@wildorder/nightshift 0.12.0 → 0.13.0

package/dist/index.js

@@ -27,4 +27,5 @@ export * from "./exit-codes.js";
 export * from "./ci-init.js";
 export * from "./whole-program-review.js";
 export * from "./as-built.js";
+export * from "./preflight.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AAKrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AAKrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC"}

package/dist/manifest.d.ts

@@ -1,13 +1,27 @@
 import { z } from "zod";
 /**
  * The program manifest: the single canonical home for success criteria, the
- * workstream roster, dependencies, and scope. `/plan-program` writes it; the
- * runner reads it and writes workstream status back. Narrative belongs in
- * the program document, never here — one canonical home per fact.
+ * workstream roster, dependencies, scope, and human prerequisites. `/plan-
+ * program` writes it; the runner reads it and writes workstream status back.
+ * Narrative belongs in the program document, never here — one canonical home
+ * per fact.
  */
-export declare const WORKSTREAM_STATUSES: readonly ["not_started", "in_progress", "complete", "failed", "parked"];
+export declare const WORKSTREAM_STATUSES: readonly ["not_started", "in_progress", "complete", "failed", "parked", "awaiting_human"];
 export type WorkstreamStatus = (typeof WORKSTREAM_STATUSES)[number];
-declare const workstreamSchema: z.ZodObject<{
+export declare const PREREQUISITE_STATUSES: readonly ["pending", "satisfied"];
+export type PrerequisiteStatus = (typeof PREREQUISITE_STATUSES)[number];
+export declare const prerequisiteSchema: z.ZodObject<{
+    id: z.ZodString;
+    description: z.ZodString;
+    remediation: z.ZodString;
+    verifyCommand: z.ZodString;
+    status: z.ZodDefault<z.ZodEnum<{
+        pending: "pending";
+        satisfied: "satisfied";
+    }>>;
+}, z.core.$strip>;
+export type Prerequisite = z.infer<typeof prerequisiteSchema>;
+export declare const workstreamSchema: z.ZodObject<{
     id: z.ZodString;
     name: z.ZodString;
     taskFile: z.ZodString;
@@ -17,6 +31,7 @@ declare const workstreamSchema: z.ZodObject<{
         in_progress: "in_progress";
         complete: "complete";
         parked: "parked";
+        awaiting_human: "awaiting_human";
     }>>;
     commit: z.ZodOptional<z.ZodString>;
     size: z.ZodOptional<z.ZodString>;
@@ -27,6 +42,7 @@ declare const workstreamSchema: z.ZodObject<{
     }, z.core.$strip>>;
     dependencies: z.ZodDefault<z.ZodArray<z.ZodString>>;
     packages: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    prerequisites: z.ZodDefault<z.ZodArray<z.ZodString>>;
     specHash: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 declare const manifestSchema: z.ZodObject<{
@@ -57,6 +73,7 @@ declare const manifestSchema: z.ZodObject<{
             in_progress: "in_progress";
             complete: "complete";
             parked: "parked";
+            awaiting_human: "awaiting_human";
         }>>;
         commit: z.ZodOptional<z.ZodString>;
         size: z.ZodOptional<z.ZodString>;
@@ -67,23 +84,40 @@ declare const manifestSchema: z.ZodObject<{
         }, z.core.$strip>>;
         dependencies: z.ZodDefault<z.ZodArray<z.ZodString>>;
         packages: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        prerequisites: z.ZodDefault<z.ZodArray<z.ZodString>>;
         specHash: z.ZodOptional<z.ZodString>;
     }, z.core.$loose>>;
     outOfScope: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    prerequisites: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        description: z.ZodString;
+        remediation: z.ZodString;
+        verifyCommand: z.ZodString;
+        status: z.ZodDefault<z.ZodEnum<{
+            pending: "pending";
+            satisfied: "satisfied";
+        }>>;
+    }, z.core.$loose>>>;
 }, z.core.$loose>;
 export type Workstream = z.infer<typeof workstreamSchema>;
 export type ProgramManifest = z.infer<typeof manifestSchema>;
 /**
  * Fingerprint of everything the authoring brief projects from the manifest
- * for one workstream: its name and scope, its dependency edges, and the
- * program-wide success criteria. Deliberately excludes runner-owned
- * bookkeeping (status, commit, specHash itself) and taskFile (moving the
- * file makes the spec missing, which re-authors anyway). Computed after
- * authoring's own dependency merges and stamped as `specHash`, so a run can
- * tell "the human edited the manifest after this spec was written" from
- * "the manifest is as the author saw it".
