@lannguyensi/harness 0.64.0 → 1.0.0

package/dist/runtime/shell-word.d.ts

@@ -1,62 +0,0 @@
-/**
- * True when `text` contains, inside any `$'...'` run, an escape that decodes
- * to NUL (`\0`, `\00`, `\000`, `\x0`, `\x00`, `\u0` to `\u0000`, `\U0` to
- * `\U00000000`) or a `\c` control escape (not modelled, so counted). Works on
- * a whole command string or a single word. Every `$'` occurrence is scanned
- * on its own, including one that sits inside a single-quoted span, so a real
- * run is never hidden by an earlier false start; the cost is an occasional
- * over-report, which the caller treats as "refuse".
- *
- * This is deliberately not a model of bash's NUL truncation. Never throws.
- */
-export declare function hasAnsiCNulEscape(text: string): boolean;
-/**
- * Decode one shell WORD to the literal string bash would pass as an argv
- * entry, as far as that is derivable from the text alone.
- *
- * Handles the four run kinds bash concatenates within a single word, in any
- * combination and any number: unquoted (with `\X` escapes), `'single'`
- * (fully literal), `"double"` (backslash escapes a small set only), and
- * `$'ansi-c'` (including `\xHH`, `\NNN`, `\0NNN`, `\uHHHH`, `\UHHHHHHHH`).
- * That concatenation is the point — `-de"lete"`, `-'delete'` and
- * `-$'\x64elete'` are all the single argv entry `-delete`, which is exactly
- * how the measured bypasses hid a write flag from a raw string comparison.
- *
- * Returns the input UNCHANGED when the word cannot be resolved: an
- * unterminated quote, or a truncated escape at end of input. A NUL-decoding
- * escape inside `$'...'` does not make a word unresolvable (see the module
- * header; the read-only classifier refuses such a command through
- * `hasAnsiCNulEscape` instead). Per the module
- * header's direction rule, callers compare the result against a set of
- * things to REJECT, so falling back to the raw token reproduces today's
- * behaviour instead of inventing one.
- *
- * Never throws.
- */
-export declare function decodeShellWord(word: string): string;
-/**
- * The value bash passes for `word` when a `$'...'` run carries a NUL-decoding
- * escape: each such run is cut at its first NUL (or `\c`) escape, everything
- * else is decoded exactly as `decodeShellWord` does. Equal to
- * `decodeShellWord(word)` for a word without such an escape. For the
- * deny-side exact comparisons only (module header, task `5cc64860`); like
- * `decodeShellWord` it returns the raw word when it cannot resolve it, and
- * never throws.
- */
-export declare function decodeShellWordTruncatingNul(word: string): string;
-/**
- * Rewrite every `$'...'` run of `text` that carries a NUL-decoding escape into
- * a single-quoted literal of the value bash passes for it, and leave the rest
- * of the text byte for byte as it was (`rm -rf $'/tmp\\0/x'` becomes
- * `rm -rf '/tmp'`). `null` when nothing was rewritten, so the caller has no
- * second text to examine. Works on a whole command string: the rewrite
- * happens before any boundary split, so a `;`, `|` or `&` that sits inside
- * the cut-off part of a run (`$'--force\\0;'`) disappears with it instead of
- * tearing the word in two. A run without a closing quote is left alone
- * (`decodeShellWord` cannot resolve it either). Every `$'` occurrence is a
- * candidate start, as in `hasAnsiCNulEscape`, so a real run is never hidden
- * behind an earlier false start; the cost is an occasional over-rewrite of
- * text bash reads as quoted, which only gives a deny-side caller one more
- * text to examine next to the original. Never throws.
- */
-export declare function truncateNulRuns(text: string): string | null;

package/dist/runtime/shell-word.js

@@ -1,410 +0,0 @@
-// `decodeShellWord` — the shared "what literal value does bash see for this
-// word?" primitive (task `fdee7d0f`).
-//
-// WHY THIS EXISTS: three consumers each carried their own partial model of
-// shell quoting, and the same missing unquoting logic produced a separate
-// bypass in each (`cf3dff51`, `b093911d`, `2dfdf472`). This module is the
-// single source of truth for the decoding half of that; each consumer keeps
-// its own decision about what a decoded value MEANS.
