@lannguyensi/harness 0.44.0 → 0.45.0

package/dist/cli/session-start/stale-base-check.js

@@ -0,0 +1,379 @@
+// `harness session-start stale-base-check` — SessionStart hook
+// entrypoint, fourth sibling of `harness session-start preflight` /
+// `branch-check` / `toolchain-parity`.
+//
+// Incident (task ea8becf5): a task branch was cut from a local `master`
+// that had not been fetched in 4 days. The v0.42.0 release had already
+// landed on `origin/master` 6h before the branch point. The resulting PR
+// went straight to CONFLICTING and its CI never ran. Nothing surfaced the
+// gap at the time it was still cheap to fix (before work landed on the
+// branch), because:
+//   - `harness preflight` checks the working TREE, never the remote.
+//   - `harness session-start branch-check` reads `.git/HEAD` and a
+//     protected-branch list; it has no notion of "is this branch's base
+//     current".
+//   - the post-merge-gate convention only ever fires AFTER a merge.
+// And the obvious-looking fix is itself the trap this module exists to
+// avoid: `git merge-base HEAD origin/master` LOOKS authoritative, but
+// `origin/master` is a LOCAL, cached ref — exactly the ref that was 4
+// days stale in the incident. Computing "how stale" from a stale ref
+// answers a different question than the one that matters.
+//
+// --- WHERE this sits (task brief step 3) ---
+// SessionStart companion, not a `preflight`-check addition and not a
+// PreToolUse gate:
+//   - `harness policy intercept` (the PreToolUse hot path, evaluated on
+//     EVERY Bash/Edit/Write tool call — see runtime/intercept.ts) must
+//     never do network I/O; a `git fetch` there would add real latency to
+//     every single tool call for the life of the session. This module is
+//     wired ONLY under `harness session-start ...` (this file lives in
+//     src/cli/, which src/runtime/intercept.ts is structurally forbidden
+//     from importing — enforced by .dependency-cruiser.cjs's
+//     "runtime-no-upward-imports" rule, i.e. `npm run check:boundaries`
+//     fails the build if that ever changes), so the one network call this
+//     module makes can only ever happen once per SessionStart, never on
+//     the hot path.
+//   - `agent-preflight` (the external `preflight` binary
+//     `session-start/index.ts` wraps) is a SEPARATE npm package; teaching
+//     it to do remote checks is out of this task's scope (task brief
+//     "Out of scope").
+//   - A PreToolUse gate (`requires.ledger_tag`-style, like
+//     `preflight-before-push`) was considered and REJECTED: every such
+//     gate in this codebase fails CLOSED for a SECURITY invariant (an
+//     absent/expired tag blocks the action). A stale base is a
+//     time-loss problem, not a security problem — blocking on it would
+//     violate the task's hard constraint ("Keine Aussperrung: ein
+//     veralteter Base darf die Arbeit nicht verhindern") for zero
+//     security benefit. A SessionStart producer's own contract
+//     (`blocking:false`, always exit 0) makes the non-blocking posture
+//     structural rather than a policy authors could get wrong later.
+//
+// --- SCHÄRFE (severity) chosen: WARNUNG, not Hinweis, not Block ---
+//   - Block is impossible by construction here (see above) and would
+//     directly violate the hard constraint anyway.
+//   - A quiet Hinweis (a single low-key note easy to scroll past) risks
+//     reproducing the founding incident's own failure mode almost
+//     exactly: "nichts fiel auf" is the whole reason this task exists.
+//   - So: a loud stderr WARNING line — same visibility tier as the two
+//     existing loud-but-non-blocking SessionStart producers
+//     (`toolchain-parity`'s drift lines, `preflight`'s not-ready
+//     diagnostic) — naming the concrete commit count, how old the missing
+//     work is, and the exact recovery command. Purely advisory: no
+//     PreToolUse gate consumes the `stale-base:` ledger fact this writes
+//     (same posture as `toolchain-parity:`, audit-trail only for
+//     `harness audit`/forensics).
+//
+// --- Fetch cost / why opt-in (task brief: "inkl. Fetch-Kosten") ---
+// `stale_base_check.enabled` defaults to `false` (schema:
+// src/schema/stale-base-check.ts). An operator who has not asked for
+// this pays ZERO extra session-start latency or network egress — the
+// producer returns before touching `child_process` at all when
+// unconfigured. Once enabled, the cost is bounded by
+// `fetch_timeout_ms` (default 8000ms) per `git` subprocess call (at most
+// three: fetch, rev-list, log — see `realCheckStaleBase` below), and the
+// fetch itself is normally near-instant: `git fetch <remote>
+// <defaultBranch>` only ever needs to transfer the commits this checkout
+// doesn't already have. It always writes `FETCH_HEAD`; on a normal clone
+// (whose configured `remote.<remote>.fetch` refspec matches the named
+// branch) `git` ALSO refreshes the local `refs/remotes/<remote>/
+// <defaultBranch>` tracking ref as a side effect — a welcome bonus (it
+// self-heals the exact staleness the incident hit) but never something
+// this module relies on or reads back: see below.
