@diff-review-system/drs 4.0.1 → 5.0.0-rc.1

package/dist/lib/agent-permissions.js

@@ -0,0 +1,358 @@
+import { createHash } from 'crypto';
+import { execFile } from 'child_process';
+import { lstat, readFile, readlink, realpath } from 'fs/promises';
+import { isAbsolute, relative, resolve, sep } from 'path';
+import { minimatch } from 'minimatch';
+import { promisify } from 'util';
+const execFileAsync = promisify(execFile);
+const PERMISSION_FIELDS = new Set(['filesystem', 'shell']);
+const FILESYSTEM_FIELDS = new Set(['read', 'write', 'delete']);
+const PATH_PERMISSION_FIELDS = new Set(['roots', 'allow', 'deny']);
+const VALIDATION_FIELDS = new Set(['afterMutation']);
+const AFTER_WRITE_VALIDATOR_FIELDS = new Set(['name', 'root']);
+export function validateAgentPermissions(value, subject = 'Agent permissions') {
+    if (!isRecord(value))
+        throw new Error(`${subject} must be an object.`);
+    rejectUnknownFields(value, PERMISSION_FIELDS, subject);
+    if (value.shell !== undefined && typeof value.shell !== 'boolean') {
+        throw new Error(`${subject}.shell must be boolean.`);
+    }
+    if (value.filesystem === undefined)
+        return;
+    if (!isRecord(value.filesystem)) {
+        throw new Error(`${subject}.filesystem must be an object.`);
+    }
+    rejectUnknownFields(value.filesystem, FILESYSTEM_FIELDS, `${subject}.filesystem`);
+    if (value.shell !== false) {
+        throw new Error(`${subject} with filesystem rules must explicitly set shell: false.`);
+    }
+    for (const operation of ['read', 'write', 'delete']) {
+        const rule = value.filesystem[operation];
+        if (rule === undefined)
+            continue;
+        validatePathPermissions(rule, `${subject}.filesystem.${operation}`);
+    }
+}
+export function validateAgentValidation(value, subject = 'Agent validation') {
+    if (!isRecord(value))
+        throw new Error(`${subject} must be an object.`);
+    rejectUnknownFields(value, VALIDATION_FIELDS, subject);
+    if (value.afterMutation === undefined)
+        return;
+    if (!Array.isArray(value.afterMutation)) {
+        throw new Error(`${subject}.afterMutation must be an array.`);
+    }
+    for (const [index, validator] of value.afterMutation.entries()) {
+        const validatorSubject = `${subject}.afterMutation[${index}]`;
+        if (!isRecord(validator))
+            throw new Error(`${validatorSubject} must be an object.`);
+        rejectUnknownFields(validator, AFTER_WRITE_VALIDATOR_FIELDS, validatorSubject);
+        if (validator.name !== 'okf-document') {
+            throw new Error(`${validatorSubject}.name has unsupported validator "${String(validator.name)}".`);
+        }
+        if (typeof validator.root !== 'string' || !validator.root.trim()) {
+            throw new Error(`${validatorSubject}.root must be a non-empty string.`);
+        }
+    }
+}
+export function renderAgentPermissions(permissions, render) {
+    const rendered = {
+        ...(permissions.shell !== undefined ? { shell: permissions.shell } : {}),
+        ...(permissions.filesystem
+            ? {
+                filesystem: Object.fromEntries(['read', 'write', 'delete'].flatMap((operation) => {
+                    const rule = permissions.filesystem?.[operation];
+                    return rule
+                        ? [
+                            [
+                                operation,
+                                {
+                                    roots: rule.roots.map(render),
+                                    allow: rule.allow.map(render),
+                                    ...(rule.deny ? { deny: rule.deny.map(render) } : {}),
+                                },
+                            ],
+                        ]
+                        : [];
+                })),
+            }
+            : {}),
+    };
+    validateAgentPermissions(rendered);
+    return rendered;
+}
+export function renderAgentValidation(validation, render) {
+    const rendered = {
+        ...(validation.afterMutation
+            ? {
+                afterMutation: validation.afterMutation.map((validator) => ({
+                    name: validator.name,
+                    root: render(validator.root),
+                })),
+            }
+            : {}),
+    };
+    validateAgentValidation(rendered);
+    return rendered;
+}
+export class AgentFilesystemAuthorizer {
+    permissions;
+    workingDir;
+    constructor(workingDir, permissions) {
+        this.permissions = permissions;
+        this.workingDir = resolve(workingDir);
+    }
+    hasRule(operation) {
+        return this.permissions[operation] !== undefined;
+    }
+    async authorize(operation, requestedPath) {
+        const rule = this.permissions[operation];
+        const absolutePath = isAbsolute(requestedPath)
+            ? resolve(requestedPath)
+            : resolve(this.workingDir, requestedPath);
+        const relativePath = relative(this.workingDir, absolutePath);
+        if ((relativePath === '' && operation !== 'read') ||
+            relativePath === '..' ||
+            relativePath.startsWith(`..${sep}`) ||
+            isAbsolute(relativePath)) {
+            throw permissionError(operation, requestedPath, 'path is outside the working directory');
+        }
+        if (rule) {
+            const scopedPaths = rule.roots.flatMap((root) => {
+                const absoluteRoot = resolve(this.workingDir, root);
+                const scopedPath = relative(absoluteRoot, absolutePath);
+                return scopedPath === '' || (!scopedPath.startsWith(`..${sep}`) && !isAbsolute(scopedPath))
+                    ? [toPosixPath(scopedPath)]
+                    : [];
+            });
+            if (scopedPaths.length === 0) {
+                throw permissionError(operation, requestedPath, 'path is outside the allowed roots');
+            }
+            const allowed = scopedPaths.some((scopedPath) => rule.allow.some((pattern) => matchesPath(scopedPath, pattern)));
+            if (!allowed) {
+                throw permissionError(operation, requestedPath, 'path is not in the allow list');
+            }
+            const denied = scopedPaths.some((scopedPath) => (rule.deny ?? []).some((pattern) => matchesPath(scopedPath, pattern)));
+            if (denied) {
+                throw permissionError(operation, requestedPath, 'path is in the deny list');
+            }
+        }
+        await assertNoSymbolicLinks(this.workingDir, absolutePath, operation, requestedPath);
+        return absolutePath;
+    }
+}
+export async function captureAgentWorkspaceSnapshot(workingDir) {
+    const root = resolve(workingDir);
+    let output;
+    try {
+        const { stdout: gitRootOutput } = await execFileAsync('git', ['--no-pager', 'rev-parse', '--show-toplevel'], { cwd: root, encoding: 'utf-8' });
+        const [gitRoot, workspaceRoot] = await Promise.all([
+            realpath(resolve(gitRootOutput.trim())),
+            realpath(root),
+        ]);
+        if (gitRoot !== workspaceRoot) {
+            throw new Error(`agent working directory must be the Git repository root (${gitRoot})`);
+        }
+        ({ stdout: output } = await execFileAsync('git', ['--no-pager', 'ls-files', '--cached', '--others', '--exclude-standard', '-z'], { cwd: root, encoding: 'utf-8', maxBuffer: 10 * 1024 * 1024 }));
+    }
+    catch (error) {
+        throw new Error(`Agent filesystem permissions require a Git repository: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    const files = Object.create(null);
+    for (const filePath of output.split('\0').filter(Boolean).sort()) {
+        const fingerprint = await fingerprintWorkspacePath(root, filePath);
+        if (fingerprint)
+            files[toPosixPath(filePath)] = fingerprint;
+    }
+    return { files };
+}
+export async function assertAgentWorkspaceChangesAllowed(workingDir, permissions, before) {
+    const after = await captureAgentWorkspaceSnapshot(workingDir);
