@capybearista/opencode-adversarial-review 1.0.0 → 2.0.1

package/dist/index.js

@@ -1,176 +1,430 @@
+import { constants } from "node:fs";
+import { lstat, open, readFile, unlink, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { Plugin } from "@opencode/plugin";
+import { ADVERSARIAL_REVIEWER_SYSTEM_PROMPT, REVIEWER_SYSTEM_PROMPT } from "./prompt.js";
 const PLUGIN_ID = "capybearista.opencode-adversarial-review";
-const ADVERSARIAL_REVIEW_PROMPT = `<role>
-You are an adversarial code review agent.
-Your job is to break confidence in the change, not to validate it.
-</role>
-
-<task>
-Review the provided repository context as if you are trying to find the strongest reasons this change should not ship yet.
-The user's focus and target arguments are in the message below.
-
-If the arguments include \`--scope auto\`, review using the broadest context the provided information supports (default).
-If \`--scope working-tree\`, review staged and unstaged changes against HEAD.
-If \`--scope branch\`, collect the diff for all changes on the current branch. Determine the fork point by running \`git merge-base HEAD <upstream>\` where \`<upstream>\` is the tracking branch of HEAD, or \`origin/main\`, or \`main\` (in order of preference). Then run \`git diff <fork>...HEAD\`.
-If \`--base <ref>\` is provided without \`--scope\`, treat it as \`--scope branch --base <ref>\`.
-If \`--base <ref>\` is provided alongside \`--scope branch\`, use that ref as the base in \`git diff <ref>...HEAD\`.
-</task>
-
-<operating_stance>
-Default to skepticism.
-Assume the change can fail in subtle, high-cost, or user-visible ways until the evidence says otherwise.
-Do not give credit for good intent, partial fixes, or likely follow-up work.
-If something only works on the happy path, treat that as a real weakness.
-</operating_stance>
-
-<attack_surface>
-Prioritize the kinds of failures that are expensive, dangerous, or hard to detect:
-- auth, permissions, tenant isolation, and trust boundaries
-- data loss, corruption, duplication, and irreversible state changes
-- rollback safety, retries, partial failure, and idempotency gaps
-- race conditions, ordering assumptions, stale state, and re-entrancy
-- empty-state, null, timeout, and degraded dependency behavior
-- version skew, schema drift, migration hazards, and compatibility regressions
-- observability gaps that would hide failure or make recovery harder
-</attack_surface>
-
-<review_method>
-Actively try to disprove the change.
-Look for violated invariants, missing guards, unhandled failure paths, and assumptions that stop being true under stress.
-Trace how bad inputs, retries, concurrent actions, or partially completed operations move through the code.
-If the user supplied a focus area, weight it heavily, but still report any other material issue you can defend.
-If the diff context is limited (only stat, no full diff), use the available tools (read, grep, glob) to inspect specific files before finalizing.
-</review_method>
-
-<context_type>
-The diff context either contains a full inline diff (for changes to 1-2 files) or a summary stat only (for larger changes). If you see a stat-only section without a full inline diff, use your tools to inspect the changed files directly. If you see a full inline diff, use it as primary evidence and supplement with tools as needed.
-</context_type>
-
-<finding_bar>
-Report only material findings.
-Do not include style feedback, naming feedback, low-value cleanup, or speculative concerns without evidence.
-A finding should answer:
-1. What can go wrong?
-2. Why is this code path vulnerable?
-3. What is the likely impact?
-4. What concrete change would reduce the risk?
-</finding_bar>
-
-<structured_output_contract>
-Output valid JSON matching this schema:
-
-{
-  "verdict": "approve" | "needs-attention",
-  "summary": "terse ship/no-ship assessment",
-  "findings": [
+// Hex is required; plugin-defined agents do not resolve theme color names.
+const REVIEWER_COLOR = "#f59e0b";
+// Both command templates version together. The integer `managed_version`
+// frontmatter stamp is the ownership marker: keeping it means the plugin
+// refreshes the file from the bundled template on `/reload` or restart,
+// removing it takes ownership and the file is preserved with a warning.
+// Unknown or newer stamps are preserved too, so a downgrade never overwrites a
+// newer plugin's file.
+export const CURRENT_TEMPLATE_VERSION = 2;
+// Every version this build knows how to refresh in place, oldest first.
+export const KNOWN_TEMPLATE_VERSIONS = [1, 2];
+// O_NOFOLLOW closes the lstat-to-read and lstat-to-write races on the refresh
+// path: a symlink swapped in after the check makes the next operation fail
+// with ELOOP instead of following or truncating the link target. O_CREAT
+// tolerates the file disappearing between the EEXIST check and the refresh.
+// Platforms without O_NOFOLLOW fall back to the lstat check and setup warns.
+const OVERWRITE_FLAGS = constants.O_WRONLY | constants.O_CREAT | constants.O_TRUNC | (constants.O_NOFOLLOW ?? 0);
+const READ_FLAGS = constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0);
+function doNotInvokeDescription(kind) {
+    return `Do not invoke this agent directly. It is the ${kind} code-review agent, invocable only by the user.`;
+}
+// One entry per reviewer. Setup loops both the install and the registration so
+// every reviewer shares one set of mechanics and differs only in identity,
+// command file, and system prompt.
