@claudexor/cli 3.6.0 → 3.8.0

package/dist/harness-command-specs.js

@@ -3,7 +3,7 @@
 export const INSTALLABLE_HARNESSES = ["agy", "claude", "codex", "cursor", "opencode"];
 /** The `harness` argument shape: rendered by `claudexor help` and reprinted by
  * the dispatcher when a verb is unknown. */
-export const HARNESS_USAGE_ARGS = `list [--all] | install <${INSTALLABLE_HARNESSES.join("|")}> [--dry-run] [--yes]`;
+export const HARNESS_USAGE_ARGS = `list [--all] | install <${INSTALLABLE_HARNESSES.join("|")}> [--target <local|remote>] [--dry-run] [--yes]`;
 export const HARNESS_COMMAND_SPECS = [
     {
         id: "harness",
@@ -12,9 +12,9 @@ export const HARNESS_COMMAND_SPECS = [
             { prefix: ["install"], min: 2, max: 2 },
         ],
         usageArgs: HARNESS_USAGE_ARGS,
-        summary: "List harnesses, or install one vendor CLI after disclosure",
-        flags: ["all", "dry-run", "yes", "json"],
-        subcommandFlags: { list: ["all"], install: ["dry-run", "yes"] },
+        summary: "List harnesses, or install one vendor CLI through the disclosed producer",
+        flags: ["all", "target", "dry-run", "yes", "json"],
+        subcommandFlags: { list: ["all"], install: ["target", "dry-run", "yes"] },
         mutability: "ops",
         stability: "stable",
     },

package/dist/harness-command-specs.js.map

@@ -1 +1 @@
-{"version":3,"file":"harness-command-specs.js","sourceRoot":"","sources":["../src/harness-command-specs.ts"],"names":[],"mappings":"AAUA;kFACkF;AAClF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAU,CAAC;AAE/F;4CAC4C;AAC5C,MAAM,CAAC,MAAM,kBAAkB,GAAG,2BAA2B,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB,CAAC;AAEpH,MAAM,CAAC,MAAM,qBAAqB,GAA8B;IAC9D;QACE,EAAE,EAAE,SAAS;QACb,kBAAkB,EAAE;YAClB,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE;YACpC,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE;SACxC;QACD,SAAS,EAAE,kBAAkB;QAC7B,OAAO,EAAE,4DAA4D;QACrE,KAAK,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC;QACxC,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE;QAC/D,UAAU,EAAE,KAAK;QACjB,SAAS,EAAE,QAAQ;KACpB;CACF,CAAC"}
+{"version":3,"file":"harness-command-specs.js","sourceRoot":"","sources":["../src/harness-command-specs.ts"],"names":[],"mappings":"AAUA;kFACkF;AAClF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAU,CAAC;AAE/F;4CAC4C;AAC5C,MAAM,CAAC,MAAM,kBAAkB,GAAG,2BAA2B,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,iDAAiD,CAAC;AAE9I,MAAM,CAAC,MAAM,qBAAqB,GAA8B;IAC9D;QACE,EAAE,EAAE,SAAS;QACb,kBAAkB,EAAE;YAClB,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE;YACpC,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE;SACxC;QACD,SAAS,EAAE,kBAAkB;QAC7B,OAAO,EAAE,0EAA0E;QACnF,KAAK,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC;QAClD,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE;QACzE,UAAU,EAAE,KAAK;QACjB,SAAS,EAAE,QAAQ;KACpB;CACF,CAAC"}

package/dist/harness-command.d.ts

@@ -2,9 +2,11 @@ import { type ParsedArgs } from "./args.js";
 /**
  * `claudexor harness list [--all]` and `claudexor harness install <id>`.
  * Fakes are test fixtures, not real harnesses; `--all` reveals them. The
- * install verb is the disclosed installer (harness-installer.ts, issue #89):
- * exact npm pins for claude/codex/opencode, the human-verified PTY path for
- * the script vendors (cursor, agy), and nothing executes without disclosure.
+ * install verb is the target-aware disclosed installer (harness-installer.ts,
+ * issue #89): exact npm pins for claude/codex/opencode, and for the script
+ * vendors (cursor, agy) either the human-verified remote PTY path or, under an
+ * explicit `--target local --yes`, receipt-bound unattended execution. Nothing
+ * executes without disclosure and explicit authorization.
  * Flags are verb-owned (registry `subcommandFlags`): `harness list --yes` or
  * `harness install --all` is a loud exit-2 usage error, never a silently
  * ignored flag (INV-021).

package/dist/harness-command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"harness-command.d.ts","sourceRoot":"","sources":["../src/harness-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAOtD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAetE"}
+{"version":3,"file":"harness-command.d.ts","sourceRoot":"","sources":["../src/harness-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAOtD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAetE"}

package/dist/harness-command.js

@@ -7,9 +7,11 @@ import { buildRegistry } from "./registry.js";
 /**
  * `claudexor harness list [--all]` and `claudexor harness install <id>`.
  * Fakes are test fixtures, not real harnesses; `--all` reveals them. The
- * install verb is the disclosed installer (harness-installer.ts, issue #89):
- * exact npm pins for claude/codex/opencode, the human-verified PTY path for
- * the script vendors (cursor, agy), and nothing executes without disclosure.
+ * install verb is the target-aware disclosed installer (harness-installer.ts,
+ * issue #89): exact npm pins for claude/codex/opencode, and for the script
+ * vendors (cursor, agy) either the human-verified remote PTY path or, under an
+ * explicit `--target local --yes`, receipt-bound unattended execution. Nothing
+ * executes without disclosure and explicit authorization.
  * Flags are verb-owned (registry `subcommandFlags`): `harness list --yes` or
  * `harness install --all` is a loud exit-2 usage error, never a silently
  * ignored flag (INV-021).

