@lannguyensi/harness 0.64.0 → 1.0.0

package/dist/runtime/risk-classifier.js

@@ -1,311 +0,0 @@
-// Phase 7 #3 — Risk Classifier.
-//
-// Assigns an Action Envelope a risk profile by regex-matching the
-// manifest's `risk.classifiers[]` against the action. The first Risk
-// Gate stage that reads the `risk:` schema vocabulary shipped in
-// Phase 7 #1.
-//
-// STATUS: consumed by `harness policy intercept` (Phase 7 #5) and by the
-// `harness test-risk` debug verb (Phase 7 #3). See docs/risk-gate.md and
-// docs/ROADMAP.md.
-//
-// "Unknown is not safe": an envelope no pattern matches yields a
-// profile with `classified: false` and `severity: null`, deliberately
-// NOT a low/zero-risk profile. The Phase 7 #5 policy evaluator must
-// treat an unclassified action as risk-bearing rather than allow it by
-// default; this module's job is only to report the unclassified state
-// honestly.
-//
-// The built-in exceptions are floors, not overrides, and each composes
-// under the same highest-severity-wins rule as an operator pattern:
-// harness's own benign meta-commands (see BENIGN_HARNESS_COMMAND below),
-// the read-only-command / kubectl / sed / curl-SHAPE `low` floors (the
-// last added task fdaad781, decision D-026 -- see `isReadOnlyCurlCommand`
-// in read-only-bash.ts for why it is a SHAPE floor, not the per-flag
-// list decision D-013 removed), and (since task 2929c5b7) the
-// DESTRUCTIVE floor (`destructive-shell-floor.ts`),
-// which recognizes `dd of=`, `truncate -s`, `shred`, `mkfs`, `find
-// -delete` and friends in the binary so an install that never adopts the
-// new `dangerous-shell` template patterns still classifies them.
-//
-// Design source: lava-ice-logs/2026-04-30/harness-risk-gate-extension.md
-// (design phase B).
-import { RiskSeveritySchema } from "../schema/index.js";
-import { expandToolNameAliases, extractShellCommand } from "./tool-name-aliases.js";
-import { isReadOnlyBashCommand, isReadOnlyCurlCommand, isReadOnlyKubectlCommand, isReadOnlySedCommand, } from "./read-only-bash.js";
-import { classifyDestructiveShellFloor } from "./destructive-shell-floor.js";
-// Ordered severity scale: a value's index here is the comparison key
-// for "highest matched severity wins". Sourced from the schema enum so
-// a future reordering there flows through unchanged.
-const SEVERITY_ORDER = RiskSeveritySchema.options;
-// Categories that mean the action does not cleanly undo itself. When a
-// matched pattern carries any of these the profile is `reversible:
-// false`. `destructive` and `data_loss` are included alongside the
-// explicit `irreversible_action`: a regex classifier cannot prove an
-// action is safely undoable, and the Risk Gate exists to err toward
-// caution. A genuinely destructive-but-reversible action simply should
-// not be tagged `destructive` by its classifier author.
-const IRREVERSIBLE_CATEGORIES = new Set(["irreversible_action", "data_loss", "destructive"]);
-// Built-in benign-harness-command floor.
-//
-// harness's own read-only and gate-producer subcommands are benign: they
-// read state, record evidence, or print diagnostics, and several
-// (`harness preflight`, `harness session-start`) are REQUIRED by other
-// harness gates (require-preflight-evidence et al). Leaving them
-// unclassified lets the "unknown is not safe" fail-close treat them as
-// risk-bearing, so a `when: { risk.severity_at_least: critical,
-// environment.name: production }` policy HARD-DENIES `harness preflight`
-// the moment a session resolves to production (a main / release branch)
-// — deadlocking against the very gate that demands it. So we recognize
-// these as a `low`-severity floor.
-//
-// Floor, not override: the contribution composes with operator
-// classifiers under the same highest-severity-wins rule, so
-// `harness preflight && rm -rf /var` still classifies `critical` (the
-// dangerous-shell tail wins) and an operator pattern can only RAISE the
-// severity, never sink below this floor. Mutating subcommands (`apply`,
-// `init`, `add`, `adopt`, `remove`, `pack`, `uninstall`, `migrate-home`,
-// `smoke`, `gate`, `pause`, `resume`) are deliberately excluded — they
-// stay classifiable. Anchored at the command head, so `cd /x && harness
-// preflight` does NOT match and stays unclassified (fail-safe = denied):
-// a benign prefix must not launder a non-harness command.
-const BENIGN_HARNESS_SUBCOMMANDS = [
-    "preflight",
-    "session-start",
-    "approve",
-    "doctor",
-    "validate",
-    "describe",
-    "list",
-    "diff",
-    "explain",
-    "explain-action",
-    "explain-policy",
-    "test-risk",
-    "resolve-env",
-    "audit",
-    "session-export",
-    "dry-run",
-    "export",
-    "help",
-];
-const BENIGN_HARNESS_COMMAND = new RegExp(`^\\s*harness\\s+(?:${BENIGN_HARNESS_SUBCOMMANDS.join("|")})\\b`);
-// Hot-path ReDoS guard (Phase 7 #6). As of Phase 7 #5/#6 the classifier
-// runs operator-authored regexes against tool input on EVERY PreToolUse
-// call inside `harness policy intercept`. Catastrophic-backtracking cost
-// scales with input length, so the match subject is capped before any
-// pattern runs. This bounds the input-length-driven blow-up — the common
-// failure mode for a tool call that pipes a large blob through Bash.
