@lannguyensi/harness 0.63.0 → 1.0.0

package/dist/cli/pack/hook-track-active-claim.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hook-track-active-claim.js","sourceRoot":"","sources":["../../../src/cli/pack/hook-track-active-claim.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,+DAA+D;AAC/D,gDAAgD;AAChD,iEAAiE;AACjE,qEAAqE;AACrE,kEAAkE;AAClE,4DAA4D;AAC5D,EAAE;AACF,kBAAkB;AAClB,sEAAsE;AACtE,yCAAyC;AACzC,mEAAmE;AACnE,qEAAqE;AACrE,uEAAuE;AACvE,qEAAqE;AACrE,iEAAiE;AACjE,mEAAmE;AACnE,uEAAuE;AACvE,2DAA2D;AAC3D,qEAAqE;AACrE,qEAAqE;AACrE,wEAAwE;AACxE,2CAA2C;AAC3C,EAAE;AACF,uEAAuE;AACvE,kEAAkE;AAClE,qEAAqE;AACrE,qEAAqE;AACrE,qEAAqE;AACrE,oEAAoE;AACpE,EAAE;AACF,uEAAuE;AACvE,yEAAyE;AACzE,mEAAmE;AACnE,mEAAmE;AACnE,mDAAmD;AACnD,EAAE;AACF,mEAAmE;AACnE,iEAAiE;AACjE,mEAAmE;AACnE,qDAAqD;AACrD,EAAE;AACF,mEAAmE;AACnE,mEAAmE;AACnE,mEAAmE;AACnE,mEAAmE;AACnE,mEAAmE;AACnE,iEAAiE;AACjE,qEAAqE;AACrE,sEAAsE;AACtE,qEAAqE;AACrE,qEAAqE;AACrE,+DAA+D;AAC/D,kCAAkC;AAClC,EAAE;AACF,uEAAuE;AACvE,oEAAoE;AACpE,mEAAmE;AACnE,oEAAoE;AACpE,sEAAsE;AACtE,oEAAoE;AACpE,6DAA6D;AAC7D,4DAA4D;AAC5D,sEAAsE;AACtE,8DAA8D;AAE9D,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,gBAAgB,GACjB,MAAM,sEAAsE,CAAC;AAC9E,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,EAC5B,6BAA6B,EAC7B,eAAe,EACf,sBAAsB,EACtB,8BAA8B,EAC9B,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,qBAAqB,GACtB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAGxE,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,UAAU,EACV,SAAS,EACT,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,SAAS,GAAG,gCAAgC,CAAC;AAEnD,MAAM,CAAC,MAAM,oBAAoB,GAAG,eAAe,CAAC;AACpD,MAAM,CAAC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AACtD,MAAM,CAAC,MAAM,sBAAsB,GAAG,iBAAiB,CAAC;AACxD,6EAA6E;AAC7E,4EAA4E;AAC5E,yEAAyE;AACzE,6EAA6E;AAC7E,yEAAyE;AACzE,wEAAwE;AACxE,2EAA2E;AAC3E,MAAM,CAAC,MAAM,0BAA0B,GAAG,qBAAqB,CAAC;AAChE,MAAM,CAAC,MAAM,oBAAoB,GAAG,eAAe,CAAC;AAEpD,MAAM,CAAC,MAAM,wBAAwB,GAAsB,uBAAuB,CAAC;AA2CnF,SAAS,IAAI,CACX,UAAkB,EAClB,MAA6B;IAE7B,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,IAAI,CAAC,CAAC;IAChC,OAAO;QACL,QAAQ,EAAE,CAAC;QACX,YAAY,EAAE,KAAK;QACnB,YAAY,EAAE,KAAK;QACnB,MAAM,EAAE,IAAI;QACZ,UAAU;KACX,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,SAAS,aAAa,CACpB,QAAgB,EAChB,SAAkB,EAClB,YAAqB,EACrB,YAAoB,EACpB,MAA6B;IAE7B,MAAM,aAAa,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,sBAAsB,CAAC,YAAY,CAAC,CAAC;IACzF,MAAM,YAAY,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAEnD,IAAI,YAAY,KAAK,IAAI,IAAI,aAAa,KAAK,EAAE,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;QACpF,MAAM,UAAU,GAAG,2DAA2D,YAAY,KAAK,QAAQ,OAAO,aAAa,EAAE,CAAC;QAC9H,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,IAAI,CAAC,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,YAAY,EAAE,KAAK;YACnB,YAAY,EAAE,KAAK;YACnB,MAAM,EAAE,YAAY;YACpB,UAAU;SACX,CAAC;IACJ,CAAC;IAED,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC/B,MAAM,UAAU,GACd,4BAA4B,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,CAAC;QACvD,6BAA6B,CAAC,YAAY,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,UAAU;QAC3B,CAAC,CAAC,oEAAoE,QAAQ,qCAAqC,yBAAyB,CAAC,YAAY,CAAC,sBAAsB;QAChL,CAAC,CAAC,oEAAoE,QAAQ,EAAE,CAAC;IACnF,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,IAAI,CAAC,CAAC;IAChC,OAAO;QACL,QAAQ,EAAE,CAAC;QACX,YAAY,EAAE,KAAK;QACnB,YAAY,EAAE,IAAI;QAClB,MAAM,EAAE,aAAa,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa;QACnD,UAAU;KACX,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,OAAwC,EAAE;IAE1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC;IAExC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,KAAK,GAAkB,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,CAAkB,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CACT,sEAAsE,EACtE,MAAM,CACP,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,IAAI,cAAc,CAAC,oBAAoB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;QACjF,OAAO,IAAI,CACT,iEAAiE,EACjE,MAAM,CACP,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/D,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACpB,OAAO,IAAI,CACT,mEAAmE,EACnE,MAAM,CACP,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,oEAAoE;IACpE,yBAAyB;IACzB,IAAI,QAAkB,CAAC;IACvB,IAAI,YAAgC,CAAC;IACrC,IAAI,CAAC;QACH,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CACT,+DAAgE,GAAa,CAAC,OAAO,aAAa,EAClG,MAAM,CACP,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IACxE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CACT,+CAA+C,QAAQ,sCAAsC,EAC7F,MAAM,CACP,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,IAAI,CACT,+CAA+C,QAAQ,8BAA8B,EACrF,MAAM,CACP,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAChB,IAAI,CAAC,YAAY;QACjB,CAAC,YAAY,KAAK,SAAS;YACzB,CAAC,CAAC,mBAAmB,CAAC;gBAClB,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,YAAY;aACb,CAAC;YACJ,CAAC,CAAC,SAAS,CAAC,CAAC;IACjB,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,IAAI,CACT,2EAA2E,EAC3E,MAAM,CACP,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAE1C,sEAAsE;IACtE,sEAAsE;IACtE,uEAAuE;IACvE,qEAAqE;IACrE,mEAAmE;IACnE,yCAAyC;IACzC,MAAM,WAAW,GAAG,4BAA4B,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAE3F,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