@lannguyensi/harness 0.64.0 → 1.0.0

package/dist/schema/risk.d.ts

@@ -1,144 +0,0 @@
-import { z } from "zod";
-export declare const RiskSeveritySchema: z.ZodEnum<["low", "medium", "high", "critical"]>;
-export declare const RiskCategorySchema: z.ZodEnum<["destructive", "data_loss", "production_mutation", "credential_access", "secret_exfiltration", "network_exfiltration", "deployment_change", "infrastructure_change", "privilege_escalation", "irreversible_action", "mass_update"]>;
-export declare const RiskClassifierSchema: z.ZodObject<{
-    name: z.ZodString;
-    tool: z.ZodString;
-    patterns: z.ZodArray<z.ZodEffects<z.ZodObject<{
-        pattern: z.ZodString;
-        categories: z.ZodArray<z.ZodEnum<["destructive", "data_loss", "production_mutation", "credential_access", "secret_exfiltration", "network_exfiltration", "deployment_change", "infrastructure_change", "privilege_escalation", "irreversible_action", "mass_update"]>, "many">;
-        severity: z.ZodEnum<["low", "medium", "high", "critical"]>;
-    }, "strict", z.ZodTypeAny, {
-        pattern: string;
-        categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-        severity: "low" | "medium" | "high" | "critical";
-    }, {
-        pattern: string;
-        categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-        severity: "low" | "medium" | "high" | "critical";
-    }>, {
-        pattern: string;
-        categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-        severity: "low" | "medium" | "high" | "critical";
-    }, {
-        pattern: string;
-        categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-        severity: "low" | "medium" | "high" | "critical";
-    }>, "many">;
-}, "strict", z.ZodTypeAny, {
-    patterns: {
-        pattern: string;
-        categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-        severity: "low" | "medium" | "high" | "critical";
-    }[];
-    name: string;
-    tool: string;
-}, {
-    patterns: {
-        pattern: string;
-        categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-        severity: "low" | "medium" | "high" | "critical";
-    }[];
-    name: string;
-    tool: string;
-}>;
-export declare const DegradedFailPostureSchema: z.ZodEnum<["preserve_enforcement", "fail_open"]>;
-export declare const DEFAULT_SAFE_DELETION_ROOTS: string[];
-export declare const RiskSchema: z.ZodEffects<z.ZodObject<{
-    classifiers: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        name: z.ZodString;
-        tool: z.ZodString;
-        patterns: z.ZodArray<z.ZodEffects<z.ZodObject<{
-            pattern: z.ZodString;
-            categories: z.ZodArray<z.ZodEnum<["destructive", "data_loss", "production_mutation", "credential_access", "secret_exfiltration", "network_exfiltration", "deployment_change", "infrastructure_change", "privilege_escalation", "irreversible_action", "mass_update"]>, "many">;
-            severity: z.ZodEnum<["low", "medium", "high", "critical"]>;
-        }, "strict", z.ZodTypeAny, {
-            pattern: string;
-            categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-            severity: "low" | "medium" | "high" | "critical";
-        }, {
-            pattern: string;
-            categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-            severity: "low" | "medium" | "high" | "critical";
-        }>, {
-            pattern: string;
-            categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-            severity: "low" | "medium" | "high" | "critical";
-        }, {
-            pattern: string;
-            categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-            severity: "low" | "medium" | "high" | "critical";
-        }>, "many">;
-    }, "strict", z.ZodTypeAny, {
-        patterns: {
-            pattern: string;
-            categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-            severity: "low" | "medium" | "high" | "critical";
-        }[];
-        name: string;
-        tool: string;
-    }, {
-        patterns: {
-            pattern: string;
-            categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-            severity: "low" | "medium" | "high" | "critical";
-        }[];
-        name: string;
-        tool: string;
-    }>, "many">>;
-    degraded_fail_posture: z.ZodDefault<z.ZodEnum<["preserve_enforcement", "fail_open"]>>;
-    safe_deletion_roots: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-}, "strict", z.ZodTypeAny, {
-    classifiers: {
-        patterns: {
-            pattern: string;
-            categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-            severity: "low" | "medium" | "high" | "critical";
-        }[];
-        name: string;
-        tool: string;
-    }[];
-    degraded_fail_posture: "preserve_enforcement" | "fail_open";
-    safe_deletion_roots: string[];
-}, {
-    classifiers?: {
-        patterns: {
-            pattern: string;
-            categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-            severity: "low" | "medium" | "high" | "critical";
-        }[];
-        name: string;
-        tool: string;
-    }[] | undefined;
-    degraded_fail_posture?: "preserve_enforcement" | "fail_open" | undefined;
-    safe_deletion_roots?: string[] | undefined;
-}>, {
-    classifiers: {
-        patterns: {
-            pattern: string;
-            categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-            severity: "low" | "medium" | "high" | "critical";
-        }[];
-        name: string;
-        tool: string;
-    }[];
-    degraded_fail_posture: "preserve_enforcement" | "fail_open";
-    safe_deletion_roots: string[];
-}, {
-    classifiers?: {
-        patterns: {
-            pattern: string;
-            categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-            severity: "low" | "medium" | "high" | "critical";
-        }[];
-        name: string;
-        tool: string;
-    }[] | undefined;
-    degraded_fail_posture?: "preserve_enforcement" | "fail_open" | undefined;
-    safe_deletion_roots?: string[] | undefined;
-}>;
-export type DegradedFailPosture = z.infer<typeof DegradedFailPostureSchema>;
-export type RiskSeverity = z.infer<typeof RiskSeveritySchema>;
-export type RiskCategory = z.infer<typeof RiskCategorySchema>;
-export type RiskClassifier = z.infer<typeof RiskClassifierSchema>;
-export type RiskConfig = z.infer<typeof RiskSchema>;