-//
-// It is a mitigation, not a complete fix: harness does NOT screen the
-// classifier patterns themselves for catastrophic backtracking. A
-// manifest is operator-trusted config — the same contract already stated
-// for `environments.resolvers[].kube_context_patterns` in
-// docs/risk-gate.md. A pathological *pattern* is a self-inflicted hazard.
-//
-// 16 KiB comfortably covers any real shell command or serialized tool
-// input. A genuinely dangerous command longer than the cap still does
-// not slip the gate: its head (where `rm -rf` / `terraform destroy` /
-// `kubectl delete` live) is within the cap, and an action that ends up
-// unclassified is treated as risk-bearing by the `when:` evaluator.
-const MAX_SUBJECT_LENGTH = 16 * 1024;
-/**
- * The string a classifier's patterns are regex-matched against. For a
- * shell-class tool (or any tool whose input carries a `command` / `cmd`
- * field) it is that command. For other tools it is the serialized raw
- * input — blunt, but it keeps non-shell classifiers usable in the MVP.
- *
- * The result is capped at `MAX_SUBJECT_LENGTH` (ReDoS guard, see above).
- */
-function subjectFor(envelope) {
-    const subject = rawSubjectFor(envelope);
-    return subject.length > MAX_SUBJECT_LENGTH
-        ? subject.slice(0, MAX_SUBJECT_LENGTH)
-        : subject;
-}
-function rawSubjectFor(envelope) {
-    const command = extractShellCommand({ raw_input: envelope.raw_input });
-    if (command !== null)
-        return command;
-    const raw = envelope.raw_input;
-    if (raw === null || raw === undefined)
-        return "";
-    if (typeof raw === "string")
-        return raw;
-    try {
-        return JSON.stringify(raw);
-    }
-    catch {
-        return "";
-    }
-}
-/** A classifier applies when its `tool` is an alias of the envelope's tool. */
-function classifierApplies(classifier, envelope) {
-    return expandToolNameAliases(envelope.tool).includes(classifier.tool);
-}
-/**
- * Classify an Action Envelope against the manifest's risk classifiers.
- *
- * Pure: envelope + classifiers in, profile out, no I/O. Multiple
- * matching patterns compose — highest severity wins, categories union,
- * one `reasons` line per hit. An envelope no pattern matches yields the
- * honest unclassified profile (`classified: false`, `severity: null`).
- */
-export function classifyRisk(envelope, classifiers) {
-    const applicable = classifiers.filter((c) => classifierApplies(c, envelope));
-    const subject = subjectFor(envelope);
-    const categories = new Set();
-    const reasons = [];
-    let severityIdx = -1;
-    for (const classifier of applicable) {
-        for (const pat of classifier.patterns) {
-            let re;
-            try {
-                re = new RegExp(pat.pattern);
-            }
-            catch {
-                // The schema regex-validates patterns at parse time; this guard
-                // only covers a manifest that bypassed `harness validate`.
-                continue;
-            }
-            if (!re.test(subject))
-                continue;
-            for (const cat of pat.categories)
-                categories.add(cat);
-            const idx = SEVERITY_ORDER.indexOf(pat.severity);
-            if (idx > severityIdx)
-                severityIdx = idx;
-            reasons.push(`classifier "${classifier.name}" pattern /${pat.pattern}/ matched: ` +
-                `severity ${pat.severity}, categories [${pat.categories.join(", ")}]`);
-        }
-    }
-    // Built-in floors. Folded in AFTER the operator loop so they compose by
-    // the same highest-severity-wins rule: the benign ones only raise an
-    // otherwise-unclassified action up to `low`, and never sink an operator
-    // match (a dangerous tail in `harness preflight && rm -rf /var` keeps
-    // the higher severity, and a chained command is not read-only); the
-    // destructive one raises to `high`/`critical` and is evaluated first,
-    // so a recognized mutating head never also takes a benign floor. All
-    // of them are gated on a real shell command so a non-shell tool whose
-    // serialized input happens to look benign cannot match.
-    const shellCommand = extractShellCommand({ raw_input: envelope.raw_input });
-    if (shellCommand !== null) {
-        // Built-in DESTRUCTIVE floor (task 2929c5b7), evaluated before the
-        // benign floors below so a recognized mutating head keeps them from
-        // firing at all. It ships in the binary rather than only as a
-        // `dangerous-shell` template pattern because `harness init` writes a
-        // manifest once and never rewrites it: an install carrying the
-        // original four patterns would otherwise take `when-eval.ts`'s
-        // loosened `severity_at_least: critical` fallback on upgrade WITHOUT
-        // the compensating classification. See
-        // `destructive-shell-floor.ts`'s module header and docs/risk-gate.md.
-        //
-        // Same composition rule as every other floor: highest severity wins,
-        // categories union. An operator pattern can raise above it; nothing
-        // sinks below it.
