@lannguyensi/harness 0.64.0 → 1.0.0

package/dist/policies/ledger-client.js

@@ -1,500 +0,0 @@
-// Phase 4 #3 — grounding-mcp client adapter.
-//
-// Spawns the configured grounding-mcp server, performs the standard
-// init / notifications/initialized / tools/call handshake, and returns
-// ledger entries normalised to harness's LedgerEntry shape (see
-// src/policies/requires.ts). Any failure path resolves to
-// `{ kind: "degraded", reason }` — this TRANSPORT layer never decides
-// what degradation means. The policy evaluator routes a degraded result
-// through `degradedOutcome` (src/runtime/intercept.ts, task f1aea826):
-// `warn` policies degrade to the non-blocking `warn-degraded`,
-// `block`/`require_approval` policies fail CLOSED as `deny-degraded`.
-// (The original Phase 4 acceptance — unreachable ledger defaults to
-// warn-equivalent for every tier — is superseded; see the note in
-// docs/ROADMAP.md and docs/okf/gate-fail-posture-matrix.md.)
-import { spawn } from "node:child_process";
-import { expandHome, expandHomeInEnv } from "../io/expand-home.js";
-import { POLICY_DECISION_TYPE } from "../io/ledger-record.js";
-import { VERSION } from "../version.js";
-const DEFAULT_TIMEOUT_MS = 5_000;
-function normaliseEntry(raw, bucketType) {
-    if (raw.id === undefined || raw.id === null)
-        return null;
-    if (typeof raw.content !== "string")
-        return null;
-    const createdAt = typeof raw.createdAt === "string"
-        ? raw.createdAt
-        : typeof raw.created_at === "string"
-            ? raw.created_at
-            : undefined;
-    if (createdAt === undefined)
-        return null;
-    // Prefer the bucket-derived type (Phase 5 #4 — bucket name is the
-    // canonical type signal); fall back to the row's own `type` field
-    // if the wire payload happens to carry it.
-    const type = bucketType ?? (typeof raw.type === "string" ? raw.type : undefined);
-    return {
-        id: String(raw.id),
-        content: raw.content,
-        source: typeof raw.source === "string" ? raw.source : undefined,
-        createdAt,
-        ...(type !== undefined && { type }),
-    };
-}
-/**
- * Flatten the bucketed arrays returned by `ledger_summary` into one list.
- * Tolerates both snake_case (`created_at`) and camelCase (`createdAt`) since
- * the MCP wire format is JSON.stringify of whatever the underlying lib emits.
- *
- * Phase 5 #4 — surfaces the wire bucket as `LedgerEntry.type`
- * (`facts` → `fact`, `policyDecisions` → `policy_decision`, etc.) so
- * downstream filters can distinguish evidence from audit records.
- * `flattenSummary` returns ALL buckets; consumers filter by type.
- *
- * Returns `null` when the payload doesn't carry an `entries` object — the
- * caller treats that as a contract-drift degraded path.
- */
-const BUCKET_TO_TYPE = {
-    facts: "fact",
-    hypotheses: "hypothesis",
-    rejected: "rejected",
-    unknowns: "unknown",
-    policyDecisions: POLICY_DECISION_TYPE,
-};
-function flattenSummary(payload) {
-    if (!payload || typeof payload !== "object")
-        return null;
-    const root = payload;
-    const entries = root.entries;
-    if (!entries || typeof entries !== "object" || Array.isArray(entries)) {
-        return null;
-    }
-    const buckets = entries;
-    const out = [];
-    for (const [bucketKey, type] of Object.entries(BUCKET_TO_TYPE)) {
-        const arr = buckets[bucketKey];
-        if (!Array.isArray(arr))
-            continue;
-        for (const raw of arr) {
-            const norm = normaliseEntry(raw, type);
-            if (norm)
-                out.push(norm);
-        }
-    }
-    return out;
-}
-function startSubprocess(opts) {
-    const list = opts.mcpCommand;
-    if (!list || list.length === 0) {
-        return { ok: false, reason: "grounding-mcp command is empty" };
-    }
-    const exe = expandHome(list[0]);
-    const args = list.slice(1).map((p) => expandHome(p));
-    const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-    let child;
-    try {
-        child = spawn(exe, args, {
-            cwd: opts.cwd,
-            // Defense-in-depth parity with `recordPolicyDecision`
-            // (agent-tasks/973596d7): expand leading `~/` in env values so a
-            // manifest that bypassed validate cannot scatter cwd-relative
-            // `./~/…` paths through the query path either.
