@lannguyensi/harness 0.50.0 → 0.52.0

package/dist/policy-packs/builtin/understanding-before-execution/delegation-markers.js

@@ -0,0 +1,633 @@
+// Signed DELEGATION markers for `claude -p` child sessions: slice 3 of
+// docs/decisions/2026-08-27-ug-auto-mode-approval.md ("Delegation marker
+// shape", "TTL, cwd, and subagents", "Audit and doctor").
+//
+// A delegation is a PRE-AUTHORIZATION, not an approval. It is key one of
+// the ADR's two-key design: the parent, already approved, hands the child
+// session a signed artifact that supplies the trusted signal and the
+// parent linkage. Key two (the child's own Understanding Report) is
+// checked elsewhere; nothing in this module ever opens a gate on its own.
+//
+// WHY ITS OWN DIRECTORY AND ITS OWN VERIFIER. The file lives at
+// `<generatedDir>/.delegations/<child-sid>`, never in `.approvals/`:
+// keeping pre-authorizations out of the approvals directory keeps every
+// existing marker scan and the doctor `approvedBy`-prefix listing free of
+// artifacts that never opened a gate. `checkApprovalMarker` cannot consume
+// a delegation anyway: the signature is computed over the markerId
+// `delegation-<child-sid>`, so a delegation copied onto `.approvals/<sid>`
+// fails that reader's signature check exactly like a forgery, and an
+// approval marker copied into `.delegations/` fails this module's check
+// for the mirror-image reason. Both directions are pinned by
+// tests/policy-packs/understanding-before-execution-delegation.test.ts.
+//
+// WHY EVERY BINDING TRAVELS INSIDE `approvedBy`. The signing primitive
+// signs exactly the tuple (markerId, approvedAt, approvedBy,
+// reportContentHash) (src/runtime/approval-signing.ts), and adding a
+// signed field would change `canonicalPayload`, which under that module's
+// strict no-migration precedent means a `SIGNING_ALG` bump and forced
+// re-approval on every install. So the delegation packs parent, cwd, task
+// and expiry into `approvedBy`, the one free-text field inside the signed
+// tuple:
+//
+//   delegated:<parent-sid>;cwd=<sha256|->;task=<id|->;expires=<iso>[;report=<sha256>]
+//
+// All of it is therefore tamper-evident with no schema change. The cwd is
+// hashed rather than written literally so the file carries no machine
+// path. `approvedAt` records ISSUE time only, never the expiry:
+// `verifyMarkerSignature` rejects a marker with a missing/empty
+// `approvedAt` before it computes any HMAC, so the field must be there,
+// and the marker readers keep no `expiresAt` field for anything to
+// enforce, which is exactly why the lifetime rides in the `expires`
+// segment above and why this module ships its own verifier.
+//
+// FAIL CLOSED THROUGHOUT. Every refusal in `verifyDelegation` carries a
+// distinct reason; no branch turns a missing, malformed, unparseable or
+// unbound delegation into an `ok` result. `parseDelegationApprovedBy`
+// never fills in a default for an absent segment: a delegation whose
+// bindings cannot be read in full is not a delegation.
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { atomicWriteFile } from "../../../io/atomic-write.js";
+import { readRegularFileRejectingSymlink } from "../../../io/read-regular-file.js";
+import { safeJsonParse } from "../../../io/safe-json-parse.js";
+import { sha256Hex, signMarker, signingKeyExists, signingKeyPathFor, verifyMarkerSignature, } from "../../../runtime/approval-signing.js";
+import { rejectMalformedSessionId } from "../../../runtime/reject-malformed-session-id.js";
+/** Directory holding delegation markers, a sibling of `.approvals/` under `generatedDir`. */
+export const DELEGATION_MARKER_DIRNAME = ".delegations";
+/** Prefix of the signed markerId, mirroring `task-<id>` for task markers. */
+const DELEGATION_MARKER_ID_PREFIX = "delegation-";
+/** The `approvedBy` segment carrying the parent linkage. Colon-separated, unlike the `key=value` segments after it. */
+const DELEGATED_SEGMENT_PREFIX = "delegated:";
+/** Literal written for a binding the delegation deliberately leaves open (`cwd=-`, `task=-`). */
+const UNBOUND = "-";
+const SHA256_HEX = /^[0-9a-f]{64}$/;
+// Control characters (including NUL and DEL) are rejected from the parent
+// linkage in both directions: the writer refuses to encode one and the
+// reader refuses to accept one it finds, mirroring `;`/`=`.
+const CONTROL_CHARS = /[\x00-\x1f\x7f]/;
+// Deliberately narrower than `Date.parse`, which accepts plenty of
+// non-ISO input ("March 3 2026") and, worse, timezone-less strings whose
+// meaning depends on the reader's local zone. An expiry must mean the
+// same instant in the parent's process and in the child's.
+const ISO_INSTANT = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,9})?(?:Z|[+-]\d{2}:\d{2})$/;
+/**
+ * The signed markerId for a child session: `delegation-<child-sid>`.
