@lannguyensi/harness 0.5.0

package/dist/io/last-apply.js

@@ -0,0 +1,123 @@
+// `.last-apply` tracker — records what harness wrote on the previous `apply`,
+// so the three-state comparator (see `three-state.ts`) can tell drift apart
+// from "no changes needed".
+//
+// Lives at `<generatedDir>/.last-apply`. Format is JSON:
+//   { files: { <relPath>: { sha256, content } } }
+// Atomic writes via `atomic-write.ts` (Phase 2 #1 contract).
+import * as crypto from "node:crypto";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { atomicWriteFile } from "./atomic-write.js";
+export const LAST_APPLY_BASENAME = ".last-apply";
+export function lastApplyPath(generatedDir) {
+    return path.join(generatedDir, LAST_APPLY_BASENAME);
+}
+export function sha256Hex(content) {
+    return crypto.createHash("sha256").update(content, "utf8").digest("hex");
+}
+export function buildLastApply(files) {
+    const out = { files: {} };
+    for (const [relPath, content] of Object.entries(files)) {
+        out.files[relPath] = { sha256: sha256Hex(content), content };
+    }
+    return out;
+}
+export function writeLastApply(generatedDir, record) {
+    const target = lastApplyPath(generatedDir);
+    // Stable key order so re-applying produces byte-identical .last-apply when
+    // nothing changed (helps `diff --since-apply` and code-review noise).
+    const sorted = { files: {} };
+    for (const key of Object.keys(record.files).sort()) {
+        const entry = record.files[key];
+        if (entry !== undefined)
+            sorted.files[key] = entry;
+    }
+    if (record.manifest !== undefined)
+        sorted.manifest = record.manifest;
+    if (record.memoryDirs !== undefined) {
+        const sortedDirs = {};
+        for (const dirKey of Object.keys(record.memoryDirs).sort()) {
+            const snap = record.memoryDirs[dirKey];
+            if (snap === undefined)
+                continue;
+            const sortedHashes = {};
+            for (const fileKey of Object.keys(snap.fileHashes).sort()) {
+                const h = snap.fileHashes[fileKey];
+                if (h !== undefined)
+                    sortedHashes[fileKey] = h;
+            }
+            sortedDirs[dirKey] = { sha256: snap.sha256, fileHashes: sortedHashes };
+        }
+        sorted.memoryDirs = sortedDirs;
+    }
+    atomicWriteFile(target, `${JSON.stringify(sorted, null, 2)}\n`);
+}
+export function readLastApply(generatedDir) {
+    const target = lastApplyPath(generatedDir);
+    if (!fs.existsSync(target))
+        return null;
+    const raw = fs.readFileSync(target, "utf8");
+    const parsed = JSON.parse(raw);
+    if (!isLastApplyRecord(parsed)) {
+        throw new Error(`malformed ${LAST_APPLY_BASENAME}: missing or invalid "files" map`);
+    }
+    return parsed;
+}
+// Recomputes content sha256 for each file in a record, returning the list of
+// relPaths whose stored sha disagrees. An empty list means the record is
+// internally consistent. Used by callers that want to defend against on-disk
+// corruption of the .last-apply file before treating it as authoritative.
+export function verifyLastApplyIntegrity(record) {
+    const mismatched = [];
+    for (const [relPath, entry] of Object.entries(record.files)) {
+        if (sha256Hex(entry.content) !== entry.sha256) {
+            mismatched.push(relPath);
+        }
+    }
+    return mismatched;
+}
+function isFileEntry(v) {
+    if (!v || typeof v !== "object")
+        return false;
+    const e = v;
+    return typeof e.sha256 === "string" && typeof e.content === "string";
+}
+function isMemoryDirSnapshot(v) {
+    if (!v || typeof v !== "object")
+        return false;
+    const s = v;
+    if (typeof s.sha256 !== "string")
+        return false;
+    if (!s.fileHashes || typeof s.fileHashes !== "object")
+        return false;
+    for (const h of Object.values(s.fileHashes)) {
+        if (typeof h !== "string")
+            return false;
+    }
+    return true;
+}
+function isLastApplyRecord(x) {
+    if (!x || typeof x !== "object")
+        return false;
+    const obj = x;
+    if (!obj.files || typeof obj.files !== "object")
+        return false;
+    for (const v of Object.values(obj.files)) {
+        if (!isFileEntry(v))
+            return false;
+    }
+    // Optional manifest snapshot: tolerate omission; reject malformed shape.
+    if (obj.manifest !== undefined && !isFileEntry(obj.manifest))
+        return false;
+    if (obj.memoryDirs !== undefined) {
+        if (typeof obj.memoryDirs !== "object" || obj.memoryDirs === null)
+            return false;
+        for (const v of Object.values(obj.memoryDirs)) {
+            if (!isMemoryDirSnapshot(v))
+                return false;
+        }
+    }
+    return true;
+}
+//# sourceMappingURL=last-apply.js.map