-            env: { ...process.env, ...(expandHomeInEnv(opts.mcpEnv) ?? {}) },
-            stdio: ["pipe", "pipe", "pipe"],
-        });
-    }
-    catch (err) {
-        return {
-            ok: false,
-            reason: `grounding-mcp spawn failed: ${err.message}`,
-        };
-    }
-    const stderrBuf = { value: "" };
-    let stdoutBuf = "";
-    let processExited = false;
-    let processClosed = false;
-    let exitCode = null;
-    let exitSignal = null;
-    const pending = new Map();
-    const timers = new Set();
-    child.stderr.on("data", (chunk) => {
-        stderrBuf.value += chunk.toString("utf8");
-    });
-    child.stdin.on("error", () => {
-        /* EPIPE on shutdown; surfaced via the close listener. */
-    });
-    let spawnError = null;
-    child.on("error", (err) => {
-        // Spawn failure (ENOENT etc.). Setting `processClosed = true` is safe
-        // because the child never executed, so there is no stdio buffer to drain;
-        // the exit-promise short-circuit reaches `exitDiagnostic` and reports the
-        // spawn error directly.
-        spawnError = err;
-        processExited = true;
-        processClosed = true;
-    });
-    child.on("exit", (code, signal) => {
-        processExited = true;
-        exitCode = code;
-        exitSignal = signal;
-    });
-    child.on("close", () => {
-        // Node fires `close` only after every stdio pipe has drained. Racing
-        // on `exit` would surface `(no stderr)` whenever the kernel buffer
-        // hadn't been flushed yet, which is the symptom the v0.8.1 review caught.
-        processClosed = true;
-    });
-    child.stdout.on("data", (chunk) => {
-        stdoutBuf += chunk.toString("utf8");
-        let nl = stdoutBuf.indexOf("\n");
-        while (nl !== -1) {
-            const line = stdoutBuf.slice(0, nl).trim();
-            stdoutBuf = stdoutBuf.slice(nl + 1);
-            if (line) {
-                try {
-                    const msg = JSON.parse(line);
-                    if (typeof msg.id === "number") {
-                        const handler = pending.get(msg.id);
-                        if (handler) {
-                            pending.delete(msg.id);
-                            handler.resolve(msg);
-                        }
-                    }
-                }
-                catch {
-                    /* ignore non-JSON lines */
-                }
-            }
-            nl = stdoutBuf.indexOf("\n");
-        }
-    });
-    const exitPromise = new Promise((resolve) => {
-        if (processClosed) {
-            resolve("exit");
-            return;
-        }
-        const done = () => resolve("exit");
-        child.once("close", done);
-        child.once("error", done);
-    });
-    function timeoutPromise(ms) {
-        let timer;
-        const promise = new Promise((resolve) => {
-            timer = setTimeout(() => {
-                timers.delete(timer);
-                resolve("timeout");
-            }, ms);
-            timer.unref();
-            timers.add(timer);
-        });
-        return { promise, timer };
-    }
-    function send(id, method, params) {
-        return new Promise((resolve) => {
-            pending.set(id, { id, resolve });
-            try {
-                if (!processExited && !child.stdin.destroyed && child.stdin.writable) {
-                    child.stdin.write(`${JSON.stringify({ jsonrpc: "2.0", id, method, params })}\n`);
-                }
-            }
-            catch {
-                /* server closed stdin; the exit-promise race resolves the call */
-            }
-        });
-    }
-    async function call(id, method, params, timeoutMsOverride) {
-        const timeout = timeoutPromise(timeoutMsOverride ?? timeoutMs);
-        try {
-            return await Promise.race([
-                send(id, method, params),
-                exitPromise,
-                timeout.promise,
-            ]);
-        }
-        finally {
-            // A pooled session issues many calls on one subprocess; without
-            // settling-time cleanup the timer set and pending map grow O(calls)
-            // until dispose. Keep both O(in-flight) instead.