package/dist/schema/risk.js

@@ -1,194 +0,0 @@
-import { z } from "zod";
-// Risk Gate vocabulary — Phase 7 #1 anchor.
-//
-// STATUS: LIVE (corrected 2026-07-02, task 50a94127; this header
-// previously still said "no runtime surface reads it yet" long after
-// that stopped being true). `risk.classifiers[]` is consumed by the
-// Risk Classifier (`classifyRisk`, runtime/risk-classifier.ts) invoked
-// from runtime/intercept.ts on every PreToolUse once the manifest
-// declares at least one `when:`-bearing policy (the riskGateActive
-// guard), and policies consume the classification through `when.risk.*`
-// clauses evaluated in runtime/when-eval.ts (Phase 7 #5). A declared
-// `risk:` block is enforced configuration, not decoration. See
-// docs/risk-gate.md.
-//
-// Design source: lava-ice-logs/2026-04-30/harness-risk-gate-extension.md.
-// Severity is an ordered scale: a future `when.risk.severity_at_least:
-// high` clause matches `high` and `critical`. The ordering is the enum
-// declaration order — the Phase 7 #5 evaluator derives the comparison
-// from `RiskSeveritySchema.options`. This anchor only fixes the set.
-export const RiskSeveritySchema = z.enum(["low", "medium", "high", "critical"]);
-// Closed category vocabulary. Phase 7 #1 deliberately ships a fixed set
-// rather than a free-form string: a typo (`data-loss` for `data_loss`)
-// is then a validate-time error instead of a clause that silently never
-// matches, and `when.risk.category_in` stays statically checkable. New
-// categories are a schema addition, not operator config — see
-// docs/risk-gate.md for the rationale and the v2 escape hatch.
-export const RiskCategorySchema = z.enum([
-    "destructive",
-    "data_loss",
-    "production_mutation",
-    "credential_access",
-    "secret_exfiltration",
-    "network_exfiltration",
-    "deployment_change",
-    "infrastructure_change",
-    "privilege_escalation",
-    "irreversible_action",
-    "mass_update",
-]);
-// One pattern → (categories, severity) assignment. `pattern` is a
-// regular expression matched against the classified tool's raw input
-// (the exact field and match semantics are the Phase 7 #3 classifier's
-// concern; the anchor only stores and regex-validates the string).
-const RiskPatternSchema = z
-    .object({
-    pattern: z.string().min(1),
-    categories: z.array(RiskCategorySchema).min(1),
-    severity: RiskSeveritySchema,
-})
-    .strict()
-    .superRefine((rule, ctx) => {
-    try {
-        new RegExp(rule.pattern);
-    }
-    catch (err) {
-        ctx.addIssue({
-            code: z.ZodIssueCode.custom,
-            path: ["pattern"],
-            message: `invalid regex: ${err.message}`,
-        });
-    }
-});
-export const RiskClassifierSchema = z
-    .object({
-    name: z.string().min(1),
-    // The tool name whose input the classifier's patterns run against
-    // (e.g. `Bash`). The matcher that binds a classifier to a live tool
-    // event is Phase 7 #3; the anchor only records the binding.
-    tool: z.string().min(1),
-    patterns: z.array(RiskPatternSchema).min(1),
-})
-    .strict();
-// Fail posture of block/require_approval policies when their evidence
-// source is DEGRADED (ledger timeout, spawn failure, unresolved template,
-// invalid `within`, thrown evaluator) — i.e. the evaluator could not form
-// a real verdict at all (task f1aea826).
-//
-//   preserve_enforcement (default) — a policy whose enforcement is
-//     `block` or `require_approval` fails CLOSED (`deny-degraded`): the
-//     gate exists to prevent a specific irreversible incident, so "could
-//     not read the evidence" must not open it. `warn` policies keep the
-//     availability-first `warn-degraded` (never blocks).
-//   fail_open — the pre-0.45 behaviour: EVERY degraded evaluation maps
-//     to the non-blocking `warn-degraded`, regardless of enforcement.
-//     Explicit operator opt-out for availability-first setups.
-//
-// This knob covers only the policy engine's own degraded paths. The
-// OUTER hook-budget layer (a hook that exceeds its budget is allow by
-// harness contract) is a separate fail-open surface this schema cannot
-// reach — see docs/okf/gate-fail-posture-matrix.md.
-export const DegradedFailPostureSchema = z.enum([
-    "preserve_enforcement",
-    "fail_open",
-]);
-// Safe-deletion-root allowlist (task d03af8f6). `src/runtime/
-// deletion-target-resolve.ts` statically resolves the target(s) of a
-// deletion-verb command (`rm -r*`/`-f*`, `find ... -delete`/`-exec*`/
-// `-execdir` with an `rm` payload, `git clean -f*`) and treats a target
