@wildorder/nightshift 0.12.0 → 0.14.0

package/dist/permits.js

@@ -0,0 +1,397 @@
+import { randomBytes } from "node:crypto";
+import { rmSync } from "node:fs";
+import { rm as nodeRm, writeFile as nodeWriteFile } from "node:fs/promises";
+import { platform as osPlatform, tmpdir } from "node:os";
+import { join } from "node:path";
+import crossSpawn from "cross-spawn";
+/**
+ * Fixed per-role postures — mirrors the write/exec split `agent-probe.ts`
+ * already encoded as WRITE_ROLES/EXEC_ROLES. Exported so the probe sources
+ * its write/read split from here rather than keeping a second copy that can
+ * drift.
+ */
+export const ROLE_POSTURE = {
+    agent: "workspace",
+    recoveryAgent: "workspace",
+    authorAgent: "workspace",
+    deciderAgent: "read-only",
+    reviewerAgent: "read-only",
+};
+// ---------------------------------------------------------------------------
+// Explicit flags win (SC-05)
+// ---------------------------------------------------------------------------
+const CLAUDE_PERMISSION_FLAGS = [
+    "--permission-mode",
+    "--allowedTools",
+    "--allowed-tools",
+    "--disallowedTools",
+    "--dangerously-skip-permissions",
+    "--settings",
+];
+const CODEX_SANDBOX_FLAG = "--sandbox";
+function permissionFlagsFor(command) {
+    if (command === "claude")
+        return CLAUDE_PERMISSION_FLAGS;
+    if (command === "codex")
+        return [CODEX_SANDBOX_FLAG];
+    return [];
+}
+// ---------------------------------------------------------------------------
+// Command transcript observability (WS-02)
+// ---------------------------------------------------------------------------
+const OUTPUT_FORMAT_FLAG = "--output-format";
+/** True when the agent's own args already pin an output format — an operator
+ *  who chose one (stream-json or otherwise) keeps it untouched. */
+function hasOutputFormatFlag(agent) {
+    return agent.args.some((arg) => {
+        const token = arg.includes("=") ? arg.slice(0, arg.indexOf("=")) : arg;
+        return token === OUTPUT_FORMAT_FLAG;
+    });
+}
+/**
+ * The two flags that turn a Claude spawn's stdout into the NDJSON stream
+ * `src/agent-runner.ts`'s demultiplexer reads (WS-02). `--verbose` is
+ * required alongside `--output-format stream-json`: in print mode the CLI
+ * emits only the final result event unless `--verbose` is set, and the
+ * demultiplexer needs the intermediate `tool_use` events. Empty when the
+ * agent already pins its own output format — this derivation only adds
+ * flags, it never overrides one an operator wrote.
+ */
+function observabilityFlags(agent) {
+    return hasOutputFormatFlag(agent) ? [] : [OUTPUT_FORMAT_FLAG, "stream-json", "--verbose"];
+}
+/**
+ * True when the agent's own args already carry a permission-bearing flag —
+ * `--flag value` and `--flag=value` both match. An agent that trips this is
+ * spawned untouched and labeled operator-configured; rewriting an operator's
+ * authored flags is the override the charter forbids.
+ */
+export function hasExplicitPermissionFlag(agent) {
+    const flags = permissionFlagsFor(agent.command);
+    if (flags.length === 0)
+        return false;
+    return agent.args.some((arg) => {
+        const token = arg.includes("=") ? arg.slice(0, arg.indexOf("=")) : arg;
+        return flags.includes(token);
+    });
+}
+// ---------------------------------------------------------------------------
+// permits config -> settings file content
+// ---------------------------------------------------------------------------
+/** One `--allowedTools`/settings allow entry per configured verify command. Relocated from verify-allowlist.ts. */
+export function claudeVerifyAllowedTools(verify) {
+    return Object.values(verify).map((command) => `Bash(${command}:*)`);
+}
+function baseAllowDeny(verify, permits) {
+    return {
+        allow: [...claudeVerifyAllowedTools(verify), ...(permits?.allow ?? [])],
+        deny: [...(permits?.deny ?? [])],
+    };
+}
+/** The workspace settings file: verify rules + permits.allow/deny, plus a sandbox block on darwin/linux. */
+export function workspaceSettingsContent(verify, permits, platform) {
+    const { allow, deny } = baseAllowDeny(verify, permits);
+    const settings = { permissions: { allow, deny } };
+    if (platform === "darwin" || platform === "linux") {
+        settings.sandbox = { enabled: true, autoAllowBashIfSandboxed: true };
+    }
+    return JSON.stringify(settings, null, 2);
+}
+/** The read-only settings file: same allow/deny lists, never a sandbox block. */
+export function readOnlySettingsContent(verify, permits) {
+    const { allow, deny } = baseAllowDeny(verify, permits);
+    return JSON.stringify({ permissions: { allow, deny } }, null, 2);
+}
+const UNDETECTED_CAPABILITIES = {
+    detected: false,
+    autoMode: false,
+    dontAskMode: false,
+    permissionPrompts: false,
+};
+/**
+ * Turns a finished `--help` spawn into its text or a rejection. Exported so
+ * the nonzero-exit-code case (a `claude` on PATH that fails, rather than a
+ * missing command) is unit-testable without an actual child process: a
+ * nonzero exit must be reported as a detection failure, never parsed as if
+ * it were successful help output.