+//
+// --- The ref-staleness trap, closed ---
+// The remote's default-branch NAME (e.g. "master") is resolved from the
+// local `refs/remotes/origin/HEAD` file via `resolveOriginHeadBase` — that
+// is safe to trust: a repo's default branch NAME essentially never
+// changes after initial setup. What must NEVER be trusted is that same
+// ref's SHA as a staleness signal — that is precisely what went stale in
+// the incident. This module never READS a local `refs/remotes/<remote>/
+// <defaultBranch>` sha for comparison (regardless of whether the fetch
+// above happened to refresh it); the only sha it ever compares `branch`
+// against is `FETCH_HEAD`, populated by a live `git fetch` performed
+// THIS run.
+//
+// SessionStart contract, same as the three siblings: `blocking:false`.
+// Every failure path (not configured, not a git repo, detached HEAD,
+// default branch unresolved, `git` not on PATH, no remote configured, no
+// credentials, offline/timeout, unparseable output, a ledger-write
+// failure) logs one line to stderr and exits 0 — never blocking, never
+// throwing (except the hermetic-spawn-guard violation under vitest
+// without an injected `runCheck`, which — like the sibling producers —
+// must propagate rather than be swallowed; see hermetic-spawn-guard.ts).
+import { execFile } from "node:child_process";
+import { findGitEntry, resolveCommonDir, resolveGitContext, resolveOriginHeadBase, } from "../../runtime/git-context.js";
+import { assertNoRealSpawnInTests } from "../../runtime/hermetic-spawn-guard.js";
+import { resolveManifestLedgerWriter } from "../../runtime/ledger-writer.js";
+import { resolveReadSessionId, } from "../../runtime/session-id.js";
+import { loadManifest } from "../loader.js";
+import { formatSnapshotAge } from "./toolchain-parity.js";
+const FALLBACK_SESSION = "default";
+const LEDGER_SOURCE = "harness-session-start-stale-base-check";
+const DEFAULT_REMOTE = "origin";
+const DEFAULT_FETCH_TIMEOUT_MS = 8_000;
+async function readStdin(stream) {
+    return new Promise((resolve, reject) => {
+        let data = "";
+        stream.setEncoding("utf8");
+        stream.on("data", (chunk) => {
+            data += chunk;
+        });
+        stream.on("end", () => resolve(data));
+        stream.on("error", reject);
+    });
+}
+/**
+ * Run one `git <args>` in `cwd`, classifying the common failure shapes
+ * (missing binary / timeout / non-zero exit) the same way the sibling
+ * producers' subprocess wrappers do (`spawnPreflight` in
+ * session-start/index.ts, `realNpmGlobalsSpawn` in toolchain-parity.ts).
+ * Never rejects.
+ */
+function execGit(args, cwd, timeoutMs) {
+    return new Promise((resolve) => {
+        execFile("git", args, { cwd, timeout: timeoutMs, maxBuffer: 4 * 1024 * 1024, encoding: "utf8" }, (err, stdout, stderr) => {
+            const text = (stdout ?? "").toString().trim();
+            if (!err) {
+                resolve({ ok: true, stdout: text, reason: "" });
+                return;
+            }
+            const e = err;
+            if (e.code === "ENOENT") {
+                resolve({ ok: false, stdout: "", reason: "`git` not on PATH" });
+                return;
+            }
+            if (e.killed) {
+                resolve({
+                    ok: false,
+                    stdout: "",
+                    reason: `\`git ${args.join(" ")}\` timed out after ${timeoutMs}ms (remote unreachable or very slow)`,
+                });
+                return;
+            }
+            const stderrText = (stderr ?? "").toString().trim().split("\n")[0] ?? "";
+            const capped = stderrText.length > 200 ? `${stderrText.slice(0, 199)}…` : stderrText;
+            resolve({
+                ok: false,
+                stdout: "",
+                reason: `\`git ${args.join(" ")}\` failed${capped ? `: ${capped}` : ` (exit ${e.code ?? "?"})`}`,
+            });
+        });
+    });
+}
+/**
+ * The real, network-touching implementation. Guarded by
+ * `assertNoRealSpawnInTests` (see that module's doc) so an un-injected
+ * test can never accidentally exercise a real `git fetch` — every test in
+ * this module's suite either injects `runCheck` or opts into the real
+ * path via the documented `HARNESS_ALLOW_REAL_SPAWN=1` escape hatch
+ * against a local fixture repo (never a real network host).
+ *
+ * Sequence: `git fetch --no-tags <remote> <defaultBranch>` (always writes
+ * FETCH_HEAD; may also refresh the local remote-tracking ref as a normal
+ * git side effect — see the module header), then `git rev-list
+ * --left-right --count <branch>...FETCH_HEAD` for the ahead/behind counts,
+ * then — only when behind > 0, since that is the only case the caller's
+ * message needs it — `git log -1 --format=%H%x09%cI FETCH_HEAD` for the
+ * live remote tip's sha + committer date. Comparison is always against
+ * `FETCH_HEAD` (this run's live result), never a cached tracking ref.
