open-multi-agent-kit 0.80.6 → 0.80.8

package/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "open-multi-agent-kit",
-	"version": "0.80.6",
-	"description": "OMK interactive coding agent CLI with read, bash, edit, write tools, skills, hooks, MCP, and session management",
+	"version": "0.80.8",
+	"description": "OMK (Open Multi-Agent Kit) coding agent CLI with read, bash, edit, write tools and session management",
 	"type": "module",
 	"omkConfig": {
 		"name": "omk",
@@ -27,7 +27,8 @@
 		"docs",
 		"examples",
 		"containerization.md",
-		"CHANGELOG.md"
+		"CHANGELOG.md",
+		"npm-shrinkwrap.json"
 	],
 	"scripts": {
 		"clean": "shx rm -rf dist",
@@ -37,12 +38,12 @@
 		"copy-binary-assets": "shx cp package.json dist/ && shx cp README.md dist/ && shx cp CHANGELOG.md dist/ && shx mkdir -p dist/theme && shx cp src/modes/interactive/theme/*.json dist/theme/ && shx mkdir -p dist/assets && shx cp src/modes/interactive/assets/*.png dist/assets/ && shx mkdir -p dist/export-html/vendor && shx cp src/core/export-html/template.html dist/export-html/ && shx cp src/core/export-html/vendor/*.js dist/export-html/vendor/ && shx cp -r docs dist/ && shx cp -r examples dist/ && shx cp ../../node_modules/@silvia-odwyer/photon-node/photon_rs_bg.wasm dist/",
 		"test": "vitest --run",
 		"shrinkwrap": "node ../../scripts/generate-coding-agent-shrinkwrap.mjs",
-		"prepublishOnly": "npm run clean && npm run build"
+		"prepublishOnly": "npm run clean && npm run build && npm run shrinkwrap"
 	},
 	"dependencies": {
-		"@earendil-works/omk-agent-core": "npm:@earendil-works/pi-agent-core@0.79.6",
-		"@earendil-works/omk-ai": "npm:@earendil-works/pi-ai@0.79.6",
-		"@earendil-works/omk-tui": "npm:@earendil-works/pi-tui@0.79.6",
+		"omk-agent-core": "^0.80.8",
+		"omk-ai": "^0.80.8",
+		"omk-tui": "^0.80.8",
 		"@silvia-odwyer/photon-node": "0.3.4",
 		"chalk": "5.6.2",
 		"cross-spawn": "7.0.6",
@@ -95,12 +96,5 @@
 	},
 	"engines": {
 		"node": ">=22.19.0"
-	},
-	"bugs": {
-		"url": "https://github.com/dmae97/open-multi-agent-kit/issues"
-	},
-	"homepage": "https://github.com/dmae97/open-multi-agent-kit#readme",
-	"publishConfig": {
-		"access": "public"
 	}
 }

package/dist/core/harness-control-events.d.ts

@@ -1,79 +0,0 @@
-export type HarnessControlEventStatus = "prepared" | "started" | "applying" | "verifying" | "completed" | "failed" | "blocked" | "rolled_back" | "in_doubt";
-export type HarnessControlEventKind = "compaction.summary.generated" | "extension.migration.plan" | "extension.migration.apply" | "interactive.model_thinking.commit" | "interactive.theme.apply" | "keybinding.conflict" | "spec.compile" | "spec.verify" | (string & {});
-export type JsonValue = string | number | boolean | null | JsonValue[] | {
-    [key: string]: JsonValue;
-};
-export type JsonObject = {
-    [key: string]: JsonValue;
-};
-export interface HarnessControlArtifactManifestEntry {
-    path: string;
-    exists: boolean;
-    allowed: boolean;
-    sizeBytes?: number;
-    sha256?: string;
-    error?: string;
-}
-export interface HarnessControlEvent {
-    schemaVersion: "omk.harness-control.event.v2";
-    eventId: string;
-    runId: string;
-    sessionId: string;
-    operationId: string;
-    causationId: string | null;
-    correlationId: string;
-    sequence: number;
-    timestamp: string;
-    kind: HarnessControlEventKind;
-    status: HarnessControlEventStatus;
-    cwd: string;
-    beforeStateHash: string;
-    afterStateHash: string;
-    data: JsonObject;
-    dataHash: string;
-    artifacts: HarnessControlArtifactManifestEntry[];
-    previousEventHash: string;
-    eventHash: string;
-}
-export interface HarnessControlEventWriteResult {
-    ok: boolean;
-    path?: string;
-    event?: HarnessControlEvent;
-    error?: string;
-}
-export interface HarnessControlEventOptions {
-    cwd?: string;
-    logPath?: string;
-    now?: Date;
-    id?: string;
-    eventId?: string;
-    runId?: string;
-    sessionId?: string;
-    operationId?: string;
-    causationId?: string | null;
-    correlationId?: string;
-    beforeState?: unknown;
-    afterState?: unknown;
-    artifactRefs?: string[];
-    allowedArtifactRoots?: string[];
-    lockTimeoutMs?: number;
-    maxLedgerBytes?: number;
-}
-export interface HarnessControlLedgerVerificationResult {
-    ok: boolean;
-    events: HarnessControlEvent[];
-    errors: string[];
-}
-interface PreviousEventState {
-    sequence: number;
-    eventHash: string;
-}
-export declare function sanitizeHarnessControlEventData(data: unknown): JsonObject;
-export declare function canonicalJson(value: JsonValue): string;
-export declare function hashCanonical(value: unknown): string;
-export declare function resolveHarnessControlEventLogPath(options?: HarnessControlEventOptions): string | undefined;
-export declare function createHarnessControlEvent(kind: HarnessControlEventKind, status: HarnessControlEventStatus, data?: unknown, options?: HarnessControlEventOptions, previous?: PreviousEventState): HarnessControlEvent;
-export declare function recordHarnessControlEvent(kind: HarnessControlEventKind, status: HarnessControlEventStatus, data?: unknown, options?: HarnessControlEventOptions): HarnessControlEventWriteResult;
-export declare function verifyHarnessControlLedger(logPath: string): HarnessControlLedgerVerificationResult;
-export {};
-//# sourceMappingURL=harness-control-events.d.ts.map

package/dist/core/harness-control-events.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"harness-control-events.d.ts","sourceRoot":"","sources":["../../src/core/harness-control-events.ts"],"names":[],"mappings":"AAeA,MAAM,MAAM,yBAAyB,GAClC,UAAU,GACV,SAAS,GACT,UAAU,GACV,WAAW,GACX,WAAW,GACX,QAAQ,GACR,SAAS,GACT,aAAa,GACb,UAAU,CAAC;AAEd,MAAM,MAAM,uBAAuB,GAChC,8BAA8B,GAC9B,0BAA0B,GAC1B,2BAA2B,GAC3B,mCAAmC,GACnC,yBAAyB,GACzB,qBAAqB,GACrB,cAAc,GACd,aAAa,GACb,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEjB,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AACtG,MAAM,MAAM,UAAU,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEtD,MAAM,WAAW,mCAAmC;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IACnC,aAAa,EAAE,8BAA8B,CAAC;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,uBAAuB,CAAC;IAC9B,MAAM,EAAE,yBAAyB,CAAC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,mCAAmC,EAAE,CAAC;IACjD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,8BAA8B;IAC9C,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,mBAAmB,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,0BAA0B;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,sCAAsC;IACtD,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,MAAM,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,UAAU,kBAAkB;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CAClB;AAmED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,CAKzE;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAYtD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAIpD;AA4DD,wBAAgB,iCAAiC,CAAC,OAAO,GAAE,0BAA+B,GAAG,MAAM,GAAG,SAAS,CAM9G;AA+ED,wBAAgB,yBAAyB,CACxC,IAAI,EAAE,uBAAuB,EAC7B,MAAM,EAAE,yBAAyB,EACjC,IAAI,GAAE,OAAY,EAClB,OAAO,GAAE,0BAA+B,EACxC,QAAQ,GAAE,kBAAmE,GAC3E,mBAAmB,CA2BrB;AAED,wBAAgB,yBAAyB,CACxC,IAAI,EAAE,uBAAuB,EAC7B,MAAM,EAAE,yBAAyB,EACjC,IAAI,GAAE,OAAY,EAClB,OAAO,GAAE,0BAA+B,GACtC,8BAA8B,CAuBhC;AAcD,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,sCAAsC,CAiClG","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport {\n\tcloseSync,\n\texistsSync,\n\tfsyncSync,\n\tmkdirSync,\n\topenSync,\n\treadFileSync,\n\trenameSync,\n\trmSync,\n\tstatSync,\n\twriteSync,\n} from \"node:fs\";\nimport { dirname, join, resolve, sep } from \"node:path\";\n\nexport type HarnessControlEventStatus =\n\t| \"prepared\"\n\t| \"started\"\n\t| \"applying\"\n\t| \"verifying\"\n\t| \"completed\"\n\t| \"failed\"\n\t| \"blocked\"\n\t| \"rolled_back\"\n\t| \"in_doubt\";\n\nexport type HarnessControlEventKind =\n\t| \"compaction.summary.generated\"\n\t| \"extension.migration.plan\"\n\t| \"extension.migration.apply\"\n\t| \"interactive.model_thinking.commit\"\n\t| \"interactive.theme.apply\"\n\t| \"keybinding.conflict\"\n\t| \"spec.compile\"\n\t| \"spec.verify\"\n\t| (string & {});\n\nexport type JsonValue = string | number | boolean | null | JsonValue[] | { [key: string]: JsonValue };\nexport type JsonObject = { [key: string]: JsonValue };\n\nexport interface HarnessControlArtifactManifestEntry {\n\tpath: string;\n\texists: boolean;\n\tallowed: boolean;\n\tsizeBytes?: number;\n\tsha256?: string;\n\terror?: string;\n}\n\nexport interface HarnessControlEvent {\n\tschemaVersion: \"omk.harness-control.event.v2\";\n\teventId: string;\n\trunId: string;\n\tsessionId: string;\n\toperationId: string;\n\tcausationId: string | null;\n\tcorrelationId: string;\n\tsequence: number;\n\ttimestamp: string;\n\tkind: HarnessControlEventKind;\n\tstatus: HarnessControlEventStatus;\n\tcwd: string;\n\tbeforeStateHash: string;\n\tafterStateHash: string;\n\tdata: JsonObject;\n\tdataHash: string;\n\tartifacts: HarnessControlArtifactManifestEntry[];\n\tpreviousEventHash: string;\n\teventHash: string;\n}\n\nexport interface HarnessControlEventWriteResult {\n\tok: boolean;\n\tpath?: string;\n\tevent?: HarnessControlEvent;\n\terror?: string;\n}\n\nexport interface HarnessControlEventOptions {\n\tcwd?: string;\n\tlogPath?: string;\n\tnow?: Date;\n\tid?: string;\n\teventId?: string;\n\trunId?: string;\n\tsessionId?: string;\n\toperationId?: string;\n\tcausationId?: string | null;\n\tcorrelationId?: string;\n\tbeforeState?: unknown;\n\tafterState?: unknown;\n\tartifactRefs?: string[];\n\tallowedArtifactRoots?: string[];\n\tlockTimeoutMs?: number;\n\tmaxLedgerBytes?: number;\n}\n\nexport interface HarnessControlLedgerVerificationResult {\n\tok: boolean;\n\tevents: HarnessControlEvent[];\n\terrors: string[];\n}\n\ninterface PreviousEventState {\n\tsequence: number;\n\teventHash: string;\n}\n\nconst MAX_EVENT_DEPTH = 6;\nconst MAX_EVENT_OBJECT_KEYS = 80;\nconst MAX_EVENT_ARRAY_ITEMS = 80;\nconst MAX_EVENT_STRING_LENGTH = 2000;\nconst REDACTED = \"[redacted]\";\nconst GENESIS_EVENT_HASH = \"0\".repeat(64);\nconst DEFAULT_RUN_ID = \"default-run\";\nconst DEFAULT_SESSION_ID = \"sessionless\";\nconst LOCK_STALE_MS = 30000;\n\nfunction isSensitiveKey(key: string): boolean {\n\treturn /(?:secret|token|api[_-]?key|authorization|password|credential|private[_-]?key)/i.test(key);\n}\n\nfunction redactSensitiveValue(value: string): string {\n\tlet redacted = value;\n\tredacted = redacted.replace(/Bearer\\s+[A-Za-z0-9._~+/=-]+/gi, `Bearer ${REDACTED}`);\n\tredacted = redacted.replace(/sk-(?:proj-|ant-)?[A-Za-z0-9_-]{16,}/g, REDACTED);\n\tredacted = redacted.replace(/\\beyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\b/g, REDACTED);\n\tredacted = redacted.replace(/-----BEGIN [^-]+PRIVATE KEY-----[\\s\\S]*?-----END [^-]+PRIVATE KEY-----/g, REDACTED);\n\tredacted = redacted.replace(/\\b[A-Fa-f0-9]{64,}\\b/g, REDACTED);\n\treturn redacted;\n}\n\nfunction truncateString(value: string): string {\n\tconst redacted = redactSensitiveValue(value);\n\tif (redacted.length <= MAX_EVENT_STRING_LENGTH) return redacted;\n\treturn `${redacted.slice(0, MAX_EVENT_STRING_LENGTH)}…[truncated]`;\n}\n\nfunction sanitizeValue(value: unknown, depth: number, seen: WeakSet<object>): JsonValue {\n\tif (value === null) return null;\n\tif (typeof value === \"string\") return truncateString(value);\n\tif (typeof value === \"number\") return Number.isFinite(value) ? value : String(value);\n\tif (typeof value === \"boolean\") return value;\n\tif (typeof value === \"bigint\") return value.toString();\n\tif (typeof value === \"undefined\" || typeof value === \"function\" || typeof value === \"symbol\") return String(value);\n\tif (depth >= MAX_EVENT_DEPTH) return \"[max-depth]\";\n\n\tif (Array.isArray(value)) {\n\t\treturn value.slice(0, MAX_EVENT_ARRAY_ITEMS).map((entry) => sanitizeValue(entry, depth + 1, seen));\n\t}\n\n\tif (value instanceof Date) return value.toISOString();\n\tif (value instanceof Error) {\n\t\treturn {\n\t\t\tname: value.name,\n\t\t\tmessage: truncateString(value.message),\n\t\t};\n\t}\n\n\tif (typeof value === \"object\") {\n\t\tif (seen.has(value)) return \"[circular]\";\n\t\tseen.add(value);\n\t\tconst result: JsonObject = {};\n\t\tfor (const [key, entry] of Object.entries(value).slice(0, MAX_EVENT_OBJECT_KEYS)) {\n\t\t\tresult[key] = isSensitiveKey(key) ? REDACTED : sanitizeValue(entry, depth + 1, seen);\n\t\t}\n\t\tseen.delete(value);\n\t\treturn result;\n\t}\n\n\treturn String(value);\n}\n\nexport function sanitizeHarnessControlEventData(data: unknown): JsonObject {\n\tconst sanitized = sanitizeValue(data ?? {}, 0, new WeakSet<object>());\n\treturn typeof sanitized === \"object\" && sanitized !== null && !Array.isArray(sanitized)\n\t\t? sanitized\n\t\t: { value: sanitized };\n}\n\nexport function canonicalJson(value: JsonValue): string {\n\tif (value === null) return \"null\";\n\tif (typeof value === \"string\" || typeof value === \"number\" || typeof value === \"boolean\") {\n\t\treturn JSON.stringify(value);\n\t}\n\tif (Array.isArray(value)) {\n\t\treturn `[${value.map((entry) => canonicalJson(entry)).join(\",\")}]`;\n\t}\n\treturn `{${Object.keys(value)\n\t\t.sort()\n\t\t.map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key] ?? null)}`)\n\t\t.join(\",\")}}`;\n}\n\nexport function hashCanonical(value: unknown): string {\n\treturn createHash(\"sha256\")\n\t\t.update(canonicalJson(sanitizeValue(value, 0, new WeakSet<object>())))\n\t\t.digest(\"hex\");\n}\n\nfunction sha256Text(value: string): string {\n\treturn createHash(\"sha256\").update(value).digest(\"hex\");\n}\n\nfunction sha256File(path: string): string {\n\treturn createHash(\"sha256\").update(readFileSync(path)).digest(\"hex\");\n}\n\nfunction isPathWithin(parent: string, child: string): boolean {\n\tconst resolvedParent = resolve(parent);\n\tconst resolvedChild = resolve(child);\n\treturn resolvedChild === resolvedParent || resolvedChild.startsWith(`${resolvedParent}${sep}`);\n}\n\nfunction isSensitivePath(path: string): boolean {\n\treturn /(?:^|[/\\\\])(?:\\.env[^/\\\\]*|auth\\.json|oauth\\.json|.*(?:secret|token|credential|private[_-]?key).*)$/i.test(\n\t\tpath,\n\t);\n}\n\nfunction defaultAllowedArtifactRoots(cwd: string, logPath: string): string[] {\n\treturn [cwd, dirname(logPath)];\n}\n\nfunction createArtifactManifest(\n\tartifactRefs: string[] | undefined,\n\tcwd: string,\n\tlogPath: string,\n\tallowedArtifactRoots: string[] | undefined,\n): HarnessControlArtifactManifestEntry[] {\n\tif (!artifactRefs || artifactRefs.length === 0) return [];\n\tconst roots = (allowedArtifactRoots ?? defaultAllowedArtifactRoots(cwd, logPath)).map((root) => resolve(root));\n\treturn artifactRefs.map((artifactPath) => {\n\t\tconst resolvedPath = resolve(cwd, artifactPath);\n\t\tconst allowed = roots.some((root) => isPathWithin(root, resolvedPath)) && !isSensitivePath(resolvedPath);\n\t\tif (!allowed) return { path: artifactPath, exists: existsSync(resolvedPath), allowed: false };\n\t\tif (!existsSync(resolvedPath)) return { path: artifactPath, exists: false, allowed: true };\n\t\ttry {\n\t\t\tconst stats = statSync(resolvedPath);\n\t\t\tif (!stats.isFile()) return { path: artifactPath, exists: true, allowed: true, sizeBytes: stats.size };\n\t\t\treturn {\n\t\t\t\tpath: artifactPath,\n\t\t\t\texists: true,\n\t\t\t\tallowed: true,\n\t\t\t\tsizeBytes: stats.size,\n\t\t\t\tsha256: sha256File(resolvedPath),\n\t\t\t};\n\t\t} catch (error) {\n\t\t\treturn {\n\t\t\t\tpath: artifactPath,\n\t\t\t\texists: existsSync(resolvedPath),\n\t\t\t\tallowed: true,\n\t\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t\t};\n\t\t}\n\t});\n}\n\nexport function resolveHarnessControlEventLogPath(options: HarnessControlEventOptions = {}): string | undefined {\n\tif (process.env.OMK_HARNESS_CONTROL_EVENTS === \"0\") return undefined;\n\tif (options.logPath) return options.logPath;\n\tif (process.env.OMK_HARNESS_CONTROL_EVENT_LOG) return process.env.OMK_HARNESS_CONTROL_EVENT_LOG;\n\tconst runId = options.runId ?? DEFAULT_RUN_ID;\n\treturn join(options.cwd ?? process.cwd(), \".omk\", \"runs\", runId, \"harness-control\", \"events.jsonl\");\n}\n\nfunction eventHashInput(eventWithoutHash: Omit<HarnessControlEvent, \"eventHash\">): string {\n\treturn `${canonicalJson(eventWithoutHash as unknown as JsonObject)}${eventWithoutHash.previousEventHash}`;\n}\n\nfunction computeEventHash(eventWithoutHash: Omit<HarnessControlEvent, \"eventHash\">): string {\n\treturn sha256Text(eventHashInput(eventWithoutHash));\n}\n\nfunction readPreviousEventState(logPath: string): PreviousEventState {\n\tif (!existsSync(logPath)) return { sequence: 0, eventHash: GENESIS_EVENT_HASH };\n\tconst lines = readFileSync(logPath, \"utf-8\")\n\t\t.split(\"\\n\")\n\t\t.map((line) => line.trim())\n\t\t.filter((line) => line.length > 0);\n\tif (lines.length === 0) return { sequence: 0, eventHash: GENESIS_EVENT_HASH };\n\tconst parsed = JSON.parse(lines.at(-1)!) as Partial<HarnessControlEvent>;\n\tif (parsed.schemaVersion !