@lannguyensi/harness 0.63.0 → 1.0.0

package/dist/cli/session-start/shared-options.d.ts

@@ -1,103 +0,0 @@
-import type { Command } from "commander";
-import type { ResolveReadSessionOptions } from "../../runtime/session-id.js";
-import type { Manifest } from "../../schema/index.js";
-import type { LoaderOptions } from "../loader.js";
-/** The literal session id every producer falls back to when none is known. */
-export declare const FALLBACK_SESSION = "default";
-/** Which tier of the session-id resolution chain produced the id. */
-export type SessionSource = "flag" | "stdin" | "env" | "transcript" | "default";
-/** The slice of the SessionStart hook event JSON the producers read. */
-export interface SessionStartEvent {
-    session_id?: unknown;
-    cwd?: unknown;
-    hook_event_name?: unknown;
-}
-/** The ledger-writer seam every producer exposes to tests. */
-export type SessionStartLedgerWriter = (args: {
-    sessionId: string;
-    content: string;
-    source: string;
-}) => Promise<{
-    ok: boolean;
-    reason?: string;
-}>;
-/** Options every session-start producer takes. */
-export interface SessionStartCommonOptions extends LoaderOptions {
-    /** Defaults to process.stdin. */
-    stdin?: NodeJS.ReadableStream;
-    /** Defaults to process.stderr. stdout is never written (SessionStart). */
-    stderr?: NodeJS.WritableStream;
-    /** Explicit session id (overrides every other source). */
-    session?: string;
-    /**
-     * Idle bound, in ms, for the stdin read (default STDIN_IDLE_TIMEOUT_MS).
-     * Tests inject a short value.
-     */
-    stdinIdleTimeoutMs?: number;
-    /** Per-call ledger timeout in ms. */
-    ledgerTimeoutMs?: number;
-    /** Inject the ledger writer (tests). */
-    writeLedger?: SessionStartLedgerWriter;
-    /** Inject the read-path session resolver (env + transcript discovery). Test seam. */
-    resolveSession?: (explicit: string | undefined, opts: ResolveReadSessionOptions) => string;
-    /** Inject a manifest (tests). Bypasses loadManifest. */
-    manifest?: Manifest;
-}
-/** Common options plus the `--cwd` override, for the producers that take one. */
-export interface SessionStartCwdOptions extends SessionStartCommonOptions {
-    /** Override the cwd resolution (test injection). Falls back to event.cwd then process.cwd(). */
-    cwd?: string;
-}
-/** Parse the text of a SessionStart event (empty text is an empty event). */
-export declare function parseSessionStartEvent(text: string): SessionStartEvent;
-/**
- * Read and parse the SessionStart event JSON from a stream. The read is
- * idle-bounded (see bounded-stdin.ts): when stdin never closes, the text read
- * so far is parsed (empty text is an empty event) and `onTimeout` receives the
- * stderr note the producer logs.
- */
-export declare function readSessionStartEvent(stream: NodeJS.ReadableStream, opts?: {
-    idleTimeoutMs?: number;
-    onTimeout?: (note: string) => void;
-}): Promise<SessionStartEvent>;
-/** The reason line a producer logs when the event JSON does not parse. */
-export declare function malformedEventReason(err: unknown): string;
-/** `--cwd` first, then the event's cwd, then the process cwd. */
-export declare function resolveEventCwd(optCwd: unknown, event: SessionStartEvent): string;
-/** The session id handed to the resolver: the flag, else the event's, else none. */
-export declare function explicitSessionId(optSession: unknown, event: SessionStartEvent): string | undefined;
-/**
- * Classify where a resolved session id came from: the flag, the stdin
- * event, an env var, a discovered transcript, or the literal default.
- * `resolverThrew` forces "default" (the id recorded is the fallback even
- * when the flag or event carried one).
- */
-export declare function classifySessionSource(optSession: unknown, event: SessionStartEvent, sessionId: string, resolverThrew?: boolean): SessionSource;
-/** The option bag commander hands the action of a session-start subcommand. */
-export interface SessionStartCliOptions {
-    config?: string;
-    project?: string;
-    session?: string;
-    cwd?: string;
-    ledgerTimeout?: string;
-}
-/** `--config` and `--project`, then `--session` with the caller's description. */
-export declare function addIdentityOptions(cmd: Command, sessionDescription: string): Command;
-/** `--cwd`. */
-export declare function addCwdOption(cmd: Command): Command;
-/** `--ledger-timeout`. */
-export declare function addLedgerTimeoutOption(cmd: Command): Command;
-/** The `run*` options a parsed CLI option bag fills in. */
-export interface SessionStartCliTarget {
-    configPath?: string;
-    project?: string;
-    session?: string;
-    cwd?: string;
-    ledgerTimeoutMs?: number;
-}
-/**
- * Copy the shared CLI options into a producer's options. A value that is
- * absent is left unset; a `--ledger-timeout` that is not a positive
- * integer is ignored (the producer's default timeout applies).
- */
-export declare function applyCliOptions(options: SessionStartCliOptions, target: SessionStartCliTarget): void;

package/dist/cli/session-start/shared-options.js

@@ -1,107 +0,0 @@
-// Shared plumbing for the `harness session-start` producers
-// (preflight, branch-check, toolchain-parity, stale-base-check) and the
-// top-level `preflight` alias: the SessionStart event type, the stdin
-// read, the cwd and session-source resolution, the options every
-// producer takes, and the commander options every subcommand declares.
