@lannguyensi/harness 0.63.0 → 1.0.0

package/dist/cli/doctor/understanding-mode-env.js

@@ -1,98 +0,0 @@
-// Advisory check (task 24abdecb): warn (never error) when the operator's
-// process environment carries `UNDERSTANDING_GATE_MODE` and it diverges
-// from `policy_packs[understanding-before-execution].config.mode`.
-//
-// Context (Batch 11 verification round, reviewer finding on task
-// 5d73d78d): after that fix, `resolveModeFromConfig` (config-only, no env
-// read) drives every GENERATION-path artefact — `harness apply`'s
-// settings.json / instructions.md, and `resolveBuiltinDefaultConfig` in
-// `../../policy-packs/registry.ts` (consumed by this doctor's own
-// UX-drift comparison). Only the LIVE runtime path — `resolveMode` in
-// `approve/understanding.ts`'s stdin-report gap-fill, and the Codex
-// `UserPromptSubmit` injector — still reads `UNDERSTANDING_GATE_MODE`
-// (Env > config.mode > default), by design: it is the documented one-off
-// override mechanism, mirroring `@lannguyensi/understanding-gate`'s own
-// "env wins because operators set it consciously" rule (see `MODE_ENV`'s
-// doc comment in `understanding-before-execution.ts`).
-//
-// The gap this check closes: an operator who carries the variable in
-// their shell profile (rather than a one-off inline override) silently
-// downgrades enforcement relative to what `harness.yaml` declares, with
-// no signal anywhere that generation and the live path have diverged.
-// Live-verified: `harness approve understanding` accepted a
-// `fast_confirm`-shaped report against a `grill_me`-configured manifest
-// with no warning. The divergence is agent-unreachable (it only bites at
-// approve time, run from the operator's own shell), so `harness doctor`
-// — which already reads `process.env` for env-dependent checks, e.g.
-// `checkNpmBinPath` (`npm-bin-path.ts`) and the dead-settings.json-block
-// lookup (`claude-mcp.ts`) — is the right place to surface it.
-//
-// Deliberately advisory, never an error: the env override is a
-// legitimate, documented escape hatch, not a misconfiguration. The gap is
-// visibility (the operator may not remember the variable is still
-// exported), not validity.
-import { isMode, MODE_ENV, PACK_NAME as UNDERSTANDING_PACK_NAME, resolveModeFromConfig, } from "../../policy-packs/builtin/understanding-before-execution.js";
-/**
- * Pure: manifest + env in, a divergence report out (or `undefined` when
- * there is nothing to flag). Only fires when:
- *   - the `understanding-before-execution` pack is declared AND enabled
- *     (a pack that never runs has no live mode for the env to diverge
- *     from — mirrors the enabled-gate other doctor sections use, e.g.
- *     `buildGrounding`'s `groundingServer` lookup in `index.ts`);
- *   - `UNDERSTANDING_GATE_MODE` is set to a non-empty value AND, once
- *     trimmed/lower-cased the same way `resolveMode` normalises it,
- *     resolves to a recognised {@link Mode}. An env value the live
- *     runtime would itself reject (unset, empty, or unrecognised) cannot
- *     diverge from anything — the live resolver falls back to
- *     `config.mode` in that case too, so there is no enforcement gap to
- *     warn about.
- *   - the normalised env mode differs from the resolved `config.mode`.
- */
-/**
- * Shared gate for the understanding-gate doctor sub-checks that only
- * make sense when the pack is actually live: this divergence advisory,
- * and (ADR docs/decisions/2026-08-27-ug-auto-mode-approval.md slice 1,
- * agent-tasks 74b4b17d) the auto-approval listing and settings-drift
- * checks. Declared-but-disabled counts as not enabled, mirroring the
- * `p.enabled !== false` gate `checkUnderstandingModeEnvDivergence` uses
- * inline below.
- */
-export function findEnabledUnderstandingPack(manifest) {
-    return manifest.policy_packs.find((p) => p.name === UNDERSTANDING_PACK_NAME && p.enabled !== false);
-}
-export function isUnderstandingPackEnabled(manifest) {
-    return findEnabledUnderstandingPack(manifest) !== undefined;
-}
-export function checkUnderstandingModeEnvDivergence(manifest, env) {
-    const pack = findEnabledUnderstandingPack(manifest);
-    if (!pack)
-        return undefined;
-    const envRaw = env[MODE_ENV];
-    if (envRaw === undefined || envRaw === "")
-        return undefined;
-    const normalizedEnv = envRaw.trim().toLowerCase();
-    if (!isMode(normalizedEnv))
-        return undefined;
-    const { mode: configMode, warning: configWarning } = resolveModeFromConfig(pack);
-    if (normalizedEnv === configMode)
-        return undefined;
-    // `configMode` is the RESOLVED (effective) value, not necessarily what's
-    // literally written in harness.yaml: when `resolveModeFromConfig` itself
-    // had to fall back (an unset or unrecognised `config.mode`, signalled by
-    // a non-null `configWarning`), attributing it to "(from harness.yaml)"
-    // would be a false verbatim claim. Drop the parenthetical in that case;
-    // the value is still the correct effective mode, just not YAML-sourced.
-    const attribution = configWarning ? "" : " (from harness.yaml)";
-    return {
-        envMode: normalizedEnv,
-        configMode,
-        message: `${MODE_ENV}=${normalizedEnv} diverges from config.mode=${configMode}`,
-        detail: [
-            "live runtime consumers (`harness approve understanding`'s stdin-report gap-fill, the " +
-                `Codex UserPromptSubmit injector) read the env, so enforcement is effectively "${normalizedEnv}"`,
-            `effective config.mode=${configMode}${attribution}`,
-            `if this is not a deliberate one-off override, unset ${MODE_ENV} in your shell profile`,
-        ],
-    };
-}
-//# sourceMappingURL=understanding-mode-env.js.map

