@lannguyensi/harness 0.43.0 → 0.45.0

package/dist/cli/apply/generate-opencode-config.js

@@ -0,0 +1,210 @@
+// Batch 18 / task f34eb233 -- opencode runtime adapter config generator.
+//
+// ADR-style adapter-mapping notes (verified 2026-08-18 against the
+// published opencode JSON Schema at https://opencode.ai/config.json, the
+// docs at https://opencode.ai/docs/config/ and https://opencode.ai/docs/plugins/,
+// and the real ~/.config/opencode/opencode.json + opencode.jsonc this
+// exploration ran against as a read-only reference; not modified by this
+// generator or by `harness apply`):
+//
+// Config location: opencode reads config from, in merge/precedence order
+// (later sources win, but every source is MERGED, not replaced):
+//   1. remote config from a `.well-known/opencode` endpoint
+//   2. global config: `~/.config/opencode/opencode.json`
+//   3. custom config: `$OPENCODE_CONFIG` (a path)
+//   4. project config: `opencode.json` in the project root
+//   5. `.opencode/` directories (agents, commands, plugins)
+//   6. inline config: `$OPENCODE_CONFIG_CONTENT`
+//   7. OS-managed config (macOS `/Library/Application Support/opencode/`,
+//      Linux `/etc/opencode/`, Windows `%ProgramData%\opencode`)
+// Every one of those slots is either operator-owned or environment/OS
+// selected; opencode does not auto-discover an extra "drop a file here"
+// directory the way a plugin/pack system might. That is exactly why this
+// generator does not attempt to install itself into any of them -- see
+// "What we deliberately do NOT do" below.
+//
+// mcp -> PROJECTED. opencode's config.json has a native `mcp` block
+// ($defs.McpLocalConfig in the published schema: `{ type: "local",
+// command: string[], cwd?, environment?: Record<string,string>,
+// enabled?, timeout? }`). We reuse generate-settings.ts's
+// `buildDesiredMcpServers` (Claude Code's `{command, args, env}` shape,
+// already covering the grounding-mcp EVIDENCE_LEDGER_DB and
+// SOLUTION_VERDICT_SIGNING_KEY projections and the literal-tilde
+// env-value warning) and reshape the
+// result into opencode's `{type: "local", command: [...], environment}`
+// instead of hand-rolling a third copy of that logic that could drift
+// from the other two runtimes.
+//
+// enabled:false -> projected as a bare `{"enabled": false}` marker, NOT
+// omitted (LOW-F4, batch18 fix-round, task f34eb233 review; the
+// reviewer verified live against opencode 1.18.18 that a bare
+// `{"enabled": false}` entry -- no `type`/`command` -- is accepted).
+// `buildMcpServers` drops disabled entries entirely, which is fine for
+// Claude Code's settings.json (the only mcpServers source Claude Code
+// reads, so a dropped entry is equivalent to a disabled one) but wrong
+// for opencode: per the "Config location" list above, opencode MERGES
+// multiple config sources, so a server name this generator's output
+// simply omits does NOT override an `enabled: true` (or default-
+// enabled) declaration for the SAME name in another merged source
+// (e.g. the operator's own ~/.config/opencode/opencode.json) -- the
+// operator's intent to disable that server would silently not take
+// effect. Emitting the explicit marker instead makes the disablement
+// actually win once merged.
+//
+// hooks -> NOT PROJECTED (documented no-op, not a bug). opencode.json's
+// schema has NO declarative hook/event field of any kind (confirmed:
+// absent from https://opencode.ai/config.json). opencode's only
+// extensibility surface for tool-call interception is the JS/TS
+// `plugin` array (`@opencode-ai/plugin`; its event set includes
+// `tool.execute.before` / `tool.execute.after`, `session.*`,
+// `permission.asked`, ...) -- a code-authoring surface, not a
+// config-declared shell-command list like Claude Code's settings.json
+// `hooks` or Codex's `[[hooks.*]]` TOML. Building a harness -> opencode
+// plugin bridge that would let manifest hooks actually intercept tool
+// calls is explicitly out of this task's scope (opencode policy
+// enforcement / hook interception). So `manifest.hooks[]` and the
+// `memory.router` UserPromptSubmit-equivalent projection
+// (`generate-settings.ts#buildMemoryRouterHook`) are both left
+// unprojected here; a warning says so instead of silently dropping them.
+//
+// permission -> NOT PROJECTED (v1; documented follow-up). opencode does
+// have a native `permission` block (per-tool `ask`/`allow`/`deny`, with
+// a pattern-keyed object as an escape hatch) that is a genuine
+// PreToolUse-blocking equivalent -- but its shape (tool key -> pattern
+// -> action) is structurally inverted from the
+// `permissions.{allow,ask,deny}: string[]` pattern-DSL that
+// `policy_packs`' `packPermissions` already produce for Claude Code, and
+// mapping one into the other is real, untested-by-this-task translation
+// work. `generate-codex-config.ts`'s header deferred the analogous
+// Codex sandbox-profile mapping for the same "keep v1 small" reason;
+// this adapter follows that precedent instead of inventing a rushed
+// pattern translator. `apply.ts` surfaces a warning (mirroring the
+// Codex branch) when a manifest actually contributes permissions here,
+// so the gap stays visible instead of silent.
+//
+// Stable-output rules (load-bearing for byte-equivalent regeneration on
+// a no-op apply):
+//   - `mcp` server keys are in the order `buildMcpServers` already
+//     guarantees: ascending lexical by name.
+//   - No timestamps, hostnames, or other run-specific data.
+//
+// What we deliberately do NOT do:
+//   - Merge into, or otherwise write, any operator-owned opencode config
+//     file (`~/.config/opencode/opencode.json`, a project `opencode.json`,
+//     or anything `$OPENCODE_CONFIG` points at). Unlike Codex's
+//     `--install` (a marked-block splice into `~/.codex/config.toml`),
+//     opencode already merges multiple config sources by precedence (see
+//     the location list above), and its config format is JSONC --
+//     comments and trailing commas are both allowed (the published
+//     schema sets `allowComments` / `allowTrailingCommas`), confirmed
+//     against the real machine-local `opencode.jsonc`. So wiring this
+//     artefact in is left as an operator action: point `$OPENCODE_CONFIG`
+//     at `harness.generated/opencode/opencode.json` directly, or copy the
+//     `mcp` block into an existing config. harness never touches
+//     `~/.config/opencode/` or a project `opencode.json` itself.
+//   - Map policy-pack hook commands into opencode plugin code (see
+//     "hooks" above) or opencode's `permission` block (see "permission"
+//     above).
+import { buildDesiredMcpServers, } from "./generate-settings.js";
+/**
+ * First line of the generated opencode config. Exported so callers that
+ * need to detect a harness-generated artefact (doctor's banner check)
+ * pin against the same literal as the emitter instead of duplicating the
+ * string.