== \"omk.harness-control.event.v2\") {\n\t\treturn { sequence: 0, eventHash: GENESIS_EVENT_HASH };\n\t}\n\tif (typeof parsed.sequence !== \"number\" || typeof parsed.eventHash !== \"string\") {\n\t\tthrow new Error(\"Previous harness event is missing sequence or eventHash\");\n\t}\n\treturn { sequence: parsed.sequence, eventHash: parsed.eventHash };\n}\n\nfunction acquireLock(lockPath: string, timeoutMs: number): number {\n\tconst start = Date.now();\n\twhile (true) {\n\t\ttry {\n\t\t\treturn openSync(lockPath, \"wx\", 0o600);\n\t\t} catch (error) {\n\t\t\tif (existsSync(lockPath)) {\n\t\t\t\ttry {\n\t\t\t\t\tconst stats = statSync(lockPath);\n\t\t\t\t\tif (Date.now() - stats.mtimeMs > LOCK_STALE_MS) rmSync(lockPath, { force: true });\n\t\t\t\t} catch {}\n\t\t\t}\n\t\t\tif (Date.now() - start >= timeoutMs) {\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t}\n\t}\n}\n\nfunction formatRotationTimestamp(date: Date): string {\n\treturn date.toISOString().replace(/[:.]/g, \"-\");\n}\n\nfunction rotateLedgerIfNeeded(path: string, maxLedgerBytes: number | undefined, now: Date): string | undefined {\n\tif (!Number.isFinite(maxLedgerBytes) || (maxLedgerBytes ?? 0) <= 0 || !existsSync(path)) return undefined;\n\tconst stats = statSync(path);\n\tif (stats.size < Math.floor(maxLedgerBytes ?? 0)) return undefined;\n\tconst rotatedPath = `${path}.${formatRotationTimestamp(now)}.rotated`;\n\trenameSync(path, rotatedPath);\n\treturn rotatedPath;\n}\n\nfunction appendJsonLineWithFsync(path: string, line: string): void {\n\tconst fd = openSync(path, \"a\", 0o600);\n\ttry {\n\t\twriteSync(fd, `${line}\\n`, undefined, \"utf-8\");\n\t\tfsyncSync(fd);\n\t} finally {\n\t\tcloseSync(fd);\n\t}\n\ttry {\n\t\tconst dirFd = openSync(dirname(path), \"r\");\n\t\ttry {\n\t\t\tfsyncSync(dirFd);\n\t\t} finally {\n\t\t\tcloseSync(dirFd);\n\t\t}\n\t} catch {\n\t\t// Some platforms/filesystems do not support directory fsync; file fsync above is still mandatory.\n\t}\n}\n\nexport function createHarnessControlEvent(\n\tkind: HarnessControlEventKind,\n\tstatus: HarnessControlEventStatus,\n\tdata: unknown = {},\n\toptions: HarnessControlEventOptions = {},\n\tprevious: PreviousEventState = { sequence: 0, eventHash: GENESIS_EVENT_HASH },\n): HarnessControlEvent {\n\tconst eventId = options.eventId ?? options.id ?? randomUUID();\n\tconst operationId = options.operationId ?? eventId;\n\tconst logPath = resolveHarnessControlEventLogPath(options) ?? \"\";\n\tconst cwd = options.cwd ?? process.cwd();\n\tconst sanitizedData = sanitizeHarnessControlEventData(data);\n\tconst eventWithoutHash: Omit<HarnessControlEvent, \"eventHash\"> = {\n\t\tschemaVersion: \"omk.harness-control.event.v2\",\n\t\teventId,\n\t\trunId: options.runId ?? DEFAULT_RUN_ID,\n\t\tsessionId: options.sessionId ?? DEFAULT_SESSION_ID,\n\t\toperationId,\n\t\tcausationId: options.causationId ?? null,\n\t\tcorrelationId: options.correlationId ?? operationId,\n\t\tsequence: previous.sequence + 1,\n\t\ttimestamp: (options.now ?? new Date()).toISOString(),\n\t\tkind,\n\t\tstatus,\n\t\tcwd,\n\t\tbeforeStateHash: hashCanonical(options.beforeState ?? null),\n\t\tafterStateHash: hashCanonical(options.afterState ?? null),\n\t\tdata: sanitizedData,\n\t\tdataHash: hashCanonical(sanitizedData),\n\t\tartifacts: createArtifactManifest(options.artifactRefs, cwd, logPath, options.allowedArtifactRoots),\n\t\tpreviousEventHash: previous.eventHash,\n\t};\n\treturn { ...eventWithoutHash, eventHash: computeEventHash(eventWithoutHash) };\n}\n\nexport function recordHarnessControlEvent(\n\tkind: HarnessControlEventKind,\n\tstatus: HarnessControlEventStatus,\n\tdata: unknown = {},\n\toptions: HarnessControlEventOptions = {},\n): HarnessControlEventWriteResult {\n\tconst logPath = resolveHarnessControlEventLogPath(options);\n\tif (!logPath) return { ok: false, error: \"harness control event logging disabled\" };\n\tconst lockPath = `${logPath}.lock`;\n\tlet lockFd: number | undefined;\n\ttry {\n\t\tmkdirSync(dirname(logPath), { recursive: true });\n\t\tlockFd = acquireLock(lockPath, options.lockTimeoutMs ?? 1000);\n\t\trotateLedgerIfNeeded(logPath, options.maxLedgerBytes, options.now ?? new Date());\n\t\tconst previous = readPreviousEventState(logPath);\n\t\tconst event = createHarnessControlEvent(kind, status, data, options, previous);\n\t\tappendJsonLineWithFsync(logPath, JSON.stringify(event));\n\t\treturn { ok: true, path: logPath, event };\n\t} catch (error) {\n\t\treturn { ok: false, path: logPath, error: error instanceof Error ? error.message : String(error) };\n\t} finally {\n\t\tif (lockFd !== undefined) {\n\t\t\ttry {\n\t\t\t\tcloseSync(lockFd);\n\t\t\t} catch {}\n\t\t\trmSync(lockPath, { force: true });\n\t\t}\n\t}\n}\n\nfunction validateEventHash(event: HarnessControlEvent): string | undefined {\n\tconst { eventHash: _eventHash, ...eventWithoutHash } = event;\n\tconst expectedEventHash = computeEventHash(eventWithoutHash);\n\tif (expectedEventHash !== event.eventHash) {\n\t\treturn `event ${event.eventId} hash mismatch`;\n\t}\n\tif (hashCanonical(event.data) !== event.dataHash) {\n\t\treturn `event ${event.eventId} dataHash mismatch`;\n\t}\n\treturn undefined;\n}\n\nexport function verifyHarnessControlLedger(logPath: string): HarnessControlLedgerVerificationResult {\n\tconst errors: string[] = [];\n\tconst events: HarnessControlEvent[] = [];\n\tif (!existsSync(logPath)) return { ok: true, events, errors };\n\tconst lines = readFileSync(logPath, \"utf-8\")\n\t\t.split(\"\\n\")\n\t\t.map((line) => line.trim())\n\t\t.filter((line) => line.length > 0);\n\tlet previousSequence = 0;\n\tlet previousEventHash = GENESIS_EVENT_HASH;\n\tfor (let index = 0; index < lines.length; index++) {\n\t\ttry {\n\t\t\tconst event = JSON.parse(lines[index]!) as HarnessControlEvent;\n\t\t\tevents.push(event);\n\t\t\tif (event.schemaVersion !== \"omk.harness-control.event.v2\") {\n\t\t\t\terrors.push(`line ${index + 1}: unsupported schemaVersion`);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (event.sequence !== previousSequence + 1) {\n\t\t\t\terrors.push(`line ${index + 1}: sequence gap`);\n\t\t\t}\n\t\t\tif (event.previousEventHash !== previousEventHash) {\n\t\t\t\terrors.push(`line ${index + 1}: previousEventHash mismatch`);\n\t\t\t}\n\t\t\tconst hashError = validateEventHash(event);\n\t\t\tif (hashError) errors.push(`line ${index + 1}: ${hashError}`);\n\t\t\tpreviousSequence = event.sequence;\n\t\t\tpreviousEventHash = event.eventHash;\n\t\t} catch (error) {\n\t\t\terrors.push(`line ${index + 1}: ${error instanceof Error ? error.message : String(error)}`);\n\t\t}\n\t}\n\treturn { ok: errors.length === 0, events, errors };\n}\n"]}

package/dist/core/harness-control-events.js

@@ -1,339 +0,0 @@
-import { createHash, randomUUID } from "node:crypto";
-import { closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, rmSync, statSync, writeSync, } from "node:fs";
-import { dirname, join, resolve, sep } from "node:path";
-const MAX_EVENT_DEPTH = 6;
-const MAX_EVENT_OBJECT_KEYS = 80;
-const MAX_EVENT_ARRAY_ITEMS = 80;
-const MAX_EVENT_STRING_LENGTH = 2000;
-const REDACTED = "[redacted]";
-const GENESIS_EVENT_HASH = "0".repeat(64);
-const DEFAULT_RUN_ID = "default-run";
-const DEFAULT_SESSION_ID = "sessionless";
-const LOCK_STALE_MS = 30000;
-function isSensitiveKey(key) {
-    return /(?:secret|token|api[_-]?key|authorization|password|credential|private[_-]?key)/i.test(key);
-}
-function redactSensitiveValue(value) {
-    let redacted = value;
-    redacted = redacted.replace(/Bearer\s+[A-Za-z0-9._~+/=-]+/gi, `Bearer ${REDACTED}`);
-    redacted = redacted.replace(/sk-(?:proj-|ant-)?[A-Za-z0-9_-]{16,}/g, REDACTED);
-    redacted = redacted.replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g, REDACTED);