+const REVIEWERS = [
+    {
+        agentId: "adversarial-reviewer",
+        commandFilename: "adversarial-review.md",
+        description: doNotInvokeDescription("adversarial"),
+        systemPrompt: ADVERSARIAL_REVIEWER_SYSTEM_PROMPT,
+    },
     {
-      "severity": "critical" | "high" | "medium" | "low",
-      "title": "short finding title",
-      "body": "detailed explanation",
-      "file": "relative file path",
-      "line_start": 1,
-      "line_end": 1,
-      "confidence": 0.0-1.0,
-      "recommendation": "concrete fix suggestion"
-    }
-  ],
-  "next_steps": ["actionable next step"]
+        agentId: "constructive-reviewer",
+        commandFilename: "constructive-review.md",
+        description: doNotInvokeDescription("constructive"),
+        systemPrompt: REVIEWER_SYSTEM_PROMPT,
+    },
+];
+const REVIEWER_AGENT_ID_LIST = REVIEWERS.map((reviewer) => `"${reviewer.agentId}"`).join(" and ");
+// Ordered for the host's last-match-wins evaluation: defaults denied first,
+// read-only allows next, and the sensitive-read denies after the read allow.
+const REVIEWER_PERMISSIONS = [
+    { action: "*", resource: "*", effect: "deny" },
+    { action: "subagent", resource: "*", effect: "deny" },
+    { action: "edit", resource: "*", effect: "deny" },
+    { action: "write", resource: "*", effect: "deny" },
+    { action: "patch", resource: "*", effect: "deny" },
+    { action: "webfetch", resource: "*", effect: "deny" },
+    { action: "websearch", resource: "*", effect: "deny" },
+    { action: "question", resource: "*", effect: "deny" },
+    { action: "skill", resource: "*", effect: "deny" },
+    { action: "external_directory", resource: "*", effect: "deny" },
+    { action: "shell", resource: "*", effect: "deny" },
+    { action: "read", resource: "*", effect: "allow" },
+    { action: "glob", resource: "*", effect: "allow" },
+    { action: "grep", resource: "*", effect: "allow" },
+    { action: "shell", resource: "git blame*", effect: "allow" },
+    { action: "shell", resource: "git branch --show-current*", effect: "allow" },
+    { action: "shell", resource: "git diff*", effect: "allow" },
+    { action: "shell", resource: "git log*", effect: "allow" },
+    { action: "shell", resource: "git ls-files*", effect: "allow" },
+    { action: "shell", resource: "git merge-base*", effect: "allow" },
+    { action: "shell", resource: "git remote -v*", effect: "allow" },
+    { action: "shell", resource: "git rev-list*", effect: "allow" },
+    { action: "shell", resource: "git rev-parse*", effect: "allow" },
+    { action: "shell", resource: "git show*", effect: "allow" },
+    { action: "shell", resource: "git stash list*", effect: "allow" },
+    { action: "shell", resource: "git stash show*", effect: "allow" },
+    { action: "shell", resource: "git status*", effect: "allow" },
+    // `gh` is allowlisted to the read-only PR surface only, plus the
+    // `gh auth status*` diagnostic. Order is load-bearing: evaluation is
+    // last-match-wins, so the `gh *` catch-all deny must come before the specific
+    // allows (after them it would override them), and the specific allows stay
+    // ordered most-specific-last. The token-printing forms of the diagnostic are
+    // denied after its allow: `--show-token` and its `-t` short form would print
+    // the stored credential, while the bare diagnostic stays allowed.
+    { action: "shell", resource: "gh *", effect: "deny" },
+    { action: "shell", resource: "gh pr view*", effect: "allow" },
+    { action: "shell", resource: "gh pr diff*", effect: "allow" },
+    { action: "shell", resource: "gh auth status*", effect: "allow" },
+    { action: "shell", resource: "gh auth status*--show-token*", effect: "deny" },
+    { action: "shell", resource: "gh auth status*-t*", effect: "deny" },
+    // Denies below must stay after the allows: `--ext-diff` and `--textconv`
+    // execute configured diff drivers, and `--output` writes the rendered diff to
+    // an arbitrary file.
+    { action: "shell", resource: "git diff*--ext-diff*", effect: "deny" },
+    { action: "shell", resource: "git diff*--textconv*", effect: "deny" },
+    { action: "shell", resource: "git diff*--output*", effect: "deny" },
+    { action: "shell", resource: "git show*--ext-diff*", effect: "deny" },
+    { action: "shell", resource: "git show*--textconv*", effect: "deny" },
+    { action: "shell", resource: "git show*--output*", effect: "deny" },
+    { action: "shell", resource: "git log*--ext-diff*", effect: "deny" },
+    { action: "shell", resource: "git log*--textconv*", effect: "deny" },
+    { action: "shell", resource: "git log*--output*", effect: "deny" },
+    { action: "shell", resource: "git stash show*--ext-diff*", effect: "deny" },
+    { action: "shell", resource: "git stash show*--textconv*", effect: "deny" },
+    { action: "shell", resource: "git stash show*--output*", effect: "deny" },
+    // `git diff --no-index` reads arbitrary paths and `git show <rev>:<path>`
+    // prints a blob directly, bypassing the read/glob/grep `.env` denies. These
+    // denies must stay after the `git diff*` / `git show*` allows. Only the
+    // colon-path `.env` / `.env.*` leaf forms are covered; other secret files
+    // such as `*.pem` remain readable and are a known limitation.
+    { action: "shell", resource: "git diff*--no-index*", effect: "deny" },
+    { action: "shell", resource: "git show*:*.env", effect: "deny" },
+    { action: "shell", resource: "git show*:*.env.*", effect: "deny" },
+    // `.env.example` is not secret material, so it stays readable at a revision
+    // like it does through read/glob/grep; this allow must stay after the two
+    // denies above (last-match-wins).
+    { action: "shell", resource: "git show*:*.env.example", effect: "allow" },
+    // Order re-assertion: the allow above is full-string anchored, so it also
+    // matches any command ending in `.env.example` and overrides every earlier
+    // rule that command matches. The `git show` engine-flag denies and the
+    // secret-then-more-args denies are therefore repeated after it: the engine
+    // patterns must outrank the trailing allow for `git show --output=... /
+    // --ext-diff ... <rev>:.env.example`, and the `.env` patterns must catch a
+    // secret colon-path followed by any further argument (multi-object exfil and
+    // trailing flags such as `git show HEAD:.env --stat`). These duplicates are
+    // intentional; the earlier copies sit before the allow and lose to it.
