open-multi-agent-kit 0.80.5 → 0.80.7

package/dist/core/harness-control-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-control-events.js","sourceRoot":"","sources":["../../src/core/harness-control-events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACN,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,MAAM,EACN,QAAQ,EACR,SAAS,GACT,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAsHlE,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,kBAAkB,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC1C,MAAM,oBAAoB,GAAG,8BAA8B,CAAC;AAC5D,MAAM,qBAAqB,GAAG,+BAA+B,CAAC;AAC9D,MAAM,cAAc,GAAG,aAAa,CAAC;AACrC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AACzC,MAAM,aAAa,GAAG,KAAK,CAAC;AAE5B,SAAS,cAAc,CAAC,GAAW,EAAW;IAC7C,OAAO,iFAAiF,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAAA,CACnG;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAU;IACpD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,gCAAgC,EAAE,UAAU,QAAQ,EAAE,CAAC,CAAC;IACpF,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,uCAAuC,EAAE,QAAQ,CAAC,CAAC;IAC/E,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,wDAAwD,EAAE,QAAQ,CAAC,CAAC;IAChG,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,yEAAyE,EAAE,QAAQ,CAAC,CAAC;IACjH,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,uBAAuB,EAAE,QAAQ,CAAC,CAAC;IAC/D,OAAO,QAAQ,CAAC;AAAA,CAChB;AAED,SAAS,cAAc,CAAC,KAAa,EAAU;IAC9C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,MAAM,IAAI,uBAAuB;QAAE,OAAO,QAAQ,CAAC;IAChE,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,gBAAc,CAAC;AAAA,CACnE;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa,EAAE,IAAqB,EAAa;IACvF,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrF,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,WAAW,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACnH,IAAI,KAAK,IAAI,eAAe;QAAE,OAAO,aAAa,CAAC;IAEnD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACpG,CAAC;IAED,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC5B,OAAO;YACN,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;SACtC,CAAC;IACH,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,YAAY,CAAC;QACzC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,MAAM,GAAe,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,EAAE,CAAC;YAClF,MAAM,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,MAAM,CAAC;IACf,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CACrB;AAED,MAAM,UAAU,+BAA+B,CAAC,IAAa,EAAc;IAC1E,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,OAAO,EAAU,CAAC,CAAC;IACtE,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QACtF,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAAA,CACxB;AAED,MAAM,UAAU,aAAa,CAAC,KAAgB,EAAU;IACvD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1F,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SAC3B,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;SAC3E,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAAA,CACf;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAU;IACrD,OAAO,UAAU,CAAC,QAAQ,CAAC;SACzB,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,OAAO,EAAU,CAAC,CAAC,CAAC;SACrE,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CAChB;AAED,SAAS,UAAU,CAAC,KAAa,EAAU;IAC1C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CACxD;AAED,SAAS,UAAU,CAAC,IAAY,EAAU;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CACrE;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,KAAa,EAAW;IAC7D,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,aAAa,KAAK,cAAc,IAAI,aAAa,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,GAAG,EAAE,CAAC,CAAC;AAAA,CAC/F;AAED,SAAS,eAAe,CAAC,IAAY,EAAW;IAC/C,OAAO,sGAAsG,CAAC,IAAI,CACjH,IAAI,CACJ,CAAC;AAAA,CACF;AAED,SAAS,2BAA2B,CAAC,GAAW,EAAE,OAAe,EAAY;IAC5E,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAAA,CAC/B;AAED,SAAS,YAAY,CAAC,MAAc,EAAU;IAC7C,IAAI,CAAC;QACJ,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;AAAA,CACD;AAED,SAAS,sBAAsB,CAC9B,YAAkC,EAClC,GAAW,EACX,OAAe,EACf,oBAA0C,EACF;IACxC,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1D,MAAM,YAAY,GAAG,CAAC,oBAAoB,IAAI,2BAA2B,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACrG,OAAO,CAAC,IAAI,CAAC,CACb,CAAC;IACF,MAAM,cAAc,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QAChH,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9F,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3F,IAAI,CAAC;YACJ,MAAM,SAAS,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;YAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;YAC5C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;gBAClE,OAAO;oBACN,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAE,IAAI;oBACZ,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,SAAS,CAAC,cAAc,EAAE;wBAChC,CAAC,CAAC,iDAAiD;wBACnD,CAAC,CAAC,yCAAyC;iBAC5C,CAAC;YACH,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YACvG,OAAO;gBACN,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,KAAK,CAAC,IAAI;gBACrB,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC;aAC5B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO;gBACN,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,UAAU,CAAC,YAAY,CAAC;gBAChC,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC;QACH,CAAC;IAAA,CACD,CAAC,CAAC;AAAA,CACH;AAED,MAAM,UAAU,iCAAiC,CAAC,OAAO,GAA+B,EAAE,EAAsB;IAC/G,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IACrE,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;IAChG,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC;IAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,cAAc,CAAC,CAAC;AAAA,CACpG;AAED,SAAS,cAAc,CAAC,gBAAwD,EAAU;IACzF,OAAO,GAAG,aAAa,CAAC,gBAAyC,CAAC,GAAG,gBAAgB,CAAC,iBAAiB,EAAE,CAAC;AAAA,CAC1G;AAED,SAAS,gBAAgB,CAAC,gBAAwD,EAAU;IAC3F,OAAO,UAAU,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAAA,CACpD;AAED,SAAS,sBAAsB,CAAC,OAAe,EAAsB;IACpE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAChF,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;SAC1C,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAE9E,IAAI,MAAwB,CAAC;IAC7B,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAqB,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,qFAAmF,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,KAAK,qBAAqB,EAAE,CAAC;QACpD,IAAI,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ,EAAE,CAAC;YACjG,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;QACpG,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,gBAAgB,EAAE,SAAS,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC;IACnF,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,KAAK,oBAAoB,EAAE,CAAC;QACnD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QACtG,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;AAAA,CAClE;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,SAAiB,EAAU;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,OAAO,IAAI,EAAE,CAAC;QACb,IAAI,CAAC;YACJ,OAAO,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBACJ,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACjC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,GAAG,aAAa;wBAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnF,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACX,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,SAAS,EAAE,CAAC;gBACrC,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;IACF,CAAC;AAAA,CACD;AAED,SAAS,uBAAuB,CAAC,IAAU,EAAU;IACpD,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AAAA,CAChD;AAED,SAAS,cAAc,CAAC,OAAe,EAAQ;IAC9C,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC;YACJ,SAAS,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;gBAAS,CAAC;YACV,SAAS,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,kGAAkG;IACnG,CAAC;AAAA,CACD;AAED,SAAS,6BAA6B,CAAC,QAAgB,EAAQ;IAC9D,IAAI,CAAC;QACJ,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;YACzE,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC5B,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,wCAAwC;IACzC,CAAC;AAAA,CACD;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAE,cAAkC,EAAE,GAAS,EAAsB;IAC9G,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1G,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACnE,8EAA8E;IAC9E,yEAAyE;IACzE,MAAM,WAAW,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,GAAG,IAAI,IAAI,uBAAuB,CAAC,GAAG,CAAC,UAAU,CAAC;IACtE,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC9B,6BAA6B,CAAC,WAAW,CAAC,CAAC;IAC3C,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9B,IAAI,WAAW,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,MAAM,GAA+B;YAC1C,aAAa,EAAE,qBAAqB;YACpC,gBAAgB,EAAE,WAAW,CAAC,QAAQ;YACtC,iBAAiB,EAAE,WAAW,CAAC,SAAS;YACxC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC;YAClC,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;SAC5B,CAAC;QACF,uBAAuB,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,WAAW,CAAC;AAAA,CACnB;AAED,SAAS,uBAAuB,CAAC,IAAY,EAAE,IAAY,EAAQ;IAClE,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC;QACJ,6BAA6B,CAAC,IAAI,CAAC,CAAC;QACpC,SAAS,CAAC,EAAE,EAAE,GAAG,IAAI,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC/C,SAAS,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;YAAS,CAAC;QACV,SAAS,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IACD,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAAA,CAC9B;AAED,MAAM,UAAU,yBAAyB,CACxC,IAA6B,EAC7B,MAAiC,EACjC,IAAI,GAAY,EAAE,EAClB,OAAO,GAA+B,EAAE,EACxC,QAAQ,GAAuB,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,EACvD;IACtB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,EAAE,IAAI,UAAU,EAAE,CAAC;IAC9D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC;IACnD,MAAM,OAAO,GAAG,iCAAiC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACjE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,aAAa,GAAG,+BAA+B,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,gBAAgB,GAA2C;QAChE,aAAa,EAAE,8BAA8B;QAC7C,OAAO;QACP,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,cAAc;QACtC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,kBAAkB;QAClD,WAAW;QACX,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;QACxC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,WAAW;QACnD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,GAAG,CAAC;QAC/B,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;QACpD,IAAI;QACJ,MAAM;QACN,GAAG;QACH,eAAe,EAAE,aAAa,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;QAC3D,cAAc,EAAE,aAAa,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;QACzD,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC;QACtC,SAAS,EAAE,sBAAsB,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,oBAAoB,CAAC;QACnG,iBAAiB,EAAE,QAAQ,CAAC,SAAS;KACrC,CAAC;IACF,OAAO,EAAE,GAAG,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,CAAC;AAAA,CAC9E;AAED,MAAM,UAAU,yBAAyB,CACxC,IAA6B,EAC7B,MAAiC,EACjC,IAAI,GAAY,EAAE,EAClB,OAAO,GAA+B,EAAE,EACP;IACjC,MAAM,OAAO,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;IACpF,MAAM,QAAQ,GAAG,GAAG,OAAO,OAAO,CAAC;IACnC,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACJ,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,0DAA0D;QAC1D,0CAA0C;QAC1C,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5C,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;gBACvC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,wCAAwC;QACzC,CAAC;QACD,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC;QAC9D,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QACjF,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/E,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACpG,CAAC;YAAS,CAAC;QACV,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACJ,SAAS,CAAC,MAAM,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACV,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