-//
-// DIRECTION RULE (binding, and the reason this module is allowed to exist
-// at all). A hand-written partial model of another language's grammar is a
-// design smell, and one was removed from this codebase on 2026-08-02 for
-// exactly that reason (see the post-merge-gate blocker's
-// `isGateEligibleCommand`). What separates the two is which side of a
-// security boundary the model sits on:
-//
-//   - There, the model gated a PERMISSIVE decision: every construct it
-//     failed to model became a silent pass-through, i.e. a new bypass.
-//   - Here, callers test their predicate on the raw token OR the decoded
-//     one and take either match, so decoding can only ADD a match, never
-//     remove one. An incomplete decode therefore yields today's behaviour
-//     (a detection this codebase already misses), never a new fail-open.
-//
-// That `raw || decoded` shape is load-bearing and must not be "simplified"
-// to testing the decoded value alone. This module shipped once with the
-// simplified form and the guarantee above stated as an ARGUMENT; review
-// measured it false at three of five call sites, because those predicates
-// exclude `--` by construction and a token like `-"-out"=x` decodes out of
-// the branch that used to match it (`sort -"-out"=x` went BLOCKED ->
-// READONLY, artefact-confirmed). Testing both makes the property hold by
-// construction rather than by reasoning.
-//
-// A caller that wants to use this on the permissive side (to EXEMPT
-// something) is outside the rule and must be measured on its own terms.
-// `decodeShellWord` returns the RAW token unchanged for anything it cannot
-// resolve, which keeps that guarantee mechanical rather than aspirational.
-//
-// SCOPE, deliberately narrow: quote removal and escape decoding only. No
-// expansion of any kind — `$VAR`, `$(...)`, backticks, `~`, globs and
-// brace expansion are left verbatim, because their values are not derivable
-// from the command text alone. A word containing them decodes to something
-// that still contains them, which is the honest answer.
-//
-// NUL-DECODING ESCAPES are not modelled here (task `241d9e9e`). GNU bash
-// 3.2.57 (measured with `printf '[%s]' <word> | od -c`; the first report
-// measured 5.1.16) truncates a `$'...'` run at a NUL, drops a NUL between two
-// runs, and reads `\c@` (value 0) the same way. `decodeShellWord` does not
-// rebuild that rule: `readAnsiC` keeps decoding such an escape exactly as before (a
-// literal U+0000 for `\0`, `\x00` and the like), and `decodeShellWord` output
-// for these words is unchanged. That is on purpose: the deny-side callers
-// match PREFIXES and short-flag clusters of the decoded value (`of=`, `-s`,
-// `-f`, `+ref`, `-c`, `-R`, `-i`, `-rf`), and a decoded value that carries a
-// U+0000 after the flag text still starts with it, so those detections hold;
-// returning the raw token instead would drop them. `hasAnsiCNulEscape` is a
-// separate predicate that lets a caller refuse a whole command text; the
-// read-only classifier does, so a command with such an escape is never read
-// only. It over-reports on purpose (any `\c` escape counts, `\u`/`\U` count
-// although bash 3.2.57 does not decode them), because a false positive only
-// blocks an exotic read.
-//
-// DENY-SIDE COMPARISONS (task `5cc64860`). The prefix and cluster matches
-// above do not help an EXACT comparison (a whole flag such as `--force`, a
-// head name such as `dd`, a subcommand): `$'--force\0'` decodes to a value
-// that carries a trailing U+0000 and never equals `--force`, while bash
-// passes `--force`. `decodeShellWordTruncatingNul` and `truncateNulRuns`
-// give the deny-side scanners the value bash passes, for the COMPARISON only:
-// they never replace the decoded value, the scanners keep their existing scan
-// of the command as written and add a second one over the rewritten text, so
-// the second scan can only add a verdict. The truncation is the one measured rule, nothing more: a `$'...'`
-// run ends at the first escape that decodes to NUL (or a `\c` escape, which
-// is not modelled and so counts as possibly NUL), and the text around the run
-// is kept (`x$'a\0b'y` is `xay`, measured on GNU bash 3.2.57 with
-// `printf '[%s]' <word> | od -c`).
