@lannguyensi/harness 0.64.0 → 1.0.0

package/dist/policy-packs/builtin/branch-protection-runtime.js

@@ -1,84 +1,12 @@
 // Shared runtime constants + helpers for the `branch-protection` policy pack.
 //
-// The pack itself (`branch-protection.ts`) only emits hooks + the
-// audit-copy instructions. The actual enforcement lives in two CLI verbs
-// — `harness session-start branch-check` (producer) and `harness pack
-// hook branch-protection` (blocker) — both under `src/cli/`. This module
-// is the small shared surface they pull from: tag formats, default
-// protected list, config parsing.
-import { checkApprovalMarker, writeApprovalMarker, } from "./understanding-before-execution-runtime.js";
+// The pack itself (`branch-protection.ts`) only emits its hook + the
+// audit-copy instructions. The enforcement lives in `harness pack hook
+// branch-protection` (src/cli/pack/hook-branch-protection.ts), which asks git
+// for the branch through src/runtime/git-branch.ts. This module is the small
+// shared surface both pull from: the pack name, the default protected list,
+// config parsing and the branch-name comparison.
 export const PACK_NAME = "branch-protection";
-/**
- * Ledger tag written by the producer when the current branch is NOT in
- * the operator's protected list. The blocker substring-matches this
- * prefix; the trailing `:<branch>` is informational and keeps the
- * ledger row self-describing for auditors.
- */
-export const NON_PROTECTED_TAG_PREFIX = "branch:non-protected";
-/**
- * Operator escape-hatch tag, kept as a best-effort AUDIT echo only.
- *
- * SECURITY (audit finding #39): this tag is NO LONGER a trusted override
- * signal. The agent has direct `mcp__grounding-mcp__ledger_add` access,
- * so it could self-write `branch-protection-ack:<anything>` and bless its
- * own protected-branch edit — exactly the self-approval backdoor the
- * understanding gate closed in agent-tasks/88ca4bb3 by moving the
- * canonical approval to a filesystem marker. The blocker now consults the
- * operator-only marker file (see `checkBranchProtectionMarker` below); the
- * `harness approve branch-protection` verb still records this ledger tag
- * so `harness audit` / forensics keep a trail, but its presence alone
- * never satisfies the gate. The trailing `:<reason>` stays free-form.
- */
-export const ACK_TAG_PREFIX = "branch-protection-ack";
-/**
- * Marker-name namespace for an operator-written branch-protection
- * override. The marker lives in the shared `.approvals/` directory under
- * `harness.generated/` (the same directory the understanding gate uses),
- * prefixed so it can never be confused with an understanding-gate session
- * marker (`.approvals/<sessionId>`) or a task marker (`.approvals/task-<id>`):
- * Claude Code / Codex session ids are UUIDs and never start with this
- * literal, so the three namespaces stay disjoint.
- *
- * Why a marker and not the `branch-protection-ack` ledger tag: only a
- * process the operator launched (their `!`-shell or any un-hooked
- * terminal) can write under `harness.generated/` — Edit / Write / Bash
- * are all gated, and the configured MCP servers expose no filesystem
- * write. So the marker is the canonical override signal; the ledger row
- * is a best-effort audit echo only.
- */
-export const BRANCH_PROTECTION_MARKER_PREFIX = "branch-protection-";
-/** Marker filename (inside `.approvals/`) for a session's branch-protection override. */
-export function branchProtectionMarkerName(sessionId) {
-    return `${BRANCH_PROTECTION_MARKER_PREFIX}${sessionId}`;
-}
-/**
- * Operator-side: write the canonical branch-protection override marker for
- * `sessionId`. Atomic (delegates to `writeApprovalMarker`). Caller is
- * `harness approve branch-protection`, run from the operator's un-hooked
- * shell; if the agent could reach this path the gate's value would
- * collapse, so it lives behind the approve CLI.
- */
-export function writeBranchProtectionMarker(generatedDir, sessionId, marker) {
-    return writeApprovalMarker(generatedDir, branchProtectionMarkerName(sessionId), marker);
-}
-/**
- * Gate-side: is the operator's branch-protection override marker present
- * for `sessionId`? Inherits `checkApprovalMarker`'s contract
- * (signature-verified, symlink rejection, optional freshness via
- * `maxAgeMs` — harness/f9485cc7 replaced the earlier existence-is-enough
- * behaviour with HMAC signature verification); only the namespaced
- * filename differs.
- */
-export function checkBranchProtectionMarker(generatedDir, sessionId, opts = {}) {
-    return checkApprovalMarker(generatedDir, branchProtectionMarkerName(sessionId), opts);
-}
-/**
- * Freshness window for the producer tag. Five minutes lets a single
- * branch-check satisfy a whole edit batch without re-running for every
- * Write; longer than that and a branch switch in the middle of a
- * session would silently keep the gate open against the new HEAD.
- */
-export const PRODUCER_FRESHNESS_MS = 5 * 60 * 1000;
 /** Branches gated by default when no `config.protected_branches` is set. */
 export const DEFAULT_PROTECTED_BRANCHES = [
     "master",
@@ -129,13 +57,13 @@ export function resolveProtectedBranches(pack) {
     return { branches: ok, warning: null };
 }
 /**
- * True when `branch` is in the protected list. Empty branch (detached
- * HEAD) is treated as protected, because we can't audit-by-name what
- * the agent is about to commit to.
+ * True when `branch` (the name git reports, without `refs/heads/`) matches an
+ * entry of the protected list, compared case-insensitively: `Master` and
+ * `MAIN` are the same branch as far as this gate is concerned, since a
+ * case-insensitive filesystem or a remote can fold them together.
  */
 export function isProtectedBranch(branch, protectedList) {
-    if (branch.length === 0)
-        return true;
-    return protectedList.includes(branch);
+    const folded = branch.toLowerCase();
+    return protectedList.some((p) => p.toLowerCase() === folded);
 }
 //# sourceMappingURL=branch-protection-runtime.js.map

