@allocator-one/rcl 4.4.19

package/dist/telemetry/recovery/source.d.ts

@@ -0,0 +1,328 @@
+import { z } from 'zod';
+import type { ReviewResult } from '../../consensus/types.js';
+import type { RecoveryFinding } from './types.js';
+export declare const UUID: RegExp;
+export declare const SHA256: RegExp;
+export declare const originalRawFindingSchema: z.ZodObject<{
+    file: z.ZodString;
+    title: z.ZodString;
+    description: z.ZodString;
+    suggestedFix: z.ZodOptional<z.ZodString>;
+    id: z.ZodString;
+    startLine: z.ZodNumber;
+    endLine: z.ZodNumber;
+    severity: z.ZodEnum<{
+        critical: "critical";
+        important: "important";
+        minor: "minor";
+        nitpick: "nitpick";
+    }>;
+    category: z.ZodString;
+}, z.core.$strip>;
+/** Shape validation only; Mode A retains the original object, including provenance. */
+export declare const originalRunReportSchema: z.ZodObject<{
+    run: z.ZodObject<{
+        id: z.ZodString;
+        rcl_version: z.ZodString;
+        command: z.ZodEnum<{
+            review: "review";
+            "review-plan": "review-plan";
+        }>;
+        target: z.ZodObject<{
+            kind: z.ZodEnum<{
+                patch: "patch";
+                plan: "plan";
+                pr: "pr";
+                staged: "staged";
+                working_tree: "working_tree";
+            }>;
+            repo: z.ZodOptional<z.ZodString>;
+            pr_number: z.ZodOptional<z.ZodNumber>;
+            url: z.ZodOptional<z.ZodString>;
+            head_sha: z.ZodOptional<z.ZodString>;
+            base_sha: z.ZodOptional<z.ZodString>;
+            head_ref: z.ZodOptional<z.ZodString>;
+            base_ref: z.ZodOptional<z.ZodString>;
+            diff_sha256: z.ZodString;
+            files: z.ZodNumber;
+            additions: z.ZodNumber;
+            deletions: z.ZodNumber;
+        }, z.core.$strip>;
+        roster: z.ZodArray<z.ZodObject<{
+            model: z.ZodString;
+            role: z.ZodString;
+            provider: z.ZodString;
+            lane: z.ZodEnum<{
+                async: "async";
+                blocking: "blocking";
+                verification: "verification";
+                secondary: "secondary";
+            }>;
+        }, z.core.$strip>>;
+        cycle_id: z.ZodOptional<z.ZodString>;
+        config_sha256: z.ZodString;
+        thresholds: z.ZodObject<{
+            min_consensus_score: z.ZodNumber;
+            min_confidence: z.ZodNumber;
+            dedupe_line_window: z.ZodNumber;
+            jaccard_threshold: z.ZodNumber;
+        }, z.core.$strip>;
+        gating: z.ZodObject<{
+            mode: z.ZodEnum<{
+                "verified-consensus": "verified-consensus";
+                "all-findings": "all-findings";
+            }>;
+            min_models: z.ZodNumber;
+            verification_model: z.ZodOptional<z.ZodString>;
+            verification_timeout_ms: z.ZodNumber;
+            verification_pass_timeout_ms: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>;
+        spec: z.ZodOptional<z.ZodObject<{
+            source: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strip>>;
+        context_files: z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strip>>;
+        plan: z.ZodOptional<z.ZodObject<{
+            focus: z.ZodString;
+        }, z.core.$strip>>;
+        runner: z.ZodObject<{
+            kind: z.ZodEnum<{
+                agent: "agent";
+                ci: "ci";
+                human: "human";
+            }>;
+            agent: z.ZodOptional<z.ZodString>;
+            ci_run_id: z.ZodOptional<z.ZodString>;
+            host: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        started_at: z.ZodString;
+        finished_at: z.ZodString;
+        duration_ms: z.ZodNumber;
+        ci_exit_code: z.ZodNumber;
+        converge: z.ZodOptional<z.ZodObject<{
+            target: z.ZodString;