+    //
+    // Pattern shape notes: the inner `*` in `:*.env` mirrors the original
+    // `git show*:*.env` deny so directory-prefixed secrets are covered, not just
+    // a leaf at the repository root. The `* *` tail on the `.env.*` deny is
+    // deliberate: the host folds a trailing `" .*"` pattern into an optional
+    // argument group, so a single trailing ` *` would also match a bare
+    // `.env.example` read; the doubled pair makes the following argument required.
+    { action: "shell", resource: "git show*--ext-diff*", effect: "deny" },
+    { action: "shell", resource: "git show*--textconv*", effect: "deny" },
+    { action: "shell", resource: "git show*--output*", effect: "deny" },
+    { action: "shell", resource: "git show*:*.env *", effect: "deny" },
+    { action: "shell", resource: "git show*:*.env.* * *", effect: "deny" },
+    { action: "read", resource: "*.env", effect: "deny" },
+    { action: "read", resource: "*.env.*", effect: "deny" },
+    { action: "read", resource: "*.env.example", effect: "allow" },
+    { action: "glob", resource: "*.env", effect: "deny" },
+    { action: "glob", resource: "*.env.*", effect: "deny" },
+    { action: "glob", resource: "*.env.example", effect: "allow" },
+    { action: "grep", resource: "*.env", effect: "deny" },
+    { action: "grep", resource: "*.env.*", effect: "deny" },
+    { action: "grep", resource: "*.env.example", effect: "allow" },
+];
+function hasRule(rules, rule) {
+    return rules.some((existing) => existing.action === rule.action &&
+        existing.resource === rule.resource &&
+        existing.effect === rule.effect);
+}
+// Rules are merged additively: host-defined rules are preserved, exact
+// duplicates of an inherited host rule are skipped, and pre-existing host
+// denies are re-appended after the plugin rules. Evaluation is last-match-wins,
+// so a host deny must outrank any plugin allow for the same resource.
+// Duplicates inside `rules` itself are kept on purpose: a later copy re-asserts
+// a rule that an intermediate allow would otherwise override.
+function applyRules(agent, rules) {
+    const inherited = Array.isArray(agent.permissions) ? agent.permissions : [];
+    const hostDenies = inherited.filter((rule) => rule.effect === "deny");
+    const merged = inherited.filter((rule) => rule.effect !== "deny");
+    for (const rule of rules) {
+        if (!hasRule(inherited, rule))
+            merged.push(rule);
+    }
+    agent.permissions = [...merged, ...hostDenies];
+}
+function configureReviewerAgent(editor, reviewer) {
+    const existing = editor.get(reviewer.agentId);
+    editor.update(reviewer.agentId, (agent) => {
+        agent.mode = "subagent";
+        agent.hidden = true;
+        agent.description = reviewer.description;
+        agent.system = existing?.system ?? reviewer.systemPrompt;
+        agent.color = existing?.color ?? REVIEWER_COLOR;
+        // The reviewer runs unattended, so inherited ask rules are dropped instead of
+        // stalling on a user prompt; the explicit rules below keep it sandboxed.
+        const inherited = Array.isArray(agent.permissions) ? agent.permissions : [];
+        agent.permissions = inherited.filter((rule) => rule.effect !== "ask");
+        applyRules(agent, REVIEWER_PERMISSIONS);
+    });
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+async function disposeRegistrations(disposers, logWarn) {
+    const results = await Promise.allSettled(disposers.map(async (dispose) => dispose()));
+    for (const result of results) {
+        if (result.status === "rejected") {
+            logWarn(`[${PLUGIN_ID}] Failed to dispose an agent registration: ${errorMessage(result.reason)}. The host may retain the registration until plugins reload.`);
+        }
+    }
+}
+// @opencode/plugin 2.0.2 exposes no logging domain on the plugin context, so
+// console.error / console.warn / console.info are the fallback. Hosts that add
+// an `app.log` sink receive the same messages as structured entries; wording
+// never changes between the two paths. The fallback console method is captured
+// once per createHostLogger call, so replace console methods before setup.
+function createHostLogger(ctx, level) {
+    const fallbacks = {
+        error: console.error,
+        warn: console.warn,
+        info: console.info,
+    };
+    const fallback = fallbacks[level];
+    const sink = ctx.app?.log;
+    if (typeof sink !== "function") {
+        return (message) => fallback(message);
+    }
+    const hostLog = sink;
+    return (message) => {
+        try {
+            void Promise.resolve(hostLog.call(ctx.app, { service: PLUGIN_ID, level, message })).catch(() => fallback(message));
+        }
+        catch {
+            fallback(message);
+        }
+    };
+}
+function commandFilePath(commandFilename) {
+    const override = process.env.OPENCODE_CONFIG_DIR?.trim();
+    const configDirectory = override ? override : join(homedir(), ".config", "opencode");
+    return join(configDirectory, "commands", commandFilename);
+}
+export function managedVersionOf(markdown) {
+    const value = frontmatterFieldOf(markdown, "managed_version");
+    if (value === undefined || !/^[0-9]+$/.test(value))
+        return undefined;
+    const version = Number(value);
+    return version > 0 ? version : undefined;
+}
+function frontmatterFieldOf(markdown, field) {
+    const block = markdown.match(/^---\r?\n([\s\S]*?)\r?\n---/);
+    if (!block?.[1])
+        return undefined;
+    for (const line of block[1].split("\n")) {
+        const separator = line.indexOf(":");
+        if (separator <= 0 || line.slice(0, separator).trim() !== field)
+            continue;
+        return line.slice(separator + 1).trim();
+    }
+    return undefined;
+}
+export function isManagedUpgrade(installedVersion, knownVersions, currentVersion) {
+    return knownVersions.includes(installedVersion) && installedVersion <= currentVersion;
+}
+// On platforms without `constants.O_NOFOLLOW` (for example Windows) the refresh
+// read and write keep the earlier `lstat` check but cannot close the symlink
+// swap race around it. Surface the degradation once instead of failing loud.
