@lannguyensi/harness 0.64.0 → 1.0.0

package/dist/cli/pack/upgrade.js

@@ -1,273 +0,0 @@
-// `harness pack upgrade <name>`: text-level insertion of a pack's
-// missing default config block into an existing manifest, WITHOUT
-// parsing and reserializing the operator's YAML (unlike `pack add` /
-// `pack reseed`, which both mutate via the `yaml` Document API). Task
-// 8f637efd: the one upgrade this ships is `auto_approve` for
-// `understanding-before-execution` (D-004,
-// docs/decisions/2026-08-27-ug-auto-mode-approval.md, "Amendment:
-// install default").
-//
-// WHY TEXT-LEVEL, NOT DOCUMENT-LEVEL. The `yaml` package's Document API
-// (`withDocument`, used by `pack reseed`) round-trips comments
-// reasonably well for a single field REPLACEMENT, but this upgrade
-// INSERTS a brand-new key with its own multi-line comment block into an
-// operator manifest that may carry hand edits `pack add` / `reseed`
-// never touch (custom producers, an extra top-level key, a reordered
-// field). Re-serializing the whole document risks reformatting content
-// this verb has no business touching. Insertion by line position,
-// guided by indentation, keeps every byte outside the inserted block
-// untouched.
-//
-// IDEMPOTENT. If `auto_approve:` already exists anywhere inside the
-// pack's `config:` mapping (any indentation), this is a no-op: the
-// output is byte-identical to the input. An operator who already
-// hand-applied the workaround (the ADR's own "Workaround, bereits
-// angewendet" paragraph) gets nothing rewritten out from under them.
-//
-// REFUSES ON AMBIGUITY. Zero or more than one
-// `understanding-before-execution` pack block, more than one `config:`
-// key inside it, or no `config:` key found at all, is a refusal
-// (non-zero exit, a clear message), never a guess at where to insert.
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { parse as parseYaml } from "yaml";
-import { atomicWriteFile } from "../../io/atomic-write.js";
-import { unifiedDiff } from "../../io/patch.js";
-import { withFileLock } from "../../io/lock.js";
-import { formatValidationErrors, validateBeforeWrite, } from "../../io/validate-before-write.js";
-import { resolveHomeDir } from "../../runtime/home-dir.js";
-import { renderAutoApproveSnippet } from "../../policy-packs/builtin/understanding-before-execution-runtime.js";
-import { EX_FAIL, EX_NOINPUT, HarnessExitError } from "../exit-codes.js";
-const DEFAULT_BASENAME = "harness.yaml";
-const LOCK_BASENAME = ".harness.lock";
-function resolveTargetPath(opts) {
-    if (opts.configPath)
-        return path.resolve(opts.configPath);
-    return path.join(resolveHomeDir({ ...(opts.homeDir !== undefined ? { homeDir: opts.homeDir } : {}) }).path, DEFAULT_BASENAME);
-}
-function countLeadingSpaces(line) {
-    return line.length - line.trimStart().length;
-}
-/**
- * Text-level insertion of the `auto_approve` default snippet into the
- * `understanding-before-execution` pack's `config:` mapping. Pure: text
- * in, text (+ a change flag) out, or an error string on ambiguity.
- * Exported for direct unit testing without going through the CLI/file
- * layer.
- */
-/**
- * The line ending most of `text` uses, so an insertion into a CRLF
- * manifest does not mix in bare-LF lines (task 8f637efd review round 2
- * F6): counts `\r\n` occurrences against LF-only ones (every `\n` not
- * part of a `\r\n` pair) and picks whichever is more common, defaulting
- * to `\n` on a tie or an all-LF file.
- */
-function detectDominantEol(text) {
-    const crlfCount = (text.match(/\r\n/g) ?? []).length;
-    const totalLf = (text.match(/\n/g) ?? []).length;
-    const lfOnlyCount = totalLf - crlfCount;
-    return crlfCount > lfOnlyCount ? "\r\n" : "\n";
-}
-export function applyAutoApproveUpgrade(original) {
-    const eol = detectDominantEol(original);
-    // Split on either line ending so every line in `lines` is `\r`-free
-    // (its own trailing `\r`, if any, is consumed by the delimiter, not
-    // left dangling on the line content); the array is rejoined with the
-    // detected `eol` below, so a CRLF manifest stays CRLF end to end
-    // instead of picking up bare-LF lines from the inserted snippet.
-    const lines = original.split(/\r\n|\n/);
-    // Accepts a bare, double-quoted, or single-quoted scalar for the pack
-    // name (task 8f637efd review round 2 F4): `- name: understanding-before-execution`,
-    // `- name: "understanding-before-execution"`, and
-    // `- name: 'understanding-before-execution'` are all schema-valid YAML
-    // for the same value; the bare-only form previously refused the
-    // quoted spellings with "could not find a ... entry".