-/** Characters a backslash can escape inside a double-quoted run (bash). */
-const DOUBLE_QUOTE_ESCAPABLE = new Set(['$', '`', '"', "\\", "\n"]);
-/** Single-character ANSI-C (`$'...'`) escapes. */
-const ANSI_C_SIMPLE = new Map([
-    ["a", "\x07"],
-    ["b", "\b"],
-    ["e", "\x1b"],
-    ["E", "\x1b"],
-    ["f", "\f"],
-    ["n", "\n"],
-    ["r", "\r"],
-    ["t", "\t"],
-    ["v", "\v"],
-    ["\\", "\\"],
-    ["'", "'"],
-    ['"', '"'],
-    ["?", "?"],
-]);
-/**
- * True when the `$'...'` escape that starts at `word[at]` (a backslash)
- * decodes to NUL, or is a `\c` control escape, which is not modelled and so
- * counts as possibly NUL. Conservative: it may say true too often, never too
- * rarely. Octal values wrap modulo 256 because bash keeps one byte.
- */
-function isNulEscapeAt(word, at) {
-    const nxt = word[at + 1];
-    if (nxt === undefined)
-        return false;
-    if (nxt === "c")
-        return true;
-    if (nxt === "x" || nxt === "u" || nxt === "U") {
-        const max = nxt === "x" ? 2 : nxt === "u" ? 4 : 8;
-        let hex = "";
-        for (let j = at + 2; j < word.length && hex.length < max && /[0-9a-fA-F]/.test(word[j]); j++) {
-            hex += word[j];
-        }
-        return hex.length > 0 && /^0+$/.test(hex);
-    }
-    if (/[0-7]/.test(nxt)) {
-        let oct = "";
-        for (let j = at + 1; j < word.length && oct.length < 3 && /[0-7]/.test(word[j]); j++) {
-            oct += word[j];
-        }
-        return Number.parseInt(oct, 8) % 256 === 0;
-    }
-    return false;
-}
-/**
- * True when `text` contains, inside any `$'...'` run, an escape that decodes
- * to NUL (`\0`, `\00`, `\000`, `\x0`, `\x00`, `\u0` to `\u0000`, `\U0` to
- * `\U00000000`) or a `\c` control escape (not modelled, so counted). Works on
- * a whole command string or a single word. Every `$'` occurrence is scanned
- * on its own, including one that sits inside a single-quoted span, so a real
- * run is never hidden by an earlier false start; the cost is an occasional
- * over-report, which the caller treats as "refuse".
- *
- * This is deliberately not a model of bash's NUL truncation. Never throws.
- */
-export function hasAnsiCNulEscape(text) {
-    if (typeof text !== "string")
-        return false;
-    let from = text.indexOf("$'");
-    while (from !== -1) {
-        for (let i = from + 2; i < text.length;) {
-            const ch = text[i];
-            if (ch === "'")
-                break;
-            if (ch === "\\") {
-                if (isNulEscapeAt(text, i))
-                    return true;
-                i += 2;
-                continue;
-            }
-            i++;
-        }
-        from = text.indexOf("$'", from + 1);
-    }
-    return false;
-}
-/**
- * Decode one shell WORD to the literal string bash would pass as an argv
- * entry, as far as that is derivable from the text alone.
- *
- * Handles the four run kinds bash concatenates within a single word, in any
- * combination and any number: unquoted (with `\X` escapes), `'single'`
- * (fully literal), `"double"` (backslash escapes a small set only), and
- * `$'ansi-c'` (including `\xHH`, `\NNN`, `\0NNN`, `\uHHHH`, `\UHHHHHHHH`).
- * That concatenation is the point — `-de"lete"`, `-'delete'` and
- * `-$'\x64elete'` are all the single argv entry `-delete`, which is exactly
- * how the measured bypasses hid a write flag from a raw string comparison.
- *
- * Returns the input UNCHANGED when the word cannot be resolved: an
- * unterminated quote, or a truncated escape at end of input. A NUL-decoding
- * escape inside `$'...'` does not make a word unresolvable (see the module
- * header; the read-only classifier refuses such a command through
- * `hasAnsiCNulEscape` instead). Per the module
- * header's direction rule, callers compare the result against a set of
- * things to REJECT, so falling back to the raw token reproduces today's
- * behaviour instead of inventing one.
- *
- * Never throws.
