@ai-dossier/sched 0.45.0 → 0.46.1

package/README.md

@@ -28,7 +28,7 @@ ai-dossier sched enqueue --issues 101,105..109 --deps 100 --tier strong   # flag
 ai-dossier sched enqueue --from-manifest batch-prep.json                  # batch-prep output
 ai-dossier sched start            # the dispatch engine: spawn, verify, escalate, watch parked PRs (Ctrl-C stops it)
 ai-dossier sched start --once     # a single reconcile+refill tick (cron-style)
-ai-dossier sched status           # queue (+pr/cleanup), engine lease, slots, batches, blocked/failed
+ai-dossier sched status           # queue (+pr/cleanup), engine lease, slots, batches, blocked/failed; --anchors adds the open-batch-anchor sweep (#768)
 ai-dossier sched pause            # prevent every new agent process; live units keep running
 ai-dossier sched resume
 ai-dossier sched stop --issue 42  # terminate one full-cycle agent and record it stopped (no recovery)
@@ -688,9 +688,15 @@ member got the light, relevance-scoped review). `review=full` is how a risk-floo
   The floor follows the member: its bounded fix attempt dispatches at `strong` (not
   `FIX_ATTEMPT_TIER`), and an eviction/abandon requeue to full-cycle rewrites its `tier` to the
   floored value (and `review` back to `light`, a slot-only concept) so the full cycle keeps it.
-- **Prompt** — `buildMemberPrompt` substitutes a `{review}` placeholder; a `review=full`
-  member whose template lacks one gets `FULL_REVIEW_MEMBER_DIRECTIVE` appended (full-cycle-
-  grade review before handover). A `light` member's prompt is byte-identical to before.
+- **Prompt** — `buildMemberPrompt` substitutes a `{review}` placeholder.
+  `DEFAULT_MEMBER_PROMPT_TEMPLATE` places `{review}` itself (#804), so both `light` and `full`
+  members see their level and are told to run member-cycle Step 4b's self-review at it before
+  handover (`full` → the full review-issue tier incl. Security; `light` → at least
+  Conformance), then post `review done` naming the agents that ran — never `agents_done=0`.
+  An operator `member_prompt` template without `{review}` gets `FULL_REVIEW_MEMBER_DIRECTIVE`
+  appended for a `review=full` member; a `light` member's prompt from such a template is
+  byte-identical to before. A member's `review partial` (an agent could not finish) is a
+  terminal hand-back like `blocked` (`reason=review-partial:<agents_pending>`).
 - **Status** — `sched status`'s Queue table has a `review` column for slot members, and the
   `tier` column shows the floor as `mid→strong` when it applies.
 
@@ -1034,6 +1040,14 @@ import {
                          //   so batch-dispatch.ts can share it.
   TRANSITIONS,           // the transition tables themselves (for previews)
   buildStatusReport,     // machine-readable status incl. blocked/failed sets
+                         //   (+ optional `anchorSweep` → `anchors`, #768; null without it)
+  sweepAnchors, classifyAnchor, membersShippedVerdict, anchorLedgerBlockers,
+  shippingEvidence,      // #768 anchor-close predicate (pure; readers injected)
+  closeAnchor,           // #768 idempotent comment-then-close, `-R <repo>` explicit
+  anchorCloseMarker, renderAnchorCloseComment, openAnchorBatches, formatBatchStatus,
+  issueCloseReader, parseIssueCloseTruthJson, parseRepoName,
+  resolveProjectRepo,    // #768 owner/name of the cwd repo only when it IS the project's
+  hasLabel,              // case-insensitive label match (#768)
   validateState,         // strict persisted-state validation (1.0.0-1.13.0 files migrate)
   DEFAULT_ISSUE_PRIORITY, DEFAULT_BATCH_PRIORITY, // priority defaults (0 / 10, #565)
   IllegalTransitionError, EnqueueError, CorruptStateError, LockTimeoutError,
@@ -1213,7 +1227,8 @@ after-the-fact recovery, not a missing-data bug.
   `member_gates`/`blocked_reason` — #565/#583, slot
   `stale_milestone_ignored_for` backfill to `null` — #610, and state-level
   `consecutive_dispatch_api_errors`/`dispatch_pause_reset_at` backfill to `0`/`null` —
-  #629).
+  #629; batch `anchor_closed_at` and `anchor_close_failed_reason`/`_since`/`_ticks`
+  backfill to `null`/`null`/`null`/`0` — #768, schema 1.22.0).
 - **`max_slots`** bounds live units (`assigned | running | recovering`); dependency
   edges gate readiness — an issue with an unmerged dependency, and a batch behind an
   unmerged batch, are never runnable.
@@ -1245,6 +1260,53 @@ nobody came back to, each with its exact remedy:
   the recovery rail never respawns it (even after `sched resume`). Report slots are exempt:
   their issue is closed at merge by design. Remedy: `sched stop --issue N`.
 
+## Batch anchors close only on positive evidence (#768)
+
+A batch's anchor issue used to close only on the happy path (batch-integrate's
+post-merge step, #720). A batch that blocked, was recovered by hand, or whose members
+shipped through PRs of their own left its anchor open forever (imboard#4244,
+imboard#4253). Each tick now runs `reconcileAnchorClosure` (`batch-dispatch.ts`, with the
+predicate in `anchor-close.ts`) over `blocked`/`done` batches touched within the 7-day
+`STALE_BLOCKED_RECONCILE_WINDOW_MS` whose anchor is not yet recorded closed:
+
+- **Closes only when every member shipped.** Each member issue must be CLOSED with
+  `stateReason=COMPLETED`, and its close event's closer must be a PR of the project's own repository MERGED
+  into the batch's `base_branch` or a commit reachable from `origin/<base>`
+  (`shippingEvidence`). A hand close — no linked PR or commit — is not evidence: an
+  issue's author can close their own issue. One more path counts for a hand close: a
+  PR of the project's repository, MERGED into the base, that GitHub lists as closing
+  the issue (`closedByPullRequestsReferences` — `Closes #N` parsed but not acted on,
+  the imboard#4116 shape); that still needs a merge, i.e. write access. A member issue that no longer resolves
+  (deleted/transferred) reads `member-missing` — needs-operator, not an outage.
