@lannguyensi/harness 0.64.0 → 1.0.0

package/dist/cli/session-export/transcript.js

@@ -1,164 +0,0 @@
-import * as fs from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
-import { rejectMalformedSessionId } from "../../runtime/reject-malformed-session-id.js";
-export function parseTranscript(jsonl) {
-    const events = [];
-    let startedAt = null;
-    let endedAt = null;
-    let cwd = null;
-    let malformedLines = 0;
-    for (const line of jsonl.split("\n")) {
-        if (!line.trim())
-            continue;
-        let raw;
-        try {
-            raw = JSON.parse(line);
-        }
-        catch {
-            malformedLines += 1;
-            continue;
-        }
-        const ts = typeof raw.timestamp === "string" ? raw.timestamp : null;
-        if (ts !== null) {
-            if (startedAt === null || ts < startedAt)
-                startedAt = ts;
-            if (endedAt === null || ts > endedAt)
-                endedAt = ts;
-        }
-        if (typeof raw.cwd === "string" && cwd === null)
-            cwd = raw.cwd;
-        const baseFields = {
-            ...(typeof raw.uuid === "string" ? { uuid: raw.uuid } : {}),
-            ...(typeof raw.parentUuid === "string" ? { parentUuid: raw.parentUuid } : {}),
-            ...(typeof raw.cwd === "string" ? { cwd: raw.cwd } : {}),
-        };
-        const base = {
-            source: "transcript",
-            timestamp: ts,
-            ...baseFields,
-        };
-        switch (raw.type) {
-            case "user": {
-                const content = raw.message?.content;
-                if (typeof content === "string") {
-                    events.push({ ...base, kind: "user_prompt", data: { text: content } });
-                }
-                else if (Array.isArray(content)) {
-                    for (const block of content) {
-                        if (!block || typeof block !== "object")
-                            continue;
-                        const b = block;
-                        if (b.type === "tool_result") {
-                            events.push({
-                                ...base,
-                                kind: "user_tool_result",
-                                data: {
-                                    tool_use_id: b.tool_use_id,
-                                    is_error: b.is_error,
-                                    content: b.content,
-                                },
-                            });
-                        }
-                        else if (b.type === "text") {
-                            events.push({
-                                ...base,
-                                kind: "user_prompt",
-                                data: { text: b.text },
-                            });
-                        }
-                    }
-                }
-                break;
-            }
-            case "assistant": {
-                const content = raw.message?.content;
-                if (Array.isArray(content)) {
-                    for (const block of content) {
-                        if (!block || typeof block !== "object")
-                            continue;
-                        const b = block;
-                        if (b.type === "text") {
-                            events.push({
-                                ...base,
-                                kind: "assistant_text",
-                                data: { text: b.text },
-                            });
-                        }
-                        else if (b.type === "thinking") {
-                            events.push({
-                                ...base,
-                                kind: "assistant_thinking",
-                                data: { text: b.thinking ?? b.text },
-                            });
-                        }
-                        else if (b.type === "tool_use") {
-                            events.push({
-                                ...base,
-                                kind: "assistant_tool_use",
-                                data: { id: b.id, name: b.name, input: b.input },
-                            });
-                        }
-                    }
-                }
-                break;
-            }
-            case "attachment": {
-                events.push({
-                    ...base,
-                    kind: "attachment",
-                    data: { attachment: raw.attachment },
-                });
-                break;
-            }
-            case "permission-mode": {
-                events.push({
-                    ...base,
-                    kind: "permission_mode",
-                    data: { mode: raw.permissionMode },
-                });
-                break;
-            }
-            case "file-history-snapshot": {
-                events.push({
-                    ...base,
-                    kind: "file_history_snapshot",
-                    data: {
-                        messageId: raw.messageId,
-                        isSnapshotUpdate: raw.isSnapshotUpdate,
-                        snapshot: raw.snapshot,
-                    },
-                });
-                break;
-            }
-            default:
-                // Ignore unknown record types; future Claude Code versions may add new ones.