+    const changedPaths = [...new Set([...Object.keys(before.files), ...Object.keys(after.files)])]
+        .filter((filePath) => before.files[filePath] !== after.files[filePath])
+        .sort();
+    const changes = {
+        added: changedPaths.filter((filePath) => before.files[filePath] === undefined),
+        modified: changedPaths.filter((filePath) => before.files[filePath] !== undefined && after.files[filePath] !== undefined),
+        deleted: changedPaths.filter((filePath) => after.files[filePath] === undefined),
+    };
+    if (changedPaths.length === 0)
+        return changes;
+    if (!permissions.write && !permissions.delete) {
+        throw new Error(`Agent changed path(s) without filesystem write permission:\n${changedPaths.map((filePath) => `- ${filePath}`).join('\n')}`);
+    }
+    const authorizer = new AgentFilesystemAuthorizer(workingDir, permissions);
+    const denied = [];
+    for (const filePath of changedPaths) {
+        const operation = before.files[filePath] !== undefined && after.files[filePath] === undefined
+            ? 'delete'
+            : 'write';
+        if (!permissions[operation]) {
+            denied.push({ path: filePath, reason: `Agent has no filesystem ${operation} permission.` });
+            continue;
+        }
+        try {
+            await authorizer.authorize(operation, filePath);
+        }
+        catch (error) {
+            denied.push({
+                path: filePath,
+                reason: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    if (denied.length > 0) {
+        throw new Error(`Agent changed path(s) outside its filesystem permissions:\n${denied.map(({ path, reason }) => `- ${path}: ${reason}`).join('\n')}`);
+    }
+    return changes;
+}
+function validatePathPermissions(value, subject) {
+    if (!isRecord(value))
+        throw new Error(`${subject} must be an object.`);
+    rejectUnknownFields(value, PATH_PERMISSION_FIELDS, subject);
+    validateLiteralRoots(value.roots, `${subject}.roots`);
+    validatePathPatterns(value.allow, `${subject}.allow`, true);
+    if (value.deny !== undefined)
+        validatePathPatterns(value.deny, `${subject}.deny`, false);
+}
+function validateLiteralRoots(value, subject) {
+    if (!Array.isArray(value) || value.length === 0) {
+        throw new Error(`${subject} must contain at least one repository-relative path.`);
+    }
+    for (const root of value) {
+        if (typeof root !== 'string' || !root.trim()) {
+            throw new Error(`${subject} must contain only non-empty strings.`);
+        }
+        const normalized = root.replaceAll('\\', '/');
+        if (isAbsolute(root) || normalized.split('/').includes('..')) {
+            throw new Error(`${subject} must contain repository-relative paths: ${root}`);
+        }
+    }
+}
+function validatePathPatterns(value, subject, required) {
+    if (!Array.isArray(value)) {
+        throw new Error(`${subject} must be an array of repository-relative glob patterns.`);
+    }
+    if (required && value.length === 0) {
+        throw new Error(`${subject} must contain at least one repository-relative glob pattern.`);
+    }
+    for (const pattern of value) {
+        if (typeof pattern !== 'string' || !pattern.trim()) {
+            throw new Error(`${subject} must contain only non-empty strings.`);
+        }
+        const normalized = pattern.replaceAll('\\', '/');
+        if (isAbsolute(pattern) || normalized.split('/').includes('..')) {
+            throw new Error(`${subject} must contain repository-relative patterns: ${pattern}`);
+        }
+    }
+}
+function matchesPath(filePath, pattern) {
+    const normalizedPattern = pattern.replaceAll('\\', '/').replace(/^\.\//u, '');
+    return minimatch(filePath, normalizedPattern, {
+        dot: true,
+        nocase: false,
+        nocomment: true,
+        nonegate: true,
+    });
+}
+async function assertNoSymbolicLinks(workingDir, targetPath, operation, requestedPath) {
+    if ((await lstat(workingDir)).isSymbolicLink()) {
+        throw permissionError(operation, requestedPath, 'working directory is a symbolic link');
+    }
+    const relativePath = relative(workingDir, targetPath);
+    let currentPath = workingDir;
+    for (const part of relativePath.split(sep).filter(Boolean)) {
+        currentPath = resolve(currentPath, part);
+        try {
+            const pathStat = await lstat(currentPath);
+            if (pathStat.isSymbolicLink()) {
+                throw permissionError(operation, requestedPath, 'path contains a symbolic link');
+            }
+            if (operation === 'write' &&
+                currentPath === targetPath &&
+                pathStat.isFile() &&
+                pathStat.nlink > 1) {
+                throw permissionError(operation, requestedPath, 'target has multiple hard links');
+            }
+        }
+        catch (error) {
+            if (isMissingPathError(error))
+                return;
+            throw error;
+        }
+    }
+}
+async function fingerprintWorkspacePath(workingDir, relativePath) {
+    const absolutePath = resolve(workingDir, relativePath);
+    try {
+        const pathStat = await lstat(absolutePath);
+        if (pathStat.isSymbolicLink()) {
+            return createHash('sha256')
+                .update(`symlink:${await readlink(absolutePath)}`)
+                .digest('hex');
+        }
+        if (pathStat.isDirectory())
+            return fingerprintNestedGitWorkspace(absolutePath);
+        if (!pathStat.isFile())
+            return null;
+        const hash = createHash('sha256');
+        hash.update(`mode:${pathStat.mode & 0o111 ? 'executable' : 'regular'}\0`);
+        hash.update(await readFile(absolutePath));
+        return hash.digest('hex');
+    }
+    catch (error) {
+        if (isMissingPathError(error))
+            return null;
+        throw error;
+    }
+}
+async function fingerprintNestedGitWorkspace(workingDir) {
+    try {
+        const [headResult, diffResult, untrackedResult] = await Promise.all([
+            execFileAsync('git', ['--no-pager', 'rev-parse', 'HEAD'], {
+                cwd: workingDir,
+                encoding: 'utf-8',
+            }),
+            execFileAsync('git', ['--no-pager', 'diff', '--binary', 'HEAD'], {
+                cwd: workingDir,
+                encoding: 'utf-8',
+                maxBuffer: 10 * 1024 * 1024,
+            }),
+            execFileAsync('git', ['--no-pager', 'ls-files', '--others', '--exclude-standard', '-z'], {
+                cwd: workingDir,
+                encoding: 'utf-8',
+                maxBuffer: 10 * 1024 * 1024,
+            }),
+        ]);
+        const hash = createHash('sha256');
+        hash.update(`head:${headResult.stdout.trim()}\0diff:\0${diffResult.stdout}\0`);
+        for (const filePath of untrackedResult.stdout.split('\0').filter(Boolean).sort()) {
+            const fingerprint = await fingerprintWorkspacePath(workingDir, filePath);
+            if (fingerprint)
+                hash.update(`untracked:${toPosixPath(filePath)}\0${fingerprint}\0`);
+        }
+        return hash.digest('hex');
+    }
+    catch {
+        return null;
+    }
+}
+function permissionError(operation, requestedPath, reason) {
+    return new Error(`Agent filesystem permission denied for ${operation} "${requestedPath}": ${reason}.`);
+}
+function rejectUnknownFields(value, allowed, subject) {
+    const unknown = Object.keys(value).filter((key) => !allowed.has(key));
+    if (unknown.length > 0) {
+        throw new Error(`${subject} has unsupported field(s): ${unknown.join(', ')}.`);
+    }
+}
+function toPosixPath(value) {
+    return sep === '/' ? value : value.split(sep).join('/');
+}
+function isRecord(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+function isMissingPathError(error) {
+    return isRecord(error) && error.code === 'ENOENT';
+}
+//# sourceMappingURL=agent-permissions.js.map