package/dist/harness-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"harness-command.js","sourceRoot":"","sources":["../src/harness-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAmB,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,IAAgB,EAAE,IAAa;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,wBAAwB,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACrF,IAAI,UAAU;QAAE,OAAO,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,CAAC,GAAG,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,IAAI;YAAE,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;;YACnC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,eAAe,CAAC,IAAI,EAAE,4BAA4B,kBAAkB,EAAE,CAAC,CAAC;AACjF,CAAC"}
+{"version":3,"file":"harness-command.js","sourceRoot":"","sources":["../src/harness-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAmB,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,IAAgB,EAAE,IAAa;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,wBAAwB,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACrF,IAAI,UAAU;QAAE,OAAO,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,CAAC,GAAG,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,IAAI;YAAE,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;;YACnC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,eAAe,CAAC,IAAI,EAAE,4BAA4B,kBAAkB,EAAE,CAAC,CAAC;AACjF,CAAC"}

package/dist/harness-install-lease.d.ts

@@ -0,0 +1,11 @@
+export interface HarnessInstallLease {
+    release(): void;
+}
+export declare const HARNESS_INSTALL_LOCK_TIMEOUT_MS = 120000;
+/** One user-scoped, cross-process lease covers every shared install prefix.
+ * Waiters never unlink or rename a stale observation: doing so cannot be made
+ * compare-and-swap safe with Node's portable filesystem API and could delete a
+ * replacement owner's live lease. A dead or old owner-less lock fails closed
+ * with an exact manual remedy; ordinary live owners retain the bounded wait. */
+export declare function acquireHarnessInstallLease(home: string, timeoutMs: number): HarnessInstallLease;
+//# sourceMappingURL=harness-install-lease.d.ts.map

package/dist/harness-install-lease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-install-lease.d.ts","sourceRoot":"","sources":["../src/harness-install-lease.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,mBAAmB;IAClC,OAAO,IAAI,IAAI,CAAC;CACjB;AAOD,eAAO,MAAM,+BAA+B,SAAU,CAAC;AA0CvD;;;;gFAIgF;AAChF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,mBAAmB,CA+C/F"}

package/dist/harness-install-lease.js

@@ -0,0 +1,98 @@
+import { randomUUID } from "node:crypto";
+import { mkdirSync, readFileSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+export const HARNESS_INSTALL_LOCK_TIMEOUT_MS = 120_000;
+const INSTALL_LOCK_POLL_MS = 100;
+const INSTALL_LOCK_OWNER_GRACE_MS = 5_000;
+const sleepCell = new Int32Array(new SharedArrayBuffer(4));
+function readInstallLeaseOwner(path) {
+    try {
+        const value = JSON.parse(readFileSync(path, "utf8"));
+        if (!Number.isSafeInteger(value.pid) ||
+            Number(value.pid) <= 0 ||
+            typeof value.token !== "string" ||
+            value.token.length === 0) {
+            return null;
+        }
+        return { pid: Number(value.pid), token: value.token };
+    }
+    catch {
+        return null;
+    }
+}
+function processIsAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === "EPERM";
+    }
+}
+function installLockError(path, stale) {
+    const code = stale ? "install_lock_stale" : "install_lock_busy";
+    const message = stale
+        ? `a stale claudexor harness install lock remains at ${path}; verify no installer is running, remove that exact directory, and retry`
+        : `another claudexor harness install still owns ${path}; if this persists after that installer exits, verify no installer is running, remove that exact directory, and retry`;
+    return Object.assign(new Error(message), { code });
+}
+/** One user-scoped, cross-process lease covers every shared install prefix.
+ * Waiters never unlink or rename a stale observation: doing so cannot be made
+ * compare-and-swap safe with Node's portable filesystem API and could delete a
+ * replacement owner's live lease. A dead or old owner-less lock fails closed
+ * with an exact manual remedy; ordinary live owners retain the bounded wait. */
+export function acquireHarnessInstallLease(home, timeoutMs) {
+    const lockRoot = join(home, ".claudexor");
+    const path = join(lockRoot, "harness-install.lock");
+    const ownerPath = join(path, "owner.json");
+    const token = randomUUID();
+    const owner = { pid: process.pid, token };
+    const deadline = Date.now() + Math.max(0, timeoutMs);
+    mkdirSync(lockRoot, { recursive: true, mode: 0o700 });
+    for (;;) {
+        try {
+            mkdirSync(path, { mode: 0o700 });
+            try {
+                writeFileSync(ownerPath, `${JSON.stringify(owner)}\n`, { mode: 0o600, flag: "wx" });
+            }
+            catch (error) {
+                rmSync(path, { recursive: true, force: true });
+                throw error;
+            }
+            let released = false;
+            return {
+                release: () => {
+                    if (released)
+                        return;
+                    released = true;
+                    const current = readInstallLeaseOwner(ownerPath);
+                    if (current?.pid === process.pid && current.token === token) {
+                        rmSync(path, { recursive: true, force: true });
+                    }
+                },
+            };
+        }
+        catch (error) {
+            if (error.code !== "EEXIST")
+                throw error;
+        }
+        const existing = readInstallLeaseOwner(ownerPath);
+        let stale = existing !== null && !processIsAlive(existing.pid);
+        if (existing === null) {
+            try {
+                stale = Date.now() - statSync(path).mtimeMs >= INSTALL_LOCK_OWNER_GRACE_MS;
+            }
+            catch (error) {
+                if (error.code === "ENOENT")
+                    continue;
+                throw error;
+            }
+        }
+        if (stale)
+            throw installLockError(path, true);
+        if (Date.now() >= deadline)
+            throw installLockError(path, false);
+        Atomics.wait(sleepCell, 0, 0, Math.min(INSTALL_LOCK_POLL_MS, deadline - Date.now()));
+    }
+}
+//# sourceMappingURL=harness-install-lease.js.map