+ */
+export function helpRunnerOutcome(code, output) {
+    if (code === 0)
+        return output;
+    throw new Error(`claude --help exited with code ${code ?? "null"}: ${output.slice(0, 500)}`);
+}
+export const defaultClaudeHelpRunner = (command) => new Promise((resolvePromise, rejectPromise) => {
+    let output = "";
+    const child = crossSpawn(command, ["--help"], {
+        windowsHide: true,
+        stdio: ["ignore", "pipe", "pipe"],
+    });
+    child.stdout?.setEncoding("utf8");
+    child.stderr?.setEncoding("utf8");
+    child.stdout?.on("data", (chunk) => (output += chunk));
+    child.stderr?.on("data", (chunk) => (output += chunk));
+    child.on("error", rejectPromise);
+    child.on("close", (code) => {
+        try {
+            resolvePromise(helpRunnerOutcome(code, output));
+        }
+        catch (error) {
+            rejectPromise(error);
+        }
+    });
+});
+/** The `--permission-mode` option's own text, up to the next `--flag` line. */
+function optionBlock(helpText, flag) {
+    const idx = helpText.indexOf(flag);
+    if (idx === -1)
+        return "";
+    const rest = helpText.slice(idx + flag.length);
+    const stop = rest.match(/\n[^\S\r\n]*--/u);
+    return stop?.index === undefined ? rest : rest.slice(0, stop.index);
+}
+/** Parses `claude --help` text into capabilities. Exported for fixture-driven tests. */
+export function parseClaudeHelp(helpText) {
+    const modeBlock = optionBlock(helpText, "--permission-mode");
+    return {
+        detected: true,
+        autoMode: /"auto"/u.test(modeBlock),
+        dontAskMode: /"dontAsk"/u.test(modeBlock),
+        permissionPrompts: /--permission-prompts\b/u.test(helpText),
+    };
+}
+/**
+ * Detects once per process per resolved command string, caching the promise
+ * so concurrent derivations for the same command share one spawn. Detection
+ * failure (not on PATH, a throwing help runner) is reported as
+ * `detected: false`, never thrown — the derivation then takes the fallback.
