agentic-engineering-harness 0.10.6 → 0.11.0

package/dist/releases/release-1791192250042-17963-978001ab/candidates/repair.js

@@ -0,0 +1,266 @@
+import { sha256Canonical } from "../core/digest.js";
+import { AehError } from "../core/errors.js";
+import { loadOperation } from "../operations/state.js";
+import { deterministicParticipantId } from "../security/executionLease.js";
+import { recordEvent } from "../telemetry/events.js";
+import fs from "node:fs/promises";
+import path from "node:path";
+import { minimatch } from "minimatch";
+import { assembleCandidateChangeSet } from "./assembler.js";
+import { captureInverseCandidateChangeSet, executeIsolatedCandidateMutation } from "./direct.js";
+import { bindAssembledCandidate } from "./binding.js";
+import { assertRepairScopeBlockerReceipt, createRepairScopeBlockerReceipt, parseRepairScopeBlockerFromSession, writeRepairScopeBlockerReceipt, filterForbiddenScopeForAmendment, assertRepairScopeAmendment, repairHardProtectedPaths, findRepairHardProtectedViolations, REPAIR_AMENDABLE_MANIFEST_PATHS, } from "./repairScope.js";
+export function assertCompiledRepairer(selection, catalog) {
+    if (!selection || selection.role !== "Repairer")
+        throw new AehError("PARTICIPANT_PLAN_INVALID", "A frozen Repairer selection is required for candidate repair.");
+    if (selection.permissions.review === "allow" || selection.permissions.delegate === "allow" || selection.permissions.gitWrite === "allow" || selection.outputContract === "reviewer") {
+        throw new AehError("PARTICIPANT_PLAN_INVALID", "Repairer authority cannot include review, delegation, Git delivery, or reviewer output capability.");
+    }
+    if (!catalog)
+        throw new AehError("PARTICIPANT_PLAN_INVALID", "A compiled ExecutionCatalog is required for candidate repair.");
+    const { digest, ...catalogBody } = catalog;
+    if (sha256Canonical(catalogBody) !== digest)
+        throw new AehError("PARTICIPANT_PLAN_INVALID", "Repairer ExecutionCatalog digest is invalid.");
+    const binding = catalog.roleBindings.Repairer;
+    if (!binding)
+        throw new AehError("PARTICIPANT_PLAN_INVALID", "The compiled ExecutionCatalog has no Repairer role binding.");
+    const matches = binding.runtimeId === selection.runtimeName &&
+        binding.modelAlias === selection.modelAlias &&
+        binding.transport === selection.transport &&
+        binding.profile === selection.profile &&
+        binding.variant === selection.variant &&
+        binding.nativeAgent === selection.nativeAgent &&
+        binding.outputContract === selection.outputContract;
+    if (!matches)
+        throw new AehError("PARTICIPANT_PLAN_INVALID", "Repairer selection does not match its frozen ExecutionCatalog role binding.");
+}
+export async function executeRepairerCandidateMutation(input) {
+    assertCompiledRepairer(input.selection, input.executionCatalog);
+    const operation = await loadOperation(input.stateRoot, input.operationId);
+    const currentCandidate = operation.candidateRevision;
+    if (!currentCandidate)
+        throw new AehError("CANDIDATE_STALE", `Operation ${input.operationId} has no current CandidateRevision for Repairer execution.`);
+    if (currentCandidate.taskId && currentCandidate.taskId !== input.taskId)
+        throw new AehError("CANDIDATE_STALE", "Repairer candidate belongs to another task.");
+    const participantId = deterministicParticipantId(input.operationId, input.selection.logicalAgent, `${input.phase}:${input.workUnitId}`);
+    const isolated = await executeIsolatedCandidateMutation({
+        root: input.root,
+        operationId: input.operationId,
+        taskId: input.taskId,
+        workUnitId: input.workUnitId,
+        candidate: currentCandidate,
+        config: input.config,
+        contract: input.contract,
+        execute: (isolatedRoot) => input.execute(isolatedRoot, participantId),
+        prepareWorkspace: input.prepareWorkspace
+    });
+    if (isolated.session.exitCode !== 0) {
+        // A runtime failure is not a scope blocker; surface the session unchanged
+        // so the controller can fail closed through its normal repair accounting.
+        // A blocker declaration on a failed turn is ignored (no authority).
+        return { session: isolated.session };
+    }
+    if (!isolated.changeSet) {
+        // No-mutation path: either an empty repair turn or an explicit
+        // out-of-scope-blocker declaration. The blocker must be a schema-valid
+        // `repair-result` payload with NO file changes; it surfaces as a typed
+        // BLOCKED receipt, never a throw and never a silent pass.
+        const needed = parseRepairScopeBlockerFromSession(isolated.session);
+        if (!needed)
+            return { session: isolated.session };
+        assertBlockerFilesAreActuallyBlocked(needed.map((entry) => entry.path), input.allowedScope, [...input.forbiddenScope, ...repairProtectedPaths(input.config, input.contract)]);
+        const blocker = createRepairScopeBlockerReceipt({
+            operationId: input.operationId,
+            taskId: input.taskId,
+            workUnitId: input.workUnitId,
+            participantId,
+            filesNeededOutsideScope: needed,
+        });
+        // Fail closed: the BLOCKED outcome is only valid with a durable receipt.