+ * Binding it into the signed payload is what stops a validly signed
+ * delegation from being copied onto another child id, or onto a session
+ * marker's id, and still verifying (`task-markers.ts` precedent).
+ */
+export function delegationMarkerIdFor(childSessionId) {
+    return `${DELEGATION_MARKER_ID_PREFIX}${childSessionId}`;
+}
+/**
+ * Filesystem path of a child session's delegation marker. Rejects a
+ * malformed session id the same way `approvalMarkerPathFor` does (the
+ * value lands in a `path.join` verbatim).
+ */
+export function delegationMarkerPathFor(generatedDir, childSessionId) {
+    rejectMalformedSessionId(childSessionId);
+    return path.join(generatedDir, DELEGATION_MARKER_DIRNAME, childSessionId);
+}
+/**
+ * sha256 hex of a filesystem path, canonicalized through `realpathSync`
+ * when the path exists and through `path.resolve` when it does not.
+ *
+ * The canonicalization is the point, not an optimization: the parent
+ * writing the delegation and the child reporting its cwd routinely spell
+ * the same directory differently (on macOS `os.tmpdir()` hands out
+ * `/var/folders/...` while the process reports `/private/var/folders/...`,
+ * because `/var` is a symlink), and an uncanonicalized comparison would
+ * refuse a perfectly legitimate delegation. Falling back to `resolve` for
+ * a non-existent path keeps the function total: a path that cannot be
+ * canonicalized still hashes deterministically, and a delegation bound to
+ * it simply will not match a cwd that resolves elsewhere.
+ *
+ * Named for its primary use; the fallback shape hashes the launcher-
+ * supplied report file's PATH with the same function, so that WHERE the
+ * parent put the report is part of what was signed.
+ */
+export function hashDelegationCwd(targetPath) {
+    let canonical;
+    try {
+        canonical = fs.realpathSync(targetPath);
+    }
+    catch {
+        canonical = path.resolve(targetPath);
+    }
+    return sha256Hex(canonical);
+}
+function rejectUnsafeSegmentValue(field, value) {
+    if (value.length === 0) {
+        throw new Error(`${field} is empty`);
+    }
+    if (value.includes(";") || value.includes("=")) {
+        throw new Error(`${field} contains a delegation-segment delimiter (";" or "="): ${JSON.stringify(value)}`);
+    }
+}
+function rejectNonSha256(field, value) {
+    if (!SHA256_HEX.test(value)) {
+        throw new Error(`${field} is not a sha256 hex digest: ${JSON.stringify(value)}`);
+    }
+}
+function rejectNonIsoInstant(field, value) {
+    if (!ISO_INSTANT.test(value) || !Number.isFinite(Date.parse(value))) {
+        throw new Error(`${field} is not an ISO-8601 instant: ${JSON.stringify(value)}`);
+    }
+}
+/**
+ * Build the `approvedBy` string a delegation signs:
+ * `delegated:<parent>;cwd=<sha256|->;task=<id|->;expires=<iso>` plus
+ * `;report=<sha256>` in the fallback shape.
+ *
+ * Throws on any input that would corrupt the encoding (an empty value, a
+ * value carrying a `;` or `=` delimiter or a control character, a
+ * malformed parent session id (`rejectMalformedSessionId`), a cwd/report
+ * hash that is not a sha256 digest, a non-ISO expiry, or the literal `-`
+ * as a task id, which would round-trip as "no task bound"). A silently
+ * mis-encoded delegation would be signed and then read back with
+ * different bindings than the caller intended, so this fails loudly at
+ * the only place that can still tell the difference.
+ */
+export function buildDelegationApprovedBy(fields) {
+    const { parentSessionId, cwdHash, taskId, expiresAt, reportPathHash } = fields;
+    // Same shape check the CHILD session id already gets in
+    // `delegationMarkerPathFor`: the parent id never reaches a `path.join`
+    // here, but it is still a session id, and a value carrying `/`, `\`, or
+    // `..` has no business inside a signed audit field either.
+    rejectMalformedSessionId(parentSessionId);
+    rejectUnsafeSegmentValue("parentSessionId", parentSessionId);
+    if (CONTROL_CHARS.test(parentSessionId)) {
+        throw new Error(`parentSessionId contains a control character: ${JSON.stringify(parentSessionId)}`);
+    }
+    if (cwdHash !== null)
+        rejectNonSha256("cwdHash", cwdHash);
+    if (taskId !== null) {
+        rejectUnsafeSegmentValue("taskId", taskId);
+        if (taskId === UNBOUND) {
+            throw new Error(`taskId is the reserved unbound literal ${JSON.stringify(UNBOUND)}`);
+        }
+    }
+    rejectNonIsoInstant("expiresAt", expiresAt);
+    if (reportPathHash !== undefined)
+        rejectNonSha256("reportPathHash", reportPathHash);
+    const segments = [
+        `${DELEGATED_SEGMENT_PREFIX}${parentSessionId}`,
+        `cwd=${cwdHash ?? UNBOUND}`,
+        `task=${taskId ?? UNBOUND}`,
+        `expires=${expiresAt}`,
+    ];
+    if (reportPathHash !== undefined) {
+        segments.push(`report=${reportPathHash}`);
+    }
+    return segments.join(";");
+}
+/**
+ * Strict inverse of {@link buildDelegationApprovedBy}. All four of
+ * `delegated`, `cwd`, `task` and `expires` are required and `report` is
+ * optional; a missing, duplicated, unknown, empty or malformed segment is
+ * an error RESULT, never a default. Segment order is not enforced (the
+ * signature already pins the exact bytes), but every other deviation is
+ * refused: this string is the only place a delegation's bindings live, so
+ * "read it partially and assume the rest" is the one failure mode that
+ * would quietly widen a delegation past what the parent signed.