-    const packNameRe = /^(\s*)-\s*name:\s*(?:"understanding-before-execution"|'understanding-before-execution'|understanding-before-execution)\s*(#.*)?$/;
-    const packMatches = [];
-    for (let i = 0; i < lines.length; i++) {
-        const m = packNameRe.exec(lines[i] ?? "");
-        if (m)
-            packMatches.push({ index: i, indent: (m[1] ?? "").length });
-    }
-    if (packMatches.length === 0) {
-        return {
-            ok: false,
-            error: "could not find a `- name: understanding-before-execution` policy_packs entry in this manifest",
-        };
-    }
-    if (packMatches.length > 1) {
-        return {
-            ok: false,
-            error: `found ${packMatches.length} \`understanding-before-execution\` policy_packs entries; refusing (ambiguous)`,
-        };
-    }
-    const pack = packMatches[0];
-    const itemIndent = pack.indent;
-    function findBoundary(startIdx, indentThreshold) {
-        for (let i = startIdx; i < lines.length; i++) {
-            const line = lines[i] ?? "";
-            if (line.trim() === "")
-                continue;
-            if (countLeadingSpaces(line) <= indentThreshold)
-                return i;
-        }
-        return lines.length;
-    }
-    const packEnd = findBoundary(pack.index + 1, itemIndent);
-    const configIndent = itemIndent + 2;
-    const configRe = /^config:\s*(#.*)?$/;
-    let configIdx = -1;
-    for (let i = pack.index + 1; i < packEnd; i++) {
-        const line = lines[i] ?? "";
-        if (line.trim() === "")
-            continue;
-        if (countLeadingSpaces(line) === configIndent && configRe.test(line.trim())) {
-            if (configIdx !== -1) {
-                return {
-                    ok: false,
-                    error: "found more than one `config:` key in the understanding-before-execution pack block; refusing (ambiguous)",
-                };
-            }
-            configIdx = i;
-        }
-    }
-    if (configIdx === -1) {
-        return {
-            ok: false,
-            error: "could not find a `config:` key in the understanding-before-execution pack block",
-        };
-    }
-    let lastContentIdx = configIdx;
-    let autoApprovePresent = false;
-    for (let i = configIdx + 1; i < packEnd; i++) {
-        const line = lines[i] ?? "";
-        const trimmed = line.trim();
-        if (trimmed === "")
-            continue;
-        const indent = countLeadingSpaces(line);
-        if (indent <= configIndent)
-            break;
-        lastContentIdx = i;
-        // Review round 3, F3: any line whose trimmed form starts with
-        // `auto_approve:` counts as "already present", not only the exact
-        // bare-key spelling `auto_approve:` with nothing else on the line.
-        // That exact-equality check missed a hand-applied flow-style value
-        // (`auto_approve: {when: [bypassPermissions], ...}`) and a bare key
-        // with a trailing comment (`auto_approve:  # already configured`):
-        // both are schema-valid YAML for the same key, but neither passed
-        // `trimmed === "auto_approve:"`, so this verb would insert a SECOND
-        // `auto_approve` key and `parseYaml` below would throw "Map keys
-        // must be unique" uncaught (exit 70, a raw YAML message) instead of
-        // recognizing the upgrade as already applied.
-        // Known limit: a line starting with `auto_approve:` inside a block scalar
-        // under another key would also count as present; the verb then no-ops
-        // (fail-safe, never a corrupted manifest) rather than inserting twice.
-        if (trimmed.startsWith("auto_approve:"))
-            autoApprovePresent = true;
-    }
-    if (autoApprovePresent) {
-        return { ok: true, text: original, changed: false };
-    }
-    const snippetLines = renderAutoApproveSnippet(configIndent + 2).split("\n");
-    const insertAt = lastContentIdx + 1;
-    const next = [...lines.slice(0, insertAt), ...snippetLines, ...lines.slice(insertAt)];
-    return { ok: true, text: next.join(eol), changed: true };
-}
-/**
- * `parseYaml`, but a parse failure on the PROPOSED (post-insertion) text
- * surfaces as this verb's own refusal (`HarnessExitError`, `EX_FAIL`,
- * naming the pack and that the proposed text did not parse) rather than
- * an uncaught exception (review round 3, F3: before this wrapper, a
- * proposal `applyAutoApproveUpgrade` mis-recognized as a genuine
- * insertion (e.g. a duplicate key under a different quoting style this
- * heuristic does not special-case) reached the operator as a raw
- * "Map keys must be unique" crash at exit 70 instead of a normal
- * refusal). `original` is never passed here: it is the operator's own
- * file, already on disk, and is not re-validated by this verb.
- */
-function parseProposedYamlOrRefuse(text, name, context) {
-    try {
-        return parseYaml(text);
-    }
-    catch (err) {
-        throw new HarnessExitError(`harness pack upgrade: proposed manifest for pack ${JSON.stringify(name)} did not parse as YAML (${context}): ${err instanceof Error ? err.message : String(err)}`, EX_FAIL);
-    }
-}
-/**
- * `harness pack upgrade <name>` implementation. `name` is validated
- * against the (currently one-entry) set of known upgrades before any
- * file I/O; an unknown name refuses with `EX_FAIL` rather than silently
- * doing nothing.