,CAAC;IACF,CAAC;AAAA,CACD;AAED,SAAS,oBAAoB,CAAC,MAAwB,EAAsB;IAC3E,IACC,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ;QAC3C,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC1C,MAAM,CAAC,gBAAgB,GAAG,CAAC,EAC1B,CAAC;QACF,OAAO,+CAA+C,CAAC;IACxD,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACtG,OAAO,gDAAgD,CAAC;IACzD,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAS;IAC5C,UAAU;IACV,SAAS;IACT,UAAU;IACV,WAAW;IACX,WAAW;IACX,QAAQ;IACR,SAAS;IACT,aAAa;IACb,UAAU;CACV,CAAC,CAAC;AAEH,SAAS,QAAQ,CAAC,KAAc,EAAoC;IACnE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAAA,CAC5E;AAED,SAAS,iCAAiC,CAAC,MAA+B,EAAsB;IAC/F,IAAI,MAAM,CAAC,aAAa,KAAK,oBAAoB;QAAE,OAAO,2BAA2B,CAAC;IACtF,MAAM,YAAY,GAAG;QACpB,SAAS;QACT,OAAO;QACP,WAAW;QACX,aAAa;QACb,eAAe;QACf,WAAW;QACX,MAAM;QACN,KAAK;QACL,iBAAiB;QACjB,gBAAgB;QAChB,UAAU;QACV,mBAAmB;QACnB,WAAW;KACF,CAAC;IACX,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QAClC,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,OAAO,mCAAmC,KAAK,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QACtG,OAAO,4BAA4B,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QAC3E,OAAO,+BAA+B,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACnF,OAAO,0BAA0B,CAAC;IACnC,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACtF,OAAO,6BAA6B,CAAC;IACtC,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACtG,OAAO,qCAAqC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,wBAAwB,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;QAAE,OAAO,6BAA6B,CAAC;IAC3E,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,iBAAiB,CAAC,KAA0B,EAAsB;IAC1E,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,gBAAgB,EAAE,GAAG,KAAK,CAAC;IAC7D,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IAC7D,IAAI,iBAAiB,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QAC3C,OAAO,SAAS,KAAK,CAAC,OAAO,gBAAgB,CAAC;IAC/C,CAAC;IACD,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;QAClD,OAAO,SAAS,KAAK,CAAC,OAAO,oBAAoB,CAAC;IACnD,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAe,EAA0C;IACnG,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAA0B,EAAE,CAAC;IACzC,MAAM,gBAAgB,GAA0C,EAAE,CAAC;IACnE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAChF,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;SAC1C,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpC,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,iBAAiB,GAAG,kBAAkB,CAAC;IAE3C,SAAS,UAAU,CAAC,UAAkB,EAAE,MAAc,EAAQ;QAC7D,gBAAgB,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,QAAQ,UAAU,qBAAmB,MAAM,EAAE,CAAC,CAAC;IAAA,CAC3D;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,KAAK,GAAG,CAAC,CAAC;QAC7B,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC;YACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAE,CAA4B,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,UAAU,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/E,SAAS;QACV,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,KAAK,qBAAqB,EAAE,CAAC;YACpD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACjB,UAAU,CAAC,UAAU,EAAE,sCAAsC,CAAC,CAAC;gBAC/D,SAAS;YACV,CAAC;YACD,MAAM,WAAW,GAAG,oBAAoB,CAAC,MAA0B,CAAC,CAAC;YACrE,IAAI,WAAW,EAAE,CAAC;gBACjB,UAAU,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBACpC,SAAS;YACV,CAAC;YACD,gBAAgB,GAAG,MAAM,CAAC,gBAA0B,CAAC;YACrD,iBAAiB,GAAG,MAAM,CAAC,iBAA2B,CAAC;YACvD,SAAS;QACV,CAAC;QACD,MAAM,UAAU,GAAG,iCAAiC,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,UAAU,EAAE,CAAC;YAChB,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YACnC,SAAS;QACV,CAAC;QACD,MAAM,KAAK,GAAG,MAAwC,CAAC;QACvD,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB,GAAG,CAAC,EAAE,CAAC;YAC7C,UAAU,CAAC,UAAU,EAAE,0BAA0B,gBAAgB,GAAG,CAAC,SAAS,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChG,SAAS;QACV,CAAC;QACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,iBAAiB,EAAE,CAAC;YACnD,UAAU,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;YACrD,SAAS;QACV,CAAC;QACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,SAAS,EAAE,CAAC;YACf,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAClC,SAAS;QACV,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,gBAAgB,GAAG,KAAK,CAAC,QAAQ,CAAC;QAClC,iBAAiB,GAAG,KAAK,CAAC,SAAS,CAAC;IACrC,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;AAAA,CACrE","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport {\n\tchmodSync,\n\tcloseSync,\n\texistsSync,\n\tfsyncSync,\n\tlstatSync,\n\tmkdirSync,\n\topenSync,\n\treadFileSync,\n\trealpathSync,\n\trenameSync,\n\trmSync,\n\tstatSync,\n\twriteSync,\n} from \"node:fs\";\nimport { basename, dirname, join, resolve, sep } from \"node:path\";\n\nexport type HarnessControlEventStatus =\n\t| \"prepared\"\n\t| \"started\"\n\t| \"applying\"\n\t| \"verifying\"\n\t| \"completed\"\n\t| \"failed\"\n\t| \"blocked\"\n\t| \"rolled_back\"\n\t| \"in_doubt\";\n\nexport type HarnessControlEventKind =\n\t| \"compaction.summary.generated\"\n\t| \"extension.migration.plan\"\n\t| \"extension.migration.apply\"\n\t| \"interactive.model_thinking.commit\"\n\t| \"interactive.theme.apply\"\n\t| \"keybinding.conflict\"\n\t| \"spec.compile\"\n\t| \"spec.verify\"\n\t| \"cli.contract.verify\"\n\t| (string & {});\n\nexport type JsonValue = string | number | boolean | null | JsonValue[] | { [key: string]: JsonValue };\nexport type JsonObject = { [key: string]: JsonValue };\n\nexport interface HarnessControlArtifactManifestEntry {\n\tpath: string;\n\texists: boolean;\n\tallowed: boolean;\n\tsizeBytes?: number;\n\tsha256?: string;\n\terror?: string;\n}\n\nexport interface HarnessControlEvent {\n\tschemaVersion: \"omk.harness-control.event.v2\";\n\teventId: string;\n\trunId: string;\n\tsessionId: string;\n\toperationId: string;\n\tcausationId: string | null;\n\tcorrelationId: string;\n\tsequence: number;\n\ttimestamp: string;\n\tkind: HarnessControlEventKind;\n\tstatus: HarnessControlEventStatus;\n\tcwd: string;\n\tbeforeStateHash: string;\n\tafterStateHash: string;\n\tdata: JsonObject;\n\tdataHash: string;\n\tartifacts: HarnessControlArtifactManifestEntry[];\n\tpreviousEventHash: string;\n\teventHash: string;\n}\n\nexport interface HarnessControlLedgerAnchor {\n\tschemaVersion: \"omk.harness-control.anchor.v1\";\n\tanchoredSequence: number;\n\tanchoredEventHash: string;\n\trotatedFrom: string;\n\ttimestamp: string;\n}\n\nexport interface HarnessControlEventWriteResult {\n\tok: boolean;\n\tpath?: string;\n\tevent?: HarnessControlEvent;\n\terror?: string;\n}\n\nexport interface HarnessControlEventOptions {\n\tcwd?: string;\n\tlogPath?: string;\n\tnow?: Date;\n\tid?: string;\n\teventId?: string;\n\trunId?: string;\n\tsessionId?: string;\n\toperationId?: string;\n\tcausationId?: string | null;\n\tcorrelationId?: string;\n\tbeforeState?: unknown;\n\tafterState?: unknown;\n\tartifactRefs?: string[];\n\tallowedArtifactRoots?: string[];\n\tlockTimeoutMs?: number;\n\tmaxLedgerBytes?: number;\n}\n\nexport interface HarnessControlLedgerQuarantineEntry {\n\tlineNumber: number;\n\treason: string;\n}\n\nexport interface HarnessControlLedgerVerificationResult {\n\tok: boolean;\n\tevents: HarnessControlEvent[];\n\terrors: string[];\n\tquarantinedLines: HarnessControlLedgerQuarantineEntry[];\n}\n\ninterface PreviousEventState {\n\tsequence: number;\n\teventHash: string;\n}\n\ninterface ParsedLedgerLine {\n\tschemaVersion?: string;\n\tsequence?: number;\n\teventHash?: string;\n\tanchoredSequence?: number;\n\tanchoredEventHash?: string;\n}\n\nconst MAX_EVENT_DEPTH = 6;\nconst MAX_EVENT_OBJECT_KEYS = 80;\nconst MAX_EVENT_ARRAY_ITEMS = 80;\nconst MAX_EVENT_STRING_LENGTH = 2000;\nconst REDACTED = \"[redacted]\";\nconst GENESIS_EVENT_HASH = \"0\".repeat(64);\nconst EVENT_SCHEMA_VERSION = \"omk.harness-control.event.v2\";\nconst ANCHOR_SCHEMA_VERSION = \"omk.harness-control.anchor.v1\";\nconst DEFAULT_RUN_ID = \"default-run\";\nconst DEFAULT_SESSION_ID = \"sessionless\";\nconst LOCK_STALE_MS = 30000;\n\nfunction isSensitiveKey(key: string): boolean {\n\treturn /(?:secret|token|api[_-]?key|authorization|password|credential|private[_-]?key)/i.test(key);\n}\n\nfunction redactSensitiveValue(value: string): string {\n\tlet redacted = value;\n\tredacted = redacted.replace(/Bearer\\s+[A-Za-z0-9._~+/=-]+/gi, `Bearer ${REDACTED}`);\n\tredacted = redacted.replace(/sk-(?:proj-|ant-)?[A-Za-z0-9_-]{16,}/g, REDACTED);\n\tredacted = redacted.replace(/\\beyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\b/g, REDACTED);\n\tredacted = redacted.replace(/-----BEGIN [^-]+PRIVATE KEY-----[\\s\\S]*?-----END [^-]+PRIVATE KEY-----/g, REDACTED);\n\tredacted = redacted.replace(/\\b[A-Fa-f0-9]{64,}\\b/g, REDACTED);\n\treturn redacted;\n}\n\nfunction truncateString(value: string): string {\n\tconst redacted = redactSensitiveValue(value);\n\tif (redacted.length <= MAX_EVENT_STRING_LENGTH) return redacted;\n\treturn `${redacted.slice(0, MAX_EVENT_STRING_LENGTH)}…[truncated]`;\n}\n\nfunction sanitizeValue(value: unknown, depth: number, seen: WeakSet<object>): JsonValue {\n\tif (value === null) return null;\n\tif (typeof value === \"string\") return truncateString(value);\n\tif (typeof value === \"number\") return Number.isFinite(value) ? value : String(value);\n\tif (typeof value === \"boolean\") return value;\n\tif (typeof value === \"bigint\") return value.toString();\n\tif (typeof value === \"undefined\" || typeof value === \"function\" || typeof value === \"symbol\") return String(value);\n\tif (depth >= MAX_EVENT_DEPTH) return \"[max-depth]\";\n\n\tif (Array.isArray(value)) {\n\t\treturn value.slice(0, MAX_EVENT_ARRAY_ITEMS).map((entry) => sanitizeValue(entry, depth + 1, seen));\n\t}\n\n\tif (value instanceof Date) return value.toISOString();\n\tif (value instanceof Error) {\n\t\treturn {\n\t\t\tname: value.name,\n\t\t\tmessage: truncateString(value.message),\n\t\t};\n\t}\n\n\tif (typeof value === \"object\") {\n\t\tif (seen.has(value)) return \"[circular]\";\n\t\tseen.add(value);\n\t\tconst result: JsonObject = {};\n\t\tfor (const [key, entry] of Object.entries(value).slice(0, MAX_EVENT_OBJECT_KEYS)) {\n\t\t\tresult[key] = isSensitiveKey(key) ? REDACTED : sanitizeValue(entry, depth + 1, seen);\n\t\t}\n\t\tseen.delete(value);\n\t\treturn result;\n\t}\n\n\treturn String(value);\n}\n\nexport function sanitizeHarnessControlEventData(data: unknown): JsonObject {\n\tconst sanitized = sanitizeValue(data ?? {}, 0, new WeakSet<object>());\n\treturn typeof sanitized === \"object\" && sanitized !== null && !Array.isArray(sanitized)\n\t\t? sanitized\n\t\t: { value: sanitized };\n}\n\nexport function canonicalJson(value: JsonValue): string {\n\tif (value === null) return \"null\";\n\tif (typeof value === \"string\" || typeof value === \"number\" || typeof value === \"boolean\") {\n\t\treturn JSON.stringify(value);\n\t}\n\tif (Array.isArray(value)) {\n\t\treturn `[${value.map((entry) => canonicalJson(entry)).join(\",\")}]`;\n\t}\n\treturn `{${Object.keys(value)\n\t\t.sort()\n\t\t.map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key] ?? null)}`)\n\t\t.join(\",\")}}`;\n}\n\nexport function hashCanonical(value: unknown): string {\n\treturn createHash(\"sha256\")\n\t\t.update(canonicalJson(sanitizeValue(value, 0, new WeakSet<object>())))\n\t\t.digest(\"hex\");\n}\n\nfunction sha256Text(value: string): string {\n\treturn createHash(\"sha256\").update(value).digest(\"hex\");\n}\n\nfunction sha256File(path: string): string {\n\treturn createHash(\"sha256\").update(readFileSync(path)).digest(\"hex\");\n}\n\nfunction isPathWithin(parent: string, child: string): boolean {\n\tconst resolvedParent = resolve(parent);\n\tconst resolvedChild = resolve(child);\n\treturn resolvedChild === resolvedParent || resolvedChild.startsWith(`${resolvedParent}${sep}`);\n}\n\nfunction isSensitivePath(path: string): boolean {\n\treturn /(?:^|[/\\\\])(?:\\.env[^/\\\\]*|auth\\.json|oauth\\.json|.