+            round: z.ZodOptional<z.ZodNumber>;
+            attempt: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+        provenance: z.ZodOptional<z.ZodEnum<{
+            live: "live";
+            backfill: "backfill";
+        }>>;
+    }, z.core.$strip>;
+    reviews: z.ZodArray<z.ZodObject<{
+        model: z.ZodString;
+        role: z.ZodString;
+        provider: z.ZodString;
+        findings: z.ZodArray<z.ZodUnknown>;
+        durationMs: z.ZodNumber;
+        status: z.ZodEnum<{
+            error: "error";
+            success: "success";
+            timeout: "timeout";
+            parse_failed: "parse_failed";
+            canceled: "canceled";
+        }>;
+        error: z.ZodOptional<z.ZodString>;
+        droppedFindings: z.ZodOptional<z.ZodNumber>;
+        warnings: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        async: z.ZodOptional<z.ZodBoolean>;
+        usage: z.ZodOptional<z.ZodObject<{
+            inputTokens: z.ZodOptional<z.ZodNumber>;
+            outputTokens: z.ZodOptional<z.ZodNumber>;
+            reasoningTokens: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    stats: z.ZodObject<{
+        totalReviews: z.ZodNumber;
+        successfulReviews: z.ZodNumber;
+        totalRawFindings: z.ZodNumber;
+        totalDeduped: z.ZodNumber;
+        belowThreshold: z.ZodNumber;
+        durationMs: z.ZodNumber;
+    }, z.core.$loose>;
+    findings: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        file: z.ZodString;
+        startLine: z.ZodNumber;
+        endLine: z.ZodNumber;
+        severity: z.ZodEnum<{
+            critical: "critical";
+            important: "important";
+            minor: "minor";
+            nitpick: "nitpick";
+        }>;
+        category: z.ZodString;
+        title: z.ZodString;
+        description: z.ZodString;
+        suggestedFix: z.ZodOptional<z.ZodString>;
+        identity: z.ZodOptional<z.ZodString>;
+        consensus: z.ZodObject<{
+            score: z.ZodNumber;
+            total: z.ZodNumber;
+            models: z.ZodArray<z.ZodString>;
+            roles: z.ZodArray<z.ZodString>;
+            crossRole: z.ZodBoolean;
+            crossModel: z.ZodBoolean;
+            elevated: z.ZodBoolean;
+        }, z.core.$loose>;
+        gating: z.ZodOptional<z.ZodObject<{
+            reason: z.ZodEnum<{
+                critical: "critical";
+                none: "none";
+                consensus: "consensus";
+                verified: "verified";
+            }>;
+            verification: z.ZodOptional<z.ZodObject<{
+                verdict: z.ZodString;
+                model: z.ZodOptional<z.ZodString>;
+                note: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    belowThresholdFindings: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        file: z.ZodString;
+        startLine: z.ZodNumber;
+        endLine: z.ZodNumber;
+        severity: z.ZodEnum<{
+            critical: "critical";
+            important: "important";
+            minor: "minor";
+            nitpick: "nitpick";
+        }>;
+        category: z.ZodString;
+        title: z.ZodString;
+        description: z.ZodString;
+        suggestedFix: z.ZodOptional<z.ZodString>;
+        identity: z.ZodOptional<z.ZodString>;
+        consensus: z.ZodObject<{
+            score: z.ZodNumber;
+            total: z.ZodNumber;
+            models: z.ZodArray<z.ZodString>;
+            roles: z.ZodArray<z.ZodString>;
+            crossRole: z.ZodBoolean;
+            crossModel: z.ZodBoolean;
+            elevated: z.ZodBoolean;
+        }, z.core.$loose>;
+        gating: z.ZodOptional<z.ZodObject<{
+            reason: z.ZodEnum<{
+                critical: "critical";
+                none: "none";
+                consensus: "consensus";
+                verified: "verified";
+            }>;
+            verification: z.ZodOptional<z.ZodObject<{
+                verdict: z.ZodString;