package/dist/io/last-apply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"last-apply.js","sourceRoot":"","sources":["../../src/io/last-apply.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,4EAA4E;AAC5E,4BAA4B;AAC5B,EAAE;AACF,yDAAyD;AACzD,kDAAkD;AAClD,6DAA6D;AAE7D,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AA8BpD,MAAM,CAAC,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAEjD,MAAM,UAAU,aAAa,CAAC,YAAoB;IAChD,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAA6B;IAC1D,MAAM,GAAG,GAAoB,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,YAAoB,EAAE,MAAuB;IAC1E,MAAM,MAAM,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IAC3C,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,MAAM,GAAoB,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACrD,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACrE,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,UAAU,GAAsC,EAAE,CAAC;QACzD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS;YACjC,MAAM,YAAY,GAA2B,EAAE,CAAC;YAChD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC1D,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACnC,IAAI,CAAC,KAAK,SAAS;oBAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjD,CAAC;YACD,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;QACzE,CAAC;QACD,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;IACjC,CAAC;IACD,eAAe,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,YAAoB;IAChD,MAAM,MAAM,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IAC1C,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,aAAa,mBAAmB,kCAAkC,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,6EAA6E;AAC7E,yEAAyE;AACzE,6EAA6E;AAC7E,0EAA0E;AAC1E,MAAM,UAAU,wBAAwB,CAAC,MAAuB;IAC9D,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,IAAI,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC9C,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,WAAW,CAAC,CAAU;IAC7B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,CAAC,GAAG,CAA4C,CAAC;IACvD,OAAO,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC;AACvE,CAAC;AAED,SAAS,mBAAmB,CAAC,CAAU;IACrC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,CAAC,GAAG,CAA+C,CAAC;IAC1D,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACpE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAqC,CAAC,EAAE,CAAC;QACvE,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAU;IACnC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,GAAG,GAAG,CAAkE,CAAC;IAC/E,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAgC,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACpC,CAAC;IACD,yEAAyE;IACzE,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3E,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAChF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAqC,CAAC,EAAE,CAAC;YACzE,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/io/lock.d.ts

@@ -0,0 +1,11 @@
+export interface LockOptions {
+    retries?: number;
+    minTimeoutMs?: number;
+    maxTimeoutMs?: number;
+    staleMs?: number;
+}
+export declare const DEFAULT_LOCK_RETRIES = 50;
+export declare const DEFAULT_LOCK_MIN_TIMEOUT_MS = 50;
+export declare const DEFAULT_LOCK_MAX_TIMEOUT_MS = 500;
+export declare const DEFAULT_LOCK_STALE_MS = 10000;
+export declare function withFileLock<T>(lockPath: string, fn: () => Promise<T> | T, options?: LockOptions): Promise<T>;