+function warnIfNoFollowUnavailable(logWarn, noFollowFlag) {
+    if (noFollowFlag === undefined) {
+        logWarn(`[${PLUGIN_ID}] O_NOFOLLOW is unavailable on this platform; managed command file refreshes keep the lstat check on the leaf file but cannot close the symlink-swap race around it.`);
+    }
+}
+function warnExistingFile(commandPath, logWarn) {
+    logWarn(`[${PLUGIN_ID}] ${commandPath} already exists; leaving it untouched. It may be stale or customized: edit it in place, delete it to reinstall the bundled template, or delete it after removing the plugin to uninstall.`);
+}
+// `wx` makes the first write atomic and refuses to replace anything already at
+// the path; the EEXIST path decides between a managed refresh (a known
+// `managed_version` stamp no newer than the shipped template) and a preserve-
+// and-warn for user-owned, unknown, or newer content. Parent-directory trust:
+// the containing `commands/` directory is assumed trustworthy. A symlinked
+// parent could redirect the write outside the config directory; the
+// no-symlink-following guarantee covers the leaf file only.
+async function installCommandFile(reviewer, logWarn, logInfo) {
+    const commandPath = commandFilePath(reviewer.commandFilename);
+    const commandName = `/${reviewer.commandFilename.replace(/\.md$/, "")}`;
+    const assetUrl = new URL(`../commands/${reviewer.commandFilename}`, import.meta.url);
+    let template;
+    try {
+        template = await readFile(assetUrl, "utf8");
+    }
+    catch (error) {
+        throw new Error(`Unable to read the bundled command template at ${assetUrl.pathname}: ${errorMessage(error)}. Neither reviewer agent was registered.`, { cause: error });
+    }
+    const installFailure = (error) => new Error(`Unable to install the ${commandName} command at ${commandPath}: ${errorMessage(error)}. Create the parent directory and grant write access, then run /reload. Neither reviewer agent was registered.`, { cause: error });
+    try {
+        await writeFile(commandPath, template, { flag: "wx" });
+        return;
+    }
+    catch (error) {
+        if (error.code !== "EEXIST")
+            throw installFailure(error);
+    }
+    // lstat, not stat: a symlinked leaf is never followed, read, or truncated.
+    const stats = await lstat(commandPath).catch((error) => {
+        throw installFailure(error);
+    });
+    if (stats.isSymbolicLink()) {
+        warnExistingFile(commandPath, logWarn);
+        return;
+    }
+    // `open`, not `readFile`: READ_FLAGS carries O_NOFOLLOW so the symlink check
+    // is atomic with the read. ELOOP means a symlink was swapped in after lstat.
+    let handle;
+    let installed;
+    let closeFailure;
+    try {
+        handle = await open(commandPath, READ_FLAGS);
+        installed = await handle.readFile("utf8");
+    }
+    catch (error) {
+        if (error.code === "ELOOP") {
+            warnExistingFile(commandPath, logWarn);
+            return;
+        }
+        throw installFailure(error);
+    }
+    finally {
+        // A close failure must not replace an in-flight read failure; it is
+        // captured here and re-raised below only when the read succeeded.
+        try {
+            await handle?.close();
+        }
+        catch (error) {
+            closeFailure = error;
+        }
+    }
+    // Fail-closed on purpose: a close failure aborts setup rather than continuing silently.
+    if (closeFailure !== undefined)
+        throw installFailure(closeFailure);
+    const installedVersion = managedVersionOf(installed);
+    if (installedVersion === undefined ||
+        !isManagedUpgrade(installedVersion, KNOWN_TEMPLATE_VERSIONS, CURRENT_TEMPLATE_VERSION)) {
+        warnExistingFile(commandPath, logWarn);
+        return;
+    }
+    // An explicit open separates a failed open (nothing was truncated, so the
+    // intact file must survive) from a failed handle write after O_TRUNC has
+    // already run (a truncated or partial file must be unlinked so later setups
+    // do not preserve it forever). ELOOP can only come from this open; writes to
+    // an already-open handle never re-resolve the path.
+    const overwrite = await open(commandPath, OVERWRITE_FLAGS).catch((error) => {
+        if (error.code === "ELOOP") {
+            warnExistingFile(commandPath, logWarn);
+            return undefined;
+        }
+        throw installFailure(error);
+    });
+    if (overwrite === undefined)
+        return;
+    try {
+        await overwrite.writeFile(template);
+    }
+    catch (error) {
+        // Best-effort unlink returns the path to the fresh `wx` install; on a
+        // symlink leaf it removes only the link, never the target.
+        await unlink(commandPath).catch(() => { });
+        throw installFailure(error);
+    }
+    finally {
+        // Matching fsPromises.writeFile, a close failure after a successful write
+        // is not an install failure.
+        await overwrite.close().catch(() => { });
+    }
+    logInfo(`[${PLUGIN_ID}] Updating the managed command file at ${commandPath} from the bundled template (managed_version ${installedVersion}).`);
+}
+// A pre-rename build installed the second reviewer's command as `review.md`
+// with `agent: reviewer`, an id this build no longer registers; the host still
+// discovers that leftover as a broken /review command. Only that exact
+// filename is inspected, and it is deleted only when it is provably ours: the
+// old agent id plus a managed_version stamp this build knows. A missing or
+// unknown stamp could be a user's own file, so it is preserved with a loud
+// warning naming the file, the broken-command risk, and the manual fix.
