@allocator-one/rcl 4.4.19

package/dist/report/run-header.js

@@ -0,0 +1,307 @@
+import { createHash } from 'node:crypto';
+import { detectProvider } from '../roles/dispatcher.js';
+import { uuidv7 } from './uuid.js';
+export function sha256Hex(data) {
+    return createHash('sha256').update(data).digest('hex');
+}
+/**
+ * JSON with object keys sorted at every level, so digests ignore key order.
+ * Values JSON cannot express (undefined, functions, symbols) serialize as
+ * `null` — the same as `JSON.stringify` does for them inside arrays — so the
+ * result is always a string and never the bare `undefined` JSON.stringify
+ * returns for a top-level non-value.
+ */
+export function stableStringify(value) {
+    if (Array.isArray(value)) {
+        return `[${value.map((v) => stableStringify(v)).join(',')}]`;
+    }
+    if (typeof value === 'object' && value !== null) {
+        const entries = Object.entries(value)
+            .filter(([, v]) => v !== undefined)
+            .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))
+            .map(([k, v]) => `${JSON.stringify(k)}:${stableStringify(v)}`);
+        return `{${entries.join(',')}}`;
+    }
+    const encoded = JSON.stringify(value);
+    return encoded === undefined ? 'null' : encoded;
+}
+export function guardedInputSha256(value) {
+    return sha256Hex(stableStringify(value));
+}
+/**
+ * Digest of what the council actually read: every file's name, status,
+ * previous name and patch, sorted by filename so the value is independent of
+ * listing order. The serialization is JSON — every field delimited and
+ * escaped — so two distinct diffs cannot collide by sharing a separator
+ * character in a filename or patch line. Uniform across PR, patch, git and
+ * plan modes (PR mode has no raw diff).
+ */
+export function diffDigest(files) {
+    // Streamed file by file — the bytes hashed are exactly
+    // stableStringify(array of records), but only one record's patch is ever
+    // serialized at a time, so a very large diff never needs a second full
+    // copy of itself in memory.
+    const hash = createHash('sha256');
+    const sorted = [...files].sort((a, b) => a.filename < b.filename ? -1 : a.filename > b.filename ? 1 : 0);
+    hash.update('[');
+    sorted.forEach((f, i) => {
+        if (i > 0)
+            hash.update(',');
+        // additions/deletions are part of the record: for a binary or oversized
+        // file GitHub sends no patch, and the counts are then the only thing
+        // that distinguishes two different changes to it.
+        hash.update(stableStringify({
+            filename: f.filename,
+            status: f.status,
+            previousFilename: f.previousFilename ?? null,
+            patch: f.patch,
+            additions: f.additions,
+            deletions: f.deletions,
+            // Binds a patchless (binary / oversized) file to its content where
+            // the source provides a blob id.
+            blobSha: f.blobSha ?? null,
+        }));
+    });
+    hash.update(']');
+    return hash.digest('hex');
+}
+/** Config fields that are credentials: never part of any digest. */
+export const EXCLUDED_CONFIG_FIELDS = ['githubToken', 'harness'];
+/**
+ * The config fields the digest covers — an explicit allow-list. Every key of
+ * `ConfigSchema` must appear either here or in `EXCLUDED_CONFIG_FIELDS`: the
+ * exhaustiveness assertion below turns a new field into a compile error until
+ * someone decides which list it belongs to, so a new setting can neither be
+ * silently dropped from the digest nor a new credential silently hashed.
+ */
+export const DIGESTED_CONFIG_FIELDS = [
+    'models',
+    'secondaryModels',
+    'asyncModels',
+    'roles',
+    'reviewers',
+    'customRoles',
+    'thresholds',
+    'gating',
+    'output',
+    'timeout',
+    'asyncTimeout',
+    'quorumFraction',
+    'maxRetries',
+    'concurrency',
+    'providerConcurrency',
+    'reasoningEffort',
+    'context',
+    'spec',
+    'focus',
+];
+const _everyConfigFieldDecided = true;
+void _everyConfigFieldDecided;
+/** Canonical allow-listed, resolved config fields (never a credential). */
+export function configIdentity(config) {
+    const projection = {};
+    for (const key of DIGESTED_CONFIG_FIELDS) {
+        if (config[key] !== undefined)
+            projection[key] = config[key];
+    }
+    return stableStringify(projection);
+}
+/** Digest shared by report headers, launch identity and original-policy proof. */
+export function configDigest(config) {
+    return sha256Hex(configIdentity(config));
+}
+/** A dispatched seat's lane: the council's own models block, the others are secondary. */
