@harness-nexus/cli 0.1.0-alpha.1 → 0.1.0-alpha.3

package/dist/daemon/runtime-config.js

@@ -0,0 +1,343 @@
+import { homedir } from 'node:os';
+import { chmodSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { harnessJobPayloadSchema, harnessResultDataSchema, } from '@harness-nexus/shared';
+import { HarnessNexusClient } from '@harness-nexus/sdk';
+import { beginMarker, endMarker, DSH_PATCH_FILENAME } from '../install/adapters/deepseek.js';
+import { mergeTomlSection } from '../install/adapters/codex.js';
+import { dshNodeWarning } from './runtime.js';
+/**
+ * Provider-config apply (Phase 9 W3) — the daemon half of
+ * docs/design/phase-9-harness-runtime.md §4.3.
+ *
+ * `apply-config` harness jobs fetch the resolved `{spec, secret}` bundle with
+ * the machine PAT (execution-time resolution: a requeued job after a spec or
+ * credential edit applies the CURRENT value) and write each harness's NATIVE
+ * slots. All writes are merge-preserving and idempotent (re-apply = upgrade);
+ * every touched file ends 0600. Ground truth per target:
+ *
+ *  - claude-code: `~/.claude/settings.json` — `env.ANTHROPIC_BASE_URL` (only
+ *    while the spec sets one; a later unset REMOVES ours), `env.ANTHROPIC_AUTH_TOKEN`
+ *    (the key), top-level `model` (base URL alone doesn't switch the model).
+ *  - codex: `~/.codex/config.toml` — root keys `model` + `model_provider`, and
+ *    the `[model_providers.harness_nexus]` block with `requires_openai_auth =
+ *    true` (the built-in provider's own shape — auth comes from auth.json, no
+ *    env var). `~/.codex/auth.json` — apikey mode with the key as
+ *    `OPENAI_API_KEY`. `wire_api` is NOT set: current codex removed `chat`, so
+ *    every route speaks Responses — gateways must be Responses-compatible.
+ *  - deepseek: the SETTINGS layer (`~/.dsh/settings.yaml`, namespace
+ *    `llm-pi-ai` with the provider route + `agent-default-model` selecting
+ *    it). NOT loader-entry inserts in `cordis.patch.yml` — the dsh
+ *    composition already mounts both plugins, and a second insert
+ *    double-registers them ("configurable provider … already declared" /
+ *    "service agentDefaultModel has been registered") and crashes
+ *    `--profile acp`. A legacy W3 patch region is retired by the same apply.
+ *    The key goes to `~/.dsh/.env` under `HARNESS_NEXUS_API_KEY` — dsh's own
+ *    user-env credential layer, read on EVERY launch (user shells included).
+ */
+/** dsh resolves this name through process env > ~/.dsh/.credentials.yaml > ./.env > ~/.dsh/.env. */
+const DSH_API_KEY_ENV = 'HARNESS_NEXUS_API_KEY';
+/** codex provider id — also the `model_provider` root key value. */
+const CODEX_PROVIDER_ID = 'harness_nexus';
+const PROVIDER_REGION = 'provider';
+function readJson(file) {
+    let raw = '{}';
+    try {
+        raw = readFileSync(file, 'utf8');
+    }
+    catch (e) {
+        if (e.code !== 'ENOENT') {
+            throw new Error(`cannot read ${file}: ${e instanceof Error ? e.message : String(e)}`);
+        }
+        return {}; // absent file — nothing to merge
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+            throw new Error('not a JSON object');
+        }
+        return parsed;
+    }
+    catch (e) {
+        throw new Error(`${file} is not valid JSON (${e instanceof Error ? e.message : String(e)}) — fix or remove it and re-apply`);
+    }
+}
+function writeSecretFile(file, content) {
+    mkdirSync(join(file, '..'), { recursive: true });
+    writeFileSync(file, content, 'utf8');
+    chmodSync(file, 0o600);
+    return file;
+}
+/** Display path (`~/.codex/config.toml`) for job result data — never leaks the home dir. */
+const display = (homeDir, file) => `~${file.startsWith(homeDir) ? file.slice(homeDir.length) : file}`;
+// ---- claude-code ----
+function applyClaudeConfig(spec, secret, homeDir) {
+    const dir = join(homeDir, '.claude');
+    const file = join(dir, 'settings.json');
+    const settings = readJson(file);
+    const env = {
+        ...(settings.env ?? {}),
+        ANTHROPIC_AUTH_TOKEN: secret,
+    };
+    if (spec.baseUrl !== undefined)
+        env.ANTHROPIC_BASE_URL = spec.baseUrl;
+    else
+        delete env.ANTHROPIC_BASE_URL; // the platform owns the route — unset means revert to default
+    writeSecretFile(file, `${JSON.stringify({ ...settings, env, model: spec.model }, null, 2)}\n`);
+    return [display(homeDir, file)];
+}
+// ---- codex ----
+/**
+ * Set TOP-LEVEL `key = "value"` pairs in a TOML document, preserving every
+ * other byte. Only the region before the first `[section]` header is ours to
+ * edit (a `model` inside a section belongs to that section); missing keys are
+ * appended to that region. JSON string escaping is valid TOML basic-string
+ * escaping.