+ */
+const capabilityCache = new Map();
+export function detectClaudeCapabilities(command, helpRunner = defaultClaudeHelpRunner) {
+    let cached = capabilityCache.get(command);
+    if (!cached) {
+        cached = helpRunner(command).then(parseClaudeHelp).catch(() => UNDETECTED_CAPABILITIES);
+        capabilityCache.set(command, cached);
+    }
+    return cached;
+}
+/** Test-only: clears the process-wide capability cache between fixture scenarios. */
+export function resetClaudeCapabilityCacheForTests() {
+    capabilityCache.clear();
+}
+function deriveClaude(input) {
+    const { agent, role, containmentEnv, platform, claudeCapabilities, workspaceSettingsPath, readOnlySettingsPath } = input;
+    const posture = ROLE_POSTURE[role];
+    const caps = claudeCapabilities ?? UNDETECTED_CAPABILITIES;
+    const observability = observabilityFlags(agent);
+    if (posture === "read-only") {
+        if (caps.dontAskMode) {
+            const args = [...agent.args, "--permission-mode", "dontAsk", "--settings", readOnlySettingsPath];
+            if (caps.permissionPrompts)
+                args.push("--permission-prompts", "none");
+            args.push(...observability);
+            return {
+                agent: { ...agent, args },
+                label: "read-only",
+                operatorConfigured: false,
+                settingsPath: readOnlySettingsPath,
+            };
+        }
+        const args = [
+            ...agent.args,
+            "--permission-mode",
+            "default",
+            "--settings",
+            readOnlySettingsPath,
+            ...observability,
+        ];
+        return {
+            agent: { ...agent, args },
+            label: caps.detected ? "read-only fallback (default+verify)" : "read-only fallback (detection failed)",
+            operatorConfigured: false,
+            settingsPath: readOnlySettingsPath,
+        };
+    }
+    // workspace posture
+    if (containmentEnv === "ephemeral") {
+        const args = [
+            ...agent.args,
+            "--dangerously-skip-permissions",
+            "--settings",
+            workspaceSettingsPath,
+            ...observability,
+        ];
+        return {
+            agent: { ...agent, args },
+            label: "ephemeral",
+            operatorConfigured: false,
+            settingsPath: workspaceSettingsPath,
+        };
+    }
+    if (caps.autoMode) {
+        const args = [...agent.args, "--permission-mode", "auto", "--settings", workspaceSettingsPath];
+        if (caps.permissionPrompts)
+            args.push("--permission-prompts", "none");
+        args.push(...observability);
+        const sandboxed = platform === "darwin" || platform === "linux";
+        return {
+            agent: { ...agent, args },
+            label: sandboxed ? "auto+sandbox" : "auto",
+            operatorConfigured: false,
+            settingsPath: workspaceSettingsPath,
+        };
+    }
+    const args = [
+        ...agent.args,
+        "--permission-mode",
+        "acceptEdits",
+        "--settings",
+        workspaceSettingsPath,
+        ...observability,
+    ];
+    return {
+        agent: { ...agent, args },
+        label: caps.detected ? "fallback (acceptEdits+verify)" : "fallback (detection failed)",
+        operatorConfigured: false,
+        settingsPath: workspaceSettingsPath,
+    };
+}
+const CODEX_DENY_NOTE = "codex has no per-command deny rules; permits.deny does not bind on this seat.";
+function deriveCodex(input) {
+    const { agent, role, containmentEnv, platform } = input;
+    const posture = ROLE_POSTURE[role];
+    if (posture === "read-only") {
+        // Said explicitly, never assumed: `codex exec` ships read-only by
+        // default, but a user config can widen that default (a Windows
+        // `sandbox = "elevated"` setting, a trusted-project entry), and a seat
+        // labeled read-only that can write is the legibility failure this
+        // module exists to prevent. Independent of containment — a read-only
+        // seat has no reason to escalate on an ephemeral host either.
+        const args = [...agent.args, "--sandbox", "read-only"];
+        return { agent: { ...agent, args }, label: "read-only", operatorConfigured: false, note: CODEX_DENY_NOTE };
+    }
+    if (containmentEnv === "ephemeral") {
+        // Left at its own sandbox — an ephemeral host has no reason to escalate
+        // codex further, and codex ships no skip-permissions equivalent.
+        return { agent, label: "ephemeral", operatorConfigured: false, note: CODEX_DENY_NOTE };
+    }
+    const args = [...agent.args, "--sandbox", "workspace-write"];
+    const sandboxed = platform === "darwin" || platform === "linux";
+    return {
+        agent: { ...agent, args },
+        label: sandboxed ? "auto+sandbox" : "auto",
+        operatorConfigured: false,
+        note: CODEX_DENY_NOTE,
+    };
+}
+/**
+ * The whole derivation, pure: role + posture + containment + capabilities +
+ * the agent's existing args -> the flags to spawn with. No I/O — capability
+ * detection and the settings-file write happen in the context builder below.
+ */
+export function deriveAgentInvocation(input) {
+    if (hasExplicitPermissionFlag(input.agent)) {
+        return { agent: input.agent, label: "operator-configured", operatorConfigured: true };
+    }
+    if (input.agent.command === "claude")
+        return deriveClaude(input);
+    if (input.agent.command === "codex")
+        return deriveCodex(input);
+    // Any other provider: no known flag vocabulary — deriving the wrong flag
+    // is worse than deriving none.