+        // A receipt write failure throws (no suppression); write-then-verify reads
+        // the receipt back and re-validates digest + schema before surfacing.
+        const receiptFile = await writeRepairScopeBlockerReceipt(input.stateRoot, input.config, blocker);
+        await verifyRepairScopeBlockerReceipt(receiptFile, blocker);
+        await recordEvent(input.stateRoot, input.config, "harness.candidate.repair-scope-blocked", {
+            taskId: input.taskId,
+            workUnitId: input.workUnitId,
+            participantId,
+            role: input.selection.role,
+            blockerDigest: blocker.digest,
+            filesNeededOutsideScope: blocker.filesNeededOutsideScope,
+        }).catch(() => undefined);
+        return { session: isolated.session, scopeBlocker: blocker };
+    }
+    // A turn that both mutates and declares needed files is contradictory:
+    // fail closed rather than guessing which signal has authority.
+    if (parseRepairScopeBlockerFromSession(isolated.session)) {
+        throw new AehError("PARTICIPANT_PLAN_INVALID", "REPAIR_SCOPE_BLOCKER_CONFLICT: Repairer declared filesNeededOutsideScope while also producing a ChangeSet; the no-mutation blocker path requires no file changes.");
+    }
+    const { allowedScope, forbiddenScope } = effectiveRepairScope(input.allowedScope, [...input.forbiddenScope, ...repairProtectedPaths(input.config, input.contract)], input.config, input.contract, input.scopeAmendment);
+    const assembled = await assembleCandidateChangeSet({
+        root: input.root,
+        operationId: input.operationId,
+        projectId: currentCandidate.projectId,
+        taskId: input.taskId,
+        currentCandidate,
+        changeSet: isolated.changeSet,
+        allowedScope,
+        forbiddenScope,
+        candidateId: `candidate:${input.operationId}:r${currentCandidate.revision + 1}`,
+        workspace: currentCandidate.workspace,
+        worktree: input.root,
+        semanticAssessment: input.semanticAssessment
+    });
+    await bindAssembledCandidate({ root: input.root, stateRoot: input.stateRoot, operationId: input.operationId, baseCandidate: currentCandidate, candidate: assembled.candidate, changeSet: isolated.changeSet });
+    await recordEvent(input.stateRoot, input.config, "harness.candidate.repair-assembled", {
+        taskId: input.taskId,
+        workUnitId: isolated.changeSet.workUnitId,
+        participantId: isolated.changeSet.participantId,
+        role: input.selection.role,
+        candidateRevision: assembled.candidate.revision,
+        candidateDigest: assembled.candidate.sourceDigest,
+        impactDigest: assembled.impact.digest
+    });
+    return { session: isolated.session, changeSet: isolated.changeSet, candidate: assembled.candidate, impact: assembled.impact };
+}
+export async function rejectRepairCandidateChangeSet(input) {
+    const operation = await loadOperation(input.stateRoot, input.operationId);
+    const currentCandidate = operation.candidateRevision;
+    if (!currentCandidate || currentCandidate.revision !== input.rejectedChangeSet.baseCandidateRevision + 1) {
+        throw new AehError("CANDIDATE_STALE", "Rejected repair no longer matches the current CandidateRevision.");
+    }
+    const inverse = await captureInverseCandidateChangeSet({
+        root: input.root,
+        operationId: input.operationId,
+        taskId: input.taskId,
+        workUnitId: input.workUnitId,
+        candidate: currentCandidate,
+        config: input.config,
+        contract: input.contract,
+        rejectedChangeSet: input.rejectedChangeSet,
+        prepareWorkspace: input.prepareWorkspace
+    });
+    if (!inverse)
+        throw new AehError("CANDIDATE_STALE", "Rejected repair has no reversible source changes.");
+    const rejectedScope = effectiveRepairScope(input.allowedScope, [...input.forbiddenScope, ...repairProtectedPaths(input.config, input.contract)], input.config, input.contract, input.scopeAmendment);
+    const assembled = await assembleCandidateChangeSet({
+        root: input.root,
+        operationId: input.operationId,
+        projectId: currentCandidate.projectId,
+        taskId: input.taskId,
+        currentCandidate,
+        changeSet: inverse,
+        allowedScope: rejectedScope.allowedScope,
+        forbiddenScope: rejectedScope.forbiddenScope,
+        candidateId: `candidate:${input.operationId}:r${currentCandidate.revision + 1}`,
+        workspace: currentCandidate.workspace,
+        worktree: input.root,
+        semanticAssessment: input.semanticAssessment
+    });
+    await bindAssembledCandidate({ root: input.root, stateRoot: input.stateRoot, operationId: input.operationId, baseCandidate: currentCandidate, candidate: assembled.candidate, changeSet: inverse });
+    await recordEvent(input.stateRoot, input.config, "harness.candidate.repair-rejected", {
+        taskId: input.taskId,
+        workUnitId: input.workUnitId,
+        rejectedCandidateRevision: currentCandidate.revision,
+        rollbackCandidateRevision: assembled.candidate.revision,
+        candidateDigest: assembled.candidate.sourceDigest
+    });
+    return { candidate: assembled.candidate, impact: assembled.impact };
+}
+/** Files that define the frozen task, validation policy, or runtime policy cannot be changed by repair. */
+export function repairProtectedPaths(config, contract) {
+    // Canonical default-deny source: HARD-protected (never exemptible) plus the
+    // amendable dependency-manifest denials. HARD is owned by repairScope.ts so
+    // the exemption gates cannot drift from the deny source.