+ */
+export const OPENCODE_GENERATED_HEADER_LINE = "// Generated by harness apply --runtime opencode.";
+const HEADER = [
+    OPENCODE_GENERATED_HEADER_LINE,
+    "// DO NOT EDIT: re-run `harness apply --runtime opencode` to regenerate.",
+    "//",
+    "// harness does NOT install this file automatically -- it never writes",
+    "// into ~/.config/opencode/ or a project opencode.json. Wire it in",
+    "// yourself, either:",
+    "//   - point $OPENCODE_CONFIG at this file's path, or",
+    "//   - copy the \"mcp\" block below into your own opencode.json /",
+    "//     opencode.jsonc (opencode merges config sources by precedence;",
+    "//     see https://opencode.ai/docs/config/).",
+    "//",
+    "// Adapter mapping (full ADR in this generator's module header,",
+    "// src/cli/apply/generate-opencode-config.ts):",
+    "//   mcp        -> projected below (opencode's native `mcp` block).",
+    "//                 A manifest entry with `enabled: false` is emitted",
+    "//                 as a bare `{\"enabled\": false}` marker rather than",
+    "//                 omitted, so it overrides an active declaration for",
+    "//                 the same server name in another merged config",
+    "//                 source instead of silently not disabling it.",
+    "//   hooks      -> NOT projected; opencode has no declarative hook",
+    "//                 field, only a JS/TS plugin API (out of scope here)",
+    "//   permission -> NOT projected in v1 (documented follow-up)",
+    "",
+].join("\n");
+function toOpencodeMcpServer(server) {
+    const out = {
+        type: "local",
+        command: server.args ? [server.command, ...server.args] : [server.command],
+    };
+    if (server.env && Object.keys(server.env).length > 0) {
+        out.environment = { ...server.env };
+    }
+    return out;
+}
+export function generateOpencodeConfig(manifest, extras = {}) {
+    // Claude Code's {command, args, env} shape already carries the
+    // grounding-mcp EVIDENCE_LEDGER_DB and SOLUTION_VERDICT_SIGNING_KEY
+    // projections plus the literal-tilde warning, via `buildDesiredMcpServers`
+    // (review round H1, Finding 2 -- the single choke point every producer of
+    // this shape now shares, instead of hand-rolling a third copy of the
+    // buildMcpServers/projectGroundingEnv/projectSigningKeyEnv sequence).
+    // `buildMcpServers` (inside the helper) returns keys pre-sorted ascending
+    // by name (see its own header) AND drops `enabled: false` entries
+    // entirely. That drop is correct for the Claude-Code-shaped intermediate
+    // this reuses, but NOT for the final opencode `mcp` block: those disabled
+    // entries are re-added below as explicit `{"enabled": false}` markers
+    // instead of staying dropped (LOW-F4, batch18 fix-round, task f34eb233
+    // review — see this module's "enabled:false" header note for why).
+    const { mcp: claudeShapeMcp, warnings } = buildDesiredMcpServers(manifest, {
+        homeDir: extras.homeDir,
+        generatedDir: extras.generatedDir,
+    });
+    // Built by iterating manifest.tools.mcp SORTED ascending by name (not
+    // by re-using claudeShapeMcp's own key order, which only covers the
+    // enabled subset) so the combined enabled+disabled output keeps the
+    // same stable-output guarantee the enabled-only projection had before.
+    const mcp = {};
+    const sortedEntries = [...manifest.tools.mcp].sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0);
+    for (const e of sortedEntries) {
+        if (e.enabled === false) {
+            mcp[e.name] = { enabled: false };
+            continue;
+        }
+        // Absent when buildMcpServers skipped this entry (empty command
+        // after token-splitting; already warned above by buildMcpServers
+        // itself).
+        const server = claudeShapeMcp[e.name];
+        if (server)
+            mcp[e.name] = toOpencodeMcpServer(server);
+    }
+    if (manifest.tools.mcp.length > 0 && Object.keys(mcp).length === 0) {
+        // Reachable only when every entry is enabled but produced no
+        // projectable server (empty command) -- a real `enabled: false`
+        // entry always lands in `mcp` as a marker now, so it can no longer
+        // be the cause of an empty result here (LOW-F4).
+        warnings.push("tools.mcp[] has entries but none produced a projectable opencode `mcp` entry (see the per-entry warnings above)");
+    }
+    if (manifest.hooks.length > 0) {
+        warnings.push(`manifest contributes ${manifest.hooks.length} hook(s); opencode has no declarative hook wiring (see this generator's header) and none were projected`);
+    }
+    const router = manifest.memory.router;
+    if (router && router.enabled !== false) {
+        warnings.push("memory.router is configured but not projected; opencode has no declarative UserPromptSubmit-equivalent (see this generator's header)");
+    }
+    const config = {
+        "$schema": "https://opencode.ai/config.json",
+    };
+    if (Object.keys(mcp).length > 0)
+        config["mcp"] = mcp;
+    const body = `${JSON.stringify(config, null, 2)}\n`;
+    const content = `${HEADER}${body}`;
+    return { content, warnings, mcp };
+}
+//# sourceMappingURL=generate-opencode-config.js.map