+- **Never over a failure trail.** Any evicted member, any member in a failure status
+  (`ISSUE_UNIVERSAL_FAILURE_EDGES` + `evicted`/`requeued`), any member requeued out of
+  the batch, a dissolved/stopped batch, or a `decision-pending` label on the anchor or a
+  member (case-insensitive, `hasLabel`) leaves the anchor open. The ledger is re-checked
+  on a fresh load immediately before the close.
+- **Idempotent and attributable.** The anchor gets one comment naming each member's
+  shipping PR or commit, starting with `<!-- batch-close:v1 batch=<id> anchor -->`;
+  only that marker on a comment by the authenticated gh user counts, so a rerun after a
+  failed close closes without a second comment. `anchor_closed_at` is then recorded and
+  the anchor is never polled again.
+- **Only the verified repository.** The pass runs only when `EngineDeps.anchorRepo` is
+  set — `sched start` sets it from `resolveProjectRepo`, i.e. only when the cwd IS the
+  project's repository — and every `gh` call names it (`-R`, explicit GraphQL owner/name).
+- **Members-closed reconcile evidence.** The same predicate is a third evidence kind
+  for #686's stale-blocked reconcile (`members-closed`), which survives the mandated
+  rebase-merge that makes the ancestry probe structurally dead. It finishes the terminal
+  rail inline but never tears the blocked worktree down (it may hold unpushed work);
+  the journal line says the worktree was kept.
+
+Everything else is surfaced, never closed: `sched status --anchors` (opt-in; `status`
+makes no GitHub call without it) lists each still-open anchor of a batch no longer in
+flight as `closable`, `needs-operator` or `unknown`, with every member's GitHub and
+ledger state, stopping its reads at the first failed one. A blocked batch milestone now
+reads `next=operator`, not `next=done`.
+
+Journal: `anchor-closed` (including "found already closed") and `anchor-close-failed`
+(deduped like `pr-watch-failed`: once per streak, re-announced every
+`JOURNAL_DEDUP_REANNOUNCE_TICKS`).
+
 ## Hard-block labels are re-read every tick (#544)
 
 #507's enqueue pre-screen resolves an issue's GitHub labels in the CLI and lands the

package/dist/anchor-close.d.ts

@@ -0,0 +1,172 @@
+/**
+ * Batch anchor closure off the happy path (#768).
+ *
+ * A batch anchor used to close only when `batch-integrate` merged the batch PR
+ * and ran its post-merge step (#720). A batch that blocked, was recovered by
+ * hand, or whose members shipped through other PRs left its anchor open
+ * forever (imboard#4244, imboard#4253).
+ *
+ * The rule here is deliberately NARROW (operator decision on #768): an anchor
+ * closes only on POSITIVE evidence — every member issue CLOSED with
+ * `stateReason=COMPLETED` BY SHIPPED CODE (a PR merged into the batch's base,
+ * or a commit reachable from it), and no member evicted, handed back,
+ * requeued out of the batch, or carrying an unresolved failure. A close by a
+ * person, with no linked PR or commit, is not evidence: an issue's author can
+ * close their own issue without write access. Every other shape leaves the
+ * anchor alone and is surfaced by `sched status --anchors` as
+ * `needs-operator`: an anchor with a failure trail must stay open, because
+ * closing it would bury the trail. "Close on every terminal transition" was
+ * considered and rejected for exactly that reason.
+ *
+ * Pure verdicts plus one idempotent effect (`closeAnchor`); everything that
+ * talks to GitHub or git is injected, so tests never shell out.
+ */
+import type { IssueCloseTruth } from './groundtruth';
+import type { ExecFn } from './project';
+import type { BatchEntry, BatchStatus, IssueStatus, SchedState } from './types';
+/** Reads one issue's closure record; `undefined` = the poll failed (unreachable). */
+export type IssueCloseReader = (issue: number) => IssueCloseTruth | undefined;
+/**
+ * Whether commit `oid` is reachable from the batch's base branch on origin —
+ * `true` only when verified; `false` for "not reachable" and for "could not
+ * tell" alike, so an unverifiable commit never counts as shipped.
+ */
+export type CommitInBase = (oid: string, baseBranch: string) => boolean;
+/**
+ * Batch statuses whose anchors the ENGINE may close: the batch is no longer in
+ * flight and its members were not requeued or stopped wholesale.
+ */
+export declare const ANCHOR_CLOSE_BATCH_STATUSES: ReadonlySet<BatchStatus>;
+/**
+ * The batches in `statuses` whose anchor is set and not yet recorded closed —
+ * the one candidate filter the engine's close pass and the sweep share.
+ */
+export declare function openAnchorBatches(state: SchedState, statuses: ReadonlySet<BatchStatus>): Array<BatchEntry & {
+    anchor: number;
+}>;
+/** `blocked (<reason>)` for a blocked batch with a reason, else the bare status. */
+export declare function formatBatchStatus(batch: Pick<BatchEntry, 'status' | 'blocked_reason'>): string;
+/**
+ * Why the LEDGER alone rules out closing `batch`'s anchor — empty when the
+ * ledger shows no failure trail. Costs no GitHub call, so callers check it
+ * before reading any issue state.