package/dist/harness-install-lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-install-lease.js","sourceRoot":"","sources":["../src/harness-install-lease.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAWjC,MAAM,CAAC,MAAM,+BAA+B,GAAG,OAAO,CAAC;AACvD,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAC1C,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3D,SAAS,qBAAqB,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAGlD,CAAC;QACF,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YACtB,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YAC/B,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EACxB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAc;IACpD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAChE,MAAM,OAAO,GAAG,KAAK;QACnB,CAAC,CAAC,qDAAqD,IAAI,0EAA0E;QACrI,CAAC,CAAC,gDAAgD,IAAI,uHAAuH,CAAC;IAChL,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AACrD,CAAC;AAED;;;;gFAIgF;AAChF,MAAM,UAAU,0BAA0B,CAAC,IAAY,EAAE,SAAiB;IACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,KAAK,GAA6B,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACrD,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAEtD,SAAS,CAAC;QACR,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjC,IAAI,CAAC;gBACH,aAAa,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACtF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,OAAO;gBACL,OAAO,EAAE,GAAG,EAAE;oBACZ,IAAI,QAAQ;wBAAE,OAAO;oBACrB,QAAQ,GAAG,IAAI,CAAC;oBAChB,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;oBACjD,IAAI,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;wBAC5D,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBACjD,CAAC;gBACH,CAAC;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;QAED,MAAM,QAAQ,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,KAAK,GAAG,QAAQ,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC/D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,2BAA2B,CAAC;YAC7E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBACjE,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,IAAI,KAAK;YAAE,MAAM,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,MAAM,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACvF,CAAC;AACH,CAAC"}

package/dist/harness-install-proof.d.ts

@@ -0,0 +1,36 @@
+import { spawnSync } from "node:child_process";
+export interface InstalledHarnessProof {
+    installedBinary: string;
+    installedVersion: string;
+}
+export type HarnessProofResult = {
+    ok: true;
+    proof: InstalledHarnessProof;
+} | {
+    ok: false;
+    reason: string;
+};
+export interface InstallProofRuntime {
+    runnerNodePath: string;
+    platform: NodeJS.Platform;
+    resolutionSource: NodeJS.ProcessEnv;
+    environment: NodeJS.ProcessEnv;
+    spawn: typeof spawnSync;
+}
+export interface NpmInstallProofSpec {
+    vendorRoot: string;
+    npmPackage: string;
+    binaryNames: readonly string[];
+    expectedVersion: string;
+}
+/** Prove an exact npm package and its target-owned launcher, then execute the
+ * absolute launcher for a matching version receipt. */
+export declare function proveInstalledNpm(spec: NpmInstallProofSpec, runtime: InstallProofRuntime): HarnessProofResult;
+/** Prove a script vendor's launcher (cursor-agent, agy). These installers pick
+ * their own destination and ship no pinnable version, so the proof is the
+ * resolvable launcher plus its own `--version` line — ONE body for every such
+ * vendor, so a third one is a caller, not a fork. The official launcher may be
+ * a symlink into a version directory outside bin, which is why resolution goes
+ * through the same helper the run path uses. */
+export declare function proveInstalledScriptVendor(binaryName: string, runtime: InstallProofRuntime): HarnessProofResult;
+//# sourceMappingURL=harness-install-proof.d.ts.map

package/dist/harness-install-proof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-install-proof.d.ts","sourceRoot":"","sources":["../src/harness-install-proof.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAU/C,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,kBAAkB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,qBAAqB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7E,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC;IAC/B,KAAK,EAAE,OAAO,SAAS,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;CACzB;AA2ED;uDACuD;AACvD,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,mBAAmB,EACzB,OAAO,EAAE,mBAAmB,GAC3B,kBAAkB,CAyDpB;AAED;;;;;gDAKgD;AAChD,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,mBAAmB,GAC3B,kBAAkB,CAmBpB"}