+                model: z.ZodOptional<z.ZodString>;
+                note: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+declare const legacy: z.ZodObject<{
+    reviews: z.ZodArray<z.ZodObject<{
+        model: z.ZodString;
+    }, z.core.$loose>>;
+    findings: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        file: z.ZodString;
+        startLine: z.ZodNumber;
+        endLine: z.ZodNumber;
+        severity: z.ZodEnum<{
+            critical: "critical";
+            important: "important";
+            minor: "minor";
+            nitpick: "nitpick";
+        }>;
+        category: z.ZodString;
+        title: z.ZodString;
+        description: z.ZodString;
+        suggestedFix: z.ZodOptional<z.ZodString>;
+        identity: z.ZodOptional<z.ZodString>;
+        consensus: z.ZodObject<{
+            score: z.ZodNumber;
+            total: z.ZodNumber;
+            models: z.ZodArray<z.ZodString>;
+            roles: z.ZodArray<z.ZodString>;
+            crossRole: z.ZodBoolean;
+            crossModel: z.ZodBoolean;
+            elevated: z.ZodBoolean;
+        }, z.core.$loose>;
+        gating: z.ZodOptional<z.ZodObject<{
+            reason: z.ZodEnum<{
+                critical: "critical";
+                none: "none";
+                consensus: "consensus";
+                verified: "verified";
+            }>;
+            verification: z.ZodOptional<z.ZodObject<{
+                verdict: z.ZodString;
+                model: z.ZodOptional<z.ZodString>;
+                note: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    belowThresholdFindings: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        file: z.ZodString;
+        startLine: z.ZodNumber;
+        endLine: z.ZodNumber;
+        severity: z.ZodEnum<{
+            critical: "critical";
+            important: "important";
+            minor: "minor";
+            nitpick: "nitpick";
+        }>;
+        category: z.ZodString;
+        title: z.ZodString;
+        description: z.ZodString;
+        suggestedFix: z.ZodOptional<z.ZodString>;
+        identity: z.ZodOptional<z.ZodString>;
+        consensus: z.ZodObject<{
+            score: z.ZodNumber;
+            total: z.ZodNumber;
+            models: z.ZodArray<z.ZodString>;
+            roles: z.ZodArray<z.ZodString>;
+            crossRole: z.ZodBoolean;
+            crossModel: z.ZodBoolean;
+            elevated: z.ZodBoolean;
+        }, z.core.$loose>;
+        gating: z.ZodOptional<z.ZodObject<{
+            reason: z.ZodEnum<{
+                critical: "critical";
+                none: "none";
+                consensus: "consensus";
+                verified: "verified";
+            }>;
+            verification: z.ZodOptional<z.ZodObject<{
+                verdict: z.ZodString;
+                model: z.ZodOptional<z.ZodString>;
+                note: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>>;
+    stats: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export type ParsedSource = {
+    format: 'modern';
+    report: ReviewResult & {
+        run: NonNullable<ReviewResult['run']>;
+    };
+    refutations: RecoveryFinding[];
+    unsafe: boolean;
+} | {
+    format: 'legacy';
+    report: z.infer<typeof legacy>;
+    refutations: RecoveryFinding[];
+    unsafe: boolean;
+};
+/** Validate original producer data before using its shape in a transport builder. */
+export declare function parseSource(text: string): ParsedSource;
+/** Diagnostic evidence from an unsupported report is inventoried but never importable. */
+export declare function unsupportedSourceDetails(text: string): Pick<import('./types.js').RecoverySource, 'run_id' | 'repo' | 'target' | 'refutations'>;
+/** Inspect decoded values too: JSON escapes must not conceal a credential. */
+export declare function requiresArtifactRedaction(value: unknown, path?: string[]): boolean;
+export {};

