open-multi-agent-kit 0.80.5 → 0.80.6

package/dist/core/harness-control-events.js

@@ -0,0 +1,339 @@
+import { createHash, randomUUID } from "node:crypto";
+import { closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, rmSync, statSync, writeSync, } from "node:fs";
+import { dirname, join, resolve, sep } from "node:path";
+const MAX_EVENT_DEPTH = 6;
+const MAX_EVENT_OBJECT_KEYS = 80;
+const MAX_EVENT_ARRAY_ITEMS = 80;
+const MAX_EVENT_STRING_LENGTH = 2000;
+const REDACTED = "[redacted]";
+const GENESIS_EVENT_HASH = "0".repeat(64);
+const DEFAULT_RUN_ID = "default-run";
+const DEFAULT_SESSION_ID = "sessionless";
+const LOCK_STALE_MS = 30000;
+function isSensitiveKey(key) {
+    return /(?:secret|token|api[_-]?key|authorization|password|credential|private[_-]?key)/i.test(key);
+}
+function redactSensitiveValue(value) {
+    let redacted = value;
+    redacted = redacted.replace(/Bearer\s+[A-Za-z0-9._~+/=-]+/gi, `Bearer ${REDACTED}`);
+    redacted = redacted.replace(/sk-(?:proj-|ant-)?[A-Za-z0-9_-]{16,}/g, REDACTED);
+    redacted = redacted.replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g, REDACTED);
+    redacted = redacted.replace(/-----BEGIN [^-]+PRIVATE KEY-----[\s\S]*?-----END [^-]+PRIVATE KEY-----/g, REDACTED);
+    redacted = redacted.replace(/\b[A-Fa-f0-9]{64,}\b/g, REDACTED);
+    return redacted;
+}
+function truncateString(value) {
+    const redacted = redactSensitiveValue(value);
+    if (redacted.length <= MAX_EVENT_STRING_LENGTH)
+        return redacted;
+    return `${redacted.slice(0, MAX_EVENT_STRING_LENGTH)}…[truncated]`;
+}
+function sanitizeValue(value, depth, seen) {
+    if (value === null)
+        return null;
+    if (typeof value === "string")
+        return truncateString(value);
+    if (typeof value === "number")
+        return Number.isFinite(value) ? value : String(value);
+    if (typeof value === "boolean")
+        return value;
+    if (typeof value === "bigint")
+        return value.toString();
+    if (typeof value === "undefined" || typeof value === "function" || typeof value === "symbol")
+        return String(value);
+    if (depth >= MAX_EVENT_DEPTH)
+        return "[max-depth]";
+    if (Array.isArray(value)) {
+        return value.slice(0, MAX_EVENT_ARRAY_ITEMS).map((entry) => sanitizeValue(entry, depth + 1, seen));
+    }
+    if (value instanceof Date)
+        return value.toISOString();
+    if (value instanceof Error) {
+        return {
+            name: value.name,
+            message: truncateString(value.message),
+        };
+    }
+    if (typeof value === "object") {
+        if (seen.has(value))
+            return "[circular]";
+        seen.add(value);
+        const result = {};
+        for (const [key, entry] of Object.entries(value).slice(0, MAX_EVENT_OBJECT_KEYS)) {
+            result[key] = isSensitiveKey(key) ? REDACTED : sanitizeValue(entry, depth + 1, seen);
+        }
+        seen.delete(value);
+        return result;
+    }
+    return String(value);
+}
+export function sanitizeHarnessControlEventData(data) {
+    const sanitized = sanitizeValue(data ?? {}, 0, new WeakSet());
+    return typeof sanitized === "object" && sanitized !== null && !Array.isArray(sanitized)
+        ? sanitized
+        : { value: sanitized };
+}
+export function canonicalJson(value) {
+    if (value === null)
+        return "null";
+    if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
+        return JSON.stringify(value);
+    }
+    if (Array.isArray(value)) {
+        return `[${value.map((entry) => canonicalJson(entry)).join(",")}]`;
+    }
+    return `{${Object.keys(value)
+        .sort()
+        .map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key] ?? null)}`)
+        .join(",")}}`;
+}
+export function hashCanonical(value) {
+    return createHash("sha256")
+        .update(canonicalJson(sanitizeValue(value, 0, new WeakSet())))
+        .digest("hex");
+}
+function sha256Text(value) {
+    return createHash("sha256").update(value).digest("hex");
+}
+function sha256File(path) {
+    return createHash("sha256").update(readFileSync(path)).digest("hex");
+}
+function isPathWithin(parent, child) {
+    const resolvedParent = resolve(parent);
+    const resolvedChild = resolve(child);
+    return resolvedChild === resolvedParent || resolvedChild.startsWith(`${resolvedParent}${sep}`);
+}
+function isSensitivePath(path) {
+    return /(?:^|[/\\])(?:\.env[^/\\]*|auth\.json|oauth\.json|.*(?:secret|token|credential|private[_-]?key).*)$/i.test(path);
+}
+function defaultAllowedArtifactRoots(cwd, logPath) {
+    return [cwd, dirname(logPath)];
+}
+function createArtifactManifest(artifactRefs, cwd, logPath, allowedArtifactRoots) {
+    if (!artifactRefs || artifactRefs.length === 0)
+        return [];
+    const roots = (allowedArtifactRoots ?? defaultAllowedArtifactRoots(cwd, logPath)).map((root) => resolve(root));
+    return artifactRefs.map((artifactPath) => {
+        const resolvedPath = resolve(cwd, artifactPath);
+        const allowed = roots.some((root) => isPathWithin(root, resolvedPath)) && !isSensitivePath(resolvedPath);
+        if (!allowed)
+            return { path: artifactPath, exists: existsSync(resolvedPath), allowed: false };
+        if (!existsSync(resolvedPath))
+            return { path: artifactPath, exists: false, allowed: true };
+        try {
+            const stats = statSync(resolvedPath);
+            if (!stats.isFile())
+                return { path: artifactPath, exists: true, allowed: true, sizeBytes: stats.size };
+            return {
+                path: artifactPath,
+                exists: true,
+                allowed: true,
+                sizeBytes: stats.size,
+                sha256: sha256File(resolvedPath),
+            };
+        }
+        catch (error) {
+            return {
+                path: artifactPath,
+                exists: existsSync(resolvedPath),
+                allowed: true,
+                error: error instanceof Error ? error.message : String(error),
+            };
+        }
+    });
+}
+export function resolveHarnessControlEventLogPath(options = {}) {
+    if (process.env.OMK_HARNESS_CONTROL_EVENTS === "0")
+        return undefined;
+    if (options.logPath)
+        return options.logPath;
+    if (process.env.OMK_HARNESS_CONTROL_EVENT_LOG)
+        return process.env.OMK_HARNESS_CONTROL_EVENT_LOG;
+    const runId = options.runId ?? DEFAULT_RUN_ID;
+    return join(options.cwd ?? process.cwd(), ".omk", "runs", runId, "harness-control", "events.jsonl");
+}
+function eventHashInput(eventWithoutHash) {
+    return `${canonicalJson(eventWithoutHash)}${eventWithoutHash.previousEventHash}`;
+}
+function computeEventHash(eventWithoutHash) {
+    return sha256Text(eventHashInput(eventWithoutHash));
+}
+function readPreviousEventState(logPath) {
+    if (!existsSync(logPath))
+        return { sequence: 0, eventHash: GENESIS_EVENT_HASH };
+    const lines = readFileSync(logPath, "utf-8")
+        .split("\n")
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0);
+    if (lines.length === 0)
+        return { sequence: 0, eventHash: GENESIS_EVENT_HASH };
+    const parsed = JSON.parse(lines.at(-1));
+    if (parsed.schemaVersion !== "omk.harness-control.event.v2") {
+        return { sequence: 0, eventHash: GENESIS_EVENT_HASH };
+    }
+    if (typeof parsed.sequence !== "number" || typeof parsed.eventHash !== "string") {
+        throw new Error("Previous harness event is missing sequence or eventHash");
+    }
+    return { sequence: parsed.sequence, eventHash: parsed.eventHash };
+}
+function acquireLock(lockPath, timeoutMs) {
+    const start = Date.now();
+    while (true) {
+        try {
+            return openSync(lockPath, "wx", 0o600);
+        }
+        catch (error) {
+            if (existsSync(lockPath)) {
+                try {
+                    const stats = statSync(lockPath);
+                    if (Date.now() - stats.mtimeMs > LOCK_STALE_MS)
+                        rmSync(lockPath, { force: true });
+                }
+                catch { }
+            }
+            if (Date.now() - start >= timeoutMs) {
+                throw error;
+            }
+        }
+    }
+}
+function formatRotationTimestamp(date) {
+    return date.toISOString().replace(/[:.]/g, "-");
+}
+function rotateLedgerIfNeeded(path, maxLedgerBytes, now) {
+    if (!Number.isFinite(maxLedgerBytes) || (maxLedgerBytes ?? 0) <= 0 || !existsSync(path))
+        return undefined;
+    const stats = statSync(path);
+    if (stats.size < Math.floor(maxLedgerBytes ?? 0))
+        return undefined;
+    const rotatedPath = `${path}.${formatRotationTimestamp(now)}.rotated`;
+    renameSync(path, rotatedPath);
+    return rotatedPath;
+}
+function appendJsonLineWithFsync(path, line) {
+    const fd = openSync(path, "a", 0o600);
+    try {
+        writeSync(fd, `${line}\n`, undefined, "utf-8");
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+    try {
+        const dirFd = openSync(dirname(path), "r");
+        try {
+            fsyncSync(dirFd);
+        }
+        finally {
+            closeSync(dirFd);
+        }
+    }
+    catch {
+        // Some platforms/filesystems do not support directory fsync; file fsync above is still mandatory.