+const PRE_RENAME_COMMAND_FILENAME = "review.md";
+const PRE_RENAME_REVIEWER_AGENT_ID = "reviewer";
+async function removeStalePreRenameCommand(logWarn, logInfo) {
+    const stalePath = commandFilePath(PRE_RENAME_COMMAND_FILENAME);
+    let contents;
+    try {
+        contents = await readFile(stalePath, "utf8");
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return;
+        logWarn(`[${PLUGIN_ID}] Unable to inspect ${stalePath} for a stale pre-rename /review command: ${errorMessage(error)}. If it is not yours, delete it manually so the host stops discovering a broken /review command.`);
+        return;
+    }
+    if (frontmatterFieldOf(contents, "agent") !== PRE_RENAME_REVIEWER_AGENT_ID)
+        return;
+    const version = managedVersionOf(contents);
+    if (version === undefined || !KNOWN_TEMPLATE_VERSIONS.includes(version)) {
+        logWarn(`[${PLUGIN_ID}] Found ${stalePath}, a leftover pre-rename /review command for the removed "${PRE_RENAME_REVIEWER_AGENT_ID}" agent without a managed_version stamp this build recognizes; leaving it untouched. That agent no longer exists, so /review is broken: delete that file manually to clear it.`);
+        return;
+    }
+    try {
+        await unlink(stalePath);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT") {
+            logWarn(`[${PLUGIN_ID}] Failed to remove the stale pre-rename command file at ${stalePath}: ${errorMessage(error)}. The "${PRE_RENAME_REVIEWER_AGENT_ID}" agent no longer exists, so /review is broken until you delete that file manually.`);
+        }
+        return;
+    }
+    logInfo(`[${PLUGIN_ID}] Removed the stale pre-rename command file at ${stalePath} (managed_version ${version}); it registered /review for the removed "${PRE_RENAME_REVIEWER_AGENT_ID}" agent.`);
 }
-
-Use \`needs-attention\` if there is any material risk worth blocking on.
-Use \`approve\` only if you cannot support any substantive adversarial finding from the provided context.
-Keep the output compact and specific.
-</structured_output_contract>
-
-<grounding_rules>
-Be aggressive, but stay grounded.
-Every finding must be defensible from the provided repository context or tool outputs.
-Do not invent files, lines, code paths, incidents, attack chains, or runtime behavior you cannot support.
-If a conclusion depends on an inference, state that explicitly in the finding body and keep the confidence honest.
-</grounding_rules>
-
-<calibration_rules>
-Prefer one strong finding over several weak ones.
-Do not dilute serious issues with filler.
-If the change looks safe, say so directly and return no findings.
-</calibration_rules>
-
-<final_check>
-Before finalizing, check that each finding is:
-- adversarial rather than stylistic
-- tied to a concrete code location
-- plausible under a real failure scenario
-- actionable for an engineer fixing the issue
-</final_check>`;
-const COMMAND_TEMPLATE = `## Adversarial Review
-
-Arguments: $ARGUMENTS
-Target: code changes
-
-## Git Context
-
-!\`printf "=== Branch ===\\n" && git branch --show-current\`
-!\`printf "=== Status ===\\n" && git status --short --untracked-files=all\`
-!\`printf "=== Recent Commits ===\\n" && git log --oneline -3\`
-!\`printf "=== Changed Files ===\\n" && git diff HEAD --name-only\`
-!\`printf "=== Untracked File Contents ===\\n"; git -c core.quotepath=false ls-files --others --exclude-standard | head -5 | while IFS= read -r f; do printf "--- %s ---\\n" "$f" && cat -- "$f" 2>/dev/null | head -c 16384 && printf "\\n"; done\`
-!\`FILES=\$(git diff HEAD --name-only | wc -l | tr -d ' '); if [ "\$FILES" -gt 0 ] && [ "\$FILES" -le 5 ]; then printf "=== Full Diff ===\\n" && git diff HEAD; else printf "=== Diff Stat ===\\n" && git diff HEAD --stat; fi\``;
-const AGENT_NAME = "adversarial-review";
-const CMD_NAME = "adversarial-review";
-export const AdversarialReviewPlugin = async () => {
-    return {
-        config: async (cfg) => {
+export default Plugin.define({
+    id: PLUGIN_ID,
+    async setup(ctx) {
+        const disposers = [];
+        const logWarn = createHostLogger(ctx, "warn");
+        const logInfo = createHostLogger(ctx, "info");
+        if (typeof ctx.agent?.transform !== "function") {
+            throw new Error(`[${PLUGIN_ID}] agent.transform is unavailable; the ${REVIEWER_AGENT_ID_LIST} agents cannot be registered, so setup was aborted`);
+        }
+        warnIfNoFollowUnavailable(logWarn, constants.O_NOFOLLOW);
+        // Load-bearing split: every command file must install before any agent registers.
