@lannguyensi/harness 0.64.0 → 1.0.0

package/dist/cli/doctor/understanding-mode-env.d.ts

@@ -1,51 +0,0 @@
-import { type Mode } from "../../policy-packs/builtin/understanding-before-execution.js";
-import type { Manifest } from "../../schema/index.js";
-import type { PolicyPack } from "../../schema/policy-packs.js";
-export interface UnderstandingModeEnvDivergence {
-    /** `UNDERSTANDING_GATE_MODE`, normalised (trim + lowercase, mirrors `resolveMode`'s own normalisation). */
-    envMode: Mode;
-    /** `policy_packs[understanding-before-execution].config.mode`, resolved via the config-only (GENERATION-path) resolver. */
-    configMode: Mode;
-    /**
-     * Short headline, rendered as the `⚠` line itself. Mirrors the
-     * npm-global-bin-off-PATH advisory's rendering idiom (`format.ts`'s
-     * Environment section): a one-line headline plus indented {@link detail}
-     * lines underneath, instead of one long sentence crammed onto the `⚠`
-     * line.
-     */
-    message: string;
-    /**
-     * 2-3 indented lines rendered directly under {@link message} by
-     * `format.ts`. Carries the explanation and remediation the old
-     * single-line `message` used to carry inline.
-     */
-    detail: string[];
-}
-/**
- * Pure: manifest + env in, a divergence report out (or `undefined` when
- * there is nothing to flag). Only fires when:
- *   - the `understanding-before-execution` pack is declared AND enabled
- *     (a pack that never runs has no live mode for the env to diverge
- *     from — mirrors the enabled-gate other doctor sections use, e.g.
- *     `buildGrounding`'s `groundingServer` lookup in `index.ts`);
- *   - `UNDERSTANDING_GATE_MODE` is set to a non-empty value AND, once
- *     trimmed/lower-cased the same way `resolveMode` normalises it,
- *     resolves to a recognised {@link Mode}. An env value the live
- *     runtime would itself reject (unset, empty, or unrecognised) cannot
- *     diverge from anything — the live resolver falls back to
- *     `config.mode` in that case too, so there is no enforcement gap to
- *     warn about.
- *   - the normalised env mode differs from the resolved `config.mode`.
- */
-/**
- * Shared gate for the understanding-gate doctor sub-checks that only
- * make sense when the pack is actually live: this divergence advisory,
- * and (ADR docs/decisions/2026-08-27-ug-auto-mode-approval.md slice 1,
- * agent-tasks 74b4b17d) the auto-approval listing and settings-drift
- * checks. Declared-but-disabled counts as not enabled, mirroring the
- * `p.enabled !== false` gate `checkUnderstandingModeEnvDivergence` uses
- * inline below.
- */
-export declare function findEnabledUnderstandingPack(manifest: Manifest): PolicyPack | undefined;
-export declare function isUnderstandingPackEnabled(manifest: Manifest): boolean;
-export declare function checkUnderstandingModeEnvDivergence(manifest: Manifest, env: NodeJS.ProcessEnv): UnderstandingModeEnvDivergence | undefined;