package/dist/harness-install-proof.js

@@ -0,0 +1,148 @@
+import { readFileSync, realpathSync } from "node:fs";
+import { isAbsolute, join, relative, resolve, sep } from "node:path";
+import { inspectExecutable, isBoundedRegularExecutable, isLaunchableExecutable, resolveHarnessBinary, } from "@claudexor/core";
+const VERSION_PROBE_MAX_BYTES = 1024 * 1024;
+const VERSION_PROBE_TIMEOUT_MS = 10_000;
+const SCRIPT_VENDOR_VERSION_MAX_CHARS = 256;
+const SEMVER_TOKEN = /(?:^|[^0-9A-Za-z.+-])(\d+\.\d+\.\d+(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?)(?=$|[^0-9A-Za-z.+-])/g;
+function isStrictlyContained(root, candidate) {
+    const remainder = relative(root, candidate);
+    return (remainder !== "" &&
+        remainder !== ".." &&
+        !remainder.startsWith(`..${sep}`) &&
+        !isAbsolute(remainder));
+}
+function outputText(value) {
+    if (typeof value === "string")
+        return value;
+    return Buffer.isBuffer(value) ? value.toString("utf8") : "";
+}
+function exactSemverTokens(value) {
+    return [...value.matchAll(SEMVER_TOKEN)].map((match) => match[1] ?? "");
+}
+function proveVersion(installedBinary, runtime, expectedVersion) {
+    const absoluteBinary = resolve(installedBinary);
+    const versionResult = runtime.spawn(absoluteBinary, ["--version"], {
+        stdio: ["ignore", "pipe", "pipe"],
+        env: runtime.environment,
+        encoding: "utf8",
+        timeout: VERSION_PROBE_TIMEOUT_MS,
+        maxBuffer: VERSION_PROBE_MAX_BYTES,
+    });
+    if (versionResult.status !== 0) {
+        return {
+            ok: false,
+            reason: `the absolute --version probe exited ${versionResult.status ?? "without a status"}`,
+        };
+    }
+    const versionOutput = outputText(versionResult.stdout).trim();
+    if (versionOutput.length === 0) {
+        return { ok: false, reason: "the absolute --version probe returned empty stdout" };
+    }
+    if (expectedVersion !== null && !exactSemverTokens(versionOutput).includes(expectedVersion)) {
+        return {
+            ok: false,
+            reason: `the absolute --version probe did not report exact semver token ${expectedVersion}`,
+        };
+    }
+    if (expectedVersion !== null) {
+        return {
+            ok: true,
+            proof: { installedBinary: absoluteBinary, installedVersion: expectedVersion },
+        };
+    }
+    const reportedVersion = versionOutput.split(/\r?\n/, 1)[0]?.trim() ?? "";
+    if (reportedVersion.length === 0 || reportedVersion.length > SCRIPT_VENDOR_VERSION_MAX_CHARS) {
+        return {
+            ok: false,
+            reason: `the --version line must contain 1-${SCRIPT_VENDOR_VERSION_MAX_CHARS} characters`,
+        };
+    }
+    return {
+        ok: true,
+        proof: { installedBinary: absoluteBinary, installedVersion: reportedVersion },
+    };
+}
+/** Prove an exact npm package and its target-owned launcher, then execute the
+ * absolute launcher for a matching version receipt. */
+export function proveInstalledNpm(spec, runtime) {
+    const packageRoot = join(spec.vendorRoot, "lib", "node_modules", ...spec.npmPackage.split("/"));
+    let canonicalRoot;
+    let canonicalPackageRoot;
+    let canonicalPackageJson;
+    try {
+        canonicalRoot = realpathSync(spec.vendorRoot);
+        canonicalPackageRoot = realpathSync(packageRoot);
+        canonicalPackageJson = realpathSync(join(packageRoot, "package.json"));
+    }
+    catch {
+        return { ok: false, reason: "the exact npm package root is missing or unreadable" };
+    }
+    if (!isStrictlyContained(canonicalRoot, canonicalPackageRoot)) {
+        return { ok: false, reason: "the exact npm package root escapes the install prefix" };
+    }
+    if (!isStrictlyContained(canonicalPackageRoot, canonicalPackageJson)) {
+        return { ok: false, reason: "the npm package manifest escapes the exact package root" };
+    }
+    let packageVersion = null;
+    try {
+        const parsed = JSON.parse(readFileSync(canonicalPackageJson, "utf8"));
+        packageVersion = typeof parsed.version === "string" ? parsed.version : null;
+    }
+    catch {
+        return { ok: false, reason: "the exact npm package manifest is unreadable" };
+    }
+    if (packageVersion !== spec.expectedVersion) {
+        return {
+            ok: false,
+            reason: `the npm package version is ${packageVersion ?? "missing"}, expected ${spec.expectedVersion}`,
+        };
+    }
+    let installedBinary = null;
+    for (const binaryName of spec.binaryNames) {
+        const base = resolve(spec.vendorRoot, "bin", binaryName);
+        const candidates = runtime.platform === "win32" ? [base, `${base}.exe`, `${base}.cmd`, `${base}.bat`] : [base];
+        installedBinary = candidates.find((candidate) => isLaunchableExecutable(candidate)) ?? null;
+        if (installedBinary !== null)
+            break;
+    }
+    if (installedBinary === null) {
+        return { ok: false, reason: "the expected npm launcher is missing or not launchable" };
+    }
+    try {
+        const inspection = inspectExecutable(installedBinary);
+        if (!isBoundedRegularExecutable(inspection) || inspection.size === 0) {
+            return { ok: false, reason: "the npm launcher target is empty or not a bounded file" };
+        }
+        if (!isStrictlyContained(canonicalRoot, inspection.realpath)) {
+            return { ok: false, reason: "the npm launcher canonical target escapes the install prefix" };
+        }
+    }
+    catch {
+        return { ok: false, reason: "the npm launcher could not be inspected safely" };
+    }
+    return proveVersion(installedBinary, runtime, spec.expectedVersion);
+}
+/** Prove a script vendor's launcher (cursor-agent, agy). These installers pick
+ * their own destination and ship no pinnable version, so the proof is the
+ * resolvable launcher plus its own `--version` line — ONE body for every such
+ * vendor, so a third one is a caller, not a fork. The official launcher may be
+ * a symlink into a version directory outside bin, which is why resolution goes
+ * through the same helper the run path uses. */
+export function proveInstalledScriptVendor(binaryName, runtime) {
+    const installedBinary = resolveHarnessBinary(binaryName, runtime.resolutionSource, runtime.runnerNodePath, runtime.platform);
+    if (installedBinary === null) {
+        return { ok: false, reason: `the exact ${binaryName} launcher is missing or not launchable` };
+    }
+    try {
+        const inspection = inspectExecutable(installedBinary);
+        if (!isBoundedRegularExecutable(inspection) || inspection.size === 0) {
+            return { ok: false, reason: `the ${binaryName} target is empty or not a bounded file` };
+        }
+    }
+    catch {
+        return { ok: false, reason: `the ${binaryName} launcher could not be inspected safely` };
+    }
+    return proveVersion(installedBinary, runtime, null);
+}
+//# sourceMappingURL=harness-install-proof.js.map