+ */
+export declare function anchorLedgerBlockers(state: SchedState, batch: BatchEntry): string[];
+/** One member's state as the sweep and the close comment show it. */
+export interface AnchorMemberReport {
+    issue: number;
+    /** The member's ledger status, or null when the ledger no longer carries it. */
+    ledger_status: IssueStatus | null;
+    /** GitHub state, or `unknown` when the poll failed / was not made. */
+    github: 'OPEN' | 'CLOSED' | 'MISSING' | 'unknown';
+    state_reason: string | null;
+    /** The verified shipping evidence for a member that shipped; null otherwise. */
+    shipped_by: string | null;
+}
+/**
+ * The anchor-close predicate's answer. Every open-anchor verdict carries
+ * `reasons` (empty for `closable`; for `unknown`, which read failed — ground
+ * truth unreachable, so nothing is decided this pass).
+ */
+export type AnchorVerdict = {
+    kind: 'anchor-closed';
+} | {
+    kind: 'closable' | 'needs-operator' | 'unknown';
+    reasons: string[];
+    members: AnchorMemberReport[];
+};
+/** The verdict of an anchor that is still open. */
+export type OpenAnchorVerdict = Exclude<AnchorVerdict, {
+    kind: 'anchor-closed';
+}>;
+/**
+ * The verified shipping evidence for a member closed as completed, or the
+ * reason it is not evidence. Only code that landed in `baseBranch` counts:
+ * a PR of `repo` (the pinned project repository) MERGED into it — as the
+ * close event's closer, or, for a hand close, as a closing reference — or a
+ * commit reachable from it. A hand close (no linked
+ * closer), an unmerged or other-base PR, and an unverifiable commit are all
+ * refusals — anyone who can close the issue could otherwise mint "shipped".
+ */
+export declare function shippingEvidence(truth: IssueCloseTruth, baseBranch: string, repo: string | undefined, commitInBase: CommitInBase | undefined): {
+    shipped: string;
+} | {
+    refused: string;
+};
+export interface MembersVerdictOptions {
+    /** Read every member even after a disqualifier (the sweep); the engine stops early. */
+    exhaustive?: boolean;
+    /** Reasons already known before any member is read (e.g. a handed-back anchor). */
+    extraReasons?: string[];
+    /** Verifies commit closers; without it a commit closer is never evidence. */
+    commitInBase?: CommitInBase;
+    /** The pinned `owner/name`; without it a PR closer is never evidence. */
+    repo?: string;
+}
+/**
+ * The member half of the predicate: every member CLOSED as `COMPLETED` by
+ * shipped code ({@link shippingEvidence}), none handed back, and the ledger
+ * clean. Shared by the anchor close and by `reconcileStaleBlockedBatches`'
+ * members-closed evidence, so the two can never disagree about what
+ * "shipped" means.
+ *
+ * `exhaustive: false` (the engine) stops at the first disqualifying fact and
+ * skips GitHub entirely when the ledger already disqualifies — a batch that
+ * stays blocked is re-checked every tick, so the cheap answer matters there.
+ * `exhaustive: true` (the `sched status --anchors` sweep) reads every member
+ * so the operator sees each one's state. Either way a failed read stops the
+ * reads: GitHub being unreachable is not worth N more timeouts.
+ */
+export declare function membersShippedVerdict(state: SchedState, batch: BatchEntry, read: IssueCloseReader, opts?: MembersVerdictOptions): OpenAnchorVerdict;
+/**
+ * The full anchor verdict: the anchor itself first (an already-closed anchor
+ * needs nothing; a handed-back anchor is the operator's), then
+ * {@link membersShippedVerdict}.
+ */
+export declare function classifyAnchor(state: SchedState, batch: BatchEntry, read: IssueCloseReader, opts?: Omit<MembersVerdictOptions, 'extraReasons'>): AnchorVerdict;
+/** The idempotency marker on the anchor-close comment — one per batch. */
+export declare function anchorCloseMarker(batchId: string): string;
+/** The comment posted on the anchor before it is closed. */
+export declare function renderAnchorCloseComment(batch: BatchEntry, members: AnchorMemberReport[]): string;
+/**
+ * `comments-unreadable`: the marker check could not run (or the gh identity
+ * could not be read), so nothing was posted; `comment-failed`/`close-failed`:
+ * that write failed.
+ */
+export type AnchorCloseOutcome = 'closed' | 'comments-unreadable' | 'comment-failed' | 'close-failed';
+/**
+ * Comment-then-close the anchor, idempotently (the #720 shape): the comment
+ * is posted only when the anchor does not already carry this batch's marker,
+ * so a rerun after a failed close closes without a second comment. The marker
+ * counts only at the START of a comment by the authenticated gh user — any
+ * commenter could otherwise post it and suppress the audit comment. When the
+ * existing comments cannot be read, nothing is posted: a duplicate comment is
+ * exactly what the marker exists to prevent.
+ *
+ * Every call names `repo` explicitly (`-R`): the anchor is never resolved from
+ * whatever repository the cwd happens to be.