+ */
+function realCheckStaleBase(args) {
+    assertNoRealSpawnInTests("git fetch (stale-base-check)", "Inject a fake `runCheck` (SessionStartStaleBaseCheckOptions.runCheck), or opt into the " +
+        "real path against a LOCAL fixture repo via HARNESS_ALLOW_REAL_SPAWN=1 for a dedicated " +
+        "real-git plumbing test — never exercise this against a real network host in a test.");
+    const { cwd, remote, defaultBranch, branch, timeoutMs } = args;
+    return (async () => {
+        const fetch = await execGit(["fetch", "--no-tags", "--", remote, defaultBranch], cwd, timeoutMs);
+        if (!fetch.ok)
+            return { ok: false, reason: fetch.reason };
+        const counts = await execGit(["rev-list", "--left-right", "--count", `${branch}...FETCH_HEAD`], cwd, timeoutMs);
+        if (!counts.ok)
+            return { ok: false, reason: counts.reason };
+        const parts = counts.stdout.split(/\s+/).filter((p) => p.length > 0);
+        const aheadCount = Number.parseInt(parts[0] ?? "", 10);
+        const behindCount = Number.parseInt(parts[1] ?? "", 10);
+        if (!Number.isFinite(aheadCount) || !Number.isFinite(behindCount)) {
+            return { ok: false, reason: `\`git rev-list --left-right --count\` produced unparseable output: "${counts.stdout}"` };
+        }
+        if (behindCount === 0)
+            return { ok: true, aheadCount, behindCount };
+        const log = await execGit(["log", "-1", "--format=%H%x09%cI", "FETCH_HEAD"], cwd, timeoutMs);
+        if (!log.ok) {
+            // The counts themselves are still good evidence — degrade the
+            // extra detail, not the whole result.
+            return { ok: true, aheadCount, behindCount };
+        }
+        const [remoteSha, latestRemoteCommitIso] = log.stdout.split("\t");
+        return {
+            ok: true,
+            aheadCount,
+            behindCount,
+            ...(remoteSha ? { remoteSha } : {}),
+            ...(latestRemoteCommitIso ? { latestRemoteCommitIso } : {}),
+        };
+    })();
+}
+export async function runSessionStartStaleBaseCheck(opts = {}) {
+    const stdin = opts.stdin ?? process.stdin;
+    const stderr = opts.stderr ?? process.stderr;
+    const now = opts.now ?? new Date();
+    const note = (msg) => {
+        stderr.write(`harness session-start stale-base-check: ${msg}\n`);
+    };
+    const done = (wrote, repo, branch, sessionId, sessionSource, reason, behindCount) => ({
+        exitCode: 0,
+        wrote,
+        repo,
+        branch,
+        sessionId,
+        sessionSource,
+        ...(behindCount !== undefined && { behindCount }),
+        ...(reason !== undefined && { reason }),
+    });
+    let event;
+    try {
+        event = JSON.parse((await readStdin(stdin)).trim() || "{}");
+    }
+    catch (err) {
+        const reason = `malformed event JSON: ${err.message}`;
+        note(reason);
+        return done(false, "", "", FALLBACK_SESSION, "default", reason);
+    }
+    const cwd = typeof opts.cwd === "string" && opts.cwd.length > 0
+        ? opts.cwd
+        : typeof event.cwd === "string" && event.cwd.length > 0
+            ? event.cwd
+            : process.cwd();
+    const explicit = typeof opts.session === "string" && opts.session.length > 0
+        ? opts.session
+        : typeof event.session_id === "string" && event.session_id.length > 0
+            ? event.session_id
+            : undefined;
+    const resolveSession = opts.resolveSession ?? resolveReadSessionId;
+    const sessionId = resolveSession(explicit, {});
+    const sessionSource = typeof opts.session === "string" && opts.session.length > 0
+        ? "flag"
+        : typeof event.session_id === "string" && event.session_id.length > 0
+            ? "stdin"
+            : sessionId === FALLBACK_SESSION
+                ? "default"
+                : (typeof process.env.CLAUDE_CODE_SESSION_ID === "string" &&
+                    process.env.CLAUDE_CODE_SESSION_ID === sessionId) ||
+                    (typeof process.env.CLAUDE_SESSION_ID === "string" &&
+                        process.env.CLAUDE_SESSION_ID === sessionId)
+                    ? "env"
+                    : "transcript";
+    let manifest;
+    if (opts.manifest) {
+        manifest = opts.manifest;
+    }
+    else {
+        try {
+            manifest = loadManifest(opts).manifest;
+        }
+        catch (err) {
+            const reason = `manifest load failed: ${err.message}`;
+            note(reason);
+            return done(false, "", "", sessionId, sessionSource, reason);
+        }
+    }
+    const config = manifest.stale_base_check;
+    if (!config.enabled) {
+        const reason = "not configured (add `stale_base_check: { enabled: true }` to harness.yaml); skipping — no network touched";
+        note(reason);
+        return done(false, "", "", sessionId, sessionSource, reason);
+    }
+    const { repo, branch } = resolveGitContext(cwd);
+    if (repo === "") {
+        const reason = `cwd is not inside a git work tree (${cwd}); nothing to check`;
+        note(reason);
+        return done(false, "", "", sessionId, sessionSource, reason);
+    }
+    if (branch === "") {
+        const reason = "detached HEAD (or unreadable HEAD) — no branch to check a base for";
+        note(reason);
+        return done(false, repo, "", sessionId, sessionSource, reason);
+    }
+    const remote = config.remote ?? DEFAULT_REMOTE;
+    const timeoutMs = config.fetch_timeout_ms ?? DEFAULT_FETCH_TIMEOUT_MS;
+    let defaultBranch = config.default_branch;
+    if (!defaultBranch) {
+        // NOTE: `resolveOriginHeadBase` reads `refs/remotes/origin/HEAD`
+        // specifically (hardcoded "origin" — see runtime/git-context.ts), not
+        // `refs/remotes/<remote>/HEAD`. For the overwhelming common case
+        // (`remote` left at its "origin" default) this is exactly right. A
+        // manifest that configures a NON-"origin" `remote` without also
+        // setting `default_branch` explicitly will fail this auto-resolution
+        // and fall into the "could not be resolved" degrade path below —
+        // fail-open (skip, no fact written), never a wrong/misleading result,
+        // so this is a completeness gap, not a correctness risk.