+    }
+}
+export function createHarnessControlEvent(kind, status, data = {}, options = {}, previous = { sequence: 0, eventHash: GENESIS_EVENT_HASH }) {
+    const eventId = options.eventId ?? options.id ?? randomUUID();
+    const operationId = options.operationId ?? eventId;
+    const logPath = resolveHarnessControlEventLogPath(options) ?? "";
+    const cwd = options.cwd ?? process.cwd();
+    const sanitizedData = sanitizeHarnessControlEventData(data);
+    const eventWithoutHash = {
+        schemaVersion: "omk.harness-control.event.v2",
+        eventId,
+        runId: options.runId ?? DEFAULT_RUN_ID,
+        sessionId: options.sessionId ?? DEFAULT_SESSION_ID,
+        operationId,
+        causationId: options.causationId ?? null,
+        correlationId: options.correlationId ?? operationId,
+        sequence: previous.sequence + 1,
+        timestamp: (options.now ?? new Date()).toISOString(),
+        kind,
+        status,
+        cwd,
+        beforeStateHash: hashCanonical(options.beforeState ?? null),
+        afterStateHash: hashCanonical(options.afterState ?? null),
+        data: sanitizedData,
+        dataHash: hashCanonical(sanitizedData),
+        artifacts: createArtifactManifest(options.artifactRefs, cwd, logPath, options.allowedArtifactRoots),
+        previousEventHash: previous.eventHash,
+    };
+    return { ...eventWithoutHash, eventHash: computeEventHash(eventWithoutHash) };
+}
+export function recordHarnessControlEvent(kind, status, data = {}, options = {}) {
+    const logPath = resolveHarnessControlEventLogPath(options);
+    if (!logPath)
+        return { ok: false, error: "harness control event logging disabled" };
+    const lockPath = `${logPath}.lock`;
+    let lockFd;
+    try {
+        mkdirSync(dirname(logPath), { recursive: true });
+        lockFd = acquireLock(lockPath, options.lockTimeoutMs ?? 1000);
+        rotateLedgerIfNeeded(logPath, options.maxLedgerBytes, options.now ?? new Date());
+        const previous = readPreviousEventState(logPath);
+        const event = createHarnessControlEvent(kind, status, data, options, previous);
+        appendJsonLineWithFsync(logPath, JSON.stringify(event));
+        return { ok: true, path: logPath, event };
+    }
+    catch (error) {
+        return { ok: false, path: logPath, error: error instanceof Error ? error.message : String(error) };
+    }
+    finally {
+        if (lockFd !== undefined) {
+            try {
+                closeSync(lockFd);
+            }
+            catch { }
+            rmSync(lockPath, { force: true });
+        }
+    }
+}
+function validateEventHash(event) {
+    const { eventHash: _eventHash, ...eventWithoutHash } = event;
+    const expectedEventHash = computeEventHash(eventWithoutHash);
+    if (expectedEventHash !== event.eventHash) {
+        return `event ${event.eventId} hash mismatch`;
+    }
+    if (hashCanonical(event.data) !== event.dataHash) {
+        return `event ${event.eventId} dataHash mismatch`;
+    }
+    return undefined;
+}
+export function verifyHarnessControlLedger(logPath) {
+    const errors = [];
+    const events = [];
+    if (!existsSync(logPath))
+        return { ok: true, events, errors };
+    const lines = readFileSync(logPath, "utf-8")
+        .split("\n")
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0);
+    let previousSequence = 0;
+    let previousEventHash = GENESIS_EVENT_HASH;
+    for (let index = 0; index < lines.length; index++) {
+        try {
+            const event = JSON.parse(lines[index]);
+            events.push(event);
+            if (event.schemaVersion !== "omk.harness-control.event.v2") {
+                errors.push(`line ${index + 1}: unsupported schemaVersion`);
+                continue;
+            }
+            if (event.sequence !== previousSequence + 1) {
+                errors.push(`line ${index + 1}: sequence gap`);
+            }
+            if (event.previousEventHash !== previousEventHash) {
+                errors.push(`line ${index + 1}: previousEventHash mismatch`);
+            }
+            const hashError = validateEventHash(event);
+            if (hashError)
+                errors.push(`line ${index + 1}: ${hashError}`);
+            previousSequence = event.sequence;
+            previousEventHash = event.eventHash;
+        }
+        catch (error) {
+            errors.push(`line ${index + 1}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    return { ok: errors.length === 0, events, errors };
+}
+//# sourceMappingURL=harness-control-events.js.map

package/dist/core/harness-control-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-control-events.js","sourceRoot":"","sources":["../../src/core/harness-control-events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACN,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,MAAM,EACN,QAAQ,EACR,SAAS,GACT,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AA+FxD,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,kBAAkB,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC1C,MAAM,cAAc,GAAG,aAAa,CAAC;AACrC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AACzC,MAAM,aAAa,GAAG,KAAK,CAAC;AAE5B,SAAS,cAAc,CAAC,GAAW,EAAW;IAC7C,OAAO,iFAAiF,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAAA,CACnG;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAU;IACpD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,gCAAgC,EAAE,UAAU,QAAQ,EAAE,CAAC,CAAC;IACpF,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,uCAAuC,EAAE,QAAQ,CAAC,CAAC;IAC/E,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,wDAAwD,EAAE,QAAQ,CAAC,CAAC;IAChG,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,yEAAyE,EAAE,QAAQ,CAAC,CAAC;IACjH,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,uBAAuB,EAAE,QAAQ,CAAC,CAAC;IAC/D,OAAO,QAAQ,CAAC;AAAA,CAChB;AAED,SAAS,cAAc,CAAC,KAAa,EAAU;IAC9C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,MAAM,IAAI,uBAAuB;QAAE,OAAO,QAAQ,CAAC;IAChE,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,gBAAc,CAAC;AAAA,CACnE;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa,EAAE,IAAqB,EAAa;IACvF,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrF,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,WAAW,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACnH,IAAI,KAAK,IAAI,eAAe;QAAE,OAAO,aAAa,CAAC;IAEnD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACpG,CAAC;IAED,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC5B,OAAO;YACN,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;SACtC,CAAC;IACH,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,YAAY,CAAC;QACzC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,MAAM,GAAe,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,EAAE,CAAC;YAClF,MAAM,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,MAAM,CAAC;IACf,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CACrB;AAED,MAAM,UAAU,+BAA+B,CAAC,IAAa,EAAc;IAC1E,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,OAAO,EAAU,CAAC,CAAC;IACtE,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QACtF,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAAA,CACxB;AAED,MAAM,UAAU,aAAa,CAAC,KAAgB,EAAU;IACvD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1F,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SAC3B,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;SAC3E,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAAA,CACf;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAU;IACrD,OAAO,UAAU,CAAC,QAAQ,CAAC;SACzB,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,OAAO,EAAU,CAAC,CAAC,CAAC;SACrE,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CAChB;AAED,SAAS,UAAU,CAAC,KAAa,EAAU;IAC1C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CACxD;AAED,SAAS,UAAU,CAAC,IAAY,EAAU;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CACrE;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,KAAa,EAAW;IAC7D,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,aAAa,KAAK,cAAc,IAAI,aAAa,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,GAAG,EAAE,CAAC,CAAC;AAAA,CAC/F;AAED,SAAS,eAAe,CAAC,IAAY,EAAW;IAC/C,OAAO,sGAAsG,CAAC,IAAI,CACjH,IAAI,CACJ,CAAC;AAAA,CACF;AAED,SAAS,2BAA2B,CAAC,GAAW,EAAE,OAAe,EAAY;IAC5E,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAAA,CAC/B;AAED,SAAS,sBAAsB,CAC9B,YAAkC,EAClC,GAAW,EACX,OAAe,EACf,oBAA0C,EACF;IACxC,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1D,MAAM,KAAK,GAAG,CAAC,oBAAoB,IAAI,2BAA2B,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