+export function assignmentLane(model, coreModels, explicit = false) {
+    return explicit || coreModels.includes(model) ? 'blocking' : 'secondary';
+}
+export function buildRoster(input) {
+    const roster = input.assignments.map((a) => ({
+        model: a.model,
+        role: a.role.name,
+        provider: a.provider,
+        lane: assignmentLane(a.model, input.coreModels, input.explicit),
+    }));
+    for (const a of input.asyncAssignments) {
+        roster.push({ model: a.model, role: a.role.name, provider: a.provider, lane: 'async' });
+    }
+    if (input.gating.mode === 'verified-consensus' && input.gating.verificationModel) {
+        roster.push({
+            model: input.gating.verificationModel,
+            role: 'verification',
+            provider: detectProvider(input.gating.verificationModel),
+            lane: 'verification',
+        });
+    }
+    return roster;
+}
+const MAX_HOST_CHARS = 64;
+/** Environment markers → agent name. Only these variables are ever read. */
+const AGENT_MARKERS = [
+    ['CLAUDECODE', 'claude-code'],
+    ['CLAUDE_CODE_ENTRYPOINT', 'claude-code'],
+    ['CODEX_SANDBOX', 'codex'],
+    ['CODEX_CI', 'codex'],
+    ['CURSOR_AGENT', 'cursor'],
+    ['GEMINI_CLI', 'gemini-cli'],
+    ['AIDER_MODEL', 'aider'],
+];
+/**
+ * Who appears to be driving this run. Recorded as a CLAIM: the server's
+ * authoritative actor is the credential's user (and, for attested runs, the
+ * OIDC claims). Pure: reads only the allow-listed variables of the `env`
+ * it is handed.
+ */
+/**
+ * CI markers → the variable carrying that provider's run id (when it has
+ * one). Provider-specific markers come first; the generic `CI` flag most
+ * providers also set is the last resort and carries no run id.
+ */
+const CI_MARKERS = [
+    ['GITHUB_ACTIONS', 'GITHUB_RUN_ID'],
+    ['GITLAB_CI', 'CI_PIPELINE_ID'],
+    ['CIRCLECI', 'CIRCLE_WORKFLOW_ID'],
+    ['BUILDKITE', 'BUILDKITE_BUILD_ID'],
+    ['JENKINS_URL', 'BUILD_ID'],
+    ['CI', undefined],
+];
+export function detectRunner(env, hostname) {
+    const host = hostname.slice(0, MAX_HOST_CHARS);
+    const isSet = (name) => (env[name] ?? '').trim() !== '';
+    for (const [envVar, runIdVar] of CI_MARKERS) {
+        if (!isSet(envVar))
+            continue;
+        const runId = runIdVar !== undefined ? env[runIdVar]?.trim() : undefined;
+        return { kind: 'ci', ...(runId ? { ci_run_id: runId } : {}), host };
+    }
+    for (const [envVar, agent] of AGENT_MARKERS) {
+        if (isSet(envVar))
+            return { kind: 'agent', agent, host };
+    }
+    return { kind: 'human', host };
+}
+const HARNESS_ISSUE_SOURCE = /^harness_issue:[A-Z][A-Z0-9]*-\d+$/;
+export function parseSpecSource(value) {
+    if (value === 'flag' || value === 'repo_file')
+        return value;
+    if (HARNESS_ISSUE_SOURCE.test(value))
+        return value;
+    throw new Error(`Invalid --spec-source "${value}". Use flag, repo_file, or harness_issue:<ID> (e.g. harness_issue:IO-1234).`);
+}
+/** A full Git object id: SHA-1 (40 hex) or SHA-256 repositories (64 hex). */
+export const FULL_OBJECT_ID = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/;
+/** Exact-head binding needs the full object id; abbreviations are ambiguous. */
+export function validateSha(value, flag) {
+    const sha = value.trim().toLowerCase();
+    if (!FULL_OBJECT_ID.test(sha)) {
+        throw new Error(`${flag} must be a full 40- or 64-character hex commit SHA, got "${value}".`);
+    }
+    // Git's null object id means "no object" — a review cannot be bound to it.
+    if (/^0+$/.test(sha)) {
+        throw new Error(`${flag} is the null object id (all zeros), which names no commit.`);
+    }
+    return sha;
+}
+function positiveInt(value, flag) {
+    if (value === undefined || value === '')
+        return undefined;
+    const n = Number(value);
+    if (!Number.isSafeInteger(n) || n < 1) {
+        throw new Error(`${flag} must be a positive integer, got "${value}".`);
+    }
+    return n;
+}
+/**
+ * The converge loop's context for this round. Flags win over the
+ * `RCL_CONVERGE_*` environment the rcl-converge skill exports; without a
+ * target there is no converge context at all.
+ */
+export function resolveConvergeContext(flags, env) {
+    // A blank flag is "unset", so the environment still applies — a shell
+    // expanding an empty variable into --round "" must not erase the round.
+    const flag = (value) => value === undefined || value.trim() === '' ? undefined : value.trim();
+    const target = (flag(flags.convergeTarget) ?? env['RCL_CONVERGE_TARGET'] ?? '').trim();