package/dist/cli/doctor/understanding-mode-env.js

@@ -1,98 +0,0 @@
-// Advisory check (task 24abdecb): warn (never error) when the operator's
-// process environment carries `UNDERSTANDING_GATE_MODE` and it diverges
-// from `policy_packs[understanding-before-execution].config.mode`.
-//
-// Context (Batch 11 verification round, reviewer finding on task
-// 5d73d78d): after that fix, `resolveModeFromConfig` (config-only, no env
-// read) drives every GENERATION-path artefact — `harness apply`'s
-// settings.json / instructions.md, and `resolveBuiltinDefaultConfig` in
-// `../../policy-packs/registry.ts` (consumed by this doctor's own
-// UX-drift comparison). Only the LIVE runtime path — `resolveMode` in
-// `approve/understanding.ts`'s stdin-report gap-fill, and the Codex
-// `UserPromptSubmit` injector — still reads `UNDERSTANDING_GATE_MODE`
-// (Env > config.mode > default), by design: it is the documented one-off
-// override mechanism, mirroring `@lannguyensi/understanding-gate`'s own
-// "env wins because operators set it consciously" rule (see `MODE_ENV`'s
-// doc comment in `understanding-before-execution.ts`).
-//
-// The gap this check closes: an operator who carries the variable in
-// their shell profile (rather than a one-off inline override) silently
-// downgrades enforcement relative to what `harness.yaml` declares, with
-// no signal anywhere that generation and the live path have diverged.
-// Live-verified: `harness approve understanding` accepted a
-// `fast_confirm`-shaped report against a `grill_me`-configured manifest
-// with no warning. The divergence is agent-unreachable (it only bites at
-// approve time, run from the operator's own shell), so `harness doctor`
-// — which already reads `process.env` for env-dependent checks, e.g.
-// `checkNpmBinPath` (`npm-bin-path.ts`) and the dead-settings.json-block
-// lookup (`claude-mcp.ts`) — is the right place to surface it.
-//
-// Deliberately advisory, never an error: the env override is a
-// legitimate, documented escape hatch, not a misconfiguration. The gap is
-// visibility (the operator may not remember the variable is still
-// exported), not validity.
-import { isMode, MODE_ENV, PACK_NAME as UNDERSTANDING_PACK_NAME, resolveModeFromConfig, } from "../../policy-packs/builtin/understanding-before-execution.js";
-/**
- * Pure: manifest + env in, a divergence report out (or `undefined` when
- * there is nothing to flag). Only fires when:
- *   - the `understanding-before-execution` pack is declared AND enabled
- *     (a pack that never runs has no live mode for the env to diverge
- *     from — mirrors the enabled-gate other doctor sections use, e.g.
- *     `buildGrounding`'s `groundingServer` lookup in `index.ts`);
- *   - `UNDERSTANDING_GATE_MODE` is set to a non-empty value AND, once
- *     trimmed/lower-cased the same way `resolveMode` normalises it,
- *     resolves to a recognised {@link Mode}. An env value the live
- *     runtime would itself reject (unset, empty, or unrecognised) cannot
- *     diverge from anything — the live resolver falls back to
- *     `config.mode` in that case too, so there is no enforcement gap to
- *     warn about.
- *   - the normalised env mode differs from the resolved `config.mode`.
- */
-/**
- * Shared gate for the understanding-gate doctor sub-checks that only
- * make sense when the pack is actually live: this divergence advisory,
- * and (ADR docs/decisions/2026-08-27-ug-auto-mode-approval.md slice 1,
- * agent-tasks 74b4b17d) the auto-approval listing and settings-drift
- * checks. Declared-but-disabled counts as not enabled, mirroring the
- * `p.enabled !== false` gate `checkUnderstandingModeEnvDivergence` uses
- * inline below.
- */
-export function findEnabledUnderstandingPack(manifest) {
-    return manifest.policy_packs.find((p) => p.name === UNDERSTANDING_PACK_NAME && p.enabled !== false);
-}
-export function isUnderstandingPackEnabled(manifest) {
-    return findEnabledUnderstandingPack(manifest) !== undefined;
-}
-export function checkUnderstandingModeEnvDivergence(manifest, env) {
-    const pack = findEnabledUnderstandingPack(manifest);
-    if (!pack)
-        return undefined;
-    const envRaw = env[MODE_ENV];
-    if (envRaw === undefined || envRaw === "")
-        return undefined;
-    const normalizedEnv = envRaw.trim().toLowerCase();
-    if (!isMode(normalizedEnv))
-        return undefined;
-    const { mode: configMode, warning: configWarning } = resolveModeFromConfig(pack);
-    if (normalizedEnv === configMode)
-        return undefined;
-    // `configMode` is the RESOLVED (effective) value, not necessarily what's
-    // literally written in harness.yaml: when `resolveModeFromConfig` itself
-    // had to fall back (an unset or unrecognised `config.mode`, signalled by
-    // a non-null `configWarning`), attributing it to "(from harness.yaml)"
-    // would be a false verbatim claim. Drop the parenthetical in that case;
-    // the value is still the correct effective mode, just not YAML-sourced.
-    const attribution = configWarning ? "" : " (from harness.yaml)";
-    return {
-        envMode: normalizedEnv,
-        configMode,
-        message: `${MODE_ENV}=${normalizedEnv} diverges from config.mode=${configMode}`,
-        detail: [
-            "live runtime consumers (`harness approve understanding`'s stdin-report gap-fill, the " +
-                `Codex UserPromptSubmit injector) read the env, so enforcement is effectively "${normalizedEnv}"`,
-            `effective config.mode=${configMode}${attribution}`,
-            `if this is not a deliberate one-off override, unset ${MODE_ENV} in your shell profile`,
-        ],
-    };
-}
-//# sourceMappingURL=understanding-mode-env.js.map

package/dist/cli/doctor/understanding-mode-env.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"understanding-mode-env.js","sourceRoot":"","sources":["../../../src/cli/doctor/understanding-mode-env.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,wEAAwE;AACxE,mEAAmE;AACnE,EAAE;AACF,iEAAiE;AACjE,0EAA0E;AAC1E,kEAAkE;AAClE,wEAAwE;AACxE,kEAAkE;AAClE,sEAAsE;AACtE,oEAAoE;AACpE,sEAAsE;AACtE,yEAAyE;AACzE,wEAAwE;AACxE,yEAAyE;AACzE,uDAAuD;AACvD,EAAE;AACF,qEAAqE;AACrE,uEAAuE;AACvE,wEAAwE;AACxE,sEAAsE;AACtE,4DAA4D;AAC5D,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AACxE,qEAAqE;AACrE,yEAAyE;AACzE,+DAA+D;AAC/D,EAAE;AACF,+DAA+D;AAC/D,0EAA0E;AAC1E,kEAAkE;AAClE,2BAA2B;AAE3B,OAAO,EACL,MAAM,EACN,QAAQ,EACR,SAAS,IAAI,uBAAuB,EACpC,qBAAqB,GAEtB,MAAM,8DAA8D,CAAC;AAyBtE;;;;;;;;;;;;;;;GAeG;AACH;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAAC,QAAkB;IAC7D,OAAO,QAAQ,CAAC,YAAY,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,uBAAuB,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,CACjE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAAkB;IAC3D,OAAO,4BAA4B,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,QAAkB,EAClB,GAAsB;IAEtB,MAAM,IAAI,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAE5B,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAC;IAE7C,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACjF,IAAI,aAAa,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IAEnD,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,uEAAuE;IACvE,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,sBAAsB,CAAC;IAEhE,OAAO;QACL,OAAO,EAAE,aAAa;QACtB,UAAU;QACV,OAAO,EAAE,GAAG,QAAQ,IAAI,aAAa,8BAA8B,UAAU,EAAE;QAC/E,MAAM,EAAE;YACN,uFAAuF;gBACrF,iFAAiF,aAAa,GAAG;YACnG,yBAAyB,UAAU,GAAG,WAAW,EAAE;YACnD,uDAAuD,QAAQ,wBAAwB;SACxF;KACF,CAAC;AACJ,CAAC"}