/G,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QACzG,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9F,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3F,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YACvG,OAAO;gBACN,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,KAAK,CAAC,IAAI;gBACrB,MAAM,EAAE,UAAU,CAAC,YAAY,CAAC;aAChC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO;gBACN,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,UAAU,CAAC,YAAY,CAAC;gBAChC,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC;QACH,CAAC;IAAA,CACD,CAAC,CAAC;AAAA,CACH;AAED,MAAM,UAAU,iCAAiC,CAAC,OAAO,GAA+B,EAAE,EAAsB;IAC/G,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IACrE,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;IAChG,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC;IAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,cAAc,CAAC,CAAC;AAAA,CACpG;AAED,SAAS,cAAc,CAAC,gBAAwD,EAAU;IACzF,OAAO,GAAG,aAAa,CAAC,gBAAyC,CAAC,GAAG,gBAAgB,CAAC,iBAAiB,EAAE,CAAC;AAAA,CAC1G;AAED,SAAS,gBAAgB,CAAC,gBAAwD,EAAU;IAC3F,OAAO,UAAU,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAAA,CACpD;AAED,SAAS,sBAAsB,CAAC,OAAe,EAAsB;IACpE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAChF,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;SAC1C,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAiC,CAAC;IACzE,IAAI,MAAM,CAAC,aAAa,KAAK,8BAA8B,EAAE,CAAC;QAC7D,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;AAAA,CAClE;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,SAAiB,EAAU;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,OAAO,IAAI,EAAE,CAAC;QACb,IAAI,CAAC;YACJ,OAAO,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBACJ,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACjC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,GAAG,aAAa;wBAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnF,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACX,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,SAAS,EAAE,CAAC;gBACrC,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;IACF,CAAC;AAAA,CACD;AAED,SAAS,uBAAuB,CAAC,IAAU,EAAU;IACpD,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AAAA,CAChD;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAE,cAAkC,EAAE,GAAS,EAAsB;IAC9G,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1G,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACnE,MAAM,WAAW,GAAG,GAAG,IAAI,IAAI,uBAAuB,CAAC,GAAG,CAAC,UAAU,CAAC;IACtE,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC9B,OAAO,WAAW,CAAC;AAAA,CACnB;AAED,SAAS,uBAAuB,CAAC,IAAY,EAAE,IAAY,EAAQ;IAClE,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC;QACJ,SAAS,CAAC,EAAE,EAAE,GAAG,IAAI,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC/C,SAAS,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;YAAS,CAAC;QACV,SAAS,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC;YACJ,SAAS,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;gBAAS,CAAC;YACV,SAAS,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,kGAAkG;IACnG,CAAC;AAAA,CACD;AAED,MAAM,UAAU,yBAAyB,CACxC,IAA6B,EAC7B,MAAiC,EACjC,IAAI,GAAY,EAAE,EAClB,OAAO,GAA+B,EAAE,EACxC,QAAQ,GAAuB,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,EACvD;IACtB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,EAAE,IAAI,UAAU,EAAE,CAAC;IAC9D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC;IACnD,MAAM,OAAO,GAAG,iCAAiC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACjE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,aAAa,GAAG,+BAA+B,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,gBAAgB,GAA2C;QAChE,aAAa,EAAE,8BAA8B;QAC7C,OAAO;QACP,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,cAAc;QACtC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,kBAAkB;QAClD,WAAW;QACX,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;QACxC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,WAAW;QACnD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,GAAG,CAAC;QAC/B,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;QACpD,IAAI;QACJ,MAAM;QACN,GAAG;QACH,eAAe,EAAE,aAAa,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;QAC3D,cAAc,EAAE,aAAa,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;QACzD,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC;QACtC,SAAS,EAAE,sBAAsB,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,oBAAoB,CAAC;QACnG,iBAAiB,EAAE,QAAQ,CAAC,SAAS;KACrC,CAAC;IACF,OAAO,EAAE,GAAG,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,CAAC;AAAA,CAC9E;AAED,MAAM,UAAU,yBAAyB,CACxC,IAA6B,EAC7B,MAAiC,EACjC,IAAI,GAAY,EAAE,EAClB,OAAO,GAA+B,EAAE,EACP;IACjC,MAAM,OAAO,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;IACpF,MAAM,QAAQ,GAAG,GAAG,OAAO,OAAO,CAAC;IACnC,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACJ,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC;QAC9D,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QACjF,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/E,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACpG,CAAC;YAAS,CAAC;QACV,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACJ,SAAS,CAAC,MAAM,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACV,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,CAAC;IACF,CAAC;AAAA,CACD;AAED,SAAS,iBAAiB,CAAC,KAA0B,EAAsB;IAC1E,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,gBAAgB,EAAE,GAAG,KAAK,CAAC;IAC7D,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IAC7D,IAAI,iBAAiB,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QAC3C,OAAO,SAAS,KAAK,CAAC,OAAO,gBAAgB,CAAC;IAC/C,CAAC;IACD,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;QAClD,OAAO,SAAS,KAAK,CAAC,OAAO,oBAAoB,CAAC;IACnD,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAe,EAA0C;IACnG,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAA0B,EAAE,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9D,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;SAC1C,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpC,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,iBAAiB,GAAG,kBAAkB,CAAC;IAC3C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAE,CAAwB,CAAC;YAC/D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,IAAI,KAAK,CAAC,aAAa,KAAK,8BAA8B,EAAE,CAAC;gBAC5D,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,6BAA6B,CAAC,CAAC;gBAC5D,SAAS;YACV,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB,GAAG,CAAC,EAAE,CAAC;gBAC7C,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,iBAAiB,EAAE,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,8BAA8B,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC,CAAC;YAC9D,gBAAgB,GAAG,KAAK,CAAC,QAAQ,CAAC;YAClC,iBAAiB,GAAG,KAAK,CAAC,SAAS,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;IACF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAAA,CACnD","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport {\n\tcloseSync,\n\texistsSync,\n\tfsyncSync,\n\tmkdirSync,\n\topenSync,\n\treadFileSync,\n\trenameSync,\n\trmSync,\n\tstatSync,\n\twriteSync,\n} from \"node:fs\";\nimport { dirname, join, resolve, sep } from \"node:path\";\n\nexport type HarnessControlEventStatus =\n\t| \"prepared\"\n\t| \"started\"\n\t| \"applying\"\n\t| \"verifying\"\n\t| \"completed\"\n\t| \"failed\"\n\t| \"blocked\"\n\t| \"rolled_back\"\n\t| \"in_doubt\";\n\nexport type HarnessControlEventKind =\n\t| \"compaction.summary.generated\"\n\t| \"extension.migration.plan\"\n\t| \"extension.migration.apply\"\n\t| \"interactive.model_thinking.commit\"\n\t| \"interactive.theme.apply\"\n\t| \"keybinding.conflict\"\n\t| \"spec.compile\"\n\t| \"spec.verify\"\n\t| (string & {});\n\nexport type JsonValue = string | number | boolean | null | JsonValue[] | { [key: string]: JsonValue };\nexport type JsonObject = { [key: string]: JsonValue };\n\nexport interface HarnessControlArtifactManifestEntry {\n\tpath: string;\n\texists: boolean;\n\tallowed: boolean;\n\tsizeBytes?: number;\n\tsha256?: string;\n\terror?: string;\n}\n\nexport interface HarnessControlEvent {\n\tschemaVersion: \"omk.harness-control.event.v2\";\n\teventId: string;\n\trunId: string;\n\tsessionId: string;\n\toperationId: string;\n\tcausationId: string | null;\n\tcorrelationId: string;\n\tsequence: number;\n\ttimestamp: string;\n\tkind: HarnessControlEventKind;\n\tstatus: HarnessControlEventStatus;\n\tcwd: string;\n\tbeforeStateHash: string;\n\tafterStateHash: string;\n\tdata: JsonObject;\n\tdataHash: string;\n\tartifacts: HarnessControlArtifactManifestEntry[];\n\tpreviousEventHash: string;\n\teventHash: string;\n}\n\nexport interface