+ */
+export function parseDelegationApprovedBy(approvedBy) {
+    if (typeof approvedBy !== "string" || approvedBy.length === 0) {
+        return {
+            ok: false,
+            reason: `approvedBy is not a non-empty string (got ${typeof approvedBy})`,
+        };
+    }
+    let parentSessionId;
+    let cwdRaw;
+    let taskRaw;
+    let expiresRaw;
+    let reportRaw;
+    for (const segment of approvedBy.split(";")) {
+        if (segment.startsWith(DELEGATED_SEGMENT_PREFIX)) {
+            if (parentSessionId !== undefined) {
+                return { ok: false, reason: `duplicate "delegated" segment` };
+            }
+            const value = segment.slice(DELEGATED_SEGMENT_PREFIX.length);
+            if (value.length === 0) {
+                return { ok: false, reason: `empty value for segment "delegated"` };
+            }
+            // Mirror of the writer's checks (`buildDelegationApprovedBy`): the
+            // reader must never accept a parent linkage the writer could not
+            // have produced. `;` cannot survive the `split(";")` above without
+            // becoming a second, unrecognized segment, but `=` and control
+            // characters can, so they are checked explicitly here.
+            if (value.includes("=") || CONTROL_CHARS.test(value)) {
+                return {
+                    ok: false,
+                    reason: `"delegated" value contains "=" or a control character: ${JSON.stringify(value)}`,
+                };
+            }
+            try {
+                rejectMalformedSessionId(value);
+            }
+            catch (err) {
+                return {
+                    ok: false,
+                    reason: `"delegated" value is not a well-formed session id: ${err instanceof Error ? err.message : String(err)}`,
+                };
+            }
+            parentSessionId = value;
+            continue;
+        }
+        const eq = segment.indexOf("=");
+        if (eq <= 0) {
+            return { ok: false, reason: `unrecognized delegation segment ${JSON.stringify(segment)}` };
+        }
+        const key = segment.slice(0, eq);
+        const value = segment.slice(eq + 1);
+        if (value.length === 0) {
+            return { ok: false, reason: `empty value for segment ${JSON.stringify(key)}` };
+        }
+        switch (key) {
+            case "cwd":
+                if (cwdRaw !== undefined)
+                    return { ok: false, reason: `duplicate "cwd" segment` };
+                cwdRaw = value;
+                break;
+            case "task":
+                if (taskRaw !== undefined)
+                    return { ok: false, reason: `duplicate "task" segment` };
+                taskRaw = value;
+                break;
+            case "expires":
+                if (expiresRaw !== undefined)
+                    return { ok: false, reason: `duplicate "expires" segment` };
+                expiresRaw = value;
+                break;
+            case "report":
+                if (reportRaw !== undefined)
+                    return { ok: false, reason: `duplicate "report" segment` };
+                reportRaw = value;
+                break;
+            default:
+                return { ok: false, reason: `unknown delegation segment key ${JSON.stringify(key)}` };
+        }
+    }
+    if (parentSessionId === undefined)
+        return { ok: false, reason: `missing "delegated" segment` };
+    if (cwdRaw === undefined)
+        return { ok: false, reason: `missing "cwd" segment` };
+    if (taskRaw === undefined)
+        return { ok: false, reason: `missing "task" segment` };
+    if (expiresRaw === undefined)
+        return { ok: false, reason: `missing "expires" segment` };
+    let cwdHash = null;
+    if (cwdRaw !== UNBOUND) {
+        if (!SHA256_HEX.test(cwdRaw)) {
+            return { ok: false, reason: `"cwd" is not a sha256 hex digest: ${JSON.stringify(cwdRaw)}` };
+        }
+        cwdHash = cwdRaw;
+    }
+    let taskId = null;
+    if (taskRaw !== UNBOUND) {
+        if (taskRaw.includes("=")) {
+            return { ok: false, reason: `"task" contains a segment delimiter: ${JSON.stringify(taskRaw)}` };
+        }
+        taskId = taskRaw;
+    }
+    if (!ISO_INSTANT.test(expiresRaw) || !Number.isFinite(Date.parse(expiresRaw))) {
+        return {
+            ok: false,
+            reason: `"expires" is not an ISO-8601 instant: ${JSON.stringify(expiresRaw)}`,
+        };
+    }
+    if (reportRaw !== undefined && !SHA256_HEX.test(reportRaw)) {
+        return { ok: false, reason: `"report" is not a sha256 hex digest: ${JSON.stringify(reportRaw)}` };
+    }
+    const value = {
+        parentSessionId,
+        cwdHash,
+        taskId,
+        expiresAt: expiresRaw,
+        ...(reportRaw !== undefined ? { reportPathHash: reportRaw } : {}),
+    };
+    return { ok: true, value };
+}
+/**
+ * Write a signed delegation marker through the shared `signMarker` path,
+ * under markerId `delegation-<child-sid>`, at
+ * `<generatedDir>/.delegations/<child-sid>`. Atomic and mode 0600, like
+ * every other marker write.
