@lannguyensi/harness 0.64.0 → 1.0.0

package/dist/cli/policy/intercept.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"intercept.js","sourceRoot":"","sources":["../../../src/cli/policy/intercept.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,EAAE;AACF,2EAA2E;AAC3E,yEAAyE;AACzE,kEAAkE;AAElE,OAAO,EACL,iBAAiB,GAIlB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAChJ,OAAO,EACL,mBAAmB,EACnB,SAAS,EACT,kBAAkB,EAClB,6BAA6B,EAC7B,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,GAMvB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAC9F,OAAO,EAAE,QAAQ,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAsB,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,wBAAwB,EACxB,0BAA0B,EAC1B,aAAa,GAKd,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACxF,OAAO,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAmEzD,SAAS,gBAAgB,CAAC,QAAkB;IAC1C,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,IAAI,IAAI,CAAC;AAC5E,CAAC;AAED,uEAAuE;AACvE,SAAS,MAAM,CAAC,EAAgB;IAC9B,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,QAA4B;IAC9C,OAAO,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACpF,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,QAAwB,EAAE,QAAiB;IAC3E,sEAAsE;IACtE,qEAAqE;IACrE,kEAAkE;IAClE,uEAAuE;IACvE,kBAAkB;IAClB,qEAAqE;IACrE,oEAAoE;IACpE,qEAAqE;IACrE,MAAM,MAAM,GAAG,2BAA2B,UAAU,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,OAAO,GACzG,QAAQ,CAAC,OAAO,KAAK,eAAe;QAClC,CAAC,CAAC,qFAAqF;QACvF,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,eAAe;YACpC,CAAC,CAAC,kIAAkI;YACpI,CAAC,CAAC,EACR,EAAE,CAAC;IACH,MAAM,KAAK,GAAa,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,iBAAiB,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IAClD,IAAI,QAAQ,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,cAAc,QAAQ,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,aAAa,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACxD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAyB;IACjD,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAC/C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,0EAA0E;IAC1E,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,yEAAyE;AACzE,wEAAwE;AACxE,sEAAsE;AACtE,0EAA0E;AAC1E,2BAA2B;AAC3B,SAAS,gBAAgB,CAAC,QAAiB;IACzC,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAK,aAAmC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,MAAM,IAAI,GAAG,KAA6C,CAAC;IAC3D,KAAK,MAAM,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,2BAA2B;IAClC,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjD,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAgB,EAAE,eAAwB;IAClE,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC;IAC5E,IAAI,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,KAAK,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACrE,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,GAAG;gBAAE,OAAO,GAAG,CAAC;QACtB,CAAC;QACD,IAAI,eAAe,KAAK,SAAS,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChE,OAAO,eAAe,CAAC;QACzB,CAAC;QACD,MAAM,OAAO,GAAG,2BAA2B,EAAE,CAAC;QAC9C,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;AACvB,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,sBAAsB,CAC7B,KAAgB,EAChB,QAAkB,EAClB,GAAW,EACX,GAAmB,EACnB,WAAmD,EACnD,aAAmC,EACnC,GAAuC,EACvC,IAAY,EACZ,IAAY,EACZ,GAAqB;IAErB,IAAI,aAAa,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC;IAC/C,MAAM,aAAa,GAAG;QACpB,OAAO,EAAE,aAAa,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO;QACrD,SAAS,EAAE,aAAa,CAAC,SAAS,IAAI,WAAW,CAAC,SAAS;KAC5D,CAAC;IACF,IACE,aAAa,CAAC,OAAO,KAAK,WAAW,CAAC,OAAO;QAC7C,aAAa,CAAC,SAAS,KAAK,WAAW,CAAC,SAAS,EACjD,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,YAAY,GAAG,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACvC,MAAM,cAAc,GAAG,kBAAkB,CACvC,mBAAmB,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,EACvE,QAAQ,CAAC,YAAY,CAAC,SAAS,EAC/B,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,SAAS,EAAE,CAChF,CAAC;IACF,MAAM,mBAAmB,GAAG,kBAAkB,CAC5C,mBAAmB,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,EACvE,QAAQ,CAAC,YAAY,CAAC,SAAS,EAC/B,EAAE,GAAG,EAAE,WAAW,EAAE,aAAa,CAAC,OAAO,EAAE,aAAa,EAAE,aAAa,CAAC,SAAS,EAAE,CACpF,CAAC;IACF,OAAO,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC;QACvE,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,WAAW,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAiB,EACjB,IAAyB;IAEzB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAC3C,CAAC,CAAC,MAAM,CAAC,OAAO;QAChB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC,MAAM,EAAE,UAAU,IAAI,KAAK,CAAC;IAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC7C,IAAI,OAAO,GAAyB,IAAI,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAsC,CAAC;IACnE,gEAAgE;IAChE,qEAAqE;IACrE,iEAAiE;IACjE,qEAAqE;IACrE,sEAAsE;IACtE,qEAAqE;IACrE,oEAAoE;IACpE,uEAAuE;IACvE,sEAAsE;IACtE,oEAAoE;IACpE,SAAS;IACT,EAAE;IACF,oEAAoE;IACpE,+DAA+D;IAC/D,gEAAgE;IAChE,iEAAiE;IACjE,iEAAiE;IACjE,iEAAiE;IACjE,sEAAsE;IACtE,wDAAwD;IACxD,qEAAqE;IACrE,oEAAoE;IACpE,+DAA+D;IAC/D,oEAAoE;IACpE,iEAAiE;IACjE,iEAAiE;IACjE,gEAAgE;IAChE,mEAAmE;IACnE,+DAA+D;IAC/D,oBAAoB;IACpB,MAAM,cAAc,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,MAAM,UAAU,GAAG,GAAkB,EAAE,CACrC,CAAC,OAAO,KAAK,iBAAiB,CAAC;QAC7B,UAAU,EAAE,OAAO;QACnB,GAAG,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAC3B,SAAS;KACV,CAAC,CAAC,CAAC;IACN,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS;YACzB,kEAAkE;YAClE,gEAAgE;YAChE,6DAA6D;YAC7D,mEAAmE;YACnE,kEAAkE;YAClE,2DAA2D;YAC3D,6DAA6D;YAC7D,0DAA0D;YAC1D,qBAAqB;YACrB,gEAAgE;YAChE,+DAA+D;YAC/D,+DAA+D;YAC/D,iEAAiE;YACjE,mCAAmC;YACnC,IAAI,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,GAAG,UAAU,EAAE,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;gBAClD,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS;YAC9B,IAAI,MAAM,GAAG,MAAM,6BAA6B,CAC9C,UAAU,EAAE,EACZ,QAAQ,EACR,SAAS,CACV,CAAC;