p-dev-harness 0.3.0 → 0.3.1

package/gui/.next/server/app-paths-manifest.json

@@ -1,33 +1,33 @@
 {
   "/_not-found/page": "app/_not-found/page.js",
   "/api/setup/apply-connect-services/route": "app/api/setup/apply-connect-services/route.js",
-  "/api/setup/apply-local-files/route": "app/api/setup/apply-local-files/route.js",
   "/api/setup/apply-harness-secrets/route": "app/api/setup/apply-harness-secrets/route.js",
   "/api/setup/finalize-target-workflow/route": "app/api/setup/finalize-target-workflow/route.js",
-  "/api/setup/linear-summary/route": "app/api/setup/linear-summary/route.js",
+  "/api/setup/apply-vercel-bridge/route": "app/api/setup/apply-vercel-bridge/route.js",
+  "/api/setup/apply-local-files/route": "app/api/setup/apply-local-files/route.js",
+  "/api/setup/linear-options/route": "app/api/setup/linear-options/route.js",
   "/api/setup/harness-provisioning-summary/route": "app/api/setup/harness-provisioning-summary/route.js",
-  "/api/setup/apply-linear-setup/route": "app/api/setup/apply-linear-setup/route.js",
-  "/api/setup/preview-connect-services/route": "app/api/setup/preview-connect-services/route.js",
+  "/api/setup/apply-harness-repo-provisioning/route": "app/api/setup/apply-harness-repo-provisioning/route.js",
   "/api/setup/local-readiness/route": "app/api/setup/local-readiness/route.js",
-  "/api/setup/linear-options/route": "app/api/setup/linear-options/route.js",
-  "/api/setup/preview-linear-setup/route": "app/api/setup/preview-linear-setup/route.js",
-  "/api/setup/preview-vercel-bridge/route": "app/api/setup/preview-vercel-bridge/route.js",
-  "/api/setup/apply-target-workflow/route": "app/api/setup/apply-target-workflow/route.js",
+  "/api/setup/preview-connect-services/route": "app/api/setup/preview-connect-services/route.js",
+  "/api/setup/manual-harness-secret-values/route": "app/api/setup/manual-harness-secret-values/route.js",
+  "/api/setup/linear-summary/route": "app/api/setup/linear-summary/route.js",
   "/api/setup/preview-harness-secrets/route": "app/api/setup/preview-harness-secrets/route.js",
-  "/api/setup/remote-summary/route": "app/api/setup/remote-summary/route.js",
   "/api/setup/preview-harness-repo-provisioning/route": "app/api/setup/preview-harness-repo-provisioning/route.js",
-  "/api/setup/manual-harness-secret-values/route": "app/api/setup/manual-harness-secret-values/route.js",
+  "/api/setup/preview-linear-setup/route": "app/api/setup/preview-linear-setup/route.js",
   "/api/setup/preview-target-workflow/route": "app/api/setup/preview-target-workflow/route.js",
-  "/api/setup/preview-local-files/route": "app/api/setup/preview-local-files/route.js",
-  "/api/setup/vercel-summary/route": "app/api/setup/vercel-summary/route.js",
-  "/api/setup/vercel-bridge-redeploy-status/route": "app/api/setup/vercel-bridge-redeploy-status/route.js",
+  "/api/setup/remote-summary/route": "app/api/setup/remote-summary/route.js",
   "/api/setup/summary/route": "app/api/setup/summary/route.js",
+  "/api/setup/apply-linear-setup/route": "app/api/setup/apply-linear-setup/route.js",
   "/api/setup/vercel-bridge-options/route": "app/api/setup/vercel-bridge-options/route.js",
+  "/api/setup/vercel-bridge-redeploy-status/route": "app/api/setup/vercel-bridge-redeploy-status/route.js",
   "/api/setup/verify-harness-repo/route": "app/api/setup/verify-harness-repo/route.js",
+  "/api/setup/preview-local-files/route": "app/api/setup/preview-local-files/route.js",
   "/api/setup/verify-service/route": "app/api/setup/verify-service/route.js",
   "/api/setup/verify-target-repo/route": "app/api/setup/verify-target-repo/route.js",
-  "/api/setup/apply-vercel-bridge/route": "app/api/setup/apply-vercel-bridge/route.js",
-  "/api/setup/apply-harness-repo-provisioning/route": "app/api/setup/apply-harness-repo-provisioning/route.js",
+  "/api/setup/vercel-summary/route": "app/api/setup/vercel-summary/route.js",
+  "/api/setup/preview-vercel-bridge/route": "app/api/setup/preview-vercel-bridge/route.js",
+  "/api/setup/apply-target-workflow/route": "app/api/setup/apply-target-workflow/route.js",
   "/page": "app/page.js",
   "/settings/configure/page": "app/settings/configure/page.js"
 }

package/gui/.next/server/chunks/477.js

@@ -1,8 +1,8 @@
-"use strict";exports.id=477,exports.ids=[477],exports.modules={1913:(a,b,c)=>{c.d(b,{BA:()=>n,Mc:()=>d,Qh:()=>l,Rd:()=>j,YN:()=>k,Z6:()=>m,aR:()=>e,dI:()=>i,ge:()=>h,qe:()=>f,rD:()=>g});let d='Open "How do I get a GitHub token?" and create a classic token with repo and workflow selected.',e="GitHub token lacks the workflow scope required to create or update Actions workflow files under .github/workflows/. Use a classic PAT with the workflow scope or a fine-grained PAT with Actions/workflows write permission on the target repo, then update GITHUB_TOKEN in .env.local.",f='This token is valid, but it is missing workflow access. Open "How do I get a GitHub token?" and create a classic token with repo and workflow selected.',g="Fine-grained PAT detected. Repo-specific workflow install permission will be checked in Step 2 for each target repo.",h="An earlier setup check did not catch this permission gap. GitHub sometimes only reveals workflow write limits when updating files under .github/workflows/. ";function i(a,b){let c=a?.trim().toLowerCase();return"fine-grained"===c?"fine-grained":"classic"===c||b.length>0?"classic":"unknown"}function j(a){return a.includes("workflow")}function k(a){return a.includes("repo")||a.includes("public_repo")}function l(a){return"classic"!==a.tokenType?{ok:!0,limitation:g}:k(a.oauthScopes)?a.hasWorkflowScope?{ok:!0}:{ok:!1,message:f}:{ok:!1,message:'This token is valid, but it is missing repo access. Open "How do I get a GitHub token?" and create a classic token with repo and workflow selected.'}}function m(a){return"fine-grained"===a.tokenType?{ok:!1,message:"p-dev's first release needs a classic GitHub token with repo and workflow scopes so it can create your private p-dev-harness workspace and configure Actions. Fine-grained tokens are not yet supported for automatic workspace provisioning."}:"unknown"===a.tokenType||0===a.oauthScopes.length?{ok:!1,message:"GitHub accepted this token, but p-dev could not verify that it is a classic PAT with repo and workflow scopes. Create a classic PAT with repo and workflow selected, then verify again."}:a.oauthScopes.includes("repo")?a.hasWorkflowScope?{ok:!0}:{ok:!1,message:"This token is missing the workflow scope required for harness Actions workflow setup. Create a classic PAT with repo and workflow selected, then verify again."}:{ok:!1,message:"This token is missing the repo scope required to create and access your private p-dev-harness workspace. Create a classic PAT with repo and workflow selected, then verify again."}}let n="GitHub does not expose fine-grained Workflows write permission through a dedicated read-only API. Step 2 confirms repo access and Actions visibility; Step 5 remains the final fallback if GitHub only reveals the limit on write."},16589:(a,b,c)=>{function d(a){let b=a.trim().match(/^https:\/\/github\.com\/([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)\/?$/);return b?{owner:b[1],repo:b[2]}:null}function e(a){if(a.actualBaseBranch!==a.expectedBaseBranch)throw Error(`wrong_pr_base_branch: PR ${a.prUrl} targets "${a.actualBaseBranch}"; expected "${a.expectedBaseBranch}". Update the PR base branch before continuing.`)}c.d(b,{$H:()=>e,wL:()=>d}),c(67470)},39058:(a,b,c)=>{c.d(b,{_u:()=>m,tl:()=>t,yu:()=>v,im:()=>w});var d=c(1913),e=c(67470),f=c(16589),g=c(35966);async function h(a){let b=new g.LinearClient({apiKey:a}),c=await b.viewer;return c.name??c.email??c.id}var i=c(57362),j=c(87285),k=c(84998),l=c(74590);async function m(a){let b=new e.jh({token:a.trim()}),c=await b.inspectAuthenticatedUser(),f=(0,d.dI)(c.tokenType,c.oauthScopes);return{login:c.login,tokenType:f,oauthScopes:c.oauthScopes,hasWorkflowScope:c.oauthScopes.includes("workflow"),hasRepoScope:c.oauthScopes.includes("repo")||c.oauthScopes.includes("public_repo")}}function n(a,b){return(0,i.h4)(a,b)}async function o(a){let b=a.trim();if(!b)return{status:"failed",message:"Enter a Linear API key before verifying."};try{let a=await h(b);return{status:"connected",label:a,message:`Connected as ${a}.