patchwarden 1.1.0 → 1.5.0

package/README.en.md

@@ -8,7 +8,7 @@
 [![Node.js](https://img.shields.io/badge/Node.js-%3E%3D18-339933.svg)](https://nodejs.org/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 
-Current source version: **v1.1.0**. See the
+Current source version: **v1.5.0**. See the
 [CHANGELOG](CHANGELOG.md), [migration guide](docs/migration-from-safe-bifrost.md), and
 [release checklist](docs/release-checklist.md). Verify GitHub Release / npm publication separately before release.
 
@@ -493,7 +493,7 @@ PatchWarden.cmd start core
 The launcher:
 
 - Builds `dist/index.js` if it is missing.
-- Verifies v1.1.0, the fixed 21-tool `chatgpt_core` catalog, and its schema
+- Verifies v1.5.0, the fixed 26-tool `chatgpt_core` catalog, and its schema
   manifest.
 - Reads or prompts for the Tunnel ID.
 - Reads or prompts for the runtime API key.
@@ -930,10 +930,12 @@ names.
 
 ## MCP tools and profiles
 
-`chatgpt_core` is the fixed 21-tool profile used by the ChatGPT tunnel:
+`chatgpt_core` is the fixed 26-tool profile used by the ChatGPT tunnel:
 
 `health_check`, `list_agents`, `list_workspace`,
-`read_workspace_file`, `save_plan`, `create_task`,
+`read_workspace_file`, `save_plan`, `create_task`, `run_task_loop`,
+`recommend_agent_for_task`, `get_task_lineage`, `export_task_evidence_pack`,
+`get_project_policy`,
 `wait_for_task`, `get_task_summary`, `get_diff`, `get_result`,
 `get_result_json`, `get_test_log`, `get_task_status`, `list_tasks`,
 `cancel_task`, `audit_task`, `safe_status`, `safe_result`, `safe_audit`, `safe_test_summary`, and `safe_diff_summary`.
@@ -942,6 +944,38 @@ names.
 ChatGPT should request `view: "compact"` first; terminal `wait_for_task`
 responses also embed compact acceptance evidence only.
 
+`run_task_loop` is the v1.2 safe orchestration entrypoint. It only composes
+existing `create_task`, `wait_for_task`, safe summary, and `audit_task`
+behavior; it does not bypass the Watcher, command allowlist, workspace
+confinement, or local confirmation boundaries. `get_task_lineage` reads the
+bounded `.patchwarden/lineages/<lineage_id>/` summary without returning full
+logs or diffs.
+
+`get_project_policy` is the v1.3 read-only policy entrypoint. It returns the
+bounded effective `.patchwarden/project-policy.json` policy and release
+readiness summary without expanding command permissions. The v1.3 release mode
+tools, `release_check`, `release_prepare`, `release_verify`, and
+`release_cleanup`, are full-profile only and never perform publish, push, tag,
+or GitHub Release writes. The Control Center dashboard also shows bounded
+lineage, policy, and release status summaries without full logs, diffs, or
+secret-bearing content.
+
+v1.4 adds Direct-assisted loop verification. `run_task_loop` can opt into
+`direct_verify=true`; after the guarded task and audit succeed, PatchWarden
+creates a Direct session, runs only allowlisted verification commands, safe
+finalizes, safe audits, and records bounded Direct evidence in lineage. It does
+not call Direct patching tools, publish, push, tag, create releases, restart
+watchers, or return full stdout/stderr/diffs.
+
+v1.5 adds worktree-assisted loop isolation, bounded agent routing, and evidence
+pack export. `run_task_loop(isolation_mode="worktree")` creates an isolated git
+worktree for the task and records the worktree id, path, branch, and next action
+in lineage. It does not auto-merge or auto-delete the worktree. `agent="auto"`
+uses `recommend_agent_for_task` to select a configured agent before task
+creation. `export_task_evidence_pack` writes bounded `evidence.json` and
+`EVIDENCE.md` files under `.patchwarden/evidence-packs/<lineage_id>/` without
+stdout/stderr tails, full diffs, verification logs, or sensitive file content.
+
 `full` additionally provides:
 
 - `get_plan`
@@ -956,9 +990,9 @@ to `full`.
 