package/dist/policy-packs/builtin/branch-protection-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"branch-protection-runtime.js","sourceRoot":"","sources":["../../../src/policy-packs/builtin/branch-protection-runtime.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,EAAE;AACF,kEAAkE;AAClE,yEAAyE;AACzE,sEAAsE;AACtE,yEAAyE;AACzE,mEAAmE;AACnE,kCAAkC;AAGlC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GAIpB,MAAM,6CAA6C,CAAC;AAErD,MAAM,CAAC,MAAM,SAAS,GAAG,mBAAmB,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAC;AAE/D;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAEtD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,oBAAoB,CAAC;AAEpE,yFAAyF;AACzF,MAAM,UAAU,0BAA0B,CAAC,SAAiB;IAC1D,OAAO,GAAG,+BAA+B,GAAG,SAAS,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,YAAoB,EACpB,SAAiB,EACjB,MAAsB;IAEtB,OAAO,mBAAmB,CAAC,YAAY,EAAE,0BAA0B,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CACzC,YAAoB,EACpB,SAAiB,EACjB,OAAmC,EAAE;IAErC,OAAO,mBAAmB,CAAC,YAAY,EAAE,0BAA0B,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;AACxF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEnD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,QAAQ;IACR,MAAM;IACN,SAAS;CACV,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAgB;IAIvD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC9C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,0BAA0B,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,QAAQ,EAAE,CAAC,GAAG,0BAA0B,CAAC;YACzC,OAAO,EAAE,gBAAgB,IAAI,CAAC,IAAI,kEAAkE,OAAO,GAAG,+BAA+B,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SACvL,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAa,EAAE,CAAC;IACxB,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;YAC7D,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO;YACL,QAAQ,EAAE,CAAC,GAAG,0BAA0B,CAAC;YACzC,OAAO,EAAE,gBAAgB,IAAI,CAAC,IAAI,6GAA6G,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SACzL,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,gBAAgB,IAAI,CAAC,IAAI,wCAAwC,GAAG,CAAC,MAAM,mBAAmB,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC,MAAM,aAAa,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SACvN,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,aAAgC;IAChF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC"}
+{"version":3,"file":"branch-protection-runtime.js","sourceRoot":"","sources":["../../../src/policy-packs/builtin/branch-protection-runtime.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,EAAE;AACF,qEAAqE;AACrE,uEAAuE;AACvE,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,iDAAiD;AAIjD,MAAM,CAAC,MAAM,SAAS,GAAG,mBAAmB,CAAC;AAE7C,4EAA4E;AAC5E,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,QAAQ;IACR,MAAM;IACN,SAAS;CACV,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAgB;IAIvD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC9C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,0BAA0B,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,QAAQ,EAAE,CAAC,GAAG,0BAA0B,CAAC;YACzC,OAAO,EAAE,gBAAgB,IAAI,CAAC,IAAI,kEAAkE,OAAO,GAAG,+BAA+B,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SACvL,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAa,EAAE,CAAC;IACxB,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;YAC7D,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO;YACL,QAAQ,EAAE,CAAC,GAAG,0BAA0B,CAAC;YACzC,OAAO,EAAE,gBAAgB,IAAI,CAAC,IAAI,6GAA6G,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SACzL,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,gBAAgB,IAAI,CAAC,IAAI,wCAAwC,GAAG,CAAC,MAAM,mBAAmB,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC,MAAM,aAAa,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SACvN,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,aAAgC;IAChF,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACpC,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;AAC/D,CAAC"}

package/dist/policy-packs/builtin/branch-protection.d.ts

@@ -5,42 +5,19 @@ import type { PackContribution } from "../types.js";
 import { PACK_NAME } from "./branch-protection-runtime.js";
 export { PACK_NAME };
 /**
- * Zod schema for this pack's `config:` block. See sibling pack
- * `understanding-before-execution.configSchema` for rationale: strict
- * by design so typo'd keys fail loud at lint time. `protected_branches`
+ * Zod schema for this pack's `config:` block. Strict by design so
+ * typo'd keys fail loud at lint time. `protected_branches`
  * is the only operator-tunable key today; new keys land here first,
  * then in `resolveProtectedBranches`.
  */
 export declare const configSchema: z.ZodObject<{
-    protected_branches: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    protected_branches: z.ZodOptional<z.ZodArray<z.ZodString>>;
     ux: z.ZodOptional<z.ZodObject<{
         cannot: z.ZodString;
-        required: z.ZodArray<z.ZodString, "many">;
-        run: z.ZodArray<z.ZodString, "many">;
-    }, "strict", z.ZodTypeAny, {
-        cannot: string;
-        required: string[];
-        run: string[];
-    }, {
-        cannot: string;
-        required: string[];
-        run: string[];
-    }>>;
-}, "strict", z.ZodTypeAny, {
-    ux?: {
-        cannot: string;
-        required: string[];
-        run: string[];
-    } | undefined;
-    protected_branches?: string[] | undefined;
-}, {
-    ux?: {
-        cannot: string;
-        required: string[];
-        run: string[];
-    } | undefined;
-    protected_branches?: string[] | undefined;
-}>;
+        required: z.ZodArray<z.ZodString>;
+        run: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
 /**
  * Shipped default `config.ux` for this pack (agent-tasks/9806d4f8).
  * Canonical source for the `full` init template and `harness pack

