@lannguyensi/harness 0.63.0 → 1.0.0

package/dist/io/extract.js

@@ -1,226 +0,0 @@
-// Phase 4 #2 — trigger.extract evaluator
-//
-// TODO(Phase 4 #4): replace `src/schema/extract.ts` EXTRACT_ROOT_RE with
-// a `parseExtractExpression`-backed `.refine`. The schema today rejects the
-// bracket-quoted form this parser supports; #4 is when validate enhancements
-// land and the two surfaces get unified.
-//
-// Implements the JSONPath-restricted DSL described in ARCHITECTURE.md §6
-// "trigger.extract: generic variable extraction":
-//
-//   <namespace>.<segment>(<segment>)*
-//
-// where namespace ∈ { toolArgs, event, session, git } and a segment is either
-// `.identifier` or `["quoted key"]` (single or double quotes). The grammar
-// deliberately rejects function calls, numeric/slice indices, and any other
-// JSON-Path constructs so validate-time analysis stays statically decidable.
-const NAMESPACES = ["toolArgs", "event", "session", "git"];
-const NAMESPACE_RE = /^(toolArgs|event|session|git)\b/;
-const IDENTIFIER_RE = /^[A-Za-z_][A-Za-z0-9_]*/;
-const NUMERIC_INDEX_RE = /^-?\d/;
-export class ExtractGrammarError extends Error {
-    expression;
-    constructor(message, expression) {
-        super(`extract expression "${expression}": ${message}`);
-        this.expression = expression;
-        this.name = "ExtractGrammarError";
-    }
-}
-export function parseExtractExpression(expr) {
-    if (typeof expr !== "string" || expr.length === 0) {
-        throw new ExtractGrammarError("expression must be a non-empty string", String(expr));
-    }
-    const rootMatch = NAMESPACE_RE.exec(expr);
-    if (!rootMatch) {
-        const ident = IDENTIFIER_RE.exec(expr);
-        if (ident) {
-            throw new ExtractGrammarError(`unknown namespace \`${ident[0]}\``, expr);
-        }
-        throw new ExtractGrammarError("expression must begin with one of toolArgs / event / session / git", expr);
-    }
-    const namespace = rootMatch[1];
-    let i = rootMatch[0].length;
-    const segments = [];
-    while (i < expr.length) {
-        const ch = expr[i];
-        if (ch === ".") {
-            i++;
-            const id = IDENTIFIER_RE.exec(expr.slice(i));
-            if (!id) {
-                throw new ExtractGrammarError(`expected identifier after '.'`, expr);
-            }
-            i += id[0].length;
-            if (expr[i] === "(") {
-                throw new ExtractGrammarError("function calls not allowed", expr);
-            }
-            segments.push({ kind: "identifier", key: id[0] });
-        }
-        else if (ch === "[") {
-            i++;
-            const next = expr[i];
-            if (next === undefined) {
-                throw new ExtractGrammarError("unterminated bracket accessor", expr);
-            }
-            if (NUMERIC_INDEX_RE.test(next)) {
-                throw new ExtractGrammarError("array indices not allowed", expr);
-            }
-            if (next !== '"' && next !== "'") {
-                throw new ExtractGrammarError("bracket accessor must be a quoted string key", expr);
-            }
-            const quote = next;
-            i++;
-            const end = expr.indexOf(quote, i);
-            if (end === -1) {
-                throw new ExtractGrammarError("unterminated quoted bracket key", expr);
-            }
-            const key = expr.slice(i, end);
-            if (key.length === 0) {
-                throw new ExtractGrammarError("empty bracket key", expr);
-            }
-            i = end + 1;
-            if (expr[i] !== "]") {
-                throw new ExtractGrammarError("expected ']' after bracket key", expr);
-            }
-            i++;
-            segments.push({ kind: "bracket", key });
-        }
-        else if (ch === "(") {
-            throw new ExtractGrammarError("function calls not allowed", expr);
-        }
-        else {
-            throw new ExtractGrammarError(`unexpected character '${ch}'`, expr);
-        }
-    }
-    if (segments.length === 0) {
-        throw new ExtractGrammarError("expression must include at least one segment after the namespace", expr);
-    }
-    return { namespace, segments };
-}
-export function validateExtractGrammar(expr) {
-    parseExtractExpression(expr);
-}
-function walkPath(path, ctx) {
-    let cursor = ctx[path.namespace];
-    for (const seg of path.segments) {
-        if (cursor === undefined || cursor === null)
-            return undefined;
-        if (typeof cursor !== "object" || Array.isArray(cursor))
-            return undefined;
-        cursor = cursor[seg.key];
-    }
-    return cursor;
-}
-/**
- * Stringify a resolved extract value for substitution into a `${VAR}` template.