+ *
+ * NEVER CREATES THE SIGNING KEY. `signMarker` -> `getOrCreateSigningKey`
+ * treats a missing key as a case to REPAIR, generating one and signing
+ * with it; key creation is an operator-side act (`harness init`,
+ * `harness approve`), and a delegation minted on a machine that never had
+ * a key would be a marker signed by whoever asked for it. So this
+ * prechecks `signingKeyExists` and returns `signing-key-absent` without
+ * reaching the write path at all (ADR threat model (b) item 5, the same
+ * rule slice 1's auto path follows).
+ *
+ * Returns a result rather than throwing, for every failure mode: the
+ * callers are a CLI verb and, later, a hook, and both must fail closed
+ * with a diagnostic instead of unwinding.
+ *
+ * Deliberately does NOT refuse a delegation that binds neither cwd nor
+ * task. That refusal belongs to the issuing verb (ADR slice 3 acceptance
+ * criterion 1) and to `verifyDelegation`, which reports `no_binding`;
+ * keeping the writer able to produce one is what lets the test suite
+ * exercise that verifier branch against a genuinely signed artifact
+ * rather than a hand-rolled fake.
+ */
+export function writeDelegationMarker(opts) {
+    const reportPathHash = opts.reportPathHash;
+    const reportContentHash = opts.reportContentHash ?? null;
+    if ((reportPathHash === undefined) !== (reportContentHash === null)) {
+        // The fallback shape binds the launcher-supplied report by BOTH its
+        // path and its content. Half a binding is worse than none: a `report=`
+        // segment with no content hash, or a content hash with no `report=`
+        // segment, reads as "bound" to a human and enforces only one half.
+        return {
+            ok: false,
+            reason: "invalid-input",
+            detail: "the fallback shape requires reportPathHash AND reportContentHash together (one without the other would leave half the report binding unenforced)",
+        };
+    }
+    if (reportContentHash !== null) {
+        try {
+            rejectNonSha256("reportContentHash", reportContentHash);
+        }
+        catch (err) {
+            return {
+                ok: false,
+                reason: "invalid-input",
+                detail: err instanceof Error ? err.message : String(err),
+            };
+        }
+    }
+    let filePath;
+    let approvedBy;
+    try {
+        filePath = delegationMarkerPathFor(opts.generatedDir, opts.childSessionId);
+        approvedBy = buildDelegationApprovedBy({
+            parentSessionId: opts.parentSessionId,
+            cwdHash: opts.cwdHash,
+            taskId: opts.taskId,
+            expiresAt: opts.expiresAt,
+            reportPathHash,
+        });
+    }
+    catch (err) {
+        return {
+            ok: false,
+            reason: "invalid-input",
+            detail: err instanceof Error ? err.message : String(err),
+        };
+    }
+    if (!signingKeyExists(opts.generatedDir)) {
+        return {
+            ok: false,
+            reason: "signing-key-absent",
+            detail: `no operator signing key at ${signingKeyPathFor(opts.generatedDir)}; refusing to mint a delegation (key creation is an operator-side act, never a side effect of delegating)`,
+        };
+    }
+    const approvedAt = (opts.now ?? new Date()).toISOString();
+    const markerId = delegationMarkerIdFor(opts.childSessionId);
+    const signed = signMarker(opts.generatedDir, markerId, {
+        approvedAt,
+        approvedBy,
+        reportContentHash,
+    });
+    try {
+        atomicWriteFile(filePath, `${JSON.stringify(signed, null, 2)}\n`, { mode: 0o600 });
+    }
+    catch (err) {
+        return {
+            ok: false,
+            reason: "write-failed",
+            detail: err instanceof Error ? err.message : String(err),
+        };
+    }
+    return { ok: true, filePath, markerId, approvedAt, approvedBy };
+}
+/**
+ * Gate-side: is there a valid, unexpired, matching delegation for this
+ * child session? Checks, in order (ADR slice 3 acceptance criterion 2):
+ *
+ *   1. the file is present and JSON-readable,
+ *   2. its signature verifies against markerId `delegation-<child-sid>`,
+ *   3. its `approvedBy` segments parse in full,
+ *   4. it binds at least one of cwd / task,
+ *   5. it has not expired,
+ *   6. the bound cwd hash-matches the caller's cwd,
+ *   7. the bound task equals the caller's task,
+ *   8. in the fallback shape, the launcher report sits at the bound path
+ *      AND hashes to the bound content.