+ */
+export function mergeTomlRootKeys(existing, values) {
+    const headerRe = /^\s*\[/;
+    const lines = existing.split('\n');
+    const firstHeader = lines.findIndex((l) => headerRe.test(l));
+    const topEnd = firstHeader === -1 ? lines.length : firstHeader;
+    const top = lines.slice(0, topEnd);
+    const rest = lines.slice(topEnd);
+    const remaining = new Map(Object.entries(values));
+    const rewritten = [];
+    for (const line of top) {
+        const key = /^(\s*[A-Za-z0-9_-]+)\s*=/.exec(line)?.[1]?.trim();
+        const hit = key !== undefined ? remaining.get(key) : undefined;
+        if (key !== undefined && hit !== undefined) {
+            rewritten.push(`${key} = ${JSON.stringify(hit)}`);
+            remaining.delete(key);
+        }
+        else {
+            rewritten.push(line);
+        }
+    }
+    // Append missing keys at the end of the top-level region (before trailing
+    // blank lines so a header below keeps its spacing).
+    let insertAt = rewritten.length;
+    while (insertAt > 0 && rewritten[insertAt - 1].trim() === '')
+        insertAt--;
+    rewritten.splice(insertAt, 0, ...[...remaining.entries()].map(([k, v]) => `${k} = ${JSON.stringify(v)}`));
+    const out = [...rewritten, ...rest].join('\n').replace(/\s+$/, '');
+    return `${out}${out.length > 0 ? '\n' : ''}`;
+}
+function applyCodexConfig(spec, secret, homeDir) {
+    const dir = join(homeDir, '.codex');
+    const cfgPath = join(dir, 'config.toml');
+    let cfg = '';
+    try {
+        cfg = readFileSync(cfgPath, 'utf8');
+    }
+    catch {
+        cfg = ''; // absent file — fresh document
+    }
+    const sectionBody = [
+        `name = ${JSON.stringify(spec.providerLabel)}`,
+        ...(spec.baseUrl !== undefined ? [`base_url = ${JSON.stringify(spec.baseUrl)}`] : []),
+        'requires_openai_auth = true',
+    ].join('\n');
+    cfg = mergeTomlSection(mergeTomlRootKeys(cfg, { model: spec.model, model_provider: CODEX_PROVIDER_ID }), `model_providers.${CODEX_PROVIDER_ID}`, sectionBody);
+    writeSecretFile(cfgPath, cfg);
+    const authPath = join(dir, 'auth.json');
+    const auth = readJson(authPath);
+    writeSecretFile(authPath, `${JSON.stringify({ ...auth, auth_mode: 'apikey', OPENAI_API_KEY: secret }, null, 2)}\n`);
+    return [display(homeDir, cfgPath), display(homeDir, authPath)];
+}
+// ---- deepseek ----
+/** Replace (or append) one `KEY=VALUE` line in a dotenv document, preserving the rest. */
+export function mergeEnvLine(existing, key, value) {
+    const re = new RegExp(`^${key}=.*$`, 'm');
+    const line = `${key}=${value}`;
+    const base = re.test(existing)
+        ? existing.replace(re, line)
+        : existing.replace(/\s+$/, '') + (existing.trim().length > 0 ? '\n' : '') + line;
+    return `${base.replace(/\s+$/, '')}\n`;
+}
+const DSH_API_MAP = {
+    // pi-ai KnownApi values (verified against the installed catalog types).
+    'anthropic-messages': 'anthropic-messages',
+    openai: 'openai-completions',
+};
+/** Settings namespaces our managed region owns (verified against the plugins). */
+const DSH_LLM_NS = 'llm-pi-ai';
+const DSH_DEFAULT_MODEL_NS = 'agent-default-model';
+const SETTINGS_BEGIN = '# BEGIN harness-nexus (managed) — rewritten by hnx; keep edits outside the markers';
+const SETTINGS_END = '# END harness-nexus (managed)';
+/**
+ * Strip a marked block (full-line comment markers) from a document. Returns
+ * the remainder with collapsed surrounding blank lines. A base that is JUST
+ * an empty placeholder (`[]` / `{}`) is treated as empty — appending entries
+ * after it would produce two YAML documents (a boot-time parse error).
+ */
+export function stripMarkedBlock(existing, begin, end) {
+    const b = existing.indexOf(begin);
+    let doc = existing;
+    if (b !== -1) {
+        const e = existing.indexOf(end, b);
+        if (e !== -1) {
+            const before = existing.slice(0, b);
+            const after = existing.slice(e + end.length).replace(/^\n+/, '');
+            doc = `${before.replace(/\s+$/, '')}${before.trim().length > 0 ? '\n\n' : ''}${after}`;
+        }
+    }
+    const trimmed = doc.trim();
+    return trimmed === '[]' || trimmed === '{}' ? '' : doc;
+}
+/**
+ * Manage the dsh provider route across its THREE native slots:
+ *
+ *  1. `~/.dsh/settings.yaml` (`dsh-settings-file`) — the `llm-pi-ai` namespace
+ *     (the provider route; dormant until a section appears) and
+ *     `agent-default-model` (the default selection). The general channel for
+ *     already-mounted plugins; a hand-managed namespace section is refused
+ *     (duplicate keys brick boot).