-            clearTimeout(timeout.timer);
-            timers.delete(timeout.timer);
-            pending.delete(id);
-        }
-    }
-    function notify(method, params = {}) {
-        try {
-            if (!processExited && !child.stdin.destroyed && child.stdin.writable) {
-                child.stdin.write(`${JSON.stringify({ jsonrpc: "2.0", method, params })}\n`);
-            }
-        }
-        catch {
-            /* best effort */
-        }
-    }
-    function cleanup() {
-        for (const t of timers)
-            clearTimeout(t);
-        timers.clear();
-        if (!processExited)
-            child.kill("SIGTERM");
-    }
-    return {
-        ok: true,
-        ctl: {
-            child,
-            stderrBuf,
-            pending,
-            call,
-            notify,
-            exited: () => processExited,
-            exitCode: () => exitCode,
-            exitSignal: () => exitSignal,
-            spawnError: () => spawnError,
-            cleanup,
-        },
-    };
-}
-/**
- * Phase 5 #5 — read the inputSchema for `ledger_summary` from a
- * `tools/list` response and project the set of advertised property
- * names (which are the args harness can send without tripping a zod
- * rejection on an older server).
- *
- * Defensive: any unexpected shape (timeout, exit, non-array, missing
- * inputSchema) returns the conservative `{ "sessionId" }` set so the
- * caller falls back to client-side filtering instead of speculatively
- * including args that an old server would reject.
- */
-async function detectLedgerSummaryArgs(ctl, requestId) {
-    const fallback = new Set(["sessionId"]);
-    const result = await ctl.call(requestId, "tools/list", {});
-    if (result === "exit" || result === "timeout")
-        return fallback;
-    if (result.error)
-        return fallback;
-    const r = result.result;
-    if (!r || !Array.isArray(r.tools))
-        return fallback;
-    for (const tool of r.tools) {
-        const t = tool;
-        if (t.name !== "ledger_summary")
-            continue;
-        const schema = t.inputSchema;
-        if (!schema || !schema.properties || typeof schema.properties !== "object") {
-            return fallback;
-        }
-        return new Set(Object.keys(schema.properties));
-    }
-    return fallback;
-}
-function exitDiagnostic(ctl) {
-    const err = ctl.spawnError();
-    if (err)
-        return `spawn failed: ${err.message}`;
-    const tail = ctl.stderrBuf.value.trim().split("\n").pop()?.trim() || "(no stderr)";
-    const code = ctl.exitCode();
-    const sig = ctl.exitSignal();
-    const status = code !== null ? `exit ${code}` : sig ? `signal ${sig}` : "exited";
-    return `${status}: ${tail}`;
-}
-function extractToolPayload(result) {
-    if (!result || typeof result !== "object")
-        return null;
-    const r = result;
-    if (r.structuredContent && typeof r.structuredContent === "object") {
-        return r.structuredContent;
-    }
-    if (Array.isArray(r.content)) {
-        for (const block of r.content) {
-            const b = block;
-            if (b.type === "text" && typeof b.text === "string") {
-                try {
-                    return JSON.parse(b.text);
-                }
-                catch {
-                    /* not JSON; fall through */
-                }
-            }
-        }
-    }
-    return null;
-}
-export function openLedgerSession(opts) {
-    const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-    let ctl = null;
-    let startFailure = null;
-    // Resolves to null on success, or the degraded reason. Cached so the
-    // handshake happens exactly once per session; a failed init stays failed
-    // (retrying per call would reintroduce the very fan-out this removes).
-    let initPromise = null;
-    // Session-level timeout latch: once ANY call times out, every subsequent
-    // call short-circuits to degraded without a new round-trip. Without this
-    // a slow-but-responsive server could cost timeoutMs PER call — with K
-    // policies each awaiting a record on the enforcement critical path,
-    // ~(K+1)×timeoutMs can still blow the 30s hook budget the pooling exists
-    // to protect. The latch bounds total session timeout cost at ~1×timeoutMs.
-    // Ledger calls are best-effort by contract (degraded never blocks), so
-    // giving up on a server that already blew one deadline is the intended
-    // fail-open direction, not a new failure mode.
-    let timedOut = false;
-    // The budget actually in effect when the latch tripped (task
-    // 2026-07-18 subprocess-test-deflake, T-003): the session default
-    // unless a per-call `timeoutMs` override was the one that timed out.
-    // Tracked separately so `latchedReason()` reports the real number
-    // instead of always the session default.