 ### ChatGPT Direct mode
 
-Direct mode exposes thirteen guarded tools so ChatGPT can create an editing
+Direct mode exposes fourteen guarded tools so ChatGPT can create an editing
 session, read and search source files, apply hash-bound JSON patches, run
-exactly allowlisted verification commands, finalize the evidence, and audit
+exactly allowlisted verification commands or a bounded verification bundle, finalize the evidence, and audit
 the result without a local execution agent.
 
 Enable it in the trusted local configuration while keeping the ordinary Core
@@ -980,7 +1014,7 @@ On first use, provide the `tunnel-client.exe` path and a Tunnel ID dedicated
 to the Direct Connector. The launcher uses the `patchwarden-direct` profile,
 stores runtime state under `%LOCALAPPDATA%\patchwarden\runtime-direct`, skips
 the Watcher, and retains the existing DPAPI credential handling. In a fresh
-ChatGPT conversation, `health_check` should report `chatgpt_direct`, thirteen
+ChatGPT conversation, `health_check` should report `chatgpt_direct`, fourteen
 tools, and `direct_profile_enabled=true`.
 
 ## Security boundaries and local data

package/README.md

@@ -8,7 +8,7 @@
 [![Node.js](https://img.shields.io/badge/Node.js-%3E%3D18-339933.svg)](https://nodejs.org/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 
-当前源码版本：**v1.1.0**。查看
+当前源码版本：**v1.5.0**。查看
 [CHANGELOG](CHANGELOG.md)、[迁移指南](docs/migration-from-safe-bifrost.md)和
 [发布检查清单](docs/release-checklist.md)。GitHub Release / npm 发布状态需要在发布前单独核对。
 
@@ -399,7 +399,7 @@ PatchWarden.cmd start core
 启动器会：
 
 - 检查 `dist/index.js`，缺失时自动构建。
-- 校验 `chatgpt_core` 的版本、21 个核心工具和 Schema Manifest。
+- 校验 `chatgpt_core` 的版本、26 个核心工具和 Schema Manifest。
 - 读取或提示输入 Tunnel ID。
 - 读取或提示输入运行时 API Key。
 - 使用 Windows DPAPI 保存凭据到 `%APPDATA%\patchwarden`。
@@ -836,10 +836,11 @@ PatchWarden v0.4.0 不自动读取旧 CLI、旧环境变量、旧 Header、旧
 
 ## MCP 工具与 Profile
 
-`chatgpt_core` 是固定的 21 工具 Profile，适合 ChatGPT Tunnel：
+`chatgpt_core` 是固定的 26 工具 Profile，适合 ChatGPT Tunnel：
 
 `health_check`、`list_agents`、`list_workspace`、
-`read_workspace_file`、`save_plan`、`create_task`、
+`read_workspace_file`、`save_plan`、`create_task`、`run_task_loop`、`recommend_agent_for_task`、
+`get_task_lineage`、`export_task_evidence_pack`、`get_project_policy`、
 `wait_for_task`、`get_task_summary`、`get_diff`、`get_result`、
 `get_result_json`、`get_test_log`、`get_task_status`、`list_tasks`、
 `cancel_task`、`audit_task`、`safe_status`、`safe_result`、`safe_audit`、`safe_test_summary`、`safe_diff_summary`。
@@ -847,7 +848,33 @@ PatchWarden v0.4.0 不自动读取旧 CLI、旧环境变量、旧 Header、旧
 `get_task_summary` 默认保留兼容的 `standard` 视图；ChatGPT 应优先使用
 `view: "compact"`，终态 `wait_for_task` 也只内嵌 compact 验收证据。
 
