@lannguyensi/harness 0.64.0 → 1.0.0

package/dist/cli/pack/hook-solution-acceptance.js

@@ -1,530 +0,0 @@
-// `harness pack hook solution-acceptance` — PreToolUse completion-gate for
-// the `solution-acceptance` policy pack.
-//
-// Receives Claude Code's PreToolUse event JSON on stdin and emits a
-// `{ decision: "block" }` envelope when the agent is about to FINISH a task
-// (agent-tasks completion verb, or a `git push` / `gh pr merge` bash
-// command) without a READY solution-acceptance verdict at the current git
-// HEAD.
-//
-// The verdict id is the active-claim task id (the same `active-claim` file
-// `harness approve understanding` consumes). For solo / non-agent-tasks
-// sessions that never call `task_start`, the `SOLUTION_VERDICT_ID` env knob
-// supplies the id instead; it is consulted only when no active claim is
-// present, so a claimed session's id stays authoritative (an env var cannot
-// redirect a claimed task's verdict). With neither source the gate fails
-// CLOSED — a sessionId fallback would reopen the wrong-scope bug class
-// understanding-gate already fixed.
-//
-// Failure mode: any error in load / parse / HEAD-resolution / verdict-read
-// resolves to BLOCK (branch-protection's fail-closed posture, not
-// understanding-gate's fail-open). The gate's whole job is to prevent
-// completion without earned acceptance, so a bug that silently allowed a
-// finish through would defeat the purpose. The block envelope always names
-// `solution_evaluate` as the recovery path so the operator is never wedged;
-// `harness pause` (honored first) is the operator's hard override.
-import * as path from "node:path";
-import { readActiveClaim, } from "../../policy-packs/builtin/understanding-before-execution-runtime.js";
-import { DEFAULT_PUSH_BASH_RE, evaluateGate, PACK_NAME, readVerdictDetailed, resolveExplicitVerdictId, resolveProtectedCompletionTools, sanitizeVerdictId, VERDICT_ID_ENV, verdictDir as resolveVerdictDir, } from "../../policy-packs/builtin/solution-acceptance-runtime.js";
-import { RECONNECT_RESULT_TOOL, RECONNECT_STATUS_TOOL, renderReconnectDenyParagraph, } from "../../policy-packs/builtin/solution-acceptance-reconnect.js";
-import { resolveGeneratedDir } from "../../io/generated-dir.js";
-import { checkFileLock } from "../../io/lock.js";
-import { resolveGitContext } from "../../runtime/git-context.js";
-import { renderAgentFacing } from "../../runtime/agent-facing.js";
-import { canonicalAgentTasksVerb, DEFAULT_PROTECTED_COMPLETION_TOOLS, } from "../../runtime/task-providers/agent-tasks.js";
-import { checkHookPause, loadManifestOrInjected, parseConfigUx, readStdin, runGateWithStdinRefusal, stdoutBlockRefusal, } from "./hook-bootstrap.js";
-function bashCommandOf(toolInput) {
-    if (typeof toolInput !== "object" || toolInput === null)
-        return "";
-    const cmd = toolInput["command"];
-    return typeof cmd === "string" ? cmd : "";
-}
-/**
- * Decide whether this PreToolUse call is a gated completion action. Returns
- * the human label of the action when gated, or null when this call should
- * pass through (the hook matches all Bash, but only push/merge bash commands
- * are completion actions).
- */
-function completionActionLabel(toolName, toolInput, protectedVerbs) {
-    const agentTasksVerb = canonicalAgentTasksVerb(toolName, protectedVerbs);
-    if (agentTasksVerb !== null) {
-        return `agent-tasks ${agentTasksVerb}`;
-    }
-    if (toolName === "Bash") {
-        const command = bashCommandOf(toolInput);
-        if (command && DEFAULT_PUSH_BASH_RE.test(command))
-            return "git push / gh pr merge";
-        return null;
-    }
-    return null;
-}
-/**
- * Suffix of the attempt-lock ANCHOR file grounding-mcp writes beside the
- * verdict marker, mirroring its own `LOCK_ANCHOR_SUFFIX`
- * (grounding-mcp-v0.12.0 packages/grounding-mcp/src/solution-attempt-log.ts:209)
- * and README table row "Attempt lock anchor" (`<verdict dir>/<id>.attempt-lock`,
- * mode `0600`; the lock itself is the `<id>.attempt-lock.lock` directory
- * `proper-lockfile` manages beside it, packages/grounding-mcp/README.md:42
- * at that tag).
- */
-const ATTEMPT_LOCK_ANCHOR_SUFFIX = ".attempt-lock";
-/**
- * Staleness window this hook applies when READING the attempt-lock anchor:
- * the producer's own DOCUMENTED default, `DEFAULT_ATTEMPT_LOCK_STALE_MS`
- * (grounding-mcp-v0.12.0 packages/grounding-mcp/src/solution-attempt-log.ts:102,
- * `= 30_000`), the `staleMs` `acquireAttemptLock` passes straight through
- * to `lockfile.lock(anchor, { retries: 0, realpath: false, stale:
- * options.staleMs, ... })` (same file, lines 472-475) on every DEFAULT
- * acquisition, pinned here as a literal rather than imported (this package
- * has no dependency on grounding-mcp's internals). This hook applies the
- * producer's documented default window pinned to grounding-mcp-v0.12.0; it
- * diverges from what the producer actually enforces for a given attempt
- * if the producer's own default changes in a later release, or if a
- * caller of `acquireAttemptLock` overrides `staleMs` away from that
- * default (the producer's own option is caller-settable, same file),
- * since neither is observable from this side of the lock: an operational
- * pin, not a mathematical guarantee, that needs re-checking on every
- * grounding-mcp bump this pack's producer floor moves past.