+ */
+export declare function closeAnchor(exec: ExecFn, repoDir: string, repo: string, batch: BatchEntry, anchorIssue: number, members: AnchorMemberReport[]): AnchorCloseOutcome;
+/** A `sched status --anchors` sweep row (report-only — the sweep never closes anything). */
+export interface AnchorReportItem {
+    batch: string;
+    anchor: number;
+    batch_status: BatchStatus;
+    verdict: OpenAnchorVerdict['kind'];
+    reasons: string[];
+    members: AnchorMemberReport[];
+}
+/**
+ * `sched status --anchors`' sweep (#768): every still-open anchor of a batch
+ * that is no longer in flight, marked `closable` (the strict condition holds —
+ * the engine will close it, within its 7-day window), `needs-operator`
+ * (anything else), or `unknown` (a GitHub read failed — nothing decided),
+ * with each member's state. Report-only by construction: it takes no exec for
+ * writes and has no way to close anything. The first failed read stops the
+ * sweep's reads; every later batch is reported `unknown` without a call.
+ */
+export declare function sweepAnchors(state: SchedState, read: IssueCloseReader, opts?: {
+    repo?: string;
+    commitInBase?: CommitInBase;
+}): AnchorReportItem[];
+//# sourceMappingURL=anchor-close.d.ts.map

package/dist/anchor-close.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchor-close.d.ts","sourceRoot":"","sources":["../src/anchor-close.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAEhF,qFAAqF;AACrF,MAAM,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,eAAe,GAAG,SAAS,CAAC;AAE9E;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;AAexE;;;GAGG;AACH,eAAO,MAAM,2BAA2B,EAAE,WAAW,CAAC,WAAW,CAAgC,CAAC;AAkBlG;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,WAAW,CAAC,WAAW,CAAC,GACjC,KAAK,CAAC,UAAU,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAKxC;AAED,oFAAoF;AACpF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,GAAG,gBAAgB,CAAC,GAAG,MAAM,CAI9F;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,MAAM,EAAE,CAsBnF;AAED,qEAAqE;AACrE,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,aAAa,EAAE,WAAW,GAAG,IAAI,CAAC;IAClC,sEAAsE;IACtE,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IAClD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gFAAgF;IAChF,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,GACzB;IACE,IAAI,EAAE,UAAU,GAAG,gBAAgB,GAAG,SAAS,CAAC;IAChD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC/B,CAAC;AAEN,mDAAmD;AACnD,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,aAAa,EAAE;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC,CAAC;AAElF;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,eAAe,EACtB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,YAAY,EAAE,YAAY,GAAG,SAAS,GACrC;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAkC3C;AAED,MAAM,WAAW,qBAAqB;IACpC,uFAAuF;IACvF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mFAAmF;IACnF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,6EAA6E;IAC7E,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,yEAAyE;IACzE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,gBAAgB,EACtB,IAAI,GAAE,qBAA0B,GAC/B,iBAAiB,CAkDnB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,gBAAgB,EACtB,IAAI,GAAE,IAAI,CAAC,qBAAqB,EAAE,cAAc,CAAM,GACrD,aAAa,CAgBf;AAED,0EAA0E;AAC1E,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,4DAA4D;AAC5D,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAWjG;AAED;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAC1B,QAAQ,GACR,qBAAqB,GACrB,gBAAgB,GAChB,cAAc,CAAC;AAKnB;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,UAAU,EACjB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,kBAAkB,EAAE,GAC5B,kBAAkB,CAqCpB;AAED,4FAA4F;AAC5F,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,WAAW,CAAC;IAC1B,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,gBAAgB,EACtB,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,YAAY,CAAA;CAAO,GACxD,gBAAgB,EAAE,CAmBpB"}

package/dist/anchor-close.js

@@ -0,0 +1,348 @@
+"use strict";
+/**
+ * Batch anchor closure off the happy path (#768).
+ *
+ * A batch anchor used to close only when `batch-integrate` merged the batch PR
+ * and ran its post-merge step (#720). A batch that blocked, was recovered by
+ * hand, or whose members shipped through other PRs left its anchor open
+ * forever (imboard#4244, imboard#4253).
+ *
+ * The rule here is deliberately NARROW (operator decision on #768): an anchor
+ * closes only on POSITIVE evidence — every member issue CLOSED with
+ * `stateReason=COMPLETED` BY SHIPPED CODE (a PR merged into the batch's base,
+ * or a commit reachable from it), and no member evicted, handed back,
+ * requeued out of the batch, or carrying an unresolved failure. A close by a
+ * person, with no linked PR or commit, is not evidence: an issue's author can
+ * close their own issue without write access. Every other shape leaves the
+ * anchor alone and is surfaced by `sched status --anchors` as
+ * `needs-operator`: an anchor with a failure trail must stay open, because
+ * closing it would bury the trail. "Close on every terminal transition" was
+ * considered and rejected for exactly that reason.
+ *
+ * Pure verdicts plus one idempotent effect (`closeAnchor`); everything that
+ * talks to GitHub or git is injected, so tests never shell out.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ANCHOR_CLOSE_BATCH_STATUSES = void 0;
+exports.openAnchorBatches = openAnchorBatches;
+exports.formatBatchStatus = formatBatchStatus;
+exports.anchorLedgerBlockers = anchorLedgerBlockers;
+exports.shippingEvidence = shippingEvidence;
+exports.membersShippedVerdict = membersShippedVerdict;
+exports.classifyAnchor = classifyAnchor;
+exports.anchorCloseMarker = anchorCloseMarker;
+exports.renderAnchorCloseComment = renderAnchorCloseComment;
+exports.closeAnchor = closeAnchor;
+exports.sweepAnchors = sweepAnchors;
+const labels_1 = require("./labels");
+const state_1 = require("./state");
+/**
+ * Member ledger statuses that ARE a failure trail: the universal failure
+ * edges (derived, so a failure status added there is refused here too) plus
+ * the eviction rail. A member sitting in one of these was evicted, requeued,
+ * handed to a human, failed, or stopped — its anchor must stay open for an
+ * operator even if GitHub shows it closed.