package/dist/policy-packs/builtin/branch-protection.js

@@ -1,47 +1,31 @@
 // Builtin Policy Pack: `branch-protection`.
 //
 // Blocks Write/Edit (and the codex `apply_patch` equivalent) when the
-// agent is on a protected branch (default: master, main, develop). The
-// gate fires at the FIRST source mutation, complementing the existing
-// `preflight-before-push` gate which fires at the LAST reversible step.
+// target lives in a repository whose checked-out branch is protected
+// (default: master, main, develop), at the FIRST source mutation.
 //
-// Mechanics, mirroring `understanding-before-execution`:
-//
-//   1. SessionStart producer (`harness session-start branch-check`) reads
-//      `.git/HEAD` for the cwd and, if the branch is NOT protected,
-//      writes a `branch:non-protected:<branch>` fact to the evidence
-//      ledger for the current session.
-//
-//   2. PreToolUse blocker (`harness pack hook branch-protection`)
-//      consults the ledger on every Write/Edit (or `apply_patch`) and
-//      emits a Claude Code deny envelope unless either:
-//        - a fresh (<5m) `branch:non-protected` tag exists, OR
-//        - the operator-only override marker exists at
-//          `harness.generated/.approvals/branch-protection-<sessionId>`,
-//          written by `harness approve branch-protection`. The legacy
-//          `branch-protection-ack:` ledger tag is no longer trusted as an
-//          override (audit finding #39): it is agent-writable via
-//          `mcp__grounding-mcp__ledger_add`, so it could self-bless an
-//          edit. The marker lives under `harness.generated/`, which Edit /
-//          Write / Bash are all gated from writing.
-//
-// The producer is also runnable on-demand from the operator's `!` shell
-// — same CLI verb, no SessionStart event piped on stdin — so an agent
-// that just branched can refresh the gate without restarting the
-// session.
+// Mechanics (task a4d8adc5): one PreToolUse blocker, `harness pack hook
+// branch-protection`. For each directory the tool call writes into it asks
+// git for the branch (`git -C <dir> symbolic-ref -q HEAD`, see
+// src/runtime/git-branch.ts) and refuses when git names a protected branch
+// or cannot answer. A directory with no `.git` entry above it is outside
+// every repository and allowed without spawning git; a detached HEAD is
+// allowed. There is no producer, ledger tag or override marker: the escape
+// for the agent is `git checkout -b <feature>`, and the operator disables
+// the gate from an un-hooked shell (`harness gate disable`).
 //
 // Enabled per-installation via `harness pack add branch-protection`.
-// The `full` init template wires it with `enabled: true` (see
-// src/cli/init/templates.ts); the `solo` / `team` templates do not.
+// The `solo`, `team` and `full` init templates wire it with
+// `enabled: true` (src/cli/init/profiles.ts, src/cli/init/templates.ts);
+// `minimal` does not.
 import { z } from "zod";
-import { PolicyUxSchema } from "../../schema/policies.js";
+import { PolicyUxSchema } from "../../schema/policy-ux.js";
 import { DEFAULT_RUNTIME } from "../runtime.js";
-import { ACK_TAG_PREFIX, DEFAULT_PROTECTED_BRANCHES, NON_PROTECTED_TAG_PREFIX, PACK_NAME, PRODUCER_FRESHNESS_MS, resolveProtectedBranches, } from "./branch-protection-runtime.js";
+import { DEFAULT_PROTECTED_BRANCHES, PACK_NAME, resolveProtectedBranches, } from "./branch-protection-runtime.js";
 export { PACK_NAME };
 /**
- * Zod schema for this pack's `config:` block. See sibling pack
- * `understanding-before-execution.configSchema` for rationale: strict
- * by design so typo'd keys fail loud at lint time. `protected_branches`
+ * Zod schema for this pack's `config:` block. Strict by design so
+ * typo'd keys fail loud at lint time. `protected_branches`
  * is the only operator-tunable key today; new keys land here first,
  * then in `resolveProtectedBranches`.
  */
@@ -67,44 +51,35 @@ export function defaultUx() {
         required: [
             "a checkout of a non-protected branch (current `${BRANCH}` is protected)",
         ],
-        run: ["git checkout -b feat/<your-task>", "harness session-start branch-check"],
+        run: ["git checkout -b feat/<your-task>"],
     };
 }
 const HOOK_NAME_PREFIX = `policy-pack:${PACK_NAME}`;
 const PRE_TOOL_USE_MATCH_CLAUDE = "Write|Edit";
 const PRE_TOOL_USE_MATCH_CODEX = "apply_patch";
-const PRODUCER_COMMAND = "harness session-start branch-check";
 const BLOCKER_COMMAND = "harness pack hook branch-protection";
+// Codex reads a PreToolUse block as exit 2 with the reason on stderr, not as
+// the JSON envelope Claude Code reads, so the Codex command names its runtime
+// and the hook answers in that runtime's contract.
+const BLOCKER_COMMAND_CODEX = `${BLOCKER_COMMAND} --runtime codex`;
 function buildHooks(runtime) {
     const isCodex = runtime === "codex";
     const blockerMatch = isCodex ? PRE_TOOL_USE_MATCH_CODEX : PRE_TOOL_USE_MATCH_CLAUDE;
     return [
-        {
-            name: `${HOOK_NAME_PREFIX}:session-start`,
-            event: "SessionStart",
-            command: PRODUCER_COMMAND,
-            blocking: false,
-            budget_ms: 5000,
-            description: "Producer: write `branch:non-protected:<branch>` to the evidence ledger when the session opens on a non-protected branch. Non-blocking; failures leave the gate closed.",
-        },
         {
             name: `${HOOK_NAME_PREFIX}:pre-tool-use`,
             event: "PreToolUse",
             match: blockerMatch,
-            command: BLOCKER_COMMAND,
+            command: isCodex ? BLOCKER_COMMAND_CODEX : BLOCKER_COMMAND,
             blocking: "hard",
-            // 15000 (task 7bf47554): the blocker's own ledger query
-            // (queryLedgerByTag, src/cli/pack/hook-branch-protection.ts) is
-            // bounded by the grounding-mcp server's own `health.timeout_ms`
-            // (default 5000ms) — the SAME number the old budget_ms=5000 used for
-            // the outer Claude Code kill-timeout, leaving no margin at all: a
-            // ledger that is merely slow (not dead) could race the outer
-            // timeout and have its subprocess killed before the fail-closed
-            // "blocked: true" JSON reaches stdout, which Claude Code then reads
-            // as allow. 15000ms gives the query room to complete (or genuinely
-            // fail) before the outer timeout can fire first.
-            budget_ms: 15000,
-            description: `Blocker: deny ${blockerMatch} on protected branches unless a fresh branch:non-protected tag exists in the ledger or the operator-only override marker (harness approve branch-protection) is present.`,
+            // 5000 (task a4d8adc5): the hook's slow parts are node start-up, the
+            // manifest load and the git reads, and the hook bounds the git reads
+            // itself (2000 ms per call, 3000 ms from the hook's start for all
+            // target directories, src/cli/pack/hook-branch-protection.ts), so it answers
+            // well inside this budget. A hook the runtime kills at its budget is
+            // read as an allow, which is why the hook's own bound sits below it.
+            budget_ms: 5000,
+            description: `Blocker: deny ${blockerMatch} when git names a protected branch for a target directory, or cannot answer.`,
         },
     ];
 }
@@ -116,26 +91,24 @@ function buildInstructions(pack, branches, runtime) {
     const settingsArtefact = isCodex
         ? "`harness.generated/codex/config.toml`"
         : "harness-managed `settings.json`";
-    // HIGH-F1 (batch18 fix-round, task f34eb233): before this, opencode
+    // Task f34eb233 (a review fix): before this, opencode
     // fell through to the claude-code `else` branch above and the
     // "## Effect" text below claimed hooks were wired into
     // `settings.json` even though opencode has no declarative hook/event
     // field and `harness apply --runtime opencode` never projects
     // `hooks[]` into the generated opencode artefact (see runtime.ts's
-    // header). Mirrors post-merge-gate.ts's "## Runtime" UNSUPPORTED
-    // marker.
+    // header). Carries the "## Runtime" UNSUPPORTED marker.
     const runtimeUnsupportedNote = isOpencode
         ? " (UNSUPPORTED — opencode has no declarative hook/event wiring; this pack's hooks are not projected into any opencode artefact)"
         : "";
     const wiringSentence = isOpencode
         ? "This pack's hooks are **not wired** under `--runtime opencode`: opencode has no declarative hook/event field (only a JS/TS plugin API), and `harness apply --runtime opencode` never projects `hooks[]` into the generated opencode artefact. The mechanics below describe the Claude Code / Codex behavior this pack implements; none of it fires today under opencode."
         : `While this pack is enabled, hooks are wired into the ${settingsArtefact}:`;
-    const minutes = Math.round(PRODUCER_FRESHNESS_MS / 60000);
     return `# Policy Pack: ${PACK_NAME}
 