package/dist/harness-install-proof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-install-proof.js","sourceRoot":"","sources":["../src/harness-install-proof.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EACL,iBAAiB,EACjB,0BAA0B,EAC1B,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AAyBzB,MAAM,uBAAuB,GAAG,IAAI,GAAG,IAAI,CAAC;AAC5C,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC,MAAM,+BAA+B,GAAG,GAAG,CAAC;AAC5C,MAAM,YAAY,GAChB,2IAA2I,CAAC;AAE9I,SAAS,mBAAmB,CAAC,IAAY,EAAE,SAAiB;IAC1D,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC5C,OAAO,CACL,SAAS,KAAK,EAAE;QAChB,SAAS,KAAK,IAAI;QAClB,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC;QACjC,CAAC,UAAU,CAAC,SAAS,CAAC,CACvB,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAyC;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,YAAY,CACnB,eAAuB,EACvB,OAA4B,EAC5B,eAA8B;IAE9B,MAAM,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,WAAW,CAAC,EAAE;QACjE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,GAAG,EAAE,OAAO,CAAC,WAAW;QACxB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,wBAAwB;QACjC,SAAS,EAAE,uBAAuB;KACnC,CAAC,CAAC;IACH,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,uCAAuC,aAAa,CAAC,MAAM,IAAI,kBAAkB,EAAE;SAC5F,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9D,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,eAAe,KAAK,IAAI,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC5F,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,kEAAkE,eAAe,EAAE;SAC5F,CAAC;IACJ,CAAC;IACD,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO;YACL,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,gBAAgB,EAAE,eAAe,EAAE;SAC9E,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACzE,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,IAAI,eAAe,CAAC,MAAM,GAAG,+BAA+B,EAAE,CAAC;QAC7F,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,qCAAqC,+BAA+B,aAAa;SAC1F,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,gBAAgB,EAAE,eAAe,EAAE;KAC9E,CAAC;AACJ,CAAC;AAED;uDACuD;AACvD,MAAM,UAAU,iBAAiB,CAC/B,IAAyB,EACzB,OAA4B;IAE5B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAChG,IAAI,aAAqB,CAAC;IAC1B,IAAI,oBAA4B,CAAC;IACjC,IAAI,oBAA4B,CAAC;IACjC,IAAI,CAAC;QACH,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9C,oBAAoB,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;QACjD,oBAAoB,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qDAAqD,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,aAAa,EAAE,oBAAoB,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uDAAuD,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,EAAE,CAAC;QACrE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yDAAyD,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,cAAc,GAAkB,IAAI,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAEnE,CAAC;QACF,cAAc,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;IAC/E,CAAC;IACD,IAAI,cAAc,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;QAC5C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,8BAA8B,cAAc,IAAI,SAAS,cAAc,IAAI,CAAC,eAAe,EAAE;SACtG,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,GAAkB,IAAI,CAAC;IAC1C,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACzD,MAAM,UAAU,GACd,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,MAAM,EAAE,GAAG,IAAI,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9F,eAAe,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC;QAC5F,IAAI,eAAe,KAAK,IAAI;YAAE,MAAM;IACtC,CAAC;IACD,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,iBAAiB,CAAC,eAAe,CAAC,CAAC;QACtD,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,aAAa,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8DAA8D,EAAE,CAAC;QAC/F,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,YAAY,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;AACtE,CAAC;AAED;;;;;gDAKgD;AAChD,MAAM,UAAU,0BAA0B,CACxC,UAAkB,EAClB,OAA4B;IAE5B,MAAM,eAAe,GAAG,oBAAoB,CAC1C,UAAU,EACV,OAAO,CAAC,gBAAgB,EACxB,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,QAAQ,CACjB,CAAC;IACF,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,UAAU,wCAAwC,EAAE,CAAC;IAChG,CAAC;IACD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,iBAAiB,CAAC,eAAe,CAAC,CAAC;QACtD,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,UAAU,wCAAwC,EAAE,CAAC;QAC1F,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,UAAU,yCAAyC,EAAE,CAAC;IAC3F,CAAC;IACD,OAAO,YAAY,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC"}