*(?:secret|token|credential|private[_-]?key).*)$/i.test(\n\t\tpath,\n\t);\n}\n\nfunction defaultAllowedArtifactRoots(cwd: string, logPath: string): string[] {\n\treturn [cwd, dirname(logPath)];\n}\n\nfunction safeRealPath(target: string): string {\n\ttry {\n\t\treturn realpathSync(target);\n\t} catch {\n\t\treturn resolve(target);\n\t}\n}\n\nfunction createArtifactManifest(\n\tartifactRefs: string[] | undefined,\n\tcwd: string,\n\tlogPath: string,\n\tallowedArtifactRoots: string[] | undefined,\n): HarnessControlArtifactManifestEntry[] {\n\tif (!artifactRefs || artifactRefs.length === 0) return [];\n\tconst logicalRoots = (allowedArtifactRoots ?? defaultAllowedArtifactRoots(cwd, logPath)).map((root) =>\n\t\tresolve(root),\n\t);\n\tconst canonicalRoots = logicalRoots.map((root) => safeRealPath(root));\n\treturn artifactRefs.map((artifactPath) => {\n\t\tconst resolvedPath = resolve(cwd, artifactPath);\n\t\tconst allowed = logicalRoots.some((root) => isPathWithin(root, resolvedPath)) && !isSensitivePath(resolvedPath);\n\t\tif (!allowed) return { path: artifactPath, exists: existsSync(resolvedPath), allowed: false };\n\t\tif (!existsSync(resolvedPath)) return { path: artifactPath, exists: false, allowed: true };\n\t\ttry {\n\t\t\tconst linkStats = lstatSync(resolvedPath);\n\t\t\tconst realPath = realpathSync(resolvedPath);\n\t\t\tif (!canonicalRoots.some((root) => isPathWithin(root, realPath))) {\n\t\t\t\treturn {\n\t\t\t\t\tpath: artifactPath,\n\t\t\t\t\texists: true,\n\t\t\t\t\tallowed: false,\n\t\t\t\t\terror: linkStats.isSymbolicLink()\n\t\t\t\t\t\t? \"artifact symlink resolves outside allowed roots\"\n\t\t\t\t\t\t: \"artifact resolves outside allowed roots\",\n\t\t\t\t};\n\t\t\t}\n\t\t\tconst stats = statSync(realPath);\n\t\t\tif (!stats.isFile()) return { path: artifactPath, exists: true, allowed: true, sizeBytes: stats.size };\n\t\t\treturn {\n\t\t\t\tpath: artifactPath,\n\t\t\t\texists: true,\n\t\t\t\tallowed: true,\n\t\t\t\tsizeBytes: stats.size,\n\t\t\t\tsha256: sha256File(realPath),\n\t\t\t};\n\t\t} catch (error) {\n\t\t\treturn {\n\t\t\t\tpath: artifactPath,\n\t\t\t\texists: existsSync(resolvedPath),\n\t\t\t\tallowed: true,\n\t\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t\t};\n\t\t}\n\t});\n}\n\nexport function resolveHarnessControlEventLogPath(options: HarnessControlEventOptions = {}): string | undefined {\n\tif (process.env.OMK_HARNESS_CONTROL_EVENTS === \"0\") return undefined;\n\tif (options.logPath) return options.logPath;\n\tif (process.env.OMK_HARNESS_CONTROL_EVENT_LOG) return process.env.OMK_HARNESS_CONTROL_EVENT_LOG;\n\tconst runId = options.runId ?? DEFAULT_RUN_ID;\n\treturn join(options.cwd ?? process.cwd(), \".omk\", \"runs\", runId, \"harness-control\", \"events.jsonl\");\n}\n\nfunction eventHashInput(eventWithoutHash: Omit<HarnessControlEvent, \"eventHash\">): string {\n\treturn `${canonicalJson(eventWithoutHash as unknown as JsonObject)}${eventWithoutHash.previousEventHash}`;\n}\n\nfunction computeEventHash(eventWithoutHash: Omit<HarnessControlEvent, \"eventHash\">): string {\n\treturn sha256Text(eventHashInput(eventWithoutHash));\n}\n\nfunction readPreviousEventState(logPath: string): PreviousEventState {\n\tif (!existsSync(logPath)) return { sequence: 0, eventHash: GENESIS_EVENT_HASH };\n\tconst lines = readFileSync(logPath, \"utf-8\")\n\t\t.split(\"\\n\")\n\t\t.map((line) => line.trim())\n\t\t.filter((line) => line.length > 0);\n\tif (lines.length === 0) return { sequence: 0, eventHash: GENESIS_EVENT_HASH };\n\n\tlet parsed: ParsedLedgerLine;\n\ttry {\n\t\tparsed = JSON.parse(lines.at(-1)!) as ParsedLedgerLine;\n\t} catch {\n\t\tthrow new Error(\"Last harness ledger line is not valid JSON — ledger may be truncated or corrupted\");\n\t}\n\tif (parsed.schemaVersion === ANCHOR_SCHEMA_VERSION) {\n\t\tif (typeof parsed.anchoredSequence !== \"number\" || typeof parsed.anchoredEventHash !== \"string\") {\n\t\t\tthrow new Error(\"Previous harness ledger anchor is missing anchoredSequence or anchoredEventHash\");\n\t\t}\n\t\treturn { sequence: parsed.anchoredSequence, eventHash: parsed.anchoredEventHash };\n\t}\n\tif (parsed.schemaVersion !== EVENT_SCHEMA_VERSION) {\n\t\treturn { sequence: 0, eventHash: GENESIS_EVENT_HASH };\n\t}\n\tif (typeof parsed.sequence !== \"number\" || !Number.isInteger(parsed.sequence) || parsed.sequence < 0) {\n\t\tthrow new Error(\"Previous harness event has invalid or missing sequence\");\n\t}\n\tif (typeof parsed.eventHash !== \"string\" || !/^[a-f0-9]{64}$/.test(parsed.eventHash)) {\n\t\tthrow new Error(\"Previous harness event has invalid or missing eventHash\");\n\t}\n\treturn { sequence: parsed.sequence, eventHash: parsed.eventHash };\n}\n\nfunction acquireLock(lockPath: string, timeoutMs: number): number {\n\tconst start = Date.now();\n\twhile (true) {\n\t\ttry {\n\t\t\treturn openSync(lockPath, \"wx\", 0o600);\n\t\t} catch (error) {\n\t\t\tif (existsSync(lockPath)) {\n\t\t\t\ttry {\n\t\t\t\t\tconst stats = statSync(lockPath);\n\t\t\t\t\tif (Date.now() - stats.mtimeMs > LOCK_STALE_MS) rmSync(lockPath, { force: true });\n\t\t\t\t} catch {}\n\t\t\t}\n\t\t\tif (Date.now() - start >= timeoutMs) {\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t}\n\t}\n}\n\nfunction formatRotationTimestamp(date: Date): string {\n\treturn date.toISOString().replace(/[:.]/g, \"-\");\n}\n\nfunction fsyncDirectory(dirPath: string): void {\n\ttry {\n\t\tconst dirFd = openSync(dirPath, \"r\");\n\t\ttry {\n\t\t\tfsyncSync(dirFd);\n\t\t} finally {\n\t\t\tcloseSync(dirFd);\n\t\t}\n\t} catch {\n\t\t// Some platforms/filesystems do not support directory fsync; file fsync above is still mandatory.\n\t}\n}\n\nfunction enforcePrivateFilePermissions(filePath: string): void {\n\ttry {\n\t\tif (existsSync(filePath) && (statSync(filePath).mode & 0o777) !== 0o600) {\n\t\t\tchmodSync(filePath, 0o600);\n\t\t}\n\t} catch {\n\t\t/* best-effort permission enforcement */\n\t}\n}\n\nfunction rotateLedgerIfNeeded(path: string, maxLedgerBytes: number | undefined, now: Date): string | undefined {\n\tif (!Number.isFinite(maxLedgerBytes) || (maxLedgerBytes ?? 0) <= 0 || !existsSync(path)) return undefined;\n\tenforcePrivateFilePermissions(path);\n\tconst stats = statSync(path);\n\tif (stats.size < Math.floor(maxLedgerBytes ?? 0)) return undefined;\n\t// Capture the rotated segment's terminal state so the fresh segment continues\n\t// the global sequence and hash chain instead of restarting from genesis.\n\tconst anchorState = readPreviousEventState(path);\n\tconst rotatedPath = `${path}.${formatRotationTimestamp(now)}.rotated`;\n\trenameSync(path, rotatedPath);\n\tenforcePrivateFilePermissions(rotatedPath);\n\tfsyncDirectory(dirname(path));\n\tif (anchorState.sequence > 0) {\n\t\tconst anchor: HarnessControlLedgerAnchor = {\n\t\t\tschemaVersion: ANCHOR_SCHEMA_VERSION,\n\t\t\tanchoredSequence: anchorState.sequence,\n\t\t\tanchoredEventHash: anchorState.eventHash,\n\t\t\trotatedFrom: basename(rotatedPath),\n\t\t\ttimestamp: now.toISOString(),\n\t\t};\n\t\tappendJsonLineWithFsync(path, JSON.stringify(anchor));\n\t}\n\treturn rotatedPath;\n}\n\nfunction appendJsonLineWithFsync(path: string, line: string): void {\n\tconst fd = openSync(path, \"a\", 0o600);\n\ttry {\n\t\tenforcePrivateFilePermissions(path);\n\t\twriteSync(fd, `${line}\\n`, undefined, \"utf-8\");\n\t\tfsyncSync(fd);\n\t} finally {\n\t\tcloseSync(fd);\n\t}\n\tfsyncDirectory(dirname(path));\n}\n\nexport function createHarnessControlEvent(\n\tkind: HarnessControlEventKind,\n\tstatus: HarnessControlEventStatus,\n\tdata: unknown = {},\n\toptions: HarnessControlEventOptions = {},\n\tprevious: PreviousEventState = { sequence: 0, eventHash: GENESIS_EVENT_HASH },\n): HarnessControlEvent {\n\tconst eventId = options.eventId ?? options.id ?? randomUUID();\n\tconst operationId = options.operationId ?? eventId;\n\tconst logPath = resolveHarnessControlEventLogPath(options) ?? \"\";\n\tconst cwd = options.cwd ?? process.cwd();\n\tconst sanitizedData = sanitizeHarnessControlEventData(data);\n\tconst eventWithoutHash: Omit<HarnessControlEvent, \"eventHash\"> = {\n\t\tschemaVersion: \"omk.harness-control.event.v2\",\n\t\teventId,\n\t\trunId: options.runId ?? DEFAULT_RUN_ID,\n\t\tsessionId: options.sessionId ?? DEFAULT_SESSION_ID,\n\t\toperationId,\n\t\tcausationId: options.causationId ?? null,\n\t\tcorrelationId: options.correlationId ?? operationId,\n\t\tsequence: previous.sequence + 1,\n\t\ttimestamp: (options.now ?? new Date()).toISOString(),\n\t\tkind,\n\t\tstatus,\n\t\tcwd,\n\t\tbeforeStateHash: hashCanonical(options.beforeState ?? null),\n\t\tafterStateHash: hashCanonical(options.afterState ?? null),\n\t\tdata: sanitizedData,\n\t\tdataHash: hashCanonical(sanitizedData),\n\t\tartifacts: createArtifactManifest(options.artifactRefs, cwd, logPath, options.allowedArtifactRoots),\n\t\tpreviousEventHash: previous.eventHash,\n\t};\n\treturn { ...eventWithoutHash, eventHash: computeEventHash(eventWithoutHash) };\n}\n\nexport function recordHarnessControlEvent(\n\tkind: HarnessControlEventKind,\n\tstatus: HarnessControlEventStatus,\n\tdata: unknown = {},\n\toptions: HarnessControlEventOptions = {},\n): HarnessControlEventWriteResult {\n\tconst logPath = resolveHarnessControlEventLogPath(options);\n\tif (!logPath) return { ok: false, error: \"harness control event logging disabled\" };\n\tconst lockPath = `${logPath}.lock`;\n\tlet lockFd: number | undefined;\n\ttry {\n\t\tmkdirSync(dirname(logPath), { recursive: true, mode: 0o700 });\n\t\t// Re-apply directory permissions on platforms where umask\n\t\t// overrides the mode passed to mkdirSync.\n\t\ttry {\n\t\t\tconst dirStats = statSync(dirname(logPath));\n\t\t\tif ((dirStats.mode & 0o777) !== 0o700) {\n\t\t\t\tchmodSync(dirname(logPath), 0o700);\n\t\t\t}\n\t\t} catch {\n\t\t\t/* best-effort permission enforcement */\n\t\t}\n\t\tlockFd = acquireLock(lockPath, options.lockTimeoutMs ?? 1000);\n\t\trotateLedgerIfNeeded(logPath, options.maxLedgerBytes, options.now ?? new Date());\n\t\tconst previous = readPreviousEventState(logPath);\n\t\tconst event = createHarnessControlEvent(kind, status, data, options, previous);\n\t\tappendJsonLineWithFsync(logPath, JSON.stringify(event));\n\t\treturn { ok: true, path: logPath, event };\n\t} catch (error) {\n\t\treturn { ok: false, path: logPath, error: error instanceof Error ? error.message : String(error) };\n\t} finally {\n\t\tif (lockFd !== undefined) {\n\t\t\ttry {\n\t\t\t\tcloseSync(lockFd);\n\t\t\t} catch {}\n\t\t\trmSync(lockPath, { force: true });\n\t\t}\n\t}\n}\n\nfunction validateLedgerAnchor(anchor: ParsedLedgerLine): string | undefined {\n\tif (\n\t\ttypeof anchor.anchoredSequence !== \"number\" ||\n\t\t!Number.isInteger(anchor.anchoredSequence) ||\n\t\tanchor.anchoredSequence < 1\n\t) {\n\t\treturn \"ledger anchor has an invalid anchoredSequence\";\n\t}\n\tif (typeof anchor.anchoredEventHash !== \"string\" || !/^[a-f0-9]{64}$/.test(anchor.anchoredEventHash)) {\n\t\treturn \"ledger anchor has an invalid anchoredEventHash\";\n\t}\n\treturn undefined;\n}\n\nconst VALID_EVENT_STATUSES = new Set<string>([\n\t\"prepared\",\n\t\"started\",\n\t\"applying\",\n\t\"verifying\",\n\t\"completed\",\n\t\"failed\",\n\t\"blocked\",\n\t\"rolled_back\",\n\t\"in_doubt\",\n]);\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction validateHarnessControlEventRecord(record: Record<string, unknown>): string | undefined {\n\tif (record.schemaVersion !