+    const hard = repairHardProtectedPaths(config, contract);
+    const amendable = new Set();
+    for (const raw of REPAIR_AMENDABLE_MANIFEST_PATHS) {
+        const value = raw.replaceAll("\\", "/").replace(/^\.\//, "").replace(/\/$/, "");
+        if (!value || path.isAbsolute(value) || value.split("/").includes(".."))
+            continue;
+        amendable.add(value);
+        amendable.add(`${value}/**`);
+    }
+    return [...new Set([...hard, ...amendable])].sort();
+}
+/**
+ * DETERMINISTIC write-then-verify for the blocker receipt. The BLOCKED outcome
+ * is only valid with a durable, schema-valid, digest-matching receipt. Read
+ * the persisted file back and re-validate before surfacing; any mismatch
+ * throws fail-closed (no suppression, no best-effort).
+ */
+async function verifyRepairScopeBlockerReceipt(receiptFile, blocker) {
+    let raw;
+    try {
+        raw = await fs.readFile(receiptFile, "utf8");
+    }
+    catch (error) {
+        throw new AehError("PARTICIPANT_PLAN_INVALID", `REPAIR_SCOPE_RECEIPT_NOT_DURABLE: blocker receipt could not be read back from ${receiptFile}: ${error instanceof Error ? error.message : String(error)}.`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (error) {
+        throw new AehError("PARTICIPANT_PLAN_INVALID", `REPAIR_SCOPE_RECEIPT_NOT_DURABLE: blocker receipt at ${receiptFile} is not valid JSON: ${error instanceof Error ? error.message : String(error)}.`);
+    }
+    assertRepairScopeBlockerReceipt(parsed);
+    const persisted = parsed;
+    if (persisted.digest !== blocker.digest) {
+        throw new AehError("PARTICIPANT_PLAN_INVALID", `REPAIR_SCOPE_RECEIPT_NOT_DURABLE: persisted blocker receipt digest does not match the declared blocker (${receiptFile}).`);
+    }
+}
+/**
+ * DETERMINISTIC guard: a blocker declaration is only valid when every
+ * declared file is actually outside the frozen scope (not matched by
+ * `allowedScope`) or explicitly denied (`forbiddenScope`, including the
+ * default-deny protected paths). Declaring an already-writable file as a
+ * blocker is rejected fail-closed so the channel cannot be abused to widen
+ * scope. Model content, deterministic gate.
+ */
+function assertBlockerFilesAreActuallyBlocked(files, allowedScope, forbiddenScope) {
+    const invalid = files.filter((file) => {
+        const normalized = file.replaceAll("\\", "/").replace(/^\.\//, "");
+        const outOfAllowed = !matchesAnyRepairScope(normalized, allowedScope);
+        const denied = matchesAnyRepairScope(normalized, forbiddenScope);
+        return !outOfAllowed && !denied;
+    });
+    if (invalid.length) {
+        throw new AehError("PARTICIPANT_PLAN_INVALID", `REPAIR_SCOPE_BLOCKER_NOT_BLOCKED: declared needed file(s) are already within the frozen scope: ${invalid.join(", ")}.`);
+    }
+}
+/**
+ * DETERMINISTIC projection of a lead-approved amendment onto the effective
+ * assembly scopes. The default-deny source is unchanged; exactly the
+ * amendment-exempted paths are removed from the forbidden list. The amended
+ * contract must already allow every exempted path (persisted allowlist
+ * amendment + reseal); otherwise the retry fails closed with no auto-allow.
+ * HARD-protected paths (frozen TaskContract, seal, validators,
+ * acceptance/spec, policy) are never exemptible even with an approval.
+ */
+function effectiveRepairScope(allowedScope, forbiddenScope, config, contract, amendment) {
+    if (!amendment)
+        return { allowedScope, forbiddenScope };
+    assertRepairScopeAmendment(amendment);
+    if (amendment.taskId !== contract.task.id) {
+        throw new AehError("PARTICIPANT_PLAN_INVALID", "REPAIR_SCOPE_AMENDMENT_TASK_MISMATCH: amendment belongs to another task.");
+    }
+    const contractAllowed = contract.scope?.allowed ?? [];
+    for (const filePath of amendment.exemptedPaths) {
+        if (!contractAllowed.includes(filePath) && !matchesAnyRepairScope(filePath, contractAllowed)) {
+            throw new AehError("PARTICIPANT_PLAN_INVALID", `REPAIR_SCOPE_AMENDMENT_NOT_SEALED: exempted path '${filePath}' is not in the amended TaskContract scope allowlist.`);
+        }
+    }
+    // HARD-protection gate (never exemptible): an approved blocker cannot make
+    // frozen TaskContract/seal/validators/acceptance/spec/policy paths writable.