+        const gitDir = findGitEntry(cwd)?.gitDir;
+        defaultBranch = gitDir ? (resolveOriginHeadBase(resolveCommonDir(gitDir)) ?? undefined) : undefined;
+    }
+    if (!defaultBranch) {
+        const reason = `default branch could not be resolved (checked \`stale_base_check.default_branch\` and ` +
+            `refs/remotes/${remote}/HEAD / packed-refs); skipping. Set \`stale_base_check.default_branch\` ` +
+            "explicitly to fix this.";
+        note(reason);
+        return done(false, repo, branch, sessionId, sessionSource, reason);
+    }
+    if (branch === defaultBranch) {
+        const reason = `on ${defaultBranch} itself; nothing to compare a base against`;
+        note(reason);
+        return done(false, repo, branch, sessionId, sessionSource, reason);
+    }
+    const runCheck = opts.runCheck ?? realCheckStaleBase;
+    const result = await runCheck({ cwd, remote, defaultBranch, branch, timeoutMs });
+    if (!result.ok) {
+        // Fail-open by construction (task hard constraint): every reason here
+        // — no remote configured, no credentials, offline, timeout, git
+        // missing — degrades to "no fact written", never a thrown error and
+        // never a block. A stale base costs time, not safety.
+        note(`${result.reason} — degrading cleanly (not blocking; the base-staleness check is advisory-only)`);
+        return done(false, repo, branch, sessionId, sessionSource, result.reason);
+    }
+    const remoteRef = `${remote}/${defaultBranch}`;
+    if (result.behindCount === 0) {
+        note(`base is current with ${remoteRef} (live check via \`git fetch\`)`);
+    }
+    else {
+        const ageSuffix = result.latestRemoteCommitIso
+            ? ` (newest missing commit landed ${formatSnapshotAge(Math.max(0, now.getTime() - Date.parse(result.latestRemoteCommitIso)))} ago, ${result.latestRemoteCommitIso})`
+            : "";
+        const aheadSuffix = result.aheadCount > 0 ? `; this branch itself is ${result.aheadCount} commit(s) ahead of that base` : "";
+        note(`WARNING: this branch's base is ${result.behindCount} commit(s) behind ${remoteRef}${ageSuffix}${aheadSuffix}. ` +
+            `This is a LIVE check (a real \`git fetch\`, not the local ${remoteRef} ref, which may itself be stale). ` +
+            `Recommended before continuing: \`git fetch ${remote} && git rebase ${remoteRef}\` (or merge) — ` +
+            "otherwise this PR risks landing CONFLICTING with CI never running (the incident this check exists to catch).");
+    }
+    const content = result.behindCount === 0
+        ? `stale-base:${repo}:${branch} ok base:${remoteRef}`
+        : `stale-base:${repo}:${branch} behind:${result.behindCount} ahead:${result.aheadCount} base:${remoteRef}` +
+            (result.remoteSha ? ` remote_sha:${result.remoteSha}` : "");
+    let writeLedger = opts.writeLedger;
+    if (!writeLedger) {
+        const resolved = resolveManifestLedgerWriter(manifest, {
+            ...(opts.ledgerTimeoutMs !== undefined ? { ledgerTimeoutMs: opts.ledgerTimeoutMs } : {}),
+        });
+        if (!resolved.ok) {
+            const reason = `${resolved.reason}; cannot record ${content}`;
+            note(reason);
+            return done(false, repo, branch, sessionId, sessionSource, reason, result.behindCount);
+        }
+        writeLedger = resolved.write;
+    }
+    const written = await writeLedger({ sessionId, content, source: LEDGER_SOURCE });
+    if (!written.ok) {
+        const reason = `ledger write failed: ${written.reason ?? "unknown error"}`;
+        note(reason);
+        return done(false, repo, branch, sessionId, sessionSource, reason, result.behindCount);
+    }
+    note(`recorded ${content} for session ${sessionId}`);
+    if (sessionSource === "default") {
+        note("WARNING: session resolved to the literal \"default\". This tag is audit-only (no gate consumes " +
+            "stale-base: yet), but pipe SessionStart event JSON on stdin, export $CLAUDE_SESSION_ID, or pass " +
+            "--session <id> for manual / scripted use to keep the audit trail useful.");
+    }
+    return done(true, repo, branch, sessionId, sessionSource, undefined, result.behindCount);
+}
+//# sourceMappingURL=stale-base-check.js.map