package/dist/lib/agent-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-permissions.js","sourceRoot":"","sources":["../../src/lib/agent-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAwCjC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3D,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC/D,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AACnE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;AACrD,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE/D,MAAM,UAAU,wBAAwB,CAAC,KAAc,EAAE,OAAO,GAAG,mBAAmB;IACpF,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,qBAAqB,CAAC,CAAC;IACvE,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAEvD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,yBAAyB,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO;IAC3C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,gCAAgC,CAAC,CAAC;IAC9D,CAAC;IACD,mBAAmB,CAAC,KAAK,CAAC,UAAU,EAAE,iBAAiB,EAAE,GAAG,OAAO,aAAa,CAAC,CAAC;IAElF,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,0DAA0D,CAAC,CAAC;IACxF,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,uBAAuB,CAAC,IAAI,EAAE,GAAG,OAAO,eAAe,SAAS,EAAE,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAc,EAAE,OAAO,GAAG,kBAAkB;IAClF,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,qBAAqB,CAAC,CAAC;IACvE,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;QAAE,OAAO;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,kCAAkC,CAAC,CAAC;IAChE,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/D,MAAM,gBAAgB,GAAG,GAAG,OAAO,kBAAkB,KAAK,GAAG,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,gBAAgB,qBAAqB,CAAC,CAAC;QACpF,mBAAmB,CAAC,SAAS,EAAE,4BAA4B,EAAE,gBAAgB,CAAC,CAAC;QAC/E,IAAI,SAAS,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CACb,GAAG,gBAAgB,oCAAoC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAClF,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,GAAG,gBAAgB,mCAAmC,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,WAA6B,EAC7B,MAAiC;IAEjC,MAAM,QAAQ,GAAqB;QACjC,GAAG,CAAC,WAAW,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,WAAW,CAAC,UAAU;YACxB,CAAC,CAAC;gBACE,UAAU,EAAE,MAAM,CAAC,WAAW,CAC3B,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAW,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;oBAC3D,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,CAAC;oBACjD,OAAO,IAAI;wBACT,CAAC,CAAC;4BACE;gCACE,SAAS;gCACT;oCACE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;oCAC7B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;oCAC7B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iCACtD;6BACF;yBACF;wBACH,CAAC,CAAC,EAAE,CAAC;gBACT,CAAC,CAAC,CACH;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,UAA2B,EAC3B,MAAiC;IAEjC,MAAM,QAAQ,GAAoB;QAChC,GAAG,CAAC,UAAU,CAAC,aAAa;YAC1B,CAAC,CAAC;gBACE,aAAa,EAAE,UAAU,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;oBAC1D,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;iBAC7B,CAAC,CAAC;aACJ;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAClC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,OAAO,yBAAyB;IAKjB;IAJF,UAAU,CAAS;IAEpC,YACE,UAAkB,EACD,WAAuC;QAAvC,gBAAW,GAAX,WAAW,CAA4B;QAExD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,CAAC,SAAmC;QACzC,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAmC,EAAE,aAAqB;QACxE,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,UAAU,CAAC,aAAa,CAAC;YAC5C,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YACxB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC7D,IACE,CAAC,YAAY,KAAK,EAAE,IAAI,SAAS,KAAK,MAAM,CAAC;YAC7C,YAAY,KAAK,IAAI;YACrB,YAAY,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC;YACnC,UAAU,CAAC,YAAY,CAAC,EACxB,CAAC;YACD,MAAM,eAAe,CAAC,SAAS,EAAE,aAAa,EAAE,uCAAuC,CAAC,CAAC;QAC3F,CAAC;QAED,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;gBACxD,OAAO,UAAU,KAAK,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;oBACzF,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;oBAC3B,CAAC,CAAC,EAAE,CAAC;YACT,CAAC,CAAC,CAAC;YACH,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,eAAe,CAAC,SAAS,EAAE,aAAa,EAAE,mCAAmC,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAC9C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAC/D,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,eAAe,CAAC,SAAS,EAAE,aAAa,EAAE,+BAA+B,CAAC,CAAC;YACnF,CAAC;YACD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAC7C,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CACtE,CAAC;YACF,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,eAAe,CAAC,SAAS,EAAE,aAAa,EAAE,0BAA0B,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QAED,MAAM,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACrF,OAAO,YAAY,CAAC;IACtB,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,UAAkB;IAElB,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACjC,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,aAAa,CACnD,KAAK,EACL,CAAC,YAAY,EAAE,WAAW,EAAE,iBAAiB,CAAC,EAC9C,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CACjC,CAAC;QACF,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjD,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;YACvC,QAAQ,CAAC,IAAI,CAAC;SACf,CAAC,CAAC;QACH,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,4DAA4D,OAAO,GAAG,CAAC,CAAC;QAC1F,CAAC;QACD,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACvC,KAAK,EACL,CAAC,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,CAAC,EAC9E,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAC9D