+    const hardViolations = findRepairHardProtectedViolations(amendment.exemptedPaths, config, contract);
+    if (hardViolations.length) {
+        throw new AehError("PARTICIPANT_PLAN_INVALID", `REPAIR_SCOPE_AMENDMENT_NON_EXEMPTIBLE: exempted path(s) are never exemptible (frozen TaskContract, seal, validators, acceptance/spec, policy): ${hardViolations.join(", ")}.`);
+    }
+    const hardProtected = repairHardProtectedPaths(config, contract);
+    return { allowedScope, forbiddenScope: filterForbiddenScopeForAmendment(forbiddenScope, amendment, hardProtected) };
+}
+function matchesAnyRepairScope(file, patterns) {
+    return patterns.some((pattern) => pattern === "**" || minimatch(file, pattern, { dot: true }));
+}
+//# sourceMappingURL=repair.js.map

package/dist/releases/release-1791192250042-17963-978001ab/candidates/repair.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repair.js","sourceRoot":"","sources":["../../src/candidates/repair.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAI7C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,0BAA0B,EAA6D,MAAM,gBAAgB,CAAC;AACvH,OAAO,EAAE,gCAAgC,EAAE,gCAAgC,EAAE,MAAM,aAAa,CAAC;AACjG,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EACL,+BAA+B,EAC/B,+BAA+B,EAC/B,kCAAkC,EAClC,8BAA8B,EAC9B,gCAAgC,EAChC,0BAA0B,EAC1B,wBAAwB,EACxB,iCAAiC,EACjC,+BAA+B,GAGhC,MAAM,kBAAkB,CAAC;AAiB1B,MAAM,UAAU,sBAAsB,CAAC,SAA8C,EAAE,OAAuC;IAC5H,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU;QAAE,MAAM,IAAI,QAAQ,CAAC,0BAA0B,EAAE,+DAA+D,CAAC,CAAC;IACjK,IAAI,SAAS,CAAC,WAAW,CAAC,MAAM,KAAK,OAAO,IAAI,SAAS,CAAC,WAAW,CAAC,QAAQ,KAAK,OAAO,IAAI,SAAS,CAAC,WAAW,CAAC,QAAQ,KAAK,OAAO,IAAI,SAAS,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;QACpL,MAAM,IAAI,QAAQ,CAAC,0BAA0B,EAAE,oGAAoG,CAAC,CAAC;IACvJ,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,QAAQ,CAAC,0BAA0B,EAAE,+DAA+D,CAAC,CAAC;IAC9H,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,CAAC;IAC3C,IAAI,eAAe,CAAC,WAAW,CAAC,KAAK,MAAM;QAAE,MAAM,IAAI,QAAQ,CAAC,0BAA0B,EAAE,8CAA8C,CAAC,CAAC;IAC5I,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC;IAC9C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,QAAQ,CAAC,0BAA0B,EAAE,6DAA6D,CAAC,CAAC;IAC5H,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,WAAW;QACzD,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU;QAC3C,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;QACzC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO;QACrC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO;QACrC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW;QAC7C,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,cAAc,CAAC;IACtD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,QAAQ,CAAC,0BAA0B,EAAE,6EAA6E,CAAC,CAAC;AAC9I,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,KA0BtD;IACC,sBAAsB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1E,MAAM,gBAAgB,GAAG,SAAS,CAAC,iBAAiB,CAAC;IACrD,IAAI,CAAC,gBAAgB;QAAE,MAAM,IAAI,QAAQ,CAAC,iBAAiB,EAAE,aAAa,KAAK,CAAC,WAAW,2DAA2D,CAAC,CAAC;IACxJ,IAAI,gBAAgB,CAAC,MAAM,IAAI,gBAAgB,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,QAAQ,CAAC,iBAAiB,EAAE,6CAA6C,CAAC,CAAC;IAE9J,MAAM,aAAa,GAAG,0BAA0B,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IACxI,MAAM,QAAQ,GAAG,MAAM,gCAAgC,CAAC;QACtD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,gBAAgB;QAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,aAAa,CAAC;QACrE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;KACzC,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACpC,0EAA0E;QAC1E,0EAA0E;QAC1E,oEAAoE;QACpE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACxB,+DAA+D;QAC/D,uEAAuE;QACvE,uEAAuE;QACvE,0DAA0D;QAC1D,MAAM,MAAM,GAAG,kCAAkC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QAClD,oCAAoC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,cAAc,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC9K,MAAM,OAAO,GAAG,+BAA+B,CAAC;YAC9C,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,aAAa;YACb,uBAAuB,EAAE,MAAM;SAChC,CAAC,CAAC;QACH,yEAAyE;QACzE,2EAA2E;QAC3E,sEAAsE;QACtE,MAAM,WAAW,GAAG,MAAM,8BAA8B,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjG,MAAM,+BAA+B,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,wCAAwC,EAAE;YACzF,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,aAAa;YACb,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI;YAC1B,aAAa,EAAE,OAAO,CAAC,MAAM;YAC7B,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;SACzD,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;IAC9D,CAAC;IACD,uEAAuE;IACvE,+DAA+D;IAC/D,IAAI,kCAAkC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,QAAQ,CAAC,0BAA0B,EAAE,mKAAmK,CAAC,CAAC;IACtN,CAAC;IAED,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,cAAc,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACxN,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC;QACjD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,gBAAgB,CAAC,SAAS;QACrC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,gBAAgB;QAChB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,YAAY;QACZ,cAAc;QACd,WAAW,EAAE,aAAa,KAAK,CAAC,WAAW,KAAK,gBAAgB,CAAC,QAAQ,GAAG,CAAC,EAAE;QAC/E,SAAS,EAAE,gBAAgB,CAAC,SAAS;QACrC,QAAQ,EAAE,KAAK,CAAC,IAAI;QACpB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;KAC