-// as safe only when it is an ABSOLUTE path that lies STRICTLY INSIDE one
-// of these roots (a plain directory-prefix match against `root + "/"`;
-// the root itself does not count, for EVERY verb alike — `find`'s own
-// start point is removed by `-delete`/`-exec` the same way `rm`'s
-// operand is, so it gets no root-equality exception either). An
-// optional trailing `/**` or `/*` on an entry is stripped
-// as documentation sugar before matching — it is not a real glob
-// engine. A target the
-// resolver cannot statically prove absolute and prefix-matched — an
-// unexpanded `$VAR`/`${VAR}` reference, a `~`-relative path, a relative
-// path, or a `..`-traversal that normalizes outside every root — is
-// treated as UNRESOLVABLE, never guessed safe. The defaults cover the
-// two spellings this harness's own scratchpad convention can use: a
-// symlinked `/tmp` and its `/private/tmp` realpath (macOS); an operator
-// who overrides this list REPLACES it, it does not merge with the
-// default. See docs/risk-gate.md.
-// Exported (not just used as the schema `.default()`) so runtime call
-// sites can fall back to the same list for a hand-built `Manifest` that
-// bypassed schema parsing entirely (every test fixture that constructs
-// `{ risk: { classifiers: [...] } }` directly, without going through
-// `RiskSchema.parse`) — see `src/runtime/intercept.ts` and
-// `src/cli/explain-policy.ts`.
-export const DEFAULT_SAFE_DELETION_ROOTS = ["/tmp", "/private/tmp"];
-export const RiskSchema = z
-    .object({
-    classifiers: z.array(RiskClassifierSchema).default([]),
-    degraded_fail_posture: DegradedFailPostureSchema.default("preserve_enforcement"),
-    safe_deletion_roots: z
-        .array(z.string().min(1))
-        .default(DEFAULT_SAFE_DELETION_ROOTS),
-})
-    .strict()
-    .superRefine((risk, ctx) => {
-    const seen = new Set();
-    risk.classifiers.forEach((c, i) => {
-        if (seen.has(c.name)) {
-            ctx.addIssue({
-                code: z.ZodIssueCode.custom,
-                path: ["classifiers", i, "name"],
-                message: `duplicate risk classifier name: ${c.name}`,
-            });
-        }
-        seen.add(c.name);
-    });
-    // A filesystem-root entry — bare `/`, or anything that lexically
-    // NORMALIZES to `/` (`/.`, `/./`, `/tmp/..` — task d03af8f6, review
-    // round 3, LOW (d), widening review round 2 LOW (a)'s bare-`/`-only
-    // check) — would match every absolute path as "inside" it via the
-    // resolver's own `target.startsWith(root + "/")` prefix check —
-    // silently defeating the entire point of an allowlist. Rejected at
-    // parse time with a message rather than special-cased to "matches
-    // everything" at runtime, since an operator who wrote one of these
-    // spellings almost certainly meant a specific subdirectory.
-    // Non-absolute entries and ones containing `$`/`~` are a `harness
-    // validate` LINT instead (a warning, not a parse-time error) — see
-    // `checkSafeDeletionRootsSyntax` in `src/cli/validate/checks.ts`.
-    risk.safe_deletion_roots.forEach((root, i) => {
-        if (normalizesToFilesystemRoot(root)) {
-            ctx.addIssue({
-                code: z.ZodIssueCode.custom,
-                path: ["safe_deletion_roots", i],
-                message: `risk.safe_deletion_roots entry "${root}" normalizes to the filesystem root and can ` +
-                    `never be a meaningful allowlist entry: every absolute deletion target would match ` +
-                    `it as "inside," defeating the allowlist. Declare specific subdirectories instead ` +
-                    `(e.g. "/tmp").`,
-            });
-        }
-    });
-});
-/**
- * `true` when `root` (trimmed) lexically collapses to the filesystem
- * root `/` — bare `/`, any run of bare `/` characters, `/.`, `/./`, or a
- * `..`-traversal that pops back to `/` (`/tmp/..`). Lexical only (no
- * filesystem I/O, mirrors `deletion-target-resolve.ts`'s own
- * `normalizePosixPath` in spirit — not imported from there: this is a
- * schema-time validation, `deletion-target-resolve.ts` is a runtime
- * module, and neither layer should depend on the other for a check this
- * small).
- */
-function normalizesToFilesystemRoot(root) {
-    const trimmed = root.trim();
-    if (!trimmed.startsWith("/"))
-        return false;
-    const out = [];
-    for (const part of trimmed.split("/")) {
-        if (part === "" || part === ".")
-            continue;
-        if (part === "..") {
-            out.pop();
-            continue;
-        }
-        out.push(part);
-    }
-    return out.length === 0;
-}
-//# sourceMappingURL=risk.js.map