package/dist/cli/session-start/stale-base-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stale-base-check.js","sourceRoot":"","sources":["../../../src/cli/session-start/stale-base-check.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,oEAAoE;AACpE,uCAAuC;AACvC,EAAE;AACF,wEAAwE;AACxE,uEAAuE;AACvE,yEAAyE;AACzE,0EAA0E;AAC1E,uEAAuE;AACvE,oBAAoB;AACpB,qEAAqE;AACrE,mEAAmE;AACnE,wEAAwE;AACxE,gBAAgB;AAChB,oEAAoE;AACpE,uEAAuE;AACvE,sEAAsE;AACtE,sEAAsE;AACtE,qEAAqE;AACrE,0DAA0D;AAC1D,EAAE;AACF,8CAA8C;AAC9C,qEAAqE;AACrE,mBAAmB;AACnB,wEAAwE;AACxE,uEAAuE;AACvE,0EAA0E;AAC1E,yEAAyE;AACzE,uEAAuE;AACvE,yEAAyE;AACzE,6DAA6D;AAC7D,wEAAwE;AACxE,0EAA0E;AAC1E,wEAAwE;AACxE,oBAAoB;AACpB,yDAAyD;AACzD,0EAA0E;AAC1E,qEAAqE;AACrE,uBAAuB;AACvB,2DAA2D;AAC3D,uEAAuE;AACvE,sEAAsE;AACtE,+DAA+D;AAC/D,uEAAuE;AACvE,kEAAkE;AAClE,kEAAkE;AAClE,+DAA+D;AAC/D,uEAAuE;AACvE,qEAAqE;AACrE,EAAE;AACF,qEAAqE;AACrE,qEAAqE;AACrE,mDAAmD;AACnD,wEAAwE;AACxE,kEAAkE;AAClE,uEAAuE;AACvE,uEAAuE;AACvE,4DAA4D;AAC5D,iEAAiE;AACjE,0EAA0E;AAC1E,mEAAmE;AACnE,yEAAyE;AACzE,iEAAiE;AACjE,kCAAkC;AAClC,EAAE;AACF,qEAAqE;AACrE,0DAA0D;AAC1D,qEAAqE;AACrE,qEAAqE;AACrE,+DAA+D;AAC/D,qDAAqD;AACrD,yEAAyE;AACzE,yEAAyE;AACzE,6DAA6D;AAC7D,yEAAyE;AACzE,yEAAyE;AACzE,sEAAsE;AACtE,iEAAiE;AACjE,uEAAuE;AACvE,uEAAuE;AACvE,kDAAkD;AAClD,EAAE;AACF,yCAAyC;AACzC,wEAAwE;AACxE,2EAA2E;AAC3E,mEAAmE;AACnE,uEAAuE;AACvE,yEAAyE;AACzE,wEAAwE;AACxE,uEAAuE;AACvE,wEAAwE;AACxE,qEAAqE;AACrE,YAAY;AACZ,EAAE;AACF,uEAAuE;AACvE,qEAAqE;AACrE,yEAAyE;AACzE,mEAAmE;AACnE,uEAAuE;AACvE,mEAAmE;AACnE,uEAAuE;AACvE,yEAAyE;AAEzE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EACL,oBAAoB,GAErB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,MAAM,gBAAgB,GAAG,SAAS,CAAC;AACnC,MAAM,aAAa,GAAG,wCAAwC,CAAC;AAC/D,MAAM,cAAc,GAAG,QAAQ,CAAC;AAChC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAQvC,KAAK,UAAU,SAAS,CAAC,MAA6B;IACpD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AAmCD;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,IAAc,EAAE,GAAW,EAAE,SAAiB;IAC7D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,QAAQ,CACN,KAAK,EACL,IAAI,EACJ,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EACzE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACtB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;YAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YACD,MAAM,CAAC,GAAG,GAAmD,CAAC;YAC9D,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxB,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAChE,OAAO;YACT,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;gBACb,OAAO,CAAC;oBACN,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,SAAS,sCAAsC;iBACrG,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACzE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;YACrF,OAAO,CAAC;gBACN,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,GAAG,GAAG,EAAE;aACjG,CAAC,CAAC;QACL,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,kBAAkB,CAAC,IAAwB;IAClD,wBAAwB,CACtB,8BAA8B,EAC9B,yFAAyF;QACvF,wFAAwF;QACxF,qFAAqF,CACxF,CAAC;IACF,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC/D,OAAO,CAAC,KAAK,IAAmC,EAAE;QAChD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QACjG,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAE1D,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,CAAC,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,MAAM,eAAe,CAAC,EACjE,GAAG,EACH,SAAS,CACV,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uEAAuE,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;QACxH,CAAC;QACD,IAAI,WAAW,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;QAEpE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,YAAY,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QAC7F,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,8DAA8D;YAC9D,sCAAsC;YACtC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;QAC/C,CAAC;QACD,MAAM,CAAC,SAAS,EAAE,qBAAqB,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClE,OAAO;YACL,EAAE,EAAE,IAAI;YACR,UAAU;YACV,WAAW;YACX,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC;IACJ,CAAC,CAAC,EAAE,CAAC;AACP,CAAC;AAmDD,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAA0C,EAAE;IAE5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;QACjC,MAAM,CAAC,KAAK,CAAC,2CAA2C,GAAG,IAAI,CAAC,CAAC;IACnE,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CACX,KAAc,EACd,IAAY,EACZ,MAAc,EACd,SAAiB,EACjB,aAAgE,EAChE,MAAe,EACf,WAAoB,EACc,EAAE,CAAC,CAAC;QACtC,QAAQ,EAAE,CAAC;QACX,KAAK;QACL,IAAI;QACJ,MAAM;QACN,SAAS;QACT,aAAa;QACb,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC;QACjD,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;KACxC,CAAC,CAAC;IAEH,IAAI,KAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAsB,CAAC;IACnF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,yBAA0B,GAAa,CAAC,OAAO,EAAE,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,GAAG,GACP,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC,GAAG;QACV,CAAC,CAAC