YACF,IACE,CAAC,MAAM,CAAC,EAAE;gBACV,QAAQ,CAAC,OAAO,KAAK,eAAe;gBACpC,CAAC,eAAe,EAChB,CAAC;gBACD,gEAAgE;gBAChE,8DAA8D;gBAC9D,wDAAwD;gBACxD,4DAA4D;gBAC5D,sCAAsC;gBACtC,eAAe,GAAG,IAAI,CAAC;gBACvB,OAAO,EAAE,OAAO,EAAE,CAAC;gBACnB,OAAO,GAAG,iBAAiB,CAAC;oBAC1B,UAAU,EAAE,OAAO;oBACnB,GAAG,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;oBAC3B,SAAS,EAAE,cAAc;iBAC1B,CAAC,CAAC;gBACH,MAAM,GAAG,MAAM,6BAA6B,CAC1C,OAAO,EACP,QAAQ,EACR,SAAS,CACV,CAAC;YACJ,CAAC;YACD,iEAAiE;YACjE,kEAAkE;YAClE,gEAAgE;YAChE,mEAAmE;YACnE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CACV,2BAA2B,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,2BAA2B;oBAC7E,GAAG,QAAQ,CAAC,UAAU,KAAK,MAAM,CAAC,MAAM,IAAI,eAAe,IAAI,CAClE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO;YACL,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,OAAO,+CAA+C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmFG;AACH,MAAM,UAAU,oBAAoB,CAAC,eAAuB;IAC1D,OAAO,CAAC,GAAG,eAAe,GAAG,CAAC,GAAG,mBAAmB,CAAC,eAAe,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAAc,EACd,MAA6B,EAC7B,QAAiB;IAEjB,OAAO;QACL,KAAK,CAAC,KAAK;YACT,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QACtC,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,QAAQ;YACnB,kEAAkE;YAClE,gEAAgE;YAChE,4DAA4D;YAC5D,iEAAiE;YACjE,kEAAkE;YAClE,oEAAoE;YACpE,mEAAmE;YACnE,2CAA2C;YAC3C,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,MAAM,CAAC,KAAK,CACV,2BAA2B,UAAU,CAAC,QAAQ,CAAC,0BAA0B;oBACvE,GAAG,QAAQ,CAAC,UAAU,sBAAsB,MAAM,KAAK,CAC1D,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,IAAY;IACtC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACpE,MAAM,IAAI,GAAI,MAAwC,CAAC,eAAe,CAAC;IACvE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACjG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAA4B,EAAE;IAE9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC7C,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,IAAI,qBAAqB,CAAC;IACvE,yEAAyE;IACzE,MAAM,SAAS,GAA+C;QAC5D,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,kBAAkB;QAC7B,MAAM;KACP,CAAC;IACF,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,SAAS,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IAChF,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;QAAE,SAAS,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,QAAQ,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QACjE,kEAAkE;QAClE,0EAA0E;QAC1E,0EAA0E;QAC1E,4EAA4E;QAC5E,2EAA2E;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,uEAAuE;QACvE,0EAA0E;QAC1E,sDAAsD;QACtD,IAAI,oBAAoB,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;YAC3C,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACxD,CAAC;QACD,MAAM,MAAM,GAAG,uBAAuB,CAAC,aAAa,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,2BAA2B,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,MAAM,IAAI,CAAC,CAAC;QACzF,MAAM,CAAC,KAAK,CAAC,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,4EAA4E;QAC5E,yDAAyD;QACzD,MAAM,CAAC,KAAK,CACV,2BAA2B,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,gBAAgB,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,CACnG,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;IACtB,IAAI,KAAgB,CAAC;IACrB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,CAAc,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CACV,2BAA2B,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,2BAA4B,GAAa,CAAC,OAAO,IAAI,CAC1G,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACxD,CAAC;IAED,uEAAuE;IACvE,wEAAwE;IACxE,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,CAAC;QACC,IAAI,oBAAoB,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;YAC3C,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;IAED,IAAI,QAAkB,CAAC;IACvB,IAAI,YAAgC,CAAC;IACrC,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAClC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC3B,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtC,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CACV,2BAA2B,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,2BAA4B,GAAa,CAAC,OAAO,IAAI,CAC1G,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACxD,CAAC;IAED,IAAI,MAAoB,CAAC;IACzB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,GAAG,MAAM;YACb,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC;YAChC,CAAC,CAAC,oBAAoB,CAClB,wCAAwC,EACxC,MAAM,EACN,IAAI,CAAC,QAAQ,CACd,CAAC;IACR,CAAC;IAED,sEAAsE;IACtE,oEAAoE;IACpE,mEAAmE;IACnE,2DAA2D;IAC3D,iEAAiE;IACjE,mEAAmE;IACnE,mEAAmE;IACnE,qEAAqE;IACrE,mEAAmE;IACnE,kEAAkE;IAClE,iEAAiE;IACjE,8DAA8D;IAC9D,uDAAuD;IACvD,sEAAsE;IACtE,mDAAmD;IACnD,MAAM,cAAc,GAAG,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,wEAAwE;IACxE,sEAAsE;IACtE,oDAAoD;IACpD,MAAM,gBAAgB,GACpB,cAAc;QACd,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAClC,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,EAAE,CAAC;IACL,uEAAuE;IACvE,0EAA0E;IAC1E,qEAAqE;IACrE,yEAAyE;IACzE,kEAAkE;IAClE,uDAAuD;IACvD,EAAE;IACF,sEAAsE;IACtE,qEAAqE;IACrE,uEAAuE;IACvE,uEAAuE;IACvE,wEAAwE;IACxE,wEAAwE;IACxE,oEAAoE;IACpE,uEAAuE;IACvE,uEAAuE;IACvE,+DAA+D;IAC/D,kEAAkE;IAClE,yEAAyE;IACzE,+DAA+D;IAC/D,kEAAkE;IAClE,uEAAuE;IACvE,sEAAsE;IACtE,0DAA0D;IAC1D,sEAAsE;IACtE,6DAA6D;IAC7D,oEAAoE;IACpE,uEAAuE;IACvE,kEAAkE;IAClE,kEAAkE;IAClE,mCAAmC;IACnC,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC7C,wEAAwE;IACxE,qEAAqE;IACrE,sCAAsC;IACtC,EAAE;IACF,yEAAyE;IACzE,wEAAwE;IACxE,uEAAuE;IACvE,0EAA0E;IAC1E,sEAAsE;IACtE,+DAA+D;IAC/D,sEAAsE;IACtE,+DAA+D;IAC/D,uEAAuE;IACvE,wEAAwE;IACxE,wEAAwE;IACxE,iEAAiE;IACjE,oEAAoE;IACpE,6DAA6D;IAC7D,wEAAwE;IACxE,wEAAwE;IACxE,mEAAmE;IACnE,kEAAkE;IAClE,WAAW;IACX,EAAE;IACF,wEAAwE;IACxE,iEAAiE;IACjE,uEAAuE;IACvE,uEAAuE;IACvE,uEAAuE;IACvE,qEAAqE;IACrE,wEAAwE;IACxE,gEAAgE;IAChE,yBAAyB;IACzB,EAAE;IACF,oEAAoE;IACpE,iEAAiE;IACjE,mDAAmD;IACnD,8EAA8E;IAC9E,uEAAuE;IACvE,iEAAiE;IACjE,gEAAgE;IAChE,oEAAoE;IACpE,wEAAwE;IACxE,wEAAwE;IACxE,mEAAmE;IACnE,wEAAwE;IACxE,8CAA8C;IAC9C,EAAE;IACF,sEAAsE;IACtE,8CAA8C;IAC9C,EAAE;IACF,0EAA0E;IAC1E,wDAAwD;IACxD,kEAAkE;IAClE,gEAAgE;IAChE,8DAA8D;IAC9D,sEAAsE;IACtE,wEAAwE;IACxE,iEAAiE;IACjE,wEAAwE;IACxE,EAAE;IACF,6DAA6D;IAC7D,iEAAiE;IACjE,oEAAoE;IACpE,uEAAuE;IACvE,mEAAmE;IACnE,4DAA4D;IAC5D,0DAA0D;IAC1D,mEAAmE;IACnE,wEAAwE;IACxE,oEAAoE;IACpE,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1F,MAAM,iBAAiB,GACrB,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACnE,oEAAoE;IACpE,mEAAmE;IACnE,0DAA0D;IAC1D,uEAAuE;IACvE,8DAA8D;IAC9D,yEAAyE;IACzE,+DAA+D;IAC/D,yEAAyE;IACzE,qEAAqE;IACrE,mEAAmE;IACnE,wEAAwE;IACxE,uDAAuD;IACvD,wEAAwE;IACxE,uEAAuE;IACvE,oEAAoE;IACpE,0DAA0D;IAC1D,uEAAuE;IACvE,wEAAwE;IACxE,mEAAmE;IACnE,yDAAyD;IACzD,IAAI,oBAAyD,CAAC;IAC9D,MAAM,oBAAoB,GACxB,WAAW,KAAK,IAAI;QAClB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,GAAG,EAAE;YACH,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;gBACvC,oBAAoB,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;YACpD,CAAC;YACD,OAAO,oBAAoB,CAAC;QAC9B,CAAC,CAAC;IACR,mEAAmE;IACnE,uEAAuE;IACvE,qEAAqE;IACrE,uEAAuE;IACvE,iEAAiE;IACjE,oEAAoE;IACpE,oEAAoE;IACpE,sEAAsE;IACtE,oEAAoE;IACpE,sEAAsE;IACtE,sEAAsE;IACtE,gEAAgE;IAChE,uEAAuE;IACvE,kEAAkE;IAClE,kEAAkE;IAClE,wCAAwC;IACxC,IAAI,yBAAgE,CAAC;IACrE,MAAM,yBAAyB,GAC7B,WAAW,KAAK,IAAI;QAClB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,yBAAyB,KAAK,wBAAwB,CAAC,WAAW,CAAC,CAAC,CAAC;IAClF,oEAAoE;IACpE,wEAAwE;IACxE,sEAAsE;IACtE,sEAAsE;IACtE,oEAAoE;IACpE,2DAA2D;IAC3D,sEAAsE;IACtE,4CAA4C;IAC5C,IAAI,2BAAoE,CAAC;IACzE,MAAM,2BAA2B,GAC/B,WAAW,KAAK,IAAI;QAClB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,2BAA2B,KAAK,0BAA0B,CAAC,WAAW,CAAC,CAAC,CAAC;IACtF,uEAAuE;IACvE,iEAAiE;IACjE,uEAAuE;IACvE,wEAAwE;IACxE,qEAAqE;IACrE,sEAAsE;IACtE,iEAAiE;IACjE,sEAAsE;IACtE,yDAAyD;IACzD,kEAAkE;IAClE,4DAA4D;IAC5D,oEAAoE;IACpE,qEAAqE;IACrE,sDAAsD;IACtD,IAAI,iBAAiB,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC;QAC1C,MAAM,CAAC,KAAK,CACV,2BAA2B,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,0BAA0B,oBAAoB,2EAA2E,CAC9K,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG;QACf,UAAU,EAAE,gBAAgB;QAC5B,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,aAAa,CAAC,IAAI;QACpD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,aAAa,CAAC,MAAM;QAC1D,SAAS,EAAE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;QACrE,GAAG,EAAE,GAAG;KACT,CAAC;IAEF,8DAA8D;IAC9D,qEAAqE;IACrE,sEAAsE;IACtE,qDAAqD;IACrD,IAAI,WAAwC,CAAC;IAC7C,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,GACR,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;YAChE,CAAC,CAAC;gBACE,OAAO,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;gBAC/B,SAAS,EAAE,IAAI,CAAC,aAAa,IAAI,EAAE;aACpC;YACH,CAAC,CAAC,kBAAkB,EAAE,CAAC;QAC3B,8DAA8D;QAC9D,6DAA6D;QAC7D,mEAAmE;QACnE,+DAA+D;QAC/D,8DAA8D;QAC9D,+DAA+D;QAC/D,gEAAgE;QAChE,gEAAgE;QAChE,+DAA+D;QAC/D,gEAAgE;QAChE,oEAAoE;QACpE,iFAAiF;QACjF,mEAAmE;QACnE,qEAAqE;QACrE,kEAAkE;QAClE,iEAAiE;QACjE,8CAA8C;QAC9C,EAAE;QACF,qEAAqE;QACrE,oEAAoE;QACpE,oEAAoE;QACpE,oEAAoE;QACpE,uEAAuE;QACvE,6DAA6D;QAC7D,mEAAmE;QACnE,sEAAsE;QACtE,iEAAiE;QACjE,qEAAqE;QACrE,sEAAsE;QACtE,8DAA8D;QAC9D,oEAAoE;QACpE,oEAAoE;QACpE,oEAAoE;QACpE,iEAAiE;QACjE,4EAA4E;QAC5E,6DAA6D;QAC7D,qEAAqE;QACrE,oEAAoE;QACpE,gEAAgE;QAChE,YAAY;QACZ,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7C,iEAAiE;QACjE,gEAAgE;QAChE,qDAAqD;QACrD,8DAA8D;QAC9D,qEAAqE;QACrE,+BAA+B;QAC/B,kDAAkD;QAClD,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,GACtE,2BAA2B,CAAC;YAC1B,KAAK;YACL,QAAQ;YACR,GAAG;YACH,aAAa;YACb,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;YAC5B,WAAW,EAAE,IAAI,CAAC,OAAO;YACzB,aAAa,EAAE,IAAI,CAAC,SAAS;YAC7B,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAC;QACL,6DAA6D;QAC7D,mEAAmE;QACnE,gEAAgE;QAChE,oEAAoE;QACpE,kEAAkE;QAClE,yDAAyD;QACzD,iEAAiE;QACjE,mEAAmE;QACnE,2DAA2D;QAC3D,MAAM,cAAc,GAClB,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,cAAc,IAAI,CAAC,CAAC,CAAC;QAC3F,MAAM,aAAa,GAAG,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC;QAC1F,yDAAyD;QACzD,gEAAgE;QAChE,gEAAgE;QAChE,mEAAmE;QACnE,gEAAgE;QAChE,kEAAkE;QAClE,kDAAkD;QAClD,8DAA8D;QAC9D,wBAAwB;QACxB,MAAM,WAAW,GAAG,sBAAsB,CACxC,KAAK,EACL,QAAQ,EACR,GAAG,EACH,UAAU,EACV,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EACpD,aAAa,EACb,WAAW,EACX,QAAQ,EACR,QAAQ,EACR,IAAI,CAAC,GAAG,CACT,CAAC;QACF,WAAW,GAAG;YACZ,GAAG,EAAE,UAAU;YACf,GAAG;YACH,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,WAAW;YAChB,WAAW,EAAE,WAAW,CAAC,OAAO;YAChC,aAAa,EAAE,WAAW,CAAC,SAAS;SACrC,CAAC;IACJ,CAAC;IAED,IAAI,MAA6C,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,SAAS,CAAC;YACvB,QAAQ;YACR,KAAK;YACL,MAAM;YACN,QAAQ;YACR,MAAM;YACN,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC;YACpF,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;YAClC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,aAAa,CAAC,GAAG,EAAE,CAAC;YAC1E,GAAG,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,CAAC;YACnC,GAAG,CAAC,iBAAiB,IAAI,EAAE,iBAAiB,EAAE,CAAC;YAC/C,GAAG,CAAC,yBAAyB,IAAI,EAAE,yBAAyB,EAAE,CAAC;YAC/D,GAAG,CAAC,2BAA2B,IAAI,EAAE,2BAA2B,EAAE,CAAC;YACnE,GAAG,CAAC,oBAAoB,IAAI,EAAE,oBAAoB,EAAE,CAAC;YACrD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;YACvE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;SAC5E,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,sEAAsE;QACtE,oEAAoE;QACpE,oDAAoD;QACpD,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;IACrB,CAAC;IAED,mEAAmE;IACnE,sEAAsE;IACtE,mEAAmE;IACnE,sEAAsE;IACtE,uEAAuE;IACvE,uEAAuE;IACvE,oEAAoE;IACpE,oEAAoE;IACpE,6DAA6D;IAC7D,oEAAoE;IACpE,yDAAyD;IACzD,mEAAmE;IACnE,oEAAoE;IACpE,sEAAsE;IACtE,oEAAoE;IACpE,sEAAsE;IACtE,qEAAqE;IACrE,wCAAwC;IACxC,EAAE;IACF,wEAAwE;IACxE,oEAAoE;IACpE,kEAAkE;IAClE,mEAAmE;IACnE,0DAA0D;IAC1D,mCAAmC;IACnC,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAChE,IACE,MAAM,CAAC,SAAS;QAChB,cAAc