-        //
-        // Pass the UNCAPPED shellCommand for the same reason the read-only
-        // floor does (see below): the floor's scan is linear-time, and a
-        // destructive tail past the 16 KiB `subject` cap must not be
-        // laundered by a long benign head.
-        for (const hit of classifyDestructiveShellFloor(shellCommand)) {
-            const idx = SEVERITY_ORDER.indexOf(hit.severity);
-            if (idx > severityIdx)
-                severityIdx = idx;
-            for (const cat of hit.categories)
-                categories.add(cat);
-            reasons.push(`${hit.reason} (severity ${hit.severity})`);
-        }
-        const lowIdx = SEVERITY_ORDER.indexOf("low");
-        if (lowIdx > severityIdx) {
-            if (BENIGN_HARNESS_COMMAND.test(subject)) {
-                // harness's own benign meta-commands (head-anchored; see
-                // BENIGN_HARNESS_COMMAND). Broader than the read-only floor: it
-                // also floors gate-PRODUCER commands like `harness preflight`
-                // and `harness approve`, which the understanding-gate read-only
-                // classifier deliberately excludes.
-                severityIdx = lowIdx;
-                reasons.push("built-in: benign harness meta-command recognized (severity low)");
-            }
-            else if (isReadOnlyBashCommand(shellCommand)) {
-                // Any provably read-only command (`git status`, `grep`, `cat`,
-                // ...). Without this floor, "unknown is not safe" treats it as
-                // risk-bearing and a prod-scoped `risk.severity_at_least` policy
-                // denies harmless reads on a main / release branch (the recurring
-                // release-cut false-positive). The shared classifier already
-                // rejects any chaining / redirection / substitution, so a metachar
-                // command can never reach this floor.
-                //
-                // Pass the UNCAPPED shellCommand, not the 16 KiB-capped `subject`:
-                // isReadOnlyBashCommand scans the whole string for write
-                // metacharacters, so a tail truncated by the cap (e.g. a hidden
-                // `; rm -rf /` past 16 KiB) must not be able to launder a write
-                // behind a read-only head. The classifier's checks are linear-time,
-                // so the uncapped scan carries no ReDoS risk.
-                severityIdx = lowIdx;
-                reasons.push("built-in: provably read-only command recognized (severity low)");
-            }
-            else if (isReadOnlyKubectlCommand(shellCommand)) {
-                // Kubectl read-verb floor (task da823721), narrower than the
-                // general read-only floor above and NOT folded into
-                // `isReadOnlyBashCommand` itself: it changes only the Risk
-                // Classifier's behavior. The understanding-gate PreToolUse
-                // blocker and the solution-acceptance write-guard both consume
-                // `isReadOnlyBashCommand` directly and keep treating every
-                // kubectl invocation as non-read-only, unchanged by this floor.
-                // See docs/risk-gate.md's kubectl read-only floor decision for
-                // the secrets exclusion and the full blast-radius reasoning.
-                severityIdx = lowIdx;
-                reasons.push("built-in: provably read-only kubectl verb recognized (severity low)");
-            }
-            else if (isReadOnlySedCommand(shellCommand)) {
-                // `sed` read-verb floor (task 2929c5b7). Same placement decision
-                // as the kubectl floor directly above and for the same measured
-                // reason: it is NOT folded into `isReadOnlyBashCommand`, because
-                // the understanding-gate PreToolUse blocker and the
-                // solution-acceptance write-guard consume that predicate
-                // directly and short-circuit on it, so a `sed` recognition there
-                // would let `sed 's/a/b/w <verdict-dir>/marker.json' f` past the
-                // write-guard. See `isReadOnlySedCommand`'s own docstring for
-                // the allowlist and the script scan (sed's `w` command, `s///w`
-                // flag, `-f SCRIPTFILE` and GNU `e` all forfeit).
-                severityIdx = lowIdx;
-                reasons.push("built-in: provably read-only sed invocation recognized (severity low)");
-            }
-            else if (isReadOnlyCurlCommand(shellCommand)) {
-                // curl read-only SHAPE floor (task fdaad781, decision D-026,
-                // round 2 hardening: mandatory `-q`, dropped `-L`/`-k`),
-                // superseding D-013's two leaked flag lists. See
-                // `isReadOnlyCurlCommand`'s docstring in `read-only-bash.ts`
-                // and docs/risk-gate.md's "curl read-only SHAPE floor" section
-                // for the grammar, the residuals, and the operator escape hatch.