-//
-// Pure extraction: each producer used to carry its own copy of these
-// pieces, and every copy behaved the same. Nothing here changes what a
-// producer reads, writes or prints.
-import { readStdinBounded, STDIN_IDLE_TIMEOUT_MS, stdinTimeoutNote } from "../bounded-stdin.js";
-/** The literal session id every producer falls back to when none is known. */
-export const FALLBACK_SESSION = "default";
-/** Parse the text of a SessionStart event (empty text is an empty event). */
-export function parseSessionStartEvent(text) {
-    return JSON.parse(text.trim() || "{}");
-}
-/**
- * Read and parse the SessionStart event JSON from a stream. The read is
- * idle-bounded (see bounded-stdin.ts): when stdin never closes, the text read
- * so far is parsed (empty text is an empty event) and `onTimeout` receives the
- * stderr note the producer logs.
- */
-export async function readSessionStartEvent(stream, opts = {}) {
-    const idleTimeoutMs = opts.idleTimeoutMs ?? STDIN_IDLE_TIMEOUT_MS;
-    const read = await readStdinBounded(stream, idleTimeoutMs);
-    if (read.timedOut)
-        opts.onTimeout?.(stdinTimeoutNote(read, idleTimeoutMs));
-    return parseSessionStartEvent(read.text);
-}
-/** The reason line a producer logs when the event JSON does not parse. */
-export function malformedEventReason(err) {
-    return `malformed event JSON: ${err.message}`;
-}
-/** `--cwd` first, then the event's cwd, then the process cwd. */
-export function resolveEventCwd(optCwd, event) {
-    return typeof optCwd === "string" && optCwd.length > 0
-        ? optCwd
-        : typeof event.cwd === "string" && event.cwd.length > 0
-            ? event.cwd
-            : process.cwd();
-}
-/** The session id handed to the resolver: the flag, else the event's, else none. */
-export function explicitSessionId(optSession, event) {
-    return typeof optSession === "string" && optSession.length > 0
-        ? optSession
-        : typeof event.session_id === "string" && event.session_id.length > 0
-            ? event.session_id
-            : undefined;
-}
-/**
- * Classify where a resolved session id came from: the flag, the stdin
- * event, an env var, a discovered transcript, or the literal default.
- * `resolverThrew` forces "default" (the id recorded is the fallback even
- * when the flag or event carried one).
- */
-export function classifySessionSource(optSession, event, sessionId, resolverThrew = false) {
-    return resolverThrew
-        ? "default"
-        : typeof optSession === "string" && optSession.length > 0
-            ? "flag"
-            : typeof event.session_id === "string" && event.session_id.length > 0
-                ? "stdin"
-                : sessionId === FALLBACK_SESSION
-                    ? "default"
-                    : (typeof process.env.CLAUDE_CODE_SESSION_ID === "string" &&
-                        process.env.CLAUDE_CODE_SESSION_ID === sessionId) ||
-                        (typeof process.env.CLAUDE_SESSION_ID === "string" &&
-                            process.env.CLAUDE_SESSION_ID === sessionId)
-                        ? "env"
-                        : "transcript";
-}
-/** `--config` and `--project`, then `--session` with the caller's description. */
-export function addIdentityOptions(cmd, sessionDescription) {
-    return cmd
-        .option("--config <path>", "manifest path (default: ~/.harness/harness.yaml; legacy fallback ~/.claude/harness.yaml)")
-        .option("--project <name>", "apply per-project overrides")
-        .option("--session <id>", sessionDescription);
-}
-/** `--cwd`. */
-export function addCwdOption(cmd) {
-    return cmd.option("--cwd <path>", "override cwd resolution (default: stdin event.cwd then process.cwd())");
-}
-/** `--ledger-timeout`. */
-export function addLedgerTimeoutOption(cmd) {
-    return cmd.option("--ledger-timeout <ms>", "per-call ledger timeout in milliseconds");
-}
-/**
- * Copy the shared CLI options into a producer's options. A value that is
- * absent is left unset; a `--ledger-timeout` that is not a positive
- * integer is ignored (the producer's default timeout applies).
