@lannguyensi/harness 0.63.0 → 1.0.0

package/dist/runtime/git-branch.js

@@ -0,0 +1,381 @@
+// Branch reader for the branch-protection gate (task a4d8adc5).
+//
+// The gate asks git which branch a directory is on instead of parsing git's
+// files itself. A directory is read in two steps, both bounded
+// (`readBranchAt`):
+//
+//   1. Presence walk: from the directory, as it is given, up to the
+//      filesystem root, `lstat` an entry named `.git` (any type; nothing is
+//      opened or read). When no such entry exists anywhere above, the
+//      directory is outside every repository and git is not spawned at all.
+//   2. `git -C <dir> symbolic-ref -q HEAD` through `execFile` (no shell,
+//      stdin closed at once, each output stream capped), in the process
+//      environment minus every `GIT_*` variable (so a `GIT_DIR` or
+//      `GIT_WORK_TREE` inherited by the hook cannot point git at another
+//      repository) plus `LC_ALL=C`, `GIT_TERMINAL_PROMPT=0` and
+//      `GIT_OPTIONAL_LOCKS=0`. `HOME` stays, so the user's global git
+//      configuration (`safe.directory` and the like) applies exactly as it
+//      does to the agent's own git. A timeout ends the call with SIGKILL.
+//
+// git's answer is classified and never interpreted further: exit 0 with
+// `refs/heads/<name>` is a branch, exit 1 with nothing on stdout and nothing
+// on stderr is a detached HEAD (`symbolic-ref -q` prints nothing then), and
+// anything else (another exit, an exit 1 with any output, a signal, a
+// timeout, git missing, output past the cap, an exit-0 answer of another
+// shape) is an error carrying git's first stderr line. The caller decides
+// what an error means; the branch-protection hook refuses on every one.
+//
+// A path can name a directory in two ways, and the hook judges both:
+//
+//   - as written (`nearestExistingDirectoryAsWritten`): `.` and `..` are
+//     resolved on the text (`path.resolve`), symlinks stay in the path, and
+//     `readBranchAt` walks and asks git there;
+//   - physically (`nearestExistingDirectory`, `writeTargetDirectories`,
+//     `readBranch`): symlinks followed and `..` taken from the directory
+//     reached so far, the directory `git -C` changes into.
+//
+// Resolving the paths of one event is bounded by the caller (`PathResolution`)
+// and shares one cache of physical directories.
+//
+// The process runner is injectable (`GitHeadReader`) so tests can produce a
+// timeout, a signal or a missing binary without depending on the host.
+import { execFile } from "node:child_process";
+import * as fs from "node:fs";
+import * as path from "node:path";
+/** Bound on one git call; the child is killed with SIGKILL when it passes. */
+export const GIT_BRANCH_TIMEOUT_MS = 2000;
+/** Cap on each of git's output streams, in bytes. */
+export const GIT_OUTPUT_CAP_BYTES = 4096;
+/** Cap on the stderr line carried into a refusal, in characters. */
+export const GIT_STDERR_LINE_CAP = 200;
+/**
+ * The environment git runs in: the given environment without any variable
+ * whose name starts with `GIT_` (compared upper-cased), plus the three fixed
+ * settings. Everything else, `HOME` and `PATH` included, is kept.
+ */
+export function gitReaderEnv(base = process.env) {
+    const env = {};
+    for (const [key, value] of Object.entries(base)) {
+        if (key.toUpperCase().startsWith("GIT_"))
+            continue;
+        env[key] = value;
+    }
+    env["LC_ALL"] = "C";
+    env["GIT_TERMINAL_PROMPT"] = "0";
+    env["GIT_OPTIONAL_LOCKS"] = "0";
+    return env;
+}
+function decode(out) {
+    if (Buffer.isBuffer(out))
+        return out.toString("utf8");
+    return typeof out === "string" ? out : "";
+}
+/** The real reader: one `execFile` of git, never a shell. */
+export const readGitHead = (dir, timeoutMs) => new Promise((resolve) => {
+    let settled = false;
+    const finish = (answer) => {
+        if (settled)
+            return;
+        settled = true;
+        resolve(answer);
+    };
+    try {
+        const child = execFile("git", ["-C", dir, "symbolic-ref", "-q", "HEAD"], {
+            env: gitReaderEnv(),
+            encoding: "buffer",
+            maxBuffer: GIT_OUTPUT_CAP_BYTES,
+            timeout: timeoutMs,
+            killSignal: "SIGKILL",
+            windowsHide: true,
+            shell: false,
+        }, (err, stdout, stderr) => {
+            const out = decode(stdout);
+            const errText = decode(stderr);
+            if (err === null) {
+                finish({ kind: "exited", code: 0, stdout: out, stderr: errText });
+                return;
+            }
+            const code = err.code;
+            if (code === "ERR_CHILD_PROCESS_STDIO_MAXBUFFER") {
+                finish({ kind: "oversized", stderr: errText });
+            }
+            else if (typeof code === "number") {
+                finish({ kind: "exited", code, stdout: out, stderr: errText });
+            }
+            else if (err.killed === true) {
+                // execFile killed the child itself and the output cap is ruled
+                // out above, so its timer fired.
+                finish({ kind: "timed-out", timeoutMs, stderr: errText });
+            }