;YAClB,OAAO,IAAI,CACT,sFAAsF,EACtF,MAAM,CACP,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,gBAAgB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CACT,qEAAqE,MAAM,KAAM,GAAa,CAAC,OAAO,EAAE,EACxG,MAAM,CACP,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,gEAAgE,MAAM,EAAE,CAAC;QAC5F,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,IAAI,CAAC,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,YAAY,EAAE,IAAI;YAClB,YAAY,EAAE,KAAK;YACnB,MAAM;YACN,UAAU;SACX,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,KAAK,SAAS;QAC3B,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,OAAO,aAAa,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,aAAa,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACvF,CAAC;IAED,IAAI,4BAA4B,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAC5D,8DAA8D;QAC9D,mEAAmE;QACnE,0CAA0C;QAC1C,MAAM,UAAU,GAAG,iEAAiE,QAAQ,4BAA4B,CAAC;QACzH,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,IAAI,CAAC,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,YAAY,EAAE,KAAK;YACnB,YAAY,EAAE,KAAK;YACnB,MAAM,EAAE,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;YACrC,UAAU;SACX,CAAC;IACJ,CAAC;IAED,IAAI,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,8BAA8B,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,mEAAmE;YACnE,gEAAgE;YAChE,0DAA0D;YAC1D,OAAO,IAAI,CACT,iEAAiE,MAAM,IAAI,WAAW,wBAAwB,EAC9G,MAAM,CACP,CAAC;QACJ,CAAC;QACD,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC/B,MAAM,UAAU,GAAG,4FAA4F,MAAM,EAAE,CAAC;QACxH,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,IAAI,CAAC,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,YAAY,EAAE,KAAK;YACnB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;YACrC,UAAU;SACX,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CACT,8CAA8C,QAAQ,wBAAwB,EAC9E,MAAM,CACP,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,OAAO,4BAA4B,CAAC,QAAQ,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;AACtE,CAAC"}

package/dist/cli/pack/transcript-report-scan.d.ts

@@ -1,71 +0,0 @@
-export interface TranscriptReportScanArgs {
-    /** The `transcript_path` from the hook payload. The ONLY file this scan opens. */
-    transcriptPath: string;
-    /** The session being decided; an entry's own `sessionId` must equal this. */
-    sessionId: string;
-    /** Bound of the poll, from `auto_approve.report_scan.max_wait`. */
-    maxWaitMs: number;
-    /** Re-read interval. */
-    pollMs?: number;
-    /** Injectable clock (epoch ms). */
-    now?: () => number;
-    /** Injectable sleep, so tests never wait for real time. */
-    sleep?: (ms: number) => Promise<void>;
-    /**
-     * Entry ids (see {@link TranscriptReportScanResult}'s `entryId`) this
-     * session has ALREADY adopted. A hit whose id is in here is skipped as
-     * if it were not a report at all, and a transcript that carries nothing
-     * else times out with `adoptedOnly: true`. Absent means "nothing
-     * adopted yet", the first-call case.
-     */
-    adopted?: ReadonlySet<string>;
-}
-export type TranscriptReportScanResult = {
-    found: true;
-    /** The report markdown, from its heading line to the end of the text block that carried it. */
-    markdown: string;
-    /** Zero-based index of the JSONL line the report was found on. */
-    lineIndex: number;
-    /**
-     * Stable identity of the adopted entry, for the caller's
-     * once-per-session adoption ledger: the entry's own `uuid` when it
-     * carries a usable one, otherwise a digest of the adopted markdown
-     * and its line index. Never contains a newline, so the caller can
-     * store one id per line.
-     */
-    entryId: string;
-    waitedMs: number;
-} | {
-    found: false;
-    /**
-     * `timeout`: the bound elapsed with no eligible report (this
-     * includes a transcript file that never appeared, since the file
-     * may still be created while the poll runs).
-     * `unreadable`: the file IS there and could not be read (a
-     * permission error, a directory at that path, a symlink loop).
-     */
-    reason: "timeout" | "unreadable";
-    /**
-     * Set when the ONLY report(s) in the transcript were entries this
-     * session had already adopted. The outcome is the same block, but
-     * the caller can say so: the child must emit a FRESH report, not
-     * retry against the one it already spent.
-     */
-    adoptedOnly?: true;
-    waitedMs: number;
-};
-/**
- * Poll the payload's own transcript for this session's Understanding
- * Report until it appears or `maxWaitMs` elapses. See the module header
- * for the filters and why each one is there.
- *
- * The poll timer is deliberately NOT `unref`'d. A hook process whose
- * stdin has been drained has no other ref'd handle, so an unref'd timer
- * lets Node exit mid-poll: the process would end with an empty stdout,
- * which Claude Code reads as ALLOW: a silent fail-open on precisely the
- * delegation path this scan exists for. The loop is bounded twice over
- * (`maxWaitMs`, itself capped by the config's 5 s ceiling, and the
- * `maxPolls` count below), so it can never hold the process open beyond
- * the bound.
