@lannguyensi/harness 0.63.0 → 1.0.0

package/dist/cli/session-start/branch-check.js

@@ -1,140 +0,0 @@
-// `harness session-start branch-check` — SessionStart hook entrypoint
-// for the `branch-protection` policy pack.
-//
-// Reads `.git/HEAD` for the cwd and, when the current branch is NOT in
-// the operator's protected list, writes a `branch:non-protected:<branch>`
-// fact to the evidence ledger so the pack's PreToolUse blocker has a
-// fresh tag to satisfy its 5-minute freshness window.
-//
-// SessionStart contract: `blocking:false`. Every failure path (no git
-// dir, manifest load fails, no grounding-mcp wired, ledger write
-// fails) logs one line to stderr and exits 0. The only observable
-// effect of a failure is that the blocker stays closed, which is the
-// safe default: a session that can't prove it's NOT on a protected
-// branch is treated as if it might be.
-//
-// Detached HEAD (`branch === ""`) is treated as PROTECTED: we can't
-// audit-by-name what the agent might commit. The producer leaves the
-// tag unwritten and stderr-notes the reason.
-//
-// Re-runnable on demand from the operator's `!` shell with no event
-// JSON piped on stdin — same CLI verb, no SessionStart event needed.
-import { addLedgerFact, resolveGitContext, } from "../../runtime/index.js";
-import { resolveReadSessionId } from "../../runtime/session-id.js";
-import { DEFAULT_PROTECTED_BRANCHES, isProtectedBranch, NON_PROTECTED_TAG_PREFIX, PACK_NAME, resolveProtectedBranches, } from "../../policy-packs/builtin/branch-protection-runtime.js";
-import { loadManifest } from "../loader.js";
-import { classifySessionSource, explicitSessionId, FALLBACK_SESSION, malformedEventReason, readSessionStartEvent, resolveEventCwd, } from "./shared-options.js";
-const LEDGER_SOURCE = "harness-session-start-branch-check";
-function findGroundingMcp(manifest) {
-    return manifest.tools.mcp.find((m) => m.name === "grounding-mcp") ?? null;
-}
-function mcpCommandList(server) {
-    return Array.isArray(server.command)
-        ? server.command
-        : server.command.trim().split(/\s+/);
-}
-export async function runSessionStartBranchCheck(opts = {}) {
-    const stdin = opts.stdin ?? process.stdin;
-    const stderr = opts.stderr ?? process.stderr;
-    const note = (msg) => {
-        stderr.write(`harness session-start branch-check: ${msg}\n`);
-    };
-    const done = (wrote, branch, isProtected, sessionId, sessionSource, reason) => ({
-        exitCode: 0,
-        wrote,
-        branch,
-        protected: isProtected,
-        sessionId,
-        sessionSource,
-        ...(reason !== undefined && { reason }),
-    });
-    let event;
-    try {
-        event = await readSessionStartEvent(stdin, {
-            onTimeout: note,
-            ...(opts.stdinIdleTimeoutMs !== undefined && { idleTimeoutMs: opts.stdinIdleTimeoutMs }),
-        });
-    }
-    catch (err) {
-        const reason = malformedEventReason(err);
-        note(reason);
-        return done(false, "", false, FALLBACK_SESSION, "default", reason);
-    }
-    const cwd = resolveEventCwd(opts.cwd, event);
-    const { branch } = resolveGitContext(cwd);
-    // Load manifest to resolve the pack's protected_branches override.
-    // Fallback to defaults on any load failure (the producer's job is
-    // best-effort; an unresolvable manifest still permits a sane gate).
-    let manifest = null;
-    if (opts.manifest) {
-        manifest = opts.manifest;
-    }
-    else {
-        try {
-            manifest = loadManifest(opts).manifest;
-        }
-        catch (err) {
-            note(`manifest load failed: ${err.message}; falling back to default protected list`);
-        }
-    }
-    const pack = manifest?.policy_packs.find((p) => p.name === PACK_NAME);
-    const { branches: protectedList, warning: protectedWarning } = pack
-        ? resolveProtectedBranches(pack)
-        : { branches: [...DEFAULT_PROTECTED_BRANCHES], warning: null };
-    if (protectedWarning)
-        note(protectedWarning);
-    // Resolve session id with the same precedence chain as
-    // session-start/preflight so the two producers stay symmetric.