package/dist/cli/dry-run.d.ts

@@ -1,58 +0,0 @@
-import { type ExtractBuiltins } from "../policies/index.js";
-import type { Policy } from "../schema/index.js";
-import { type LoaderOptions } from "./loader.js";
-export interface DryRunOptions extends LoaderOptions {
-    json?: boolean;
-    /** Tool name to simulate; required for `PreToolUse` matching. */
-    tool?: string;
-    /** JSON string for `tool_input`. Parsed once and threaded into the extract context. */
-    toolArgs?: string;
-    /** Override builtins (tests). */
-    builtins?: Partial<ExtractBuiltins>;
-}
-export interface DryRunHookHit {
-    event: string;
-    name: string;
-}
-export interface DryRunPolicyHit {
-    name: string;
-    /**
-     * The cwd-context demand (unchanged shape; kept for `--json` consumers).
-     * For a command that names other repositories see `ledgerQueries`.
-     */
-    ledgerQuery: string;
-    /**
-     * Every demand the runtime would make for this policy: the cwd context
-     * plus one per distinct repository a trigger-satisfying command segment
-     * names (additive, bounded by `MAX_ATTRIBUTED_CONTEXTS`). A single entry
-     * for a policy without per-repo builtins; one bounded-case text instead
-     * of tags when the command names too many distinct targets.
-     */
-    ledgerQueries: string[];
-    requires: Policy["requires"];
-    enforcement: Policy["enforcement"];
-    triggerEvent: string;
-}
-export interface DryRunPolicyCouldHit {
-    name: string;
-    triggerEvent: string;
-    reason: string;
-}
-export interface DryRunMemoryDir {
-    path: string;
-    scope: string;
-}
-export interface DryRunReport {
-    prompt: string;
-    tool: string | null;
-    toolArgs: unknown;
-    hooks: DryRunHookHit[];
-    matchingPolicies: DryRunPolicyHit[];
-    couldMatchPolicies: DryRunPolicyCouldHit[];
-    memoryDirectories: DryRunMemoryDir[];
-}
-export interface DryRunResult {
-    output: string;
-    report: DryRunReport;
-}
-export declare function dryRun(prompt: string, opts?: DryRunOptions): DryRunResult;