 > Operator audit copy. This pack blocks source-mutating tool calls when
-> the agent is on a protected branch, closing the loop on the
-> "edit-on-master" incident pattern.
+> the target lives in a repository checked out on a protected branch,
+> closing the loop on the "edit-on-master" incident pattern.
 
 ## Runtime
 
@@ -145,41 +118,35 @@ ${runtime}${runtimeUnsupportedNote}
 
 ${branches.map((b) => `- \`${b}\``).join("\n")}
 
-Set \`config.protected_branches\` in your manifest to override.
+Set \`config.protected_branches\` in your manifest to override. Names are
+compared case-insensitively.
 
 ## Effect
 
 ${wiringSentence}
 
-1. \`SessionStart\` producer (\`${PRODUCER_COMMAND}\`, blocking: false):
-   reads the cwd's \`.git/HEAD\`. If the branch is NOT in the protected
-   list, writes \`${NON_PROTECTED_TAG_PREFIX}:<branch>\` to the evidence
-   ledger for the current session.
+\`PreToolUse\` blocker (\`${isCodex ? BLOCKER_COMMAND_CODEX : BLOCKER_COMMAND}\`, blocking: hard) on
+\`${blockerMatch}\`. For each directory the tool call writes into (the
+nearest existing directory of the target path, the paths named by an
+\`apply_patch\` body, or the session cwd for other tools) it asks git:
+\`git -C <dir> symbolic-ref -q HEAD\`, with every \`GIT_*\` variable removed
+from git's environment and a 2000 ms bound per call. Three outcomes:
+
+1. git names a protected branch: the call is refused; the agent is told to
+   branch off (\`git checkout -b <feature>\`).
+2. git could not answer (an error, a timeout, git missing, an unexpected
+   answer): the call is refused, naming git's first stderr line.
+3. No \`.git\` entry above the directory (outside every repository) or a
+   detached HEAD: the call is allowed.
 
-2. \`PreToolUse\` blocker (\`${BLOCKER_COMMAND}\`, blocking: hard) on
-   \`${blockerMatch}\`: refuses the tool call unless EITHER
-   - a \`${NON_PROTECTED_TAG_PREFIX}\` tag exists in the ledger from
-     within the last ${minutes} minutes, OR
-   - the operator-only override marker exists at
-     \`harness.generated/.approvals/branch-protection-<sessionId>\`.
+${isCodex ? "Codex contract: a refusal exits 2 with the reason on stderr." : "Claude Code contract: a refusal is a JSON deny envelope on stdout (exit 0)."}
+A manifest that cannot be loaded refuses every call.
 
 ## Escape hatches
 
-- **Refresh after branching**: the producer is runnable on demand from
-  the operator's \`!\` shell as \`${PRODUCER_COMMAND}\`. The agent's Bash
-  is gated by the Understanding Gate but the producer command is itself
-  a \`harness ...\` invocation that the gate's allowlist accepts.
-
-- **Explicit override** (operator only): from an un-hooked shell run
-  \`harness approve branch-protection --session <sessionId>\`. This writes
-  the canonical approval marker the blocker consults. Use it when you have
-  a deliberate reason to edit a protected branch (version bumps, CI
-  workflow patches, hotfixes). SECURITY (audit finding #39): a
-  \`${ACK_TAG_PREFIX}:<reason>\` ledger tag is NO LONGER sufficient on its
-  own — it is agent-writable via \`mcp__grounding-mcp__ledger_add\`, so
-  the gate would otherwise be self-approvable. The approve verb still
-  records that ledger tag for audit, but only the marker file (which the
-  agent cannot write) opens the gate.
+- **Branch off**: \`git checkout -b <feature>\` and retry; the next call
+  is judged against the new branch.
+- **Operator only**: ${isCodex ? "disable the gate from an un-hooked shell with \`harness gate disable --runtime codex\` (without \`--matcher\` it only lists the hook units; it empties this unit's \`hooks\` array in place, so Codex keeps the trust of every other hook; \`harness gate enable --runtime codex\` restores it), or set \`enabled: false\` on this pack and re-run \`harness apply --runtime codex --install\`." : "disable the gate from an un-hooked shell with \`harness gate disable\` (without \`--matcher\` it only lists the hook groups; \`harness gate enable\` restores them), or set \`enabled: false\` on this pack and re-run \`harness apply\`."}
 