7C,CAAC,CAAC;IACH,MAAM,sBAAsB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/M,MAAM,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,oCAAoC,EAAE;QACrF,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,UAAU;QACzC,aAAa,EAAE,QAAQ,CAAC,SAAS,CAAC,aAAa;QAC/C,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI;QAC1B,iBAAiB,EAAE,SAAS,CAAC,SAAS,CAAC,QAAQ;QAC/C,eAAe,EAAE,SAAS,CAAC,SAAS,CAAC,YAAY;QACjD,YAAY,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM;KACtC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;AAChI,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAcpD;IACC,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1E,MAAM,gBAAgB,GAAG,SAAS,CAAC,iBAAiB,CAAC;IACrD,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,QAAQ,KAAK,KAAK,CAAC,iBAAiB,CAAC,qBAAqB,GAAG,CAAC,EAAE,CAAC;QACzG,MAAM,IAAI,QAAQ,CAAC,iBAAiB,EAAE,kEAAkE,CAAC,CAAC;IAC5G,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,gCAAgC,CAAC;QACrD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,gBAAgB;QAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;KACzC,CAAC,CAAC;IACH,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,QAAQ,CAAC,iBAAiB,EAAE,mDAAmD,CAAC,CAAC;IACzG,MAAM,aAAa,GAAG,oBAAoB,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,cAAc,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACrM,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC;QACjD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,gBAAgB,CAAC,SAAS;QACrC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,gBAAgB;QAChB,SAAS,EAAE,OAAO;QAClB,YAAY,EAAE,aAAa,CAAC,YAAY;QACxC,cAAc,EAAE,aAAa,CAAC,cAAc;QAC5C,WAAW,EAAE,aAAa,KAAK,CAAC,WAAW,KAAK,gBAAgB,CAAC,QAAQ,GAAG,CAAC,EAAE;QAC/E,SAAS,EAAE,gBAAgB,CAAC,SAAS;QACrC,QAAQ,EAAE,KAAK,CAAC,IAAI;QACpB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;KAC7C,CAAC,CAAC;IACH,MAAM,sBAAsB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IACpM,MAAM,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,mCAAmC,EAAE;QACpF,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,yBAAyB,EAAE,gBAAgB,CAAC,QAAQ;QACpD,yBAAyB,EAAE,SAAS,CAAC,SAAS,CAAC,QAAQ;QACvD,eAAe,EAAE,SAAS,CAAC,SAAS,CAAC,YAAY;KAClD,CAAC,CAAC;IACH,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;AACtE,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,oBAAoB,CAAC,MAA4B,EAAE,QAAsB;IACvF,4EAA4E;IAC5E,4EAA4E;IAC5E,yDAAyD;IACzD,MAAM,IAAI,GAAG,wBAAwB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,+BAA+B,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QAClF,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,+BAA+B,CAC5C,WAAmB,EACnB,OAAoC;IAEpC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAChB,0BAA0B,EAC1B,iFAAiF,WAAW,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAC3J,CAAC;IACJ,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAChB,0BAA0B,EAC1B,wDAAwD,WAAW,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CACpJ,CAAC;IACJ,CAAC;IACD,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,MAAqC,CAAC;IACxD,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACxC,MAAM,IAAI,QAAQ,CAChB,0BAA0B,EAC1B,2GAA2G,WAAW,IAAI,CAC3H,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,oCAAoC,CAC3C,KAAwB,EACxB,YAA+B,EAC/B,cAAiC;IAEjC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACnE,MAAM,YAAY,GAAG,CAAC,qBAAqB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,qBAAqB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACjE,OAAO,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC;IAClC,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,QAAQ,CAChB,0BAA0B,EAC1B,kGAAkG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACxH,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAC3B,YAA+B,EAC/B,cAAiC,EACjC,MAA4B,EAC5B,QAAsB,EACtB,SAA6C;IAE7C,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;IACxD,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,QAAQ,CAAC,0BAA0B,EAAE,0EAA0E,CAAC,CAAC;IAC7H,CAAC;IACD,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;IACtD,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC;QAC/C,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,CAAC;YAC7F,MAAM,IAAI,QAAQ,CAChB,0BAA0B,EAC1B,qDAAqD,QAAQ,uDAAuD,CACrH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM,cAAc,GAAG,iCAAiC,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACpG,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAChB,0BAA0B,EAC1B,kJAAkJ,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/K,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,wBAAwB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,gCAAgC,CAAC,cAAc,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,CAAC;AACtH,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,QAA2B;IACtE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACjG,CAAC"}

package/dist/releases/release-1791192250042-17963-978001ab/candidates/repairScope.d.ts

@@ -0,0 +1,277 @@
+import type { HarnessProjectConfig, TaskContract, ValidationCheck, WorkerSession } from "../core/types.js";
+import { type ProductChoiceRequestContentV1 } from "../operations/state.js";
+import { HumanDecisionLedgerV2, type DecisionChoiceV1, type HumanDecisionBindingV2, type HumanDecisionV2 } from "../security/humanDecision.js";
+/**
+ * Out-of-scope-blocker → bounded-replan channel.