+ *
+ * Reads only `.delegations/`; an artifact in `.approvals/` is `missing`
+ * here, whatever it contains.
+ *
+ * NEVER CREATES THE SIGNING KEY, on the READ path either.
+ * `verifyMarkerSignature` obtains the key through
+ * `getOrCreateSigningKey`, which treats a missing key as a case to
+ * REPAIR and generates one; on a machine the operator never initialized
+ * that would make a mere gate-time read perform the operator-side act of
+ * minting the key. It cannot make a foreign-signed delegation verify, but
+ * it does leave a key behind that every LATER write path would then
+ * happily sign with, so the never-create rule applies here exactly as it
+ * does to `writeDelegationMarker` and to slice 1's auto path. An absent
+ * key is reported as `unreadable` (we could not check, not "we checked
+ * and it is a forgery"), the same class `verifyMarkerSignature`'s own
+ * `key-unavailable` lands in below.
+ */
+export function verifyDelegation(opts) {
+    const { generatedDir, childSessionId } = opts;
+    let filePath;
+    try {
+        filePath = delegationMarkerPathFor(generatedDir, childSessionId);
+    }
+    catch (err) {
+        // A session id that cannot name a file has no delegation, by
+        // construction. Fail closed here rather than throwing out of a hook.
+        return {
+            ok: false,
+            reason: "missing",
+            detail: `invalid childSessionId for delegation marker: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+    const read = readRegularFileRejectingSymlink(filePath);
+    if (read.kind === "missing") {
+        return { ok: false, reason: "missing", detail: `no delegation marker at ${filePath}` };
+    }
+    if (read.kind === "symlink") {
+        return {
+            ok: false,
+            reason: "unreadable",
+            detail: `delegation marker is a symlink, refusing for safety: ${filePath}`,
+        };
+    }
+    if (read.kind === "not-regular") {
+        return {
+            ok: false,
+            reason: "unreadable",
+            detail: `delegation marker path is not a regular file: ${filePath}`,
+        };
+    }
+    if (read.kind === "unreadable") {
+        return {
+            ok: false,
+            reason: "unreadable",
+            detail: `delegation marker at ${filePath} exists but could not be read (I/O error); treating as no delegation since its signature cannot be verified`,
+        };
+    }
+    const parsed = safeJsonParse(read.content);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        return {
+            ok: false,
+            reason: "forged",
+            detail: `forged/unsigned delegation rejected: body at ${filePath} is not a JSON object`,
+        };
+    }
+    const body = parsed;
+    // Key precheck BEFORE `verifyMarkerSignature`, which would otherwise
+    // mint the key it is supposed to require (see the doc comment above).
+    // Placed after the file read so a session with no delegation at all
+    // still reports `missing` rather than this stronger, misleading reason.
+    if (!signingKeyExists(generatedDir)) {
+        return {
+            ok: false,
+            reason: "unreadable",
+            detail: `signing key absent at ${signingKeyPathFor(generatedDir)}; the delegation at ${filePath} cannot be verified and no key is created to verify it (key creation is an operator-side act)`,
+        };
+    }
+    const markerId = delegationMarkerIdFor(childSessionId);
+    const verification = verifyMarkerSignature(generatedDir, markerId, body);
+    if (!verification.ok) {
+        if (verification.kind === "key-unavailable") {
+            // Fail-closed I/O problem, not evidence of tampering (the same
+            // distinction `checkApprovalMarker` draws).
+            return {
+                ok: false,
+                reason: "unreadable",
+                detail: `delegation at ${filePath} could not be verified: ${verification.reason}`,
+            };
+        }
+        return {
+            ok: false,
+            reason: "forged",
+            detail: `forged/unsigned delegation rejected: ${verification.reason} (${filePath})`,
+        };
+    }
+    const segments = parseDelegationApprovedBy(body["approvedBy"]);
+    if (!segments.ok) {
+        return {
+            ok: false,
+            reason: "unparseable",
+            detail: `delegation at ${filePath} has an unparseable approvedBy: ${segments.reason}`,
+        };
+    }
+    const { parentSessionId, cwdHash, taskId, expiresAt, reportPathHash } = segments.value;
+    if (cwdHash === null && taskId === null) {
+        return {
+            ok: false,
+            reason: "no_binding",
+            detail: `delegation at ${filePath} binds neither a cwd nor a task; refusing an unbound pre-authorization`,
+        };
+    }
+    const nowMs = (opts.now ?? new Date()).getTime();
+    const expiresMs = Date.parse(expiresAt);
+    // `nowMs` is caller-supplied (`opts.now`, a test-only override); an
+    // invalid Date's `.getTime()` is NaN, and NaN fails every `<=`
+    // comparison, which would otherwise fail this check OPEN (a clock that
+    // cannot report the time would silently pass every delegation as
+    // unexpired). Fail closed instead: an unusable clock is treated the same
+    // as an already-expired one.