+    return { agent: input.agent, label: "unmanaged", operatorConfigured: false };
+}
+const realPermitsFs = {
+    writeFile: (path, content) => nodeWriteFile(path, content, "utf8"),
+    rm: (path) => nodeRm(path, { force: true }),
+};
+/**
+ * Settings files written by contexts that have not been disposed yet. One
+ * exit hook, registered on first use, removes them synchronously — the only
+ * kind of work an `exit` handler can do — so a run that crashes mid-way, a
+ * test process, or a command that never reaches its own dispose still leaves
+ * the temp directory as it found it.
+ */
+const undisposedSettingsPaths = new Set();
+let exitHookRegistered = false;
+function registerExitCleanup() {
+    if (exitHookRegistered)
+        return;
+    exitHookRegistered = true;
+    process.on("exit", () => {
+        for (const path of undisposedSettingsPaths) {
+            try {
+                rmSync(path, { force: true });
+            }
+            catch {
+                // Best effort at exit; nothing useful can be reported from here.
+            }
+        }
+        undisposedSettingsPaths.clear();
+    });
+}
+/**
+ * Builds the run's (or doctor probe's, or as-built refresh's) one
+ * `PermitsContext`: writes the two settings files once under `os.tmpdir()`
+ * and returns a `derive` function that detects claude's capabilities on
+ * first use per command string and applies the pure derivation above.
+ */
+export async function buildPermitsContext(options) {
+    const platform = options.platform ?? osPlatform();
+    const containmentEnv = options.containmentEnv ?? process.env.NIGHTSHIFT_CONTAINMENT;
+    const helpRunner = options.helpRunner ?? defaultClaudeHelpRunner;
+    const fs = options.fs ?? realPermitsFs;
+    const nonce = randomBytes(4).toString("hex");
+    const workspaceSettingsPath = join(tmpdir(), `nightshift-permits-${nonce}-workspace.json`);
+    const readOnlySettingsPath = join(tmpdir(), `nightshift-permits-${nonce}-read-only.json`);
+    await fs.writeFile(workspaceSettingsPath, workspaceSettingsContent(options.config.verify, options.config.permits, platform));
+    await fs.writeFile(readOnlySettingsPath, readOnlySettingsContent(options.config.verify, options.config.permits));
+    // Only real files are tracked for exit cleanup; an injected fake fs wrote
+    // nowhere the hook could (or should) remove.
+    const tracked = options.fs === undefined;
+    if (tracked) {
+        registerExitCleanup();
+        undisposedSettingsPaths.add(workspaceSettingsPath);
+        undisposedSettingsPaths.add(readOnlySettingsPath);
+    }
+    return {
+        workspaceSettingsPath,
+        readOnlySettingsPath,
+        async dispose() {
+            for (const path of [workspaceSettingsPath, readOnlySettingsPath]) {
+                undisposedSettingsPaths.delete(path);
+                await fs.rm?.(path);
+            }
+        },
+        async derive(role, agent) {
+            const claudeCapabilities = agent.command === "claude" ? await detectClaudeCapabilities(agent.command, helpRunner) : undefined;
+            return deriveAgentInvocation({
+                role,
+                agent,
+                containmentEnv,
+                platform,
+                claudeCapabilities,
+                workspaceSettingsPath,
+                readOnlySettingsPath,
+            });
+        },
+    };
+}
+/**
+ * A context that appends nothing and detects nothing — the injectable
+ * default for options that accept `permits` optionally, so a test exercising
+ * unrelated logic spawns exactly as it did before this workstream. Every
+ * real entry point (`run`, `doctor --agents`, `nightshift author`,
+ * `nightshift as-built`/`publish`) builds and passes a real context instead
+ * of relying on this default.