package/dist/telemetry/recovery/source.js

@@ -0,0 +1,253 @@
+import { z } from 'zod';
+import { stableFindingKey } from '../../consensus/finding-identity.js';
+import { parseRepoName } from '../../resolver/github.js';
+import { normalizeVerificationEvidence } from '../verification.js';
+import { scrubDeep, scrubIdentifier, scrubSecrets } from '../scrub.js';
+export const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+export const SHA256 = /^[0-9a-f]{64}$/;
+const FALLBACK_VERSIONS = new Set(['3.0.0', '3.1.0', '3.2.0', '3.3.0', '3.3.1', '3.4.0', '3.5.0', '3.6.0']);
+const string = z.string().refine((value) => !value.includes('\0'));
+const nonblank = string.refine((value) => value.trim().length > 0);
+const integer = z.number().int().nonnegative().safe();
+const number = z.number().nonnegative();
+const timestamp = string.refine((value) => /^\d{4}-\d\d-\d\dT/.test(value) && Number.isFinite(Date.parse(value)));
+const hash = string.regex(SHA256);
+const objectId = string.regex(/^(?:[0-9a-f]{40}|[0-9a-f]{64})$/);
+const verification = z.object({ verdict: nonblank.max(32), model: string.optional(), note: string.optional() });
+const originalFinding = z.object({
+    id: string, file: nonblank, startLine: integer, endLine: integer,
+    severity: z.enum(['critical', 'important', 'minor', 'nitpick']),
+    category: nonblank, title: nonblank, description: string,
+    suggestedFix: string.optional(), identity: nonblank.max(64).optional(),
+    consensus: z.object({
+        score: number, total: number, models: z.array(string), roles: z.array(string),
+        crossRole: z.boolean(), crossModel: z.boolean(), elevated: z.boolean(),
+    }).passthrough(),
+    gating: z.object({ reason: z.enum(['consensus', 'critical', 'verified', 'none']), verification: verification.optional() }).optional(),
+});
+const finding = originalFinding.refine((value) => value.endLine >= value.startLine);
+export const originalRawFindingSchema = originalFinding.omit({ consensus: true, identity: true, gating: true });
+const review = z.object({
+    model: nonblank, role: nonblank, provider: nonblank, findings: z.array(z.unknown()),
+    durationMs: number, status: z.enum(['success', 'timeout', 'error', 'parse_failed', 'canceled']),
+    error: string.optional(), droppedFindings: integer.optional(), warnings: z.array(string).optional(), async: z.boolean().optional(),
+    usage: z.object({ inputTokens: integer.optional(), outputTokens: integer.optional(), reasoningTokens: integer.optional() }).optional(),
+});
+const target = z.object({
+    kind: z.enum(['pr', 'patch', 'staged', 'working_tree', 'plan']),
+    repo: nonblank.refine((value) => parseRepoName(value) !== null && value === value.trim()).optional(),
+    pr_number: integer.positive().optional(), url: string.optional(), head_sha: objectId.optional(), base_sha: objectId.optional(),
+    head_ref: string.optional(), base_ref: string.optional(), diff_sha256: hash, files: integer, additions: integer, deletions: integer,
+}).refine((value) => value.kind !== 'pr' || (value.repo !== undefined && value.pr_number !== undefined));
+const header = z.object({
+    id: string.regex(UUID), rcl_version: nonblank.max(64), command: z.enum(['review', 'review-plan']), target,
+    roster: z.array(z.object({ model: nonblank, role: nonblank, provider: nonblank, lane: z.enum(['blocking', 'secondary', 'async', 'verification']) })).max(200),
+    cycle_id: string.regex(UUID).optional(),
+    config_sha256: hash,
+    thresholds: z.object({ min_consensus_score: number, min_confidence: number, dedupe_line_window: integer, jaccard_threshold: number }),
+    gating: z.object({
+        mode: z.enum(['all-findings', 'verified-consensus']),
+        min_models: integer,
+        verification_model: string.optional(),
+        verification_timeout_ms: z.number().finite().nonnegative(),
+        // Optional for reports written before RCL-85 introduced a whole-pass bound.