`}}catch(a){return{status:"failed",message:function(a,b){let c=a instanceof Error?a.message:String(a);return/unauthorized|invalid|forbidden|authentication/i.test(c)?"Linear rejected this API key. Check that LINEAR_API_KEY is valid.":n(c,[b])}(a,b)}}}async function p(a){let b=a.trim();if(!b)return{status:"failed",message:"Enter a GitHub token before verifying."};try{let a=await m(b),c=(0,d.Qh)(a);if(!c.ok)return{status:"failed",message:c.message,limitation:d.Mc};let e=c.limitation??("classic"===a.tokenType?void 0:d.rD);return{status:"connected",label:a.login,message:`Connected as ${a.login}.`,limitation:e}}catch(a){var c,f;return{status:"failed",message:(c=a,f=b,c instanceof e.OS?401===c.status?"GitHub rejected this token. Check that GITHUB_TOKEN is valid and not expired.":403===c.status?"GitHub accepted the request but denied access. The token may lack required scopes.":n(`GitHub API returned HTTP ${c.status}. Check the token and try again.`,[f]):n(c instanceof Error?c.message:String(c),[f])),limitation:d.Mc}}}async function q(a){let b=a.trim();if(!b)return{status:"failed",message:"Enter a Cursor API key before verifying."};try{let{Cursor:a}=await Promise.resolve().then(c.bind(c,28783)),d=(await a.models.list({apiKey:b})).length,e="";try{let c=await a.repositories.list({apiKey:b});c.length>0&&(e=` ${c.length} connected repo(s) visible to Cursor.`)}catch{}return{status:"connected",label:`${d} model(s)`,message:`Cursor API key accepted (${d} model(s) available).${e}`,limitation:"This confirms the key works with Cursor SDK listing. It does not guarantee a future cloud run can access every target repo."}}catch(a){return{status:"failed",message:function(a,b){let c=a instanceof Error?a.message:String(a);return/unauthorized|invalid|forbidden|authentication|401|403/i.test(c)?"Cursor rejected this API key. Check that CURSOR_API_KEY is valid.":n(c,[b])}(a,b),limitation:"Cursor verification uses read-only SDK model listing, not a live agent run."}}}async function r(a){let b=a.token.trim(),c=a.targetRepo.trim();if(!c)return{status:"failed",message:"Enter a GitHub target repo URL before verifying."};let g=function(a){let b=(0,f.wL)(a.trim());if(!b)return null;let c=`${b.owner}/${b.repo}`;return{...b,slug:c,normalizedUrl:`https://github.com/${c}`}}(c);if(!g)return{status:"failed",message:"Enter a valid GitHub repo URL like https://github.com/acme/my-product."};if(!b)return{status:"failed",message:"Add or save a GitHub token first, then verify repo + workflow access."};try{let a=await m(b);if("classic"===a.tokenType&&!a.hasWorkflowScope)return{status:"failed",repoSlug:g.slug,normalizedUrl:g.normalizedUrl,workflowInstallReady:!1,message:d.qe,limitation:d.Mc};let c=new e.jh({token:b}),f=await c.getRepository(g.owner,g.repo),h=f.permissions?.pull===!0||f.permissions?.push===!0||f.permissions?.admin===!0||f.permissions?.maintain===!0,i=f.permissions?.push===!0||f.permissions?.admin===!0||f.permissions?.maintain===!0;if(!h)return{status:"failed",repoSlug:g.slug,normalizedUrl:g.normalizedUrl,workflowInstallReady:!1,message:`GitHub token cannot read ${g.slug}. Grant repo read access to this token.`};if(!i)return{status:"failed",repoSlug:g.slug,normalizedUrl:g.normalizedUrl,workflowInstallReady:!1,message:`GitHub token cannot write repository contents for ${g.slug}. Workflow install PRs need Contents write access. Use a classic PAT with repo + workflow or a fine-grained PAT with Contents write + Workflows write on this repo.`};try{await c.listActionsWorkflows(g.owner,g.repo)}catch(a){if(a instanceof e.OS&&(403===a.status||404===a.status)&&/workflow/i.test(a.message))return{status:"failed",repoSlug:g.slug,normalizedUrl:g.normalizedUrl,workflowInstallReady:!1,message:d.aR};if(a instanceof e.OS&&403===a.status)return{status:"failed",repoSlug:g.slug,normalizedUrl:g.normalizedUrl,workflowInstallReady:!1,message:`GitHub denied Actions workflow access for ${g.slug}. Grant Workflows write (fine-grained PAT) or workflow scope (classic PAT), then update GITHUB_TOKEN and verify again.`};throw a}if("fine-grained"===a.tokenType)return{status:"connected",repoSlug:g.slug,normalizedUrl:g.normalizedUrl,workflowInstallReady:!0,message:`Connected to ${g.slug} with repo + workflow install access expected.`,limitation:d.BA};return{status:"connected",repoSlug:g.slug,normalizedUrl:g.normalizedUrl,workflowInstallReady:!0,message:`Connected to ${g.slug} with repo + workflow install access.`}}catch(a){if(a instanceof e.OS){if(404===a.status)return{status:"failed",repoSlug:g.slug,normalizedUrl:g.normalizedUrl,workflowInstallReady:!1,message:`Repo ${g.slug} was not found or this token cannot access it.`};if(401===a.status)return{status:"failed",workflowInstallReady:!1,message:"GitHub rejected the token. Verify GITHUB_TOKEN and try again."};if(403===a.status)return{status:"failed",repoSlug:g.slug,normalizedUrl:g.normalizedUrl,workflowInstallReady:!1,message:`GitHub denied access to ${g.slug}. Check token permissions for this repo.`};return{status:"failed",workflowInstallReady:!1,message:n(`GitHub API returned HTTP ${a.status} while checking ${g.slug}.`,[b])}}return{status:"failed",workflowInstallReady:!1,message:n(a instanceof Error?a.message:String(a),[b])}}}async function s(a){let b=a.trim();if(!b)return{status:"failed",message:"Enter a Vercel token before verifying."};try{let a=await (0,l.UL)(b);return{status:"connected",label:a.username,message:`Connected as ${a.username}.`,limitation:"This confirms the Vercel token can read account metadata. Project and env var writes still require preview + confirmation."}}catch(c){let a=c instanceof Error?c.message:String(c);if(/unauthorized|forbidden|401|403/i.test(a))return{status:"failed",message:"Vercel rejected this token. Check that VERCEL_TOKEN is valid."};return{status:"failed",message:n(a,[b])}}}async function t(a){let b=(0,k.ym)(a.cwd),c=await (0,j.Hn)(b);return c?.values[a.key]?.trim()||void 0}async function u(a){let b=a.token?.trim();if(b)return{token:b,usedSavedKey:!1};let c=await t({cwd:a.cwd,key:{linear:"LINEAR_API_KEY",cursor:"CURSOR_API_KEY",github:"GITHUB_TOKEN",vercel:"VERCEL_TOKEN"}[a.service]});return c?{token:c,usedSavedKey:!0}:{token:void 0,usedSavedKey:!1}}async function v(a){let b,c=await u(a);if(!c.token)return{status:"failed",message:`Enter ${({linear:"LINEAR_API_KEY",cursor:"CURSOR_API_KEY",github:"GITHUB_TOKEN",vercel:"VERCEL_TOKEN"})[a.service]} or save it in .env.local before verifying.`,usedSavedKey:!1};switch(a.service){case"linear":b=await o(c.token);break;case"cursor":b=await q(c.token);break;case"github":b=await p(c.token);break;case"vercel":b=await s(c.token)}return{...b,usedSavedKey:c.usedSavedKey}}async function w(a){let b=await u({cwd:a.cwd,service:"github",token:a.githubToken});return{...await r({token:b.token??"",targetRepo:a.targetRepo}),usedSavedGithubToken:b.usedSavedKey}}},57362:(a,b,c)=>{c.d(b,{B8:()=>g,Gn:()=>h,QJ:()=>e,h4:()=>f,qs:()=>i});let d=RegExp("^(LINEAR_API_KEY|CURSOR_API_KEY|GITHUB_TOKEN|VERCEL_TOKEN|HARNESS_GITHUB_TOKEN|HARNESS_CONFIG_JSON_B64|LINEAR_WEBHOOK_SECRET|GITHUB_DISPATCH_TOKEN)=(.*)$","gm");function e(a){return a.replace(d,(a,b,c)=>c.length>0?`${b}=<redacted>`:`${b}=`)}function f(a,b){let c=a;for(let a of b)a&&(c=c.split(a).join("<redacted>"));return c}function g(a){return[a?.linearApiKey,a?.cursorApiKey,a?.githubToken,a?.vercelToken].filter(a=>!!a)}function h(a){return[a?.linearApiKey,a?.cursorApiKey,a?.githubToken,a?.harnessConfigJsonB64].filter(a=>!!a)}function i(a,b=[]){let c=a=>f(e(a),b);return{...a,content:a.content?c(a.content):void 0,reason:a.reason?c(a.reason):void 0,logMessage:a.logMessage?c(a.logMessage):void 0,manualInstructions:a.manualInstructions?.map(a=>c(a))}}},58885:(a,b,c)=>{c.d(b,{N:()=>i});var d=c(73024),e=c(76760),f=c.n(e),g=c(33443),h=c.n(g);function i(a=process.cwd()){h().config({path:f().join(a,".env")});let b=f().join(a,".env.local");(0,d.existsSync)(b)&&h().config({path:b,override:!0})}},67470:(a,b,c)=>{c.d(b,{OS:()=>e,jh:()=>g});var d=c(92116);class e extends Error{constructor(a,b){super(b),this.name="GitHubApiError",this.status=a}}let f="https://api.github.com";class g{constructor(a){this.token=a.token}async request(a,b){let c=await fetch(`${f}${a}`,{method:b?.method??"GET",headers:{Accept:"application/vnd.github+json",Authorization:`Bearer ${this.token}`,"X-GitHub-Api-Version":"2022-11-28",...b?.body?