+        for (const reviewer of REVIEWERS) {
+            await installCommandFile(reviewer, logWarn, logInfo);
+        }
+        await removeStalePreRenameCommand(logWarn, logInfo);
+        for (const reviewer of REVIEWERS) {
             try {
-                cfg.agent ??= {};
-                cfg.agent[AGENT_NAME] ??= {};
-                const agent = cfg.agent[AGENT_NAME];
-                agent.description ??=
-                    "Adversarial code review — challenges implementation approach and design choices";
-                agent.mode ??= "subagent";
-                agent.model ??= "openai/gpt-5.4";
-                agent.temperature ??= 0.1;
-                agent.color ??= "warning";
-                agent.permission ??= {};
-                const agentPerm = agent.permission;
-                agentPerm.edit = "deny";
-                agentPerm.bash ??= {
-                    "git blame*": "allow",
-                    "git branch": "allow",
-                    "git diff*": "allow",
-                    "git log*": "allow",
-                    "git ls-files*": "allow",
-                    "git merge-base*": "allow",
-                    "git rev-list*": "allow",
-                    "git rev-parse*": "allow",
-                    "git show*": "allow",
-                    "git stash list*": "allow",
-                    "git stash show*": "allow",
-                    "git status*": "allow",
-                    "*": "deny",
-                };
-                agentPerm.read ??= "allow";
-                agentPerm.glob ??= "allow";
-                agentPerm.grep ??= "allow";
-                agentPerm.webfetch ??= "deny";
-                agentPerm.websearch ??= "deny";
-                agent.prompt ??= ADVERSARIAL_REVIEW_PROMPT;
-                cfg.command ??= {};
-                cfg.command[CMD_NAME] ??= {};
-                const cmd = cfg.command[CMD_NAME];
-                cmd.description ??= "Run an adversarial code review that challenges the implementation";
-                cmd.argumentHint ??= "[--base <ref>] [--scope auto|working-tree|branch] [focus ...]";
-                cmd.agent ??= AGENT_NAME;
-                cmd.subtask ??= true;
-                cmd.template ??= COMMAND_TEMPLATE;
+                const registration = await ctx.agent.transform((editor) => {
+                    configureReviewerAgent(editor, reviewer);
+                });
+                disposers.push(() => registration.dispose());
             }
-            catch (err) {
-                console.error(`[${PLUGIN_ID}] Failed to register agent and command:`, err instanceof Error ? err.message : String(err));
-                throw err;
+            catch (error) {
+                // Registration is all-or-nothing: dispose whatever registered before the
+                // failure so a failed setup never leaves a half-registered reviewer pair.
+                await disposeRegistrations(disposers, logWarn);
+                throw error;
             }
-        },
-    };
-};
-export default {
-    id: PLUGIN_ID,
-    server: AdversarialReviewPlugin,
-};
+        }
+        return () => disposeRegistrations(disposers, logWarn);
+    },
+});
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,MAAM,SAAS,GAAG,0CAA0C,CAAC;AAE7D,MAAM,yBAAyB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAqGnB,CAAC;AAEhB,MAAM,gBAAgB,GAAG;;;;;;;;;;;;iOAYwM,CAAC;AAElO,MAAM,UAAU,GAAG,oBAAoB,CAAC;AACxC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;AAEtC,MAAM,CAAC,MAAM,uBAAuB,GAAW,KAAK,IAAI,EAAE;IACxD,OAAO;QACL,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACpB,IAAI,CAAC;gBACH,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC;gBACjB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBAE7B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACpC,KAAK,CAAC,WAAW;oBACf,iFAAiF,CAAC;gBACpF,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC;gBAC1B,KAAK,CAAC,KAAK,KAAK,gBAAgB,CAAC;gBACjC,KAAK,CAAC,WAAW,KAAK,GAAG,CAAC;gBAC1B,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC;gBACzB,KAAa,CAAC,UAAU,KAAK,EAAE,CAAC;gBACjC,MAAM,SAAS,GAAI,KAAa,CAAC,UAAU,CAAC;gBAC5C,SAAS,CAAC,IAAI,GAAG,MAAM,CAAC;gBACxB,SAAS,CAAC,IAAI,KAAK;oBACjB,YAAY,EAAE,OAAO;oBACrB,YAAY,EAAE,OAAO;oBACrB,WAAW,EAAE,OAAO;oBACpB,UAAU,EAAE,OAAO;oBACnB,eAAe,EAAE,OAAO;oBACxB,iBAAiB,EAAE,OAAO;oBAC1B,eAAe,EAAE,OAAO;oBACxB,gBAAgB,EAAE,OAAO;oBACzB,WAAW,EAAE,OAAO;oBACpB,iBAAiB,EAAE,OAAO;oBAC1B,iBAAiB,EAAE,OAAO;oBAC1B,aAAa,EAAE,OAAO;oBACtB,GAAG,EAAE,MAAM;iBACZ,CAAC;gBACF,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC;gBAC3B,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC;gBAC3B,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC;gBAC3B,SAAS,CAAC,QAAQ,KAAK,MAAM,CAAC;gBAC9B,SAAS,CAAC,SAAS,KAAK,MAAM,CAAC;gBAC/B,KAAK,CAAC,MAAM,KAAK,yBAAyB,CAAC;gBAE3C,GAAG,CAAC,OAAO,KAAK,EAAE,CAAC;gBACnB,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAS,CAAC;gBACpC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAQ,CAAC;gBACzC,GAAG,CAAC,WAAW,KAAK,mEAAmE,CAAC;gBACxF,GAAG,CAAC,YAAY,KAAK,+DAA+D,CAAC;gBACrF,GAAG,CAAC,KAAK,KAAK,UAAU,CAAC;gBACzB,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC;gBACrB,GAAG,CAAC,QAAQ,KAAK,gBAAgB,CAAC;YACpC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CACX,IAAI,SAAS,yCAAyC,EACtD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;gBACF,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe;IACb,EAAE,EAAE,SAAS;IACb,MAAM,EAAE,uBAAuB;CAChC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,kCAAkC,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAEzF,MAAM,SAAS,GAAG,0CAA0C,CAAC;AAC7D,2EAA2E;AAC3E,MAAM,cAAc,GAAG,SAAS,CAAC;AAEjC,yEAAyE;AACzE,yEAAyE;AACzE,wEAAwE;AACxE,wEAAwE;AACxE,+EAA+E;AAC/E,uBAAuB;AACvB,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAC1C,wEAAwE;AACxE,MAAM,CAAC,MAAM,uBAAuB,GAAsB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACjE,8EAA8E;AAC9E,2EAA2E;AAC3E,yEAAyE;AACzE,4EAA4E;AAC5E,6EAA6E;AAC7E,MAAM,eAAe,GACnB,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;AAC3F,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