-    let timedOutAtMs = timeoutMs;
-    let nextId = 1;
-    function ensureStarted() {
-        if (ctl !== null || startFailure !== null)
-            return ctl;
-        const start = startSubprocess(opts);
-        if (!start.ok) {
-            startFailure = start.reason;
-            return null;
-        }
-        ctl = start.ctl;
-        return ctl;
-    }
-    function ensureInitialized() {
-        if (initPromise !== null)
-            return initPromise;
-        initPromise = (async () => {
-            const c = ensureStarted();
-            if (c === null)
-                return startFailure;
-            const initResult = await c.call(nextId++, "initialize", {
-                protocolVersion: "2024-11-05",
-                capabilities: {},
-                clientInfo: { name: "harness-policies", version: VERSION },
-            });
-            if (initResult === "exit")
-                return `grounding-mcp ${exitDiagnostic(c)}`;
-            if (initResult === "timeout") {
-                timedOut = true;
-                timedOutAtMs = timeoutMs;
-                return `grounding-mcp timeout after ${timeoutMs}ms`;
-            }
-            if (initResult.error) {
-                return `grounding-mcp initialize error: ${initResult.error.message ?? "unknown"}`;
-            }
-            c.notify("notifications/initialized");
-            return null;
-        })();
-        return initPromise;
-    }
-    const latchedReason = () => `grounding-mcp timed out earlier in this session (${timedOutAtMs}ms); skipping further ledger calls`;
-    return {
-        async querySummary(query) {
-            if (timedOut)
-                return { kind: "degraded", reason: latchedReason() };
-            const initError = await ensureInitialized();
-            if (initError !== null)
-                return { kind: "degraded", reason: initError };
-            const c = ctl;
-            // Phase 5 #5 — capability detection only when we actually want to
-            // push a filter server-side. Older grounding-mcp builds accept only
-            // `sessionId` on `ledger_summary`; harness spawns a binary path
-            // chosen by the operator, so we cannot assume a version. Skipping
-            // tools/list when no filter is requested keeps the unfiltered hot
-            // path one round-trip fewer.
-            const wantsFilter = query.sinceIso !== undefined || query.contentPrefix !== undefined;
-            const supportedArgs = wantsFilter
-                ? await detectLedgerSummaryArgs(c, nextId++)
-                : new Set(["sessionId"]);
-            const callArgs = { sessionId: query.sessionId };
-            if (query.sinceIso !== undefined && supportedArgs.has("sinceIso")) {
-                callArgs.sinceIso = query.sinceIso;
-            }
-            if (query.contentPrefix !== undefined &&
-                supportedArgs.has("contentPrefix")) {
-                callArgs.contentPrefix = query.contentPrefix;
-            }
-            const effectiveTimeoutMs = query.timeoutMs ?? timeoutMs;
-            const callResult = await c.call(nextId++, "tools/call", { name: "ledger_summary", arguments: callArgs }, effectiveTimeoutMs);
-            if (callResult === "exit") {
-                return {
-                    kind: "degraded",
-                    reason: `grounding-mcp ${exitDiagnostic(c)}`,
-                };
-            }
-            if (callResult === "timeout") {
-                timedOut = true;
-                timedOutAtMs = effectiveTimeoutMs;
-                return {
-                    kind: "degraded",
-                    reason: `grounding-mcp timeout after ${effectiveTimeoutMs}ms`,
-                };
-            }
-            if (callResult.error) {
-                return {
-                    kind: "degraded",
-                    reason: `ledger_summary error: ${callResult.error.message ?? "unknown"}`,
-                };
-            }
-            const payload = extractToolPayload(callResult.result);
-            if (payload === null) {
-                return {
-                    kind: "degraded",
-                    reason: "ledger_summary returned no parseable payload",
-                };
-            }
-            const entries = flattenSummary(payload);
-            if (entries === null) {
-                return {
-                    kind: "degraded",
-                    reason: "ledger_summary payload missing `entries` shape",
-                };
-            }
-            return { kind: "ok", entries };
-        },
-        async callTool(name, args, options) {
-            if (timedOut)
-                return { status: "degraded", reason: latchedReason() };
-            const initError = await ensureInitialized();
-            if (initError !== null)
-                return { status: "degraded", reason: initError };
-            const c = ctl;
-            const effectiveTimeoutMs = options?.timeoutMs ?? timeoutMs;
-            const result = await c.call(nextId++, "tools/call", { name, arguments: args }, effectiveTimeoutMs);
-            if (result === "exit") {
-                return { status: "degraded", reason: `grounding-mcp ${exitDiagnostic(c)}` };
-            }
-            if (result === "timeout") {
-                timedOut = true;
-                timedOutAtMs = effectiveTimeoutMs;
-                return {
-                    status: "degraded",
-                    reason: `grounding-mcp timeout after ${effectiveTimeoutMs}ms`,
-                };
-            }
-            if (result.error) {
-                return {
-                    status: "error",
-                    errorMessage: result.error.message ?? "unknown",
-                };
-            }
-            return { status: "ok", payload: extractToolPayload(result.result) };
-        },
-        dispose() {
-            ctl?.cleanup();
-        },
-    };
-}
-export async function queryLedgerByTag(opts) {
-    // One-shot convenience wrapper: open a session, run the single summary
-    // query, tear the subprocess down. Callers with more than one ledger
-    // round-trip per event (the runtime intercept) hold a session instead.