- * Strings pass through; numbers/booleans/bigints get `String(...)`. Objects and
- * arrays fall through to `JSON.stringify` — uncommon for v1 paths but stable
- * enough that audit / `explain --trace` consumers can rely on the shape.
- */
-function stringifyResolved(value) {
-    if (typeof value === "string")
-        return value;
-    if (typeof value === "number" || typeof value === "boolean")
-        return String(value);
-    if (typeof value === "bigint")
-        return value.toString();
-    return JSON.stringify(value);
-}
-const BUILTIN_NAMES = [
-    "SESSION_ID",
-    "REPO",
-    "BRANCH",
-    "TOOL_NAME",
-    "CWD",
-];
-export function evaluateExtract(extracts, ctx, builtins) {
-    const values = {};
-    const traceData = [];
-    // Builtins first; an extract entry with the same name overrides both the
-    // value and the trace row so the trace stays one-row-per-variable.
-    for (const name of BUILTIN_NAMES) {
-        if (Object.prototype.hasOwnProperty.call(extracts, name))
-            continue;
-        const v = builtins[name];
-        values[name] = v;
-        traceData.push({
-            var: name,
-            expression: `<builtin:${name}>`,
-            resolved: v,
-            source: "builtin",
-        });
-    }
-    for (const [varName, expr] of Object.entries(extracts)) {
-        const path = parseExtractExpression(expr);
-        const raw = walkPath(path, ctx);
-        if (raw === undefined || raw === null) {
-            const placeholder = `\${${varName}}`;
-            values[varName] = placeholder;
-            traceData.push({
-                var: varName,
-                expression: expr,
-                resolved: placeholder,
-                source: "missing",
-            });
-            continue;
-        }
-        const resolved = stringifyResolved(raw);
-        values[varName] = resolved;
-        traceData.push({
-            var: varName,
-            expression: expr,
-            resolved,
-            source: "extract",
-        });
-    }
-    return { values, traceData };
-}
-const TEMPLATE_VAR_RE = /\$\{([A-Z][A-Z0-9_]*)\}/g;
-export function substituteTemplate(template, values) {
-    const missing = [];
-    const result = template.replace(TEMPLATE_VAR_RE, (whole, name) => {
-        if (Object.prototype.hasOwnProperty.call(values, name)) {
-            return values[name];
-        }
-        if (!missing.includes(name))
-            missing.push(name);
-        return whole;
-    });
-    return { result, missing };
-}
-/**
- * Read the RAW (unstringified) value an extract expression points at.
- * `evaluateExtract` above stringifies for `${VAR}` substitution; an
- * equality predicate must not, or `true` and `"true"` would compare equal.
- */
-export function resolveExtractPathValue(expr, ctx) {
-    return walkPath(parseExtractExpression(expr), ctx);
-}
-/**
- * The FIRST entry of `inputMatch` that does not hold for this event, or
- * `null` when every entry holds (the trigger's input predicate passes).
- *
- * Fail direction on an unparseable expression: the entry is treated as
- * HOLDING, so a malformed `input_match` leaves the policy matching and
- * its `requires:` gate armed, rather than silently excusing the tool call
- * from a block gate. The schema rejects such an expression at parse time,
- * so this only guards hand-built `Manifest` objects (tests, embedders).