{"Content-Type":"application/json"}:{}},body:b?.body?JSON.stringify(b.body):void 0});if(!c.ok){let a=await c.text(),b=(0,d.M)(a||`GitHub API request failed: ${c.status}`);throw new e(c.status,b)}let g=await c.text();return 204!==c.status&&g.trim()?JSON.parse(g):{}}async graphqlRequest(a,b){let c=await fetch(`${f}/graphql`,{method:"POST",headers:{Accept:"application/vnd.github+json",Authorization:`Bearer ${this.token}`,"X-GitHub-Api-Version":"2022-11-28","Content-Type":"application/json"},body:JSON.stringify({query:a,variables:b})});if(!c.ok){let a=await c.text(),b=(0,d.M)(a||`GitHub GraphQL request failed: ${c.status}`);throw new e(c.status,b)}let g=await c.json();if(g.errors?.length)throw new e(422,g.errors.map(a=>a.message).join("; "));if(!g.data)throw new e(422,"GitHub GraphQL response missing data");return g.data}async getAuthenticatedUser(){return this.request("/user")}async inspectAuthenticatedUser(){let a=await fetch(`${f}/user`,{method:"GET",headers:{Accept:"application/vnd.github+json",Authorization:`Bearer ${this.token}`,"X-GitHub-Api-Version":"2022-11-28"}}),b=await a.text();if(!a.ok){let c=(0,d.M)(b||`GitHub API request failed: ${a.status}`);throw new e(a.status,c)}return{login:JSON.parse(b).login,oauthScopes:(a.headers.get("x-oauth-scopes")??"").split(",").map(a=>a.trim().toLowerCase()).filter(Boolean),tokenType:a.headers.get("github-authentication-token-type")}}async listActionsWorkflows(a,b){return this.request(`/repos/${a}/${b}/actions/workflows?per_page=1`)}async getBranchRef(a,b,c){return this.request(`/repos/${a}/${b}/git/ref/heads/${encodeURIComponent(c)}`)}async getRepository(a,b){return this.request(`/repos/${a}/${b}`)}async getRepositoryById(a){if(!Number.isInteger(a)||a<=0)throw Error(`Invalid GitHub repository ID: ${String(a)}`);return this.request(`/repositories/${a}`)}async getPullRequest(a,b,c){return this.request(`/repos/${a}/${b}/pulls/${c}`)}async markPullRequestReadyForReview(a,b,c){let d=await this.getPullRequest(a,b,c);return await this.graphqlRequest(`mutation MarkPullRequestReadyForReview($pullRequestId: ID!) {
+"use strict";exports.id=477,exports.ids=[477],exports.modules={1913:(a,b,c)=>{c.d(b,{BA:()=>n,Mc:()=>d,Qh:()=>l,Rd:()=>j,YN:()=>k,Z6:()=>m,aR:()=>e,dI:()=>i,ge:()=>h,qe:()=>f,rD:()=>g});let d='Open "How do I get a GitHub token?" and create a classic token with repo and workflow selected.',e="GitHub token lacks the workflow scope required to create or update Actions workflow files under .github/workflows/. Use a classic PAT with the workflow scope or a fine-grained PAT with Actions/workflows write permission on the target repo, then update GITHUB_TOKEN in .env.local.",f='This token is valid, but it is missing workflow access. Open "How do I get a GitHub token?" and create a classic token with repo and workflow selected.',g="Fine-grained PAT detected. Repo-specific workflow install permission will be checked in Step 2 for each target repo.",h="An earlier setup check did not catch this permission gap. GitHub sometimes only reveals workflow write limits when updating files under .github/workflows/. ";function i(a,b){let c=a?.trim().toLowerCase();return"fine-grained"===c?"fine-grained":"classic"===c||b.length>0?"classic":"unknown"}function j(a){return a.includes("workflow")}function k(a){return a.includes("repo")||a.includes("public_repo")}function l(a){return"classic"!==a.tokenType?{ok:!0,limitation:g}:k(a.oauthScopes)?a.hasWorkflowScope?{ok:!0}:{ok:!1,message:f}:{ok:!1,message:'This token is valid, but it is missing repo access. Open "How do I get a GitHub token?" and create a classic token with repo and workflow selected.'}}function m(a){return"fine-grained"===a.tokenType?{ok:!1,message:"p-dev's first release needs a classic GitHub token with repo and workflow scopes so it can create your private p-dev-harness workspace and configure Actions. Fine-grained tokens are not yet supported for automatic workspace provisioning."}:"unknown"===a.tokenType||0===a.oauthScopes.length?{ok:!1,message:"GitHub accepted this token, but p-dev could not verify that it is a classic PAT with repo and workflow scopes. Create a classic PAT with repo and workflow selected, then verify again."}:a.oauthScopes.includes("repo")?a.hasWorkflowScope?{ok:!0}:{ok:!1,message:"This token is missing the workflow scope required for harness Actions workflow setup. Create a classic PAT with repo and workflow selected, then verify again."}:{ok:!1,message:"This token is missing the repo scope required to create and access your private p-dev-harness workspace. Create a classic PAT with repo and workflow selected, then verify again."}}let n="GitHub does not expose fine-grained Workflows write permission through a dedicated read-only API. Step 2 confirms repo access and Actions visibility; Step 5 remains the final fallback if GitHub only reveals the limit on write."},16589:(a,b,c)=>{function d(a){let b=a.trim().match(/^https:\/\/github\.com\/([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)\/?$/);return b?{owner:b[1],repo:b[2]}:null}function e(a){if(a.actualBaseBranch!==a.expectedBaseBranch)throw Error(`wrong_pr_base_branch: PR ${a.prUrl} targets "${a.actualBaseBranch}"; expected "${a.expectedBaseBranch}". Update the PR base branch before continuing.`)}c.d(b,{$H:()=>e,wL:()=>d}),c(67470)},39058:(a,b,c)=>{c.d(b,{_u:()=>m,tl:()=>t,yu:()=>v,im:()=>w});var d=c(1913),e=c(67470),f=c(16589),g=c(35966);async function h(a){let b=new g.LinearClient({apiKey:a}),c=await b.viewer;return c.name??c.email??c.id}var i=c(57362),j=c(87285),k=c(84998),l=c(74590);async function m(a){let b=new e.jh({token:a.trim()}),c=await b.inspectAuthenticatedUser(),f=(0,d.dI)(c.tokenType,c.oauthScopes);return{login:c.login,tokenType:f,oauthScopes:c.oauthScopes,hasWorkflowScope:c.oauthScopes.includes("workflow"),hasRepoScope:c.oauthScopes.includes("repo")||c.oauthScopes.includes("public_repo")}}function n(a,b){return(0,i.h4)(a,b)}async function o(a){let b=a.trim();if(!b)return{status:"failed",message:"Enter a Linear API key before verifying."};try{let a=await h(b);return{status:"connected",label:a,message:`Connected as ${a}.`}}catch(a){return{status:"failed",message:function(a,b){let c=a instanceof Error?a.message:String(a);return/unauthorized|invalid|forbidden|authentication/i.test(c)?"Linear rejected this API key. Check that LINEAR_API_KEY is valid.":n(c,[b])}(a,b)}}}async function p(a){let b=a.trim();if(!b)return{status:"failed",message:"Enter a GitHub token before verifying."};try{let a=await m(b),c=(0,d.Qh)(a);if(!c.ok)return{status:"failed",message:c.message,limitation:d.Mc};let e=c.limitation??("classic"===a.tokenType?void 0:d.rD);return{status:"connected",label:a.login,message:`Connected as ${a.login}.`,limitation:e}}catch(a){var c,f;return{status:"failed",message:(c=a,f=b,c instanceof e.OS?401===c.status?"GitHub rejected this token. Check that GITHUB_TOKEN is valid and not expired.":403===c.status?"GitHub accepted the request but denied access. The token may lack required scopes.":n(`GitHub API returned HTTP ${c.status}. Check the token and try again.`,[f]):n(c instanceof Error?c.message:String(c),[f])),limitation:d.Mc}}}async function q(a){let b=a.trim();if(!b)return{status:"failed",message:"Enter a Cursor API key before verifying."};try{let{Cursor:a}=await Promise.resolve().then(c.bind(c,28783)),d=(await a.models.list({apiKey:b})).length,e="";try{let c=await a.repositories.list({apiKey:b});c.length>0&&(e=` ${c.length} connected repo(s) visible to Cursor.`)}catch{}return{status:"connected",label:`${d} model(s)`,message:`Cursor API key accepted (${d} model(s) available).${e}`,limitation:"This confirms the key works with Cursor SDK listing. It does not guarantee a future cloud run can access every target repo."}}catch(a){return{status:"failed",message:function(a,b){let c=a instanceof Error?a.message:String(a);return/unauthorized|invalid|forbidden|authentication|401|403/i.test(c)?"Cursor rejected this API key. Check that CURSOR_API_KEY is valid.":n(c,[b])}(a,b),limitation:"Cursor verification uses read-only SDK model listing, not a live agent run."}}}async function r(a){let b=a.token.trim(),c=a.targetRepo.trim();if(!c)return{status:"failed",message:"Enter a GitHub target repo URL before verifying."