== EVENT_SCHEMA_VERSION) return \"unsupported schemaVersion\";\n\tconst stringFields = [\n\t\t\"eventId\",\n\t\t\"runId\",\n\t\t\"sessionId\",\n\t\t\"operationId\",\n\t\t\"correlationId\",\n\t\t\"timestamp\",\n\t\t\"kind\",\n\t\t\"cwd\",\n\t\t\"beforeStateHash\",\n\t\t\"afterStateHash\",\n\t\t\"dataHash\",\n\t\t\"previousEventHash\",\n\t\t\"eventHash\",\n\t] as const;\n\tfor (const field of stringFields) {\n\t\tif (typeof record[field] !== \"string\") return `event is missing or has invalid ${field}`;\n\t}\n\tif (typeof record.sequence !== \"number\" || !Number.isInteger(record.sequence) || record.sequence < 1) {\n\t\treturn \"event has invalid sequence\";\n\t}\n\tif (typeof record.causationId !== \"string\" && record.causationId !== null) {\n\t\treturn \"event has invalid causationId\";\n\t}\n\tif (typeof record.status !== \"string\" || !VALID_EVENT_STATUSES.has(record.status)) {\n\t\treturn \"event has invalid status\";\n\t}\n\tif (typeof record.eventHash !== \"string\" || !/^[a-f0-9]{64}$/.test(record.eventHash)) {\n\t\treturn \"event has invalid eventHash\";\n\t}\n\tif (typeof record.previousEventHash !== \"string\" || !/^[a-f0-9]{64}$/.test(record.previousEventHash)) {\n\t\treturn \"event has invalid previousEventHash\";\n\t}\n\tif (!isRecord(record.data)) return \"event has invalid data\";\n\tif (!Array.isArray(record.artifacts)) return \"event has invalid artifacts\";\n\treturn undefined;\n}\n\nfunction validateEventHash(event: HarnessControlEvent): string | undefined {\n\tconst { eventHash: _eventHash, ...eventWithoutHash } = event;\n\tconst expectedEventHash = computeEventHash(eventWithoutHash);\n\tif (expectedEventHash !== event.eventHash) {\n\t\treturn `event ${event.eventId} hash mismatch`;\n\t}\n\tif (hashCanonical(event.data) !== event.dataHash) {\n\t\treturn `event ${event.eventId} dataHash mismatch`;\n\t}\n\treturn undefined;\n}\n\nexport function verifyHarnessControlLedger(logPath: string): HarnessControlLedgerVerificationResult {\n\tconst errors: string[] = [];\n\tconst events: HarnessControlEvent[] = [];\n\tconst quarantinedLines: HarnessControlLedgerQuarantineEntry[] = [];\n\tif (!existsSync(logPath)) return { ok: true, events, errors, quarantinedLines };\n\tconst lines = readFileSync(logPath, \"utf-8\")\n\t\t.split(\"\\n\")\n\t\t.map((line) => line.trim())\n\t\t.filter((line) => line.length > 0);\n\tlet previousSequence = 0;\n\tlet previousEventHash = GENESIS_EVENT_HASH;\n\n\tfunction quarantine(lineNumber: number, reason: string): void {\n\t\tquarantinedLines.push({ lineNumber, reason });\n\t\terrors.push(`line ${lineNumber}: quarantined — ${reason}`);\n\t}\n\n\tfor (let index = 0; index < lines.length; index++) {\n\t\tconst lineNumber = index + 1;\n\t\tlet parsed: Record<string, unknown>;\n\t\ttry {\n\t\t\tparsed = JSON.parse(lines[index]!) as Record<string, unknown>;\n\t\t} catch (error) {\n\t\t\tquarantine(lineNumber, error instanceof Error ? error.message : String(error));\n\t\t\tcontinue;\n\t\t}\n\t\tif (parsed.schemaVersion === ANCHOR_SCHEMA_VERSION) {\n\t\t\tif (index !== 0) {\n\t\t\t\tquarantine(lineNumber, \"ledger anchor must be the first line\");\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst anchorError = validateLedgerAnchor(parsed as ParsedLedgerLine);\n\t\t\tif (anchorError) {\n\t\t\t\tquarantine(lineNumber, anchorError);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tpreviousSequence = parsed.anchoredSequence as number;\n\t\t\tpreviousEventHash = parsed.anchoredEventHash as string;\n\t\t\tcontinue;\n\t\t}\n\t\tconst shapeError = validateHarnessControlEventRecord(parsed);\n\t\tif (shapeError) {\n\t\t\tquarantine(lineNumber, shapeError);\n\t\t\tcontinue;\n\t\t}\n\t\tconst event = parsed as unknown as HarnessControlEvent;\n\t\tif (event.sequence !== previousSequence + 1) {\n\t\t\tquarantine(lineNumber, `sequence gap: expected ${previousSequence + 1}, got ${event.sequence}`);\n\t\t\tcontinue;\n\t\t}\n\t\tif (event.previousEventHash !== previousEventHash) {\n\t\t\tquarantine(lineNumber, \"previousEventHash mismatch\");\n\t\t\tcontinue;\n\t\t}\n\t\tconst hashError = validateEventHash(event);\n\t\tif (hashError) {\n\t\t\tquarantine(lineNumber, hashError);\n\t\t\tcontinue;\n\t\t}\n\t\tevents.push(event);\n\t\tpreviousSequence = event.sequence;\n\t\tpreviousEventHash = event.eventHash;\n\t}\n\treturn { ok: errors.length === 0, events, errors, quarantinedLines };\n}\n"]}

package/dist/core/harness-control-replay.d.ts

@@ -0,0 +1,31 @@
+import type { HarnessControlEvent, HarnessControlEventStatus, HarnessControlLedgerQuarantineEntry } from "./harness-control-events.ts";
+export interface HarnessControlReplayOptions {
+    verifyArtifacts?: boolean;
+    artifactBaseDir?: string;
+}
+export interface HarnessControlOperationReplay {
+    operationId: string;
+    kind: string;
+    started: boolean;
+    terminalStatus?: HarnessControlEventStatus;
+    terminalEventIds: string[];
+    eventIds: string[];
+    sequenceRange: [number, number];
+    stateTransitions: Array<{
+        beforeStateHash: string;
+        afterStateHash: string;
+    }>;
+    finalStateHash?: string;
+}
+export interface HarnessControlReplayReport {
+    ok: boolean;
+    events: HarnessControlEvent[];
+    operations: HarnessControlOperationReplay[];
+    reconstructedStateHash: string;
+    errors: string[];
+    warnings: string[];
+    quarantinedLines: HarnessControlLedgerQuarantineEntry[];
+}
+export declare function replayHarnessControlEvents(events: readonly HarnessControlEvent[]): HarnessControlReplayReport;
+export declare function verifyHarnessControlReplay(logPath: string, options?: HarnessControlReplayOptions): HarnessControlReplayReport;
+//# sourceMappingURL=harness-control-replay.d.ts.map

package/dist/core/harness-control-replay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-control-replay.d.ts","sourceRoot":"","sources":["../../src/core/harness-control-replay.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,mBAAmB,EACnB,yBAAyB,EACzB,mCAAmC,EACnC,MAAM,6BAA6B,CAAC;AAQrC,MAAM,WAAW,2BAA2B;IAG3C,eAAe,CAAC,EAAE,OAAO,CAAC;IAG1B,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,6BAA6B;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,yBAAyB,CAAC;IAC3C,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,gBAAgB,EAAE,KAAK,CAAC;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IAC1C,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,UAAU,EAAE,6BAA6B,EAAE,CAAC;IAC5C,sBAAsB,EAAE,MAAM,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,gBAAgB,EAAE,mCAAmC,EAAE,CAAC;CACxD;AA2HD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,SAAS,mBAAmB,EAAE,GAAG,0BAA0B,CAqC7G;AAkCD,wBAAgB,0BAA0B,CACzC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,2BAAgC,GACvC,0BAA0B,CAa5B","sourcesContent":["import type {\n\tHarnessControlEvent,\n\tHarnessControlEventStatus,\n\tHarnessControlLedgerQuarantineEntry,\n} from \"./harness-control-events.ts\";\nimport { hashCanonical, verifyHarnessControlLedger } from \"./harness-control-events.ts\";\nimport {\n\tcanonicalizeBaseDir,\n\tcreateFsArtifactResolver,\n\tverifyArtifactReference,\n} from \"./orchestration/replay-ledger.ts\";\n\nexport interface HarnessControlReplayOptions {\n\t// Re-hash artifacts referenced by ledger events that recorded allowed + sha256\n\t// manifest entries. Enabled by default; disable for ledger-shape-only replay.\n\tverifyArtifacts?: boolean;\n\t// Override the base directory used to resolve relative artifact paths. Defaults\n\t// to each event's recorded cwd.\n\tartifactBaseDir?: string;\n}\n\nexport interface HarnessControlOperationReplay {\n\toperationId: string;\n\tkind: string;\n\tstarted: boolean;\n\tterminalStatus?: HarnessControlEventStatus;\n\tterminalEventIds: string[];\n\teventIds: string[];\n\tsequenceRange: [number, number];\n\tstateTransitions: Array<{ beforeStateHash: string; afterStateHash: string }>;\n\tfinalStateHash?: string;\n}\n\nexport interface HarnessControlReplayReport {\n\tok: boolean;\n\tevents: HarnessControlEvent[];\n\toperations: HarnessControlOperationReplay[];\n\treconstructedStateHash: string;\n\terrors: string[];\n\twarnings: string[];\n\tquarantinedLines: HarnessControlLedgerQuarantineEntry[];\n}\n\nconst TERMINAL_STATUSES = new Set<HarnessControlEventStatus>([\n\t\"completed\",\n\t\"failed\",\n\t\"blocked\",\n\t\"rolled_back\",\n\t\"in_doubt\",\n]);\n\nconst NON_TERMINAL_STATUS_ORDER = new Map<HarnessControlEventStatus, number>([\n\t[\"prepared\", 0],\n\t[\"started\", 1],\n\t[\"applying\", 2],\n\t[\"verifying\", 3],\n]);\n\nfunction isTerminalStatus(status: HarnessControlEventStatus): boolean {\n\treturn TERMINAL_STATUSES.has(status);\n}\n\nfunction createOperationReplay(operationId: string, events: HarnessControlEvent[]): HarnessControlOperationReplay {\n\tconst sortedEvents = [...events].sort((a, b) => a.sequence - b.sequence);\n\tconst terminalEvents = sortedEvents.filter((event) => isTerminalStatus(event.status));\n\tconst terminal = terminalEvents.at(-1);\n\treturn {\n\t\toperationId,\n\t\tkind: sortedEvents[0]?.kind ?? \"unknown\",\n\t\tstarted: sortedEvents.some((event) => event.status === \"started\"),\n\t\tterminalStatus: terminal?.status,\n\t\tterminalEventIds: terminalEvents.map((event) => event.eventId),\n\t\teventIds: sortedEvents.map((event) => event.eventId),\n\t\tsequenceRange: [sortedEvents[0]?.sequence ?? 0, sortedEvents.at(-1)?.sequence ?? 0],\n\t\tstateTransitions: sortedEvents.map((event) => ({\n\t\t\tbeforeStateHash: event.beforeStateHash,\n\t\t\tafterStateHash: event.afterStateHash,\n\t\t})),\n\t\tfinalStateHash: terminal?.afterStateHash ?? sortedEvents.at(-1)?.afterStateHash,\n\t};\n}\n\nfunction validateUniqueEventIds(events: readonly HarnessControlEvent[]): string[] {\n\tconst errors: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const event of events) {\n\t\tif (seen.has(event.eventId)) errors.push(`event ${event.eventId} is duplicated`);\n\t\tseen.add(event.eventId);\n\t}\n\treturn errors;\n}\n\nfunction validateCausation(events: readonly HarnessControlEvent[]): string[] {\n\tconst errors: string[] = [];\n\tconst byId = new Map(events.map((event) => [event.eventId, event]));\n\tfor (const event of events) {\n\t\tif (!event.causationId) continue;\n\t\tconst causationEvent = byId.get(event.causationId);\n\t\tif (\n\t\t\t!causationEvent ||\n\t\t\tcausationEvent.sequence >= event.sequence ||\n\t\t\tcausationEvent.correlationId !