- */
-export declare function scanTranscriptForReport(args: TranscriptReportScanArgs): Promise<TranscriptReportScanResult>;

package/dist/cli/pack/transcript-report-scan.js

@@ -1,359 +0,0 @@
-// Session-scoped, role-aware transcript scan for the child's own
-// Understanding Report: slice 3 of
-// docs/decisions/2026-08-27-ug-auto-mode-approval.md ("Report capture
-// under `-p`", agent-tasks 37ad0b05).
-//
-// WHY THIS EXISTS. Under `claude -p` there is no operator to run
-// `harness approve understanding`, and the Stop hook fires only at the
-// end of the run, so neither channel can supply key two (the child's own
-// report) at the instant the first gated tool call is decided. The
-// session transcript is the remaining channel, and it LAGS: at the
-// PreToolUse instant the report the agent just emitted is not in the
-// JSONL yet; it lands tens of milliseconds later (measured, see
-// `docs/okf/understanding-gate-auto-mode-signals.md` and
-// `dogfood/ug-auto-mode-signals/`). This module is the bounded poll the
-// ADR chose over a lone block-and-retry: it waits for the flush itself,
-// for at most `auto_approve.report_scan.max_wait`, and then gives up.
-//
-// FAIL CLOSED. There is no branch here that turns an absent report into
-// anything but `found: false`. The caller blocks on that; the timeout is
-// a block, never an allow.
-//
-// WHAT IT WILL NOT DO, AND WHY EACH REFUSAL IS LOAD-BEARING:
-//
-//   - It opens exactly ONE file, the `transcript_path` the payload names,
-//     and never a directory. A directory scan could reach another
-//     session's transcript, and (per the ADR's subagent measurement) the
-//     separate `agent-<agent_id>.jsonl` a subagent's turns live in.
-//   - Only `type: "assistant"` entries count. A report the agent quoted
-//     back inside a user message is the PROMPT's text, not the model's
-//     own report, and adopting it would let the launcher's prompt supply
-//     key two.
-//   - Only entries whose own `sessionId` equals the session being decided
-//     count. The payload names the file, but a file can hold entries from
-//     more than one session id (a resumed / forked transcript), and an
-//     entry stamped with a foreign id is not this session's report.
-//   - `isSidechain: true` entries are excluded. The measured shape never
-//     puts one in the payload's own transcript (subagent turns live in a
-//     separate file), so this is defence in depth against a shape the
-//     measurement did not produce, not the mechanism the separation
-//     relies on.
-//   - EACH TRANSCRIPT ENTRY IS ADOPTED AT MOST ONCE PER SESSION: the
-//     caller passes the entry ids it has already spent (`adopted`) and
-//     this scan returns the newest NON-adopted hit, so one report cannot
-//     mint a second marker after the first one expired or a task boundary
-//     cleared it. Without that rule the delegation's TTL would silently
-//     replace the marker's, which is the lifetime the ADR's two-key
-//     design deliberately keeps short.
-//
-// HOW IT READS. The first poll reads the whole file; every later poll
-// reads only the bytes appended since the previous one, carrying a
-// partial trailing line over, and keeps the best hit found so far. A
-// transcript that SHRANK between polls (truncated or replaced by a
-// shorter file), or whose underlying file identity changed (inode/device,
-// from `fs.fstatSync`, even when the new file is the same size or LARGER,
-// as in a rename swapping in a different file in place), resets the
-// reader and it is re-read from the top. Size alone cannot catch the
-// second case: a same-size-or-larger replacement passes the size check
-// but its bytes at the old offset are not a continuation of anything
-// this reader has seen.
-//
-// The clock and the sleep are injected so the tests drive the poll
-// deterministically and never sleep for real.
-import * as fs from "node:fs";
-import { sha256Hex } from "../../runtime/approval-signing.js";
-/**
- * The report heading the scan looks for, anchored to a whole line.
- *
- * ANY heading level, `#` through `######`: the deny text the child is
- * given (`renderReportSchemaHint`) says "any heading level (#, ##, ###)"
- * and shows a `##` example, so a scan that accepted only `#` would refuse
- * exactly the shape its own instruction asked for.
- *
- * Deliberately `[ \t]` rather than `\s` around the words: `\s` matches
- * newlines, so `^#\s*Understanding Report\s*$` under the `m` flag would
- * also match a bare `#` on one line followed by the words on the next,
- * which is not a heading. Case-insensitive on the words themselves (an
- * agent that writes `# UNDERSTANDING REPORT` has still emitted the
- * section the deny text asked for); a trailing `\r` is tolerated for a
- * CRLF-written transcript.
- */
-const REPORT_HEADING = /^#{1,6}[ \t]*understanding[ \t]+report[ \t]*\r?$/i;
-/**
- * The text blocks of one entry's `message.content`, in order. A string
- * `content` counts as exactly one text block; in the array shape only
- * `{ type: "text", text: <string> }` blocks contribute, so `tool_use` and
- * `thinking` blocks are ignored (a report the model only ever "thought"
- * is not a report it emitted).