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;YACrD,CAAC,CAAC,KAAK,CAAC,GAAG;YACX,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAEtB,MAAM,QAAQ,GACZ,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QACzD,CAAC,CAAC,IAAI,CAAC,OAAO;QACd,CAAC,CAAC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;YACnE,CAAC,CAAC,KAAK,CAAC,UAAU;YAClB,CAAC,CAAC,SAAS,CAAC;IAClB,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,oBAAoB,CAAC;IACnE,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,aAAa,GACjB,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QACzD,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;YACnE,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,SAAS,KAAK,gBAAgB;gBAC9B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,QAAQ;oBACrD,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,SAAS,CAAC;oBACjD,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,QAAQ;wBAChD,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC;oBAChD,CAAC,CAAC,KAAK;oBACP,CAAC,CAAC,YAAY,CAAC;IAEzB,IAAI,QAAkB,CAAC;IACvB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,yBAA0B,GAAa,CAAC,OAAO,EAAE,CAAC;YACjE,IAAI,CAAC,MAAM,CAAC,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,gBAAgB,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GACV,2GAA2G,CAAC;QAC9G,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,sCAAsC,GAAG,qBAAqB,CAAC;QAC9E,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,oEAAoE,CAAC;QACpF,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,cAAc,CAAC;IAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,gBAAgB,IAAI,wBAAwB,CAAC;IAEtE,IAAI,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC;IAC1C,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,iEAAiE;QACjE,sEAAsE;QACtE,iEAAiE;QACjE,mEAAmE;QACnE,gEAAgE;QAChE,qEAAqE;QACrE,iEAAiE;QACjE,sEAAsE;QACtE,yDAAyD;QACzD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QACzC,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtG,CAAC;IACD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,MAAM,GACV,wFAAwF;YACxF,gBAAgB,MAAM,0EAA0E;YAChG,yBAAyB,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,aAAa,4CAA4C,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,kBAAkB,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACjF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,sEAAsE;QACtE,gEAAgE;QAChE,oEAAoE;QACpE,sDAAsD;QACtD,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,gFAAgF,CAAC,CAAC;QACvG,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,aAAa,EAAE,CAAC;IAC/C,IAAI,MAAM,CAAC,WAAW,KAAK,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC,wBAAwB,SAAS,iCAAiC,CAAC,CAAC;IAC3E,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,MAAM,CAAC,qBAAqB;YAC5C,CAAC,CAAC,kCAAkC,iBAAiB,CACjD,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CACtE,SAAS,MAAM,CAAC,qBAAqB,GAAG;YAC3C,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,2BAA2B,MAAM,CAAC,UAAU,+BAA+B,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7H,IAAI,CACF,kCAAkC,MAAM,CAAC,WAAW,qBAAqB,SAAS,GAAG,SAAS,GAAG,WAAW,IAAI;YAC9G,6DAA6D,SAAS,oCAAoC;YAC1G,8CAA8C,MAAM,kBAAkB,SAAS,kBAAkB;YACjG,8GAA8G,CACjH,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GACX,MAAM,CAAC,WAAW,KAAK,CAAC;QACtB,CAAC,CAAC,cAAc,IAAI,IAAI,MAAM,YAAY,SAAS,EAAE;QACrD,CAAC,CAAC,cAAc,IAAI,IAAI,MAAM,WAAW,MAAM,CAAC,WAAW,UAAU,MAAM,CAAC,UAAU,SAAS,SAAS,EAAE;YACxG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAElE,IAAI,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACnC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,QAAQ,GAAG,2BAA2B,CAAC,QAAQ,EAAE;YACrD,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzF,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,mBAAmB,OAAO,EAAE,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACzF,CAAC;QACD,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC/B,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IACjF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,wBAAwB,OAAO,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,YAAY,OAAO,gBAAgB,SAAS,EAAE,CAAC,CAAC;IACrD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CACF,iGAAiG;YAC/F,kGAAkG;YAClG,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;AAC3F,CAAC"}

package/dist/cli/session-start/toolchain-parity.d.ts

@@ -1,6 +1,15 @@
+import { type LedgerWriteFn } from "../../runtime/ledger-writer.js";
 import { type ResolveReadSessionOptions } from "../../runtime/session-id.js";
 import type { Manifest } from "../../schema/index.js";
 import { type LoaderOptions } from "../loader.js";
+/**
+ * Profile names land in a filename; strip anything not filename-safe.