+        verification_pass_timeout_ms: z.number().finite().nonnegative().optional(),
+    }),
+    spec: z.object({ source: nonblank, sha256: hash }).optional(),
+    context_files: z.array(z.object({ path: nonblank, sha256: hash })).max(200),
+    plan: z.object({ focus: nonblank }).optional(),
+    runner: z.object({ kind: z.enum(['agent', 'ci', 'human']), agent: string.optional(), ci_run_id: string.optional(), host: string.optional() }),
+    started_at: timestamp, finished_at: timestamp, duration_ms: integer, ci_exit_code: integer,
+    converge: z.object({ target: nonblank, round: integer.positive().optional(), attempt: integer.positive().optional() }).optional(),
+    provenance: z.enum(['live', 'backfill']).optional(),
+}).refine((value) => Date.parse(value.finished_at) >= Date.parse(value.started_at));
+const modern = z.object({
+    run: header, reviews: z.array(review).max(500), findings: z.array(finding).max(2000),
+    belowThresholdFindings: z.array(finding).max(2000).optional(),
+    stats: z.object({ totalReviews: integer, successfulReviews: integer, totalRawFindings: integer, totalDeduped: integer, belowThreshold: integer, durationMs: number }).passthrough(),
+}).refine((value) => value.findings.length + (value.belowThresholdFindings?.length ?? 0) <= 2000);
+/** Shape validation only; Mode A retains the original object, including provenance. */
+export const originalRunReportSchema = modern.safeExtend({
+    findings: z.array(originalFinding).max(2000),
+    belowThresholdFindings: z.array(originalFinding).max(2000).optional(),
+});
+const legacy = z.object({
+    reviews: z.array(z.object({ model: nonblank }).passthrough()).max(500),
+    findings: z.array(finding).max(2000), belowThresholdFindings: z.array(finding).max(2000).optional(),
+    stats: z.record(z.string(), z.unknown()).optional(),
+}).refine((value) => value.findings.length + (value.belowThresholdFindings?.length ?? 0) <= 2000);
+/** Validate original producer data before using its shape in a transport builder. */
+export function parseSource(text) {
+    let raw;
+    try {
+        raw = JSON.parse(text);
+    }
+    catch {
+        throw new Error('invalid_or_incomplete_json');
+    }
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        throw new Error('not_report');
+    if (!Array.isArray(raw['reviews']) || !Array.isArray(raw['findings']))
+        throw new Error('not_report');
+    const hasHeader = Object.hasOwn(raw, 'run');
+    const parsed = hasHeader ? modern.safeParse(raw) : legacy.safeParse(raw);
+    if (!parsed.success)
+        throw new Error('unsupported_report');
+    const data = parsed.data;
+    const version = 'run' in data ? data.run.rcl_version : undefined;
+    const all = [...data.findings, ...(data.belowThresholdFindings ?? [])];
+    if (hasHeader && all.some((f) => f.identity === undefined && !FALLBACK_VERSIONS.has(version)))
+        throw new Error('unsupported_identity_version');
+    const refutations = [];
+    all.forEach((f, index) => {
+        if (f.gating?.verification?.verdict !== 'refuted')
+            return;
+        const normalized = normalizeVerificationEvidence(f.gating.verification);
+        refutations.push({
+            ref: `f${String(index + 1).padStart(3, '0')}`,
+            identity: hasHeader && f.identity !== undefined ? scrubIdentifier(f.identity, 64) : stableFindingKey(f),
+            model: normalized.model ?? null, note: normalized.note ?? null,
+        });
+    });
+    let unsafe = requiresArtifactRedaction(raw, []);
+    // JSON.parse discards duplicate keys, so a decoded-value scan alone could
+    // miss a credential in the shadowed value. Reject the complete ambiguous
+    // artifact class before it can be selected for original-byte upload.