- */
-export const ATTEMPT_LOCK_STALE_MS = 30_000;
-/**
- * Every state the null-verdict note renders a line for, as data. The note
- * is a total function over this list (`coordinateOf` below maps each
- * `NullVerdictInfo` onto exactly one coordinate, and the compiler rejects a
- * member without a line), and
- * `tests/cli/pack-hook-solution-acceptance.test.ts` iterates it to assert
- * the state table has a row per member. A state added to the classifier
- * without a row therefore fails the build or the suite, instead of
- * shipping an unpinned line to an agent.
- */
-export const NULL_VERDICT_NOTE_STATES = [
-    "unusable-id",
-    "never-evaluated",
-    "marker-symlink",
-    "marker-not-regular",
-    "marker-unreadable",
-    "marker-invalid-record",
-    "live-attempt",
-];
-/**
- * The two states whose line carries no liveness clause: the unusable-id
- * line (nothing was read, so no liveness exists to name) and the
- * live-attempt line (its liveness is `"live"` by definition). Every other
- * state's line names what the lock check said, so it exists once per
- * clause.
- */
-export const NULL_VERDICT_CLAUSE_FREE_STATES = ["unusable-id", "live-attempt"];
-function isClauseFreeNoteState(state) {
-    return NULL_VERDICT_CLAUSE_FREE_STATES.includes(state);
-}
-function attemptLockAnchorPath(dir, id) {
-    return path.join(dir, `${sanitizeVerdictId(id)}${ATTEMPT_LOCK_ANCHOR_SUFFIX}`);
-}
-/**
- * Read-only, three-valued liveness check: does `id`'s attempt-lock
- * anchor's `.lock` directory exist and read as NOT stale under
- * `ATTEMPT_LOCK_STALE_MS`? Routed through `src/io/lock.ts`'s
- * `checkFileLock` (the designated read-only wrapper around
- * `proper-lockfile`'s own `checkSync`, the SAME library the producer
- * acquires the lock with), so the stale/live split is decided by the
- * producer's own mechanism, not a reimplementation of its mtime
- * arithmetic. `realpath: false` mirrors the producer's own
- * `acquireAttemptLock` call (cited above): with the library default
- * `realpath: true`, checking an anchor that was never created (the
- * anchor is created lazily, on first acquisition, the common "never
- * evaluated" case) would `realpath` the anchor FILE itself first and
- * throw `ENOENT`, instead of answering the ordinary "not locked" case.
- * Never acquires or mutates the lock; a check-only read has no cleanup
- * to restore.
- *
- * PRECONDITION: `id` is already known usable. `attemptLockAnchorPath`'s
- * only throw source is `sanitizeVerdictId`, which the caller has already
- * passed (`readVerdictDetailed` answered something other than
- * `invalid-id` for the same id, through the same function), so this has no
- * catch of its own: an unreachable arm cannot be tested and cannot be
- * killed by a mutant, which is worse than no arm at all (review finding,
- * harness/799de976, round 6).
- */
-function readAttemptLockLiveness(dir, id) {
-    return checkFileLock(attemptLockAnchorPath(dir, id), { staleMs: ATTEMPT_LOCK_STALE_MS });
-}
-/**
- * Classify WHY `gate.verdict === null` for `id`: whether the id is usable
- * at all, and if it is, which of the three readings applies, AND the raw
- * liveness result the classification rests
- * on, so the deny text can name the reading it detected without ever
- * collapsing "liveness could not be determined" into "confirmed not
- * live" (see docs/policy-packs/solution-acceptance.md, "Reading the
- * attempt-lock anchor to distinguish the three readings", for the
- * record). Live-attempt takes priority over the marker-presence check: a
- * live attempt can coexist with a stale or corrupt marker left by an
- * earlier run for the same id, and "reconnect to the live attempt" is
- * the actionable reading in that overlap.
- */
-function classifyNullVerdictReading(dir, id, read) {
-    // The marker is NOT looked at again here. `read` is the same observation
-    // `evaluateGate` decided on, passed in: a second look can disagree with
-    // the first (a background attempt finishing between the two), and a note
-    // rendered from the later one would describe a rejection the gate never
-    // made (review finding, harness/799de976, round 6). Only the LOCK, a
-    // different subject with its own clause, is read here.
-    if (read.kind === "invalid-id")
-        return { kind: "unusable-id" };
-    const liveness = readAttemptLockLiveness(dir, id);
-    if (liveness === "live")
-        return { kind: "reading", reading: "live-attempt" };
-    if (read.kind === "missing")
-        return { kind: "reading", reading: "never-evaluated", liveness };
-    // `read.kind` is narrowed to the rejected kinds by the parameter type: a
-    // read that produced a verdict never reaches the classifier, so there is
-    // no arm here that could name a valid record as invalid.
-    const markerKind = read.kind;
-    return { kind: "reading", reading: "unreadable-marker", liveness, markerKind };
-}
-/** The one coordinate a classification renders at, as a total mapping. */
-function coordinateOf(info) {
-    if (info.kind === "unusable-id")
-        return { state: "unusable-id" };
-    switch (info.reading) {
-        case "live-attempt":
-            return { state: "live-attempt" };
-        case "never-evaluated":
-            return { state: "never-evaluated", liveness: info.liveness };
-        case "unreadable-marker":
-            switch (info.markerKind) {
-                case "symlink":
-                    return { state: "marker-symlink", liveness: info.liveness };
-                case "not-regular":
-                    return { state: "marker-not-regular", liveness: info.liveness };
-                case "unreadable":
-                    return { state: "marker-unreadable", liveness: info.liveness };
-                case "invalid-record":
-                    return { state: "marker-invalid-record", liveness: info.liveness };
-            }
-    }
-}
-/** The liveness clause, which names what the lock check actually said. */
-const UNDETERMINED_LIVENESS_CLAUSE = "liveness could not be determined";
-const NOT_LIVE_CLAUSE = "no attempt reads as currently live";
-/**
- * One line per note state, as a total `Record` keyed by
- * `NULL_VERDICT_NOTE_STATES`: a state added to the list without a line
- * here fails the build, which is what makes the list a checklist rather
- * than a convention.
