@djibrilm/lazy-review 0.0.1

package/dist/modules/ai-agent/review-pipeline/secret-scanner.d.ts

@@ -0,0 +1,25 @@
+import type { ReviewerCandidate } from './types.js';
+export interface SecretScannerOpts {
+    modelId: string;
+    kvCacheId?: string | undefined;
+    progress?: ((m: string) => void) | undefined;
+}
+/**
+ * File-name patterns that flag a changed file as a likely carrier of secrets.
+ * These are used to steer the Secret Scanner agent (and are matched over the
+ * PR diff file names) before it deep-dives into a file's diff content.
+ */
+export declare const SENSITIVE_FILE_PATTERNS: RegExp[];
+/**
+ * Secret Scanner agent.
+ *
+ * In charge of finding sensitive files and leaked secrets that should never reach
+ * GitHub (env files, private keys, credential bundles, etc.). It reviews the PR's
+ * changed file names; when a name may contain secrets it calls the
+ * `read_pr_file_diff` tool to read that file's diff and CONFIRM the secret exists.
+ *
+ * Returns confirmed findings as security ReviewerCandidates so they flow through
+ * the pipeline's verifier, ranker, and writer.
+ */
+export declare function scanSensitiveFiles(opts: SecretScannerOpts, diffText: string): Promise<ReviewerCandidate[]>;
+//# sourceMappingURL=secret-scanner.d.ts.map

package/dist/modules/ai-agent/review-pipeline/secret-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-scanner.d.ts","sourceRoot":"","sources":["../../../../src/modules/ai-agent/review-pipeline/secret-scanner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC9C;AAED;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,EAY3C,CAAC;AAkBF;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,iBAAiB,EACvB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA2F9B"}