- */
-function textBlocksOf(entry) {
-    const message = entry.message;
-    if (message === null || typeof message !== "object" || Array.isArray(message))
-        return [];
-    const content = message.content;
-    if (typeof content === "string")
-        return [content];
-    if (!Array.isArray(content))
-        return [];
-    const blocks = [];
-    for (const block of content) {
-        if (block === null || typeof block !== "object" || Array.isArray(block))
-            continue;
-        const b = block;
-        if (b.type !== "text")
-            continue;
-        if (typeof b.text !== "string")
-            continue;
-        blocks.push(b.text);
-    }
-    return blocks;
-}
-/** The report markdown inside one text block, or null when it carries no heading. */
-function reportInBlock(block) {
-    const lines = block.split("\n");
-    for (let i = lines.length - 1; i >= 0; i -= 1) {
-        if (REPORT_HEADING.test(lines[i])) {
-            return lines.slice(i).join("\n");
-        }
-    }
-    return null;
-}
-/** Longest `uuid` accepted verbatim as an adoption id; anything longer falls back to the digest. */
-const ENTRY_UUID_MAX_LENGTH = 200;
-/**
- * Stable identity of one adopted entry. The transcript's own `uuid` is
- * preferred (Claude Code stamps one on every entry, and it survives the
- * file being rewritten or resumed); a value that is missing, empty,
- * over-long, or carries a line break (all of which would corrupt the
- * caller's one-id-per-line ledger) falls back to a digest of the adopted
- * markdown plus its line index. The two forms are namespaced so a crafted
- * `uuid` cannot impersonate a digest id.
- */
-function entryIdFor(entry, markdown, lineIndex) {
-    const uuid = entry.uuid;
-    if (typeof uuid === "string" &&
-        uuid.length > 0 &&
-        uuid.length <= ENTRY_UUID_MAX_LENGTH &&
-        !/[\r\n]/.test(uuid)) {
-        return `uuid:${uuid}`;
-    }
-    return `sha256:${sha256Hex(`${lineIndex}\n${markdown}`)}`;
-}
-/**
- * The eligible report on ONE JSONL line, or null. Unparseable and blank
- * lines yield null rather than aborting the scan: a transcript being
- * written while it is read can end in a half-flushed line, and refusing
- * the whole file for that would turn a routine race into a block.
- */
-function reportHitInLine(line, lineIndex, sessionId) {
-    const trimmed = line.trim();
-    if (trimmed.length === 0)
-        return null;
-    let entry;
-    try {
-        entry = JSON.parse(trimmed);
-    }
-    catch {
-        return null;
-    }
-    if (entry === null || typeof entry !== "object" || Array.isArray(entry))
-        return null;
-    if (entry.type !== "assistant")
-        return null;
-    if (entry.isSidechain === true)
-        return null;
-    if (entry.sessionId !== sessionId)
-        return null;
-    const blocks = textBlocksOf(entry);
-    for (let b = blocks.length - 1; b >= 0; b -= 1) {
-        const markdown = reportInBlock(blocks[b]);
-        if (markdown !== null) {
-            return { markdown, lineIndex, entryId: entryIdFor(entry, markdown, lineIndex) };
-        }
-    }
-    return null;
-}
-const DEFAULT_POLL_MS = 50;
-const NEWLINE = 0x0a;
-const CLOSING_BRACE = 0x7d;
-const EMPTY_ADOPTED = new Set();
-function newScanState() {
-    return {
-        offset: 0,
-        carry: Buffer.alloc(0),
-        lineIndex: 0,
-        best: null,
-        tentative: null,
-        adoptedSkipped: false,
-        ino: null,
-        dev: null,
-    };
-}
-/** A hit the caller may still take: skips (and records) an already-adopted one. */
-function eligible(hit, adopted, state) {
-    if (hit === null)
-        return null;
-    if (adopted.has(hit.entryId)) {
-        state.adoptedSkipped = true;
-        return null;
-    }
-    return hit;
-}
-/** Read `length` bytes from `offset`, tolerating a short `readSync`. */
-function readAt(fd, offset, length) {
-    const buf = Buffer.allocUnsafe(length);
-    let read = 0;
-    while (read < length) {
-        const n = fs.readSync(fd, buf, read, length - read, offset + read);
-        if (n <= 0)
-            break;
-        read += n;
-    }
-    return read === length ? buf : buf.subarray(0, read);
-}
-/**
- * The trailing, newline-less bytes as a PROVISIONAL hit for this poll
- * only. A writer that has flushed a complete JSONL entry but not yet its
- * newline is the one case the append-only reader would otherwise miss
- * until the next flush, and the whole-file reader this replaced did see
- * it. Only attempted when the carry ends in `}`, which both keeps the
- * cost off every poll's partial line and guarantees the decoded bytes end
- * on a character boundary.
- */
-function scanCarry(state, sessionId, adopted) {
-    const carry = state.carry;
-    if (carry.length === 0 || carry[carry.length - 1] !== CLOSING_BRACE)
-        return;
-    state.tentative = eligible(reportHitInLine(carry.toString("utf8"), state.lineIndex, sessionId), adopted, state);
-}
-/**
- * Consume everything appended to the transcript since the previous poll,
- * updating `state` in place.
- *
- * ENOENT is "not there YET": under `-p` the hook can fire before the
- * transcript file exists, and it may appear inside the bound. Every other
- * failure, and anything at that path that is not a regular file, means
- * something IS there and cannot be read as a transcript, which is a
- * distinct, immediately-reported condition rather than something waiting
- * will fix.
- */
-function pollTranscript(transcriptPath, state, sessionId, adopted) {
-    // Provisional only for the poll that produced it: a file that vanished
-    // (or shrank) between polls must not leave a hit behind.
-    state.tentative = null;
-    let fd;
-    try {
-        fd = fs.openSync(transcriptPath, "r");
-    }
-    catch (err) {
-        if (err.code === "ENOENT")
-            return "absent";
-        return "unreadable";
-    }
-    try {
-        const stat = fs.fstatSync(fd);
-        if (!stat.isFile())
-            return "unreadable";
-        // Identity change: the file at this path was replaced (rename, or a
-        // recreate) between polls. Checked BEFORE the size comparison and
-        // independently of it, because a replacement can be the same size or
-        // larger, which the size check alone would read straight through as
-        // ordinary growth.