+    if (!unsafe)
+        unsafe = hasDuplicateObjectKey(text);
+    // The transport builder consumes the validated fields above. Older report
+    // versions may omit presentation-only consensus labels required by today's
+    // ReviewResult type; recovery neither renders nor invents those labels.
+    if (hasHeader)
+        return { format: 'modern', report: data, refutations, unsafe };
+    return { format: 'legacy', report: data, refutations, unsafe };
+}
+/** Bounded JSON token walk that fails closed on duplicate object keys. */
+function hasDuplicateObjectKey(text) {
+    let index = 0;
+    const whitespace = () => { while (/\s/.test(text[index] ?? ''))
+        index++; };
+    const string = () => {
+        const start = index++;
+        while (index < text.length) {
+            if (text[index] === '\\') {
+                index += 2;
+                continue;
+            }
+            if (text[index++] === '"')
+                return JSON.parse(text.slice(start, index));
+        }
+        throw new Error('invalid_json');
+    };
+    const value = () => {
+        whitespace();
+        if (text[index] === '"') {
+            string();
+            return false;
+        }
+        if (text[index] === '{') {
+            index++;
+            const keys = new Set();
+            whitespace();
+            if (text[index] === '}') {
+                index++;
+                return false;
+            }
+            while (true) {
+                whitespace();
+                const key = string();
+                whitespace();
+                if (text[index++] !== ':')
+                    throw new Error('invalid_json');
+                if (keys.has(key) || value())
+                    return true;
+                keys.add(key);
+                whitespace();
+                if (text[index] === '}') {
+                    index++;
+                    return false;
+                }
+                if (text[index++] !== ',')
+                    throw new Error('invalid_json');
+            }
+        }
+        if (text[index] === '[') {
+            index++;
+            whitespace();
+            if (text[index] === ']') {
+                index++;
+                return false;
+            }
+            while (true) {
+                if (value())
+                    return true;
+                whitespace();
+                if (text[index] === ']') {
+                    index++;
+                    return false;
+                }
+                if (text[index++] !== ',')
+                    throw new Error('invalid_json');
+            }
+        }
+        const token = /^(?:-?(?:0|[1-9]\d*)(?:\.\d+)?(?:[eE][+-]?\d+)?|true|false|null)/.exec(text.slice(index));
+        if (!token)
+            throw new Error('invalid_json');
+        index += token[0].length;
+        return false;
+    };
+    try {
+        const duplicate = value();
+        whitespace();
+        return duplicate || index !== text.length;
+    }
+    catch {
+        return true;
+    }
+}
+/** Diagnostic evidence from an unsupported report is inventoried but never importable. */
+export function unsupportedSourceDetails(text) {
+    const raw = JSON.parse(text);
+    const run = raw['run'] && typeof raw['run'] === 'object' ? raw['run'] : {};
+    const targetResult = target.safeParse(run['target']);
+    const safeTarget = targetResult.success ? scrubDeep(targetResult.data) : null;
+    const refutations = [];
+    if (Array.isArray(raw['findings']) && (raw['belowThresholdFindings'] === undefined || Array.isArray(raw['belowThresholdFindings']))) {
+        const all = [...raw['findings'], ...(raw['belowThresholdFindings'] ?? [])];
+        all.slice(0, 2000).forEach((rawFinding, i) => {
+            if (!rawFinding || typeof rawFinding !== 'object')
+                return;
+            const f = rawFinding;
+            const gate = f['gating'] && typeof f['gating'] === 'object' ? f['gating'] : {};
+            const verified = gate['verification'] && typeof gate['verification'] === 'object' ? gate['verification'] : {};
+            if (verified['verdict'] !== 'refuted')
+                return;
+            const normalized = normalizeVerificationEvidence(verified);
+            refutations.push({ ref: `f${String(i + 1).padStart(3, '0')}`, identity: typeof f['identity'] === 'string' ? scrubIdentifier(f['identity'], 64) : null,
+                model: normalized.model ?? null, note: normalized.note ?? null });
+        });
+    }
+    return { run_id: typeof run['id'] === 'string' && UUID.test(run['id']) ? run['id'] : null, repo: safeTarget?.repo ?? null, target: safeTarget, refutations };
+}
+/** Inspect decoded values too: JSON escapes must not conceal a credential. */
+export function requiresArtifactRedaction(value, path = []) {
+    if (typeof value === 'string') {
+        const location = path.join('.');