package/dist/modules/ai-agent/review-pipeline/secret-scanner.js

@@ -0,0 +1,159 @@
+import { extractJson, parseDiff } from '../ai-agent.utils.js';
+import { runAgentLoop } from './agent-loop.js';
+/**
+ * File-name patterns that flag a changed file as a likely carrier of secrets.
+ * These are used to steer the Secret Scanner agent (and are matched over the
+ * PR diff file names) before it deep-dives into a file's diff content.
+ */
+export const SENSITIVE_FILE_PATTERNS = [
+    /(^|\/)\.env([^/]*)$/i, // .env, .env.local, .env.production, ...
+    /\.env\.(local|dev|development|test|staging|prod|production|example)$/i,
+    /\.(pem|p12|pfx|p8|key|keystore|jks|ppk)$/i,
+    /(^|\/)(id_rsa|id_dsa|id_ecdsa|id_ed25519)(\.pub)?$/i,
+    /(^|\/)(credentials|secret|secrets)([^/]*)$/i,
+    /(^|\/)secret\.(ya?ml|json|env)$/i,
+    /service-account[^/]*\.json$/i,
+    /google-credentials[^/]*\.json$/i,
+    /(^|\/)\.(npmrc|pypirc|netrc|htpasswd)$/i,
+    /(^|\/)dockerconfigjson$/i,
+    /(^|\/)\.docker\/config\.json$/i,
+];
+const BUDGET = 12;
+const FILE_NAME_GUIDANCE = `
+Watch carefully for file NAMES that commonly hold secrets and must NEVER be committed:
+- Environment files: .env, .env.local, .env.production, .env.*
+- Private key / certificate material: *.pem, *.key, *.p12, *.pfx, *.p8, *.keystore, *.jks, id_rsa, id_dsa, id_ecdsa, id_ed25519
+- Credential / secret bundles: credentials*, secret(s).yaml|json|env, service-account*.json, google-credentials*.json, .npmrc, .pypirc, .netrc, .htpasswd, dockerconfigjson`;
+const CONFIRMATION_RULE = `
+Only report a finding when you CONFIRMED an actual secret in the file's diff content,
+such as: KEY=VALUE assignments where the value looks like a credential, tokens,
+passwords, connection strings, or an "-----BEGIN (RSA|OPENSSH|EC) PRIVATE KEY-----" block.
+Do NOT report files whose diff contains only placeholders, empty values, or example data.
+For each confirmed file, set evidence to the exact secret-bearing line(s) and
+location to the file (and line when the diff reveals it).`;
+/**
+ * Secret Scanner agent.
+ *
+ * In charge of finding sensitive files and leaked secrets that should never reach
+ * GitHub (env files, private keys, credential bundles, etc.). It reviews the PR's
+ * changed file names; when a name may contain secrets it calls the
+ * `read_pr_file_diff` tool to read that file's diff and CONFIRM the secret exists.
+ *
+ * Returns confirmed findings as security ReviewerCandidates so they flow through
+ * the pipeline's verifier, ranker, and writer.
+ */
+export async function scanSensitiveFiles(opts, diffText) {
+    const parsedDiff = parseDiff(diffText);
+    if (parsedDiff.length === 0)
+        return [];
+    const byFile = new Map(parsedDiff.map((f) => [f.file, f.diff]));
+    const changedFiles = parsedDiff.map((f) => f.file);
+    const system = `You are the Secret Scanner agent in a code review pipeline.
+
+Your ONLY job is to find files that should NEVER be committed to GitHub because
+they contain secrets (API keys, passwords, tokens, private keys, database credentials).
+
+You receive the list of file paths changed in this PR. Inspect every file NAME.
+${FILE_NAME_GUIDANCE}
+
+If a file NAME looks like it may contain secrets, call the read_pr_file_diff tool
+with its full path to read the actual diff content for that file.
+${CONFIRMATION_RULE}
+
+Use "evidence" only from the diff content returned by read_pr_file_diff.
+
+Output ONLY a JSON array of confirmed findings:
+[{"hypothesis":"...","confidence":0.0-1.0,"impactScore":1-4,"likelihoodScore":1-4,"impactDescription":"...","recommendation":"...","invariant":"...","evidence":[{"fact":"...","source":"file:line"}],"location":{"file":"src/.env","line":3}}]`;
+    const tools = [
+        {
+            name: 'read_pr_file_diff',
+            description: 'Read the exact diff content for a specific file changed in this PR. Use this to confirm whether a sensitive-named file actually contains secrets.',
+            handler: async (a) => {
+                const p = String(a.file_path ?? a.filePath ?? '');
+                if (!p)
+                    return { error: 'file_path (or filePath) is required.' };
+                const diff = byFile.get(p);
+                if (diff === undefined)
+                    return { error: `File "${p}" is not in this PR's diff.` };
+                return { file: p, diff };
+            },
+        },
+    ];
+    const result = await runAgentLoop({
+        modelId: opts.modelId,
+        systemPrompt: system,
+        userMessage: `## Files changed in this PR\n${changedFiles
+            .map((f) => '- ' + f)
+            .join('\n')}\n\n${FILE_NAME_GUIDANCE}\n\nReview each file name above. For any name that may hold secrets, call read_pr_file_diff to read its diff and CONFIRM the secret. Output the JSON array of confirmed findings when done.`,
+        tools,
+        maxIterations: 10,
+        maxToolCalls: BUDGET + 1,
+        maxSourceTokens: 10_000,
+        kvCacheId: opts.kvCacheId,
+        progress: (m) => opts.progress?.('[SecretScanner] ' + m),
+        finalize: 'Output ONLY a JSON array (possibly empty) of confirmed findings. No markdown.',
+    });
+    try {
+        const parsed = extractJson(result.text);
+        const arr = Array.isArray(parsed)
+            ? parsed
+            : Array.isArray(parsed.findings)
+                ? parsed.findings
+                : [];
+        return arr
+            .filter((f) => f && typeof f.hypothesis === 'string')
+            .map((f) => {
+            const c = {
+                category: 'security',
+                hypothesis: String(f.hypothesis),
+                confidence: clamp(f.confidence),
+                evidence: Array.isArray(f.evidence)
+                    ? f.evidence.map((e) => ({
+                        fact: String(e.fact ?? ''),
+                        source: String(e.source ?? ''),
+                    }))
+                    : [],
+            };
+            const impactScore = clampScore(f.impactScore);
+            if (impactScore !== undefined)
+                c.impactScore = impactScore;
+            const likelihoodScore = clampScore(f.likelihoodScore);
+            if (likelihoodScore !== undefined)
+                c.likelihoodScore = likelihoodScore;
+            if (f.impactDescription)
+                c.impactDescription = String(f.impactDescription);
+            if (f.recommendation)
+                c.recommendation = String(f.recommendation);
+            if (f.invariant)
+                c.invariant = String(f.invariant);
+            const loc = buildLocation(f.location);
+            if (loc)
+                c.location = loc;
+            return c;
+        });
+    }
+    catch {
+        return [];
+    }
+}
+function clamp(n) {
+    const v = Number(n);
+    return Number.isFinite(v) ? Math.min(1, Math.max(0, v)) : 0.5;
+}
+function clampScore(n) {
+    const v = Number(n);
+    if (!Number.isFinite(v))
+        return undefined;
+    return Math.min(4, Math.max(1, Math.round(v)));
+}
+function buildLocation(loc) {
+    if (!loc || typeof loc !== 'object')
+        return undefined;
+    const o = loc;
+    const file = String(o.file ?? '');
+    if (!file)
+        return undefined;
+    const line = Number(o.line);
+    return { file, ...(Number.isFinite(line) && line > 0 ? { line } : {}) };
+}
+//# sourceMappingURL=secret-scanner.js.map