 ## Out of scope (v1)
 

package/dist/policy-packs/builtin/branch-protection.js.map

@@ -1 +1 @@
-{"version":3,"file":"branch-protection.js","sourceRoot":"","sources":["../../../src/policy-packs/builtin/branch-protection.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,sEAAsE;AACtE,wEAAwE;AACxE,EAAE;AACF,yDAAyD;AACzD,EAAE;AACF,0EAA0E;AAC1E,oEAAoE;AACpE,qEAAqE;AACrE,uCAAuC;AACvC,EAAE;AACF,kEAAkE;AAClE,sEAAsE;AACtE,wDAAwD;AACxD,+DAA+D;AAC/D,uDAAuD;AACvD,yEAAyE;AACzE,sEAAsE;AACtE,0EAA0E;AAC1E,kEAAkE;AAClE,uEAAuE;AACvE,2EAA2E;AAC3E,oDAAoD;AACpD,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,iEAAiE;AACjE,WAAW;AACX,EAAE;AACF,qEAAqE;AACrE,8DAA8D;AAC9D,oEAAoE;AAEpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,eAAe,EAAgB,MAAM,eAAe,CAAC;AAE9D,OAAO,EACL,cAAc,EACd,0BAA0B,EAC1B,wBAAwB,EACxB,SAAS,EACT,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,SAAS,EAAE,CAAC;AAErB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzD,0DAA0D;IAC1D,sDAAsD;IACtD,EAAE,EAAE,cAAc,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO;QACL,MAAM,EAAE,0DAA0D;QAClE,QAAQ,EAAE;YACR,yEAAyE;SAC1E;QACD,GAAG,EAAE,CAAC,kCAAkC,EAAE,oCAAoC,CAAC;KAChF,CAAC;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAG,eAAe,SAAS,EAAE,CAAC;AAEpD,MAAM,yBAAyB,GAAG,YAAY,CAAC;AAC/C,MAAM,wBAAwB,GAAG,aAAa,CAAC;AAE/C,MAAM,gBAAgB,GAAG,oCAAoC,CAAC;AAC9D,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAE9D,SAAS,UAAU,CAAC,OAAgB;IAClC,MAAM,OAAO,GAAG,OAAO,KAAK,OAAO,CAAC;IACpC,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,yBAAyB,CAAC;IACpF,OAAO;QACL;YACE,IAAI,EAAE,GAAG,gBAAgB,gBAAgB;YACzC,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,gBAAgB;YACzB,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,IAAI;YACf,WAAW,EACT,wKAAwK;SAC3K;QACD;YACE,IAAI,EAAE,GAAG,gBAAgB,eAAe;YACxC,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,eAAe;YACxB,QAAQ,EAAE,MAAM;YAChB,wDAAwD;YACxD,gEAAgE;YAChE,gEAAgE;YAChE,qEAAqE;YACrE,kEAAkE;YAClE,6DAA6D;YAC7D,gEAAgE;YAChE,oEAAoE;YACpE,mEAAmE;YACnE,iDAAiD;YACjD,SAAS,EAAE,KAAK;YAChB,WAAW,EAAE,iBAAiB,YAAY,0KAA0K;SACrN;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAgB,EAAE,QAA2B,EAAE,OAAgB;IACxF,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,OAAO,KAAK,OAAO,CAAC;IACpC,MAAM,UAAU,GAAG,OAAO,KAAK,UAAU,CAAC;IAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,yBAAyB,CAAC;IACpF,MAAM,gBAAgB,GAAG,OAAO;QAC9B,CAAC,CAAC,uCAAuC;QACzC,CAAC,CAAC,iCAAiC,CAAC;IACtC,oEAAoE;IACpE,8DAA8D;IAC9D,uDAAuD;IACvD,qEAAqE;IACrE,8DAA8D;IAC9D,mEAAmE;IACnE,iEAAiE;IACjE,UAAU;IACV,MAAM,sBAAsB,GAAG,UAAU;QACvC,CAAC,CAAC,gIAAgI;QAClI,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,cAAc,GAAG,UAAU;QAC/B,CAAC,CAAC,0WAA0W;QAC5W,CAAC,CAAC,wDAAwD,gBAAgB,GAAG,CAAC;IAChF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,GAAG,KAAK,CAAC,CAAC;IAC1D,OAAO,kBAAkB,SAAS;;;;;;;;EAQlC,OAAO,GAAG,sBAAsB;;;;EAIhC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;EAM5C,cAAc;;kCAEkB,gBAAgB;;oBAE9B,wBAAwB;;;+BAGb,eAAe;OACvC,YAAY;WACR,wBAAwB;uBACZ,OAAO;;;;;;;oCAOM,gBAAgB;;;;;;;;;MAS9C,cAAc;;;;;;;;;;;;;;;;EAgBlB,WAAW,CAAC,CAAC,CAAC,OAAO,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;;YAEtD,SAAS;eACN,OAAO;cACR,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC;CAClD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,IAAgB,EAChB,UAAmB,eAAe;IAElC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,KAAK,GAA2B;QACpC;YACE,YAAY,EAAE,gBAAgB,SAAS,kBAAkB;YACzD,OAAO,EAAE,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC;SACpD;KACF,CAAC;IACF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO;QAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC;AACtD,CAAC"}
+{"version":3,"file":"branch-protection.js","sourceRoot":"","sources":["../../../src/policy-packs/builtin/branch-protection.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,EAAE;AACF,sEAAsE;AACtE,qEAAqE;AACrE,kEAAkE;AAClE,EAAE;AACF,wEAAwE;AACxE,2EAA2E;AAC3E,+DAA+D;AAC/D,2EAA2E;AAC3E,yEAAyE;AACzE,wEAAwE;AACxE,2EAA2E;AAC3E,0EAA0E;AAC1E,6DAA6D;AAC7D,EAAE;AACF,qEAAqE;AACrE,4DAA4D;AAC5D,yEAAyE;AACzE,sBAAsB;AAEtB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,OAAO,EAAE,eAAe,EAAgB,MAAM,eAAe,CAAC;AAE9D,OAAO,EACL,0BAA0B,EAC1B,SAAS,EACT,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,SAAS,EAAE,CAAC;AAErB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzD,0DAA0D;IAC1D,sDAAsD;IACtD,EAAE,EAAE,cAAc,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO;QACL,MAAM,EAAE,0DAA0D;QAClE,QAAQ,EAAE;YACR,yEAAyE;SAC1E;QACD,GAAG,EAAE,CAAC,kCAAkC,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAG,eAAe,SAAS,EAAE,CAAC;AAEpD,MAAM,yBAAyB,GAAG,YAAY,CAAC;AAC/C,MAAM,wBAAwB,GAAG,aAAa,CAAC;AAE/C,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAC9D,6EAA6E;AAC7E,8EAA8E;AAC9E,mDAAmD;AACnD,MAAM,qBAAqB,GAAG,GAAG,eAAe,kBAAkB,CAAC;AAEnE,SAAS,UAAU,CAAC,OAAgB;IAClC,MAAM,OAAO,GAAG,OAAO,KAAK,OAAO,CAAC;IACpC,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,yBAAyB,CAAC;IACpF,OAAO;QACL;YACE,IAAI,EAAE,GAAG,gBAAgB,eAAe;YACxC,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,eAAe;YAC1D,QAAQ,EAAE,MAAM;YAChB,qEAAqE;YACrE,qEAAqE;YACrE,kEAAkE;YAClE,6EAA6E;YAC7E,qEAAqE;YACrE,qEAAqE;YACrE,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,iBAAiB,YAAY,8EAA8E;SACzH;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAgB,EAAE,QAA2B,EAAE,OAAgB;IACxF,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,OAAO,KAAK,OAAO,CAAC;IACpC,MAAM,UAAU,GAAG,OAAO,KAAK,UAAU,CAAC;IAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,yBAAyB,CAAC;IACpF,MAAM,gBAAgB,GAAG,OAAO;QAC9B,CAAC,CAAC,uCAAuC;QACzC,CAAC,CAAC,iCAAiC,CAAC;IACtC,sDAAsD;IACtD,8DAA8D;IAC9D,uDAAuD;IACvD,qEAAqE;IACrE,8DAA8D;IAC9D,mEAAmE;IACnE,wDAAwD;IACxD,MAAM,sBAAsB,GAAG,UAAU;QACvC,CAAC,CAAC,gIAAgI;QAClI,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,cAAc,GAAG,UAAU;QAC/B,CAAC,CAAC,0WAA0W;QAC5W,CAAC,CAAC,wDAAwD,gBAAgB,GAAG,CAAC;IAChF,OAAO,kBAAkB,SAAS;;;;;;;;EAQlC,OAAO,GAAG,sBAAsB;;;;EAIhC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;;EAO5C,cAAc;;4BAEY,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,eAAe;IACzE,YAAY;;;;;;;;;;;;;EAad,OAAO,CAAC,CAAC,CAAC,8DAA8D,CAAC,CAAC,CAAC,6EAA6E;;;;;;;uBAOnI,OAAO,CAAC,CAAC,CAAC,iYAAiY,CAAC,CAAC,CAAC,2OAA2O;;;;;;;;;;;;EAY9oB,WAAW,CAAC,CAAC,CAAC,OAAO,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;;YAEtD,SAAS;eACN,OAAO;cACR,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC;CAClD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,IAAgB,EAChB,UAAmB,eAAe;IAElC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,KAAK,GAA2B;QACpC;YACE,YAAY,EAAE,gBAAgB,SAAS,kBAAkB;YACzD,OAAO,EAAE,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC;SACpD;KACF,CAAC;IACF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO;QAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC;AACtD,CAAC"}

