@onepointfour-packs/flaredeck-agent 0.1.0

package/dist/preflight.js

@@ -0,0 +1,116 @@
+import { spawn } from 'node:child_process';
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { parse } from 'yaml';
+/**
+ * Where work goes. `origin/HEAD` is the wrong answer for any project whose default branch is not
+ * where features land — a project may merge to `dev` while the repo's default is something else, so
+ * guessing from git would open every pull request against the wrong base.
+ *
+ *   branches:
+ *     base: dev
+ */
+export function loadBaseBranch(repo) {
+    const path = join(repo, '.flaredeck', 'agent.yaml');
+    if (!existsSync(path))
+        return null;
+    try {
+        const b = (parse(readFileSync(path, 'utf8')) ?? {}).branches;
+        return typeof b?.base === 'string' && b.base.trim() ? b.base.trim() : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function loadMergeConfig(repo) {
+    const path = join(repo, '.flaredeck', 'agent.yaml');
+    if (!existsSync(path))
+        return null;
+    try {
+        const m = (parse(readFileSync(path, 'utf8')) ?? {}).merge;
+        return m && typeof m.command === 'string'
+            ? { command: m.command, dryRun: m.dryRun, confirm: m.confirm }
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+const TIMEOUT_MS = 60_000;
+export function loadChecks(repo) {
+    const path = join(repo, '.flaredeck', 'agent.yaml');
+    if (!existsSync(path))
+        return [];
+    try {
+        const doc = parse(readFileSync(path, 'utf8')) ?? {};
+        const checks = Array.isArray(doc.checks) ? doc.checks : [];
+        return checks
+            .filter((c) => c && typeof c.run === 'string')
+            .map((c) => ({ name: String(c.name || c.run), run: String(c.run), ...(c.fix ? { fix: String(c.fix) } : {}) }));
+    }
+    catch {
+        // A malformed file must not stop the agent working — it just cannot be checked against.
+        return [];
+    }
+}
+function run(command, cwd) {
+    return new Promise((resolve) => {
+        const child = spawn(command, { cwd, shell: true, stdio: ['ignore', 'pipe', 'pipe'] });
+        let out = '';
+        const cap = (d) => { if (out.length < 2000)
+            out += String(d); };
+        child.stdout.on('data', cap);
+        child.stderr.on('data', cap);
+        // A check that hangs is a failed check: the point is to be quick about it.
+        const timer = setTimeout(() => { child.kill('SIGKILL'); resolve({ code: 124, out: `${out}\n(timed out)` }); }, TIMEOUT_MS);
+        child.on('close', (code) => { clearTimeout(timer); resolve({ code: code ?? 1, out }); });
+        child.on('error', (e) => { clearTimeout(timer); resolve({ code: 1, out: String(e) }); });
+    });
+}
+export async function preflight(repo, onStep) {
+    const checks = loadChecks(repo);
+    const results = [];
+    for (const check of checks) {
+        let { code, out } = await run(check.run, repo);
+        let fixed = false;
+        if (code !== 0 && check.fix) {
+            // Something the harness can put right itself should not wake anybody up.
+            onStep(`${check.name}: failed — trying to fix it`);
+            await run(check.fix, repo);
+            ({ code, out } = await run(check.run, repo));
+            fixed = code === 0;
+        }
+        results.push({
+            name: check.name,
+            ok: code === 0,
+            detail: out.trim().split('\n').slice(-3).join(' ').slice(0, 300),
+            fixed,
+        });
+        onStep(`${check.name}: ${code === 0 ? (fixed ? 'fixed' : 'ok') : 'FAILED'}`);
+    }
+    return results;
+}
+/**
+ * What the agent is told about the state of its environment.
+ *
+ * On failure it is told NOT to attempt the work. An agent that tries anyway produces a confident
+ * account of why the code is broken when the truth is that nothing was running — which is worse
+ * than no answer, because someone believes it.
+ */
+export function preflightBrief(results) {
+    if (results.length === 0)
+        return '';
+    const failed = results.filter((r) => !r.ok);
+    const fixed = results.filter((r) => r.fixed);
+    if (failed.length === 0) {
+        return fixed.length
+            ? `\n\nEnvironment checked and ready (${fixed.map((r) => r.name).join(', ')} needed fixing first — already done).`
+            : '\n\nEnvironment checked and ready, so you can get straight to the work.';
+    }
+    return (`\n\nSTOP — the environment is not ready, so do not attempt the work:\n` +
+        failed.map((r) => `  · ${r.name} — ${r.detail || 'check failed'}`).join('\n') +
+        `\n\nDo not try to work around this or diagnose the code: nothing is running, so anything you ` +
+        `conclude about it would be wrong. Comment on the card saying exactly which check failed, call ` +
+        `set-needs-human, and stop.`);
+}
+//# sourceMappingURL=preflight.js.map