+ */
+const MEMBER_FAILURE_STATUSES = new Set([
+    ...state_1.ISSUE_UNIVERSAL_FAILURE_EDGES,
+    'evicted',
+    'requeued',
+]);
+/**
+ * Batch statuses whose anchors the ENGINE may close: the batch is no longer in
+ * flight and its members were not requeued or stopped wholesale.
+ */
+exports.ANCHOR_CLOSE_BATCH_STATUSES = new Set(['blocked', 'done']);
+/** Batch statuses whose members were requeued or stopped wholesale — never auto-closable. */
+const FAILED_BATCH_STATUSES = new Set([
+    'dissolving',
+    'dissolved',
+    'stopped',
+]);
+/**
+ * Batch statuses whose anchors the sweep inspects: every batch no longer in
+ * flight — the engine's set plus the requeued/stopped ones it never closes.
+ */
+const SWEEP_BATCH_STATUSES = new Set([
+    ...exports.ANCHOR_CLOSE_BATCH_STATUSES,
+    ...FAILED_BATCH_STATUSES,
+]);
+/**
+ * The batches in `statuses` whose anchor is set and not yet recorded closed —
+ * the one candidate filter the engine's close pass and the sweep share.
+ */
+function openAnchorBatches(state, statuses) {
+    return state.batches.filter((b) => b.anchor !== null && b.anchor_closed_at === null && statuses.has(b.status));
+}
+/** `blocked (<reason>)` for a blocked batch with a reason, else the bare status. */
+function formatBatchStatus(batch) {
+    return batch.status === 'blocked' && batch.blocked_reason
+        ? `blocked (${batch.blocked_reason})`
+        : batch.status;
+}
+/**
+ * Why the LEDGER alone rules out closing `batch`'s anchor — empty when the
+ * ledger shows no failure trail. Costs no GitHub call, so callers check it
+ * before reading any issue state.
+ */
+function anchorLedgerBlockers(state, batch) {
+    const reasons = [];
+    if (FAILED_BATCH_STATUSES.has(batch.status))
+        reasons.push(`batch-${batch.status}`);
+    if (batch.members.length === 0)
+        reasons.push('no-members');
+    for (const e of (0, state_1.distinctEvictions)(batch.evictions)) {
+        reasons.push(`member-evicted:#${e.issue}`);
+    }
+    for (const issue of batch.members) {
+        const entry = (0, state_1.findEntry)(state, issue);
+        if (!entry) {
+            reasons.push(`member-not-in-ledger:#${issue}`);
+            continue;
+        }
+        if (MEMBER_FAILURE_STATUSES.has(entry.status)) {
+            reasons.push(`member-${entry.status}:#${issue}`);
+        }
+        else if (entry.mode !== 'slot' || entry.batch !== batch.id) {
+            // Requeued out of this batch (dissolve / abandon → full-cycle): its
+            // outcome is no longer this batch's to vouch for.
+            reasons.push(`member-requeued:#${issue}`);
+        }
+    }
+    return [...new Set(reasons)];
+}
+/**
+ * The verified shipping evidence for a member closed as completed, or the
+ * reason it is not evidence. Only code that landed in `baseBranch` counts:
+ * a PR of `repo` (the pinned project repository) MERGED into it — as the
+ * close event's closer, or, for a hand close, as a closing reference — or a
+ * commit reachable from it. A hand close (no linked
+ * closer), an unmerged or other-base PR, and an unverifiable commit are all
+ * refusals — anyone who can close the issue could otherwise mint "shipped".
+ */
+function shippingEvidence(truth, baseBranch, repo, commitInBase) {
+    const closer = truth.closer;
+    if (closer === null) {
+        // Closed by hand. Still shipped when a PR of the pinned repo, MERGED into
+        // the base, names it as closed (`Closes #N` — GitHub parsed it, then did
+        // not act: the imboard#4116 shape). A merge needs write access, so an
+        // author's self-close alone still never counts.
+        const ref = truth.closingPrs.find((pr) => pr.merged &&
+            pr.baseRefName === baseBranch &&
+            repo !== undefined &&
+            pr.repo?.toLowerCase() === repo.toLowerCase());
+        return ref !== undefined
+            ? { shipped: `PR #${ref.number} (closing reference; issue closed by hand)` }
+            : { refused: 'closed-by-hand' };
+    }
+    if (closer.kind === 'pr') {
+        // A PR in ANOTHER repository can close this issue (`Fixes owner/repo#N`)
+        // and merge into a same-named base — that is not code in this project.
+        if (repo === undefined || closer.repo?.toLowerCase() !== repo.toLowerCase()) {
+            return { refused: `closer-pr-${closer.number}-other-repo` };
+        }
+        if (!closer.merged)
+            return { refused: `closer-pr-unmerged-${closer.number}` };
+        if (closer.baseRefName !== baseBranch) {
+            return { refused: `closer-pr-${closer.number}-not-into-${baseBranch}` };
+        }
+        return { shipped: `PR #${closer.number}` };
+    }
+    if (commitInBase?.(closer.oid, baseBranch) !== true) {
+        return { refused: `closer-commit-${closer.oid.slice(0, 12)}-not-in-${baseBranch}` };
+    }
+    return { shipped: `commit ${closer.oid.slice(0, 12)}` };
+}
+/**
+ * The member half of the predicate: every member CLOSED as `COMPLETED` by
+ * shipped code ({@link shippingEvidence}), none handed back, and the ledger
+ * clean. Shared by the anchor close and by `reconcileStaleBlockedBatches`'
+ * members-closed evidence, so the two can never disagree about what
+ * "shipped" means.