package/dist/schema/risk.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"risk.js","sourceRoot":"","sources":["../../src/schema/risk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,4CAA4C;AAC5C,EAAE;AACF,iEAAiE;AACjE,qEAAqE;AACrE,oEAAoE;AACpE,uEAAuE;AACvE,kEAAkE;AAClE,mEAAmE;AACnE,wEAAwE;AACxE,qEAAqE;AACrE,+DAA+D;AAC/D,qBAAqB;AACrB,EAAE;AACF,0EAA0E;AAE1E,uEAAuE;AACvE,uEAAuE;AACvE,sEAAsE;AACtE,qEAAqE;AACrE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAEhF,wEAAwE;AACxE,uEAAuE;AACvE,wEAAwE;AACxE,uEAAuE;AACvE,8DAA8D;AAC9D,+DAA+D;AAC/D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC;IACvC,aAAa;IACb,WAAW;IACX,qBAAqB;IACrB,mBAAmB;IACnB,qBAAqB;IACrB,sBAAsB;IACtB,mBAAmB;IACnB,uBAAuB;IACvB,sBAAsB;IACtB,qBAAqB;IACrB,aAAa;CACd,CAAC,CAAC;AAEH,kEAAkE;AAClE,qEAAqE;AACrE,uEAAuE;AACvE,mEAAmE;AACnE,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,QAAQ,EAAE,kBAAkB;CAC7B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,SAAS,CAAC;YACjB,OAAO,EAAE,kBAAmB,GAAa,CAAC,OAAO,EAAE;SACpD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,kEAAkE;IAClE,oEAAoE;IACpE,4DAA4D;IAC5D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,sEAAsE;AACtE,0EAA0E;AAC1E,0EAA0E;AAC1E,yCAAyC;AACzC,EAAE;AACF,mEAAmE;AACnE,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AACxE,yDAAyD;AACzD,uEAAuE;AACvE,sEAAsE;AACtE,+DAA+D;AAC/D,EAAE;AACF,oEAAoE;AACpE,sEAAsE;AACtE,uEAAuE;AACvE,oDAAoD;AACpD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC9C,sBAAsB;IACtB,WAAW;CACZ,CAAC,CAAC;AAEH,8DAA8D;AAC9D,qEAAqE;AACrE,sEAAsE;AACtE,wEAAwE;AACxE,yEAAyE;AACzE,uEAAuE;AACvE,sEAAsE;AACtE,kEAAkE;AAClE,gEAAgE;AAChE,0DAA0D;AAC1D,iEAAiE;AACjE,uBAAuB;AACvB,oEAAoE;AACpE,wEAAwE;AACxE,oEAAoE;AACpE,sEAAsE;AACtE,oEAAoE;AACpE,wEAAwE;AACxE,kEAAkE;AAClE,kCAAkC;AAClC,sEAAsE;AACtE,wEAAwE;AACxE,uEAAuE;AACvE,qEAAqE;AACrE,2DAA2D;AAC3D,+BAA+B;AAC/B,MAAM,CAAC,MAAM,2BAA2B,GAAa,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAE9E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,qBAAqB,EAAE,yBAAyB,CAAC,OAAO,CACtD,sBAAsB,CACvB;IACD,mBAAmB,EAAE,CAAC;SACnB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACxB,OAAO,CAAC,2BAA2B,CAAC;CACxC,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAChC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,aAAa,EAAE,CAAC,EAAE,MAAM,CAAC;gBAChC,OAAO,EAAE,mCAAmC,CAAC,CAAC,IAAI,EAAE;aACrD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,iEAAiE;IACjE,oEAAoE;IACpE,oEAAoE;IACpE,kEAAkE;IAClE,gEAAgE;IAChE,mEAAmE;IACnE,kEAAkE;IAClE,mEAAmE;IACnE,4DAA4D;IAC5D,kEAAkE;IAClE,mEAAmE;IACnE,kEAAkE;IAClE,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAC3C,IAAI,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,qBAAqB,EAAE,CAAC,CAAC;gBAChC,OAAO,EACL,mCAAmC,IAAI,8CAA8C;oBACrF,oFAAoF;oBACpF,mFAAmF;oBACnF,gBAAgB;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL;;;;;;;;;GASG;AACH,SAAS,0BAA0B,CAAC,IAAY;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG;YAAE,SAAS;QAC1C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC;AAC1B,CAAC"}