- *
- * Invariant across every line: it states only what the gate established,
- * and never a cause that was not observed. The liveness clause names what
- * the lock check said ("no attempt reads as currently live" vs "liveness
- * could not be determined") instead of always asserting absence, and the
- * marker lines come from the gate's OWN read of the marker, never from a
- * second look at the path. `tests/cli/pack-hook-solution-acceptance.test.ts`
- * pins one exact expected line per state and asserts every member of the
- * list has a row, so a future state whose line would overstate fails there
- * rather than reaching an agent.
- */
-export const NULL_VERDICT_NOTE_RENDERERS = {
-    // Nothing was read here and no liveness was established, so the note
-    // claims neither: it reports the one fact the classifier settled, names
-    // the only surface this id can have come from, and names the verb that
-    // clears it. An explicit SOLUTION_VERDICT_ID cannot reach this state:
-    // `resolveExplicitVerdictId` validates through the same
-    // `sanitizeVerdictId` and answers null for anything it rejects.
-    "unusable-id": (taskId) => `The claimed id ${JSON.stringify(taskId)} is not a usable verdict id: no verdict marker path and no attempt-lock path can be derived from it, so neither was read. Release the active claim carrying it (mcp__agent-tasks__task_abandon, or have the operator clear harness.generated/active-claim), claim the real task, then run solution_evaluate for it.`,
-    // Only "the marker read found nothing" is established (the shared reader
-    // folds every lstat failure into `missing`), plus whatever the lock check
-    // said at a later moment. Neither clause names a cause: earlier versions
-    // guessed one ("the verdict directory could not be read"), then a
-    // narrower disjunction of two, then "solution_evaluate has not been
-    // called for this id", and each guess was falsified by a state that
-    // reached this branch without it: a marker recorded and then deleted, an
-    // attempt finishing between the marker read and the lock read, or an
-    // lstat failure of some other kind.
-    "never-evaluated": (taskId, clause) => clause === UNDETERMINED_LIVENESS_CLAUSE
-        ? `No verdict marker was found for "${taskId}" and liveness could not be determined: run solution_evaluate for this id.`
-        : `No verdict marker was found for "${taskId}"; ${clause}: run solution_evaluate for this id.`,
-    // One line per rejection kind, each naming exactly what the gate's own
-    // read established. A hand-written disjunction over the kinds was the
-    // round-6 finding: it read as a claim about the path as it is NOW, while
-    // the kinds come from the read the gate decided on.
-    "marker-symlink": (taskId, clause) => `The verdict marker path for "${taskId}" is a symlink, which this gate refuses to follow; ${clause}: replace it with a marker recorded by solution_evaluate.`,
-    "marker-not-regular": (taskId, clause) => `The verdict marker path for "${taskId}" is not a regular file; ${clause}: replace it with a marker recorded by solution_evaluate.`,
-    "marker-unreadable": (taskId, clause) => `The verdict marker for "${taskId}" could not be read; ${clause}: re-run solution_evaluate to record a fresh one.`,
-    "marker-invalid-record": (taskId, clause) => `The verdict marker for "${taskId}" was read but is not a valid verdict record; ${clause}: re-run solution_evaluate to record a fresh one.`,
-    "live-attempt": (taskId) => `A solution_evaluate attempt for "${taskId}" is still live: its attempt-lock anchor is held.`,
-};
-/**
- * Every reachable coordinate, derived from `NULL_VERDICT_NOTE_STATES`: one
- * per clause-free state, one per liveness clause for every other state. The
- * state table in `tests/cli/pack-hook-solution-acceptance.test.ts` requires
- * a row per member and derives its "no other line appears" set from it, so
- * a state added to the list joins both without anyone extending a list.
- */
-export const NULL_VERDICT_NOTE_COORDINATES = NULL_VERDICT_NOTE_STATES.flatMap((state) => isClauseFreeNoteState(state)
-    ? [{ state }]
-    : [
-        { state, liveness: "not-live" },
-        { state, liveness: "unknown" },
-    ]);
-/**
- * The exact line a coordinate renders for `taskId`. The one place a state
- * and a liveness become a line: the hook renders through it, and the state
- * table derives its "no other line appears" set and checks each row's
- * declared coordinate against it. Total over reachable coordinates only: a
- * pair the type excludes (`"live"` beside a clause-carrying state, any
- * liveness beside a clause-free one) throws instead of rendering a line
- * that would misstate what was observed, for a caller that bypasses the
- * type.
- */
-export function renderNullVerdictNote(coordinate, taskId) {
-    const liveness = "liveness" in coordinate ? coordinate.liveness : undefined;
-    if (isClauseFreeNoteState(coordinate.state)) {
-        if (liveness !== undefined) {
-            throw new Error(`null-verdict note state ${coordinate.state} carries no liveness clause, got ${String(liveness)}`);
-        }
-        return NULL_VERDICT_NOTE_RENDERERS[coordinate.state](taskId, "");
-    }
-    if (liveness !== "not-live" && liveness !== "unknown") {
-        throw new Error(`null-verdict note state ${coordinate.state} renders only for liveness not-live or unknown, got ${String(liveness)}`);
-    }
-    const clause = liveness === "unknown" ? UNDETERMINED_LIVENESS_CLAUSE : NOT_LIVE_CLAUSE;
-    return NULL_VERDICT_NOTE_RENDERERS[coordinate.state](taskId, clause);
-}
-function nullVerdictReadingNote(taskId, info) {
-    return renderNullVerdictNote(coordinateOf(info), taskId);
-}
-/**
- * Reconnect-vs-retry guidance appended to the default deny text only for
- * reading (2), "an attempt is live" (`classifyNullVerdictReading` above
- * returned `reading: "live-attempt"`): the paragraph is rendered from
- * `solution-acceptance-reconnect.ts`, the SAME fact source the pack's
- * `instructions.md` "Reconnecting vs. retrying" section renders from, so
- * the two surfaces cannot silently drift apart. Readings (1)
- * (never-evaluated) and (3) (unreadable-marker) instead get their own
- * short `nullVerdictReadingNote` line, with no reconnect paragraph: there
- * is no live attempt to reconnect to. See
- * docs/policy-packs/solution-acceptance.md, "Reading the attempt-lock
- * anchor to distinguish the three readings", for the decision record.