-        const identityChanged = state.ino !== null && (stat.ino !== state.ino || stat.dev !== state.dev);
-        if (identityChanged || stat.size < state.offset) {
-            // The file shrank, or was replaced in place: truncated, or a
-            // different file now sits at this path. The bytes the offset
-            // pointed past are stale (shrink) or belong to a different file
-            // entirely (identity change), so start over from the top.
-            Object.assign(state, newScanState());
-        }
-        state.ino = stat.ino;
-        state.dev = stat.dev;
-        if (stat.size > state.offset) {
-            const chunk = readAt(fd, state.offset, stat.size - state.offset);
-            state.offset += chunk.length;
-            const data = state.carry.length > 0 ? Buffer.concat([state.carry, chunk]) : chunk;
-            let start = 0;
-            for (;;) {
-                const nl = data.indexOf(NEWLINE, start);
-                if (nl === -1)
-                    break;
-                const hit = eligible(reportHitInLine(data.subarray(start, nl).toString("utf8"), state.lineIndex, sessionId), adopted, state);
-                if (hit !== null)
-                    state.best = hit;
-                state.lineIndex += 1;
-                start = nl + 1;
-            }
-            state.carry = start < data.length ? Buffer.from(data.subarray(start)) : Buffer.alloc(0);
-        }
-        scanCarry(state, sessionId, adopted);
-        return "ok";
-    }
-    catch {
-        return "unreadable";
-    }
-    finally {
-        fs.closeSync(fd);
-    }
-}
-function defaultSleep(ms) {
-    return new Promise((resolve) => {
-        setTimeout(resolve, ms);
-    });
-}
-/**
- * Poll the payload's own transcript for this session's Understanding
- * Report until it appears or `maxWaitMs` elapses. See the module header
- * for the filters and why each one is there.
- *
- * The poll timer is deliberately NOT `unref`'d. A hook process whose
- * stdin has been drained has no other ref'd handle, so an unref'd timer
- * lets Node exit mid-poll: the process would end with an empty stdout,
- * which Claude Code reads as ALLOW: a silent fail-open on precisely the
- * delegation path this scan exists for. The loop is bounded twice over
- * (`maxWaitMs`, itself capped by the config's 5 s ceiling, and the
- * `maxPolls` count below), so it can never hold the process open beyond
- * the bound.
- */
-export async function scanTranscriptForReport(args) {
-    const now = args.now ?? (() => Date.now());
-    const sleep = args.sleep ?? defaultSleep;
-    const pollMs = args.pollMs !== undefined && args.pollMs > 0 ? args.pollMs : DEFAULT_POLL_MS;
-    const maxWaitMs = Number.isFinite(args.maxWaitMs) && args.maxWaitMs > 0 ? args.maxWaitMs : 0;
-    const adopted = args.adopted ?? EMPTY_ADOPTED;
-    const start = now();
-    // Belt and braces against a clock that does not advance (an injected
-    // one that forgets to, a suspended VM): the poll count is bounded on
-    // its own, so this can never become an unbounded loop inside a hook.
-    // Generous enough that it never pre-empts the real time bound.
-    const maxPolls = Math.ceil(maxWaitMs / pollMs) + 2;
-    const state = newScanState();
-    for (let poll = 0;; poll += 1) {
-        const outcome = pollTranscript(args.transcriptPath, state, args.sessionId, adopted);
-        if (outcome === "unreadable") {
-            return { found: false, reason: "unreadable", waitedMs: now() - start };
-        }
-        // The provisional trailing-line hit is newer than any complete one.
-        const hit = state.tentative ?? state.best;
-        if (hit !== null) {
-            return {
-                found: true,
-                markdown: hit.markdown,
-                lineIndex: hit.lineIndex,
-                entryId: hit.entryId,
-                waitedMs: now() - start,
-            };
-        }
-        const elapsed = now() - start;
-        if (elapsed >= maxWaitMs || poll >= maxPolls) {
-            return {
-                found: false,
-                reason: "timeout",
-                ...(state.adoptedSkipped ? { adoptedOnly: true } : {}),
-                waitedMs: elapsed,
-            };
-        }
-        await sleep(pollMs);
-    }
-}
-//# sourceMappingURL=transcript-report-scan.js.map

package/dist/cli/pack/transcript-report-scan.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"transcript-report-scan.js","sourceRoot":"","sources":["../../../src/cli/pack/transcript-report-scan.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,mCAAmC;AACnC,sEAAsE;AACtE,sCAAsC;AACtC,EAAE;AACF,iEAAiE;AACjE,uEAAuE;AACvE,yEAAyE;AACzE,mEAAmE;AACnE,mEAAmE;AACnE,qEAAqE;AACrE,gEAAgE;AAChE,yDAAyD;AACzD,wEAAwE;AACxE,wEAAwE;AACxE,sEAAsE;AACtE,EAAE;AACF,wEAAwE;AACxE,yEAAyE;AACzE,2BAA2B;AAC3B,EAAE;AACF,6DAA6D;AAC7D,EAAE;AACF,0EAA0E;AAC1E,kEAAkE;AAClE,yEAAyE;AACzE,oEAAoE;AACpE,wEAAwE;AACxE,uEAAuE;AACvE,yEAAyE;AACzE,eAAe;AACf,0EAA0E;AAC1E,0EAA0E;AAC1E,uEAAuE;AACvE,oEAAoE;AACpE,yEAAyE;AACzE,yEAAyE;AACzE,sEAAsE;AACtE,oEAAoE;AACpE,iBAAiB;AACjB,qEAAqE;AACrE,uEAAuE;AACvE,yEAAyE;AACzE,0EAA0E;AAC1E,wEAAwE;AACxE,oEAAoE;AACpE,uCAAuC;AACvC,EAAE;AACF,sEAAsE;AACtE,mEAAmE;AACnE,qEAAqE;AACrE,mEAAmE;AACnE,0EAA0E;AAC1E,0EAA0E;AAC1E,oEAAoE;AACpE,qEAAqE;AACrE,uEAAuE;AACvE,qEAAqE;AACrE,wBAAwB;AACxB,EAAE;AACF,mEAAmE;AACnE,8CAA8C;AAE9C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAE9D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,cAAc,GAAG,mDAAmD,CAAC;AAsE3E;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,KAA0B;IAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACzF,MAAM,OAAO,GAAI,OAAiC,CAAC,OAAO,CAAC;IAC3D,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAS;QAClF,MAAM,CAAC,GAAG,KAA2C,CAAC;QACtD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