- */
-export function decodeShellWord(word) {
-    return decodeWith(word, false);
-}
-/**
- * The value bash passes for `word` when a `$'...'` run carries a NUL-decoding
- * escape: each such run is cut at its first NUL (or `\c`) escape, everything
- * else is decoded exactly as `decodeShellWord` does. Equal to
- * `decodeShellWord(word)` for a word without such an escape. For the
- * deny-side exact comparisons only (module header, task `5cc64860`); like
- * `decodeShellWord` it returns the raw word when it cannot resolve it, and
- * never throws.
- */
-export function decodeShellWordTruncatingNul(word) {
-    return decodeWith(word, true);
-}
-/**
- * Rewrite every `$'...'` run of `text` that carries a NUL-decoding escape into
- * a single-quoted literal of the value bash passes for it, and leave the rest
- * of the text byte for byte as it was (`rm -rf $'/tmp\\0/x'` becomes
- * `rm -rf '/tmp'`). `null` when nothing was rewritten, so the caller has no
- * second text to examine. Works on a whole command string: the rewrite
- * happens before any boundary split, so a `;`, `|` or `&` that sits inside
- * the cut-off part of a run (`$'--force\\0;'`) disappears with it instead of
- * tearing the word in two. A run without a closing quote is left alone
- * (`decodeShellWord` cannot resolve it either). Every `$'` occurrence is a
- * candidate start, as in `hasAnsiCNulEscape`, so a real run is never hidden
- * behind an earlier false start; the cost is an occasional over-rewrite of
- * text bash reads as quoted, which only gives a deny-side caller one more
- * text to examine next to the original. Never throws.
- */
-export function truncateNulRuns(text) {
-    if (typeof text !== "string")
-        return null;
-    let out = "";
-    let copied = 0;
-    let rewrote = false;
-    let from = text.indexOf("$'");
-    while (from !== -1) {
-        let end = -1;
-        for (let i = from + 2; i < text.length;) {
-            const ch = text[i];
-            if (ch === "'") {
-                end = i;
-                break;
-            }
-            i += ch === "\\" ? 2 : 1;
-        }
-        const run = end === -1 ? "" : text.slice(from, end + 1);
-        if (end !== -1 && hasAnsiCNulEscape(run)) {
-            const value = decodeShellWordTruncatingNul(run).replace(/'/g, "'\\''");
-            out += text.slice(copied, from) + `'${value}'`;
-            copied = end + 1;
-            rewrote = true;
-            from = text.indexOf("$'", end + 1);
-            continue;
-        }
-        from = text.indexOf("$'", from + 1);
-    }
-    return rewrote ? out + text.slice(copied) : null;
-}
-function decodeWith(word, truncateNul) {
-    if (typeof word !== "string" || word.length === 0)
-        return typeof word === "string" ? word : "";
-    // Fast path: nothing quotable present, so the word is already literal.
-    if (!/['"\\]/.test(word))
-        return word;
-    try {
-        const decoded = decodeInner(word, truncateNul);
-        return decoded === null ? word : decoded;
-    }
-    catch {
-        return word;
-    }
-}
-/** Returns null when the word is unresolvable (caller falls back to raw). */
-function decodeInner(word, truncateNul) {
-    let out = "";
-    let i = 0;
-    while (i < word.length) {
-        const ch = word[i];
-        if (ch === "'") {
-            const end = word.indexOf("'", i + 1);
-            if (end === -1)
-                return null; // unterminated
-            out += word.slice(i + 1, end);
-            i = end + 1;
-            continue;
-        }
-        if (ch === '"') {
-            const run = readDoubleQuoted(word, i + 1);
-            if (run === null)
-                return null;
-            out += run.value;
-            i = run.next;
-            continue;
-        }
-        if (ch === "$" && word[i + 1] === '"') {
-            // `$"..."` is locale translation. With no catalog loaded bash returns
-            // the contents unchanged with the quotes removed, so the value is the
-            // same as a plain double-quoted run. Measured: `printf '%s' -$"delete"`
-            // -> `-delete`. Without this branch the `$` was emitted literally and
-            // the decode SUCCEEDED with a wrong value, so the raw-token fallback
-            // never fired — five artefact-confirmed writes slipped through
-            // (review round 1).
-            const run = readDoubleQuoted(word, i + 2);
-            if (run === null)
-                return null;
-            out += run.value;
-            i = run.next;
-            continue;
-        }
-        if (ch === "$" && word[i + 1] === "'") {
-            const run = readAnsiC(word, i + 2, truncateNul);
-            if (run === null)
-                return null;
-            out += run.value;
-            i = run.next;
-            continue;
-        }
-        if (ch === "\\") {
-            // Outside quotes a backslash escapes ANY next character. A trailing
-            // backslash is a line continuation, which a single word cannot carry.