package/dist/schema/session-start-preflight.d.ts

@@ -1,10 +0,0 @@
-import { z } from "zod";
-export declare const SESSION_START_PREFLIGHT_SETUP_BUILD_MIN_VERSION = "0.6.0";
-export declare const SessionStartPreflightSchema: z.ZodObject<{
-    setup: z.ZodDefault<z.ZodBoolean>;
-}, "strict", z.ZodTypeAny, {
-    setup: boolean;
-}, {
-    setup?: boolean | undefined;
-}>;
-export type SessionStartPreflightConfig = z.infer<typeof SessionStartPreflightSchema>;

package/dist/schema/session-start-preflight.js

@@ -1,106 +0,0 @@
-import { z } from "zod";
-// `session_start_preflight` (task 30183330): optional, default-OFF
-// config block for `harness session-start preflight` (and its
-// top-level alias `harness preflight`). The producer itself lives in
-// src/cli/session-start/index.ts; this schema only carries the
-// manifest-declared knob it reads.
-//
-// `setup` gates whether the companion passes `--setup` through to the
-// `preflight run --json <cwd>` invocation it spawns. Defaults to
-// `false`: an ABSENT `session_start_preflight:` block and a
-// PRESENT-but-`setup: false` block behave identically (both invoke
-// `preflight run` with no `--setup`), matching every sibling
-// SessionStart companion's opt-in convention (see ./toolchain-parity.ts,
-// ./stale-base-check.ts); existing manifests parse unchanged and this
-// knob never surprises an operator with new install/build work inside a
-// SessionStart hook until they explicitly ask for it.
-//
-// `--setup` runs a dependency install and, on the agent-preflight build
-// this schema was authored against, a conditional `npm run build` when
-// the target repo's own `.github/workflows/ci.yml` shows a build step
-// before the test step (agent-preflight PR #72; released as of
-// agent-preflight 0.5.0, `--setup` there is install-only, no build
-// step). Either way, the whole `preflight run` child is still bounded
-// by the SAME `--timeout` / `preflightTimeoutMs` that already bounds
-// the companion's subprocess (`DEFAULT_PREFLIGHT_TIMEOUT_MS`,
-// src/cli/session-start/index.ts); enabling `setup` on a workspaces
-// monorepo whose install+build routinely runs long should come with an
-// explicit `--timeout` raise; neither this schema nor the producer ever
-// raises it automatically. agent-preflight's own build step gets a
-// SEPARATE, larger budget (`DEFAULT_SETUP_BUILD_TIMEOUT_MS`, 300000ms,
-// agent-preflight's `src/checks/shared.ts`) than this producer's default
-// `--timeout` (60000ms), and `execFile`'s timeout only kills the
-// `preflight` process itself, not its process group: an `npm ci` /
-// build still in flight when that kill lands keeps writing into the
-// target repo after this hook has already exited 0. Raise `--timeout`
-// (or the target repo's own `.preflight.json` `setup.buildTimeoutMs`)
-// together when enabling `setup` on a slow workspace.
-//
-// SECURITY: `--setup` is not inert on untrusted repository content. Its
-// dependency install runs `npm ci`, which executes that repo's package
-// lifecycle scripts, and its conditional build decision is read out of
-// the TARGET repo's own `.github/workflows/ci.yml` `run:` lines; both
-// are attacker-controlled if the repo is not already trusted (mirrors
-// agent-preflight's own README warning around its MCP server's `--setup`
-// / `setup.enabled` section: "a `run:` line in the target repo's own
-// `.github/workflows/ci.yml` ... decides whether that repo's `build`
-// script is executed on your machine ... `--setup` belongs only on
-// repositories you already trust to run"). Enable this knob only for
-// repositories you already trust to run their own install/build.
-//
-// SCOPE (task c88461c1): resolved from the base manifest, any applicable
-// machine-override layers, and a per-repo project-override layer. The
-// generated hook still invokes `harness session-start preflight` with no
-// `--project` (one static hook command cannot name a different project
-// per repository), but the producer itself derives a project name from
-// its own cwd and feeds it through the EXISTING `LoaderOptions.project`
-// mechanism `--project <name>` also uses, so
-// `<home>/projects/<name>/harness.overrides.yaml`, when present, narrows
-// this key to that one repository. An explicit `--project` (where a
-// caller passes one) still wins outright; a repo with no such layer on
-// disk keeps the host-wide base/machine-override value unchanged.
-//
-// REPOSITORY IDENTITY (review round 2, decision D-021a): the derived
-// name is the basename of the MAIN checkout (the directory containing
-// the repository's shared git common dir, `resolveCommonDir` /
-// `deriveProjectName` in `src/runtime/git-context.ts`), NOT the cwd's
-// own checkout directory, every linked worktree (`git worktree add`)
-// of one repository resolves the identical project layer this way. A
-// bare repository has no `.git` wrapper to step up from, so its own
-// directory's basename applies directly. This is deliberately a
-// DIFFERENT value than the `repo` the `preflight:${REPO}` ledger tag
-// uses (that tag stays scoped to the checkout directory itself; see
-// `resolveGitContext` in the same module). `harness explain-policy` and
-// `harness doctor` derive the project name from the SAME
-// `deriveProjectName` helper (decision D-021b), so all three consumers
-// of this key agree on which layer applies to a given cwd.
-//
-// The full scope, degradation, timeout and version notes live in ONE
-// place, docs/CLI.md under `session_start_preflight.setup`, pinned by
-// the tests named there; this header deliberately does not repeat them.
-//
-// VERSION CAVEAT (task 6993d9b5): agent-preflight 0.5.0's `--setup` was
-// install-only (no conditional build, see the prose above). The build
-// step described above shipped in agent-preflight 0.6.0 (tag v0.6.0,
-// merge commit 2062831).
-//
-// SPLIT (task 65952a0c, docs/decisions/2026-09-08-preflight-floors.md):
-// through task 6993d9b5, `SESSION_START_PREFLIGHT_SETUP_BUILD_MIN_VERSION`
-// below was ALSO the `init` template's `git-preflight` hook `min_version`
-// (src/cli/init/templates.ts). The two are now independent constants:
-// this one is the SETUP floor, read only by `harness doctor`'s
-// session_start_preflight.setup version check
-// (src/cli/doctor/session-start-preflight-setup-version.ts) and by the
-// `init` wizard's dependency table (src/cli/init/dependencies.ts, via
-// the hook floor, not this one). The hook floor itself,
-// `GIT_PREFLIGHT_HOOK_MIN_VERSION`, now lives in
-// src/cli/init/templates.ts. Both are `"0.6.0"` today; bump each only
-// per its own rationale in the ADR, they are free to diverge on a
-// future agent-preflight release that touches only one of the two.
-export const SESSION_START_PREFLIGHT_SETUP_BUILD_MIN_VERSION = "0.6.0";
-export const SessionStartPreflightSchema = z
-    .object({
-    setup: z.boolean().default(false),
-})
-    .strict();
-//# sourceMappingURL=session-start-preflight.js.map