+            else if (typeof err.signal === "string" && err.signal.length > 0) {
+                finish({ kind: "signaled", signal: err.signal, stderr: errText });
+            }
+            else {
+                finish({ kind: "spawn-failed", code: typeof code === "string" ? code : "unknown" });
+            }
+        });
+        // stdin is closed at once: git never waits on it.
+        child.stdin?.on("error", () => undefined);
+        child.stdin?.end();
+    }
+    catch (err) {
+        const code = err.code;
+        finish({ kind: "spawn-failed", code: typeof code === "string" ? code : "unknown" });
+    }
+});
+/** First non-empty line of `text`, control characters replaced, capped. */
+export function firstLine(text) {
+    const line = text.split(/\r?\n/).find((l) => l.trim().length > 0) ?? "";
+    const clean = line.trim().replace(/[\u0000-\u001f\u007f-\u009f]/g, "?");
+    return clean.length > GIT_STDERR_LINE_CAP ? `${clean.slice(0, GIT_STDERR_LINE_CAP)}...` : clean;
+}
+function withLine(what, stderr) {
+    const line = firstLine(stderr);
+    return line.length > 0 ? `${what}: ${line}` : what;
+}
+const BRANCH_REF = /^refs\/heads\/([^\n\r\u0000]+)\n?$/;
+/** Classify one git answer. Never returns `outside`. */
+export function classifyGitHeadAnswer(answer) {
+    switch (answer.kind) {
+        case "exited": {
+            if (answer.code === 0) {
+                const m = BRANCH_REF.exec(answer.stdout);
+                if (m !== null)
+                    return { kind: "branch", name: m[1] };
+                return { kind: "error", detail: `unexpected output from git: "${firstLine(answer.stdout)}"` };
+            }
+            if (answer.code === 1 && answer.stdout === "" && answer.stderr === "")
+                return { kind: "detached" };
+            return { kind: "error", detail: withLine(`git exited ${answer.code}`, answer.stderr) };
+        }
+        case "signaled":
+            return { kind: "error", detail: withLine(`git was killed by ${answer.signal}`, answer.stderr) };
+        case "timed-out":
+            return { kind: "error", detail: withLine(`git did not answer within ${answer.timeoutMs} ms`, answer.stderr) };
+        case "oversized":
+            return { kind: "error", detail: withLine(`git's output passed ${GIT_OUTPUT_CAP_BYTES} bytes`, answer.stderr) };
+        case "spawn-failed":
+            return { kind: "error", detail: `git could not be started (${answer.code})` };
+    }
+}
+/**
+ * True when an entry named `.git` exists in `dir` or any directory above it.
+ * Only `lstat` is used, so the entry is never opened. An `lstat` that fails
+ * for another reason than a missing path counts as present: git decides.
+ * `dir` is walked as written (`..` taken on the text, symlinks left in
+ * place); `readBranch` passes the physical directory.
+ */
+export function hasGitEntryAbove(dir) {
+    let current = path.resolve(dir);
+    for (;;) {
+        try {
+            fs.lstatSync(path.join(current, ".git"));
+            return true;
+        }
+        catch (err) {
+            const code = err.code;
+            if (code !== "ENOENT" && code !== "ENOTDIR")
+                return true;
+        }
+        const parent = path.dirname(current);
+        if (parent === current)
+            return false;
+        current = parent;
+    }
+}
+/** Bound on the symlinks followed by their text for one target. */
+const MAX_LINK_HOPS = 32;
+/** Thrown when resolving the paths of one event passes the caller's bound. */
+export class PathBoundError extends Error {
+    constructor() {
+        super("resolving the paths passed the bound");
+        this.name = "PathBoundError";
+    }
+}
+function checkBound(res) {
+    if (res.overBound?.() === true)
+        throw new PathBoundError();
+}
+/** `p` made absolute against `base` without editing its text (`..` and symlinks stay for the filesystem). */
+export function absolutePath(p, base = process.cwd()) {
+    if (path.isAbsolute(p))
+        return p;
+    const b = path.isAbsolute(base) ? base : `${process.cwd()}${path.sep}${base}`;
+    return `${b}${path.sep}${p}`;
+}
+/** The root and the components of an absolute path, `..` kept, `.` and empty ones dropped. */
+function splitPath(p) {
+    const root = path.parse(p).root;
+    const separators = process.platform === "win32" ? /[\\/]+/ : /\/+/;
+    const parts = p
+        .slice(root.length)
+        .split(separators)
+        .filter((part) => part !== "" && part !== ".");
+    return { root, parts };
+}
+/** The physical path of `p` when it leads to an existing directory; null otherwise. */
+function physicalDirectory(p, res) {
+    const known = res.memo?.get(p);
+    if (known !== undefined)
+        return known;
+    let found;
+    try {
+        const real = fs.realpathSync.native(p);
+        found = fs.statSync(real).isDirectory() ? real : null;
+    }
+    catch {
+        found = null;
+    }
+    res.memo?.set(p, found);
+    return found;
+}
+/**
+ * Walk `parts` from `root` the way the operating system resolves a path:
+ * each existing component is resolved through the filesystem (symlinks
+ * followed), and `..` steps up from the directory reached so far. From the