+    // Validate before deciding whether a context exists at all: a bad --round
+    // must fail fast even when the target is missing, and a round or attempt
+    // without a target is a mistake, not something to drop silently.
+    const round = positiveInt(flag(flags.round) ?? env['RCL_CONVERGE_ROUND'], '--round');
+    const attempt = positiveInt(flag(flags.attempt) ?? env['RCL_CONVERGE_ATTEMPT'], '--attempt');
+    if (target === '') {
+        if (round !== undefined || attempt !== undefined) {
+            throw new Error('--round / --attempt (or RCL_CONVERGE_ROUND / RCL_CONVERGE_ATTEMPT) need a converge target: pass --converge-target <key> or RCL_CONVERGE_TARGET.');
+        }
+        return undefined;
+    }
+    return {
+        target,
+        ...(round !== undefined ? { round } : {}),
+        ...(attempt !== undefined ? { attempt } : {}),
+    };
+}
+/** One human-readable phrase for status lines and the Markdown header. */
+export function describeRunTarget(target) {
+    const where = target.kind === 'pr'
+        ? `${target.repo ?? '?'}#${target.pr_number ?? '?'}`
+        : target.kind === 'working_tree'
+            ? 'working tree'
+            : target.kind;
+    const head = target.head_sha ? ` @ ${target.head_sha.slice(0, 12)}` : '';
+    return `${where}${head} (diff ${target.diff_sha256.slice(0, 12)})`;
+}
+export function buildRunHeader(input) {
+    const { target, diff } = input;
+    if (input.cycleId !== undefined && input.converge?.cycleId !== undefined && input.cycleId !== input.converge.cycleId) {
+        throw new Error('review_cycle_header_mismatch');
+    }
+    return {
+        id: input.id ?? uuidv7(),
+        rcl_version: input.rclVersion,
+        command: input.command,
+        target: {
+            kind: target.kind,
+            ...(target.repo !== undefined ? { repo: target.repo } : {}),
+            ...(target.prNumber !== undefined ? { pr_number: target.prNumber } : {}),
+            ...(target.url !== undefined ? { url: target.url } : {}),
+            ...(target.headSha !== undefined ? { head_sha: target.headSha } : {}),
+            ...(target.baseSha !== undefined ? { base_sha: target.baseSha } : {}),
+            ...(target.headRef !== undefined ? { head_ref: target.headRef } : {}),
+            ...(target.baseRef !== undefined ? { base_ref: target.baseRef } : {}),
+            diff_sha256: diffDigest(diff.files),
+            files: diff.files.length,
+            additions: diff.files.reduce((sum, f) => sum + f.additions, 0),
+            deletions: diff.files.reduce((sum, f) => sum + f.deletions, 0),
+        },
+        roster: input.roster.map((r) => ({ ...r })),
+        config_sha256: configDigest(input.config),
+        thresholds: {
+            min_consensus_score: input.thresholds.minConsensusScore,
+            min_confidence: input.thresholds.minConfidence,
+            dedupe_line_window: input.thresholds.dedupeLineWindow,
+            jaccard_threshold: input.thresholds.jaccardThreshold,
+        },
+        gating: {
+            mode: input.gating.mode,
+            min_models: input.gating.minModels,
+            ...(input.gating.verificationModel !== undefined
+                ? { verification_model: input.gating.verificationModel }
+                : {}),
+            ...(input.gating.verificationReasoningEffort ? { verification_reasoning_effort: input.gating.verificationReasoningEffort } : {}),
+            verification_timeout_ms: input.gating.verificationTimeoutMs,
+            verification_pass_timeout_ms: input.gating.verificationPassTimeoutMs,
+        },
+        ...(input.spec ? { spec: { source: input.spec.source, sha256: input.spec.sha256 } } : {}),
+        context_files: (input.contextFiles ?? []).map((c) => ({ path: c.path, sha256: c.sha256 })),
+        ...(input.plan ? { plan: { focus: input.plan.focus } } : {}),
+        runner: { ...input.runner },
+        started_at: input.startedAt.toISOString(),
+        finished_at: input.finishedAt.toISOString(),
+        duration_ms: Math.max(0, input.finishedAt.getTime() - input.startedAt.getTime()),
+        ci_exit_code: input.ciExitCode,
+        ...((input.cycleId ?? input.converge?.cycleId) ? { cycle_id: input.cycleId ?? input.converge?.cycleId } : {}),
+        ...(input.converge ? { converge: {
+                target: input.converge.target,
+                ...(input.converge.round !== undefined ? { round: input.converge.round } : {}),
+                ...(input.converge.attempt !== undefined ? { attempt: input.converge.attempt } : {}),
+            } } : {}),
+    };
+}
+//# sourceMappingURL=run-header.js.map