HarnessControlEventWriteResult {\n\tok: boolean;\n\tpath?: string;\n\tevent?: HarnessControlEvent;\n\terror?: string;\n}\n\nexport interface HarnessControlEventOptions {\n\tcwd?: string;\n\tlogPath?: string;\n\tnow?: Date;\n\tid?: string;\n\teventId?: string;\n\trunId?: string;\n\tsessionId?: string;\n\toperationId?: string;\n\tcausationId?: string | null;\n\tcorrelationId?: string;\n\tbeforeState?: unknown;\n\tafterState?: unknown;\n\tartifactRefs?: string[];\n\tallowedArtifactRoots?: string[];\n\tlockTimeoutMs?: number;\n\tmaxLedgerBytes?: number;\n}\n\nexport interface HarnessControlLedgerVerificationResult {\n\tok: boolean;\n\tevents: HarnessControlEvent[];\n\terrors: string[];\n}\n\ninterface PreviousEventState {\n\tsequence: number;\n\teventHash: string;\n}\n\nconst MAX_EVENT_DEPTH = 6;\nconst MAX_EVENT_OBJECT_KEYS = 80;\nconst MAX_EVENT_ARRAY_ITEMS = 80;\nconst MAX_EVENT_STRING_LENGTH = 2000;\nconst REDACTED = \"[redacted]\";\nconst GENESIS_EVENT_HASH = \"0\".repeat(64);\nconst DEFAULT_RUN_ID = \"default-run\";\nconst DEFAULT_SESSION_ID = \"sessionless\";\nconst LOCK_STALE_MS = 30000;\n\nfunction isSensitiveKey(key: string): boolean {\n\treturn /(?:secret|token|api[_-]?key|authorization|password|credential|private[_-]?key)/i.test(key);\n}\n\nfunction redactSensitiveValue(value: string): string {\n\tlet redacted = value;\n\tredacted = redacted.replace(/Bearer\\s+[A-Za-z0-9._~+/=-]+/gi, `Bearer ${REDACTED}`);\n\tredacted = redacted.replace(/sk-(?:proj-|ant-)?[A-Za-z0-9_-]{16,}/g, REDACTED);\n\tredacted = redacted.replace(/\\beyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\b/g, REDACTED);\n\tredacted = redacted.replace(/-----BEGIN [^-]+PRIVATE KEY-----[\\s\\S]*?-----END [^-]+PRIVATE KEY-----/g, REDACTED);\n\tredacted = redacted.replace(/\\b[A-Fa-f0-9]{64,}\\b/g, REDACTED);\n\treturn redacted;\n}\n\nfunction truncateString(value: string): string {\n\tconst redacted = redactSensitiveValue(value);\n\tif (redacted.length <= MAX_EVENT_STRING_LENGTH) return redacted;\n\treturn `${redacted.slice(0, MAX_EVENT_STRING_LENGTH)}…[truncated]`;\n}\n\nfunction sanitizeValue(value: unknown, depth: number, seen: WeakSet<object>): JsonValue {\n\tif (value === null) return null;\n\tif (typeof value === \"string\") return truncateString(value);\n\tif (typeof value === \"number\") return Number.isFinite(value) ? value : String(value);\n\tif (typeof value === \"boolean\") return value;\n\tif (typeof value === \"bigint\") return value.toString();\n\tif (typeof value === \"undefined\" || typeof value === \"function\" || typeof value === \"symbol\") return String(value);\n\tif (depth >= MAX_EVENT_DEPTH) return \"[max-depth]\";\n\n\tif (Array.isArray(value)) {\n\t\treturn value.slice(0, MAX_EVENT_ARRAY_ITEMS).map((entry) => sanitizeValue(entry, depth + 1, seen));\n\t}\n\n\tif (value instanceof Date) return value.toISOString();\n\tif (value instanceof Error) {\n\t\treturn {\n\t\t\tname: value.name,\n\t\t\tmessage: truncateString(value.message),\n\t\t};\n\t}\n\n\tif (typeof value === \"object\") {\n\t\tif (seen.has(value)) return \"[circular]\";\n\t\tseen.add(value);\n\t\tconst result: JsonObject = {};\n\t\tfor (const [key, entry] of Object.entries(value).slice(0, MAX_EVENT_OBJECT_KEYS)) {\n\t\t\tresult[key] = isSensitiveKey(key) ? REDACTED : sanitizeValue(entry, depth + 1, seen);\n\t\t}\n\t\tseen.delete(value);\n\t\treturn result;\n\t}\n\n\treturn String(value);\n}\n\nexport function sanitizeHarnessControlEventData(data: unknown): JsonObject {\n\tconst sanitized = sanitizeValue(data ?? {}, 0, new WeakSet<object>());\n\treturn typeof sanitized === \"object\" && sanitized !== null && !Array.isArray(sanitized)\n\t\t? sanitized\n\t\t: { value: sanitized };\n}\n\nexport function canonicalJson(value: JsonValue): string {\n\tif (value === null) return \"null\";\n\tif (typeof value === \"string\" || typeof value === \"number\" || typeof value === \"boolean\") {\n\t\treturn JSON.stringify(value);\n\t}\n\tif (Array.isArray(value)) {\n\t\treturn `[${value.map((entry) => canonicalJson(entry)).join(\",\")}]`;\n\t}\n\treturn `{${Object.keys(value)\n\t\t.sort()\n\t\t.map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key] ?? null)}`)\n\t\t.join(\",\")}}`;\n}\n\nexport function hashCanonical(value: unknown): string {\n\treturn createHash(\"sha256\")\n\t\t.update(canonicalJson(sanitizeValue(value, 0, new WeakSet<object>())))\n\t\t.digest(\"hex\");\n}\n\nfunction sha256Text(value: string): string {\n\treturn createHash(\"sha256\").update(value).digest(\"hex\");\n}\n\nfunction sha256File(path: string): string {\n\treturn createHash(\"sha256\").update(readFileSync(path)).digest(\"hex\");\n}\n\nfunction isPathWithin(parent: string, child: string): boolean {\n\tconst resolvedParent = resolve(parent);\n\tconst resolvedChild = resolve(child);\n\treturn resolvedChild === resolvedParent || resolvedChild.startsWith(`${resolvedParent}${sep}`);\n}\n\nfunction isSensitivePath(path: string): boolean {\n\treturn /(?:^|[/\\\\])(?:\\.env[^/\\\\]*|auth\\.json|oauth\\.json|.*(?:secret|token|credential|private[_-]?key).*)$/i.test(\n\t\tpath,\n\t);\n}\n\nfunction defaultAllowedArtifactRoots(cwd: string, logPath: string): string[] {\n\treturn [cwd, dirname(logPath)];\n}\n\nfunction createArtifactManifest(\n\tartifactRefs: string[] | undefined,\n\tcwd: string,\n\tlogPath: string,\n\tallowedArtifactRoots: string[] | undefined,\n): HarnessControlArtifactManifestEntry[] {\n\tif (!artifactRefs || artifactRefs.length === 0) return [];\n\tconst roots = (allowedArtifactRoots ?? defaultAllowedArtifactRoots(cwd, logPath)).map((root) => resolve(root));\n\treturn artifactRefs.map((artifactPath) => {\n\t\tconst resolvedPath = resolve(cwd, artifactPath);\n\t\tconst allowed = roots.some((root) => isPathWithin(root, resolvedPath)) && !isSensitivePath(resolvedPath);\n\t\tif (!allowed) return { path: artifactPath, exists: existsSync(resolvedPath), allowed: false };\n\t\tif (!existsSync(resolvedPath)) return { path: artifactPath, exists: false, allowed: true };\n\t\ttry {\n\t\t\tconst stats = statSync(resolvedPath);\n\t\t\tif (!stats.isFile()) return { path: artifactPath, exists: true, allowed: true, sizeBytes: stats.size };\n\t\t\treturn {\n\t\t\t\tpath: artifactPath,\n\t\t\t\texists: true,\n\t\t\t\tallowed: true,\n\t\t\t\tsizeBytes: stats.size,\n\t\t\t\tsha256: sha256File(resolvedPath),\n\t\t\t};\n\t\t} catch (error) {\n\t\t\treturn {\n\t\t\t\tpath: artifactPath,\n\t\t\t\texists: existsSync(resolvedPath),\n\t\t\t\tallowed: true,\n\t\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t\t};\n\t\t}\n\t});\n}\n\nexport function resolveHarnessControlEventLogPath(options: HarnessControlEventOptions = {}): string | undefined {\n\tif (process.env.OMK_HARNESS_CONTROL_EVENTS === \"0\") return undefined;\n\tif (options.logPath) return options.logPath;\n\tif (process.env.OMK_HARNESS_CONTROL_EVENT_LOG) return process.env.OMK_HARNESS_CONTROL_EVENT_LOG;\n\tconst runId = options.runId ?? DEFAULT_RUN_ID;\n\treturn join(options.cwd ?? process.cwd(), \".omk\", \"runs\", runId, \"harness-control\", \"events.jsonl\");\n}\n\nfunction eventHashInput(eventWithoutHash: Omit<HarnessControlEvent, \"eventHash\">): string {\n\treturn `${canonicalJson(eventWithoutHash as unknown as JsonObject)}${eventWithoutHash.previousEventHash}`;\n}\n\nfunction computeEventHash(eventWithoutHash: Omit<HarnessControlEvent, \"eventHash\">): string {\n\treturn sha256Text(eventHashInput(eventWithoutHash));\n}\n\nfunction readPreviousEventState(logPath: string): PreviousEventState {\n\tif (!existsSync(logPath)) return { sequence: 0, eventHash: GENESIS_EVENT_HASH };\n\tconst lines = readFileSync(logPath, \"utf-8\")\n\t\t.split(\"\\n\")\n\t\t.map((line) => line.trim())\n\t\t.filter((line) => line.length > 0);\n\tif (lines.length === 0) return { sequence: 0, eventHash: GENESIS_EVENT_HASH };\n\tconst parsed = JSON.parse(lines.at(-1)!) as Partial<HarnessControlEvent>;\n\tif (parsed.schemaVersion !== \"omk.harness-control.event.v2\") {\n\t\treturn { sequence: 0, eventHash: GENESIS_EVENT_HASH };\n\t}\n\tif (typeof parsed.sequence !== \"number\" || typeof parsed.eventHash !