-                break;
-        }
-    }
-    return { events, startedAt, endedAt, cwd, malformedLines };
-}
-export function locateTranscript(sessionId, opts = {}) {
-    rejectMalformedSessionId(sessionId);
-    const projectsRoot = opts.projectsRoot ?? path.join(opts.homeDir ?? os.homedir(), ".claude", "projects");
-    if (!fs.existsSync(projectsRoot))
-        return null;
-    let dirs;
-    try {
-        dirs = fs.readdirSync(projectsRoot);
-    }
-    catch {
-        return null;
-    }
-    for (const dir of dirs) {
-        const candidate = path.join(projectsRoot, dir, `${sessionId}.jsonl`);
-        if (fs.existsSync(candidate))
-            return candidate;
-    }
-    return null;
-}
-export function readTranscript(filePath) {
-    const raw = fs.readFileSync(filePath, "utf8");
-    return parseTranscript(raw);
-}
-//# sourceMappingURL=transcript.js.map

package/dist/cli/session-export/transcript.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"transcript.js","sourceRoot":"","sources":["../../../src/cli/session-export/transcript.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AA4CxF,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,GAAG,GAAkB,IAAI,CAAC;IAC9B,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,IAAI,GAAc,CAAC;QACnB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAc,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,cAAc,IAAI,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,IAAI,SAAS,KAAK,IAAI,IAAI,EAAE,GAAG,SAAS;gBAAE,SAAS,GAAG,EAAE,CAAC;YACzD,IAAI,OAAO,KAAK,IAAI,IAAI,EAAE,GAAG,OAAO;gBAAE,OAAO,GAAG,EAAE,CAAC;QACrD,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;QAE/D,MAAM,UAAU,GAAyD;YACvE,GAAG,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,GAAG,CAAC,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC;QACF,MAAM,IAAI,GAA2C;YACnD,MAAM,EAAE,YAAY;YACpB,SAAS,EAAE,EAAE;YACb,GAAG,UAAU;SACd,CAAC;QAEF,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;gBACrC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAChC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;gBACzE,CAAC;qBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBAClC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;wBAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;4BAAE,SAAS;wBAClD,MAAM,CAAC,GAAG,KAAgC,CAAC;wBAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;4BAC7B,MAAM,CAAC,IAAI,CAAC;gCACV,GAAG,IAAI;gCACP,IAAI,EAAE,kBAAkB;gCACxB,IAAI,EAAE;oCACJ,WAAW,EAAE,CAAC,CAAC,WAAW;oCAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;oCACpB,OAAO,EAAE,CAAC,CAAC,OAAO;iCACnB;6BACF,CAAC,CAAC;wBACL,CAAC;6BAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;4BAC7B,MAAM,CAAC,IAAI,CAAC;gCACV,GAAG,IAAI;gCACP,IAAI,EAAE,aAAa;gCACnB,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;6BACvB,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;gBACrC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;wBAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;4BAAE,SAAS;wBAClD,MAAM,CAAC,GAAG,KAAgC,CAAC;wBAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;4BACtB,MAAM,CAAC,IAAI,CAAC;gCACV,GAAG,IAAI;gCACP,IAAI,EAAE,gBAAgB;gCACtB,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;6BACvB,CAAC,CAAC;wBACL,CAAC;6BAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;4BACjC,MAAM,CAAC,IAAI,CAAC;gCACV,GAAG,IAAI;gCACP,IAAI,EAAE,oBAAoB;gCAC1B,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE;6BACrC,CAAC,CAAC;wBACL,CAAC;6BAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;4BACjC,MAAM,CAAC,IAAI,CAAC;gCACV,GAAG,IAAI;gCACP,IAAI,EAAE,oBAAoB;gCAC1B,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;6BACjD,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,CAAC,IAAI,CAAC;oBACV,GAAG,IAAI;oBACP,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE;iBACrC,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YACD,KAAK,iBAAiB,CAAC,CAAC,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC;oBACV,GAAG,IAAI;oBACP,IAAI,EAAE,iBAAiB;oBACvB,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,cAAc,EAAE;iBACnC,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YACD,KAAK,uBAAuB,CAAC,CAAC,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC;oBACV,GAAG,IAAI;oBACP,IAAI,EAAE,uBAAuB;oBAC7B,IAAI,EAAE;wBACJ,SAAS,EAAE,GAAG,CAAC,SAAS;wBACxB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;wBACtC,QAAQ,EAAE,GAAG,CAAC,QAAQ;qBACvB;iBACF,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YACD;gBACE,6EAA6E;gBAC7E,MAAM;QACV,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC;AAC7D,CAAC;AAOD,MAAM,UAAU,gBAAgB,CAC9B,SAAiB,EACjB,OAAgC,EAAE;IAElC,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACpC,MAAM,YAAY,GAChB,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACtF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,SAAS,QAAQ,CAAC,CAAC;QACrE,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC"}

package/dist/cli/session-start/branch-check.d.ts

@@ -1,18 +0,0 @@
-import { type SessionSource, type SessionStartCwdOptions } from "./shared-options.js";
-export type SessionStartBranchCheckOptions = SessionStartCwdOptions;
-export interface SessionStartBranchCheckResult {
-    /** Always 0 — SessionStart hooks must never break the session loop. */
-    exitCode: number;
-    /** Whether the `branch:non-protected` ledger fact was written. */
-    wrote: boolean;
-    /** Resolved branch name ("" when detached or outside a repo). */
-    branch: string;
-    /** True when the resolved branch matched the protected list. */
-    protected: boolean;
-    /** Resolved session id. */
-    sessionId: string;
-    sessionSource: SessionSource;
-    /** Human-readable explanation of a non-write outcome (when applicable). */
-    reason?: string;
-}
-export declare function runSessionStartBranchCheck(opts?: SessionStartBranchCheckOptions): Promise<SessionStartBranchCheckResult>;

package/dist/cli/session-start/branch-check.js

@@ -1,140 +0,0 @@
-// `harness session-start branch-check` — SessionStart hook entrypoint
-// for the `branch-protection` policy pack.