+        const identifier = /^(?:run\.roster\.\d+|reviews\.\d+)\.(?:model|role|provider)$/.test(location) ||
+            /^(?:findings|belowThresholdFindings)\.\d+\.gating\.verification\.model$/.test(location) || location === 'run.gating.verification_model';
+        const changed = (identifier ? scrubIdentifier(value, Number.MAX_SAFE_INTEGER) : scrubSecrets(value)) !== value;
+        return changed;
+    }
+    if (Array.isArray(value))
+        return value.some((item, i) => requiresArtifactRedaction(item, [...path, String(i)]));
+    if (value && typeof value === 'object') {
+        return Object.entries(value).some(([key, item]) => scrubSecrets(key) !== key ||
+            // The existing scrubber recognizes sensitive JSON assignments, including
+            // short values which are not independently token-shaped.
+            (/api[_-]?key|token|secret|password|passwd|private[_-]?key/i.test(key) &&
+                scrubSecrets(JSON.stringify({ [key]: item })) !== JSON.stringify({ [key]: item })) ||
+            requiresArtifactRedaction(item, [...path, key]));
+    }
+    return false;
+}
+//# sourceMappingURL=source.js.map

package/dist/telemetry/recovery/source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.js","sourceRoot":"","sources":["../../../src/telemetry/recovery/source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGvE,MAAM,CAAC,MAAM,IAAI,GAAG,4EAA4E,CAAC;AACjG,MAAM,CAAC,MAAM,MAAM,GAAG,gBAAgB,CAAC;AACvC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAC5G,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACnE,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AACtD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;AACxC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAClH,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;AACjE,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAChH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO;IAChE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC/D,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM;IACxD,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QAC7E,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;KACvE,CAAC,CAAC,WAAW,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtI,CAAC,CAAC;AACH,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;AACpF,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAChH,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACnF,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;IAC/F,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClI,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvI,CAAC,CAAC;AACH,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;IAC/D,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpG,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;IAC9H,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO;CACpI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC;AACzG,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,EAAE,MAAM;IACzG,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7J,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACvC,aAAa,EAAE,IAAI;IACnB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,mBAAmB,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC;IACrI,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,oBAAoB,CAAC,CAAC;QACpD,UAAU,EAAE,OAAO;QACnB,kBAAkB,EAAE,MAAM,CAAC,QAAQ,EAAE;QACrC,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;QAC1D,4EAA4E;QAC5E,4BAA4B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;KAC3E,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7D,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC7I,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO;IAC1F,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;IACjI,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;AACpF,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACpF,sBAAsB,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC7D,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE;CACpL,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,sBAAsB,EAAE,MAAM,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;AAElG,uFAAuF;AACvF,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,UAAU,CAAC;IACvD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAC5C,sBAAsB,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CACtE,CAAC,CAAC;AACH,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACnG,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,sBAAsB,EAAE,MAAM,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;AAMlG,qFAAqF;AACrF,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAAC,CAAC;IACxF,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;IACzF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAE,GAA+B,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAE,GAA+B,CAAC,UAAU,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;IAC/J,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,MAAM,OAAO,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