== \"string\") {\n\t\tthrow new Error(\"Previous harness event is missing sequence or eventHash\");\n\t}\n\treturn { sequence: parsed.sequence, eventHash: parsed.eventHash };\n}\n\nfunction acquireLock(lockPath: string, timeoutMs: number): number {\n\tconst start = Date.now();\n\twhile (true) {\n\t\ttry {\n\t\t\treturn openSync(lockPath, \"wx\", 0o600);\n\t\t} catch (error) {\n\t\t\tif (existsSync(lockPath)) {\n\t\t\t\ttry {\n\t\t\t\t\tconst stats = statSync(lockPath);\n\t\t\t\t\tif (Date.now() - stats.mtimeMs > LOCK_STALE_MS) rmSync(lockPath, { force: true });\n\t\t\t\t} catch {}\n\t\t\t}\n\t\t\tif (Date.now() - start >= timeoutMs) {\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t}\n\t}\n}\n\nfunction formatRotationTimestamp(date: Date): string {\n\treturn date.toISOString().replace(/[:.]/g, \"-\");\n}\n\nfunction rotateLedgerIfNeeded(path: string, maxLedgerBytes: number | undefined, now: Date): string | undefined {\n\tif (!Number.isFinite(maxLedgerBytes) || (maxLedgerBytes ?? 0) <= 0 || !existsSync(path)) return undefined;\n\tconst stats = statSync(path);\n\tif (stats.size < Math.floor(maxLedgerBytes ?? 0)) return undefined;\n\tconst rotatedPath = `${path}.${formatRotationTimestamp(now)}.rotated`;\n\trenameSync(path, rotatedPath);\n\treturn rotatedPath;\n}\n\nfunction appendJsonLineWithFsync(path: string, line: string): void {\n\tconst fd = openSync(path, \"a\", 0o600);\n\ttry {\n\t\twriteSync(fd, `${line}\\n`, undefined, \"utf-8\");\n\t\tfsyncSync(fd);\n\t} finally {\n\t\tcloseSync(fd);\n\t}\n\ttry {\n\t\tconst dirFd = openSync(dirname(path), \"r\");\n\t\ttry {\n\t\t\tfsyncSync(dirFd);\n\t\t} finally {\n\t\t\tcloseSync(dirFd);\n\t\t}\n\t} catch {\n\t\t// Some platforms/filesystems do not support directory fsync; file fsync above is still mandatory.\n\t}\n}\n\nexport function createHarnessControlEvent(\n\tkind: HarnessControlEventKind,\n\tstatus: HarnessControlEventStatus,\n\tdata: unknown = {},\n\toptions: HarnessControlEventOptions = {},\n\tprevious: PreviousEventState = { sequence: 0, eventHash: GENESIS_EVENT_HASH },\n): HarnessControlEvent {\n\tconst eventId = options.eventId ?? options.id ?? randomUUID();\n\tconst operationId = options.operationId ?? eventId;\n\tconst logPath = resolveHarnessControlEventLogPath(options) ?? \"\";\n\tconst cwd = options.cwd ?? process.cwd();\n\tconst sanitizedData = sanitizeHarnessControlEventData(data);\n\tconst eventWithoutHash: Omit<HarnessControlEvent, \"eventHash\"> = {\n\t\tschemaVersion: \"omk.harness-control.event.v2\",\n\t\teventId,\n\t\trunId: options.runId ?? DEFAULT_RUN_ID,\n\t\tsessionId: options.sessionId ?? DEFAULT_SESSION_ID,\n\t\toperationId,\n\t\tcausationId: options.causationId ?? null,\n\t\tcorrelationId: options.correlationId ?? operationId,\n\t\tsequence: previous.sequence + 1,\n\t\ttimestamp: (options.now ?? new Date()).toISOString(),\n\t\tkind,\n\t\tstatus,\n\t\tcwd,\n\t\tbeforeStateHash: hashCanonical(options.beforeState ?? null),\n\t\tafterStateHash: hashCanonical(options.afterState ?? null),\n\t\tdata: sanitizedData,\n\t\tdataHash: hashCanonical(sanitizedData),\n\t\tartifacts: createArtifactManifest(options.artifactRefs, cwd, logPath, options.allowedArtifactRoots),\n\t\tpreviousEventHash: previous.eventHash,\n\t};\n\treturn { ...eventWithoutHash, eventHash: computeEventHash(eventWithoutHash) };\n}\n\nexport function recordHarnessControlEvent(\n\tkind: HarnessControlEventKind,\n\tstatus: HarnessControlEventStatus,\n\tdata: unknown = {},\n\toptions: HarnessControlEventOptions = {},\n): HarnessControlEventWriteResult {\n\tconst logPath = resolveHarnessControlEventLogPath(options);\n\tif (!logPath) return { ok: false, error: \"harness control event logging disabled\" };\n\tconst lockPath = `${logPath}.lock`;\n\tlet lockFd: number | undefined;\n\ttry {\n\t\tmkdirSync(dirname(logPath), { recursive: true });\n\t\tlockFd = acquireLock(lockPath, options.lockTimeoutMs ?? 1000);\n\t\trotateLedgerIfNeeded(logPath, options.maxLedgerBytes, options.now ?? new Date());\n\t\tconst previous = readPreviousEventState(logPath);\n\t\tconst event = createHarnessControlEvent(kind, status, data, options, previous);\n\t\tappendJsonLineWithFsync(logPath, JSON.stringify(event));\n\t\treturn { ok: true, path: logPath, event };\n\t} catch (error) {\n\t\treturn { ok: false, path: logPath, error: error instanceof Error ? error.message : String(error) };\n\t} finally {\n\t\tif (lockFd !== undefined) {\n\t\t\ttry {\n\t\t\t\tcloseSync(lockFd);\n\t\t\t} catch {}\n\t\t\trmSync(lockPath, { force: true });\n\t\t}\n\t}\n}\n\nfunction validateEventHash(event: HarnessControlEvent): string | undefined {\n\tconst { eventHash: _eventHash, ...eventWithoutHash } = event;\n\tconst expectedEventHash = computeEventHash(eventWithoutHash);\n\tif (expectedEventHash !== event.eventHash) {\n\t\treturn `event ${event.eventId} hash mismatch`;\n\t}\n\tif (hashCanonical(event.data) !== event.dataHash) {\n\t\treturn `event ${event.eventId} dataHash mismatch`;\n\t}\n\treturn undefined;\n}\n\nexport function verifyHarnessControlLedger(logPath: string): HarnessControlLedgerVerificationResult {\n\tconst errors: string[] = [];\n\tconst events: HarnessControlEvent[] = [];\n\tif (!existsSync(logPath)) return { ok: true, events, errors };\n\tconst lines = readFileSync(logPath, \"utf-8\")\n\t\t.split(\"\\n\")\n\t\t.map((line) => line.trim())\n\t\t.filter((line) => line.length > 0);\n\tlet previousSequence = 0;\n\tlet previousEventHash = GENESIS_EVENT_HASH;\n\tfor (let index = 0; index < lines.length; index++) {\n\t\ttry {\n\t\t\tconst event = JSON.parse(lines[index]!) as HarnessControlEvent;\n\t\t\tevents.push(event);\n\t\t\tif (event.schemaVersion !== \"omk.harness-control.event.v2\") {\n\t\t\t\terrors.push(`line ${index + 1}: unsupported schemaVersion`);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (event.sequence !== previousSequence + 1) {\n\t\t\t\terrors.push(`line ${index + 1}: sequence gap`);\n\t\t\t}\n\t\t\tif (event.previousEventHash !== previousEventHash) {\n\t\t\t\terrors.push(`line ${index + 1}: previousEventHash mismatch`);\n\t\t\t}\n\t\t\tconst hashError = validateEventHash(event);\n\t\t\tif (hashError) errors.push(`line ${index + 1}: ${hashError}`);\n\t\t\tpreviousSequence = event.sequence;\n\t\t\tpreviousEventHash = event.eventHash;\n\t\t} catch (error) {\n\t\t\terrors.push(`line ${index + 1}: ${error instanceof Error ? error.message : String(error)}`);\n\t\t}\n\t}\n\treturn { ok: errors.length === 0, events, errors };\n}\n"]}

package/dist/core/harness-control-replay.d.ts

@@ -0,0 +1,26 @@
+import type { HarnessControlEvent, HarnessControlEventStatus } from "./harness-control-events.ts";
+export interface HarnessControlOperationReplay {
+    operationId: string;
+    kind: string;
+    started: boolean;
+    terminalStatus?: HarnessControlEventStatus;
+    terminalEventIds: string[];
+    eventIds: string[];
+    sequenceRange: [number, number];
+    stateTransitions: Array<{
+        beforeStateHash: string;
+        afterStateHash: string;
+    }>;
+    finalStateHash?: string;
+}
+export interface HarnessControlReplayReport {
+    ok: boolean;
+    events: HarnessControlEvent[];
+    operations: HarnessControlOperationReplay[];
+    reconstructedStateHash: string;
+    errors: string[];
+    warnings: string[];
+}
+export declare function replayHarnessControlEvents(events: readonly HarnessControlEvent[]): HarnessControlReplayReport;
+export declare function verifyHarnessControlReplay(logPath: string): HarnessControlReplayReport;
+//# sourceMappingURL=harness-control-replay.d.ts.map