package/dist/cli/doctor/understanding-mode-env.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"understanding-mode-env.js","sourceRoot":"","sources":["../../../src/cli/doctor/understanding-mode-env.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,wEAAwE;AACxE,mEAAmE;AACnE,EAAE;AACF,iEAAiE;AACjE,0EAA0E;AAC1E,kEAAkE;AAClE,wEAAwE;AACxE,kEAAkE;AAClE,sEAAsE;AACtE,oEAAoE;AACpE,sEAAsE;AACtE,yEAAyE;AACzE,wEAAwE;AACxE,yEAAyE;AACzE,uDAAuD;AACvD,EAAE;AACF,qEAAqE;AACrE,uEAAuE;AACvE,wEAAwE;AACxE,sEAAsE;AACtE,4DAA4D;AAC5D,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AACxE,qEAAqE;AACrE,yEAAyE;AACzE,+DAA+D;AAC/D,EAAE;AACF,+DAA+D;AAC/D,0EAA0E;AAC1E,kEAAkE;AAClE,2BAA2B;AAE3B,OAAO,EACL,MAAM,EACN,QAAQ,EACR,SAAS,IAAI,uBAAuB,EACpC,qBAAqB,GAEtB,MAAM,8DAA8D,CAAC;AAyBtE;;;;;;;;;;;;;;;GAeG;AACH;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAAC,QAAkB;IAC7D,OAAO,QAAQ,CAAC,YAAY,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,uBAAuB,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,CACjE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAAkB;IAC3D,OAAO,4BAA4B,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,QAAkB,EAClB,GAAsB;IAEtB,MAAM,IAAI,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAE5B,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAC;IAE7C,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACjF,IAAI,aAAa,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IAEnD,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,uEAAuE;IACvE,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,sBAAsB,CAAC;IAEhE,OAAO;QACL,OAAO,EAAE,aAAa;QACtB,UAAU;QACV,OAAO,EAAE,GAAG,QAAQ,IAAI,aAAa,8BAA8B,UAAU,EAAE;QAC/E,MAAM,EAAE;YACN,uFAAuF;gBACrF,iFAAiF,aAAa,GAAG;YACnG,yBAAyB,UAAU,GAAG,WAAW,EAAE;YACnD,uDAAuD,QAAQ,wBAAwB;SACxF;KACF,CAAC;AACJ,CAAC"}

