@lannguyensi/harness 0.63.0 → 1.0.0

package/dist/cli/smoke/runner.d.ts

@@ -1,55 +0,0 @@
-import { type ChildProcessWithoutNullStreams } from "node:child_process";
-export interface RunClaudeOptions {
-    /** Absolute path (or PATH-lookup name) of the claude binary. */
-    claudeBin: string;
-    /** Prompt fed to `claude -p`. */
-    prompt: string;
-    /** Settings.json the spawned claude uses (the apply'd manifest output). */
-    settingsPath: string;
-    /** Session id. */
-    sessionId: string;
-    /** Working dir for the spawn. Defaults to `cwd` of the parent. */
-    cwd?: string;
-    /** Forensic capture target. */
-    outputDir: string;
-    /** Hard wall-clock budget. Hitting it kills claude and resolves the run. */
-    timeoutMs: number;
-    /**
-     * Extra env merged onto process.env. `HARNESS_POLICY_VERBOSE=1` is
-     * baked in BEFORE this map, so an operator who explicitly passes
-     * `HARNESS_POLICY_VERBOSE=0` in `env` wins. (The verb sets the verbose
-     * default because `--expect-decision warn` reads the stderr diagnostic.)
-     */
-    env?: Record<string, string>;
-    /**
-     * Test-injectable spawn. Defaults to node:child_process.spawn. The
-     * fixture sees the same argv harness would pass to claude in prod.
-     */
-    spawn?: (command: string, args: string[], options: {
-        cwd?: string;
-        env: NodeJS.ProcessEnv;
-    }) => ChildProcessWithoutNullStreams;
-}
-export interface RunClaudeResult {
-    /** Numeric exit code of the spawned claude process, or null on signal. */
-    exitCode: number | null;
-    signal: NodeJS.Signals | null;
-    /** True if the run was killed by the wall-clock timeout. */
-    timedOut: boolean;
-    /** Forensic file paths. */
-    streamPath: string;
-    stderrPath: string;
-    /** Captured streams (also persisted to disk; in-memory copy for callers). */
-    streamText: string;
-    stderrText: string;
-    /** argv handed to claude, for debugging + dogfood README capture. */
-    argv: string[];
-    /** Total wall-clock spent in the spawn. */
-    durationMs: number;
-}
-export declare function buildClaudeArgv(opts: {
-    prompt: string;
-    settingsPath: string;
-    sessionId: string;
-}): string[];
-export declare function runClaude(opts: RunClaudeOptions): Promise<RunClaudeResult>;