package/dist/io/lock.js

@@ -0,0 +1,33 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import lockfile from "proper-lockfile";
+export const DEFAULT_LOCK_RETRIES = 50;
+export const DEFAULT_LOCK_MIN_TIMEOUT_MS = 50;
+export const DEFAULT_LOCK_MAX_TIMEOUT_MS = 500;
+export const DEFAULT_LOCK_STALE_MS = 10_000;
+export async function withFileLock(lockPath, fn, options = {}) {
+    ensureLockTarget(lockPath);
+    const release = await lockfile.lock(lockPath, {
+        retries: {
+            retries: options.retries ?? DEFAULT_LOCK_RETRIES,
+            minTimeout: options.minTimeoutMs ?? DEFAULT_LOCK_MIN_TIMEOUT_MS,
+            maxTimeout: options.maxTimeoutMs ?? DEFAULT_LOCK_MAX_TIMEOUT_MS,
+        },
+        stale: options.staleMs ?? DEFAULT_LOCK_STALE_MS,
+        realpath: false,
+    });
+    try {
+        return await fn();
+    }
+    finally {
+        await release();
+    }
+}
+function ensureLockTarget(lockPath) {
+    const dir = path.dirname(lockPath);
+    fs.mkdirSync(dir, { recursive: true });
+    if (!fs.existsSync(lockPath)) {
+        fs.writeFileSync(lockPath, "");
+    }
+}
+//# sourceMappingURL=lock.js.map

package/dist/io/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../src/io/lock.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,QAAQ,MAAM,iBAAiB,CAAC;AASvC,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AACvC,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAC9C,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAC/C,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,EAAwB,EACxB,UAAuB,EAAE;IAEzB,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE;QAC5C,OAAO,EAAE;YACP,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,oBAAoB;YAChD,UAAU,EAAE,OAAO,CAAC,YAAY,IAAI,2BAA2B;YAC/D,UAAU,EAAE,OAAO,CAAC,YAAY,IAAI,2BAA2B;SAChE;QACD,KAAK,EAAE,OAAO,CAAC,OAAO,IAAI,qBAAqB;QAC/C,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC;AACH,CAAC"}

package/dist/io/patch.d.ts

@@ -0,0 +1,10 @@
+export interface UnifiedDiffOptions {
+    fileName: string;
+    oldText: string;
+    newText: string;
+    oldHeader?: string;
+    newHeader?: string;
+    context?: number;
+}
+export declare function unifiedDiff(opts: UnifiedDiffOptions): string;
+export declare function isNoop(diff: string): boolean;

package/dist/io/patch.js

@@ -0,0 +1,8 @@
+import { createPatch } from "diff";
+export function unifiedDiff(opts) {
+    return createPatch(opts.fileName, opts.oldText, opts.newText, opts.oldHeader ?? "before", opts.newHeader ?? "after", { context: opts.context ?? 3 });
+}
+export function isNoop(diff) {
+    return !/^[+-](?!\+\+ |-- )/m.test(diff);
+}
+//# sourceMappingURL=patch.js.map

package/dist/io/patch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patch.js","sourceRoot":"","sources":["../../src/io/patch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAWnC,MAAM,UAAU,WAAW,CAAC,IAAwB;IAClD,OAAO,WAAW,CAChB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,SAAS,IAAI,QAAQ,EAC1B,IAAI,CAAC,SAAS,IAAI,OAAO,EACzB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE,CAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC"}

package/dist/io/restart-hints.d.ts

@@ -0,0 +1,5 @@
+import type { Manifest } from "../schema/index.js";
+export declare const RESTART_HINT_MCP = "mcp servers changed; /mcp reconnect required";
+export declare const RESTART_HINT_MEMORY_ROUTER = "memory router command changed; restart session for new hooks";
+export declare const RESTART_HINT_HOOKS = "hooks changed; restart session to reload settings.json";
+export declare function emitRestartHints(prev: Manifest, next: Manifest): string[];