package/dist/preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../src/preflight.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AA0C7B;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC;QAC7D,OAAO,OAAO,CAAC,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;QAC1D,OAAO,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YACvC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;YAC9D,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAGD,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,OAAO,MAAM;aACV,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC;aAClD,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACxH,CAAC;IAAC,MAAM,CAAC;QACP,wFAAwF;QACxF,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,GAAG,CAAC,OAAe,EAAE,GAAW;IACvC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACtF,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI;YAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7B,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7B,2EAA2E;QAC3E,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC3H,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,MAA8B;IAC1E,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,KAAK,GAAG,KAAK,CAAC;QAElB,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;YAC5B,yEAAyE;YACzE,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,6BAA6B,CAAC,CAAC;YACnD,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC3B,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YAC7C,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC;QACrB,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,EAAE,EAAE,IAAI,KAAK,CAAC;YACd,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAChE,KAAK;SACN,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,OAAsB;IACnD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAE7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC,MAAM;YACjB,CAAC,CAAC,sCAAsC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,uCAAuC;YAClH,CAAC,CAAC,yEAAyE,CAAC;IAChF,CAAC;IAED,OAAO,CACL,wEAAwE;QACxE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7E,+FAA+F;QAC/F,gGAAgG;QAChG,4BAA4B,CAC7B,CAAC;AACJ,CAAC"}

package/dist/providers.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Keys for the OPTIONAL small models the intake step may use, kept once per machine.
+ *
+ * Not per repo: a key is a billing relationship with a provider, not a fact about a checkout,
+ * and every agent on the box should classify the same way. Not in the repo config either, so
+ * copying an agent's config file carries no third-party credential with it. Absent keys simply
+ * switch that provider off — the subscription's own small model still writes the brief.
+ */
+export type Providers = {
+    /** OpenRouter: serves TypeSafe's Jev on its Decisions endpoint. */
+    openrouter?: {
+        apiKey: string;
+    };
+    /** Google AI Studio key for the Gemini Developer API (the one with the free tier). */
+    gemini?: {
+        apiKey: string;
+        model?: string;
+    };
+    /**
+     * Who writes the brief for live cards. Haiku unless told otherwise: it needs no key. The
+     * dry-run command always shows both when both are available, so this can be chosen on evidence.
+     */
+    brief?: 'haiku' | 'gemini';
+};
+export declare function loadProviders(): Providers;
+export declare function saveProviders(p: Providers): string;

package/dist/providers.js

@@ -0,0 +1,27 @@
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+const providersPath = () => join(process.env['XDG_CONFIG_HOME'] || join(homedir(), '.config'), 'flaredeck-agent', 'providers.json');
+export function loadProviders() {
+    try {
+        if (!existsSync(providersPath()))
+            return {};
+        const raw = JSON.parse(readFileSync(providersPath(), 'utf8'));
+        return {
+            ...(raw.openrouter?.apiKey ? { openrouter: { apiKey: raw.openrouter.apiKey } } : {}),
+            ...(raw.gemini?.apiKey ? { gemini: { apiKey: raw.gemini.apiKey, ...(raw.gemini.model ? { model: raw.gemini.model } : {}) } } : {}),
+            ...(raw.brief === 'gemini' || raw.brief === 'haiku' ? { brief: raw.brief } : {}),
+        };
+    }
+    catch {
+        return {};
+    }
+}
+export function saveProviders(p) {
+    const path = providersPath();
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, `${JSON.stringify(p, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 });
+    chmodSync(path, 0o600);
+    return path;
+}
+//# sourceMappingURL=providers.js.map

package/dist/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAsB1C,MAAM,aAAa,GAAG,GAAW,EAAE,CACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;AAE1G,MAAM,UAAU,aAAa;IAC3B,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,EAAE,MAAM,CAAC,CAAc,CAAC;QAC3E,OAAO;YACL,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClI,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAY;IACxC,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/repopicker.d.ts

@@ -0,0 +1,3 @@
+import type { Checkout } from './workspace.js';
+/** Resolves to the ticked names, or null when the person backed out without choosing. */
+export declare function pickRepos(root: string, repos: Checkout[], initial: Set<string>): Promise<string[] | null>;