package/dist/cli/smoke/runner.js

@@ -1,134 +0,0 @@
-// Phase 7 follow-up: claude -p driver for `harness smoke`.
-//
-// Spawns `claude -p` with the canonical headless-dogfood flags, tees
-// stdout to <output-dir>/stream.jsonl and stderr to
-// <output-dir>/stderr.log so forensic files exist even when the run
-// crashes or hits the timeout. Returns the captured streams + the
-// claude exit code so the caller can run assertions.
-import { spawn } from "node:child_process";
-import * as fs from "node:fs";
-import * as path from "node:path";
-const CLAUDE_FLAGS = [
-    "--output-format",
-    "stream-json",
-    "--include-hook-events",
-    "--verbose",
-    "--permission-mode",
-    "bypassPermissions",
-];
-export function buildClaudeArgv(opts) {
-    return [
-        "-p",
-        opts.prompt,
-        "--session-id",
-        opts.sessionId,
-        "--settings",
-        opts.settingsPath,
-        ...CLAUDE_FLAGS,
-    ];
-}
-export async function runClaude(opts) {
-    fs.mkdirSync(opts.outputDir, { recursive: true });
-    const streamPath = path.join(opts.outputDir, "stream.jsonl");
-    const stderrPath = path.join(opts.outputDir, "stderr.log");
-    const streamWriter = fs.createWriteStream(streamPath);
-    const stderrWriter = fs.createWriteStream(stderrPath);
-    const argv = buildClaudeArgv(opts);
-    const spawnFn = opts.spawn ?? spawn;
-    const env = {
-        ...process.env,
-        // The Phase 5 #3 verbose diagnostic block is how `--expect-decision warn`
-        // becomes observable from the stream's hook_response.stderr field.
-        HARNESS_POLICY_VERBOSE: "1",
-        ...(opts.env ?? {}),
-    };
-    const child = spawnFn(opts.claudeBin, argv, {
-        ...(opts.cwd !== undefined && { cwd: opts.cwd }),
-        env,
-    });
-    let streamText = "";
-    let stderrText = "";
-    let timedOut = false;
-    const start = Date.now();
-    child.stdout.on("data", (chunk) => {
-        const text = chunk.toString("utf8");
-        streamText += text;
-        streamWriter.write(chunk);
-    });
-    child.stderr.on("data", (chunk) => {
-        const text = chunk.toString("utf8");
-        stderrText += text;
-        stderrWriter.write(chunk);
-    });
-    // Both timers are captured in scope so the close-listener can clear
-    // them when claude exits before the budget. Without that, every fast
-    // smoke run leaked an `unref`'d setTimeout pair that fires on a dead
-    // PID minutes later, a non-issue at process exit but visible noise in
-    // a long-lived parent (e.g. vitest batches).
-    let outerTimer = null;
-    let killTimer = null;
-    const clearTimers = () => {
-        if (outerTimer) {
-            clearTimeout(outerTimer);
-            outerTimer = null;
-        }
-        if (killTimer) {
-            clearTimeout(killTimer);
-            killTimer = null;
-        }
-    };
-    const exitPromise = new Promise((resolve) => {
-        child.once("close", (code, signal) => {
-            clearTimers();
-            resolve({ code, signal });
-        });
-        child.once("error", () => {
-            clearTimers();
-            resolve({ code: null, signal: null });
-        });
-    });
-    const timeoutPromise = new Promise((resolve) => {
-        outerTimer = setTimeout(() => {
-            timedOut = true;
-            try {
-                child.kill("SIGTERM");
-            }
-            catch {
-                /* already gone */
-            }
-            // SIGKILL escalation after a short grace period so a wedged
-            // claude does not hang the runner past `timeoutMs + epsilon`.
-            killTimer = setTimeout(() => {
-                try {
-                    child.kill("SIGKILL");
-                }
-                catch {
-                    /* already gone */
-                }
-            }, 2000);
-            killTimer.unref();
-            // Hand the resolved value over to the race; the close listener
-            // will land its own value first when the child exits cleanly.
-            exitPromise.then(resolve);
-        }, opts.timeoutMs);
-        outerTimer.unref();
-    });
-    const { code, signal } = await Promise.race([exitPromise, timeoutPromise]);
-    clearTimers();
-    // Flush writers before returning so a caller that re-reads the files
-    // sees the same bytes the in-memory text holds.
-    await new Promise((resolve) => streamWriter.end(resolve));
-    await new Promise((resolve) => stderrWriter.end(resolve));
-    return {
-        exitCode: code,
-        signal,
-        timedOut,
-        streamPath,
-        stderrPath,
-        streamText,
-        stderrText,
-        argv,
-        durationMs: Date.now() - start,
-    };
-}
-//# sourceMappingURL=runner.js.map