;AASpE,SAAS,sBAAsB,CAAC,IAAY;IAC1C,OAAO,gDAAgD,IAAI,iDAAiD,CAAC;AAC/G,CAAC;AAED,+EAA+E;AAC/E,2EAA2E;AAC3E,mCAAmC;AACnC,MAAM,SAAS,GAA8B;IAC3C;QACE,OAAO,EAAE,sBAAsB;QAC/B,eAAe,EAAE,uBAAuB;QACxC,WAAW,EAAE,sBAAsB,CAAC,aAAa,CAAC;QAClD,YAAY,EAAE,kCAAkC;KACjD;IACD;QACE,OAAO,EAAE,uBAAuB;QAChC,eAAe,EAAE,wBAAwB;QACzC,WAAW,EAAE,sBAAsB,CAAC,cAAc,CAAC;QACnD,YAAY,EAAE,sBAAsB;KACrC;CACF,CAAC;AAEF,MAAM,sBAAsB,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAOlG,4EAA4E;AAC5E,6EAA6E;AAC7E,MAAM,oBAAoB,GAA8B;IACtD,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE;IAC9C,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE;IACrD,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE;IACjD,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE;IAClD,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE;IAClD,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE;IACrD,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE;IACtD,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE;IACrD,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE;IAClD,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE;IAC/D,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE;IAClD,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE;IAClD,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE;IAClD,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE;IAClD,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE;IAC5D,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,4BAA4B,EAAE,MAAM,EAAE,OAAO,EAAE;IAC5E,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE;IAC3D,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE;IAC1D,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE;IAC/D,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE;IACjE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE;IAChE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE;IAC/D,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE;IAChE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE;IAC3D,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE;IACjE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE;IACjE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE;IAC7D,iEAAiE;IACjE,qEAAqE;IACrE,8EAA8E;IAC9E,2EAA2E;IAC3E,6EAA6E;IAC7E,6EAA6E;IAC7E,kEAAkE;IAClE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;IACrD,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE;IAC7D,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE;IAC7D,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE;IACjE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,8BAA8B,EAAE,MAAM,EAAE,MAAM,EAAE;IAC7E,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,EAAE;IACnE,yEAAyE;IACzE,8EAA8E;IAC9E,qBAAqB;IACrB,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,EAAE;IACrE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,EAAE;IACrE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,EAAE;IACnE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,EAAE;IACrE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,EAAE;IACrE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,EAAE;IACnE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,EAAE;IACpE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,EAAE;IACpE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE;IAClE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,4BAA4B,EAAE,MAAM,EAAE,MAAM,EAAE;IAC3E,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,4BAA4B,EAAE,MAAM,EAAE,MAAM,EAAE;IAC3E,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,0BAA0B,EAAE,MAAM,EAAE,MAAM,EAAE;IACzE,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,0EAA0E;IAC1E,8DAA8D;IAC9D,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,EAAE;IACrE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE;IAChE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE;IAClE,4EAA4E;IAC5E,0EAA0E;IAC1E,kCAAkC;IAClC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,yBAAyB,EAAE,MAAM,EAAE,OAAO,EAAE;IACzE,0EAA0E;IAC1E,2EAA2E;IAC3E,uEAAuE;IACvE,2EAA2E;IAC3E,wEAAwE;IACxE,2EAA2E;IAC3E,6EAA6E;IAC7E,4EAA4E;IAC5E,uEAAuE;IACvE,EAAE;IACF,sEAAsE;IACtE,6EAA6E;IAC7E,wEAAwE;IACxE,yEAAyE;IACzE,oEAAoE;IACpE,+EAA+E;IAC/E,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,EAAE;IACrE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,EAAE;IACrE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,EAAE;IACnE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE;IAClE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,MAAM,EAAE;IACtE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE;IACrD,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE;IACvD,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE;IAC9D,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE;IACrD,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE;IACvD,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE;IAC9D,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE;IACrD,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE;IACvD,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE;CAC/D,CAAC;AAEF,SAAS,OAAO,CAAC,KAAgC,EAAE,IAAoB;IACrE,OAAO,KAAK,CAAC,IAAI,CACf,CAAC,QAAQ,EAAE,EAAE,CACX,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAC/B,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;QACnC,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAClC,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,0EAA0E;AAC1E,gFAAgF;AAChF,sEAAsE;AACtE,gFAAgF;AAChF,8DAA8D;AAC9D,SAAS,UAAU,CAAC,KAAgB,EAAE,KAAgC;IACpE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAClE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,KAAK,CAAC,WAAW,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAmB,EAAE,QAAwB;IAC3E,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACxC,KAAK,CAAC,IAAI,GAAG,UAAU,CAAC;QACxB,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;QACpB,KAAK,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;QACzC,KAAK,CAAC,MAAM,GAAG,QAAQ,EAAE,MAAM,IAAI,QAAQ,CAAC,YAAY,CAAC;QACzD,KAAK,CAAC,KAAK,GAAG,QAAQ,EAAE,KAAK,IAAI,cAAc,CAAC;QAChD,8EAA8E;QAC9E,yEAAyE;QACzE