-            if (i + 1 >= word.length)
-                return null;
-            out += word[i + 1];
-            i += 2;
-            continue;
-        }
-        out += ch;
-        i++;
-    }
-    return out;
-}
-function readDoubleQuoted(word, start) {
-    let out = "";
-    let i = start;
-    while (i < word.length) {
-        const ch = word[i];
-        if (ch === '"')
-            return { value: out, next: i + 1 };
-        if (ch === "\\") {
-            const nxt = word[i + 1];
-            if (nxt === undefined)
-                return null;
-            // Inside double quotes a backslash is literal UNLESS it precedes one
-            // of the few characters bash lets it escape there.
-            if (DOUBLE_QUOTE_ESCAPABLE.has(nxt)) {
-                out += nxt;
-                i += 2;
-            }
-            else {
-                out += "\\";
-                i += 1;
-            }
-            continue;
-        }
-        out += ch;
-        i++;
-    }
-    return null; // unterminated
-}
-function readAnsiC(word, start, truncateNul) {
-    let out = "";
-    let i = start;
-    // Set once a NUL-decoding escape was met under `truncateNul`: the rest of
-    // the run is read only to find its closing quote, and adds nothing.
-    let dropping = false;
-    while (i < word.length) {
-        const ch = word[i];
-        if (ch === "'")
-            return { value: out, next: i + 1 };
-        if (ch !== "\\") {
-            if (!dropping)
-                out += ch;
-            i++;
-            continue;
-        }
-        const nxt = word[i + 1];
-        if (nxt === undefined)
-            return null;
-        if (dropping) {
-            i += 2;
-            continue;
-        }
-        if (truncateNul && isNulEscapeAt(word, i)) {
-            dropping = true;
-            i += 2;
-            continue;
-        }
-        const simple = ANSI_C_SIMPLE.get(nxt);
-        if (simple !== undefined) {
-            out += simple;
-            i += 2;
-            continue;
-        }
-        if (nxt === "x" || nxt === "u" || nxt === "U") {
-            // \xHH (1-2 hex), \uHHHH (1-4), \UHHHHHHHH (1-8).
-            const max = nxt === "x" ? 2 : nxt === "u" ? 4 : 8;
-            let j = i + 2;
-            let hex = "";
-            while (j < word.length && hex.length < max && /[0-9a-fA-F]/.test(word[j])) {
-                hex += word[j];
-                j++;
-            }
-            if (hex.length === 0) {
-                // Not a valid escape. Bash keeps the BACKSLASH as well as the
-                // character: `printf '%s' $'\xz'` emits `\xz` (3 chars, verified
-                // with od -c). An earlier version dropped the backslash.
-                out += "\\" + nxt;
-                i += 2;
-                continue;
-            }
-            out += String.fromCodePoint(Number.parseInt(hex, 16));
-            i = j;
-            continue;
-        }
-        if (/[0-7]/.test(nxt)) {
-            // \NNN — up to three octal digits (a leading 0 is one of them).
-            let j = i + 1;
-            let oct = "";
-            while (j < word.length && oct.length < 3 && /[0-7]/.test(word[j])) {
-                oct += word[j];
-                j++;
-            }
-            out += String.fromCharCode(Number.parseInt(oct, 8));
-            i = j;
-            continue;
-        }
-        // Unrecognised escape: bash keeps the backslash AND the character.