-                severityIdx = lowIdx;
-                reasons.push("built-in: provably read-only curl invocation recognized (severity low)");
-            }
-        }
-    }
-    if (severityIdx === -1) {
-        return {
-            classified: false,
-            severity: null,
-            categories: [],
-            reversible: null,
-            confidence: "low",
-            reasons: [
-                applicable.length === 0
-                    ? `no risk classifier is declared for tool "${envelope.tool}"`
-                    : `no classifier pattern matched the action for tool "${envelope.tool}"`,
-            ],
-        };
-    }
-    const sortedCategories = [...categories].sort();
-    return {
-        classified: true,
-        severity: SEVERITY_ORDER[severityIdx],
-        categories: sortedCategories,
-        reversible: !sortedCategories.some((c) => IRREVERSIBLE_CATEGORIES.has(c)),
-        confidence: "high",
-        reasons,
-    };
-}
-//# sourceMappingURL=risk-classifier.js.map

package/dist/runtime/risk-classifier.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"risk-classifier.js","sourceRoot":"","sources":["../../src/runtime/risk-classifier.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,EAAE;AACF,kEAAkE;AAClE,qEAAqE;AACrE,iEAAiE;AACjE,cAAc;AACd,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AACzE,mBAAmB;AACnB,EAAE;AACF,iEAAiE;AACjE,sEAAsE;AACtE,oEAAoE;AACpE,uEAAuE;AACvE,sEAAsE;AACtE,YAAY;AACZ,EAAE;AACF,uEAAuE;AACvE,oEAAoE;AACpE,yEAAyE;AACzE,uEAAuE;AACvE,0EAA0E;AAC1E,qEAAqE;AACrE,8DAA8D;AAC9D,oDAAoD;AACpD,mEAAmE;AACnE,yEAAyE;AACzE,iEAAiE;AACjE,EAAE;AACF,yEAAyE;AACzE,oBAAoB;AAOpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACpF,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAE7E,qEAAqE;AACrE,uEAAuE;AACvE,qDAAqD;AACrD,MAAM,cAAc,GAA4B,kBAAkB,CAAC,OAAO,CAAC;AAE3E,uEAAuE;AACvE,mEAAmE;AACnE,mEAAmE;AACnE,qEAAqE;AACrE,oEAAoE;AACpE,uEAAuE;AACvE,wDAAwD;AACxD,MAAM,uBAAuB,GAA8B,IAAI,GAAG,CAChE,CAAC,qBAAqB,EAAE,WAAW,EAAE,aAAa,CAAC,CACpD,CAAC;AAEF,yCAAyC;AACzC,EAAE;AACF,yEAAyE;AACzE,iEAAiE;AACjE,uEAAuE;AACvE,iEAAiE;AACjE,uEAAuE;AACvE,gEAAgE;AAChE,yEAAyE;AACzE,wEAAwE;AACxE,uEAAuE;AACvE,mCAAmC;AACnC,EAAE;AACF,+DAA+D;AAC/D,4DAA4D;AAC5D,sEAAsE;AACtE,wEAAwE;AACxE,wEAAwE;AACxE,yEAAyE;AACzE,uEAAuE;AACvE,wEAAwE;AACxE,yEAAyE;AACzE,0DAA0D;AAC1D,MAAM,0BAA0B,GAAsB;IACpD,WAAW;IACX,eAAe;IACf,SAAS;IACT,QAAQ;IACR,UAAU;IACV,UAAU;IACV,MAAM;IACN,MAAM;IACN,SAAS;IACT,gBAAgB;IAChB,gBAAgB;IAChB,WAAW;IACX,aAAa;IACb,OAAO;IACP,gBAAgB;IAChB,SAAS;IACT,QAAQ;IACR,MAAM;CACP,CAAC;AAEF,MAAM,sBAAsB,GAAG,IAAI,MAAM,CACvC,sBAAsB,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CACjE,CAAC;AA+BF,wEAAwE;AACxE,wEAAwE;AACxE,yEAAyE;AACzE,sEAAsE;AACtE,yEAAyE;AACzE,qEAAqE;AACrE,EAAE;AACF,sEAAsE;AACtE,kEAAkE;AAClE,yEAAyE;AACzE,0DAA0D;AAC1D,0EAA0E;AAC1E,EAAE;AACF,sEAAsE;AACtE,sEAAsE;AACtE,sEAAsE;AACtE,uEAAuE;AACvE,oEAAoE;AACpE,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AAErC;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,QAAwB;IAC1C,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC,MAAM,GAAG,kBAAkB;QACxC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC;QACtC,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,QAAwB;IAC7C,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IACvE,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC;IAC/B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACjD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,SAAS,iBAAiB,CACxB,UAA0B,EAC1B,QAAwB;IAExB,OAAO,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,QAAwB,EACxB,WAAsC;IAEtC,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAErC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAgB,CAAC;IAC3C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC;IAErB,KAAK,MAAM,UAAU,IAAI,UAAU,EAAE,CAAC;QACpC,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;YACtC,IAAI,EAAU,CAAC;YACf,IAAI,CAAC;gBACH,EAAE,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;gBAChE,2DAA2D;gBAC3D,SAAS;YACX,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,SAAS;YAChC,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU;gBAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtD,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACjD,IAAI,GAAG,GAAG,WAAW;gBAAE,WAAW,GAAG,GAAG,CAAC;YACzC,OAAO,CAAC,IAAI,CACV,eAAe,UAAU,CAAC,IAAI,cAAc,GAAG,CAAC,OAAO,aAAa;gBAClE,YAAY,GAAG,CAAC,QAAQ,iBAAiB,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACxE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,qEAAqE;IACrE,wEAAwE;IACxE,sEAAsE;IACtE,oEAAoE;IACpE,sEAAsE;IACtE,qEAAqE;IACrE,sEAAsE;IACtE,wDAAwD;IACxD,MAAM,YAAY,GAAG,mBAAmB,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IAC5E,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,mEAAmE;QACnE,oEAAoE;QACpE,8DAA8D;QAC9D,qEAAqE;QACrE,+DAA+D;QAC/D,+DAA+D;QAC/D,qEAAqE;QACrE,uCAAuC;QACvC,sEAAsE;QACtE,EAAE;QACF,qEAAqE;QACrE,oEAAoE;QACpE,kBAAkB;QAClB,EAAE;QACF,mEAAmE;QACnE,iEAAiE;QACjE,6DAA6D;QAC7D,mCAAmC;QACnC,KAAK,MAAM,GAAG,IAAI,6BAA6B,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9D,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACjD,IAAI,GAAG,GAAG,WAAW;gBAAE,WAAW,GAAG,GAAG,CAAC;YACzC,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU;gBAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,cAAc,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,MAAM,GAAG,WAAW,EAAE,CAAC;YACzB,IAAI,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzC,yDAAyD;gBACzD,gEAAgE;gBAChE,8DAA8D;gBAC9D,gEAAgE;gBAChE,oCAAoC;gBACpC,WAAW,GAAG,MAAM,CAAC;gBACrB,OAAO,CAAC,IAAI,CACV,iEAAiE,CAClE,CAAC;YACJ,CAAC;iBAAM,IAAI,qBAAqB,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC/C,+DAA+D;gBAC/D,+DAA+D;gBAC/D,iEAAiE;gBACjE,kEAAkE;gBAClE,6DAA6D;gBAC7D,mEAAmE;gBACnE,sCAAsC;gBACtC,EAAE;gBACF,mEAAmE;gBACnE,yDAAyD;gBACzD,gEAAgE;gBAChE,gEAAgE;gBAChE,oEAAoE;gBACpE,8CAA8C;gBAC9C,WAAW,GAAG,MAAM,CAAC;gBACrB,OAAO,CAAC,IAAI,CACV,gEAAgE,CACjE,CAAC;YACJ,CAAC;iBAAM,IAAI,wBAAwB,CAAC,YAAY,CAAC,EAAE,CAAC;gBAClD,6DAA6D;gBAC7D,oDAAoD;gBACpD,2DAA2D;gBAC3D,2DAA2D;gBAC3D,+DAA+D;gBAC/D,2DAA2D;gBAC3D,gEAAgE;gBAChE,+DAA+D;gBAC/D,6DAA6D;gBAC7D,WAAW,GAAG,MAAM,CAAC;gBACrB,OAAO,CAAC,IAAI,CACV,qEAAqE,CACtE,CAAC;YACJ,CAAC;iBAAM,IAAI,oBAAoB,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC9C,iEAAiE;gBACjE,gEAAgE;gBAChE,iEAAiE;gBACjE,oDAAoD;gBACpD,yDAAyD;gBACzD,iEAAiE;gBACjE,iEAAiE;gBACjE,8DAA8D;gBAC9D,gEAAgE;gBAChE,kDAAkD;gBAClD,WAAW,GAAG,MAAM,CAAC;gBACrB,OAAO,CAAC,IAAI,CACV,uEAAuE,CACxE,CAAC;YACJ,CAAC;iBAAM,IAAI,qBAAqB,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC/C,6DAA6D;gBAC7D,yDAAyD;gBACzD,iDAAiD;gBACjD,6DAA6D;gBAC7D,+DAA+D;gBAC/D,iEAAiE;gBACjE,WAAW,GAAG,MAAM,CAAC;gBACrB,OAAO,CAAC,IAAI,CACV,wEAAwE,CACzE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,WAAW,KAAK,CAAC,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,EAAE;YACd,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE;gBACP,UAAU,CAAC,MAAM,KAAK,CAAC;oBACrB,CAAC,CAAC,4CAA4C,QAAQ,CAAC,IAAI,GAAG;oBAC9D,CAAC,CAAC,sDAAsD,QAAQ,CAAC,IAAI,GAAG;aAC3E;SACF,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,OAAO;QACL,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE,cAAc,CAAC,WAAW,CAAE;QACtC,UAAU,EAAE,gBAAgB;QAC5B,UAAU,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzE,UAAU,EAAE,MAAM;QAClB,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/runtime/session-id.d.ts

@@ -1,113 +0,0 @@
-/**
- * Resolve the active grounding session id (WRITE path).
- *
- * Empty strings are treated as "not provided" — both for the explicit
- * argument and for the env var, since `--session ''` from a forgetful
- * shell expansion or `CLAUDE_SESSION_ID=` from a stale exec env should
- * fall through to the next tier rather than be honoured as a literal
- * empty session.
- */
-export declare function resolveSessionId(explicit?: string): string;
-export interface DiscoverSessionOptions {
-    /** Override the Claude Code projects root (tests). */
-    projectsRoot?: string;
-    /** Override `$HOME` used to derive the projects root (tests). */
-    homeDir?: string;
-}
-/**
- * Discover the current Claude Code session id from the most recently
- * modified transcript JSONL under `~/.claude/projects/<project>/`.
- *
- * Claude Code appends to the active session's transcript live, so the
- * newest-mtime `<uuid>.jsonl` across all project dirs is the running
- * session. Returns `null` when the projects root is absent or holds no
- * transcript files — callers fall through to their own default.