- */
-export function applyCliOptions(options, target) {
-    if (options.config)
-        target.configPath = options.config;
-    if (options.project)
-        target.project = options.project;
-    if (options.session)
-        target.session = options.session;
-    if (options.cwd)
-        target.cwd = options.cwd;
-    if (options.ledgerTimeout) {
-        const n = Number.parseInt(options.ledgerTimeout, 10);
-        if (Number.isFinite(n) && n > 0)
-            target.ledgerTimeoutMs = n;
-    }
-}
-//# sourceMappingURL=shared-options.js.map

package/dist/cli/session-start/shared-options.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"shared-options.js","sourceRoot":"","sources":["../../../src/cli/session-start/shared-options.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,wEAAwE;AACxE,sEAAsE;AACtE,iEAAiE;AACjE,uEAAuE;AACvE,EAAE;AACF,qEAAqE;AACrE,uEAAuE;AACvE,oCAAoC;AAKpC,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAGhG,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAgD1C,6EAA6E;AAC7E,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,CAAsB,CAAC;AAC9D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAA6B,EAC7B,OAAuE,EAAE;IAEzE,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,qBAAqB,CAAC;IAClE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,SAAS,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;IAC3E,OAAO,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,OAAO,yBAA0B,GAAa,CAAC,OAAO,EAAE,CAAC;AAC3D,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAAC,MAAe,EAAE,KAAwB;IACvE,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QACpD,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;YACrD,CAAC,CAAC,KAAK,CAAC,GAAG;YACX,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;AACtB,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAC/B,UAAmB,EACnB,KAAwB;IAExB,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAC5D,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;YACnE,CAAC,CAAC,KAAK,CAAC,UAAU;YAClB,CAAC,CAAC,SAAS,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAmB,EACnB,KAAwB,EACxB,SAAiB,EACjB,aAAa,GAAG,KAAK;IAErB,OAAO,aAAa;QAClB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YACvD,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBACnE,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,SAAS,KAAK,gBAAgB;oBAC9B,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,QAAQ;wBACrD,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,SAAS,CAAC;wBACjD,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,QAAQ;4BAChD,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC;wBAChD,CAAC,CAAC,KAAK;wBACP,CAAC,CAAC,YAAY,CAAC;AAC3B,CAAC;AAeD,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,GAAY,EAAE,kBAA0B;IACzE,OAAO,GAAG;SACP,MAAM,CACL,iBAAiB,EACjB,0FAA0F,CAC3F;SACA,MAAM,CAAC,kBAAkB,EAAE,6BAA6B,CAAC;SACzD,MAAM,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;AAClD,CAAC;AAED,eAAe;AACf,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,OAAO,GAAG,CAAC,MAAM,CACf,cAAc,EACd,uEAAuE,CACxE,CAAC;AACJ,CAAC;AAED,0BAA0B;AAC1B,MAAM,UAAU,sBAAsB,CAAC,GAAY;IACjD,OAAO,GAAG,CAAC,MAAM,CAAC,uBAAuB,EAAE,yCAAyC,CAAC,CAAC;AACxF,CAAC;AAWD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,OAA+B,EAAE,MAA6B;IAC5F,IAAI,OAAO,CAAC,MAAM;QAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IACvD,IAAI,OAAO,CAAC,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACtD,IAAI,OAAO,CAAC,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACtD,IAAI,OAAO,CAAC,GAAG;QAAE,MAAM,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAC1C,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACrD,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,eAAe,GAAG,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC"}

package/dist/cli/session-start/stale-base-check.d.ts

@@ -1,46 +0,0 @@
-import { type SessionSource, type SessionStartCwdOptions } from "./shared-options.js";
-export interface StaleBaseCheckArgs {
-    cwd: string;
-    remote: string;
-    defaultBranch: string;
-    branch: string;
-    timeoutMs: number;
-}
-export type StaleBaseCheckResult = {
-    ok: true;
-    /** Commits on `branch` not reachable from the live remote tip. */
-    aheadCount: number;
-    /** Commits on the live remote tip not reachable from `branch` — the staleness signal. */
-    behindCount: number;
-    /** Only set when `behindCount > 0`: the live remote tip's own sha. */
-    remoteSha?: string;
-    /** Only set when `behindCount > 0`: ISO commit date of the live remote tip. */
-    latestRemoteCommitIso?: string;
-} | {
-    ok: false;
-    reason: string;
-};
-export interface SessionStartStaleBaseCheckOptions extends SessionStartCwdOptions {
-    /** Override "now" for deterministic age-formatting tests. */
-    now?: Date;
-    /** Inject the live check (tests) — see realCheckStaleBase's doc. */
-    runCheck?: (args: StaleBaseCheckArgs) => Promise<StaleBaseCheckResult>;
-}
-export interface SessionStartStaleBaseCheckResult {
-    /** Always 0 — a SessionStart hook must never break the session loop. */
-    exitCode: number;
-    /** Whether the `stale-base:` ledger fact was written. */
-    wrote: boolean;
-    /** Resolved repo name. */
-    repo: string;
-    /** Resolved branch ("" if detached or outside a repo). */
-    branch: string;
-    /** Commits the branch's base is behind the live remote default, when the check ran. */
-    behindCount?: number;
-    /** Resolved session id. */
-    sessionId: string;
-    sessionSource: SessionSource;
-    /** Human-readable explanation of a non-write outcome, for diagnostics. */
-    reason?: string;
-}
-export declare function runSessionStartStaleBaseCheck(opts?: SessionStartStaleBaseCheckOptions): Promise<SessionStartStaleBaseCheckResult>;

package/dist/cli/session-start/stale-base-check.js

@@ -1,352 +0,0 @@
-// `harness session-start stale-base-check` — SessionStart hook
-// entrypoint, fourth sibling of `harness session-start preflight` /
-// `branch-check` / `toolchain-parity`.
-//
-// Incident (task ea8becf5): a task branch was cut from a local `master`
-// that had not been fetched in 4 days. The v0.42.0 release had already
-// landed on `origin/master` 6h before the branch point. The resulting PR
-// went straight to CONFLICTING and its CI never ran. Nothing surfaced the
-// gap at the time it was still cheap to fix (before work landed on the
-// branch), because:
-//   - `harness preflight` checks the working TREE, never the remote.
-//   - `harness session-start branch-check` reads `.git/HEAD` and a
-//     protected-branch list; it has no notion of "is this branch's base
-//     current".
-//   - the post-merge-gate convention only ever fires AFTER a merge.
-// And the obvious-looking fix is itself the trap this module exists to
-// avoid: `git merge-base HEAD origin/master` LOOKS authoritative, but
-// `origin/master` is a LOCAL, cached ref — exactly the ref that was 4
-// days stale in the incident. Computing "how stale" from a stale ref
-// answers a different question than the one that matters.