package/dist/cli/dry-run.d.ts

@@ -1,46 +0,0 @@
-import { type ExtractBuiltins } from "../policies/index.js";
-import type { Policy } from "../schema/index.js";
-import { type LoaderOptions } from "./loader.js";
-export interface DryRunOptions extends LoaderOptions {
-    json?: boolean;
-    /** Tool name to simulate; required for `PreToolUse` matching. */
-    tool?: string;
-    /** JSON string for `tool_input`. Parsed once and threaded into the extract context. */
-    toolArgs?: string;
-    /** Override builtins (tests). */
-    builtins?: Partial<ExtractBuiltins>;
-}
-export interface DryRunHookHit {
-    event: string;
-    name: string;
-}
-export interface DryRunPolicyHit {
-    name: string;
-    ledgerQuery: string;
-    requires: Policy["requires"];
-    enforcement: Policy["enforcement"];
-    triggerEvent: string;
-}
-export interface DryRunPolicyCouldHit {
-    name: string;
-    triggerEvent: string;
-    reason: string;
-}
-export interface DryRunMemoryDir {
-    path: string;
-    scope: string;
-}
-export interface DryRunReport {
-    prompt: string;
-    tool: string | null;
-    toolArgs: unknown;
-    hooks: DryRunHookHit[];
-    matchingPolicies: DryRunPolicyHit[];
-    couldMatchPolicies: DryRunPolicyCouldHit[];
-    memoryDirectories: DryRunMemoryDir[];
-}
-export interface DryRunResult {
-    output: string;
-    report: DryRunReport;
-}
-export declare function dryRun(prompt: string, opts?: DryRunOptions): DryRunResult;