package/dist/cli/dry-run.js

@@ -1,283 +0,0 @@
-import { stringify as stringifyYaml } from "yaml";
-import { evaluateExtract, firstInputMatchMismatch, substituteTemplate, } from "../policies/index.js";
-import { normalizeCommand, normalizeCommandAmpAware, normalizeCommandQuoteAware, segmentViewOf, } from "../runtime/command-normalize.js";
-import { resolveGitContext } from "../runtime/git-context.js";
-import { emptyIdentifierGuard, MAX_ATTRIBUTED_CONTEXTS, resolveAttributedContexts, usesPerRepoBuiltins, } from "../runtime/intercept.js";
-import { EX_USAGE, HarnessExitError } from "./exit-codes.js";
-import { loadManifest } from "./loader.js";
-const PROMPT_EVENTS = new Set(["UserPromptSubmit", "SessionStart"]);
-function builtinsFor(opts, tool, gitContext) {
-    const fromOpts = opts.builtins ?? {};
-    // The cwd-context REPO / BRANCH, derived from the cwd the same way the
-    // intercept engine does; an explicit builtins override (tests, or a
-    // deliberate caller) still wins. Targets a command names beyond the cwd
-    // are added per policy by `ledgerQueriesFor`, through the runtime's own
-    // `resolveAttributedContexts`.
-    const cwd = fromOpts.CWD ?? process.cwd();
-    return {
-        SESSION_ID: fromOpts.SESSION_ID ?? "dry-run",
-        REPO: fromOpts.REPO ?? gitContext.repo,
-        BRANCH: fromOpts.BRANCH ?? gitContext.branch,
-        TOOL_NAME: fromOpts.TOOL_NAME ?? (tool ?? ""),
-        CWD: cwd,
-    };
-}
-function policyMatchesPrompt(policy, prompt) {
-    if (!PROMPT_EVENTS.has(policy.trigger.event))
-        return false;
-    if (policy.trigger.match !== undefined) {
-        return prompt.includes(policy.trigger.match);
-    }
-    return true;
-}
-function policyMatchesTool(policy, tool, toolInput) {
-    if (policy.trigger.event !== "PreToolUse") {
-        return { matched: false, reason: `trigger event is ${policy.trigger.event}, not PreToolUse` };
-    }
-    if (policy.trigger.match !== undefined && !tool.includes(policy.trigger.match)) {
-        return {
-            matched: false,
-            reason: `--tool "${tool}" does not contain trigger.match "${policy.trigger.match}"`,
-        };
-    }
-    // `input_match` (task 2699b476): the SAME predicate `policyMatchesEvent`
-    // ANDs onto the tool-name match (`firstInputMatchMismatch`, called on
-    // the same single-object `toolArgs` context both sides build for a
-    // single-envelope input), so dry-run predicts
-    // `mcp__agent-tasks__task_finish` with `{"autoMerge": true}` as gated
-    // and the same verb without it as unmatched, exactly as the runtime
-    // decides. Leaving this arm out would reintroduce the debug-verb
-    // contradiction the bash_match arms below already document once for
-    // their own family: dry-run reporting "no policy matches" for a call
-    // `policy intercept` blocks. Parity holds only for what dry-run can
-    // express: `--input` is always a single JSON object, so it cannot
-    // reproduce the runtime's mixed tool_input/raw_input envelope
-    // (review round 1, task 2699b476 round 2): that arm is
-    // intercept-only by construction, not a gap in this mirror.
-    // This parity, and the mixed-envelope caveat, are recorded in
-    // docs/okf/debug-verb-selection.md's trigger-matching parity paragraph.
-    if (policy.trigger.input_match !== undefined) {
-        const mismatch = firstInputMatchMismatch(policy.trigger.input_match, {
-            toolArgs: toolInput,
-        });
-        if (mismatch !== null) {
-            return {
-                matched: false,
-                reason: mismatch.missing
-                    ? `trigger.input_match needs ${mismatch.expression} in tool_input ` +
-                        `(expected ${JSON.stringify(mismatch.expected)})`
-                    : `trigger.input_match ${mismatch.expression} is ` +
-                        `${JSON.stringify(mismatch.actual)}, not ${JSON.stringify(mismatch.expected)}`,
-            };
-        }
-    }
-    if (policy.trigger.bash_match !== undefined) {
-        const args = toolInput;
-        if (!args || typeof args.command !== "string") {
-            return {
-                matched: false,
-                reason: "trigger.bash_match needs tool_input.command",
-            };
-        }
-        let re;
-        try {
-            re = new RegExp(policy.trigger.bash_match);
-        }
-        catch {
-            return { matched: false, reason: `trigger.bash_match is not a valid regex` };
-        }
-        // Raw-OR-normalised-OR-amp-normalised-OR-quote-normalised, mirroring
-        // `policyMatchesEvent`'s real evaluation path exactly (third arm added
-        // task aabbad63; fourth arm added task f561e44c): dry-run used to test
-        // only the RAW command, so it predicted `env -C /tmp git status` as NOT
-        // matching `preflight-before-investigation` while `policy intercept`
-        // actually blocks it — a debug verb contradicting the runtime it exists
-        // to predict (its own comment above and docs/okf/debug-verb-selection.md
-        // both assert parity). Leaving out the amp-aware third arm here would
-        // reintroduce that SAME class of contradiction for the bare-`&` family
-        // (`A=x&env -C /tmp git status`, `echo hi & nice git status`): `policy
-        // intercept` now blocks those via `normalizeCommandAmpAware`, so dry-run
-        // must try it too. The REPO/BRANCH half of this file (`ledgerQueriesFor`)
-        // reuses the runtime's own per-repo attribution
-        // (`resolveAttributedContexts`), so a command naming another repository
-        // predicts the same additive demands `policy intercept` makes.
-        //
-        // FOURTH ARM (task f561e44c, closes the cf3dff51 follow-up): task
-        // cf3dff51 wired `normalizeCommandQuoteAware` (a quote-aware BOUNDARY_RE
-        // segmenter closing `VAR='a; b' git push origin master` and its
-        // `|`/`&&`/`(`/newline siblings — task 13e55484's pinned gap) as
-        // `policyMatchesEvent`'s FOURTH arm, but deliberately left this function
-        // untouched (scope was narrowed to `src/runtime/intercept.ts` alone),
-        // reintroducing EXACTLY the parity contradiction this comment's first
-        // sentence describes, for that one family. Closed here by adding the
-        // same fourth OR-arm, literally duplicated rather than extracted to a
-        // shared helper — mirroring the amp-aware arm's own literal-duplication
-        // shape immediately above (no shared-helper precedent exists yet for
-        // this OR-chain to follow instead).
-        if (!re.test(args.command) &&
-            !re.test(normalizeCommand(args.command).normalized) &&
-            !re.test(normalizeCommandAmpAware(args.command).normalized) &&
-            !re.test(normalizeCommandQuoteAware(args.command).normalized)) {
-            return {
-                matched: false,