+ *
+ * `exhaustive: false` (the engine) stops at the first disqualifying fact and
+ * skips GitHub entirely when the ledger already disqualifies — a batch that
+ * stays blocked is re-checked every tick, so the cheap answer matters there.
+ * `exhaustive: true` (the `sched status --anchors` sweep) reads every member
+ * so the operator sees each one's state. Either way a failed read stops the
+ * reads: GitHub being unreachable is not worth N more timeouts.
+ */
+function membersShippedVerdict(state, batch, read, opts = {}) {
+    const exhaustive = opts.exhaustive === true;
+    const reasons = [...(opts.extraReasons ?? []), ...anchorLedgerBlockers(state, batch)];
+    const members = batch.members.map((issue) => ({
+        issue,
+        ledger_status: (0, state_1.findEntry)(state, issue)?.status ?? null,
+        github: 'unknown',
+        state_reason: null,
+        shipped_by: null,
+    }));
+    if (reasons.length > 0 && !exhaustive)
+        return { kind: 'needs-operator', reasons, members };
+    let unreachable = null;
+    for (const member of members) {
+        const truth = read(member.issue);
+        if (truth === undefined) {
+            unreachable = member.issue;
+            break;
+        }
+        if (truth.state === 'MISSING') {
+            member.github = 'MISSING';
+            reasons.push(`member-missing:#${member.issue}`);
+            if (!exhaustive)
+                break;
+            continue;
+        }
+        member.github = truth.state;
+        member.state_reason = truth.stateReason;
+        if (truth.state === 'OPEN') {
+            reasons.push(`member-open:#${member.issue}`);
+        }
+        else if (truth.stateReason !== 'COMPLETED') {
+            reasons.push(`member-closed-${(truth.stateReason ?? 'unknown').toLowerCase()}:#${member.issue}`);
+        }
+        else {
+            const evidence = shippingEvidence(truth, batch.base_branch, opts.repo, opts.commitInBase);
+            if ('shipped' in evidence)
+                member.shipped_by = evidence.shipped;
+            else
+                reasons.push(`member-${evidence.refused}:#${member.issue}`);
+        }
+        if ((0, labels_1.hasLabel)(truth.labels, labels_1.DECISION_PENDING_LABEL)) {
+            reasons.push(`member-handed-back:#${member.issue}`);
+        }
+        if (reasons.length > 0 && !exhaustive)
+            break;
+    }
+    // A known disqualifier outranks an unreachable read: whatever the missing
+    // poll would have said, the batch is not closable on this pass.
+    if (reasons.length > 0)
+        return { kind: 'needs-operator', reasons, members };
+    if (unreachable !== null) {
+        return { kind: 'unknown', reasons: [`issue #${unreachable} unreachable`], members };
+    }
+    return { kind: 'closable', reasons: [], members };
+}
+/**
+ * The full anchor verdict: the anchor itself first (an already-closed anchor
+ * needs nothing; a handed-back anchor is the operator's), then
+ * {@link membersShippedVerdict}.
+ */
+function classifyAnchor(state, batch, read, opts = {}) {
+    if (batch.anchor === null) {
+        return { kind: 'needs-operator', reasons: ['no-anchor'], members: [] };
+    }
+    const anchor = read(batch.anchor);
+    if (anchor === undefined) {
+        return { kind: 'unknown', reasons: [`anchor #${batch.anchor} unreachable`], members: [] };
+    }
+    if (anchor.state === 'CLOSED')
+        return { kind: 'anchor-closed' };
+    if (anchor.state === 'MISSING') {
+        return { kind: 'needs-operator', reasons: ['anchor-missing'], members: [] };
+    }
+    const extraReasons = (0, labels_1.hasLabel)(anchor.labels, labels_1.DECISION_PENDING_LABEL)
+        ? ['anchor-handed-back']
+        : [];
+    return membersShippedVerdict(state, batch, read, { ...opts, extraReasons });
+}
+/** The idempotency marker on the anchor-close comment — one per batch. */
+function anchorCloseMarker(batchId) {
+    return `<!-- batch-close:v1 batch=${batchId} anchor -->`;
+}
+/** The comment posted on the anchor before it is closed. */
+function renderAnchorCloseComment(batch, members) {
+    return [
+        anchorCloseMarker(batch.id),
+        `**Batch \`${batch.id}\` anchor closed by sched** — every member issue was closed as completed by code that landed in \`${batch.base_branch}\`, and none was evicted, handed back, requeued, or left with a failure.`,
+        '',
+        '| member | shipped by |',
+        '|---|---|',
+        ...members.map((m) => `| #${m.issue} | ${m.shipped_by ?? 'unknown'} |`),
+        '',
+        `Batch ledger status at close: \`${formatBatchStatus(batch)}\`.`,
+    ].join('\n');
+}
+/** A GitHub login — the only shape interpolated into the comment filter below. */
+const GH_LOGIN_RE = /^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})(?:\[bot\])?$/;
+/**
+ * Comment-then-close the anchor, idempotently (the #720 shape): the comment
+ * is posted only when the anchor does not already carry this batch's marker,
+ * so a rerun after a failed close closes without a second comment. The marker
+ * counts only at the START of a comment by the authenticated gh user — any
+ * commenter could otherwise post it and suppress the audit comment. When the
+ * existing comments cannot be read, nothing is posted: a duplicate comment is
+ * exactly what the marker exists to prevent.