- */
-function reconnectGuidanceFor(taskId, info) {
-    if (info === null || info.kind !== "reading" || info.reading !== "live-attempt")
-        return "";
-    return renderReconnectDenyParagraph(taskId);
-}
-/**
- * Converge step 2, as a function of the reading: for the live-attempt
- * reading a call instruction naming `solution_evaluate` is the wrong next
- * action (a call JOINS the live attempt rather than evaluating; only
- * `forceNewAttempt` is refused while the lock holds, see
- * `RECONNECT_FACT_JOIN_NOT_RETRY`), so that reading gets its own step 2
- * naming the poll tools instead. The other two null-verdict readings
- * (never-evaluated, unreadable-marker) and every non-null-verdict deny
- * (drift, not-ready, ...) keep the original step naming `solution_evaluate`
- * unqualified, since a call there genuinely starts the evaluation.
- */
-function convergeStep2For(taskId, nullVerdict) {
-    if (nullVerdict !== null && nullVerdict.kind === "reading" && nullVerdict.reading === "live-attempt") {
-        return (`  2. An attempt for "${taskId}" is already live (see the reconnect paragraph below): ` +
-            `poll \`${RECONNECT_STATUS_TOOL}\` / \`${RECONNECT_RESULT_TOOL}\` for the SAME id until it resolves, ` +
-            `instead of starting a new evaluation. A clean verdict at the current HEAD unblocks this tool; ` +
-            `a not-ready or failing verdict lists the blockers to fix (then back to step 1).\n`);
-    }
-    return (`  2. mcp__grounding-mcp__solution_evaluate({ id: "${taskId}" }): runs \`preflight run --json\` ` +
-        `(lint/typecheck/test/audit/secret) and records a HEAD-pinned verdict. A clean run at the current ` +
-        `HEAD unblocks this tool; a failing run lists the blockers to fix (then back to step 1).\n`);
-}
-function blockJson(actionLabel, toolName, taskId, detail, ux, sessionId, nullVerdict = null) {
-    let reasonText;
-    if (ux) {
-        reasonText = renderAgentFacing(ux, {
-            TOOL_NAME: toolName,
-            SESSION_ID: sessionId,
-        });
-    }
-    else {
-        reasonText =
-            `solution-acceptance: refusing ${actionLabel} (${toolName}). ${detail}\n` +
-                (nullVerdict !== null ? `${nullVerdictReadingNote(taskId, nullVerdict)}\n` : "") +
-                `Completion must be EARNED from a real preflight run at the CURRENT HEAD, not claimed.\n` +
-                `Converge in this order, all at one commit:\n` +
-                `  1. If the working tree is dirty, COMMIT first. The verdict is pinned to the HEAD it was evaluated at, so any commit you make afterward makes it stale; commit the change before evaluating so the verdict pins to the final HEAD.\n` +
-                convergeStep2For(taskId, nullVerdict) +
-                `  3. For \`git push\` / \`gh pr merge\`: the separate preflight-before-push gate is satisfied by a preflight at the current HEAD (its \`at_head\` rule), so refresh it at this same commit with \`harness preflight\` before retrying. Satisfy both push-gates at one HEAD.\n` +
-                reconnectGuidanceFor(taskId, nullVerdict) +
-                `\n` +
-                `Operator override: \`harness pause\` (yields this and every other gate).`;
-    }
-    return JSON.stringify({
-        decision: "block",
-        reason: reasonText,
-        hookSpecificOutput: {
-            hookEventName: "PreToolUse",
-            permissionDecision: "deny",
-            permissionDecisionReason: reasonText,
-        },
-    });
-}
-async function runPackHookSolutionAcceptanceCliInner(opts = {}) {
-    const stdin = opts.stdin ?? process.stdin;
-    const stdout = opts.stdout ?? process.stdout;
-    const stderr = opts.stderr ?? process.stderr;
-    const note = (msg) => {
-        stderr.write(`harness pack hook solution-acceptance: ${msg}\n`);
-    };
-    const env = opts.env ?? process.env;
-    const raw = await readStdin(stdin);
-    let event = {};
-    try {
-        event = JSON.parse(raw.trim() || "{}");
-    }
-    catch {
-        /* event stays {} */
-    }
-    // Operator pause yields even this gate.
-    if (checkHookPause(PACK_NAME, stderr, opts).paused) {
-        const diagnostic = "harness paused; solution-acceptance allowing without evaluating.";
-        return { exitCode: 0, blocked: false, diagnostic };
-    }
-    const sessionId = (typeof event.session_id === "string" ? event.session_id : undefined) ??
-        env["CLAUDE_CODE_SESSION_ID"] ??
-        env["CLAUDE_SESSION_ID"] ??
-        "";
-    const toolName = typeof event.tool_name === "string" ? event.tool_name : "(unknown)";
-    const cwd = typeof opts.cwd === "string" && opts.cwd.length > 0
-        ? opts.cwd
-        : typeof event.cwd === "string" && event.cwd.length > 0
-            ? event.cwd
-            : process.cwd();
-    // Load manifest to resolve the pack config. A load failure forces BLOCK
-    // only if this turns out to be a completion action; resolve it first.
-    // `manifestPath` (the resolved manifest base) feeds the harness.generated/
-    // lookup below — it is populated whether the operator passed --config or
-    // the default (~/.harness/harness.yaml) was resolved, so the bare
-    // production hook command still resolves the active-claim id.