package/dist/report/run-header.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-header.js","sourceRoot":"","sources":["../../src/report/run-header.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AA8InC,MAAM,UAAU,SAAS,CAAC,IAAqB;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;aAClC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAChD,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClC,CAAC;IACD,MAAM,OAAO,GAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAA8B;IAC/D,OAAO,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,KAA4B;IACrD,uDAAuD;IACvD,yEAAyE;IACzE,uEAAuE;IACvE,4BAA4B;IAC5B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACtC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/D,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACtB,IAAI,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,wEAAwE;QACxE,qEAAqE;QACrE,kDAAkD;QAClD,IAAI,CAAC,MAAM,CACT,eAAe,CAAC;YACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,IAAI,IAAI;YAC5C,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,mEAAmE;YACnE,iCAAiC;YACjC,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;SAC3B,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,aAAa,EAAE,SAAS,CAAgD,CAAC;AAEhH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ;IACR,iBAAiB;IACjB,aAAa;IACb,OAAO;IACP,WAAW;IACX,aAAa;IACb,YAAY;IACZ,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,cAAc;IACd,gBAAgB;IAChB,YAAY;IACZ,aAAa;IACb,qBAAqB;IACrB,iBAAiB;IACjB,SAAS;IACT,MAAM;IACN,OAAO;CACyF,CAAC;AAOnG,MAAM,wBAAwB,GAA0D,IAAI,CAAC;AAC7F,KAAK,wBAAwB,CAAC;AAE9B,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,sBAAsB,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,UAAU,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,eAAe,CAAC,UAAU,CAAC,CAAC;AACrC,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,SAAS,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,UAA6B,EAAE,QAAQ,GAAG,KAAK;IAC3F,OAAO,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAQ3B;IACC,MAAM,MAAM,GAAkB,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1D,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI;QACjB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC;KAChE,CAAC,CAAC,CAAC;IACJ,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,oBAAoB,IAAI,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACjF,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,iBAAiB;YACrC,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC;YACxD,IAAI,EAAE,cAAc;SACrB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B,4EAA4E;AAC5E,MAAM,aAAa,GAAmD;IACpE,CAAC,YAAY,EAAE,aAAa,CAAC;IAC7B,CAAC,wBAAwB,EAAE,aAAa,CAAC;IACzC,CAAC,eAAe,EAAE,OAAO,CAAC;IAC1B,CAAC,UAAU,EAAE,OAAO,CAAC;IACrB,CAAC,cAAc,EAAE,QAAQ,CAAC;IAC1B,CAAC,YAAY,EAAE,YAAY,CAAC;IAC5B,CAAC,aAAa,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF;;;;;GAKG;AACH;;;;GAIG;AACH,MAAM,UAAU,GAAkE;IAChF,CAAC,gBAAgB,EAAE,eAAe,CAAC;IACnC,CAAC,WAAW,EAAE,gBAAgB,CAAC;IAC/B,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAClC,CAAC,WAAW,EAAE,oBAAoB,CAAC;IACnC,CAAC,aAAa,EAAE,UAAU,CAAC;IAC3B,CAAC,IAAI,EAAE,SAAS,CAAC;CAClB,CAAC;AAEF,MAAM,UAAU,YAAY,CAC1B,GAAiD,EACjD,QAAgB;IAEhB,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IACzE,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,SAAS;QAC7B,MAAM,KAAK,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;IACtE,CAAC;IACD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,oBAAoB,GAAG,oCAAoC,CAAC;AAElE,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAC5D,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAmB,CAAC;IACjE,MAAM,IAAI,KAAK,CACb,0BAA0B,KAAK,6EAA6E,CAC7G,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,cAAc,GAAG,iCAAiC,CAAC;AAEhE,gFAAgF;AAChF,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,IAAY;IACrD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,4DAA4D,KAAK,IAAI,CAC7E,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4DAA4D,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB,EAAE,IAAY;IAC1D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qCAAqC,KAAK,IAAI,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAoE,EACpE,GAAiD;IAEjD,sEAAsE;IACtE,wEAAwE;IACxE,MAAM,IAAI,GAAG,CAAC,KAAyB,EAAsB,EAAE,CAC7D,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACxE,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvF,0EAA0E;IAC1E,yEAAyE;IACzE,iEAAiE;IACjE,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,oBAAoB,CAAC,EAAE,SAAS,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,sBAAsB,CAAC,EAAE,WAAW,CAAC,CAAC;IAC7F,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAClB,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,iJAAiJ,CAClJ,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,MAAM;QACN,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,iBAAiB,CAAC,MAAiB;IACjD,MAAM,KAAK,GACT,MAAM,CAAC,IAAI,KAAK,IAAI;QAClB,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,GAAG,IAAI,MAAM,CAAC,SAAS,IAAI,GAAG,EAAE;QACpD,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc;YAC9B,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IACpB,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,OAAO,GAAG,KAAK,GAAG,IAAI,UAAU,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAqB;IAClD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAC/B,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,EAAE,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrH,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,MAAM,EAAE;QACxB,WAAW,EAAE,KAAK,CAAC,UAAU;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE;YACN,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;YACnC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YACxB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YAC9D,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;SAC/D;QACD,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3C,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC;QACzC,UAAU,EAAE;YACV,mBAAmB,EAAE,KAAK,CAAC,UAAU,CAAC,iBAAiB;YACvD,cAAc,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa;YAC9C,kBAAkB,EAAE,KAAK,CAAC,UAAU,CAAC,gBAAgB;YACrD,iBAAiB,EAAE,KAAK,CAAC,UAAU,CAAC,gBAAgB;SACrD;QACD,MAAM,EAAE;YACN,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;YACvB,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;YAClC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS;gBAC9C,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE;gBACxD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,6BAA6B,EAAE,KAAK,CAAC,MAAM,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChI,uBAAuB,EAAE,KAAK,CAAC,MAAM,CAAC,qBAAqB;YAC3D,4BAA4B,EAAE,KAAK,CAAC,MAAM,CAAC,yBAAyB;SACrE;QACD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,aAAa,EAAE,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1F,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE;QAC3B,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;QACzC,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE;QAC3C,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QAChF,YAAY,EAAE,KAAK,CAAC,UAAU;QAC9B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7G,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE;gBAC/B,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;gBAC7B,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9E,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrF,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACV,CAAC;AACJ,CAAC"}