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,0DAA0D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnH,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA2B,CAAC;IAC5D,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACjE,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACnE,IAAI,WAAW;YAAE,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,GAAG,WAAW,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,UAAkB,EAClB,WAAuC,EACvC,MAA8B;IAE9B,MAAM,KAAK,GAAG,MAAM,6BAA6B,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC3F,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;SACtE,IAAI,EAAE,CAAC;IACV,MAAM,OAAO,GAA0B;QACrC,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC;QAC9E,QAAQ,EAAE,YAAY,CAAC,MAAM,CAC3B,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,SAAS,CAC1F;QACD,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC;KAChF,CAAC;IACF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9C,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,+DAA+D,YAAY,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5H,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,yBAAyB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC1E,MAAM,MAAM,GAA4C,EAAE,CAAC;IAC3D,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;QACpC,MAAM,SAAS,GACb,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,SAAS;YACzE,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,OAAO,CAAC;QACd,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,2BAA2B,SAAS,cAAc,EAAE,CAAC,CAAC;YAC5F,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC/D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,8DAA8D,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpI,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAE,OAAe;IAC9D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,qBAAqB,CAAC,CAAC;IACvE,mBAAmB,CAAC,KAAK,EAAE,sBAAsB,EAAE,OAAO,CAAC,CAAC;IAC5D,oBAAoB,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,OAAO,QAAQ,CAAC,CAAC;IACtD,oBAAoB,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,OAAO,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,OAAO,OAAO,EAAE,KAAK,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,OAAe;IAC3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,sDAAsD,CAAC,CAAC;IACpF,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,uCAAuC,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC9C,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,4CAA4C,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,OAAe,EAAE,QAAiB;IAC9E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,yDAAyD,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,8DAA8D,CAAC,CAAC;IAC5F,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,uCAAuC,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,+CAA+C,OAAO,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,OAAe;IACpD,MAAM,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC9E,OAAO,SAAS,CAAC,QAAQ,EAAE,iBAAiB,EAAE;QAC5C,GAAG,EAAE,IAAI;QACT,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,UAAkB,EAClB,UAAkB,EAClB,SAAmC,EACnC,aAAqB;IAErB,IAAI,CAAC,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;QAC/C,MAAM,eAAe,CAAC,SAAS,EAAE,aAAa,EAAE,sCAAsC,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACtD,IAAI,WAAW,GAAG,UAAU,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;YAC1C,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC9B,MAAM,eAAe,CAAC,SAAS,EAAE,aAAa,EAAE,+BAA+B,CAAC,CAAC;YACnF,CAAC;YACD,IACE,SAAS,KAAK,OAAO;gBACrB,WAAW,KAAK,UAAU;gBAC1B,QAAQ,CAAC,MAAM,EAAE;gBACjB,QAAQ,CAAC,KAAK,GAAG,CAAC,EAClB,CAAC;gBACD,MAAM,eAAe,CAAC,SAAS,EAAE,aAAa,EAAE,gCAAgC,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,kBAAkB,CAAC,KAAK,CAAC;gBAAE,OAAO;YACtC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,UAAkB,EAClB,YAAoB;IAEpB,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;QAC3C,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;YAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC;iBACxB,MAAM,CAAC,WAAW,MAAM,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;iBACjD,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,QAAQ,CAAC,WAAW,EAAE;YAAE,OAAO,6BAA6B,CAAC,YAAY,CAAC,CAAC;QAC/E,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,kBAAkB,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,6BAA6B,CAAC,UAAkB;IAC7D,IAAI,CAAC;QACH,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAClE,aAAa,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE;gBACxD,GAAG,EAAE,UAAU;gBACf,QAAQ,EAAE,OAAO;aAClB,CAAC;YACF,aAAa,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE;gBAC/D,GAAG,EAAE,UAAU;gBACf,QAAQ,EAAE,OAAO;gBACjB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CAAC;YACF,aAAa,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,CAAC,EAAE;gBACvF,GAAG,EAAE,UAAU;gBACf,QAAQ,EAAE,OAAO;gBACjB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CAAC;SACH,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC;QAC/E,KAAK,MAAM,QAAQ,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACjF,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YACzE,IAAI,WAAW;gBAAE,IAAI,CAAC,MAAM,CAAC,aAAa,WAAW,CAAC,QAAQ,CAAC,KAAK,WAAW,IAAI,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,SAAmC,EACnC,aAAqB,EACrB,MAAc;IAEd,OAAO,IAAI,KAAK,CACd,0CAA0C,SAAS,KAAK,aAAa,MAAM,MAAM,GAAG,CACrF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAA8B,EAC9B,OAAoB,EACpB,OAAe;IAEf,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AACpD,CAAC"}