- */
-export declare function discoverNewestSessionId(opts?: DiscoverSessionOptions): string | null;
-export interface ResolveReadSessionOptions extends DiscoverSessionOptions {
-    /**
-     * Test seam — override the transcript-discovery tier wholesale. The
-     * default scans the real `~/.claude/projects` via
-     * `discoverNewestSessionId`.
-     */
-    discover?: (opts: DiscoverSessionOptions) => string | null;
-}
-/**
- * Resolve the session id for the READ path (`audit`,
- * `explain --trace/--last`).
- *
- * Precedence:
- *   1. explicit value (the `--session` flag)
- *   2. `$CLAUDE_CODE_SESSION_ID` env (the var Claude Code actually exports)
- *   3. `$CLAUDE_SESSION_ID` env (legacy fallback)
- *   4. newest Claude Code transcript (the live session)
- *   5. literal `"default"`
- *
- * The WRITE path keeps `resolveSessionId`: it always has
- * `event.session_id`, so it never reaches the discovery tier, and a
- * per-hook-event filesystem scan would be wasteful.
- */
-export declare function resolveReadSessionId(explicit?: string, opts?: ResolveReadSessionOptions): string;
-/** Session-id source for the `harness approve` verbs. */
-export type ApprovalSessionSource = "flag" | "env-claude-code" | "env-claude" | "env-codex" | "pending-approval" | "newest-report";
-export interface ResolveApprovalSessionIdOptions {
-    /** Explicit --session flag value. Empty string is treated as absent. */
-    session?: string;
-    /** Path to the harness.generated/ directory; used to read .pending-approval. */
-    generatedDir: string;
-    /**
-     * Optional 6th-tier callback. When provided and reached, it is called
-     * once and should return the session id plus the file path of the
-     * freshest qualifying persisted report, or null when none qualifies.
-     * Only `approve understanding` supplies this; `approve risk` and
-     * `approve branch-protection` omit it (they produce no persisted reports).
-     */
-    newestReportFallback?: () => {
-        sessionId: string;
-        filePath: string;
-    } | null;
-    /**
-     * Test seam: override the .pending-approval reader. Defaults to
-     * `readPendingApproval` from pending-approval.ts. Verb-level tests use
-     * real tmp directories and do not need this; unit tests for the resolver
-     * itself use it to avoid creating directories.
-     */
-    readPending?: (dir: string) => string | null;
-}
-export interface ResolveApprovalSessionIdResult {
-    /**
-     * The resolved session id, or an empty string when no tier matched.
-     * Callers MUST check for the empty string and throw a verb-specific
-     * error. The empty-string path is intentional: it lets callers produce
-     * messages that name their own gate hook, approve subcommand, and
-     * recovery steps without the resolver needing to know about them.
-     */
-    sessionId: string;
-    /**
-     * Where the session id came from. When `sessionId` is empty this field
-     * is meaningless (callers throw before returning it to the operator).
-     */
-    sessionSource: ApprovalSessionSource;
-    /**
-     * Set only when `sessionSource === "newest-report"`. The absolute path
-     * of the persisted report whose `sessionId` field was adopted. Surfaced
-     * in the `approve understanding` CLI warning so the operator can verify
-     * the report belongs to their live session.
-     */
-    newestReportPath?: string;
-}
-/**
- * Shared session-id resolver for the `harness approve` verbs.
- *
- * Precedence:
- *   1. explicit --session flag
- *   2. $CLAUDE_CODE_SESSION_ID (the var Claude Code exports into the agent shell)
- *   3. $CLAUDE_SESSION_ID (legacy / docs name; kept for older operator recipes)
- *   4. $CODEX_SESSION_ID (set inside a live Codex session)
- *   5. .pending-approval staging file (written by the gate hook or preflight)
- *   6. newestReportFallback() result -- only understanding.ts uses this tier
- *
- * Returns `{ sessionId: "" }` when no tier resolves. The caller is
- * responsible for throwing a verb-specific HarnessExitError in that case.
- */
-export declare function resolveApprovalSessionId(opts: ResolveApprovalSessionIdOptions): ResolveApprovalSessionIdResult;

package/dist/runtime/session-id.js

@@ -1,193 +0,0 @@
-// Phase 5 #2 — shared sessionId resolver.
-//
-// Three Phase 4 verbs (`audit`, `explain --trace`, `policy intercept`)
-// previously defaulted to the literal string `"default"` when no
-// session was given. Real Claude Code sessions are UUIDs that arrive
-// via the hook event's `session_id`. When the user later runs
-// `harness audit` or `harness explain --trace` without `--session`, the
-// read path looked at `"default"` and silently returned an empty
-// audit/trace even though the writes had landed correctly under the
-// real UUID.