+ * first component that is not an existing directory on, the rest is kept as
+ * text (a write may create it; a `..` there steps back over it). Returns the
+ * physical directory reached and how many components below it are missing.
+ */
+function walkPhysical(root, parts, res) {
+    let dir = physicalDirectory(root, res) ?? root;
+    const pending = [];
+    for (const part of parts) {
+        checkBound(res);
+        if (part === "..") {
+            if (pending.length > 0)
+                pending.pop();
+            else
+                dir = path.dirname(dir);
+            continue;
+        }
+        if (pending.length > 0) {
+            pending.push(part);
+            continue;
+        }
+        const next = physicalDirectory(path.join(dir, part), res);
+        if (next === null)
+            pending.push(part);
+        else
+            dir = next;
+    }
+    return { dir, missing: pending.length };
+}
+/**
+ * The nearest directory at or above `p` that exists (a Write may create the
+ * directories in between), as the operating system resolves `p`: through
+ * symlinks, with `..` taken from the directory reached so far. A path that
+ * cannot be examined counts as missing.
+ */
+export function nearestExistingDirectory(p, res = {}) {
+    const { root, parts } = splitPath(absolutePath(p));
+    return walkPhysical(root, parts, res).dir;
+}
+/**
+ * The nearest directory at or above `p` that exists, with `p` taken as
+ * written: made absolute and `.` and `..` resolved on the text
+ * (`path.resolve`), then shortened from the end until it names an existing
+ * directory. Symlinks stay in the result. A path that cannot be examined
+ * counts as missing.
+ */
+export function nearestExistingDirectoryAsWritten(p, res = {}) {
+    let current = path.resolve(p);
+    for (;;) {
+        checkBound(res);
+        try {
+            if (fs.statSync(current).isDirectory())
+                return current;
+        }
+        catch {
+            /* missing or not examinable: look one level up */
+        }
+        const parent = path.dirname(current);
+        if (parent === current)
+            return current;
+        current = parent;
+    }
+}
+function isSymlink(p) {
+    try {
+        return fs.lstatSync(p).isSymbolicLink();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The physical directories a write to `target` (relative to `cwd`) lands
+ * in: the nearest existing directory holding it and, when the target itself
+ * is a symlink, the directory it leads to as well (a write may replace the
+ * link or go through it). A link that does not resolve yet is followed by
+ * its text, up to a bound.
+ */
+export function writeTargetDirectories(target, cwd, res = {}) {
+    const dirs = [];
+    let next = absolutePath(target, cwd);
+    for (let hops = 0; next !== null && hops <= MAX_LINK_HOPS; hops += 1) {
+        checkBound(res);
+        const { root, parts } = splitPath(next);
+        next = null;
+        const name = parts[parts.length - 1];
+        if (name === undefined || name === "..") {
+            dirs.push(walkPhysical(root, parts, res).dir);
+            break;
+        }
+        const holder = walkPhysical(root, parts.slice(0, -1), res);
+        dirs.push(holder.dir);
+        if (holder.missing > 0)
+            break;
+        const entry = path.join(holder.dir, name);
+        if (!isSymlink(entry))
+            break;
+        try {
+            const real = fs.realpathSync.native(entry);
+            dirs.push(physicalDirectory(real, res) ?? path.dirname(real));
+        }
+        catch {
+            try {
+                next = absolutePath(fs.readlinkSync(entry), holder.dir);
+            }
+            catch {
+                next = null;
+            }
+        }
+    }
+    return [...new Set(dirs)];
+}
+/**
+ * Presence walk from `dir` as it is given (`..` taken on the text, symlinks
+ * left in place), then `git -C <dir>`. `dir` should be an existing absolute
+ * directory.
+ */
+export async function readBranchAt(dir, opts = {}) {
+    if (!hasGitEntryAbove(dir))
+        return { kind: "outside" };
+    const reader = opts.reader ?? readGitHead;
+    return classifyGitHeadAnswer(await reader(dir, opts.timeoutMs ?? GIT_BRANCH_TIMEOUT_MS));
+}
+/** The physical path of the directory `dir` (the one `git -C` changes into), or why it has none. */
+export function resolveDirectory(dir) {
+    let physical;
+    try {
+        physical = fs.realpathSync.native(dir);
+    }
+    catch (err) {
+        const code = err.code;
+        return { kind: "error", detail: `the directory could not be resolved (${typeof code === "string" ? code : "unknown"})` };
+    }
+    return { kind: "path", path: physical };
+}
+/**
+ * Presence walk, then git, both on the physical directory of `dir` (the one
+ * `git -C` changes into). `dir` should be an existing directory; one that
+ * cannot be resolved is an error.
+ */
+export async function readBranch(dir, opts = {}) {
+    const physical = resolveDirectory(dir);
+    if (physical.kind === "error")
+        return physical;
+    return readBranchAt(physical.path, opts);
+}
+//# sourceMappingURL=git-branch.js.map