package/dist/lib/agent-result.d.ts

@@ -0,0 +1,10 @@
+import type { AgentUsageSummary } from './review-usage.js';
+import type { AgentWorkspaceChanges } from './agent-permissions.js';
+export interface AgentRunResult {
+    timestamp: string;
+    agent: string;
+    response: string;
+    usage: AgentUsageSummary;
+    workspaceChanges?: AgentWorkspaceChanges;
+}
+//# sourceMappingURL=agent-result.d.ts.map

package/dist/lib/agent-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-result.d.ts","sourceRoot":"","sources":["../../src/lib/agent-result.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAEpE,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,iBAAiB,CAAC;IACzB,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;CAC1C"}

package/dist/lib/agent-result.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=agent-result.js.map

package/dist/lib/agent-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-result.js","sourceRoot":"","sources":["../../src/lib/agent-result.ts"],"names":[],"mappings":""}

package/dist/lib/comment-poster.d.ts

@@ -20,5 +20,5 @@ import type { ReviewUsageSummary } from './review-usage.js';
  * 4. Adds an "ai-reviewed" label
  * @param cursorFixLinks Optional Cursor link settings for summary and inline issue comments.
  */
-export declare function postReviewComments(platformClient: PlatformClient, projectId: string, prNumber: number, summary: ReturnType<typeof calculateSummary>, issues: ReviewIssue[], changeSummary: ChangeSummary | undefined, reviewUsage: ReviewUsageSummary | undefined, platformData: unknown, lineValidator?: LineValidator, createInlinePosition?: (issue: ReviewIssue, platformData: unknown) => InlineCommentPosition, cursorFixLinks?: CursorFixLinkOptions, reviewMetadata?: ReviewMetadata): Promise<void>;
+export declare function postReviewComments(platformClient: PlatformClient, projectId: string, prNumber: number, summary: ReturnType<typeof calculateSummary>, issues: ReviewIssue[], changeSummary: ChangeSummary | undefined, reviewUsage: ReviewUsageSummary | undefined, platformData: unknown, lineValidator?: LineValidator, createInlinePosition?: (issue: ReviewIssue, platformData: unknown) => InlineCommentPosition, cursorFixLinks?: CursorFixLinkOptions, reviewMetadata?: ReviewMetadata, assertCurrentHead?: () => Promise<void>, beforeLabel?: () => Promise<void>): Promise<void>;
 //# sourceMappingURL=comment-poster.d.ts.map

package/dist/lib/comment-poster.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"comment-poster.d.ts","sourceRoot":"","sources":["../../src/lib/comment-poster.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,cAAc,EACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AASjE,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D;;;;;;;;;GASG;AACH,wBAAsB,kBAAkB,CACtC,cAAc,EAAE,cAAc,EAC9B,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,EAC5C,MAAM,EAAE,WAAW,EAAE,EACrB,aAAa,EAAE,aAAa,GAAG,SAAS,EACxC,WAAW,EAAE,kBAAkB,GAAG,SAAS,EAC3C,YAAY,EAAE,OAAO,EACrB,aAAa,CAAC,EAAE,aAAa,EAC7B,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,KAAK,qBAAqB,EAC3F,cAAc,CAAC,EAAE,oBAAoB,EACrC,cAAc,CAAC,EAAE,cAAc,GAC9B,OAAO,CAAC,IAAI,CAAC,CAmFf"}
+{"version":3,"file":"comment-poster.d.ts","sourceRoot":"","sources":["../../src/lib/comment-poster.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,cAAc,EACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AASjE,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAW5D;;;;;;;;;GASG;AACH,wBAAsB,kBAAkB,CACtC,cAAc,EAAE,cAAc,EAC9B,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,EAC5C,MAAM,EAAE,WAAW,EAAE,EACrB,aAAa,EAAE,aAAa,GAAG,SAAS,EACxC,WAAW,EAAE,kBAAkB,GAAG,SAAS,EAC3C,YAAY,EAAE,OAAO,EACrB,aAAa,CAAC,EAAE,aAAa,EAC7B,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,KAAK,qBAAqB,EAC3F,cAAc,CAAC,EAAE,oBAAoB,EACrC,cAAc,CAAC,EAAE,cAAc,EAC/B,iBAAiB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EACvC,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAChC,OAAO,CAAC,IAAI,CAAC,CAqGf"}