+ *  2. `~/.dsh/cordis.patch.yml` — an id-targeted CONFIG OVERRIDE of the `acp`
+ *     entry: the dsh-acp-app composition pins `provider: deepseek-official`
+ *     on the acp plugin itself, and a plugin's explicit config beats the
+ *     settings default for its sessions — without this override CHAT keeps
+ *     hitting the old route. (The W3 build INSERTED duplicate plugins here,
+ *     which double-registered and crashed `--profile acp`; inserts are gone,
+ *     and the same apply retires any legacy region.)
+ *  3. `~/.dsh/.env` — the key under `HARNESS_NEXUS_API_KEY`, dsh's user-env
+ *     credential layer (read on every launch, user shells included).
+ */
+function applyDshConfig(spec, secret, homeDir) {
+    const dir = join(homeDir, '.dsh');
+    const files = [];
+    const patchPath = join(dir, DSH_PATCH_FILENAME);
+    // 1. The settings document.
+    const settingsPath = join(dir, 'settings.yaml');
+    let doc = '';
+    try {
+        doc = readFileSync(settingsPath, 'utf8');
+    }
+    catch {
+        doc = ''; // absent document — fresh store
+    }
+    const base = stripMarkedBlock(doc, SETTINGS_BEGIN, SETTINGS_END);
+    for (const ns of [DSH_LLM_NS, DSH_DEFAULT_MODEL_NS]) {
+        if (new RegExp(`^${ns}:`, 'm').test(base)) {
+            throw new Error(`~/.dsh/settings.yaml already has a hand-managed "${ns}" section — hnx will not overwrite it; ` +
+                'remove or rename that section and re-apply');
+        }
+    }
+    const yq = JSON.stringify; // JSON quoting is valid YAML 1.2 double-quoting
+    const region = [
+        SETTINGS_BEGIN,
+        `${DSH_LLM_NS}:`,
+        `  providers:`,
+        `    harness-nexus:`,
+        `      displayName: ${yq(spec.providerLabel)}`,
+        `      api: ${DSH_API_MAP[spec.api]}`,
+        `      baseURL: ${yq(spec.baseUrl)}`,
+        `      apiKeyEnv: ${DSH_API_KEY_ENV}`,
+        `      models:`,
+        `        - id: ${yq(spec.model)}`,
+        `${DSH_DEFAULT_MODEL_NS}:`,
+        `  provider: harness-nexus`,
+        `  model: ${yq(spec.model)}`,
+        SETTINGS_END,
+    ].join('\n');
+    const nextDoc = `${base.replace(/\s+$/, '')}${base.trim().length > 0 ? '\n\n' : ''}${region}\n`;
+    writeSecretFile(settingsPath, nextDoc);
+    files.push(display(homeDir, settingsPath));
+    // 3. The ACP app pins its OWN provider in the dsh-acp-app composition
+    //    (`- id: acp … config: {provider: deepseek-official…}`), and a plugin's
+    //    explicit config beats the settings-layer default for its sessions —
+    //    chat would keep hitting the old route. The patch layer's id-targeted
+    //    CONFIG OVERRIDE (its documented purpose) reroutes it; an insert would
+    //    double-register, an override does not.
+    let patchDoc = '';
+    try {
+        patchDoc = readFileSync(patchPath, 'utf8');
+    }
+    catch {
+        patchDoc = '[]\n'; // absent file — a fresh empty entry list
+    }
+    const patchBase = stripMarkedBlock(patchDoc, beginMarker(PROVIDER_REGION), endMarker(PROVIDER_REGION));
+    if (/^- id: acp$/m.test(patchBase)) {
+        throw new Error('~/.dsh/cordis.patch.yml already overrides the "acp" entry by hand — hnx will not touch it; ' +
+            'remove that override and re-apply');
+    }
+    const patchRegion = [
+        `${beginMarker(PROVIDER_REGION)} — rewritten by hnx; keep edits outside the markers`,
+        `- id: acp`,
+        `  config:`,
+        `    provider: harness-nexus`,
+        `    model: ${yq(spec.model)}`,
+        endMarker(PROVIDER_REGION),
+    ].join('\n');
+    const patchNext = `${patchBase.replace(/\s+$/, '')}${patchBase.trim().length > 0 ? '\n\n' : ''}${patchRegion}\n`;
+    writeSecretFile(patchPath, patchNext);
+    files.push(display(homeDir, patchPath));
+    // 4. The key itself — dsh's user-env credential layer.
+    const envPath = join(dir, '.env');
+    let envDoc = '';
+    try {
+        envDoc = readFileSync(envPath, 'utf8');
+    }
+    catch {
+        envDoc = '';
+    }
+    writeSecretFile(envPath, mergeEnvLine(envDoc, DSH_API_KEY_ENV, secret));
+    files.push(display(homeDir, envPath));
+    return files;
+}
+/** The per-target native writer — pure file surgery, no I/O beyond the harness homes. */
+export function applyRuntimeConfig(target, spec, secret, homeDir) {
+    switch (target) {
+        case 'claude-code':
+            return { files: applyClaudeConfig(spec, secret, homeDir) };
+        case 'codex':
+            return { files: applyCodexConfig(spec, secret, homeDir) };
+        case 'deepseek':
+            if (spec.baseUrl === undefined) {
+                // The route gate rejects this server-side; the daemon double-checks so
+                // a stale queued job fails honestly instead of writing a broken row.