-//
-// --- WHERE this sits (task brief step 3) ---
-// SessionStart companion, not a `preflight`-check addition and not a
-// PreToolUse gate:
-//   - `harness policy intercept` (the PreToolUse hot path, evaluated on
-//     EVERY Bash/Edit/Write tool call — see runtime/intercept.ts) must
-//     never do network I/O; a `git fetch` there would add real latency to
-//     every single tool call for the life of the session. This module is
-//     wired ONLY under `harness session-start ...` (this file lives in
-//     src/cli/, which src/runtime/intercept.ts is structurally forbidden
-//     from importing — enforced by .dependency-cruiser.cjs's
-//     "runtime-no-upward-imports" rule, i.e. `npm run check:boundaries`
-//     fails the build if that ever changes), so the one network call this
-//     module makes can only ever happen once per SessionStart, never on
-//     the hot path.
-//   - `agent-preflight` (the external `preflight` binary
-//     `session-start/index.ts` wraps) is a SEPARATE npm package; teaching
-//     it to do remote checks is out of this task's scope (task brief
-//     "Out of scope").
-//   - A PreToolUse gate (`requires.ledger_tag`-style, like
-//     `preflight-before-push`) was considered and REJECTED: every such
-//     gate in this codebase fails CLOSED for a SECURITY invariant (an
-//     absent/expired tag blocks the action). A stale base is a
-//     time-loss problem, not a security problem — blocking on it would
-//     violate the task's hard constraint ("Keine Aussperrung: ein
-//     veralteter Base darf die Arbeit nicht verhindern") for zero
-//     security benefit. A SessionStart producer's own contract
-//     (`blocking:false`, always exit 0) makes the non-blocking posture
-//     structural rather than a policy authors could get wrong later.
-//
-// --- SCHÄRFE (severity) chosen: WARNUNG, not Hinweis, not Block ---
-//   - Block is impossible by construction here (see above) and would
-//     directly violate the hard constraint anyway.
-//   - A quiet Hinweis (a single low-key note easy to scroll past) risks
-//     reproducing the founding incident's own failure mode almost
-//     exactly: "nichts fiel auf" is the whole reason this task exists.
-//   - So: a loud stderr WARNING line — same visibility tier as the two
-//     existing loud-but-non-blocking SessionStart producers
-//     (`toolchain-parity`'s drift lines, `preflight`'s not-ready
-//     diagnostic) — naming the concrete commit count, how old the missing
-//     work is, and the exact recovery command. Purely advisory: no
-//     PreToolUse gate consumes the `stale-base:` ledger fact this writes
-//     (same posture as `toolchain-parity:`, audit-trail only for
-//     `harness audit`/forensics).
-//
-// --- Fetch cost / why opt-in (task brief: "inkl. Fetch-Kosten") ---
-// `stale_base_check.enabled` defaults to `false` (schema:
-// src/schema/stale-base-check.ts). An operator who has not asked for
-// this pays ZERO extra session-start latency or network egress — the
-// producer returns before touching `child_process` at all when
-// unconfigured. Once enabled, the cost is bounded by
-// `fetch_timeout_ms` (default 8000ms) per `git` subprocess call (at most
-// three: fetch, rev-list, log — see `realCheckStaleBase` below), and the
-// fetch itself is normally near-instant: `git fetch <remote>
-// <defaultBranch>` only ever needs to transfer the commits this checkout
-// doesn't already have. It always writes `FETCH_HEAD`; on a normal clone
-// (whose configured `remote.<remote>.fetch` refspec matches the named
-// branch) `git` ALSO refreshes the local `refs/remotes/<remote>/
-// <defaultBranch>` tracking ref as a side effect — a welcome bonus (it
-// self-heals the exact staleness the incident hit) but never something
-// this module relies on or reads back: see below.
-//
-// --- The ref-staleness trap, closed ---
-// The remote's default-branch NAME (e.g. "master") is resolved from the
-// local `refs/remotes/origin/HEAD` file via `resolveOriginHeadBase` — that
-// is safe to trust: a repo's default branch NAME essentially never
-// changes after initial setup. What must NEVER be trusted is that same
-// ref's SHA as a staleness signal — that is precisely what went stale in
-// the incident. This module never READS a local `refs/remotes/<remote>/
-// <defaultBranch>` sha for comparison (regardless of whether the fetch
-// above happened to refresh it); the only sha it ever compares `branch`
-// against is `FETCH_HEAD`, populated by a live `git fetch` performed
-// THIS run.
-//
-// SessionStart contract, same as the three siblings: `blocking:false`.
-// Every failure path (not configured, not a git repo, detached HEAD,
-// default branch unresolved, `git` not on PATH, no remote configured, no
-// credentials, offline/timeout, unparseable output, a ledger-write
-// failure) logs one line to stderr and exits 0 — never blocking, never
-// throwing (except the hermetic-spawn-guard violation under vitest
-// without an injected `runCheck`, which — like the sibling producers —
-// must propagate rather than be swallowed; see hermetic-spawn-guard.ts).