-                reason: `bash_match "${policy.trigger.bash_match}" did not match`,
-            };
-        }
-    }
-    return { matched: true };
-}
-function buildHookHits(manifest, tool) {
-    const hits = [];
-    for (const hook of manifest.hooks) {
-        if (PROMPT_EVENTS.has(hook.event)) {
-            hits.push({ event: hook.event, name: hook.name });
-            continue;
-        }
-        if (tool !== null && hook.event === "PreToolUse") {
-            hits.push({ event: hook.event, name: hook.name });
-        }
-    }
-    return hits;
-}
-function staticLedgerQuery(policy, ctx, builtins) {
-    if (policy.requires === undefined) {
-        // operator_only: true (task 2cc73f55): no requires.ledger_tag to
-        // substitute — the policy never queries the ledger at all.
-        return "(operator-only: no ledger query — unconditional deny)";
-    }
-    const extract = evaluateExtract(policy.trigger.extract ?? {}, ctx, builtins);
-    // Same guard as the runtime: an empty ${REPO} / ${BRANCH} never renders
-    // a blank tag (`preflight:`); show the hint the agent would get instead.
-    const emptyGuard = emptyIdentifierGuard(policy.requires.ledger_tag, extract.values);
-    if (emptyGuard !== null) {
-        return `(no ledger query: ${emptyGuard.message})`;
-    }
-    const sub = substituteTemplate(policy.requires.ledger_tag, extract.values);
-    return sub.result;
-}
-/**
- * Predict every ledger demand for a matched policy. A policy whose
- * `requires:` uses `${REPO}`/`${BRANCH}`/`at_head` is resolved through the
- * runtime's own `resolveAttributedContexts` (no copy of the attribution
- * loop), so the cwd context plus each distinct repository a trigger-
- * satisfying segment names yield one demand each, and the runtime's bound
- * yields one ambiguity text instead of a tag list.
- */
-function ledgerQueriesFor(policy, ctx, builtins, attribution) {
-    if (!usesPerRepoBuiltins(policy))
-        return [staticLedgerQuery(policy, ctx, builtins)];
-    const result = resolveAttributedContexts(policy, attribution.segments, builtins, attribution.cwdHeadSha, attribution.gitContextMemo, attribution.insideRepositoryMemo, attribution.repoOverridden, attribution.branchOverridden, ctx);
-    if (result.kind === "bounded") {
-        return [
-            `(bounded: ambiguous: this command names at least ${result.distinctCount} distinct ` +
-                `repository targets for this policy, exceeding the ${MAX_ATTRIBUTED_CONTEXTS}-context ` +
-                `bound; no context queried)`,
-        ];
-    }
-    return result.contexts.map((c) => staticLedgerQuery(policy, ctx, c.builtins));
-}
-function policyHit(policy, ctx, builtins, attribution) {
-    const ledgerQueries = ledgerQueriesFor(policy, ctx, builtins, attribution);
-    return {
-        name: policy.name,
-        // ledgerQuery keeps the cwd-context value for --json consumers; the runtime
-        // may omit that demand (cwd outside every repository, or the bounded case),
-        // see ledgerQueries.
-        ledgerQuery: staticLedgerQuery(policy, ctx, builtins),
-        ledgerQueries,
-        requires: policy.requires,
-        enforcement: policy.enforcement,
-        triggerEvent: policy.trigger.event,
-    };
-}
-function formatYaml(report) {
-    // Hide raw `null` from YAML output for the no-tool case.
-    const visible = {
-        prompt: report.prompt,
-        ...(report.tool !== null && { tool: report.tool }),
-        ...(report.tool !== null && report.toolArgs !== undefined && {
-            toolArgs: report.toolArgs,
-        }),
-        "Hooks that would fire": report.hooks.length === 0 ? "(none)" : report.hooks,
-        "Policies that match": report.matchingPolicies.length === 0 ? "(none)" : report.matchingPolicies,
-        "Policies that COULD match (need --tool)": report.couldMatchPolicies.length === 0 ? "(none)" : report.couldMatchPolicies,
-        "Memories that would route": report.memoryDirectories.length === 0 ? "(none)" : report.memoryDirectories,
-    };
-    return stringifyYaml(visible, { lineWidth: 0 });
-}
-export function dryRun(prompt, opts = {}) {
-    const { manifest } = loadManifest(opts);
-    const tool = opts.tool ?? null;
-    let toolArgs = undefined;
-    if (opts.toolArgs !== undefined) {
-        try {
-            toolArgs = JSON.parse(opts.toolArgs);
-        }
-        catch (err) {
-            throw new HarnessExitError(`--tool-args: ${err.message}`, EX_USAGE);
-        }
-    }
-    const cwdGitContext = resolveGitContext(opts.builtins?.CWD ?? process.cwd());
-    const builtins = builtinsFor(opts, tool, cwdGitContext);
-    const ctx = {
-        toolArgs,
-        event: { hook_event_name: tool ? "PreToolUse" : "UserPromptSubmit", tool_name: tool, prompt },
-        session: { id: builtins.SESSION_ID },
-        git: {},
-    };
-    const command = toolArgs?.command;
-    const attribution = {
-        segments: tool !== null && typeof command === "string" ? (segmentViewOf(command) ?? []) : [],
-        cwdHeadSha: cwdGitContext.sha.length > 0 ? cwdGitContext.sha : undefined,
-        gitContextMemo: new Map(),
-        insideRepositoryMemo: new Map(),
-        repoOverridden: opts.builtins?.REPO !== undefined,
-        branchOverridden: opts.builtins?.BRANCH !== undefined,
-    };
-    const hooks = buildHookHits(manifest, tool);
-    const matching = [];
-    const couldMatch = [];
-    for (const policy of manifest.policies) {
-        if (PROMPT_EVENTS.has(policy.trigger.event)) {
-            if (policyMatchesPrompt(policy, prompt)) {
-                matching.push(policyHit(policy, ctx, builtins, attribution));
-            }
-            continue;
-        }
-        // PreToolUse and friends.
-        if (tool === null) {
-            couldMatch.push({
-                name: policy.name,
-                triggerEvent: policy.trigger.event,
-                reason: "no --tool supplied; dry-run can only statically match prompt-style events",
-            });
-            continue;
-        }
-        const verdict = policyMatchesTool(policy, tool, toolArgs);
-        if (verdict.matched) {
-            matching.push(policyHit(policy, ctx, builtins, attribution));
-        }
-        else {
-            couldMatch.push({
-                name: policy.name,
-                triggerEvent: policy.trigger.event,
-                reason: verdict.reason,
-            });
-        }
-    }
-    const memoryDirectories = manifest.memory.directories.map((d) => ({ path: d.path, scope: d.scope }));
-    const report = {
-        prompt,
-        tool,
-        toolArgs,
-        hooks,
-        matchingPolicies: matching,
-        couldMatchPolicies: couldMatch,
-        memoryDirectories,
-    };
-    const output = opts.json
-        ? `${JSON.stringify(report, null, 2)}\n`
-        : formatYaml(report);
-    return { output, report };
-}
-//# sourceMappingURL=dry-run.js.map