package/dist/runtime/git-branch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-branch.js","sourceRoot":"","sources":["../../src/runtime/git-branch.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,EAAE;AACF,4EAA4E;AAC5E,+DAA+D;AAC/D,oBAAoB;AACpB,EAAE;AACF,oEAAoE;AACpE,4EAA4E;AAC5E,sEAAsE;AACtE,4EAA4E;AAC5E,yEAAyE;AACzE,wEAAwE;AACxE,mEAAmE;AACnE,yEAAyE;AACzE,gEAAgE;AAChE,sEAAsE;AACtE,2EAA2E;AAC3E,0EAA0E;AAC1E,EAAE;AACF,wEAAwE;AACxE,6EAA6E;AAC7E,4EAA4E;AAC5E,sEAAsE;AACtE,yEAAyE;AACzE,0EAA0E;AAC1E,wEAAwE;AACxE,EAAE;AACF,qEAAqE;AACrE,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,+CAA+C;AAC/C,wEAAwE;AACxE,yEAAyE;AACzE,2DAA2D;AAC3D,EAAE;AACF,+EAA+E;AAC/E,gDAAgD;AAChD,EAAE;AACF,4EAA4E;AAC5E,uEAAuE;AAEvE,OAAO,EAAE,QAAQ,EAA0B,MAAM,oBAAoB,CAAC;AACtE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAC1C,qDAAqD;AACrD,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AACzC,oEAAoE;AACpE,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAoBvC;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,OAA0B,OAAO,CAAC,GAAG;IAChE,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,SAAS;QACnD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC;IACpB,GAAG,CAAC,qBAAqB,CAAC,GAAG,GAAG,CAAC;IACjC,GAAG,CAAC,oBAAoB,CAAC,GAAG,GAAG,CAAC;IAChC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,MAAM,CAAC,GAAY;IAC1B,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtD,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,MAAM,WAAW,GAAkB,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAC3D,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;IACrC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,MAAM,GAAG,CAAC,MAAqB,EAAQ,EAAE;QAC7C,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,QAAQ,CACpB,KAAK,EACL,CAAC,IAAI,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,EACzC;YACE,GAAG,EAAE,YAAY,EAAE;YACnB,QAAQ,EAAE,QAAQ;YAClB,SAAS,EAAE,oBAAoB;YAC/B,OAAO,EAAE,SAAS;YAClB,UAAU,EAAE,SAAS;YACrB,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,KAAK;SACb,EACD,CAAC,GAA6B,EAAE,MAAe,EAAE,MAAe,EAAE,EAAE;YAClE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;gBAClE,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAa,GAA0B,CAAC,IAAI,CAAC;YACvD,IAAI,IAAI,KAAK,mCAAmC,EAAE,CAAC;gBACjD,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC;iBAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACjE,CAAC;iBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC/B,+DAA+D;gBAC/D,iCAAiC;gBACjC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5D,CAAC;iBAAM,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnE,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YACtF,CAAC;QACH,CAAC,CACF,CAAC;QACF,kDAAkD;QAClD,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1C,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAa,GAA0B,CAAC,IAAI,CAAC;QACvD,MAAM,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,2EAA2E;AAC3E,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACxE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,+BAA+B,EAAE,GAAG,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;AAClG,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc;IAC5C,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,GAAG,oCAAoC,CAAC;AAExD,wDAAwD;AACxD,MAAM,UAAU,qBAAqB,CAAC,MAAqB;IACzD,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACzC,IAAI,CAAC,KAAK,IAAI;oBAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC;gBACvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,gCAAgC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAChG,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;gBAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;YACnG,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,cAAc,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACzF,CAAC;QACD,KAAK,UAAU;YACb,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,qBAAqB,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAClG,KAAK,WAAW;YACd,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,6BAA6B,MAAM,CAAC,SAAS,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAChH,KAAK,WAAW;YACd,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,uBAAuB,oBAAoB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACjH,KAAK,cAAc;YACjB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,6BAA6B,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IAClF,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,SAAS,CAAC;QACR,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;QAC3D,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACrC,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,8EAA8E;AAC9E,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC;QACE,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAcD,SAAS,UAAU,CAAC,GAAmB;IACrC,IAAI,GAAG,CAAC,SAAS,EAAE,EAAE,KAAK,IAAI;QAAE,MAAM,IAAI,cAAc,EAAE,CAAC;AAC7D,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,YAAY,CAAC,CAAS,EAAE,OAAe,OAAO,CAAC,GAAG,EAAE;IAClE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,IAAI,EAAE,CAAC;IAC9E,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;AAC/B,CAAC;AAED,8FAA8F;AAC9F,SAAS,SAAS,CAAC,CAAS;IAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChC,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;IACnE,MAAM,KAAK,GAAG,CAAC;SACZ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;SAClB,KAAK,CAAC,UAAU,CAAC;SACjB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC;IACjD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACzB,CAAC;AAED,uFAAuF;AACvF,SAAS,iBAAiB,CAAC,CAAS,EAAE,GAAmB;IACvD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,KAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvC,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IACD,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,IAAY,EAAE,KAAwB,EAAE,GAAmB;IAC/E,IAAI,GAAG,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC;IAC/C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,UAAU,CAAC,GAAG,CAAC,CAAC;QAChB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,EAAE,CAAC;;gBACjC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1D,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YACjC,GAAG,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,CAAS,EAAE,MAAsB,EAAE;IAC1E,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,OAAO,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC;AAC5C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iCAAiC,CAAC,CAAS,EAAE,MAAsB,EAAE;IACnF,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9B,SAAS,CAAC;QACR,UAAU,CAAC,GAAG,CAAC,CAAC;QAChB,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE;gBAAE,OAAO,OAAO,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,kDAAkD;QACpD,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,OAAO,CAAC;QACvC,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc,EAAE,GAAW,EAAE,MAAsB,EAAE;IAC1F,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,IAAI,GAAkB,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACpD,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,KAAK,IAAI,IAAI,IAAI,IAAI,aAAa,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QACrE,UAAU,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,GAAG,IAAI,CAAC;QACZ,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YAC9C,MAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC;YAAE,MAAM;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,MAAM;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC;gBACH,IAAI,GAAG,YAAY,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5B,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,OAA0B,EAAE;IAC1E,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC;IAC1C,OAAO,qBAAqB,CAAC,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,IAAI,qBAAqB,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,wCAAwC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,GAAG,EAAE,CAAC;IAC3H,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,OAA0B,EAAE;IACxE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC;IAC/C,OAAO,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC"}