QAChC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QACzC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,qFAAqF;AACrF,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAQD,oGAAoG;AACpG,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC;;;;;;;;GAQG;AACH,SAAS,UAAU,CAAC,KAA0B,EAAE,QAAgB,EAAE,SAAiB;IACjF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IACE,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,CAAC,MAAM,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,IAAI,qBAAqB;QACpC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EACpB,CAAC;QACD,OAAO,QAAQ,IAAI,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,UAAU,SAAS,CAAC,GAAG,SAAS,KAAK,QAAQ,EAAE,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,SAAiB,EAAE,SAAiB;IACzE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,KAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAwB,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;QAClF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,OAAO,GAAG,IAAI,CAAC;AACrB,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,MAAM,aAAa,GAAwB,IAAI,GAAG,EAAU,CAAC;AAqC7D,SAAS,YAAY;IACnB,OAAO;QACL,MAAM,EAAE,CAAC;QACT,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtB,SAAS,EAAE,CAAC;QACZ,IAAI,EAAE,IAAI;QACV,SAAS,EAAE,IAAI;QACf,cAAc,EAAE,KAAK;QACrB,GAAG,EAAE,IAAI;QACT,GAAG,EAAE,IAAI;KACV,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAS,QAAQ,CACf,GAAqB,EACrB,OAA4B,EAC5B,KAAgB;IAEhB,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wEAAwE;AACxE,SAAS,MAAM,CAAC,EAAU,EAAE,MAAc,EAAE,MAAc;IACxD,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,OAAO,IAAI,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM;QAClB,IAAI,IAAI,CAAC,CAAC;IACZ,CAAC;IACD,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,SAAS,CAAC,KAAgB,EAAE,SAAiB,EAAE,OAA4B;IAClF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,aAAa;QAAE,OAAO;IAC5E,KAAK,CAAC,SAAS,GAAG,QAAQ,CACxB,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,EACnE,OAAO,EACP,KAAK,CACN,CAAC;AACJ,CAAC;AAID;;;;;;;;;;GAUG;AACH,SAAS,cAAc,CACrB,cAAsB,EACtB,KAAgB,EAChB,SAAiB,EACjB,OAA4B;IAE5B,uEAAuE;IACvE,yDAAyD;IACzD,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;IACvB,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC;QACtE,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,YAAY,CAAC;QACxC,oEAAoE;QACpE,kEAAkE;QAClE,qEAAqE;QACrE,oEAAoE;QACpE,mBAAmB;QACnB,MAAM,eAAe,GACnB,KAAK,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3E,IAAI,eAAe,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAChD,6DAA6D;YAC7D,6DAA6D;YAC7D,gEAAgE;YAChE,0DAA0D;YAC1D,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YACjE,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;YAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAClF,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,SAAS,CAAC;gBACR,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBACxC,IAAI,EAAE,KAAK,CAAC,CAAC;oBAAE,MAAM;gBACrB,MAAM,GAAG,GAAG,QAAQ,CAClB,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,EACtF,OAAO,EACP,KAAK,CACN,CAAC;gBACF,IAAI,GAAG,KAAK,IAAI;oBAAE,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC;gBACnC,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC;gBACrB,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC;YACjB,CAAC;YACD,KAAK,CAAC,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1F,CAAC;QACD,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAA8B;IAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC;IAC5F,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,aAAa,CAAC;IAC9C,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC;IACpB,qEAAqE;IACrE,qEAAqE;IACrE,qEAAqE;IACrE,+DAA+D;IAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAE7B,KAAK,IAAI,IAAI,GAAG,CAAC,GAAI,IAAI,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACpF,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;YAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QACzE,CAAC;QACD,oEAAoE;QACpE,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC;QAC1C,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,QAAQ,EAAE,GAAG,EAAE,GAAG,KAAK;aACxB,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC;QAC9B,IAAI,OAAO,IAAI,SAAS,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC7C,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,SAAS;gBACjB,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/D,QAAQ,EAAE,OAAO;aAClB,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/cli/pack/understanding-report-schema-hint.d.ts

@@ -1,26 +0,0 @@
-export declare const UNDERSTANDING_REPORT_REQUIRED_SECTIONS: readonly ["Current Understanding (paragraph)", "Intended Outcome (paragraph)", "Derived Todos (list)", "Acceptance Criteria (list)", "Assumptions (list)", "Open Questions (list)", "Out Of Scope (list)", "Risks (list)", "Verification Plan (list)", "Prior Art (list)"];
-/**
- * Map a parser section key (e.g. `"priorArt"`) to an agent-facing label
- * that pairs it with its display name (e.g. `"Prior Art (priorArt)"`),
- * for surfaces that name a SPECIFIC section (like a malformed-sections
- * notice) right next to this file's display-name hint (task 823837fd
- * review: printing the raw camelCase key alone next to
- * `renderReportSchemaHint`'s "Prior Art (list)" bullets read as two
- * unrelated vocabularies for the same section). Falls back to the raw
- * key unchanged when it is not one of the recognised keys, so a future
- * parser section this mirror has not caught up with yet degrades
- * gracefully instead of throwing.
- */
-export declare function describeSectionKey(key: string): string;
-/**
- * Render a compact, agent-readable hint listing the canonical sections
- * the `@lannguyensi/understanding-gate` parser expects. Suitable for
- * inlining in a `permissionDecisionReason` string (claude-code) or a
- * stderr diagnostic (codex).