package/dist/cli/dry-run.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dry-run.js","sourceRoot":"","sources":["../../src/cli/dry-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AAClD,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,kBAAkB,GAGnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,0BAA0B,EAC1B,aAAa,GAEd,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAuB,MAAM,2BAA2B,CAAC;AACnF,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAsB,MAAM,aAAa,CAAC;AA+D/D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC,CAAC;AAEpE,SAAS,WAAW,CAClB,IAAmB,EACnB,IAAmB,EACnB,UAA0B;IAE1B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IACrC,uEAAuE;IACvE,oEAAoE;IACpE,wEAAwE;IACxE,wEAAwE;IACxE,+BAA+B;IAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1C,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,SAAS;QAC5C,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI;QACtC,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM;QAC5C,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAC7C,GAAG,EAAE,GAAG;KACT,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc,EAAE,MAAc;IACzD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAc,EACd,IAAY,EACZ,SAAkB;IAElB,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,MAAM,CAAC,OAAO,CAAC,KAAK,kBAAkB,EAAE,CAAC;IAChG,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/E,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,WAAW,IAAI,qCAAqC,MAAM,CAAC,OAAO,CAAC,KAAK,GAAG;SACpF,CAAC;IACJ,CAAC;IACD,yEAAyE;IACzE,sEAAsE;IACtE,mEAAmE;IACnE,8CAA8C;IAC9C,sEAAsE;IACtE,oEAAoE;IACpE,iEAAiE;IACjE,oEAAoE;IACpE,qEAAqE;IACrE,oEAAoE;IACpE,kEAAkE;IAClE,8DAA8D;IAC9D,uDAAuD;IACvD,4DAA4D;IAC5D,8DAA8D;IAC9D,wEAAwE;IACxE,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE;YACnE,QAAQ,EAAE,SAAS;SACpB,CAAC,CAAC;QACH,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,QAAQ,CAAC,OAAO;oBACtB,CAAC,CAAC,6BAA6B,QAAQ,CAAC,UAAU,iBAAiB;wBACjE,aAAa,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG;oBACnD,CAAC,CAAC,uBAAuB,QAAQ,CAAC,UAAU,MAAM;wBAChD,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;aACnF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,SAA8C,CAAC;QAC5D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,6CAA6C;aACtD,CAAC;QACJ,CAAC;QACD,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,EAAE,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;QAC/E,CAAC;QACD,qEAAqE;QACrE,uEAAuE;QACvE,uEAAuE;QACvE,wEAAwE;QACxE,qEAAqE;QACrE,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,uEAAuE;QACvE,uEAAuE;QACvE,yEAAyE;QACzE,0EAA0E;QAC1E,gDAAgD;QAChD,wEAAwE;QACxE,+DAA+D;QAC/D,EAAE;QACF,kEAAkE;QAClE,yEAAyE;QACzE,gEAAgE;QAChE,iEAAiE;QACjE,yEAAyE;QACzE,sEAAsE;QACtE,sEAAsE;QACtE,qEAAqE;QACrE,sEAAsE;QACtE,wEAAwE;QACxE,qEAAqE;QACrE,oCAAoC;QACpC,IACE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACtB,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC;YACnD,CAAC,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC;YAC3D,CAAC,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,EAC7D,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,eAAe,MAAM,CAAC,OAAO,CAAC,UAAU,iBAAiB;aAClE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,aAAa,CAAC,QAAkB,EAAE,IAAmB;IAC5D,MAAM,IAAI,GAAoB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAe,EAAE,CAAC;QAC5C,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAClD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAc,EACd,GAAwB,EACxB,QAAyB;IAEzB,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,iEAAiE;QACjE,2DAA2D;QAC3D,OAAO,uDAAuD,CAAC;IACjE,CAAC;IACD,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC7E,wEAAwE;IACxE,yEAAyE;IACzE,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACpF,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO,qBAAqB,UAAU,CAAC,OAAO,GAAG,CAAC;IACpD,CAAC;IACD,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3E,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CACvB,MAAc,EACd,GAAwB,EACxB,QAAyB,EACzB,WAA6B;IAE7B,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,yBAAyB,CACtC,MAAM,EACN,WAAW,CAAC,QAAQ,EACpB,QAAQ,EACR,WAAW,CAAC,UAAU,EACtB,WAAW,CAAC,cAAc,EAC1B,WAAW,CAAC,oBAAoB,EAChC,WAAW,CAAC,cAAc,EAC1B,WAAW,CAAC,gBAAgB,EAC5B,GAAG,CACJ,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO;YACL,oDAAoD,MAAM,CAAC,aAAa,YAAY;gBAClF,qDAAqD,uBAAuB,WAAW;gBACvF,4BAA4B;SAC/B,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AAChF,CAAC;AAWD,SAAS,SAAS,CAChB,MAAc,EACd,GAAwB,EACxB,QAAyB,EACzB,WAA6B;IAE7B,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC3E,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,4EAA4E;QAC5E,4EAA4E;QAC5E,qBAAqB;QACrB,WAAW,EAAE,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC;QACrD,aAAa;QACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,MAAoB;IACtC,yDAAyD;IACzD,MAAM,OAAO,GAA4B;QACvC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAClD,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI;YAC3D,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;QACF,uBAAuB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK;QAC5E,qBAAqB,EACnB,MAAM,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB;QAC3E,yCAAyC,EACvC,MAAM,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB;QAC/E,2BAA2B,EACzB,MAAM,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB;KAC9E,CAAC;IACF,OAAO,aAAa,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,MAAc,EAAE,OAAsB,EAAE;IAC7D,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;IAC/B,IAAI,QAAQ,GAAY,SAAS,CAAC;IAClC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,gBAAgB,CACxB,gBAAiB,GAAa,CAAC,OAAO,EAAE,EACxC,QAAQ,CACT,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;IACxD,MAAM,GAAG,GAAwB;QAC/B,QAAQ;QACR,KAAK,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7F,OAAO,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,UAAU,EAAE;QACpC,GAAG,EAAE,EAAE;KACR,CAAC;IAEF,MAAM,OAAO,GAAI,QAA8C,EAAE,OAAO,CAAC;IACzE,MAAM,WAAW,GAAqB;QACpC,QAAQ,EAAE,IAAI,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;QAC5F,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;QACxE,cAAc,EAAE,IAAI,GAAG,EAAE;QACzB,oBAAoB,EAAE,IAAI,GAAG,EAAE;QAC/B,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,KAAK,SAAS;QACjD,gBAAgB,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS;KACtD,CAAC;IAEF,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,UAAU,GAA2B,EAAE,CAAC;IAE9C,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvC,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,IAAI,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;gBACxC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;YAC/D,CAAC;YACD,SAAS;QACX,CAAC;QACD,0BAA0B;QAC1B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK;gBAClC,MAAM,EAAE,2EAA2E;aACpF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK;gBAClC,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,iBAAiB,GAAsB,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAC1E,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAC1C,CAAC;IAEF,MAAM,MAAM,GAAiB;QAC3B,MAAM;QACN,IAAI;QACJ,QAAQ;QACR,KAAK;QACL,gBAAgB,EAAE,QAAQ;QAC1B,kBAAkB,EAAE,UAAU;QAC9B,iBAAiB;KAClB,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI;QACtB,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;QACxC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC"}