package/dist/report/supplemental-async.d.ts

@@ -0,0 +1,19 @@
+import type { ModelReview } from '../consensus/types.js';
+type DeepReadonly<T> = T extends object ? {
+    readonly [K in keyof T]: DeepReadonly<T[K]>;
+} : T;
+export type SupplementalAsync = DeepReadonly<{
+    version: 1;
+    bytes: string;
+    digest: string;
+    asyncLaunched: number;
+    reviews: ModelReview[];
+    reviewBytes: string[];
+}>;
+/** Structural snapshot only; it does not establish worker, provider, or server authority. */
+export declare function isSupplementalAsync(value: unknown): value is SupplementalAsync;
+/** Decode a canonical immutable async snapshot captured during original aggregation. */
+export declare function decodeSupplementalAsync(bytes: string): SupplementalAsync;
+/** Capture exact opaque async review strings in their aggregation order. */
+export declare function captureSupplementalAsync(reviewBytes: readonly string[], asyncLaunched: number): SupplementalAsync;
+export {};

package/dist/report/supplemental-async.js

@@ -0,0 +1,85 @@
+import { createHash } from 'node:crypto';
+import { z } from 'zod';
+import { blockingCheckpointReviewSchema } from '../dispatch/checkpoint.js';
+import { stableStringify } from './run-header.js';
+const MAX_BYTES = 8 * 1024 * 1024;
+const integer = z.number().int().nonnegative().safe();
+const wireSchema = z.object({ version: z.literal(1), asyncLaunched: integer, reviewBytes: z.array(z.string()) }).strict();
+const asyncReviewSchema = blockingCheckpointReviewSchema.extend({ async: z.literal(true) }).strict();
+const validated = new WeakSet();
+function sha256(bytes) { return createHash('sha256').update(bytes).digest('hex'); }
+function bound(bytes) {
+    if (typeof bytes !== 'string' || Buffer.byteLength(bytes, 'utf8') > MAX_BYTES)
+        throw new Error('supplemental_async_too_large');
+    if (Buffer.from(bytes, 'utf8').toString('utf8') !== bytes)
+        throw new Error('supplemental_async_invalid_bytes');
+}
+function deepFreeze(value) {
+    if (value && typeof value === 'object' && !Object.isFrozen(value)) {
+        for (const child of Object.values(value))
+            deepFreeze(child);
+        Object.freeze(value);
+    }
+    return value;
+}
+function snapshot(wire, bytes) {
+    const reviews = wire.reviewBytes.map((reviewBytes) => {
+        bound(reviewBytes);
+        let value;
+        try {
+            value = JSON.parse(reviewBytes);
+        }
+        catch {
+            throw new Error('supplemental_async_invalid_review');
+        }
+        const parsed = asyncReviewSchema.safeParse(value);
+        if (!parsed.success)
+            throw new Error('supplemental_async_invalid_review');
+        return parsed.data;
+    });
+    const document = deepFreeze({
+        version: 1,
+        bytes,
+        digest: sha256(bytes),
+        asyncLaunched: wire.asyncLaunched,
+        reviews,
+        reviewBytes: [...wire.reviewBytes],
+    });
+    validated.add(document);
+    return document;
+}
+/** Structural snapshot only; it does not establish worker, provider, or server authority. */
+export function isSupplementalAsync(value) {
+    return typeof value === 'object' && value !== null && validated.has(value);
+}
+/** Decode a canonical immutable async snapshot captured during original aggregation. */
+export function decodeSupplementalAsync(bytes) {
+    bound(bytes);
+    let value;
+    try {
+        value = JSON.parse(bytes);
+    }
+    catch {
+        throw new Error('supplemental_async_invalid_document');
+    }
+    const parsed = wireSchema.safeParse(value);
+    if (!parsed.success)
+        throw new Error('supplemental_async_invalid_document');
+    if (stableStringify(parsed.data) !== bytes)
+        throw new Error('supplemental_async_noncanonical');