package/dist/cli/smoke/runner.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../src/cli/smoke/runner.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,EAAE;AACF,qEAAqE;AACrE,oDAAoD;AACpD,oEAAoE;AACpE,kEAAkE;AAClE,qDAAqD;AAErD,OAAO,EAAuC,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAqDlC,MAAM,YAAY,GAAG;IACnB,iBAAiB;IACjB,aAAa;IACb,uBAAuB;IACvB,WAAW;IACX,mBAAmB;IACnB,mBAAmB;CACpB,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,IAI/B;IACC,OAAO;QACL,IAAI;QACJ,IAAI,CAAC,MAAM;QACX,cAAc;QACd,IAAI,CAAC,SAAS;QACd,YAAY;QACZ,IAAI,CAAC,YAAY;QACjB,GAAG,YAAY;KAChB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAsB;IAEtB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAEtD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IACpC,MAAM,GAAG,GAAsB;QAC7B,GAAG,OAAO,CAAC,GAAG;QACd,0EAA0E;QAC1E,mEAAmE;QACnE,sBAAsB,EAAE,GAAG;QAC3B,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;KACpB,CAAC;IAEF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE;QAC1C,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QAChD,GAAG;KACJ,CAAC,CAAC;IAEH,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEzB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,UAAU,IAAI,IAAI,CAAC;QACnB,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,UAAU,IAAI,IAAI,CAAC;QACnB,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,oEAAoE;IACpE,qEAAqE;IACrE,qEAAqE;IACrE,sEAAsE;IACtE,6CAA6C;IAC7C,IAAI,UAAU,GAA0B,IAAI,CAAC;IAC7C,IAAI,SAAS,GAA0B,IAAI,CAAC;IAC5C,MAAM,WAAW,GAAG,GAAS,EAAE;QAC7B,IAAI,UAAU,EAAE,CAAC;YACf,YAAY,CAAC,UAAU,CAAC,CAAC;YACzB,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,IAAI,SAAS,EAAE,CAAC;YACd,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,IAAI,OAAO,CAC7B,CAAC,OAAO,EAAE,EAAE;QACV,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACnC,WAAW,EAAE,CAAC;YACd,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,WAAW,EAAE,CAAC;YACd,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,MAAM,cAAc,GAAG,IAAI,OAAO,CAChC,CAAC,OAAO,EAAE,EAAE;QACV,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3B,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB;YACpB,CAAC;YACD,4DAA4D;YAC5D,8DAA8D;YAC9D,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,IAAI,CAAC;oBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACP,kBAAkB;gBACpB,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC;YACT,SAAS,CAAC,KAAK,EAAE,CAAC;YAClB,+DAA+D;YAC/D,8DAA8D;YAC9D,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnB,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CACF,CAAC;IAEF,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;IAC3E,WAAW,EAAE,CAAC;IAEd,qEAAqE;IACrE,gDAAgD;IAChD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAEhE,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,MAAM;QACN,QAAQ;QACR,UAAU;QACV,UAAU;QACV,UAAU;QACV,UAAU;QACV,IAAI;QACJ,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KAC/B,CAAC;AACJ,CAAC"}

package/dist/cli/smoke/stream-parser.d.ts

@@ -1,65 +0,0 @@
-export interface InitEvent {
-    type: "system";
-    subtype: "init";
-    session_id?: string;
-    cwd?: string;
-    model?: string;
-    permissionMode?: string;
-    [key: string]: unknown;
-}
-export interface HookStartedEvent {
-    type: "system";
-    subtype: "hook_started";
-    hook_id?: string;
-    hook_name?: string;
-    hook_event?: string;
-    session_id?: string;
-    [key: string]: unknown;
-}
-export interface HookResponseEvent {
-    type: "system";
-    subtype: "hook_response";
-    hook_id?: string;
-    hook_name?: string;
-    hook_event?: string;
-    output?: string;
-    stdout?: string;
-    stderr?: string;
-    exit_code?: number;
-    outcome?: string;
-    session_id?: string;
-    [key: string]: unknown;
-}
-export interface ResultEvent {
-    type: "result";
-    subtype?: string;
-    is_error?: boolean;
-    duration_ms?: number;
-    session_id?: string;
-    result?: string;
-    [key: string]: unknown;
-}
-export interface HookPair {
-    hookId: string;
-    hookName: string;
-    hookEvent: string;
-    started: HookStartedEvent;
-    response: HookResponseEvent | null;
-    stdout: string;
-    stderr: string;
-    exitCode: number | null;
-    outcome: string | null;
-}
-export interface StreamSummary {
-    init: InitEvent | null;
-    hooks: HookPair[];
-    result: ResultEvent | null;
-    totalLines: number;
-    malformedLines: number;
-    /** Up to 20 unrecognised event shapes (truncated past that to bound memory). */
-    unrecognised: Array<{
-        type?: string;
-        subtype?: string;
-    }>;
-}
-export declare function parseStreamJsonl(text: string): StreamSummary;