package/dist/cli/dry-run.js

@@ -1,250 +0,0 @@
-import { stringify as stringifyYaml } from "yaml";
-import { evaluateExtract, firstInputMatchMismatch, substituteTemplate, } from "../policies/index.js";
-import { normalizeCommand, normalizeCommandAmpAware, normalizeCommandQuoteAware, } from "../runtime/command-normalize.js";
-import { resolveGitContext } from "../runtime/git-context.js";
-import { emptyIdentifierGuard } from "../runtime/intercept.js";
-import { EX_USAGE, HarnessExitError } from "./exit-codes.js";
-import { loadManifest } from "./loader.js";
-const PROMPT_EVENTS = new Set(["UserPromptSubmit", "SessionStart"]);
-function builtinsFor(opts, tool) {
-    const fromOpts = opts.builtins ?? {};
-    // Derive REPO / BRANCH from the cwd so the prediction matches what the
-    // intercept engine resolves at runtime; an explicit builtins override
-    // (tests, or a deliberate caller) still wins.
-    const cwd = fromOpts.CWD ?? process.cwd();
-    const gitContext = resolveGitContext(cwd);
-    return {
-        SESSION_ID: fromOpts.SESSION_ID ?? "dry-run",
-        REPO: fromOpts.REPO ?? gitContext.repo,
-        BRANCH: fromOpts.BRANCH ?? gitContext.branch,
-        TOOL_NAME: fromOpts.TOOL_NAME ?? (tool ?? ""),
-        CWD: cwd,
-    };
-}
-function policyMatchesPrompt(policy, prompt) {
-    if (!PROMPT_EVENTS.has(policy.trigger.event))
-        return false;
-    if (policy.trigger.match !== undefined) {
-        return prompt.includes(policy.trigger.match);
-    }
-    return true;
-}
-function policyMatchesTool(policy, tool, toolInput) {
-    if (policy.trigger.event !== "PreToolUse") {
-        return { matched: false, reason: `trigger event is ${policy.trigger.event}, not PreToolUse` };
-    }
-    if (policy.trigger.match !== undefined && !tool.includes(policy.trigger.match)) {
-        return {
-            matched: false,
-            reason: `--tool "${tool}" does not contain trigger.match "${policy.trigger.match}"`,
-        };
-    }
-    // `input_match` (task 2699b476): the SAME predicate `policyMatchesEvent`
-    // ANDs onto the tool-name match (`firstInputMatchMismatch`, called on
-    // the same single-object `toolArgs` context both sides build for a
-    // single-envelope input), so dry-run predicts
-    // `mcp__agent-tasks__task_finish` with `{"autoMerge": true}` as gated
-    // and the same verb without it as unmatched, exactly as the runtime
-    // decides. Leaving this arm out would reintroduce the debug-verb
-    // contradiction the bash_match arms below already document once for
-    // their own family: dry-run reporting "no policy matches" for a call
-    // `policy intercept` blocks. Parity holds only for what dry-run can
-    // express: `--input` is always a single JSON object, so it cannot
-    // reproduce the runtime's mixed tool_input/raw_input envelope
-    // (review round 1, task 2699b476 round 2): that arm is
-    // intercept-only by construction, not a gap in this mirror.
-    // This parity, and the mixed-envelope caveat, are recorded in
-    // docs/okf/debug-verb-selection.md's trigger-matching parity paragraph.
-    if (policy.trigger.input_match !== undefined) {
-        const mismatch = firstInputMatchMismatch(policy.trigger.input_match, {
-            toolArgs: toolInput,
-        });
-        if (mismatch !== null) {
-            return {
-                matched: false,
-                reason: mismatch.missing
-                    ? `trigger.input_match needs ${mismatch.expression} in tool_input ` +
-                        `(expected ${JSON.stringify(mismatch.expected)})`
-                    : `trigger.input_match ${mismatch.expression} is ` +
-                        `${JSON.stringify(mismatch.actual)}, not ${JSON.stringify(mismatch.expected)}`,
-            };
-        }
-    }
-    if (policy.trigger.bash_match !== undefined) {
-        const args = toolInput;
-        if (!args || typeof args.command !== "string") {
-            return {
-                matched: false,
-                reason: "trigger.bash_match needs tool_input.command",
-            };
-        }
-        let re;
-        try {
-            re = new RegExp(policy.trigger.bash_match);
-        }
-        catch {
-            return { matched: false, reason: `trigger.bash_match is not a valid regex` };
-        }
-        // Raw-OR-normalised-OR-amp-normalised-OR-quote-normalised, mirroring
-        // `policyMatchesEvent`'s real evaluation path exactly (third arm added
-        // task aabbad63; fourth arm added task f561e44c): dry-run used to test
-        // only the RAW command, so it predicted `env -C /tmp git status` as NOT
-        // matching `preflight-before-investigation` while `policy intercept`
-        // actually blocks it — a debug verb contradicting the runtime it exists
-        // to predict (its own comment above and docs/okf/debug-verb-selection.md
-        // both assert parity). Leaving out the amp-aware third arm here would
-        // reintroduce that SAME class of contradiction for the bare-`&` family
-        // (`A=x&env -C /tmp git status`, `echo hi & nice git status`): `policy
-        // intercept` now blocks those via `normalizeCommandAmpAware`, so dry-run
-        // must try it too. The REPO/BRANCH half of this file (`builtinsFor`,
-        // cwd-only) stays in parity with the runtime, which is also cwd-only for
-        // `${REPO}`/`${BRANCH}` — see `src/cli/policy/intercept.ts`'s comment
-        // above `cwdGitContext` for why a per-command target directory is
-        // deliberately not consulted.
-        //
-        // FOURTH ARM (task f561e44c, closes the cf3dff51 follow-up): task
-        // cf3dff51 wired `normalizeCommandQuoteAware` (a quote-aware BOUNDARY_RE
-        // segmenter closing `VAR='a; b' git push origin master` and its
-        // `|`/`&&`/`(`/newline siblings — task 13e55484's pinned gap) as