+ * for one workstream: its name and scope, its dependency edges, the
+ * program-wide success criteria, and — when the workstream references at
+ * least one — its prerequisites resolved to exactly the fields the brief
+ * projects (id, description, verifyCommand; sorted by id). `remediation` and
+ * `status` are excluded: the brief never projects remediation, and a
+ * `pending` → `satisfied` flip must never re-author a spec. The key is
+ * omitted entirely for prerequisite-free workstreams so their hash stays
+ * byte-identical to before prerequisites existed. Deliberately excludes
+ * runner-owned bookkeeping (status, commit, specHash itself) and taskFile
+ * (moving the file makes the spec missing, which re-authors anyway).
+ * Computed after authoring's own dependency merges and stamped as
+ * `specHash`, so a run can tell "the human edited the manifest after this
+ * spec was written" from "the manifest is as the author saw it".
  */
-export declare function specInputsHash(manifest: Pick<ProgramManifest, "successCriteria">, workstream: Pick<Workstream, "name" | "scope" | "dependencies">): string;
+export declare function specInputsHash(manifest: Pick<ProgramManifest, "successCriteria" | "prerequisites">, workstream: Pick<Workstream, "name" | "scope" | "dependencies" | "prerequisites">): string;
 export declare function manifestPath(root: string, programId: string): string;
 export declare function loadManifest(root: string, programId: string): Promise<ProgramManifest>;
 export declare function saveManifest(root: string, programId: string, manifest: ProgramManifest): Promise<void>;

package/dist/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;GAKG;AAEH,eAAO,MAAM,mBAAmB,yEAMtB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAQpE,QAAA,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;iBAmBpB,CAAC;AAEH,QAAA,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsBV,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE7D;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,iBAAiB,CAAC,EAClD,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,cAAc,CAAC,GAC9D,MAAM,CAcR;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAOpE;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,eAAe,CAAC,CAyC1B;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,IAAI,CAAC,CAMf"}
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AAEH,eAAO,MAAM,mBAAmB,2FAOtB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,eAAO,MAAM,qBAAqB,mCAAoC,CAAC;AAEvE,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE,eAAO,MAAM,kBAAkB;;;;;;;;;iBAsB7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAQ9D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;iBA4B3B,CAAC;AAEH,QAAA,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuBV,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE7D;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,iBAAiB,GAAG,eAAe,CAAC,EACpE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,cAAc,GAAG,eAAe,CAAC,GAChF,MAAM,CA6BR;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAOpE;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,eAAe,CAAC,CA4D1B;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,IAAI,CAAC,CAMf"}

package/dist/manifest.js

@@ -4,9 +4,10 @@ import { join, resolve } from "node:path";
 import { z } from "zod";
 /**
  * The program manifest: the single canonical home for success criteria, the
- * workstream roster, dependencies, and scope. `/plan-program` writes it; the
- * runner reads it and writes workstream status back. Narrative belongs in
- * the program document, never here — one canonical home per fact.
+ * workstream roster, dependencies, scope, and human prerequisites. `/plan-
+ * program` writes it; the runner reads it and writes workstream status back.
+ * Narrative belongs in the program document, never here — one canonical home
+ * per fact.
  */
 export const WORKSTREAM_STATUSES = [
     "not_started",
@@ -14,13 +15,38 @@ export const WORKSTREAM_STATUSES = [
     "complete",
     "failed",
     "parked",
+    "awaiting_human",
 ];
+export const PREREQUISITE_STATUSES = ["pending", "satisfied"];
+export const prerequisiteSchema = z.object({
+    /**
+     * Stable id, conventionally `HP-xx` (a documented convention, not a
+     * schema-enforced format). Unique within a manifest — a duplicate is a
+     * named load error (see {@link loadManifest}).
+     */
+    id: z.string().min(1),
+    /** Human-facing statement of the action only a human can perform. */
+    description: z.string().min(1),
+    /** The exact commands or console steps that perform the action. */
+    remediation: z.string().min(1),
+    /**
+     * A shell command that exits zero iff the action is done. Executed by the
+     * runner itself as a deterministic subprocess, never by a model. Trust
+     * boundary: the manifest is repo-tracked and human-reviewed at planning
+     * time, so this string is the same trust class as the verify commands in
+     * `nightshift.config.json` (see `configSchema.verify` in `src/config.ts`)
+     * — no sandbox beyond a bounded timeout and fail-open-to-unmet, both owned
+     * by the runner.