package/dist/io/restart-hints.js

@@ -0,0 +1,59 @@
+// Restart hints emitter — pure function over a manifest delta.
+//
+// After `harness apply` mutates `harness.generated/`, the user (or AI agent)
+// usually has to perform a separate runtime action: reconnect MCP servers,
+// restart the session to pick up new hooks, etc. This module computes which
+// hints to print based on which manifest sections actually changed.
+//
+// Per ARCHITECTURE.md / ROADMAP Phase 3 acceptance:
+//   - mcp[]                changed → MCP-restart hint
+//   - memory.router.command changed → session-restart hint
+//   - hooks structure       changed → settings.json reload hint
+//   - description-only changes      → no hints (description is metadata)
+export const RESTART_HINT_MCP = "mcp servers changed; /mcp reconnect required";
+export const RESTART_HINT_MEMORY_ROUTER = "memory router command changed; restart session for new hooks";
+export const RESTART_HINT_HOOKS = "hooks changed; restart session to reload settings.json";
+function deepEqual(a, b) {
+    return JSON.stringify(canonicalize(a)) === JSON.stringify(canonicalize(b));
+}
+// Stable JSON canonicalisation: sort object keys recursively. Arrays keep
+// their order — for hooks/mcp the array order is meaningful.
+function canonicalize(value) {
+    if (Array.isArray(value))
+        return value.map(canonicalize);
+    if (value && typeof value === "object") {
+        const out = {};
+        for (const k of Object.keys(value).sort()) {
+            out[k] = canonicalize(value[k]);
+        }
+        return out;
+    }
+    return value;
+}
+function stripDescription(x) {
+    const { description: _ignored, ...rest } = x;
+    return rest;
+}
+function hooksMaterial(hooks) {
+    return hooks.map(stripDescription);
+}
+function policiesMaterial(policies) {
+    return policies.map(stripDescription);
+}
+export function emitRestartHints(prev, next) {
+    const hints = [];
+    if (!deepEqual(prev.tools.mcp, next.tools.mcp)) {
+        hints.push(RESTART_HINT_MCP);
+    }
+    const prevRouterCmd = prev.memory.router?.command ?? null;
+    const nextRouterCmd = next.memory.router?.command ?? null;
+    if (!deepEqual(prevRouterCmd, nextRouterCmd)) {
+        hints.push(RESTART_HINT_MEMORY_ROUTER);
+    }
+    if (!deepEqual(hooksMaterial(prev.hooks), hooksMaterial(next.hooks)) ||
+        !deepEqual(policiesMaterial(prev.policies), policiesMaterial(next.policies))) {
+        hints.push(RESTART_HINT_HOOKS);
+    }
+    return hints;
+}
+//# sourceMappingURL=restart-hints.js.map

package/dist/io/restart-hints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restart-hints.js","sourceRoot":"","sources":["../../src/io/restart-hints.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,4EAA4E;AAC5E,oEAAoE;AACpE,EAAE;AACF,oDAAoD;AACpD,sDAAsD;AACtD,2DAA2D;AAC3D,gEAAgE;AAChE,yEAAyE;AAIzE,MAAM,CAAC,MAAM,gBAAgB,GAC3B,8CAA8C,CAAC;AACjD,MAAM,CAAC,MAAM,0BAA0B,GACrC,8DAA8D,CAAC;AACjE,MAAM,CAAC,MAAM,kBAAkB,GAC7B,wDAAwD,CAAC;AAE3D,SAAS,SAAS,CAAC,CAAU,EAAE,CAAU;IACvC,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,0EAA0E;AAC1E,6DAA6D;AAC7D,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACrE,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAE,KAAiC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAsC,CAAI;IACjE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAkB;IAC1C,OAAO,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAc,EAAE,IAAc;IAC7D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC;IAC1D,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC;IAC1D,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,aAAa,CAAC,EAAE,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACzC,CAAC;IAED,IACE,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAC5E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/io/three-state.d.ts