package/dist/cli/smoke/stream-parser.js

@@ -1,115 +0,0 @@
-// Phase 7 follow-up: `harness smoke` stream-json parser.
-//
-// `claude -p --output-format stream-json --include-hook-events` emits a
-// JSONL stream where each line is one of:
-//
-//   { type: "system",  subtype: "init",          ... }   // session start
-//   { type: "system",  subtype: "hook_started",  ... }   // hook begins
-//   { type: "system",  subtype: "hook_response", ... }   // hook returns
-//   { type: "assistant", message: {...},         ... }   // model reply chunk
-//   { type: "result",  subtype: "success",       ... }   // terminal
-//
-// This module classifies those lines into a structured summary that the
-// assertion engine can probe without re-reading the stream. Unknown event
-// shapes are kept in `unrecognised` (capped) so a future Claude Code
-// release that adds new subtypes does not silently swallow regressions.
-const UNRECOGNISED_CAP = 20;
-export function parseStreamJsonl(text) {
-    const summary = {
-        init: null,
-        hooks: [],
-        result: null,
-        totalLines: 0,
-        malformedLines: 0,
-        unrecognised: [],
-    };
-    const pending = new Map();
-    for (const raw of text.split("\n")) {
-        const line = raw.trim();
-        if (!line)
-            continue;
-        summary.totalLines += 1;
-        let msg;
-        try {
-            msg = JSON.parse(line);
-        }
-        catch {
-            summary.malformedLines += 1;
-            continue;
-        }
-        const type = msg.type;
-        const subtype = msg.subtype;
-        if (type === "system" && subtype === "init") {
-            summary.init = msg;
-            continue;
-        }
-        if (type === "system" && subtype === "hook_started") {
-            const ev = msg;
-            if (typeof ev.hook_id === "string") {
-                pending.set(ev.hook_id, ev);
-            }
-            continue;
-        }
-        if (type === "system" && subtype === "hook_response") {
-            const ev = msg;
-            const hookId = typeof ev.hook_id === "string" ? ev.hook_id : "";
-            const started = pending.get(hookId);
-            // Some hook_responses arrive without a matching hook_started in the
-            // same stream (e.g. session-resume edge cases). Synthesise a minimal
-            // started shell so the pair is still consumable by assertions.
-            const startedFallback = started ?? {
-                type: "system",
-                subtype: "hook_started",
-                hook_id: hookId,
-                hook_name: ev.hook_name,
-                hook_event: ev.hook_event,
-            };
-            pending.delete(hookId);
-            summary.hooks.push({
-                hookId,
-                hookName: typeof ev.hook_name === "string" ? ev.hook_name : "",
-                hookEvent: typeof ev.hook_event === "string" ? ev.hook_event : "",
-                started: startedFallback,
-                response: ev,
-                stdout: typeof ev.stdout === "string" ? ev.stdout : "",
-                stderr: typeof ev.stderr === "string" ? ev.stderr : "",
-                exitCode: typeof ev.exit_code === "number" ? ev.exit_code : null,
-                outcome: typeof ev.outcome === "string" ? ev.outcome : null,
-            });
-            continue;
-        }
-        if (type === "result") {
-            summary.result = msg;
-            continue;
-        }
-        // Anything else: kept terse for forensics, capped.
-        if (type === "assistant" || type === "rate_limit_event" || type === "user") {
-            // Known noise we do not surface in the summary.
-            continue;
-        }
-        if (summary.unrecognised.length < UNRECOGNISED_CAP) {
-            summary.unrecognised.push({
-                type: typeof type === "string" ? type : undefined,
-                subtype: typeof subtype === "string" ? subtype : undefined,
-            });
-        }
-    }
-    // Flush hook_started events that never got a response (claude killed
-    // mid-hook). We surface them as pairs with response=null so an
-    // assertion can fail loudly rather than silently miss the hook fire.
-    for (const started of pending.values()) {
-        summary.hooks.push({
-            hookId: typeof started.hook_id === "string" ? started.hook_id : "",
-            hookName: typeof started.hook_name === "string" ? started.hook_name : "",
-            hookEvent: typeof started.hook_event === "string" ? started.hook_event : "",
-            started,
-            response: null,
-            stdout: "",
-            stderr: "",
-            exitCode: null,
-            outcome: null,
-        });
-    }
-    return summary;
-}
-//# sourceMappingURL=stream-parser.js.map