package/dist/core/harness-control-replay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-control-replay.d.ts","sourceRoot":"","sources":["../../src/core/harness-control-replay.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAGlG,MAAM,WAAW,6BAA6B;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,yBAAyB,CAAC;IAC3C,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,gBAAgB,EAAE,KAAK,CAAC;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IAC1C,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,UAAU,EAAE,6BAA6B,EAAE,CAAC;IAC5C,sBAAsB,EAAE,MAAM,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AA2HD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,SAAS,mBAAmB,EAAE,GAAG,0BAA0B,CAoC7G;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,0BAA0B,CAWtF","sourcesContent":["import type { HarnessControlEvent, HarnessControlEventStatus } from \"./harness-control-events.ts\";\nimport { hashCanonical, verifyHarnessControlLedger } from \"./harness-control-events.ts\";\n\nexport interface HarnessControlOperationReplay {\n\toperationId: string;\n\tkind: string;\n\tstarted: boolean;\n\tterminalStatus?: HarnessControlEventStatus;\n\tterminalEventIds: string[];\n\teventIds: string[];\n\tsequenceRange: [number, number];\n\tstateTransitions: Array<{ beforeStateHash: string; afterStateHash: string }>;\n\tfinalStateHash?: string;\n}\n\nexport interface HarnessControlReplayReport {\n\tok: boolean;\n\tevents: HarnessControlEvent[];\n\toperations: HarnessControlOperationReplay[];\n\treconstructedStateHash: string;\n\terrors: string[];\n\twarnings: string[];\n}\n\nconst TERMINAL_STATUSES = new Set<HarnessControlEventStatus>([\n\t\"completed\",\n\t\"failed\",\n\t\"blocked\",\n\t\"rolled_back\",\n\t\"in_doubt\",\n]);\n\nconst NON_TERMINAL_STATUS_ORDER = new Map<HarnessControlEventStatus, number>([\n\t[\"prepared\", 0],\n\t[\"started\", 1],\n\t[\"applying\", 2],\n\t[\"verifying\", 3],\n]);\n\nfunction isTerminalStatus(status: HarnessControlEventStatus): boolean {\n\treturn TERMINAL_STATUSES.has(status);\n}\n\nfunction createOperationReplay(operationId: string, events: HarnessControlEvent[]): HarnessControlOperationReplay {\n\tconst sortedEvents = [...events].sort((a, b) => a.sequence - b.sequence);\n\tconst terminalEvents = sortedEvents.filter((event) => isTerminalStatus(event.status));\n\tconst terminal = terminalEvents.at(-1);\n\treturn {\n\t\toperationId,\n\t\tkind: sortedEvents[0]?.kind ?? \"unknown\",\n\t\tstarted: sortedEvents.some((event) => event.status === \"started\"),\n\t\tterminalStatus: terminal?.status,\n\t\tterminalEventIds: terminalEvents.map((event) => event.eventId),\n\t\teventIds: sortedEvents.map((event) => event.eventId),\n\t\tsequenceRange: [sortedEvents[0]?.sequence ?? 0, sortedEvents.at(-1)?.sequence ?? 0],\n\t\tstateTransitions: sortedEvents.map((event) => ({\n\t\t\tbeforeStateHash: event.beforeStateHash,\n\t\t\tafterStateHash: event.afterStateHash,\n\t\t})),\n\t\tfinalStateHash: terminal?.afterStateHash ?? sortedEvents.at(-1)?.afterStateHash,\n\t};\n}\n\nfunction validateUniqueEventIds(events: readonly HarnessControlEvent[]): string[] {\n\tconst errors: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const event of events) {\n\t\tif (seen.has(event.eventId)) errors.push(`event ${event.eventId} is duplicated`);\n\t\tseen.add(event.eventId);\n\t}\n\treturn errors;\n}\n\nfunction validateCausation(events: readonly HarnessControlEvent[]): string[] {\n\tconst errors: string[] = [];\n\tconst byId = new Map(events.map((event) => [event.eventId, event]));\n\tfor (const event of events) {\n\t\tif (!event.causationId) continue;\n\t\tconst causationEvent = byId.get(event.causationId);\n\t\tif (\n\t\t\t!causationEvent ||\n\t\t\tcausationEvent.sequence >= event.sequence ||\n\t\t\tcausationEvent.correlationId !== event.correlationId\n\t\t) {\n\t\t\terrors.push(\n\t\t\t\t`event causation ${event.causationId} for operation ${event.operationId} does not reference an earlier event`,\n\t\t\t);\n\t\t}\n\t}\n\treturn errors;\n}\n\nfunction reconstructHarnessStateHash(operations: readonly HarnessControlOperationReplay[]): string {\n\treturn hashCanonical(\n\t\toperations.map((operation) => ({\n\t\t\toperationId: operation.operationId,\n\t\t\tkind: operation.kind,\n\t\t\tfinalStateHash: operation.finalStateHash,\n\t\t\tterminalStatus: operation.terminalStatus,\n\t\t})),\n\t);\n}\n\nfunction validateOperationStateMachine(\n\toperation: HarnessControlOperationReplay,\n\tevents: HarnessControlEvent[],\n): string[] {\n\tconst errors: string[] = [];\n\tconst sortedEvents = [...events].sort((a, b) => a.sequence - b.sequence);\n\tconst kinds = new Set(sortedEvents.map((event) => event.kind));\n\tconst correlations = new Set(sortedEvents.map((event) => event.correlationId));\n\tconst startedCount = sortedEvents.filter((event) => event.status === \"started\").length;\n\tlet lastNonTerminalOrder = -1;\n\tlet sawTerminal = false;\n\tlet sawEventAfterTerminal = false;\n\n\tif (kinds.size > 1) errors.push(`operation ${operation.operationId} mixes event kinds`);\n\tif (correlations.size > 1) errors.push(`operation ${operation.operationId} mixes correlation ids`);\n\tif (startedCount > 1) errors.push(`operation ${operation.operationId} has multiple started events`);\n\tif (operation.terminalEventIds.length > 1)\n\t\terrors.push(`operation ${operation.operationId} has multiple terminal events`);\n\n\tfor (const event of sortedEvents) {\n\t\tif (sawTerminal) {\n\t\t\tsawEventAfterTerminal = true;\n\t\t\tcontinue;\n\t\t}\n\t\tif (isTerminalStatus(event.status)) {\n\t\t\tsawTerminal = true;\n\t\t\tcontinue;\n\t\t}\n\t\tconst order = NON_TERMINAL_STATUS_ORDER.get(event.status);\n\t\tif (order === undefined) {\n\t\t\terrors.push(`operation ${operation.operationId} has unsupported status ${event.status}`);\n\t\t\tcontinue;\n\t\t}\n\t\tif (order < lastNonTerminalOrder) {\n\t\t\terrors.push(`operation ${operation.operationId} has invalid status transition to ${event.status}`);\n\t\t}\n\t\tlastNonTerminalOrder = order;\n\t}\n\tif (sawEventAfterTerminal) errors.push(`operation ${operation.operationId} has event after terminal event`);\n\treturn errors;\n}\n\nexport function replayHarnessControlEvents(events: readonly HarnessControlEvent[]): HarnessControlReplayReport {\n\tconst errors: string[] = [];\n\tconst warnings: string[] = [];\n\tconst operationEvents = new Map<string, HarnessControlEvent[]>();\n\tfor (const event of events) {\n\t\tconst group = operationEvents.get(event.operationId) ?? [];\n\t\tgroup.push(event);\n\t\toperationEvents.set(event.operationId, group);\n\t}\n\n\tconst operations = [...operationEvents]\n\t\t.sort(([, a], [, b]) => (a[0]?.sequence ?? 0) - (b[0]?.sequence ?? 0))\n\t\t.map(([operationId, groupedEvents]) => createOperationReplay(operationId, groupedEvents));\n\n\terrors.push(...validateUniqueEventIds(events));\n\terrors.push(...validateCausation(events));\n\n\tfor (const operation of operations) {\n\t\tconst groupedEvents = operationEvents.get(operation.operationId) ?? [];\n\t\terrors.push(...validateOperationStateMachine(operation, groupedEvents));\n\t\tif (!operation.started) {\n\t\t\twarnings.push(`operation ${operation.operationId} has no started event`);\n\t\t}\n\t\tif (!operation.terminalStatus) {\n\t\t\terrors.push(`operation ${operation.operationId} has no terminal event`);\n\t\t}\n\t}\n\n\treturn {\n\t\tok: errors.length === 0,\n\t\tevents: [...events],\n\t\toperations,\n\t\treconstructedStateHash: reconstructHarnessStateHash(operations),\n\t\terrors,\n\t\twarnings,\n\t};\n}\n\nexport function verifyHarnessControlReplay(logPath: string): HarnessControlReplayReport {\n\tconst ledger = verifyHarnessControlLedger(logPath);\n\tconst replay = replayHarnessControlEvents(ledger.events);\n\treturn {\n\t\tok: ledger.ok && replay.ok,\n\t\tevents: ledger.events,\n\t\toperations: replay.operations,\n\t\treconstructedStateHash: replay.reconstructedStateHash,\n\t\terrors: [...ledger.errors, ...replay.errors],\n\t\twarnings: replay.warnings,\n\t};\n}\n"]}

package/dist/core/harness-control-replay.js

@@ -0,0 +1,155 @@
+import { hashCanonical, verifyHarnessControlLedger } from "./harness-control-events.js";
+const TERMINAL_STATUSES = new Set([
+    "completed",
+    "failed",
+    "blocked",
+    "rolled_back",
+    "in_doubt",
+]);
+const NON_TERMINAL_STATUS_ORDER = new Map([
+    ["prepared", 0],
+    ["started", 1],
+    ["applying", 2],
+    ["verifying", 3],
+]);
+function isTerminalStatus(status) {
+    return TERMINAL_STATUSES.has(status);
+}
+function createOperationReplay(operationId, events) {
+    const sortedEvents = [...events].sort((a, b) => a.sequence - b.sequence);
+    const terminalEvents = sortedEvents.filter((event) => isTerminalStatus(event.status));
+    const terminal = terminalEvents.at(-1);
+    return {
+        operationId,
+        kind: sortedEvents[0]?.kind ?? "unknown",
+        started: sortedEvents.some((event) => event.status === "started"),
+        terminalStatus: terminal?.status,
+        terminalEventIds: terminalEvents.map((event) => event.eventId),
+        eventIds: sortedEvents.map((event) => event.eventId),
+        sequenceRange: [sortedEvents[0]?.sequence ?? 0, sortedEvents.at(-1)?.sequence ?? 0],
+        stateTransitions: sortedEvents.map((event) => ({
+            beforeStateHash: event.beforeStateHash,
+            afterStateHash: event.afterStateHash,
+        })),
+        finalStateHash: terminal?.afterStateHash ?? sortedEvents.at(-1)?.afterStateHash,
+    };
+}
+function validateUniqueEventIds(events) {
+    const errors = [];
+    const seen = new Set();
+    for (const event of events) {
+        if (seen.has(event.eventId))
+            errors.push(`event ${event.eventId} is duplicated`);