package/dist/policy-packs/config-check.d.ts

@@ -4,18 +4,20 @@ export interface PolicyPackConfigIssue {
     packIndex: number;
     packName: string;
     /**
-     * Dotted path inside `pack.config`, e.g. `mode`, `approval_lifecycle.mode`,
-     * `permission_profile`. Empty string means the issue applies to the
+     * Dotted path inside `pack.config`, e.g. `protected_branches`, `ux.cannot`,
+     * `protected_branches[1]`. Empty string means the issue applies to the
      * config object itself (e.g. a wholly non-object value).
      */
     configPath: string;
     message: string;
     /**
      * Zod issue code preserved so downstream renderers can group by
-     * kind (`invalid_enum_value`, `unrecognized_keys`, ...). Stable since
-     * zod 3.x.
+     * kind (`invalid_value` for a bad enum value, `unrecognized_keys`,
+     * ...). Zod 4 renamed the enum-value code (`invalid_enum_value` in
+     * zod 3.x); no consumer branches on a specific code, only the code
+     * string travels to the diagnostics renderer.
      */
-    code: z.ZodIssueCode;
+    code: z.core.$ZodIssue["code"];
 }
 /**
  * Walks `manifest.policy_packs` in declared order. For each enabled

package/dist/policy-packs/config-check.js

@@ -2,8 +2,8 @@
 // `harness doctor`. The top-level `PolicyPackSchema` accepts
 // `config: z.record(string, unknown)` — any key, any value — because
 // each builtin pack owns its own config interpretation. That means a
-// typo like `mode: "fastConfirm"` (camelCase instead of `fast_confirm`)
-// or `permision_profile` (misspelled key) currently falls through to
+// typo like `protected_brnches` (misspelled key) or
+// `protected_branches: "master"` (a string instead of a list) currently falls through to
 // the runtime fallback and the operator only finds out when the hook
 // finally fires. This helper consults the per-pack `configSchema`
 // exported from each builtin module and surfaces every issue at

package/dist/policy-packs/config-check.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-check.js","sourceRoot":"","sources":["../../src/policy-packs/config-check.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,6DAA6D;AAC7D,qEAAqE;AACrE,qEAAqE;AACrE,wEAAwE;AACxE,qEAAqE;AACrE,qEAAqE;AACrE,kEAAkE;AAClE,gEAAgE;AAChE,aAAa;AACb,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,qEAAqE;AACrE,uEAAuE;AACvE,oEAAoE;AAGpE,OAAO,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAqB9E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAkB;IAElB,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE;QAChD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO;QAC1C,MAAM,MAAM,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO;QAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI;iBAC1B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;iBAClE,IAAI,CAAC,GAAG,CAAC;iBACT,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,SAAS;gBACT,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,UAAU;gBACV,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"config-check.js","sourceRoot":"","sources":["../../src/policy-packs/config-check.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,6DAA6D;AAC7D,qEAAqE;AACrE,qEAAqE;AACrE,oDAAoD;AACpD,yFAAyF;AACzF,qEAAqE;AACrE,kEAAkE;AAClE,gEAAgE;AAChE,aAAa;AACb,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,qEAAqE;AACrE,uEAAuE;AACvE,oEAAoE;AAGpE,OAAO,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAuB9E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAkB;IAElB,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE;QAChD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO;QAC1C,MAAM,MAAM,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO;QAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI;iBAC1B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;iBAClE,IAAI,CAAC,GAAG,CAAC;iBACT,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,SAAS;gBACT,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,UAAU;gBACV,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/policy-packs/expand.d.ts