-    let manifest;
-    let manifestPath;
-    try {
-        ({ manifest, manifestPath } = loadManifestOrInjected(opts, opts.manifest));
-    }
-    catch (err) {
-        // We cannot tell if this is a gated action without the config, but a
-        // manifest load failure should not block unrelated tool calls. Only
-        // the completion verbs / push commands are ever gated, so classify
-        // by tool name with the DEFAULT verb set as a failsafe.
-        const label = completionActionLabel(toolName, event.tool_input, DEFAULT_PROTECTED_COMPLETION_TOOLS);
-        if (label === null) {
-            const diagnostic = `manifest load failed (${err.message}) but ${toolName} is not a completion action; allowing`;
-            note(diagnostic);
-            return { exitCode: 0, blocked: false, diagnostic };
-        }
-        const reason = `manifest load failed (${err.message}); refusing ${label} on failsafe`;
-        const diagnostic = `BLOCK — ${reason}`;
-        note(diagnostic);
-        stdout.write(`${blockJson(label, toolName, "<unknown>", reason, undefined, sessionId)}\n`);
-        return { exitCode: 0, blocked: true, diagnostic };
-    }
-    const pack = manifest.policy_packs.find((p) => p.name === PACK_NAME);
-    if (!pack) {
-        const diagnostic = `pack "${PACK_NAME}" not declared in manifest, allowing`;
-        note(diagnostic);
-        return { exitCode: 0, blocked: false, diagnostic };
-    }
-    if (!pack.enabled) {
-        const diagnostic = `pack "${PACK_NAME}" is enabled:false, allowing`;
-        note(diagnostic);
-        return { exitCode: 0, blocked: false, diagnostic };
-    }
-    const protectedVerbs = resolveProtectedCompletionTools(pack);
-    const actionLabel = completionActionLabel(toolName, event.tool_input, protectedVerbs);
-    if (actionLabel === null) {
-        const diagnostic = `${toolName} is not a gated completion action; allowing`;
-        note(diagnostic);
-        return { exitCode: 0, blocked: false, diagnostic };
-    }
-    const configUx = parseConfigUx(pack.config["ux"], stderr, "harness pack hook solution-acceptance");
-    // Resolve the verdict id. Precedence: the agent-tasks active-claim task id
-    // first (authoritative for claimed sessions — an env var must not redirect a
-    // claimed task's verdict), then the SOLUTION_VERDICT_ID env knob for solo /
-    // non-agent-tasks sessions, then fail CLOSED. A sessionId fallback is
-    // intentionally NOT a source (it would reopen the wrong-scope bug class).
-    const generatedDir = opts.generatedDir ??
-        (manifestPath !== undefined
-            ? resolveGeneratedDir({
-                ...(opts.homeDir !== undefined ? { homeDir: opts.homeDir } : {}),
-                manifestPath,
-            })
-            : undefined);
-    const activeClaim = opts.activeClaim !== undefined
-        ? opts.activeClaim
-        : generatedDir !== undefined
-            ? readActiveClaim(generatedDir)
-            : null;
-    const taskId = activeClaim ?? resolveExplicitVerdictId(env);
-    if (!taskId) {
-        const detail = opts.activeClaim === undefined && generatedDir === undefined
-            ? " (could not resolve harness.generated/; pass --config)"
-            : "";
-        const reason = `no verdict id: no active-claim task id recorded${detail} and ${VERDICT_ID_ENV} is unset or invalid.\n` +
-            `\n` +
-            `Converge one of two ways:\n` +
-            `\n` +
-            `1. Agent-tasks workflow: Call mcp__agent-tasks__task_start first to claim the task (the verdict id is the active task). For post-done work (Release, deploy, etc.), create a separate task and call task_start for it.\n` +
-            `\n` +
-            `2. Solo / non-agent-tasks session: ${VERDICT_ID_ENV} must be set in the environment at Session-Start time (Operator option; it is read at Hook startup, not agent-sideeffect-settable from within the session).`;
-        const diagnostic = `BLOCK — ${reason}`;
-        note(diagnostic);
-        stdout.write(`${blockJson(actionLabel, toolName, "<no-verdict-id>", reason, configUx, sessionId)}\n`);
-        return { exitCode: 0, blocked: true, diagnostic };
-    }
-    // The verdict DIR still resolves SOLUTION_VERDICT_DIR from process.env (the
-    // `env` seam above covers the verdict id + sessionId, not the dir); in
-    // production both see the same process.env, and tests inject opts.verdictDir.
-    const dir = opts.verdictDir ?? resolveVerdictDir();
-    const currentHead = resolveGitContext(cwd).sha || null;
-    // ONE observation of the marker, shared by the gate decision below and,
-    // when it denies, by the deny text's own classification: the text must
-    // describe the read the decision rests on, not a later, possibly
-    // different state of the same path (harness/799de976, round 6).
-    const read = readVerdictDetailed(dir, taskId);
-    const verdict = read.kind === "ok" ? read.verdict : null;
-    // generatedDir (harness's own .generated/ dir, NOT the verdict dir) holds
-    // the shared approval-signing key evaluateGate needs to verify the
-    // verdict's HMAC signature (harness/c7c3f606); undefined fails closed
-    // inside evaluateGate with its own distinct reason.
-    const gate = evaluateGate(verdict, currentHead, taskId, generatedDir);
-    if (gate.allowed) {
-        const diagnostic = `${gate.reason}; allowing ${actionLabel}`;
-        note(diagnostic);
-        return { exitCode: 0, blocked: false, diagnostic };
-    }
-    // Distinct operator-facing audit tag when the gate blocked SPECIFICALLY
-    // because the verdict was forged/unsigned or identity-mismatched
-    // (GateResult.forged, harness/c7c3f606), not the routine "no verdict" /
-    // "not ready" / "stale" cases — mirrors the `ackEcho` audit-echo pattern
-    // in hook-branch-protection.ts (a short, greppable tag appended only to
-    // the STDERR diagnostic), NOT that same hook's `markerForgedNote`: that
-    // one folds its forged-marker wording into the AGENT-facing block reason
-    // too (`why` there feeds both `note()` and `blockJson`). This tag stays
-    // out of the agent-facing reason on purpose — `gate.reason` already
-    // narrates the forgery in prose for the agent, so there is nothing this
-    // tag would add there; it exists so an operator scanning hook logs for
-    // active forgery attempts does not have to pattern-match the prose.