package/dist/runtime/hermetic-spawn-guard.d.ts

@@ -18,8 +18,8 @@ export declare class HermeticSpawnViolationError extends Error {
  * the disabled guard is visible rather than silent.
  *
  * @param binaryLabel human-readable name of what would be spawned (e.g.
- *   `"npx orchestrator-workflow init"`), used in the error message.
+ *   `"npm i -g"`), used in the error message.
  * @param hint one line telling the test author what to do instead (e.g.
- *   "inject a fake `owInitSpawn` runner").
+ *   "inject a fake `installSpawn` runner").
  */
 export declare function assertNoRealSpawnInTests(binaryLabel: string, hint: string): void;

package/dist/runtime/hermetic-spawn-guard.js

@@ -1,42 +1,33 @@
 // Hermetic-spawn guard (task 54739002). Small, reusable primitive for
 // "real spawn" implementations that back a test-injectable runner (e.g.
-// `owInitSpawn` in src/cli/init/interactive.ts, and the sibling
+// the `installSpawn` option of the init wizard, which defaults to
+// `realSpawn` in src/cli/init/dependencies.ts, and the sibling
 // `realClaudeMcpExec` guard planned in task 0d80e969 for
 // src/io/claude-mcp.ts).
 //
 // Incident this guards against: PR #359 found a confirm-queue in
 // tests/cli/init-interactive.test.ts that fell through the trailing
-// orchestrator-workflow co-install prompt (no queued answer + no
-// injected `owInitSpawn`), which let a test silently run a REAL `npx
-// orchestrator-workflow init` against the checkout. The bug itself is
-// already fixed (the mock confirm queue now auto-declines on an
-// exhausted queue); this guard is defense-in-depth so any FUTURE gap of
-// the same shape (a new call site, a reordered prompt, a queue typo)
-// fails the test loudly instead of quietly spawning a real process. A
-// follow-up review (same task) found the same "injectable runner + real
-// default" shape unguarded at three more call sites; a sixth
-// (`realNpmExec` in src/cli/doctor/npm-bin-path.ts) was guarded later,
-// under task 325ace29. As of that task, the guarded `real*Spawn`/
-// `real*Exec` functions are:
+// co-install offer (no queued answer + no injected spawn runner),
+// which let a test silently run a REAL `npx` command against the
+// checkout. The bug itself is already fixed (the mock confirm queue
+// throws on an exhausted queue); this guard is defense-in-depth so any
+// FUTURE gap of the same shape (a new call site, a reordered prompt, a
+// queue typo) fails the test loudly instead of quietly spawning a real
+// process. A follow-up review (same task) found the same "injectable
+// runner + real default" shape unguarded at three more call sites; a
+// sixth (`realNpmExec` in src/cli/doctor/npm-bin-path.ts) was guarded
+// later, under task 325ace29. As of that task, the guarded
+// `real*Spawn`/`real*Exec` functions are:
 //   - `realClaudeMcpExec` (src/io/claude-mcp.ts)
 //   - `realSpawn` (src/cli/init/dependencies.ts)
 //   - `realProbeSpawn` (src/cli/init/agent-tasks-auth.ts)
 //   - `realLoginSpawn` (src/cli/init/agent-tasks-auth.ts)
-//   - `realOwInitSpawn` (src/cli/init/interactive.ts)
 //   - `realNpmExec` (src/cli/doctor/npm-bin-path.ts)
-// Two more were added under the toolchain-parity task (PATH-Shim-Vorfall
-// 2026-07-22 follow-up), both in src/cli/session-start/toolchain-parity.ts:
-//   - `realNodeVersionSpawn` (spawns `node --version` via PATH — the
-//     whole point is capturing the shell's PATH-resolved node, not
-//     `process.version`, so this one is especially load-bearing to keep
-//     hermetic)
-//   - `realNpmGlobalsSpawn` (spawns `npm ls -g --depth=0 --json`)
-// A ninth was added under the stale-base-check task (ce3903b0, incident
-// ea8becf5), in src/cli/session-start/stale-base-check.ts:
-//   - `realCheckStaleBase` (spawns `git fetch`/`rev-list`/`log` — the only
-//     one of the nine that touches the network; tests either inject
-//     `runCheck` or opt into the real path via HARNESS_ALLOW_REAL_SPAWN=1
-//     against a LOCAL fixture repo, never a real network host)
+// Three more (`realNodeVersionSpawn`, `realNpmGlobalsSpawn`,
+// `realCheckStaleBase`) guarded the session-start producers and were
+// removed with them in task f3f15290. `realOwInitSpawn`
+// (src/cli/init/interactive.ts), the first guarded site, backed the
+// orchestrator-workflow offer and was removed with it in task 68dca91f.
 // Naming them here (instead of just a count) is deliberate (review
 // finding F5, task T-007): a bare count silently drifts every time a new
 // call site is added and nobody remembers to bump it. See the guard call
@@ -84,11 +75,10 @@
 // caller falls back to via `opts.someSpawn ?? realSomeSpawn`), BEFORE
 // touching `child_process`. It throws instead of returning so a caller
 // whose surrounding try/catch degrades ordinary spawn failures to a
-// warning (e.g. "OW is optional, warn and continue") does not
-// accidentally swallow a hermetic violation too — callers must
-// re-throw `HermeticSpawnViolationError` past any such catch (see
-// offerOrchestratorWorkflow in src/cli/init/interactive.ts for the
-// pattern).
+// warning does not accidentally swallow a hermetic violation too;
+// callers must re-throw `HermeticSpawnViolationError` past any such
+// catch (see the claude-code wiring catch in
+// src/cli/init/interactive.ts for the pattern).
 /**
  * Thrown by {@link assertNoRealSpawnInTests} when a real-spawn code path
  * runs under vitest without a test-injected fake. Callers whose
@@ -123,9 +113,9 @@ let printedAllowRealSpawnWarning = false;
  * the disabled guard is visible rather than silent.
  *
  * @param binaryLabel human-readable name of what would be spawned (e.g.
- *   `"npx orchestrator-workflow init"`), used in the error message.
+ *   `"npm i -g"`), used in the error message.
  * @param hint one line telling the test author what to do instead (e.g.
- *   "inject a fake `owInitSpawn` runner").
+ *   "inject a fake `installSpawn` runner").
  */
 export function assertNoRealSpawnInTests(binaryLabel, hint) {
     if (process.env.HARNESS_ALLOW_REAL_SPAWN === "1") {