package/dist/lib/comment-poster.js

@@ -7,6 +7,13 @@
 import chalk from 'chalk';
 import { formatSummaryComment, formatIssueComment, } from './comment-formatter.js';
 import { BOT_COMMENT_ID, createIssueFingerprint, extractIssueFingerprints, findExistingSummaryComment, prepareIssuesForPosting, } from './comment-manager.js';
+const MAX_PLATFORM_COMMENT_LENGTH = 60_000;
+const MAX_INLINE_COMMENTS_PER_REVIEW = 100;
+function assertPostBodyWithinLimit(body, subject) {
+    if (body.length > MAX_PLATFORM_COMMENT_LENGTH) {
+        throw new Error(`${subject} exceeds the safe platform comment length.`);
+    }
+}
 /**
  * Post review comments to a PR/MR
  *
@@ -17,7 +24,14 @@ import { BOT_COMMENT_ID, createIssueFingerprint, extractIssueFingerprints, findE
  * 4. Adds an "ai-reviewed" label
  * @param cursorFixLinks Optional Cursor link settings for summary and inline issue comments.
  */
-export async function postReviewComments(platformClient, projectId, prNumber, summary, issues, changeSummary, reviewUsage, platformData, lineValidator, createInlinePosition, cursorFixLinks, reviewMetadata) {
+export async function postReviewComments(platformClient, projectId, prNumber, summary, issues, changeSummary, reviewUsage, platformData, lineValidator, createInlinePosition, cursorFixLinks, reviewMetadata, assertCurrentHead, beforeLabel) {
+    const summaryComment = formatSummaryComment(summary, issues, BOT_COMMENT_ID, changeSummary, reviewUsage, cursorFixLinks, reviewMetadata);
+    assertPostBodyWithinLimit(summaryComment, 'Review summary');
+    for (const issue of issues) {
+        if (issue.severity === 'CRITICAL' || issue.severity === 'HIGH') {
+            assertPostBodyWithinLimit(formatIssueComment(issue, createIssueFingerprint(issue), cursorFixLinks), 'Inline review comment');
+        }
+    }
     console.log(chalk.gray('Fetching existing comments...\n'));
     // Fetch existing comments to prevent duplicates
     const [existingComments, existingInlineComments] = await Promise.all([
@@ -30,18 +44,6 @@ export async function postReviewComments(platformClient, projectId, prNumber, su
         ...existingInlineComments.map((c) => ({ id: c.id, body: c.body })),
     ];
     const existingSummary = findExistingSummaryComment(existingComments.map((c) => ({ id: c.id, body: c.body })));
-    await removeStaleInlineIssueComments(platformClient, projectId, prNumber, existingInlineComments.map((c) => ({ id: c.id, body: c.body })), issues);
-    // Post or update summary comment
-    console.log(chalk.gray('Posting review summary...\n'));
-    const summaryComment = formatSummaryComment(summary, issues, BOT_COMMENT_ID, changeSummary, reviewUsage, cursorFixLinks, reviewMetadata);
-    if (existingSummary) {
-        await platformClient.updateComment(projectId, prNumber, existingSummary.id, summaryComment);
-        console.log(chalk.green('✓ Updated existing review summary'));
-    }
-    else {
-        await platformClient.createComment(projectId, prNumber, summaryComment);
-        console.log(chalk.green('✓ Posted new review summary'));
-    }
     // Prepare issues for posting: filter to CRITICAL/HIGH, deduplicate, validate lines
     const criticalHighCount = issues.filter((i) => i.severity === 'CRITICAL' || i.severity === 'HIGH').length;
     const prepared = prepareIssuesForPosting(issues, allComments, (issue) => {
@@ -55,14 +57,34 @@ export async function postReviewComments(platformClient, projectId, prNumber, su
     if (!createInlinePosition) {
         console.log(chalk.yellow(`⚠ Inline comments disabled (no position builder configured)\n`));
     }
-    if (prepared.inlineIssues.length > 0 && createInlinePosition) {
-        const inlineComments = prepared.inlineIssues.map((issue) => ({
+    const inlineComments = createInlinePosition
+        ? prepared.inlineIssues.map((issue) => ({
             body: formatIssueComment(issue, createIssueFingerprint(issue), cursorFixLinks),
             position: createInlinePosition(issue, platformData),
-        }));
+        }))
+        : [];
+    if (inlineComments.length > MAX_INLINE_COMMENTS_PER_REVIEW) {
+        throw new Error('Review has too many inline comments for one platform request.');
+    }
+    await assertCurrentHead?.();
+    console.log(chalk.gray('Posting review summary...\n'));
+    if (existingSummary) {
+        await platformClient.updateComment(projectId, prNumber, existingSummary.id, summaryComment);
+        console.log(chalk.green('✓ Updated existing review summary'));
+    }
+    else {
+        await platformClient.createComment(projectId, prNumber, summaryComment);
+        console.log(chalk.green('✓ Posted new review summary'));
+    }
+    await assertCurrentHead?.();
+    await removeStaleInlineIssueComments(platformClient, projectId, prNumber, existingInlineComments.map((c) => ({ id: c.id, body: c.body })), issues);
+    if (inlineComments.length > 0) {
+        await assertCurrentHead?.();
         await platformClient.createBulkInlineComments(projectId, prNumber, inlineComments);
     }
     // Add ai-reviewed label
+    await beforeLabel?.();
+    await assertCurrentHead?.();
     await platformClient.addLabels(projectId, prNumber, ['ai-reviewed']);
     console.log(chalk.green('✓ Review posted\n'));
 }