};let g=function(a){let b=(0,f.wL)(a.trim());if(!b)return null;let c=`${b.owner}/${b.repo}`;return{...b,slug:c,normalizedUrl:`https://github.com/${c}`}}(c);if(!g)return{status:"failed",message:"Enter a valid GitHub repo URL like https://github.com/acme/my-product."};if(!b)return{status:"failed",message:"Add or save a GitHub token first, then verify repo + workflow access."};try{let a=await m(b);if("classic"===a.tokenType&&!a.hasWorkflowScope)return{status:"failed",repoSlug:g.slug,normalizedUrl:g.normalizedUrl,workflowInstallReady:!1,message:d.qe,limitation:d.Mc};let c=new e.jh({token:b}),f=await c.getRepository(g.owner,g.repo),h=f.permissions?.pull===!0||f.permissions?.push===!0||f.permissions?.admin===!0||f.permissions?.maintain===!0,i=f.permissions?.push===!0||f.permissions?.admin===!0||f.permissions?.maintain===!0;if(!h)return{status:"failed",repoSlug:g.slug,normalizedUrl:g.normalizedUrl,workflowInstallReady:!1,message:`GitHub token cannot read ${g.slug}. Grant repo read access to this token.`};if(!i)return{status:"failed",repoSlug:g.slug,normalizedUrl:g.normalizedUrl,workflowInstallReady:!1,message:`GitHub token cannot write repository contents for ${g.slug}. Workflow install PRs need Contents write access. Use a classic PAT with repo + workflow or a fine-grained PAT with Contents write + Workflows write on this repo.`};try{await c.listActionsWorkflows(g.owner,g.repo)}catch(a){if(a instanceof e.OS&&(403===a.status||404===a.status)&&/workflow/i.test(a.message))return{status:"failed",repoSlug:g.slug,normalizedUrl:g.normalizedUrl,workflowInstallReady:!1,message:d.aR};if(a instanceof e.OS&&403===a.status)return{status:"failed",repoSlug:g.slug,normalizedUrl:g.normalizedUrl,workflowInstallReady:!1,message:`GitHub denied Actions workflow access for ${g.slug}. Grant Workflows write (fine-grained PAT) or workflow scope (classic PAT), then update GITHUB_TOKEN and verify again.`};throw a}if("fine-grained"===a.tokenType)return{status:"connected",repoSlug:g.slug,normalizedUrl:g.normalizedUrl,workflowInstallReady:!0,message:`Connected to ${g.slug} with repo + workflow install access expected.`,limitation:d.BA};return{status:"connected",repoSlug:g.slug,normalizedUrl:g.normalizedUrl,workflowInstallReady:!0,message:`Connected to ${g.slug} with repo + workflow install access.`}}catch(a){if(a instanceof e.OS){if(404===a.status)return{status:"failed",repoSlug:g.slug,normalizedUrl:g.normalizedUrl,workflowInstallReady:!1,message:`Repo ${g.slug} was not found or this token cannot access it.`};if(401===a.status)return{status:"failed",workflowInstallReady:!1,message:"GitHub rejected the token. Verify GITHUB_TOKEN and try again."};if(403===a.status)return{status:"failed",repoSlug:g.slug,normalizedUrl:g.normalizedUrl,workflowInstallReady:!1,message:`GitHub denied access to ${g.slug}. Check token permissions for this repo.`};return{status:"failed",workflowInstallReady:!1,message:n(`GitHub API returned HTTP ${a.status} while checking ${g.slug}.`,[b])}}return{status:"failed",workflowInstallReady:!1,message:n(a instanceof Error?a.message:String(a),[b])}}}async function s(a){let b=a.trim();if(!b)return{status:"failed",message:"Enter a Vercel token before verifying."};try{let a=await (0,l.UL)(b);return{status:"connected",label:a.username,message:`Connected as ${a.username}.`,limitation:"This confirms the Vercel token can read account metadata. Project and env var writes still require preview + confirmation."}}catch(c){let a=c instanceof Error?c.message:String(c);if(/unauthorized|forbidden|401|403/i.test(a))return{status:"failed",message:"Vercel rejected this token. Check that VERCEL_TOKEN is valid."};return{status:"failed",message:n(a,[b])}}}async function t(a){let b=(0,k.ym)(a.cwd),c=await (0,j.Hn)(b);return c?.values[a.key]?.trim()||void 0}async function u(a){let b=a.token?.trim();if(b)return{token:b,usedSavedKey:!1};let c=await t({cwd:a.cwd,key:{linear:"LINEAR_API_KEY",cursor:"CURSOR_API_KEY",github:"GITHUB_TOKEN",vercel:"VERCEL_TOKEN"}[a.service]});return c?{token:c,usedSavedKey:!0}:{token:void 0,usedSavedKey:!1}}async function v(a){let b,c=await u(a);if(!c.token)return{status:"failed",message:`Enter ${({linear:"LINEAR_API_KEY",cursor:"CURSOR_API_KEY",github:"GITHUB_TOKEN",vercel:"VERCEL_TOKEN"})[a.service]} or save it in .env.local before verifying.`,usedSavedKey:!1};switch(a.service){case"linear":b=await o(c.token);break;case"cursor":b=await q(c.token);break;case"github":b=await p(c.token);break;case"vercel":b=await s(c.token)}return{...b,usedSavedKey:c.usedSavedKey}}async function w(a){let b=await u({cwd:a.cwd,service:"github",token:a.githubToken});return{...await r({token:b.token??"",targetRepo:a.targetRepo}),usedSavedGithubToken:b.usedSavedKey}}},45599:(a,b,c)=>{function d(a){let b={},c=a.get("retry-after");if(c){let a=Number(c);Number.isFinite(a)&&a>0&&(b.retryAfterSeconds=Math.ceil(a))}let d=a.get("x-ratelimit-remaining");if(null!==d&&""!==d.trim()){let a=Number(d);Number.isFinite(a)&&(b.rateLimitRemaining=a)}let e=a.get("x-ratelimit-reset");if(null!==e&&""!==e.trim()){let a=Number(e);Number.isFinite(a)&&(b.rateLimitResetEpochSeconds=a)}let f=a.get("x-github-request-id");return f&&(b.requestId=f),b}function e(a){return/secondary rate limit|abuse detection|temporarily blocked/i.test(a)}function f(a){return 429===a.status||403===a.status&&(!!(/rate limit/i.test(a.message)||e(a.message))||void 0!==a.retryAfterSeconds&&!!(a.retryAfterSeconds>0)||0===a.rateLimitRemaining)}function g(a){let{error:b,secondaryStrikeCount:c,nowMs:d}=a;if(void 0!==b.retryAfterSeconds&&b.retryAfterSeconds>0)return 1e3*b.retryAfterSeconds;if(0===b.rateLimitRemaining&&void 0!==b.rateLimitResetEpochSeconds)return Math.max(0,1e3*b.rateLimitResetEpochSeconds-d)+2e3;if(403===b.status||429===b.status){let a=Math.max(0,c-1);return Math.min(3e5,6e4*2**a)}return 6e4}c.d(b,{J6:()=>g,df:()=>f,nq:()=>d,pe:()=>e})},57362:(a,b,c)=>{c.d(b,{B8:()=>g,Gn:()=>h,QJ:()=>e,h4:()=>f,qs:()=>i});let d=RegExp("^(LINEAR_API_KEY|CURSOR_API_KEY|GITHUB_TOKEN|VERCEL_TOKEN|HARNESS_GITHUB_TOKEN|HARNESS_CONFIG_JSON_B64|LINEAR_WEBHOOK_SECRET|GITHUB_DISPATCH_TOKEN)=(.*)$","gm");function e(a){return a.replace(d,(a,b,c)=>c.length>0?`${b}=<redacted>`:`${b}=`)}function f(a,b){let c=a;for(let a of b)a&&(c=c.split(a).join("<redacted>"));return c}function g(a){return[a?.linearApiKey,a?.cursorApiKey,a?.githubToken,a?.vercelToken].filter(a=>!!a)}function h(a){return[a?.linearApiKey,a?.cursorApiKey,a?.githubToken,a?.harnessConfigJsonB64].filter(a=>!!a)}function i(a,b=[]){let c=a=>f(e(a),b);return{...a,content:a.content?c(a.content):void 0,reason:a.reason?c(a.reason):void 0,logMessage:a.logMessage?c(a.logMessage):void 0,manualInstructions:a.manualInstructions?.map(a=>c(a))}}},58885:(a,b,c)=>{c.d(b,{N:()=>i});var d=c(73024),e=c(76760),f=c.n(e),g=c(33443),h=c.n(g);function i(a=process.cwd()){h().config({path:f().join(a,".env")});let b=f().join(a,".env.local");(0,d.existsSync)(b)&&h().config({path:b,override:!0})}},67470:(a,b,c)=>{c.d(b,{OS:()=>f,jh:()=>i});var d=c(92116),e=c(45599);class f extends Error{constructor(a,b,c){super(b),this.name="GitHubApiError",this.status=a,c&&(this.retryAfterSeconds=c.retryAfterSeconds,this.rateLimitRemaining=c.rateLimitRemaining,this.rateLimitResetEpochSeconds=c.rateLimitResetEpochSeconds,this.requestId=c.requestId)}}function g(a,b,c){let g=(0,d.M)(b||`GitHub API request failed: ${a}`);return new f(a,g,c?(0,e.nq)(c):void 0)}let h="https://api.github.com";class i{constructor(a){this.token=a.token}async request(a,b){let c=await fetch(`${h}${a}`,{method:b?.method??"GET",headers:{Accept:"application/vnd.github+json",Authorization:`Bearer ${this.token}`,"X-GitHub-Api-Version":"2022-11-28",...b?.body?{"Content-Type":"application/json"}:{}},body:b?.body?JSON.stringify(b.body):void 0});if(!c.ok){let a=await c.text();throw g(c.status,a,c.headers)}let d=await c.text();return 204!