-        // `policyMatchesEvent`'s FOURTH arm, but deliberately left this function
-        // untouched (scope was narrowed to `src/runtime/intercept.ts` alone),
-        // reintroducing EXACTLY the parity contradiction this comment's first
-        // sentence describes, for that one family. Closed here by adding the
-        // same fourth OR-arm, literally duplicated rather than extracted to a
-        // shared helper — mirroring the amp-aware arm's own literal-duplication
-        // shape immediately above (no shared-helper precedent exists yet for
-        // this OR-chain to follow instead).
-        if (!re.test(args.command) &&
-            !re.test(normalizeCommand(args.command).normalized) &&
-            !re.test(normalizeCommandAmpAware(args.command).normalized) &&
-            !re.test(normalizeCommandQuoteAware(args.command).normalized)) {
-            return {
-                matched: false,
-                reason: `bash_match "${policy.trigger.bash_match}" did not match`,
-            };
-        }
-    }
-    return { matched: true };
-}
-function buildHookHits(manifest, tool) {
-    const hits = [];
-    for (const hook of manifest.hooks) {
-        if (PROMPT_EVENTS.has(hook.event)) {
-            hits.push({ event: hook.event, name: hook.name });
-            continue;
-        }
-        if (tool !== null && hook.event === "PreToolUse") {
-            hits.push({ event: hook.event, name: hook.name });
-        }
-    }
-    return hits;
-}
-function staticLedgerQuery(policy, ctx, builtins) {
-    if (policy.requires === undefined) {
-        // operator_only: true (task 2cc73f55): no requires.ledger_tag to
-        // substitute — the policy never queries the ledger at all.
-        return "(operator-only: no ledger query — unconditional deny)";
-    }
-    const extract = evaluateExtract(policy.trigger.extract ?? {}, ctx, builtins);
-    // Same guard as the runtime: an empty ${REPO} / ${BRANCH} never renders
-    // a blank tag (`preflight:`); show the hint the agent would get instead.
-    const emptyGuard = emptyIdentifierGuard(policy.requires.ledger_tag, extract.values);
-    if (emptyGuard !== null) {
-        return `(no ledger query: ${emptyGuard.message})`;
-    }
-    const sub = substituteTemplate(policy.requires.ledger_tag, extract.values);
-    return sub.result;
-}
-function formatYaml(report) {
-    // Hide raw `null` from YAML output for the no-tool case.
-    const visible = {
-        prompt: report.prompt,
-        ...(report.tool !== null && { tool: report.tool }),
-        ...(report.tool !== null && report.toolArgs !== undefined && {
-            toolArgs: report.toolArgs,
-        }),
-        "Hooks that would fire": report.hooks.length === 0 ? "(none)" : report.hooks,
-        "Policies that match": report.matchingPolicies.length === 0 ? "(none)" : report.matchingPolicies,
-        "Policies that COULD match (need --tool)": report.couldMatchPolicies.length === 0 ? "(none)" : report.couldMatchPolicies,
-        "Memories that would route": report.memoryDirectories.length === 0 ? "(none)" : report.memoryDirectories,
-    };
-    return stringifyYaml(visible, { lineWidth: 0 });
-}
-export function dryRun(prompt, opts = {}) {
-    const { manifest } = loadManifest(opts);
-    const tool = opts.tool ?? null;
-    let toolArgs = undefined;
-    if (opts.toolArgs !== undefined) {
-        try {
-            toolArgs = JSON.parse(opts.toolArgs);
-        }
-        catch (err) {
-            throw new HarnessExitError(`--tool-args: ${err.message}`, EX_USAGE);
-        }
-    }
-    const builtins = builtinsFor(opts, tool);
-    const ctx = {
-        toolArgs,
-        event: { hook_event_name: tool ? "PreToolUse" : "UserPromptSubmit", tool_name: tool, prompt },
-        session: { id: builtins.SESSION_ID },
-        git: {},
-    };
-    const hooks = buildHookHits(manifest, tool);
-    const matching = [];
-    const couldMatch = [];
-    for (const policy of manifest.policies) {
-        if (PROMPT_EVENTS.has(policy.trigger.event)) {
-            if (policyMatchesPrompt(policy, prompt)) {
-                matching.push({
-                    name: policy.name,
-                    ledgerQuery: staticLedgerQuery(policy, ctx, builtins),
-                    requires: policy.requires,
-                    enforcement: policy.enforcement,
-                    triggerEvent: policy.trigger.event,
-                });
-            }
-            continue;
-        }
-        // PreToolUse and friends.
-        if (tool === null) {
-            couldMatch.push({
-                name: policy.name,
-                triggerEvent: policy.trigger.event,
-                reason: "no --tool supplied; dry-run can only statically match prompt-style events",
-            });
-            continue;
-        }
-        const verdict = policyMatchesTool(policy, tool, toolArgs);
-        if (verdict.matched) {
-            matching.push({
-                name: policy.name,
-                ledgerQuery: staticLedgerQuery(policy, ctx, builtins),
-                requires: policy.requires,
-                enforcement: policy.enforcement,
-                triggerEvent: policy.trigger.event,
-            });
-        }
-        else {
-            couldMatch.push({
-                name: policy.name,
-                triggerEvent: policy.trigger.event,
-                reason: verdict.reason,
-            });
-        }
-    }
-    const memoryDirectories = manifest.memory.directories.map((d) => ({ path: d.path, scope: d.scope }));
-    const report = {
-        prompt,
-        tool,
-        toolArgs,
-        hooks,
-        matchingPolicies: matching,
-        couldMatchPolicies: couldMatch,
-        memoryDirectories,
-    };
-    const output = opts.json
-        ? `${JSON.stringify(report, null, 2)}\n`
-        : formatYaml(report);
-    return { output, report };
-}
-//# sourceMappingURL=dry-run.js.map