+     */
+    verifyCommand: z.string().min(1),
+    status: z.enum(PREREQUISITE_STATUSES).default("pending"),
+});
 const scopeSchema = z.object({
     summary: z.string().min(1),
     includes: z.array(z.string()).default([]),
     excludes: z.array(z.string()).default([]),
 });
-const workstreamSchema = z.object({
+export const workstreamSchema = z.object({
     id: z.string().min(1),
     name: z.string().min(1),
     taskFile: z.string().min(1),
@@ -31,6 +57,15 @@ const workstreamSchema = z.object({
     scope: scopeSchema.optional(),
     dependencies: z.array(z.string()).default([]),
     packages: z.array(z.string()).default([]),
+    /**
+     * Ids of program-level prerequisites this workstream waits on. Validated
+     * at load exactly as {@link Workstream.dependencies} are — an id with no
+     * matching entry in the manifest's `prerequisites` array is a named load
+     * error, not a runtime surprise. Each referenced id resolves to exactly
+     * one record, because program-level prerequisite ids are unique (checked
+     * at load). Absent on manifests without prerequisites.
+     */
+    prerequisites: z.array(z.string()).default([]),
     /**
      * {@link specInputsHash} of the manifest inputs the spec was authored
      * from, stamped by the authoring stage. A mismatch on a later run means
@@ -59,19 +94,27 @@ const manifestSchema = z
     packages: z.array(z.record(z.string(), z.unknown())).default([]),
     workstreams: z.array(workstreamSchema.loose()).min(1),
     outOfScope: z.array(z.string()).default([]),
+    prerequisites: z.array(prerequisiteSchema.loose()).default([]),
 })
     .loose();
 /**
  * Fingerprint of everything the authoring brief projects from the manifest
- * for one workstream: its name and scope, its dependency edges, and the
- * program-wide success criteria. Deliberately excludes runner-owned
- * bookkeeping (status, commit, specHash itself) and taskFile (moving the
- * file makes the spec missing, which re-authors anyway). Computed after
- * authoring's own dependency merges and stamped as `specHash`, so a run can
- * tell "the human edited the manifest after this spec was written" from
- * "the manifest is as the author saw it".
+ * for one workstream: its name and scope, its dependency edges, the
+ * program-wide success criteria, and — when the workstream references at
+ * least one — its prerequisites resolved to exactly the fields the brief
+ * projects (id, description, verifyCommand; sorted by id). `remediation` and
+ * `status` are excluded: the brief never projects remediation, and a
+ * `pending` → `satisfied` flip must never re-author a spec. The key is
+ * omitted entirely for prerequisite-free workstreams so their hash stays
+ * byte-identical to before prerequisites existed. Deliberately excludes
+ * runner-owned bookkeeping (status, commit, specHash itself) and taskFile
+ * (moving the file makes the spec missing, which re-authors anyway).
+ * Computed after authoring's own dependency merges and stamped as
+ * `specHash`, so a run can tell "the human edited the manifest after this
+ * spec was written" from "the manifest is as the author saw it".
  */
 export function specInputsHash(manifest, workstream) {
+    const prerequisiteById = new Map(manifest.prerequisites.map((entry) => [entry.id, entry]));
     const inputs = {
         name: workstream.name,
         scope: workstream.scope ?? null,
@@ -80,6 +123,18 @@ export function specInputsHash(manifest, workstream) {
             id: criterion.id,
             description: criterion.description,
         })),
+        ...(workstream.prerequisites.length > 0
+            ? {
+                prerequisites: [...workstream.prerequisites].sort().map((id) => {
+                    const entry = prerequisiteById.get(id);
+                    return {
+                        id,
+                        description: entry?.description ?? null,
+                        verifyCommand: entry?.verifyCommand ?? null,
+                    };
+                }),
+            }
+            : {}),
     };
     return createHash("sha256")
         .update(JSON.stringify(inputs))
@@ -123,6 +178,20 @@ export async function loadManifest(root, programId) {
             }
         }
     }
+    const prerequisiteIds = new Set();
+    for (const prerequisite of manifest.prerequisites) {
+        if (prerequisiteIds.has(prerequisite.id)) {
+            throw new Error(`${path}: duplicate prerequisite id "${prerequisite.id}"`);
+        }
+        prerequisiteIds.add(prerequisite.id);
+    }
+    for (const workstream of manifest.workstreams) {
+        for (const prerequisite of workstream.prerequisites) {
+            if (!prerequisiteIds.has(prerequisite)) {
+                throw new Error(`${path}: ${workstream.id} requires unknown prerequisite "${prerequisite}"`);
+            }
+        }
+    }
     return manifest;
 }
 export async function saveManifest(root, programId, manifest) {