package/dist/harness-install-recipes.d.ts

@@ -0,0 +1,80 @@
+import type { PinnedVendorCliVersion } from "@claudexor/util";
+import { INSTALLABLE_HARNESSES } from "./harness-command-specs.js";
+export type InstallableHarness = (typeof INSTALLABLE_HARNESSES)[number];
+export declare function isInstallableHarness(value: string): value is InstallableHarness;
+/** Install destinations. `remote` is the historical issue-#89 SSH-host prefix;
+ * `local` is the managed toolchain root this host's own binary resolution and
+ * confinement already read, so an install there is immediately runnable. */
+export declare const HARNESS_INSTALL_TARGETS: readonly ["local", "remote"];
+export type HarnessInstallTarget = (typeof HARNESS_INSTALL_TARGETS)[number];
+export declare function isHarnessInstallTarget(value: string): value is HarnessInstallTarget;
+/** ONE table owns each target's npm prefix and how it is disclosed. */
+export declare const TARGET_LAYOUTS: Record<HarnessInstallTarget, {
+    displayRoot: string;
+    root(home: string): string;
+}>;
+/** Exact npm pins. Each version ALIASES the harness package's vendor-version
+ * SSOT (vendor-cli-version.ts there). For claude/codex that is the version
+ * this release's freshness gates verified; the opencode pin is a
+ * deterministic install target only — no recorded verification fixture
+ * vouches for it (its vendor-cli-version.ts discloses this). Cursor and agy
+ * are absent deliberately: they ship no npm artifact (see SCRIPT_INSTALLERS
+ * below). */
+export type HarnessInstallVerification = "release_verified" | "deterministic_only" | "human_observed"
+/** A script vendor installed unattended under an explicit local `--yes`:
+ * pinned to nothing and watched by nobody, so the receipt carries the exact
+ * installer bytes instead of a human's attention. */
+ | "unattended_unpinned";
+export declare const NPM_PINS: Partial<Record<InstallableHarness, {
+    npmPackage: string;
+    /** Launcher names the post-install proof executes, in preference order. */
+    binaryNames: readonly string[];
+    version: PinnedVendorCliVersion;
+    verification: Exclude<HarnessInstallVerification, "human_observed" | "unattended_unpinned">;
+}>>;
+export declare const CURSOR_INSTALL_URL = "https://cursor.com/install";
+/**
+ * Google's official Antigravity CLI installer, as published on
+ * antigravity.google/docs/cli/install (`curl -fsSL <this url> | bash`, which
+ * Claudexor deliberately does NOT do — see the header). Verified end to end on
+ * 2026-08-16: the script fetched from this URL installed agy 1.1.13 to
+ * `~/.local/bin/agy`, which is the destination disclosed below. The vendor
+ * ships one signed Go binary and no npm package, so it takes the same
+ * human-observed path as cursor.
+ */
+export declare const AGY_INSTALL_URL = "https://antigravity.google/cli/install.sh";
+/** The vendor's Windows installer, from the same documentation page. */
+export declare const AGY_INSTALL_URL_WINDOWS = "https://antigravity.google/cli/install.ps1";
+/** Vendors distributed as a shell installer instead of a pinnable npm
+ * artifact. ONE branch serves both entries; the per-harness text below is the
+ * only thing that differs, so a third such vendor is a row, not a fork. */
+declare const SCRIPT_INSTALLERS: Record<"agy" | "cursor", {
+    url: string;
+    windowsUrl?: string;
+    installLocation: string;
+    pinNote: string;
+    /** Launcher the post-install proof resolves and version-probes. */
+    binaryName: string;
+}>;
+type ScriptInstaller = (typeof SCRIPT_INSTALLERS)[keyof typeof SCRIPT_INSTALLERS];
+/** Membership is asked of the TABLE, never re-typed: a third script vendor is
+ * one row, and cannot be added to the table yet fall through here. */
+export declare function scriptInstaller(harness: InstallableHarness): ScriptInstaller | null;
+export interface HarnessInstallerDisclosure {
+    harness: InstallableHarness;
+    /** Which prefix this disclosure describes; echoed into every receipt. */
+    target: HarnessInstallTarget;
+    command: string;
+    installLocation: string;
+    /** Exact vendor version the command installs; null exactly for the script
+     * vendors (cursor, agy), which have no pinnable artifact — disclosed, never
+     * faked. */
+    pinnedVersion: string | null;
+    /** Evidence behind the install target. Package-registry integrity verifies
+     * downloaded bytes for every npm pin, but only release_verified means the
+     * exact vendor version was exercised by this release's freshness gates. */
+    verification: HarnessInstallVerification;
+}
+export declare function harnessInstallerDisclosure(harness: InstallableHarness, target?: HarnessInstallTarget): HarnessInstallerDisclosure;
+export {};
+//# sourceMappingURL=harness-install-recipes.d.ts.map

package/dist/harness-install-recipes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-install-recipes.d.ts","sourceRoot":"","sources":["../src/harness-install-recipes.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,kBAAkB,CAE/E;AAED;;4EAE4E;AAC5E,eAAO,MAAM,uBAAuB,YAAI,OAAO,EAAE,QAAQ,CAAU,CAAC;AACpE,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,oBAAoB,CAEnF;AAED,uEAAuE;AACvE,eAAO,MAAM,cAAc,EAAE,MAAM,CACjC,oBAAoB,EACpB;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;CAAE,CAOpD,CAAC;AAEF;;;;;;aAMa;AACb,MAAM,MAAM,0BAA0B,GAClC,kBAAkB,GAClB,oBAAoB,GACpB,gBAAgB;AAClB;;qDAEqD;GACnD,qBAAqB,CAAC;AAE1B,eAAO,MAAM,QAAQ,EAAE,OAAO,CAC5B,MAAM,CACJ,kBAAkB,EAClB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,OAAO,EAAE,sBAAsB,CAAC;IAChC,YAAY,EAAE,OAAO,CAAC,0BAA0B,EAAE,gBAAgB,GAAG,qBAAqB,CAAC,CAAC;CAC7F,CACF,CAoBF,CAAC;AAEF,eAAO,MAAM,kBAAkB,+BAA+B,CAAC;AAC/D;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,8CAA8C,CAAC;AAC3E,wEAAwE;AACxE,eAAO,MAAM,uBAAuB,+CAA+C,CAAC;AAEpF;;2EAE2E;AAC3E,QAAA,MAAM,iBAAiB,EAAE,MAAM,CAC7B,KAAK,GAAG,QAAQ,EAChB;IACE,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,mEAAmE;IACnE,UAAU,EAAE,MAAM,CAAC;CACpB,CAoBF,CAAC;AAEF,KAAK,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAElF;sEACsE;AACtE,wBAAgB,eAAe,CAAC,OAAO,EAAE,kBAAkB,GAAG,eAAe,GAAG,IAAI,CAInF;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,yEAAyE;IACzE,MAAM,EAAE,oBAAoB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB;;gBAEY;IACZ,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;+EAE2E;IAC3E,YAAY,EAAE,0BAA0B,CAAC;CAC1C;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,kBAAkB,EAC3B,MAAM,GAAE,oBAA+B,GACtC,0BAA0B,CAqC5B"}