@@ -0,0 +1,7 @@
+export type ThreeStateVerdict = "safe-overwrite" | "no-drift" | "drift-refuse";
+export interface ThreeStateInput {
+    manifestExpected: string;
+    lastApplied: string | null;
+    onDiskCurrent: string | null;
+}
+export declare function compare(input: ThreeStateInput): ThreeStateVerdict;

package/dist/io/three-state.js

@@ -0,0 +1,20 @@
+// Three-state comparator for `harness apply` per ARCHITECTURE.md §7.
+//
+// Given:
+//   - manifestExpected: what the file should look like, derived from the manifest
+//   - lastApplied:      what harness wrote on the previous apply (null on first run)
+//   - onDiskCurrent:    what the file currently contains on disk (null if absent)
+//
+// returns one of:
+//   - "safe-overwrite": no last-apply record, no on-disk file → write fresh
+//   - "no-drift":       last-apply present and matches on-disk → overwrite is safe
+//   - "drift-refuse":   either (a) on-disk exists but no last-apply, or
+//                              (b) last-apply present but on-disk differs (or is gone)
+export function compare(input) {
+    const { lastApplied, onDiskCurrent } = input;
+    if (lastApplied === null) {
+        return onDiskCurrent === null ? "safe-overwrite" : "drift-refuse";
+    }
+    return onDiskCurrent === lastApplied ? "no-drift" : "drift-refuse";
+}
+//# sourceMappingURL=three-state.js.map

package/dist/io/three-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"three-state.js","sourceRoot":"","sources":["../../src/io/three-state.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,SAAS;AACT,kFAAkF;AAClF,qFAAqF;AACrF,kFAAkF;AAClF,EAAE;AACF,kBAAkB;AAClB,4EAA4E;AAC5E,mFAAmF;AACnF,wEAAwE;AACxE,uFAAuF;AAUvF,MAAM,UAAU,OAAO,CAAC,KAAsB;IAC5C,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IAE7C,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc,CAAC;IACpE,CAAC;IAED,OAAO,aAAa,KAAK,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC;AACrE,CAAC"}

package/dist/io/validate-before-write.d.ts

@@ -0,0 +1,12 @@
+export type ValidationResult = {
+    ok: true;
+} | {
+    ok: false;
+    errors: ValidationError[];
+};
+export interface ValidationError {
+    path: string;
+    message: string;
+}
+export declare function validateBeforeWrite(proposedRaw: unknown): ValidationResult;
+export declare function formatValidationErrors(errors: ValidationError[]): string;

package/dist/io/validate-before-write.js

@@ -0,0 +1,23 @@
+import { ManifestParseError, parseManifest } from "../schema/index.js";
+export function validateBeforeWrite(proposedRaw) {
+    try {
+        parseManifest(proposedRaw);
+        return { ok: true };
+    }
+    catch (e) {
+        if (e instanceof ManifestParseError) {
+            return {
+                ok: false,
+                errors: e.issues.map((i) => ({
+                    path: i.path.length > 0 ? i.path.join(".") : "<root>",
+                    message: i.message,
+                })),
+            };
+        }
+        throw e;
+    }
+}
+export function formatValidationErrors(errors) {
+    return errors.map((e) => `  ${e.path}: ${e.message}`).join("\n");
+}
+//# sourceMappingURL=validate-before-write.js.map

package/dist/io/validate-before-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-before-write.js","sourceRoot":"","sources":["../../src/io/validate-before-write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAWvE,MAAM,UAAU,mBAAmB,CAAC,WAAoB;IACtD,IAAI,CAAC;QACH,aAAa,CAAC,WAAW,CAAC,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,kBAAkB,EAAE,CAAC;YACpC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC3B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ;oBACrD,OAAO,EAAE,CAAC,CAAC,OAAO;iBACnB,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAyB;IAC9D,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC"}

package/dist/overrides/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./merge.js";
+export * from "./machines.js";

package/dist/overrides/index.js

@@ -0,0 +1,3 @@
+export * from "./merge.js";
+export * from "./machines.js";
+//# sourceMappingURL=index.js.map

package/dist/overrides/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/overrides/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC"}