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;QACtE,UAAU,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,SAA4C,EAC5C,OAAkC;IAElC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACtF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,OAAO,CACL,IAAI,SAAS,8CAA8C,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,8DAA8D,CACrJ,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAMD,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAC/E,2EAA2E;AAC3E,SAAS,gBAAgB,CAAC,GAAkB,EAAE,KAAmB;IAC/D,MAAM,SAAS,GAAuD;QACpE,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC;IACF,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,IAAI,GAAI,GAAG,CAAC,GAAgD,EAAE,GAAG,CAAC;IACxE,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,OAAO,GAAG,IAAmB,CAAC;IACpC,OAAO,CAAC,OAAO,EAAE,EAAE;QACjB,IAAI,CAAC;YACH,KAAK,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CACvF,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CACxB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,eAAuB;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC;IACzD,MAAM,eAAe,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACrF,OAAO,IAAI,CAAC,eAAe,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAC9D,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3C,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAE,KAAa;IACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK;YAAE,SAAS;QAC1E,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,gBAAwB,EACxB,aAAgC,EAChC,cAAsB;IAEtB,OAAO,aAAa,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,IAAI,cAAc,CAAC;AACxF,CAAC;AAED,gFAAgF;AAChF,6EAA6E;AAC7E,6EAA6E;AAC7E,SAAS,yBAAyB,CAChC,OAAkC,EAClC,YAAgC;IAEhC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,CACL,IAAI,SAAS,sKAAsK,CACpL,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,WAAmB,EAAE,OAAkC;IAC/E,OAAO,CACL,IAAI,SAAS,KAAK,WAAW,2LAA2L,CACzN,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,uEAAuE;AACvE,8EAA8E;AAC9E,8EAA8E;AAC9E,2EAA2E;AAC3E,oEAAoE;AACpE,4DAA4D;AAC5D,KAAK,UAAU,kBAAkB,CAC/B,QAAwB,EACxB,OAAkC,EAClC,OAAkC;IAElC,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,IAAI,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;IACxE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,eAAe,QAAQ,CAAC,eAAe,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACrF,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,kDAAkD,QAAQ,CAAC,QAAQ,KAAK,YAAY,CAAC,KAAK,CAAC,0CAA0C,EACrI,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,CAAC,KAAc,EAAS,EAAE,CAC/C,IAAI,KAAK,CACP,yBAAyB,WAAW,eAAe,WAAW,KAAK,YAAY,CAAC,KAAK,CAAC,gHAAgH,EACtM,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IAEJ,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;IACtF,CAAC;IAED,2EAA2E;IAC3E,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC9D,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;QAC3B,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,IAAI,MAA8B,CAAC;IACnC,IAAI,SAAiB,CAAC;IACtB,IAAI,YAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAC7C,SAAS,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACtD,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QACD,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,oEAAoE;QACpE,kEAAkE;QAClE,IAAI,CAAC;YACH,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IACD,wFAAwF;IACxF,IAAI,YAAY,KAAK,SAAS;QAAE,MAAM,cAAc,CAAC,YAAY,CAAC,CAAC;IAEnE,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACrD,IACE,gBAAgB,KAAK,SAAS;QAC9B,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,uBAAuB,EAAE,wBAAwB,CAAC,EACtF,CAAC;QACD,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IAED,0EAA0E;IAC1E,yEAAyE;IACzE,4EAA4E;IAC5E,6EAA6E;IAC7E,oDAAoD;IACpD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAClF,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACtD,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACvC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO;IACpC,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,sEAAsE;QACtE,2DAA2D;QAC3D,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,0EAA0E;QAC1E,6BAA6B;QAC7B,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,CACL,IAAI,SAAS,0CAA0C,WAAW,+CAA+C,gBAAgB,IAAI,CACtI,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,+EAA+E;AAC/E,uEAAuE;AACvE,8EAA8E;AAC9E,2EAA2E;AAC3E,2EAA2E;AAC3E,wEAAwE;AACxE,MAAM,2BAA2B,GAAG,WAAW,CAAC;AAChD,MAAM,4BAA4B,GAAG,UAAU,CAAC;AAEhD,KAAK,UAAU,2BAA2B,CACxC,OAAkC,EAClC,OAAkC;IAElC,MAAM,SAAS,GAAG,eAAe,CAAC,2BAA2B,CAAC,CAAC;IAC/D,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC/D,OAAO,CACL,IAAI,SAAS,uBAAuB,SAAS,4CAA4C,YAAY,CAAC,KAAK,CAAC,kGAAkG,CAC/M,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,4BAA4B;QAAE,OAAO;IACnF,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACxE,OAAO,CACL,IAAI,SAAS,WAAW,SAAS,4DAA4D,4BAA4B,gLAAgL,CAC1S,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,CACL,IAAI,SAAS,2DAA2D,SAAS,KAAK,YAAY,CAAC,KAAK,CAAC,UAAU,4BAA4B,qFAAqF,CACrO,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,OAAO,CACL,IAAI,SAAS,kDAAkD,SAAS,qBAAqB,OAAO,6CAA6C,4BAA4B,UAAU,CACxL,CAAC;AACJ,CAAC;AAED,eAAe,MAAM,CAAC,MAAM,CAAC;IAC3B,EAAE,EAAE,SAAS;IACb,KAAK,CAAC,KAAK,CAAC,GAAG;QACb,MAAM,SAAS,GAAsC,EAAE,CAAC;QACxD,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAE9C,IAAI,OAAO,GAAG,CAAC,KAAK,EAAE,SAAS,KAAK,UAAU,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,IAAI,SAAS,yCAAyC,sBAAsB,oDAAoD,CACjI,CAAC;QACJ,CAAC;QAED,yBAAyB,CAAC,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;QAEzD,kFAAkF;QAClF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,kBAAkB,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,2BAA2B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEpD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE;oBACxD,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAC3C,CAAC,CAAC,CAAC;gBACH,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,yEAAyE;gBACzE,0EAA0E;gBAC1E,MAAM,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBAC/C,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,GAAG,EAAE,CAAC,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;CACF,CAAC,CAAC"}