-import { execFile } from "node:child_process";
-import { findGitEntry, resolveCommonDir, resolveGitContext, resolveOriginHeadBase, } from "../../runtime/git-context.js";
-import { assertNoRealSpawnInTests } from "../../runtime/hermetic-spawn-guard.js";
-import { resolveManifestLedgerWriter } from "../../runtime/ledger-writer.js";
-import { resolveReadSessionId } from "../../runtime/session-id.js";
-import { loadManifest } from "../loader.js";
-import { classifySessionSource, explicitSessionId, FALLBACK_SESSION, malformedEventReason, readSessionStartEvent, resolveEventCwd, } from "./shared-options.js";
-import { formatSnapshotAge } from "./toolchain-parity.js";
-const LEDGER_SOURCE = "harness-session-start-stale-base-check";
-const DEFAULT_REMOTE = "origin";
-const DEFAULT_FETCH_TIMEOUT_MS = 8_000;
-/**
- * Run one `git <args>` in `cwd`, classifying the common failure shapes
- * (missing binary / timeout / non-zero exit) the same way the sibling
- * producers' subprocess wrappers do (`spawnPreflight` in
- * session-start/index.ts, `realNpmGlobalsSpawn` in toolchain-parity.ts).
- * Never rejects.
- */
-function execGit(args, cwd, timeoutMs) {
-    return new Promise((resolve) => {
-        execFile("git", args, { cwd, timeout: timeoutMs, maxBuffer: 4 * 1024 * 1024, encoding: "utf8" }, (err, stdout, stderr) => {
-            const text = (stdout ?? "").toString().trim();
-            if (!err) {
-                resolve({ ok: true, stdout: text, reason: "" });
-                return;
-            }
-            const e = err;
-            if (e.code === "ENOENT") {
-                resolve({ ok: false, stdout: "", reason: "`git` not on PATH" });
-                return;
-            }
-            if (e.killed) {
-                resolve({
-                    ok: false,
-                    stdout: "",
-                    reason: `\`git ${args.join(" ")}\` timed out after ${timeoutMs}ms (remote unreachable or very slow)`,
-                });
-                return;
-            }
-            const stderrText = (stderr ?? "").toString().trim().split("\n")[0] ?? "";
-            const capped = stderrText.length > 200 ? `${stderrText.slice(0, 199)}…` : stderrText;
-            resolve({
-                ok: false,
-                stdout: "",
-                reason: `\`git ${args.join(" ")}\` failed${capped ? `: ${capped}` : ` (exit ${e.code ?? "?"})`}`,
-            });
-        });
-    });
-}
-/**
- * The real, network-touching implementation. Guarded by
- * `assertNoRealSpawnInTests` (see that module's doc) so an un-injected
- * test can never accidentally exercise a real `git fetch` — every test in
- * this module's suite either injects `runCheck` or opts into the real
- * path via the documented `HARNESS_ALLOW_REAL_SPAWN=1` escape hatch
- * against a local fixture repo (never a real network host).
- *
- * Sequence: `git fetch --no-tags <remote> <defaultBranch>` (always writes
- * FETCH_HEAD; may also refresh the local remote-tracking ref as a normal
- * git side effect — see the module header), then `git rev-list
- * --left-right --count <branch>...FETCH_HEAD` for the ahead/behind counts,
- * then — only when behind > 0, since that is the only case the caller's
- * message needs it — `git log -1 --format=%H%x09%cI FETCH_HEAD` for the
- * live remote tip's sha + committer date. Comparison is always against
- * `FETCH_HEAD` (this run's live result), never a cached tracking ref.
- */
-function realCheckStaleBase(args) {
-    assertNoRealSpawnInTests("git fetch (stale-base-check)", "Inject a fake `runCheck` (SessionStartStaleBaseCheckOptions.runCheck), or opt into the " +
-        "real path against a LOCAL fixture repo via HARNESS_ALLOW_REAL_SPAWN=1 for a dedicated " +
-        "real-git plumbing test — never exercise this against a real network host in a test.");
-    const { cwd, remote, defaultBranch, branch, timeoutMs } = args;
-    return (async () => {
-        const fetch = await execGit(["fetch", "--no-tags", "--", remote, defaultBranch], cwd, timeoutMs);
-        if (!fetch.ok)
-            return { ok: false, reason: fetch.reason };
-        const counts = await execGit(["rev-list", "--left-right", "--count", `${branch}...FETCH_HEAD`], cwd, timeoutMs);
-        if (!counts.ok)
-            return { ok: false, reason: counts.reason };
-        const parts = counts.stdout.split(/\s+/).filter((p) => p.length > 0);
-        const aheadCount = Number.parseInt(parts[0] ?? "", 10);
-        const behindCount = Number.parseInt(parts[1] ?? "", 10);
-        if (!Number.isFinite(aheadCount) || !Number.isFinite(behindCount)) {
-            return { ok: false, reason: `\`git rev-list --left-right --count\` produced unparseable output: "${counts.stdout}"` };
-        }
-        if (behindCount === 0)
-            return { ok: true, aheadCount, behindCount };
-        const log = await execGit(["log", "-1", "--format=%H%x09%cI", "FETCH_HEAD"], cwd, timeoutMs);
-        if (!log.ok) {
-            // The counts themselves are still good evidence — degrade the
-            // extra detail, not the whole result.