==c.status&&d.trim()?JSON.parse(d):{}}async graphqlRequest(a,b){let c=await fetch(`${h}/graphql`,{method:"POST",headers:{Accept:"application/vnd.github+json",Authorization:`Bearer ${this.token}`,"X-GitHub-Api-Version":"2022-11-28","Content-Type":"application/json"},body:JSON.stringify({query:a,variables:b})});if(!c.ok){let a=await c.text();throw g(c.status,a,c.headers)}let d=await c.json();if(d.errors?.length)throw new f(422,d.errors.map(a=>a.message).join("; "));if(!d.data)throw new f(422,"GitHub GraphQL response missing data");return d.data}async getAuthenticatedUser(){return this.request("/user")}async inspectAuthenticatedUser(){let a=await fetch(`${h}/user`,{method:"GET",headers:{Accept:"application/vnd.github+json",Authorization:`Bearer ${this.token}`,"X-GitHub-Api-Version":"2022-11-28"}}),b=await a.text();if(!a.ok)throw g(a.status,b,a.headers);return{login:JSON.parse(b).login,oauthScopes:(a.headers.get("x-oauth-scopes")??"").split(",").map(a=>a.trim().toLowerCase()).filter(Boolean),tokenType:a.headers.get("github-authentication-token-type")}}async listActionsWorkflows(a,b){return this.request(`/repos/${a}/${b}/actions/workflows?per_page=1`)}async getBranchRef(a,b,c){return this.request(`/repos/${a}/${b}/git/ref/heads/${encodeURIComponent(c)}`)}async getRepository(a,b){return this.request(`/repos/${a}/${b}`)}async getRepositoryById(a){if(!Number.isInteger(a)||a<=0)throw Error(`Invalid GitHub repository ID: ${String(a)}`);return this.request(`/repositories/${a}`)}async getPullRequest(a,b,c){return this.request(`/repos/${a}/${b}/pulls/${c}`)}async markPullRequestReadyForReview(a,b,c){let d=await this.getPullRequest(a,b,c);return await this.graphqlRequest(`mutation MarkPullRequestReadyForReview($pullRequestId: ID!) {
         markPullRequestReadyForReview(input: { pullRequestId: $pullRequestId }) {
           pullRequest { isDraft }
         }
-      }`,{pullRequestId:d.node_id}),this.getPullRequest(a,b,c)}async getPullRequestFiles(a,b,c){return this.request(`/repos/${a}/${b}/pulls/${c}/files`)}async getIssueComments(a,b,c){return this.request(`/repos/${a}/${b}/issues/${c}/comments`)}async getCheckRunsForRef(a,b,c){return this.request(`/repos/${a}/${b}/commits/${c}/check-runs`)}async getCombinedStatusForRef(a,b,c){return this.request(`/repos/${a}/${b}/commits/${c}/status`)}async mergePullRequest(a,b,c,d){return this.request(`/repos/${a}/${b}/pulls/${c}/merge`,{method:"PUT",body:{merge_method:d.mergeMethod,...d.commitTitle?{commit_title:d.commitTitle}:{},...d.expectedHeadSha?{sha:d.expectedHeadSha}:{}}})}async updatePullRequestBranch(a,b,c,d={}){return this.request(`/repos/${a}/${b}/pulls/${c}/update-branch`,{method:"PUT",body:{...d.expectedHeadSha?{expected_head_sha:d.expectedHeadSha}:{}}})}async compareCommits(a,b,c,d){return this.request(`/repos/${a}/${b}/compare/${c}...${d}`)}async getActionsPublicKey(a,b){return this.request(`/repos/${a}/${b}/actions/secrets/public-key`)}async listActionsSecrets(a,b){return this.request(`/repos/${a}/${b}/actions/secrets?per_page=100`)}async upsertActionsSecret(a,b,c,d,e){await this.request(`/repos/${a}/${b}/actions/secrets/${c}`,{method:"PUT",body:{encrypted_value:d,key_id:e}})}async getRepositoryContent(a,b,c,d){try{return await this.request(`/repos/${a}/${b}/contents/${c}?ref=${encodeURIComponent(d)}`)}catch(a){if(a instanceof e&&404===a.status)return null;throw a}}decodeRepositoryContent(a){return Buffer.from(a.content,"base64").toString("utf8")}async createOrUpdateRepositoryFile(a){return{commitSha:(await this.request(`/repos/${a.owner}/${a.repo}/contents/${a.path}`,{method:"PUT",body:{message:a.message,content:Buffer.from(a.content,"utf8").toString("base64"),branch:a.branch,...a.sha?{sha:a.sha}:{}}})).commit.sha}}async createGitRef(a,b,c,d){return this.request(`/repos/${a}/${b}/git/refs`,{method:"POST",body:{ref:`refs/heads/${c}`,sha:d}})}async createRepositoryFromTemplate(a){return this.request(`/repos/${a.templateOwner}/${a.templateRepo}/generate`,{method:"POST",body:{owner:a.owner,name:a.name,description:a.description,private:a.private,include_all_branches:a.includeAllBranches??!1}})}async createPullRequest(a){return this.request(`/repos/${a.owner}/${a.repo}/pulls`,{method:"POST",body:{title:a.title,head:a.head,base:a.base,body:a.body}})}async listPullRequests(a,b,c={}){let d=new URLSearchParams;return d.set("state",c.state??"open"),c.base&&d.set("base",c.base),c.head&&d.set("head",c.head),d.set("sort",c.sort??"created"),d.set("direction",c.direction??"desc"),this.request(`/repos/${a}/${b}/pulls?${d.toString()}`)}}},74590:(a,b,c)=>{c.d(b,{A3:()=>q,Eb:()=>o,FR:()=>z,MA:()=>B,P4:()=>p,UL:()=>l,V9:()=>v,_i:()=>y,b1:()=>w,bM:()=>u,c9:()=>f,dQ:()=>t,dk:()=>m,iQ:()=>i,ln:()=>n,oN:()=>r,wH:()=>A,wI:()=>x});var d=c(75365);let e="https://api.vercel.com";class f extends Error{constructor(a){super(a.message),this.name="VercelEnvVarTypeError",this.key=a.key,this.existingType=a.existingType,this.status=a.status}}class g extends Error{constructor(a){super(a.message),this.name="VercelTeamBillingError",this.status=a.status,this.providerCode=a.providerCode}}let h=new Set(["LINEAR_WEBHOOK_SECRET","GITHUB_DISPATCH_TOKEN"]);function i(a){return h.has(a)?"sensitive":"plain"}function j(a){return/cannot change the key of a sensitive environment variable/i.test(a.body)?new f({key:a.key,existingType:a.existingType,status:a.status,message:`Vercel rejected updating ${a.key} because sensitive environment variables cannot have their key changed via API. The app did not delete or recreate it. Update the value manually in Vercel or approve a separate delete/recreate repair.`}):/cannot change the type of a sensitive environment variable/i.test(a.body)?new f({key:a.key,existingType:a.existingType,status:a.status,message:`Vercel rejected updating ${a.key} because it is a sensitive environment variable whose type cannot be changed. The app did not delete or recreate it. Update the value manually in Vercel or approve a separate delete/recreate repair.`}):null}async function k(a,b,c){let d=new URL(`${e}${b}`);c?.teamId&&d.searchParams.set("teamId",c.teamId);let f=await fetch(d,{...c,headers:{Authorization:`Bearer ${a.trim()}`,"Content-Type":"application/json",...c?.headers??{}}});if(!f.ok){let a=await f.text();throw Error(`Vercel API ${f.status} on ${b}: ${a.slice(0,200)}`)}if(204!==f.status)return await f.json()}async function l(a){return(await k(a,"/v2/user")).user}async function m(a){return((await k(a,"/v2/teams")).teams??[]).map(a=>({id:a.id,name:a.name,slug:a.slug}))}async function n(a,b){let c="/v1/teams",d=new URL(`${e}${c}`),f=await fetch(d,{method:"POST",headers:{Authorization:`Bearer ${a.trim()}`,"Content-Type":"application/json"},body:JSON.stringify({slug:b.slug.trim(),...b.name?.trim()?{name:b.name.trim()}:{}})});if(!f.ok){let a=await f.text(),b=function(a){let b=a.body.match(/"code"\s*:\s*"(payment_method_required|billing|payment[^"]*)"/i),c=b?.[1];return"payment_method_required"===c||/payment method is required/i.test(a.body)||/credit card/i.test(a.body)?new g({status:a.status,providerCode:c??"payment_method_required",message:"Vercel requires a payment method before creating another team. No harness setup was applied. Add or update billing in Vercel, or choose an existing team."}):null}({status:f.status,body:a});if(b)throw b;throw Error(`Vercel API ${f.status} on ${c}: ${a.slice(0,200)}`)}let h=await f.json();return{id:h.id,slug:h.slug,name:h.name??b.name?.trim()??h.slug}}async function o(a,b){return((await k(a,"/v9/projects",{teamId:b})).projects??[]).map(a=>({id:a.id,name:a.name,accountId:a.accountId}))}async function p(a,b){let c=await k(a,"/v11/projects",{method:"POST",teamId:b.teamId,body:JSON.stringify({name:b.name.trim()})});return{id:c.id,name:c.name,accountId:c.accountId}}async function q(a,b,c){return((await k(a,`/v9/projects/${b}/env`,{teamId:c})).envs??[]).map(a=>({id:a.id,key:a.key,target:a.target??[],type:a.type??"encrypted"}))}function r(a){return"READY"===a.readyState||"READY"===a.state}function s(a){return a.replace(/^https?:\/\//,"").replace(/\/$/,"").toLowerCase()}async function t(a){let b,c=a.listDeployments??u,d=a.getDeployment??v;if(a.preferredDeploymentId?.trim()){if(!r(b=await d(a.vercelToken,a.preferredDeploymentId.trim(),a.teamId)))return}else{if(!(b=(await c(a.vercelToken,a.projectId,a.teamId,{state:"READY",limit:5})).find(a=>r(a))))return;b.aliases?.length||(b=await d(a.vercelToken,b.id,a.teamId))}let e=function(a){let b=s(a.deploymentUrl),c=(a.aliases??[]).map(a=>s(a)).filter(Boolean),d=c.filter(a=>a!==b&&!function(a){let b=s(a);return/^.+-[a-z0-9]{8,}-.+\.vercel\.app$/i.test(b)}(a));if(d.length>0){let a=d.find(a=>!a.endsWith(".vercel.app"))??[...d].sort((a,b)=>a.length-b.length)[0];return{host:a,source:"stable_alias",stableAlias:a}}let e=c.find(a=>a!==b);return e?