- */
-export function firstInputMatchMismatch(inputMatch, ctx) {
-    for (const [expression, expected] of Object.entries(inputMatch)) {
-        let actual;
-        try {
-            actual = resolveExtractPathValue(expression, ctx);
-        }
-        catch {
-            continue;
-        }
-        if (actual === undefined || actual === null) {
-            return { expression, expected, actual, missing: true };
-        }
-        if (actual !== expected) {
-            return { expression, expected, actual, missing: false };
-        }
-    }
-    return null;
-}
-//# sourceMappingURL=extract.js.map

package/dist/io/extract.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"extract.js","sourceRoot":"","sources":["../../src/io/extract.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,6EAA6E;AAC7E,yCAAyC;AACzC,EAAE;AACF,yEAAyE;AACzE,kDAAkD;AAClD,EAAE;AACF,sCAAsC;AACtC,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,4EAA4E;AAC5E,6EAA6E;AAE7E,MAAM,UAAU,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAU,CAAC;AAGpE,MAAM,YAAY,GAAG,iCAAiC,CAAC;AACvD,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAChD,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAEjC,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAG1B;IAFlB,YACE,OAAe,EACC,UAAkB;QAElC,KAAK,CAAC,uBAAuB,UAAU,MAAM,OAAO,EAAE,CAAC,CAAC;QAFxC,eAAU,GAAV,UAAU,CAAQ;QAGlC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAWD,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,mBAAmB,CAAC,uCAAuC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,oEAAoE,EACpE,IAAI,CACL,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAc,CAAC;IAC5C,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAE5B,MAAM,QAAQ,GAAqB,EAAE,CAAC;IACtC,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,CAAC,EAAE,CAAC;YACJ,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,IAAI,mBAAmB,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC;YACvE,CAAC;YACD,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAClB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACpB,MAAM,IAAI,mBAAmB,CAAC,4BAA4B,EAAE,IAAI,CAAC,CAAC;YACpE,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,CAAC,EAAE,CAAC;YACJ,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,IAAI,mBAAmB,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC;YACvE,CAAC;YACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjC,MAAM,IAAI,mBAAmB,CAC3B,8CAA8C,EAC9C,IAAI,CACL,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC;YACnB,CAAC,EAAE,CAAC;YACJ,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACnC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,MAAM,IAAI,mBAAmB,CAAC,iCAAiC,EAAE,IAAI,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,mBAAmB,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;YAC3D,CAAC;YACD,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;YACZ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACpB,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,EAAE,IAAI,CAAC,CAAC;YACxE,CAAC;YACD,CAAC,EAAE,CAAC;YACJ,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1C,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,MAAM,IAAI,mBAAmB,CAAC,4BAA4B,EAAE,IAAI,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,mBAAmB,CAC3B,kEAAkE,EAClE,IAAI,CACL,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,sBAAsB,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AA+BD,SAAS,QAAQ,CAAC,IAAiB,EAAE,GAAwB;IAC3D,IAAI,MAAM,GAAa,GAA+B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvE,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QAC9D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1E,MAAM,GAAI,MAAkC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAClF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IACvD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,aAAa,GAAuC;IACxD,YAAY;IACZ,MAAM;IACN,QAAQ;IACR,WAAW;IACX,KAAK;CACN,CAAC;AAEF,MAAM,UAAU,eAAe,CAC7B,QAAgC,EAChC,GAAwB,EACxB,QAAyB;IAEzB,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAwB,EAAE,CAAC;IAE1C,yEAAyE;IACzE,mEAAmE;IACnE,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC;YAAE,SAAS;QACnE,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,SAAS,CAAC,IAAI,CAAC;YACb,GAAG,EAAE,IAAI;YACT,UAAU,EAAE,YAAY,IAAI,GAAG;YAC/B,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACtC,MAAM,WAAW,GAAG,MAAM,OAAO,GAAG,CAAC;YACrC,MAAM,CAAC,OAAO,CAAC,GAAG,WAAW,CAAC;YAC9B,SAAS,CAAC,IAAI,CAAC;gBACb,GAAG,EAAE,OAAO;gBACZ,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,WAAW;gBACrB,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;QAC3B,SAAS,CAAC,IAAI,CAAC;YACb,GAAG,EAAE,OAAO;YACZ,UAAU,EAAE,IAAI;YAChB,QAAQ;YACR,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAOnD,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,MAA8B;IAE9B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;QACvE,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YACvD,OAAO,MAAM,CAAC,IAAI,CAAE,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAsCD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,GAAwB;IAC5E,OAAO,QAAQ,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CACrC,UAAyB,EACzB,GAAwB;IAExB,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,uBAAuB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACzD,CAAC;QACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/io/ledger-record.d.ts

@@ -1,83 +0,0 @@
-import type { LedgerSession } from "../policies/ledger-client.js";
-import type { LedgerEntry } from "../policies/requires.js";
-import type { PolicyDecision } from "../runtime/intercept.js";
-export interface LedgerRecordOptions {
-    mcpCommand: string[];
-    mcpEnv?: Record<string, string>;
-    cwd?: string;
-    timeoutMs?: number;
-}
-/**
- * Canonical ledger-entry `type` for harness-emitted policy decisions.
- * Owned here because this module also owns the encode/decode prefix.
- * Every site that filters or writes policy-decision rows MUST go through
- * this constant, so a typo at any one site does not silently disable the
- * substring-pollution guard. See PR #47 review for the failure mode.