-            return { ok: true, aheadCount, behindCount };
-        }
-        const [remoteSha, latestRemoteCommitIso] = log.stdout.split("\t");
-        return {
-            ok: true,
-            aheadCount,
-            behindCount,
-            ...(remoteSha ? { remoteSha } : {}),
-            ...(latestRemoteCommitIso ? { latestRemoteCommitIso } : {}),
-        };
-    })();
-}
-export async function runSessionStartStaleBaseCheck(opts = {}) {
-    const stdin = opts.stdin ?? process.stdin;
-    const stderr = opts.stderr ?? process.stderr;
-    const now = opts.now ?? new Date();
-    const note = (msg) => {
-        stderr.write(`harness session-start stale-base-check: ${msg}\n`);
-    };
-    const done = (wrote, repo, branch, sessionId, sessionSource, reason, behindCount) => ({
-        exitCode: 0,
-        wrote,
-        repo,
-        branch,
-        sessionId,
-        sessionSource,
-        ...(behindCount !== undefined && { behindCount }),
-        ...(reason !== undefined && { reason }),
-    });
-    let event;
-    try {
-        event = await readSessionStartEvent(stdin, {
-            onTimeout: note,
-            ...(opts.stdinIdleTimeoutMs !== undefined && { idleTimeoutMs: opts.stdinIdleTimeoutMs }),
-        });
-    }
-    catch (err) {
-        const reason = malformedEventReason(err);
-        note(reason);
-        return done(false, "", "", FALLBACK_SESSION, "default", reason);
-    }
-    const cwd = resolveEventCwd(opts.cwd, event);
-    const explicit = explicitSessionId(opts.session, event);
-    const resolveSession = opts.resolveSession ?? resolveReadSessionId;
-    const sessionId = resolveSession(explicit, {});
-    const sessionSource = classifySessionSource(opts.session, event, sessionId);
-    let manifest;
-    if (opts.manifest) {
-        manifest = opts.manifest;
-    }
-    else {
-        try {
-            manifest = loadManifest(opts).manifest;
-        }
-        catch (err) {
-            const reason = `manifest load failed: ${err.message}`;
-            note(reason);
-            return done(false, "", "", sessionId, sessionSource, reason);
-        }
-    }
-    const config = manifest.stale_base_check;
-    if (!config.enabled) {
-        const reason = "not configured (add `stale_base_check: { enabled: true }` to harness.yaml); skipping — no network touched";
-        note(reason);
-        return done(false, "", "", sessionId, sessionSource, reason);
-    }
-    const { repo, branch } = resolveGitContext(cwd);
-    if (repo === "") {
-        const reason = `cwd is not inside a git work tree (${cwd}); nothing to check`;
-        note(reason);
-        return done(false, "", "", sessionId, sessionSource, reason);
-    }
-    if (branch === "") {
-        const reason = "detached HEAD (or unreadable HEAD) — no branch to check a base for";
-        note(reason);
-        return done(false, repo, "", sessionId, sessionSource, reason);
-    }
-    const remote = config.remote ?? DEFAULT_REMOTE;
-    const timeoutMs = config.fetch_timeout_ms ?? DEFAULT_FETCH_TIMEOUT_MS;
-    let defaultBranch = config.default_branch;
-    if (!defaultBranch) {
-        // NOTE: `resolveOriginHeadBase` reads `refs/remotes/origin/HEAD`
-        // specifically (hardcoded "origin" — see runtime/git-context.ts), not
-        // `refs/remotes/<remote>/HEAD`. For the overwhelming common case
-        // (`remote` left at its "origin" default) this is exactly right. A
-        // manifest that configures a NON-"origin" `remote` without also
-        // setting `default_branch` explicitly will fail this auto-resolution
-        // and fall into the "could not be resolved" degrade path below —
-        // fail-open (skip, no fact written), never a wrong/misleading result,
-        // so this is a completeness gap, not a correctness risk.
-        const gitDir = findGitEntry(cwd)?.gitDir;
-        defaultBranch = gitDir ? (resolveOriginHeadBase(resolveCommonDir(gitDir)) ?? undefined) : undefined;
-    }
-    if (!defaultBranch) {
-        const reason = `default branch could not be resolved (checked \`stale_base_check.default_branch\` and ` +
-            `refs/remotes/${remote}/HEAD / packed-refs); skipping. Set \`stale_base_check.default_branch\` ` +
-            "explicitly to fix this.";
-        note(reason);
-        return done(false, repo, branch, sessionId, sessionSource, reason);
-    }
-    if (branch === defaultBranch) {
-        const reason = `on ${defaultBranch} itself; nothing to compare a base against`;
-        note(reason);
-        return done(false, repo, branch, sessionId, sessionSource, reason);
-    }
-    const runCheck = opts.runCheck ?? realCheckStaleBase;
-    const result = await runCheck({ cwd, remote, defaultBranch, branch, timeoutMs });
-    if (!result.ok) {
-        // Fail-open by construction (task hard constraint): every reason here
-        // — no remote configured, no credentials, offline, timeout, git
-        // missing — degrades to "no fact written", never a thrown error and
-        // never a block. A stale base costs time, not safety.