package/dist/manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,aAAa;IACb,aAAa;IACb,UAAU;IACV,QAAQ;IACR,QAAQ;CACA,CAAC;AAIX,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC1D,4EAA4E;IAC5E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC7B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzC;;;;;;OAMG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC;KACrB,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC9B,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC5D,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC3C,CAAC;SACD,KAAK,EAAE;IACV,eAAe,EAAE,CAAC;SACf,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAC5E;SACA,OAAO,CAAC,EAAE,CAAC;IACd,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC5C,CAAC;KACD,KAAK,EAAE,CAAC;AAKX;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAC5B,QAAkD,EAClD,UAA+D;IAE/D,MAAM,MAAM,GAAG;QACb,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,KAAK,EAAE,UAAU,CAAC,KAAK,IAAI,IAAI;QAC/B,YAAY,EAAE,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE;QACjD,eAAe,EAAE,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC5D,EAAE,EAAE,SAAS,CAAC,EAAE;YAChB,WAAW,EAAE,SAAS,CAAC,WAAW;SACnC,CAAC,CAAC;KACJ,CAAC;IACF,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;SAC9B,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,SAAiB;IAC1D,OAAO,IAAI,CACT,OAAO,CAAC,IAAI,CAAC,EACb,MAAM,EACN,UAAU,EACV,GAAG,SAAS,gBAAgB,CAC7B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,SAAiB;IAEjB,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,kBAAkB,IAAI,8CAA8C,CACrE,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uBAAwB,KAAe,CAAC,OAAO,EAAE,EAAE;YACxE,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aACvE,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,gBAAgB,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC9C,KAAK,MAAM,UAAU,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;YACjD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,KAAK,UAAU,CAAC,EAAE,mCAAmC,UAAU,GAAG,CAC1E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,SAAiB,EACjB,QAAyB;IAEzB,MAAM,SAAS,CACb,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,EAC7B,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACxC,MAAM,CACP,CAAC;AACJ,CAAC"}
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,aAAa;IACb,aAAa;IACb,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,gBAAgB;CACR,CAAC;AAIX,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,SAAS,EAAE,WAAW,CAAU,CAAC;AAIvE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC;;;;OAIG;IACH,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,qEAAqE;IACrE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,mEAAmE;IACnE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B;;;;;;;;OAQG;IACH,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;CACzD,CAAC,CAAC;AAIH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC1D,4EAA4E;IAC5E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC7B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzC;;;;;;;OAOG;IACH,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C;;;;;;OAMG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC;KACrB,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC9B,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC5D,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC3C,CAAC;SACD,KAAK,EAAE;IACV,eAAe,EAAE,CAAC;SACf,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAC5E;SACA,OAAO,CAAC,EAAE,CAAC;IACd,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3C,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC/D,CAAC;KACD,KAAK,EAAE,CAAC;AAKX;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,cAAc,CAC5B,QAAoE,EACpE,UAAiF;IAEjF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CACzD,CAAC;IACF,MAAM,MAAM,GAAG;QACb,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,KAAK,EAAE,UAAU,CAAC,KAAK,IAAI,IAAI;QAC/B,YAAY,EAAE,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE;QACjD,eAAe,EAAE,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC5D,EAAE,EAAE,SAAS,CAAC,EAAE;YAChB,WAAW,EAAE,SAAS,CAAC,WAAW;SACnC,CAAC,CAAC;QACH,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;YACrC,CAAC,CAAC;gBACE,aAAa,EAAE,CAAC,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;oBAC7D,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACvC,OAAO;wBACL,EAAE;wBACF,WAAW,EAAE,KAAK,EAAE,WAAW,IAAI,IAAI;wBACvC,aAAa,EAAE,KAAK,EAAE,aAAa,IAAI,IAAI;qBAC5C,CAAC;gBACJ,CAAC,CAAC;aACH;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;SAC9B,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,SAAiB;IAC1D,OAAO,IAAI,CACT,OAAO,CAAC,IAAI,CAAC,EACb,MAAM,EACN,UAAU,EACV,GAAG,SAAS,gBAAgB,CAC7B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,SAAiB;IAEjB,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,kBAAkB,IAAI,8CAA8C,CACrE,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uBAAwB,KAAe,CAAC,OAAO,EAAE,EAAE;YACxE,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aACvE,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,gBAAgB,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC9C,KAAK,MAAM,UAAU,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;YACjD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,KAAK,UAAU,CAAC,EAAE,mCAAmC,UAAU,GAAG,CAC1E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,KAAK,MAAM,YAAY,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;QAClD,IAAI,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,gCAAgC,YAAY,CAAC,EAAE,GAAG,CAC1D,CAAC;QACJ,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC9C,KAAK,MAAM,YAAY,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;YACpD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,KAAK,UAAU,CAAC,EAAE,mCAAmC,YAAY,GAAG,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,SAAiB,EACjB,QAAyB;IAEzB,MAAM,SAAS,CACb,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,EAC7B,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACxC,MAAM,CACP,CAAC;AACJ,CAAC"}

package/dist/preflight.d.ts

@@ -0,0 +1,73 @@
+import type { LedgerEvent } from "./decision-ledger.js";
+import type { ProgramManifest } from "./manifest.js";
+/**
+ * The preflight stage: at run start, before baseline verification and any
+ * agent spawn, executes every *pending* prerequisite's `verifyCommand` as a
+ * deterministic, bounded subprocess. Exit zero flips it to `satisfied` (in
+ * memory — the caller decides when to persist); anything else — nonzero
+ * exit, spawn failure, timeout — uniformly means unmet, with a captured
+ * reason, and never throws out of this module. See
+ * `tasks/human-prerequisites/ws-02-*.md` for the full design.