+    return snapshot(parsed.data, bytes);
+}
+/** Capture exact opaque async review strings in their aggregation order. */
+export function captureSupplementalAsync(reviewBytes, asyncLaunched) {
+    const wire = { version: 1, asyncLaunched, reviewBytes: [...reviewBytes] };
+    const parsed = wireSchema.safeParse(wire);
+    if (!parsed.success) {
+        if (!Number.isSafeInteger(asyncLaunched) || asyncLaunched < 0)
+            throw new Error('supplemental_async_invalid_async_launched');
+        throw new Error('supplemental_async_invalid_document');
+    }
+    const bytes = stableStringify(parsed.data);
+    bound(bytes);
+    return snapshot(parsed.data, bytes);
+}
+//# sourceMappingURL=supplemental-async.js.map

package/dist/report/supplemental-async.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supplemental-async.js","sourceRoot":"","sources":["../../src/report/supplemental-async.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAClC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AACtD,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC1H,MAAM,iBAAiB,GAAG,8BAA8B,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACrG,MAAM,SAAS,GAAG,IAAI,OAAO,EAAU,CAAC;AAYxC,SAAS,MAAM,CAAC,KAAa,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnG,SAAS,KAAK,CAAC,KAAa;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC/H,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;AACjH,CAAC;AACD,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAClE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAe,CAAC;YAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,QAAQ,CAAC,IAAgC,EAAE,KAAa;IAC/D,MAAM,OAAO,GAAkB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE;QAClE,KAAK,CAAC,WAAW,CAAC,CAAC;QACnB,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAAC,CAAC;QACxG,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC1E,OAAO,MAAM,CAAC,IAAmB,CAAC;IACpC,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAsB,UAAU,CAAC;QAC7C,OAAO,EAAE,CAAU;QACnB,KAAK;QACL,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;QACrB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,OAAO;QACP,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;KACnC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,KAAK,CAAC,KAAK,CAAC,CAAC;IACb,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAAC,CAAC;IACpG,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC5E,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC/F,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,wBAAwB,CAAC,WAA8B,EAAE,aAAqB;IAC5F,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,CAAU,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC;IACnF,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC5H,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3C,KAAK,CAAC,KAAK,CAAC,CAAC;IACb,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC"}

package/dist/report/uuid.d.ts

@@ -0,0 +1,16 @@
+/**
+ * RFC 9562 UUID version 7: 48-bit Unix millisecond timestamp, then version
+ * and variant bits over random data. Time-ordered so run ids sort by
+ * creation on the server, random enough to be a safe idempotency key for
+ * retried deliveries. Node's `randomUUID()` is v4 and carries no time.
+ */
+export declare function uuidv7(now?: number): string;
+/** The namespace `rcl telemetry backfill` derives run ids in (RCL-38). */
+export declare const UUID_NAMESPACE_RCL_BACKFILL = "7d3b1c2e-8a4f-4b6d-9c1e-2f3a4b5c6d7e";
+/**
+ * RFC 4122 version 5: SHA-1 of the namespace UUID's bytes followed by the
+ * name, with the version and variant bits set. Deterministic — the same name
+ * in the same namespace is the same id, which is what makes a backfill
+ * re-run a no-op on the server.
+ */
+export declare function uuidv5(name: string, namespace: string): string;