- *
- * Format chosen for legibility in both a JSON-stringified block envelope
- * and a plain stderr write: single newline-separated lines, "- " bullets,
- * no surrounding code-fence (Claude Code wraps the reason in its own
- * formatter, and stderr is read as-is by the operator).
- */
-export declare function renderReportSchemaHint(): string;

package/dist/cli/pack/understanding-report-schema-hint.js

@@ -1,120 +0,0 @@
-// Single source of truth (within harness) for the Understanding-Report
-// schema hint that the PreToolUse gate emits when blocking a tool call.
-//
-// The canonical parser lives in `@lannguyensi/understanding-gate`
-// (its `core/parser.js` SECTIONS array). Harness inlines the section
-// names here so the gate's block message tells the agent exactly what
-// to produce — without this, a freeform prose report parses to "Missing
-// required sections" and the audit trail is silently empty. (Since the
-// task 5d73d78d review HIGH-2 fix, a malformed report also refuses the
-// gate-approval marker unless the operator passes --force; this used to
-// read "even though the gate-approval marker still gets written", true
-// only before that fix.)
-//
-// Drift risk: if the standalone parser adds, renames, or reorders
-// sections, this constant goes out of sync. Mitigation:
-//   1. Keep the comment + linked file path at the top, so a reviewer
-//      who touches the standalone parser notices the harness mirror.
-//   2. The standalone Stop hook still logs the actual reject-list to
-//      `.understanding-gate/parse-errors/`, so a stale harness hint
-//      gracefully degrades to "your report has the wrong sections —
-//      here is what the parser wanted" rather than silent failure.
-export const UNDERSTANDING_REPORT_REQUIRED_SECTIONS = [
-    "Current Understanding (paragraph)",
-    "Intended Outcome (paragraph)",
-    "Derived Todos (list)",
-    "Acceptance Criteria (list)",
-    "Assumptions (list)",
-    "Open Questions (list)",
-    "Out Of Scope (list)",
-    "Risks (list)",
-    "Verification Plan (list)",
-    // Section 10 (agent-grounding 0.4.0): state what was searched for an
-    // existing solution and what was found, with an explicit
-    // adopt-or-build judgment. Required by the Stop-capture parser in
-    // grill_me / full mode; relaxed in fast_confirm. See harness task
-    // 798d7173 / agent-grounding PR #85.
-    "Prior Art (list)",
-];
-// Derives a display label's camelCase parser key, e.g.
-// "Out Of Scope (list)" -> "outOfScope". Intentionally the SAME
-// conversion `scripts/check-ug-schema-drift.mjs`'s `labelToCamelKey`
-// already uses to diff this file's display names against the upstream
-// package's real `SECTIONS[].key` values in CI; reusing the rule here
-// (rather than hand-maintaining a second, independently-typed camelCase
-// array next to UNDERSTANDING_REPORT_REQUIRED_SECTIONS) means there is
-// exactly one list to keep in sync with the parser, not two that could
-// silently diverge from EACH OTHER even while both still matched
-// upstream individually.
-function labelToCamelKey(label) {
-    const stripped = label.replace(/\s*\([^)]*\)\s*$/, "").trim();
-    const parts = stripped.split(/\s+/);
-    return parts
-        .map((part, idx) => idx === 0
-        ? part.charAt(0).toLowerCase() + part.slice(1)
-        : part.charAt(0).toUpperCase() + part.slice(1))
-        .join("");
-}
-/**
- * Map a parser section key (e.g. `"priorArt"`) to an agent-facing label
- * that pairs it with its display name (e.g. `"Prior Art (priorArt)"`),
- * for surfaces that name a SPECIFIC section (like a malformed-sections
- * notice) right next to this file's display-name hint (task 823837fd
- * review: printing the raw camelCase key alone next to
- * `renderReportSchemaHint`'s "Prior Art (list)" bullets read as two
- * unrelated vocabularies for the same section). Falls back to the raw
- * key unchanged when it is not one of the recognised keys, so a future
- * parser section this mirror has not caught up with yet degrades
- * gracefully instead of throwing.
- */
-export function describeSectionKey(key) {
-    const match = UNDERSTANDING_REPORT_REQUIRED_SECTIONS.find((label) => labelToCamelKey(label) === key);
-    if (!match)
-        return key;
-    const label = match.replace(/\s*\((?:paragraph|list)\)$/, "");
-    return `${label} (${key})`;
-}
-/**
- * Render a compact, agent-readable hint listing the canonical sections
- * the `@lannguyensi/understanding-gate` parser expects. Suitable for
- * inlining in a `permissionDecisionReason` string (claude-code) or a
- * stderr diagnostic (codex).
- *
- * Format chosen for legibility in both a JSON-stringified block envelope
- * and a plain stderr write: single newline-separated lines, "- " bullets,
- * no surrounding code-fence (Claude Code wraps the reason in its own
- * formatter, and stderr is read as-is by the operator).
- */
-export function renderReportSchemaHint() {
-    // Note on the intro wording: the previous iteration included an "e.g."
-    // alias example ("Current Understanding" or "My Current Understanding")
-    // that suggested those two were the canonical pair. The parser
-    // actually accepts more aliases (e.g. `derivedTodos` ⇄ "todos", "derived
-    // todos / specs"; `verificationPlan` ⇄ "verification"), and listing
-    // one pair implied exhaustiveness. The bullets below show the canonical
-    // names; the parser's alias-tolerance is a quiet bonus, not something
-    // the agent needs to choose between.
-    // Task 5d73d78d review MEDIUM (fix-round-3): this closing sentence used
-    // to claim the gate-approval marker "still gets written" for a
-    // malformed report. That was true before the HIGH-2 enforcement fix
-    // (harness approve understanding's stdin-report path silently approved
-    // a rejected submission); it is now false and would teach the agent
-    // the wrong recovery model. The marker is REFUSED for a malformed
-    // stdin submission (unless the operator passes --force), same as any
-    // other validation failure.