package/dist/runtime/hermetic-spawn-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"hermetic-spawn-guard.js","sourceRoot":"","sources":["../../src/runtime/hermetic-spawn-guard.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,wEAAwE;AACxE,gEAAgE;AAChE,yDAAyD;AACzD,yBAAyB;AACzB,EAAE;AACF,iEAAiE;AACjE,oEAAoE;AACpE,iEAAiE;AACjE,qEAAqE;AACrE,sEAAsE;AACtE,gEAAgE;AAChE,wEAAwE;AACxE,qEAAqE;AACrE,sEAAsE;AACtE,wEAAwE;AACxE,6DAA6D;AAC7D,uEAAuE;AACvE,kEAAkE;AAClE,6BAA6B;AAC7B,iDAAiD;AACjD,iDAAiD;AACjD,0DAA0D;AAC1D,0DAA0D;AAC1D,sDAAsD;AACtD,qDAAqD;AACrD,yEAAyE;AACzE,4EAA4E;AAC5E,qEAAqE;AACrE,mEAAmE;AACnE,wEAAwE;AACxE,gBAAgB;AAChB,kEAAkE;AAClE,wEAAwE;AACxE,2DAA2D;AAC3D,2EAA2E;AAC3E,oEAAoE;AACpE,0EAA0E;AAC1E,+DAA+D;AAC/D,mEAAmE;AACnE,yEAAyE;AACzE,yEAAyE;AACzE,uEAAuE;AACvE,qDAAqD;AACrD,EAAE;AACF,uEAAuE;AACvE,uEAAuE;AACvE,qEAAqE;AACrE,sEAAsE;AACtE,qEAAqE;AACrE,oEAAoE;AACpE,wEAAwE;AACxE,sEAAsE;AACtE,0DAA0D;AAC1D,EAAE;AACF,mEAAmE;AACnE,mEAAmE;AACnE,uEAAuE;AACvE,sEAAsE;AACtE,uEAAuE;AACvE,mEAAmE;AACnE,gEAAgE;AAChE,oEAAoE;AACpE,uEAAuE;AACvE,yDAAyD;AACzD,EAAE;AACF,qEAAqE;AACrE,yEAAyE;AACzE,wEAAwE;AACxE,wEAAwE;AACxE,YAAY;AACZ,EAAE;AACF,qEAAqE;AACrE,kEAAkE;AAClE,iEAAiE;AACjE,sEAAsE;AACtE,wEAAwE;AACxE,sEAAsE;AACtE,kFAAkF;AAClF,yEAAyE;AACzE,4DAA4D;AAC5D,EAAE;AACF,kEAAkE;AAClE,sEAAsE;AACtE,uEAAuE;AACvE,oEAAoE;AACpE,8DAA8D;AAC9D,+DAA+D;AAC/D,kEAAkE;AAClE,mEAAmE;AACnE,YAAY;AAEZ;;;;;;GAMG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD,YAAY,WAAmB,EAAE,IAAY;QAC3C,KAAK,CACH,6BAA6B,WAAW,uCAAuC;YAC7E,gCAAgC,IAAI,EAAE,CACzC,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,gFAAgF;AAChF,SAAS,iBAAiB;IACxB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;IAC7B,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,GAAG,CAAC;AAC3C,CAAC;AAED,sEAAsE;AACtE,mEAAmE;AACnE,gEAAgE;AAChE,mCAAmC;AACnC,IAAI,4BAA4B,GAAG,KAAK,CAAC;AAEzC;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAAmB,EAAE,IAAY;IACxE,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,GAAG,EAAE,CAAC;QACjD,IAAI,iBAAiB,EAAE,IAAI,CAAC,4BAA4B,EAAE,CAAC;YACzD,4BAA4B,GAAG,IAAI,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0GAA0G,CAC3G,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,iBAAiB,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,2BAA2B,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC"}
+{"version":3,"file":"hermetic-spawn-guard.js","sourceRoot":"","sources":["../../src/runtime/hermetic-spawn-guard.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,wEAAwE;AACxE,kEAAkE;AAClE,+DAA+D;AAC/D,yDAAyD;AACzD,yBAAyB;AACzB,EAAE;AACF,iEAAiE;AACjE,oEAAoE;AACpE,kEAAkE;AAClE,iEAAiE;AACjE,oEAAoE;AACpE,uEAAuE;AACvE,uEAAuE;AACvE,uEAAuE;AACvE,qEAAqE;AACrE,qEAAqE;AACrE,sEAAsE;AACtE,2DAA2D;AAC3D,0CAA0C;AAC1C,iDAAiD;AACjD,iDAAiD;AACjD,0DAA0D;AAC1D,0DAA0D;AAC1D,qDAAqD;AACrD,6DAA6D;AAC7D,qEAAqE;AACrE,wDAAwD;AACxD,oEAAoE;AACpE,wEAAwE;AACxE,mEAAmE;AACnE,yEAAyE;AACzE,yEAAyE;AACzE,uEAAuE;AACvE,qDAAqD;AACrD,EAAE;AACF,uEAAuE;AACvE,uEAAuE;AACvE,qEAAqE;AACrE,sEAAsE;AACtE,qEAAqE;AACrE,oEAAoE;AACpE,wEAAwE;AACxE,sEAAsE;AACtE,0DAA0D;AAC1D,EAAE;AACF,mEAAmE;AACnE,mEAAmE;AACnE,uEAAuE;AACvE,sEAAsE;AACtE,uEAAuE;AACvE,mEAAmE;AACnE,gEAAgE;AAChE,oEAAoE;AACpE,uEAAuE;AACvE,yDAAyD;AACzD,EAAE;AACF,qEAAqE;AACrE,yEAAyE;AACzE,wEAAwE;AACxE,wEAAwE;AACxE,YAAY;AACZ,EAAE;AACF,qEAAqE;AACrE,kEAAkE;AAClE,iEAAiE;AACjE,sEAAsE;AACtE,wEAAwE;AACxE,sEAAsE;AACtE,kFAAkF;AAClF,yEAAyE;AACzE,4DAA4D;AAC5D,EAAE;AACF,kEAAkE;AAClE,sEAAsE;AACtE,uEAAuE;AACvE,oEAAoE;AACpE,kEAAkE;AAClE,oEAAoE;AACpE,6CAA6C;AAC7C,gDAAgD;AAEhD;;;;;;GAMG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD,YAAY,WAAmB,EAAE,IAAY;QAC3C,KAAK,CACH,6BAA6B,WAAW,uCAAuC;YAC7E,gCAAgC,IAAI,EAAE,CACzC,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,gFAAgF;AAChF,SAAS,iBAAiB;IACxB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;IAC7B,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,GAAG,CAAC;AAC3C,CAAC;AAED,sEAAsE;AACtE,mEAAmE;AACnE,gEAAgE;AAChE,mCAAmC;AACnC,IAAI,4BAA4B,GAAG,KAAK,CAAC;AAEzC;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAAmB,EAAE,IAAY;IACxE,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,GAAG,EAAE,CAAC;QACjD,IAAI,iBAAiB,EAAE,IAAI,CAAC,4BAA4B,EAAE,CAAC;YACzD,4BAA4B,GAAG,IAAI,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0GAA0G,CAC3G,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,iBAAiB,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,2BAA2B,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC"}