{host:e,source:"stable_alias",stableAlias:e}:{host:b,source:"latest_ready_deployment"}}({deploymentUrl:b.url,aliases:b.aliases});return{productionUrl:`https://${e.host}`,webhookUrl:function(a){let b=a.replace(/^https?:\/\//,"").replace(/\/$/,"");return`https://${b}/api/linear-webhook`}(e.host),deploymentId:b.id,deploymentUrl:b.url,source:e.source,stableAlias:e.stableAlias,readyState:b.readyState,state:b.state}}async function u(a,b,c,d){let e=new URLSearchParams({projectId:b,target:"production",limit:String(d?.limit??5)});return d?.state?.trim()&&e.set("state",d.state.trim()),((await k(a,`/v6/deployments?${e.toString()}`,{teamId:c})).deployments??[]).map(a=>({id:a.uid,url:a.url,state:a.state,readyState:a.readyState,aliases:a.alias??[]}))}async function v(a,b,c){let d=await k(a,`/v13/deployments/${b}`,{teamId:c});return{id:d.uid??d.id??b,url:d.url,state:d.state,readyState:d.readyState,aliases:d.alias??[]}}async function w(a,b){let c=await k(a,"/v13/deployments",{method:"POST",teamId:b.teamId,body:JSON.stringify({name:b.projectName.trim(),deploymentId:b.sourceDeploymentId,target:"production"})});return{id:c.uid??c.id??b.sourceDeploymentId,url:c.url,state:c.state,readyState:c.readyState}}async function x(a,b){let c=b.existingEnv?.id??b.existingEnvId,d=b.existingEnv?.type,f=i(b.key);if(c){var g;let f=`/v9/projects/${b.projectId}/env/${c}`,h=new URL(`${e}${f}`);b.teamId&&h.searchParams.set("teamId",b.teamId);let i=await fetch(h,{method:"PATCH",headers:{Authorization:`Bearer ${a.trim()}`,"Content-Type":"application/json"},body:JSON.stringify({value:(g={value:b.value,existingEnv:b.existingEnv}).value,target:g.existingEnv?.target?.length?g.existingEnv.target:["production"]})});if(!i.ok){let a=await i.text(),c=j({key:b.key,existingType:d??"encrypted",status:i.status,body:a});if(c)throw c;throw Error(`Vercel API ${i.status} on ${f}: ${a.slice(0,200)}`)}return}let h=`/v10/projects/${b.projectId}/env`,k=new URL(`${e}${h}`);b.teamId&&k.searchParams.set("teamId",b.teamId);let l=await fetch(k,{method:"POST",headers:{Authorization:`Bearer ${a.trim()}`,"Content-Type":"application/json"},body:JSON.stringify({key:b.key,value:b.value,type:f,target:["production"]})});if(!l.ok){let a=await l.text(),c=j({key:b.key,existingType:f,status:l.status,body:a});if(c)throw c;throw Error(`Vercel API ${l.status} on ${h}: ${a.slice(0,200)}`)}}async function y(a){try{let b=await fetch(a,{method:"GET",redirect:"manual"}),c=b.headers.get("location")??"";if((302===b.status||307===b.status||308===b.status)&&/vercel\.com\/sso-api/i.test(c))return{reachable:!1,statusCode:b.status,reason:"protection_redirect"};if(405===b.status)return{reachable:!0,statusCode:b.status};if(404===b.status||401===b.status||403===b.status||b.status>=500)return{reachable:!1,statusCode:b.status};if(b.status>=200&&b.status<400)return{reachable:!0,statusCode:b.status};return{reachable:!1,statusCode:b.status}}catch{return{reachable:!1}}}function z(a){let b=new Set(a.map(a=>a.key));return Object.fromEntries(d.P$.map(a=>[a,b.has(a)?"present":"missing"]))}function A(a,b){let c=b.trim().toLowerCase();return a.find(a=>a.slug.toLowerCase()===c)}function B(a,b){let c=b.trim().toLowerCase();return a.find(a=>a.name.toLowerCase()===c)}},75365:(a,b,c)=>{c.d(b,{P$:()=>d,ck:()=>e,s5:()=>g,vC:()=>f});let d=["LINEAR_WEBHOOK_SECRET","GITHUB_DISPATCH_TOKEN","HARNESS_TEAM_KEY"],e=["GITHUB_DISPATCH_REPOSITORY","GITHUB_DISPATCH_EVENT_TYPE","LINEAR_WEBHOOK_TIMESTAMP_TOLERANCE_MS"],f={GITHUB_DISPATCH_REPOSITORY:"weston-uribe/agentic-product-development-harness",GITHUB_DISPATCH_EVENT_TYPE:"linear_issue_status_changed",LINEAR_WEBHOOK_TIMESTAMP_TOLERANCE_MS:"60000"};function g(a){let b={LINEAR_WEBHOOK_SECRET:a.requiredEnvPresence?.LINEAR_WEBHOOK_SECRET??"missing",GITHUB_DISPATCH_TOKEN:a.requiredEnvPresence?.GITHUB_DISPATCH_TOKEN??"missing",HARNESS_TEAM_KEY:a.requiredEnvPresence?.HARNESS_TEAM_KEY??"missing"},c=[];for(let[d,e]of(a.projectId||c.push("Select the Vercel bridge project."),a.productionUrl||c.push("Resolve the Vercel production URL for the bridge project."),a.endpointReachable||c.push("Verify /api/linear-webhook is reachable on the production URL."),Object.entries(b)))"missing"===e&&c.push(`Vercel production env var ${d} is missing.`);a.linearWebhookVerified||c.push("Verify the Linear Issue webhook points at the Vercel bridge URL."),a.signedProbeVerified||c.push("Signed webhook delivery verification has not passed against production."),a.deploymentRedeployRequired&&c.push("Redeploy Vercel production after env var changes, then retry signed verification.");let d=0===c.length&&!!a.projectId&&!!a.productionUrl&&!!a.endpointReachable&&!0===a.linearWebhookVerified&&!0===a.signedProbeVerified&&!0!==a.deploymentRedeployRequired;return{projectSelected:!!a.projectId,productionUrl:a.productionUrl,webhookUrl:a.webhookUrl,endpointReachable:!!a.endpointReachable,requiredEnvPresence:b,linearWebhookVerified:!!a.linearWebhookVerified,signedProbeVerified:!!a.signedProbeVerified,deploymentRedeployRequired:!!a.deploymentRedeployRequired,manualComplete:!!a.manualComplete,ready:d,blockers:c}}},83954:(a,b,c)=>{c.d(b,{Re:()=>i,Vq:()=>h});var d=c(73024),e=c(76760),f=c.n(e);c(73136);var g=c(58885);function h(a=process.cwd()){let b=process.env.HARNESS_REPO_ROOT?.trim();if(b)return f().resolve(b);let c=process.env.P_DEV_HOME?.trim();if(c)return f().resolve(c);let e=f().resolve(a);for(;;){let a=f().join(e,"package.json");if((0,d.existsSync)(a))try{let b=(0,d.readFileSync)(a,"utf8");if("agentic-product-development-harness"===JSON.parse(b).name)return e}catch{}let b=f().dirname(e);if(b===e)break;e=b}throw Error(`Could not resolve harness repo root from ${a}. Set HARNESS_REPO_ROOT or run harness:gui from the repo.`)}function i(a){(0,g.N)(a);let b=process.env.HARNESS_CONFIG_PATH?.trim();b&&!f().isAbsolute(b)&&(process.env.HARNESS_CONFIG_PATH=f().resolve(a,b))}},84998:(a,b,c)=>{c.d(b,{bm:()=>i,gr:()=>f,it:()=>j,ym:()=>k});var d=c(76760),e=c.n(d);let f=".env.local",g=".harness",h=e().join(g,"config.example.json"),i=e().join(g,"config.local.json"),j=".harness/config.local.json";function k(a){let b=a??process.cwd();return{cwd:b,envExample:e().join(b,".env.example"),envLocal:e().join(b,f),harnessDir:e().join(b,g),configExample:e().join(b,h),configLocal:e().join(b,i)}}},87285:(a,b,c)=>{c.d(b,{HF:()=>n,Hn:()=>k,Ol:()=>p,Um:()=>i,W:()=>o,X_:()=>r,_b:()=>l,ed:()=>j,lL:()=>q});var d=c(51455),e=c(57362),f=c(84998);let g=["HARNESS_CONFIG_PATH","GITHUB_DISPATCH_REPOSITORY","GITHUB_DISPATCH_REPOSITORY_ID","LINEAR_API_KEY","CURSOR_API_KEY","GITHUB_TOKEN","VERCEL_TOKEN"];async function h(a){try{return await (0,d.access)(a),!0}catch{return!1}}function i(a){let b={},c={HARNESS_CONFIG_PATH:!1,GITHUB_DISPATCH_REPOSITORY:!1,GITHUB_DISPATCH_REPOSITORY_ID:!1,LINEAR_API_KEY:!1,CURSOR_API_KEY:!1,GITHUB_TOKEN:!1,VERCEL_TOKEN:!1};for(let d of a.split("\n")){let a=d.trim();if(!a||a.startsWith("#"))continue;let e=a.indexOf("=");if(-1===e)continue;let f=a.slice(0,e).trim(),g=a.slice(e+1).trim();f in c?(b[f]=g,g.length>0&&(c[f]=!0)):"LINEAR_WEBHOOK_SECRET"===f&&(b[f]=g)}return{values:b,presence:c}}async function j(a){return await h(a.envLocal)?(0,d.readFile)(a.envLocal,"utf8"):null}async function k(a){let b=await j(a);return null===b?null:i(b)}function l(a,b){let c={harnessConfigPath:b.harnessConfigPath?.trim()||a?.values.HARNESS_CONFIG_PATH||f.it,githubDispatchRepository:b.githubDispatchRepository?.trim()||a?.values.GITHUB_DISPATCH_REPOSITORY||void 0,githubDispatchRepositoryId:b.githubDispatchRepositoryId?.trim()||a?.values.GITHUB_DISPATCH_REPOSITORY_ID||void 0};for(let[d,e]of Object.entries({linearApiKey:"LINEAR_API_KEY",cursorApiKey:"CURSOR_API_KEY",githubToken:"GITHUB_TOKEN",vercelToken:"VERCEL_TOKEN"})){let f=b[d]?.trim();f?c[d]=f:a?.values[e]&&(c[d]=a.values[e])}return c}function m(a){return{HARNESS_CONFIG_PATH:a.harnessConfigPath??f.it,GITHUB_DISPATCH_REPOSITORY:a.githubDispatchRepository??"",GITHUB_DISPATCH_REPOSITORY_ID:a.githubDispatchRepositoryId??"",LINEAR_API_KEY:a.linearApiKey??"",CURSOR_API_KEY:a.cursorApiKey??"",GITHUB_TOKEN:a.githubToken??"",VERCEL_TOKEN:a.vercelToken??""}}function n(a,b){if(null===a){let a=m(b);return`# Operator local setup — generated by harness setup core