package/dist/cli/smoke/stream-parser.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"stream-parser.js","sourceRoot":"","sources":["../../../src/cli/smoke/stream-parser.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,wEAAwE;AACxE,0CAA0C;AAC1C,EAAE;AACF,0EAA0E;AAC1E,wEAAwE;AACxE,yEAAyE;AACzE,8EAA8E;AAC9E,qEAAqE;AACrE,EAAE;AACF,wEAAwE;AACxE,0EAA0E;AAC1E,qEAAqE;AACrE,wEAAwE;AAqExE,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,OAAO,GAAkB;QAC7B,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,CAAC;QACb,cAAc,EAAE,CAAC;QACjB,YAAY,EAAE,EAAE;KACjB,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEpD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC;QACxB,IAAI,GAA4B,CAAC;QACjC,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAE5B,IAAI,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YAC5C,OAAO,CAAC,IAAI,GAAG,GAAgB,CAAC;YAChC,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;YACpD,MAAM,EAAE,GAAG,GAAuB,CAAC;YACnC,IAAI,OAAO,EAAE,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACnC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC9B,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;YACrD,MAAM,EAAE,GAAG,GAAwB,CAAC;YACpC,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpC,oEAAoE;YACpE,qEAAqE;YACrE,+DAA+D;YAC/D,MAAM,eAAe,GAAqB,OAAO,IAAI;gBACnD,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,cAAc;gBACvB,OAAO,EAAE,MAAM;gBACf,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,UAAU,EAAE,EAAE,CAAC,UAAU;aAC1B,CAAC;YACF,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;gBACjB,MAAM;gBACN,QAAQ,EAAE,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;gBAC9D,SAAS,EAAE,OAAO,EAAE,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;gBACjE,OAAO,EAAE,eAAe;gBACxB,QAAQ,EAAE,EAAE;gBACZ,MAAM,EAAE,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBACtD,MAAM,EAAE,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBACtD,QAAQ,EAAE,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;gBAChE,OAAO,EAAE,OAAO,EAAE,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;aAC5D,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,CAAC,MAAM,GAAG,GAAkB,CAAC;YACpC,SAAS;QACX,CAAC;QAED,mDAAmD;QACnD,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,kBAAkB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3E,gDAAgD;YAChD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;YACnD,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;gBACxB,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;gBACjD,OAAO,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;aAC3D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,+DAA+D;IAC/D,qEAAqE;IACrE,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACvC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;YACjB,MAAM,EAAE,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YAClE,QAAQ,EAAE,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;YACxE,SAAS,EAAE,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;YAC3E,OAAO;YACP,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cli/test-risk.d.ts

@@ -1,26 +0,0 @@
-import { type RiskProfile } from "../runtime/index.js";
-import type { Manifest } from "../schema/index.js";
-import { type EventInputSeams } from "./event-input.js";
-import { type LoaderOptions } from "./loader.js";
-export interface TestRiskOptions extends EventInputSeams, LoaderOptions {
-    /** Path to the tool-event JSON file. */
-    eventPath: string;
-    /** Emit JSON instead of YAML. */
-    json?: boolean;
-    /** Inject the resolved manifest (tests); bypasses `loadManifest`. */
-    manifest?: Manifest;
-}
-export interface TestRiskResult {
-    output: string;
-    profile: RiskProfile;
-}
-/**
- * Build the Action Envelope for a tool-event JSON file, classify it
- * against the manifest's risk classifiers, and render the profile.
- *
- * Throws `HarnessExitError(EX_NOINPUT)` when the event file is missing,
- * malformed, or not a JSON object (see `loadEventEnvelope`). A manifest
- * with no `risk.classifiers[]` is valid: every action then classifies
- * as unclassified ("unknown is not safe").
- */
-export declare function testRisk(opts: TestRiskOptions): TestRiskResult;