,CAAC;IACvE,IAAI,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAQ,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAChJ,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,KAAK,SAAS;YAAE,OAAO;QAC1D,MAAM,UAAU,GAAG,6BAA6B,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACxE,WAAW,CAAC,IAAI,CAAC;YACf,GAAG,EAAE,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;YAC7C,QAAQ,EAAE,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACvG,KAAK,EAAE,UAAU,CAAC,KAAK,IAAI,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,IAAI,IAAI;SAC/D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,GAAG,yBAAyB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAChD,0EAA0E;IAC1E,yEAAyE;IACzE,qEAAqE;IACrE,IAAI,CAAC,MAAM;QAAE,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAClD,0EAA0E;IAC1E,2EAA2E;IAC3E,wEAAwE;IACxE,IAAI,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAA2E,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IACrJ,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAA8B,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;AAC3F,CAAC;AAED,0EAA0E;AAC1E,SAAS,qBAAqB,CAAC,IAAY;IACzC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,UAAU,GAAG,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,GAAW,EAAE;QAC1B,MAAM,KAAK,GAAG,KAAK,EAAE,CAAC;QACtB,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBAAC,KAAK,IAAI,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACnD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,GAAY,EAAE;QAC1B,UAAU,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,MAAM,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QACpD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;YACxB,KAAK,EAAE,CAAC;YAAC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAAC,UAAU,EAAE,CAAC;YACtD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,KAAK,EAAE,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;YACnD,OAAO,IAAI,EAAE,CAAC;gBACZ,UAAU,EAAE,CAAC;gBAAC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;gBAAC,UAAU,EAAE,CAAC;gBAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,GAAG;oBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;gBAC7G,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE;oBAAE,OAAO,IAAI,CAAC;gBAC1C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAAC,UAAU,EAAE,CAAC;gBAC5B,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;oBAAC,KAAK,EAAE,CAAC;oBAAC,OAAO,KAAK,CAAC;gBAAC,CAAC;gBACnD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,GAAG;oBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;YACxB,KAAK,EAAE,CAAC;YAAC,UAAU,EAAE,CAAC;YAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,KAAK,EAAE,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;YAC1E,OAAO,IAAI,EAAE,CAAC;gBAAC,IAAI,KAAK,EAAE;oBAAE,OAAO,IAAI,CAAC;gBAAC,UAAU,EAAE,CAAC;gBAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;oBAAC,KAAK,EAAE,CAAC;oBAAC,OAAO,KAAK,CAAC;gBAAC,CAAC;gBAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,GAAG;oBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;YAAC,CAAC;QAC1K,CAAC;QACD,MAAM,KAAK,GAAG,kEAAkE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACzG,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IACtF,CAAC,CAAC;IACF,IAAI,CAAC;QAAC,MAAM,SAAS,GAAG,KAAK,EAAE,CAAC;QAAC,UAAU,EAAE,CAAC;QAAC,OAAO,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACpH,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;IACxD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;IACtG,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,CAAC;QACpI,MAAM,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,EAAE,GAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,EAAE,CAAe,CAAC,CAAC;QAC1F,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,UAAmB,EAAE,CAAC,EAAE,EAAE;YACpD,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ;gBAAE,OAAO;YAC1D,MAAM,CAAC,GAAG,UAAqC,CAAC;YAChD,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1G,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;YACzI,IAAI,QAAQ,CAAC,SAAS,CAAC,KAAK,SAAS;gBAAE,OAAO;YAC9C,MAAM,UAAU,GAAG,6BAA6B,CAAC,QAAQ,CAAC,CAAC;YAC3D,WAAW,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;gBACnJ,KAAK,EAAE,UAAU,CAAC,KAAK,IAAI,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,IAAI,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;AAC/J,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,yBAAyB,CAAC,KAAc,EAAE,OAAiB,EAAE;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,UAAU,GAAG,8DAA8D,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC9F,yEAAyE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,+BAA+B,CAAC;QAC3I,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC;QAC/G,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChH,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,GAAG;YAC1E,yEAAyE;YACzE,yDAAyD;YACzD,CAAC,2DAA2D,CAAC,IAAI,CAAC,GAAG,CAAC;gBACpE,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACpF,yBAAyB,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}