package/dist/cli/apply/generate-opencode-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-opencode-config.js","sourceRoot":"","sources":["../../../src/cli/apply/generate-opencode-config.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,mEAAmE;AACnE,yEAAyE;AACzE,kFAAkF;AAClF,sEAAsE;AACtE,yEAAyE;AACzE,oCAAoC;AACpC,EAAE;AACF,yEAAyE;AACzE,iEAAiE;AACjE,4DAA4D;AAC5D,yDAAyD;AACzD,kDAAkD;AAClD,2DAA2D;AAC3D,4DAA4D;AAC5D,iDAAiD;AACjD,0EAA0E;AAC1E,iEAAiE;AACjE,sEAAsE;AACtE,wEAAwE;AACxE,yEAAyE;AACzE,uEAAuE;AACvE,0CAA0C;AAC1C,EAAE;AACF,oEAAoE;AACpE,mEAAmE;AACnE,gEAAgE;AAChE,0DAA0D;AAC1D,wEAAwE;AACxE,4DAA4D;AAC5D,iEAAiE;AACjE,qCAAqC;AACrC,wEAAwE;AACxE,sEAAsE;AACtE,+BAA+B;AAC/B,EAAE;AACF,wEAAwE;AACxE,gEAAgE;AAChE,8DAA8D;AAC9D,qEAAqE;AACrE,uEAAuE;AACvE,sEAAsE;AACtE,uEAAuE;AACvE,sEAAsE;AACtE,oEAAoE;AACpE,iEAAiE;AACjE,kEAAkE;AAClE,oEAAoE;AACpE,mEAAmE;AACnE,qEAAqE;AACrE,4BAA4B;AAC5B,EAAE;AACF,wEAAwE;AACxE,qEAAqE;AACrE,gEAAgE;AAChE,gEAAgE;AAChE,gEAAgE;AAChE,6DAA6D;AAC7D,8DAA8D;AAC9D,sEAAsE;AACtE,wEAAwE;AACxE,sEAAsE;AACtE,gEAAgE;AAChE,kEAAkE;AAClE,yDAAyD;AACzD,+DAA+D;AAC/D,yEAAyE;AACzE,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,+DAA+D;AAC/D,uEAAuE;AACvE,+CAA+C;AAC/C,4DAA4D;AAC5D,yEAAyE;AACzE,wEAAwE;AACxE,mEAAmE;AACnE,qEAAqE;AACrE,oEAAoE;AACpE,mEAAmE;AACnE,uEAAuE;AACvE,8CAA8C;AAC9C,EAAE;AACF,wEAAwE;AACxE,kBAAkB;AAClB,mEAAmE;AACnE,6CAA6C;AAC7C,4DAA4D;AAC5D,EAAE;AACF,kCAAkC;AAClC,yEAAyE;AACzE,2EAA2E;AAC3E,gEAAgE;AAChE,uEAAuE;AACvE,yEAAyE;AACzE,kEAAkE;AAClE,mEAAmE;AACnE,sEAAsE;AACtE,sEAAsE;AACtE,0EAA0E;AAC1E,0EAA0E;AAC1E,iEAAiE;AACjE,iEAAiE;AACjE,mEAAmE;AACnE,wEAAwE;AACxE,cAAc;AAGd,OAAO,EACL,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAsChC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GACzC,mDAAmD,CAAC;AAEtD,MAAM,MAAM,GAAG;IACb,8BAA8B;IAC9B,0EAA0E;IAC1E,IAAI;IACJ,wEAAwE;IACxE,oEAAoE;IACpE,sBAAsB;IACtB,uDAAuD;IACvD,mEAAmE;IACnE,sEAAsE;IACtE,+CAA+C;IAC/C,IAAI;IACJ,iEAAiE;IACjE,gDAAgD;IAChD,qEAAqE;IACrE,sEAAsE;IACtE,wEAAwE;IACxE,uEAAuE;IACvE,kEAAkE;IAClE,iEAAiE;IACjE,oEAAoE;IACpE,uEAAuE;IACvE,+DAA+D;IAC/D,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAoBb,SAAS,mBAAmB,CAAC,MAAyB;IACpD,MAAM,GAAG,GAA2B;QAClC,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;KAC3E,CAAC;IACF,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,WAAW,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,QAAkB,EAClB,SAAuC,EAAE;IAEzC,+DAA+D;IAC/D,oEAAoE;IACpE,2EAA2E;IAC3E,0EAA0E;IAC1E,qEAAqE;IACrE,sEAAsE;IACtE,0EAA0E;IAC1E,kEAAkE;IAClE,yEAAyE;IACzE,0EAA0E;IAC1E,sEAAsE;IACtE,uEAAuE;IACvE,mEAAmE;IACnE,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,sBAAsB,CAAC,QAAQ,EAAE;QACzE,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CAAC,CAAC;IAEH,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,uEAAuE;IACvE,MAAM,GAAG,GAAqC,EAAE,CAAC;IACjD,MAAM,aAAa,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC1D,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/C,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACxB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACjC,SAAS;QACX,CAAC;QACD,gEAAgE;QAChE,iEAAiE;QACjE,WAAW;QACX,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM;YAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnE,6DAA6D;QAC7D,gEAAgE;QAChE,mEAAmE;QACnE,iDAAiD;QACjD,QAAQ,CAAC,IAAI,CACX,iHAAiH,CAClH,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,QAAQ,CAAC,IAAI,CACX,wBAAwB,QAAQ,CAAC,KAAK,CAAC,MAAM,yGAAyG,CACvJ,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACtC,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QACvC,QAAQ,CAAC,IAAI,CACX,sIAAsI,CACvI,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAA4B;QACtC,SAAS,EAAE,iCAAiC;KAC7C,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;IAErD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACpD,MAAM,OAAO,GAAG,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;IACnC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AACpC,CAAC"}

package/dist/cli/apply/generate-settings.d.ts

@@ -4,6 +4,8 @@ export declare const DEFAULT_BUDGET_MS = 30000;
 export declare const GROUNDING_MCP_SERVER_NAME = "grounding-mcp";
 /** The env var grounding-mcp's ledger-bridge reads for the evidence-ledger DB path. */
 export declare const EVIDENCE_LEDGER_DB_ENV = "EVIDENCE_LEDGER_DB";
+/** The env var grounding-mcp (>= 0.8.0) reads for the harness's own approval-marker signing-key path. */
+export declare const SOLUTION_VERDICT_SIGNING_KEY_ENV = "SOLUTION_VERDICT_SIGNING_KEY";
 export interface SettingsHookCommand {
     type: "command";
     command: string;
@@ -32,16 +34,22 @@ export interface GenerateSettingsResult {
     warnings: string[];
     /**
      * The manifest's `tools.mcp[]` entries translated into Claude Code's
-     * server-spec shape (command/args/env), INCLUDING the grounding-mcp
-     * `EVIDENCE_LEDGER_DB` projection (`projectGroundingEnv`). Deliberately
-     * NOT part of `root` and never serialized into settings.json (task
+     * server-spec shape (command/args/env) via `buildDesiredMcpServers` —
+     * INCLUDING both the grounding-mcp `EVIDENCE_LEDGER_DB`
+     * (`projectGroundingEnv`) and `SOLUTION_VERDICT_SIGNING_KEY`
+     * (`projectSigningKeyEnv`) projections. Deliberately NOT part of `root`
+     * and never serialized into settings.json (task
      * init-mcp-wiring-claude-code/T-002): Claude Code does not read the
      * settings.json `mcpServers` block at runtime — see
      * `src/io/claude-mcp.ts`'s module header. User-scope MCP registration
      * goes exclusively through the `claude mcp` CLI now
-     * (`ensureMcpServers`); this field is what feeds that path. The init
-     * wizard (`src/cli/init/interactive.ts`) reads it directly instead of
-     * reading it back out of a written settings.json.
+     * (`ensureMcpServers`). `buildDesiredMcpServers` is the single call
+     * every producer of this shape shares (review round H1, Finding 2): the
+     * init wizard (`src/cli/init/interactive.ts`), the doctor registration-
+     * health check (`src/cli/doctor/claude-mcp.ts`), and the opencode config
+     * generator (`generate-opencode-config.ts`) all call it directly rather
+     * than re-deriving this field from a written settings.json, so a NEW
+     * projected env only needs to be added in one place.
      */
     mcpServers: Record<string, SettingsMcpServer>;
 }
@@ -58,36 +66,23 @@ export interface GenerateSettingsExtras {
      * injected by tests for determinism.