-`full` 提供完整 54 工具本地开发目录，包含核心工具、管理工具和 Direct
+`run_task_loop` 是 v1.2 的安全编排入口：它只组合现有 `create_task`、`wait_for_task`、safe summary 和
+`audit_task`，不会绕过 Watcher、命令白名单、workspace confinement 或确认边界。`get_task_lineage`
+读取 `.patchwarden/lineages/<lineage_id>/` 中的有界链路摘要，不返回完整日志或 diff。
+
+v1.4 adds Direct-assisted loop verification. `run_task_loop(direct_verify=true)`
+will create a Direct session only after the watcher-driven task and normal audit
+succeed, run allowlisted Direct verification commands, safe-finalize, safe-audit,
+and write bounded Direct evidence into lineage. It does not call Direct patching
+tools, publish, push, tag, create releases, restart live services, or return full
+stdout/stderr/diffs.
+
+v1.5 adds worktree-assisted loop isolation, bounded agent routing, and evidence
+pack export. `run_task_loop(isolation_mode="worktree")` creates an isolated git
+worktree for the task and records the worktree id, path, branch, and next action
+in lineage. It does not auto-merge or auto-delete the worktree. `agent="auto"`
+uses `recommend_agent_for_task` to select a configured agent before task
+creation. `export_task_evidence_pack` writes bounded `evidence.json` and
+`EVIDENCE.md` files under `.patchwarden/evidence-packs/<lineage_id>/` without
+stdout/stderr tails, full diffs, verification logs, or sensitive file content.
+
+`get_project_policy` 是 v1.3 的只读策略入口，返回 `.patchwarden/project-policy.json`
+的有界 effective policy 与 release readiness，不会扩大命令白名单。v1.3 的
+`release_check`、`release_prepare`、`release_verify`、`release_cleanup` 仅在 `full`
+Profile 中可见，不执行 publish、push、tag 或 GitHub Release 写操作。Control Center
+Dashboard 会展示 lineage、policy 和 release status 的有界摘要，不返回完整日志、diff 或密钥内容。
+
+`full` 提供完整 64 工具本地开发目录，包含核心工具、管理工具和 Direct
 工具。除 `chatgpt_core` 外，常用额外管理工具包括：
 
 - `get_plan`
@@ -857,15 +884,15 @@ PatchWarden v0.4.0 不自动读取旧 CLI、旧环境变量、旧 Header、旧
 - `get_task_stdout_tail`
 - `get_task_log_tail`
 
-`chatgpt_direct` 是 v0.6.0 新增的 Direct 直接开发 Profile，v1.1 包含 13 个工具：
+`chatgpt_direct` 是 v0.6.0 新增的 Direct 直接开发 Profile，v1.4 包含 14 个工具：
 
 `health_check`、`list_workspace`、`create_direct_session`、
 `search_workspace`、`read_workspace_file`、`apply_patch`、
-`run_verification`、`finalize_direct_session`、`audit_session`、`safe_direct_summary`、`safe_finalize_direct_session`、`safe_audit_direct_session`、`sync_file`。
+`run_verification`、`run_direct_verification_bundle`、`finalize_direct_session`、`audit_session`、`safe_direct_summary`、`safe_finalize_direct_session`、`safe_audit_direct_session`、`sync_file`。
 
 `chatgpt_direct` 默认关闭，需要通过 `enableDirectProfile: true` 或
 `PATCHWARDEN_TOOL_PROFILE=chatgpt_direct` 显式启用。`chatgpt_core` 保持
-21 工具清单。
+26 工具清单。
 
 Tunnel 包装脚本会强制使用 `chatgpt_core`；普通本地开发默认使用 `full`。
 
@@ -920,7 +947,7 @@ Tunnel ID。启动器使用 `patchwarden-direct` Profile、独立的
 Tunnel API Key 仍通过现有 Windows DPAPI 缓存处理，不会写入仓库。
 
 连接 ChatGPT 后新建对话并先调用 `health_check`。预期
-`tool_profile=chatgpt_direct`、`tool_count=13`、
+`tool_profile=chatgpt_direct`、`tool_count=14`、
 `direct_profile_enabled=true`。已有对话可能缓存旧工具清单，需要重新连接
 Connector 后再新建对话。
 

