+    return { result, missing };
+}
 export function buildAgentFacingBlock(ux, values) {
     const sub = (s) => substituteTemplate(s, values).result;
     return {

package/dist/runtime/agent-facing.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-facing.js","sourceRoot":"","sources":["../../src/runtime/agent-facing.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,EAAE;AACF,uEAAuE;AACvE,mEAAmE;AACnE,sEAAsE;AACtE,mEAAmE;AACnE,qCAAqC;AACrC,EAAE;AACF,0BAA0B;AAC1B,EAAE;AACF,gDAAgD;AAChD,EAAE;AACF,cAAc;AACd,oCAAoC;AACpC,EAAE;AACF,SAAS;AACT,wBAAwB;AACxB,EAAE;AACF,iEAAiE;AACjE,oEAAoE;AACpE,mEAAmE;AACnE,sEAAsE;AACtE,oCAAoC;AACpC,EAAE;AACF,qEAAqE;AACrE,oEAAoE;AACpE,+DAA+D;AAC/D,oEAAoE;AACpE,oEAAoE;AAEpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAStD,MAAM,UAAU,qBAAqB,CACnC,EAAY,EACZ,MAA8B;IAE9B,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC;IACxE,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACtB,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;QAC9B,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAuB;IAC9D,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,OAAO,GAAG,KAAK,CAAC,MAAM,kBAAkB,aAAa,aAAa,QAAQ,EAAE,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,EAAY,EACZ,MAA8B;IAE9B,OAAO,wBAAwB,CAAC,qBAAqB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;AACrE,CAAC"}
+{"version":3,"file":"agent-facing.js","sourceRoot":"","sources":["../../src/runtime/agent-facing.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,qCAAqC;AACrC,EAAE;AACF,sEAAsE;AACtE,wCAAwC;AACxC,EAAE;AACF,wDAAwD;AACxD,EAAE;AACF,cAAc;AACd,yEAAyE;AACzE,EAAE;AACF,SAAS;AACT,uCAAuC;AACvC,EAAE;AACF,iEAAiE;AACjE,oEAAoE;AACpE,mEAAmE;AACnE,sEAAsE;AACtE,oCAAoC;AACpC,EAAE;AACF,4EAA4E;AAC5E,wEAAwE;AACxE,wEAAwE;AACxE,YAAY;AAIZ,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAOnD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,MAA8B;IAE9B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;QACvE,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YACvD,OAAO,MAAM,CAAC,IAAI,CAAE,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAQD,MAAM,UAAU,qBAAqB,CACnC,EAAY,EACZ,MAA8B;IAE9B,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC;IACxE,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACtB,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;QAC9B,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAuB;IAC9D,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,OAAO,GAAG,KAAK,CAAC,MAAM,kBAAkB,aAAa,aAAa,QAAQ,EAAE,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,EAAY,EACZ,MAA8B;IAE9B,OAAO,wBAAwB,CAAC,qBAAqB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;AACrE,CAAC"}

package/dist/runtime/bounded-text.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Cap on the agent-facing text of one block, in UTF-8 bytes. A hook's output
+ * travels through a pipe the host reads at its own pace, and a block reason
+ * can embed text of unbounded size (a manifest parse error grows with the
+ * manifest), so every reason is cut to this size before it is written.
+ */
+export declare const BLOCK_TEXT_MAX_BYTES = 4096;
+/**
+ * `text` cut to at most `maxBytes` UTF-8 bytes, followed by a marker that
+ * names how many bytes were dropped. A text that fits is returned unchanged.
+ * The cut never lands inside a multi-byte character: it backs up to the
+ * start of the character that straddles the limit, so the kept prefix is
+ * valid UTF-8 and the dropped count is exact.
+ */
+export declare function boundUtf8(text: string, maxBytes?: number): string;

package/dist/runtime/bounded-text.js

@@ -0,0 +1,27 @@
+/**
+ * Cap on the agent-facing text of one block, in UTF-8 bytes. A hook's output
+ * travels through a pipe the host reads at its own pace, and a block reason
+ * can embed text of unbounded size (a manifest parse error grows with the
+ * manifest), so every reason is cut to this size before it is written.
+ */
+export const BLOCK_TEXT_MAX_BYTES = 4096;
+/**
+ * `text` cut to at most `maxBytes` UTF-8 bytes, followed by a marker that
+ * names how many bytes were dropped. A text that fits is returned unchanged.
+ * The cut never lands inside a multi-byte character: it backs up to the
+ * start of the character that straddles the limit, so the kept prefix is
+ * valid UTF-8 and the dropped count is exact.
+ */
+export function boundUtf8(text, maxBytes = BLOCK_TEXT_MAX_BYTES) {
+    const bytes = Buffer.from(text, "utf8");
+    if (bytes.length <= maxBytes)
+        return text;
+    let cut = Math.max(0, maxBytes);
+    // 0b10xxxxxx marks a continuation byte; stop at the lead byte of the
+    // character the limit falls into and drop that whole character.
+    while (cut > 0 && (bytes[cut] & 0xc0) === 0x80)
+        cut -= 1;
+    const kept = bytes.subarray(0, cut).toString("utf8");
+    return `${kept}\n[truncated ${bytes.length - cut} bytes]`;
+}
+//# sourceMappingURL=bounded-text.js.map