- */
-export declare const POLICY_DECISION_TYPE = "policy_decision";
-export interface PolicyDecisionPayload {
-    name: string;
-    outcome: PolicyDecision["outcome"];
-    enforcement: PolicyDecision["enforcement"];
-    reason: string;
-    ledgerTag: string;
-    extractValues: Record<string, string>;
-    requiresEval?: {
-        matchedCount: number;
-        reason: string;
-    };
-    /**
-     * Risk Gate verdicts for the action (Phase 7 #5). Present only when
-     * the Risk Gate was active for the event; absent for a pure Phase-4
-     * manifest, and absent on any `policy_decision` row recorded before
-     * Phase 7 #5 — `harness explain --trace` renders them only when present.
-     */
-    risk?: PolicyDecision["risk"];
-    environment?: PolicyDecision["environment"];
-    /**
-     * See `PolicyDecision.whenUnclassifiedFallback`. Present only when
-     * the match was a fail-closed unclassified hit (M7). Absent on rows
-     * recorded before M7 or on rows where the action was classified.
-     */
-    whenUnclassifiedFallback?: boolean;
-    evaluatedAt: string;
-}
-export declare function payloadFromDecision(decision: PolicyDecision): PolicyDecisionPayload;
-export declare function encodeLedgerContent(payload: PolicyDecisionPayload): string;
-/**
- * Phase 5 #9 — preferred sort key for policy_decision rows.
- *
- * `evidence-ledger` stores `createdAt` at 1-second precision (SQLite
- * `datetime('now')`), so two decisions evaluated within the same wall-
- * clock second tie at `bt - at === 0`, and a stable sort returns the
- * earliest entry as "latest". The decoded payload's `evaluatedAt` is
- * `Date.toISOString()` (millisecond precision), which actually
- * distinguishes back-to-back fires. Use it as the primary key, with a
- * `createdAt` fallback for any future encoding that lacks `evaluatedAt`.
- *
- * Returns `NaN` only when both fields are unparseable; callers should
- * tolerate ties by treating equal results as preserve-order.
- */
-export declare function decisionSortKey(entry: LedgerEntry, payload: PolicyDecisionPayload): number;
-export declare function decodeLedgerContent(content: string): PolicyDecisionPayload | null;
-/**
- * Record a `policy_decision` row over an already-open {@link LedgerSession}
- * instead of spawning a dedicated grounding-mcp subprocess per decision.
- * This is the runtime intercept's hot path: K matching policies per tool
- * event share ONE connection for all their audit writes (plus the summary
- * query), instead of the 2K sequential spawns the 2026-07-01 review flagged
- * as a fail-open-under-load risk against the 30s hook budget.
- *
- * Same retry contract as {@link recordPolicyDecision}: a server-side error
- * on `type: "policy_decision"` (old grounding-mcp without that enum value)
- * retries once with the legacy `type: "fact"` prefix-encoded row. A degraded
- * transport is terminal — the session's process is gone, nothing to retry.
- */
-export declare function recordPolicyDecisionOnSession(session: LedgerSession, decision: PolicyDecision, sessionId: string): Promise<{
-    ok: boolean;
-    reason?: string;
-}>;
-export declare function recordPolicyDecision(decision: PolicyDecision, sessionId: string, opts: LedgerRecordOptions): Promise<{
-    ok: boolean;
-    reason?: string;
-}>;

package/dist/io/ledger-record.js

@@ -1,301 +0,0 @@
-// Phase 4 #5 — `policy_decision` audit-log writer.
-//
-// Writes one ledger entry per policy decision via grounding-mcp's
-// `ledger_add` verb. The verb only accepts the four fact/hypothesis/rejected/
-// unknown types, so we stash the structured payload as JSON inside `content`
-// behind a `policy_decision:` prefix that `harness audit` and
-// `harness explain --trace` (Phase 4 #6/#7) grep for.
-import { spawn } from "node:child_process";
-import { parseLedgerTimestamp } from "../policies/timestamp.js";
-import { expandHome, expandHomeInEnv } from "./expand-home.js";
-import { VERSION } from "../version.js";
-const DEFAULT_TIMEOUT_MS = 5_000;
-const SOURCE = "harness-policy-intercept";
-/**
- * Canonical ledger-entry `type` for harness-emitted policy decisions.
- * Owned here because this module also owns the encode/decode prefix.
- * Every site that filters or writes policy-decision rows MUST go through
- * this constant, so a typo at any one site does not silently disable the
- * substring-pollution guard. See PR #47 review for the failure mode.
