Function run_wrapped_command 

pub fn run_wrapped_command<F: RepositoryFacts>(
    stripped: &StrippedInvocation,
    environment: &[(OsString, OsString)],
    checks: &mut ShippedChecks<F>,
) -> WrappedOutcome

What: Run the lifecycle of one wrapped command. &StrippedInvocation borrows the invocation without its wrapper controls; &mut ShippedChecks<F> lends the shipped policies and their facts provider F for writing. Why: A command Git does not run as a subcommand is forwarded as it is. A read-only command skips configuration and every refusal check, and uses the default settings. Every other command is prepared first. Then one pre-forward pass runs, and a real push must also clear the manual-push gate.

In TS you’d write (pseudocode):

async function runWrappedCommand(stripped, environment, checks): Promise<WrappedOutcome>;