+ */
+export const NOOP_PERMITS_CONTEXT = {
+    workspaceSettingsPath: "",
+    readOnlySettingsPath: "",
+    derive(_role, agent) {
+        return Promise.resolve({ agent, label: "operator-configured", operatorConfigured: true });
+    },
+    dispose() {
+        return Promise.resolve();
+    },
+};
+//# sourceMappingURL=permits.js.map

package/dist/permits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permits.js","sourceRoot":"","sources":["../src/permits.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,UAAU,MAAM,aAAa,CAAC;AAuBrC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAA+B;IACtD,KAAK,EAAE,WAAW;IAClB,aAAa,EAAE,WAAW;IAC1B,WAAW,EAAE,WAAW;IACxB,YAAY,EAAE,WAAW;IACzB,aAAa,EAAE,WAAW;CAC3B,CAAC;AA+BF,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E,MAAM,uBAAuB,GAAG;IAC9B,mBAAmB;IACnB,gBAAgB;IAChB,iBAAiB;IACjB,mBAAmB;IACnB,gCAAgC;IAChC,YAAY;CACb,CAAC;AACF,MAAM,kBAAkB,GAAG,WAAW,CAAC;AAEvC,SAAS,kBAAkB,CAAC,OAAe;IACzC,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,uBAAuB,CAAC;IACzD,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACrD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,8EAA8E;AAC9E,2CAA2C;AAC3C,8EAA8E;AAE9E,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAE7C;mEACmE;AACnE,SAAS,mBAAmB,CAAC,KAAkB;IAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACvE,OAAO,KAAK,KAAK,kBAAkB,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,kBAAkB,CAAC,KAAkB;IAC5C,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;AAC5F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAkB;IAC1D,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACvE,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E,mHAAmH;AACnH,MAAM,UAAU,wBAAwB,CAAC,MAA8B;IACrE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,OAAO,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,aAAa,CACpB,MAA8B,EAC9B,OAAkC;IAElC,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,wBAAwB,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACvE,IAAI,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,wBAAwB,CACtC,MAA8B,EAC9B,OAAkC,EAClC,QAAyB;IAEzB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,QAAQ,GAA4B,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;IAC3E,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClD,QAAQ,CAAC,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,uBAAuB,CACrC,MAA8B,EAC9B,OAAkC;IAElC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACnE,CAAC;AAcD,MAAM,uBAAuB,GAAuB;IAClD,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,KAAK;IACf,WAAW,EAAE,KAAK;IAClB,iBAAiB,EAAE,KAAK;CACzB,CAAC;AAKF;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAmB,EAAE,MAAc;IACnE,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9B,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,IAAI,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAqB,CAAC,OAAO,EAAE,EAAE,CACnE,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;IAC5C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE;QAC5C,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IACH,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC;IAC/D,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC;IAC/D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;QACzB,IAAI,CAAC;YACH,cAAc,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,KAAc,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,+EAA+E;AAC/E,SAAS,WAAW,CAAC,QAAgB,EAAE,IAAY;IACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC3C,OAAO,IAAI,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC7D,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;QACnC,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;QACzC,iBAAiB,EAAE,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,EAAuC,CAAC;AAEvE,MAAM,UAAU,wBAAwB,CACtC,OAAe,EACf,aAA+B,uBAAuB;IAEtD,IAAI,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,CAAC;QACxF,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,kCAAkC;IAChD,eAAe,CAAC,KAAK,EAAE,CAAC;AAC1B,CAAC;AAkBD,SAAS,YAAY,CAAC,KAAsB;IAC1C,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,GAC9G,KAAK,CAAC;IACR,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,kBAAkB,IAAI,uBAAuB,CAAC;IAC3D,MAAM,aAAa,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAEhD,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,YAAY,EAAE,oBAAoB,CAAC,CAAC;YACjG,IAAI,IAAI,CAAC,iBAAiB;gBAAE,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;YACtE,IAAI,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;YAC5B,OAAO;gBACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE;gBACzB,KAAK,EAAE,WAAW;gBAClB,kBAAkB,EAAE,KAAK;gBACzB,YAAY,EAAE,oBAAoB;aACnC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG;YACX,GAAG,KAAK,CAAC,IAAI;YACb,mBAAmB;YACnB,SAAS;YACT,YAAY;YACZ,oBAAoB;YACpB,GAAG,aAAa;SACjB,CAAC;QACF,OAAO;YACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE;YACzB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,uCAAuC;YACtG,kBAAkB,EAAE,KAAK;YACzB,YAAY,EAAE,oBAAoB;SACnC,CAAC;IACJ,CAAC;IAED,oBAAoB;IACpB,IAAI,cAAc,KAAK,WAAW,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG;YACX,GAAG,KAAK,CAAC,IAAI;YACb,gCAAgC;YAChC,YAAY;YACZ,qBAAqB;YACrB,GAAG,aAAa;SACjB,CAAC;QACF,OAAO;YACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE;YACzB,KAAK,EAAE,WAAW;YAClB,kBAAkB,EAAE,KAAK;YACzB,YAAY,EAAE,qBAAqB;SACpC,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,YAAY,EAAE,qBAAqB,CAAC,CAAC;QAC/F,IAAI,IAAI,CAAC,iBAAiB;YAAE,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;QAC5B,MAAM,SAAS,GAAG,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,OAAO,CAAC;QAChE,OAAO;YACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE;YACzB,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM;YAC1C,kBAAkB,EAAE,KAAK;YACzB,YAAY,EAAE,qBAAqB;SACpC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG;QACX,GAAG,KAAK,CAAC,IAAI;QACb,mBAAmB;QACnB,aAAa;QACb,YAAY;QACZ,qBAAqB;QACrB,GAAG,aAAa;KACjB,CAAC;IACF,OAAO;QACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE;QACzB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,6BAA6B;QACtF,kBAAkB,EAAE,KAAK;QACzB,YAAY,EAAE,qBAAqB;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,eAAe,GAAG,+EAA+E,CAAC;AAExG,SAAS,WAAW,CAAC,KAAsB;IACzC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IACxD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAEnC,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC5B,kEAAkE;QAClE,+DAA+D;QAC/D,uEAAuE;QACvE,kEAAkE;QAClE,qEAAqE;QACrE,8DAA8D;QAC9D,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QACvD,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAC7G,CAAC;IAED,IAAI,cAAc,KAAK,WAAW,EAAE,CAAC;QACnC,wEAAwE;QACxE,iEAAiE;QACjE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACzF,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,OAAO,CAAC;IAChE,OAAO;QACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE;QACzB,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM;QAC1C,kBAAkB,EAAE,KAAK;QACzB,IAAI,EAAE,eAAe;KACtB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAsB;IAC1D,IAAI,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO;QAAE,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;IAC/D,yEAAyE;IACzE,+BAA+B;IAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;AAC/E,CAAC;AA4BD,MAAM,aAAa,GAAc;IAC/B,SAAS,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC;IAClE,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;CAC5C,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAU,CAAC;AAClD,IAAI,kBAAkB,GAAG,KAAK,CAAC;AAE/B,SAAS,mBAAmB;IAC1B,IAAI,kBAAkB;QAAE,OAAO;IAC/B,kBAAkB,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QACtB,KAAK,MAAM,IAAI,IAAI,uBAAuB,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;QACH,CAAC;QACD,uBAAuB,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAWD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAmC;IAEnC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,UAAU,EAAE,CAAC;IAClD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACpF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,uBAAuB,CAAC;IACjE,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,aAAa,CAAC;IAEvC,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,qBAAqB,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,KAAK,iBAAiB,CAAC,CAAC;IAC3F,MAAM,oBAAoB,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,KAAK,iBAAiB,CAAC,CAAC;IAE1F,MAAM,EAAE,CAAC,SAAS,CAChB,qBAAqB,EACrB,wBAAwB,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAClF,CAAC;IACF,MAAM,EAAE,CAAC,SAAS,CAChB,oBAAoB,EACpB,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CACvE,CAAC;IACF,0EAA0E;IAC1E,6CAA6C;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC;IACzC,IAAI,OAAO,EAAE,CAAC;QACZ,mBAAmB,EAAE,CAAC;QACtB,uBAAuB,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACnD,uBAAuB,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACpD,CAAC;IAED,OAAO;QACL,qBAAqB;QACrB,oBAAoB;QACpB,KAAK,CAAC,OAAO;YACX,KAAK,MAAM,IAAI,IAAI,CAAC,qBAAqB,EAAE,oBAAoB,CAAC,EAAE,CAAC;gBACjE,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACrC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK;YACtB,MAAM,kBAAkB,GACtB,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACrG,OAAO,qBAAqB,CAAC;gBAC3B,IAAI;gBACJ,KAAK;gBACL,cAAc;gBACd,QAAQ;gBACR,kBAAkB;gBAClB,qBAAqB;gBACrB,oBAAoB;aACrB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAmB;IAClD,qBAAqB,EAAE,EAAE;IACzB,oBAAoB,EAAE,EAAE;IACxB,MAAM,CAAC,KAAK,EAAE,KAAK;QACjB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO;QACL,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF,CAAC"}

package/dist/preflight.d.ts

@@ -0,0 +1,73 @@
+import type { LedgerEvent } from "./decision-ledger.js";
+import type { ProgramManifest } from "./manifest.js";
+/**
+ * The preflight stage: at run start, before baseline verification and any
+ * agent spawn, executes every *pending* prerequisite's `verifyCommand` as a
+ * deterministic, bounded subprocess. Exit zero flips it to `satisfied` (in
+ * memory — the caller decides when to persist); anything else — nonzero
+ * exit, spawn failure, timeout — uniformly means unmet, with a captured
+ * reason, and never throws out of this module. See
+ * `tasks/human-prerequisites/ws-02-*.md` for the full design.