- */
-export async function packUpgrade(name, opts = {}) {
-    if (name !== "understanding-before-execution") {
-        throw new HarnessExitError(`harness pack upgrade does not support ${JSON.stringify(name)} yet; only "understanding-before-execution" (auto_approve default, task 8f637efd) is wired.`, EX_FAIL);
-    }
-    const target = resolveTargetPath(opts);
-    if (!fs.existsSync(target)) {
-        throw new HarnessExitError(`harness manifest not found at ${target}; run \`harness init\` first`, EX_NOINPUT);
-    }
-    const original = fs.readFileSync(target, "utf8");
-    const result = applyAutoApproveUpgrade(original);
-    if (!result.ok) {
-        throw new HarnessExitError(`harness pack upgrade: ${result.error}`, EX_FAIL);
-    }
-    const diff = unifiedDiff({
-        fileName: path.basename(target),
-        oldText: original,
-        newText: result.text,
-        oldHeader: "current",
-        newHeader: "proposed",
-    });
-    if (!result.changed) {
-        return { path: target, name, diff, applied: false, alreadyPresent: true };
-    }
-    // Schema gate before ever touching disk, mirroring `pack add` / `pack
-    // reseed`: catches an insertion that would somehow produce an invalid
-    // manifest (e.g. a config: key this heuristic mis-located) before it
-    // reaches the operator's file.
-    const schemaResult = validateBeforeWrite(parseProposedYamlOrRefuse(result.text, name, "post-insertion validation"));
-    if (!schemaResult.ok) {
-        throw new HarnessExitError(`proposed manifest fails schema validation:\n${formatValidationErrors(schemaResult.errors)}`, EX_FAIL);
-    }
-    if (opts.dryRun) {
-        return { path: target, name, diff, applied: false, alreadyPresent: false };
-    }
-    const lockPath = path.join(path.dirname(target), LOCK_BASENAME);
-    // Review round 3, F4: whether the locked callback actually WROTE is
-    // tracked here rather than assumed. The pre-lock read above can be
-    // stale by the time the lock is acquired: if a concurrent writer
-    // already inserted the block, the callback below returns early
-    // (`recomputed.changed === false`) without writing anything, and the
-    // result reported to the caller/CLI must say so (`applied: false,
-    // alreadyPresent: true`, so `harness pack upgrade` prints the
-    // "already carries this upgrade" message) instead of the hardcoded
-    // `applied: true` this used to return unconditionally.
-    let wroteUnderLock = false;
-    await withFileLock(lockPath, () => {
-        // Re-read and recompute under the lock (mirrors `pack add`): a
-        // concurrent writer may have inserted the block (or changed the
-        // file entirely) between the pre-lock read above and now.
-        const current = fs.readFileSync(target, "utf8");
-        const recomputed = applyAutoApproveUpgrade(current);
-        if (!recomputed.ok) {
-            throw new HarnessExitError(`harness pack upgrade: ${recomputed.error}`, EX_FAIL);
-        }
-        if (!recomputed.changed)
-            return; // raced: someone else already inserted it
-        const recheck = validateBeforeWrite(parseProposedYamlOrRefuse(recomputed.text, name, "post-insertion validation after lock acquisition"));
-        if (!recheck.ok) {
-            throw new HarnessExitError(`proposed manifest fails schema validation after lock acquisition:\n${formatValidationErrors(recheck.errors)}`, EX_FAIL);
-        }
-        atomicWriteFile(target, recomputed.text);
-        wroteUnderLock = true;
-    });
-    return {
-        path: target,
-        name,
-        diff,
-        applied: wroteUnderLock,
-        alreadyPresent: !wroteUnderLock,
-    };
-}
-//# sourceMappingURL=upgrade.js.map

package/dist/cli/pack/upgrade.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"upgrade.js","sourceRoot":"","sources":["../../../src/cli/pack/upgrade.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,kEAAkE;AAClE,qEAAqE;AACrE,sEAAsE;AACtE,6DAA6D;AAC7D,2CAA2C;AAC3C,kEAAkE;AAClE,qBAAqB;AACrB,EAAE;AACF,wEAAwE;AACxE,+DAA+D;AAC/D,mEAAmE;AACnE,wEAAwE;AACxE,oEAAoE;AACpE,qEAAqE;AACrE,uEAAuE;AACvE,kEAAkE;AAClE,qEAAqE;AACrE,aAAa;AACb,EAAE;AACF,oEAAoE;AACpE,mEAAmE;AACnE,iEAAiE;AACjE,kEAAkE;AAClE,qEAAqE;AACrE,EAAE;AACF,8CAA8C;AAC9C,uEAAuE;AACvE,gEAAgE;AAChE,sEAAsE;AAEtE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EACL,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,sEAAsE,CAAC;AAChH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAqBzE,MAAM,gBAAgB,GAAG,cAAc,CAAC;AACxC,MAAM,aAAa,GAAG,eAAe,CAAC;AAEtC,SAAS,iBAAiB,CAAC,IAAwB;IACjD,IAAI,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,IAAI,CACd,cAAc,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EACzF,gBAAgB,CACjB,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC;AAC/C,CAAC;AAMD;;;;;;GAMG;AACH;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACrD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACjD,MAAM,WAAW,GAAG,OAAO,GAAG,SAAS,CAAC;IACxC,OAAO,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,MAAM,GAAG,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACxC,oEAAoE;IACpE,oEAAoE;IACpE,qEAAqE;IACrE,iEAAiE;IACjE,iEAAiE;IACjE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAExC,sEAAsE;IACtE,oFAAoF;IACpF,kDAAkD;IAClD,uEAAuE;IACvE,gEAAgE;IAChE,sDAAsD;IACtD,MAAM,UAAU,GACd,kIAAkI,CAAC;IACrI,MAAM,WAAW,GAAwC,EAAE,CAAC;IAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,+FAA+F;SAClG,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,SAAS,WAAW,