-        note(`${result.reason} — degrading cleanly (not blocking; the base-staleness check is advisory-only)`);
-        return done(false, repo, branch, sessionId, sessionSource, result.reason);
-    }
-    const remoteRef = `${remote}/${defaultBranch}`;
-    if (result.behindCount === 0) {
-        note(`base is current with ${remoteRef} (live check via \`git fetch\`)`);
-    }
-    else {
-        const ageSuffix = result.latestRemoteCommitIso
-            ? ` (newest missing commit landed ${formatSnapshotAge(Math.max(0, now.getTime() - Date.parse(result.latestRemoteCommitIso)))} ago, ${result.latestRemoteCommitIso})`
-            : "";
-        const aheadSuffix = result.aheadCount > 0 ? `; this branch itself is ${result.aheadCount} commit(s) ahead of that base` : "";
-        note(`WARNING: this branch's base is ${result.behindCount} commit(s) behind ${remoteRef}${ageSuffix}${aheadSuffix}. ` +
-            `This is a LIVE check (a real \`git fetch\`, not the local ${remoteRef} ref, which may itself be stale). ` +
-            `Recommended before continuing: \`git fetch ${remote} && git rebase ${remoteRef}\` (or merge) — ` +
-            "otherwise this PR risks landing CONFLICTING with CI never running (the incident this check exists to catch).");
-    }
-    const content = result.behindCount === 0
-        ? `stale-base:${repo}:${branch} ok base:${remoteRef}`
-        : `stale-base:${repo}:${branch} behind:${result.behindCount} ahead:${result.aheadCount} base:${remoteRef}` +
-            (result.remoteSha ? ` remote_sha:${result.remoteSha}` : "");
-    let writeLedger = opts.writeLedger;
-    if (!writeLedger) {
-        const resolved = resolveManifestLedgerWriter(manifest, {
-            ...(opts.ledgerTimeoutMs !== undefined ? { ledgerTimeoutMs: opts.ledgerTimeoutMs } : {}),
-        });
-        if (!resolved.ok) {
-            const reason = `${resolved.reason}; cannot record ${content}`;
-            note(reason);
-            return done(false, repo, branch, sessionId, sessionSource, reason, result.behindCount);
-        }
-        writeLedger = resolved.write;
-    }
-    const written = await writeLedger({ sessionId, content, source: LEDGER_SOURCE });
-    if (!written.ok) {
-        const reason = `ledger write failed: ${written.reason ?? "unknown error"}`;
-        note(reason);
-        return done(false, repo, branch, sessionId, sessionSource, reason, result.behindCount);
-    }
-    note(`recorded ${content} for session ${sessionId}`);
-    if (sessionSource === "default") {
-        note("WARNING: session resolved to the literal \"default\". This tag is audit-only (no gate consumes " +
-            "stale-base: yet), but pipe SessionStart event JSON on stdin, export $CLAUDE_SESSION_ID, or pass " +
-            "--session <id> for manual / scripted use to keep the audit trail useful.");
-    }
-    return done(true, repo, branch, sessionId, sessionSource, undefined, result.behindCount);
-}
-//# sourceMappingURL=stale-base-check.js.map

package/dist/cli/session-start/stale-base-check.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"stale-base-check.js","sourceRoot":"","sources":["../../../src/cli/session-start/stale-base-check.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,oEAAoE;AACpE,uCAAuC;AACvC,EAAE;AACF,wEAAwE;AACxE,uEAAuE;AACvE,yEAAyE;AACzE,0EAA0E;AAC1E,uEAAuE;AACvE,oBAAoB;AACpB,qEAAqE;AACrE,mEAAmE;AACnE,wEAAwE;AACxE,gBAAgB;AAChB,oEAAoE;AACpE,uEAAuE;AACvE,sEAAsE;AACtE,sEAAsE;AACtE,qEAAqE;AACrE,0DAA0D;AAC1D,EAAE;AACF,8CAA8C;AAC9C,qEAAqE;AACrE,mBAAmB;AACnB,wEAAwE;AACxE,uEAAuE;AACvE,0EAA0E;AAC1E,yEAAyE;AACzE,uEAAuE;AACvE,yEAAyE;AACzE,6DAA6D;AAC7D,wEAAwE;AACxE,0EAA0E;AAC1E,wEAAwE;AACxE,oBAAoB;AACpB,yDAAyD;AACzD,0EAA0E;AAC1E,qEAAqE;AACrE,uBAAuB;AACvB,2DAA2D;AAC3D,uEAAuE;AACvE,sEAAsE;AACtE,+DAA+D;AAC/D,uEAAuE;AACvE,kEAAkE;AAClE,kEAAkE;AAClE,+DAA+D;AAC/D,uEAAuE;AACvE,qEAAqE;AACrE,EAAE;AACF,qEAAqE;AACrE,qEAAqE;AACrE,mDAAmD;AACnD,wEAAwE;AACxE,kEAAkE;AAClE,uEAAuE;AACvE,uEAAuE;AACvE,4DAA4D;AAC5D,iEAAiE;AACjE,0EAA0E;AAC1E,mEAAmE;AACnE,yEAAyE;AACzE,iEAAiE;AACjE,kCAAkC;AAClC,EAAE;AACF,qEAAqE;AACrE,0DAA0D;AAC1D,qEAAqE;AACrE,qEAAqE;AACrE,+DAA+D;AAC/D,qDAAqD;AACrD,yEAAyE;AACzE,yEAAyE;AACzE,6DAA6D;AAC7D,yEAAyE;AACzE,yEAAyE;AACzE,sEAAsE;AACtE,iEAAiE;AACjE,uEAAuE;AACvE,uEAAuE;AACvE,kDAAkD;AAClD,EAAE;AACF,yCAAyC;AACzC,wEAAwE;AACxE,2EAA2E;AAC3E,mEAAmE;AACnE,uEAAuE;AACvE,yEAAyE;AACzE,wEAAwE;AACxE,uEAAuE;AACvE,wEAAwE;AACxE,qEAAqE;AACrE,YAAY;AACZ,EAAE;AACF,uEAAuE;AACvE,qEAAqE;AACrE,yEAAyE;AACzE,mEAAmE;AACnE,uEAAuE;AACvE,mEAAmE;AACnE,uEAAuE;AACvE,yEAAyE;AAEzE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAEnE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,GAIhB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,MAAM,aAAa,GAAG,wCAAwC,CAAC;AAC/D,MAAM,cAAc,GAAG,QAAQ,CAAC;AAChC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAmCvC;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,IAAc,EAAE,GAAW,EAAE,SAAiB;IAC7D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,QAAQ,CACN,KAAK,EACL,IAAI,EACJ,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EACzE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACtB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;YAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YACD,MAAM,CAAC,GAAG,GAAmD,CAAC;YAC9D,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxB,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAChE,OAAO;YACT,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;gBACb,OAAO,CAAC;oBACN,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