- */
-export const POLICY_DECISION_TYPE = "policy_decision";
-const PREFIX = POLICY_DECISION_TYPE;
-export function payloadFromDecision(decision) {
-    return {
-        name: decision.policyName,
-        outcome: decision.outcome,
-        enforcement: decision.enforcement,
-        reason: decision.reason,
-        ledgerTag: decision.ledgerTag,
-        extractValues: decision.extractValues,
-        ...(decision.requiresEval && { requiresEval: decision.requiresEval }),
-        ...(decision.risk && { risk: decision.risk }),
-        ...(decision.environment && { environment: decision.environment }),
-        // M7: carry the fail-closed unclassified flag into the serialised
-        // audit row so `harness audit` / `explain --trace` can surface it.
-        // Absent (not `false`) when the action was classified or the policy
-        // had no `when:` block, keeping pre-M7 rows byte-identical.
-        ...(decision.whenUnclassifiedFallback === true && {
-            whenUnclassifiedFallback: true,
-        }),
-        evaluatedAt: decision.evaluatedAt,
-    };
-}
-export function encodeLedgerContent(payload) {
-    return `${PREFIX}:${payload.name}:${payload.outcome} ${JSON.stringify(payload)}`;
-}
-/**
- * Phase 5 #9 — preferred sort key for policy_decision rows.
- *
- * `evidence-ledger` stores `createdAt` at 1-second precision (SQLite
- * `datetime('now')`), so two decisions evaluated within the same wall-
- * clock second tie at `bt - at === 0`, and a stable sort returns the
- * earliest entry as "latest". The decoded payload's `evaluatedAt` is
- * `Date.toISOString()` (millisecond precision), which actually
- * distinguishes back-to-back fires. Use it as the primary key, with a
- * `createdAt` fallback for any future encoding that lacks `evaluatedAt`.
- *
- * Returns `NaN` only when both fields are unparseable; callers should
- * tolerate ties by treating equal results as preserve-order.
- */
-export function decisionSortKey(entry, payload) {
-    const evaluatedMs = parseLedgerTimestamp(payload.evaluatedAt);
-    if (!Number.isNaN(evaluatedMs))
-        return evaluatedMs;
-    if (entry.createdAt instanceof Date)
-        return entry.createdAt.getTime();
-    return parseLedgerTimestamp(entry.createdAt);
-}
-export function decodeLedgerContent(content) {
-    if (!content.startsWith(`${PREFIX}:`))
-        return null;
-    const space = content.indexOf(" ");
-    if (space === -1)
-        return null;
-    try {
-        const obj = JSON.parse(content.slice(space + 1));
-        return obj;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Record a `policy_decision` row over an already-open {@link LedgerSession}
- * instead of spawning a dedicated grounding-mcp subprocess per decision.
- * This is the runtime intercept's hot path: K matching policies per tool
- * event share ONE connection for all their audit writes (plus the summary
- * query), instead of the 2K sequential spawns the 2026-07-01 review flagged
- * as a fail-open-under-load risk against the 30s hook budget.
- *
- * Same retry contract as {@link recordPolicyDecision}: a server-side error
- * on `type: "policy_decision"` (old grounding-mcp without that enum value)
- * retries once with the legacy `type: "fact"` prefix-encoded row. A degraded
- * transport is terminal — the session's process is gone, nothing to retry.
- */
-export async function recordPolicyDecisionOnSession(session, decision, sessionId) {
-    const payload = payloadFromDecision(decision);
-    const content = encodeLedgerContent(payload);
-    const first = await session.callTool("ledger_add", {
-        sessionId,
-        type: POLICY_DECISION_TYPE,
-        content,
-        source: SOURCE,
-    });
-    if (first.status === "ok")
-        return { ok: true };
-    if (first.status === "degraded")
-        return { ok: false, reason: first.reason };
-    // Likely an old grounding-mcp without the policy_decision enum value —
-    // retry once with the legacy fact-with-prefix encoding.
-    const fallback = await session.callTool("ledger_add", {
-        sessionId,
-        type: "fact",
-        content,
-        source: SOURCE,
-    });
-    if (fallback.status === "ok")
-        return { ok: true };
-    return {
-        ok: false,
-        reason: fallback.status === "error"
-            ? `ledger_add error: ${fallback.errorMessage}`
-            : fallback.reason,
-    };
-}
-export async function recordPolicyDecision(decision, sessionId, opts) {
-    const list = opts.mcpCommand;
-    if (!list || list.length === 0) {
-        return { ok: false, reason: "grounding-mcp command is empty" };
-    }
-    const exe = expandHome(list[0]);
-    const args = list.slice(1).map((p) => expandHome(p));
-    const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-    const payload = payloadFromDecision(decision);
-    const content = encodeLedgerContent(payload);
-    // Defense-in-depth (agent-tasks/973596d7): expand leading `~/` in
-    // every env value before merging into the spawned process env. The
-    // validate-time warning still fires for operators with the literal
-    // tilde in their manifest, but a manifest that bypassed validate
-    // (or the warning was ignored on) cannot now scatter a rogue
-    // cwd-relative `./~/…` path. See expandHome doc for scope.