package/dist/overrides/machines.d.ts

@@ -0,0 +1,12 @@
+export type MachineOs = "linux" | "darwin" | "wsl2" | "win32" | "default";
+export interface MachineDiscriminators {
+    hostname: string;
+    os: MachineOs;
+}
+export interface DiscriminatorOptions {
+    hostname?: string;
+    platform?: NodeJS.Platform;
+    procVersionPath?: string;
+}
+export declare function resolveMachineDiscriminators(opts?: DiscriminatorOptions): MachineDiscriminators;
+export declare function machineOverrideCandidates(discriminators: MachineDiscriminators): string[];

package/dist/overrides/machines.js

@@ -0,0 +1,46 @@
+import * as fs from "node:fs";
+import * as os from "node:os";
+function detectWsl2(procVersionPath) {
+    try {
+        const contents = fs.readFileSync(procVersionPath, "utf8");
+        return /microsoft/i.test(contents);
+    }
+    catch {
+        return false;
+    }
+}
+export function resolveMachineDiscriminators(opts = {}) {
+    const platform = opts.platform ?? process.platform;
+    const procVersionPath = opts.procVersionPath ?? "/proc/version";
+    const hostname = (opts.hostname ?? os.hostname() ?? "").toLowerCase();
+    let osLabel;
+    if (platform === "linux" && detectWsl2(procVersionPath)) {
+        osLabel = "wsl2";
+    }
+    else if (platform === "linux") {
+        osLabel = "linux";
+    }
+    else if (platform === "darwin") {
+        osLabel = "darwin";
+    }
+    else if (platform === "win32") {
+        osLabel = "win32";
+    }
+    else {
+        osLabel = "default";
+    }
+    return { hostname, os: osLabel };
+}
+export function machineOverrideCandidates(discriminators) {
+    const candidates = ["default", discriminators.os];
+    if (discriminators.hostname)
+        candidates.push(discriminators.hostname);
+    const seen = new Set();
+    return candidates.filter((c) => {
+        if (seen.has(c))
+            return false;
+        seen.add(c);
+        return true;
+    });
+}
+//# sourceMappingURL=machines.js.map

package/dist/overrides/machines.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machines.js","sourceRoot":"","sources":["../../src/overrides/machines.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAe9B,SAAS,UAAU,CAAC,eAAuB;IACzC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC1D,OAAO,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAA6B,EAAE;IAE/B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC;IAChE,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAEtE,IAAI,OAAkB,CAAC;IACvB,IAAI,QAAQ,KAAK,OAAO,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACxD,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,GAAG,OAAO,CAAC;IACpB,CAAC;SAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,GAAG,QAAQ,CAAC;IACrB,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,GAAG,OAAO,CAAC;IACpB,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,cAAqC;IAErC,MAAM,UAAU,GAAa,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC;IAC5D,IAAI,cAAc,CAAC,QAAQ;QAAE,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/overrides/merge.d.ts

@@ -0,0 +1,6 @@
+export declare class OverrideMergeError extends Error {
+    readonly path: string[];
+    constructor(message: string, path: string[]);
+}
+export declare function mergeManifest(base: unknown, override: unknown): unknown;
+export declare function applyLayers(base: unknown, ...layers: Array<unknown | undefined>): unknown;