+ *
+ * Every call names `repo` explicitly (`-R`): the anchor is never resolved from
+ * whatever repository the cwd happens to be.
+ */
+function closeAnchor(exec, repoDir, repo, batch, anchorIssue, members) {
+    const anchor = String(anchorIssue);
+    const login = exec('gh', ['api', 'user', '--jq', '.login'], repoDir)?.trim();
+    if (login === undefined || !GH_LOGIN_RE.test(login))
+        return 'comments-unreadable';
+    const mine = exec('gh', [
+        'issue',
+        'view',
+        anchor,
+        '-R',
+        repo,
+        '--json',
+        'comments',
+        '--jq',
+        `[.comments[] | select(.author.login == "${login}") | .body]`,
+    ], repoDir);
+    let bodies;
+    try {
+        bodies = mine === null ? null : JSON.parse(mine);
+    }
+    catch {
+        bodies = null;
+    }
+    if (!Array.isArray(bodies))
+        return 'comments-unreadable';
+    const marker = anchorCloseMarker(batch.id);
+    if (!bodies.some((b) => typeof b === 'string' && b.startsWith(marker))) {
+        const body = renderAnchorCloseComment(batch, members);
+        if (exec('gh', ['issue', 'comment', anchor, '-R', repo, '--body', body], repoDir) === null) {
+            return 'comment-failed';
+        }
+    }
+    return exec('gh', ['issue', 'close', anchor, '-R', repo, '--reason', 'completed'], repoDir) ===
+        null
+        ? 'close-failed'
+        : 'closed';
+}
+/**
+ * `sched status --anchors`' sweep (#768): every still-open anchor of a batch
+ * that is no longer in flight, marked `closable` (the strict condition holds —
+ * the engine will close it, within its 7-day window), `needs-operator`
+ * (anything else), or `unknown` (a GitHub read failed — nothing decided),
+ * with each member's state. Report-only by construction: it takes no exec for
+ * writes and has no way to close anything. The first failed read stops the
+ * sweep's reads; every later batch is reported `unknown` without a call.
+ */
+function sweepAnchors(state, read, opts = {}) {
+    const items = [];
+    let aborted = false;
+    for (const batch of openAnchorBatches(state, SWEEP_BATCH_STATUSES)) {
+        const verdict = aborted
+            ? { kind: 'unknown', reasons: ['GitHub unreachable — sweep aborted'], members: [] }
+            : classifyAnchor(state, batch, read, { exhaustive: true, ...opts });
+        if (verdict.kind === 'anchor-closed')
+            continue;
+        if (verdict.kind === 'unknown')
+            aborted = true;
+        items.push({
+            batch: batch.id,
+            anchor: batch.anchor,
+            batch_status: batch.status,
+            verdict: verdict.kind,
+            reasons: verdict.reasons,
+            members: verdict.members,
+        });
+    }
+    return items;
+}
+//# sourceMappingURL=anchor-close.js.map

package/dist/anchor-close.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchor-close.js","sourceRoot":"","sources":["../src/anchor-close.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;;;AAyDH,8CAQC;AAGD,8CAIC;AAOD,oDAsBC;AAuCD,4CAuCC;AA2BD,sDAuDC;AAOD,wCAqBC;AAGD,8CAEC;AAGD,4DAWC;AA4BD,kCA4CC;AAqBD,oCAuBC;AAraD,qCAA4D;AAE5D,mCAAsF;AAatF;;;;;;GAMG;AACH,MAAM,uBAAuB,GAA6B,IAAI,GAAG,CAAc;IAC7E,GAAG,qCAA6B;IAChC,SAAS;IACT,UAAU;CACX,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,2BAA2B,GAA6B,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAElG,6FAA6F;AAC7F,MAAM,qBAAqB,GAA6B,IAAI,GAAG,CAAC;IAC9D,YAAY;IACZ,WAAW;IACX,SAAS;CACV,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,oBAAoB,GAA6B,IAAI,GAAG,CAAC;IAC7D,GAAG,mCAA2B;IAC9B,GAAG,qBAAqB;CACzB,CAAC,CAAC;AAEH;;;GAGG;AACH,SAAgB,iBAAiB,CAC/B,KAAiB,EACjB,QAAkC;IAElC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CACzB,CAAC,CAAC,EAAwC,EAAE,CAC1C,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,gBAAgB,KAAK,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAC7E,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,SAAgB,iBAAiB,CAAC,KAAoD;IACpF,OAAO,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc;QACvD,CAAC,CAAC,YAAY,KAAK,CAAC,cAAc,GAAG;QACrC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,KAAiB,EAAE,KAAiB;IACvE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACnF,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,IAAA,yBAAiB,EAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,IAAA,iBAAS,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC;YAC/C,SAAS;QACX,CAAC;QACD,IAAI,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC,CAAC;QACnD,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,EAAE,CAAC;YAC7D,oEAAoE;YACpE,kDAAkD;YAClD,OAAO,CAAC,IAAI,CAAC,oBAAoB,KAAK,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/B,CAAC;AA8BD;;;;;;;;GAQG;AACH,SAAgB,gBAAgB,CAC9B,KAAsB,EACtB,UAAkB,EAClB,IAAwB,EACxB,YAAsC;IAEtC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,0EAA0E;QAC1E,yEAAyE;QACzE,sEAAsE;QACtE,gDAAgD;QAChD,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAC/B,CAAC,EAAE,EAAE,EAAE,CACL,EAAE,CAAC,MAAM;YACT,EAAE,CAAC,WAAW,KAAK,UAAU;YAC7B,IAAI,KAAK,SAAS;YAClB,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAChD,CAAC;QACF,OAAO,GAAG,KAAK,SAAS;YACtB,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,MAAM,4CAA4C,EAAE;YAC5E,CAAC,