package/dist/lib/comment-poster.js.map

@@ -1 +1 @@
-{"version":3,"file":"comment-poster.js","sourceRoot":"","sources":["../../src/lib/comment-poster.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EACL,oBAAoB,EACpB,kBAAkB,GAGnB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,EAC1B,uBAAuB,GAExB,MAAM,sBAAsB,CAAC;AAI9B;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,cAA8B,EAC9B,SAAiB,EACjB,QAAgB,EAChB,OAA4C,EAC5C,MAAqB,EACrB,aAAwC,EACxC,WAA2C,EAC3C,YAAqB,EACrB,aAA6B,EAC7B,oBAA2F,EAC3F,cAAqC,EACrC,cAA+B;IAE/B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAE3D,gDAAgD;IAChD,MAAM,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnE,cAAc,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC;QAC/C,cAAc,CAAC,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC;KACtD,CAAC,CAAC;IAEH,oCAAoC;IACpC,MAAM,WAAW,GAAsB;QACrC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5D,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;KACnE,CAAC;IAEF,MAAM,eAAe,GAAG,0BAA0B,CAChD,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAC1D,CAAC;IAEF,MAAM,8BAA8B,CAClC,cAAc,EACd,SAAS,EACT,QAAQ,EACR,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAC/D,MAAM,CACP,CAAC;IAEF,iCAAiC;IACjC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC;IACvD,MAAM,cAAc,GAAG,oBAAoB,CACzC,OAAO,EACP,MAAM,EACN,cAAc,EACd,aAAa,EACb,WAAW,EACX,cAAc,EACd,cAAc,CACf,CAAC;IAEF,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,cAAc,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,eAAe,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QAC5F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,MAAM,cAAc,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,mFAAmF;IACnF,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAC1D,CAAC,MAAM,CAAC;IAET,MAAM,QAAQ,GAAG,uBAAuB,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE;QACtE,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QAChD,OAAO,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,qDAAqD;IACrD,2BAA2B,CACzB,iBAAiB,EACjB,QAAQ,CAAC,iBAAiB,EAC1B,QAAQ,CAAC,YAAY,CAAC,MAAM,EAC5B,MAAM,CACP,CAAC;IAEF,oDAAoD;IACpD,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,+DAA+D,CAAC,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,oBAAoB,EAAE,CAAC;QAC7D,MAAM,cAAc,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC3D,IAAI,EAAE,kBAAkB,CAAC,KAAK,EAAE,sBAAsB,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;YAC9E,QAAQ,EAAE,oBAAoB,CAAC,KAAK,EAAE,YAAY,CAAC;SACpD,CAAC,CAAC,CAAC;QAEJ,MAAM,cAAc,CAAC,wBAAwB,CAAC,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IACrF,CAAC;IAED,wBAAwB;IACxB,MAAM,cAAc,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IAErE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,cAA8B,EAC9B,SAAiB,EACjB,QAAgB,EAChB,sBAAyC,EACzC,MAAqB;IAErB,MAAM,mBAAmB,GAAG,IAAI,GAAG,CACjC,MAAM;SACH,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC;SAC7E,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CACjD,CAAC;IAEF,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;QAC7C,MAAM,YAAY,GAAG,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC5B,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAC1D,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,CACrC,CAAC;QACF,IAAI,YAAY,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,MAAM,CACV,6CAA6C,OAAO,CAAC,EAAE,KACrD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,OAAO,gCAAgC,CAAC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,2BAA2B,CAClC,iBAAyB,EACzB,iBAAyB,EACzB,iBAAyB,EACzB,SAAwB;IAExB,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,iBAAiB,iCAAiC,CAAC,CAAC,CAAC;QAEhG,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,iBAAiB,gCAAgC,CAAC,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,kBAAkB,GAAG,SAAS,CAAC,MAAM,CACzC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;YACpD,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAC5C,CAAC,MAAM,CAAC;QACT,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,kBAAkB,mCAAmC,CAAC,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,mBAAmB,GACvB,iBAAiB,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,iBAAiB,CAAC;QACjF,IAAI,mBAAmB,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,mBAAmB,mCAAmC,CAAC,CAAC,CAAC;QACzF,CAAC;QAED,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,iBAAiB,sCAAsC,CAAC,CAAC,CAAC;QAC1F,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,iDAAiD,CAAC,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CAAC,4EAA4E,CAAC,CACzF,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"comment-poster.js","sourceRoot":"","sources":["../../src/lib/comment-poster.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EACL,oBAAoB,EACpB,kBAAkB,GAGnB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,EAC1B,uBAAuB,GAExB,MAAM,sBAAsB,CAAC;AAI9B,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAC3C,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAE3C,SAAS,yBAAyB,CAAC,IAAY,EAAE,OAAe;IAC9D,IAAI,IAAI,CAAC,MAAM,GAAG,2BAA2B,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,4CAA4C,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,cAA8B,EAC9B,SAAiB,EACjB,QAAgB,EAChB,OAA4C,EAC5C,MAAqB,EACrB,aAAwC,EACxC,WAA2C,EAC3C,YAAqB,EACrB,aAA6B,EAC7B,oBAA2F,EAC3F,cAAqC,EACrC,cAA+B,EAC/B,iBAAuC,EACvC,WAAiC;IAEjC,MAAM,cAAc,GAAG,oBAAoB,CACzC,OAAO,EACP,MAAM,EACN,cAAc,EACd,aAAa,EACb,WAAW,EACX,cAAc,EACd,cAAc,CACf,CAAC;IACF,yBAAyB,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC5D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC/D,yBAAyB,CACvB,kBAAkB,CAAC,KAAK,EAAE,sBAAsB,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,EACxE,uBAAuB,CACxB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAE3D,gDAAgD;IAChD,MAAM,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnE,cAAc,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC;QAC/C,cAAc,CAAC,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC;KACtD,CAAC,CAAC;IAEH,oCAAoC;IACpC,MAAM,WAAW,GAAsB;QACrC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5D,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;KACnE,CAAC;IAEF,MAAM,eAAe,GAAG,0BAA0B,CAChD,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAC1D,CAAC;IAEF,mFAAmF;IACnF,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAC1D,CAAC,MAAM,CAAC;IAET,MAAM,QAAQ,GAAG,uBAAuB,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE;QACtE,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QAChD,OAAO,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,qDAAqD;IACrD,2BAA2B,CACzB,iBAAiB,EACjB,QAAQ,CAAC,iBAAiB,EAC1B,QAAQ,CAAC,YAAY,CAAC,MAAM,EAC5B,MAAM,CACP,CAAC;IAEF,oDAAoD;IACpD,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,+DAA+D,CAAC,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,cAAc,GAAG,oBAAoB;QACzC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpC,IAAI,EAAE,kBAAkB,CAAC,KAAK,EAAE,sBAAsB,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;YAC9E,QAAQ,EAAE,oBAAoB,CAAC,KAAK,EAAE,YAAY,CAAC;SACpD,CAAC,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,cAAc,CAAC,MAAM,GAAG,8BAA8B,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,iBAAiB,EAAE,EAAE,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC;IACvD,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,cAAc,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,eAAe,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QAC5F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,MAAM,cAAc,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,iBAAiB,EAAE,EAAE,CAAC;IAC5B,MAAM,8BAA8B,CAClC,cAAc,EACd,SAAS,EACT,QAAQ,EACR,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAC/D,MAAM,CACP,CAAC;IAEF,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,iBAAiB,EAAE,EAAE,CAAC;QAC5B,MAAM,cAAc,CAAC,wBAAwB,CAAC,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IACrF,CAAC;IAED,wBAAwB;IACxB,MAAM,WAAW,EAAE,EAAE,CAAC;IACtB,MAAM,iBAAiB,EAAE,EAAE,CAAC;IAC5B,MAAM,cAAc,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IAErE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,cAA8B,EAC9B,SAAiB,EACjB,QAAgB,EAChB,sBAAyC,EACzC,MAAqB;IAErB,MAAM,mBAAmB,GAAG,IAAI,GAAG,CACjC,MAAM;SACH,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC;SAC7E,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CACjD,CAAC;IAEF,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;QAC7C,MAAM,YAAY,GAAG,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC5B,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAC1D,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,CACrC,CAAC;QACF,IAAI,YAAY,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,MAAM,CACV,6CAA6C,OAAO,CAAC,EAAE,KACrD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,OAAO,gCAAgC,CAAC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,2BAA2B,CAClC,iBAAyB,EACzB,iBAAyB,EACzB,iBAAyB,EACzB,SAAwB;IAExB,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,iBAAiB,iCAAiC,CAAC,CAAC,CAAC;QAEhG,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,iBAAiB,gCAAgC,CAAC,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,kBAAkB,GAAG,SAAS,CAAC,MAAM,CACzC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;YACpD,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAC5C,CAAC,MAAM,CAAC;QACT,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,kBAAkB,mCAAmC,CAAC,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,mBAAmB,GACvB,iBAAiB,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,iBAAiB,CAAC;QACjF,IAAI,mBAAmB,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,mBAAmB,mCAAmC,CAAC,CAAC,CAAC;QACzF,CAAC;QAED,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,iBAAiB,sCAAsC,CAAC,CAAC,CAAC;QAC1F,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,iDAAiD,CAAC,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CAAC,4EAA4E,CAAC,CACzF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/lib/config.d.ts