package/dist/repopicker.js

@@ -0,0 +1,111 @@
+import { Box, Text, render, useApp, useInput } from 'ink';
+import React, { useState } from 'react';
+/**
+ * Tick the repositories an agent may work in.
+ *
+ * This was a numbered list you typed numbers at, and the numbers TOGGLED. Everything started
+ * ticked, so typing the four you wanted turned those four off — the list said "to toggle" and it
+ * still read as "to choose". A prompt whose plainest reading is the opposite of what it does is
+ * not a prompt worth keeping, and the fix is not better wording: it is to stop asking people to
+ * hold the current state in their head. Move, press space, see the tick change.
+ */
+const MAX_ROWS = 16;
+function Picker({ root, repos, initial, onDone, }) {
+    const { exit } = useApp();
+    const [on, setOn] = useState(new Set(initial));
+    const [at, setAt] = useState(0);
+    const done = (picked) => { onDone(picked); exit(); };
+    useInput((input, key) => {
+        if (key.upArrow || input === 'k')
+            setAt((i) => (i - 1 + repos.length) % repos.length);
+        else if (key.downArrow || input === 'j')
+            setAt((i) => (i + 1) % repos.length);
+        else if (input === ' ') {
+            const name = repos[at]?.name;
+            if (name)
+                setOn((s) => { const n = new Set(s); if (n.has(name))
+                    n.delete(name);
+                else
+                    n.add(name); return n; });
+        }
+        else if (input === 'a')
+            setOn(new Set(repos.map((r) => r.name)));
+        else if (input === 'n')
+            setOn(new Set());
+        else if (key.return)
+            done(repos.filter((r) => on.has(r.name)).map((r) => r.name));
+        // Escape leaves the config alone rather than saving an empty choice — a cancelled prompt
+        // should change nothing, and "none of them" is a thing you say with n then enter.
+        else if (key.escape || input === 'q')
+            done(null);
+    });
+    // A window, so a folder of forty repos does not scroll the question off the screen.
+    const half = Math.floor(MAX_ROWS / 2);
+    const first = Math.max(0, Math.min(at - half, repos.length - MAX_ROWS));
+    const shown = repos.slice(first, first + MAX_ROWS);
+    const width = Math.max(...repos.map((r) => r.name.length));
+    return (React.createElement(Box, { flexDirection: "column" },
+        React.createElement(Text, null,
+            React.createElement(Text, { bold: true }, "Which of these may this agent work in?"),
+            React.createElement(Text, { dimColor: true },
+                " \u00B7 ",
+                repos.length,
+                " found in ",
+                root)),
+        React.createElement(Box, { height: 1 }),
+        first > 0 ? React.createElement(Text, { dimColor: true },
+            "   \u2191 ",
+            first,
+            " more") : null,
+        shown.map((r, i) => {
+            const here = first + i === at;
+            const ticked = on.has(r.name);
+            return (React.createElement(Text, { key: r.path, color: here ? 'cyan' : undefined },
+                here ? '❯ ' : '  ',
+                React.createElement(Text, { color: ticked ? 'green' : undefined }, ticked ? '◉' : '◯'),
+                ' ',
+                React.createElement(Text, { bold: ticked }, r.name.padEnd(width)),
+                React.createElement(Text, { dimColor: true },
+                    "   ",
+                    r.origin ? shortRemote(r.origin) : 'no remote — nothing it pushes can be received')));
+        }),
+        first + MAX_ROWS < repos.length ? React.createElement(Text, { dimColor: true },
+            "   \u2193 ",
+            repos.length - first - MAX_ROWS,
+            " more") : null,
+        React.createElement(Box, { height: 1 }),
+        React.createElement(Text, { dimColor: true },
+            "\u2191\u2193 move \u00B7 space tick \u00B7 a all \u00B7 n none \u00B7 enter accept (",
+            on.size,
+            " selected) \u00B7 esc cancel")));
+}
+const shortRemote = (url) => url.trim().toLowerCase()
+    .replace(/^git@([^:]+):/, '$1/')
+    .replace(/^[a-z]+:\/\//, '')
+    .replace(/\.git$/, '')
+    .split('/')
+    .slice(-2)
+    .join('/');
+/** Resolves to the ticked names, or null when the person backed out without choosing. */
+export function pickRepos(root, repos, initial) {
+    return new Promise((resolve) => {
+        // Resolved from the callback AND from the unmount, whichever happens first, because this sits
+        // in the middle of login: a picker that renders but never returns is a login that hangs with
+        // no way forward. startApprovals settles the same two ways for the same reason.
+        let settled = false;
+        let app = null;
+        const finish = (picked) => {
+            if (settled)
+                return;
+            settled = true;
+            try {
+                app?.unmount();
+            }
+            catch { /* already gone */ }
+            resolve(picked);
+        };
+        app = render(React.createElement(Picker, { root: root, repos: repos, initial: initial, onDone: finish }));
+        void app.waitUntilExit().then(() => finish(null));
+    });
+}
+//# sourceMappingURL=repopicker.js.map