package/dist/cli/test-risk.js

@@ -1,34 +0,0 @@
-// Phase 7 #3 — `harness test-risk` CLI entrypoint.
-//
-// Debug verb for the Risk Gate. Reads a tool-event JSON file, builds
-// the Action Envelope (#2), classifies it against the manifest's
-// `risk.classifiers[]` (#3), and prints the resulting risk profile.
-// The inspection surface for the Risk Classifier, the counterpart of
-// `harness explain-action` one stage further down the pipeline.
-//
-// File read, JSON guards, and envelope build are the shared
-// `event-input` front end; manifest load + classification + rendering
-// live here.
-import { stringify as stringifyYaml } from "yaml";
-import { classifyRisk } from "../runtime/index.js";
-import { loadEventEnvelope } from "./event-input.js";
-import { loadManifest } from "./loader.js";
-/**
- * Build the Action Envelope for a tool-event JSON file, classify it
- * against the manifest's risk classifiers, and render the profile.
- *
- * Throws `HarnessExitError(EX_NOINPUT)` when the event file is missing,
- * malformed, or not a JSON object (see `loadEventEnvelope`). A manifest
- * with no `risk.classifiers[]` is valid: every action then classifies
- * as unclassified ("unknown is not safe").
- */
-export function testRisk(opts) {
-    const { envelope } = loadEventEnvelope(opts.eventPath, opts, "test-risk");
-    const manifest = opts.manifest ?? loadManifest(opts).manifest;
-    const profile = classifyRisk(envelope, manifest.risk.classifiers);
-    const output = opts.json
-        ? `${JSON.stringify(profile, null, 2)}\n`
-        : stringifyYaml(profile, { lineWidth: 0 });
-    return { output, profile };
-}
-//# sourceMappingURL=test-risk.js.map

package/dist/cli/test-risk.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"test-risk.js","sourceRoot":"","sources":["../../src/cli/test-risk.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,qEAAqE;AACrE,iEAAiE;AACjE,oEAAoE;AACpE,qEAAqE;AACrE,gEAAgE;AAChE,EAAE;AACF,4DAA4D;AAC5D,sEAAsE;AACtE,aAAa;AAEb,OAAO,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AAClD,OAAO,EAAE,YAAY,EAAoB,MAAM,qBAAqB,CAAC;AAErE,OAAO,EAAE,iBAAiB,EAAwB,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAsB,MAAM,aAAa,CAAC;AAgB/D;;;;;;;;GAQG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAqB;IAC5C,MAAM,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;IAC9D,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI;QACtB,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;QACzC,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC"}

package/dist/io/display-path.d.ts

@@ -1,11 +0,0 @@
-/**
- * `value` as one double-quoted, single-line literal that is safe to print:
- * `JSON.stringify` escapes `"`, `\`, every C0 control character (ESC as
- * `\u001b`, CR as `\r`, LF as `\n`) and lone surrogates, and DEL and the C1
- * range, which JSON leaves raw (U+009B is a one-byte CSI on terminals that
- * honour C1), are escaped here as `\uXXXX`. Unicode format characters
- * (including bidi overrides) and line/paragraph separators are escaped too.
- * Supplementary characters use two UTF-16 `\uXXXX` escapes so the result
- * stays a JSON literal that parses back to the original string.
- */
-export declare function escapeForDisplay(value: string): string;

package/dist/io/display-path.js

@@ -1,29 +0,0 @@
-// Safe rendering of a path (or any other agent-chosen string) into text an
-// operator reads on a terminal.
-//
-// A file name in a directory the gated agent can write is attacker-chosen:
-// POSIX permits every byte but `/` and NUL in it, so it can carry an ESC
-// (an OSC 52 clipboard write, a screen clear), a CR (overwrite the line it
-// lands on) or a newline (forge an extra diagnostic-looking line). A path
-// that reaches stderr therefore goes through this one helper; it ESCAPES
-// rather than strips, so the operator can still see which name is meant and
-// can copy its escaped form into a recovery command.
-//
-// Lives in `src/io/` for the same reason `project-name.ts` does: it is a
-// leaf utility any layer may use (`io/` may not import from `runtime/`).
-/** Controls JSON leaves raw, Unicode format characters and line separators. */
-const UNSAFE_DISPLAY_CHARACTERS = /[\u007f-\u009f\p{Cf}\u2028\u2029]/gu;
-/**
- * `value` as one double-quoted, single-line literal that is safe to print:
- * `JSON.stringify` escapes `"`, `\`, every C0 control character (ESC as
- * `\u001b`, CR as `\r`, LF as `\n`) and lone surrogates, and DEL and the C1
- * range, which JSON leaves raw (U+009B is a one-byte CSI on terminals that
- * honour C1), are escaped here as `\uXXXX`. Unicode format characters
- * (including bidi overrides) and line/paragraph separators are escaped too.
- * Supplementary characters use two UTF-16 `\uXXXX` escapes so the result
- * stays a JSON literal that parses back to the original string.
- */
-export function escapeForDisplay(value) {
-    return JSON.stringify(value).replace(UNSAFE_DISPLAY_CHARACTERS, (ch) => ch.split("").map((unit) => `\\u${unit.charCodeAt(0).toString(16).padStart(4, "0")}`).join(""));
-}
-//# sourceMappingURL=display-path.js.map