+                throw new Error('deepseek provider routes require a baseUrl');
+            }
+            return { files: applyDshConfig(spec, secret, homeDir) };
+    }
+}
+/**
+ * The `apply-config` harness job executor: fetch the resolved bundle with the
+ * machine PAT (REST — the secret never rides the job), write the native slots,
+ * settle via `job:result`. No runtime re-probe (config files aren't in the
+ * snapshot); the redacted read-back viewer is W4.
+ */
+export async function runApplyConfigJob(socket, opts, job, homeDir = homedir()) {
+    const parsed = harnessJobPayloadSchema.safeParse(job.payload);
+    if (!parsed.success || parsed.data.action !== 'apply-config') {
+        socket.emit('job:result', { jobId: job.id, ok: false, error: 'harness payload invalid' });
+        return;
+    }
+    const target = parsed.data.target;
+    const progress = (phase, message) => {
+        socket.emit('job:progress', { jobId: job.id, phase, ...(message ? { message } : {}) });
+    };
+    progress('resolve', `fetching provider config for ${target}`);
+    try {
+        const client = new HarnessNexusClient({ baseUrl: opts.server, token: opts.token });
+        const bundle = await client.getRuntimeConfigBundle(target);
+        progress('apply', `writing ${target} config`);
+        const { files } = applyRuntimeConfig(target, bundle.spec, bundle.secret, homeDir);
+        const nodeWarning = target === 'deepseek' ? dshNodeWarning() : null;
+        const data = harnessResultDataSchema.parse({
+            target,
+            action: 'apply-config',
+            files,
+            ...(nodeWarning !== null ? { warning: nodeWarning } : {}),
+        });
+        socket.emit('job:result', { jobId: job.id, ok: true, data });
+    }
+    catch (e) {
+        socket.emit('job:result', {
+            jobId: job.id,
+            ok: false,
+            error: e instanceof Error ? e.message : String(e),
+        });
+    }
+}
+//# sourceMappingURL=runtime-config.js.map

package/dist/daemon/runtime-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-config.js","sourceRoot":"","sources":["../../src/daemon/runtime-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,uBAAuB,EACvB,uBAAuB,GAGxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC7F,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,oGAAoG;AACpG,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAEhD,oEAAoE;AACpE,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAE1C,MAAM,eAAe,GAAG,UAAU,CAAC;AAEnC,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,EAAE,CAAC,CAAC,iCAAiC;IAC9C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,MAAiC,CAAC;IAC3C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,uBAAuB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,mCAAmC,CAC5G,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,OAAe;IACpD,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACrC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4FAA4F;AAC5F,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,IAAY,EAAU,EAAE,CACxD,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAErE,wBAAwB;AAExB,SAAS,iBAAiB,CAAC,IAAuB,EAAE,MAAc,EAAE,OAAe;IACjF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,GAAG,GAA2B;QAClC,GAAG,CAAE,QAAQ,CAAC,GAA0C,IAAI,EAAE,CAAC;QAC/D,oBAAoB,EAAE,MAAM;KAC7B,CAAC;IACF,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC;;QACjE,OAAO,GAAG,CAAC,kBAAkB,CAAC,CAAC,8DAA8D;IAClG,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/F,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,kBAAkB;AAElB;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,MAA8B;IAChF,MAAM,QAAQ,GAAG,QAAQ,CAAC;IAC1B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;IAC/D,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEjC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAClD,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC/D,MAAM,GAAG,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3C,SAAS,CAAC,IAAI,CAAC,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClD,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,0EAA0E;IAC1E,oDAAoD;IACpD,IAAI,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC;IAChC,OAAO,QAAQ,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,GAAG,CAAC,CAAE,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,QAAQ,EAAE,CAAC;IAC1E,SAAS,CAAC,MAAM,CACd,QAAQ,EACR,CAAC,EACD,GAAG,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAC3E,CAAC;IAEF,MAAM,GAAG,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnE,OAAO,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAuB,EAAE,MAAc,EAAE,OAAe;IAChF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACzC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,GAAG,EAAE,CAAC,CAAC,+BAA+B;IAC3C,CAAC;IACD,MAAM,WAAW,GAAG;QAClB,UAAU,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE;QAC9C,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,6BAA6B;KAC9B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,GAAG,GAAG,gBAAgB,CACpB,iBAAiB,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC,EAChF,mBAAmB,iBAAiB,EAAE,EACtC,WAAW,CACZ,CAAC;IACF,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChC,eAAe,CACb,QAAQ,EACR,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACzF,CAAC;IACF,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,qBAAqB;AAErB,0FAA0F;AAC1F,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,GAAW,EAAE,KAAa;IACvE,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC5B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC;QAC5B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;IACnF,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,MAAM,WAAW,GAA6C;IAC5D,wEAAwE;IACxE,oBAAoB,EAAE,oBAAoB;IAC1C,MAAM,EAAE,oBAAoB;CAC7B,CAAC;AAEF,kFAAkF;AAClF,MAAM,UAAU,GAAG,WAAW,CAAC;AAC/B,MAAM,oBAAoB,GAAG,qBAAqB,CAAC;AAEnD,MAAM,cAAc,GAClB,oFAAoF,CAAC;AACvF,MAAM,YAAY,GAAG,+BAA+B,CAAC;AAErD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,KAAa,EAAE,GAAW;IAC3E,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACpC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACjE,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;QACzF,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AACzD,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,cAAc,CAAC,IAAuB,EAAE,MAAc,EAAE,OAAe;IAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IAEhD,4BAA4B;IAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAChD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,GAAG,EAAE,CAAC,CAAC,gCAAgC;IAC5C,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;IACjE,KAAK,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC,EAAE,CAAC;QACpD,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,oDAAoD,EAAE,yCAAyC;gBAC7F,4CAA4C,CAC/C,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,gDAAgD;IAC3E,MAAM,MAAM,GAAG;QACb,cAAc;QACd,GAAG,UAAU,GAAG;QAChB,cAAc;QACd,oBAAoB;QACpB,sBAAsB,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE;QAC9C,cAAc,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACrC,kBAAkB,EAAE,CAAC,IAAI,CAAC,OAAQ,CAAC,EAAE;QACrC,oBAAoB,eAAe,EAAE;QACrC,eAAe;QACf,iBAAiB,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;QACjC,GAAG,oBAAoB,GAAG;QAC1B,2BAA2B;QAC3B,YAAY,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;QAC5B,YAAY;KACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,IAAI,CAAC;IAChG,eAAe,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IAE3C,sEAAsE;IACtE,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,2EAA2E;IAC3E,4CAA4C;IAC5C,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,MAAM,CAAC,CAAC,yCAAyC;IAC9D,CAAC;IACD,MAAM,SAAS,GAAG,gBAAgB,CAChC,QAAQ,EACR,WAAW,CAAC,eAAe,CAAC,EAC5B,SAAS,CAAC,eAAe,CAAC,CAC3B,CAAC;IACF,IAAI,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,6FAA6F;YAC3F,mCAAmC,CACtC,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG;QAClB,GAAG,WAAW,CAAC,eAAe,CAAC,qDAAqD;QACpF,WAAW;QACX,WAAW;QACX,6BAA6B;QAC7B,cAAc,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;QAC9B,SAAS,CAAC,eAAe,CAAC;KAC3B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,SAAS,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,IAAI,CAAC;IACjH,eAAe,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IAExC,uDAAuD;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,EAAE,CAAC;IACd,CAAC;IACD,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;IACxE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,kBAAkB,CAChC,MAA4C,EAC5C,IAAuB,EACvB,MAAc,EACd,OAAe;IAEf,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,aAAa;YAChB,OAAO,EAAE,KAAK,EAAE,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QAC7D,KAAK,OAAO;YACV,OAAO,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QAC5D,KAAK,UAAU;YACb,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC/B,uEAAuE;gBACvE,qEAAqE;gBACrE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAC5D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,IAAuC,EACvC,GAAY,EACZ,UAAkB,OAAO,EAAE;IAE3B,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC1F,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;IAClC,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,OAAgB,EAAQ,EAAE;QACzD,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,gCAAgC,MAAM,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAC3D,QAAQ,CAAC,OAAO,EAAE,WAAW,MAAM,SAAS,CAAC,CAAC;QAC9C,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClF,MAAM,WAAW,GAAG,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,CAAC;YACzC,MAAM;YACN,MAAM,EAAE,cAAc;YACtB,KAAK;YACL,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE;YACxB,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;SAClD,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/daemon/runtime.d.ts

@@ -0,0 +1,49 @@
+import type { Socket } from 'socket.io-client';
+import { type JobView } from '@harness-nexus/shared';
+/**
+ * Harness-runtime job executor (Phase 9 W2). docs/design/phase-9-harness-runtime.md §4.2.
+ *
+ * `install` / `upgrade` / `pin` map to the per-target command table — npm is
+ * the universal channel (every daemon host runs Node ≥20); the ONE native
+ * path is a claude-code upgrade on an already-native install (`claude
+ * update`, which knows how to self-replace). Managed claude-code machines get
+ * `DISABLE_AUTOUPDATER` merged into settings.json so our jobs are the only
+ * version movers. A successful job re-probes the runtime and auto-reports the
+ * target's inventory (one scan feeds the Agent card + detected-instance sync).
+ *
+ * Tests drive this with a fake `npm` shim on PATH (design §10) — no network.
+ */
+/** npm package per runtime target (single source for install/pin/upgrade). */
+export declare const HARNESS_PACKAGES: Record<string, string>;
+/**
+ * The resolved installer invocation for a harness payload. `apply-config` is
+ * not an installer — the daemon routes it to the config executor before this
+ * table; reaching it here (misrouted dispatch) refuses honestly.
+ */
+export declare function harnessCommand(payload: {
+    action: 'install' | 'upgrade' | 'pin' | 'apply-config';
+    target: string;
+    version?: string | undefined;
+}, currentInstallMethod: 'npm' | 'native' | 'brew' | 'unknown' | undefined): {
+    command: string;
+    args: string[];
+} | {
+    error: string;
+};
+/**
+ * Merge `env.DISABLE_AUTOUPDATER = '1'` into ~/.claude/settings.json —
+ * merge-preserving (unknown/user keys survive). Never throws into the job
+ * path: an unreadable settings file is reported, not fatal.