-    const forgedTag = gate.forged ? " [audit: forged/unsigned verdict marker rejected]" : "";
-    const diagnostic = `BLOCK — ${gate.reason}${forgedTag}`;
-    note(diagnostic);
-    // Classify only a denial whose read produced no verdict. A deny with a
-    // verdict on record (`read.kind === "ok"`) gets no null-verdict note at all
-    // rather than a line describing a rejection the gate never made.
-    const nullVerdict = read.kind !== "ok" ? classifyNullVerdictReading(dir, taskId, read) : null;
-    stdout.write(`${blockJson(actionLabel, toolName, taskId, gate.reason, configUx, sessionId, nullVerdict)}\n`);
-    return { exitCode: 0, blocked: true, diagnostic };
-}
-/**
- * `harness pack hook solution-acceptance`. A stdin read that times out is refused here
- * instead of being handed to the gate as an empty or truncated event it would
- * treat as malformed input (task 7dfdcaaf). The operator pause still wins;
- * every other input runs the gate unchanged.
- */
-export function runPackHookSolutionAcceptanceCli(opts = {}) {
-    return runGateWithStdinRefusal(opts, (stderr) => checkHookPause(PACK_NAME, stderr, opts).paused, stdoutBlockRefusal("solution-acceptance"), runPackHookSolutionAcceptanceCliInner);
-}
-//# sourceMappingURL=hook-solution-acceptance.js.map

package/dist/cli/pack/hook-solution-acceptance.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hook-solution-acceptance.js","sourceRoot":"","sources":["../../../src/cli/pack/hook-solution-acceptance.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,yCAAyC;AACzC,EAAE;AACF,oEAAoE;AACpE,4EAA4E;AAC5E,qEAAqE;AACrE,0EAA0E;AAC1E,QAAQ;AACR,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,4EAA4E;AAC5E,wEAAwE;AACxE,4EAA4E;AAC5E,yEAAyE;AACzE,uEAAuE;AACvE,oCAAoC;AACpC,EAAE;AACF,2EAA2E;AAC3E,kEAAkE;AAClE,sEAAsE;AACtE,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,mEAAmE;AAEnE,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,eAAe,GAChB,MAAM,sEAAsE,CAAC;AAC9E,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,SAAS,EACT,mBAAmB,EACnB,wBAAwB,EACxB,+BAA+B,EAC/B,iBAAiB,EACjB,cAAc,EACd,UAAU,IAAI,iBAAiB,GAEhC,MAAM,2DAA2D,CAAC;AACnE,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,6DAA6D,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAwB,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EACL,uBAAuB,EACvB,kCAAkC,GACnC,MAAM,6CAA6C,CAAC;AAGrD,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,aAAa,EACb,SAAS,EACT,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAoC7B,SAAS,aAAa,CAAC,SAAkB;IACvC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACnE,MAAM,GAAG,GAAI,SAAqC,CAAC,SAAS,CAAC,CAAC;IAC9D,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAC5B,QAAgB,EAChB,SAAkB,EAClB,cAAiC;IAEjC,MAAM,cAAc,GAAG,uBAAuB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACzE,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,eAAe,cAAc,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,OAAO,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,wBAAwB,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAGD;;;;;;;;GAQG;AACH,MAAM,0BAA0B,GAAG,eAAe,CAAC;AAEnD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAyB5C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,aAAa;IACb,iBAAiB;IACjB,gBAAgB;IAChB,oBAAoB;IACpB,mBAAmB;IACnB,uBAAuB;IACvB,cAAc;CACN,CAAC;AAIX;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,aAAa,EAAE,cAAc,CAAU,CAAC;AAKxF,SAAS,qBAAqB,CAAC,KAA2B;IACxD,OAAQ,+BAAqD,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAChF,CAAC;AA2DD,SAAS,qBAAqB,CAAC,GAAW,EAAE,EAAU;IACpD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB,CAAC,EAAE,CAAC,GAAG,0BAA0B,EAAE,CAAC,CAAC;AACjF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAS,uBAAuB,CAAC,GAAW,EAAE,EAAU;IACtD,OAAO,aAAa,CAAC,qBAAqB,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,0BAA0B,CACjC,GAAW,EACX,EAAU,EACV,IAAgC;IAEhC,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,qEAAqE;IACrE,uDAAuD;IACvD,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAC/D,MAAM,QAAQ,GAAG,uBAAuB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;IAC7E,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC;IAC9F,yEAAyE;IACzE,yEAAyE;IACzE,yDAAyD;IACzD,MAAM,UAAU,GAAuB,IAAI,CAAC,IAAI,CAAC;IACjD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AACjF,CAAC;AAED,0EAA0E;AAC1E,SAAS,YAAY,CAAC,IAAqB;IACzC,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IACjE,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,cAAc;YACjB,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QACnC,KAAK,iBAAiB;YACpB,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/D,KAAK,mBAAmB;YACtB,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;gBACxB,KAAK,SAAS;oBACZ,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC9D,KAAK,aAAa;oBAChB,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClE,KAAK,YAAY;oBACf,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACjE,KAAK,gBAAgB;oBACnB,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvE,CAAC;IACL,