package/dist/controlCenter.js

@@ -12,7 +12,7 @@
  * Port override: PATCHWARDEN_CONTROL_PORT=<n>  or  --port <n>
  */
 import { createServer, get as httpGet } from "node:http";
-import { appendFileSync, existsSync, mkdirSync, readFileSync, readdirSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import { appendFileSync, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { delimiter, dirname, extname, isAbsolute, join, relative, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { randomUUID } from "node:crypto";
@@ -25,6 +25,10 @@ import { readWatcherStatus } from "./watcherStatus.js";
 import { redactSensitiveContent } from "./security/contentRedaction.js";
 import { guardWorkspacePath } from "./security/pathGuard.js";
 import { auditTask } from "./tools/auditTask.js";
+import { getProjectPolicySummary } from "./policy/projectPolicy.js";
+import { safeDirectSummary } from "./tools/safeViews.js";
+import { toSafeTaskLineage } from "./tools/taskLineage.js";
+import { listEvidencePacks, readEvidencePack } from "./tools/evidencePack.js";
 import { PATCHWARDEN_VERSION, TOOL_SCHEMA_EPOCH } from "./version.js";
 // ── Paths ─────────────────────────────────────────────────────────
 const projectRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
@@ -231,6 +235,26 @@ function readJsonFileSafe(filePath) {
         return null;
     }
 }
+function isPathInside(root, target) {
+    const rel = relative(root, target);
+    return rel === "" || (!rel.startsWith("..") && !isAbsolute(rel));
+}
+function readJsonFileSafeUnder(root, relPath) {
+    const base = resolve(root);
+    const target = resolve(base, relPath);
+    if (!isPathInside(base, target) || !existsSync(target))
+        return null;
+    try {
+        const realBase = realpathSync(base);
+        const realTarget = realpathSync(target);
+        if (!isPathInside(realBase, realTarget))
+            return null;
+        return readJsonFileSafe(realTarget);
+    }
+    catch {
+        return null;
+    }
+}
 function readTextFileSafe(filePath) {
     if (!existsSync(filePath))
         return null;
@@ -902,6 +926,105 @@ function handleStaleTasks(res) {
         sendJson(res, 200, { stale_tasks: [], total: 0, reason: errorMessage(err) });
     }
 }
+function handleLineages(res) {
+    try {
+        const root = join(config.workspaceRoot, ".patchwarden", "lineages");
+        if (!existsSync(root)) {
+            sendJson(res, 200, { lineages: [], total: 0, reason: null });
+            return;
+        }
+        const lineages = readdirSync(root, { withFileTypes: true })
+            .filter((entry) => entry.isDirectory())
+            .map((entry) => readJsonFileSafeUnder(root, join(entry.name, "lineage.json")))
+            .filter((entry) => entry !== null)
+            .map((entry) => toSafeTaskLineage(entry, 6))
+            .sort((a, b) => b.updated_at.localeCompare(a.updated_at))
+            .slice(0, 50);
+        sendJson(res, 200, { lineages, total: lineages.length, reason: null });
+    }
+    catch (err) {
+        sendJson(res, 200, { lineages: [], total: 0, reason: errorMessage(err) });
+    }
+}
+function handleLineageDetail(res, lineageId) {
+    try {
+        if (!/^[A-Za-z0-9_-]+$/.test(lineageId)) {
+            sendJson(res, 400, { error: "Invalid lineage id" });
+            return;
+        }
+        const data = readJsonFileSafeUnder(join(config.workspaceRoot, ".patchwarden", "lineages"), join(lineageId, "lineage.json"));
+        if (!data) {
+            sendJson(res, 404, { error: "Lineage not found" });
+            return;
+        }
+        sendJson(res, 200, toSafeTaskLineage(data, 20));
+    }
+    catch (err) {
+        sendJson(res, 200, { lineage_id: lineageId, error: errorMessage(err) });
+    }
+}
+function handleProjectPolicy(res, repoPath) {
+    try {
+        sendJson(res, 200, getProjectPolicySummary(repoPath || "."));
+    }
+    catch (err) {
+        sendJson(res, 200, {
+            repo_path: repoPath || ".",
+            valid: false,
+            issues: [{ code: "policy_unavailable", severity: "error", field: "repo_path", message: errorMessage(err) }],
+        });
+    }
+}
+function handleReleaseStatus(res, repoPath) {
+    try {
+        const policy = getProjectPolicySummary(repoPath || ".");
+        sendJson(res, 200, {
+            repo_path: repoPath || ".",
+            resolved_repo_path: policy.resolved_repo_path,
+            policy_valid: policy.valid,
+            policy_issue_count: policy.issues.length,
+            policy_issues: policy.issues.slice(0, 10),
+            release_readiness: policy.release_readiness,
+            next_action: policy.valid && policy.release_readiness.version_consistent !== false