+ */
+export declare function disableClaudeAutoUpdater(homeDir: string): string | null;
+/** dsh ≥0.1.2's plugin tree needs Node APIs absent from 20.x (zlib zstd, Promise.withResolvers). */
+export declare function dshNodeWarning(): string | null;
+export interface HarnessJobOptions {
+    /** Per-command timeout (default 10 min — npm on a slow link is slow). */
+    timeoutMs?: number;
+    /** Spawn env override (tests inject a fake npm via PATH). Default: process.env. */
+    env?: NodeJS.ProcessEnv;
+    homeDir?: string;
+}
+export declare function runHarnessJob(socket: Socket, job: JobView, opts?: HarnessJobOptions): Promise<void>;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/daemon/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/daemon/runtime.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAGL,KAAK,OAAO,EAEb,MAAM,uBAAuB,CAAC;AAK/B;;;;;;;;;;;;GAYG;AAEH,8EAA8E;AAC9E,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAInD,CAAC;AAcF;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE;IACP,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,KAAK,GAAG,cAAc,CAAC;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B,EACD,oBAAoB,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GACtE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAyBzD;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAsBvE;AAED,oGAAoG;AACpG,wBAAgB,cAAc,IAAI,MAAM,GAAG,IAAI,CAO9C;AAED,MAAM,WAAW,iBAAiB;IAChC,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mFAAmF;IACnF,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAID,wBAAsB,aAAa,CACjC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,OAAO,EACZ,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAsHf"}

package/dist/daemon/runtime.js

@@ -0,0 +1,218 @@
+import { spawn } from 'node:child_process';
+import { chmodSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { harnessJobPayloadSchema, harnessResultDataSchema, } from '@harness-nexus/shared';
+import { probeRuntime } from '../inventory/runtime.js';
+import { scanTarget, scannerFor } from '../inventory/scan.js';
+import { emptySnapshot } from './client.js';
+/**
+ * Harness-runtime job executor (Phase 9 W2). docs/design/phase-9-harness-runtime.md §4.2.
+ *
+ * `install` / `upgrade` / `pin` map to the per-target command table — npm is
+ * the universal channel (every daemon host runs Node ≥20); the ONE native
+ * path is a claude-code upgrade on an already-native install (`claude
+ * update`, which knows how to self-replace). Managed claude-code machines get
+ * `DISABLE_AUTOUPDATER` merged into settings.json so our jobs are the only
+ * version movers. A successful job re-probes the runtime and auto-reports the
+ * target's inventory (one scan feeds the Agent card + detected-instance sync).
+ *
+ * Tests drive this with a fake `npm` shim on PATH (design §10) — no network.
+ */
+/** npm package per runtime target (single source for install/pin/upgrade). */
+export const HARNESS_PACKAGES = {
+    'claude-code': '@anthropic-ai/claude-code',
+    codex: '@openai/codex',
+    deepseek: '@deepseek-ai/dsh',
+};
+/**
+ * The dist-tag a version-less install/upgrade tracks. claude-code follows
+ * `stable` (a ~week-old channel with regressions skipped — the managed-install
+ * default per the Phase 9 research; `latest`/`next` exist but move faster than
+ * a managed fleet should).
+ */
+const CHANNEL_TAG = {
+    'claude-code': 'stable',
+    codex: 'latest',
+    deepseek: 'latest',
+};
+/**
+ * The resolved installer invocation for a harness payload. `apply-config` is
+ * not an installer — the daemon routes it to the config executor before this
+ * table; reaching it here (misrouted dispatch) refuses honestly.
+ */
+export function harnessCommand(payload, currentInstallMethod) {
+    const pkg = HARNESS_PACKAGES[payload.target];
+    if (!pkg)
+        return { error: `no harness package for target '${payload.target}'` };
+    if (payload.action === 'apply-config') {
+        return { error: 'apply-config is executed by the config writer, not the installer table' };
+    }
+    // The one non-npm path: upgrading a NATIVE claude-code install — the native
+    // launcher self-updates; npm -g over it would shadow, not upgrade.
+    if (payload.target === 'claude-code' &&
+        payload.action === 'upgrade' &&
+        currentInstallMethod === 'native' &&
+        payload.version === undefined) {
+        return { command: 'claude', args: ['update'] };
+    }
+    if (payload.target === 'claude-code' && currentInstallMethod === 'native' && payload.version) {
+        return {
+            error: 'claude-code is natively installed and cannot be pinned remotely — run the native installer on the machine, or reinstall it via npm first',
+        };
+    }
+    const tag = CHANNEL_TAG[payload.target] ?? 'latest';
+    const spec = payload.version !== undefined ? `${pkg}@${payload.version}` : `${pkg}@${tag}`;
+    return { command: 'npm', args: ['install', '-g', spec] };
+}
+/**
+ * Merge `env.DISABLE_AUTOUPDATER = '1'` into ~/.claude/settings.json —
+ * merge-preserving (unknown/user keys survive). Never throws into the job
+ * path: an unreadable settings file is reported, not fatal.