package/dist/runtime/home-dir.js

@@ -25,8 +25,9 @@
 //
 // Subdirectory names are unchanged from the v0.23.x layout: a fresh
 // `~/.harness/` install contains the same `harness.yaml`,
-// `harness.generated/`, `.understanding-gate/`, `harness.lock`
-// children that the legacy `~/.claude/` install would have. This
+// `harness.generated/`, `harness.lock` children that the legacy
+// `~/.claude/` install would have (a legacy `.understanding-gate/`
+// child is still handled by migrate-home and uninstall). This
 // keeps the migration `mv`-only and avoids cascading file-rename
 // churn across every test fixture.
 import * as fs from "node:fs";

package/dist/runtime/home-dir.js.map

@@ -1 +1 @@
-{"version":3,"file":"home-dir.js","sourceRoot":"","sources":["../../src/runtime/home-dir.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,EAAE;AACF,kEAAkE;AAClE,gEAAgE;AAChE,+DAA+D;AAC/D,gEAAgE;AAChE,+DAA+D;AAC/D,+DAA+D;AAC/D,oBAAoB;AACpB,EAAE;AACF,yBAAyB;AACzB,qEAAqE;AACrE,mDAAmD;AACnD,2CAA2C;AAC3C,oEAAoE;AACpE,kEAAkE;AAClE,yDAAyD;AACzD,wDAAwD;AACxD,EAAE;AACF,uEAAuE;AACvE,qEAAqE;AACrE,oEAAoE;AACpE,qEAAqE;AACrE,aAAa;AACb,EAAE;AACF,oEAAoE;AACpE,0DAA0D;AAC1D,+DAA+D;AAC/D,iEAAiE;AACjE,iEAAiE;AACjE,mCAAmC;AAEnC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,CAAC,MAAM,oBAAoB,GAAG,UAAU,CAAC;AAC/C,MAAM,CAAC,MAAM,2BAA2B,GAAG,SAAS,CAAC;AACrD,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAC;AAE/C;;;;;GAKG;AACH,IAAI,YAAY,GAAG,KAAK,CAAC;AAiCzB,MAAM,UAAU,cAAc,CAAC,OAA8B,EAAE;IAC7D,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC/C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IAEpE,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IAED,iEAAiE;IACjE,+DAA+D;IAC/D,mEAAmE;IACnE,iDAAiD;IACjD,IAAI,qBAAqB,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;YAC7C,MAAM,CAAC,KAAK,CACV,qCAAqC,UAAU,iDAAiD,OAAO,+DAA+D,CACvK,CAAC;YACF,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChD,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAkB;IAC/C,kEAAkE;IAClE,gEAAgE;IAChE,mEAAmE;IACnE,6DAA6D;IAC7D,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACtE,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B;IACzC,YAAY,GAAG,KAAK,CAAC;AACvB,CAAC"}
+{"version":3,"file":"home-dir.js","sourceRoot":"","sources":["../../src/runtime/home-dir.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,EAAE;AACF,kEAAkE;AAClE,gEAAgE;AAChE,+DAA+D;AAC/D,gEAAgE;AAChE,+DAA+D;AAC/D,+DAA+D;AAC/D,oBAAoB;AACpB,EAAE;AACF,yBAAyB;AACzB,qEAAqE;AACrE,mDAAmD;AACnD,2CAA2C;AAC3C,oEAAoE;AACpE,kEAAkE;AAClE,yDAAyD;AACzD,wDAAwD;AACxD,EAAE;AACF,uEAAuE;AACvE,qEAAqE;AACrE,oEAAoE;AACpE,qEAAqE;AACrE,aAAa;AACb,EAAE;AACF,oEAAoE;AACpE,0DAA0D;AAC1D,gEAAgE;AAChE,mEAAmE;AACnE,8DAA8D;AAC9D,iEAAiE;AACjE,mCAAmC;AAEnC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,CAAC,MAAM,oBAAoB,GAAG,UAAU,CAAC;AAC/C,MAAM,CAAC,MAAM,2BAA2B,GAAG,SAAS,CAAC;AACrD,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAC;AAE/C;;;;;GAKG;AACH,IAAI,YAAY,GAAG,KAAK,CAAC;AAiCzB,MAAM,UAAU,cAAc,CAAC,OAA8B,EAAE;IAC7D,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC/C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IAEpE,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IAED,iEAAiE;IACjE,+DAA+D;IAC/D,mEAAmE;IACnE,iDAAiD;IACjD,IAAI,qBAAqB,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;YAC7C,MAAM,CAAC,KAAK,CACV,qCAAqC,UAAU,iDAAiD,OAAO,+DAA+D,CACvK,CAAC;YACF,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChD,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAkB;IAC/C,kEAAkE;IAClE,gEAAgE;IAChE,mEAAmE;IACnE,6DAA6D;IAC7D,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACtE,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B;IACzC,YAAY,GAAG,KAAK,CAAC;AACvB,CAAC"}