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACzB,yEAAyE;QACzE,uEAAuE;QACvE,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YAC5E,OAAO,EAAE,OAAO,EAAE,aAAa,MAAM,CAAC,MAAM,aAAa,EAAE,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,EAAE,OAAO,EAAE,sBAAsB,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9E,IAAI,MAAM,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACtC,OAAO,EAAE,OAAO,EAAE,aAAa,MAAM,CAAC,MAAM,aAAa,UAAU,EAAE,EAAE,CAAC;QAC1E,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,OAAO,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,YAAY,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,iBAAiB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,UAAU,EAAE,EAAE,CAAC;IACtF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,UAAU,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;AAC1D,CAAC;AAaD;;;;;;;;;;;;;GAaG;AACH,SAAgB,qBAAqB,CACnC,KAAiB,EACjB,KAAiB,EACjB,IAAsB,EACtB,OAA8B,EAAE;IAEhC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC;IAC5C,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,GAAG,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACtF,MAAM,OAAO,GAAyB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAClE,KAAK;QACL,aAAa,EAAE,IAAA,iBAAS,EAAC,KAAK,EAAE,KAAK,CAAC,EAAE,MAAM,IAAI,IAAI;QACtD,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,IAAI;KACjB,CAAC,CAAC,CAAC;IACJ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAE3F,IAAI,WAAW,GAAkB,IAAI,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;YAC3B,MAAM;QACR,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAChD,IAAI,CAAC,UAAU;gBAAE,MAAM;YACvB,SAAS;QACX,CAAC;QACD,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;QAC5B,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,WAAW,CAAC;QACxC,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/C,CAAC;aAAM,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YAC7C,OAAO,CAAC,IAAI,CACV,iBAAiB,CAAC,KAAK,CAAC,WAAW,IAAI,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,KAAK,EAAE,CACnF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YAC1F,IAAI,SAAS,IAAI,QAAQ;gBAAE,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC;;gBAC3D,OAAO,CAAC,IAAI,CAAC,UAAU,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,IAAA,iBAAQ,EAAC,KAAK,CAAC,MAAM,EAAE,+BAAsB,CAAC,EAAE,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU;YAAE,MAAM;IAC/C,CAAC;IACD,0EAA0E;IAC1E,gEAAgE;IAChE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC5E,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,UAAU,WAAW,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC;IACtF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,SAAgB,cAAc,CAC5B,KAAiB,EACjB,KAAiB,EACjB,IAAsB,EACtB,OAAoD,EAAE;IAEtD,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzE,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,WAAW,KAAK,CAAC,MAAM,cAAc,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC5F,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAChE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC9E,CAAC;IACD,MAAM,YAAY,GAAG,IAAA,iBAAQ,EAAC,MAAM,CAAC,MAAM,EAAE,+BAAsB,CAAC;QAClE,CAAC,CAAC,CAAC,oBAAoB,CAAC;QACxB,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,qBAAqB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,0EAA0E;AAC1E,SAAgB,iBAAiB,CAAC,OAAe;IAC/C,OAAO,6BAA6B,OAAO,aAAa,CAAC;AAC3D,CAAC;AAED,4DAA4D;AAC5D,SAAgB,wBAAwB,CAAC,KAAiB,EAAE,OAA6B;IACvF,OAAO;QACL,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,aAAa,KAAK,CAAC,EAAE,qGAAqG,KAAK,CAAC,WAAW,0EAA0E;QACrN,EAAE;QACF,yBAAyB;QACzB,WAAW;QACX,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,UAAU,IAAI,SAAS,IAAI,CAAC;QACvE,EAAE;QACF,mCAAmC,iBAAiB,CAAC,KAAK,CAAC,KAAK;KACjE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAaD,kFAAkF;AAClF,MAAM,WAAW,GAAG,iDAAiD,CAAC;AAEtE;;;;;;;;;;;GAWG;AACH,SAAgB,WAAW,CACzB,IAAY,EACZ,OAAe,EACf,IAAY,EACZ,KAAiB,EACjB,WAAmB,EACnB,OAA6B;IAE7B,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;IAC7E,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,qBAAqB,CAAC;IAClF,MAAM,IAAI,GAAG,IAAI,CACf,IAAI,EACJ;QACE,OAAO;QACP,MAAM;QACN,MAAM;QACN,IAAI;QACJ,IAAI;QACJ,QAAQ;QACR,UAAU;QACV,MAAM;QACN,2CAA2C,KAAK,aAAa;KAC9D,EACD,OAAO,CACR,CAAC;IACF,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACzD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,GAAG,wBAAwB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3F,OAAO,gBAAgB,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC;QACzF,IAAI;QACJ,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC;AAYD;;;;;;;;GAQG;AACH,SAAgB,YAAY,CAC1B,KAAiB,EACjB,IAAsB,EACtB,OAAuD,EAAE;IAEzD,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,KAAK,IAAI,iBAAiB,CAAC,KAAK,EAAE,oBAAoB,CAAC,EAAE,CAAC;QACnE,MAAM,OAAO,GAAkB,OAAO;YACpC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,oCAAoC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;YACnF,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;QACtE,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe;YAAE,SAAS;QAC/C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,GAAG,IAAI,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,KAAK,CAAC,EAAE;YACf,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,KAAK,CAAC,MAAM;YAC1B,OAAO,EAAE,OAAO,CAAC,IAAI;YACrB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}