+        seen.add(event.eventId);
+    }
+    return errors;
+}
+function validateCausation(events) {
+    const errors = [];
+    const byId = new Map(events.map((event) => [event.eventId, event]));
+    for (const event of events) {
+        if (!event.causationId)
+            continue;
+        const causationEvent = byId.get(event.causationId);
+        if (!causationEvent ||
+            causationEvent.sequence >= event.sequence ||
+            causationEvent.correlationId !== event.correlationId) {
+            errors.push(`event causation ${event.causationId} for operation ${event.operationId} does not reference an earlier event`);
+        }
+    }
+    return errors;
+}
+function reconstructHarnessStateHash(operations) {
+    return hashCanonical(operations.map((operation) => ({
+        operationId: operation.operationId,
+        kind: operation.kind,
+        finalStateHash: operation.finalStateHash,
+        terminalStatus: operation.terminalStatus,
+    })));
+}
+function validateOperationStateMachine(operation, events) {
+    const errors = [];
+    const sortedEvents = [...events].sort((a, b) => a.sequence - b.sequence);
+    const kinds = new Set(sortedEvents.map((event) => event.kind));
+    const correlations = new Set(sortedEvents.map((event) => event.correlationId));
+    const startedCount = sortedEvents.filter((event) => event.status === "started").length;
+    let lastNonTerminalOrder = -1;
+    let sawTerminal = false;
+    let sawEventAfterTerminal = false;
+    if (kinds.size > 1)
+        errors.push(`operation ${operation.operationId} mixes event kinds`);
+    if (correlations.size > 1)
+        errors.push(`operation ${operation.operationId} mixes correlation ids`);
+    if (startedCount > 1)
+        errors.push(`operation ${operation.operationId} has multiple started events`);
+    if (operation.terminalEventIds.length > 1)
+        errors.push(`operation ${operation.operationId} has multiple terminal events`);
+    for (const event of sortedEvents) {
+        if (sawTerminal) {
+            sawEventAfterTerminal = true;
+            continue;
+        }
+        if (isTerminalStatus(event.status)) {
+            sawTerminal = true;
+            continue;
+        }
+        const order = NON_TERMINAL_STATUS_ORDER.get(event.status);
+        if (order === undefined) {
+            errors.push(`operation ${operation.operationId} has unsupported status ${event.status}`);
+            continue;
+        }
+        if (order < lastNonTerminalOrder) {
+            errors.push(`operation ${operation.operationId} has invalid status transition to ${event.status}`);
+        }
+        lastNonTerminalOrder = order;
+    }
+    if (sawEventAfterTerminal)
+        errors.push(`operation ${operation.operationId} has event after terminal event`);
+    return errors;
+}
+export function replayHarnessControlEvents(events) {
+    const errors = [];
+    const warnings = [];
+    const operationEvents = new Map();
+    for (const event of events) {
+        const group = operationEvents.get(event.operationId) ?? [];
+        group.push(event);
+        operationEvents.set(event.operationId, group);
+    }
+    const operations = [...operationEvents]
+        .sort(([, a], [, b]) => (a[0]?.sequence ?? 0) - (b[0]?.sequence ?? 0))
+        .map(([operationId, groupedEvents]) => createOperationReplay(operationId, groupedEvents));
+    errors.push(...validateUniqueEventIds(events));
+    errors.push(...validateCausation(events));
+    for (const operation of operations) {
+        const groupedEvents = operationEvents.get(operation.operationId) ?? [];
+        errors.push(...validateOperationStateMachine(operation, groupedEvents));
+        if (!operation.started) {
+            warnings.push(`operation ${operation.operationId} has no started event`);
+        }
+        if (!operation.terminalStatus) {
+            errors.push(`operation ${operation.operationId} has no terminal event`);
+        }
+    }
+    return {
+        ok: errors.length === 0,
+        events: [...events],
+        operations,
+        reconstructedStateHash: reconstructHarnessStateHash(operations),
+        errors,
+        warnings,
+    };
+}
+export function verifyHarnessControlReplay(logPath) {
+    const ledger = verifyHarnessControlLedger(logPath);
+    const replay = replayHarnessControlEvents(ledger.events);
+    return {
+        ok: ledger.ok && replay.ok,
+        events: ledger.events,
+        operations: replay.operations,
+        reconstructedStateHash: replay.reconstructedStateHash,
+        errors: [...ledger.errors, ...replay.errors],
+        warnings: replay.warnings,
+    };
+}
+//# sourceMappingURL=harness-control-replay.js.map

package/dist/core/harness-control-replay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-control-replay.js","sourceRoot":"","sources":["../../src/core/harness-control-replay.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAuBxF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAA4B;IAC5D,WAAW;IACX,QAAQ;IACR,SAAS;IACT,aAAa;IACb,UAAU;CACV,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAoC;IAC5E,CAAC,UAAU,EAAE,CAAC,CAAC;IACf,CAAC,SAAS,EAAE,CAAC,CAAC;IACd,CAAC,UAAU,EAAE,CAAC,CAAC;IACf,CAAC,WAAW,EAAE,CAAC,CAAC;CAChB,CAAC,CAAC;AAEH,SAAS,gBAAgB,CAAC,MAAiC,EAAW;IACrE,OAAO,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAAA,CACrC;AAED,SAAS,qBAAqB,CAAC,WAAmB,EAAE,MAA6B,EAAiC;IACjH,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IACzE,MAAM,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO;QACN,WAAW;QACX,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,SAAS;QACxC,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC;QACjE,cAAc,EAAE,QAAQ,EAAE,MAAM;QAChC,gBAAgB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;QAC9D,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;QACpD,aAAa,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC;QACnF,gBAAgB,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC9C,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,cAAc,EAAE,KAAK,CAAC,cAAc;SACpC,CAAC,CAAC;QACH,cAAc,EAAE,QAAQ,EAAE,cAAc,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc;KAC/E,CAAC;AAAA,CACF;AAED,SAAS,sBAAsB,CAAC,MAAsC,EAAY;IACjF,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;QACjF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,iBAAiB,CAAC,MAAsC,EAAY;IAC5E,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACpE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,WAAW;YAAE,SAAS;QACjC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACnD,IACC,CAAC,cAAc;YACf,cAAc,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ;YACzC,cAAc,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,EACnD,CAAC;YACF,MAAM,CAAC,IAAI,CACV,mBAAmB,KAAK,CAAC,WAAW,kBAAkB,KAAK,CAAC,WAAW,sCAAsC,CAC7G,CAAC;QACH,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,2BAA2B,CAAC,UAAoD,EAAU;IAClG,OAAO,aAAa,CACnB,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC9B,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,cAAc,EAAE,SAAS,CAAC,cAAc;QACxC,cAAc,EAAE,SAAS,CAAC,cAAc;KACxC,CAAC,CAAC,CACH,CAAC;AAAA,CACF;AAED,SAAS,6BAA6B,CACrC,SAAwC,EACxC,MAA6B,EAClB;IACX,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;IAC/E,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACvF,IAAI,oBAAoB,GAAG,CAAC,CAAC,CAAC;IAC9B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,qBAAqB,GAAG,KAAK,CAAC;IAElC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,WAAW,oBAAoB,CAAC,CAAC;IACxF,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,WAAW,wBAAwB,CAAC,CAAC;IACnG,IAAI,YAAY,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,WAAW,8BAA8B,CAAC,CAAC;IACpG,IAAI,SAAS,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,WAAW,+BAA+B,CAAC,CAAC;IAEhF,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QAClC,IAAI,WAAW,EAAE,CAAC;YACjB,qBAAqB,GAAG,IAAI,CAAC;YAC7B,SAAS;QACV,CAAC;QACD,IAAI,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,WAAW,GAAG,IAAI,CAAC;YACnB,SAAS;QACV,CAAC;QACD,MAAM,KAAK,GAAG,yBAAyB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,WAAW,2BAA2B,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACzF,SAAS;QACV,CAAC;QACD,IAAI,KAAK,GAAG,oBAAoB,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,WAAW,qCAAqC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,oBAAoB,GAAG,KAAK,CAAC;IAC9B,CAAC;IACD,IAAI,qBAAqB;QAAE,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,WAAW,iCAAiC,CAAC,CAAC;IAC5G,OAAO,MAAM,CAAC;AAAA,CACd;AAED,MAAM,UAAU,0BAA0B,CAAC,MAAsC,EAA8B;IAC9G,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,eAAe,GAAG,IAAI,GAAG,EAAiC,CAAC;IACjE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,eAAe,CAAC;SACrC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC;SACrE,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;IAE3F,MAAM,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;IAE1C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACpC,MAAM,aAAa,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,GAAG,6BAA6B,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,WAAW,uBAAuB,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,WAAW,wBAAwB,CAAC,CAAC;QACzE,CAAC;IACF,CAAC;IAED,OAAO;QACN,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC;QACnB,UAAU;QACV,sBAAsB,EAAE,2BAA2B,CAAC,UAAU,CAAC;QAC/D,MAAM;QACN,QAAQ;KACR,CAAC;AAAA,CACF;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAe,EAA8B;IACvF,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,OAAO;QACN,EAAE,EAAE,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,EAAE;QAC1B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;QACrD,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5C,QAAQ,EAAE,MAAM,CAAC,QAAQ;KACzB,CAAC;AAAA,CACF","sourcesContent":["import