package/dist/io/display-path.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"display-path.js","sourceRoot":"","sources":["../../src/io/display-path.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,gCAAgC;AAChC,EAAE;AACF,2EAA2E;AAC3E,yEAAyE;AACzE,2EAA2E;AAC3E,0EAA0E;AAC1E,yEAAyE;AACzE,4EAA4E;AAC5E,qDAAqD;AACrD,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AAEzE,+EAA+E;AAC/E,MAAM,yBAAyB,GAAG,qCAAqC,CAAC;AAExE;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAClC,yBAAyB,EACzB,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CACtG,CAAC;AACJ,CAAC"}

package/dist/io/duration.d.ts

@@ -1,5 +0,0 @@
-export declare class InvalidDurationError extends Error {
-    readonly value: string;
-    constructor(value: string);
-}
-export declare function parseDurationSeconds(value: string): number;

package/dist/io/duration.js

@@ -1,50 +0,0 @@
-const SHORTHAND_RE = /^([0-9]+)(s|m|h|d)$/;
-const ISO_RE = /^P(?!$)(?:(\d+)Y)?(?:(\d+)M)?(?:(\d+)W)?(?:(\d+)D)?(?:T(?:(\d+)H)?(?:(\d+)M)?(?:(\d+)S)?)?$/;
-const SECONDS = {
-    s: 1,
-    m: 60,
-    h: 60 * 60,
-    d: 24 * 60 * 60,
-};
-const ISO_SECONDS = {
-    year: 365 * 24 * 60 * 60,
-    month: 30 * 24 * 60 * 60,
-    week: 7 * 24 * 60 * 60,
-    day: 24 * 60 * 60,
-    hour: 60 * 60,
-    minute: 60,
-    second: 1,
-};
-export class InvalidDurationError extends Error {
-    value;
-    constructor(value) {
-        super(`invalid duration "${value}": expected shorthand like "24h" / "30m" / "7d" / "60s" or an ISO-8601 duration like "PT1H" / "P1D"`);
-        this.value = value;
-        this.name = "InvalidDurationError";
-    }
-}
-export function parseDurationSeconds(value) {
-    const trimmed = value.trim();
-    const short = SHORTHAND_RE.exec(trimmed);
-    if (short) {
-        const n = Number.parseInt(short[1], 10);
-        const unit = short[2];
-        return n * SECONDS[unit];
-    }
-    const iso = ISO_RE.exec(trimmed);
-    if (iso) {
-        const [, y, mo, w, d, h, mi, s] = iso;
-        const total = (Number(y ?? 0) * ISO_SECONDS.year) +
-            (Number(mo ?? 0) * ISO_SECONDS.month) +
-            (Number(w ?? 0) * ISO_SECONDS.week) +
-            (Number(d ?? 0) * ISO_SECONDS.day) +
-            (Number(h ?? 0) * ISO_SECONDS.hour) +
-            (Number(mi ?? 0) * ISO_SECONDS.minute) +
-            (Number(s ?? 0) * ISO_SECONDS.second);
-        if (total === 0)
-            throw new InvalidDurationError(value);
-        return total;
-    }
-    throw new InvalidDurationError(value);
-}
-//# sourceMappingURL=duration.js.map