-//
-// `resolveSessionId` lifts the precedence chain into one place for the
-// WRITE path (`policy intercept`), which always carries a concrete
-// `event.session_id`:
-//   1. explicit value (the runtime's `event.session_id`)
-//   2. `$CLAUDE_CODE_SESSION_ID` env (the var Claude Code actually exports)
-//   3. `$CLAUDE_SESSION_ID` env (legacy fallback)
-//   4. literal `"default"`
-//
-// The READ path (`audit`, `explain --trace/--last`) needs more. The
-// Phase 5 #2 fix assumed `$CLAUDE_SESSION_ID` is exported into the
-// session's shell environment — it is not (Claude Code does not put it
-// in the Bash tool env), so tier 2 is inert in practice and the readers
-// still fell through to `"default"`. `resolveReadSessionId` adds a
-// transcript-discovery tier: when no explicit id and no env, it reads
-// the active session id off the newest Claude Code transcript JSONL.
-// That is the programmatic form of the heuristic `harness approve`'s
-// own help text recommends to humans.
-//
-// Both resolvers also accept `$CLAUDE_CODE_SESSION_ID` as a higher-priority
-// env tier than the legacy `$CLAUDE_SESSION_ID`, mirroring the
-// `harness approve` verbs (`src/cli/approve/{risk,understanding}.ts`).
-import * as fs from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
-import { readPendingApproval } from "./pending-approval.js";
-const FALLBACK = "default";
-/**
- * Resolve the active grounding session id (WRITE path).
- *
- * Empty strings are treated as "not provided" — both for the explicit
- * argument and for the env var, since `--session ''` from a forgetful
- * shell expansion or `CLAUDE_SESSION_ID=` from a stale exec env should
- * fall through to the next tier rather than be honoured as a literal
- * empty session.
- */
-export function resolveSessionId(explicit) {
-    if (typeof explicit === "string" && explicit.length > 0)
-        return explicit;
-    const envCode = process.env.CLAUDE_CODE_SESSION_ID;
-    if (typeof envCode === "string" && envCode.length > 0)
-        return envCode;
-    const env = process.env.CLAUDE_SESSION_ID;
-    if (typeof env === "string" && env.length > 0)
-        return env;
-    return FALLBACK;
-}
-// Claude Code names each session's transcript `<uuid>.jsonl`. Anchored
-// so sibling files (memory dirs, `.pending-approval`, etc.) are ignored.
-const SESSION_TRANSCRIPT_RE = /^([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\.jsonl$/i;
-/**
- * Discover the current Claude Code session id from the most recently
- * modified transcript JSONL under `~/.claude/projects/<project>/`.
- *
- * Claude Code appends to the active session's transcript live, so the
- * newest-mtime `<uuid>.jsonl` across all project dirs is the running
- * session. Returns `null` when the projects root is absent or holds no
- * transcript files — callers fall through to their own default.
- */
-export function discoverNewestSessionId(opts = {}) {
-    const projectsRoot = opts.projectsRoot ??
-        path.join(opts.homeDir ?? os.homedir(), ".claude", "projects");
-    let projectDirs;
-    try {
-        projectDirs = fs.readdirSync(projectsRoot);
-    }
-    catch {
-        return null;
-    }
-    let newest = null;
-    for (const dir of projectDirs) {
-        const projectPath = path.join(projectsRoot, dir);
-        let files;
-        try {
-            files = fs.readdirSync(projectPath);
-        }
-        catch {
-            continue; // not a directory, or unreadable — skip
-        }
-        for (const file of files) {
-            const match = SESSION_TRANSCRIPT_RE.exec(file);
-            if (!match)
-                continue;
-            let mtimeMs;
-            try {
-                mtimeMs = fs.statSync(path.join(projectPath, file)).mtimeMs;
-            }
-            catch {
-                continue;
-            }
-            if (newest === null || mtimeMs > newest.mtimeMs) {
-                newest = { id: match[1], mtimeMs };
-            }
-        }
-    }
-    return newest === null ? null : newest.id;
-}
-/**
- * Resolve the session id for the READ path (`audit`,
- * `explain --trace/--last`).
- *
- * Precedence:
- *   1. explicit value (the `--session` flag)
- *   2. `$CLAUDE_CODE_SESSION_ID` env (the var Claude Code actually exports)
- *   3. `$CLAUDE_SESSION_ID` env (legacy fallback)
- *   4. newest Claude Code transcript (the live session)
- *   5. literal `"default"`
- *
- * The WRITE path keeps `resolveSessionId`: it always has
- * `event.session_id`, so it never reaches the discovery tier, and a
- * per-hook-event filesystem scan would be wasteful.
- */
-export function resolveReadSessionId(explicit, opts = {}) {
-    if (typeof explicit === "string" && explicit.length > 0)
-        return explicit;
-    const envCode = process.env.CLAUDE_CODE_SESSION_ID;
-    if (typeof envCode === "string" && envCode.length > 0)
-        return envCode;
-    const env = process.env.CLAUDE_SESSION_ID;
-    if (typeof env === "string" && env.length > 0)
-        return env;
-    const discover = opts.discover ?? discoverNewestSessionId;
-    const discovered = discover({
-        ...(opts.projectsRoot !== undefined && { projectsRoot: opts.projectsRoot }),
-        ...(opts.homeDir !== undefined && { homeDir: opts.homeDir }),
-    });
-    if (typeof discovered === "string" && discovered.length > 0)
-        return discovered;
-    return FALLBACK;
-}
-/**
- * Shared session-id resolver for the `harness approve` verbs.