+ */
+/** The wall-clock ceiling on a single prerequisite check. A deterministic
+ *  check that has not answered in this long is treated as unmet, and the
+ *  process tree is killed so it can never outlive the run. A constant, never
+ *  a config key — the charter keeps tuning knobs off the config surface. */
+export declare const PREREQUISITE_TIMEOUT_MS = 60000;
+export interface PrerequisiteRun {
+    exitCode: number;
+    output: string;
+    /** True when the process tree was killed for exceeding the timeout. */
+    timedOut: boolean;
+}
+export type PrerequisiteRunner = (command: string, cwd: string) => Promise<PrerequisiteRun>;
+/**
+ * Builds a bounded, process-tree-killing `PrerequisiteRunner`. Fixing the
+ * timeout inside a `(command, cwd)` runner would leave a timeout test no
+ * choice but to wait out the real production ceiling; this factory keeps the
+ * ceiling a test seam while {@link defaultPrerequisiteRunner} wires the
+ * production constant once.
+ */
+export declare function makePrerequisiteRunner(timeoutMs?: number): PrerequisiteRunner;
+/** The production runner: the 60 s ceiling, wired once. */
+export declare const defaultPrerequisiteRunner: PrerequisiteRunner;
+export interface PrerequisiteCheck {
+    id: string;
+    met: boolean;
+    /** Captured reason when unmet — always non-empty so the report never
+     *  renders a blank line. The tailed verify output on a nonzero exit; on a
+     *  nonzero exit that emitted no output, a fallback naming the exit code;
+     *  the spawn error message (or a generic notice) on a spawn failure; a
+     *  notice naming the ceiling on a timeout. Absent only when met. */
+    reason?: string;
+    /** True when this run's preflight flipped it pending → satisfied. False
+     *  for an already-satisfied prerequisite (not re-run) and for an unmet
+     *  one. */
+    newlySatisfied: boolean;
+}
+export interface PreflightResult {
+    checks: PrerequisiteCheck[];
+    /** Ledger events for the prerequisites this run newly satisfied. The
+     *  caller appends these once its own baseline verification admits the run
+     *  — see run-program.ts's staged-persistence wiring. */
+    events: LedgerEvent[];
+}
+/**
+ * Runs every pending prerequisite's `verifyCommand` once. Mutates
+ * `manifest.prerequisites` in place on a met check (pending → satisfied);
+ * the caller decides when (and whether) to persist that mutation to disk. An
+ * already-`satisfied` prerequisite is never re-run — settled facts stay
+ * settled (SC-06). No `verifyCommand` outcome can throw out of this
+ * function or halt the run (SC-03): a thrown spawn failure is caught here.
+ */
+export declare function runPreflight(args: {
+    manifest: ProgramManifest;
+    cwd: string;
+    runner: PrerequisiteRunner;
+    now: () => Date;
+    /** The run's identity, stamped on each `prerequisite-verified` event. */
+    runId: string;
+    runStartCommit: string | undefined;
+    log: (line: string) => void;
+}): Promise<PreflightResult>;
+//# sourceMappingURL=preflight.d.ts.map

package/dist/preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.d.ts","sourceRoot":"","sources":["../src/preflight.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD;;;;;;;;GAQG;AAEH;;;4EAG4E;AAC5E,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAe9C,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,MAAM,kBAAkB,GAAG,CAC/B,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,KACR,OAAO,CAAC,eAAe,CAAC,CAAC;AAiD9B;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,GAAE,MAAgC,GAC1C,kBAAkB,CAqEpB;AAED,2DAA2D;AAC3D,eAAO,MAAM,yBAAyB,EAAE,kBACd,CAAC;AAE3B,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,OAAO,CAAC;IACb;;;;wEAIoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;eAEW;IACX,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B;;4DAEwD;IACxD,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,QAAQ,EAAE,eAAe,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,kBAAkB,CAAC;IAC3B,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B,GAAG,OAAO,CAAC,eAAe,CAAC,CA0E3B"}

package/dist/preflight.js

@@ -0,0 +1,225 @@
+import { spawn } from "node:child_process";
+import { tail } from "./agent-runner.js";
+/**
+ * The preflight stage: at run start, before baseline verification and any
+ * agent spawn, executes every *pending* prerequisite's `verifyCommand` as a
+ * deterministic, bounded subprocess. Exit zero flips it to `satisfied` (in
+ * memory — the caller decides when to persist); anything else — nonzero
+ * exit, spawn failure, timeout — uniformly means unmet, with a captured
+ * reason, and never throws out of this module. See
+ * `tasks/human-prerequisites/ws-02-*.md` for the full design.