+ * Exported (task 13919613) so `harness doctor`'s toolchain-parity section
+ * can resolve the SAME own-profile filename this producer would, without
+ * re-implementing the sanitization rule. Pure export, no behaviour change
+ * to any call site in this module.
+ */
+export declare function sanitizeProfileName(value: string): string;
 /**
  * The toolchain snapshot v1 content (task brief §"Snapshot-Inhalt v1").
  * Every collected field is optional: a collection failure (spawn missing/
@@ -58,6 +67,116 @@ export type CollectNpmGlobalsResult = {
     ok: false;
     reason: string;
 };
+/**
+ * Hermetic guard (mirrors `realNpmExec` in src/cli/doctor/npm-bin-path.ts):
+ * asserts BEFORE touching `child_process` that we are not running under
+ * vitest without a test having injected `runNodeVersion`. This function has
+ * no try/catch around the assertion, and its only caller,
+ * `collectLocalSnapshot`, calls it (via the `runNodeVersion` param, defaulted
+ * to this function in `runSessionStartToolchainParity`) with no surrounding
+ * try/catch either — see src/runtime/hermetic-spawn-guard.ts for why that
+ * matters (a thrown `HermeticSpawnViolationError` must propagate, not be
+ * folded into an ordinary "collection failed" outcome).
+ *
+ * PATH-resolved deliberately: `execFile("node", ...)` does a PATH lookup for
+ * the literal string "node", NOT `process.execPath` — the entire point of
+ * this collector is capturing the PATH state of the *shell* the session
+ * runs in (the PATH-shim incident this task follows up on was exactly a
+ * PATH pointing at the wrong node), which `process.version` (the node
+ * running THIS harness process) would silently paper over.
+ *
+ * Exported (task 13919613) so `harness doctor`'s toolchain-parity section
+ * can default its own `runNodeVersion` injection knob to the SAME real
+ * collector this producer uses — the whole point of the reuse is that
+ * doctor never re-implements this spawn/parse logic. No behaviour change:
+ * this is the exact function every existing call site already used.
+ */
+export declare function realNodeVersionSpawn(timeoutMs: number): Promise<CollectNodeVersionResult>;
+/**
+ * Hermetic guard, same shape/rationale as {@link realNodeVersionSpawn} —
+ * see that function's doc. Tolerant of a non-zero exit the same way
+ * `spawnPreflight` (session-start/index.ts) is tolerant of `preflight run`'s
+ * exit code: `npm ls -g` can exit non-zero on an unrelated extraneous/
+ * invalid global entry while still emitting a perfectly parseable
+ * `dependencies` JSON block, so a parseable stdout wins over the exit code.
+ *
+ * Exported (task 13919613) for the same reuse reason as
+ * {@link realNodeVersionSpawn} — `harness doctor`'s toolchain-parity
+ * section defaults to this real collector rather than duplicating it.
+ */
+export declare function realNpmGlobalsSpawn(timeoutMs: number): Promise<CollectNpmGlobalsResult>;
+/**
+ * Read `<workspaceRoot>/.ai/workflow/manifest.json`'s `version` field
+ * (the orchestrator-workflow kit's own version marker). A missing file is
+ * the expected common case (most repos are not OW-kit-managed) and is
+ * NOT an error — it degrades silently to `{}`. Malformed JSON or a
+ * non-string `version` field on a manifest that DOES exist is noteworthy
+ * (something is there but broken), so that degrades to `{ error }`.
+ *
+ * Exported (task 13919613) for the same reuse reason as
+ * {@link realNodeVersionSpawn}.