-    const session = openLedgerSession(opts);
-    try {
-        return await session.querySummary({
-            sessionId: opts.sessionId,
-            ...(opts.sinceIso !== undefined && { sinceIso: opts.sinceIso }),
-            ...(opts.contentPrefix !== undefined && {
-                contentPrefix: opts.contentPrefix,
-            }),
-        });
-    }
-    finally {
-        session.dispose();
-    }
-}
-//# sourceMappingURL=ledger-client.js.map

package/dist/policies/ledger-client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ledger-client.js","sourceRoot":"","sources":["../../src/policies/ledger-client.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,EAAE;AACF,oEAAoE;AACpE,uEAAuE;AACvE,gEAAgE;AAChE,0DAA0D;AAC1D,sEAAsE;AACtE,wEAAwE;AACxE,uEAAuE;AACvE,+DAA+D;AAC/D,sEAAsE;AACtE,oEAAoE;AACpE,kEAAkE;AAClE,6DAA6D;AAE7D,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAEhF,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AA0DjC,SAAS,cAAc,CACrB,GAAmB,EACnB,UAAmB;IAEnB,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,SAAS,GACb,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;QAC/B,CAAC,CAAC,GAAG,CAAC,SAAS;QACf,CAAC,CAAC,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;YAClC,CAAC,CAAC,GAAG,CAAC,UAAU;YAChB,CAAC,CAAC,SAAS,CAAC;IAClB,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACzC,kEAAkE;IAClE,kEAAkE;IAClE,2CAA2C;IAC3C,MAAM,IAAI,GACR,UAAU,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtE,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EAAE,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QAC/D,SAAS;QACT,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;KACpC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,cAAc,GAA2B;IAC7C,KAAK,EAAE,MAAM;IACb,UAAU,EAAE,YAAY;IACxB,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,SAAS;IACnB,eAAe,EAAE,oBAAoB;CACtC,CAAC;AAEF,SAAS,cAAc,CAAC,OAAgB;IACtC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,IAAI,GAAG,OAAgC,CAAC;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,OAAkC,CAAC;IACnD,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/D,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,cAAc,CAAC,GAAqB,EAAE,IAAI,CAAC,CAAC;YACzD,IAAI,IAAI;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AA0BD,SAAS,eAAe,CACtB,IAAyB;IAEzB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC;IAC7B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAEvD,IAAI,KAAqC,CAAC;IAC1C,IAAI,CAAC;QACH,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;YACvB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,sDAAsD;YACtD,iEAAiE;YACjE,8DAA8D;YAC9D,+CAA+C;YAC/C,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE;YAChE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,+BAAgC,GAAa,CAAC,OAAO,EAAE;SAChE,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAChC,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,UAAU,GAA0B,IAAI,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEzC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACxC,SAAS,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAC3B,yDAAyD;IAC3D,CAAC,CAAC,CAAC;IACH,IAAI,UAAU,GAAiB,IAAI,CAAC;IACpC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;QAC/B,sEAAsE;QACtE,0EAA0E;QAC1E,0EAA0E;QAC1E,wBAAwB;QACxB,UAAU,GAAG,GAAG,CAAC;QACjB,aAAa,GAAG,IAAI,CAAC;QACrB,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAChC,aAAa,GAAG,IAAI,CAAC;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,UAAU,GAAG,MAAM,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACrB,qEAAqE;QACrE,mEAAmE;QACnE,0EAA0E;QAC1E,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACxC,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3C,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACpC,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;oBAChD,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;wBAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBACpC,IAAI,OAAO,EAAE,CAAC;4BACZ,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;4BACvB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;wBACvB,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,2BAA2B;gBAC7B,CAAC;YACH,CAAC;YACD,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QAClD,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,CAAC,MAAM,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,GAAS,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,SAAS,cAAc,CACrB,EAAU;QAEV,IAAI,KAAsB,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