== event.correlationId\n\t\t) {\n\t\t\terrors.push(\n\t\t\t\t`event causation ${event.causationId} for operation ${event.operationId} does not reference an earlier event`,\n\t\t\t);\n\t\t}\n\t}\n\treturn errors;\n}\n\nfunction reconstructHarnessStateHash(operations: readonly HarnessControlOperationReplay[]): string {\n\treturn hashCanonical(\n\t\toperations.map((operation) => ({\n\t\t\toperationId: operation.operationId,\n\t\t\tkind: operation.kind,\n\t\t\tfinalStateHash: operation.finalStateHash,\n\t\t\tterminalStatus: operation.terminalStatus,\n\t\t})),\n\t);\n}\n\nfunction validateOperationStateMachine(\n\toperation: HarnessControlOperationReplay,\n\tevents: HarnessControlEvent[],\n): string[] {\n\tconst errors: string[] = [];\n\tconst sortedEvents = [...events].sort((a, b) => a.sequence - b.sequence);\n\tconst kinds = new Set(sortedEvents.map((event) => event.kind));\n\tconst correlations = new Set(sortedEvents.map((event) => event.correlationId));\n\tconst startedCount = sortedEvents.filter((event) => event.status === \"started\").length;\n\tlet lastNonTerminalOrder = -1;\n\tlet sawTerminal = false;\n\tlet sawEventAfterTerminal = false;\n\n\tif (kinds.size > 1) errors.push(`operation ${operation.operationId} mixes event kinds`);\n\tif (correlations.size > 1) errors.push(`operation ${operation.operationId} mixes correlation ids`);\n\tif (startedCount > 1) errors.push(`operation ${operation.operationId} has multiple started events`);\n\tif (operation.terminalEventIds.length > 1)\n\t\terrors.push(`operation ${operation.operationId} has multiple terminal events`);\n\n\tfor (const event of sortedEvents) {\n\t\tif (sawTerminal) {\n\t\t\tsawEventAfterTerminal = true;\n\t\t\tcontinue;\n\t\t}\n\t\tif (isTerminalStatus(event.status)) {\n\t\t\tsawTerminal = true;\n\t\t\tcontinue;\n\t\t}\n\t\tconst order = NON_TERMINAL_STATUS_ORDER.get(event.status);\n\t\tif (order === undefined) {\n\t\t\terrors.push(`operation ${operation.operationId} has unsupported status ${event.status}`);\n\t\t\tcontinue;\n\t\t}\n\t\tif (order < lastNonTerminalOrder) {\n\t\t\terrors.push(`operation ${operation.operationId} has invalid status transition to ${event.status}`);\n\t\t}\n\t\tlastNonTerminalOrder = order;\n\t}\n\tif (sawEventAfterTerminal) errors.push(`operation ${operation.operationId} has event after terminal event`);\n\treturn errors;\n}\n\nexport function replayHarnessControlEvents(events: readonly HarnessControlEvent[]): HarnessControlReplayReport {\n\tconst errors: string[] = [];\n\tconst warnings: string[] = [];\n\tconst operationEvents = new Map<string, HarnessControlEvent[]>();\n\tfor (const event of events) {\n\t\tconst group = operationEvents.get(event.operationId) ?? [];\n\t\tgroup.push(event);\n\t\toperationEvents.set(event.operationId, group);\n\t}\n\n\tconst operations = [...operationEvents]\n\t\t.sort(([, a], [, b]) => (a[0]?.sequence ?? 0) - (b[0]?.sequence ?? 0))\n\t\t.map(([operationId, groupedEvents]) => createOperationReplay(operationId, groupedEvents));\n\n\terrors.push(...validateUniqueEventIds(events));\n\terrors.push(...validateCausation(events));\n\n\tfor (const operation of operations) {\n\t\tconst groupedEvents = operationEvents.get(operation.operationId) ?? [];\n\t\terrors.push(...validateOperationStateMachine(operation, groupedEvents));\n\t\tif (!operation.started) {\n\t\t\twarnings.push(`operation ${operation.operationId} has no started event`);\n\t\t}\n\t\tif (!operation.terminalStatus) {\n\t\t\terrors.push(`operation ${operation.operationId} has no terminal event`);\n\t\t}\n\t}\n\n\treturn {\n\t\tok: errors.length === 0,\n\t\tevents: [...events],\n\t\toperations,\n\t\treconstructedStateHash: reconstructHarnessStateHash(operations),\n\t\terrors,\n\t\twarnings,\n\t\tquarantinedLines: [],\n\t};\n}\n\nfunction verifyReplayArtifacts(\n\tevents: readonly HarnessControlEvent[],\n\toptions: HarnessControlReplayOptions,\n): { errors: string[]; warnings: string[] } {\n\tconst errors: string[] = [];\n\tconst warnings: string[] = [];\n\tif (options.verifyArtifacts === false) return { errors, warnings };\n\tfor (const event of events) {\n\t\tconst artifacts = Array.isArray(event.artifacts) ? event.artifacts : [];\n\t\tif (artifacts.length === 0) continue;\n\t\tconst baseDir = canonicalizeBaseDir(options.artifactBaseDir ?? event.cwd);\n\t\tconst resolver = createFsArtifactResolver(baseDir);\n\t\tfor (const entry of artifacts) {\n\t\t\t// Only rehash manifest entries that were recorded as allowed files.\n\t\t\tif (!entry || entry.allowed !== true || typeof entry.sha256 !== \"string\") continue;\n\t\t\tconst resolved = resolver(entry.path);\n\t\t\tif (resolved === undefined) {\n\t\t\t\twarnings.push(`event ${event.eventId} artifact ${entry.path} is no longer present for rehash`);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst result = verifyArtifactReference(\n\t\t\t\t{ path: entry.path, repoRoot: baseDir, sha256: entry.sha256 },\n\t\t\t\t() => resolved,\n\t\t\t);\n\t\t\tif (!result.ok) {\n\t\t\t\terrors.push(`event ${event.eventId} artifact ${entry.path}: ${result.error}`);\n\t\t\t}\n\t\t}\n\t}\n\treturn { errors, warnings };\n}\n\nexport function verifyHarnessControlReplay(\n\tlogPath: string,\n\toptions: HarnessControlReplayOptions = {},\n): HarnessControlReplayReport {\n\tconst ledger = verifyHarnessControlLedger(logPath);\n\tconst replay = replayHarnessControlEvents(ledger.events);\n\tconst artifacts = verifyReplayArtifacts(ledger.events, options);\n\treturn {\n\t\tok: ledger.ok && replay.ok && artifacts.errors.length === 0,\n\t\tevents: ledger.events,\n\t\toperations: replay.operations,\n\t\treconstructedStateHash: replay.reconstructedStateHash,\n\t\terrors: [...ledger.errors, ...replay.errors, ...artifacts.errors],\n\t\twarnings: [...replay.warnings, ...artifacts.warnings],\n\t\tquarantinedLines: ledger.quarantinedLines,\n\t};\n}\n"]}

package/dist/core/harness-control-replay.js

@@ -0,0 +1,187 @@
+import { hashCanonical, verifyHarnessControlLedger } from "./harness-control-events.js";
+import { canonicalizeBaseDir, createFsArtifactResolver, verifyArtifactReference, } from "./orchestration/replay-ledger.js";
+const TERMINAL_STATUSES = new Set([
+    "completed",
+    "failed",
+    "blocked",
+    "rolled_back",
+    "in_doubt",
+]);
+const NON_TERMINAL_STATUS_ORDER = new Map([
+    ["prepared", 0],
+    ["started", 1],
+    ["applying", 2],
+    ["verifying", 3],
+]);
+function isTerminalStatus(status) {
+    return TERMINAL_STATUSES.has(status);
+}
+function createOperationReplay(operationId, events) {
+    const sortedEvents = [...events].sort((a, b) => a.sequence - b.sequence);
+    const terminalEvents = sortedEvents.filter((event) => isTerminalStatus(event.status));
+    const terminal = terminalEvents.at(-1);
+    return {
+        operationId,
+        kind: sortedEvents[0]?.kind ?? "unknown",
+        started: sortedEvents.some((event) => event.status === "started"),
+        terminalStatus: terminal?.status,
+        terminalEventIds: terminalEvents.map((event) => event.eventId),
+        eventIds: sortedEvents.map((event) => event.eventId),
+        sequenceRange: [sortedEvents[0]?.sequence ?? 0, sortedEvents.at(-1)?.sequence ?? 0],
+        stateTransitions: sortedEvents.map((event) => ({
+            beforeStateHash: event.beforeStateHash,
+            afterStateHash: event.afterStateHash,
+        })),
+        finalStateHash: terminal?.afterStateHash ?? sortedEvents.at(-1)?.afterStateHash,
+    };
+}
+function validateUniqueEventIds(events) {
+    const errors = [];
+    const seen = new Set();
+    for (const event of events) {
+        if (seen.has(event.eventId))
+            errors.push(`event ${event.eventId} is duplicated`);
+        seen.add(event.eventId);
+    }
+    return errors;
+}
+function validateCausation(events) {
+    const errors = [];
+    const byId = new Map(events.map((event) => [event.eventId, event]));
+    for (const event of events) {
+        if (!event.causationId)
+            continue;
+        const causationEvent = byId.get(event.causationId);
+        if (!causationEvent ||
+            causationEvent.sequence >= event.sequence ||
+            causationEvent.correlationId !== event.correlationId) {
+            errors.push(`event causation ${event.causationId} for operation ${event.operationId} does not reference an earlier event`);
+        }
+    }
+    return errors;
+}
+function reconstructHarnessStateHash(operations) {
+    return hashCanonical(operations.map((operation) => ({
+        operationId: operation.operationId,
+        kind: operation.kind,
+        finalStateHash: operation.finalStateHash,
+        terminalStatus: operation.terminalStatus,
+    })));
+}
+function validateOperationStateMachine(operation, events) {
+    const errors = [];
+    const sortedEvents = [...events].sort((a, b) => a.sequence - b.sequence);
+    const kinds = new Set(sortedEvents.map((event) => event.kind));
+    const correlations = new Set(sortedEvents.map((event) => event.correlationId));
+    const startedCount = sortedEvents.filter((event) => event.status === "started").length;
+    let lastNonTerminalOrder = -1;
+    let sawTerminal = false;
+    let sawEventAfterTerminal = false;
+    if (kinds.size > 1)
+        errors.push(`operation ${operation.operationId} mixes event kinds`);
+    if (correlations.size > 1)
+        errors.push(`operation ${operation.operationId} mixes correlation ids`);
+    if (startedCount > 1)
+        errors.push(`operation ${operation.operationId} has multiple started events`);
+    if (operation.terminalEventIds.length > 1)
+        errors.push(`operation ${operation.operationId} has multiple terminal events`);
+    for (const event of sortedEvents) {
+        if (sawTerminal) {
+            sawEventAfterTerminal = true;
+            continue;
+        }
+        if (isTerminalStatus(event.status)) {
+            sawTerminal = true;
+            continue;
+        }
+        const order = NON_TERMINAL_STATUS_ORDER.get(event.status);
+        if (order === undefined) {
+            errors.push(`operation ${operation.operationId} has unsupported status ${event.status}`);
+            continue;
+        }
+        if (order < lastNonTerminalOrder) {
+            errors.push(`operation ${operation.operationId} has invalid status transition to ${event.status}`);
+        }
+        lastNonTerminalOrder = order;
+    }
+    if (sawEventAfterTerminal)
+        errors.push(`operation ${operation.operationId} has event after terminal event`);
+    return errors;
+}
+export function replayHarnessControlEvents(events) {
+    const errors = [];
+    const warnings = [];
+    const operationEvents = new Map();
+    for (const event of events) {
+        const group = operationEvents.get(event.operationId) ?? [];
+        group.push(event);
+        operationEvents.set(event.operationId, group);
+    }
+    const operations = [...operationEvents]
+        .sort(([, a], [, b]) => (a[0]?.sequence ?? 0) - (b[0]?.sequence ?? 0))
+        .map(([operationId, groupedEvents]) => createOperationReplay(operationId, groupedEvents));
+    errors.push(...validateUniqueEventIds(events));
+    errors.push(...validateCausation(events));
+    for (const operation of operations) {
+        const groupedEvents = operationEvents.get(operation.operationId) ?? [];
+        errors.push(...validateOperationStateMachine(operation, groupedEvents));
+        if (!operation.started) {
+            warnings.push(`operation ${operation.operationId} has no started event`);
+        }
+        if (!operation.terminalStatus) {
+            errors.push(`operation ${operation.operationId} has no terminal event`);
+        }
+    }
+    return {
+        ok: errors.length === 0,
+        events: [...events],
+        operations,
+        reconstructedStateHash: reconstructHarnessStateHash(operations),
+        errors,
+        warnings,
+        quarantinedLines: [],
+    };
+}
+function verifyReplayArtifacts(events, options) {
+    const errors = [];
+    const warnings = [];
+    if (options.verifyArtifacts === false)
+        return { errors, warnings };
+    for (const event of events) {
+        const artifacts = Array.isArray(event.artifacts) ? event.artifacts : [];
+        if (artifacts.length === 0)
+            continue;
+        const baseDir = canonicalizeBaseDir(options.artifactBaseDir ?? event.cwd);
+        const resolver = createFsArtifactResolver(baseDir);
+        for (const entry of artifacts) {
+            // Only rehash manifest entries that were recorded as allowed files.