+ *
+ * Mechanism classification (decision-mechanism invariant):
+ * - Blocker parsing/validation, amendment bounding, contract amendment,
+ *   reseal and forbidden-scope filtering are DETERMINISTIC.
+ * - Scope-amendment authority is HUMAN via the canonical HumanDecisionLedgerV2
+ *   product-choice channel (suspendOperationForProductChoice +
+ *   productChoiceForRequest with binding + consumeExact). A caller-supplied
+ *   `{approved, decidedBy}` string alone NEVER authorizes an amendment; only a
+ *   ledger-consumed CHOOSE decision with a matching operation/candidate/policy/
+ *   epoch binding for the exact blocker paths authorizes
+ *   applyRepairScopeAmendment. The deterministic controller applies the
+ *   amendment, persists it, reseals, and retries exactly once.
+ * - No model output selects tools, grants capability, or bypasses gates.
+ */
+export declare const REPAIR_SCOPE_BLOCKER_VERSION: 1;
+export declare const MAX_REPAIR_SCOPE_BLOCKER_FILES_V1 = 8;
+export declare const MAX_REPAIR_SCOPE_AMENDMENTS_PER_TASK_V1 = 1;
+/**
+ * Amendable scope denials: dependency manifests that a ledger-approved
+ * amendment may exempt for a single retry. Everything else in the
+ * default-deny protected set is HARD-protected (never exemptible).
+ */
+export declare const REPAIR_AMENDABLE_MANIFEST_PATHS: readonly ["package.json", "package-lock.json", "pnpm-lock.yaml", "yarn.lock"];
+/**
+ * DETERMINISTIC hard-protected paths (never exemptible): frozen TaskContract,
+ * seal, validators, acceptance/spec files, and policy paths. A blocker
+ * intersecting any of these is rejected as BLOCKED citing non-exemptible
+ * with no suspend/approve path. Dependency manifests (see
+ * REPAIR_AMENDABLE_MANIFEST_PATHS) are the amendable subset of the
+ * default-deny set.
+ */
+export declare function repairHardProtectedPaths(config: HarnessProjectConfig, contract: TaskContract): string[];
+/**
+ * DETERMINISTIC hard-protection gate: returns the subset of `paths` that
+ * intersect HARD-protected patterns (exact or `/**` variants). Empty means
+ * amendable (or already allowed); non-empty means non-exemptible.
+ */
+export declare function findRepairHardProtectedViolations(paths: readonly string[], config: HarnessProjectConfig, contract: TaskContract): string[];
+/**
+ * DETERMINISTIC BLOCKED check for non-exemptible paths. Cites the exact
+ * hard-protected files and states there is no suspend/approve path.
+ */
+export declare function repairScopeNonExemptibleValidationCheck(blocker: RepairScopeBlockerReceiptV1, hardPaths: readonly string[]): ValidationCheck;
+export interface RepairScopeNeededFileV1 {
+    path: string;
+    reason: string;
+}
+export interface RepairScopeBlockerReceiptV1 {
+    version: 1;
+    /** Deterministic mechanism marker: the receipt is controller-validated, never model authority. */
+    mechanism: "DETERMINISTIC";
+    operationId: string;
+    taskId: string;
+    workUnitId: string;
+    participantId?: string;
+    declaredAt: string;
+    filesNeededOutsideScope: RepairScopeNeededFileV1[];
+    digest: string;
+}
+export interface RepairScopeAmendmentV1 {
+    version: 1;
+    /** Deterministic mechanism marker: the controller applied a ledger-consumed human approval, never model authority. */
+    mechanism: "DETERMINISTIC";
+    operationId: string;
+    taskId: string;
+    blockerDigest: string;
+    exemptedPaths: string[];
+    decidedBy: "lead" | "human";
+    decisionReason: string;
+    decidedAt: string;
+    /** Ledger provenance: the exact consumed HumanDecision that authorized this amendment. */
+    decisionId: string;
+    requestId: string;
+    decidedActor: string;
+    amendedScope: string[];
+    contractPath: string;
+    sealPath: string;
+    amendmentPath: string;
+    amendmentDigest: string;
+}
+/**
+ * Canonical repair-scope product-choice IDs. The scope-amendment question is a
+ * product choice over the exact blocker-declared paths: approve exactly those
+ * paths (bounded amendment + reseal + single retry) or deny (BLOCKED stands).