+ */
+export function disableClaudeAutoUpdater(homeDir) {
+    const dir = join(homeDir, '.claude');
+    const file = join(dir, 'settings.json');
+    let settings = {};
+    try {
+        settings = JSON.parse(readFileSync(file, 'utf8'));
+        if (typeof settings !== 'object' || settings === null || Array.isArray(settings)) {
+            return `settings.json is not a JSON object — left untouched`;
+        }
+    }
+    catch (e) {
+        if (e.code !== 'ENOENT') {
+            return `settings.json unreadable (${e instanceof Error ? e.message : String(e)}) — left untouched`;
+        }
+    }
+    const env = {
+        ...(settings.env ?? {}),
+        DISABLE_AUTOUPDATER: '1',
+    };
+    mkdirSync(dir, { recursive: true });
+    writeFileSync(file, `${JSON.stringify({ ...settings, env }, null, 2)}\n`, 'utf8');
+    chmodSync(file, 0o600);
+    return null; // ok
+}
+/** dsh ≥0.1.2's plugin tree needs Node APIs absent from 20.x (zlib zstd, Promise.withResolvers). */
+export function dshNodeWarning() {
+    const [major, minor] = process.versions.node.split('.').map(Number);
+    if (major === undefined)
+        return null;
+    const ok = major > 22 || (major === 22 && (minor ?? 0) >= 15);
+    return ok
+        ? null
+        : `deepseek's ACP profile needs Node >=22.15 (this daemon runs ${process.versions.node}) — chat sessions will fail until Node is upgraded`;
+}
+const TAIL_BYTES = 4096;
+export async function runHarnessJob(socket, job, opts = {}) {
+    const parsed = harnessJobPayloadSchema.safeParse(job.payload);
+    if (!parsed.success) {
+        socket.emit('job:result', { jobId: job.id, ok: false, error: 'harness payload invalid' });
+        return;
+    }
+    const payload = parsed.data;
+    // The daemon's real home (tests inject a fixture). Defaulting here (not
+    // gating on `homeDir !== undefined`) is a W3 fix: W2 daemons skipped the
+    // autoupdater write in production because the executor was called without
+    // opts — `os.homedir()` honors the daemon's HOME, which is what the smoke
+    // rig always relied on anyway.
+    const homeDir = opts.homeDir ?? homedir();
+    const probeOpts = {};
+    if (opts.env?.PATH !== undefined)
+        probeOpts.pathEnv = opts.env.PATH;
+    if (homeDir !== undefined)
+        probeOpts.homeDir = homeDir;
+    const progress = (phase, message) => {
+        socket.emit('job:progress', { jobId: job.id, phase, ...(message ? { message } : {}) });
+    };
+    const result = (ok, extra) => {
+        socket.emit('job:result', { jobId: job.id, ok, ...extra });
+    };
+    progress('resolve', `${payload.action} ${payload.target}${payload.version ? `@${payload.version}` : ''}`);
+    // Current install method decides the claude-code upgrade path.
+    const current = payload.action === 'upgrade' ? await probeRuntime(payload.target, probeOpts) : null;
+    const cmd = harnessCommand(payload, current?.installed ? current.installMethod : undefined);
+    if ('error' in cmd) {
+        result(false, { error: cmd.error });
+        return;
+    }
+    progress('install', `${cmd.command} ${cmd.args.join(' ')}`.slice(0, 512));
+    const spawnOutcome = await new Promise((resolve) => {
+        let tail = '';
+        let lastEmit = 0;
+        const append = (chunk) => {
+            tail = (tail + chunk.toString()).slice(-TAIL_BYTES);
+            const now = Date.now();
+            if (now - lastEmit >= 1200) {
+                lastEmit = now;
+                const line = tail
+                    .split('\n')
+                    .filter((l) => l.trim().length > 0)
+                    .pop() ?? '';
+                if (line.length > 0)
+                    progress('install', line.slice(0, 512));
+            }
+        };
+        let child;
+        try {
+            // Inherit the daemon's environment: proxied machines must pass
+            // HTTP(S)_PROXY / npm_config_registry through to the installer.
+            child = spawn(cmd.command, cmd.args, { env: opts.env ?? process.env });
+        }
+        catch (e) {
+            resolve({ ok: false, tail: e instanceof Error ? e.message : String(e) });
+            return;
+        }
+        const timer = setTimeout(() => {
+            child.kill('SIGTERM');
+            setTimeout(() => child.kill('SIGKILL'), 2000).unref?.();
+            resolve({ ok: false, tail: `${tail}\n timed out after ${opts.timeoutMs ?? 600000}ms` });
+        }, opts.timeoutMs ?? 600000);
+        child.stdout?.on('data', append);
+        child.stderr?.on('data', append);
+        child.on('error', (e) => {
+            clearTimeout(timer);
+            resolve({ ok: false, tail: `${tail}\n${e.message}` });
+        });
+        child.on('close', (code) => {
+            clearTimeout(timer);
+            resolve({ ok: code === 0, tail });
+        });
+    });
+    if (!spawnOutcome.ok) {
+        const trimmed = spawnOutcome.tail.trim().split('\n').slice(-8).join('\n').slice(0, 900);
+        result(false, { error: `${cmd.command} ${cmd.args.join(' ')} failed:\n${trimmed}` });
+        return;
+    }
+    // Managed claude-code: our jobs become the only version mover.
+    let warning = null;
+    if (payload.target === 'claude-code') {
+        warning = disableClaudeAutoUpdater(homeDir);
+    }
+    if (warning === null && payload.target === 'deepseek') {
+        warning = dshNodeWarning();
+    }
+    // Re-probe so the job RESULT reports what actually landed, then auto-report
+    // the target's inventory (runtime arm feeds the Agent card + detected sync).