,KAAK,SAAS;QAC5B,cAAc,CAAC,MAAM,GAAG,CAAC;QACzB,aAAa,EAAE,OAAO,KAAK,kBAAkB;QAC7C,sEAAsE;QACtE,uEAAuE;QACvE,yDAAyD;QACzD,aAAa,CAAC,eAAe,KAAK,SAAS,EAC3C,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY;eACjC,CAAC,YAAY,KAAK,SAAS;gBAC5B,CAAC,CAAC,mBAAmB,CAAC;oBAClB,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChE,YAAY;iBACb,CAAC;gBACJ,CAAC,CAAC,SAAS,CAAC,CAAC;QACjB,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,oBAAoB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,sDAAsD;YACxD,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC;IAED,gEAAgE;IAChE,iEAAiE;IACjE,mEAAmE;IACnE,oEAAoE;IACpE,iEAAiE;IACjE,oEAAoE;IACpE,gEAAgE;IAChE,wCAAwC;IACxC,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,sEAAsE;IACtE,gEAAgE;IAChE,+DAA+D;IAC/D,iEAAiE;IACjE,qEAAqE;IACrE,kEAAkE;IAClE,oEAAoE;IACpE,qEAAqE;IACrE,oEAAoE;IACpE,oEAAoE;IACpE,iEAAiE;IACjE,qEAAqE;IACrE,kEAAkE;IAClE,qEAAqE;IACrE,mEAAmE;IACnE,iEAAiE;IACjE,qEAAqE;IACrE,4CAA4C;IAC5C,MAAM,iBAAiB,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,eAAe,CACrC,CAAC;IACF,IAAI,iBAAiB,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CACV,2BAA2B,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,iBAAiB,CAAC,UAAU,IAAI;YACvF,kDAAkD;YAClD,GAAG,sBAAsB,CAAC,iBAAiB,CAAC,MAAM,CAAC,qBAAqB;YACxE,6EAA6E;YAC7E,sEAAsE;YACtE,4DAA4D,CAC/D,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACxC,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO;gBAAE,SAAS;YAC3C,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,CAAC;QACX,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,SAAS,KAAK,IAAI;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAgB,EAAE,QAAkB,EAAE,QAAiB;IAChF,MAAM,aAAa,GACjB,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;QAC3E,CAAC,CAAC,IAAI,KAAK,CAAC,eAAe,GAAG;QAC9B,CAAC,CAAC,WAAW,CAAC;IAClB,MAAM,YAAY,GAChB,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QAC/D,CAAC,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG;QACxB,CAAC,CAAC,WAAW,CAAC;IAClB,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CACjC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CACvD,CAAC,IAAI,EAAE,CAAC;IACT,OAAO,CACL,2BAA2B,UAAU,CAAC,QAAQ,CAAC,4BAA4B;QAC3E,mBAAmB,aAAa,cAAc,YAAY,GAAG;QAC7D,8BAA8B,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;QAC9D,iGAAiG,CAClG,CAAC;AACJ,CAAC"}

package/dist/cli/policy/risk-envelope-enrichment.d.ts

@@ -1,40 +0,0 @@
-import { type GitRepoContext, type ToolEvent } from "../../runtime/index.js";
-import { type BashPrefix } from "../../runtime/bash-prefix-parse.js";
-import type { Manifest, MatchableEnvironment } from "../../schema/index.js";
-/**
- * Read the command string out of a Bash tool's `tool_input.command`,
- * returning null when the shape is wrong (defensive — production input
- * comes from Claude Code, but tests and Codex bridges have varied
- * payload shapes).
- */
-export declare function readBashCommand(input: unknown): string | null;
-export declare const ENV_RANK: Record<MatchableEnvironment, number>;
-export interface BashPrefixEnrichmentInput {
-    event: ToolEvent;
-    manifest: Manifest;
-    cwd: string;
-    /** Git context of `cwd` itself (the base the prefix merges on top of). */
-    cwdGitContext: GitRepoContext;
-    /** Ambient env the inline assignments are merged over. */
-    env: Record<string, string | undefined>;
-    kubeContext: string;
-    kubeNamespace: string;
-    user: string;
-    host: string;
-    now: Date | undefined;
-}
-export interface BashPrefixEnrichment {
-    /** The Bash command string, or null for a non-Bash / shapeless event. */
-    riskBashCommand: string | null;
-    bashPrefix: BashPrefix | null;
-    /** Git context after the `cd` merge and the branch-switch upgrade. */
-    git: GitRepoContext;
-    /** Ambient env with the inline `VAR=value` assignments merged on top. */
-    env: Record<string, string | undefined>;
-}
-/**
- * Parse the leading Bash prefix once and merge it into the resolver
- * inputs (see the module header). Pure apart from `resolveGitContext`
- * for a `cd` target.
- */
-export declare function resolveBashPrefixEnrichment(input: BashPrefixEnrichmentInput): BashPrefixEnrichment;

package/dist/cli/policy/risk-envelope-enrichment.js

@@ -1,110 +0,0 @@
-// Shared Risk Gate envelope enrichment for the verbs that predict or
-// enforce a `when:` verdict: `harness policy intercept` (the PreToolUse
-// hook) and the debug verbs `harness explain-policy`, `harness resolve-env`,
-// `harness test-risk` and `harness explain-action`. The four verbs reach
-// this helper through `src/cli/enriched-event.ts`.
-//
-// All of them must resolve the environment from the SAME inputs, or the tool an
-// operator uses to predict a gate disagrees with the gate (task
-// 7c3919a2: `DATABASE_URL=...prod... psql ...` resolved `production` in
-// the hook and `unknown` in explain-policy). This module owns the
-// leading-prefix parse of a Bash command and the three merges it feeds:
-// inline `VAR=value` env, a leading `cd <path> &&` (git context), and a
-// leading `git switch|checkout <branch> &&` (upgrade-only).
-//
-// Deliberately NOT here: any ledger or evidence read (explain-policy
-// stays hypothetical and read-free; keep this module free of
-// `policies/` imports), and the kubectl `--context`/`--namespace`
-// merge (hook-only today, tracked separately).
-import * as path from "node:path";
-import { buildActionEnvelope, resolveEnvironment, resolveGitContext, } from "../../runtime/index.js";
-import { parseBashPrefix } from "../../runtime/bash-prefix-parse.js";
-/**
- * Read the command string out of a Bash tool's `tool_input.command`,
- * returning null when the shape is wrong (defensive — production input
- * comes from Claude Code, but tests and Codex bridges have varied
- * payload shapes).
- */
-export function readBashCommand(input) {
-    if (!input || typeof input !== "object" || Array.isArray(input))
-        return null;
-    const cmd = input.command;
-    return typeof cmd === "string" && cmd.length > 0 ? cmd : null;
-}
-// Mirrors `ENV_PRECEDENCE` in `../../runtime/environment-resolver.ts`
-// (most-dangerous-first). Kept as a local, small, duplicate table
-// instead of importing that module's private const, so this file stays
-// a read-only consumer of `resolveEnvironment`'s public API rather than
-// reaching into its internals. `unknown` is deliberately ranked lowest:
-// resolving to no signal at all must never look like an "upgrade" over
-// a branch that DID fire a resolver.
-export const ENV_RANK = {
-    production: 0,
-    staging: 1,
-    dev: 2,
-    local: 3,
-    unknown: 4,
-};
-/**
- * Branch-switch, upgrade-only merge (task 341e024b): a leading `git
- * switch <branch>` / `git checkout <branch>` names the branch the REST
- * of the command actually runs against, the same way a leading `cd
- * <path>` names a different working directory (see `resolverGit`'s own
- * comment at the call site). Unlike that `cd` merge — which fully
- * REPLACES the git context and can move the resolved environment in
- * EITHER direction (G5, pre-existing, out of scope for this task) —
- * this merge is deliberately asymmetric: it only ever pushes the
- * resolved environment to something MORE dangerous, never less.
- *
- * Both the base git context and the switch-target candidate (same repo
- * / sha, only `branch` differs) are run through the SAME
- * `resolveEnvironment` call with IDENTICAL env / kube inputs, so any
- * difference in the result is attributable to the branch alone. The
- * more dangerous of the two (`ENV_RANK` order) wins; a switch AWAY from
- * a production branch never downgrades — when the candidate resolves to
- * something equally or less dangerous, `baseGit` is returned unchanged.
- */
-function applyBranchSwitchUpgrade(event, manifest, cwd, baseGit, branchTarget, inputs, user, host, now) {
-    if (branchTarget === null || branchTarget === baseGit.branch)
-        return baseGit;
-    const candidateGit = { ...baseGit, branch: branchTarget };
-    const effectiveNow = now ?? new Date();
-    const baseResolution = resolveEnvironment(buildActionEnvelope(event, { cwd, git: baseGit, user, host, now: effectiveNow }), manifest.environments.resolvers, inputs);
-    const candidateResolution = resolveEnvironment(buildActionEnvelope(event, { cwd, git: candidateGit, user, host, now: effectiveNow }), manifest.environments.resolvers, inputs);
-    return ENV_RANK[candidateResolution.name] < ENV_RANK[baseResolution.name] ? candidateGit : baseGit;
-}
-/**
- * Parse the leading Bash prefix once and merge it into the resolver
- * inputs (see the module header). Pure apart from `resolveGitContext`
- * for a `cd` target.
- */
-export function resolveBashPrefixEnrichment(input) {
-    const { event, manifest, cwd, cwdGitContext } = input;
-    const riskBashCommand = event.tool_name === "Bash" ? readBashCommand(event.tool_input) : null;
-    const bashPrefix = riskBashCommand === null ? null : parseBashPrefix(riskBashCommand);
-    const resolverGit = (() => {
-        if (bashPrefix === null || bashPrefix.cdTarget === null)
-            return cwdGitContext;
-        const effective = path.isAbsolute(bashPrefix.cdTarget)
-            ? bashPrefix.cdTarget
-            : path.resolve(cwd, bashPrefix.cdTarget);
-        // resolveGitContext returns empty strings for non-git paths;
-        // an empty repo means cd-target was bogus, fall through.
-        const candidate = resolveGitContext(effective);
-        return candidate.repo.length > 0 ? candidate : cwdGitContext;
-    })();
-    const env = (() => {
-        const base = input.env;
-        if (bashPrefix === null || Object.keys(bashPrefix.inlineEnv).length === 0)
-            return base;
-        // Inline assignments are the operator's explicit override; they
-        // win over process.env (matches POSIX `VAR=value cmd` semantics).
-        return { ...base, ...bashPrefix.inlineEnv };
-    })();
-    // A leading `git switch`/`checkout <branch>` (task 341e024b) is
-    // merged on top of `resolverGit`, upgrade-only, using the AMBIENT kube
-    // state. See `applyBranchSwitchUpgrade`.
-    const git = applyBranchSwitchUpgrade(event, manifest, cwd, resolverGit, bashPrefix?.branchTarget ?? null, { env, kubeContext: input.kubeContext, kubeNamespace: input.kubeNamespace }, input.user, input.host, input.now);
-    return { riskBashCommand, bashPrefix, git, env };
-}
-//# sourceMappingURL=risk-envelope-enrichment.js.map

package/dist/cli/policy/risk-envelope-enrichment.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"risk-envelope-enrichment.js","sourceRoot":"","sources":["../../../src/cli/policy/risk-envelope-enrichment.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,wEAAwE;AACxE,6EAA6E;AAC7E,yEAAyE;AACzE,mDAAmD;AACnD,EAAE;AACF,gFAAgF;AAChF,gEAAgE;AAChE,wEAAwE;AACxE,kEAAkE;AAClE,wEAAwE;AACxE,wEAAwE;AACxE,4DAA4D;AAC5D,EAAE;AACF,qEAAqE;AACrE,6DAA6D;AAC7D,kEAAkE;AAClE,+CAA+C;AAE/C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,GAGlB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,eAAe,EAAmB,MAAM,oCAAoC,CAAC;AAGtF;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,MAAM,GAAG,GAAI,KAA+B,CAAC,OAAO,CAAC;IACrD,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED,sEAAsE;AACtE,kEAAkE;AAClE,uEAAuE;AACvE,wEAAwE;AACxE,wEAAwE;AACxE,uEAAuE;AACvE,qCAAqC;AACrC,MAAM,CAAC,MAAM,QAAQ,GAAyC;IAC5D,UAAU,EAAE,CAAC;IACb,OAAO,EAAE,CAAC;IACV,GAAG,EAAE,CAAC;IACN,KAAK,EAAE,CAAC;IACR,OAAO,EAAE,CAAC;CACX,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,wBAAwB,CAC/B,KAAgB,EAChB,QAAkB,EAClB,GAAW,EACX,OAAuB,EACvB,YAA2B,EAC3B,MAA+F,EAC/F,IAAY,EACZ,IAAY,EACZ,GAAqB;IAErB,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,KAAK,OAAO,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAC7E,MAAM,YAAY,GAAmB,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC1E,MAAM,YAAY,GAAG,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACvC,MAAM,cAAc,GAAG,kBAAkB,CACvC,mBAAmB,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,EAChF,QAAQ,CAAC,YAAY,CAAC,SAAS,EAC/B,MAAM,CACP,CAAC;IACF,MAAM,mBAAmB,GAAG,kBAAkB,CAC5C,mBAAmB,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,EACrF,QAAQ,CAAC,YAAY,CAAC,SAAS,EAC/B,MAAM,CACP,CAAC;IACF,OAAO,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;AACrG,CAAC;AA4BD;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAgC;IAEhC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IACtD,MAAM,eAAe,GACnB,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,MAAM,UAAU,GAAG,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;IACtF,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE;QACxB,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO,aAAa,CAAC;QAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC;YACpD,CAAC,CAAC,UAAU,CAAC,QAAQ;YACrB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC3C,6DAA6D;QAC7D,yDAAyD;QACzD,MAAM,SAAS,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC/C,OAAO,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;IAC/D,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE;QAChB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC;QACvB,IAAI,UAAU,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACvF,gEAAgE;QAChE,kEAAkE;QAClE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;IAC9C,CAAC,CAAC,EAAE,CAAC;IACL,gEAAgE;IAChE,uEAAuE;IACvE,yCAAyC;IACzC,MAAM,GAAG,GAAG,wBAAwB,CAClC,KAAK,EACL,QAAQ,EACR,GAAG,EACH,WAAW,EACX,UAAU,EAAE,YAAY,IAAI,IAAI,EAChC,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,EAC3E,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,GAAG,CACV,CAAC;IACF,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACnD,CAAC"}

package/dist/cli/record/index.d.ts

@@ -1,81 +0,0 @@
-import { type LedgerWriteFn } from "../../runtime/ledger-writer.js";
-import { type ResolveReadSessionOptions } from "../../runtime/session-id.js";
-import { type LoaderOptions } from "../loader.js";
-/** Options shared by every `record` verb. */
-export interface RecordCommonOptions extends LoaderOptions {
-    /** Working directory used for git-context resolution. Defaults to `process.cwd()`. */
-    cwd?: string;
-    /** Defaults to `process.stderr`. Warnings and error reasons land here. */
-    stderr?: NodeJS.WritableStream;
-    /** Explicit session id (overrides env + transcript discovery). */
-    session?: string;
-    /** Per-call ledger timeout in ms. */
-    ledgerTimeoutMs?: number;
-    /**
-     * Inject the read-path session resolver (test seam). Production uses
-     * `resolveReadSessionId` from `runtime/session-id`, the same
-     * precedence chain `harness audit` / `harness explain --trace` use.