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,4BAA4B,GAAG,kCAAkC,CAAC;AACxE,MAAM,eAAe,GAAG,oCAAoC,CAAC;AAE7D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAGpC;IACF,qEAAqE;IACrE,wEAAwE;IACxE,uEAAuE;IACvE,sEAAsE;IACtE,wDAAwD;IACxD,gEAAgE;IAChE,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CACxB,kBAAkB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,qTAAqT;IAC/V,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,kEAAkE;IAClE,oEAAoE;IACpE,oEAAoE;IACpE,yEAAyE;IACzE,qEAAqE;IACrE,oCAAoC;IACpC,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CACpC,MAAM,KAAK,4BAA4B;QACrC,CAAC,CAAC,oCAAoC,MAAM,4EAA4E;QACxH,CAAC,CAAC,oCAAoC,MAAM,MAAM,MAAM,sCAAsC;IAClG,uEAAuE;IACvE,sEAAsE;IACtE,yEAAyE;IACzE,oDAAoD;IACpD,gBAAgB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CACnC,gCAAgC,MAAM,sDAAsD,MAAM,2DAA2D;IAC/J,oBAAoB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CACvC,gCAAgC,MAAM,4BAA4B,MAAM,2DAA2D;IACrI,mBAAmB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CACtC,2BAA2B,MAAM,wBAAwB,MAAM,mDAAmD;IACpH,uBAAuB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAC1C,2BAA2B,MAAM,iDAAiD,MAAM,mDAAmD;IAC7I,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,CACzB,oCAAoC,MAAM,mDAAmD;CAChG,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,6BAA6B,GACxC,wBAAwB,CAAC,OAAO,CAAC,CAAC,KAAK,EAA+B,EAAE,CACtE,qBAAqB,CAAC,KAAK,CAAC;IAC1B,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;IACb,CAAC,CAAC;QACE,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE;QAC/B,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE;KAC/B,CACN,CAAC;AAEJ;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAqC,EACrC,MAAc;IAEd,MAAM,QAAQ,GAAY,UAAU,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,IAAI,qBAAqB,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,2BAA2B,UAAU,CAAC,KAAK,oCAAoC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAClG,CAAC;QACJ,CAAC;QACD,OAAO,2BAA2B,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,2BAA2B,UAAU,CAAC,KAAK,uDAAuD,MAAM,CAAC,QAAQ,CAAC,EAAE,CACrH,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,eAAe,CAAC;IACvF,OAAO,2BAA2B,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAc,EAAE,IAAqB;IACnE,OAAO,qBAAqB,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,oBAAoB,CAAC,MAAc,EAAE,IAA4B;IACxE,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,cAAc;QAAE,OAAO,EAAE,CAAC;IAC3F,OAAO,4BAA4B,CAAC,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,gBAAgB,CAAC,MAAc,EAAE,WAAmC;IAC3E,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,OAAO,KAAK,cAAc,EAAE,CAAC;QACrG,OAAO,CACL,wBAAwB,MAAM,yDAAyD;YACvF,UAAU,qBAAqB,UAAU,qBAAqB,wCAAwC;YACtG,gGAAgG;YAChG,mFAAmF,CACpF,CAAC;IACJ,CAAC;IACD,OAAO,CACL,qDAAqD,MAAM,sCAAsC;QACjG,mGAAmG;QACnG,2FAA2F,CAC5F,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAChB,WAAmB,EACnB,QAAgB,EAChB,MAAc,EACd,MAAc,EACd,EAAwB,EACxB,SAAiB,EACjB,cAAsC,IAAI;IAE1C,IAAI,UAAkB,CAAC;IACvB,IAAI,EAAE,EAAE,CAAC;QACP,UAAU,GAAG,iBAAiB,CAAC,EAAE,EAAE;YACjC,SAAS,EAAE,QAAQ;YACnB,UAAU,EAAE,SAAS;SACtB,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,UAAU;YACR,iCAAiC,WAAW,KAAK,QAAQ,MAAM,MAAM,IAAI;gBACzE,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,sBAAsB,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,yFAAyF;gBACzF,8CAA8C;gBAC9C,uOAAuO;gBACvO,gBAAgB,CAAC,MAAM,EAAE,WAAW,CAAC;gBACrC,+QAA+Q;gBAC/Q,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC;gBACzC,IAAI;gBACJ,0EAA0E,CAAC;IAC/E,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,UAAU;QAClB,kBAAkB,EAAE;YAClB,aAAa,EAAE,YAAY;YAC3B,kBAAkB,EAAE,MAAM;YAC1B,wBAAwB,EAAE,UAAU;SACrC;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,qCAAqC,CAClD,OAA0C,EAAE;IAE5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;QACjC,MAAM,CAAC,KAAK,CAAC,0CAA0C,GAAG,IAAI,CAAC,CAAC;IAClE,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAEpC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,KAAK,GAAkB,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,CAAkB,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;IACtB,CAAC;IAED,wCAAwC;IACxC,IAAI,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,kEAAkE,CAAC;QACtF,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,SAAS,GACb,CAAC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,GAAG,CAAC,wBAAwB,CAAC;QAC7B,GAAG,CAAC,mBAAmB,CAAC;QACxB,EAAE,CAAC;IACL,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;IACrF,MAAM,GAAG,GACP,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC,GAAG;QACV,CAAC,CAAC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;YACrD,CAAC,CAAC,KAAK,CAAC,GAAG;YACX,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAEtB,wEAAwE;IACxE,sEAAsE;IACtE,2EAA2E;IAC3E,yEAAyE;IACzE,kEAAkE;IAClE,8DAA8D;IAC9D,IAAI,QAAkB,CAAC;IACvB,IAAI,YAAgC,CAAC;IACrC,IAAI,CAAC;QACH,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,qEAAqE;QACrE,oEAAoE;QACpE,mEAAmE;QACnE,wDAAwD;QACxD,MAAM,KAAK,GAAG,qBAAqB,CACjC,QAAQ,EACR,KAAK,CAAC,UAAU,EAChB,kCAAkC,CACnC,CAAC;QACF,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