-//
-// Reads `.git/HEAD` for the cwd and, when the current branch is NOT in
-// the operator's protected list, writes a `branch:non-protected:<branch>`
-// fact to the evidence ledger so the pack's PreToolUse blocker has a
-// fresh tag to satisfy its 5-minute freshness window.
-//
-// SessionStart contract: `blocking:false`. Every failure path (no git
-// dir, manifest load fails, no grounding-mcp wired, ledger write
-// fails) logs one line to stderr and exits 0. The only observable
-// effect of a failure is that the blocker stays closed, which is the
-// safe default: a session that can't prove it's NOT on a protected
-// branch is treated as if it might be.
-//
-// Detached HEAD (`branch === ""`) is treated as PROTECTED: we can't
-// audit-by-name what the agent might commit. The producer leaves the
-// tag unwritten and stderr-notes the reason.
-//
-// Re-runnable on demand from the operator's `!` shell with no event
-// JSON piped on stdin — same CLI verb, no SessionStart event needed.
-import { addLedgerFact, resolveGitContext, } from "../../runtime/index.js";
-import { resolveReadSessionId } from "../../runtime/session-id.js";
-import { DEFAULT_PROTECTED_BRANCHES, isProtectedBranch, NON_PROTECTED_TAG_PREFIX, PACK_NAME, resolveProtectedBranches, } from "../../policy-packs/builtin/branch-protection-runtime.js";
-import { loadManifest } from "../loader.js";
-import { classifySessionSource, explicitSessionId, FALLBACK_SESSION, malformedEventReason, readSessionStartEvent, resolveEventCwd, } from "./shared-options.js";
-const LEDGER_SOURCE = "harness-session-start-branch-check";
-function findGroundingMcp(manifest) {
-    return manifest.tools.mcp.find((m) => m.name === "grounding-mcp") ?? null;
-}
-function mcpCommandList(server) {
-    return Array.isArray(server.command)
-        ? server.command
-        : server.command.trim().split(/\s+/);
-}
-export async function runSessionStartBranchCheck(opts = {}) {
-    const stdin = opts.stdin ?? process.stdin;
-    const stderr = opts.stderr ?? process.stderr;
-    const note = (msg) => {
-        stderr.write(`harness session-start branch-check: ${msg}\n`);
-    };
-    const done = (wrote, branch, isProtected, sessionId, sessionSource, reason) => ({
-        exitCode: 0,
-        wrote,
-        branch,
-        protected: isProtected,
-        sessionId,
-        sessionSource,
-        ...(reason !== undefined && { reason }),
-    });
-    let event;
-    try {
-        event = await readSessionStartEvent(stdin, {
-            onTimeout: note,
-            ...(opts.stdinIdleTimeoutMs !== undefined && { idleTimeoutMs: opts.stdinIdleTimeoutMs }),
-        });
-    }
-    catch (err) {
-        const reason = malformedEventReason(err);
-        note(reason);
-        return done(false, "", false, FALLBACK_SESSION, "default", reason);
-    }
-    const cwd = resolveEventCwd(opts.cwd, event);
-    const { branch } = resolveGitContext(cwd);
-    // Load manifest to resolve the pack's protected_branches override.
-    // Fallback to defaults on any load failure (the producer's job is
-    // best-effort; an unresolvable manifest still permits a sane gate).