CAAC,MAAM,gFAAgF;SACnH,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;IAE/B,SAAS,YAAY,CAAC,QAAgB,EAAE,eAAuB;QAC7D,KAAK,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,SAAS;YACjC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,eAAe;gBAAE,OAAO,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;IAEzD,MAAM,YAAY,GAAG,UAAU,GAAG,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;IACtC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACjC,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,YAAY,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5E,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;gBACrB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EACH,0GAA0G;iBAC7G,CAAC;YACJ,CAAC;YACD,SAAS,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,iFAAiF;SACzF,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,GAAG,SAAS,CAAC;IAC/B,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,SAAS,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,EAAE;YAAE,SAAS;QAC7B,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM,IAAI,YAAY;YAAE,MAAM;QAClC,cAAc,GAAG,CAAC,CAAC;QACnB,8DAA8D;QAC9D,kEAAkE;QAClE,mEAAmE;QACnE,mEAAmE;QACnE,oEAAoE;QACpE,mEAAmE;QACnE,kEAAkE;QAClE,oEAAoE;QACpE,iEAAiE;QACjE,oEAAoE;QACpE,8CAA8C;QAC9C,0EAA0E;QAC1E,sEAAsE;QACtE,uEAAuE;QACvE,IAAI,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,kBAAkB,GAAG,IAAI,CAAC;IACrE,CAAC;IAED,IAAI,kBAAkB,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACtD,CAAC;IAED,MAAM,YAAY,GAAG,wBAAwB,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,cAAc,GAAG,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,GAAG,YAAY,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,yBAAyB,CAAC,IAAY,EAAE,IAAY,EAAE,OAAe;IAC5E,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CACxB,oDAAoD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,2BAA2B,OAAO,MACxG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,EACF,OAAO,CACR,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAY,EACZ,OAA2B,EAAE;IAE7B,IAAI,IAAI,KAAK,gCAAgC,EAAE,CAAC;QAC9C,MAAM,IAAI,gBAAgB,CACxB,yCAAyC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,6FAA6F,EAC1J,OAAO,CACR,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,gBAAgB,CACxB,iCAAiC,MAAM,8BAA8B,EACrE,UAAU,CACX,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,gBAAgB,CAAC,yBAAyB,MAAM,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC/B,OAAO,EAAE,QAAQ;QACjB,OAAO,EAAE,MAAM,CAAC,IAAI;QACpB,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,UAAU;KACtB,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAC5E,CAAC;IAED,sEAAsE;IACtE,sEAAsE;IACtE,qEAAqE;IACrE,+BAA+B;IAC/B,MAAM,YAAY,GAAG,mBAAmB,CACtC,yBAAyB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,2BAA2B,CAAC,CAC1E,CAAC;IACF,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,gBAAgB,CACxB,+CAA+C,sBAAsB,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAC5F,OAAO,CACR,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IAC7E,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;IAChE,oEAAoE;IACpE,mEAAmE;IACnE,iEAAiE;IACjE,+DAA+D;IAC/D,qEAAqE;IACrE,kEAAkE;IAClE,8DAA8D;IAC9D,mEAAmE;IACnE,uDAAuD;IACvD,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,MAAM,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE;QAChC,+DAA+D;QAC/D,gEAAgE;QAChE,0DAA0D;QAC1D,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,gBAAgB,CAAC,yBAAyB,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,OAAO;YAAE,OAAO,CAAC,0CAA0C;QAC3E,MAAM,OAAO,GAAG,mBAAmB,CACjC,yBAAyB,CACvB,UAAU,CAAC,IAAI,EACf,IAAI,EACJ,kDAAkD,CACnD,CACF,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,gBAAgB,CACxB,sEAAsE,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAC9G,OAAO,CACR,CAAC;QACJ,CAAC;QACD,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QACzC,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,IAAI;QACJ,IAAI;QACJ,OAAO,EAAE,cAAc;QACvB,cAAc,EAAE,CAAC,cAAc;KAChC,CAAC;AACJ,CAAC"}

package/dist/cli/pause/index.d.ts

@@ -1,113 +0,0 @@
-import { type PauseSentinel } from "../../runtime/pause-sentinel.js";
-import type { Manifest } from "../../schema/index.js";
-import { type LoaderOptions } from "../loader.js";
-/**
- * Synthetic grounding session bucket for operator-side pause/resume
- * events. Audit consumers (`harness audit --since 24h`, the `explain
- * --last` walker, any custom ledger query) need to know to look in
- * `default` for these facts, not in a per-agent session id — pause runs
- * from the operator shell where no `$CLAUDE_SESSION_ID` is set, so a
- * synthetic bucket is the only option that keeps the audit trail
- * queryable. This matches the convention `harness audit` already uses
- * when `$CLAUDE_SESSION_ID` is unset.
- */
-export declare const OPERATOR_LEDGER_SESSION = "default";
-export interface PauseOptions extends LoaderOptions {
-    /** Duration string ("5m", "1h", "PT30S"); ignored when `indefinite=true`. */
-    forDuration?: string;
-    /**
-     * Skip the auto-expiry. The CLI requires `acceptNoAutoResume=true`
-     * alongside or it refuses with usage help — the verbose flag itself
-     * is the friction against routine indefinite-pausing.
-     */
-    indefinite?: boolean;
-    /** Acknowledges the no-auto-resume contract of `--indefinite`. */
-    acceptNoAutoResume?: boolean;
-    /** Free-form reason recorded in the sentinel + announced on each hook fire. */
-    reason?: string;
-    /**
-     * Acknowledges the non-TTY stdin escape hatch. Without this, a
-     * scripted invocation (no controlling terminal) is refused.