package/dist/cli/enriched-event.d.ts

@@ -1,35 +0,0 @@
-import { type ActionEnvelope } from "../runtime/index.js";
-import type { Manifest } from "../schema/index.js";
-import type { LoadedEvent } from "./event-input.js";
-import { type BashPrefixEnrichment } from "./policy/risk-envelope-enrichment.js";
-/** Injectable env and kube seams (tests); ambient values otherwise. */
-export interface EnrichmentSeams {
-    /** Env vars the inline assignments merge over; defaults to `process.env`. */
-    env?: Record<string, string | undefined>;
-    /** Kube context; when either kube seam is set `~/.kube/config` is not read. */
-    kubeContext?: string;
-    /** Kube namespace; see `kubeContext`. */
-    kubeNamespace?: string;
-}
-export interface EnrichedEvent {
-    /** The envelope after the `cd` merge and the branch-switch upgrade. */
-    envelope: ActionEnvelope;
-    enrichment: BashPrefixEnrichment;
-    kube: {
-        context: string;
-        namespace: string;
-    };
-}
-/**
- * Kube seams resolve together: if either is injected, skip the
- * `~/.kube/config` read entirely (same contract `resolve-env` always had).
- */
-export declare function resolveKubeSeams(seams: EnrichmentSeams): {
-    context: string;
-    namespace: string;
-};
-/**
- * Run the hook's Bash-prefix enrichment over a loaded event and rebuild
- * the envelope when the enrichment moved the git context.
- */
-export declare function enrichLoadedEvent(loaded: LoadedEvent, manifest: Manifest, seams: EnrichmentSeams): EnrichedEvent;