package/dist/cli/dry-run.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dry-run.js","sourceRoot":"","sources":["../../src/cli/dry-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AAClD,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,kBAAkB,GAGnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE/D,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAsB,MAAM,aAAa,CAAC;AAmD/D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC,CAAC;AAEpE,SAAS,WAAW,CAAC,IAAmB,EAAE,IAAmB;IAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IACrC,uEAAuE;IACvE,sEAAsE;IACtE,8CAA8C;IAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,SAAS;QAC5C,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI;QACtC,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM;QAC5C,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAC7C,GAAG,EAAE,GAAG;KACT,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc,EAAE,MAAc;IACzD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAc,EACd,IAAY,EACZ,SAAkB;IAElB,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,MAAM,CAAC,OAAO,CAAC,KAAK,kBAAkB,EAAE,CAAC;IAChG,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/E,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,WAAW,IAAI,qCAAqC,MAAM,CAAC,OAAO,CAAC,KAAK,GAAG;SACpF,CAAC;IACJ,CAAC;IACD,yEAAyE;IACzE,sEAAsE;IACtE,mEAAmE;IACnE,8CAA8C;IAC9C,sEAAsE;IACtE,oEAAoE;IACpE,iEAAiE;IACjE,oEAAoE;IACpE,qEAAqE;IACrE,oEAAoE;IACpE,kEAAkE;IAClE,8DAA8D;IAC9D,uDAAuD;IACvD,4DAA4D;IAC5D,8DAA8D;IAC9D,wEAAwE;IACxE,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE;YACnE,QAAQ,EAAE,SAAS;SACpB,CAAC,CAAC;QACH,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,QAAQ,CAAC,OAAO;oBACtB,CAAC,CAAC,6BAA6B,QAAQ,CAAC,UAAU,iBAAiB;wBACjE,aAAa,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG;oBACnD,CAAC,CAAC,uBAAuB,QAAQ,CAAC,UAAU,MAAM;wBAChD,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;aACnF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,SAA8C,CAAC;QAC5D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,6CAA6C;aACtD,CAAC;QACJ,CAAC;QACD,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,EAAE,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;QAC/E,CAAC;QACD,qEAAqE;QACrE,uEAAuE;QACvE,uEAAuE;QACvE,wEAAwE;QACxE,qEAAqE;QACrE,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,uEAAuE;QACvE,uEAAuE;QACvE,yEAAyE;QACzE,qEAAqE;QACrE,yEAAyE;QACzE,sEAAsE;QACtE,kEAAkE;QAClE,8BAA8B;QAC9B,EAAE;QACF,kEAAkE;QAClE,yEAAyE;QACzE,gEAAgE;QAChE,iEAAiE;QACjE,yEAAyE;QACzE,sEAAsE;QACtE,sEAAsE;QACtE,qEAAqE;QACrE,sEAAsE;QACtE,wEAAwE;QACxE,qEAAqE;QACrE,oCAAoC;QACpC,IACE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACtB,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC;YACnD,CAAC,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC;YAC3D,CAAC,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,EAC7D,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,eAAe,MAAM,CAAC,OAAO,CAAC,UAAU,iBAAiB;aAClE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,aAAa,CAAC,QAAkB,EAAE,IAAmB;IAC5D,MAAM,IAAI,GAAoB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAe,EAAE,CAAC;QAC5C,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAClD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAc,EACd,GAAwB,EACxB,QAAyB;IAEzB,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,iEAAiE;QACjE,2DAA2D;QAC3D,OAAO,uDAAuD,CAAC;IACjE,CAAC;IACD,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC7E,wEAAwE;IACxE,yEAAyE;IACzE,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACpF,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO,qBAAqB,UAAU,CAAC,OAAO,GAAG,CAAC;IACpD,CAAC;IACD,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3E,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,MAAoB;IACtC,yDAAyD;IACzD,MAAM,OAAO,GAA4B;QACvC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAClD,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI;YAC3D,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;QACF,uBAAuB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK;QAC5E,qBAAqB,EACnB,MAAM,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB;QAC3E,yCAAyC,EACvC,MAAM,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB;QAC/E,2BAA2B,EACzB,MAAM,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB;KAC9E,CAAC;IACF,OAAO,aAAa,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,MAAc,EAAE,OAAsB,EAAE;IAC7D,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;IAC/B,IAAI,QAAQ,GAAY,SAAS,CAAC;IAClC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,gBAAgB,CACxB,gBAAiB,GAAa,CAAC,OAAO,EAAE,EACxC,QAAQ,CACT,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzC,MAAM,GAAG,GAAwB;QAC/B,QAAQ;QACR,KAAK,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7F,OAAO,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,UAAU,EAAE;QACpC,GAAG,EAAE,EAAE;KACR,CAAC;IAEF,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,UAAU,GAA2B,EAAE,CAAC;IAE9C,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvC,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,IAAI,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;gBACxC,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,WAAW,EAAE,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC;oBACrD,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK;iBACnC,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QACD,0BAA0B;QAC1B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK;gBAClC,MAAM,EAAE,2EAA2E;aACpF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,WAAW,EAAE,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC;gBACrD,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK;aACnC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK;gBAClC,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,iBAAiB,GAAsB,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAC1E,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAC1C,CAAC;IAEF,MAAM,MAAM,GAAiB;QAC3B,MAAM;QACN,IAAI;QACJ,QAAQ;QACR,KAAK;QACL,gBAAgB,EAAE,QAAQ;QAC1B,kBAAkB,EAAE,UAAU;QAC9B,iBAAiB;KAClB,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI;QACtB,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;QACxC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC"}