package/dist/modules/ai-agent/review-pipeline/secret-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-scanner.js","sourceRoot":"","sources":["../../../../src/modules/ai-agent/review-pipeline/secret-scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAuB,MAAM,iBAAiB,CAAC;AASpE;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAa;IAC/C,sBAAsB,EAAE,yCAAyC;IACjE,uEAAuE;IACvE,2CAA2C;IAC3C,qDAAqD;IACrD,6CAA6C;IAC7C,kCAAkC;IAClC,8BAA8B;IAC9B,iCAAiC;IACjC,yCAAyC;IACzC,0BAA0B;IAC1B,gCAAgC;CACjC,CAAC;AAEF,MAAM,MAAM,GAAG,EAAE,CAAC;AAElB,MAAM,kBAAkB,GAAG;;;;4KAIiJ,CAAC;AAE7K,MAAM,iBAAiB,GAAG;;;;;;0DAMgC,CAAC;AAE3D;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAuB,EACvB,QAAgB;IAEhB,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEnD,MAAM,MAAM,GAAG;;;;;;EAMf,kBAAkB;;;;EAIlB,iBAAiB;;;;;gPAK6N,CAAC;IAE/O,MAAM,KAAK,GAAqB;QAC9B;YACE,IAAI,EAAE,mBAAmB;YACzB,WAAW,EACT,mJAAmJ;YACrJ,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBACnB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;gBAClD,IAAI,CAAC,CAAC;oBAAE,OAAO,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;gBACjE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC3B,IAAI,IAAI,KAAK,SAAS;oBAAE,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,6BAA6B,EAAE,CAAC;gBAClF,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;YAC3B,CAAC;SACF;KACF,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;QAChC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,gCAAgC,YAAY;aACtD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC;aACpB,IAAI,CACH,IAAI,CACL,OAAO,kBAAkB,6LAA6L;QACzN,KAAK;QACL,aAAa,EAAE,EAAE;QACjB,YAAY,EAAE,MAAM,GAAG,CAAC;QACxB,eAAe,EAAE,MAAM;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,kBAAkB,GAAG,CAAC,CAAC;QACxD,QAAQ,EAAE,+EAA+E;KAC1F,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,GAAG,GAAU,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACtC,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAC9B,CAAC,CAAC,MAAM,CAAC,QAAQ;gBACjB,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,GAAG;aACP,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC;aACzD,GAAG,CAAC,CAAC,CAAM,EAAqB,EAAE;YACjC,MAAM,CAAC,GAAsB;gBAC3B,QAAQ,EAAE,UAAU;gBACpB,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;gBAChC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;gBAC/B,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;oBACjC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;wBAC1B,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;wBAC1B,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;qBAC/B,CAAC,CAAC;oBACL,CAAC,CAAC,EAAE;aACP,CAAC;YACF,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAC9C,IAAI,WAAW,KAAK,SAAS;gBAAE,CAAC,CAAC,WAAW,GAAG,WAAW,CAAC;YAC3D,MAAM,eAAe,GAAG,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YACtD,IAAI,eAAe,KAAK,SAAS;gBAAE,CAAC,CAAC,eAAe,GAAG,eAAe,CAAC;YACvE,IAAI,CAAC,CAAC,iBAAiB;gBAAE,CAAC,CAAC,iBAAiB,GAAG,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC3E,IAAI,CAAC,CAAC,cAAc;gBAAE,CAAC,CAAC,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;YAClE,IAAI,CAAC,CAAC,SAAS;gBAAE,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACnD,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAI,GAAG;gBAAE,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC;YAC1B,OAAO,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;IACP,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,CAAU;IACvB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AAChE,CAAC;AAED,SAAS,UAAU,CAAC,CAAU;IAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAkB,CAAC;AAClE,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC1E,CAAC"}