package/dist/repopicker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repopicker.js","sourceRoot":"","sources":["../src/repopicker.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAC1D,OAAO,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAIxC;;;;;;;;GAQG;AACH,MAAM,QAAQ,GAAG,EAAE,CAAC;AAEpB,SAAS,MAAM,CAAC,EACd,IAAI,EACJ,KAAK,EACL,OAAO,EACP,MAAM,GAMP;IACC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;IAC1B,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,QAAQ,CAAc,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5D,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEhC,MAAM,IAAI,GAAG,CAAC,MAAuB,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAEtE,QAAQ,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtB,IAAI,GAAG,CAAC,OAAO,IAAI,KAAK,KAAK,GAAG;YAAE,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;aACjF,IAAI,GAAG,CAAC,SAAS,IAAI,KAAK,KAAK,GAAG;YAAE,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;aACzE,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC;YAC7B,IAAI,IAAI;gBAAE,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;;oBAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjH,CAAC;aACI,IAAI,KAAK,KAAK,GAAG;YAAE,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aAC5D,IAAI,KAAK,KAAK,GAAG;YAAE,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;aACpC,IAAI,GAAG,CAAC,MAAM;YAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAClF,yFAAyF;QACzF,kFAAkF;aAC7E,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK,KAAK,GAAG;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,oFAAoF;IACpF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,QAAQ,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAE3D,OAAO,CACL,oBAAC,GAAG,IAAC,aAAa,EAAC,QAAQ;QACzB,oBAAC,IAAI;YACH,oBAAC,IAAI,IAAC,IAAI,mDAA8C;YACxD,oBAAC,IAAI,IAAC,QAAQ;;gBAAK,KAAK,CAAC,MAAM;;gBAAY,IAAI,CAAQ,CAClD;QACP,oBAAC,GAAG,IAAC,MAAM,EAAE,CAAC,GAAI;QACjB,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAC,IAAI,IAAC,QAAQ;;YAAO,KAAK;oBAAa,CAAC,CAAC,CAAC,IAAI;QAC1D,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAClB,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9B,OAAO,CACL,oBAAC,IAAI,IAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBAChD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;gBACnB,oBAAC,IAAI,IAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,IAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAQ;gBACrE,GAAG;gBACJ,oBAAC,IAAI,IAAC,IAAI,EAAE,MAAM,IAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAQ;gBACjD,oBAAC,IAAI,IAAC,QAAQ;;oBAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,+CAA+C,CAAQ,CACxG,CACR,CAAC;QACJ,CAAC,CAAC;QACD,KAAK,GAAG,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAC,IAAI,IAAC,QAAQ;;YAAO,KAAK,CAAC,MAAM,GAAG,KAAK,GAAG,QAAQ;oBAAa,CAAC,CAAC,CAAC,IAAI;QAC3G,oBAAC,GAAG,IAAC,MAAM,EAAE,CAAC,GAAI;QAClB,oBAAC,IAAI,IAAC,QAAQ;;YAC2C,EAAE,CAAC,IAAI;2CACzD,CACH,CACP,CAAC;AACJ,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,GAAW,EAAU,EAAE,CAC1C,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;KACrB,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC;KAC/B,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;KAC3B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;KACrB,KAAK,CAAC,GAAG,CAAC;KACV,KAAK,CAAC,CAAC,CAAC,CAAC;KACT,IAAI,CAAC,GAAG,CAAC,CAAC;AAEf,yFAAyF;AACzF,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,KAAiB,EAAE,OAAoB;IAC7E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,8FAA8F;QAC9F,6FAA6F;QAC7F,gFAAgF;QAChF,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,GAAG,GAAqC,IAAI,CAAC;QACjD,MAAM,MAAM,GAAG,CAAC,MAAuB,EAAE,EAAE;YACzC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC;gBAAC,GAAG,EAAE,OAAO,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;YACpD,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,GAAG,GAAG,MAAM,CAAC,oBAAC,MAAM,IAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAI,CAAC,CAAC;QACrF,KAAK,GAAG,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runs.d.ts

@@ -0,0 +1,59 @@
+import type { RunTarget } from './config.js';
+import type { Flaredeck } from './flaredeck.js';
+/**
+ * Production runs: the agent asks, a person approves, the HARNESS runs it.
+ *
+ * The agent never holds a credential and never executes anything itself. It hands over a script,
+ * a name and what it believes the script does; that goes to the card as an approval request —
+ * the same one the permission broker uses, so it renders with Approve/Deny and raises a push —
+ * and only a person's verdict makes the harness run it. The script is bound to the approval by
+ * its hash, so what was approved is what runs.
+ *
+ * The description is the agent's own account of its own script, so it is never enough on its own.
+ * Where the script is an UPDATE or DELETE with a WHERE clause, the harness derives a COUNT from
+ * that clause and runs it first: "would touch N rows" sits next to the script when the approver
+ * reads it, and a script that says one row and previews thousands is caught before anyone taps.
+ * That count is written by the harness from the agent's clause, not by the agent, and it is the
+ * only thing that runs before approval.
+ */
+export declare const RUN_TOOL_NAMES: string[];
+export type Current = {
+    card: string;
+    cwd: string;
+};
+/** What the harness is told while a request waits, so the pane can show and answer it. */
+export type AskEvent = {
+    kind: 'asking';
+    requestId: string;
+    commentId: string;
+    name: string;
+    target: string;
+    purpose: string;
+    preview?: string;
+    script: string;
+    withLead: boolean;
+} | {
+    kind: 'answered';
+    requestId: string;
+};
+/**
+ * The read-only preview the harness derives from a write. Only the simplest shapes: one UPDATE
+ * or DELETE, one table, a WHERE clause, nothing after it. Anything else previews nothing rather
+ * than something wrong.
+ */
+export declare function previewFor(script: string): string | null;
+/**
+ * What a restarted harness owes: requests of its own that a person approved while it was not
+ * waiting — closed on idle, out of context, or simply down. Each is run now and reported, so an
+ * approval is never silently lost to a restart. The agent is not involved; it reads the result
+ * on the card next time it looks.
+ */
+export declare function resumeApprovedRuns(targets: Record<string, RunTarget>, deck: Flaredeck, cwd: string, log: (text: string) => void): Promise<number>;
+export declare function runTools(targets: Record<string, RunTarget>, current: () => Current | null, deck: Flaredeck | null, log: (text: string) => void, 
+/** This agent's lead, when it has one: the request goes there first, and a person is asked only if the lead endorses it. */
+lead?: () => string | null, 
+/** The pane, told when a request is posted and when it is answered. */
+onAsk?: (e: AskEvent) => void): {
+    server: unknown;
+    toolNames: string[];
+};