,EAAE;YACjD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBACtB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACrB,OAAO,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC,EAAE,EAAE,CAAC,CAAC;YACP,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,SAAS,IAAI,CACX,EAAU,EACV,MAAc,EACd,MAA+B;QAE/B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACjC,IAAI,CAAC;gBACH,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACrE,KAAK,CAAC,KAAK,CAAC,KAAK,CACf,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,IAAI,CAC9D,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;YACpE,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,IAAI,CACjB,EAAU,EACV,MAAc,EACd,MAA+B,EAC/B,iBAA0B;QAE1B,MAAM,OAAO,GAAG,cAAc,CAAC,iBAAiB,IAAI,SAAS,CAAC,CAAC;QAC/D,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;gBACxB,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC;gBACxB,WAAW;gBACX,OAAO,CAAC,OAAO;aAChB,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,gEAAgE;YAChE,oEAAoE;YACpE,iDAAiD;YACjD,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,SAAS,MAAM,CAAC,MAAc,EAAE,SAAkC,EAAE;QAClE,IAAI,CAAC;YACH,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACrE,KAAK,CAAC,KAAK,CAAC,KAAK,CACf,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,IAAI,CAC1D,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IAED,SAAS,OAAO;QACd,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,YAAY,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,aAAa;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,GAAG,EAAE;YACH,KAAK;YACL,SAAS;YACT,OAAO;YACP,IAAI;YACJ,MAAM;YACN,MAAM,EAAE,GAAG,EAAE,CAAC,aAAa;YAC3B,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ;YACxB,UAAU,EAAE,GAAG,EAAE,CAAC,UAAU;YAC5B,UAAU,EAAE,GAAG,EAAE,CAAC,UAAU;YAC5B,OAAO;SACR;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,uBAAuB,CACpC,GAAe,EACf,SAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;IAC3D,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC/D,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAyC,CAAC;IAC3D,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnD,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,IAAiD,CAAC;QAC5D,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB;YAAE,SAAS;QAC1C,MAAM,MAAM,GAAG,CAAC,CAAC,WAAmD,CAAC;QACrE,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC3E,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAqC,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,GAAe;IACrC,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC;IAC7B,IAAI,GAAG;QAAE,OAAO,iBAAiB,GAAG,CAAC,OAAO,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,aAAa,CAAC;IACnF,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjF,OAAO,GAAG,MAAM,KAAK,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAe;IACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,CAAC,GAAG,MAA4D,CAAC;IACvE,IAAI,CAAC,CAAC,iBAAiB,IAAI,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,EAAE,CAAC;QACnE,OAAO,CAAC,CAAC,iBAAiB,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,CAAC,GAAG,KAA2C,CAAC;YACtD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpD,IAAI,CAAC;oBACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,4BAA4B;gBAC9B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AA0ED,MAAM,UAAU,iBAAiB,CAAC,IAAyB;IACzD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACvD,IAAI,GAAG,GAAsB,IAAI,CAAC;IAClC,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,qEAAqE;IACrE,yEAAyE;IACzE,uEAAuE;IACvE,IAAI,WAAW,GAAkC,IAAI,CAAC;IACtD,yEAAyE;IACzE,yEAAyE;IACzE,sEAAsE;IACtE,oEAAoE;IACpE,yEAAyE;IACzE,2EAA2E;IAC3E,uEAAuE;IACvE,uEAAuE;IACvE,+CAA+C;IAC/C,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,6DAA6D;IAC7D,kEAAkE;IAClE,qEAAqE;IACrE,kEAAkE;IAClE,yCAAyC;IACzC,IAAI,YAAY,GAAG,SAAS,CAAC;IAC7B,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,SAAS,aAAa;QACpB,IAAI,GAAG,KAAK,IAAI,IAAI,YAAY,KAAK,IAAI;YAAE,OAAO,GAAG,CAAC;QACtD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QAChB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,SAAS,iBAAiB;QACxB,IAAI,WAAW,KAAK,IAAI;YAAE,OAAO,WAAW,CAAC;QAC7C,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE;YACxB,MAAM,CAAC,GAAG,aAAa,EAAE,CAAC;YAC1B,IAAI,CAAC,KAAK,IAAI;gBAAE,OAAO,YAAY,CAAC;YACpC,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE;gBACtD,eAAe,EAAE,YAAY;gBAC7B,YAAY,EAAE,EAAE;gBAChB,UAAU,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,EAAE;aAC3D,CAAC,CAAC;YACH,IAAI,UAAU,KAAK,MAAM;gBAAE,OAAO,iBAAiB,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,QAAQ,GAAG,IAAI,CAAC;gBAChB,YAAY,GAAG,SAAS,CAAC;gBACzB,OAAO,+BAA+B,SAAS,IAAI,CAAC;YACtD,CAAC;YACD,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;gBACrB,OAAO,mCAAmC,UAAU,CAAC,KAAK,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC;YACpF,CAAC;YACD,CAAC,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,aAAa,GAAG,GAAW,EAAE,CACjC,oDAAoD,YAAY,oCAAoC,CAAC;IAEvG,OAAO;QACL,KAAK,CAAC,YAAY,CAAC,KAAyB;YAC1C,IAAI,QAAQ;gBAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CAAC;YACnE,MAAM,SAAS,GAAG,MAAM,iBAAiB,EAAE,CAAC;YAC5C,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YACvE,MAAM,CAAC,GAAG,GAAI,CAAC;YAEf,kEAAkE;YAClE,oEAAoE;YACpE,gEAAgE;YAChE,kEAAkE;YAClE,kEAAkE;YAClE,6BAA6B;YAC7B,MAAM,WAAW,GACf,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC;YACpE,MAAM,aAAa,GAAG,WAAW;gBAC/B,CAAC,CAAC,MAAM,uBAAuB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;gBAC5C,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;YAC3B,MAAM,QAAQ,GAA4B,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;YACzE,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAClE,QAAQ,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YACrC,CAAC;YACD,IACE,KAAK,CAAC,aAAa,KAAK,SAAS;gBACjC,aAAa,CAAC,GAAG,CAAC,eAAe,CAAC,EAClC,CAAC;gBACD,QAAQ,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;YAC/C,CAAC;YAED,MAAM,kBAAkB,GAAG,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC;YACxD,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,IAAI,CAC7B,MAAM,EAAE,EACR,YAAY,EACZ,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,QAAQ,EAAE,EAC/C,kBAAkB,CACnB,CAAC;YACF,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;gBAC1B,OAAO;oBACL,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,iBAAiB,cAAc,CAAC,CAAC,CAAC,EAAE;iBAC7C,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,QAAQ,GAAG,IAAI,CAAC;gBAChB,YAAY,GAAG,kBAAkB,CAAC;gBAClC,OAAO;oBACL,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,+BAA+B,kBAAkB,IAAI;iBAC9D,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;gBACrB,OAAO;oBACL,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,yBAAyB,UAAU,CAAC,KAAK,CAAC,OAAO,IAAI,SAAS,EAAE;iBACzE,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACtD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,OAAO;oBACL,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,8CAA8C;iBACvD,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,OAAO;oBACL,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,gDAAgD;iBACzD,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACjC,CAAC;QAED,KAAK,CAAC,QAAQ,CACZ,IAAY,EACZ,IAA6B,EAC7B,OAAgC;YAEhC,IAAI,QAAQ;gBAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CAAC;YACrE,MAAM,SAAS,GAAG,MAAM,iBAAiB,EAAE,CAAC;YAC5C,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YACzE,MAAM,CAAC,GAAG,GAAI,CAAC;YACf,MAAM,kBAAkB,GAAG,OAAO,EAAE,SAAS,IAAI,SAAS,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,CACzB,MAAM,EAAE,EACR,YAAY,EACZ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EACzB,kBAAkB,CACnB,CAAC;YACF,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC9E,CAAC;YACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,QAAQ,GAAG,IAAI,CAAC;gBAChB,YAAY,GAAG,kBAAkB,CAAC;gBAClC,OAAO;oBACL,MAAM,EAAE,UAAU;oBAClB,MAAM,EAAE,+BAA+B,kBAAkB,IAAI;iBAC9D,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,OAAO;oBACL,MAAM,EAAE,OAAO;oBACf,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,SAAS;iBAChD,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,CAAC;QAED,OAAO;YACL,GAAG,EAAE,OAAO,EAAE,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAwB;IAExB,uEAAuE;IACvE,qEAAqE;IACrE,uEAAuE;IACvE,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,YAAY,CAAC;YAChC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/D,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI;gBACtC,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,OAAO,EAAE,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/policies/producers.d.ts

@@ -1,12 +0,0 @@
-import type { Producer } from "../schema/index.js";
-/**
- * Render the policy's producers list into a multi-line block suitable
- * for appending to a deny envelope's `reason`. Returns the empty string
- * when the list is undefined or empty, so callers can concat unconditionally.
- *
- * Format:
- *   To produce this tag:
- *     1. [kind] <one-line summary> — <description>
- *     2. ...