@@ -1,6 +1,4 @@
 import type { Manifest } from "../schema/index.js";
-import type { ResolvePackOptions } from "./builtin/understanding-before-execution.js";
 import { type Runtime } from "./runtime.js";
 import type { PackExpansionResult } from "./types.js";
-export type ExpandPolicyPacksOptions = ResolvePackOptions;
-export declare function expandPolicyPacks(manifest: Manifest, runtime?: Runtime, opts?: ExpandPolicyPacksOptions): PackExpansionResult;
+export declare function expandPolicyPacks(manifest: Manifest, runtime?: Runtime): PackExpansionResult;

package/dist/policy-packs/expand.js

@@ -10,23 +10,20 @@
 //
 // Hook-name collision handling: pack hooks are namespaced
 // (`policy-pack:<name>:<role>`) by the builtin definitions, so a user
-// hook with a colliding name is the user's mistake. We surface that as
+// hook with a colliding name is the user's mistake. Two packs cannot
+// contribute the same name: the schema rejects a duplicate
+// `policy_packs[].name`. We surface that as
 // a warning here rather than blowing up; the schema's duplicate-name
 // superRefine will reject it on the augmented manifest's downstream
 // re-parse if a caller re-validates.
 import { resolveBuiltin } from "./registry.js";
 import { DEFAULT_RUNTIME } from "./runtime.js";
 import { parsePackSource } from "./source.js";
-export function expandPolicyPacks(manifest, runtime = DEFAULT_RUNTIME, opts = {}) {
+export function expandPolicyPacks(manifest, runtime = DEFAULT_RUNTIME) {
     const out = { hooks: [], files: [], warnings: [], skipped: [] };
     if (manifest.policy_packs.length === 0)
         return out;
     const existingHookNames = new Set(manifest.hooks.map((h) => h.name));
-    const seenPackHookNames = new Set();
-    const allowSet = new Set();
-    const askSet = new Set();
-    const denySet = new Set();
-    let anyPermissions = false;
     for (const pack of manifest.policy_packs) {
         if (!pack.enabled) {
             out.skipped.push(pack.name);
@@ -37,7 +34,7 @@ export function expandPolicyPacks(manifest, runtime = DEFAULT_RUNTIME, opts = {}
             out.warnings.push(`policy_packs[${pack.name}]: source ${JSON.stringify(pack.source)} is not recognised in v1 (only "builtin" resolves); skipping.`);
             continue;
         }
-        const resolved = resolveBuiltin(pack, runtime, opts);
+        const resolved = resolveBuiltin(pack, runtime);
         if (!resolved) {
             out.warnings.push(`policy_packs[${pack.name}]: not a known builtin pack; skipping. See docs/policy-packs/ for supported names.`);
             continue;
@@ -48,43 +45,9 @@ export function expandPolicyPacks(manifest, runtime = DEFAULT_RUNTIME, opts = {}
                 out.warnings.push(`policy_packs[${pack.name}]: hook name "${hook.name}" collides with a manifest hooks[] entry; pack contribution dropped to avoid a duplicate-name failure.`);
                 continue;
             }
-            if (seenPackHookNames.has(hook.name)) {
-                out.warnings.push(`policy_packs[${pack.name}]: hook name "${hook.name}" was already contributed by an earlier pack; second copy dropped.`);
-                continue;
-            }
-            seenPackHookNames.add(hook.name);
             out.hooks.push(hook);
         }
         out.files.push(...resolved.contribution.files);
-        if (resolved.contribution.permissions) {
-            anyPermissions = true;
-            for (const p of resolved.contribution.permissions.allow)
-                allowSet.add(p);
-            for (const p of resolved.contribution.permissions.ask)
-                askSet.add(p);
-            for (const p of resolved.contribution.permissions.deny)
-                denySet.add(p);
-        }
-    }
-    if (anyPermissions) {
-        // Deny wins over ask wins over allow at merge time: a stricter
-        // intent from any pack should not be silently relaxed by a more
-        // permissive sibling. Concretely, a pattern present in deny is
-        // stripped from ask + allow; a pattern present in ask is stripped
-        // from allow.
-        for (const p of denySet) {
-            askSet.delete(p);
-            allowSet.delete(p);
-        }
-        for (const p of askSet) {
-            allowSet.delete(p);
-        }
-        const permissions = {
-            allow: [...allowSet].sort(),
-            ask: [...askSet].sort(),
-            deny: [...denySet].sort(),
-        };
-        out.permissions = permissions;
     }
     return out;
 }