+ */
+/** The wall-clock ceiling on a single prerequisite check. A deterministic
+ *  check that has not answered in this long is treated as unmet, and the
+ *  process tree is killed so it can never outlive the run. A constant, never
+ *  a config key — the charter keeps tuning knobs off the config surface. */
+export declare const PREREQUISITE_TIMEOUT_MS = 60000;
+export interface PrerequisiteRun {
+    exitCode: number;
+    output: string;
+    /** True when the process tree was killed for exceeding the timeout. */
+    timedOut: boolean;
+}
+export type PrerequisiteRunner = (command: string, cwd: string) => Promise<PrerequisiteRun>;
+/**
+ * Builds a bounded, process-tree-killing `PrerequisiteRunner`. Fixing the
+ * timeout inside a `(command, cwd)` runner would leave a timeout test no
+ * choice but to wait out the real production ceiling; this factory keeps the
+ * ceiling a test seam while {@link defaultPrerequisiteRunner} wires the
+ * production constant once.
+ */
+export declare function makePrerequisiteRunner(timeoutMs?: number): PrerequisiteRunner;
+/** The production runner: the 60 s ceiling, wired once. */
+export declare const defaultPrerequisiteRunner: PrerequisiteRunner;
+export interface PrerequisiteCheck {
+    id: string;
+    met: boolean;
+    /** Captured reason when unmet — always non-empty so the report never
+     *  renders a blank line. The tailed verify output on a nonzero exit; on a
+     *  nonzero exit that emitted no output, a fallback naming the exit code;
+     *  the spawn error message (or a generic notice) on a spawn failure; a
+     *  notice naming the ceiling on a timeout. Absent only when met. */
+    reason?: string;
+    /** True when this run's preflight flipped it pending → satisfied. False
+     *  for an already-satisfied prerequisite (not re-run) and for an unmet
+     *  one. */
+    newlySatisfied: boolean;
+}
+export interface PreflightResult {
+    checks: PrerequisiteCheck[];
+    /** Ledger events for the prerequisites this run newly satisfied. The
+     *  caller appends these once its own baseline verification admits the run
+     *  — see run-program.ts's staged-persistence wiring. */
+    events: LedgerEvent[];
+}
+/**
+ * Runs every pending prerequisite's `verifyCommand` once. Mutates
+ * `manifest.prerequisites` in place on a met check (pending → satisfied);
+ * the caller decides when (and whether) to persist that mutation to disk. An
+ * already-`satisfied` prerequisite is never re-run — settled facts stay
+ * settled (SC-06). No `verifyCommand` outcome can throw out of this
+ * function or halt the run (SC-03): a thrown spawn failure is caught here.
+ */
+export declare function runPreflight(args: {
+    manifest: ProgramManifest;
+    cwd: string;
+    runner: PrerequisiteRunner;
+    now: () => Date;
+    /** The run's identity, stamped on each `prerequisite-verified` event. */
+    runId: string;
+    runStartCommit: string | undefined;
+    log: (line: string) => void;
+}): Promise<PreflightResult>;
+//# sourceMappingURL=preflight.d.ts.map

package/dist/preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.d.ts","sourceRoot":"","sources":["../src/preflight.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD;;;;;;;;GAQG;AAEH;;;4EAG4E;AAC5E,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAe9C,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,MAAM,kBAAkB,GAAG,CAC/B,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,KACR,OAAO,CAAC,eAAe,CAAC,CAAC;AAiD9B;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,GAAE,MAAgC,GAC1C,kBAAkB,CAqEpB;AAED,2DAA2D;AAC3D,eAAO,MAAM,yBAAyB,EAAE,kBACd,CAAC;AAE3B,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,OAAO,CAAC;IACb;;;;wEAIoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;eAEW;IACX,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B;;4DAEwD;IACxD,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,QAAQ,EAAE,eAAe,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,kBAAkB,CAAC;IAC3B,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B,GAAG,OAAO,CAAC,eAAe,CAAC,CA0E3B"}