-    const expandedEnv = expandHomeInEnv(opts.mcpEnv);
-    return new Promise((resolve) => {
-        let child;
-        try {
-            child = spawn(exe, args, {
-                cwd: opts.cwd,
-                env: { ...process.env, ...(expandedEnv ?? {}) },
-                stdio: ["pipe", "pipe", "pipe"],
-            });
-        }
-        catch (err) {
-            resolve({ ok: false, reason: `spawn failed: ${err.message}` });
-            return;
-        }
-        let settled = false;
-        const settle = (r) => {
-            if (settled)
-                return;
-            settled = true;
-            try {
-                child.kill("SIGTERM");
-            }
-            catch {
-                /* ignore */
-            }
-            resolve(r);
-        };
-        let stdoutBuf = "";
-        let stderrBuf = "";
-        let recordSent = false;
-        let fallbackSent = false;
-        /**
-         * Phase 5 #4 — write attempt with type='policy_decision'. When
-         * the connected grounding-mcp pre-dates that change, the call
-         * returns a zod / CHECK constraint error; we then retry with the
-         * legacy type='fact' + prefix-encoded content path.
-         */
-        const sendInitialAdd = () => {
-            child.stdin.write(`${JSON.stringify({
-                jsonrpc: "2.0",
-                id: 2,
-                method: "tools/call",
-                params: {
-                    name: "ledger_add",
-                    arguments: {
-                        sessionId,
-                        type: POLICY_DECISION_TYPE,
-                        content,
-                        source: SOURCE,
-                    },
-                },
-            })}\n`);
-        };
-        const sendFallbackAdd = () => {
-            fallbackSent = true;
-            child.stdin.write(`${JSON.stringify({
-                jsonrpc: "2.0",
-                id: 3,
-                method: "tools/call",
-                params: {
-                    name: "ledger_add",
-                    arguments: {
-                        sessionId,
-                        type: "fact",
-                        content,
-                        source: SOURCE,
-                    },
-                },
-            })}\n`);
-        };
-        child.stdout.on("data", (chunk) => {
-            stdoutBuf += chunk.toString("utf8");
-            let nl = stdoutBuf.indexOf("\n");
-            while (nl !== -1) {
-                const line = stdoutBuf.slice(0, nl).trim();
-                stdoutBuf = stdoutBuf.slice(nl + 1);
-                if (line) {
-                    try {
-                        const msg = JSON.parse(line);
-                        if (msg.id === 1 && !recordSent) {
-                            child.stdin.write(`${JSON.stringify({
-                                jsonrpc: "2.0",
-                                method: "notifications/initialized",
-                            })}\n`);
-                            sendInitialAdd();
-                            recordSent = true;
-                        }
-                        else if (msg.id === 2) {
-                            if (msg.error) {
-                                // Likely an old grounding-mcp without the
-                                // policy_decision enum value — retry once with the
-                                // legacy fact-with-prefix encoding.