+    progress('verify', 'probing runtime');
+    const runtime = await probeRuntime(payload.target, probeOpts);
+    const snapshot = scannerFor(payload.target)
+        ? scanTarget(payload.target, homeDir)
+        : emptySnapshot(payload.target);
+    socket.emit('inventory:report', { runtimes: [runtime], snapshot });
+    const data = harnessResultDataSchema.parse({
+        target: payload.target,
+        action: payload.action,
+        ...(runtime.installed
+            ? {
+                version: runtime.version,
+                binPath: runtime.binPath,
+                installMethod: runtime.installMethod,
+            }
+            : {}),
+        ...(warning !== null ? { warning } : {}),
+    });
+    result(true, { data });
+}
+//# sourceMappingURL=runtime.js.map

package/dist/daemon/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/daemon/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,uBAAuB,EACvB,uBAAuB,GAGxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAuB,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C;;;;;;;;;;;;GAYG;AAEH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAA2B;IACtD,aAAa,EAAE,2BAA2B;IAC1C,KAAK,EAAE,eAAe;IACtB,QAAQ,EAAE,kBAAkB;CAC7B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,GAA2B;IAC1C,aAAa,EAAE,QAAQ;IACvB,KAAK,EAAE,QAAQ;IACf,QAAQ,EAAE,QAAQ;CACnB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,OAIC,EACD,oBAAuE;IAEvE,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,kCAAkC,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC;IAChF,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,wEAAwE,EAAE,CAAC;IAC7F,CAAC;IACD,4EAA4E;IAC5E,mEAAmE;IACnE,IACE,OAAO,CAAC,MAAM,KAAK,aAAa;QAChC,OAAO,CAAC,MAAM,KAAK,SAAS;QAC5B,oBAAoB,KAAK,QAAQ;QACjC,OAAO,CAAC,OAAO,KAAK,SAAS,EAC7B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,IAAI,oBAAoB,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC7F,OAAO;YACL,KAAK,EACH,0IAA0I;SAC7I,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;IAC3F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACxC,IAAI,QAAQ,GAA4B,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA4B,CAAC;QAC7E,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjF,OAAO,qDAAqD,CAAC;QAC/D,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnD,OAAO,6BAA6B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC;QACrG,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG;QACV,GAAG,CAAE,QAAQ,CAAC,GAA0C,IAAI,EAAE,CAAC;QAC/D,mBAAmB,EAAE,GAAG;KACzB,CAAC;IACF,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClF,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC,CAAC,KAAK;AACpB,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,cAAc;IAC5B,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,EAAE,GAAG,KAAK,GAAG,EAAE,IAAI,CAAC,KAAK,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9D,OAAO,EAAE;QACP,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,+DAA+D,OAAO,CAAC,QAAQ,CAAC,IAAI,oDAAoD,CAAC;AAC/I,CAAC;AAUD,MAAM,UAAU,GAAG,IAAI,CAAC;AAExB,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,GAAY,EACZ,OAA0B,EAAE;IAE5B,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC1F,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;IAC5B,wEAAwE;IACxE,yEAAyE;IACzE,0EAA0E;IAC1E,0EAA0E;IAC1E,+BAA+B;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAmB,EAAE,CAAC;IACrC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,SAAS;QAAE,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;IACpE,IAAI,OAAO,KAAK,SAAS;QAAE,SAAS,CAAC,OAAO,GAAG,OAAO,CAAC;IACvD,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,OAAgB,EAAQ,EAAE;QACzD,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,EAAW,EAAE,KAAyC,EAAQ,EAAE;QAC9E,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC;IAEF,QAAQ,CACN,SAAS,EACT,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACrF,CAAC;IAEF,+DAA+D;IAC/D,MAAM,OAAO,GACX,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5F,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;QACnB,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACpC,OAAO;IACT,CAAC;IAED,QAAQ,CAAC,SAAS,EAAE,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAE1E,MAAM,YAAY,GAAG,MAAM,IAAI,OAAO,CAAgC,CAAC,OAAO,EAAE,EAAE;QAChF,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,MAAM,MAAM,GAAG,CAAC,KAAa,EAAQ,EAAE;YACrC,IAAI,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,GAAG,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC;gBAC3B,QAAQ,GAAG,GAAG,CAAC;gBACf,MAAM,IAAI,GACR,IAAI;qBACD,KAAK,CAAC,IAAI,CAAC;qBACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;qBAClC,GAAG,EAAE,IAAI,EAAE,CAAC;gBACjB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;oBAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC,CAAC;QACF,IAAI,KAA+B,CAAC;QACpC,IAAI,CAAC;YACH,+DAA+D;YAC/D,gEAAgE;YAChE,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACxD,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,sBAAsB,IAAI,CAAC,SAAS,IAAI,MAAM,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC,EAAE,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;QAC7B,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACtB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACxF,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,OAAO,EAAE,EAAE,CAAC,CAAC;QACrF,OAAO;IACT,CAAC;IAED,+DAA+D;IAC/D,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACrC,OAAO,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACtD,OAAO,GAAG,cAAc,EAAE,CAAC;IAC7B,CAAC;IAED,4EAA4E;IAC5E,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACtC,MAAM,OAAO,GAAgB,MAAM,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC;QACzC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;QACrC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAEnE,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,CAAC;QACzC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,CAAC,OAAO,CAAC,SAAS;YACnB,CAAC,CAAC;gBACE,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzC,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AACzB,CAAC"}