package/dist/report/uuid.js

@@ -0,0 +1,41 @@
+import { createHash, randomBytes } from 'node:crypto';
+/**
+ * RFC 9562 UUID version 7: 48-bit Unix millisecond timestamp, then version
+ * and variant bits over random data. Time-ordered so run ids sort by
+ * creation on the server, random enough to be a safe idempotency key for
+ * retried deliveries. Node's `randomUUID()` is v4 and carries no time.
+ */
+export function uuidv7(now = Date.now()) {
+    const bytes = randomBytes(16);
+    // The timestamp field is an unsigned 48-bit integer: clamp a pre-epoch or
+    // fractional clock reading rather than letting BigInt two's-complement
+    // bits scramble the sort order (or throw on a non-integer).
+    const millis = Number.isFinite(now) ? Math.max(0, Math.floor(now)) : 0;
+    const ts = BigInt(millis) & 0xffffffffffffn;
+    for (let i = 5; i >= 0; i--) {
+        bytes[i] = Number((ts >> BigInt(8 * (5 - i))) & 0xffn);
+    }
+    bytes[6] = (bytes[6] & 0x0f) | 0x70; // version 7
+    bytes[8] = (bytes[8] & 0x3f) | 0x80; // RFC variant
+    const hex = bytes.toString('hex');
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+/** The namespace `rcl telemetry backfill` derives run ids in (RCL-38). */
+export const UUID_NAMESPACE_RCL_BACKFILL = '7d3b1c2e-8a4f-4b6d-9c1e-2f3a4b5c6d7e';
+/**
+ * RFC 4122 version 5: SHA-1 of the namespace UUID's bytes followed by the
+ * name, with the version and variant bits set. Deterministic — the same name
+ * in the same namespace is the same id, which is what makes a backfill
+ * re-run a no-op on the server.
+ */
+export function uuidv5(name, namespace) {
+    const ns = Buffer.from(namespace.replace(/-/g, ''), 'hex');
+    if (ns.length !== 16)
+        throw new Error('uuidv5 namespace must be a UUID');
+    const hash = createHash('sha1').update(ns).update(Buffer.from(name, 'utf8')).digest();
+    hash[6] = (hash[6] & 0x0f) | 0x50;
+    hash[8] = (hash[8] & 0x3f) | 0x80;
+    const hex = hash.subarray(0, 16).toString('hex');
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20, 32)}`;
+}
+//# sourceMappingURL=uuid.js.map

package/dist/report/uuid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uuid.js","sourceRoot":"","sources":["../../src/report/uuid.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,UAAU,MAAM,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE;IAC7C,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,0EAA0E;IAC1E,uEAAuE;IACvE,4DAA4D;IAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,eAAe,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;IACzD,CAAC;IACD,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,YAAY;IAClD,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,cAAc;IACpD,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,MAAM,2BAA2B,GAAG,sCAAsC,CAAC;AAElF;;;;;GAKG;AACH,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,SAAiB;IACpD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3D,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACtF,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACnC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AACjH,CAAC"}

package/dist/resolver/git.d.ts

@@ -0,0 +1,16 @@
+import type { Diff } from './types.js';
+export type GitDiffMode = 'staged' | 'working-tree';
+export interface GitHeads {
+    /** `git rev-parse HEAD` — the commit a staged/working-tree review is relative to. */
+    headSha?: string;
+    /** Merge-base of HEAD with the remote default branch (`origin/HEAD`, then `origin/main`). */
+    baseSha?: string;
+}
+/**
+ * Best-effort exact-head binding for local review modes (IO-12475 section
+ * 8.1). Never throws: outside a repository, on an unborn branch, or without
+ * a remote default branch the corresponding field is simply absent and the
+ * report records only the diff digest.
+ */
+export declare function resolveGitHeads(cwd?: string): Promise<GitHeads>;
+export declare function loadGitDiff(mode: GitDiffMode, cwd?: string): Promise<Diff>;