+ */
+export declare function realReadOwKitVersion(workspaceRoot: string): {
+    version?: string;
+    error?: string;
+};
+/**
+ * MCP server names from Claude Code's user-scope registry — a pure FILE
+ * READ (never a spawn), reusing the exact primitive `harness doctor`'s
+ * claude-mcp check ultimately compares against
+ * (`resolveClaudeUserRegistryPath` + `readTopLevelMcpServers` in
+ * src/io/claude-mcp.ts — the same functions `adopt`/`detect` use for the
+ * same "read the effective registration from outside io/claude-mcp.ts"
+ * purpose). Deliberately NOT `claude mcp list` (a spawn): the brief calls
+ * for a file-read source for the NAMES here, and this is it.
+ *
+ * Exported (task 13919613) for the same reuse reason as
+ * {@link realNodeVersionSpawn}.
+ */
+export declare function realReadMcpServerNames(): {
+    names: string[];
+    error?: string;
+};
+/**
+ * Exported (task 13919613) so `harness doctor`'s toolchain-parity section
+ * can call {@link collectLocalSnapshot} directly instead of duplicating
+ * its orchestration of the four collectors.
+ */
+export interface CollectLocalSnapshotOptions {
+    profile: string;
+    now: Date;
+    workspaceRoot: string;
+    nodeTimeoutMs: number;
+    npmTimeoutMs: number;
+    runNodeVersion: (timeoutMs: number) => Promise<CollectNodeVersionResult>;
+    runNpmGlobals: (timeoutMs: number) => Promise<CollectNpmGlobalsResult>;
+    readOwKitVersion: (workspaceRoot: string) => {
+        version?: string;
+        error?: string;
+    };
+    readMcpServerNames: () => {
+        names: string[];
+        error?: string;
+    };
+}
+/**
+ * Collect the local, LIVE toolchain snapshot. Never throws (every
+ * collector above degrades to `{ok:false,reason}` / `{error}` instead of
+ * rejecting/throwing) — a collection failure is reported both inline on
+ * the returned snapshot (the matching `*Error` field) AND as a `notes`
+ * line for the caller to log, but never stops the other collectors from
+ * running. node/npm run in PARALLEL (see the timeout constants' comment
+ * above for why).
+ *
+ * Exported (task 13919613): `harness doctor`'s toolchain-parity section
+ * imports this directly as its Collector core — see that module's header
+ * for the reuse rationale. No behaviour change to this function or any
+ * existing call site.
+ */
+export declare function collectLocalSnapshot(opts: CollectLocalSnapshotOptions): Promise<{
+    snapshot: ToolchainSnapshot;
+    notes: string[];
+}>;
 export type DriftKind = "node" | "ow_kit" | "npm_package_version" | "npm_package_missing_local" | "npm_package_missing_peer" | "mcp_missing_local" | "mcp_missing_peer";
 export interface DriftItem {
     kind: DriftKind;
@@ -104,14 +223,7 @@ export interface SessionStartToolchainParityOptions extends LoaderOptions {
     /** Inject a manifest (tests). Bypasses loadManifest. */
     manifest?: Manifest;
     /** Inject the ledger writer (tests). */
-    writeLedger?: (args: {
-        sessionId: string;
-        content: string;
-        source: string;
-    }) => Promise<{
-        ok: boolean;
-        reason?: string;
-    }>;
+    writeLedger?: LedgerWriteFn;
     /** Inject the read-path session resolver (env + transcript discovery). Test seam. */
     resolveSession?: (explicit: string | undefined, opts: ResolveReadSessionOptions) => string;
     /** Inject the `node --version` collector (tests) — see realNodeVersionSpawn's doc. */
@@ -140,10 +252,32 @@ export interface SessionStartToolchainParityResult {
     peersCompared: number;
     /** Total drift items found across every compared peer. */
     driftCount: number;
+    /**
+     * Peer files present in the machine-state directory that failed to parse
+     * as valid JSON (readable but not JSON, or JSON that fails the minimal
+     * `profile`/`timestamp` shape check) and were therefore excluded from
+     * `driftCount`/`peersCompared`. A non-zero count here means `driftCount`
+     * reflects a PARTIAL comparison, not a full one — see the
+     * `:unparseable-peer:<n>` ledger-content suffix this drives.
+     *
+     * The contrapositive does NOT hold: peers whose file could not be READ
+     * at all (EACCES, EISDIR, ...) are skipped by the unreadable branch and
+     * are not counted here, so the absence of the suffix does not prove a
+     * complete comparison. That branch is scoped to the follow-up hardening
+     * round (task c1b5ade5).
+     */
+    unparseablePeerCount: number;
     /** Resolved session id. */
     sessionId: string;
     sessionSource: "flag" | "stdin" | "env" | "transcript" | "default";
     /** Human-readable explanation of a non-write outcome, for diagnostics. */
     reason?: string;
 }
+/**
+ * Exported (task 13919613) so `harness doctor`'s toolchain-parity section
+ * resolves the SAME default machine-state directory this producer writes
+ * to when `toolchain_parity.machine_state_dir` is omitted from the
+ * manifest — reusing the constant instead of re-deriving it.
+ */
+export declare function defaultMachineStateDir(): string;
 export declare function runSessionStartToolchainParity(opts?: SessionStartToolchainParityOptions): Promise<SessionStartToolchainParityResult>;