      */
     homeDir?: string;
+    /**
+     * The `harness.generated/` directory for the manifest in use (task
+     * 03a917fd/H1). Used only to project `SOLUTION_VERDICT_SIGNING_KEY` (see
+     * `projectSigningKeyEnv`) onto the grounding-mcp entry — the path to the
+     * harness's own `.approval-signing.key` (`signingKeyPathFor`). Unlike
+     * `homeDir` above there is no safe universal default: the generated dir
+     * depends on manifest-path resolution (a `--config` override changes
+     * it), so a caller that omits this gets NO projection rather than a
+     * guessed-wrong path. A relative value, or one carrying a literal `~`,
+     * is normalized to an absolute path at the projection boundary (review
+     * round H1, Finding 1) rather than rejected — see `projectSigningKeyEnv`.
+     */
+    generatedDir?: string;
 }
 export declare function generateSettings(manifest: Manifest): SettingsRoot;
 export declare function generateSettingsWithWarnings(manifest: Manifest, extras?: GenerateSettingsExtras): GenerateSettingsResult;
 export declare function buildMcpServers(entries: McpServer[], warnings: string[]): Record<string, SettingsMcpServer>;
-/**
- * Wire the manifest's `grounding:` section into the grounding-mcp server
- * entry (task 129e1b94, harness-review-2026-07-01/grounding-decorative).
- *
- * `grounding.evidence_ledger.path` becomes the `EVIDENCE_LEDGER_DB` env on
- * the `tools.mcp[grounding-mcp]` entry — the exact variable grounding-mcp's
- * ledger-bridge reads (agent-grounding
- * packages/grounding-mcp/src/ledger-bridge.ts). This makes `grounding:` the
- * section that CONFIGURES the grounding-mcp entry instead of a decorative
- * namesake, resolving the naming collision the 2026-07-01 review flagged.
- *
- * Rules:
- * - Projection only fires when a grounding-mcp entry exists; without one
- *   there is no consumer (doctor surfaces that inertness separately).
- * - An operator-declared `env.EVIDENCE_LEDGER_DB` on the entry wins — an
- *   explicit override is never clobbered (doctor warns when it diverges
- *   from `grounding.evidence_ledger.path`).
- * - The projected value is `~`-expanded to an absolute path, so the
- *   literal-tilde child-process footgun (agent-tasks/42d224a6, the very
- *   warning above in buildMcpServers) cannot re-enter via this path.
- * - `retention_days`, `policies_source`, and `session.*` stay RESERVED:
- *   nothing consumes them yet (evidence-ledger has no retention pruning),
- *   and projecting an env no server reads would be decorative again. See
- *   the status comments in src/schema/grounding.ts.
- */
-export declare function projectGroundingEnv(manifest: Manifest, mcp: Record<string, SettingsMcpServer>, homeDir?: string): void;
 /**
  * The value apply projects for `EVIDENCE_LEDGER_DB`: the manifest's
  * `grounding.evidence_ledger.path`, `~`-expanded to an absolute path.
@@ -95,4 +90,67 @@ export declare function projectGroundingEnv(manifest: Manifest, mcp: Record<stri
  * round-trip stays drift-free by construction.
  */
 export declare function groundingLedgerEnvValue(manifest: Manifest, homeDir?: string): string;
+/**
+ * The single source of the projected `SOLUTION_VERDICT_SIGNING_KEY` VALUE
+ * (mirrors how `EVIDENCE_LEDGER_DB` shares its value): `expandHome` +
+ * `path.resolve` on `generatedDir`, then `signingKeyPathFor`. Both the
+ * apply-side projection above and the adopt-side mirror
+ * (adopt/derive.ts) MUST call this, never `signingKeyPathFor` on a raw
+ * `generatedDir` — otherwise apply and adopt disagree for relative or
+ * literal-tilde `generatedDir` values and adopt reports phantom drift.
+ */
+export declare function signingKeyEnvValue(generatedDir: string, homeDir?: string): string;
+export interface BuildDesiredMcpServersOptions {
+    /** Threaded to `projectGroundingEnv` and `projectSigningKeyEnv`'s tilde-expansion; defaults to `os.homedir()` (see `expandHome`). */
+    homeDir?: string;
+    /** Threaded to `projectSigningKeyEnv`; no safe default (see that function's doc). */
+    generatedDir?: string;
+}
+export interface DesiredMcpServersResult {
+    mcp: Record<string, SettingsMcpServer>;
+    warnings: string[];
+}
+/**
+ * Single choke point for the manifest -> Claude-Code-shaped MCP
+ * server-spec projection (review round H1, Finding 2 — STRUCTURAL fix).
+ * Encapsulates the fixed sequence `buildMcpServers` -> `projectGroundingEnv`
+ * -> `projectSigningKeyEnv` so every producer of this shape — `harness
+ * apply`'s settings.json generation (this module), the init wizard's
+ * `claude mcp` CLI wiring (`src/cli/init/interactive.ts`), the doctor
+ * registration-health check (`src/cli/doctor/claude-mcp.ts`), and the
+ * opencode config generator (`generate-opencode-config.ts`) — calls this
+ * ONE function instead of hand-rolling the same three-call sequence.
+ *
+ * Before this helper existed, that sequence had to be wired into each
+ * call site by hand: three of the four remembered to call
+ * `projectSigningKeyEnv` when it was added (task 03a917fd/H1b), and
+ * doctor's registration check did not, so its "not registered, run this
+ * `claude mcp add-json ...`" hint silently omitted
+ * `SOLUTION_VERDICT_SIGNING_KEY` (review round H1, Finding 2). Routing
+ * every producer through this function means the NEXT projected env only
+ * needs to be added here once, and cannot again reach only some of the
+ * call sites.
+ */
+export declare function buildDesiredMcpServers(manifest: Manifest, opts?: BuildDesiredMcpServersOptions): DesiredMcpServersResult;
 export declare function buildMemoryRouterHook(manifest: Manifest): Hook | null;
+/**
+ * Convert the manifest's `budget_ms` (milliseconds) into the seconds unit
+ * both runtime projections' `timeout` field expects.
+ *
+ * Claude Code's settings.json hook `timeout` is documented in seconds
+ * ("Seconds before canceling", https://code.claude.com/docs/en/hooks), NOT
+ * milliseconds like the manifest's `budget_ms`. Before this helper existed,
+ * `toSettingsCommand` emitted `h.budget_ms` unconverted, so every Claude
+ * hook kill-timer was 1000x too large (a 1000-2000ms template budget became
+ * a 1000-2000 SECOND, 16-33 minute, Claude Code timeout). Codex's
+ * projection (generate-codex-config.ts) already converted correctly; this
+ * helper is the single source of truth both projections now share so they
+ * cannot diverge again.
+ *
+ * `Math.ceil` never rounds a budget down to 0s. The floor (2s for `harness
+ * policy intercept`, 1s otherwise) matches Codex's existing floor rationale
+ * (generate-codex-config.ts): the policy-intercept engine's own ledger
+ * round-trip regularly needs slightly longer than a bare 1s floor would
+ * allow.