+ * Exact paths only; no wildcards, no expansion.
+ */
+export declare const REPAIR_SCOPE_APPROVE_CHOICE_ID: "approve-exact-paths";
+export declare const REPAIR_SCOPE_DENY_CHOICE_ID: "deny-scope-expansion";
+/**
+ * Ledger-gated authorization for a scope amendment. A caller-supplied
+ * approved/decidedBy string alone is never sufficient; only this
+ * ledger-consumed decision with a matching binding authorizes
+ * applyRepairScopeAmendment.
+ */
+export interface RepairScopeLedgerAuthorizationV1 {
+    /** The ledger-consumed CHOOSE decision (kind CHOOSE, PRODUCT_CHOICE purpose). */
+    decision: HumanDecisionV2;
+    /** The current operation/candidate/policy/epoch binding the decision was consumed under. */
+    binding: HumanDecisionBindingV2;
+    /** The suspend-created product-choice request ID the decision answers. */
+    requestId: string;
+}
+export declare function isSafeRepairScopePath(value: string): boolean;
+export declare function normalizeRepairScopePath(value: string): string;
+/**
+ * DETERMINISTIC parse of the Repairer `repair-result` no-mutation report.
+ * Returns the declared needed files when stdout/stderr carries a schema-valid
+ * `repair-result` payload with a non-empty `filesNeededOutsideScope`, else
+ * undefined. Never throws for absent/invalid markers; the caller decides the
+ * typed outcome. Model content, deterministic validation.
+ */
+export declare function parseRepairScopeBlockerFromSession(session: Pick<WorkerSession, "stdout" | "stderr">): RepairScopeNeededFileV1[] | undefined;
+export declare function repairScopeBlockerDigest(blocker: Omit<RepairScopeBlockerReceiptV1, "digest">): string;
+export declare function createRepairScopeBlockerReceipt(input: {
+    operationId: string;
+    taskId: string;
+    workUnitId: string;
+    participantId?: string;
+    declaredAt?: string;
+    filesNeededOutsideScope: RepairScopeNeededFileV1[];
+}): RepairScopeBlockerReceiptV1;
+export declare function assertRepairScopeBlockerReceipt(value: unknown): asserts value is RepairScopeBlockerReceiptV1;
+/**
+ * DETERMINISTIC projection of a blocker receipt into a validation check.
+ * Status is FAIL (fail-closed) with the needed files cited; the controller
+ * treats this as the BLOCKED outcome until a lead-approved amendment reseals.
+ */
+export declare function repairScopeBlockerValidationCheck(blocker: RepairScopeBlockerReceiptV1): ValidationCheck;
+export declare function repairScopeBlockerReceiptPath(root: string, config: HarnessProjectConfig, taskId: string): string;
+export declare function writeRepairScopeBlockerReceipt(root: string, config: HarnessProjectConfig, blocker: RepairScopeBlockerReceiptV1): Promise<string>;
+export declare function repairScopeAmendmentPath(root: string, taskId: string, index?: number): string;
+export declare function listRepairScopeAmendments(root: string, _config: HarnessProjectConfig, taskId: string): Promise<RepairScopeAmendmentV1[]>;
+export declare function assertRepairScopeAmendment(value: unknown): asserts value is RepairScopeAmendmentV1;
+/**
+ * DETERMINISTIC controller-owned bounded replan gate (ledger-gated).
+ *
+ * - Max 1 amendment per task (fail-closed when exhausted).
+ * - ONLY a ledger-consumed HumanDecisionV2 (kind CHOOSE, PRODUCT_CHOICE purpose,
+ *   choiceId `approve-exact-paths`, matching operation/candidate/policy/epoch
+ *   binding, one-time consumeExact receipt) authorizes an amendment. A
+ *   caller-supplied `{approved, decidedBy}` string alone NEVER authorizes; that
+ *   self-label path was deleted. A deny choice returns BLOCKED (fail closed,
+ *   citing the blocker); any missing/invalid/stale provenance throws fail-closed.
+ * - The amendment adds exactly the blocker-declared paths to the TaskContract
+ *   scope allowlist, persists the amended contract YAML, persists a durable
+ *   amendment artifact (seal trail citing the exact ledger decision), and
+ *   deterministically reseals via `sealTask`. No auto-allow, no silent
+ *   expansion, no model authority. Exact paths only.
+ */
+export declare function applyRepairScopeAmendment(input: {
+    root: string;
+    config: HarnessProjectConfig;
+    contract: TaskContract;
+    blocker: RepairScopeBlockerReceiptV1;
+    authorization: RepairScopeLedgerAuthorizationV1;
+    ledger: HumanDecisionLedgerV2;
+}): Promise<{
+    status: "AMENDED";
+    contract: TaskContract;
+    amendment: RepairScopeAmendmentV1;
+} | {
+    status: "BLOCKED";
+    blocker: RepairScopeBlockerReceiptV1;
+    check: ValidationCheck;
+}>;
+/**
+ * DETERMINISTIC repair-scope product choices over the exact blocker paths.