@@ -1,4 +1,5 @@
-export declare const SUPPORTED_WORKFLOW_ACTIONS: readonly ["write", "git-diff", "git-add", "git-branch", "git-commit", "git-push", "has-diff", "stack-guard", "review-threshold", "save-artifact", "load-artifact", "artifact-exists", "create-review-artifact", "review-artifact-status", "review-artifact-add-finding", "review-artifact-update-findings", "verify-fix", "review-artifact-promote-finding", "review-artifact-resolve-finding", "create-change-request", "create-pr", "create-mr", "change-source", "review", "review-context", "describe", "code-quality-report", "post-comment", "post-review-comments", "post-fix-status"];
+import { type AgentPermissions, type AgentValidation } from './agent-permissions.js';
+export declare const SUPPORTED_WORKFLOW_ACTIONS: readonly ["write", "git-diff", "git-add", "git-branch", "git-commit", "git-push", "has-diff", "stack-guard", "review-threshold", "save-artifact", "load-artifact", "artifact-exists", "create-review-artifact", "review-artifact-status", "review-artifact-add-finding", "review-artifact-update-findings", "verify-fix", "review-artifact-promote-finding", "review-artifact-resolve-finding", "create-change-request", "create-pr", "create-mr", "change-source", "review", "review-context", "describe", "code-quality-report", "plan-wiki-update", "sync-okf-indexes", "validate-okf-wiki", "summarize-wiki-run", "record-wiki-state", "check-wiki-state", "check-wiki-clean", "post-comment", "post-review-comments", "post-fix-status"];
 export type WorkflowAction = (typeof SUPPORTED_WORKFLOW_ACTIONS)[number];
 /**
  * Agent reference - supports both simple string and detailed object format.
@@ -62,14 +63,29 @@ export interface WorkflowNodeConfig {
     writes?: string;
     /** Emit JSON for an agent node when writing to a file. */
     json?: boolean;
+    /** Runtime-enforced capabilities for this agent invocation. */
+    permissions?: AgentPermissions;
+    /** Content validators run inside policy-aware mutation tools. */
+    validation?: AgentValidation;
 }
 export interface WorkflowConfig {
     description?: string;
+    metadata?: WorkflowMetadata;
     inputs?: Record<string, WorkflowInputConfig>;
     /** Artifact key to expose as the workflow output. Defaults to the last node output. */
     output?: string;
     nodes: Record<string, WorkflowNodeConfig>;
 }
+export interface WorkflowMetadata {
+    kind?: string;
+    tags?: string[];
+    review?: {
+        source?: string;
+        diff?: boolean;
+        issues?: boolean;
+    };
+    [key: string]: unknown;
+}
 export type WorkflowSource = 'packaged' | 'project';
 export interface AgentDefaultsConfig {
     model?: string;
@@ -206,6 +222,16 @@ export interface DRSConfig {
     workflow?: {
         default?: string;
     };
+    temporal?: {
+        address?: string;
+        namespace?: string;
+        taskQueue?: string;
+        workflowIdPrefix?: string;
+        workspace?: {
+            mode?: 'local' | 'managed';
+            root?: string;
+        };
+    };
     /**
      * @deprecated Use `pi` instead. Kept as a compatibility alias for legacy configs.
      */