-    const explicit = explicitSessionId(opts.session, event);
-    const resolveSession = opts.resolveSession ?? resolveReadSessionId;
-    const sessionId = resolveSession(explicit, {});
-    const sessionSource = classifySessionSource(opts.session, event, sessionId);
-    if (branch === "") {
-        const reason = `cwd is not on a named branch (detached HEAD or outside a git work tree); leaving the gate closed (treated as protected)`;
-        note(reason);
-        return done(false, "", true, sessionId, sessionSource, reason);
-    }
-    const isProtected = isProtectedBranch(branch, protectedList);
-    if (isProtected) {
-        const reason = `branch "${branch}" is in the protected list (${protectedList.join(", ")}); leaving the gate closed`;
-        note(reason);
-        return done(false, branch, true, sessionId, sessionSource, reason);
-    }
-    // Branch is non-protected: write the tag.
-    const content = `${NON_PROTECTED_TAG_PREFIX}:${branch}`;
-    let writeLedger = opts.writeLedger;
-    if (!writeLedger) {
-        if (!manifest) {
-            const reason = `manifest unavailable; cannot record ${content}`;
-            note(reason);
-            return done(false, branch, false, sessionId, sessionSource, reason);
-        }
-        const server = findGroundingMcp(manifest);
-        if (!server) {
-            const reason = `grounding-mcp not declared in manifest; cannot record ${content}`;
-            note(reason);
-            return done(false, branch, false, sessionId, sessionSource, reason);
-        }
-        const command = mcpCommandList(server);
-        const env = server.env ?? undefined;
-        const timeoutMs = opts.ledgerTimeoutMs ?? server.health?.timeout_ms ?? 5_000;
-        writeLedger = (args) => addLedgerFact({
-            mcpCommand: command,
-            ...(env && { mcpEnv: env }),
-            timeoutMs,
-            ...args,
-        });
-    }
-    const result = await writeLedger({ sessionId, content, source: LEDGER_SOURCE });
-    if (!result.ok) {
-        const reason = `ledger write failed: ${result.reason ?? "unknown error"}`;
-        note(reason);
-        return done(false, branch, false, sessionId, sessionSource, reason);
-    }
-    note(`recorded ${content} for session ${sessionId}`);
-    if (sessionSource === "default") {
-        note("WARNING: session resolved to the literal \"default\". The blocker queries the real Claude Code session id and will NOT see this tag. Pipe SessionStart event JSON on stdin, export $CLAUDE_SESSION_ID, or pass --session <id>.");
-    }
-    return done(true, branch, false, sessionId, sessionSource);
-}
-//# sourceMappingURL=branch-check.js.map

package/dist/cli/session-start/branch-check.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"branch-check.js","sourceRoot":"","sources":["../../../src/cli/session-start/branch-check.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,2CAA2C;AAC3C,EAAE;AACF,uEAAuE;AACvE,0EAA0E;AAC1E,qEAAqE;AACrE,sDAAsD;AACtD,EAAE;AACF,sEAAsE;AACtE,iEAAiE;AACjE,kEAAkE;AAClE,qEAAqE;AACrE,mEAAmE;AACnE,uCAAuC;AACvC,EAAE;AACF,oEAAoE;AACpE,qEAAqE;AACrE,6CAA6C;AAC7C,EAAE;AACF,oEAAoE;AACpE,qEAAqE;AAErE,OAAO,EACL,aAAa,EACb,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,EACjB,wBAAwB,EACxB,SAAS,EACT,wBAAwB,GACzB,MAAM,yDAAyD,CAAC;AAEjE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,GAIhB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,aAAa,GAAG,oCAAoC,CAAC;AAoB3D,SAAS,gBAAgB,CAAC,QAAkB;IAC1C,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,IAAI,IAAI,CAAC;AAC5E,CAAC;AAED,SAAS,cAAc,CAAC,MAAiB;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAClC,CAAC,CAAC,MAAM,CAAC,OAAO;QAChB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAuC,EAAE;IAEzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;QACjC,MAAM,CAAC,KAAK,CAAC,uCAAuC,GAAG,IAAI,CAAC,CAAC;IAC/D,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CACX,KAAc,EACd,MAAc,EACd,WAAoB,EACpB,SAAiB,EACjB,aAA6D,EAC7D,MAAe,EACgB,EAAE,CAAC,CAAC;QACnC,QAAQ,EAAE,CAAC;QACX,KAAK;QACL,MAAM;QACN,SAAS,EAAE,WAAW;QACtB,SAAS;QACT,aAAa;QACb,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;KACxC,CAAC,CAAC;IAEH,IAAI,KAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE;YACzC,SAAS,EAAE,IAAI;YACf,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC;SACzF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAE1C,mEAAmE;IACnE,kEAAkE;IAClE,oEAAoE;IACpE,IAAI,QAAQ,GAAoB,IAAI,CAAC;IACrC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,yBAA0B,GAAa,CAAC,OAAO,0CAA0C,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACtE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,IAAI;QACjE,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC;QAChC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,0BAA0B,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACjE,IAAI,gBAAgB;QAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAE7C,uDAAuD;IACvD,+DAA+D;IAC/D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,oBAAoB,CAAC;IACnE,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAE5E,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,yHAAyH,CAAC;QACzI,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC7D,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,WAAW,MAAM,+BAA+B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC;QACpH,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAED,0CAA0C;IAC1C,MAAM,OAAO,GAAG,GAAG,wBAAwB,IAAI,MAAM,EAAE,CAAC;IAExD,IAAI,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACnC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,uCAAuC,OAAO,EAAE,CAAC;YAChE,IAAI,CAAC,MAAM,CAAC,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,yDAAyD,OAAO,EAAE,CAAC;YAClF,IAAI,CAAC,MAAM,CAAC,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC,MAAM,EAAE,UAAU,IAAI,KAAK,CAAC;QAC7E,WAAW,GAAG,CAAC,IAAI,EAAE,EAAE,CACrB,aAAa,CAAC;YACZ,UAAU,EAAE,OAAO;YACnB,GAAG,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YAC3B,SAAS;YACT,GAAG,IAAI;SACR,CAAC,CAAC;IACP,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAChF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,wBAAwB,MAAM,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,YAAY,OAAO,gBAAgB,SAAS,EAAE,CAAC,CAAC;IACrD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CACF,gOAAgO,CACjO,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AAC7D,CAAC"}

package/dist/cli/session-start/index.d.ts

@@ -1,121 +0,0 @@
-import type { Manifest } from "../../schema/index.js";
-import { type SessionSource, type SessionStartCommonOptions } from "./shared-options.js";
-export declare const PREFLIGHT_BIN = "preflight";
-/** The slice of `preflight run --json` output this producer reads. */
-export interface PreflightJson {
-    ready?: boolean;
-    confidence?: number;
-    checks?: Array<{
-        name?: string;
-        status?: string;
-        message?: string;
-        details?: string[];
-    }>;
-}
-export type RunPreflightResult = {
-    ok: true;
-    json: PreflightJson;
-} | {
-    ok: false;
-    reason: string;
-};
-export interface SessionStartPreflightOptions extends SessionStartCommonOptions {
-    /** `preflight` subprocess timeout in ms. */
-    preflightTimeoutMs?: number;
-    /** Inject the preflight runner (tests). */
-    runPreflight?: (cwd: string, timeoutMs: number, setup: boolean) => Promise<RunPreflightResult>;
-    /**
-     * Inject the resolved manifest (tests). Scope is EXACTLY one call
-     * site: the `setupEnabled` resolution of
-     * `session_start_preflight.setup` (task 30183330), same seam shape as
-     * `harness explain-policy`'s own `manifest` option. The
-     * ledger-writer's own `loadManifest` call further down (used only
-     * when `writeLedger` is not injected) deliberately does NOT read this
-     * field, so injecting a manifest never suppresses that call's
-     * run-aborting failure path. A failure to resolve `setup` here (this
-     * field is absent AND `loadManifest(opts)` throws) degrades to
-     * `setup: false` (matches the sibling SessionStart companions' "not
-     * configured -> skip" contract) rather than aborting the entire
-     * preflight run over this one unrelated knob. Injecting this field
-     * also bypasses the cwd-derived project layer that resolution
-     * otherwise feeds through the loader (task c88461c1, see the
-     * `setupEnabled` block itself): an injected manifest already IS the
-     * merged result, so there is nothing left for a project layer to
-     * apply to.