+            if (!entry || entry.allowed !== true || typeof entry.sha256 !== "string")
+                continue;
+            const resolved = resolver(entry.path);
+            if (resolved === undefined) {
+                warnings.push(`event ${event.eventId} artifact ${entry.path} is no longer present for rehash`);
+                continue;
+            }
+            const result = verifyArtifactReference({ path: entry.path, repoRoot: baseDir, sha256: entry.sha256 }, () => resolved);
+            if (!result.ok) {
+                errors.push(`event ${event.eventId} artifact ${entry.path}: ${result.error}`);
+            }
+        }
+    }
+    return { errors, warnings };
+}
+export function verifyHarnessControlReplay(logPath, options = {}) {
+    const ledger = verifyHarnessControlLedger(logPath);
+    const replay = replayHarnessControlEvents(ledger.events);
+    const artifacts = verifyReplayArtifacts(ledger.events, options);
+    return {
+        ok: ledger.ok && replay.ok && artifacts.errors.length === 0,
+        events: ledger.events,
+        operations: replay.operations,
+        reconstructedStateHash: replay.reconstructedStateHash,
+        errors: [...ledger.errors, ...replay.errors, ...artifacts.errors],
+        warnings: [...replay.warnings, ...artifacts.warnings],
+        quarantinedLines: ledger.quarantinedLines,
+    };
+}
+//# sourceMappingURL=harness-control-replay.js.map

package/dist/core/harness-control-replay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-control-replay.js","sourceRoot":"","sources":["../../src/core/harness-control-replay.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACxF,OAAO,EACN,mBAAmB,EACnB,wBAAwB,EACxB,uBAAuB,GACvB,MAAM,kCAAkC,CAAC;AAiC1C,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAA4B;IAC5D,WAAW;IACX,QAAQ;IACR,SAAS;IACT,aAAa;IACb,UAAU;CACV,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAoC;IAC5E,CAAC,UAAU,EAAE,CAAC,CAAC;IACf,CAAC,SAAS,EAAE,CAAC,CAAC;IACd,CAAC,UAAU,EAAE,CAAC,CAAC;IACf,CAAC,WAAW,EAAE,CAAC,CAAC;CAChB,CAAC,CAAC;AAEH,SAAS,gBAAgB,CAAC,MAAiC,EAAW;IACrE,OAAO,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAAA,CACrC;AAED,SAAS,qBAAqB,CAAC,WAAmB,EAAE,MAA6B,EAAiC;IACjH,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IACzE,MAAM,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO;QACN,WAAW;QACX,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,SAAS;QACxC,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC;QACjE,cAAc,EAAE,QAAQ,EAAE,MAAM;QAChC,gBAAgB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;QAC9D,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;QACpD,aAAa,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC;QACnF,gBAAgB,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC9C,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,cAAc,EAAE,KAAK,CAAC,cAAc;SACpC,CAAC,CAAC;QACH,cAAc,EAAE,QAAQ,EAAE,cAAc,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc;KAC/E,CAAC;AAAA,CACF;AAED,SAAS,sBAAsB,CAAC,MAAsC,EAAY;IACjF,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;QACjF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,iBAAiB,CAAC,MAAsC,EAAY;IAC5E,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACpE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,WAAW;YAAE,SAAS;QACjC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACnD,IACC,CAAC,cAAc;YACf,cAAc,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ;YACzC,cAAc,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,EACnD,CAAC;YACF,MAAM,CAAC,IAAI,CACV,mBAAmB,KAAK,CAAC,WAAW,kBAAkB,KAAK,CAAC,WAAW,sCAAsC,CAC7G,CAAC;QACH,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,2BAA2B,CAAC,UAAoD,EAAU;IAClG,OAAO,aAAa,CACnB,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC9B,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,cAAc,EAAE,SAAS,CAAC,cAAc;QACxC,cAAc,EAAE,SAAS,CAAC,cAAc;KACxC,CAAC,CAAC,CACH,CAAC;AAAA,CACF;AAED,SAAS,6BAA6B,CACrC,SAAwC,EACxC,MAA6B,EAClB;IACX,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;IAC/E,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACvF,IAAI,oBAAoB,GAAG,CAAC,CAAC,CAAC;IAC9B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,qBAAqB,GAAG,KAAK,CAAC;IAElC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,WAAW,oBAAoB,CAAC,CAAC;IACxF,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,WAAW,wBAAwB,CAAC,CAAC;IACnG,IAAI,YAAY,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,WAAW,8BAA8B,CAAC,CAAC;IACpG,IAAI,SAAS,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,WAAW,+BAA+B,CAAC,CAAC;IAEhF,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QAClC,IAAI,WAAW,EAAE,CAAC;YACjB,qBAAqB,GAAG,IAAI,CAAC;YAC7B,SAAS;QACV,CAAC;QACD,IAAI,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,WAAW,GAAG,IAAI,CAAC;YACnB,SAAS;QACV,CAAC;QACD,MAAM,KAAK,GAAG,yBAAyB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,WAAW,2BAA2B,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACzF,SAAS;QACV,CAAC;QACD,IAAI,KAAK,GAAG,oBAAoB,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,WAAW,qCAAqC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,oBAAoB,GAAG,KAAK,CAAC;IAC9B,CAAC;IACD,IAAI,qBAAqB;QAAE,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,WAAW,iCAAiC,CAAC,CAAC;IAC5G,OAAO,MAAM,CAAC;AAAA,CACd;AAED,MAAM,UAAU,0BAA0B,CAAC,MAAsC,EAA8B;IAC9G,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,eAAe,GAAG,IAAI,GAAG,EAAiC,CAAC;IACjE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,eAAe,CAAC;SACrC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC;SACrE,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;IAE3F,MAAM,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;IAE1C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACpC,MAAM,aAAa,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,GAAG,6BAA6B,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,WAAW,uBAAuB,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,WAAW,wBAAwB,CAAC,CAAC;QACzE,CAAC;IACF,CAAC;IAED,OAAO;QACN,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC;QACnB,UAAU;QACV,sBAAsB,EAAE,2BAA2B,CAAC,UAAU,CAAC;QAC/D,MAAM;QACN,QAAQ;QACR,gBAAgB,EAAE,EAAE;KACpB,CAAC;AAAA,CACF;AAED,SAAS,qBAAqB,CAC7B,MAAsC,EACtC,OAAoC,EACO;IAC3C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,CAAC,eAAe,KAAK,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACnE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACrC,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,eAAe,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QACnD,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC/B,oEAAoE;YACpE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;gBAAE,SAAS;YACnF,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,OAAO,aAAa,KAAK,CAAC,IAAI,kCAAkC,CAAC,CAAC;gBAC/F,SAAS;YACV,CAAC;YACD,MAAM,MAAM,GAAG,uBAAuB,CACrC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAC7D,GAAG,EAAE,CAAC,QAAQ,CACd,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,OAAO,aAAa,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/E,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAAA,CAC5B;AAED,MAAM,UAAU,0BAA0B,CACzC,OAAe,EACf,OAAO,GAAgC,EAAE,EACZ;IAC7B,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChE,OAAO;QACN,EAAE,EAAE,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,EAAE,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAC3D,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;QACrD,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC;QACjE,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC;QACrD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;KACzC,CAAC;AAAA,CACF","sourcesContent":["import type {\n\tHarnessControlEvent,\n\tHarnessControlEventStatus,\n\tHarnessControlLedgerQuarantineEntry,\n} from \"./harness-control-events.ts\";\nimport { hashCanonical, verifyHarnessControlLedger } from \"./harness-control-events.ts\";\nimport {\n\tcanonicalizeBaseDir,\n\tcreateFsArtifactResolver,\n\tverifyArtifactReference,\n} from \"./orchestration/replay-ledger.ts\";\n\nexport interface HarnessControlReplayOptions {\n\t// Re-hash artifacts referenced by ledger events that recorded allowed + sha256\n\t// manifest entries. Enabled by default; disable for ledger-shape-only replay.\n\tverifyArtifacts?: boolean;\n\t// Override the base directory used to resolve relative artifact paths. Defaults\n\t// to each event's recorded cwd.\n\tartifactBaseDir?: string;\n}\n\nexport interface HarnessControlOperationReplay {\n\toperationId: string;\n\tkind: string;\n\tstarted: boolean;\n\tterminalStatus?: HarnessControlEventStatus;\n\tterminalEventIds: string[];\n\teventIds: string[];\n\tsequenceRange: [number, number];\n\tstateTransitions: Array<{ beforeStateHash: string; afterStateHash: string }>;\n\tfinalStateHash?: string;\n}\n\nexport interface HarnessControlReplayReport {\n\tok: boolean;\n\tevents: HarnessControlEvent[];\n\toperations: HarnessControlOperationReplay[];\n\treconstructedStateHash: string;\n\terrors: string[];\n\twarnings: string[];\n\tquarantinedLines: HarnessControlLedgerQuarantineEntry[];\n}\n\nconst TERMINAL_STATUSES = new Set<HarnessControlEventStatus>([\n\t\"completed\",\n\t\"failed\",\n\t\"blocked\",\n\t\"rolled_back\",\n\t\"in_doubt\",\n]);\n\nconst NON_TERMINAL_STATUS_ORDER = new Map<HarnessControlEventStatus, number>([\n\t[\"prepared\", 0],\n\t[\"started\", 1],\n\t[\"applying\", 2],\n\t[\"verifying\", 3],\n]);\n\nfunction isTerminalStatus(status: HarnessControlEventStatus): boolean {\n\treturn TERMINAL_STATUSES.has(status);\n}\n\nfunction createOperationReplay(operationId: string, events: HarnessControlEvent[]): HarnessControlOperationReplay {\n\tconst sortedEvents = [...events].sort((a, b) => a.sequence - b.sequence);\n\tconst terminalEvents = sortedEvents.filter((event) => isTerminalStatus(event.status));\n\tconst terminal = terminalEvents.at(-1);\n\treturn {\n\t\toperationId,\n\t\tkind: sortedEvents[0]?.kind ?? \"unknown\",\n\t\tstarted: sortedEvents.some((event) => event.status === \"started\"),\n\t\tterminalStatus: terminal?.status,\n\t\tterminalEventIds: terminalEvents.map((event) => event.eventId),\n\t\teventIds: sortedEvents.map((event) => event.eventId),\n\t\tsequenceRange: [sortedEvents[0]?.sequence ?? 0, sortedEvents.at(-1)?.sequence ?? 0],\n\t\tstateTransitions: sortedEvents.map((event) => ({\n\t\t\tbeforeStateHash: event.beforeStateHash,\n\t\t\tafterStateHash: event.afterStateHash,\n\t\t})),\n\t\tfinalStateHash: terminal?.afterStateHash ?? sortedEvents.at(-1)?.afterStateHash,\n\t};\n}\n\nfunction validateUniqueEventIds(events: readonly HarnessControlEvent[]): string[] {\n\tconst errors: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const event of events) {\n\t\tif (seen.has(event.eventId)) errors.push(`event ${event.eventId} is duplicated`);\n\t\tseen.add(event.eventId);\n\t}\n\treturn errors;\n}\n\nfunction validateCausation(events: readonly HarnessControlEvent[]): string[] {\n\tconst errors: string[] = [];\n\tconst byId = new Map(events.map((event) => [event.eventId, event]));\n\tfor (const event of events) {\n\t\tif (!event.causationId) continue;\n\t\tconst causationEvent = byId.get(event.causationId);\n\t\tif (\n\t\t\t!causationEvent ||\n\t\t\tcausationEvent.sequence >= event.sequence ||\n\t\t\tcausationEvent.correlationId !