,SAAS,sCAAsC;iBACrG,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACzE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;YACrF,OAAO,CAAC;gBACN,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,GAAG,GAAG,EAAE;aACjG,CAAC,CAAC;QACL,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,kBAAkB,CAAC,IAAwB;IAClD,wBAAwB,CACtB,8BAA8B,EAC9B,yFAAyF;QACvF,wFAAwF;QACxF,qFAAqF,CACxF,CAAC;IACF,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC/D,OAAO,CAAC,KAAK,IAAmC,EAAE;QAChD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QACjG,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAE1D,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,CAAC,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,MAAM,eAAe,CAAC,EACjE,GAAG,EACH,SAAS,CACV,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uEAAuE,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;QACxH,CAAC;QACD,IAAI,WAAW,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;QAEpE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,YAAY,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QAC7F,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,8DAA8D;YAC9D,sCAAsC;YACtC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;QAC/C,CAAC;QACD,MAAM,CAAC,SAAS,EAAE,qBAAqB,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClE,OAAO;YACL,EAAE,EAAE,IAAI;YACR,UAAU;YACV,WAAW;YACX,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC;IACJ,CAAC,CAAC,EAAE,CAAC;AACP,CAAC;AA+BD,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAA0C,EAAE;IAE5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;QACjC,MAAM,CAAC,KAAK,CAAC,2CAA2C,GAAG,IAAI,CAAC,CAAC;IACnE,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CACX,KAAc,EACd,IAAY,EACZ,MAAc,EACd,SAAiB,EACjB,aAAgE,EAChE,MAAe,EACf,WAAoB,EACc,EAAE,CAAC,CAAC;QACtC,QAAQ,EAAE,CAAC;QACX,KAAK;QACL,IAAI;QACJ,MAAM;QACN,SAAS;QACT,aAAa;QACb,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC;QACjD,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;KACxC,CAAC,CAAC;IAEH,IAAI,KAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE;YACzC,SAAS,EAAE,IAAI;YACf,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC;SACzF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAE7C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,oBAAoB,CAAC;IACnE,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAE5E,IAAI,QAAkB,CAAC;IACvB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,yBAA0B,GAAa,CAAC,OAAO,EAAE,CAAC;YACjE,IAAI,CAAC,MAAM,CAAC,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,gBAAgB,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GACV,2GAA2G,CAAC;QAC9G,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,sCAAsC,GAAG,qBAAqB,CAAC;QAC9E,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,oEAAoE,CAAC;QACpF,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,cAAc,CAAC;IAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,gBAAgB,IAAI,wBAAwB,CAAC;IAEtE,IAAI,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC;IAC1C,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,iEAAiE;QACjE,sEAAsE;QACtE,iEAAiE;QACjE,mEAAmE;QACnE,gEAAgE;QAChE,qEAAqE;QACrE,iEAAiE;QACjE,sEAAsE;QACtE,yDAAyD;QACzD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QACzC,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtG,CAAC;IACD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,MAAM,GACV,wFAAwF;YACxF,gBAAgB,MAAM,0EAA0E;YAChG,yBAAyB,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,aAAa,4CAA4C,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,kBAAkB,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACjF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,sEAAsE;QACtE,gEAAgE;QAChE,oEAAoE;QACpE,sDAAsD;QACtD,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,gFAAgF,CAAC,CAAC;QACvG,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,aAAa,EAAE,CAAC;IAC/C,IAAI,MAAM,CAAC,WAAW,KAAK,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC,wBAAwB,SAAS,iCAAiC,CAAC,CAAC;IAC3E,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,MAAM,CAAC,qBAAqB;YAC5C,CAAC,CAAC,kCAAkC,iBAAiB,CACjD,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CACtE,SAAS,MAAM,CAAC,qBAAqB,GAAG;YAC3C,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,2BAA2B,MAAM,CAAC,UAAU,+BAA+B,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7H,IAAI,CACF,kCAAkC,MAAM,CAAC,WAAW,qBAAqB,SAAS,GAAG,SAAS,GAAG,WAAW,IAAI;YAC9G,6DAA6D,SAAS,oCAAoC;YAC1G,8CAA8C,MAAM,kBAAkB,SAAS,kBAAkB;YACjG,8GAA8G,CACjH,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GACX,MAAM,CAAC,WAAW,KAAK,CAAC;QACtB,CAAC,CAAC,cAAc,IAAI,IAAI,MAAM,YAAY,SAAS,EAAE;QACrD,CAAC,CAAC,cAAc,IAAI,IAAI,MAAM,WAAW,MAAM,CAAC,WAAW,UAAU,MAAM,CAAC,UAAU,SAAS,SAAS,EAAE;YACxG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAElE,IAAI,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACnC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,QAAQ,GAAG,2BAA2B,CAAC,QAAQ,EAAE;YACrD,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzF,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,mBAAmB,OAAO,EAAE,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACzF,CAAC;QACD,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC/B,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IACjF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,wBAAwB,OAAO,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,YAAY,OAAO,gBAAgB,SAAS,EAAE,CAAC,CAAC;IACrD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CACF,iGAAiG;YAC/F,kGAAkG;YAClG,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;AAC3F,CAAC"}