- *
- * Precedence:
- *   1. explicit --session flag
- *   2. $CLAUDE_CODE_SESSION_ID (the var Claude Code exports into the agent shell)
- *   3. $CLAUDE_SESSION_ID (legacy / docs name; kept for older operator recipes)
- *   4. $CODEX_SESSION_ID (set inside a live Codex session)
- *   5. .pending-approval staging file (written by the gate hook or preflight)
- *   6. newestReportFallback() result -- only understanding.ts uses this tier
- *
- * Returns `{ sessionId: "" }` when no tier resolves. The caller is
- * responsible for throwing a verb-specific HarnessExitError in that case.
- */
-export function resolveApprovalSessionId(opts) {
-    const readPending = opts.readPending ?? readPendingApproval;
-    if (typeof opts.session === "string" && opts.session.length > 0) {
-        return { sessionId: opts.session, sessionSource: "flag" };
-    }
-    if (typeof process.env.CLAUDE_CODE_SESSION_ID === "string" &&
-        process.env.CLAUDE_CODE_SESSION_ID.length > 0) {
-        return {
-            sessionId: process.env.CLAUDE_CODE_SESSION_ID,
-            sessionSource: "env-claude-code",
-        };
-    }
-    if (typeof process.env.CLAUDE_SESSION_ID === "string" &&
-        process.env.CLAUDE_SESSION_ID.length > 0) {
-        return { sessionId: process.env.CLAUDE_SESSION_ID, sessionSource: "env-claude" };
-    }
-    if (typeof process.env.CODEX_SESSION_ID === "string" &&
-        process.env.CODEX_SESSION_ID.length > 0) {
-        return { sessionId: process.env.CODEX_SESSION_ID, sessionSource: "env-codex" };
-    }
-    const staged = readPending(opts.generatedDir);
-    if (staged !== null) {
-        return { sessionId: staged, sessionSource: "pending-approval" };
-    }
-    if (opts.newestReportFallback !== undefined) {
-        const newest = opts.newestReportFallback();
-        if (newest !== null) {
-            return {
-                sessionId: newest.sessionId,
-                sessionSource: "newest-report",
-                newestReportPath: newest.filePath,
-            };
-        }
-    }
-    // Nothing resolved. Callers check sessionId === "" and throw their own
-    // verb-specific error messages.
-    return { sessionId: "", sessionSource: "flag" };
-}
-//# sourceMappingURL=session-id.js.map

package/dist/runtime/session-id.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-id.js","sourceRoot":"","sources":["../../src/runtime/session-id.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,EAAE;AACF,uEAAuE;AACvE,iEAAiE;AACjE,qEAAqE;AACrE,8DAA8D;AAC9D,wEAAwE;AACxE,iEAAiE;AACjE,oEAAoE;AACpE,aAAa;AACb,EAAE;AACF,uEAAuE;AACvE,mEAAmE;AACnE,sBAAsB;AACtB,yDAAyD;AACzD,4EAA4E;AAC5E,kDAAkD;AAClD,2BAA2B;AAC3B,EAAE;AACF,oEAAoE;AACpE,mEAAmE;AACnE,uEAAuE;AACvE,wEAAwE;AACxE,mEAAmE;AACnE,sEAAsE;AACtE,qEAAqE;AACrE,qEAAqE;AACrE,sCAAsC;AACtC,EAAE;AACF,4EAA4E;AAC5E,+DAA+D;AAC/D,uEAAuE;AAEvE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,QAAQ,GAAG,SAAS,CAAC;AAE3B;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAiB;IAChD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACnD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACtE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC1C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAC1D,OAAO,QAAQ,CAAC;AAClB,CAAC;AASD,uEAAuE;AACvE,yEAAyE;AACzE,MAAM,qBAAqB,GACzB,0EAA0E,CAAC;AAE7E;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAA+B,EAAE;IAEjC,MAAM,YAAY,GAChB,IAAI,CAAC,YAAY;QACjB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACjE,IAAI,WAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,GAA2C,IAAI,CAAC;IAC1D,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,wCAAwC;QACpD,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;gBAChD,MAAM,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,OAAO,EAAE,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;AAC5C,CAAC;AAWD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAiB,EACjB,OAAkC,EAAE;IAEpC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACnD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACtE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC1C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,uBAAuB,CAAC;IAC1D,MAAM,UAAU,GAAG,QAAQ,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QAC3E,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;KAC7D,CAAC,CAAC;IACH,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IAC/E,OAAO,QAAQ,CAAC;AAClB,CAAC;AAqED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAAqC;IAErC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,mBAAmB,CAAC;IAE5D,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IAC5D,CAAC;IACD,IACE,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,QAAQ;QACtD,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAC7C,CAAC;QACD,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB;YAC7C,aAAa,EAAE,iBAAiB;SACjC,CAAC;IACJ,CAAC;IACD,IACE,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,QAAQ;QACjD,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EACxC,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;IACnF,CAAC;IACD,IACE,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,QAAQ;QAChD,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EACvC,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC;IACjF,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC;IAClE,CAAC;IAED,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC3C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO;gBACL,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,aAAa,EAAE,eAAe;gBAC9B,gBAAgB,EAAE,MAAM,CAAC,QAAQ;aAClC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,gCAAgC;IAChC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;AAClD,CAAC"}