+      }`,{pullRequestId:d.node_id}),this.getPullRequest(a,b,c)}async getPullRequestFiles(a,b,c){return this.request(`/repos/${a}/${b}/pulls/${c}/files`)}async getIssueComments(a,b,c){return this.request(`/repos/${a}/${b}/issues/${c}/comments`)}async getCheckRunsForRef(a,b,c){return this.request(`/repos/${a}/${b}/commits/${c}/check-runs`)}async getCombinedStatusForRef(a,b,c){return this.request(`/repos/${a}/${b}/commits/${c}/status`)}async mergePullRequest(a,b,c,d){return this.request(`/repos/${a}/${b}/pulls/${c}/merge`,{method:"PUT",body:{merge_method:d.mergeMethod,...d.commitTitle?{commit_title:d.commitTitle}:{},...d.expectedHeadSha?{sha:d.expectedHeadSha}:{}}})}async updatePullRequestBranch(a,b,c,d={}){return this.request(`/repos/${a}/${b}/pulls/${c}/update-branch`,{method:"PUT",body:{...d.expectedHeadSha?{expected_head_sha:d.expectedHeadSha}:{}}})}async compareCommits(a,b,c,d){return this.request(`/repos/${a}/${b}/compare/${c}...${d}`)}async getActionsPublicKey(a,b){return this.request(`/repos/${a}/${b}/actions/secrets/public-key`)}async listActionsSecrets(a,b){return this.request(`/repos/${a}/${b}/actions/secrets?per_page=100`)}async upsertActionsSecret(a,b,c,d,e){await this.request(`/repos/${a}/${b}/actions/secrets/${c}`,{method:"PUT",body:{encrypted_value:d,key_id:e}})}async getRepositoryContent(a,b,c,d){try{return await this.request(`/repos/${a}/${b}/contents/${c}?ref=${encodeURIComponent(d)}`)}catch(a){if(a instanceof f&&404===a.status)return null;throw a}}decodeRepositoryContent(a){return Buffer.from(a.content,"base64").toString("utf8")}async createOrUpdateRepositoryFile(a){return{commitSha:(await this.request(`/repos/${a.owner}/${a.repo}/contents/${a.path}`,{method:"PUT",body:{message:a.message,content:Buffer.from(a.content,"utf8").toString("base64"),branch:a.branch,...a.sha?{sha:a.sha}:{}}})).commit.sha}}async createGitRef(a,b,c,d){return this.request(`/repos/${a}/${b}/git/refs`,{method:"POST",body:{ref:`refs/heads/${c}`,sha:d}})}async createUserRepository(a){return this.request("/user/repos",{method:"POST",body:{name:a.name,description:a.description,private:a.private,auto_init:a.autoInit}})}async updateUserRepository(a){return this.request(`/repos/${a.owner}/${a.repo}`,{method:"PATCH",body:{description:a.description}})}async createGitBlob(a){return this.request(`/repos/${a.owner}/${a.repo}/git/blobs`,{method:"POST",body:{content:a.content.toString("base64"),encoding:"base64"}})}async createGitTree(a){return this.request(`/repos/${a.owner}/${a.repo}/git/trees`,{method:"POST",body:{...a.baseTree?{base_tree:a.baseTree}:{},tree:a.tree}})}async createGitCommit(a){return this.request(`/repos/${a.owner}/${a.repo}/git/commits`,{method:"POST",body:{message:a.message,tree:a.tree,parents:a.parents,...a.author?{author:a.author}:{},...a.committer?{committer:a.committer}:{}}})}async getGitCommit(a,b,c){return this.request(`/repos/${a}/${b}/git/commits/${c}`)}async getGitTree(a){let b=a.recursive?"?recursive=1":"";return this.request(`/repos/${a.owner}/${a.repo}/git/trees/${a.treeSha}${b}`)}async getGitRef(a,b,c){let d=c.startsWith("refs/heads/")?c.slice(11):c.startsWith("refs/")?c.slice(5):c;return this.request(`/repos/${a}/${b}/git/ref/heads/${encodeURIComponent(d)}`)}async updateGitRef(a){let b=a.ref.startsWith("refs/heads/")?a.ref.slice(11):a.ref.startsWith("refs/")?a.ref.slice(5):a.ref;return this.request(`/repos/${a.owner}/${a.repo}/git/refs/heads/${encodeURIComponent(b)}`,{method:"PATCH",body:{sha:a.sha,force:a.force??!1}})}async createRepositoryFromTemplate(a){return this.request(`/repos/${a.templateOwner}/${a.templateRepo}/generate`,{method:"POST",body:{owner:a.owner,name:a.name,description:a.description,private:a.private,include_all_branches:a.includeAllBranches??!1}})}async createPullRequest(a){return this.request(`/repos/${a.owner}/${a.repo}/pulls`,{method:"POST",body:{title:a.title,head:a.head,base:a.base,body:a.body}})}async listPullRequests(a,b,c={}){let d=new URLSearchParams;return d.set("state",c.state??"open"),c.base&&d.set("base",c.base),c.head&&d.set("head",c.head),d.set("sort",c.sort??"created"),d.set("direction",c.direction??"desc"),this.request(`/repos/${a}/${b}/pulls?${d.toString()}`)}}},74590:(a,b,c)=>{c.d(b,{A3:()=>q,Eb:()=>o,FR:()=>z,MA:()=>B,P4:()=>p,UL:()=>l,V9:()=>v,_i:()=>y,b1:()=>w,bM:()=>u,c9:()=>f,dQ:()=>t,dk:()=>m,iQ:()=>i,ln:()=>n,oN:()=>r,wH:()=>A,wI:()=>x});var d=c(75365);let e="https://api.vercel.com";class f extends Error{constructor(a){super(a.message),this.name="VercelEnvVarTypeError",this.key=a.key,this.existingType=a.existingType,this.status=a.status}}class g extends Error{constructor(a){super(a.message),this.name="VercelTeamBillingError",this.status=a.status,this.providerCode=a.providerCode}}let h=new Set(["LINEAR_WEBHOOK_SECRET","GITHUB_DISPATCH_TOKEN"]);function i(a){return h.has(a)?"sensitive":"plain"}function j(a){return/cannot change the key of a sensitive environment variable/i.test(a.body)?new f({key:a.key,existingType:a.existingType,status:a.status,message:`Vercel rejected updating ${a.key} because sensitive environment variables cannot have their key changed via API. The app did not delete or recreate it. Update the value manually in Vercel or approve a separate delete/recreate repair.`}):/cannot change the type of a sensitive environment variable/i.test(a.body)?new f({key:a.key,existingType:a.existingType,status:a.status,message:`Vercel rejected updating ${a.key} because it is a sensitive environment variable whose type cannot be changed. The app did not delete or recreate it. Update the value manually in Vercel or approve a separate delete/recreate repair.`}):null}async function k(a,b,c){let d=new URL(`${e}${b}`);c?.teamId&&d.searchParams.set("teamId",c.teamId);let f=await fetch(d,{...c,headers:{Authorization:`Bearer ${a.trim()}`,"Content-Type":"application/json",...c?.headers??{}}});if(!f.ok){let a=await f.text();throw Error(`Vercel API ${f.status} on ${b}: ${a.slice(0,200)}`)}if(204!==f.status)return await f.json()}async function l(a){return(await k(a,"/v2/user")).user}async function m(a){return((await k(a,"/v2/teams")).teams??[]).map(a=>({id:a.id,name:a.name,slug:a.slug}))}async function n(a,b){let c="/v1/teams",d=new URL(`${e}${c}`),f=await fetch(d,{method:"POST",headers:{Authorization:`Bearer ${a.trim()}`,"Content-Type":"application/json"},body:JSON.stringify({slug:b.slug.trim(),...b.name?.trim()?{name:b.name.trim()}:{}})});if(!f.ok){let a=await f.text(),b=function(a){let b=a.body.match(/"code"\s*:\s*"(payment_method_required|billing|payment[^"]*)"/i),c=b?.[1];return"payment_method_required"===c||/payment method is required/i.test(a.body)||/credit card/i.test(a.body)?new g({status:a.status,providerCode:c??"payment_method_required",message:"Vercel requires a payment method before creating another team. No harness setup was applied. Add or update billing in Vercel, or choose an existing team."}):null}({status:f.status,body:a});if(b)throw b;throw Error(`Vercel API ${f.status} on ${c}: ${a.slice(0,200)}`)}let h=await f.json();return{id:h.id,slug:h.slug,name:h.name??b.name?.trim()??h.slug}}async function o(a,b){return((await k(a,"/v9/projects",{teamId:b})).projects??[]).map(a=>({id:a.id,name:a.name,accountId:a.accountId}))}async function p(a,b){let c=await k(a,"/v11/projects",{method:"POST",teamId:b.teamId,body:JSON.stringify({name:b.name.trim()})});return{id:c.id,name:c.name,accountId:c.accountId}}async function q(a,b,c){return((await k(a,`/v9/projects/${b}/env`,{teamId:c})).envs??[]).map(a=>({id:a.id,key:a.key,target:a.target??[],type:a.type??"encrypted"}))}function r(a){return"READY"===a.readyState||"READY"===a.state}function s(a){return a.replace(/^https?:\/\//,"").replace(/\/$/,"").toLowerCase()}async function t(a){let b,c=a.listDeployments??u,d=a.getDeployment??v;if(a.preferredDeploymentId?.trim()){if(!r(b=await d(a.vercelToken,a.preferredDeploymentId.trim(),a.teamId)))return}else{if(!(b=(await c(a.vercelToken,a.projectId,a.teamId,{state:"READY",limit:5})).find(a=>r(a))))return;b.aliases?.length||(b=await d(a.vercelToken,b.id,a.teamId))}let e=function(a){let b=s(a.deploymentUrl),c=(a.aliases??[]).map(a=>s(a)).filter(Boolean),d=c.filter(a=>a!==b&&!function(a){let b=s(a);return/^.+-[a-z0-9]{8,}-.+\.vercel\.app$/i.test(b)}(a));if(d.length>0){let a=d.find(a=>!a.endsWith(".vercel.app"))??[...d].sort((a,b)=>a.length-b.length)[0];return{host:a,source:"stable_alias",stableAlias:a}}let e=c.find(a=>a!