+ */
+export declare function hookTimeoutSeconds(h: Hook): number;

package/dist/cli/apply/generate-settings.js

@@ -17,6 +17,9 @@
 //     after schema-defaulting). Always-emit is the conservative choice
 //     against an unknown runtime default; an explicit value is consumed
 //     identically whether or not the runtime would have defaulted to it.
+//     UNIT: Claude Code's settings.json `timeout` is documented in SECONDS,
+//     not milliseconds like the manifest's `budget_ms`; see
+//     `hookTimeoutSeconds` below for the conversion and its history.
 //   - `path_match` and `bash_match` are NOT projected. Claude Code's
 //     settings.json `matcher` filters only on the tool name, so there is
 //     no native settings.json field for "additional filter when this hook
@@ -43,12 +46,16 @@
 //   - Within an event, groups sorted by (matcher, command).
 //   - Within a group, the inner hooks[] preserves matcher-grouping order
 //     and is sorted by command for the same reason.
-import { expandHome } from "../../runtime/expand-home.js";
+import * as path from "node:path";
+import { expandHome } from "../../io/expand-home.js";
+import { signingKeyPathFor } from "../../runtime/approval-signing.js";
 export const DEFAULT_BUDGET_MS = 30_000;
 /** The manifest `tools.mcp[]` entry name that grounding enforcement keys off. */
 export const GROUNDING_MCP_SERVER_NAME = "grounding-mcp";
 /** The env var grounding-mcp's ledger-bridge reads for the evidence-ledger DB path. */
 export const EVIDENCE_LEDGER_DB_ENV = "EVIDENCE_LEDGER_DB";
+/** The env var grounding-mcp (>= 0.8.0) reads for the harness's own approval-marker signing-key path. */
+export const SOLUTION_VERDICT_SIGNING_KEY_ENV = "SOLUTION_VERDICT_SIGNING_KEY";
 export function generateSettings(manifest) {
     return generateSettingsWithWarnings(manifest).root;
 }
@@ -78,14 +85,18 @@ export function generateSettingsWithWarnings(manifest, extras = {}) {
         const hooks = byEvent.get(event) ?? [];
         out.hooks[event] = buildGroups(hooks);
     }
-    // buildMcpServers/projectGroundingEnv still run here (not moved) so the
-    // env-tilde and empty-command warnings stay attached to the same
-    // `warnings` array regardless of which path (settings.json hooks vs.
-    // the claude-mcp Ensure path) consumes the resulting spec map. The
-    // result is intentionally NOT projected into `out` — see
+    // buildDesiredMcpServers still runs here (not moved) so the env-tilde
+    // and empty-command warnings stay attached to the same `warnings` array
+    // regardless of which path (settings.json hooks vs. the claude-mcp
+    // Ensure path) consumes the resulting spec map. The result is
+    // intentionally NOT projected into `out` — see
     // GenerateSettingsResult.mcpServers.
-    const mcp = buildMcpServers(manifest.tools.mcp, warnings);
-    projectGroundingEnv(manifest, mcp, extras.homeDir);
+    const desiredMcp = buildDesiredMcpServers(manifest, {
+        homeDir: extras.homeDir,
+        generatedDir: extras.generatedDir,
+    });
+    warnings.push(...desiredMcp.warnings);
+    const mcp = desiredMcp.mcp;
     const permissions = compactPermissions(extras.packPermissions);
     if (permissions)
         out.permissions = permissions;
@@ -182,7 +193,7 @@ export function buildMcpServers(entries, warnings) {
  *   and projecting an env no server reads would be decorative again. See
  *   the status comments in src/schema/grounding.ts.
  */
-export function projectGroundingEnv(manifest, mcp, homeDir) {
+function projectGroundingEnv(manifest, mcp, homeDir) {
     const server = mcp[GROUNDING_MCP_SERVER_NAME];
     if (!server)
         return;
@@ -204,6 +215,94 @@ export function projectGroundingEnv(manifest, mcp, homeDir) {
 export function groundingLedgerEnvValue(manifest, homeDir) {
     return expandHome(manifest.grounding.evidence_ledger.path, homeDir);
 }
+/**
+ * Wire the harness's own approval-signing key path into the grounding-mcp
+ * server entry (task 03a917fd/H1, agent-grounding 9b6c4beb comment 2,
+ * Option 2), exactly mirroring `projectGroundingEnv` above.
+ *
+ * `<generatedDir>/.approval-signing.key` (see `signingKeyPathFor`,
+ * src/runtime/approval-signing.ts) becomes the `SOLUTION_VERDICT_SIGNING_KEY`
+ * env on the `tools.mcp[grounding-mcp]` entry — the variable grounding-mcp
+ * (>= 0.8.0) reads primarily and THROWS on a non-absolute value, so this
+ * projects only the fully-resolved, already-absolute key PATH, never the
+ * key bytes themselves.
+ *
+ * Rules (mirrors `projectGroundingEnv`):
+ * - Projection only fires when a grounding-mcp entry exists; without one
+ *   there is no consumer.
+ * - An operator-declared `env.SOLUTION_VERDICT_SIGNING_KEY` on the entry
+ *   wins — an explicit override is never clobbered (same truthiness check:
+ *   an empty-string "override" is treated as absent).
+ * - No `generatedDir` passed in -> no projection, no crash. There is
+ *   nothing correct to derive without it (see `GenerateSettingsExtras`).
+ * - `generatedDir` is normalized at this projection boundary before it
+ *   reaches `signingKeyPathFor` (review round H1, Finding 1): `expandHome`
+ *   (same idiom `projectGroundingEnv` above and `groundingLedgerEnvValue`
+ *   use) then `path.resolve`, so a relative `generatedDir` or one carrying
+ *   a literal `~` still projects an absolute path — the same
+ *   never-a-tilde, always-absolute contract `groundingLedgerEnvValue`
+ *   already gives `EVIDENCE_LEDGER_DB`. This harness never THROWS on a
+ *   relative/tilde `generatedDir` the way grounding-mcp's own consumer
+ *   throws on a non-absolute env value; it normalizes instead. The
+ *   normalization lives in `signingKeyEnvValue` so every producer of this
+ *   env value shares it (review round H1-R2: the adopt mirror in
+ *   adopt/derive.ts computes the SAME value through the SAME function;
+ *   a producer that hand-rolls `signingKeyPathFor` on a raw `generatedDir`
+ *   reintroduces phantom adopt drift). The key FILE's on-disk location for
+ *   a non-absolute `generatedDir` is a separate, tracked follow-up.