+    if (!Number.isFinite(nowMs) || expiresMs <= nowMs) {
+        return {
+            ok: false,
+            reason: "expired",
+            detail: Number.isFinite(nowMs)
+                ? `delegation at ${filePath} expired at ${expiresAt} (now ${new Date(nowMs).toISOString()})`
+                : `delegation at ${filePath} cannot be checked for expiry: the supplied clock is unusable (now getTime() => ${nowMs})`,
+        };
+    }
+    if (cwdHash !== null) {
+        if (opts.cwd === null) {
+            return {
+                ok: false,
+                reason: "cwd_mismatch",
+                detail: `delegation at ${filePath} is bound to a cwd but the caller supplied none`,
+            };
+        }
+        const actual = hashDelegationCwd(opts.cwd);
+        if (actual !== cwdHash) {
+            return {
+                ok: false,
+                reason: "cwd_mismatch",
+                detail: `delegation at ${filePath} is bound to a different cwd (bound ${cwdHash}, got ${actual} for ${opts.cwd})`,
+            };
+        }
+    }
+    if (taskId !== null) {
+        if (opts.taskId === null) {
+            return {
+                ok: false,
+                reason: "task_mismatch",
+                detail: `delegation at ${filePath} is bound to task ${taskId} but the caller supplied none`,
+            };
+        }
+        if (opts.taskId !== taskId) {
+            return {
+                ok: false,
+                reason: "task_mismatch",
+                detail: `delegation at ${filePath} is bound to task ${taskId}, not ${opts.taskId}`,
+            };
+        }
+    }
+    if (reportPathHash !== undefined) {
+        if (opts.launcherReportPath === undefined) {
+            return {
+                ok: false,
+                reason: "report_path_mismatch",
+                detail: `delegation at ${filePath} binds a launcher-supplied report but no report path was offered`,
+            };
+        }
+        const actualPathHash = hashDelegationCwd(opts.launcherReportPath);
+        if (actualPathHash !== reportPathHash) {
+            return {
+                ok: false,
+                reason: "report_path_mismatch",
+                detail: `delegation at ${filePath} binds a report at a different path (bound ${reportPathHash}, got ${actualPathHash} for ${opts.launcherReportPath})`,
+            };
+        }
+        const boundContentHash = typeof body["reportContentHash"] === "string" ? body["reportContentHash"] : null;
+        if (boundContentHash === null) {
+            return {
+                ok: false,
+                reason: "report_content_mismatch",
+                detail: `delegation at ${filePath} carries a report path binding but no reportContentHash to check the file against`,
+            };
+        }
+        const reportRead = readRegularFileRejectingSymlink(opts.launcherReportPath);
+        if (reportRead.kind !== "ok") {
+            return {
+                ok: false,
+                reason: "report_content_mismatch",
+                detail: `launcher-supplied report at ${opts.launcherReportPath} could not be read (${reportRead.kind}); its content cannot be checked against the bound hash`,
+            };
+        }
+        const actualContentHash = sha256Hex(reportRead.content);
+        if (actualContentHash !== boundContentHash) {
+            return {
+                ok: false,
+                reason: "report_content_mismatch",
+                detail: `launcher-supplied report at ${opts.launcherReportPath} does not match the bound content hash (bound ${boundContentHash}, got ${actualContentHash})`,
+            };
+        }
+    }
+    return {
+        ok: true,
+        parentSessionId,
+        expiresAt,
+        boundCwdHash: cwdHash,
+        boundTaskId: taskId,
+        ...(reportPathHash !== undefined ? { reportPathHash } : {}),
+    };
+}
+//# sourceMappingURL=delegation-markers.js.map

package/dist/policy-packs/builtin/understanding-before-execution/delegation-markers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-markers.js","sourceRoot":"","sources":["../../../../src/policy-packs/builtin/understanding-before-execution/delegation-markers.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,yEAAyE;AACzE,0DAA0D;AAC1D,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,qEAAqE;AACrE,oEAAoE;AACpE,0EAA0E;AAC1E,EAAE;AACF,gEAAgE;AAChE,qEAAqE;AACrE,wEAAwE;AACxE,0EAA0E;AAC1E,2EAA2E;AAC3E,mEAAmE;AACnE,2EAA2E;AAC3E,qEAAqE;AACrE,wEAAwE;AACxE,6DAA6D;AAC7D,wEAAwE;AACxE,EAAE;AACF,uEAAuE;AACvE,6DAA6D;AAC7D,qEAAqE;AACrE,0EAA0E;AAC1E,sEAAsE;AACtE,0EAA0E;AAC1E,0EAA0E;AAC1E,SAAS;AACT,EAAE;AACF,sFAAsF;AACtF,EAAE;AACF,0EAA0E;AAC1E,sEAAsE;AACtE,gEAAgE;AAChE,gEAAgE;AAChE,wEAAwE;AACxE,mEAAmE;AACnE,oEAAoE;AACpE,4DAA4D;AAC5D,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,sEAAsE;AACtE,qEAAqE;AACrE,uDAAuD;AAEvD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EACL,SAAS,EACT,UAAU,EACV,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAE3F,6FAA6F;AAC7F,MAAM,CAAC,MAAM,yBAAyB,GAAG,cAAc,CAAC;AAExD,6EAA6E;AAC7E,MAAM,2BAA2B,GAAG,aAAa,CAAC;AAElD,uHAAuH;AACvH,MAAM,wBAAwB,GAAG,YAAY,CAAC;AAE9C,iGAAiG;AACjG,MAAM,OAAO,GAAG,GAAG,CAAC;AAEpB,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAEpC,0EAA0E;AAC1E,uEAAuE;AACvE,4DAA4D;AAC5D,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAExC,mEAAmE;AACnE,yEAAyE;AACzE,sEAAsE;AACtE,2DAA2D;AAC3D,MAAM,WAAW,GAAG,0EAA0E,CAAC;AAE/F;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,cAAsB;IAC1D,OAAO,GAAG,2BAA2B,GAAG,cAAc,EAAE,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,YAAoB,EAAE,cAAsB;IAClF,wBAAwB,CAAC,cAAc,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,yBAAyB,EAAE,cAAc,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC;AAC9B,CAAC;AAeD,SAAS,wBAAwB,CAAC,KAAa,EAAE,KAAa;IAC5D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,WAAW,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,0DAA0D,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAC1F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,KAAa;IACnD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa,EAAE,KAAa;IACvD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAkC;IAC1E,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC;IAC/E,wDAAwD;IACxD,uEAAuE;IACvE,wEAAwE;IACxE,2DAA2D;IAC3D,wBAAwB,CAAC,eAAe,CAAC,CAAC;IAC1C,wBAAwB,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC;IAC7D,IAAI,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,iDAAiD,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,CACnF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,IAAI;QAAE,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IACD,mBAAmB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC5C,IAAI,cAAc,KAAK,SAAS;QAAE,eAAe,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IAEpF,MAAM,QAAQ,GAAG;QACf,GAAG,wBAAwB,GAAG,eAAe,EAAE;QAC/C,OAAO,OAAO,IAAI,OAAO,EAAE;QAC3B,QAAQ,MAAM,IAAI,OAAO,EAAE;QAC3B,WAAW,SAAS,EAAE;KACvB,CAAC;IACF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC,UAAU,cAAc,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAkBD;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CAAC,UAAmB;IAC3D,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,6CAA6C,OAAO,UAAU,GAAG;SAC1E,CAAC;IACJ,CAAC;IAED,IAAI,eAAmC,CAAC;IACxC,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAA2B,CAAC;IAChC,IAAI,UAA8B,CAAC;IACnC,IAAI,SAA6B,CAAC;IAElC,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,CAAC;YACjD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;gBAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;YAChE,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;YAC7D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;YACtE,CAAC;YACD,mEAAmE;YACnE,iEAAiE;YACjE,mEAAmE;YACnE,+DAA+D;YAC/D,uDAAuD;YACvD,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,0DAA0D,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;iBAC1F,CAAC;YACJ,CAAC;YACD,IAAI,CAAC;gBACH,wBAAwB,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,sDACN,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE;iBACH,CAAC;YACJ,CAAC;YACD,eAAe,GAAG,KAAK,CAAC;YACxB,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAC7F,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACjF,CAAC;QACD,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,KAAK;gBACR,IAAI,MAAM,KAAK,SAAS;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;gBAClF,MAAM,GAAG,KAAK,CAAC;gBACf,MAAM;YACR,KAAK,MAAM;gBACT,IAAI,OAAO,KAAK,SAAS;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;gBACpF,OAAO,GAAG,KAAK,CAAC;gBAChB,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,UAAU,KAAK,SAAS;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;gBAC1F,UAAU,GAAG,KAAK,CAAC;gBACnB,MAAM;YACR,KAAK,QAAQ;gBACX,IAAI,SAAS,KAAK,SAAS;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;gBACxF,SAAS,GAAG,KAAK,CAAC;gBAClB,MAAM;YACR;gBACE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QAC1F,CAAC;IACH,CAAC;IAED,IAAI,eAAe,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IAC/F,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAChF,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAClF,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAExF,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAC9F,CAAC;QACD,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IAED,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAClG,CAAC;QACD,MAAM,GAAG,OAAO,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAC9E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,yCAAyC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE;SAC9E,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;IACpG,CAAC;IAED,MAAM,KAAK,GAA+B;QACxC,eAAe;QACf,OAAO;QACP,MAAM;QACN,SAAS,EAAE,UAAU;QACrB,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AA8BD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAkC;IACtE,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;IAC3C,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC;IACzD,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,KAAK,CAAC,iBAAiB,KAAK,IAAI,CAAC,EAAE,CAAC;QACpE,oEAAoE;QACpE,uEAAuE;QACvE,oEAAoE;QACpE,mEAAmE;QACnE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,eAAe;YACvB,MAAM,EACJ,kJAAkJ;SACrJ,CAAC;IACJ,CAAC;IACD,IAAI,iBAAiB,KAAK,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,eAAe,