+ * approve-exact-paths authorizes the bounded amendment (exact paths only);
+ * deny-scope-expansion leaves BLOCKED standing. No wildcards, no expansion.
+ */
+export declare function repairScopeProductChoices(blocker: RepairScopeBlockerReceiptV1): DecisionChoiceV1[];
+/**
+ * DETERMINISTIC product-choice request content for a repair-scope blocker.
+ * Exact files + per-file reasons are cited as choices/evidence; the blocker
+ * receipt artifact is the authoritative evidence.
+ */
+export declare function repairScopeProductChoiceContent(blocker: RepairScopeBlockerReceiptV1, evidence: {
+    artifact: string;
+    sha256: string;
+    description: string;
+}): ProductChoiceRequestContentV1;
+export interface RepairScopeSuspendedChoiceV1 {
+    requestId: string;
+    decisionRequest: unknown;
+}
+/**
+ * Suspend the operation for a repair-scope product choice (canonical
+ * HUMAN_REQUIRED channel). The exact blocker files + reasons become the
+ * bounded approve/deny choices with the durable blocker receipt as
+ * authoritative evidence. Fail-closed: suspend errors propagate (caller maps
+ * to BLOCKED citing the blocker).
+ */
+export declare function suspendRepairScopeForProductChoice(input: {
+    controlRoot: string;
+    operationId: string;
+    config: HarnessProjectConfig;
+    blocker: RepairScopeBlockerReceiptV1;
+    contract?: TaskContract;
+}): Promise<RepairScopeSuspendedChoiceV1>;
+export interface RepairScopeChoiceSelectionV1 {
+    requestId: string;
+    decisionId: string;
+    choiceId: string;
+    choice: DecisionChoiceV1;
+    reason: string;
+    decision: HumanDecisionV2;
+    binding: HumanDecisionBindingV2;
+}
+/**
+ * Await the ledger-consumed repair-scope product choice (canonical
+ * productChoiceForRequest + consumeExact pattern). On success the exact choice
+ * is atomically consumed and the operation continuation is marked consumed.
+ * On timeout the operation remains WAITING (human may still decide within
+ * expiry); the caller maps timeout to BLOCKED citing the blocker (fail closed).
+ * Operation-terminal or binding-stale conditions throw fail-closed.
+ */
+export declare function awaitRepairScopeProductChoice(input: {
+    controlRoot: string;
+    operationId: string;
+    timeoutMs?: number;
+    pollMs?: number;
+}): Promise<RepairScopeChoiceSelectionV1>;
+/**
+ * High-level repair-scope blocker resolution for the run.ts validation-repair
+ * loop (the single production amendment path; max 1/task preserved).
+ *
+ * - When an amendment already exists: BLOCKED without a second suspension.
+ * - Otherwise suspends for the bounded approve/deny product choice, awaits the
+ *   ledger-consumed decision, applies the amendment + reseal on approve
+ *   (single retry owned by the caller), and resumes/completes the continuation.
+ * - On deny: resumes/completes and returns BLOCKED citing the blocker.
+ * - On timeout/expiry/terminal/stale (await throws): the operation remains
+ *   WAITING when unanswered (human may still decide within expiry); the caller
+ *   maps to BLOCKED citing the blocker (fail closed, no amendment, no retry).
+ * - No unbounded loops: at most one suspension + one amendment per call, and
+ *   apply enforces max 1/task.
+ */
+export declare function resolveRepairScopeBlockerViaProductChoice(input: {
+    root: string;
+    controlRoot: string;
+    operationId: string;
+    config: HarnessProjectConfig;
+    contract: TaskContract;
+    blocker: RepairScopeBlockerReceiptV1;
+    timeoutMs?: number;
+    pollMs?: number;
+}): Promise<{
+    status: "AMENDED";
+    contract: TaskContract;
+    amendment: RepairScopeAmendmentV1;
+    selection: RepairScopeChoiceSelectionV1;
+} | {
+    status: "BLOCKED";
+    blocker: RepairScopeBlockerReceiptV1;
+    check: ValidationCheck;
+    choiceId?: string;
+}>;
+/**
+ * DETERMINISTIC forbidden-scope projection for an amended retry.
+ * Removes exactly the amendment-exempted paths (plus their `/**` variants)
+ * from the effective forbidden list. The default-deny source
+ * (`repairProtectedPaths`) is unchanged; this only applies the durable
+ * lead-approved exemption for the single retry. All other protected paths
+ * remain denied and silent expansion still throws in the assembler.
+ *
+ * HARD-protection defense: when `hardProtected` is provided, any exempted
+ * path intersecting it throws fail-closed (never exemptible). Callers with
+ * config+contract should pass `repairHardProtectedPaths(config, contract)`;
+ * the amendment-apply and blocker-resolve gates already enforce this before
+ * filtering.
+ */
+export declare function filterForbiddenScopeForAmendment(forbiddenScope: readonly string[], amendment: RepairScopeAmendmentV1, hardProtected?: readonly string[]): string[];