-    redacted = redacted.replace(/-----BEGIN [^-]+PRIVATE KEY-----[\s\S]*?-----END [^-]+PRIVATE KEY-----/g, REDACTED);
-    redacted = redacted.replace(/\b[A-Fa-f0-9]{64,}\b/g, REDACTED);
-    return redacted;
-}
-function truncateString(value) {
-    const redacted = redactSensitiveValue(value);
-    if (redacted.length <= MAX_EVENT_STRING_LENGTH)
-        return redacted;
-    return `${redacted.slice(0, MAX_EVENT_STRING_LENGTH)}…[truncated]`;
-}
-function sanitizeValue(value, depth, seen) {
-    if (value === null)
-        return null;
-    if (typeof value === "string")
-        return truncateString(value);
-    if (typeof value === "number")
-        return Number.isFinite(value) ? value : String(value);
-    if (typeof value === "boolean")
-        return value;
-    if (typeof value === "bigint")
-        return value.toString();
-    if (typeof value === "undefined" || typeof value === "function" || typeof value === "symbol")
-        return String(value);
-    if (depth >= MAX_EVENT_DEPTH)
-        return "[max-depth]";
-    if (Array.isArray(value)) {
-        return value.slice(0, MAX_EVENT_ARRAY_ITEMS).map((entry) => sanitizeValue(entry, depth + 1, seen));
-    }
-    if (value instanceof Date)
-        return value.toISOString();
-    if (value instanceof Error) {
-        return {
-            name: value.name,
-            message: truncateString(value.message),
-        };
-    }
-    if (typeof value === "object") {
-        if (seen.has(value))
-            return "[circular]";
-        seen.add(value);
-        const result = {};
-        for (const [key, entry] of Object.entries(value).slice(0, MAX_EVENT_OBJECT_KEYS)) {
-            result[key] = isSensitiveKey(key) ? REDACTED : sanitizeValue(entry, depth + 1, seen);
-        }
-        seen.delete(value);
-        return result;
-    }
-    return String(value);
-}
-export function sanitizeHarnessControlEventData(data) {
-    const sanitized = sanitizeValue(data ?? {}, 0, new WeakSet());
-    return typeof sanitized === "object" && sanitized !== null && !Array.isArray(sanitized)
-        ? sanitized
-        : { value: sanitized };
-}
-export function canonicalJson(value) {
-    if (value === null)
-        return "null";
-    if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
-        return JSON.stringify(value);
-    }
-    if (Array.isArray(value)) {
-        return `[${value.map((entry) => canonicalJson(entry)).join(",")}]`;
-    }
-    return `{${Object.keys(value)
-        .sort()
-        .map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key] ?? null)}`)
-        .join(",")}}`;
-}
-export function hashCanonical(value) {
-    return createHash("sha256")
-        .update(canonicalJson(sanitizeValue(value, 0, new WeakSet())))
-        .digest("hex");
-}
-function sha256Text(value) {
-    return createHash("sha256").update(value).digest("hex");
-}
-function sha256File(path) {
-    return createHash("sha256").update(readFileSync(path)).digest("hex");
-}
-function isPathWithin(parent, child) {
-    const resolvedParent = resolve(parent);
-    const resolvedChild = resolve(child);
-    return resolvedChild === resolvedParent || resolvedChild.startsWith(`${resolvedParent}${sep}`);
-}
-function isSensitivePath(path) {
-    return /(?:^|[/\\])(?:\.env[^/\\]*|auth\.json|oauth\.json|.*(?:secret|token|credential|private[_-]?key).*)$/i.test(path);
-}
-function defaultAllowedArtifactRoots(cwd, logPath) {
-    return [cwd, dirname(logPath)];
-}
-function createArtifactManifest(artifactRefs, cwd, logPath, allowedArtifactRoots) {
-    if (!artifactRefs || artifactRefs.length === 0)
-        return [];
-    const roots = (allowedArtifactRoots ?? defaultAllowedArtifactRoots(cwd, logPath)).map((root) => resolve(root));
-    return artifactRefs.map((artifactPath) => {
-        const resolvedPath = resolve(cwd, artifactPath);
-        const allowed = roots.some((root) => isPathWithin(root, resolvedPath)) && !isSensitivePath(resolvedPath);
-        if (!allowed)
-            return { path: artifactPath, exists: existsSync(resolvedPath), allowed: false };
-        if (!existsSync(resolvedPath))
-            return { path: artifactPath, exists: false, allowed: true };
-        try {
-            const stats = statSync(resolvedPath);
-            if (!stats.isFile())
-                return { path: artifactPath, exists: true, allowed: true, sizeBytes: stats.size };
-            return {
-                path: artifactPath,
-                exists: true,
-                allowed: true,
-                sizeBytes: stats.size,
-                sha256: sha256File(resolvedPath),
-            };
-        }
-        catch (error) {
-            return {
-                path: artifactPath,
-                exists: existsSync(resolvedPath),
-                allowed: true,
-                error: error instanceof Error ? error.message : String(error),
-            };
-        }
-    });
-}
-export function resolveHarnessControlEventLogPath(options = {}) {
-    if (process.env.OMK_HARNESS_CONTROL_EVENTS === "0")
-        return undefined;
-    if (options.logPath)
-        return options.logPath;
-    if (process.env.OMK_HARNESS_CONTROL_EVENT_LOG)
-        return process.env.OMK_HARNESS_CONTROL_EVENT_LOG;
-    const runId = options.runId ?? DEFAULT_RUN_ID;
-    return join(options.cwd ?? process.cwd(), ".omk", "runs", runId, "harness-control", "events.jsonl");
-}
-function eventHashInput(eventWithoutHash) {
-    return `${canonicalJson(eventWithoutHash)}${eventWithoutHash.previousEventHash}`;
-}
-function computeEventHash(eventWithoutHash) {
-    return sha256Text(eventHashInput(eventWithoutHash));
-}
-function readPreviousEventState(logPath) {
-    if (!existsSync(logPath))
-        return { sequence: 0, eventHash: GENESIS_EVENT_HASH };
-    const lines = readFileSync(logPath, "utf-8")
-        .split("\n")
-        .map((line) => line.trim())
-        .filter((line) => line.length > 0);
-    if (lines.length === 0)
-        return { sequence: 0, eventHash: GENESIS_EVENT_HASH };
-    const parsed = JSON.parse(lines.at(-1));
-    if (parsed.schemaVersion !== "omk.harness-control.event.v2") {
-        return { sequence: 0, eventHash: GENESIS_EVENT_HASH };
-    }
-    if (typeof parsed.sequence !== "number" || typeof parsed.eventHash !== "string") {
-        throw new Error("Previous harness event is missing sequence or eventHash");
-    }
-    return { sequence: parsed.sequence, eventHash: parsed.eventHash };
-}
-function acquireLock(lockPath, timeoutMs) {
-    const start = Date.now();
-    while (true) {
-        try {
-            return openSync(lockPath, "wx", 0o600);
-        }
-        catch (error) {
-            if (existsSync(lockPath)) {
-                try {
-                    const stats = statSync(lockPath);
-                    if (Date.now() - stats.mtimeMs > LOCK_STALE_MS)
-                        rmSync(lockPath, { force: true });
-                }
-                catch { }
-            }
-            if (Date.now() - start >= timeoutMs) {
-                throw error;
-            }
-        }
-    }
-}
-function formatRotationTimestamp(date) {
-    return date.toISOString().replace(/[:.]/g, "-");
-}
-function rotateLedgerIfNeeded(path, maxLedgerBytes, now) {
-    if (!Number.isFinite(maxLedgerBytes) || (maxLedgerBytes ?? 0) <= 0 || !existsSync(path))
-        return undefined;
-    const stats = statSync(path);
-    if (stats.size < Math.floor(maxLedgerBytes ?? 0))
-        return undefined;
-    const rotatedPath = `${path}.${formatRotationTimestamp(now)}.rotated`;
-    renameSync(path, rotatedPath);
-    return rotatedPath;
-}
-function appendJsonLineWithFsync(path, line) {
-    const fd = openSync(path, "a", 0o600);
-    try {
-        writeSync(fd, `${line}\n`, undefined, "utf-8");
-        fsyncSync(fd);
-    }
-    finally {
-        closeSync(fd);
-    }
-    try {
-        const dirFd = openSync(dirname(path), "r");
-        try {
-            fsyncSync(dirFd);
-        }
-        finally {
-            closeSync(dirFd);
-        }
-    }
-    catch {
-        // Some platforms/filesystems do not support directory fsync; file fsync above is still mandatory.