- */
-export declare function renderProducers(producers: Producer[] | undefined, values: Record<string, string>): string;

package/dist/policies/producers.js

@@ -1,61 +0,0 @@
-// Phase 7 — render the policy `producers:` list into the deny-envelope
-// reason. The schema (src/schema/policies.ts ProducerSchema) allows three
-// kinds: bash / mcp / ask. Each is one concrete way for the agent to
-// produce the ledger evidence that would unblock the gate.
-//
-// The renderer keeps the engine itself neutral on producer choice
-// (policies opt in by declaring `producers:`; absent producers means no
-// hint appended, same as today). When present, every entry's `${VAR}`
-// templates are substituted against the same extract.values map the
-// ledger_tag was resolved with, so the rendered text reflects the
-// exact context the agent just hit.
-//
-// At-least-one-mcp is enforced at schema-validate time for the policy
-// engine, so by the time the engine renders, the list is guaranteed to
-// carry an ungated MCP recovery path (relevant when the agent is in a
-// Bash lockout). Other consumers may enforce different constraints; the
-// understanding-gate (src/cli/pack/hook-pre-tool-use.ts) requires
-// at-least-one `ask` instead, because post-v0.14.0 its gate signal is a
-// filesystem marker the mcp ledger_add path cannot write.
-import { substituteTemplate } from "../io/extract.js";
-function substituteAll(template, values) {
-    // Best-effort substitution: unresolved ${VARS} are left literal so the
-    // agent can still read what was expected (vs. silently dropping). The
-    // schema validator already guarantees ledger_tag's vars are declared;
-    // producer fields are free-form text and may reference any of the
-    // resolved values, so a stray ${UNKNOWN} stays visible.
-    return substituteTemplate(template, values).result;
-}
-function renderOne(p, values) {
-    switch (p.kind) {
-        case "bash":
-            return `[bash] \`${substituteAll(p.command, values)}\` — ${substituteAll(p.description, values)}`;
-        case "mcp":
-            return `[mcp]  ${p.verb} example=${substituteAll(p.example, values)} — ${substituteAll(p.description, values)}`;
-        case "ask":
-            return `[ask]  \`${substituteAll(p.command, values)}\` — ${substituteAll(p.description, values)}`;
-        default: {
-            // exhaustive guard: TS narrows ProducerSchema's discriminated union;
-            // a future kind that forgets to update this switch trips the compiler.
-            const _exhaustive = p;
-            return _exhaustive;
-        }
-    }
-}
-/**
- * Render the policy's producers list into a multi-line block suitable
- * for appending to a deny envelope's `reason`. Returns the empty string
- * when the list is undefined or empty, so callers can concat unconditionally.
- *
- * Format:
- *   To produce this tag:
- *     1. [kind] <one-line summary> — <description>
- *     2. ...
- */
-export function renderProducers(producers, values) {
-    if (!producers || producers.length === 0)
-        return "";
-    const lines = producers.map((p, i) => `  ${i + 1}. ${renderOne(p, values)}`);
-    return `\nTo produce this tag:\n${lines.join("\n")}`;
-}
-//# sourceMappingURL=producers.js.map

package/dist/policies/producers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"producers.js","sourceRoot":"","sources":["../../src/policies/producers.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,0EAA0E;AAC1E,qEAAqE;AACrE,2DAA2D;AAC3D,EAAE;AACF,kEAAkE;AAClE,wEAAwE;AACxE,sEAAsE;AACtE,oEAAoE;AACpE,kEAAkE;AAClE,oCAAoC;AACpC,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,sEAAsE;AACtE,wEAAwE;AACxE,kEAAkE;AAClE,wEAAwE;AACxE,0DAA0D;AAG1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,SAAS,aAAa,CACpB,QAAgB,EAChB,MAA8B;IAE9B,uEAAuE;IACvE,sEAAsE;IACtE,sEAAsE;IACtE,kEAAkE;IAClE,wDAAwD;IACxD,OAAO,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC;AACrD,CAAC;AAED,SAAS,SAAS,CAAC,CAAW,EAAE,MAA8B;IAC5D,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,YAAY,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,aAAa,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC;QACpG,KAAK,KAAK;YACR,OAAO,UAAU,CAAC,CAAC,IAAI,YAAY,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,aAAa,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC;QAClH,KAAK,KAAK;YACR,OAAO,YAAY,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,aAAa,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC;QACpG,OAAO,CAAC,CAAC,CAAC;YACR,qEAAqE;YACrE,uEAAuE;YACvE,MAAM,WAAW,GAAU,CAAC,CAAC;YAC7B,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAC7B,SAAiC,EACjC,MAA8B;IAE9B,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7E,OAAO,2BAA2B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACvD,CAAC"}