-                                if (!fallbackSent) {
-                                    sendFallbackAdd();
-                                    return;
-                                }
-                                settle({
-                                    ok: false,
-                                    reason: `ledger_add error: ${msg.error.message ?? "unknown"}`,
-                                });
-                                return;
-                            }
-                            settle({ ok: true });
-                            return;
-                        }
-                        else if (msg.id === 3) {
-                            if (msg.error) {
-                                settle({
-                                    ok: false,
-                                    reason: `ledger_add error: ${msg.error.message ?? "unknown"}`,
-                                });
-                                return;
-                            }
-                            settle({ ok: true });
-                            return;
-                        }
-                    }
-                    catch {
-                        /* ignore non-JSON */
-                    }
-                }
-                nl = stdoutBuf.indexOf("\n");
-            }
-        });
-        child.stderr.on("data", (c) => {
-            stderrBuf += c.toString("utf8");
-        });
-        child.on("error", (err) => {
-            settle({ ok: false, reason: `spawn failed: ${err.message}` });
-        });
-        child.on("exit", () => {
-            const tail = stderrBuf.trim().split("\n").pop()?.trim() || "(no stderr)";
-            settle({ ok: false, reason: `grounding-mcp exited: ${tail}` });
-        });
-        child.stdin.on("error", () => {
-            /* EPIPE; exit listener handles */
-        });
-        try {
-            child.stdin.write(`${JSON.stringify({
-                jsonrpc: "2.0",
-                id: 1,
-                method: "initialize",
-                params: {
-                    protocolVersion: "2024-11-05",
-                    capabilities: {},
-                    clientInfo: { name: "harness-policy-intercept", version: VERSION },
-                },
-            })}\n`);
-        }
-        catch (err) {
-            settle({ ok: false, reason: `init write failed: ${err.message}` });
-            return;
-        }
-        const t = setTimeout(() => {
-            settle({ ok: false, reason: `grounding-mcp timeout after ${timeoutMs}ms` });
-        }, timeoutMs);
-        t.unref();
-    });
-}
-//# sourceMappingURL=ledger-record.js.map

package/dist/io/ledger-record.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ledger-record.js","sourceRoot":"","sources":["../../src/io/ledger-record.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,kEAAkE;AAClE,8EAA8E;AAC9E,6EAA6E;AAC7E,8DAA8D;AAC9D,sDAAsD;AAEtD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAQ3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAE/D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AASxC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,MAAM,GAAG,0BAA0B,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AACtD,MAAM,MAAM,GAAG,oBAAoB,CAAC;AA2BpC,MAAM,UAAU,mBAAmB,CACjC,QAAwB;IAExB,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,UAAU;QACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,GAAG,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;QACrE,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC7C,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;QAClE,kEAAkE;QAClE,mEAAmE;QACnE,oEAAoE;QACpE,4DAA4D;QAC5D,GAAG,CAAC,QAAQ,CAAC,wBAAwB,KAAK,IAAI,IAAI;YAChD,wBAAwB,EAAE,IAAI;SAC/B,CAAC;QACF,WAAW,EAAE,QAAQ,CAAC,WAAW;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAA8B;IAChE,OAAO,GAAG,MAAM,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;AACnF,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAkB,EAClB,OAA8B;IAE9B,MAAM,WAAW,GAAG,oBAAoB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,OAAO,WAAW,CAAC;IACnD,IAAI,KAAK,CAAC,SAAS,YAAY,IAAI;QAAE,OAAO,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;IACtE,OAAO,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAA0B,CAAC;QAC1E,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAsB,EACtB,QAAwB,EACxB,SAAiB;IAEjB,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE;QACjD,SAAS;QACT,IAAI,EAAE,oBAAoB;QAC1B,OAAO;QACP,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC5E,uEAAuE;IACvE,wDAAwD;IACxD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE;QACpD,SAAS;QACT,IAAI,EAAE,MAAM;QACZ,OAAO;QACP,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAClD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EACJ,QAAQ,CAAC,MAAM,KAAK,OAAO;YACzB,CAAC,CAAC,qBAAqB,QAAQ,CAAC,YAAY,EAAE;YAC9C,CAAC,CAAC,QAAQ,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAwB,EACxB,SAAiB,EACjB,IAAyB;IAEzB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC;IAC7B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACvD,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7C,kEAAkE;IAClE,mEAAmE;IACnE,mEAAmE;IACnE,iEAAiE;IACjE,6DAA6D;IAC7D,2DAA2D;IAC3D,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEjD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;gBACvB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE;gBAC/C,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAChC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAkB,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QAED,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,CAAmC,EAAQ,EAAE;YAC3D,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,CAAC;QAEF,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,YAAY,GAAG,KAAK,CAAC;QAEzB;;;;;WAKG;QACH,MAAM,cAAc,GAAG,GAAS,EAAE;YAChC,KAAK,CAAC,KAAK,CAAC,KAAK,CACf,GAAG,IAAI,CAAC,SAAS,CAAC;gBAChB,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,CAAC;gBACL,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE;oBACN,IAAI,EAAE,YAAY;oBAClB,SAAS,EAAE;wBACT,SAAS;wBACT,IAAI,EAAE,oBAAoB;wBAC1B,OAAO;wBACP,MAAM,EAAE,MAAM;qBACf;iBACF;aACF,CAAC,IAAI,CACP,CAAC;QACJ,CAAC,CAAC;QAEF,MAAM,eAAe,GAAG,GAAS,EAAE;YACjC,YAAY,GAAG,IAAI,CAAC;YACpB,KAAK,CAAC,KAAK,CAAC,KAAK,CACf,GAAG,IAAI,CAAC,SAAS,CAAC;gBAChB,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,CAAC;gBACL,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE;oBACN,IAAI,EAAE,YAAY;oBAClB,SAAS,EAAE;wBACT,SAAS;wBACT,IAAI,EAAE,MAAM;wBACZ,OAAO;wBACP,MAAM,EAAE,MAAM;qBACf;iBACF;aACF,CAAC,IAAI,CACP,CAAC;QACJ,CAAC,CAAC;QAEF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACjC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3C,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBACpC,IAAI,IAAI,EAAE,CAAC;oBACT,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAG1B,CAAC;wBACF,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;4BAChC,KAAK,CAAC,KAAK,CAAC,KAAK,CACf,GAAG,IAAI,CAAC,SAAS,CAAC;gCAChB,OAAO,EAAE,KAAK;gCACd,MAAM,EAAE,2BAA2B;6BACpC,CAAC,IAAI,CACP,CAAC;4BACF,cAAc,EAAE,CAAC;4BACjB,UAAU,GAAG,IAAI,CAAC;wBACpB,CAAC;6BAAM,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;4BACxB,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gCACd,0CAA0C;gCAC1C,mDAAmD;gCACnD,oCAAoC;gCACpC,IAAI,CAAC,YAAY,EAAE,CAAC;oCAClB,eAAe,EAAE,CAAC;oCAClB,OAAO;gCACT,CAAC;gCACD,MAAM,CAAC;oCACL,EAAE,EAAE,KAAK;oCACT,MAAM,EAAE,qBAAqB,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,SAAS,EAAE;iCAC9D,CAAC,CAAC;gCACH,OAAO;4BACT,CAAC;4BACD,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;4BACrB,OAAO;wBACT,CAAC;6BAAM,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;4BACxB,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gCACd,MAAM,CAAC;oCACL,EAAE,EAAE,KAAK;oCACT,MAAM,EAAE,qBAAqB,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,SAAS,EAAE;iCAC9D,CAAC,CAAC;gCACH,OAAO;4BACT,CAAC;4BACD,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;4BACrB,OAAO;wBACT,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,qBAAqB;oBACvB,CAAC;gBACH,CAAC;gBACD,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACpC,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAC/B,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACpB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,aAAa,CAAC;YACzE,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,IAAI,EAAE,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAC3B,kCAAkC;QACpC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,KAAK,CAAC,KAAK,CAAC,KAAK,CACf,GAAG,IAAI,CAAC,SAAS,CAAC;gBAChB,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,CAAC;gBACL,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE;oBACN,eAAe,EAAE,YAAY;oBAC7B,YAAY,EAAE,EAAE;oBAChB,UAAU,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,OAAO,EAAE;iBACnE;aACF,CAAC,IAAI,CACP,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAuB,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QAED,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE;YACxB,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,SAAS,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,CAAC,CAAC,KAAK,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/io/read-json-dir-entries.d.ts

@@ -1,36 +0,0 @@
-/**
- * Shared read-and-classify loop for a directory of small JSON marker/record
- * files, used by every doctor/observation reader that scans one file per
- * session and tolerates missing/corrupt entries rather than throwing
- * (extracted from `ug-auto-approvals.ts` and `permission-mode-observations.ts`,
- * which had the same 15-line loop verbatim: readdir, reject symlink /
- * non-regular / raced-away entries silently, count a read failure as
- * unreadable, `safeJsonParse` the body, hand it to the caller's own
- * validator/transform).
- *
- * A missing directory resolves to `{ dirPresent: false, entries: [],
- * unreadableCount: 0 }` rather than throwing: every caller here is a
- * best-effort read for a doctor listing or an audit surface, never a gate
- * decision.
- */
-export interface ReadJsonDirEntriesResult<T> {
-    dirPresent: boolean;
-    entries: T[];
-    unreadableCount: number;
-}
-export interface ReadJsonDirEntriesOptions<T> {
-    /**
-     * Return true to silently skip an entry (not counted as unreadable) before
-     * it is even read. Used to exclude filenames that are not this reader's
-     * kind of marker at all (a differently-prefixed sibling marker in the
-     * same directory), as distinct from a marker that IS this reader's kind
-     * but fails to parse.
-     */
-    skip?: (name: string) => boolean;
-    /**
-     * Parse and validate the file's already-`safeJsonParse`d body. Return the
-     * value to keep, or null to count the entry as unreadable.
-     */
-    parse: (raw: unknown, name: string) => T | null;
-}
-export declare function readJsonDirEntriesRejectingSymlinks<T>(dir: string, opts: ReadJsonDirEntriesOptions<T>): ReadJsonDirEntriesResult<T>;