-    }
-}
-export function createHarnessControlEvent(kind, status, data = {}, options = {}, previous = { sequence: 0, eventHash: GENESIS_EVENT_HASH }) {
-    const eventId = options.eventId ?? options.id ?? randomUUID();
-    const operationId = options.operationId ?? eventId;
-    const logPath = resolveHarnessControlEventLogPath(options) ?? "";
-    const cwd = options.cwd ?? process.cwd();
-    const sanitizedData = sanitizeHarnessControlEventData(data);
-    const eventWithoutHash = {
-        schemaVersion: "omk.harness-control.event.v2",
-        eventId,
-        runId: options.runId ?? DEFAULT_RUN_ID,
-        sessionId: options.sessionId ?? DEFAULT_SESSION_ID,
-        operationId,
-        causationId: options.causationId ?? null,
-        correlationId: options.correlationId ?? operationId,
-        sequence: previous.sequence + 1,
-        timestamp: (options.now ?? new Date()).toISOString(),
-        kind,
-        status,
-        cwd,
-        beforeStateHash: hashCanonical(options.beforeState ?? null),
-        afterStateHash: hashCanonical(options.afterState ?? null),
-        data: sanitizedData,
-        dataHash: hashCanonical(sanitizedData),
-        artifacts: createArtifactManifest(options.artifactRefs, cwd, logPath, options.allowedArtifactRoots),
-        previousEventHash: previous.eventHash,
-    };
-    return { ...eventWithoutHash, eventHash: computeEventHash(eventWithoutHash) };
-}
-export function recordHarnessControlEvent(kind, status, data = {}, options = {}) {
-    const logPath = resolveHarnessControlEventLogPath(options);
-    if (!logPath)
-        return { ok: false, error: "harness control event logging disabled" };
-    const lockPath = `${logPath}.lock`;
-    let lockFd;
-    try {
-        mkdirSync(dirname(logPath), { recursive: true });
-        lockFd = acquireLock(lockPath, options.lockTimeoutMs ?? 1000);
-        rotateLedgerIfNeeded(logPath, options.maxLedgerBytes, options.now ?? new Date());
-        const previous = readPreviousEventState(logPath);
-        const event = createHarnessControlEvent(kind, status, data, options, previous);
-        appendJsonLineWithFsync(logPath, JSON.stringify(event));
-        return { ok: true, path: logPath, event };
-    }
-    catch (error) {
-        return { ok: false, path: logPath, error: error instanceof Error ? error.message : String(error) };
-    }
-    finally {
-        if (lockFd !== undefined) {
-            try {
-                closeSync(lockFd);
-            }
-            catch { }
-            rmSync(lockPath, { force: true });
-        }
-    }
-}
-function validateEventHash(event) {
-    const { eventHash: _eventHash, ...eventWithoutHash } = event;
-    const expectedEventHash = computeEventHash(eventWithoutHash);
-    if (expectedEventHash !== event.eventHash) {
-        return `event ${event.eventId} hash mismatch`;
-    }
-    if (hashCanonical(event.data) !== event.dataHash) {
-        return `event ${event.eventId} dataHash mismatch`;
-    }
-    return undefined;
-}
-export function verifyHarnessControlLedger(logPath) {
-    const errors = [];
-    const events = [];
-    if (!existsSync(logPath))
-        return { ok: true, events, errors };
-    const lines = readFileSync(logPath, "utf-8")
-        .split("\n")
-        .map((line) => line.trim())
-        .filter((line) => line.length > 0);
-    let previousSequence = 0;
-    let previousEventHash = GENESIS_EVENT_HASH;
-    for (let index = 0; index < lines.length; index++) {
-        try {
-            const event = JSON.parse(lines[index]);
-            events.push(event);
-            if (event.schemaVersion !== "omk.harness-control.event.v2") {
-                errors.push(`line ${index + 1}: unsupported schemaVersion`);
-                continue;
-            }
-            if (event.sequence !== previousSequence + 1) {
-                errors.push(`line ${index + 1}: sequence gap`);
-            }
-            if (event.previousEventHash !== previousEventHash) {
-                errors.push(`line ${index + 1}: previousEventHash mismatch`);
-            }
-            const hashError = validateEventHash(event);
-            if (hashError)
-                errors.push(`line ${index + 1}: ${hashError}`);
-            previousSequence = event.sequence;
-            previousEventHash = event.eventHash;
-        }
-        catch (error) {
-            errors.push(`line ${index + 1}: ${error instanceof Error ? error.message : String(error)}`);
-        }
-    }
-    return { ok: errors.length === 0, events, errors };
-}
-//# sourceMappingURL=harness-control-events.js.map

package/dist/core/harness-control-events.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"harness-control-events.js","sourceRoot":"","sources":["../../src/core/harness-control-events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACN,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,MAAM,EACN,QAAQ,EACR,SAAS,GACT,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AA+FxD,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,kBAAkB,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC1C,MAAM,cAAc,GAAG,aAAa,CAAC;AACrC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AACzC,MAAM,aAAa,GAAG,KAAK,CAAC;AAE5B,SAAS,cAAc,CAAC,GAAW,EAAW;IAC7C,OAAO,iFAAiF,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAAA,CACnG;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAU;IACpD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,gCAAgC,EAAE,UAAU,QAAQ,EAAE,CAAC,CAAC;IACpF,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,uCAAuC,EAAE,QAAQ,CAAC,CAAC;IAC/E,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,wDAAwD,EAAE,QAAQ,CAAC,CAAC;IAChG,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,yEAAyE,EAAE,QAAQ,CAAC,CAAC;IACjH,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,uBAAuB,EAAE,QAAQ,CAAC,CAAC;IAC/D,OAAO,QAAQ,CAAC;AAAA,CAChB;AAED,SAAS,cAAc,CAAC,KAAa,EAAU;IAC9C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,MAAM,IAAI,uBAAuB;QAAE,OAAO,QAAQ,CAAC;IAChE,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,gBAAc,CAAC;AAAA,CACnE;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa,EAAE,IAAqB,EAAa;IACvF,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrF,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,WAAW,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACnH,IAAI,KAAK,IAAI,eAAe;QAAE,OAAO,aAAa,CAAC;IAEnD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACpG,CAAC;IAED,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC5B,OAAO;YACN,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;SACtC,CAAC;IACH,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,YAAY,CAAC;QACzC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,MAAM,GAAe,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,EAAE,CAAC;YAClF,MAAM,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,MAAM,CAAC;IACf,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CACrB;AAED,MAAM,UAAU,+BAA+B,CAAC,IAAa,EAAc;IAC1E,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,OAAO,EAAU,CAAC,CAAC;IACtE,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QACtF,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAAA,CACxB;AAED,MAAM,UAAU,aAAa,CAAC,KAAgB,EAAU;IACvD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1F,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SAC3B,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;SAC3E,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAAA,CACf;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAU;IACrD,OAAO,UAAU,CAAC,QAAQ,CAAC;SACzB,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,OAAO,EAAU,CAAC,CAAC,CAAC;SACrE,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CAChB;AAED,SAAS,UAAU,CAAC,KAAa,EAAU;IAC1C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CACxD;AAED,SAAS,UAAU,CAAC,IAAY,EAAU;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CACrE;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,KAAa,EAAW;IAC7D,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,aAAa,KAAK,cAAc,IAAI,aAAa,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,GAAG,EAAE,CAAC,CAAC;AAAA,CAC/F;AAED,SAAS,eAAe,CAAC,IAAY,EAAW;IAC/C,OAAO,sGAAsG,CAAC,IAAI,CACjH,IAAI,CACJ,CAAC;AAAA,CACF;AAED,SAAS,2BAA2B,CAAC,GAAW,EAAE,OAAe,EAAY;IAC5E,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAAA,CAC/B;AAED,SAAS,sBAAsB,CAC9B,YAAkC,EAClC,GAAW,EACX,OAAe,EACf,oBAA0C,EACF;IACxC,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1D,MAAM,KAAK,GAAG,CAAC,oBAAoB,IAAI,2BAA2B,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/G,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QACzG,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9F,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3F,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YACvG,OAAO;gBACN,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,KAAK,CAAC,IAAI;gBACrB,MAAM,EAAE,UAAU,CAAC,YAAY,CAAC;aAChC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO;gBACN,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,UAAU,CAAC,YAAY,CAAC;gBAChC,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC;QACH,CAAC;IAAA,CACD,CAAC,CAAC;AAAA,CACH;AAED,MAAM,UAAU,iCAAiC,CAAC,OAAO,GAA+B,EAAE,EAAsB;IAC/G,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IACrE,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;IAChG,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC;IAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,cAAc,CAAC,CAAC;AAAA,CACpG;AAED,SAAS,cAAc,CAAC,gBAAwD,EAAU;IACzF,OAAO,GAAG,aAAa,CAAC,gBAAyC,CAAC,GAAG,gBAAgB,CAAC,iBAAiB,EAAE,CAAC;AAAA,CAC1G;AAED,SAAS,gBAAgB,CAAC,gBAAwD,EAAU;IAC3F,OAAO,UAAU,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAAA,CACpD;AAED,SAAS,sBAAsB,CAAC,OAAe,EAAsB;IACpE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAChF,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;SAC1C,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAiC,CAAC;IACzE,IAAI,MAAM,CAAC,aAAa,KAAK,8BAA8B,EAAE,CAAC;QAC7D,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;AAAA,CAClE;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,SAAiB,EAAU;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,OAAO,IAAI,EAAE,CAAC;QACb,IAAI,CAAC;YACJ,OAAO,