+ */
+/** The wall-clock ceiling on a single prerequisite check. A deterministic
+ *  check that has not answered in this long is treated as unmet, and the
+ *  process tree is killed so it can never outlive the run. A constant, never
+ *  a config key — the charter keeps tuning knobs off the config surface. */
+export const PREREQUISITE_TIMEOUT_MS = 60_000;
+// In-memory output is kept to a bounded tail, mirroring agent-runner.ts's
+// own OUTPUT_TAIL_LIMIT — this module intentionally does not import that
+// private constant.
+const OUTPUT_TAIL_LIMIT = 200_000;
+/** How long a timed-out check waits, past its own ceiling, for the kill
+ *  request to take effect before giving up on `close` and settling anyway.
+ *  A kill (`taskkill`, a signalled process group) has no completion callback
+ *  to await, so without this bound a slow or failed kill would turn a
+ *  *bounded* check into an unbounded one — this is the backstop that keeps
+ *  the promise settling promptly regardless. */
+const KILL_GRACE_MS = 3_000;
+/**
+ * Kills a spawned shell line's whole process tree, not just the shell
+ * process `spawn` returned — a `verifyCommand` may fork descendants (node,
+ * curl, a helper script), and `child.kill()` alone would orphan them: on
+ * Windows in particular, killing only the returned `cmd.exe` process leaves
+ * its own child (say, `node`) running and still holding the inherited stdio
+ * pipe handles, so `close` never fires until that orphan exits on its own —
+ * confirmed empirically (see the git history of this function's tests): a
+ * `child.kill()` issued *before* `taskkill /T` gets a chance to walk the
+ * still-live tree kills the wrapper first, orphans the descendant, and
+ * taskkill then reports "not found" for a pid that is already gone —
+ * reproducing exactly the unbounded-wait failure this function exists to
+ * prevent. So the whole tree is killed as a single unit, by pid, while the
+ * tree is still intact — never a separate signal to the immediate child
+ * first.
+ *
+ * POSIX: the child was spawned `detached: true`, making it its own
+ * process-group leader; signalling the negative pid signals the whole group
+ * atomically. `ESRCH` (the group already exited) is swallowed — best effort.
+ *
+ * Windows: there is no process-group signal, so `taskkill /T /F` is used,
+ * which walks the live process tree from `pid` and terminates it forcibly in
+ * one call. Fire-and-forget as far as this function is concerned — its
+ * caller (the grace timer in {@link makePrerequisiteRunner}) is what bounds
+ * the wait, since an external kill request has no completion callback of its
+ * own to await; a spawn failure for `taskkill` itself (e.g. an unusual PATH)
+ * is swallowed the same way.
+ */
+function killProcessTree(pid) {
+    if (process.platform === "win32") {
+        const killer = spawn("taskkill", ["/pid", String(pid), "/T", "/F"], {
+            windowsHide: true,
+            stdio: "ignore",
+        });
+        killer.on("error", () => {
+            // taskkill itself failed to spawn — the grace timer still bounds the
+            // wait regardless.
+        });
+        return;
+    }
+    try {
+        process.kill(-pid, "SIGKILL");
+    }
+    catch {
+        // Already exited, or never became a group leader — best effort.
+    }
+}
+/**
+ * Builds a bounded, process-tree-killing `PrerequisiteRunner`. Fixing the
+ * timeout inside a `(command, cwd)` runner would leave a timeout test no
+ * choice but to wait out the real production ceiling; this factory keeps the
+ * ceiling a test seam while {@link defaultPrerequisiteRunner} wires the
+ * production constant once.
+ */
+export function makePrerequisiteRunner(timeoutMs = PREREQUISITE_TIMEOUT_MS) {
+    return (command, cwd) => new Promise((resolvePromise, rejectPromise) => {
+        // shell: true, exactly like defaultVerifyRunner — a verifyCommand is a
+        // whole shell line the human/planner authored, run under cmd /c or
+        // /bin/sh -c. detached: true on POSIX makes the child a process-group
+        // leader so killProcessTree can signal the whole tree; Windows has no
+        // such option and uses taskkill /T instead.
+        const child = spawn(command, [], {
+            cwd,
+            shell: true,
+            windowsHide: true,
+            stdio: ["pipe", "pipe", "pipe"],
+            ...(process.platform === "win32" ? {} : { detached: true }),
+        });
+        let buffered = "";
+        const push = (chunk) => {
+            buffered = (buffered + chunk).slice(-OUTPUT_TAIL_LIMIT);
+        };
+        child.stdout?.setEncoding("utf8");
+        child.stderr?.setEncoding("utf8");
+        child.stdout?.on("data", push);
+        child.stderr?.on("data", push);
+        // Never reads stdin, and ends it immediately — the same headless
+        // posture as defaultVerifyRunner (agent-runner.ts).
+        child.stdin?.end();
+        let settled = false;
+        let timedOut = false;
+        let graceTimer;
+        const settle = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            clearTimeout(graceTimer);
+            resolvePromise(result);
+        };
+        const timer = setTimeout(() => {
+            timedOut = true;
+            if (child.pid !== undefined)
+                killProcessTree(child.pid);
+            // The kill above is a request, not a confirmation — `taskkill` and a
+            // signalled process group have no completion callback this runner
+            // can await, and a slow or failed kill must never turn a *bounded*
+            // check into an unbounded one (SC-03/SC-11: the run always
+            // terminates). `close` still wins the race in the overwhelmingly
+            // common case where the kill lands promptly; this grace window is
+            // strictly a backstop for the rest.
+            graceTimer = setTimeout(() => {
+                settle({ exitCode: 1, output: buffered, timedOut: true });
+            }, KILL_GRACE_MS);
+            graceTimer.unref();
+        }, timeoutMs);
+        timer.unref();
+        child.on("error", (error) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            clearTimeout(graceTimer);
+            rejectPromise(error);
+        });
+        child.on("close", (code) => {
+            settle({ exitCode: code ?? 1, output: buffered, timedOut });
+        });
+    });
+}
+/** The production runner: the 60 s ceiling, wired once. */
+export const defaultPrerequisiteRunner = makePrerequisiteRunner();
+/**
+ * Runs every pending prerequisite's `verifyCommand` once. Mutates
+ * `manifest.prerequisites` in place on a met check (pending → satisfied);
+ * the caller decides when (and whether) to persist that mutation to disk. An
+ * already-`satisfied` prerequisite is never re-run — settled facts stay
+ * settled (SC-06). No `verifyCommand` outcome can throw out of this
+ * function or halt the run (SC-03): a thrown spawn failure is caught here.
+ */
+export async function runPreflight(args) {
+    const { manifest, cwd, runner, now, runId, runStartCommit, log } = args;
+    const checks = [];
+    const events = [];
+    for (const prerequisite of manifest.prerequisites) {
+        if (prerequisite.status === "satisfied") {
+            checks.push({ id: prerequisite.id, met: true, newlySatisfied: false });
+            continue;
+        }
+        let run;
+        try {
+            run = await runner(prerequisite.verifyCommand, cwd);
+        }
+        catch (error) {
+            const message = error?.message?.trim();
+            const reason = message && message !== ""
+                ? message
+                : "the verify command could not be started";
+            checks.push({
+                id: prerequisite.id,
+                met: false,
+                reason,
+                newlySatisfied: false,
+            });
+            log(`preflight: ${prerequisite.id} unmet — ${reason}`);
+            continue;
+        }
+        if (run.timedOut) {
+            const reason = `the verify command did not finish within ` +
+                `${PREREQUISITE_TIMEOUT_MS}ms and was terminated`;
+            checks.push({
+                id: prerequisite.id,
+                met: false,
+                reason,
+                newlySatisfied: false,
+            });
+            log(`preflight: ${prerequisite.id} unmet — ${reason}`);
+            continue;
+        }
+        if (run.exitCode !== 0) {
+            const tailed = tail(run.output, 1500).trim();
+            const reason = tailed !== ""