-     */
-    iAmTheOperator?: boolean;
-    /** Override "now" for deterministic tests. */
-    now?: Date;
-    /** Override the harness.generated/ directory (test injection). */
-    generatedDir?: string;
-    /**
-     * Override the inherited legacy `$CLAUDE_SESSION_ID` (test injection).
-     * When set to a non-empty string, the verb refuses to run.
-     */
-    claudeSessionIdEnv?: string;
-    /**
-     * Override the inherited canonical `$CLAUDE_CODE_SESSION_ID` (test
-     * injection). When set to a non-empty string, the verb refuses to run.
-     */
-    claudeCodeSessionIdEnv?: string;
-    /**
-     * Override the inherited `$CODEX_SESSION_ID` (test injection). When
-     * set to a non-empty string, the verb refuses to run.
-     */
-    codexSessionIdEnv?: string;
-    /** Override stdin TTY detection (test injection). */
-    stdinIsTTY?: boolean;
-    /** Override the recorded `pausedBy` identity (test injection). */
-    pausedBy?: string;
-    /** Inject a manifest (test). */
-    manifest?: Manifest;
-    /** Inject a fake ledger writer (test). */
-    ledgerAdd?: (sessionId: string, content: string) => Promise<{
-        ok: true;
-    } | {
-        ok: false;
-        reason: string;
-    }>;
-}
-export interface PauseResult {
-    sentinelPath: string;
-    sentinel: PauseSentinel;
-    alreadyPaused: boolean;
-    ledger: {
-        ok: boolean;
-        tag: string;
-        reason?: string;
-    };
-}
-export interface ResumeOptions extends LoaderOptions {
-    /** Override "now" for tests. */
-    now?: Date;
-    /** Override the harness.generated/ directory (test injection). */
-    generatedDir?: string;
-    /** Override the inherited legacy `$CLAUDE_SESSION_ID` (test injection). */
-    claudeSessionIdEnv?: string;
-    /** Override the inherited canonical `$CLAUDE_CODE_SESSION_ID` (test injection). */
-    claudeCodeSessionIdEnv?: string;
-    /** Override the inherited `$CODEX_SESSION_ID` (test injection). */
-    codexSessionIdEnv?: string;
-    /** Override stdin TTY detection (test injection). */
-    stdinIsTTY?: boolean;
-    /** Acknowledges the non-TTY stdin escape hatch (mirror of pause). */
-    iAmTheOperator?: boolean;
-    /** Inject a manifest (test). */
-    manifest?: Manifest;
-    /** Inject a fake ledger writer (test). */
-    ledgerAdd?: (sessionId: string, content: string) => Promise<{
-        ok: true;
-    } | {
-        ok: false;
-        reason: string;
-    }>;
-}
-export interface ResumeResult {
-    sentinelPath: string;
-    wasPaused: boolean;
-    /** Last known sentinel state, or null when none existed. */
-    previousSentinel: PauseSentinel | null;
-    ledger: {
-        ok: boolean;
-        tag: string;
-        reason?: string;
-    };
-}
-export declare function pause(opts?: PauseOptions): Promise<PauseResult>;
-export declare function resume(opts?: ResumeOptions): Promise<ResumeResult>;

package/dist/cli/pause/index.js

@@ -1,251 +0,0 @@
-// `harness pause` / `harness resume` — temporary hook bypass.
-//
-// Sentinel-based, all-or-nothing, operator-only. Lives next to the
-// existing `harness.generated/` artefacts; the per-hook integration is
-// in `src/runtime/pause-sentinel.ts`.
-//
-// The verbs are intentionally not a debugging convenience: they exist
-// for three narrow flows and the guardrails (refuse-when-agent-session-env,
-// refuse-non-TTY, `--indefinite` requires a verbose accept-flag) push
-// back against any other use. See the task description on agent-tasks
-// `07850f73-511b-44dc-b5aa-f8564fd15fff` for the design rationale and
-// the slippery-slope analysis.
-//
-// Agent-shell detection looks at three env vars (any one set is enough
-// to refuse): `$CLAUDE_CODE_SESSION_ID` (what Claude Code actually
-// exports), legacy `$CLAUDE_SESSION_ID`, and `$CODEX_SESSION_ID` for
-// the Codex runtime. The legacy `$CLAUDE_SESSION_ID` is kept for
-// back-compat with hand-rolled wrappers that export it manually.
-import * as os from "node:os";
-import { parseDurationSeconds, InvalidDurationError } from "../../policies/index.js";
-import { resolveGeneratedDir } from "../../io/generated-dir.js";
-import { deleteSentinel, readSentinel, sentinelPath, writeSentinel, } from "../../runtime/pause-sentinel.js";
-import { addLedgerFact } from "../../runtime/ledger-add.js";
-import { EX_FAIL, EX_USAGE, HarnessExitError } from "../exit-codes.js";
-import { loadManifest, resolvePaths } from "../loader.js";
-import { expandHome } from "../../io/expand-home.js";
-const DEFAULT_PAUSE_SECONDS = 15 * 60;
-/**
- * Synthetic grounding session bucket for operator-side pause/resume
- * events. Audit consumers (`harness audit --since 24h`, the `explain
- * --last` walker, any custom ledger query) need to know to look in
- * `default` for these facts, not in a per-agent session id — pause runs
- * from the operator shell where no `$CLAUDE_SESSION_ID` is set, so a
- * synthetic bucket is the only option that keeps the audit trail
- * queryable. This matches the convention `harness audit` already uses
- * when `$CLAUDE_SESSION_ID` is unset.