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBACJ,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACjC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,GAAG,aAAa;wBAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnF,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACX,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,SAAS,EAAE,CAAC;gBACrC,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;IACF,CAAC;AAAA,CACD;AAED,SAAS,uBAAuB,CAAC,IAAU,EAAU;IACpD,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AAAA,CAChD;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAE,cAAkC,EAAE,GAAS,EAAsB;IAC9G,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1G,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACnE,MAAM,WAAW,GAAG,GAAG,IAAI,IAAI,uBAAuB,CAAC,GAAG,CAAC,UAAU,CAAC;IACtE,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC9B,OAAO,WAAW,CAAC;AAAA,CACnB;AAED,SAAS,uBAAuB,CAAC,IAAY,EAAE,IAAY,EAAQ;IAClE,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC;QACJ,SAAS,CAAC,EAAE,EAAE,GAAG,IAAI,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC/C,SAAS,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;YAAS,CAAC;QACV,SAAS,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC;YACJ,SAAS,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;gBAAS,CAAC;YACV,SAAS,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,kGAAkG;IACnG,CAAC;AAAA,CACD;AAED,MAAM,UAAU,yBAAyB,CACxC,IAA6B,EAC7B,MAAiC,EACjC,IAAI,GAAY,EAAE,EAClB,OAAO,GAA+B,EAAE,EACxC,QAAQ,GAAuB,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,EACvD;IACtB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,EAAE,IAAI,UAAU,EAAE,CAAC;IAC9D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC;IACnD,MAAM,OAAO,GAAG,iCAAiC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACjE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,aAAa,GAAG,+BAA+B,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,gBAAgB,GAA2C;QAChE,aAAa,EAAE,8BAA8B;QAC7C,OAAO;QACP,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,cAAc;QACtC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,kBAAkB;QAClD,WAAW;QACX,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;QACxC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,WAAW;QACnD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,GAAG,CAAC;QAC/B,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;QACpD,IAAI;QACJ,MAAM;QACN,GAAG;QACH,eAAe,EAAE,aAAa,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;QAC3D,cAAc,EAAE,aAAa,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;QACzD,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC;QACtC,SAAS,EAAE,sBAAsB,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,oBAAoB,CAAC;QACnG,iBAAiB,EAAE,QAAQ,CAAC,SAAS;KACrC,CAAC;IACF,OAAO,EAAE,GAAG,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,CAAC;AAAA,CAC9E;AAED,MAAM,UAAU,yBAAyB,CACxC,IAA6B,EAC7B,MAAiC,EACjC,IAAI,GAAY,EAAE,EAClB,OAAO,GAA+B,EAAE,EACP;IACjC,MAAM,OAAO,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;IACpF,MAAM,QAAQ,GAAG,GAAG,OAAO,OAAO,CAAC;IACnC,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACJ,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC;QAC9D,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QACjF,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/E,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACpG,CAAC;YAAS,CAAC;QACV,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACJ,SAAS,CAAC,MAAM,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACV,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,CAAC;IACF,CAAC;AAAA,CACD;AAED,SAAS,iBAAiB,CAAC,KAA0B,EAAsB;IAC1E,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,gBAAgB,EAAE,GAAG,KAAK,CAAC;IAC7D,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IAC7D,IAAI,iBAAiB,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QAC3C,OAAO,SAAS,KAAK,CAAC,OAAO,gBAAgB,CAAC;IAC/C,CAAC;IACD,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;QAClD,OAAO,SAAS,KAAK,CAAC,OAAO,oBAAoB,CAAC;IACnD,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAe,EAA0C;IACnG,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAA0B,EAAE,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9D,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;SAC1C,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpC,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,iBAAiB,GAAG,kBAAkB,CAAC;IAC3C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAE,CAAwB,CAAC;YAC/D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,IAAI,KAAK,CAAC,aAAa,KAAK,8BAA8B,EAAE,CAAC;gBAC5D,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,6BAA6B,CAAC,CAAC;gBAC5D,SAAS;YACV,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB,GAAG,CAAC,EAAE,CAAC;gBAC7C,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,iBAAiB,EAAE,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,8BAA8B,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC,CAAC;YAC9D,gBAAgB,GAAG,KAAK,CAAC,QAAQ,CAAC;YAClC,iBAAiB,GAAG,KAAK,CAAC,SAAS,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;IACF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAAA,CACnD","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport {\n\tcloseSync,\n\texistsSync,\n\tfsyncSync,\n\tmkdirSync,\n\topenSync,\n\treadFileSync,\n\trenameSync,\n\trmSync,\n\tstatSync,\n\twriteSync,\n} from \"node:fs\";\nimport { dirname, join, resolve, sep } from \"node:path\";\n\nexport type HarnessControlEventStatus =\n\t| \"prepared\"\n\t| \"started\"\n\t| \"applying\"\n\t| \"verifying\"\n\t| \"completed\"\n\t| \"failed\"\n\t| \"blocked\"\n\t| \"rolled_back\"\n\t| \"in_doubt\";\n\nexport type HarnessControlEventKind =\n\t| \"compaction.summary.generated\"\n\t| \"extension.migration.plan\"\n\t| \"extension.migration.apply\"\n\t| \"interactive.model_thinking.commit\"\n\t| \"interactive.theme.apply\"\n\t| \"keybinding.conflict\"\n\t| \"spec.compile\"\n\t| \"spec.verify\"\n\t| (string & {});\n\nexport type JsonValue = string | number | boolean | null | JsonValue[] | { [key: string]: JsonValue };\nexport type JsonObject = { [key: string]: JsonValue };\n\nexport interface HarnessControlArtifactManifestEntry {\n\tpath: string;\n\texists: boolean;\n\tallowed: boolean;\n\tsizeBytes?: number;\n\tsha256?: string;\n\terror?: string;\n}\n\nexport interface HarnessControlEvent {\n\tschemaVersion: \"omk.harness-control.event.v2\";\n\teventId: string;\n\trunId: string;\n\tsessionId: string;\n\toperationId: string;\n\tcausationId: string | null;\n\tcorrelationId: string;\n\tsequence: number;\n\ttimestamp: string;\n\tkind: HarnessControlEventKind;\n\tstatus: HarnessControlEventStatus;\n\tcwd: string;\n\tbeforeStateHash: string;\n\tafterStateHash: string;\n\tdata: JsonObject;\n\tdataHash: string;\n\tartifacts: HarnessControlArtifactManifestEntry[];\n\tpreviousEventHash: string;\n\teventHash: string;\n}\n\nexport interface HarnessControlEventWriteResult {\n\tok: boolean;\n\tpath?: string;\n\tevent?: HarnessControlEvent;\n\terror?: string;\n}\n\nexport interface HarnessControlEventOptions {\n\tcwd?: string;\n\tlogPath?: string;\n\tnow?: Date;\n\tid?: string;\n\teventId?: string;\n\trunId?: string;\n\tsessionId?: string;\n\toperationId?: string;\n\tcausationId?: string | null;\n\tcorrelationId?: string;\n\tbeforeState?: unknown;\n\tafterState?: unknown;\n\tartifactRefs?: string[];\n\tallowedArtifactRoots?: string[];\n\tlockTimeoutMs?: number;\n\tmaxLedgerBytes?: number;\n}\n\nexport interface HarnessControlLedgerVerificationResult {\n\tok: boolean;\n\tevents: HarnessControlEvent[];\n\terrors: string[];\n}\n\ninterface PreviousEventState {\n\tsequence: number;\n\teventHash: string;\n}\n\nconst MAX_EVENT_DEPTH = 6;\nconst MAX_EVENT_OBJECT_KEYS = 80;\nconst MAX_EVENT_ARRAY_ITEMS = 80;\nconst MAX_EVENT_STRING_LENGTH = 2000;\nconst REDACTED = \"[redacted]\";\nconst GENESIS_EVENT_HASH = \"0\".repeat(64);\nconst DEFAULT_RUN_ID = \"default-run\";\nconst DEFAULT_SESSION_ID = \"sessionless\";\nconst LOCK_STALE_MS = 30000;\n\nfunction isSensitiveKey(key: string): boolean {\n\treturn /(?:secret|token|api[_-]?key|authorization|password|credential|private[_-]?key)/i.test(key);\n}\n\nfunction redactSensitiveValue(value: string): string {\n\tlet redacted = value;\n\tredacted = redacted.replace(/Bearer\\s+[A-Za-z0-9._~+/=-]+/gi, `Bearer ${REDACTED}`);\n\tredacted = redacted.replace(/sk-(?:proj-|ant-)?[A-Za-z0-9_-]{16,}/g, REDACTED);\n\tredacted = redacted.replace(/\\beyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\b/g, REDACTED);\n\tredacted = redacted.replace(/-----BEGIN [^-]+PRIVATE KEY-----[\\s\\S]*?-----END [^-]+PRIVATE KEY-----/g, REDACTED);\n\tredacted = redacted.replace(/\\b[A-Fa-f0-9]{64,}\\b/g, REDACTED);\n\treturn redacted;\n}\n\nfunction truncateString(value: string): string {\n\tconst redacted = redactSensitiveValue(value);\n\tif (redacted.length <= MAX_EVENT_STRING_LENGTH) return redacted;\n\treturn `${redacted.slice(0, MAX_EVENT_STRING_LENGTH)}…[truncated]`;\n}\n\nfunction sanitizeValue(value: unknown, depth: number, seen: WeakSet<object>): JsonValue {\n\tif (value === null) return null;\n\tif (typeof value === \"string\") return truncateString(value);\n\tif (typeof value === \"number\") return Number.isFinite(value) ? value : String(value);\n\tif (typeof value === \"boolean\") return value;\n\tif (typeof value === \"bigint\") return value.toString();\n\tif (typeof value === \"undefined\" || typeof value === \"function\" || typeof value === \"symbol\") return String(value);\n\tif (depth >= MAX_EVENT_DEPTH) return \"[max-depth]\";\n\n\tif (Array.isArray(value)) {\n\t\treturn value.slice(0, MAX_EVENT_ARRAY_ITEMS).map((entry) => sanitizeValue(entry, depth + 1, seen));\n\t}\n\n\tif (value instanceof Date) return value.toISOString();\n\tif (value instanceof Error) {\n\t\treturn {\n\t\t\tname: value.name,\n\t\t\tmessage: truncateString(value.message),\n\t\t};\n\t}\n\n\tif (typeof value === \"object\") {\n\t\tif (seen.has(value)) return \"[circular]\";\n\t\tseen.add(value);\n\t\tconst result: JsonObject = {};\n\t\tfor (const [key, entry] of Object.entries(value).slice(0, MAX_EVENT_OBJECT_KEYS)) {\n\t\t\tresult[key] = isSensitiveKey(key) ? REDACTED : sanitizeValue(entry, depth + 1, seen);\n\t\t}\n\t\tseen.delete(value);\n\t\treturn result;\n\t}\n\n\treturn String(value);\n}\n\nexport function sanitizeHarnessControlEventData(data: unknown): JsonObject {\n\tconst sanitized = sanitizeValue(data ?? {}, 0, new WeakSet<object>());\n\treturn typeof sanitized === \"object\" && sanitized !