,UAAU,GAAG,yBAA0B,GAAa,CAAC,OAAO,SAAS,QAAQ,uCAAuC,CAAC;YAC3H,IAAI,CAAC,UAAU,CAAC,CAAC;YACjB,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACrD,CAAC;QACD,MAAM,MAAM,GAAG,yBAA0B,GAAa,CAAC,OAAO,eAAe,KAAK,cAAc,CAAC;QACjG,MAAM,UAAU,GAAG,WAAW,MAAM,EAAE,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjB,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3F,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACrE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,UAAU,GAAG,SAAS,SAAS,sCAAsC,CAAC;QAC5E,IAAI,CAAC,UAAU,CAAC,CAAC;QACjB,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,UAAU,GAAG,SAAS,SAAS,8BAA8B,CAAC;QACpE,IAAI,CAAC,UAAU,CAAC,CAAC;QACjB,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,cAAc,GAAG,+BAA+B,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACtF,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,GAAG,QAAQ,6CAA6C,CAAC;QAC5E,IAAI,CAAC,UAAU,CAAC,CAAC;QACjB,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAC3B,IAAI,CAAC,MAAkC,CAAC,IAAI,CAAC,EAC9C,MAAM,EACN,uCAAuC,CACxC,CAAC;IAEF,2EAA2E;IAC3E,6EAA6E;IAC7E,4EAA4E;IAC5E,sEAAsE;IACtE,0EAA0E;IAC1E,MAAM,YAAY,GAChB,IAAI,CAAC,YAAY;QACjB,CAAC,YAAY,KAAK,SAAS;YACzB,CAAC,CAAC,mBAAmB,CAAC;gBAClB,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,YAAY;aACb,CAAC;YACJ,CAAC,CAAC,SAAS,CAAC,CAAC;IACjB,MAAM,WAAW,GACf,IAAI,CAAC,WAAW,KAAK,SAAS;QAC5B,CAAC,CAAC,IAAI,CAAC,WAAW;QAClB,CAAC,CAAC,YAAY,KAAK,SAAS;YAC1B,CAAC,CAAC,eAAe,CAAC,YAAY,CAAC;YAC/B,CAAC,CAAC,IAAI,CAAC;IACb,MAAM,MAAM,GAAG,WAAW,IAAI,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,MAAM,GACV,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS;YAC1D,CAAC,CAAC,wDAAwD;YAC1D,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,MAAM,GACV,kDAAkD,MAAM,QAAQ,cAAc,yBAAyB;YACvG,IAAI;YACJ,6BAA6B;YAC7B,IAAI;YACJ,0NAA0N;YAC1N,IAAI;YACJ,sCAAsC,cAAc,6JAA6J,CAAC;QACpN,MAAM,UAAU,GAAG,WAAW,MAAM,EAAE,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjB,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,WAAW,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACtG,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACpD,CAAC;IAED,4EAA4E;IAC5E,uEAAuE;IACvE,8EAA8E;IAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,iBAAiB,EAAE,CAAC;IACnD,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC;IACvD,wEAAwE;IACxE,uEAAuE;IACvE,iEAAiE;IACjE,gEAAgE;IAChE,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,0EAA0E;IAC1E,mEAAmE;IACnE,sEAAsE;IACtE,oDAAoD;IACpD,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAEtE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,MAAM,cAAc,WAAW,EAAE,CAAC;QAC7D,IAAI,CAAC,UAAU,CAAC,CAAC;QACjB,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACrD,CAAC;IAED,wEAAwE;IACxE,iEAAiE;IACjE,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,oEAAoE;IACpE,wEAAwE;IACxE,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,mDAAmD,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,MAAM,UAAU,GAAG,WAAW,IAAI,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,CAAC;IACjB,uEAAuE;IACvE,4EAA4E;IAC5E,iEAAiE;IACjE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,0BAA0B,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9F,MAAM,CAAC,KAAK,CACV,GAAG,SAAS,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,IAAI,CAC/F,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gCAAgC,CAC9C,OAA0C,EAAE;IAE5C,OAAO,uBAAuB,CAC5B,IAAI,EACJ,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,MAAM,EAC1D,kBAAkB,CAAC,qBAAqB,CAAC,EACzC,qCAAqC,CACtC,CAAC;AACJ,CAAC"}

package/dist/cli/pack/hook-stay-in-scope.d.ts

@@ -1,37 +0,0 @@
-import { type StayInScopeMatchedRule } from "../../policy-packs/builtin/understanding-before-execution/stay-in-scope-config.js";
-import type { Manifest } from "../../schema/index.js";
-import type { LoaderOptions } from "../loader.js";
-export declare const STAY_IN_SCOPE_DISABLED_ENV = "STAY_IN_SCOPE_DISABLED";
-export declare const STAY_IN_SCOPE_LOG_ENV = "STAY_IN_SCOPE_LOG";
-export declare const REMINDERS_SUBDIR = "reminders";
-export declare const STAY_IN_SCOPE_LOG_BASENAME = "stay-in-scope.log";
-export type MatchedRule = StayInScopeMatchedRule;
-export interface StayInScopeAuditRecord {
-    ts: string;
-    taskId: string | null;
-    title: string | null;
-    labels: string[];
-    parentPrUrl: string | null;
-    secondOrder: boolean;
-    matchedRule: MatchedRule;
-}
-export interface PackHookStayInScopeOptions extends LoaderOptions {
-    pack?: string;
-    generatedDir?: string;
-    logPath?: string;
-    stdin?: NodeJS.ReadableStream;
-    stderr?: NodeJS.WritableStream;
-    now?: Date;
-    env?: NodeJS.ProcessEnv;
-    manifest?: Manifest;
-}
-export interface PackHookStayInScopeResult {
-    exitCode: number;
-    matched: boolean;
-    matchedRule: MatchedRule;
-    logged: boolean;
-    secondOrder: boolean;
-    logPath: string | null;
-    diagnostic: string;
-}
-export declare function runPackHookStayInScopeCli(opts?: PackHookStayInScopeOptions): Promise<PackHookStayInScopeResult>;