+                ? "Run release_check or release_prepare from the full MCP profile when ready."
+                : "Fix project-policy or version consistency issues before release preparation.",
+            remote_write_performed: false,
+        });
+    }
+    catch (err) {
+        sendJson(res, 200, {
+            repo_path: repoPath || ".",
+            policy_valid: false,
+            error: errorMessage(err),
+            remote_write_performed: false,
+        });
+    }
+}
+function handleEvidencePacks(res) {
+    try {
+        sendJson(res, 200, listEvidencePacks({ max_items: 50 }));
+    }
+    catch (err) {
+        sendJson(res, 200, { evidence_packs: [], total: 0, reason: errorMessage(err) });
+    }
+}
+function handleEvidencePackDetail(res, lineageId) {
+    try {
+        if (!/^[A-Za-z0-9_-]+$/.test(lineageId)) {
+            sendJson(res, 400, { error: "Invalid lineage id" });
+            return;
+        }
+        const pack = readEvidencePack(lineageId);
+        if (!pack) {
+            sendJson(res, 404, { error: "Evidence pack not found" });
+            return;
+        }
+        sendJson(res, 200, pack);
+    }
+    catch (err) {
+        sendJson(res, 200, { lineage_id: lineageId, error: errorMessage(err), bounded: true });
+    }
+}
 /**
  * Reconcile a stale task. Does NOT delete the task. Reads the task files,
  * decides whether it is safe to mark the task as stale/archived, writes a
@@ -1498,6 +1621,27 @@ function handleDirectSessionDetail(res, sessionId) {
         sendJson(res, 200, { session_id: sessionId, error: errorMessage(err) });
     }
 }
+function handleDirectSessionSafeSummary(res, sessionId) {
+    try {
+        if (sessionId === "." ||
+            sessionId === ".." ||
+            sessionId.includes("/") ||
+            sessionId.includes("\\") ||
+            sessionId.includes("\0")) {
+            sendJson(res, 400, { error: "Invalid session id" });
+            return;
+        }
+        sendJson(res, 200, safeDirectSummary(sessionId, { max_items: 12 }));
+    }
+    catch (err) {
+        sendJson(res, 200, {
+            session_id: sessionId,
+            error: errorMessage(err),
+            large_logs_omitted: true,
+            diff_omitted: true,
+        });
+    }
+}
 function parseReviewVerdict(content) {
     // independent-review.md format: "**Verdict**: PASS" (case-insensitive)
     const m = content.match(/\*\*Verdict\*\*\s*:\s*([A-Za-z]+)/);
@@ -1787,6 +1931,46 @@ async function handleRequest(req, res) {
         handleStaleTasks(res);
         return;
     }
+    if (method === "GET" && pathname === "/api/lineages") {
+        handleLineages(res);
+        return;
+    }
+    const lineageMatch = pathname.match(/^\/api\/lineages\/([^/]+)$/);
+    if (method === "GET" && lineageMatch) {
+        let lineageId;
+        try {
+            lineageId = decodeURIComponent(lineageMatch[1]);
+        }
+        catch {
+            lineageId = lineageMatch[1];
+        }
+        handleLineageDetail(res, lineageId);
+        return;
+    }
+    if (method === "GET" && pathname === "/api/project-policy") {
+        handleProjectPolicy(res, parsedUrl.searchParams.get("repo_path") || ".");
+        return;
+    }
+    if (method === "GET" && pathname === "/api/release/status") {
+        handleReleaseStatus(res, parsedUrl.searchParams.get("repo_path") || ".");
+        return;
+    }
+    if (method === "GET" && pathname === "/api/evidence-packs") {
+        handleEvidencePacks(res);
+        return;
+    }
+    const evidencePackMatch = pathname.match(/^\/api\/evidence-packs\/([^/]+)$/);
+    if (method === "GET" && evidencePackMatch) {
+        let lineageId;
+        try {
+            lineageId = decodeURIComponent(evidencePackMatch[1]);
+        }
+        catch {
+            lineageId = evidencePackMatch[1];
+        }
+        handleEvidencePackDetail(res, lineageId);
+        return;
+    }
     const taskMatch = pathname.match(/^\/api\/tasks\/([^/]+)$/);
     if (method === "GET" && taskMatch) {
         let taskId;
@@ -1845,6 +2029,18 @@ async function handleRequest(req, res) {
         handleDirectSessions(res);
         return;
     }
+    const directSessionSummaryMatch = pathname.match(/^\/api\/direct-sessions\/([^/]+)\/summary$/);
+    if (method === "GET" && directSessionSummaryMatch) {
+        let sessionId;
+        try {
+            sessionId = decodeURIComponent(directSessionSummaryMatch[1]);
+        }
+        catch {
+            sessionId = directSessionSummaryMatch[1];
+        }
+        handleDirectSessionSafeSummary(res, sessionId);
+        return;
+    }
     const directSessionMatch = pathname.match(/^\/api\/direct-sessions\/([^/]+)$/);
     if (method === "GET" && directSessionMatch) {
         let sessionId;