== null && !Array.isArray(sanitized)\n\t\t? sanitized\n\t\t: { value: sanitized };\n}\n\nexport function canonicalJson(value: JsonValue): string {\n\tif (value === null) return \"null\";\n\tif (typeof value === \"string\" || typeof value === \"number\" || typeof value === \"boolean\") {\n\t\treturn JSON.stringify(value);\n\t}\n\tif (Array.isArray(value)) {\n\t\treturn `[${value.map((entry) => canonicalJson(entry)).join(\",\")}]`;\n\t}\n\treturn `{${Object.keys(value)\n\t\t.sort()\n\t\t.map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key] ?? null)}`)\n\t\t.join(\",\")}}`;\n}\n\nexport function hashCanonical(value: unknown): string {\n\treturn createHash(\"sha256\")\n\t\t.update(canonicalJson(sanitizeValue(value, 0, new WeakSet<object>())))\n\t\t.digest(\"hex\");\n}\n\nfunction sha256Text(value: string): string {\n\treturn createHash(\"sha256\").update(value).digest(\"hex\");\n}\n\nfunction sha256File(path: string): string {\n\treturn createHash(\"sha256\").update(readFileSync(path)).digest(\"hex\");\n}\n\nfunction isPathWithin(parent: string, child: string): boolean {\n\tconst resolvedParent = resolve(parent);\n\tconst resolvedChild = resolve(child);\n\treturn resolvedChild === resolvedParent || resolvedChild.startsWith(`${resolvedParent}${sep}`);\n}\n\nfunction isSensitivePath(path: string): boolean {\n\treturn /(?:^|[/\\\\])(?:\\.env[^/\\\\]*|auth\\.json|oauth\\.json|.*(?:secret|token|credential|private[_-]?key).*)$/i.test(\n\t\tpath,\n\t);\n}\n\nfunction defaultAllowedArtifactRoots(cwd: string, logPath: string): string[] {\n\treturn [cwd, dirname(logPath)];\n}\n\nfunction createArtifactManifest(\n\tartifactRefs: string[] | undefined,\n\tcwd: string,\n\tlogPath: string,\n\tallowedArtifactRoots: string[] | undefined,\n): HarnessControlArtifactManifestEntry[] {\n\tif (!artifactRefs || artifactRefs.length === 0) return [];\n\tconst roots = (allowedArtifactRoots ?? defaultAllowedArtifactRoots(cwd, logPath)).map((root) => resolve(root));\n\treturn artifactRefs.map((artifactPath) => {\n\t\tconst resolvedPath = resolve(cwd, artifactPath);\n\t\tconst allowed = roots.some((root) => isPathWithin(root, resolvedPath)) && !isSensitivePath(resolvedPath);\n\t\tif (!allowed) return { path: artifactPath, exists: existsSync(resolvedPath), allowed: false };\n\t\tif (!existsSync(resolvedPath)) return { path: artifactPath, exists: false, allowed: true };\n\t\ttry {\n\t\t\tconst stats = statSync(resolvedPath);\n\t\t\tif (!stats.isFile()) return { path: artifactPath, exists: true, allowed: true, sizeBytes: stats.size };\n\t\t\treturn {\n\t\t\t\tpath: artifactPath,\n\t\t\t\texists: true,\n\t\t\t\tallowed: true,\n\t\t\t\tsizeBytes: stats.size,\n\t\t\t\tsha256: sha256File(resolvedPath),\n\t\t\t};\n\t\t} catch (error) {\n\t\t\treturn {\n\t\t\t\tpath: artifactPath,\n\t\t\t\texists: existsSync(resolvedPath),\n\t\t\t\tallowed: true,\n\t\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t\t};\n\t\t}\n\t});\n}\n\nexport function resolveHarnessControlEventLogPath(options: HarnessControlEventOptions = {}): string | undefined {\n\tif (process.env.OMK_HARNESS_CONTROL_EVENTS === \"0\") return undefined;\n\tif (options.logPath) return options.logPath;\n\tif (process.env.OMK_HARNESS_CONTROL_EVENT_LOG) return process.env.OMK_HARNESS_CONTROL_EVENT_LOG;\n\tconst runId = options.runId ?? DEFAULT_RUN_ID;\n\treturn join(options.cwd ?? process.cwd(), \".omk\", \"runs\", runId, \"harness-control\", \"events.jsonl\");\n}\n\nfunction eventHashInput(eventWithoutHash: Omit<HarnessControlEvent, \"eventHash\">): string {\n\treturn `${canonicalJson(eventWithoutHash as unknown as JsonObject)}${eventWithoutHash.previousEventHash}`;\n}\n\nfunction computeEventHash(eventWithoutHash: Omit<HarnessControlEvent, \"eventHash\">): string {\n\treturn sha256Text(eventHashInput(eventWithoutHash));\n}\n\nfunction readPreviousEventState(logPath: string): PreviousEventState {\n\tif (!existsSync(logPath)) return { sequence: 0, eventHash: GENESIS_EVENT_HASH };\n\tconst lines = readFileSync(logPath, \"utf-8\")\n\t\t.split(\"\\n\")\n\t\t.map((line) => line.trim())\n\t\t.filter((line) => line.length > 0);\n\tif (lines.length === 0) return { sequence: 0, eventHash: GENESIS_EVENT_HASH };\n\tconst parsed = JSON.parse(lines.at(-1)!) as Partial<HarnessControlEvent>;\n\tif (parsed.schemaVersion !== \"omk.harness-control.event.v2\") {\n\t\treturn { sequence: 0, eventHash: GENESIS_EVENT_HASH };\n\t}\n\tif (typeof parsed.sequence !== \"number\" || typeof parsed.eventHash !== \"string\") {\n\t\tthrow new Error(\"Previous harness event is missing sequence or eventHash\");\n\t}\n\treturn { sequence: parsed.sequence, eventHash: parsed.eventHash };\n}\n\nfunction acquireLock(lockPath: string, timeoutMs: number): number {\n\tconst start = Date.now();\n\twhile (true) {\n\t\ttry {\n\t\t\treturn openSync(lockPath, \"wx\", 0o600);\n\t\t} catch (error) {\n\t\t\tif (existsSync(lockPath)) {\n\t\t\t\ttry {\n\t\t\t\t\tconst stats = statSync(lockPath);\n\t\t\t\t\tif (Date.now() - stats.mtimeMs > LOCK_STALE_MS) rmSync(lockPath, { force: true });\n\t\t\t\t} catch {}\n\t\t\t}\n\t\t\tif (Date.now() - start >= timeoutMs) {\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t}\n\t}\n}\n\nfunction formatRotationTimestamp(date: Date): string {\n\treturn date.toISOString().replace(/[:.]/g, \"-\");\n}\n\nfunction rotateLedgerIfNeeded(path: string, maxLedgerBytes: number | undefined, now: Date): string | undefined {\n\tif (!Number.isFinite(maxLedgerBytes) || (maxLedgerBytes ?? 0) <= 0 || !existsSync(path)) return undefined;\n\tconst stats = statSync(path);\n\tif (stats.size < Math.floor(maxLedgerBytes ?? 0)) return undefined;\n\tconst rotatedPath = `${path}.${formatRotationTimestamp(now)}.rotated`;\n\trenameSync(path, rotatedPath);\n\treturn rotatedPath;\n}\n\nfunction appendJsonLineWithFsync(path: string, line: string): void {\n\tconst fd = openSync(path, \"a\", 0o600);\n\ttry {\n\t\twriteSync(fd, `${line}\\n`, undefined, \"utf-8\");\n\t\tfsyncSync(fd);\n\t} finally {\n\t\tcloseSync(fd);\n\t}\n\ttry {\n\t\tconst dirFd = openSync(dirname(path), \"r\");\n\t\ttry {\n\t\t\tfsyncSync(dirFd);\n\t\t} finally {\n\t\t\tcloseSync(dirFd);\n\t\t}\n\t} catch {\n\t\t// Some platforms/filesystems do not support directory fsync; file fsync above is still mandatory.\n\t}\n}\n\nexport function createHarnessControlEvent(\n\tkind: HarnessControlEventKind,\n\tstatus: HarnessControlEventStatus,\n\tdata: unknown = {},\n\toptions: HarnessControlEventOptions = {},\n\tprevious: PreviousEventState = { sequence: 0, eventHash: GENESIS_EVENT_HASH },\n): HarnessControlEvent {\n\tconst eventId = options.eventId ?? options.id ?? randomUUID();\n\tconst operationId = options.operationId ?? eventId;\n\tconst logPath = resolveHarnessControlEventLogPath(options) ?? \"\";\n\tconst cwd = options.cwd ?? process.cwd();\n\tconst sanitizedData = sanitizeHarnessControlEventData(data);\n\tconst eventWithoutHash: Omit<HarnessControlEvent, \"eventHash\"> = {\n\t\tschemaVersion: \"omk.harness-control.event.v2\",\n\t\teventId,\n\t\trunId: options.runId ?? DEFAULT_RUN_ID,\n\t\tsessionId: options.sessionId ?? DEFAULT_SESSION_ID,\n\t\toperationId,\n\t\tcausationId: options.causationId ?? null,\n\t\tcorrelationId: options.correlationId ?? operationId,\n\t\tsequence: previous.sequence + 1,\n\t\ttimestamp: (options.now ?? new Date()).toISOString(),\n\t\tkind,\n\t\tstatus,\n\t\tcwd,\n\t\tbeforeStateHash: hashCanonical(options.beforeState ?? null),\n\t\tafterStateHash: hashCanonical(options.afterState ?? null),\n\t\tdata: sanitizedData,\n\t\tdataHash: hashCanonical(sanitizedData),\n\t\tartifacts: createArtifactManifest(options.artifactRefs, cwd, logPath, options.allowedArtifactRoots),\n\t\tpreviousEventHash: previous.eventHash,\n\t};\n\treturn { ...eventWithoutHash, eventHash: computeEventHash(eventWithoutHash) };\n}\n\nexport function recordHarnessControlEvent(\n\tkind: HarnessControlEventKind,\n\tstatus: HarnessControlEventStatus,\n\tdata: unknown = {},\n\toptions: HarnessControlEventOptions = {},\n): HarnessControlEventWriteResult {\n\tconst logPath = resolveHarnessControlEventLogPath(options);\n\tif (!logPath) return { ok: false, error: \"harness control event logging disabled\" };\n\tconst lockPath = `${logPath}.lock`;\n\tlet lockFd: number | undefined;\n\ttry {\n\t\tmkdirSync(dirname(logPath), { recursive: true });\n\t\tlockFd = acquireLock(lockPath, options.lockTimeoutMs ?? 1000);\n\t\trotateLedgerIfNeeded(logPath, options.maxLedgerBytes, options.now ?? new Date());\n\t\tconst previous = readPreviousEventState(logPath);\n\t\tconst event = createHarnessControlEvent(kind, status, data, options, previous);\n\t\tappendJsonLineWithFsync(logPath, JSON.stringify(event));\n\t\treturn { ok: true, path: logPath, event };\n\t} catch (error) {\n\t\treturn { ok: false, path: logPath, error: error instanceof Error ? error.message : String(error) };\n\t} finally {\n\t\tif (lockFd !== undefined) {\n\t\t\ttry {\n\t\t\t\tcloseSync(lockFd);\n\t\t\t} catch {}\n\t\t\trmSync(lockPath, { force: true });\n\t\t}\n\t}\n}\n\nfunction validateEventHash(event: HarnessControlEvent): string | undefined {\n\tconst { eventHash: _eventHash, ...eventWithoutHash } = event;\n\tconst expectedEventHash = computeEventHash(eventWithoutHash);\n\tif (expectedEventHash !== event.eventHash) {\n\t\treturn `event ${event.eventId} hash mismatch`;\n\t}\n\tif (hashCanonical(event.data) !== event.dataHash) {\n\t\treturn `event ${event.eventId} dataHash mismatch`;\n\t}\n\treturn undefined;\n}\n\nexport function verifyHarnessControlLedger(logPath: string): HarnessControlLedgerVerificationResult {\n\tconst errors: string[] = [];\n\tconst events: HarnessControlEvent[] = [];\n\tif (!existsSync(logPath)) return { ok: true, events, errors };\n\tconst lines = readFileSync(logPath, \"utf-8\")\n\t\t.split(\"\\n\")\n\t\t.map((line) => line.trim())\n\t\t.filter((line) => line.length > 0);\n\tlet previousSequence = 0;\n\tlet previousEventHash = GENESIS_EVENT_HASH;\n\tfor (let index = 0; index < lines.length; index++) {\n\t\ttry {\n\t\t\tconst event = JSON.parse(lines[index]!) as HarnessControlEvent;\n\t\t\tevents.push(event);\n\t\t\tif (event.schemaVersion !== \"omk.harness-control.event.v2\") {\n\t\t\t\terrors.push(`line ${index + 1}: unsupported schemaVersion`);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (event.sequence !== previousSequence + 1) {\n\t\t\t\terrors.push(`line ${index + 1}: sequence gap`);\n\t\t\t}\n\t\t\tif (event.previousEventHash !== previousEventHash) {\n\t\t\t\terrors.push(`line ${index + 1}: previousEventHash mismatch`);\n\t\t\t}\n\t\t\tconst hashError = validateEventHash(event);\n\t\t\tif (hashError) errors.push(`line ${index + 1}: ${hashError}`);\n\t\t\tpreviousSequence = event.sequence;\n\t\t\tpreviousEventHash = event.eventHash;\n\t\t} catch (error) {\n\t\t\terrors.push(`line ${index + 1}: ${error instanceof Error ? error.message : String(error)}`);\n\t\t}\n\t}\n\treturn { ok: errors.length === 0, events, errors };\n}\n"]}