package/dist/cli/enriched-event.js

@@ -1,60 +0,0 @@
-// Shared "enrich a loaded tool event like the hook does" front end for the
-// Risk Gate debug verbs that read an event file and predict a verdict:
-// `harness explain-policy`, `harness resolve-env`, `harness test-risk` and
-// `harness explain-action` (task 8b891e83).
-//
-// `harness policy intercept` resolves its envelope and environment through
-// `resolveBashPrefixEnrichment` (inline `VAR=value`, leading `cd`, leading
-// `git switch|checkout`). Every verb that predicts the gate must read the
-// same enriched inputs, or an operator's prediction disagrees with the
-// gate (`DATABASE_URL=...prod... psql ...` resolved `unknown` in the debug
-// verbs and `production` in the hook). This module is the one place the
-// verbs call that helper; it reads no ledger or evidence and imports
-// nothing from `policies/`.
-import { buildActionEnvelope, resolveKubeContext, } from "../runtime/index.js";
-import { resolveBashPrefixEnrichment, } from "./policy/risk-envelope-enrichment.js";
-/**
- * Kube seams resolve together: if either is injected, skip the
- * `~/.kube/config` read entirely (same contract `resolve-env` always had).
- */
-export function resolveKubeSeams(seams) {
-    return seams.kubeContext !== undefined || seams.kubeNamespace !== undefined
-        ? { context: seams.kubeContext ?? "", namespace: seams.kubeNamespace ?? "" }
-        : resolveKubeContext();
-}
-/**
- * Run the hook's Bash-prefix enrichment over a loaded event and rebuild
- * the envelope when the enrichment moved the git context.
- */
-export function enrichLoadedEvent(loaded, manifest, seams) {
-    const { event, envelope: baseEnvelope } = loaded;
-    const kube = resolveKubeSeams(seams);
-    const enrichment = resolveBashPrefixEnrichment({
-        event,
-        manifest,
-        cwd: baseEnvelope.runtime.cwd,
-        cwdGitContext: {
-            repo: baseEnvelope.session.repo,
-            branch: baseEnvelope.session.branch,
-            sha: "",
-        },
-        env: seams.env ?? process.env,
-        kubeContext: kube.context,
-        kubeNamespace: kube.namespace,
-        user: baseEnvelope.runtime.user,
-        host: baseEnvelope.runtime.host,
-        now: new Date(baseEnvelope.timestamp),
-    });
-    const envelope = enrichment.git.repo === baseEnvelope.session.repo &&
-        enrichment.git.branch === baseEnvelope.session.branch
-        ? baseEnvelope
-        : buildActionEnvelope(event, {
-            cwd: baseEnvelope.runtime.cwd,
-            git: enrichment.git,
-            user: baseEnvelope.runtime.user,
-            host: baseEnvelope.runtime.host,
-            now: new Date(baseEnvelope.timestamp),
-        });
-    return { envelope, enrichment, kube };
-}
-//# sourceMappingURL=enriched-event.js.map

package/dist/cli/enriched-event.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"enriched-event.js","sourceRoot":"","sources":["../../src/cli/enriched-event.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,uEAAuE;AACvE,2EAA2E;AAC3E,4CAA4C;AAC5C,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,0EAA0E;AAC1E,uEAAuE;AACvE,2EAA2E;AAC3E,wEAAwE;AACxE,qEAAqE;AACrE,4BAA4B;AAE5B,OAAO,EACL,mBAAmB,EACnB,kBAAkB,GAEnB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,2BAA2B,GAE5B,MAAM,sCAAsC,CAAC;AAmB9C;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAsB;IACrD,OAAO,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;QACzE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,aAAa,IAAI,EAAE,EAAE;QAC5E,CAAC,CAAC,kBAAkB,EAAE,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAmB,EACnB,QAAkB,EAClB,KAAsB;IAEtB,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IACjD,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,2BAA2B,CAAC;QAC7C,KAAK;QACL,QAAQ;QACR,GAAG,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG;QAC7B,aAAa,EAAE;YACb,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI;YAC/B,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM;YACnC,GAAG,EAAE,EAAE;SACR;QACD,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;QAC7B,WAAW,EAAE,IAAI,CAAC,OAAO;QACzB,aAAa,EAAE,IAAI,CAAC,SAAS;QAC7B,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI;QAC/B,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI;QAC/B,GAAG,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC;KACtC,CAAC,CAAC;IACH,MAAM,QAAQ,GACZ,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,OAAO,CAAC,IAAI;QACjD,UAAU,CAAC,GAAG,CAAC,MAAM,KAAK,YAAY,CAAC,OAAO,CAAC,MAAM;QACnD,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE;YACzB,GAAG,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG;YAC7B,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI;YAC/B,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI;YAC/B,GAAG,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC;SACtC,CAAC,CAAC;IACT,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACxC,CAAC"}

package/dist/cli/event-input.d.ts

@@ -1,28 +0,0 @@
-import { type ActionEnvelope, type GitRepoContext, type ToolEvent } from "../runtime/index.js";
-/** Injectable seams so callers (and tests) can make resolution deterministic. */
-export interface EventInputSeams {
-    /** Override the envelope timestamp. */
-    now?: Date;
-    /** Override the resolved host name. */
-    host?: string;
-    /** Override the resolved OS user. */
-    user?: string;
-    /** Override git-context resolution. */
-    resolveGit?: (cwd: string) => GitRepoContext;
-    /** Override the cwd fallback used when the event omits `cwd`. */
-    cwdFallback?: string;
-}
-export interface LoadedEvent {
-    event: ToolEvent;
-    envelope: ActionEnvelope;
-}
-/**
- * Read a tool-event JSON file and build its Action Envelope.
- *
- * Throws `HarnessExitError(EX_NOINPUT)` when the file is missing, is not
- * valid JSON, or does not decode to a JSON object. A well-formed but
- * sparse event (e.g. `{}`) is accepted: the envelope builder fills
- * absent fields with empty values rather than throwing. `verb` only
- * prefixes the error messages so the operator sees which command failed.
- */
-export declare function loadEventEnvelope(eventPath: string, seams?: EventInputSeams, verb?: string): LoadedEvent;