package/dist/runtime/bounded-text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-text.js","sourceRoot":"","sources":["../../src/runtime/bounded-text.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,WAAmB,oBAAoB;IAC7E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChC,qEAAqE;IACrE,gEAAgE;IAChE,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAE,GAAG,IAAI,CAAC,KAAK,IAAI;QAAE,GAAG,IAAI,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrD,OAAO,GAAG,IAAI,gBAAgB,KAAK,CAAC,MAAM,GAAG,GAAG,SAAS,CAAC;AAC5D,CAAC"}

package/dist/runtime/git-branch.d.ts

@@ -0,0 +1,125 @@
+/** Bound on one git call; the child is killed with SIGKILL when it passes. */
+export declare const GIT_BRANCH_TIMEOUT_MS = 2000;
+/** Cap on each of git's output streams, in bytes. */
+export declare const GIT_OUTPUT_CAP_BYTES = 4096;
+/** Cap on the stderr line carried into a refusal, in characters. */
+export declare const GIT_STDERR_LINE_CAP = 200;
+/** What one git call produced, before classification. */
+export type GitHeadAnswer = {
+    kind: "exited";
+    code: number;
+    stdout: string;
+    stderr: string;
+} | {
+    kind: "signaled";
+    signal: string;
+    stderr: string;
+} | {
+    kind: "timed-out";
+    timeoutMs: number;
+    stderr: string;
+} | {
+    kind: "oversized";
+    stderr: string;
+} | {
+    kind: "spawn-failed";
+    code: string;
+};
+/** Runs `git -C <dir> symbolic-ref -q HEAD` (or a test double of it). */
+export type GitHeadReader = (dir: string, timeoutMs: number) => Promise<GitHeadAnswer>;
+/** The branch of a directory as the gate sees it. */
+export type BranchRead = {
+    kind: "outside";
+} | {
+    kind: "branch";
+    name: string;
+} | {
+    kind: "detached";
+} | {
+    kind: "error";
+    detail: string;
+};
+/**
+ * The environment git runs in: the given environment without any variable
+ * whose name starts with `GIT_` (compared upper-cased), plus the three fixed
+ * settings. Everything else, `HOME` and `PATH` included, is kept.
+ */
+export declare function gitReaderEnv(base?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+/** The real reader: one `execFile` of git, never a shell. */
+export declare const readGitHead: GitHeadReader;
+/** First non-empty line of `text`, control characters replaced, capped. */
+export declare function firstLine(text: string): string;
+/** Classify one git answer. Never returns `outside`. */
+export declare function classifyGitHeadAnswer(answer: GitHeadAnswer): BranchRead;
+/**
+ * True when an entry named `.git` exists in `dir` or any directory above it.
+ * Only `lstat` is used, so the entry is never opened. An `lstat` that fails
+ * for another reason than a missing path counts as present: git decides.
+ * `dir` is walked as written (`..` taken on the text, symlinks left in
+ * place); `readBranch` passes the physical directory.
+ */
+export declare function hasGitEntryAbove(dir: string): boolean;
+/** Thrown when resolving the paths of one event passes the caller's bound. */
+export declare class PathBoundError extends Error {
+    constructor();
+}
+/**
+ * Shared by every path of one event. `overBound` is asked before each step
+ * (a path, a path component, a symlink hop); once it returns true the
+ * resolution stops with a `PathBoundError`. `memo` keeps the physical
+ * directory of each path already resolved, so a prefix many paths share is
+ * resolved once.
+ */
+export interface PathResolution {
+    overBound?: () => boolean;
+    memo?: Map<string, string | null>;
+}
+/** `p` made absolute against `base` without editing its text (`..` and symlinks stay for the filesystem). */
+export declare function absolutePath(p: string, base?: string): string;
+/**
+ * The nearest directory at or above `p` that exists (a Write may create the
+ * directories in between), as the operating system resolves `p`: through
+ * symlinks, with `..` taken from the directory reached so far. A path that
+ * cannot be examined counts as missing.
+ */
+export declare function nearestExistingDirectory(p: string, res?: PathResolution): string;
+/**
+ * The nearest directory at or above `p` that exists, with `p` taken as
+ * written: made absolute and `.` and `..` resolved on the text
+ * (`path.resolve`), then shortened from the end until it names an existing
+ * directory. Symlinks stay in the result. A path that cannot be examined
+ * counts as missing.
+ */
+export declare function nearestExistingDirectoryAsWritten(p: string, res?: PathResolution): string;
+/**
+ * The physical directories a write to `target` (relative to `cwd`) lands
+ * in: the nearest existing directory holding it and, when the target itself
+ * is a symlink, the directory it leads to as well (a write may replace the
+ * link or go through it). A link that does not resolve yet is followed by
+ * its text, up to a bound.
+ */
+export declare function writeTargetDirectories(target: string, cwd: string, res?: PathResolution): string[];
+export interface ReadBranchOptions {
+    reader?: GitHeadReader;
+    timeoutMs?: number;
+}
+/**
+ * Presence walk from `dir` as it is given (`..` taken on the text, symlinks
+ * left in place), then `git -C <dir>`. `dir` should be an existing absolute
+ * directory.
+ */
+export declare function readBranchAt(dir: string, opts?: ReadBranchOptions): Promise<BranchRead>;
+/** The physical path of the directory `dir` (the one `git -C` changes into), or why it has none. */
+export declare function resolveDirectory(dir: string): {
+    kind: "path";
+    path: string;
+} | {
+    kind: "error";
+    detail: string;
+};
+/**
+ * Presence walk, then git, both on the physical directory of `dir` (the one
+ * `git -C` changes into). `dir` should be an existing directory; one that
+ * cannot be resolved is an error.
+ */
+export declare function readBranch(dir: string, opts?: ReadBranchOptions): Promise<BranchRead>;