-        out += "\\" + nxt;
-        i += 2;
-    }
-    return null; // unterminated
-}
-//# sourceMappingURL=shell-word.js.map

package/dist/runtime/shell-word.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"shell-word.js","sourceRoot":"","sources":["../../src/runtime/shell-word.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,sCAAsC;AACtC,EAAE;AACF,2EAA2E;AAC3E,0EAA0E;AAC1E,0EAA0E;AAC1E,4EAA4E;AAC5E,qDAAqD;AACrD,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,yEAAyE;AACzE,yDAAyD;AACzD,sEAAsE;AACtE,uCAAuC;AACvC,EAAE;AACF,uEAAuE;AACvE,uEAAuE;AACvE,yEAAyE;AACzE,yEAAyE;AACzE,0EAA0E;AAC1E,yEAAyE;AACzE,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,wEAAwE;AACxE,0EAA0E;AAC1E,2EAA2E;AAC3E,qEAAqE;AACrE,yEAAyE;AACzE,yCAAyC;AACzC,EAAE;AACF,oEAAoE;AACpE,wEAAwE;AACxE,2EAA2E;AAC3E,2EAA2E;AAC3E,EAAE;AACF,yEAAyE;AACzE,sEAAsE;AACtE,4EAA4E;AAC5E,2EAA2E;AAC3E,wDAAwD;AACxD,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AACzE,8EAA8E;AAC9E,2EAA2E;AAC3E,oFAAoF;AACpF,8EAA8E;AAC9E,0EAA0E;AAC1E,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,yEAAyE;AACzE,4EAA4E;AAC5E,4EAA4E;AAC5E,4EAA4E;AAC5E,yBAAyB;AACzB,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,wEAAwE;AACxE,yEAAyE;AACzE,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,4GAA4G;AAC5G,4EAA4E;AAC5E,8EAA8E;AAC9E,kEAAkE;AAClE,mCAAmC;AAEnC,2EAA2E;AAC3E,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAEpE,kDAAkD;AAClD,MAAM,aAAa,GAAgC,IAAI,GAAG,CAAC;IACzD,CAAC,GAAG,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,IAAI,CAAC;IACX,CAAC,GAAG,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,IAAI,CAAC;IACX,CAAC,GAAG,EAAE,IAAI,CAAC;IACX,CAAC,GAAG,EAAE,IAAI,CAAC;IACX,CAAC,GAAG,EAAE,IAAI,CAAC;IACX,CAAC,GAAG,EAAE,IAAI,CAAC;IACX,CAAC,IAAI,EAAE,IAAI,CAAC;IACZ,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;CACX,CAAC,CAAC;AAEH;;;;;GAKG;AACH,SAAS,aAAa,CAAC,IAAY,EAAE,EAAU;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9F,GAAG,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC;QAClB,CAAC;QACD,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACtF,GAAG,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC;QAClB,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;QACnB,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,GAAI,CAAC;YACzC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;YACpB,IAAI,EAAE,KAAK,GAAG;gBAAE,MAAM;YACtB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACxC,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,CAAC,EAAE,CAAC;QACN,CAAC;QACD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAAY;IACvD,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;QACnB,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,GAAI,CAAC;YACzC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;YACpB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACf,GAAG,GAAG,CAAC,CAAC;gBACR,MAAM;YACR,CAAC;YACD,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;QACxD,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,4BAA4B,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACvE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,KAAK,GAAG,CAAC;YAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC;YACjB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;YACnC,SAAS;QACX,CAAC;QACD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,WAAoB;IACpD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,uEAAuE;IACvE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC/C,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,WAAW,CAAC,IAAY,EAAE,WAAoB;IACrD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACpB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACrC,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,CAAC,eAAe;YAC5C,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YAC9B,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1C,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC9B,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC;YACjB,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACtC,sEAAsE;YACtE,sEAAsE;YACtE,wEAAwE;YACxE,sEAAsE;YACtE,qEAAqE;YACrE,+DAA+D;YAC/D,oBAAoB;YACpB,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1C,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC9B,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC;YACjB,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;YAChD,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC9B,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC;YACjB,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,oEAAoE;YACpE,sEAAsE;YACtE,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACtC,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;YACpB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,GAAG,IAAI,EAAE,CAAC;QACV,CAAC,EAAE,CAAC;IACN,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACnD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACpB,IAAI,EAAE,KAAK,GAAG;YAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACnC,qEAAqE;YACrE,mDAAmD;YACnD,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpC,GAAG,IAAI,GAAG,CAAC;gBACX,CAAC,IAAI,CAAC,CAAC;YACT,CAAC;iBAAM,CAAC;gBACN,GAAG,IAAI,IAAI,CAAC;gBACZ,CAAC,IAAI,CAAC,CAAC;YACT,CAAC;YACD,SAAS;QACX,CAAC;QACD,GAAG,IAAI,EAAE,CAAC;QACV,CAAC,EAAE,CAAC;IACN,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,eAAe;AAC9B,CAAC;AAED,SAAS,SAAS,CAChB,IAAY,EACZ,KAAa,EACb,WAAoB;IAEpB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,0EAA0E;IAC1E,oEAAoE;IACpE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACpB,IAAI,EAAE,KAAK,GAAG;YAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,IAAI,CAAC,QAAQ;gBAAE,GAAG,IAAI,EAAE,CAAC;YACzB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,QAAQ,EAAE,CAAC;YACb,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,WAAW,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YAC1C,QAAQ,GAAG,IAAI,CAAC;YAChB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,GAAG,IAAI,MAAM,CAAC;YACd,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YAC9C,kDAAkD;YAClD,MAAM,GAAG,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;gBAC3E,GAAG,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC;gBAChB,CAAC,EAAE,CAAC;YACN,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,8DAA8D;gBAC9D,iEAAiE;gBACjE,yDAAyD;gBACzD,GAAG,IAAI,IAAI,GAAG,GAAG,CAAC;gBAClB,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,GAAG,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;YACtD,CAAC,GAAG,CAAC,CAAC;YACN,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,gEAAgE;YAChE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;gBACnE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC;gBAChB,CAAC,EAAE,CAAC;YACN,CAAC;YACD,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YACpD,CAAC,GAAG,CAAC,CAAC;YACN,SAAS;QACX,CAAC;QACD,mEAAmE;QACnE,GAAG,IAAI,IAAI,GAAG,GAAG,CAAC;QAClB,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,eAAe;AAC9B,CAAC"}

package/dist/runtime/task-providers/agent-tasks.d.ts

@@ -1,105 +0,0 @@
-export declare const AGENT_TASKS_MCP_PREFIX = "mcp__agent-tasks__";
-export declare const TASK_START_TOOL = "mcp__agent-tasks__task_start";
-export declare const TASK_FINISH_TOOL = "mcp__agent-tasks__task_finish";
-export declare const TASK_ABANDON_TOOL = "mcp__agent-tasks__task_abandon";
-export declare const TASKS_TRANSITION_TOOL = "mcp__agent-tasks__tasks_transition";
-export declare const TASK_MERGE_TOOL = "mcp__agent-tasks__task_merge";
-export declare const PULL_REQUESTS_MERGE_TOOL = "mcp__agent-tasks__pull_requests_merge";
-export declare const ACTIVE_CLAIM_TOOL_NAMES: readonly ["mcp__agent-tasks__task_start", "mcp__agent-tasks__task_finish", "mcp__agent-tasks__task_abandon", "mcp__agent-tasks__tasks_transition", "mcp__agent-tasks__task_merge"];
-/**
- * Default approval-marker expiry tool list. It is both the EMITTED
- * PostToolUse matcher default and the runtime boundary list
- * (`parseApprovalLifecycle`) whenever a manifest configures no explicit
- * `approval_lifecycle.expire_on_tool_match`: an absent or non-object
- * `approval_lifecycle` block, or a block without that key, gets this
- * list at runtime (task 0c6b2cb9). An explicit list (including `[]`)
- * and `mode: session` replace it. `task_merge` is listed because a
- * `task_finish` that lands in `review` no longer expires the approval
- * (it keeps the work claim, task 5018c0c4); an operator's explicit list,
- * and every `harness init` scaffold, needs `task_merge` too for the
- * review-then-`task_merge` path to expire the approval.
- */
-export declare const DEFAULT_BOUNDARY_TOOL_NAMES: readonly ["mcp__agent-tasks__task_finish", "mcp__agent-tasks__task_abandon", "mcp__agent-tasks__pull_requests_merge", "mcp__agent-tasks__tasks_transition", "mcp__agent-tasks__task_merge"];
-export declare const DEFAULT_PROTECTED_COMPLETION_TOOLS: readonly ["task_finish", "task_submit_pr", "task_merge", "pull_requests_merge"];
-export declare const TASK_FINISH_AUTOMERGE_INPUT_MATCH: Record<string, boolean>;
-export declare const TASK_ID_EXTRACT: Record<string, string>;
-export declare const PR_NUMBER_EXTRACT: Record<string, string>;
-export declare function taskIdFromInput(input: unknown): string;
-export declare function tasksTransitionStatusFromInput(input: unknown): string;
-export declare function tasksTransitionReleasesClaim(input: unknown): boolean;
-/**
- * Read the resulting status off a task_finish tool RESULT (not the
- * request), unwrapping whichever transport shape it arrived in (see
- * `unwrapToolResponseEnvelope`). Returns `null` when the result is
- * absent, malformed, or carries no string status, so a caller can tell
- * "the task landed on a known non-review status" apart from "we could
- * not tell" (task c86e3c4a).