package/dist/overrides/merge.js

@@ -0,0 +1,173 @@
+export class OverrideMergeError extends Error {
+    path;
+    constructor(message, path) {
+        super(`override merge failed at ${formatPath(path)}: ${message}`);
+        this.path = path;
+        this.name = "OverrideMergeError";
+    }
+}
+function formatPath(path) {
+    return path.length === 0 ? "<root>" : path.join(".");
+}
+const TOMBSTONE = Symbol("override-tombstone");
+function isPlainObject(v) {
+    if (v === null || typeof v !== "object")
+        return false;
+    if (Array.isArray(v))
+        return false;
+    const proto = Object.getPrototypeOf(v);
+    return proto === Object.prototype || proto === null;
+}
+function isNameKeyedEntry(v) {
+    return isPlainObject(v) && typeof v.name === "string" && v.name.length > 0;
+}
+function classifyList(list, pathLabel, path) {
+    if (list.length === 0)
+        return "empty";
+    let named = 0;
+    let plain = 0;
+    for (const item of list) {
+        if (isNameKeyedEntry(item))
+            named++;
+        else
+            plain++;
+    }
+    if (named > 0 && plain > 0) {
+        throw new OverrideMergeError(`${pathLabel} list mixes entries that have a "name" field with entries that do not; lists must be uniformly name-keyed or not`, path);
+    }
+    return named > 0 ? "named" : "plain";
+}
+function deepClone(value) {
+    if (value === null || typeof value !== "object")
+        return value;
+    if (Array.isArray(value))
+        return value.map(deepClone);
+    if (isPlainObject(value)) {
+        const out = {};
+        for (const [k, v] of Object.entries(value))
+            out[k] = deepClone(v);
+        return out;
+    }
+    return value;
+}
+function mergeNamedList(base, override, path) {
+    const baseShape = classifyList(base, "base", path);
+    const overrideShape = classifyList(override, "override", path);
+    if (baseShape !== "empty" && overrideShape !== "empty" && baseShape !== overrideShape) {
+        throw new OverrideMergeError(`cannot merge override ${overrideShape}-list onto base ${baseShape}-list; declare the override as the same shape or omit it`, path);
+    }
+    if (overrideShape !== "named") {
+        if (overrideShape === "empty")
+            return [];
+        return override.map(deepClone);
+    }
+    const result = [];
+    const seenNames = new Set();
+    if (baseShape === "named") {
+        for (const baseEntry of base) {
+            const matching = override.find((o) => o.name === baseEntry.name);
+            if (!matching) {
+                result.push(deepClone(baseEntry));
+                seenNames.add(baseEntry.name);
+                continue;
+            }
+            seenNames.add(baseEntry.name);
+            if (matching._delete === true)
+                continue;
+            const merged = mergeValue(baseEntry, matching, [...path, baseEntry.name]);
+            if (merged === TOMBSTONE)
+                continue;
+            result.push(merged);
+        }
+    }
+    for (const overrideEntry of override) {
+        if (seenNames.has(overrideEntry.name))
+            continue;
+        if (overrideEntry._delete === true)
+            continue;
+        const cleaned = stripTombstones(overrideEntry, [...path, overrideEntry.name]);
+        if (cleaned === TOMBSTONE)
+            continue;
+        result.push(cleaned);
+    }
+    return result;
+}
+function stripTombstones(value, path) {
+    if (value === null)
+        return TOMBSTONE;
+    if (Array.isArray(value)) {
+        const result = [];
+        for (let i = 0; i < value.length; i++) {
+            const v = value[i];
+            const child = stripTombstones(v, [...path, String(i)]);
+            if (child === TOMBSTONE)
+                continue;
+            result.push(child);
+        }
+        return result;
+    }
+    if (isPlainObject(value)) {
+        const out = {};
+        for (const [k, v] of Object.entries(value)) {
+            if (k === "_delete")
+                continue;
+            const child = stripTombstones(v, [...path, k]);
+            if (child === TOMBSTONE)
+                continue;
+            out[k] = child;
+        }
+        return out;
+    }
+    return value;
+}
+function mergeValue(base, override, path) {
+    if (override === null)
+        return TOMBSTONE;
+    if (Array.isArray(override)) {
+        if (Array.isArray(base)) {
+            return mergeNamedList(base, override, path);
+        }
+        return stripTombstones(override, path);
+    }
+    if (isPlainObject(override)) {
+        if (!isPlainObject(base)) {
+            const cleaned = stripTombstones(override, path);
+            return cleaned === TOMBSTONE ? TOMBSTONE : cleaned;
+        }
+        const out = {};
+        for (const [k, v] of Object.entries(base))
+            out[k] = deepClone(v);
+        for (const [key, overrideChild] of Object.entries(override)) {
+            if (key === "_delete")
+                continue;
+            const baseChild = out[key];
+            const merged = mergeValue(baseChild, overrideChild, [...path, key]);
+            if (merged === TOMBSTONE) {
+                delete out[key];
+            }
+            else {
+                out[key] = merged;
+            }
+        }
+        return out;
+    }
+    return override;
+}
+export function mergeManifest(base, override) {
+    if (base === undefined)
+        return override;
+    if (override === undefined)
+        return base;
+    const result = mergeValue(base, override, []);
+    return result === TOMBSTONE ? undefined : result;
+}
+export function applyLayers(base, ...layers) {
+    let acc = base;
+    for (const layer of layers) {
+        if (layer === undefined)
+            continue;
+        acc = mergeManifest(acc, layer);
+    }
+    return acc;
+}
+//# sourceMappingURL=merge.js.map