package/dist/schema/session-start-preflight.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-start-preflight.js","sourceRoot":"","sources":["../../src/schema/session-start-preflight.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,mEAAmE;AACnE,8DAA8D;AAC9D,qEAAqE;AACrE,+DAA+D;AAC/D,mCAAmC;AACnC,EAAE;AACF,sEAAsE;AACtE,iEAAiE;AACjE,4DAA4D;AAC5D,mEAAmE;AACnE,6DAA6D;AAC7D,yEAAyE;AACzE,sEAAsE;AACtE,wEAAwE;AACxE,sDAAsD;AACtD,EAAE;AACF,wEAAwE;AACxE,uEAAuE;AACvE,sEAAsE;AACtE,+DAA+D;AAC/D,mEAAmE;AACnE,sEAAsE;AACtE,qEAAqE;AACrE,8DAA8D;AAC9D,oEAAoE;AACpE,uEAAuE;AACvE,wEAAwE;AACxE,mEAAmE;AACnE,uEAAuE;AACvE,yEAAyE;AACzE,iEAAiE;AACjE,mEAAmE;AACnE,oEAAoE;AACpE,sEAAsE;AACtE,sEAAsE;AACtE,sDAAsD;AACtD,EAAE;AACF,wEAAwE;AACxE,uEAAuE;AACvE,uEAAuE;AACvE,sEAAsE;AACtE,sEAAsE;AACtE,yEAAyE;AACzE,qEAAqE;AACrE,qEAAqE;AACrE,mEAAmE;AACnE,qEAAqE;AACrE,iEAAiE;AACjE,EAAE;AACF,yEAAyE;AACzE,sEAAsE;AACtE,yEAAyE;AACzE,uEAAuE;AACvE,uEAAuE;AACvE,wEAAwE;AACxE,6CAA6C;AAC7C,yEAAyE;AACzE,oEAAoE;AACpE,uEAAuE;AACvE,kEAAkE;AAClE,EAAE;AACF,qEAAqE;AACrE,sEAAsE;AACtE,+DAA+D;AAC/D,sEAAsE;AACtE,qEAAqE;AACrE,qEAAqE;AACrE,oEAAoE;AACpE,gEAAgE;AAChE,qEAAqE;AACrE,oEAAoE;AACpE,wEAAwE;AACxE,yDAAyD;AACzD,uEAAuE;AACvE,2DAA2D;AAC3D,EAAE;AACF,qEAAqE;AACrE,sEAAsE;AACtE,wEAAwE;AACxE,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,qEAAqE;AACrE,yBAAyB;AACzB,EAAE;AACF,wEAAwE;AACxE,2EAA2E;AAC3E,0EAA0E;AAC1E,sEAAsE;AACtE,+DAA+D;AAC/D,8CAA8C;AAC9C,uEAAuE;AACvE,sEAAsE;AACtE,wDAAwD;AACxD,iDAAiD;AACjD,sEAAsE;AACtE,kEAAkE;AAClE,mEAAmE;AACnE,MAAM,CAAC,MAAM,+CAA+C,GAAG,OAAO,CAAC;AAEvE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAClC,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/schema/stale-base-check.d.ts