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACzD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,QAAgB,CAAC;IACrB,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3E,UAAU,GAAG,yBAAyB,CAAC;YACrC,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,cAAc;SACf,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,eAAe;YACvB,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACzD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,oBAAoB;YAC5B,MAAM,EAAE,8BAA8B,iBAAiB,CACrD,IAAI,CAAC,YAAY,CAClB,2GAA2G;SAC7G,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE;QACrD,UAAU;QACV,UAAU;QACV,iBAAiB;KAClB,CAAC,CAAC;IACH,IAAI,CAAC;QACH,eAAe,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACzD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AAClE,CAAC;AAmDD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA6B;IAC5D,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IAE9C,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,uBAAuB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,6DAA6D;QAC7D,qEAAqE;QACrE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,iDACN,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE;SACH,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,+BAA+B,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,2BAA2B,QAAQ,EAAE,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,wDAAwD,QAAQ,EAAE;SAC3E,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAChC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,iDAAiD,QAAQ,EAAE;SACpE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC/B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,wBAAwB,QAAQ,6GAA6G;SACtJ,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,gDAAgD,QAAQ,uBAAuB;SACxF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAiC,CAAC;IAE/C,qEAAqE;IACrE,sEAAsE;IACtE,oEAAoE;IACpE,wEAAwE;IACxE,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,yBAAyB,iBAAiB,CAChD,YAAY,CACb,uBAAuB,QAAQ,+FAA+F;SAChI,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,qBAAqB,CAAC,cAAc,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,qBAAqB,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IACzE,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,IAAI,YAAY,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC5C,+DAA+D;YAC/D,4CAA4C;YAC5C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE,iBAAiB,QAAQ,2BAA2B,YAAY,CAAC,MAAM,EAAE;aAClF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,wCAAwC,YAAY,CAAC,MAAM,KAAK,QAAQ,GAAG;SACpF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,yBAAyB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,iBAAiB,QAAQ,mCAAmC,QAAQ,CAAC,MAAM,EAAE;SACtF,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;IAEvF,IAAI,OAAO,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,iBAAiB,QAAQ,wEAAwE;SAC1G,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxC,oEAAoE;IACpE,+DAA+D;IAC/D,uEAAuE;IACvE,iEAAiE;IACjE,yEAAyE;IACzE,6BAA6B;IAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QAClD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAC5B,CAAC,CAAC,iBAAiB,QAAQ,eAAe,SAAS,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,GAAG;gBAC5F,CAAC,CAAC,iBAAiB,QAAQ,mFAAmF,KAAK,GAAG;SACzH,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;YACtB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,cAAc;gBACtB,MAAM,EAAE,iBAAiB,QAAQ,iDAAiD;aACnF,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,cAAc;gBACtB,MAAM,EAAE,iBAAiB,QAAQ,uCAAuC,OAAO,SAAS,MAAM,QAAQ,IAAI,CAAC,GAAG,GAAG;aAClH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,iBAAiB,QAAQ,qBAAqB,MAAM,+BAA+B;aAC5F,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,iBAAiB,QAAQ,qBAAqB,MAAM,SAAS,IAAI,CAAC,MAAM,EAAE;aACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,sBAAsB;gBAC9B,MAAM,EAAE,iBAAiB,QAAQ,kEAAkE;aACpG,CAAC;QACJ,CAAC;QACD,MAAM,cAAc,GAAG,iBAAiB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAClE,IAAI,cAAc,KAAK,cAAc,EAAE,CAAC;YACtC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,sBAAsB;gBAC9B,MAAM,EAAE,iBAAiB,QAAQ,8CAA8C,cAAc,SAAS,cAAc,QAAQ,IAAI,CAAC,kBAAkB,GAAG;aACvJ,CAAC;QACJ,CAAC;QACD,MAAM,gBAAgB,GACpB,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,mBAAmB,CAAY,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/F,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;YAC9B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,yBAAyB;gBACjC,MAAM,EAAE,iBAAiB,QAAQ,mFAAmF;aACrH,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,+BAA+B,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC5E,IAAI,UAAU,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC7B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,yBAAyB;gBACjC,MAAM,EAAE,+BAA+B,IAAI,CAAC,kBAAkB,uBAAuB,UAAU,CAAC,IAAI,yDAAyD;aAC9J,CAAC;QACJ,CAAC;QACD,MAAM,iBAAiB,GAAG,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,iBAAiB,KAAK,gBAAgB,EAAE,CAAC;YAC3C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,yBAAyB;gBACjC,MAAM,EAAE,+BAA+B,IAAI,CAAC,kBAAkB,iDAAiD,gBAAgB,SAAS,iBAAiB,GAAG;aAC7J,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,eAAe;QACf,SAAS;QACT,YAAY,EAAE,OAAO;QACrB,WAAW,EAAE,MAAM;QACnB,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC"}