package/dist/overrides/merge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge.js","sourceRoot":"","sources":["../../src/overrides/merge.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACE;IAA7C,YAAY,OAAe,EAAkB,IAAc;QACzD,KAAK,CAAC,4BAA4B,UAAU,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;QADvB,SAAI,GAAJ,IAAI,CAAU;QAEzD,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,SAAS,UAAU,CAAC,IAAc;IAChC,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,SAAS,GAAkB,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAG9D,SAAS,aAAa,CAAC,CAAU;IAC/B,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AACtD,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAU;IAClC,OAAO,aAAa,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,YAAY,CACnB,IAAe,EACf,SAAiB,EACjB,IAAc;IAEd,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACtC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,gBAAgB,CAAC,IAAI,CAAC;YAAE,KAAK,EAAE,CAAC;;YAC/B,KAAK,EAAE,CAAC;IACf,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,kBAAkB,CAC1B,GAAG,SAAS,kHAAkH,EAC9H,IAAI,CACL,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;AACvC,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAClE,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CACrB,IAAe,EACf,QAAmB,EACnB,IAAc;IAEd,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,YAAY,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IAE/D,IAAI,SAAS,KAAK,OAAO,IAAI,aAAa,KAAK,OAAO,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;QACtF,MAAM,IAAI,kBAAkB,CAC1B,yBAAyB,aAAa,mBAAmB,SAAS,0DAA0D,EAC5H,IAAI,CACL,CAAC;IACJ,CAAC;IAED,IAAI,aAAa,KAAK,OAAO,EAAE,CAAC;QAC9B,IAAI,aAAa,KAAK,OAAO;YAAE,OAAO,EAAE,CAAC;QACzC,OAAO,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,KAAK,MAAM,SAAS,IAAI,IAAyD,EAAE,CAAC;YAClF,MAAM,QAAQ,GAAI,QAA8D,CAAC,IAAI,CACnF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CACjC,CAAC;YACF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;gBAClC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC9B,SAAS;YACX,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI;gBAAE,SAAS;YACxC,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1E,IAAI,MAAM,KAAK,SAAS;gBAAE,SAAS;YACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,aAAa,IAAI,QAA6D,EAAE,CAAC;QAC1F,IAAI,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC;YAAE,SAAS;QAChD,IAAI,aAAa,CAAC,OAAO,KAAK,IAAI;YAAE,SAAS;QAC7C,MAAM,OAAO,GAAG,eAAe,CAAC,aAAa,EAAE,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9E,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,IAAc;IACrD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACnB,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvD,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,KAAK,SAAS;gBAAE,SAAS;YAC9B,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/C,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,IAAa,EAAE,QAAiB,EAAE,IAAc;IAClE,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAChD,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;QACrD,CAAC;QACD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QACjE,KAAK,MAAM,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5D,IAAI,GAAG,KAAK,SAAS;gBAAE,SAAS;YAChC,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3B,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,aAAa,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YACpE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;YACpB,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAa,EAAE,QAAiB;IAC5D,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACxC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC9C,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAa,EAAE,GAAG,MAAkC;IAC9E,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/policies/duration.d.ts

@@ -0,0 +1,5 @@
+export declare class InvalidDurationError extends Error {
+    readonly value: string;
+    constructor(value: string);
+}
+export declare function parseDurationSeconds(value: string): number;