package/dist/runs.js

@@ -0,0 +1,211 @@
+import { spawn } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { createSdkMcpServer, tool } from '@anthropic-ai/claude-agent-sdk';
+import { z } from 'zod';
+import { flaredeckDecider } from './approval.js';
+/**
+ * Production runs: the agent asks, a person approves, the HARNESS runs it.
+ *
+ * The agent never holds a credential and never executes anything itself. It hands over a script,
+ * a name and what it believes the script does; that goes to the card as an approval request —
+ * the same one the permission broker uses, so it renders with Approve/Deny and raises a push —
+ * and only a person's verdict makes the harness run it. The script is bound to the approval by
+ * its hash, so what was approved is what runs.
+ *
+ * The description is the agent's own account of its own script, so it is never enough on its own.
+ * Where the script is an UPDATE or DELETE with a WHERE clause, the harness derives a COUNT from
+ * that clause and runs it first: "would touch N rows" sits next to the script when the approver
+ * reads it, and a script that says one row and previews thousands is caught before anyone taps.
+ * That count is written by the harness from the agent's clause, not by the agent, and it is the
+ * only thing that runs before approval.
+ */
+export const RUN_TOOL_NAMES = ['mcp__runs__request_production_run'];
+/** Long enough for a person on a phone; a run that nobody answers is not run. */
+const RUN_APPROVAL_MS = 60 * 60 * 1000;
+const OUTPUT_CAP = 6000;
+const say = (text, isError = false) => ({ content: [{ type: 'text', text }], isError });
+function exec(target, script, cwd) {
+    return new Promise((resolve) => {
+        const [command, ...rest] = target.command;
+        // `{script}` in the target's own argument list is where the script goes; without it, the
+        // script is piped to stdin. The command comes from the machine's config, never from the
+        // agent, so the agent chooses what runs but not how or where.
+        const inArgs = rest.some((a) => a.includes('{script}'));
+        const args = rest.map((a) => a.split('{script}').join(script));
+        const child = spawn(command, args, {
+            cwd: target.cwd ?? cwd,
+            stdio: [inArgs ? 'ignore' : 'pipe', 'pipe', 'pipe'],
+            env: process.env,
+        });
+        let out = '';
+        const cap = (d) => { if (out.length < OUTPUT_CAP)
+            out += String(d); };
+        child.stdout?.on('data', cap);
+        child.stderr?.on('data', cap);
+        child.on('close', (c) => resolve({ code: c ?? 1, out: out.trim() }));
+        child.on('error', (e) => resolve({ code: 1, out: String(e) }));
+        if (!inArgs)
+            child.stdin?.end(script);
+    });
+}
+/**
+ * The read-only preview the harness derives from a write. Only the simplest shapes: one UPDATE
+ * or DELETE, one table, a WHERE clause, nothing after it. Anything else previews nothing rather
+ * than something wrong.
+ */
+export function previewFor(script) {
+    const s = script.trim().replace(/;\s*$/, '');
+    if (/;/.test(s))
+        return null;
+    const m = /^update\s+([`\w.]+)\s+set\s+[\s\S]+?\s+where\s+([\s\S]+)$/i.exec(s) ??
+        /^delete\s+from\s+([`\w.]+)\s+where\s+([\s\S]+)$/i.exec(s);
+    if (!m)
+        return null;
+    const where = m[2].trim();
+    if (/\b(limit|order\s+by|union|;)\b/i.test(where))
+        return null;
+    return `SELECT COUNT(*) AS would_touch FROM ${m[1]} WHERE ${where}`;
+}
+/**
+ * Execute an approved request and put the outcome where it belongs: a comment on the card for
+ * the people, and a `ran` stamp on the request so no harness — this one restarted, or another
+ * holding the same account — runs the same approval twice.
+ */
+async function runAndReport(t, job, deck, log) {
+    log(`running ${job.name} on ${job.target}`);
+    const r = await exec(t, job.script, job.cwd);
+    const outcome = r.code === 0 ? 'ran' : `FAILED (exit ${r.code})`;
+    if (job.commentId)
+        await deck.markRan(job.commentId, outcome).catch((e) => log(`could not stamp the run: ${String(e)}`));
+    await deck
+        .comment(job.card, `**Production run \`${job.name}\` on ${job.target} ${outcome}** [${job.hash}]\n\n\`\`\`\n${r.out || '(no output)'}\n\`\`\``)
+        .catch((e) => log(`could not post the run result: ${String(e)}`));
+    return r;
+}
+/**
+ * What a restarted harness owes: requests of its own that a person approved while it was not
+ * waiting — closed on idle, out of context, or simply down. Each is run now and reported, so an
+ * approval is never silently lost to a restart. The agent is not involved; it reads the result
+ * on the card next time it looks.
+ */
+export async function resumeApprovedRuns(targets, deck, cwd, log) {
+    let n = 0;
+    let owed;
+    try {
+        owed = await deck.approvedUnrun();
+    }
+    catch (e) {
+        log(`could not check for approved runs: ${e instanceof Error ? e.message : String(e)}`);
+        return 0;
+    }
+    for (const a of owed) {
+        if (a.tool_name !== 'request_production_run')
+            continue;
+        const desc = a.description || '';
+        const name = desc.split('"')[1] ?? a.request_id;
+        const target = desc.split(' on ')[1]?.split(' — ')[0] ?? '';
+        const t = targets[target];
+        const script = (a.input_preview || '').split('\n').filter((l) => !l.startsWith('-- ')).join('\n').trim();
+        const hash = /\[([0-9a-f]{12})\]/.exec(desc)?.[1] ?? '';
+        if (!t || !script) {
+            log(`approved run ${name} on ${target} cannot be resumed here (${!t ? 'no such target on this machine' : 'no script'})`);
+            continue;
+        }
+        // What was approved is what runs: the stored script must still hash to what the request named.
+        const check = createHash('sha256').update(script).digest('hex').slice(0, 12);
+        if (hash && check !== hash) {
+            log(`approved run ${name}: stored script no longer matches its hash — not running it`);
+            continue;
+        }
+        log(`${a.decided_by_name ?? 'someone'} approved ${name} on ${target} while this harness was down — running it now`);