+                ? tailed
+                : `the verify command exited ${run.exitCode} with no output`;
+            checks.push({
+                id: prerequisite.id,
+                met: false,
+                reason,
+                newlySatisfied: false,
+            });
+            log(`preflight: ${prerequisite.id} unmet — ${reason}`);
+            continue;
+        }
+        prerequisite.status = "satisfied";
+        checks.push({ id: prerequisite.id, met: true, newlySatisfied: true });
+        events.push({
+            kind: "prerequisite-verified",
+            at: now().toISOString(),
+            id: prerequisite.id,
+            verifyCommand: prerequisite.verifyCommand,
+            runId,
+            ...(runStartCommit === undefined ? {} : { commit: runStartCommit }),
+        });
+        log(`preflight: ${prerequisite.id} satisfied`);
+    }
+    return { checks, events };
+}
+//# sourceMappingURL=preflight.js.map

package/dist/preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../src/preflight.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAG3C,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAEzC;;;;;;;;GAQG;AAEH;;;4EAG4E;AAC5E,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C,0EAA0E;AAC1E,yEAAyE;AACzE,oBAAoB;AACpB,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAElC;;;;;gDAKgD;AAChD,MAAM,aAAa,GAAG,KAAK,CAAC;AAc5B;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;YAClE,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,qEAAqE;YACrE,mBAAmB;QACrB,CAAC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;IAClE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,YAAoB,uBAAuB;IAE3C,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CACtB,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;QAC5C,uEAAuE;QACvE,mEAAmE;QACnE,sEAAsE;QACtE,sEAAsE;QACtE,4CAA4C;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE;YAC/B,GAAG;YACH,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC5D,CAAC,CAAC;QAEH,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,CAAC,KAAa,EAAQ,EAAE;YACnC,QAAQ,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC1D,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/B,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/B,iEAAiE;QACjE,oDAAoD;QACpD,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QAEnB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,UAAqD,CAAC;QAE1D,MAAM,MAAM,GAAG,CAAC,MAAuB,EAAQ,EAAE;YAC/C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,YAAY,CAAC,UAAU,CAAC,CAAC;YACzB,cAAc,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;gBAAE,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxD,qEAAqE;YACrE,kEAAkE;YAClE,mEAAmE;YACnE,2DAA2D;YAC3D,iEAAiE;YACjE,kEAAkE;YAClE,oCAAoC;YACpC,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC3B,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC,EAAE,aAAa,CAAC,CAAC;YAClB,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,YAAY,CAAC,UAAU,CAAC,CAAC;YACzB,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,MAAM,yBAAyB,GACpC,sBAAsB,EAAE,CAAC;AAyB3B;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IASlC;IACC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACxE,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,KAAK,MAAM,YAAY,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;QAClD,IAAI,YAAY,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;YACvE,SAAS;QACX,CAAC;QAED,IAAI,GAAoB,CAAC;QACzB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAI,KAA2B,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC9D,MAAM,MAAM,GACV,OAAO,IAAI,OAAO,KAAK,EAAE;gBACvB,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,yCAAyC,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,YAAY,CAAC,EAAE;gBACnB,GAAG,EAAE,KAAK;gBACV,MAAM;gBACN,cAAc,EAAE,KAAK;aACtB,CAAC,CAAC;YACH,GAAG,CAAC,cAAc,YAAY,CAAC,EAAE,YAAY,MAAM,EAAE,CAAC,CAAC;YACvD,SAAS;QACX,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjB,MAAM,MAAM,GACV,2CAA2C;gBAC3C,GAAG,uBAAuB,uBAAuB,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,YAAY,CAAC,EAAE;gBACnB,GAAG,EAAE,KAAK;gBACV,MAAM;gBACN,cAAc,EAAE,KAAK;aACtB,CAAC,CAAC;YACH,GAAG,CAAC,cAAc,YAAY,CAAC,EAAE,YAAY,MAAM,EAAE,CAAC,CAAC;YACvD,SAAS;QACX,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,MAAM,GACV,MAAM,KAAK,EAAE;gBACX,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,6BAA6B,GAAG,CAAC,QAAQ,iBAAiB,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,YAAY,CAAC,EAAE;gBACnB,GAAG,EAAE,KAAK;gBACV,MAAM;gBACN,cAAc,EAAE,KAAK;aACtB,CAAC,CAAC;YACH,GAAG,CAAC,cAAc,YAAY,CAAC,EAAE,YAAY,MAAM,EAAE,CAAC,CAAC;YACvD,SAAS;QACX,CAAC;QAED,YAAY,CAAC,MAAM,GAAG,WAAW,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,uBAAuB;YAC7B,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;YACvB,EAAE,EAAE,YAAY,CAAC,EAAE;YACnB,aAAa,EAAE,YAAY,CAAC,aAAa;YACzC,KAAK;YACL,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;SACpE,CAAC,CAAC;QACH,GAAG,CAAC,cAAc,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC"}