== event.correlationId\n\t\t) {\n\t\t\terrors.push(\n\t\t\t\t`event causation ${event.causationId} for operation ${event.operationId} does not reference an earlier event`,\n\t\t\t);\n\t\t}\n\t}\n\treturn errors;\n}\n\nfunction reconstructHarnessStateHash(operations: readonly HarnessControlOperationReplay[]): string {\n\treturn hashCanonical(\n\t\toperations.map((operation) => ({\n\t\t\toperationId: operation.operationId,\n\t\t\tkind: operation.kind,\n\t\t\tfinalStateHash: operation.finalStateHash,\n\t\t\tterminalStatus: operation.terminalStatus,\n\t\t})),\n\t);\n}\n\nfunction validateOperationStateMachine(\n\toperation: HarnessControlOperationReplay,\n\tevents: HarnessControlEvent[],\n): string[] {\n\tconst errors: string[] = [];\n\tconst sortedEvents = [...events].sort((a, b) => a.sequence - b.sequence);\n\tconst kinds = new Set(sortedEvents.map((event) => event.kind));\n\tconst correlations = new Set(sortedEvents.map((event) => event.correlationId));\n\tconst startedCount = sortedEvents.filter((event) => event.status === \"started\").length;\n\tlet lastNonTerminalOrder = -1;\n\tlet sawTerminal = false;\n\tlet sawEventAfterTerminal = false;\n\n\tif (kinds.size > 1) errors.push(`operation ${operation.operationId} mixes event kinds`);\n\tif (correlations.size > 1) errors.push(`operation ${operation.operationId} mixes correlation ids`);\n\tif (startedCount > 1) errors.push(`operation ${operation.operationId} has multiple started events`);\n\tif (operation.terminalEventIds.length > 1)\n\t\terrors.push(`operation ${operation.operationId} has multiple terminal events`);\n\n\tfor (const event of sortedEvents) {\n\t\tif (sawTerminal) {\n\t\t\tsawEventAfterTerminal = true;\n\t\t\tcontinue;\n\t\t}\n\t\tif (isTerminalStatus(event.status)) {\n\t\t\tsawTerminal = true;\n\t\t\tcontinue;\n\t\t}\n\t\tconst order = NON_TERMINAL_STATUS_ORDER.get(event.status);\n\t\tif (order === undefined) {\n\t\t\terrors.push(`operation ${operation.operationId} has unsupported status ${event.status}`);\n\t\t\tcontinue;\n\t\t}\n\t\tif (order < lastNonTerminalOrder) {\n\t\t\terrors.push(`operation ${operation.operationId} has invalid status transition to ${event.status}`);\n\t\t}\n\t\tlastNonTerminalOrder = order;\n\t}\n\tif (sawEventAfterTerminal) errors.push(`operation ${operation.operationId} has event after terminal event`);\n\treturn errors;\n}\n\nexport function replayHarnessControlEvents(events: readonly HarnessControlEvent[]): HarnessControlReplayReport {\n\tconst errors: string[] = [];\n\tconst warnings: string[] = [];\n\tconst operationEvents = new Map<string, HarnessControlEvent[]>();\n\tfor (const event of events) {\n\t\tconst group = operationEvents.get(event.operationId) ?? [];\n\t\tgroup.push(event);\n\t\toperationEvents.set(event.operationId, group);\n\t}\n\n\tconst operations = [...operationEvents]\n\t\t.sort(([, a], [, b]) => (a[0]?.sequence ?? 0) - (b[0]?.sequence ?? 0))\n\t\t.map(([operationId, groupedEvents]) => createOperationReplay(operationId, groupedEvents));\n\n\terrors.push(...validateUniqueEventIds(events));\n\terrors.push(...validateCausation(events));\n\n\tfor (const operation of operations) {\n\t\tconst groupedEvents = operationEvents.get(operation.operationId) ?? [];\n\t\terrors.push(...validateOperationStateMachine(operation, groupedEvents));\n\t\tif (!operation.started) {\n\t\t\twarnings.push(`operation ${operation.operationId} has no started event`);\n\t\t}\n\t\tif (!operation.terminalStatus) {\n\t\t\terrors.push(`operation ${operation.operationId} has no terminal event`);\n\t\t}\n\t}\n\n\treturn {\n\t\tok: errors.length === 0,\n\t\tevents: [...events],\n\t\toperations,\n\t\treconstructedStateHash: reconstructHarnessStateHash(operations),\n\t\terrors,\n\t\twarnings,\n\t\tquarantinedLines: [],\n\t};\n}\n\nfunction verifyReplayArtifacts(\n\tevents: readonly HarnessControlEvent[],\n\toptions: HarnessControlReplayOptions,\n): { errors: string[]; warnings: string[] } {\n\tconst errors: string[] = [];\n\tconst warnings: string[] = [];\n\tif (options.verifyArtifacts === false) return { errors, warnings };\n\tfor (const event of events) {\n\t\tconst artifacts = Array.isArray(event.artifacts) ? event.artifacts : [];\n\t\tif (artifacts.length === 0) continue;\n\t\tconst baseDir = canonicalizeBaseDir(options.artifactBaseDir ?? event.cwd);\n\t\tconst resolver = createFsArtifactResolver(baseDir);\n\t\tfor (const entry of artifacts) {\n\t\t\t// Only rehash manifest entries that were recorded as allowed files.\n\t\t\tif (!entry || entry.allowed !== true || typeof entry.sha256 !== \"string\") continue;\n\t\t\tconst resolved = resolver(entry.path);\n\t\t\tif (resolved === undefined) {\n\t\t\t\twarnings.push(`event ${event.eventId} artifact ${entry.path} is no longer present for rehash`);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst result = verifyArtifactReference(\n\t\t\t\t{ path: entry.path, repoRoot: baseDir, sha256: entry.sha256 },\n\t\t\t\t() => resolved,\n\t\t\t);\n\t\t\tif (!result.ok) {\n\t\t\t\terrors.push(`event ${event.eventId} artifact ${entry.path}: ${result.error}`);\n\t\t\t}\n\t\t}\n\t}\n\treturn { errors, warnings };\n}\n\nexport function verifyHarnessControlReplay(\n\tlogPath: string,\n\toptions: HarnessControlReplayOptions = {},\n): HarnessControlReplayReport {\n\tconst ledger = verifyHarnessControlLedger(logPath);\n\tconst replay = replayHarnessControlEvents(ledger.events);\n\tconst artifacts = verifyReplayArtifacts(ledger.events, options);\n\treturn {\n\t\tok: ledger.ok && replay.ok && artifacts.errors.length === 0,\n\t\tevents: ledger.events,\n\t\toperations: replay.operations,\n\t\treconstructedStateHash: replay.reconstructedStateHash,\n\t\terrors: [...ledger.errors, ...replay.errors, ...artifacts.errors],\n\t\twarnings: [...replay.warnings, ...artifacts.warnings],\n\t\tquarantinedLines: ledger.quarantinedLines,\n\t};\n}\n"]}

package/dist/core/headroom-middleware.d.ts

@@ -0,0 +1,35 @@
+import type { BeforeProviderSend } from "@earendil-works/omk-ai";
+export interface HeadroomCompressTextInput {
+    readonly text: string;
+    readonly estimatedTokens: number;
+    readonly thresholdTokens: number;
+    readonly toolCallId: string;
+    readonly toolName: string;
+    readonly contentIndex: number;
+    readonly isError: boolean;
+    readonly details?: unknown;
+}
+export type HeadroomCompressText = (input: HeadroomCompressTextInput) => string | undefined;
+export interface HeadroomBeforeProviderSendOptions {
+    readonly compressText: HeadroomCompressText;
+    readonly thresholdTokens?: number;
+    readonly logsThresholdTokens?: number;
+    readonly enabled?: boolean;
+}
+export interface HeadroomBeforeProviderSendStats {
+    readonly seenToolResultTextBlocks: number;
+    readonly compressedBlocks: number;
+    readonly skippedBelowThresholdBlocks: number;
+    readonly skippedSecretBlocks: number;
+    readonly skippedLeanContextBlocks: number;
+    readonly failedOpenBlocks: number;
+    readonly inputTokens: number;
+    readonly outputTokens: number;
+}
+export interface HeadroomBeforeProviderSend {
+    readonly beforeProviderSend: BeforeProviderSend;
+    getStats(): HeadroomBeforeProviderSendStats;
+    reset(): void;
+}
+export declare function createHeadroomBeforeProviderSend(options: HeadroomBeforeProviderSendOptions): HeadroomBeforeProviderSend;
+//# sourceMappingURL=headroom-middleware.d.ts.map

package/dist/core/headroom-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headroom-middleware.d.ts","sourceRoot":"","sources":["../../src/core/headroom-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAA2C,MAAM,wBAAwB,CAAC;AAa1G,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,yBAAyB,KAAK,MAAM,GAAG,SAAS,CAAC;AAE5F,MAAM,WAAW,iCAAiC;IACjD,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,+BAA+B;IAC/C,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,2BAA2B,EAAE,MAAM,CAAC;IAC7C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAChD,QAAQ,IAAI,+BAA+B,CAAC;IAC5C,KAAK,IAAI,IAAI,CAAC;CACd;AAED,wBAAgB,gCAAgC,CAC/C,OAAO,EAAE,iCAAiC,GACxC,0BAA0B,CAiB5B","sourcesContent":["import type { BeforeProviderSend, Context, TextContent, ToolResultMessage } from \"@earendil-works/omk-ai\";\nimport { estimateLeanContextTokens } from \"./lean-context-policy.ts\";\n\nconst DEFAULT_THRESHOLD_TOKENS = 2_048;\nconst LEAN_CONTEXT_STUB_PREFIX = \"[lean-context]\";\n\nconst DEFAULT_SECRET_PATTERNS: readonly RegExp[] = [\n\t/-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----/i,\n\t/\\b(?:api[_-]?key|access[_-]?token|auth[_-]?token|refresh[_-]?token|client[_-]?secret|secret|password|passwd|pwd)\\b\\s*[:=]\\s*[\"']?[^\\s\"']{8,}/i,\n\t/\\bauthorization\\s*:\\s*bearer\\s+[A-Za-z0-9._~+/=-]{10,}/i,\n\t/\\b(?:gh[pousr]_|sk-|xox[baprs]-)[A-Za-z0-9_=-]{10,}/i,\n];\n\nexport interface HeadroomCompressTextInput {\n\treadonly text: string;\n\treadonly estimatedTokens: number;\n\treadonly thresholdTokens: number;\n\treadonly toolCallId: string;\n\treadonly toolName: string;\n\treadonly contentIndex: number;\n\treadonly isError: boolean;\n\treadonly details?: unknown;\n}\n\nexport type HeadroomCompressText = (input: HeadroomCompressTextInput) => string | undefined;\n\nexport interface HeadroomBeforeProviderSendOptions {\n\treadonly compressText: HeadroomCompressText;\n\treadonly thresholdTokens?: number;\n\treadonly logsThresholdTokens?: number;\n\treadonly enabled?: boolean;\n}\n\nexport interface HeadroomBeforeProviderSendStats {\n\treadonly seenToolResultTextBlocks: number;\n\treadonly compressedBlocks: number;\n\treadonly skippedBelowThresholdBlocks: number;\n\treadonly skippedSecretBlocks: number;\n\treadonly skippedLeanContextBlocks: number;\n\treadonly failedOpenBlocks: number;\n\treadonly inputTokens: number;\n\treadonly outputTokens: number;\n}\n\nexport interface HeadroomBeforeProviderSend {\n\treadonly beforeProviderSend: BeforeProviderSend;\n\tgetStats(): HeadroomBeforeProviderSendStats;\n\treset(): void;\n}\n\nexport function createHeadroomBeforeProviderSend(\n\toptions: HeadroomBeforeProviderSendOptions,\n): HeadroomBeforeProviderSend {\n\tlet stats = createEmptyStats();\n\n\treturn {\n\t\tbeforeProviderSend(input) {\n\t\t\tif (options.enabled === false) return undefined;\n\t\t\tconst result = transformContext(input.context, options, stats);\n\t\t\tstats = result.stats;\n\t\t\treturn result.changed ? result.context : undefined;\n\t\t},\n\t\tgetStats() {\n\t\t\treturn { ...stats };\n\t\t},\n\t\treset() {\n\t\t\tstats = createEmptyStats();\n\t\t},\n\t};\n}\n\ninterface ContextTransformResult {\n\treadonly context: Context;\n\treadonly stats: HeadroomBeforeProviderSendStats;\n\treadonly changed: boolean;\n}\n\nfunction transformContext(\n\tcontext: Context,\n\toptions: HeadroomBeforeProviderSendOptions,\n\tinitialStats: HeadroomBeforeProviderSendStats,\n): ContextTransformResult {\n\tlet nextStats = initialStats;\n\tlet changed = false;\n\tconst messages = context.messages.map((message) => {\n\t\tif (message.role !== \"toolResult\") return message;\n\t\tconst result = transformToolResult(message, options, nextStats);\n\t\tnextStats = result.stats;\n\t\tchanged = changed || result.changed;\n\t\treturn result.message;\n\t});\n\n\treturn {\n\t\tcontext: changed ? { ...context, messages } : context,\n\t\tstats: nextStats,\n\t\tchanged,\n\t};\n}\n\ninterface ToolResultTransformResult {\n\treadonly message: ToolResultMessage<unknown>;\n\treadonly stats: HeadroomBeforeProviderSendStats;\n\treadonly changed: boolean;\n}\n\nfunction transformToolResult(\n\tmessage: ToolResultMessage<unknown>,\n\toptions: HeadroomBeforeProviderSendOptions,\n\tinitialStats: HeadroomBeforeProviderSendStats,\n): ToolResultTransformResult {\n\tlet nextStats = initialStats;\n\tlet changed = false;\n\tconst content = message.content.map((block, index) => {\n\t\tif (block.type !