package/dist/modules/ai-agent/review-pipeline/specialist-reviewer.d.ts

@@ -0,0 +1,9 @@
+import type { ExplorerAnswer, ReviewerCandidate, ReviewCategory } from './types.js';
+export interface ReviewerOpts {
+    modelId: string;
+    kvCacheId?: string;
+    progress?: (m: string) => void;
+    askExplorer: (q: string) => Promise<ExplorerAnswer>;
+}
+export declare function reviewAsSpecialist(category: ReviewCategory, opts: ReviewerOpts, diffText: string, changeContext: string): Promise<ReviewerCandidate[]>;
+//# sourceMappingURL=specialist-reviewer.d.ts.map

package/dist/modules/ai-agent/review-pipeline/specialist-reviewer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"specialist-reviewer.d.ts","sourceRoot":"","sources":["../../../../src/modules/ai-agent/review-pipeline/specialist-reviewer.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEpF,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;CACrD;AAID,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,YAAY,EAClB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAoF9B"}

package/dist/modules/ai-agent/review-pipeline/specialist-reviewer.js

@@ -0,0 +1,114 @@
+import { extractJson } from '../ai-agent.utils.js';
+import { runAgentLoop } from './agent-loop.js';
+import { REVIEWER_DESCRIPTIONS } from './types.js';
+const BUDGET = 5;
+export async function reviewAsSpecialist(category, opts, diffText, changeContext) {
+    const { description, focus } = REVIEWER_DESCRIPTIONS[category];
+    const system = `You are a ${category} code reviewer.
+
+${description}
+FOCUS: ${focus}
+
+You do NOT have raw file access. To investigate, ask the Repository Explorer
+precise questions via the ask_explorer tool. You have ${BUDGET} investigations.
+
+LOOP: form hypothesis → ask precise question → review evidence → supported/rejected.
+STOP when: confirmed, disproven, further exploration unlikely to change conclusion, or budget exhausted.
+
+Output ONLY a JSON array of candidate findings:
+[{"category":"${category}","hypothesis":"...","confidence":0.0-1.0,"impactScore":1-4,"likelihoodScore":1-4,"impactDescription":"...","recommendation":"...","invariant":"...","evidence":[{"fact":"...","source":"file:line"}],"location":{"file":"src/x.ts","line":42}}]
+Use "evidence" only from Explorer answers.`;
+    const tools = [
+        {
+            name: 'ask_explorer',
+            description: 'Ask the Repository Explorer a precise question. Returns evidence facts.',
+            handler: async (a) => {
+                const q = String(a.question ?? a.q ?? '');
+                if (!q)
+                    return { error: 'question required' };
+                const ans = await opts.askExplorer(q);
+                return {
+                    question: ans.question,
+                    facts: ans.facts,
+                    confidence: ans.confidence,
+                    missingEvidence: ans.missingEvidence,
+                };
+            },
+        },
+    ];
+    const result = await runAgentLoop({
+        modelId: opts.modelId,
+        systemPrompt: system,
+        userMessage: `## ${category.toUpperCase()} REVIEW\n## Diff\n\`\`\`diff\n${diffText.slice(0, 8000)}\n\`\`\`\n${changeContext ? `\n## Context\n${changeContext}` : ''}\n\nReview this change for ${category} issues. Ask the explorer for evidence. Output the JSON array when done.`,
+        tools,
+        maxIterations: 8,
+        maxToolCalls: BUDGET + 1,
+        maxSourceTokens: 10_000,
+        kvCacheId: opts.kvCacheId,
+        progress: (m) => opts.progress?.('[' + category + '] ' + m),
+        finalize: 'Output ONLY a JSON array (possibly empty) of candidate findings. No markdown.',
+    });
+    try {
+        const parsed = extractJson(result.text);
+        const arr = Array.isArray(parsed)
+            ? parsed
+            : Array.isArray(parsed.findings)
+                ? parsed.findings
+                : [];
+        return arr
+            .filter((f) => f && typeof f.hypothesis === 'string')
+            .map((f) => {
+            const c = {
+                category,
+                hypothesis: String(f.hypothesis),
+                confidence: clamp(f.confidence),
+                evidence: Array.isArray(f.evidence)
+                    ? f.evidence.map((e) => ({
+                        fact: String(e.fact ?? ''),
+                        source: String(e.source ?? ''),
+                    }))
+                    : [],
+            };
+            const impactScore = clampScore(f.impactScore);
+            if (impactScore !== undefined)
+                c.impactScore = impactScore;
+            const likelihoodScore = clampScore(f.likelihoodScore);
+            if (likelihoodScore !== undefined)
+                c.likelihoodScore = likelihoodScore;
+            if (f.impactDescription)
+                c.impactDescription = String(f.impactDescription);
+            if (f.recommendation)
+                c.recommendation = String(f.recommendation);
+            if (f.invariant)
+                c.invariant = String(f.invariant);
+            const loc = buildLocation(f.location);
+            if (loc)
+                c.location = loc;
+            return c;
+        });
+    }
+    catch {
+        return [];
+    }
+}
+function clamp(n) {
+    const v = Number(n);
+    return Number.isFinite(v) ? Math.min(1, Math.max(0, v)) : 0.5;
+}
+function clampScore(n) {
+    const v = Number(n);
+    if (!Number.isFinite(v))
+        return undefined;
+    return Math.min(4, Math.max(1, Math.round(v)));
+}
+function buildLocation(loc) {
+    if (!loc || typeof loc !== 'object')
+        return undefined;
+    const o = loc;
+    const file = String(o.file ?? '');
+    if (!file)
+        return undefined;
+    const line = Number(o.line);
+    return { file, ...(Number.isFinite(line) && line > 0 ? { line } : {}) };
+}
+//# sourceMappingURL=specialist-reviewer.js.map