package/dist/harness-install-recipes.js

@@ -0,0 +1,130 @@
+/**
+ * The vendor RECIPES `claudexor harness install` executes, and the disclosure
+ * it prints before executing anything. Split from harness-installer.ts so the
+ * WHAT (which artifact, from where, into which prefix, with what evidence)
+ * stays readable next to itself, while the installer file owns the HOW
+ * (lease, spawn, proof, CLI surface). A new vendor is a row in one of the two
+ * tables here, never a new branch there.
+ */
+import { join } from "node:path";
+import { CLAUDE_VENDOR_CLI_VERSION } from "@claudexor/harness-claude";
+import { CODEX_VENDOR_CLI_VERSION } from "@claudexor/harness-codex";
+import { OPENCODE_VENDOR_CLI_VERSION } from "@claudexor/harness-opencode";
+import { managedNodeRoot } from "@claudexor/core";
+import { INSTALLABLE_HARNESSES } from "./harness-command-specs.js";
+export function isInstallableHarness(value) {
+    return INSTALLABLE_HARNESSES.includes(value);
+}
+/** Install destinations. `remote` is the historical issue-#89 SSH-host prefix;
+ * `local` is the managed toolchain root this host's own binary resolution and
+ * confinement already read, so an install there is immediately runnable. */
+export const HARNESS_INSTALL_TARGETS = ["local", "remote"];
+export function isHarnessInstallTarget(value) {
+    return HARNESS_INSTALL_TARGETS.includes(value);
+}
+/** ONE table owns each target's npm prefix and how it is disclosed. */
+export const TARGET_LAYOUTS = {
+    local: { displayRoot: "~/.claudexor/node", root: managedNodeRoot },
+    remote: {
+        displayRoot: "~/.claudexor/remote/vendor",
+        root: (home) => join(home, ".claudexor", "remote", "vendor"),
+    },
+};
+export const NPM_PINS = {
+    claude: {
+        npmPackage: "@anthropic-ai/claude-code",
+        binaryNames: ["claude"],
+        version: CLAUDE_VENDOR_CLI_VERSION,
+        verification: "release_verified",
+    },
+    codex: {
+        npmPackage: "@openai/codex",
+        binaryNames: ["codex"],
+        version: CODEX_VENDOR_CLI_VERSION,
+        verification: "release_verified",
+    },
+    opencode: {
+        npmPackage: "opencode-ai",
+        binaryNames: ["opencode"],
+        version: OPENCODE_VENDOR_CLI_VERSION,
+        verification: "deterministic_only",
+    },
+};
+export const CURSOR_INSTALL_URL = "https://cursor.com/install";
+/**
+ * Google's official Antigravity CLI installer, as published on
+ * antigravity.google/docs/cli/install (`curl -fsSL <this url> | bash`, which
+ * Claudexor deliberately does NOT do — see the header). Verified end to end on
+ * 2026-08-16: the script fetched from this URL installed agy 1.1.13 to
+ * `~/.local/bin/agy`, which is the destination disclosed below. The vendor
+ * ships one signed Go binary and no npm package, so it takes the same
+ * human-observed path as cursor.
+ */
+export const AGY_INSTALL_URL = "https://antigravity.google/cli/install.sh";
+/** The vendor's Windows installer, from the same documentation page. */
+export const AGY_INSTALL_URL_WINDOWS = "https://antigravity.google/cli/install.ps1";
+/** Vendors distributed as a shell installer instead of a pinnable npm
+ * artifact. ONE branch serves both entries; the per-harness text below is the
+ * only thing that differs, so a third such vendor is a row, not a fork. */
+const SCRIPT_INSTALLERS = {
+    agy: {
+        binaryName: "agy",
+        url: AGY_INSTALL_URL,
+        // The one vendor here that publishes a Windows installer of its own; the
+        // POSIX row would otherwise be all Claudexor could honestly offer.
+        windowsUrl: AGY_INSTALL_URL_WINDOWS,
+        installLocation: "~/.local/bin (as selected by Google's Antigravity installer)",
+        pinNote: "none — Antigravity ships no pinnable npm artifact; the vendor script is downloaded in full, its size and sha256 print, and it runs in this terminal where you watch it",
+    },
+    cursor: {
+        // The legacy alias every Cursor login/run surface already consumes.
+        binaryName: "cursor-agent",
+        url: CURSOR_INSTALL_URL,
+        installLocation: "~/.local/bin (or ~/.cursor/bin, as selected by Cursor's installer)",
+        pinNote: "none — Cursor ships no pinnable npm artifact; the vendor script is downloaded in full, its size and sha256 print, and it runs in this terminal where you watch it",
+    },
+};
+/** Membership is asked of the TABLE, never re-typed: a third script vendor is
+ * one row, and cannot be added to the table yet fall through here. */
+export function scriptInstaller(harness) {
+    return Object.hasOwn(SCRIPT_INSTALLERS, harness)
+        ? SCRIPT_INSTALLERS[harness]
+        : null;
+}
+export function harnessInstallerDisclosure(harness, target = "remote") {
+    const layout = TARGET_LAYOUTS[target];
+    const pin = NPM_PINS[harness];
+    if (pin) {
+        return {
+            harness,
+            target,
+            command: `npm install --global --prefix ${layout.displayRoot} ${pin.npmPackage}@${pin.version}`,
+            installLocation: `${layout.displayRoot}/bin`,
+            pinnedVersion: pin.version,
+            verification: pin.verification,
+        };
+    }
+    const script = scriptInstaller(harness);
+    /* c8 ignore next -- every non-npm harness has a script row; this is the
+       unreachable guard that keeps the two tables honest. */
+    if (!script)
+        throw new Error(`harness ${harness} has neither an npm pin nor a script installer`);
+    const windows = process.platform === "win32";
+    const url = windows ? (script.windowsUrl ?? script.url) : script.url;
+    const file = windows && script.windowsUrl ? "install.ps1" : "install.sh";
+    const runner = windows && script.windowsUrl ? "powershell -ExecutionPolicy Bypass -File" : "/bin/sh";
+    return {
+        harness,
+        target,
+        command: `curl --fail --silent --show-error --location ${url} ` +
+            `--output <private-tmpdir>/${file} && ${runner} <private-tmpdir>/${file}`,
+        // The vendor script picks its own destination, so the local target cannot
+        // move it; only the WITNESS differs between the two targets.
+        installLocation: windows && script.windowsUrl
+            ? "%LOCALAPPDATA%\\agy\\bin (as selected by Google's Antigravity installer)"
+            : script.installLocation,
+        pinnedVersion: null,
+        verification: target === "local" ? "unattended_unpinned" : "human_observed",
+    };
+}
+//# sourceMappingURL=harness-install-recipes.js.map