type { HarnessControlEvent, HarnessControlEventStatus } from \"./harness-control-events.ts\";\nimport { hashCanonical, verifyHarnessControlLedger } from \"./harness-control-events.ts\";\n\nexport interface HarnessControlOperationReplay {\n\toperationId: string;\n\tkind: string;\n\tstarted: boolean;\n\tterminalStatus?: HarnessControlEventStatus;\n\tterminalEventIds: string[];\n\teventIds: string[];\n\tsequenceRange: [number, number];\n\tstateTransitions: Array<{ beforeStateHash: string; afterStateHash: string }>;\n\tfinalStateHash?: string;\n}\n\nexport interface HarnessControlReplayReport {\n\tok: boolean;\n\tevents: HarnessControlEvent[];\n\toperations: HarnessControlOperationReplay[];\n\treconstructedStateHash: string;\n\terrors: string[];\n\twarnings: string[];\n}\n\nconst TERMINAL_STATUSES = new Set<HarnessControlEventStatus>([\n\t\"completed\",\n\t\"failed\",\n\t\"blocked\",\n\t\"rolled_back\",\n\t\"in_doubt\",\n]);\n\nconst NON_TERMINAL_STATUS_ORDER = new Map<HarnessControlEventStatus, number>([\n\t[\"prepared\", 0],\n\t[\"started\", 1],\n\t[\"applying\", 2],\n\t[\"verifying\", 3],\n]);\n\nfunction isTerminalStatus(status: HarnessControlEventStatus): boolean {\n\treturn TERMINAL_STATUSES.has(status);\n}\n\nfunction createOperationReplay(operationId: string, events: HarnessControlEvent[]): HarnessControlOperationReplay {\n\tconst sortedEvents = [...events].sort((a, b) => a.sequence - b.sequence);\n\tconst terminalEvents = sortedEvents.filter((event) => isTerminalStatus(event.status));\n\tconst terminal = terminalEvents.at(-1);\n\treturn {\n\t\toperationId,\n\t\tkind: sortedEvents[0]?.kind ?? \"unknown\",\n\t\tstarted: sortedEvents.some((event) => event.status === \"started\"),\n\t\tterminalStatus: terminal?.status,\n\t\tterminalEventIds: terminalEvents.map((event) => event.eventId),\n\t\teventIds: sortedEvents.map((event) => event.eventId),\n\t\tsequenceRange: [sortedEvents[0]?.sequence ?? 0, sortedEvents.at(-1)?.sequence ?? 0],\n\t\tstateTransitions: sortedEvents.map((event) => ({\n\t\t\tbeforeStateHash: event.beforeStateHash,\n\t\t\tafterStateHash: event.afterStateHash,\n\t\t})),\n\t\tfinalStateHash: terminal?.afterStateHash ?? sortedEvents.at(-1)?.afterStateHash,\n\t};\n}\n\nfunction validateUniqueEventIds(events: readonly HarnessControlEvent[]): string[] {\n\tconst errors: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const event of events) {\n\t\tif (seen.has(event.eventId)) errors.push(`event ${event.eventId} is duplicated`);\n\t\tseen.add(event.eventId);\n\t}\n\treturn errors;\n}\n\nfunction validateCausation(events: readonly HarnessControlEvent[]): string[] {\n\tconst errors: string[] = [];\n\tconst byId = new Map(events.map((event) => [event.eventId, event]));\n\tfor (const event of events) {\n\t\tif (!event.causationId) continue;\n\t\tconst causationEvent = byId.get(event.causationId);\n\t\tif (\n\t\t\t!causationEvent ||\n\t\t\tcausationEvent.sequence >= event.sequence ||\n\t\t\tcausationEvent.correlationId !== event.correlationId\n\t\t) {\n\t\t\terrors.push(\n\t\t\t\t`event causation ${event.causationId} for operation ${event.operationId} does not reference an earlier event`,\n\t\t\t);\n\t\t}\n\t}\n\treturn errors;\n}\n\nfunction reconstructHarnessStateHash(operations: readonly HarnessControlOperationReplay[]): string {\n\treturn hashCanonical(\n\t\toperations.map((operation) => ({\n\t\t\toperationId: operation.operationId,\n\t\t\tkind: operation.kind,\n\t\t\tfinalStateHash: operation.finalStateHash,\n\t\t\tterminalStatus: operation.terminalStatus,\n\t\t})),\n\t);\n}\n\nfunction validateOperationStateMachine(\n\toperation: HarnessControlOperationReplay,\n\tevents: HarnessControlEvent[],\n): string[] {\n\tconst errors: string[] = [];\n\tconst sortedEvents = [...events].sort((a, b) => a.sequence - b.sequence);\n\tconst kinds = new Set(sortedEvents.map((event) => event.kind));\n\tconst correlations = new Set(sortedEvents.map((event) => event.correlationId));\n\tconst startedCount = sortedEvents.filter((event) => event.status === \"started\").length;\n\tlet lastNonTerminalOrder = -1;\n\tlet sawTerminal = false;\n\tlet sawEventAfterTerminal = false;\n\n\tif (kinds.size > 1) errors.push(`operation ${operation.operationId} mixes event kinds`);\n\tif (correlations.size > 1) errors.push(`operation ${operation.operationId} mixes correlation ids`);\n\tif (startedCount > 1) errors.push(`operation ${operation.operationId} has multiple started events`);\n\tif (operation.terminalEventIds.length > 1)\n\t\terrors.push(`operation ${operation.operationId} has multiple terminal events`);\n\n\tfor (const event of sortedEvents) {\n\t\tif (sawTerminal) {\n\t\t\tsawEventAfterTerminal = true;\n\t\t\tcontinue;\n\t\t}\n\t\tif (isTerminalStatus(event.status)) {\n\t\t\tsawTerminal = true;\n\t\t\tcontinue;\n\t\t}\n\t\tconst order = NON_TERMINAL_STATUS_ORDER.get(event.status);\n\t\tif (order === undefined) {\n\t\t\terrors.push(`operation ${operation.operationId} has unsupported status ${event.status}`);\n\t\t\tcontinue;\n\t\t}\n\t\tif (order < lastNonTerminalOrder) {\n\t\t\terrors.push(`operation ${operation.operationId} has invalid status transition to ${event.status}`);\n\t\t}\n\t\tlastNonTerminalOrder = order;\n\t}\n\tif (sawEventAfterTerminal) errors.push(`operation ${operation.operationId} has event after terminal event`);\n\treturn errors;\n}\n\nexport function replayHarnessControlEvents(events: readonly HarnessControlEvent[]): HarnessControlReplayReport {\n\tconst errors: string[] = [];\n\tconst warnings: string[] = [];\n\tconst operationEvents = new Map<string, HarnessControlEvent[]>();\n\tfor (const event of events) {\n\t\tconst group = operationEvents.get(event.operationId) ?? [];\n\t\tgroup.push(event);\n\t\toperationEvents.set(event.operationId, group);\n\t}\n\n\tconst operations = [...operationEvents]\n\t\t.sort(([, a], [, b]) => (a[0]?.sequence ?? 0) - (b[0]?.sequence ?? 0))\n\t\t.map(([operationId, groupedEvents]) => createOperationReplay(operationId, groupedEvents));\n\n\terrors.push(...validateUniqueEventIds(events));\n\terrors.push(...validateCausation(events));\n\n\tfor (const operation of operations) {\n\t\tconst groupedEvents = operationEvents.get(operation.operationId) ?? [];\n\t\terrors.push(...validateOperationStateMachine(operation, groupedEvents));\n\t\tif (!operation.started) {\n\t\t\twarnings.push(`operation ${operation.operationId} has no started event`);\n\t\t}\n\t\tif (!operation.terminalStatus) {\n\t\t\terrors.push(`operation ${operation.operationId} has no terminal event`);\n\t\t}\n\t}\n\n\treturn {\n\t\tok: errors.length === 0,\n\t\tevents: [...events],\n\t\toperations,\n\t\treconstructedStateHash: reconstructHarnessStateHash(operations),\n\t\terrors,\n\t\twarnings,\n\t};\n}\n\nexport function verifyHarnessControlReplay(logPath: string): HarnessControlReplayReport {\n\tconst ledger = verifyHarnessControlLedger(logPath);\n\tconst replay = replayHarnessControlEvents(ledger.events);\n\treturn {\n\t\tok: ledger.ok && replay.ok,\n\t\tevents: ledger.events,\n\t\toperations: replay.operations,\n\t\treconstructedStateHash: replay.reconstructedStateHash,\n\t\terrors: [...ledger.errors, ...replay.errors],\n\t\twarnings: replay.warnings,\n\t};\n}\n"]}