== \"text\") return block;\n\t\tconst result = transformTextBlock(block, message, index, options, nextStats);\n\t\tnextStats = result.stats;\n\t\tchanged = changed || result.changed;\n\t\treturn result.block;\n\t});\n\n\treturn {\n\t\tmessage: changed ? { ...message, content } : message,\n\t\tstats: nextStats,\n\t\tchanged,\n\t};\n}\n\ninterface TextBlockTransformResult {\n\treadonly block: TextContent;\n\treadonly stats: HeadroomBeforeProviderSendStats;\n\treadonly changed: boolean;\n}\n\nfunction transformTextBlock(\n\tblock: TextContent,\n\tmessage: ToolResultMessage<unknown>,\n\tcontentIndex: number,\n\toptions: HeadroomBeforeProviderSendOptions,\n\tinitialStats: HeadroomBeforeProviderSendStats,\n): TextBlockTransformResult {\n\tconst estimatedTokens = estimateLeanContextTokens(block.text);\n\tlet stats = incrementStats(initialStats, {\n\t\tseenToolResultTextBlocks: 1,\n\t\tinputTokens: estimatedTokens,\n\t});\n\n\tif (isLeanContextStub(block.text)) {\n\t\treturn { block, stats: incrementStats(stats, { skippedLeanContextBlocks: 1 }), changed: false };\n\t}\n\n\tif (containsSecretPattern(block.text)) {\n\t\treturn { block, stats: incrementStats(stats, { skippedSecretBlocks: 1 }), changed: false };\n\t}\n\n\tconst thresholdTokens = getThresholdTokens(options, message);\n\tif (estimatedTokens <= thresholdTokens) {\n\t\treturn { block, stats: incrementStats(stats, { skippedBelowThresholdBlocks: 1 }), changed: false };\n\t}\n\n\tlet compressed: string | undefined;\n\ttry {\n\t\tcompressed = options.compressText({\n\t\t\ttext: block.text,\n\t\t\testimatedTokens,\n\t\t\tthresholdTokens,\n\t\t\ttoolCallId: message.toolCallId,\n\t\t\ttoolName: message.toolName,\n\t\t\tcontentIndex,\n\t\t\tisError: message.isError,\n\t\t\tdetails: message.details,\n\t\t});\n\t} catch {\n\t\treturn { block, stats: incrementStats(stats, { failedOpenBlocks: 1 }), changed: false };\n\t}\n\n\tif (compressed === undefined) {\n\t\treturn { block, stats: incrementStats(stats, { failedOpenBlocks: 1 }), changed: false };\n\t}\n\n\tif (compressed === block.text) {\n\t\treturn { block, stats, changed: false };\n\t}\n\n\tstats = incrementStats(stats, {\n\t\tcompressedBlocks: 1,\n\t\toutputTokens: estimateLeanContextTokens(compressed),\n\t});\n\treturn { block: { ...block, text: compressed }, stats, changed: true };\n}\n\nfunction createEmptyStats(): HeadroomBeforeProviderSendStats {\n\treturn {\n\t\tseenToolResultTextBlocks: 0,\n\t\tcompressedBlocks: 0,\n\t\tskippedBelowThresholdBlocks: 0,\n\t\tskippedSecretBlocks: 0,\n\t\tskippedLeanContextBlocks: 0,\n\t\tfailedOpenBlocks: 0,\n\t\tinputTokens: 0,\n\t\toutputTokens: 0,\n\t};\n}\n\nfunction incrementStats(\n\tstats: HeadroomBeforeProviderSendStats,\n\tdelta: Partial<Record<keyof HeadroomBeforeProviderSendStats, number>>,\n): HeadroomBeforeProviderSendStats {\n\treturn {\n\t\tseenToolResultTextBlocks: stats.seenToolResultTextBlocks + (delta.seenToolResultTextBlocks ?? 0),\n\t\tcompressedBlocks: stats.compressedBlocks + (delta.compressedBlocks ?? 0),\n\t\tskippedBelowThresholdBlocks: stats.skippedBelowThresholdBlocks + (delta.skippedBelowThresholdBlocks ?? 0),\n\t\tskippedSecretBlocks: stats.skippedSecretBlocks + (delta.skippedSecretBlocks ?? 0),\n\t\tskippedLeanContextBlocks: stats.skippedLeanContextBlocks + (delta.skippedLeanContextBlocks ?? 0),\n\t\tfailedOpenBlocks: stats.failedOpenBlocks + (delta.failedOpenBlocks ?? 0),\n\t\tinputTokens: stats.inputTokens + (delta.inputTokens ?? 0),\n\t\toutputTokens: stats.outputTokens + (delta.outputTokens ?? 0),\n\t};\n}\n\nfunction getThresholdTokens(options: HeadroomBeforeProviderSendOptions, message: ToolResultMessage<unknown>): number {\n\tconst threshold = isLogLikeToolResult(message)\n\t\t? (options.logsThresholdTokens ?? options.thresholdTokens)\n\t\t: options.thresholdTokens;\n\tif (threshold === undefined) return DEFAULT_THRESHOLD_TOKENS;\n\tif (!Number.isFinite(threshold) || threshold < 0) return 0;\n\treturn Math.ceil(threshold);\n}\n\nfunction isLogLikeToolResult(message: ToolResultMessage<unknown>): boolean {\n\tif (/\\b(?:bash|exec|shell|log|logs|stderr|stdout)\\b/i.test(message.toolName)) return true;\n\tconst details = asRecord(message.details);\n\tif (!details) return false;\n\treturn [\"path\", \"filePath\", \"command\", \"query\"].some((key) => {\n\t\tconst value = details[key];\n\t\treturn typeof value === \"string\" && /(?:\\.log\\b|\\blogs?\\b|stderr|stdout|trace)/i.test(value);\n\t});\n}\n\nfunction isLeanContextStub(text: string): boolean {\n\treturn text.trimStart().startsWith(LEAN_CONTEXT_STUB_PREFIX);\n}\n\nfunction containsSecretPattern(text: string): boolean {\n\treturn DEFAULT_SECRET_PATTERNS.some((pattern) => regexTestStateless(pattern, text));\n}\n\nfunction regexTestStateless(pattern: RegExp, text: string): boolean {\n\tconst flags = pattern.flags.replace(/[gy]/g, \"\");\n\treturn new RegExp(pattern.source, flags).test(text);\n}\n\nfunction asRecord(value: unknown): Record<string, unknown> | undefined {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value)\n\t\t? (value as Record<string, unknown>)\n\t\t: undefined;\n}\n"]}

package/dist/core/headroom-middleware.js

@@ -0,0 +1,166 @@
+import { estimateLeanContextTokens } from "./lean-context-policy.js";
+const DEFAULT_THRESHOLD_TOKENS = 2_048;
+const LEAN_CONTEXT_STUB_PREFIX = "[lean-context]";
+const DEFAULT_SECRET_PATTERNS = [
+    /-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----/i,
+    /\b(?:api[_-]?key|access[_-]?token|auth[_-]?token|refresh[_-]?token|client[_-]?secret|secret|password|passwd|pwd)\b\s*[:=]\s*["']?[^\s"']{8,}/i,
+    /\bauthorization\s*:\s*bearer\s+[A-Za-z0-9._~+/=-]{10,}/i,
+    /\b(?:gh[pousr]_|sk-|xox[baprs]-)[A-Za-z0-9_=-]{10,}/i,
+];
+export function createHeadroomBeforeProviderSend(options) {
+    let stats = createEmptyStats();
+    return {
+        beforeProviderSend(input) {
+            if (options.enabled === false)
+                return undefined;
+            const result = transformContext(input.context, options, stats);
+            stats = result.stats;
+            return result.changed ? result.context : undefined;
+        },
+        getStats() {
+            return { ...stats };
+        },
+        reset() {
+            stats = createEmptyStats();
+        },
+    };
+}
+function transformContext(context, options, initialStats) {
+    let nextStats = initialStats;
+    let changed = false;
+    const messages = context.messages.map((message) => {
+        if (message.role !== "toolResult")
+            return message;
+        const result = transformToolResult(message, options, nextStats);
+        nextStats = result.stats;
+        changed = changed || result.changed;
+        return result.message;
+    });
+    return {
+        context: changed ? { ...context, messages } : context,
+        stats: nextStats,
+        changed,
+    };
+}
+function transformToolResult(message, options, initialStats) {
+    let nextStats = initialStats;
+    let changed = false;
+    const content = message.content.map((block, index) => {
+        if (block.type !== "text")
+            return block;
+        const result = transformTextBlock(block, message, index, options, nextStats);
+        nextStats = result.stats;
+        changed = changed || result.changed;
+        return result.block;
+    });
+    return {
+        message: changed ? { ...message, content } : message,
+        stats: nextStats,
+        changed,
+    };
+}
+function transformTextBlock(block, message, contentIndex, options, initialStats) {
+    const estimatedTokens = estimateLeanContextTokens(block.text);
+    let stats = incrementStats(initialStats, {
+        seenToolResultTextBlocks: 1,
+        inputTokens: estimatedTokens,
+    });
+    if (isLeanContextStub(block.text)) {
+        return { block, stats: incrementStats(stats, { skippedLeanContextBlocks: 1 }), changed: false };
+    }
+    if (containsSecretPattern(block.text)) {
+        return { block, stats: incrementStats(stats, { skippedSecretBlocks: 1 }), changed: false };
+    }
+    const thresholdTokens = getThresholdTokens(options, message);
+    if (estimatedTokens <= thresholdTokens) {
+        return { block, stats: incrementStats(stats, { skippedBelowThresholdBlocks: 1 }), changed: false };
+    }
+    let compressed;
+    try {
+        compressed = options.compressText({
+            text: block.text,
+            estimatedTokens,
+            thresholdTokens,
+            toolCallId: message.toolCallId,
+            toolName: message.toolName,
+            contentIndex,
+            isError: message.isError,
+            details: message.details,
+        });
+    }
+    catch {
+        return { block, stats: incrementStats(stats, { failedOpenBlocks: 1 }), changed: false };
+    }
+    if (compressed === undefined) {
+        return { block, stats: incrementStats(stats, { failedOpenBlocks: 1 }), changed: false };
+    }
+    if (compressed === block.text) {
+        return { block, stats, changed: false };
+    }
+    stats = incrementStats(stats, {
+        compressedBlocks: 1,
+        outputTokens: estimateLeanContextTokens(compressed),
+    });
+    return { block: { ...block, text: compressed }, stats, changed: true };
+}
+function createEmptyStats() {
+    return {
+        seenToolResultTextBlocks: 0,
+        compressedBlocks: 0,
+        skippedBelowThresholdBlocks: 0,
+        skippedSecretBlocks: 0,
+        skippedLeanContextBlocks: 0,
+        failedOpenBlocks: 0,
+        inputTokens: 0,
+        outputTokens: 0,
+    };
+}
+function incrementStats(stats, delta) {
+    return {
+        seenToolResultTextBlocks: stats.seenToolResultTextBlocks + (delta.seenToolResultTextBlocks ?? 0),
+        compressedBlocks: stats.compressedBlocks + (delta.compressedBlocks ?? 0),
+        skippedBelowThresholdBlocks: stats.skippedBelowThresholdBlocks + (delta.skippedBelowThresholdBlocks ?? 0),
+        skippedSecretBlocks: stats.skippedSecretBlocks + (delta.skippedSecretBlocks ?? 0),
+        skippedLeanContextBlocks: stats.skippedLeanContextBlocks + (delta.skippedLeanContextBlocks ?? 0),
+        failedOpenBlocks: stats.failedOpenBlocks + (delta.failedOpenBlocks ?? 0),
+        inputTokens: stats.inputTokens + (delta.inputTokens ?? 0),
+        outputTokens: stats.outputTokens + (delta.outputTokens ?? 0),
+    };
+}
+function getThresholdTokens(options, message) {
+    const threshold = isLogLikeToolResult(message)
+        ? (options.logsThresholdTokens ?? options.thresholdTokens)
+        : options.thresholdTokens;
+    if (threshold === undefined)
+        return DEFAULT_THRESHOLD_TOKENS;
+    if (!Number.isFinite(threshold) || threshold < 0)
+        return 0;
+    return Math.ceil(threshold);
+}
+function isLogLikeToolResult(message) {
+    if (/\b(?:bash|exec|shell|log|logs|stderr|stdout)\b/i.test(message.toolName))
+        return true;
+    const details = asRecord(message.details);
+    if (!details)
+        return false;
+    return ["path", "filePath", "command", "query"].some((key) => {
+        const value = details[key];
+        return typeof value === "string" && /(?:\.log\b|\blogs?\b|stderr|stdout|trace)/i.test(value);
+    });
+}
+function isLeanContextStub(text) {
+    return text.trimStart().startsWith(LEAN_CONTEXT_STUB_PREFIX);
+}
+function containsSecretPattern(text) {
+    return DEFAULT_SECRET_PATTERNS.some((pattern) => regexTestStateless(pattern, text));
+}
+function regexTestStateless(pattern, text) {
+    const flags = pattern.flags.replace(/[gy]/g, "");
+    return new RegExp(pattern.source, flags).test(text);
+}
+function asRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+//# sourceMappingURL=headroom-middleware.js.map