+        await runAndReport(t, { commentId: a.comment_id, card: a.card.key, cwd, name, target, script, hash }, deck, log);
+        n++;
+    }
+    return n;
+}
+export function runTools(targets, current, deck, log, 
+/** This agent's lead, when it has one: the request goes there first, and a person is asked only if the lead endorses it. */
+lead = () => null, 
+/** The pane, told when a request is posted and when it is answered. */
+onAsk = () => { }) {
+    const names = Object.keys(targets);
+    const list = names.map((n) => `  · ${n}${targets[n].about ? ` — ${targets[n].about}` : ''}`).join('\n');
+    const server = createSdkMcpServer({
+        name: 'runs',
+        version: '1.0.0',
+        tools: [
+            tool('request_production_run', 'Ask a person to approve a script against a production system, and if they do, the harness ' +
+                'runs it and returns the output. YOU do not run anything and cannot: this call blocks until ' +
+                'it is answered on the card (up to an hour) or refused. If you report to a lead, the lead ' +
+                'reviews the script first and only an endorsed request reaches a person. Use it for the one script that ' +
+                'needs running, described honestly — the approver reads the script itself, and for an UPDATE ' +
+                'or DELETE the harness shows them how many rows it would touch before they decide. A denial ' +
+                'or a timeout is final for that script: do not resubmit it unchanged.\n\nTargets on this machine:\n' + list, {
+                target: z.string().describe(`Which system. One of: ${names.join(', ')}`),
+                name: z.string().describe('A short name for this script, e.g. "enrol-sofia-fsr-course".'),
+                purpose: z.string().describe('What it does and why, in one or two plain sentences, for the person approving it.'),
+                script: z.string().describe('The exact script to run. What is approved is what runs, byte for byte.'),
+                expected_effect: z.string().describe('What you expect it to change or return, e.g. "1 row inserted" or "returns ~5 rows".'),
+            }, async ({ target, name, purpose, script, expected_effect }) => {
+                const t = targets[target];
+                if (!t)
+                    return say(`No target called "${target}" on this machine. Targets: ${names.join(', ') || 'none'}.`, true);
+                const cur = current();
+                if (!cur)
+                    return say('There is no card being worked, so there is nowhere to ask for approval.', true);
+                if (!deck)
+                    return say('This harness has no FlareDeck credentials of its own, so it cannot post an approval request.', true);
+                const body = script.trim();
+                if (!body)
+                    return say('The script is empty.', true);
+                if (body.length > 18_000)
+                    return say(`The script is ${body.length} characters; the approval record holds 18,000. Split it into smaller runs, each reviewed on its own.`, true);
+                const hash = createHash('sha256').update(body).digest('hex').slice(0, 12);
+                // The harness's own check, before anyone is asked. Read-only by construction.
+                let previewNote = '';
+                let previewLine = '';
+                const preview = previewFor(body);
+                if (preview) {
+                    log(`preview for ${name}: ${preview}`);
+                    const p = await exec(t, preview, cur.cwd);
+                    previewLine = p.code === 0
+                        ? `would touch: ${p.out.split('\n').slice(-1)[0]?.trim() || '?'}`
+                        : `preview failed (exit ${p.code})`;
+                    previewNote = p.code === 0
+                        ? `-- harness preview (${preview}):\n-- ${p.out.split('\n').slice(-3).join(' | ')}\n\n`
+                        : `-- harness preview FAILED (exit ${p.code}): ${p.out.split('\n').slice(0, 2).join(' ')}\n\n`;
+                }
+                // Same request shape and same wait loop as every other approval: renders with
+                // Approve/Deny, raises the push, and accepts a typed `approve <id>`.
+                const leadId = lead();
+                let posted;
+                const ask = flaredeckDecider(deck, cur.card, RUN_APPROVAL_MS, {
+                    ...(leadId ? { review_by: leadId } : {}),
+                    ...(t.approvers?.length ? { approvers: t.approvers } : {}),
+                }, (p) => {
+                    posted = p;
+                    onAsk({
+                        kind: 'asking', requestId: p.request_id, commentId: p.comment_id, name, target,
+                        purpose: purpose.trim(), ...(previewLine ? { preview: previewLine } : {}), script: body, withLead: !!leadId,
+                    });
+                });
+                log(leadId ? `asking the lead to review ${name}` : `asking for approval of ${name}`);
+                const verdict = await ask({
+                    toolName: 'request_production_run',
+                    input: {
+                        description: `PRODUCTION RUN "${name}" on ${target} — ${purpose.trim()} Expected: ${expected_effect.trim()} [${hash}]`,
+                        command: `${previewNote}${body}`,
+                        whole: true,
+                    },
+                }, { signal: new AbortController().signal });
+                onAsk({ kind: 'answered', requestId: hash });
+                if (!verdict.allow)
+                    return say(`Not run. ${verdict.reason}`, true);
+                const r = await runAndReport(t, { commentId: posted?.comment_id ?? '', card: cur.card, cwd: cur.cwd, name, target, script: body, hash }, deck, log);
+                return say(`${r.code === 0 ? 'Ran' : `FAILED (exit ${r.code})`} "${name}" on ${target}. Output:\n${r.out || '(no output)'}`, r.code !== 0);
+            }),
+        ],
+    });
+    return { server, toolNames: RUN_TOOL_NAMES };
+}
+//# sourceMappingURL=runs.js.map