==b);return e?{host:e,source:"stable_alias",stableAlias:e}:{host:b,source:"latest_ready_deployment"}}({deploymentUrl:b.url,aliases:b.aliases});return{productionUrl:`https://${e.host}`,webhookUrl:function(a){let b=a.replace(/^https?:\/\//,"").replace(/\/$/,"");return`https://${b}/api/linear-webhook`}(e.host),deploymentId:b.id,deploymentUrl:b.url,source:e.source,stableAlias:e.stableAlias,readyState:b.readyState,state:b.state}}async function u(a,b,c,d){let e=new URLSearchParams({projectId:b,target:"production",limit:String(d?.limit??5)});return d?.state?.trim()&&e.set("state",d.state.trim()),((await k(a,`/v6/deployments?${e.toString()}`,{teamId:c})).deployments??[]).map(a=>({id:a.uid,url:a.url,state:a.state,readyState:a.readyState,aliases:a.alias??[]}))}async function v(a,b,c){let d=await k(a,`/v13/deployments/${b}`,{teamId:c});return{id:d.uid??d.id??b,url:d.url,state:d.state,readyState:d.readyState,aliases:d.alias??[]}}async function w(a,b){let c=await k(a,"/v13/deployments",{method:"POST",teamId:b.teamId,body:JSON.stringify({name:b.projectName.trim(),deploymentId:b.sourceDeploymentId,target:"production"})});return{id:c.uid??c.id??b.sourceDeploymentId,url:c.url,state:c.state,readyState:c.readyState}}async function x(a,b){let c=b.existingEnv?.id??b.existingEnvId,d=b.existingEnv?.type,f=i(b.key);if(c){var g;let f=`/v9/projects/${b.projectId}/env/${c}`,h=new URL(`${e}${f}`);b.teamId&&h.searchParams.set("teamId",b.teamId);let i=await fetch(h,{method:"PATCH",headers:{Authorization:`Bearer ${a.trim()}`,"Content-Type":"application/json"},body:JSON.stringify({value:(g={value:b.value,existingEnv:b.existingEnv}).value,target:g.existingEnv?.target?.length?g.existingEnv.target:["production"]})});if(!i.ok){let a=await i.text(),c=j({key:b.key,existingType:d??"encrypted",status:i.status,body:a});if(c)throw c;throw Error(`Vercel API ${i.status} on ${f}: ${a.slice(0,200)}`)}return}let h=`/v10/projects/${b.projectId}/env`,k=new URL(`${e}${h}`);b.teamId&&k.searchParams.set("teamId",b.teamId);let l=await fetch(k,{method:"POST",headers:{Authorization:`Bearer ${a.trim()}`,"Content-Type":"application/json"},body:JSON.stringify({key:b.key,value:b.value,type:f,target:["production"]})});if(!l.ok){let a=await l.text(),c=j({key:b.key,existingType:f,status:l.status,body:a});if(c)throw c;throw Error(`Vercel API ${l.status} on ${h}: ${a.slice(0,200)}`)}}async function y(a){try{let b=await fetch(a,{method:"GET",redirect:"manual"}),c=b.headers.get("location")??"";if((302===b.status||307===b.status||308===b.status)&&/vercel\.com\/sso-api/i.test(c))return{reachable:!1,statusCode:b.status,reason:"protection_redirect"};if(405===b.status)return{reachable:!0,statusCode:b.status};if(404===b.status||401===b.status||403===b.status||b.status>=500)return{reachable:!1,statusCode:b.status};if(b.status>=200&&b.status<400)return{reachable:!0,statusCode:b.status};return{reachable:!1,statusCode:b.status}}catch{return{reachable:!1}}}function z(a){let b=new Set(a.map(a=>a.key));return Object.fromEntries(d.P$.map(a=>[a,b.has(a)?"present":"missing"]))}function A(a,b){let c=b.trim().toLowerCase();return a.find(a=>a.slug.toLowerCase()===c)}function B(a,b){let c=b.trim().toLowerCase();return a.find(a=>a.name.toLowerCase()===c)}},75365:(a,b,c)=>{c.d(b,{P$:()=>d,ck:()=>e,s5:()=>g,vC:()=>f});let d=["LINEAR_WEBHOOK_SECRET","GITHUB_DISPATCH_TOKEN","HARNESS_TEAM_KEY"],e=["GITHUB_DISPATCH_REPOSITORY","GITHUB_DISPATCH_EVENT_TYPE","LINEAR_WEBHOOK_TIMESTAMP_TOLERANCE_MS"],f={GITHUB_DISPATCH_REPOSITORY:"weston-uribe/agentic-product-development-harness",GITHUB_DISPATCH_EVENT_TYPE:"linear_issue_status_changed",LINEAR_WEBHOOK_TIMESTAMP_TOLERANCE_MS:"60000"};function g(a){let b={LINEAR_WEBHOOK_SECRET:a.requiredEnvPresence?.LINEAR_WEBHOOK_SECRET??"missing",GITHUB_DISPATCH_TOKEN:a.requiredEnvPresence?.GITHUB_DISPATCH_TOKEN??"missing",HARNESS_TEAM_KEY:a.requiredEnvPresence?.HARNESS_TEAM_KEY??"missing"},c=[];for(let[d,e]of(a.projectId||c.push("Select the Vercel bridge project."),a.productionUrl||c.push("Resolve the Vercel production URL for the bridge project."),a.endpointReachable||c.push("Verify /api/linear-webhook is reachable on the production URL."),Object.entries(b)))"missing"===e&&c.push(`Vercel production env var ${d} is missing.`);a.linearWebhookVerified||c.push("Verify the Linear Issue webhook points at the Vercel bridge URL."),a.signedProbeVerified||c.push("Signed webhook delivery verification has not passed against production."),a.deploymentRedeployRequired&&c.push("Redeploy Vercel production after env var changes, then retry signed verification.");let d=0===c.length&&!!a.projectId&&!!a.productionUrl&&!!a.endpointReachable&&!0===a.linearWebhookVerified&&!0===a.signedProbeVerified&&!0!==a.deploymentRedeployRequired;return{projectSelected:!!a.projectId,productionUrl:a.productionUrl,webhookUrl:a.webhookUrl,endpointReachable:!!a.endpointReachable,requiredEnvPresence:b,linearWebhookVerified:!!a.linearWebhookVerified,signedProbeVerified:!!a.signedProbeVerified,deploymentRedeployRequired:!!a.deploymentRedeployRequired,manualComplete:!!a.manualComplete,ready:d,blockers:c}}},83954:(a,b,c)=>{c.d(b,{Re:()=>i,Vq:()=>h});var d=c(73024),e=c(76760),f=c.n(e);c(73136);var g=c(58885);function h(a=process.cwd()){let b=process.env.HARNESS_REPO_ROOT?.trim();if(b)return f().resolve(b);let c=process.env.P_DEV_HOME?.trim();if(c)return f().resolve(c);let e=f().resolve(a);for(;;){let a=f().join(e,"package.json");if((0,d.existsSync)(a))try{let b=(0,d.readFileSync)(a,"utf8");if("agentic-product-development-harness"===JSON.parse(b).name)return e}catch{}let b=f().dirname(e);if(b===e)break;e=b}throw Error(`Could not resolve harness repo root from ${a}. Set HARNESS_REPO_ROOT or run harness:gui from the repo.`)}function i(a){(0,g.N)(a);let b=process.env.HARNESS_CONFIG_PATH?.trim();b&&!f().isAbsolute(b)&&(process.env.HARNESS_CONFIG_PATH=f().resolve(a,b))}},84998:(a,b,c)=>{c.d(b,{bm:()=>i,gr:()=>f,it:()=>j,ym:()=>k});var d=c(76760),e=c.n(d);let f=".env.local",g=".harness",h=e().join(g,"config.example.json"),i=e().join(g,"config.local.json"),j=".harness/config.local.json";function k(a){let b=a??process.cwd();return{cwd:b,envExample:e().join(b,".env.example"),envLocal:e().join(b,f),harnessDir:e().join(b,g),configExample:e().join(b,h),configLocal:e().join(b,i)}}},87285:(a,b,c)=>{c.d(b,{HF:()=>n,Hn:()=>k,Ol:()=>p,Um:()=>i,W:()=>o,X_:()=>r,_b:()=>l,ed:()=>j,lL:()=>q});var d=c(51455),e=c(57362),f=c(84998);let g=["HARNESS_CONFIG_PATH","GITHUB_DISPATCH_REPOSITORY","GITHUB_DISPATCH_REPOSITORY_ID","LINEAR_API_KEY","CURSOR_API_KEY","GITHUB_TOKEN","VERCEL_TOKEN"];async function h(a){try{return await (0,d.access)(a),!0}catch{return!1}}function i(a){let b={},c={HARNESS_CONFIG_PATH:!1,GITHUB_DISPATCH_REPOSITORY:!1,GITHUB_DISPATCH_REPOSITORY_ID:!1,LINEAR_API_KEY:!1,CURSOR_API_KEY:!1,GITHUB_TOKEN:!1,VERCEL_TOKEN:!1};for(let d of a.split("\n")){let a=d.trim();if(!a||a.startsWith("#"))continue;let e=a.indexOf("=");if(-1===e)continue;let f=a.slice(0,e).trim(),g=a.slice(e+1).trim();f in c?(b[f]=g,g.length>0&&(c[f]=!0)):"LINEAR_WEBHOOK_SECRET"===f&&(b[f]=g)}return{values:b,presence:c}}async function j(a){return await h(a.envLocal)?(0,d.readFile)(a.envLocal,"utf8"):null}async function k(a){let b=await j(a);return null===b?null:i(b)}function l(a,b){let c={harnessConfigPath:b.harnessConfigPath?.trim()||a?.values.HARNESS_CONFIG_PATH||f.it,githubDispatchRepository:b.githubDispatchRepository?.trim()||a?.values.GITHUB_DISPATCH_REPOSITORY||void 0,githubDispatchRepositoryId:b.githubDispatchRepositoryId?.trim()||a?.values.GITHUB_DISPATCH_REPOSITORY_ID||void 0};for(let[d,e]of Object.entries({linearApiKey:"LINEAR_API_KEY",cursorApiKey:"CURSOR_API_KEY",githubToken:"GITHUB_TOKEN",vercelToken:"VERCEL_TOKEN"})){let f=b[d]?.trim();f?c[d]=f:a?.values[e]&&(c[d]=a.values[e])}return c}function m(a){return{HARNESS_CONFIG_PATH:a.harnessConfigPath??f.it,GITHUB_DISPATCH_REPOSITORY:a.githubDispatchRepository??"",GITHUB_DISPATCH_REPOSITORY_ID:a.githubDispatchRepositoryId??"",LINEAR_API_KEY:a.linearApiKey??"",CURSOR_API_KEY:a.cursorApiKey??"",GITHUB_TOKEN:a.githubToken??"",VERCEL_TOKEN:a.vercelToken??""}}function n(a,b){if(null===a){let a=m(b);return`# Operator local setup — generated by harness setup core
 # Do not commit .env.local (gitignored).
 
 # --- Harness managed keys ---