-     */
-    resolveSession?: (explicit: string | undefined, opts: ResolveReadSessionOptions) => string;
-    /** Inject the ledger writer (test seam). */
-    writeLedger?: LedgerWriteFn;
-}
-/** Structured outcome of a `record` verb — testable without spawning a process. */
-export interface RecordResult {
-    /** 0 on success; EX_USAGE (64) for a bad argument, EX_FAIL (1) for a runtime failure. */
-    exitCode: number;
-    /** Whether the ledger fact was actually written. */
-    wrote: boolean;
-    /** The exact content string written (or that would have been written); "" on early validation failure. */
-    content: string;
-    /** Resolved session id ("" only when validation failed before session resolution). */
-    sessionId: string;
-    /** Resolved branch tag ("" when the verb does not use one, or resolution failed). */
-    branch: string;
-    /** Human-readable explanation of a non-write outcome. */
-    reason?: string;
-}
-export interface RecordReviewOptions extends RecordCommonOptions {
-    /** PR number (or identifier) — required, non-empty. */
-    pr: string;
-    /** Explicit base-branch override; see resolveBase() for the fallback chain. */
-    base?: string;
-    /** Explicit branch override (otherwise resolved via resolveGitContext(cwd)). */
-    branch?: string;
-    /**
-     * agent-tasks task id for the `review:<task-id>` tag the two task-scoped
-     * merge gates read (`review-before-task-merge` /
-     * `review-before-task-finish-automerge`, task 2699b476). Optional: the
-     * PR/branch/base tags are what the pull_requests_merge and `gh pr merge`
-     * gates read, and an operator on those surfaces has no task id to pass.
-     */
-    task?: string;
-    /** Free-form review summary — required, non-empty. */
-    summary: string;
-}
-export declare function runRecordReview(opts: RecordReviewOptions): Promise<RecordResult>;
-export interface RecordReviewSubagentOptions extends RecordCommonOptions {
-    /**
-     * agent-tasks task id, non-empty when given. Exactly one of `task` or
-     * `adhoc` is required.
-     */
-    task?: string;
-    /**
-     * Record a review for work that has no agent-tasks task: only the
-     * `review-subagent:<branch>` tag is written, never a task tag. Mutually
-     * exclusive with `task`.
-     */
-    adhoc?: boolean;
-    /** Reviewer verdict — required, non-empty. */
-    verdict: string;
-    /** Explicit branch override (otherwise resolved via resolveGitContext(cwd)). */
-    branch?: string;
-    /** Optional free-form summary appended after the verdict. */
-    summary?: string;
-}
-export declare function runRecordReviewSubagent(opts: RecordReviewSubagentOptions): Promise<RecordResult>;
-export interface RecordDogfoodOptions extends RecordCommonOptions {
-    /** End-to-end smoke summary — required, non-empty. */
-    summary: string;
-}
-export declare function runRecordDogfood(opts: RecordDogfoodOptions): Promise<RecordResult>;

package/dist/cli/record/index.js

@@ -1,348 +0,0 @@
-// `harness record {review,review-subagent,dogfood}` — operator/agent-
-// driven evidence-ledger producers for the review-before-merge,
-// review-subagent-before-pr-create, and dogfood-before-release gate
-// families (see src/cli/init/templates.ts for the exact policy
-// definitions and tag shapes these verbs feed).
-//
-// Unlike `harness session-start preflight` (a SessionStart hook that
-// MUST exit 0 on every path so it never breaks the session loop), the
-// `record` verbs are INTERACTIVE: an agent or operator invokes them
-// deliberately to attach a review verdict / dogfood summary to the
-// ledger. A failure here (unreachable ledger, no git context, an empty
-// summary) is a real error the caller needs to see and react to, so
-// every verb exits non-zero with a clear stderr message on failure
-// instead of degrading silently. Each verb still returns a structured
-// `RecordResult` (not just a thrown error) so both paths are testable
-// without spawning a process — same "degrade-with-reason" convention
-// `runSessionStartPreflight` uses.
-//
-// Composition mirrors session-start/index.ts: build the ledger write
-// via the manifest's declared `grounding-mcp` server (through the
-// shared `resolveManifestLedgerWriter` — see runtime/ledger-writer.ts),
-// resolve branch via `resolveGitContext` (the SAME function the
-// preflight-before-* gates use) and session via `resolveReadSessionId`,
-// with `--branch` / `--session` as explicit overrides. No new JSON-RPC
-// or subprocess code: every ledger write goes through the existing
-// `addLedgerFact` primitive.
-import { findGitEntry, resolveCommonDir, resolveGitContext, resolveOriginHeadBase, } from "../../runtime/git-context.js";
-import { resolveManifestLedgerWriter } from "../../runtime/ledger-writer.js";
-import { resolveReadSessionId, } from "../../runtime/session-id.js";
-import { EX_FAIL, EX_USAGE } from "../exit-codes.js";
-import { loadManifest } from "../loader.js";
-// U+2014 EM DASH, written as an escape so the literal never appears in
-// source. The emitted fact content is byte-identical to what `harness
-// record review` has always written; every gate reads the tags before it,
-// never this separator.
-const TAG_SUMMARY_SEPARATOR = "\u2014";
-const LEDGER_SOURCE_REVIEW = "harness-record-review";
-const LEDGER_SOURCE_REVIEW_SUBAGENT = "harness-record-review-subagent";
-const LEDGER_SOURCE_DOGFOOD = "harness-record-dogfood";
-function resolveSession(opts) {
-    const resolve = opts.resolveSession ?? resolveReadSessionId;
-    return resolve(opts.session, {});
-}
-/**
- * Write one ledger fact via the manifest's declared `grounding-mcp`
- * server (or the injected `opts.writeLedger` test seam). Mirrors the
- * manifest-wiring block `runSessionStartPreflight` uses, factored
- * through the shared `resolveManifestLedgerWriter` helper.