package/dist/runs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runs.js","sourceRoot":"","sources":["../src/runs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAIjD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,mCAAmC,CAAC,CAAC;AAEpE,iFAAiF;AACjF,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACvC,MAAM,UAAU,GAAG,IAAI,CAAC;AASxB,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,OAAO,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;AAEzG,SAAS,IAAI,CAAC,MAAiB,EAAE,MAAc,EAAE,GAAW;IAC1D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QAC1C,yFAAyF;QACzF,wFAAwF;QACxF,8DAA8D;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAQ,EAAE,IAAI,EAAE;YAClC,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG;YACtB,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YACnD,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;QACH,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,UAAU;YAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9B,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QACrE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC7C,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,CAAC,GACL,4DAA4D,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,kDAAkD,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,OAAO,uCAAuC,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC;AACtE,CAAC;AAID;;;;GAIG;AACH,KAAK,UAAU,YAAY,CAAC,CAAY,EAAE,GAAW,EAAE,IAAe,EAAE,GAA2B;IACjG,GAAG,CAAC,WAAW,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,IAAI,GAAG,CAAC;IACjE,IAAI,GAAG,CAAC,SAAS;QAAE,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,4BAA4B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzH,MAAM,IAAI;SACP,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,sBAAsB,GAAG,CAAC,IAAI,SAAS,GAAG,CAAC,MAAM,IAAI,OAAO,OAAO,GAAG,CAAC,IAAI,gBAAgB,CAAC,CAAC,GAAG,IAAI,aAAa,UAAU,CAAC;SAC9I,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,kCAAkC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpE,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAkC,EAClC,IAAe,EACf,GAAW,EACX,GAA2B;IAE3B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,IAAqD,CAAC;IAC1D,IAAI,CAAC;QAAC,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,GAAG,CAAC,sCAAsC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAC3J,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,SAAS,KAAK,wBAAwB;YAAE,SAAS;QACvD,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5D,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACzG,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,MAAM,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC1J,+FAA+F;QAC/F,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7E,IAAI,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAAC,GAAG,CAAC,gBAAgB,IAAI,6DAA6D,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACjI,GAAG,CAAC,GAAG,CAAC,CAAC,eAAe,IAAI,SAAS,aAAa,IAAI,OAAO,MAAM,+CAA+C,CAAC,CAAC;QACpH,MAAM,YAAY,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACjH,CAAC,EAAE,CAAC;IACN,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,OAAkC,EAClC,OAA6B,EAC7B,IAAsB,EACtB,GAA2B;AAC3B,4HAA4H;AAC5H,OAA4B,GAAG,EAAE,CAAC,IAAI;AACtC,uEAAuE;AACvE,QAA+B,GAAG,EAAE,GAAE,CAAC;IAEvC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,CAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE1G,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAChC,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE;YACL,IAAI,CACF,wBAAwB,EACxB,4FAA4F;gBAC1F,6FAA6F;gBAC7F,2FAA2F;gBAC3F,yGAAyG;gBACzG,8FAA8F;gBAC9F,6FAA6F;gBAC7F,oGAAoG,GAAG,IAAI,EAC7G;gBACE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8DAA8D,CAAC;gBACzF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mFAAmF,CAAC;gBACjH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wEAAwE,CAAC;gBACrG,