- */
-export const OPERATOR_LEDGER_SESSION = "default";
-function findGroundingMcp(manifest) {
-    return manifest.tools.mcp.find((m) => m.name === "grounding-mcp") ?? null;
-}
-async function writeLedgerTag(manifest, content, source, injected) {
-    if (injected)
-        return injected(OPERATOR_LEDGER_SESSION, content);
-    if (!manifest) {
-        return { ok: false, reason: "manifest unreadable; skipped ledger write" };
-    }
-    const server = findGroundingMcp(manifest);
-    if (!server) {
-        return { ok: false, reason: "grounding-mcp not declared in manifest" };
-    }
-    const command = Array.isArray(server.command)
-        ? server.command.map((p) => expandHome(p))
-        : server.command.trim().split(/\s+/).map((p) => expandHome(p));
-    return addLedgerFact({
-        mcpCommand: command,
-        ...(server.env && { mcpEnv: server.env }),
-        timeoutMs: server.health?.timeout_ms ?? 5_000,
-        sessionId: OPERATOR_LEDGER_SESSION,
-        content,
-        source,
-    });
-}
-function resolveGeneratedDirForVerb(opts) {
-    if (opts.generatedDir !== undefined)
-        return opts.generatedDir;
-    return resolveGeneratedDir({
-        ...(opts.homeDir !== undefined ? { homeDir: opts.homeDir } : {}),
-        manifestPath: resolvePaths(opts).base,
-    });
-}
-function refuseIfAgentShell(opts) {
-    const slots = [
-        {
-            name: "$CLAUDE_CODE_SESSION_ID",
-            value: opts.claudeCodeSessionIdEnv !== undefined
-                ? opts.claudeCodeSessionIdEnv
-                : process.env.CLAUDE_CODE_SESSION_ID,
-        },
-        {
-            name: "$CLAUDE_SESSION_ID",
-            value: opts.claudeSessionIdEnv !== undefined
-                ? opts.claudeSessionIdEnv
-                : process.env.CLAUDE_SESSION_ID,
-        },
-        {
-            name: "$CODEX_SESSION_ID",
-            value: opts.codexSessionIdEnv !== undefined
-                ? opts.codexSessionIdEnv
-                : process.env.CODEX_SESSION_ID,
-        },
-    ];
-    const hit = slots.find((s) => typeof s.value === "string" && s.value.length > 0);
-    if (hit !== undefined) {
-        throw new HarnessExitError([
-            `harness pause/resume refuses to run inside an agent shell (${hit.name} is set).`,
-            "",
-            "This is a speed bump, not a boundary: a Claude Code `! `-prefixed command",
-            "runs in a shell that INHERITS this same session's environment and stdin, so",
-            "it is indistinguishable from an agent-issued command and trips this exact",
-            "check. Do not prefix with `! `: that does not work. Run the verb from a",
-            "terminal OUTSIDE this agent session (a separate terminal window or tab, not",
-            "spawned by or nested inside this one). The real enforcement boundary is the",
-            "PreToolUse deny-policy layer (see docs/okf/pause-vs-gate-kill-switch.md),",
-            "not this CLI check.",
-        ].join("\n"), EX_USAGE);
-    }
-}
-function refuseIfNonTTY(opts) {
-    const tty = opts.stdinIsTTY !== undefined ? opts.stdinIsTTY : process.stdin.isTTY === true;
-    if (tty)
-        return;
-    if (opts.iAmTheOperator === true)
-        return;
-    throw new HarnessExitError([
-        "harness pause/resume refuses to run with non-TTY stdin (looks scripted).",
-        "",
-        "If you really mean this (e.g. invoking from a one-off recovery script that",
-        "you reviewed yourself), pass --i-am-the-operator to acknowledge.",
-        "",
-        "WARNING: --i-am-the-operator only lifts the non-TTY check; it never lifts",
-        "the agent-shell check above. If an agent ever asks YOU to pass this flag on",
-        "its behalf, that request IS the attack this guard exists to stop: refuse it.",
-    ].join("\n"), EX_USAGE);
-}
-function loadManifestBestEffort(opts) {
-    if (opts.manifest)
-        return opts.manifest;
-    try {
-        return loadManifest(opts).manifest;
-    }
-    catch {
-        return null;
-    }
-}
-function defaultPausedBy() {
-    const user = process.env.USER ?? process.env.LOGNAME ?? "unknown";
-    let host = "unknown";
-    try {
-        host = os.hostname();
-    }
-    catch {
-        /* keep "unknown" */
-    }
-    return `${user}@${host}`;
-}
-export async function pause(opts = {}) {
-    refuseIfAgentShell(opts);
-    refuseIfNonTTY(opts);
-    if (opts.indefinite === true && opts.acceptNoAutoResume !== true) {
-        throw new HarnessExitError([
-            "--indefinite refuses to run without --i-am-the-operator-and-accept-no-auto-resume.",
-            "",
-            "The verbose flag is the friction. An indefinite pause leaves harness",
-            "dormant until you remember to `harness resume`. Prefer `--for <duration>`",
-            "(e.g. --for 1h, --for 30m) — it auto-resumes so a forgotten pause cannot",
-            "silently disable your gates across sessions.",
-        ].join("\n"), EX_USAGE);
-    }
-    const now = opts.now ?? new Date();
-    let expiresAt;
-    if (opts.indefinite === true) {
-        expiresAt = null;
-    }
-    else {
-        let seconds;
-        if (typeof opts.forDuration === "string" && opts.forDuration.length > 0) {
-            try {
-                seconds = parseDurationSeconds(opts.forDuration);
-            }
-            catch (err) {
-                if (err instanceof InvalidDurationError) {
-                    throw new HarnessExitError(err.message, EX_USAGE);
-                }
-                throw err;
-            }
-        }
-        else {
-            seconds = DEFAULT_PAUSE_SECONDS;
-        }
-        if (seconds <= 0) {
-            throw new HarnessExitError(`--for must be a positive duration (got "${opts.forDuration ?? ""}")`, EX_USAGE);
-        }
-        expiresAt = new Date(now.getTime() + seconds * 1000).toISOString();
-    }
-    const generatedDir = resolveGeneratedDirForVerb(opts);
-    const file = sentinelPath(generatedDir);
-    // Surface an existing pause without overwriting silently. Operators
-    // who re-run `harness pause` usually want to extend; we detect it and
-    // overwrite, but flag it via `alreadyPaused: true` in the result so the
-    // CLI can mention it in the human-readable output.