-     */
-    manifest?: Manifest;
-    /**
-     * Directory the not-ready diagnostic JSON is persisted to (task
-     * T-001). Test seam — production defaults to the dirname of the
-     * manifest path `resolvePaths()` resolves, plus `/logs`
-     * (`path.dirname(resolvePaths(opts).base)`, task 80f49922). That is
-     * normally `<home>/logs`, where `<home>` follows the usual precedence
-     * ($HARNESS_HOME, then `~/.harness/`, then the legacy `~/.claude/`
-     * fallback) — EXCEPT when `configPath` is injected without `homeDir`:
-     * `configPath` overrides the manifest path directly, so the log dir
-     * becomes `dirname(configPath)/logs` and does NOT route through
-     * home-dir resolution at all in that case. `resolvePaths()` throws
-     * unless `homeDir` or `configPath` is also injected (loader.ts:45-64).
-     * Always pass a tmp dir in tests so nothing ever touches the
-     * operator's real `~/.harness/logs/` (or the legacy `~/.claude/logs/`).
-     */
-    logDir?: string;
-    /**
-     * Inject the `.pending-approval` writer. Opt-in: staging only happens
-     * when the caller explicitly passes a writer. The CLI entry points
-     * (`harness preflight` and `harness session-start preflight`) wire
-     * `writePendingApproval` from `runtime/pending-approval`, so operators
-     * get the bootstrap fix; library callers that import this function
-     * directly do not pollute the real `~/.claude/harness.generated/`
-     * unless they opt in. Hotfix for v0.21.0 which defaulted to ON and
-     * caused vitest runs to clobber the operator's pending-approval file
-     * via the `npm-test` preflight check (agent-tasks/<this hotfix>).
-     * Pass `null` to make the opt-out explicit; `undefined` (the default)
-     * is the same no-op.
-     */
-    stagePendingApproval?: ((generatedDir: string, sessionId: string) => void) | null;
-}
-export interface SessionStartPreflightResult {
-    /** Always 0 — a SessionStart hook must never break the session loop. */
-    exitCode: number;
-    /** Whether the `preflight:` ledger fact was written. */
-    wrote: boolean;
-    /** Resolved repo name (the `${REPO}` a tag is namespaced by). */
-    repo: string;
-    /** Resolved branch (the `${BRANCH}` a tag is namespaced by; "" if detached). */
-    branch: string;
-    /**
-     * Which tier the session id came from. Surfaced so the CLI can
-     * loud-warn when the resolved id is the literal `"default"` (a tag
-     * recorded under that id will not satisfy any `preflight-before-*`
-     * gate, which queries by the real Claude Code session id).
-     */
-    sessionSource: SessionSource;
-    /** Resolved session id. */
-    sessionId: string;
-    /** Human-readable explanation of a non-write outcome, for diagnostics. */
-    reason?: string;
-}
-/**
- * Environment for the spawned `preflight` child: the parent env minus
- * HARNESS_ALLOW_REAL_GENERATED_DIR. The launcher sets that flag so the
- * real harness binary may fall back to the operator's home dir, but the
- * preflight child runs the repo's own test suite (its `npm-test` check),
- * and an inherited flag re-enables the implicit real-homedir fallback
- * INSIDE those test processes. With non-empty operator state (e.g. a
- * `harness pause` sentinel) that broke 110 tests and surfaced as a false
- * `failing: npm-test`, keeping the preflight gate shut. Third incident
- * of the operator-state-isolation class PR #199 pinned; the flag must
- * stay scoped to the process the operator actually invoked.
- */
-export declare function preflightChildEnv(parentEnv?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
-/**
- * Build the argv passed to the `preflight` child (task 30183330). Pure
- * and exported so a test can pin the rendered command directly, with
- * and without `setup`, instead of only exercising the injected
- * `runPreflight` seam. `--setup` is inserted before the positional
- * `cwd` argument, matching agent-preflight's own `preflight run
- * [options] [repoPath]` usage.
- */
-export declare function buildPreflightArgv(cwd: string, setup: boolean): string[];
-export declare function runSessionStartPreflight(opts?: SessionStartPreflightOptions): Promise<SessionStartPreflightResult>;