package/dist/modules/ai-agent/review-pipeline/specialist-reviewer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"specialist-reviewer.js","sourceRoot":"","sources":["../../../../src/modules/ai-agent/review-pipeline/specialist-reviewer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAuB,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAUnD,MAAM,MAAM,GAAG,CAAC,CAAC;AAEjB,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAwB,EACxB,IAAkB,EAClB,QAAgB,EAChB,aAAqB;IAErB,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAE/D,MAAM,MAAM,GAAG,aAAa,QAAQ;;EAEpC,WAAW;SACJ,KAAK;;;wDAG0C,MAAM;;;;;;gBAM9C,QAAQ;2CACmB,CAAC;IAE1C,MAAM,KAAK,GAAqB;QAC9B;YACE,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,yEAAyE;YACtF,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBACnB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC1C,IAAI,CAAC,CAAC;oBAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;gBAC9C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;gBACtC,OAAO;oBACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,eAAe,EAAE,GAAG,CAAC,eAAe;iBACrC,CAAC;YACJ,CAAC;SACF;KACF,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;QAChC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,MAAM,QAAQ,CAAC,WAAW,EAAE,iCAAiC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,aAAa,aAAa,CAAC,CAAC,CAAC,iBAAiB,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,8BAA8B,QAAQ,0EAA0E;QACnR,KAAK;QACL,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,MAAM,GAAG,CAAC;QACxB,eAAe,EAAE,MAAM;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,GAAG,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC;QAC3D,QAAQ,EAAE,+EAA+E;KAC1F,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC/B,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAC9B,CAAC,CAAC,MAAM,CAAC,QAAQ;gBACjB,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,GAAG;aACP,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC;aACzD,GAAG,CAAC,CAAC,CAAM,EAAqB,EAAE;YACjC,MAAM,CAAC,GAAsB;gBAC3B,QAAQ;gBACR,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;gBAChC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;gBAC/B,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;oBACjC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;wBAC1B,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;wBAC1B,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;qBAC/B,CAAC,CAAC;oBACL,CAAC,CAAC,EAAE;aACP,CAAC;YACF,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAC9C,IAAI,WAAW,KAAK,SAAS;gBAAE,CAAC,CAAC,WAAW,GAAG,WAAW,CAAC;YAC3D,MAAM,eAAe,GAAG,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YACtD,IAAI,eAAe,KAAK,SAAS;gBAAE,CAAC,CAAC,eAAe,GAAG,eAAe,CAAC;YACvE,IAAI,CAAC,CAAC,iBAAiB;gBAAE,CAAC,CAAC,iBAAiB,GAAG,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC3E,IAAI,CAAC,CAAC,cAAc;gBAAE,CAAC,CAAC,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;YAClE,IAAI,CAAC,CAAC,SAAS;gBAAE,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACnD,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAI,GAAG;gBAAE,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC;YAC1B,OAAO,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;IACP,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,CAAU;IACvB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AAChE,CAAC;AAED,SAAS,UAAU,CAAC,CAAU;IAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAkB,CAAC;AAClE,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC1E,CAAC"}