-    const intro = "Report format (parsed by `@lannguyensi/understanding-gate`): markdown with these ten sections, any heading level (#, ##, ###), names case-insensitive. Sections marked (list) need markdown list items ('- ' or '1.') in the body — a prose paragraph under a (list) heading is rejected the same as a missing section. Missing any section produces a parse-error under `.understanding-gate/parse-errors/`, and the approval marker is REFUSED (no ledger tag, no report flip) unless the operator passes --force.";
-    const bullets = UNDERSTANDING_REPORT_REQUIRED_SECTIONS.map((s) => `  - ${s}`).join("\n");
-    // Submission recipe (task 61fd36db): the Stop-hook producer fires only
-    // at END of turn — after `harness approve understanding` already ran —
-    // so attaching the report to the approve command itself is the one
-    // path that reliably persists it. The gate's escape matcher accepts
-    // exactly this heredoc shape (see approve-escape.ts).
-    const submit = "To persist the report for audit, attach it to the approval command as a quoted heredoc " +
-        "(the only extra shape the gate allows — no other pipes, chaining, or redirection):\n" +
-        "  harness approve understanding <<'UNDERSTANDING_REPORT'\n" +
-        "  ## Understanding Report\n" +
-        "  ...your report...\n" +
-        "  UNDERSTANDING_REPORT";
-    return `${intro}\n${bullets}\n${submit}`;
-}
-//# sourceMappingURL=understanding-report-schema-hint.js.map

package/dist/cli/pack/understanding-report-schema-hint.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"understanding-report-schema-hint.js","sourceRoot":"","sources":["../../../src/cli/pack/understanding-report-schema-hint.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,wEAAwE;AACxE,EAAE;AACF,kEAAkE;AAClE,qEAAqE;AACrE,sEAAsE;AACtE,wEAAwE;AACxE,uEAAuE;AACvE,uEAAuE;AACvE,wEAAwE;AACxE,uEAAuE;AACvE,yBAAyB;AACzB,EAAE;AACF,kEAAkE;AAClE,wDAAwD;AACxD,qEAAqE;AACrE,qEAAqE;AACrE,qEAAqE;AACrE,oEAAoE;AACpE,oEAAoE;AACpE,mEAAmE;AAEnE,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,mCAAmC;IACnC,8BAA8B;IAC9B,sBAAsB;IACtB,4BAA4B;IAC5B,oBAAoB;IACpB,uBAAuB;IACvB,qBAAqB;IACrB,cAAc;IACd,0BAA0B;IAC1B,qEAAqE;IACrE,yDAAyD;IACzD,kEAAkE;IAClE,kEAAkE;IAClE,qCAAqC;IACrC,kBAAkB;CACV,CAAC;AAEX,uDAAuD;AACvD,gEAAgE;AAChE,qEAAqE;AACrE,sEAAsE;AACtE,sEAAsE;AACtE,wEAAwE;AACxE,uEAAuE;AACvE,uEAAuE;AACvE,iEAAiE;AACjE,yBAAyB;AACzB,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACjB,GAAG,KAAK,CAAC;QACP,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CACjD;SACA,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,KAAK,GAAG,sCAAsC,CAAC,IAAI,CACvD,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,GAAG,CAC1C,CAAC;IACF,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IACvB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAC;IAC9D,OAAO,GAAG,KAAK,KAAK,GAAG,GAAG,CAAC;AAC7B,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB;IACpC,uEAAuE;IACvE,wEAAwE;IACxE,+DAA+D;IAC/D,yEAAyE;IACzE,oEAAoE;IACpE,wEAAwE;IACxE,sEAAsE;IACtE,qCAAqC;IACrC,wEAAwE;IACxE,+DAA+D;IAC/D,oEAAoE;IACpE,uEAAuE;IACvE,oEAAoE;IACpE,kEAAkE;IAClE,qEAAqE;IACrE,4BAA4B;IAC5B,MAAM,KAAK,GACT,sfAAsf,CAAC;IACzf,MAAM,OAAO,GAAG,sCAAsC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzF,uEAAuE;IACvE,uEAAuE;IACvE,mEAAmE;IACnE,oEAAoE;IACpE,sDAAsD;IACtD,MAAM,MAAM,GACV,yFAAyF;QACzF,sFAAsF;QACtF,4DAA4D;QAC5D,6BAA6B;QAC7B,uBAAuB;QACvB,wBAAwB,CAAC;IAC3B,OAAO,GAAG,KAAK,KAAK,OAAO,KAAK,MAAM,EAAE,CAAC;AAC3C,CAAC"}

package/dist/cli/pack/upgrade.d.ts

@@ -1,32 +0,0 @@
-/** Pack names this verb knows how to upgrade. Grows as more upgrades ship. */
-export type PackUpgradeName = "understanding-before-execution";
-export interface PackUpgradeOptions {
-    configPath?: string;
-    homeDir?: string;
-    dryRun?: boolean;
-}
-export interface PackUpgradeResult {
-    path: string;
-    name: string;
-    diff: string;
-    /** True when the manifest was actually written. */
-    applied: boolean;
-    /** True when the block was already present: a byte-identical no-op. */
-    alreadyPresent: boolean;
-}
-export type ApplyAutoApproveUpgradeResult = {
-    ok: true;
-    text: string;
-    changed: boolean;
-} | {
-    ok: false;
-    error: string;
-};
-export declare function applyAutoApproveUpgrade(original: string): ApplyAutoApproveUpgradeResult;
-/**
- * `harness pack upgrade <name>` implementation. `name` is validated
- * against the (currently one-entry) set of known upgrades before any
- * file I/O; an unknown name refuses with `EX_FAIL` rather than silently
- * doing nothing.
- */
-export declare function packUpgrade(name: string, opts?: PackUpgradeOptions): Promise<PackUpgradeResult>;