@@ -1,18 +0,0 @@
-import { z } from "zod";
-export declare const StaleBaseCheckSchema: z.ZodObject<{
-    enabled: z.ZodDefault<z.ZodBoolean>;
-    remote: z.ZodOptional<z.ZodString>;
-    default_branch: z.ZodOptional<z.ZodString>;
-    fetch_timeout_ms: z.ZodOptional<z.ZodNumber>;
-}, "strict", z.ZodTypeAny, {
-    enabled: boolean;
-    remote?: string | undefined;
-    default_branch?: string | undefined;
-    fetch_timeout_ms?: number | undefined;
-}, {
-    enabled?: boolean | undefined;
-    remote?: string | undefined;
-    default_branch?: string | undefined;
-    fetch_timeout_ms?: number | undefined;
-}>;
-export type StaleBaseCheckConfig = z.infer<typeof StaleBaseCheckSchema>;

package/dist/schema/stale-base-check.js

@@ -1,37 +0,0 @@
-import { z } from "zod";
-// `stale_base_check` (task ce3903b0, incident ea8becf5) — optional,
-// default-OFF config block for `harness session-start stale-base-check`.
-// The producer itself lives in
-// src/cli/session-start/stale-base-check.ts; this schema only carries the
-// manifest-declared knobs it reads.
-//
-// Every field is optional: the producer resolves its own sane defaults
-// (remote -> "origin", default_branch -> resolved from
-// refs/remotes/origin/HEAD, fetch_timeout_ms -> 8000) when a field is
-// omitted, so declaring `stale_base_check: { enabled: true }` alone is a
-// complete, valid config. `enabled` itself defaults to `false`: an ABSENT
-// `stale_base_check:` block and a PRESENT-but-`enabled: false` block
-// behave identically (both skip, and — the point of opt-in here — neither
-// ever spends a network round-trip), so existing manifests parse
-// unchanged and this companion never surprises an operator with new
-// session-start network I/O until they explicitly ask for it. See the
-// producer module's header comment for the full WHERE/SCHÄRFE rationale.
-export const StaleBaseCheckSchema = z
-    .object({
-    enabled: z.boolean().default(false),
-    // Remote name to fetch the live default-branch tip from. Defaults to
-    // "origin" when omitted.
-    remote: z.string().min(1).optional(),
-    // Explicit default-branch override (e.g. "main"). When omitted, the
-    // producer resolves it from `refs/remotes/origin/HEAD` on disk — that
-    // lookup is safe to trust for the branch NAME (which essentially never
-    // changes after initial repo setup), unlike trusting that ref's SHA
-    // for staleness, which is exactly the bug this task closes.
-    default_branch: z.string().min(1).optional(),
-    // Per-`git` subprocess timeout in ms (applied individually to the
-    // fetch, and to each follow-up rev-list/log call). Defaults to 8000
-    // when omitted.
-    fetch_timeout_ms: z.number().int().positive().optional(),
-})
-    .strict();
-//# sourceMappingURL=stale-base-check.js.map

package/dist/schema/stale-base-check.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"stale-base-check.js","sourceRoot":"","sources":["../../src/schema/stale-base-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,oEAAoE;AACpE,yEAAyE;AACzE,+BAA+B;AAC/B,0EAA0E;AAC1E,oCAAoC;AACpC,EAAE;AACF,uEAAuE;AACvE,uDAAuD;AACvD,sEAAsE;AACtE,yEAAyE;AACzE,0EAA0E;AAC1E,qEAAqE;AACrE,0EAA0E;AAC1E,iEAAiE;AACjE,oEAAoE;AACpE,sEAAsE;AACtE,yEAAyE;AACzE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,qEAAqE;IACrE,yBAAyB;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,oEAAoE;IACpE,sEAAsE;IACtE,uEAAuE;IACvE,oEAAoE;IACpE,4DAA4D;IAC5D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,kEAAkE;IAClE,oEAAoE;IACpE,gBAAgB;IAChB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACzD,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/schema/toolchain-parity.d.ts