- */
-async function writeLedgerFact(opts, sessionId, source, content) {
-    let writeLedger = opts.writeLedger;
-    if (!writeLedger) {
-        let manifest;
-        try {
-            manifest = loadManifest(opts).manifest;
-        }
-        catch (err) {
-            return { ok: false, reason: `manifest load failed: ${err.message}` };
-        }
-        const resolved = resolveManifestLedgerWriter(manifest, {
-            ...(opts.ledgerTimeoutMs !== undefined ? { ledgerTimeoutMs: opts.ledgerTimeoutMs } : {}),
-        });
-        if (!resolved.ok) {
-            return { ok: false, reason: `${resolved.reason}; cannot record ${source} tag` };
-        }
-        writeLedger = resolved.write;
-    }
-    const result = await writeLedger({ sessionId, content, source });
-    if (!result.ok) {
-        return { ok: false, reason: `ledger write failed: ${result.reason ?? "unknown error"}` };
-    }
-    return { ok: true };
-}
-/**
- * Shared setup every verb runs first: a `note()` sink prefixed with the
- * verb's own name (so stderr lines are attributable when several verbs
- * run in a script), the resolved cwd, and the resolved session id.
- * Session id is resolved this early because `record dogfood`'s content
- * embeds it directly (`dogfood:${sessionId}`).
- */
-function initRecordVerb(opts, verbName) {
-    const stderr = opts.stderr ?? process.stderr;
-    const note = (msg) => {
-        stderr.write(`harness record ${verbName}: ${msg}\n`);
-    };
-    return { note, cwd: opts.cwd ?? process.cwd(), sessionId: resolveSession(opts) };
-}
-/**
- * The one shared "this flag was misused" failure shape: warn on stderr and
- * hand back the ready-to-`return` EX_USAGE `RecordResult`. Extracted when
- * `optionalTagValue` (task 2699b476) grew the second copy of this
- * five-line construction and the duplication fitness function
- * (`scripts/check-duplication.mjs`) flagged it.
- */
-function usageFailure(reason, sessionId, note) {
-    note(reason);
-    return {
-        ok: false,
-        result: { exitCode: EX_USAGE, wrote: false, content: "", sessionId, branch: "", reason },
-    };
-}
-/**
- * Trim `value` and refuse it if empty (a required flag / positional
- * argument left blank). Returns the ready-to-`return`ed EX_USAGE
- * `RecordResult` on failure so callers do not repeat that construction
- * — shared by every "--pr / --task / --verdict / summary must not be
- * empty" check across the three verbs.
- */
-function requireNonEmpty(value, flagLabel, sessionId, note) {
-    const trimmed = (value ?? "").trim();
-    if (trimmed.length === 0) {
-        return usageFailure(`${flagLabel} must not be empty`, sessionId, note);
-    }
-    return { ok: true, value: trimmed };
-}
-/**
- * Ledger tag namespaces the shipped gates read (`requires.ledger_tag`).
- * Used for FREE TEXT only (`--verdict`, summaries): the matcher is a
- * case-sensitive substring test (`src/policies/requires.ts`), so free text
- * carrying `<namespace>:` glued to a following value reads as a tag.
- * Ref-like and id-like values are checked structurally instead (no `:`, no
- * whitespace), which closes every namespace including custom ones.
- */
-const TAG_NAMESPACES = [
-    "review-subagent",
-    "review",
-    "dogfood",
-    "preflight",
-    "risk-approved",
-    "risk-override",
-];
-// `<namespace>:` immediately followed by a non-whitespace character; prose such
-// as "code-review: approved" is not a tag token because a gate's substituted
-// value is never empty and never starts with a space.
-const TAG_TOKEN_RE = new RegExp(`(?:${TAG_NAMESPACES.join("|")}):(?=\\S)`);
-// ASCII whitespace only: git ref names forbid exactly these, and Unicode
-// whitespace without a `:` cannot form a tag token under substring matching.
-const ASCII_WHITESPACE_RE = /[ \t\r\n\v\f]/;
-/**
- * A tag value: a ref-like or id-like token (`--branch`, `--base`, `--task`,
- * `--pr`, dogfood `--session`) that is embedded in a ledger tag. It must be
- * non-empty, free of ASCII whitespace (the fact content is space-separated
- * tag text, so whitespace would split into a second tag) and free of `:`
- * (a `:` is what turns a value into `<namespace>:<value>` tag text). Git ref
- * names forbid both characters, so no real branch is refused. The shape is
- * otherwise loose (task 2699b476): anything the gate's `${TASK_ID}`
- * substitution can compare against is acceptable (task 237cc609).
- */
-function checkTagValue(value, flagLabel, sessionId, note) {
-    const trimmed = value.trim();
-    if (trimmed.length === 0 || ASCII_WHITESPACE_RE.test(trimmed)) {
-        return usageFailure(`${flagLabel} must be a non-empty value with no whitespace ` +
-            `(it namespaces one ledger tag); got ${JSON.stringify(value)}`, sessionId, note);
-    }
-    if (trimmed.includes(":")) {
-        return usageFailure(`${flagLabel} must not contain ':' (it would plant ledger tag text such as ` +
-            `${TAG_NAMESPACES.map((n) => `${n}:`).join(", ")}); got ${JSON.stringify(value)}`, sessionId, note);
-    }
-    return { ok: true, value: trimmed };
-}
-/** An OPTIONAL tag value: absent stays absent, present goes through `checkTagValue`. */
-function optionalTagValue(value, flagLabel, sessionId, note) {
-    if (value === undefined)
-        return { ok: true, value: undefined };
-    return checkTagValue(value, flagLabel, sessionId, note);
-}
-/**
- * Free text (`--verdict`, summaries) stays free, but may not carry a
- * recognised `<namespace>:` immediately followed by a non-whitespace character:
- * the text lands verbatim in the fact content, where the substring matcher
- * would read that as a tag. Prose like "code-review: approved" is kept. Rejected
- * rather than rewritten, so the audit text is never altered silently.
- */
-function rejectTagTokens(value, flagLabel, sessionId, note) {
-    if (TAG_TOKEN_RE.test(value)) {
-        return usageFailure(`${flagLabel} must not contain ledger tag text such as ` +
-            `${TAG_NAMESPACES.map((n) => `${n}:`).join(", ")} glued to a value ` +
-            `(it would plant a second ledger tag); got ${JSON.stringify(value)}`, sessionId, note);
-    }
-    return { ok: true, value };
-}
-/**
- * Required value: keeps the plain "must not be empty" message, then runs
- * `check` (tag shape for `--pr` / `--task`, tag-token rejection for free text).
- */
-function requireChecked(value, flagLabel, sessionId, note, check) {
-    const nonEmpty = requireNonEmpty(value, flagLabel, sessionId, note);
-    return nonEmpty.ok ? check(nonEmpty.value, flagLabel, sessionId, note) : nonEmpty;
-}
-const requireTagValue = (value, flagLabel, sessionId, note) => requireChecked(value, flagLabel, sessionId, note, checkTagValue);
-const requireFreeText = (value, flagLabel, sessionId, note) => requireChecked(value, flagLabel, sessionId, note, rejectTagTokens);
-/**
- * Resolve the branch tag `review` and `review-subagent` both require:
- * explicit `--branch` wins, otherwise `resolveGitContext(cwd)` (the SAME
- * function the preflight-before-* gates use). Returns the ready-to-
- * `return`ed failure `RecordResult` on the shared "cannot resolve any
- * branch" degrade path so callers do not repeat that construction.
- */
-function resolveRequiredBranch(cwd, explicitBranch, sessionId, note) {
-    const gitContext = resolveGitContext(cwd);
-    const rawBranch = (explicitBranch ?? "").trim() || gitContext.branch;
-    if (rawBranch.length === 0) {
-        const reason = "no branch resolvable (cwd is not inside a git work tree, or HEAD is detached); pass --branch <name>";
-        note(reason);
-        return {
-            ok: false,
-            result: { exitCode: EX_FAIL, wrote: false, content: "", sessionId, branch: "", reason },
-        };
-    }
-    const checked = checkTagValue(rawBranch, "--branch", sessionId, note);
-    if (!checked.ok)
-        return checked;
-    return { ok: true, branch: checked.value };
-}
-/**
- * Shared tail every verb runs last: write the fact, translate a failure
- * into the degrade-with-reason `RecordResult` shape, or report success.
- */
-async function finishRecordWrite(opts, sessionId, branch, source, content, note) {
-    const written = await writeLedgerFact(opts, sessionId, source, content);
-    if (!written.ok) {
-        note(written.reason);
-        return { exitCode: EX_FAIL, wrote: false, content, sessionId, branch, reason: written.reason };
-    }
-    return { exitCode: 0, wrote: true, content, sessionId, branch };
-}
-// ---------------------------------------------------------------------------
-// Base-branch resolution for `record review` (--base flag > origin/HEAD
-// filesystem fallback > omit with a loud stderr warning). No `gh`
-// shell-out: everything is read straight off the `.git` directory,
-// reusing runtime/git-context.ts's exported `findGitEntry` walk instead
-// of re-implementing it. `resolveOriginHeadBase` / `resolveCommonDir`
-// themselves now live in runtime/git-context.ts too (task post-merge-gate,
-// T-001) so `policy-packs/builtin/post-merge-gate-runtime.ts` can share
-// them without a policy-pack module reaching into `cli/`; imported here
-// unchanged.
-// ---------------------------------------------------------------------------
-/**
- * Resolve the base branch for `record review`: explicit `--base` wins,
- * then the origin/HEAD filesystem fallback, then omission with a loud
- * stderr warning (never a silent gap — the operator needs to know the
- * `review:<base>` tag did not land).
- */
-function resolveBase(cwd, explicitBase, note) {
-    const flag = (explicitBase ?? "").trim();
-    if (flag.length > 0)
-        return flag;
-    const gitDir = findGitEntry(cwd)?.gitDir;
-    if (gitDir) {
-        const base = resolveOriginHeadBase(resolveCommonDir(gitDir));
-        if (base)
-            return base;
-    }
-    note("no --base given and origin/HEAD could not be resolved (checked " +
-        "refs/remotes/origin/HEAD and packed-refs); omitting the review:<base> tag. " +
-        "Pass --base <branch> to record it explicitly.");
-    return undefined;
-}
-export async function runRecordReview(opts) {
-    const { note, cwd, sessionId } = initRecordVerb(opts, "review");
-    const summaryResult = requireFreeText(opts.summary, "summary", sessionId, note);
-    if (!summaryResult.ok)
-        return summaryResult.result;
-    const summary = summaryResult.value;
-    const prResult = requireTagValue(opts.pr, "--pr", sessionId, note);
-    if (!prResult.ok)
-        return prResult.result;
-    const pr = prResult.value;
-    const branchResult = resolveRequiredBranch(cwd, opts.branch, sessionId, note);
-    if (!branchResult.ok)
-        return branchResult.result;
-    const branch = branchResult.branch;
-    const taskResult = optionalTagValue(opts.task, "--task", sessionId, note);
-    if (!taskResult.ok)
-        return taskResult.result;
-    const task = taskResult.value;
-    const baseResult = optionalTagValue(resolveBase(cwd, opts.base, note), "--base", sessionId, note);
-    if (!baseResult.ok)
-        return baseResult.result;
-    const base = baseResult.value;
-    // One fact, every tag family a merge/PR gate can key on: the PR number,
-    // the working branch, the base branch, and (task 2699b476) the
-    // agent-tasks task id the two task-scoped merge gates read. Recording a
-    // review once therefore satisfies whichever surface actually fires,
-    // instead of asking the operator to predict it (docs/CLI.md, "The
-    // merge-surface trap"). TAG_SUMMARY_SEPARATOR keeps the emitted content
-    // byte-identical to what this verb has always written.
-    const tags = [`review:${pr}`, `review:${branch}`];
-    if (base !== undefined)
-        tags.push(`review:${base}`);
-    if (task !== undefined)
-        tags.push(`review:${task}`);
-    const content = `${tags.join(" ")} ${TAG_SUMMARY_SEPARATOR} ${summary}`;
-    return finishRecordWrite(opts, sessionId, branch, LEDGER_SOURCE_REVIEW, content, note);
-}
-export async function runRecordReviewSubagent(opts) {
-    const { note, cwd, sessionId } = initRecordVerb(opts, "review-subagent");
-    // Exactly one of --task / --adhoc: a task-based flow must never silently
-    // skip the review-subagent:<task> tag (the MCP-surface gate keys on it),
-    // and an ad-hoc flow must never invent a task id.
-    const adhoc = opts.adhoc === true;
-    if (adhoc && opts.task !== undefined) {
-        return usageFailure("--task and --adhoc are mutually exclusive; pass exactly one", sessionId, note).result;
-    }
-    if (!adhoc && opts.task === undefined) {
-        return usageFailure("one of --task <id> or --adhoc is required (--adhoc records a review for work without an agent-tasks task)", sessionId, note).result;
-    }
-    let taskTag = "";
-    if (opts.task !== undefined) {
-        const taskResult = requireTagValue(opts.task, "--task", sessionId, note);
-        if (!taskResult.ok)
-            return taskResult.result;
-        taskTag = `review-subagent:${taskResult.value} `;
-    }
-    const verdictResult = requireFreeText(opts.verdict, "--verdict", sessionId, note);
-    if (!verdictResult.ok)
-        return verdictResult.result;
-    const verdict = verdictResult.value;
-    const branchResult = resolveRequiredBranch(cwd, opts.branch, sessionId, note);
-    if (!branchResult.ok)
-        return branchResult.result;
-    const branch = branchResult.branch;
-    const summaryText = typeof opts.summary === "string" ? opts.summary.trim() : "";
-    const summaryChecked = rejectTagTokens(summaryText, "summary", sessionId, note);
-    if (!summaryChecked.ok)
-        return summaryChecked.result;
-    const summary = summaryChecked.value;
-    const content = `${taskTag}review-subagent:${branch} verdict:${verdict}${summary.length > 0 ? ` — ${summary}` : ""}`;
-    return finishRecordWrite(opts, sessionId, branch, LEDGER_SOURCE_REVIEW_SUBAGENT, content, note);
-}
-export async function runRecordDogfood(opts) {
-    const { note, sessionId } = initRecordVerb(opts, "dogfood");
-    const summaryResult = requireFreeText(opts.summary, "summary", sessionId, note);
-    if (!summaryResult.ok)
-        return summaryResult.result;
-    const summary = summaryResult.value;
-    // The ledger session and the `dogfood:<session>` content must name the same
-    // id, so a padded value is refused instead of trimmed for the content only.
-    if (sessionId !== sessionId.trim()) {
-        return usageFailure(`--session must not have leading or trailing whitespace; got ${JSON.stringify(sessionId)}`, sessionId, note).result;
-    }
-    const sessionResult = checkTagValue(sessionId, "--session", sessionId, note);
-    if (!sessionResult.ok)
-        return sessionResult.result;
-    const content = `dogfood:${sessionResult.value} ${TAG_SUMMARY_SEPARATOR} ${summary}`;
-    return finishRecordWrite(opts, sessionId, "", LEDGER_SOURCE_DOGFOOD, content, note);
-}
-//# sourceMappingURL=index.js.map