package/dist/policy-packs/expand.js.map

@@ -1 +1 @@
-{"version":3,"file":"expand.js","sourceRoot":"","sources":["../../src/policy-packs/expand.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,EAAE;AACF,oEAAoE;AACpE,oEAAoE;AACpE,wEAAwE;AACxE,qEAAqE;AACrE,sEAAsE;AACtE,oEAAoE;AACpE,8DAA8D;AAC9D,EAAE;AACF,0DAA0D;AAC1D,sEAAsE;AACtE,uEAAuE;AACvE,qEAAqE;AACrE,oEAAoE;AACpE,qCAAqC;AAIrC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAgB,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAK9C,MAAM,UAAU,iBAAiB,CAC/B,QAAkB,EAClB,UAAmB,eAAe,EAClC,OAAiC,EAAE;IAEnC,MAAM,GAAG,GAAwB,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrF,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAEnD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,YAAY,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpC,GAAG,CAAC,QAAQ,CAAC,IAAI,CACf,gBAAgB,IAAI,CAAC,IAAI,aAAa,IAAI,CAAC,SAAS,CAClD,IAAI,CAAC,MAAM,CACZ,+DAA+D,CACjE,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,QAAQ,CAAC,IAAI,CACf,gBAAgB,IAAI,CAAC,IAAI,oFAAoF,CAC9G,CAAC;YACF,SAAS;QACX,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAC/C,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,GAAG,CAAC,QAAQ,CAAC,IAAI,CACf,gBAAgB,IAAI,CAAC,IAAI,iBAAiB,IAAI,CAAC,IAAI,wGAAwG,CAC5J,CAAC;gBACF,SAAS;YACX,CAAC;YACD,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,GAAG,CAAC,QAAQ,CAAC,IAAI,CACf,gBAAgB,IAAI,CAAC,IAAI,iBAAiB,IAAI,CAAC,IAAI,oEAAoE,CACxH,CAAC;gBACF,SAAS;YACX,CAAC;YACD,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,QAAQ,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;YACtC,cAAc,GAAG,IAAI,CAAC;YACtB,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,KAAK;gBAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACzE,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACrE,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,+DAA+D;QAC/D,gEAAgE;QAChE,+DAA+D;QAC/D,kEAAkE;QAClE,cAAc;QACd,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACjB,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,WAAW,GAAgC;YAC/C,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE;YAC3B,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE;YACvB,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE;SAC1B,CAAC;QACF,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC;IAChC,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"expand.js","sourceRoot":"","sources":["../../src/policy-packs/expand.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,EAAE;AACF,oEAAoE;AACpE,oEAAoE;AACpE,wEAAwE;AACxE,qEAAqE;AACrE,sEAAsE;AACtE,oEAAoE;AACpE,8DAA8D;AAC9D,EAAE;AACF,0DAA0D;AAC1D,sEAAsE;AACtE,qEAAqE;AACrE,2DAA2D;AAC3D,4CAA4C;AAC5C,qEAAqE;AACrE,oEAAoE;AACpE,qCAAqC;AAGrC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAgB,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG9C,MAAM,UAAU,iBAAiB,CAC/B,QAAkB,EAClB,UAAmB,eAAe;IAElC,MAAM,GAAG,GAAwB,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrF,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAEnD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAErE,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,YAAY,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpC,GAAG,CAAC,QAAQ,CAAC,IAAI,CACf,gBAAgB,IAAI,CAAC,IAAI,aAAa,IAAI,CAAC,SAAS,CAClD,IAAI,CAAC,MAAM,CACZ,+DAA+D,CACjE,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,QAAQ,CAAC,IAAI,CACf,gBAAgB,IAAI,CAAC,IAAI,oFAAoF,CAC9G,CAAC;YACF,SAAS;QACX,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAC/C,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,GAAG,CAAC,QAAQ,CAAC,IAAI,CACf,gBAAgB,IAAI,CAAC,IAAI,iBAAiB,IAAI,CAAC,IAAI,wGAAwG,CAC5J,CAAC;gBACF,SAAS;YACX,CAAC;YACD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/policy-packs/index.d.ts

@@ -1,8 +1,8 @@
-export { expandPolicyPacks, type ExpandPolicyPacksOptions } from "./expand.js";
-export { KNOWN_BUILTIN_PACKS, isBuiltinPackName, resolveBuiltin, resolveBuiltinConfigSchema, resolveBuiltinVersionCommand, type BuiltinPackName, type ResolveBuiltinResult, } from "./registry.js";
+export { expandPolicyPacks } from "./expand.js";
+export { KNOWN_BUILTIN_PACKS, isBuiltinPackName, resolveBuiltin, resolveBuiltinConfigSchema, type BuiltinPackName, type ResolveBuiltinResult, } from "./registry.js";
 export { checkPolicyPackConfigs, type PolicyPackConfigIssue, } from "./config-check.js";
 export { checkPolicyPackVersions, type PolicyPackVersionGap, type PolicyPackVersionGapKind, } from "./version-check.js";
-export { KNOWN_RUNTIMES, DEFAULT_RUNTIME, isRuntime, parseRuntime, type Runtime, } from "./runtime.js";
+export { KNOWN_RUNTIMES, DEFAULT_RUNTIME, isRuntime, type Runtime, } from "./runtime.js";
 export { parsePackSource, type PackSourceKind, type PackSourceParseResult } from "./source.js";
 export { checkPolicyPackSources, type PolicyPackSourceIssue, type PolicyPackSourceIssueKind, } from "./source-check.js";
 export type { PackContribution, PackContributionFile, PackExpansionResult, } from "./types.js";

package/dist/policy-packs/index.js

@@ -1,8 +1,8 @@
 export { expandPolicyPacks } from "./expand.js";
-export { KNOWN_BUILTIN_PACKS, isBuiltinPackName, resolveBuiltin, resolveBuiltinConfigSchema, resolveBuiltinVersionCommand, } from "./registry.js";
+export { KNOWN_BUILTIN_PACKS, isBuiltinPackName, resolveBuiltin, resolveBuiltinConfigSchema, } from "./registry.js";
 export { checkPolicyPackConfigs, } from "./config-check.js";
 export { checkPolicyPackVersions, } from "./version-check.js";
-export { KNOWN_RUNTIMES, DEFAULT_RUNTIME, isRuntime, parseRuntime, } from "./runtime.js";
+export { KNOWN_RUNTIMES, DEFAULT_RUNTIME, isRuntime, } from "./runtime.js";
 export { parsePackSource } from "./source.js";
 export { checkPolicyPackSources, } from "./source-check.js";
 //# sourceMappingURL=index.js.map

package/dist/policy-packs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/policy-packs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAiC,MAAM,aAAa,CAAC;AAC/E,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,0BAA0B,EAC1B,4BAA4B,GAG7B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sBAAsB,GAEvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,uBAAuB,GAGxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,eAAe,EACf,SAAS,EACT,YAAY,GAEb,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAmD,MAAM,aAAa,CAAC;AAC/F,OAAO,EACL,sBAAsB,GAGvB,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/policy-packs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,0BAA0B,GAG3B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sBAAsB,GAEvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,uBAAuB,GAGxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,eAAe,EACf,SAAS,GAEV,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAmD,MAAM,aAAa,CAAC;AAC/F,OAAO,EACL,sBAAsB,GAGvB,MAAM,mBAAmB,CAAC"}