@@ -1,21 +0,0 @@
-import { z } from "zod";
-export declare const ToolchainParitySchema: z.ZodObject<{
-    enabled: z.ZodDefault<z.ZodBoolean>;
-    machine_state_dir: z.ZodOptional<z.ZodString>;
-    profile: z.ZodOptional<z.ZodString>;
-    workspace_root: z.ZodOptional<z.ZodString>;
-    stale_after_days: z.ZodOptional<z.ZodNumber>;
-}, "strict", z.ZodTypeAny, {
-    enabled: boolean;
-    machine_state_dir?: string | undefined;
-    profile?: string | undefined;
-    workspace_root?: string | undefined;
-    stale_after_days?: number | undefined;
-}, {
-    enabled?: boolean | undefined;
-    machine_state_dir?: string | undefined;
-    profile?: string | undefined;
-    workspace_root?: string | undefined;
-    stale_after_days?: number | undefined;
-}>;
-export type ToolchainParityConfig = z.infer<typeof ToolchainParitySchema>;

package/dist/schema/toolchain-parity.js

@@ -1,48 +0,0 @@
-import { z } from "zod";
-// `toolchain_parity` (task: PATH-Shim-Vorfall 2026-07-22) — optional,
-// default-OFF config block for `harness session-start toolchain-parity`.
-// The producer itself lives in src/cli/session-start/toolchain-parity.ts;
-// this schema only carries the manifest-declared knobs it reads.
-//
-// Every field is optional: the producer resolves its own sane defaults
-// (machine_state_dir -> ~/.harness/machine-state, profile ->
-// os.hostname(), workspace_root -> the session cwd) when a field is
-// omitted, so declaring `toolchain_parity: { enabled: true }` alone is a
-// complete, valid config. `enabled` itself defaults to `false`: an
-// ABSENT `toolchain_parity:` block and a PRESENT-but-`enabled: false`
-// block behave identically (both skip), so existing manifests parse
-// unchanged and the new companion is strictly opt-in.
-export const ToolchainParitySchema = z
-    .object({
-    enabled: z.boolean().default(false),
-    // Directory the per-machine snapshot JSON files live in. Shared by
-    // every machine that wants to compare toolchains — agent-memory-sync
-    // (agent-memory PR #64) is what actually transports files in and out
-    // of this directory across machines; this producer only reads/writes
-    // it locally.
-    machine_state_dir: z.string().min(1).optional(),
-    // This machine's own profile name — the snapshot is written to
-    // `<machine_state_dir>/<profile>.json` and every OTHER `*.json` in
-    // the directory is treated as a peer to compare against. Defaults to
-    // a filename-sanitized os.hostname() when omitted.
-    profile: z.string().min(1).optional(),
-    // Root directory `.ai/workflow/manifest.json` (the orchestrator-
-    // workflow kit's own version marker) is read from, for the OW-Kit
-    // version drift check. Defaults to the session cwd.
-    workspace_root: z.string().min(1).optional(),
-    // Advisory staleness threshold, in days, for a peer snapshot's own
-    // `timestamp` (task c1b5ade5, hardening follow-up to the initial
-    // 690fba7c drop). Undefined (default) disables the check entirely —
-    // no snapshot is ever "too old" to compare. When set, a peer whose
-    // snapshot age exceeds this threshold gets an EXTRA stderr note
-    // flagging it as stale; the comparison itself (and `driftCount`) is
-    // unchanged — staleness is a caveat on trustworthiness, not a drift
-    // finding, so it never inflates the drift count. `.finite()` (task
-    // c1b5ade5 R2, finding 5): without it, `Infinity` (reachable via YAML
-    // `.inf`) passed `.positive()` and silently turned the check into a
-    // permanent no-op (`comparison.ageMs > Infinity` is always false) —
-    // fractional values stay allowed, only non-finite ones are rejected.
-    stale_after_days: z.number().positive().finite().optional(),
-})
-    .strict();
-//# sourceMappingURL=toolchain-parity.js.map

package/dist/schema/toolchain-parity.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"toolchain-parity.js","sourceRoot":"","sources":["../../src/schema/toolchain-parity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,sEAAsE;AACtE,yEAAyE;AACzE,0EAA0E;AAC1E,iEAAiE;AACjE,EAAE;AACF,uEAAuE;AACvE,6DAA6D;AAC7D,oEAAoE;AACpE,yEAAyE;AACzE,mEAAmE;AACnE,sEAAsE;AACtE,oEAAoE;AACpE,sDAAsD;AACtD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,mEAAmE;IACnE,qEAAqE;IACrE,qEAAqE;IACrE,qEAAqE;IACrE,cAAc;IACd,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,+DAA+D;IAC/D,mEAAmE;IACnE,qEAAqE;IACrE,mDAAmD;IACnD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,iEAAiE;IACjE,kEAAkE;IAClE,oDAAoD;IACpD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,mEAAmE;IACnE,iEAAiE;IACjE,oEAAoE;IACpE,mEAAmE;IACnE,gEAAgE;IAChE,oEAAoE;IACpE,oEAAoE;IACpE,mEAAmE;IACnE,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,qEAAqE;IACrE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5D,CAAC;KACD,MAAM,EAAE,CAAC"}