Skip to content

execWithheldReport

execWithheldReport(provider, hint, which): RunnerReport

The report an exec provider gets when execution is withheld.

Reported rather than dropped, so a UI can say why moon is missing instead of implying the repo has none. Exported because cached.ts synthesizes the same row without probing: a withheld runner never probed and never will this run, so its “cached” answer is this, and it must be this exactly.

This stays TRUST-AGNOSTIC. collect takes allowExec and obeys it; it never reads the trust store. Trust is consent a person gave, so resolving it belongs to the CLIs, which know they are acting for a human. A programmatic consumer passing allowExec: false must not have its answer changed by a store it never asked about — which is why the actionable sentence arrives as data in execWithheldHint.

ParameterType
providerRunnerProvider
hintstring | undefined
which(binary) => string | null

RunnerReport