package/dist/cli/event-input.d.ts

@@ -1,28 +0,0 @@
-import { type ActionEnvelope, type GitRepoContext, type ToolEvent } from "../runtime/index.js";
-/** Injectable seams so callers (and tests) can make resolution deterministic. */
-export interface EventInputSeams {
-    /** Override the envelope timestamp. */
-    now?: Date;
-    /** Override the resolved host name. */
-    host?: string;
-    /** Override the resolved OS user. */
-    user?: string;
-    /** Override git-context resolution. */
-    resolveGit?: (cwd: string) => GitRepoContext;
-    /** Override the cwd fallback used when the event omits `cwd`. */
-    cwdFallback?: string;
-}
-export interface LoadedEvent {
-    event: ToolEvent;
-    envelope: ActionEnvelope;
-}
-/**
- * Read a tool-event JSON file and build its Action Envelope.
- *
- * Throws `HarnessExitError(EX_NOINPUT)` when the file is missing, is not
- * valid JSON, or does not decode to a JSON object. A well-formed but
- * sparse event (e.g. `{}`) is accepted: the envelope builder fills
- * absent fields with empty values rather than throwing. `verb` only
- * prefixes the error messages so the operator sees which command failed.
- */
-export declare function loadEventEnvelope(eventPath: string, seams?: EventInputSeams, verb?: string): LoadedEvent;

package/dist/cli/event-input.js

@@ -1,73 +0,0 @@
-// Shared tool-event input handling for the Risk Gate verbs that take a
-// tool-event JSON file: `harness explain-action`, `harness test-risk`,
-// `harness resolve-env`, and `harness explain-policy`.
-//
-// Each applies the same not-found / malformed / non-object guards,
-// resolves the same ambient `EnvelopeContext` (git, host, user, now),
-// and builds the Action Envelope. This module is that shared front end
-// so every verb stays byte-identical in how it reads and normalizes
-// its input.
-import * as fs from "node:fs";
-import * as os from "node:os";
-import { buildActionEnvelope, resolveGitContext, } from "../runtime/index.js";
-import { EX_NOINPUT, HarnessExitError } from "./exit-codes.js";
-function safeUser() {
-    try {
-        return os.userInfo().username;
-    }
-    catch {
-        return "";
-    }
-}
-function safeHost() {
-    try {
-        return os.hostname();
-    }
-    catch {
-        return "";
-    }
-}
-/**
- * Read a tool-event JSON file and build its Action Envelope.
- *
- * Throws `HarnessExitError(EX_NOINPUT)` when the file is missing, is not
- * valid JSON, or does not decode to a JSON object. A well-formed but
- * sparse event (e.g. `{}`) is accepted: the envelope builder fills
- * absent fields with empty values rather than throwing. `verb` only
- * prefixes the error messages so the operator sees which command failed.
- */
-export function loadEventEnvelope(eventPath, seams = {}, verb = "explain-action") {
-    let raw;
-    try {
-        raw = fs.readFileSync(eventPath, "utf8");
-    }
-    catch {
-        throw new HarnessExitError(`${verb}: event file not found or unreadable: ${eventPath}`, EX_NOINPUT);
-    }
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch (err) {
-        throw new HarnessExitError(`${verb}: malformed event JSON in ${eventPath}: ${err.message}`, EX_NOINPUT);
-    }
-    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-        const got = parsed === null ? "null" : Array.isArray(parsed) ? "array" : typeof parsed;
-        throw new HarnessExitError(`${verb}: event JSON must be an object, got ${got}`, EX_NOINPUT);
-    }
-    const event = parsed;
-    const fallbackCwd = seams.cwdFallback ?? process.cwd();
-    const cwd = typeof event.cwd === "string" && event.cwd.length > 0
-        ? event.cwd
-        : fallbackCwd;
-    const resolveGit = seams.resolveGit ?? resolveGitContext;
-    const envelope = buildActionEnvelope(event, {
-        cwd,
-        git: resolveGit(cwd),
-        user: seams.user ?? safeUser(),
-        host: seams.host ?? safeHost(),
-        now: seams.now ?? new Date(),
-    });
-    return { event, envelope };
-}
-//# sourceMappingURL=event-input.js.map