package/dist/core/harness-control-replay.d.ts

@@ -1,26 +0,0 @@
-import type { HarnessControlEvent, HarnessControlEventStatus } from "./harness-control-events.ts";
-export interface HarnessControlOperationReplay {
-    operationId: string;
-    kind: string;
-    started: boolean;
-    terminalStatus?: HarnessControlEventStatus;
-    terminalEventIds: string[];
-    eventIds: string[];
-    sequenceRange: [number, number];
-    stateTransitions: Array<{
-        beforeStateHash: string;
-        afterStateHash: string;
-    }>;
-    finalStateHash?: string;
-}
-export interface HarnessControlReplayReport {
-    ok: boolean;
-    events: HarnessControlEvent[];
-    operations: HarnessControlOperationReplay[];
-    reconstructedStateHash: string;
-    errors: string[];
-    warnings: string[];
-}
-export declare function replayHarnessControlEvents(events: readonly HarnessControlEvent[]): HarnessControlReplayReport;
-export declare function verifyHarnessControlReplay(logPath: string): HarnessControlReplayReport;
-//# sourceMappingURL=harness-control-replay.d.ts.map

package/dist/core/harness-control-replay.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"harness-control-replay.d.ts","sourceRoot":"","sources":["../../src/core/harness-control-replay.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAGlG,MAAM,WAAW,6BAA6B;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,yBAAyB,CAAC;IAC3C,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,gBAAgB,EAAE,KAAK,CAAC;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IAC1C,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,UAAU,EAAE,6BAA6B,EAAE,CAAC;IAC5C,sBAAsB,EAAE,MAAM,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AA2HD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,SAAS,mBAAmB,EAAE,GAAG,0BAA0B,CAoC7G;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,0BAA0B,CAWtF","sourcesContent":["import type { HarnessControlEvent, HarnessControlEventStatus } from \"./harness-control-events.ts\";\nimport { hashCanonical, verifyHarnessControlLedger } from \"./harness-control-events.ts\";\n\nexport interface HarnessControlOperationReplay {\n\toperationId: string;\n\tkind: string;\n\tstarted: boolean;\n\tterminalStatus?: HarnessControlEventStatus;\n\tterminalEventIds: string[];\n\teventIds: string[];\n\tsequenceRange: [number, number];\n\tstateTransitions: Array<{ beforeStateHash: string; afterStateHash: string }>;\n\tfinalStateHash?: string;\n}\n\nexport interface HarnessControlReplayReport {\n\tok: boolean;\n\tevents: HarnessControlEvent[];\n\toperations: HarnessControlOperationReplay[];\n\treconstructedStateHash: string;\n\terrors: string[];\n\twarnings: string[];\n}\n\nconst TERMINAL_STATUSES = new Set<HarnessControlEventStatus>([\n\t\"completed\",\n\t\"failed\",\n\t\"blocked\",\n\t\"rolled_back\",\n\t\"in_doubt\",\n]);\n\nconst NON_TERMINAL_STATUS_ORDER = new Map<HarnessControlEventStatus, number>([\n\t[\"prepared\", 0],\n\t[\"started\", 1],\n\t[\"applying\", 2],\n\t[\"verifying\", 3],\n]);\n\nfunction isTerminalStatus(status: HarnessControlEventStatus): boolean {\n\treturn TERMINAL_STATUSES.has(status);\n}\n\nfunction createOperationReplay(operationId: string, events: HarnessControlEvent[]): HarnessControlOperationReplay {\n\tconst sortedEvents = [...events].sort((a, b) => a.sequence - b.sequence);\n\tconst terminalEvents = sortedEvents.filter((event) => isTerminalStatus(event.status));\n\tconst terminal = terminalEvents.at(-1);\n\treturn {\n\t\toperationId,\n\t\tkind: sortedEvents[0]?.kind ?? \"unknown\",\n\t\tstarted: sortedEvents.some((event) => event.status === \"started\"),\n\t\tterminalStatus: terminal?.status,\n\t\tterminalEventIds: terminalEvents.map((event) => event.eventId),\n\t\teventIds: sortedEvents.map((event) => event.eventId),\n\t\tsequenceRange: [sortedEvents[0]?.sequence ?? 0, sortedEvents.at(-1)?.sequence ?? 0],\n\t\tstateTransitions: sortedEvents.map((event) => ({\n\t\t\tbeforeStateHash: event.beforeStateHash,\n\t\t\tafterStateHash: event.afterStateHash,\n\t\t})),\n\t\tfinalStateHash: terminal?.afterStateHash ?? sortedEvents.at(-1)?.afterStateHash,\n\t};\n}\n\nfunction validateUniqueEventIds(events: readonly HarnessControlEvent[]): string[] {\n\tconst errors: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const event of events) {\n\t\tif (seen.has(event.eventId)) errors.push(`event ${event.eventId} is duplicated`);\n\t\tseen.add(event.eventId);\n\t}\n\treturn errors;\n}\n\nfunction validateCausation(events: readonly HarnessControlEvent[]): string[] {\n\tconst errors: string[] = [];\n\tconst byId = new Map(events.map((event) => [event.eventId, event]));\n\tfor (const event of events) {\n\t\tif (!event.causationId) continue;\n\t\tconst causationEvent = byId.get(event.causationId);\n\t\tif (\n\t\t\t!causationEvent ||\n\t\t\tcausationEvent.sequence >= event.sequence ||\n\t\t\tcausationEvent.correlationId !== event.correlationId\n\t\t) {\n\t\t\terrors.push(\n\t\t\t\t`event causation ${event.causationId} for operation ${event.operationId} does not reference an earlier event`,\n\t\t\t);\n\t\t}\n\t}\n\treturn errors;\n}\n\nfunction reconstructHarnessStateHash(operations: readonly HarnessControlOperationReplay[]): string {\n\treturn hashCanonical(\n\t\toperations.map((operation) => ({\n\t\t\toperationId: operation.operationId,\n\t\t\tkind: operation.kind,\n\t\t\tfinalStateHash: operation.finalStateHash,\n\t\t\tterminalStatus: operation.terminalStatus,\n\t\t})),\n\t);\n}\n\nfunction validateOperationStateMachine(\n\toperation: HarnessControlOperationReplay,\n\tevents: HarnessControlEvent[],\n): string[] {\n\tconst errors: string[] = [];\n\tconst sortedEvents = [...events].sort((a, b) => a.sequence - b.sequence);\n\tconst kinds = new Set(sortedEvents.map((event) => event.kind));\n\tconst correlations = new Set(sortedEvents.map((event) => event.correlationId));\n\tconst startedCount = sortedEvents.filter((event) => event.status === \"started\").length;\n\tlet lastNonTerminalOrder = -1;\n\tlet sawTerminal = false;\n\tlet sawEventAfterTerminal = false;\n\n\tif (kinds.size > 1) errors.push(`operation ${operation.operationId} mixes event kinds`);\n\tif (correlations.size > 1) errors.push(`operation ${operation.operationId} mixes correlation ids`);\n\tif (startedCount > 1) errors.push(`operation ${operation.operationId} has multiple started events`);\n\tif (operation.terminalEventIds.length > 1)\n\t\terrors.push(`operation ${operation.operationId} has multiple terminal events`);\n\n\tfor (const event of sortedEvents) {\n\t\tif (sawTerminal) {\n\t\t\tsawEventAfterTerminal = true;\n\t\t\tcontinue;\n\t\t}\n\t\tif (isTerminalStatus(event.status)) {\n\t\t\tsawTerminal = true;\n\t\t\tcontinue;\n\t\t}\n\t\tconst order = NON_TERMINAL_STATUS_ORDER.get(event.status);\n\t\tif (order === undefined) {\n\t\t\terrors.push(`operation ${operation.operationId} has unsupported status ${event.status}`);\n\t\t\tcontinue;\n\t\t}\n\t\tif (order < lastNonTerminalOrder) {\n\t\t\terrors.push(`operation ${operation.operationId} has invalid status transition to ${event.status}`);\n\t\t}\n\t\tlastNonTerminalOrder = order;\n\t}\n\tif (sawEventAfterTerminal) errors.push(`operation ${operation.operationId} has event after terminal event`);\n\treturn errors;\n}\n\nexport function replayHarnessControlEvents(events: readonly HarnessControlEvent[]): HarnessControlReplayReport {\n\tconst errors: string[] = [];\n\tconst warnings: string[] = [];\n\tconst operationEvents = new Map<string, HarnessControlEvent[]>();\n\tfor (const event of events) {\n\t\tconst group = operationEvents.get(event.operationId) ?? [];\n\t\tgroup.push(event);\n\t\toperationEvents.set(event.operationId, group);\n\t}\n\n\tconst operations = [...operationEvents]\n\t\t.sort(([, a], [, b]) => (a[0]?.sequence ?? 0) - (b[0]?.sequence ?? 0))\n\t\t.map(([operationId, groupedEvents]) => createOperationReplay(operationId, groupedEvents));\n\n\terrors.push(...validateUniqueEventIds(events));\n\terrors.push(...validateCausation(events));\n\n\tfor (const operation of operations) {\n\t\tconst groupedEvents = operationEvents.get(operation.operationId) ?? [];\n\t\terrors.push(...validateOperationStateMachine(operation, groupedEvents));\n\t\tif (!operation.started) {\n\t\t\twarnings.push(`operation ${operation.operationId} has no started event`);\n\t\t}\n\t\tif (!operation.terminalStatus) {\n\t\t\terrors.push(`operation ${operation.operationId} has no terminal event`);\n\t\t}\n\t}\n\n\treturn {\n\t\tok: errors.length === 0,\n\t\tevents: [...events],\n\t\toperations,\n\t\treconstructedStateHash: reconstructHarnessStateHash(operations),\n\t\terrors,\n\t\twarnings,\n\t};\n}\n\nexport function verifyHarnessControlReplay(logPath: string): HarnessControlReplayReport {\n\tconst ledger = verifyHarnessControlLedger(logPath);\n\tconst replay = replayHarnessControlEvents(ledger.events);\n\treturn {\n\t\tok: ledger.ok && replay.ok,\n\t\tevents: ledger.events,\n\t\toperations: replay.operations,\n\t\treconstructedStateHash: replay.reconstructedStateHash,\n\t\terrors: [...ledger.errors, ...replay.errors],\n\t\twarnings: replay.warnings,\n\t};\n}\n"]}