+ */
+function projectSigningKeyEnv(mcp, generatedDir, homeDir) {
+    const server = mcp[GROUNDING_MCP_SERVER_NAME];
+    if (!server)
+        return;
+    if (!generatedDir)
+        return;
+    const env = server.env ?? {};
+    if (!env[SOLUTION_VERDICT_SIGNING_KEY_ENV]) {
+        env[SOLUTION_VERDICT_SIGNING_KEY_ENV] = signingKeyEnvValue(generatedDir, homeDir);
+        server.env = env;
+    }
+}
+/**
+ * The single source of the projected `SOLUTION_VERDICT_SIGNING_KEY` VALUE
+ * (mirrors how `EVIDENCE_LEDGER_DB` shares its value): `expandHome` +
+ * `path.resolve` on `generatedDir`, then `signingKeyPathFor`. Both the
+ * apply-side projection above and the adopt-side mirror
+ * (adopt/derive.ts) MUST call this, never `signingKeyPathFor` on a raw
+ * `generatedDir` — otherwise apply and adopt disagree for relative or
+ * literal-tilde `generatedDir` values and adopt reports phantom drift.
+ */
+export function signingKeyEnvValue(generatedDir, homeDir) {
+    return signingKeyPathFor(path.resolve(expandHome(generatedDir, homeDir)));
+}
+/**
+ * Single choke point for the manifest -> Claude-Code-shaped MCP
+ * server-spec projection (review round H1, Finding 2 — STRUCTURAL fix).
+ * Encapsulates the fixed sequence `buildMcpServers` -> `projectGroundingEnv`
+ * -> `projectSigningKeyEnv` so every producer of this shape — `harness
+ * apply`'s settings.json generation (this module), the init wizard's
+ * `claude mcp` CLI wiring (`src/cli/init/interactive.ts`), the doctor
+ * registration-health check (`src/cli/doctor/claude-mcp.ts`), and the
+ * opencode config generator (`generate-opencode-config.ts`) — calls this
+ * ONE function instead of hand-rolling the same three-call sequence.
+ *
+ * Before this helper existed, that sequence had to be wired into each
+ * call site by hand: three of the four remembered to call
+ * `projectSigningKeyEnv` when it was added (task 03a917fd/H1b), and
+ * doctor's registration check did not, so its "not registered, run this
+ * `claude mcp add-json ...`" hint silently omitted
+ * `SOLUTION_VERDICT_SIGNING_KEY` (review round H1, Finding 2). Routing
+ * every producer through this function means the NEXT projected env only
+ * needs to be added here once, and cannot again reach only some of the
+ * call sites.
+ */
+export function buildDesiredMcpServers(manifest, opts = {}) {
+    const warnings = [];
+    const mcp = buildMcpServers(manifest.tools.mcp, warnings);
+    projectGroundingEnv(manifest, mcp, opts.homeDir);
+    projectSigningKeyEnv(mcp, opts.generatedDir, opts.homeDir);
+    return { mcp, warnings };
+}
 // Translate manifest `memory.router` into a synthetic UserPromptSubmit
 // hook so per-prompt context augmentation actually fires alongside the
 // understanding-gate hook. Returns null when memory.router is absent or
@@ -288,7 +387,31 @@ function buildGroups(hooks) {
     }
     return groups;
 }
+/**
+ * Convert the manifest's `budget_ms` (milliseconds) into the seconds unit
+ * both runtime projections' `timeout` field expects.
+ *
+ * Claude Code's settings.json hook `timeout` is documented in seconds
+ * ("Seconds before canceling", https://code.claude.com/docs/en/hooks), NOT
+ * milliseconds like the manifest's `budget_ms`. Before this helper existed,
+ * `toSettingsCommand` emitted `h.budget_ms` unconverted, so every Claude
+ * hook kill-timer was 1000x too large (a 1000-2000ms template budget became
+ * a 1000-2000 SECOND, 16-33 minute, Claude Code timeout). Codex's
+ * projection (generate-codex-config.ts) already converted correctly; this
+ * helper is the single source of truth both projections now share so they
+ * cannot diverge again.
+ *
+ * `Math.ceil` never rounds a budget down to 0s. The floor (2s for `harness
+ * policy intercept`, 1s otherwise) matches Codex's existing floor rationale
+ * (generate-codex-config.ts): the policy-intercept engine's own ledger
+ * round-trip regularly needs slightly longer than a bare 1s floor would
+ * allow.
+ */
+export function hookTimeoutSeconds(h) {
+    const minimumSeconds = h.command.trim() === "harness policy intercept" ? 2 : 1;
+    return Math.max(minimumSeconds, Math.ceil(h.budget_ms / 1000));
+}
 function toSettingsCommand(h) {
-    return { type: "command", command: h.command, timeout: h.budget_ms };
+    return { type: "command", command: h.command, timeout: hookTimeoutSeconds(h) };
 }
 //# sourceMappingURL=generate-settings.js.map

package/dist/cli/apply/generate-settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"generate-settings.js","sourceRoot":"","sources":["../../../src/cli/apply/generate-settings.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,iFAAiF;AACjF,sEAAsE;AACtE,EAAE;AACF,sEAAsE;AACtE,EAAE;AACF,uFAAuF;AACvF,EAAE;AACF,wEAAwE;AACxE,0EAA0E;AAC1E,2EAA2E;AAC3E,kCAAkC;AAClC,6EAA6E;AAC7E,0EAA0E;AAC1E,mDAAmD;AACnD,4EAA4E;AAC5E,uEAAuE;AACvE,wEAAwE;AACxE,yEAAyE;AACzE,qEAAqE;AACrE,yEAAyE;AACzE,0EAA0E;AAC1E,sEAAsE;AACtE,yEAAyE;AACzE,2EAA2E;AAC3E,yEAAyE;AACzE,0EAA0E;AAC1E,uEAAuE;AACvE,sEAAsE;AACtE,yEAAyE;AACzE,uEAAuE;AACvE,oEAAoE;AACpE,0EAA0E;AAC1E,qEAAqE;AACrE,uEAAuE;AACvE,wEAAwE;AACxE,0CAA0C;AAC1C,EAAE;AACF,0EAA0E;AAC1E,gBAAgB;AAChB,uEAAuE;AACvE,0DAA0D;AAC1D,4DAA4D;AAC5D,yEAAyE;AACzE,oDAAoD;AAGpD,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAE1D,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAExC,iFAAiF;AACjF,MAAM,CAAC,MAAM,yBAAyB,GAAG,eAAe,CAAC;AACzD,uFAAuF;AACvF,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAoE3D,MAAM,UAAU,gBAAgB,CAAC,QAAkB;IACjD,OAAO,4BAA4B,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,QAAkB,EAClB,SAAiC,EAAE;IAEnC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,oEAAoE;IACpE,sEAAsE;IACtE,oEAAoE;IACpE,iEAAiE;IACjE,6DAA6D;IAC7D,gEAAgE;IAChE,MAAM,UAAU,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,GAAG,GAAiB,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACxC,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAE9C,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACvC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAED,wEAAwE;IACxE,iEAAiE;IACjE,qEAAqE;IACrE,mEAAmE;IACnE,yDAAyD;IACzD,qCAAqC;IACrC,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1D,mBAAmB,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAEnD,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC/D,IAAI,WAAW;QAAE,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC;IAE/C,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAkC;IAC5D,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,wEAAwE;AACxE,0EAA0E;AAC1E,wEAAwE;AACxE,0BAA0B;AAC1B,0EAA0E;AAC1E,0EAA0E;AAC1E,sEAAsE;AACtE,uEAAuE;AACvE,uEAAuE;AACvE,sBAAsB;AACtB,+DAA+D;AAC/D,uEAAuE;AACvE,4DAA4D;AAC5D,yEAAyE;AACzE,qEAAqE;AACrE,+DAA+D;AAC/D,MAAM,UAAU,eAAe,CAC7B,OAAoB,EACpB,QAAkB;IAElB,MAAM,GAAG,GAAsC,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACxC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/C,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YACrC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,2BAA2B,CAAC,CAAC;YAC9D,SAAS;QACX,CAAC;QACD,0DAA0D;QAC1D,MAAM,IAAI,GAAsB,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,CAAC;QACxD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,mEAAmE;YACnE,qEAAqE;YACrE,qEAAqE;YACrE,+DAA+D;YAC/D,8DAA8D;YAC9D,qEAAqE;YACrE,gEAAgE;YAChE,4DAA4D;YAC5D,iEAAiE;YACjE,qDAAqD;YACrD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxD,QAAQ,CAAC,IAAI,CACX,aAAa,CAAC,CAAC,IAAI,QAAQ,GAAG,YAAY,KAAK,uLAAuL,CACvO,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QAC1B,CAAC;QACD,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAkB,EAClB,GAAsC,EACtC,OAAgB;IAEhB,MAAM,MAAM,GAAG,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;IAC7B,wEAAwE;IACxE,oEAAoE;IACpE,uEAAuE;IACvE,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,sBAAsB,CAAC,GAAG,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzE,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAkB,EAClB,OAAgB;IAEhB,OAAO,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC;AAED,uEAAuE;AACvE,uEAAuE;AACvE,wEAAwE;AACxE,mEAAmE;AACnE,EAAE;AACF,uEAAuE;AACvE,uEAAuE;AACvE,uEAAuE;AACvE,qEAAqE;AACrE,mEAAmE;AACnE,wEAAwE;AACxE,sEAAsE;AACtE,oEAAoE;AACpE,0CAA0C;AAC1C,EAAE;AACF,wEAAwE;AACxE,qEAAqE;AACrE,uEAAuE;AACvE,+DAA+D;AAC/D,oBAAoB;AACpB,MAAM,UAAU,qBAAqB,CAAC,QAAkB;IACtD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACtC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,IAAI,GAAS;QACjB,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,kBAAkB;QACzB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QACzB,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,IAAI;KAChB,CAAC;IACF,kEAAkE;IAClE,gEAAgE;IAChE,mEAAmE;IACnE,kEAAkE;IAClE,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC7E,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACtC,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,uEAAuE;IACvE,qDAAqD;IACrD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5C,gEAAgE;QAChE,iEAAiE;QACjE,oEAAoE;QACpE,iEAAiE;QACjE,sEAAsE;QACtE,iEAAiE;QACjE,0DAA0D;QAC1D,oEAAoE;QACpE,aAAa;QACb,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,KAAK,GAA0B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC5C,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC3D,EAAE,CAAC;YACF,MAAM,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,WAAW,GAAG,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YAC1D,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,SAAS;YACpC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,KAAK,GACT,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAO;IAChC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;AACvE,CAAC"}
+{"version":3,"file":"generate-settings.js","sourceRoot":"","sources":["../../../src/cli/apply/generate-settings.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,iFAAiF;AACjF,sEAAsE;AACtE,EAAE;AACF,sEAAsE;AACtE,EAAE;AACF,uFAAuF;AACvF,EAAE;AACF,wEAAwE;AACxE,0EAA0E;AAC1E,2EAA2E;AAC3E,kCAAkC;AAClC,6EAA6E;AAC7E,0EAA0E;AAC1E,mDAAmD;AACnD,4EAA4E;AAC5E,uEAAuE;AACvE,wEAAwE;AACxE,yEAAyE;AACzE,4EAA4E;AAC5E,4DAA4D;AAC5D,qEAAqE;AACrE,qEAAqE;AACrE,yEAAyE;AACzE,0EAA0E;AAC1E,sEAAsE;AACtE,yEAAyE;AACzE,2EAA2E;AAC3E,yEAAyE;AACzE,0EAA0E;AAC1E,uEAAuE;AACvE,sEAAsE;AACtE,yEAAyE;AACzE,uEAAuE;AACvE,oEAAoE;AACpE,0EAA0E;AAC1E,qEAAqE;AACrE,uEAAuE;AACvE,wEAAwE;AACxE,0CAA0C;AAC1C,EAAE;AACF,0EAA0E;AAC1E,gBAAgB;AAChB,uEAAuE;AACvE,0DAA0D;AAC1D,4DAA4D;AAC5D,yEAAyE;AACzE,oDAAoD;AAEpD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAEtE,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAExC,iFAAiF;AACjF,MAAM,CAAC,MAAM,yBAAyB,GAAG,eAAe,CAAC;AACzD,uFAAuF;AACvF,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAC3D,yGAAyG;AACzG,MAAM,CAAC,MAAM,gCAAgC,GAAG,8BAA8B,CAAC;AAuF/E,MAAM,UAAU,gBAAgB,CAAC,QAAkB;IACjD,OAAO,4BAA4B,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,QAAkB,EAClB,SAAiC,EAAE;IAEnC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,oEAAoE;IACpE,sEAAsE;IACtE,oEAAoE;IACpE,iEAAiE;IACjE,6DAA6D;IAC7D,gEAAgE;IAChE,MAAM,UAAU,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,GAAG,GAAiB,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACxC,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAE9C,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACvC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAED,sEAAsE;IACtE,wEAAwE;IACxE,mEAAmE;IACnE,8DAA8D;IAC9D,+CAA+C;IAC/C,qCAAqC;IACrC,MAAM,UAAU,GAAG,sBAAsB,CAAC,QAAQ,EAAE;QAClD,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CAAC,CAAC;IACH,QAAQ,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAE3B,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC/D,IAAI,WAAW;QAAE,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC;IAE/C,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAkC;IAC5D,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,wEAAwE;AACxE,0EAA0E;AAC1E,wEAAwE;AACxE,0BAA0B;AAC1B,0EAA0E;AAC1E,0EAA0E;AAC1E,sEAAsE;AACtE,uEAAuE;AACvE,uEAAuE;AACvE,sBAAsB;AACtB,+DAA+D;AAC/D,uEAAuE;AACvE,4DAA4D;AAC5D,yEAAyE;AACzE,qEAAqE;AACrE,+DAA+D;AAC/D,MAAM,UAAU,eAAe,CAC7B,OAAoB,EACpB,QAAkB;IAElB,MAAM,GAAG,GAAsC,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACxC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/C,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YACrC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,2BAA2B,CAAC,CAAC;YAC9D,SAAS;QACX,CAAC;QACD,0DAA0D;QAC1D,MAAM,IAAI,GAAsB,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,CAAC;QACxD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,mEAAmE;YACnE,qEAAqE;YACrE,qEAAqE;YACrE,+DAA+D;YAC/D,8DAA8D;YAC9D,qEAAqE;YACrE,gEAAgE;YAChE,4DAA4D;YAC5D,iEAAiE;YACjE,qDAAqD;YACrD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxD,QAAQ,CAAC,IAAI,CACX,aAAa,CAAC,CAAC,IAAI,QAAQ,GAAG,YAAY,KAAK,uLAAuL,CACvO,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QAC1B,CAAC;QACD,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAS,mBAAmB,CAC1B,QAAkB,EAClB,GAAsC,EACtC,OAAgB;IAEhB,MAAM,MAAM,GAAG,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;IAC7B,wEAAwE;IACxE,oEAAoE;IACpE,uEAAuE;IACvE,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,sBAAsB,CAAC,GAAG,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzE,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAkB,EAClB,OAAgB;IAEhB,OAAO,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,SAAS,oBAAoB,CAC3B,GAAsC,EACtC,YAAqB,EACrB,OAAgB;IAEhB,MAAM,MAAM,GAAG,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,IAAI,CAAC,YAAY;QAAE,OAAO;IAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,GAAG,CAAC,gCAAgC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,gCAAgC,CAAC,GAAG,kBAAkB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAClF,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,YAAoB,EAAE,OAAgB;IACvE,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAcD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAkB,EAClB,OAAsC,EAAE;IAExC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1D,mBAAmB,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3D,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED,uEAAuE;AACvE,uEAAuE;AACvE,wEAAwE;AACxE,mEAAmE;AACnE,EAAE;AACF,uEAAuE;AACvE,uEAAuE;AACvE,uEAAuE;AACvE,qEAAqE;AACrE,mEAAmE;AACnE,wEAAwE;AACxE,sEAAsE;AACtE,oEAAoE;AACpE,0CAA0C;AAC1C,EAAE;AACF,wEAAwE;AACxE,qEAAqE;AACrE,uEAAuE;AACvE,+DAA+D;AAC/D,oBAAoB;AACpB,MAAM,UAAU,qBAAqB,CAAC,QAAkB;IACtD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACtC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,IAAI,GAAS;QACjB,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,kBAAkB;QACzB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QACzB,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,IAAI;KAChB,CAAC;IACF,kEAAkE;IAClE,gEAAgE;IAChE,mEAAmE;IACnE,kEAAkE;IAClE,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC7E,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACtC,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,uEAAuE;IACvE,qDAAqD;IACrD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5C,gEAAgE;QAChE,iEAAiE;QACjE,oEAAoE;QACpE,iEAAiE;QACjE,sEAAsE;QACtE,iEAAiE;QACjE,0DAA0D;QAC1D,oEAAoE;QACpE,aAAa;QACb,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,KAAK,GAA0B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC5C,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC3D,EAAE,CAAC;YACF,MAAM,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,WAAW,GAAG,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YAC1D,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,SAAS;YACpC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,KAAK,GACT,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,kBAAkB,CAAC,CAAO;IACxC,MAAM,cAAc,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAO;IAChC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;AACjF,CAAC"}

package/dist/cli/apply/index.d.ts

@@ -1,4 +1,5 @@
-export { apply, CODEX_CONFIG_BASENAME, DRIFT_HINT_MESSAGE, GENERATED_DIRNAME, MANIFEST_BASENAME, MEMORY_BASENAME, SETTINGS_BASENAME, type ApplyOptions, type ApplyOutcome, type ApplyResult, type CodexConfigInstallOutcome, type FileApplyOutcome, } from "./apply.js";
+export { apply, CODEX_CONFIG_BASENAME, OPENCODE_CONFIG_BASENAME, DRIFT_HINT_MESSAGE, GENERATED_DIRNAME, MANIFEST_BASENAME, MEMORY_BASENAME, SETTINGS_BASENAME, type ApplyOptions, type ApplyOutcome, type ApplyResult, type CodexConfigInstallOutcome, type FileApplyOutcome, } from "./apply.js";
 export { formatNextSteps, type NextStepsContext } from "./next-steps.js";
 export { generateCodexConfig, type CodexConfigResult } from "./generate-codex-config.js";
+export { generateOpencodeConfig, OPENCODE_GENERATED_HEADER_LINE, type OpencodeConfigResult, type OpencodeLocalMcpServer, type OpencodeDisabledMcpServer, type OpencodeMcpEntry, } from "./generate-opencode-config.js";
 export { CODEX_MANAGED_BEGIN, CODEX_MANAGED_END, CODEX_MANAGED_SOURCE_PREFIX, defaultCodexConfigPath, planCodexConfigInstall, validateCodexManagedConfig, writeCodexConfigInstall, type CodexConfigInstallPlan, type CodexConfigInstallResult, } from "./install-codex-config.js";

package/dist/cli/apply/index.js

@@ -1,5 +1,6 @@
-export { apply, CODEX_CONFIG_BASENAME, DRIFT_HINT_MESSAGE, GENERATED_DIRNAME, MANIFEST_BASENAME, MEMORY_BASENAME, SETTINGS_BASENAME, } from "./apply.js";
+export { apply, CODEX_CONFIG_BASENAME, OPENCODE_CONFIG_BASENAME, DRIFT_HINT_MESSAGE, GENERATED_DIRNAME, MANIFEST_BASENAME, MEMORY_BASENAME, SETTINGS_BASENAME, } from "./apply.js";
 export { formatNextSteps } from "./next-steps.js";
 export { generateCodexConfig } from "./generate-codex-config.js";
+export { generateOpencodeConfig, OPENCODE_GENERATED_HEADER_LINE, } from "./generate-opencode-config.js";
 export { CODEX_MANAGED_BEGIN, CODEX_MANAGED_END, CODEX_MANAGED_SOURCE_PREFIX, defaultCodexConfigPath, planCodexConfigInstall, validateCodexManagedConfig, writeCodexConfigInstall, } from "./install-codex-config.js";
 //# sourceMappingURL=index.js.map

package/dist/cli/apply/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cli/apply/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EACL,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,GAMlB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAyB,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAA0B,MAAM,4BAA4B,CAAC;AACzF,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,2BAA2B,EAC3B,sBAAsB,EACtB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,GAGxB,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cli/apply/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EACL,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,GAMlB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAyB,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAA0B,MAAM,4BAA4B,CAAC;AACzF,OAAO,EACL,sBAAsB,EACtB,8BAA8B,GAK/B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,2BAA2B,EAC3B,sBAAsB,EACtB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,GAGxB,MAAM,2BAA2B,CAAC"}