- */
-export declare function taskFinishResultingStatus(toolResponse: unknown): string | null;
-/**
- * Read the acted-on task id off a task_finish (or any agent-tasks) tool
- * RESULT, unwrapping the same shapes as `taskFinishResultingStatus`.
- * Used as a fallback when the tool_input did not carry a `taskId` (task
- * c86e3c4a, id-equality guard on release verbs), and by the stay-in-scope
- * hook to read the created task id off a create verb's result, which never
- * carries a `taskId` input (task b5e65f5e).
- */
-export declare function taskIdFromToolResponse(toolResponse: unknown): string;
-/**
- * Diagnostic-only companion to `claimEffectForAgentTasksTool`: was a
- * task_finish's resulting status actually readable? This does NOT feed
- * back into the release/keep decision (that stays the classifier's
- * alone) -- it lets `hook-track-active-claim.ts` label its stderr line
- * so a silent fail-safe fallback release does not look identical to an
- * intentional `done` release in the operator's own trail (task
- * c86e3c4a).
- */
-export declare function taskFinishReleaseIsUnreadable(toolResponse: unknown): boolean;
-/**
- * Coarse shape label for a tool_response, for the same stderr diagnostic
- * above -- never used to decide anything, only to name what shape a
- * fail-safe release fell back from.
- */
-export declare function describeToolResponseShape(toolResponse: unknown): "array" | "string" | "object" | "absent";
-export declare function agentTasksToolName(verb: string): string;
-/** Alias-aware for runtime events, including mcp__server.verb variants. */
-export declare function matchesAgentTasksRuntimeVerb(toolName: string, verbs: readonly string[]): boolean;
-/** Strict canonical parsing for Solution Acceptance's deliberately narrow gate. */
-export declare function canonicalAgentTasksVerb(toolName: string, verbs: readonly string[]): string | null;
-export type ClaimEffect = "acquire" | "release" | "none";
-/**
- * Claim lifecycle is separate from approval boundaries: only a completed
- * legacy transition releases a claim, while abandon and merge always do.
- *
- * task_finish is decided from the RESULT, not the verb (task c86e3c4a):
- * agent-tasks's own v2 semantics clear the work claim going to `done`
- * and keep it going to `review`, so `toolResponse` (the tool RESULT
- * envelope, optional third parameter -- the caller's PostToolUse event
- * carries this alongside `tool_input`) is read via
- * `taskFinishResultingStatus`. A resulting status of `review` returns
- * `none` (keep); `done`, any other resolvable status, and an
- * unresolvable result (no `toolResponse`, or a malformed one) all
- * return `release`.
- *
- * Fail-safe rationale (task c86e3c4a -- corrected from an earlier
- * wording of this comment that was wrong about what the marker feeds):
- * the active-claim file
- * this classifier feeds is read by the FAIL-CLOSED completion gate
- * (`src/cli/pack/hook-solution-acceptance.ts`'s `readActiveClaim` call)
- * to derive the verdict id it gates `task_finish` / `task_submit_pr` /
- * `task_merge` / `pull_requests_merge` / `git push` on. Release-on-
- * unreadable is chosen because a KEPT marker for a task that actually
- * finished would fail OPEN: until the next `task_start` overwrites it,
- * post-done completion-gated actions (git push, task_merge, PR merge)
- * would pass on that finished task's already-accepted verdict, and the
- * marker would override SOLUTION_VERDICT_ID. Releasing fails CLOSED
- * instead, at the cost of a possible wedge (the gate refuses with "no
- * active-claim task id recorded" until a fresh `task_start` or an
- * operator clears the file). It is not costless, and it is not merely
- * giving up an "ergonomic shortcut".
- *
- * This is the ONE place that decision is made: callers (e.g.
- * `hook-track-active-claim.ts`) do not re-derive it locally.
- */
-export declare function claimEffectForAgentTasksTool(toolName: string, input: unknown, toolResponse?: unknown): ClaimEffect;
-export declare function resolveProtectedCompletionTools(config: unknown): string[];