package/dist/resolver/git.js

@@ -0,0 +1,77 @@
+import { execFile } from 'child_process';
+import { promisify } from 'util';
+import { parseDiffFromString } from './local.js';
+const execFileAsync = promisify(execFile);
+// Diffs larger than this are unreviewable by the council anyway; failing
+// loudly beats silently truncating what the models see.
+const MAX_DIFF_BYTES = 10 * 1024 * 1024;
+const MODE_ARGS = {
+    // Staged changes only (what `git commit` would pick up right now).
+    staged: ['diff', '--cached'],
+    // Everything uncommitted relative to HEAD: staged + unstaged. Untracked
+    // files are invisible to `git diff` and therefore not reviewed.
+    'working-tree': ['diff', 'HEAD'],
+};
+async function runGit(args, cwd) {
+    try {
+        const { stdout } = await execFileAsync('git', 
+        // quotepath off so non-ASCII filenames survive parseDiffText's header
+        // match; ext-diff off so a configured external diff tool can't replace
+        // the unified format the parser expects.
+        ['-c', 'core.quotepath=false', ...args, '--no-color', '--no-ext-diff'], { cwd, maxBuffer: MAX_DIFF_BYTES });
+        return stdout;
+    }
+    catch (err) {
+        const stderr = err.stderr?.trim();
+        throw new Error(`git ${args.join(' ')} failed${stderr ? `: ${stderr}` : `: ${String(err)}`}`);
+    }
+}
+/** A full object id in either repository format: SHA-1 (40 hex) or SHA-256 (64 hex). */
+const FULL_OBJECT_ID = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/;
+async function revParse(cwd, ...args) {
+    try {
+        const { stdout } = await execFileAsync('git', args, { cwd });
+        const sha = stdout.trim();
+        return FULL_OBJECT_ID.test(sha) ? sha : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * The remote default branch: `origin/HEAD` when the clone recorded it, else
+ * the conventional names in order. Shallow CI checkouts and `git remote add`
+ * clones have no `origin/HEAD`, so the fallbacks carry real weight.
+ */
+const DEFAULT_BRANCH_FALLBACKS = ['origin/main', 'origin/master'];
+/**
+ * Best-effort exact-head binding for local review modes (IO-12475 section
+ * 8.1). Never throws: outside a repository, on an unborn branch, or without
+ * a remote default branch the corresponding field is simply absent and the
+ * report records only the diff digest.
+ */
+export async function resolveGitHeads(cwd = process.cwd()) {
+    const headSha = await revParse(cwd, 'rev-parse', 'HEAD');
+    if (headSha === undefined)
+        return {};
+    let baseSha;
+    for (const ref of ['origin/HEAD', ...DEFAULT_BRANCH_FALLBACKS]) {
+        baseSha = await revParse(cwd, 'merge-base', 'HEAD', ref);
+        if (baseSha !== undefined)
+            break;
+    }
+    return { headSha, ...(baseSha !== undefined ? { baseSha } : {}) };
+}
+export async function loadGitDiff(mode, cwd = process.cwd()) {
+    // Fail with a clear message when we're not in a git repository (or git is
+    // missing) before attempting the actual diff.
+    try {
+        await execFileAsync('git', ['rev-parse', '--git-dir'], { cwd });
+    }
+    catch {
+        throw new Error(`--${mode} requires running inside a git repository`);
+    }
+    const diffText = await runGit(MODE_ARGS[mode], cwd);
+    return { ...parseDiffFromString(diffText), source: 'local' };
+}
+//# sourceMappingURL=git.js.map

package/dist/resolver/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/resolver/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGjD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,yEAAyE;AACzE,wDAAwD;AACxD,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAIxC,MAAM,SAAS,GAAkC;IAC/C,mEAAmE;IACnE,MAAM,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,wEAAwE;IACxE,gEAAgE;IAChE,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;CACjC,CAAC;AAEF,KAAK,UAAU,MAAM,CAAC,IAAc,EAAE,GAAW;IAC/C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,KAAK;QACL,sEAAsE;QACtE,uEAAuE;QACvE,yCAAyC;QACzC,CAAC,IAAI,EAAE,sBAAsB,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,eAAe,CAAC,EACtE,EAAE,GAAG,EAAE,SAAS,EAAE,cAAc,EAAE,CACnC,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAI,GAA2B,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AASD,wFAAwF;AACxF,MAAM,cAAc,GAAG,iCAAiC,CAAC;AAEzD,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,GAAG,IAAc;IACpD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1B,OAAO,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,wBAAwB,GAAG,CAAC,aAAa,EAAE,eAAe,CAAU,CAAC;AAE3E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACvD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrC,IAAI,OAA2B,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,wBAAwB,CAAC,EAAE,CAAC;QAC/D,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM;IACnC,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAiB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACtE,0EAA0E;IAC1E,8CAA8C;IAC9C,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,2CAA2C,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IACpD,OAAO,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC/D,CAAC"}