-    let manifest = null;
-    if (opts.manifest) {
-        manifest = opts.manifest;
-    }
-    else {
-        try {
-            manifest = loadManifest(opts).manifest;
-        }
-        catch (err) {
-            note(`manifest load failed: ${err.message}; falling back to default protected list`);
-        }
-    }
-    const pack = manifest?.policy_packs.find((p) => p.name === PACK_NAME);
-    const { branches: protectedList, warning: protectedWarning } = pack
-        ? resolveProtectedBranches(pack)
-        : { branches: [...DEFAULT_PROTECTED_BRANCHES], warning: null };
-    if (protectedWarning)
-        note(protectedWarning);
-    // Resolve session id with the same precedence chain as
-    // session-start/preflight so the two producers stay symmetric.
-    const explicit = explicitSessionId(opts.session, event);
-    const resolveSession = opts.resolveSession ?? resolveReadSessionId;
-    const sessionId = resolveSession(explicit, {});
-    const sessionSource = classifySessionSource(opts.session, event, sessionId);
-    if (branch === "") {
-        const reason = `cwd is not on a named branch (detached HEAD or outside a git work tree); leaving the gate closed (treated as protected)`;
-        note(reason);
-        return done(false, "", true, sessionId, sessionSource, reason);
-    }
-    const isProtected = isProtectedBranch(branch, protectedList);
-    if (isProtected) {
-        const reason = `branch "${branch}" is in the protected list (${protectedList.join(", ")}); leaving the gate closed`;
-        note(reason);
-        return done(false, branch, true, sessionId, sessionSource, reason);
-    }
-    // Branch is non-protected: write the tag.
-    const content = `${NON_PROTECTED_TAG_PREFIX}:${branch}`;
-    let writeLedger = opts.writeLedger;
-    if (!writeLedger) {
-        if (!manifest) {
-            const reason = `manifest unavailable; cannot record ${content}`;
-            note(reason);
-            return done(false, branch, false, sessionId, sessionSource, reason);
-        }
-        const server = findGroundingMcp(manifest);
-        if (!server) {
-            const reason = `grounding-mcp not declared in manifest; cannot record ${content}`;
-            note(reason);
-            return done(false, branch, false, sessionId, sessionSource, reason);
-        }
-        const command = mcpCommandList(server);
-        const env = server.env ?? undefined;
-        const timeoutMs = opts.ledgerTimeoutMs ?? server.health?.timeout_ms ?? 5_000;
-        writeLedger = (args) => addLedgerFact({
-            mcpCommand: command,
-            ...(env && { mcpEnv: env }),
-            timeoutMs,
-            ...args,
-        });
-    }
-    const result = await writeLedger({ sessionId, content, source: LEDGER_SOURCE });
-    if (!result.ok) {
-        const reason = `ledger write failed: ${result.reason ?? "unknown error"}`;
-        note(reason);
-        return done(false, branch, false, sessionId, sessionSource, reason);
-    }
-    note(`recorded ${content} for session ${sessionId}`);
-    if (sessionSource === "default") {
-        note("WARNING: session resolved to the literal \"default\". The blocker queries the real Claude Code session id and will NOT see this tag. Pipe SessionStart event JSON on stdin, export $CLAUDE_SESSION_ID, or pass --session <id>.");
-    }
-    return done(true, branch, false, sessionId, sessionSource);
-}
-//# sourceMappingURL=branch-check.js.map

package/dist/cli/session-start/branch-check.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"branch-check.js","sourceRoot":"","sources":["../../../src/cli/session-start/branch-check.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,2CAA2C;AAC3C,EAAE;AACF,uEAAuE;AACvE,0EAA0E;AAC1E,qEAAqE;AACrE,sDAAsD;AACtD,EAAE;AACF,sEAAsE;AACtE,iEAAiE;AACjE,kEAAkE;AAClE,qEAAqE;AACrE,mEAAmE;AACnE,uCAAuC;AACvC,EAAE;AACF,oEAAoE;AACpE,qEAAqE;AACrE,6CAA6C;AAC7C,EAAE;AACF,oEAAoE;AACpE,qEAAqE;AAErE,OAAO,EACL,aAAa,EACb,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,EACjB,wBAAwB,EACxB,SAAS,EACT,wBAAwB,GACzB,MAAM,yDAAyD,CAAC;AAEjE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,GAIhB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,aAAa,GAAG,oCAAoC,CAAC;AAoB3D,SAAS,gBAAgB,CAAC,QAAkB;IAC1C,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,IAAI,IAAI,CAAC;AAC5E,CAAC;AAED,SAAS,cAAc,CAAC,MAAiB;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAClC,CAAC,CAAC,MAAM,CAAC,OAAO;QAChB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAuC,EAAE;IAEzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;QACjC,MAAM,CAAC,KAAK,CAAC,uCAAuC,GAAG,IAAI,CAAC,CAAC;IAC/D,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CACX,KAAc,EACd,MAAc,EACd,WAAoB,EACpB,SAAiB,EACjB,aAA6D,EAC7D,MAAe,EACgB,EAAE,CAAC,CAAC;QACnC,QAAQ,EAAE,CAAC;QACX,KAAK;QACL,MAAM;QACN,SAAS,EAAE,WAAW;QACtB,SAAS;QACT,aAAa;QACb,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;KACxC,CAAC,CAAC;IAEH,IAAI,KAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE;YACzC,SAAS,EAAE,IAAI;YACf,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC;SACzF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAE1C,mEAAmE;IACnE,kEAAkE;IAClE,oEAAoE;IACpE,IAAI,QAAQ,GAAoB,IAAI,CAAC;IACrC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,yBAA0B,GAAa,CAAC,OAAO,0CAA0C,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACtE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,IAAI;QACjE,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC;QAChC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,0BAA0B,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACjE,IAAI,gBAAgB;QAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAE7C,uDAAuD;IACvD,+DAA+D;IAC/D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,oBAAoB,CAAC;IACnE,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAE5E,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,yHAAyH,CAAC;QACzI,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC7D,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,WAAW,MAAM,+BAA+B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC;QACpH,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAED,0CAA0C;IAC1C,MAAM,OAAO,GAAG,GAAG,wBAAwB,IAAI,MAAM,EAAE,CAAC;IAExD,IAAI,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACnC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,uCAAuC,OAAO,EAAE,CAAC;YAChE,IAAI,CAAC,MAAM,CAAC,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,yDAAyD,OAAO,EAAE,CAAC;YAClF,IAAI,CAAC,MAAM,CAAC,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC,MAAM,EAAE,UAAU,IAAI,KAAK,CAAC;QAC7E,WAAW,GAAG,CAAC,IAAI,EAAE,EAAE,CACrB,aAAa,CAAC;YACZ,UAAU,EAAE,OAAO;YACnB,GAAG,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YAC3B,SAAS;YACT,GAAG,IAAI;SACR,CAAC,CAAC;IACP,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAChF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,wBAAwB,MAAM,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,YAAY,OAAO,gBAAgB,SAAS,EAAE,CAAC,CAAC;IACrD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CACF,gOAAgO,CACjO,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AAC7D,CAAC"}

package/dist/cli/session-start/index.d.ts

@@ -1,121 +0,0 @@
-import type { Manifest } from "../../schema/index.js";
-import { type SessionSource, type SessionStartCommonOptions } from "./shared-options.js";
-export declare const PREFLIGHT_BIN = "preflight";
-/** The slice of `preflight run --json` output this producer reads. */
-export interface PreflightJson {
-    ready?: boolean;
-    confidence?: number;
-    checks?: Array<{
-        name?: string;
-        status?: string;
-        message?: string;
-        details?: string[];
-    }>;
-}
-export type RunPreflightResult = {
-    ok: true;
-    json: PreflightJson;
-} | {
-    ok: false;
-    reason: string;
-};
-export interface SessionStartPreflightOptions extends SessionStartCommonOptions {
-    /** `preflight` subprocess timeout in ms. */
-    preflightTimeoutMs?: number;
-    /** Inject the preflight runner (tests). */
-    runPreflight?: (cwd: string, timeoutMs: number, setup: boolean) => Promise<RunPreflightResult>;
-    /**
-     * Inject the resolved manifest (tests). Scope is EXACTLY one call
-     * site: the `setupEnabled` resolution of
-     * `session_start_preflight.setup` (task 30183330), same seam shape as
-     * `harness explain-policy`'s own `manifest` option. The
-     * ledger-writer's own `loadManifest` call further down (used only
-     * when `writeLedger` is not injected) deliberately does NOT read this
-     * field, so injecting a manifest never suppresses that call's
-     * run-aborting failure path. A failure to resolve `setup` here (this
-     * field is absent AND `loadManifest(opts)` throws) degrades to
-     * `setup: false` (matches the sibling SessionStart companions' "not
-     * configured -> skip" contract) rather than aborting the entire
-     * preflight run over this one unrelated knob. Injecting this field
-     * also bypasses the cwd-derived project layer that resolution
-     * otherwise feeds through the loader (task c88461c1, see the
-     * `setupEnabled` block itself): an injected manifest already IS the
-     * merged result, so there is nothing left for a project layer to
-     * apply to.