package/dist/io/duration.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"duration.js","sourceRoot":"","sources":["../../src/io/duration.ts"],"names":[],"mappings":"AAAA,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAC3C,MAAM,MAAM,GACV,6FAA6F,CAAC;AAEhG,MAAM,OAAO,GAAG;IACd,CAAC,EAAE,CAAC;IACJ,CAAC,EAAE,EAAE;IACL,CAAC,EAAE,EAAE,GAAG,EAAE;IACV,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;CACP,CAAC;AAEX,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;IACxB,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;IACxB,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;IACtB,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;IACjB,IAAI,EAAE,EAAE,GAAG,EAAE;IACb,MAAM,EAAE,EAAE;IACV,MAAM,EAAE,CAAC;CACD,CAAC;AAEX,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACjB;IAA5B,YAA4B,KAAa;QACvC,KAAK,CACH,qBAAqB,KAAK,qGAAqG,CAChI,CAAC;QAHwB,UAAK,GAAL,KAAK,CAAQ;QAIvC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAyB,CAAC;QAC9C,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC;QACtC,MAAM,KAAK,GACT,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACnC,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC;YACrC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACnC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC;YAClC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACnC,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC;YACtC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,KAAK,KAAK,CAAC;YAAE,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACvD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC"}

package/dist/io/extract.d.ts

@@ -1,79 +0,0 @@
-declare const NAMESPACES: readonly ["toolArgs", "event", "session", "git"];
-type Namespace = (typeof NAMESPACES)[number];
-export declare class ExtractGrammarError extends Error {
-    readonly expression: string;
-    constructor(message: string, expression: string);
-}
-export type ExtractSegment = {
-    kind: "identifier";
-    key: string;
-} | {
-    kind: "bracket";
-    key: string;
-};
-export interface ExtractPath {
-    namespace: Namespace;
-    segments: ExtractSegment[];
-}
-export declare function parseExtractExpression(expr: string): ExtractPath;
-export declare function validateExtractGrammar(expr: string): void;
-export interface ExtractEventContext {
-    toolArgs?: unknown;
-    event?: unknown;
-    session?: unknown;
-    git?: unknown;
-}
-export interface ExtractBuiltins {
-    SESSION_ID: string;
-    REPO: string;
-    BRANCH: string;
-    TOOL_NAME: string;
-    CWD: string;
-}
-export type ExtractTraceSource = "extract" | "builtin" | "missing";
-export interface ExtractTraceEntry {
-    var: string;
-    expression: string;
-    resolved: string;
-    source: ExtractTraceSource;
-}
-export interface ExtractEvaluation {
-    values: Record<string, string>;
-    traceData: ExtractTraceEntry[];
-}
-export declare function evaluateExtract(extracts: Record<string, string>, ctx: ExtractEventContext, builtins: ExtractBuiltins): ExtractEvaluation;
-export interface SubstituteTemplateResult {
-    result: string;
-    missing: string[];
-}
-export declare function substituteTemplate(template: string, values: Record<string, string>): SubstituteTemplateResult;
-/** One `trigger.input_match` map: extract expression -> expected literal. */
-export type InputMatchMap = Record<string, string | number | boolean>;
-export interface InputMatchMismatch {
-    /** The extract expression whose value did not equal the declared literal. */
-    expression: string;
-    /** The literal the policy declared. */
-    expected: string | number | boolean;
-    /** The value actually read from the event payload (`undefined` when absent). */
-    actual: unknown;
-    /** True when the path resolved to nothing at all (absent or null). */
-    missing: boolean;
-}
-/**
- * Read the RAW (unstringified) value an extract expression points at.
- * `evaluateExtract` above stringifies for `${VAR}` substitution; an
- * equality predicate must not, or `true` and `"true"` would compare equal.
- */
-export declare function resolveExtractPathValue(expr: string, ctx: ExtractEventContext): unknown;
-/**
- * The FIRST entry of `inputMatch` that does not hold for this event, or
- * `null` when every entry holds (the trigger's input predicate passes).
- *
- * Fail direction on an unparseable expression: the entry is treated as
- * HOLDING, so a malformed `input_match` leaves the policy matching and
- * its `requires:` gate armed, rather than silently excusing the tool call
- * from a block gate. The schema rejects such an expression at parse time,
- * so this only guards hand-built `Manifest` objects (tests, embedders).
- */
-export declare function firstInputMatchMismatch(inputMatch: InputMatchMap, ctx: ExtractEventContext): InputMatchMismatch | null;
-export {};