package/dist/direct/directSessionStore.d.ts

@@ -13,6 +13,8 @@ export interface DirectSessionVerificationRun {
     exit_code: number | null;
     passed: boolean;
     timed_out: boolean;
+    redacted?: boolean;
+    redaction_categories?: string[];
     stdout_tail: string;
     stderr_tail: string;
     started_at: string;

package/dist/direct/directVerification.js

@@ -40,6 +40,13 @@ export async function runDirectVerification(input) {
         exit_code: result.exitCode,
         passed,
         timed_out: result.timedOut,
+        redacted: stdoutRedacted.redacted || stderrRedacted.redacted,
+        redaction_categories: [
+            ...new Set([
+                ...stdoutRedacted.redaction_categories,
+                ...stderrRedacted.redaction_categories,
+            ]),
+        ],
         stdout_tail: stdoutTail,
         stderr_tail: stderrTail,
         started_at: startedAt,

package/dist/doctor.js

@@ -221,7 +221,7 @@ async function main() {
         const coreTools = selectToolsForProfile(fullTools, "chatgpt_core", config?.enableDirectProfile);
         const createSchema = coreTools.find((tool) => tool.name === "create_task")?.inputSchema;
         const waitSchema = coreTools.find((tool) => tool.name === "wait_for_task")?.inputSchema;
-        check("Full tool profile exposes 54 tools", fullTools.length === 54, `${fullTools.length} tools`);
+        check("Full tool profile exposes 64 tools", fullTools.length === 64, `${fullTools.length} tools`);
         check(`chatgpt_core profile exposes the exact ${CHATGPT_CORE_TOOL_NAMES.length}-tool manifest`, JSON.stringify(coreTools.map((tool) => tool.name)) === JSON.stringify(CHATGPT_CORE_TOOL_NAMES), coreTools.map((tool) => tool.name).join(", "));
         check("Core task schemas expose inline_plan, verify_commands, and wait aliases", Boolean(createSchema?.properties?.inline_plan &&
             createSchema?.properties?.verify_commands &&

package/dist/policy/projectPolicy.d.ts

@@ -0,0 +1,55 @@
+export interface ProjectPolicy {
+    allowed_commands: string[];
+    auto_cleanup: {
+        enabled: boolean;
+        patterns: string[];
+        exclude: string[];
+    };
+    high_risk_commands: string[];
+    protected_paths: string[];
+    release_mode: {
+        version_source: string;
+        required_commands: string[];
+    };
+}
+export interface ProjectPolicyIssue {
+    code: string;
+    severity: "error" | "warn";
+    field: string;
+    message: string;
+}
+export interface ReleaseReadinessSummary {
+    version_source: string;
+    version: string | null;
+    package_json_version: string | null;
+    package_name: string | null;
+    version_consistent: boolean | null;
+    required_commands: Array<{
+        command: string;
+        allowed: boolean;
+        reason: string | null;
+    }>;
+}
+export interface ProjectPolicySummary {
+    repo_path: string;
+    resolved_repo_path: string;
+    policy_path: string;
+    exists: boolean;
+    valid: boolean;
+    effective_policy: ProjectPolicy;
+    issues: ProjectPolicyIssue[];
+    release_readiness: ReleaseReadinessSummary;
+}
+export declare function getProjectPolicySummary(repoPathInput: string): ProjectPolicySummary;
+export declare function getDefaultProjectPolicy(): ProjectPolicy;
+export declare function commandAllowedByProjectPolicy(command: string, summary: ProjectPolicySummary): {
+    allowed: boolean;
+    reason: string | null;
+};
+export declare function isProtectedByProjectPolicy(relPath: string, policy: ProjectPolicy): boolean;
+export declare function resolveVersionFromPolicy(repoPath: string, policy: ProjectPolicy): string | null;
+export declare function readPackageJson(repoPath: string): {
+    name: string | null;
+    version: string | null;
+    githubRepo: string | null;
+};