-     */
-    manifest?: Manifest;
-    /**
-     * Directory the not-ready diagnostic JSON is persisted to (task
-     * T-001). Test seam — production defaults to the dirname of the
-     * manifest path `resolvePaths()` resolves, plus `/logs`
-     * (`path.dirname(resolvePaths(opts).base)`, task 80f49922). That is
-     * normally `<home>/logs`, where `<home>` follows the usual precedence
-     * ($HARNESS_HOME, then `~/.harness/`, then the legacy `~/.claude/`
-     * fallback) — EXCEPT when `configPath` is injected without `homeDir`:
-     * `configPath` overrides the manifest path directly, so the log dir
-     * becomes `dirname(configPath)/logs` and does NOT route through
-     * home-dir resolution at all in that case. `resolvePaths()` throws
-     * unless `homeDir` or `configPath` is also injected (loader.ts:45-64).
-     * Always pass a tmp dir in tests so nothing ever touches the
-     * operator's real `~/.harness/logs/` (or the legacy `~/.claude/logs/`).
-     */
-    logDir?: string;
-    /**
-     * Inject the `.pending-approval` writer. Opt-in: staging only happens
-     * when the caller explicitly passes a writer. The CLI entry points
-     * (`harness preflight` and `harness session-start preflight`) wire
-     * `writePendingApproval` from `runtime/pending-approval`, so operators
-     * get the bootstrap fix; library callers that import this function
-     * directly do not pollute the real `~/.claude/harness.generated/`
-     * unless they opt in. Hotfix for v0.21.0 which defaulted to ON and
-     * caused vitest runs to clobber the operator's pending-approval file
-     * via the `npm-test` preflight check (agent-tasks/<this hotfix>).
-     * Pass `null` to make the opt-out explicit; `undefined` (the default)
-     * is the same no-op.
-     */
-    stagePendingApproval?: ((generatedDir: string, sessionId: string) => void) | null;
-}
-export interface SessionStartPreflightResult {
-    /** Always 0 — a SessionStart hook must never break the session loop. */
-    exitCode: number;
-    /** Whether the `preflight:` ledger fact was written. */
-    wrote: boolean;
-    /** Resolved repo name (the `${REPO}` a tag is namespaced by). */
-    repo: string;
-    /** Resolved branch (the `${BRANCH}` a tag is namespaced by; "" if detached). */
-    branch: string;
-    /**
-     * Which tier the session id came from. Surfaced so the CLI can
-     * loud-warn when the resolved id is the literal `"default"` (a tag
-     * recorded under that id will not satisfy any `preflight-before-*`
-     * gate, which queries by the real Claude Code session id).
-     */
-    sessionSource: SessionSource;
-    /** Resolved session id. */
-    sessionId: string;
-    /** Human-readable explanation of a non-write outcome, for diagnostics. */
-    reason?: string;
-}
-/**
- * Environment for the spawned `preflight` child: the parent env minus
- * HARNESS_ALLOW_REAL_GENERATED_DIR. The launcher sets that flag so the
- * real harness binary may fall back to the operator's home dir, but the
- * preflight child runs the repo's own test suite (its `npm-test` check),
- * and an inherited flag re-enables the implicit real-homedir fallback
- * INSIDE those test processes. With non-empty operator state (e.g. a
- * `harness pause` sentinel) that broke 110 tests and surfaced as a false
- * `failing: npm-test`, keeping the preflight gate shut. Third incident
- * of the operator-state-isolation class PR #199 pinned; the flag must
- * stay scoped to the process the operator actually invoked.
- */
-export declare function preflightChildEnv(parentEnv?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
-/**
- * Build the argv passed to the `preflight` child (task 30183330). Pure
- * and exported so a test can pin the rendered command directly, with
- * and without `setup`, instead of only exercising the injected
- * `runPreflight` seam. `--setup` is inserted before the positional
- * `cwd` argument, matching agent-preflight's own `preflight run
- * [options] [repoPath]` usage.
- */
-export declare function buildPreflightArgv(cwd: string, setup: boolean): string[];
-export declare function runSessionStartPreflight(opts?: SessionStartPreflightOptions): Promise<SessionStartPreflightResult>;