package/dist/harness-install-recipes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-install-recipes.js","sourceRoot":"","sources":["../src/harness-install-recipes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAInE,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,OAAO,qBAAqB,CAAC,QAAQ,CAAC,KAA2B,CAAC,CAAC;AACrE,CAAC;AAED;;4EAE4E;AAC5E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAU,CAAC;AAGpE,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,OAAO,uBAAuB,CAAC,QAAQ,CAAC,KAA6B,CAAC,CAAC;AACzE,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,MAAM,cAAc,GAGvB;IACF,KAAK,EAAE,EAAE,WAAW,EAAE,mBAAmB,EAAE,IAAI,EAAE,eAAe,EAAE;IAClE,MAAM,EAAE;QACN,WAAW,EAAE,4BAA4B;QACzC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,CAAC;KAC7D;CACF,CAAC;AAkBF,MAAM,CAAC,MAAM,QAAQ,GAWjB;IACF,MAAM,EAAE;QACN,UAAU,EAAE,2BAA2B;QACvC,WAAW,EAAE,CAAC,QAAQ,CAAC;QACvB,OAAO,EAAE,yBAAyB;QAClC,YAAY,EAAE,kBAAkB;KACjC;IACD,KAAK,EAAE;QACL,UAAU,EAAE,eAAe;QAC3B,WAAW,EAAE,CAAC,OAAO,CAAC;QACtB,OAAO,EAAE,wBAAwB;QACjC,YAAY,EAAE,kBAAkB;KACjC;IACD,QAAQ,EAAE;QACR,UAAU,EAAE,aAAa;QACzB,WAAW,EAAE,CAAC,UAAU,CAAC;QACzB,OAAO,EAAE,2BAA2B;QACpC,YAAY,EAAE,oBAAoB;KACnC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,4BAA4B,CAAC;AAC/D;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,2CAA2C,CAAC;AAC3E,wEAAwE;AACxE,MAAM,CAAC,MAAM,uBAAuB,GAAG,4CAA4C,CAAC;AAEpF;;2EAE2E;AAC3E,MAAM,iBAAiB,GAUnB;IACF,GAAG,EAAE;QACH,UAAU,EAAE,KAAK;QACjB,GAAG,EAAE,eAAe;QACpB,yEAAyE;QACzE,mEAAmE;QACnE,UAAU,EAAE,uBAAuB;QACnC,eAAe,EAAE,8DAA8D;QAC/E,OAAO,EACL,wKAAwK;KAC3K;IACD,MAAM,EAAE;QACN,oEAAoE;QACpE,UAAU,EAAE,cAAc;QAC1B,GAAG,EAAE,kBAAkB;QACvB,eAAe,EAAE,oEAAoE;QACrF,OAAO,EACL,mKAAmK;KACtK;CACF,CAAC;AAIF;sEACsE;AACtE,MAAM,UAAU,eAAe,CAAC,OAA2B;IACzD,OAAO,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC;QAC9C,CAAC,CAAC,iBAAiB,CAAC,OAAyC,CAAC;QAC9D,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAkBD,MAAM,UAAU,0BAA0B,CACxC,OAA2B,EAC3B,MAAM,GAAyB,QAAQ;IAEvC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,GAAG,EAAE,CAAC;QACR,OAAO;YACL,OAAO;YACP,MAAM;YACN,OAAO,EAAE,iCAAiC,MAAM,CAAC,WAAW,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,OAAO,EAAE;YAC/F,eAAe,EAAE,GAAG,MAAM,CAAC,WAAW,MAAM;YAC5C,aAAa,EAAE,GAAG,CAAC,OAAO;YAC1B,YAAY,EAAE,GAAG,CAAC,YAAY;SAC/B,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC;6DACyD;IACzD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,OAAO,gDAAgD,CAAC,CAAC;IACjG,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IACrE,MAAM,IAAI,GAAG,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC;IACzE,MAAM,MAAM,GACV,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,OAAO;QACL,OAAO;QACP,MAAM;QACN,OAAO,EACL,gDAAgD,GAAG,GAAG;YACtD,6BAA6B,IAAI,OAAO,MAAM,qBAAqB,IAAI,EAAE;QAC3E,0EAA0E;QAC1E,6DAA6D;QAC7D,eAAe,EACb,OAAO,IAAI,MAAM,CAAC,UAAU;YAC1B,CAAC,CAAC,0EAA0E;YAC5E,CAAC,CAAC,MAAM,CAAC,eAAe;QAC5B,aAAa,EAAE,IAAI;QACnB,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,gBAAgB;KAC5E,CAAC;AACJ,CAAC"}