Our release configuration describes a build matrix, but not every combination should run. Implement the matrix expansion and exclusion behavior so the generated jobs match the configuration exactly.
Build the implementation in TypeScript under /app, with /app/run.sh as its entry point. Read one JSON request from standard input and write one JSON result to standard output. Input contains axes mapping names to distinct scalar values and exclude partial assignments using known axes. Produce all combinations in sorted axis-name order and each axis value order. Drop combinations matching every key/value in any exclusion. An empty exclusion matches everything. No axes produces one empty object; an empty axis produces no combinations. Unknown exclusion axes must be rejected.
Reject inputs that violate an explicit validation rule with exit status 2, no standard output, and {"error":"invalid_input"} on standard error. For valid input, exit with status 0. Keep the implementation reusable for new inputs; it must work offline and must not depend on the example data being the only data it receives.
Repair or replace the unfinished /app/run.sh and add source files under /app. Malformed JSON must use the same invalid-input response. Do not read /tests or /oracle from the application.