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qFAAqF,CAAC;aAC5H,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,EAAE;gBAC3D,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC1B,IAAI,CAAC,CAAC;oBAAE,OAAO,GAAG,CAAC,qBAAqB,MAAM,+BAA+B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,EAAE,IAAI,CAAC,CAAC;gBAClH,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;gBACtB,IAAI,CAAC,GAAG;oBAAE,OAAO,GAAG,CAAC,yEAAyE,EAAE,IAAI,CAAC,CAAC;gBACtG,IAAI,CAAC,IAAI;oBAAE,OAAO,GAAG,CAAC,8FAA8F,EAAE,IAAI,CAAC,CAAC;gBAC5H,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC3B,IAAI,CAAC,IAAI;oBAAE,OAAO,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;gBACpD,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM;oBAAE,OAAO,GAAG,CAAC,iBAAiB,IAAI,CAAC,MAAM,sGAAsG,EAAE,IAAI,CAAC,CAAC;gBAC/K,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAE1E,8EAA8E;gBAC9E,IAAI,WAAW,GAAG,EAAE,CAAC;gBACrB,IAAI,WAAW,GAAG,EAAE,CAAC;gBACrB,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;gBACjC,IAAI,OAAO,EAAE,CAAC;oBACZ,GAAG,CAAC,eAAe,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;oBACvC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;oBAC1C,WAAW,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC;wBACxB,CAAC,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE;wBACjE,CAAC,CAAC,wBAAwB,CAAC,CAAC,IAAI,GAAG,CAAC;oBACtC,WAAW,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC;wBACxB,CAAC,CAAC,uBAAuB,OAAO,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM;wBACvF,CAAC,CAAC,mCAAmC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;gBACnG,CAAC;gBAED,8EAA8E;gBAC9E,qEAAqE;gBACrE,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC;gBACtB,IAAI,MAA8D,CAAC;gBACnE,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE;oBAC5D,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3D,EAAE,CAAC,CAAC,EAAE,EAAE;oBAAG,MAAM,GAAG,CAAC,CAAC;oBAAC,KAAK,CAAC;wBAC5B,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM;wBAC9E,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM;qBAC5G,CAAC,CAAC;gBAAC,CAAC,CAAC,CAAC;gBACP,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;gBACrF,MAAM,OAAO,GAAG,MAAM,GAAG,CACvB;oBACE,QAAQ,EAAE,wBAAwB;oBAClC,KAAK,EAAE;wBACL,WAAW,EAAE,mBAAmB,IAAI,QAAQ,MAAM,MAAM,OAAO,CAAC,IAAI,EAAE,cAAc,eAAe,CAAC,IAAI,EAAE,KAAK,IAAI,GAAG;wBACtH,OAAO,EAAE,GAAG,WAAW,GAAG,IAAI,EAAE;wBAChC,KAAK,EAAE,IAAI;qBACZ;iBACF,EACD,EAAE,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,EAAE,CACzC,CAAC;gBACF,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7C,IAAI,CAAC,OAAO,CAAC,KAAK;oBAAE,OAAO,GAAG,CAAC,YAAY,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;gBAEnE,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBACpJ,OAAO,GAAG,CACR,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,IAAI,GAAG,KAAK,IAAI,QAAQ,MAAM,cAAc,CAAC,CAAC,GAAG,IAAI,aAAa,EAAE,EAChH,CAAC,CAAC,IAAI,KAAK,CAAC,CACb,CAAC;YACJ,CAAC,CACF;SACF;KACF,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;AAC/C,CAAC"}

package/dist/sandbox.d.ts

@@ -0,0 +1,13 @@
+import type { HookCallbackMatcher, HookEvent } from '@anthropic-ai/claude-agent-sdk';
+/**
+ * True when this command looks like it writes somewhere outside `root`.
+ *
+ * Reads are never refused, so the question is only ever asked of a line that changes something.
+ */
+export declare function writesOutside(command: string, root: string): string | null;
+/**
+ * `job()` returns the directory this card owns, or null when there is no job — in which case
+ * nothing is enforced here, because a turn with no checkout has a different rule (it is told it
+ * may change nothing at all) and the publishing tools already refuse it.
+ */
+export declare function sandboxGuard(job: () => string | null, onNote: (text: string) => void): Partial<Record<HookEvent, HookCallbackMatcher[]>>;