package/dist/runtime/tool-name-aliases.d.ts

@@ -1,8 +1,2 @@
-export declare const SHELL_ALIASES: readonly ["Bash", "shell", "exec_command", "functions.exec_command"];
 export declare function expandToolNameAliases(toolName: string): string[];
 export declare function expandCodexHookMatchPattern(match: string): string;
-export declare function extractShellCommand(event: {
-    tool_input?: unknown;
-    raw_input?: unknown;
-    input?: unknown;
-}): string | null;

package/dist/runtime/tool-name-aliases.js

@@ -1,10 +1,9 @@
 // Canonical shell-tool alias set: Claude Code's single "Bash" tool plus
-// the Codex shell-tool names current runtimes emit. Exported so callers
-// elsewhere in the layering (e.g. policy-packs/builtin, which may import
-// from runtime/ but not from cli/) can derive their own shell-alias
-// lists from this one definition instead of hand-copying the literal
-// array (task bea04a03 review finding).
-export const SHELL_ALIASES = [
+// the Codex shell-tool names current runtimes emit. It is the shell-alias
+// set `expandToolNameAliases` expands tokens with, which
+// `expandCodexHookMatchPattern` applies to the tool-name tokens of Codex
+// hook matchers (emitted by `generate-codex-config.ts`).
+const SHELL_ALIASES = [
     "Bash",
     "shell",
     "exec_command",
@@ -65,16 +64,4 @@ export function expandCodexHookMatchPattern(match) {
     }
     return [...expanded].join("|");
 }
-export function extractShellCommand(event) {
-    for (const candidate of [event.tool_input, event.raw_input, event.input]) {
-        if (!candidate || typeof candidate !== "object")
-            continue;
-        const args = candidate;
-        if (typeof args.command === "string")
-            return args.command;
-        if (typeof args.cmd === "string")
-            return args.cmd;
-    }
-    return null;
-}
 //# sourceMappingURL=tool-name-aliases.js.map

package/dist/runtime/tool-name-aliases.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-name-aliases.js","sourceRoot":"","sources":["../../src/runtime/tool-name-aliases.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,wEAAwE;AACxE,yEAAyE;AACzE,oEAAoE;AACpE,qEAAqE;AACrE,wCAAwC;AACxC,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,MAAM;IACN,OAAO;IACP,cAAc;IACd,wBAAwB;CAChB,CAAC;AAEX,SAAS,eAAe,CAAC,GAAgB,EAAE,QAAgB;IACzD,IAAI,CAAE,aAAmC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO;IACrE,KAAK,MAAM,KAAK,IAAI,aAAa;QAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,aAAa,CAAC,GAAgB,EAAE,QAAgB;IACvD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;QAC7B,QAAQ,CAAC,MAAM;QACf,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;QAClC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;KACnC,CAAC,CAAC;IACH,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,GAAG,CAAC,GAAG,CAAC,QAAQ,MAAM,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,GAAG,CAAC,GAAG,CAAC,QAAQ,MAAM,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAgB;IAEhB,MAAM,mBAAmB,GAAG,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,mBAAmB,EAAE,CAAC,CAAC,CAAC,IAAI,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,CAAC;IAED,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/B,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC7C,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAa;IACvD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC;QAAE,OAAO,KAAK,CAAC;IAE1D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,qBAAqB,CAAC,KAAK,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAInC;IACC,KAAK,MAAM,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,SAAS;QAC1D,MAAM,IAAI,GAAG,SAAiD,CAAC;QAC/D,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QAC1D,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC;IACpD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"tool-name-aliases.js","sourceRoot":"","sources":["../../src/runtime/tool-name-aliases.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,0EAA0E;AAC1E,yDAAyD;AACzD,yEAAyE;AACzE,yDAAyD;AACzD,MAAM,aAAa,GAAG;IACpB,MAAM;IACN,OAAO;IACP,cAAc;IACd,wBAAwB;CAChB,CAAC;AAEX,SAAS,eAAe,CAAC,GAAgB,EAAE,QAAgB;IACzD,IAAI,CAAE,aAAmC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO;IACrE,KAAK,MAAM,KAAK,IAAI,aAAa;QAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,aAAa,CAAC,GAAgB,EAAE,QAAgB;IACvD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;QAC7B,QAAQ,CAAC,MAAM;QACf,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;QAClC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;KACnC,CAAC,CAAC;IACH,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,GAAG,CAAC,GAAG,CAAC,QAAQ,MAAM,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,GAAG,CAAC,GAAG,CAAC,QAAQ,MAAM,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAgB;IAEhB,MAAM,mBAAmB,GAAG,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,mBAAmB,EAAE,CAAC,CAAC,CAAC,IAAI,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,CAAC;IAED,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/B,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC7C,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAa;IACvD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC;QAAE,OAAO,KAAK,CAAC;IAE1D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,qBAAqB,CAAC,KAAK,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC"}