package/dist/cli/event-input.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"event-input.js","sourceRoot":"","sources":["../../src/cli/event-input.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,uEAAuE;AACvE,uDAAuD;AACvD,EAAE;AACF,mEAAmE;AACnE,sEAAsE;AACtE,uEAAuE;AACvE,oEAAoE;AACpE,aAAa;AAEb,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAIlB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAqB/D,SAAS,QAAQ;IACf,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,QAAQ;IACf,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAAiB,EACjB,QAAyB,EAAE,EAC3B,IAAI,GAAG,gBAAgB;IAEvB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CACxB,GAAG,IAAI,yCAAyC,SAAS,EAAE,EAC3D,UAAU,CACX,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CACxB,GAAG,IAAI,6BAA6B,SAAS,KAAM,GAAa,CAAC,OAAO,EAAE,EAC1E,UAAU,CACX,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,GAAG,GACP,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC;QAC7E,MAAM,IAAI,gBAAgB,CACxB,GAAG,IAAI,uCAAuC,GAAG,EAAE,EACnD,UAAU,CACX,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAmB,CAAC;IAElC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACvD,MAAM,GAAG,GACP,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;QACnD,CAAC,CAAC,KAAK,CAAC,GAAG;QACX,CAAC,CAAC,WAAW,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,iBAAiB,CAAC;IAEzD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,EAAE;QAC1C,GAAG;QACH,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,QAAQ,EAAE;QAC9B,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,QAAQ,EAAE;QAC9B,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE;KAC7B,CAAC,CAAC;IAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC"}

package/dist/cli/explain-action.d.ts

@@ -1,20 +0,0 @@
-import type { ActionEnvelope } from "../runtime/index.js";
-import { type EventInputSeams } from "./event-input.js";
-export interface ExplainActionOptions extends EventInputSeams {
-    /** Path to the tool-event JSON file. */
-    eventPath: string;
-    /** Emit JSON instead of YAML. */
-    json?: boolean;
-}
-export interface ExplainActionResult {
-    output: string;
-    envelope: ActionEnvelope;
-}
-/**
- * Build and render the Action Envelope for a tool-event JSON file.
- *
- * Throws `HarnessExitError(EX_NOINPUT)` when the file is missing, is not
- * valid JSON, or does not decode to a JSON object (see
- * `loadEventEnvelope`). A well-formed but sparse event is accepted.
- */
-export declare function explainAction(opts: ExplainActionOptions): ExplainActionResult;

package/dist/cli/explain-action.js

@@ -1,27 +0,0 @@
-// Phase 7 #2 — `harness explain-action` CLI entrypoint.
-//
-// Debug verb for the Risk Gate. Reads a tool-event JSON file (the
-// Claude Code PreToolUse hook payload shape), builds the Action
-// Envelope, and prints it. This is the inspection surface for the
-// envelope normalization that Phase 7 #3-#5 build the classifier,
-// resolver, and policy evaluator on top of.
-//
-// File read, JSON guards, and envelope build live in the shared
-// `event-input` front end; this module only renders the result.
-import { stringify as stringifyYaml } from "yaml";
-import { loadEventEnvelope } from "./event-input.js";
-/**
- * Build and render the Action Envelope for a tool-event JSON file.
- *
- * Throws `HarnessExitError(EX_NOINPUT)` when the file is missing, is not
- * valid JSON, or does not decode to a JSON object (see
- * `loadEventEnvelope`). A well-formed but sparse event is accepted.
- */
-export function explainAction(opts) {
-    const { envelope } = loadEventEnvelope(opts.eventPath, opts, "explain-action");
-    const output = opts.json
-        ? `${JSON.stringify(envelope, null, 2)}\n`
-        : stringifyYaml(envelope, { lineWidth: 0 });
-    return { output, envelope };
-}
-//# sourceMappingURL=explain-action.js.map

package/dist/cli/explain-action.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"explain-action.js","sourceRoot":"","sources":["../../src/cli/explain-action.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,EAAE;AACF,kEAAkE;AAClE,gEAAgE;AAChE,kEAAkE;AAClE,kEAAkE;AAClE,4CAA4C;AAC5C,EAAE;AACF,gEAAgE;AAChE,gEAAgE;AAEhE,OAAO,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AAElD,OAAO,EAAE,iBAAiB,EAAwB,MAAM,kBAAkB,CAAC;AAc3E;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAA0B;IACtD,MAAM,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI;QACtB,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;QAC1C,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC"}