-    const prior = readSentinel(generatedDir, now);
-    const alreadyPaused = prior.kind === "active";
-    const sentinel = {
-        pausedAt: now.toISOString(),
-        expiresAt,
-        reason: typeof opts.reason === "string" && opts.reason.length > 0 ? opts.reason : null,
-        pausedBy: opts.pausedBy ?? defaultPausedBy(),
-    };
-    try {
-        writeSentinel(generatedDir, sentinel);
-    }
-    catch (err) {
-        throw new HarnessExitError(`failed to write sentinel at ${file}: ${err.message}`, EX_FAIL);
-    }
-    const manifest = loadManifestBestEffort(opts);
-    const tag = `harness-paused:${sentinel.pausedAt}`;
-    const ledgerResult = await writeLedgerTag(manifest, tag, "harness-pause-cli", opts.ledgerAdd);
-    return {
-        sentinelPath: file,
-        sentinel,
-        alreadyPaused,
-        ledger: ledgerResult.ok
-            ? { ok: true, tag }
-            : { ok: false, tag, reason: ledgerResult.reason },
-    };
-}
-export async function resume(opts = {}) {
-    refuseIfAgentShell(opts);
-    refuseIfNonTTY(opts);
-    const now = opts.now ?? new Date();
-    const generatedDir = resolveGeneratedDirForVerb(opts);
-    const file = sentinelPath(generatedDir);
-    const prior = readSentinel(generatedDir, now);
-    const previousSentinel = prior.kind === "active" || prior.kind === "expired" ? prior.sentinel : null;
-    // Idempotent: missing sentinel is exit-0 with a notice. No-op ledger
-    // write either — the audit log only carries actual resume events, not
-    // the case where the operator typed `harness resume` against an
-    // already-clean install.
-    if (prior.kind === "absent") {
-        return {
-            sentinelPath: file,
-            wasPaused: false,
-            previousSentinel: null,
-            ledger: { ok: false, tag: "", reason: "no active pause; ledger write skipped" },
-        };
-    }
-    deleteSentinel(generatedDir);
-    const manifest = loadManifestBestEffort(opts);
-    const tag = `harness-resumed:${previousSentinel?.pausedAt ?? now.toISOString()}`;
-    const ledgerResult = await writeLedgerTag(manifest, tag, "harness-resume-cli", opts.ledgerAdd);
-    return {
-        sentinelPath: file,
-        wasPaused: true,
-        previousSentinel,
-        ledger: ledgerResult.ok
-            ? { ok: true, tag }
-            : { ok: false, tag, reason: ledgerResult.reason },
-    };
-}
-//# sourceMappingURL=index.js.map

package/dist/cli/pause/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cli/pause/index.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,mEAAmE;AACnE,uEAAuE;AACvE,sCAAsC;AACtC,EAAE;AACF,sEAAsE;AACtE,4EAA4E;AAC5E,sEAAsE;AACtE,sEAAsE;AACtE,sEAAsE;AACtE,+BAA+B;AAC/B,EAAE;AACF,uEAAuE;AACvE,mEAAmE;AACnE,qEAAqE;AACrE,iEAAiE;AACjE,iEAAiE;AAEjE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EACL,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,aAAa,GAEd,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,qBAAqB,GAAG,EAAE,GAAG,EAAE,CAAC;AAEtC;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAAC;AAqFjD,SAAS,gBAAgB,CAAC,QAAkB;IAC1C,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,IAAI,IAAI,CAAC;AAC5E,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,QAAyB,EACzB,OAAe,EACf,MAAc,EACd,QAAmC;IAEnC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;IAC5E,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;IACzE,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAC3C,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,aAAa,CAAC;QACnB,UAAU,EAAE,OAAO;QACnB,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;QACzC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,IAAI,KAAK;QAC7C,SAAS,EAAE,uBAAuB;QAClC,OAAO;QACP,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAkC;IACpE,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,YAAY,CAAC;IAC9D,OAAO,mBAAmB,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI;KACtC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,IAI3B;IAOC,MAAM,KAAK,GAAW;QACpB;YACE,IAAI,EAAE,yBAAyB;YAC/B,KAAK,EACH,IAAI,CAAC,sBAAsB,KAAK,SAAS;gBACvC,CAAC,CAAC,IAAI,CAAC,sBAAsB;gBAC7B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB;SACzC;QACD;YACE,IAAI,EAAE,oBAAoB;YAC1B,KAAK,EACH,IAAI,CAAC,kBAAkB,KAAK,SAAS;gBACnC,CAAC,CAAC,IAAI,CAAC,kBAAkB;gBACzB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB;SACpC;QACD;YACE,IAAI,EAAE,mBAAmB;YACzB,KAAK,EACH,IAAI,CAAC,iBAAiB,KAAK,SAAS;gBAClC,CAAC,CAAC,IAAI,CAAC,iBAAiB;gBACxB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB;SACnC;KACF,CAAC;IACF,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjF,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,gBAAgB,CACxB;YACE,8DAA8D,GAAG,CAAC,IAAI,WAAW;YACjF,EAAE;YACF,2EAA2E;YAC3E,6EAA6E;YAC7E,2EAA2E;YAC3E,yEAAyE;YACzE,6EAA6E;YAC7E,6EAA6E;YAC7E,2EAA2E;YAC3E,qBAAqB;SACtB,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,QAAQ,CACT,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAwD;IAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;IAC3F,IAAI,GAAG;QAAE,OAAO;IAChB,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI;QAAE,OAAO;IACzC,MAAM,IAAI,gBAAgB,CACxB;QACE,0EAA0E;QAC1E,EAAE;QACF,4EAA4E;QAC5E,kEAAkE;QAClE,EAAE;QACF,2EAA2E;QAC3E,6EAA6E;QAC7E,8EAA8E;KAC/E,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAkC;IAChE,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;IAClE,IAAI,IAAI,GAAG,SAAS,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;IACtB,CAAC;IACD,OAAO,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,OAAqB,EAAE;IACjD,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzB,cAAc,CAAC,IAAI,CAAC,CAAC;IAErB,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,IAAI,IAAI,CAAC,kBAAkB,KAAK,IAAI,EAAE,CAAC;QACjE,MAAM,IAAI,gBAAgB,CACxB;YACE,oFAAoF;YACpF,EAAE;YACF,sEAAsE;YACtE,2EAA2E;YAC3E,0EAA0E;YAC1E,8CAA8C;SAC/C,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,IAAI,SAAwB,CAAC;IAC7B,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC7B,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;SAAM,CAAC;QACN,IAAI,OAAe,CAAC;QACpB,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxE,IAAI,CAAC;gBACH,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACnD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;oBACxC,MAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACpD,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,qBAAqB,CAAC;QAClC,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,gBAAgB,CACxB,2CAA2C,IAAI,CAAC,WAAW,IAAI,EAAE,IAAI,EACrE,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACrE,CAAC;IAED,MAAM,YAAY,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAExC,oEAAoE;IACpE,sEAAsE;IACtE,wEAAwE;IACxE,mDAAmD;IACnD,MAAM,KAAK,GAAG,YAAY,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;IAE9C,MAAM,QAAQ,GAAkB;QAC9B,QAAQ,EAAE,GAAG,CAAC,WAAW,EAAE;QAC3B,SAAS;QACT,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACtF,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,eAAe,EAAE;KAC7C,CAAC;IACF,IAAI,CAAC;QACH,aAAa,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CACxB,+BAA+B,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,EAChE,OAAO,CACR,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,kBAAkB,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAClD,MAAM,YAAY,GAAG,MAAM,cAAc,CACvC,QAAQ,EACR,GAAG,EACH,mBAAmB,EACnB,IAAI,CAAC,SAAS,CACf,CAAC;IAEF,OAAO;QACL,YAAY,EAAE,IAAI;QAClB,QAAQ;QACR,aAAa;QACb,MAAM,EAAE,YAAY,CAAC,EAAE;YACrB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;YACnB,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE;KACpD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,OAAsB,EAAE;IACnD,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzB,cAAc,CAAC,IAAI,CAAC,CAAC;IAErB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,MAAM,YAAY,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAExC,MAAM,KAAK,GAAG,YAAY,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,gBAAgB,GACpB,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAE9E,qEAAqE;IACrE,sEAAsE;IACtE,gEAAgE;IAChE,yBAAyB;IACzB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO;YACL,YAAY,EAAE,IAAI;YAClB,SAAS,EAAE,KAAK;YAChB,gBAAgB,EAAE,IAAI;YACtB,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,uCAAuC,EAAE;SAChF,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,YAAY,CAAC,CAAC;IAE7B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,mBAAmB,gBAAgB,EAAE,QAAQ,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;IACjF,MAAM,YAAY,GAAG,MAAM,cAAc,CACvC,QAAQ,EACR,GAAG,EACH,oBAAoB,EACpB,IAAI,CAAC,SAAS,CACf,CAAC;IAEF,OAAO;QACL,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,IAAI;QACf,gBAAgB;QAChB,MAAM,EAAE,YAAY,CAAC,EAAE;YACrB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;YACnB,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE;KACpD,CAAC;AACJ,CAAC"}