package/dist/modules/ai-agent/review-pipeline/types.d.ts

@@ -0,0 +1,53 @@
+export type ReviewCategory = 'correctness' | 'security' | 'performance' | 'concurrency' | 'architecture' | 'maintainability';
+export type Severity = 'info' | 'warning' | 'critical';
+export interface Evidence {
+    fact: string;
+    source: string;
+}
+export interface ExplorerAnswer {
+    question: string;
+    facts: Evidence[];
+    confidence: number;
+    missingEvidence: boolean;
+}
+export interface ReviewerCandidate {
+    category: ReviewCategory;
+    hypothesis: string;
+    confidence: number;
+    impactScore?: 1 | 2 | 3 | 4;
+    likelihoodScore?: 1 | 2 | 3 | 4;
+    impactDescription?: string;
+    recommendation?: string;
+    invariant?: string;
+    evidence: Evidence[];
+    location?: {
+        file: string;
+        line?: number;
+    };
+}
+export interface VerifierVerdict {
+    verdict: 'confirmed' | 'disproven';
+    confidence: number;
+    supportingEvidence?: string[];
+    counterEvidence?: string[];
+    recommendation?: string;
+    invariant?: string;
+}
+export interface ChangeModel {
+    purpose: string;
+    changedComponents: string[];
+    behaviorsIntroduced: string[];
+    behaviorsModified: string[];
+    stateIntroduced: string[];
+    externalBoundaries: string[];
+    risks: string[];
+    investigationQuestions: string[];
+    reviewers: ReviewCategory[];
+}
+export declare const REVIEWER_DESCRIPTIONS: Record<ReviewCategory, {
+    description: string;
+    focus: string;
+}>;
+export declare function severityFromScore(impact: number, likelihood: number): Severity;
+export declare function impactSeverityToLegacy(severity: Severity): 'critical' | 'warning' | 'suggestion';
+//# sourceMappingURL=types.d.ts.map

package/dist/modules/ai-agent/review-pipeline/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/modules/ai-agent/review-pipeline/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GACtB,aAAa,GACb,UAAU,GACV,aAAa,GACb,aAAa,GACb,cAAc,GACd,iBAAiB,CAAC;AAEtB,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;AAEvD,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,cAAc,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,eAAe,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACrB,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5C;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,WAAW,GAAG,WAAW,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,SAAS,EAAE,cAAc,EAAE,CAAC;CAC7B;AAED,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,cAAc,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAqC9F,CAAC;AAEJ,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,QAAQ,CAK9E;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,YAAY,CAShG"}

package/dist/modules/ai-agent/review-pipeline/types.js

@@ -0,0 +1,45 @@
+export const REVIEWER_DESCRIPTIONS = {
+    correctness: {
+        description: 'Detect correctness bugs: race conditions, null dereferences, stale state, incorrect edge-case handling, and logic errors.',
+        focus: 'Does this change behave correctly under edge cases, unusual inputs, or unexpected ordering?',
+    },
+    security: {
+        description: 'Detect security vulnerabilities: injection, broken authorization, missing validation, unsafe deserialization, and leaked secrets.',
+        focus: 'Can an attacker leverage this change to violate confidentiality, integrity, or availability?',
+    },
+    performance: {
+        description: 'Detect performance problems: quadratic loops, blocking work in hot paths, unbounded queues, and wasted computation.',
+        focus: 'Does this change introduce latency, memory growth, or throughput regressions under realistic load?',
+    },
+    concurrency: {
+        description: 'Detect concurrency bugs: shared-state races, missing synchronization, deadlock, and unsafe async ordering.',
+        focus: 'Can this change corrupt state when multiple requests, connections, or processes interleave?',
+    },
+    architecture: {
+        description: 'Detect architectural defects: layer violations, hidden coupling, missing abstractions, and design-level breakage.',
+        focus: 'Does this change respect the module boundaries and architecture, or does it introduce structural debt?',
+    },
+    maintainability: {
+        description: 'Detect maintainability issues: duplicated logic, dead branches, unclear naming, and untestable code.',
+        focus: 'Will maintainers be able to safely modify or extend this code later?',
+    },
+};
+export function severityFromScore(impact, likelihood) {
+    const score = impact * likelihood;
+    if (score >= 9)
+        return 'critical';
+    if (score >= 4)
+        return 'warning';
+    return 'info';
+}
+export function impactSeverityToLegacy(severity) {
+    switch (severity) {
+        case 'critical':
+            return 'critical';
+        case 'warning':
+            return 'warning';
+        case 'info':
+            return 'suggestion';
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/modules/ai-agent/review-pipeline/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/modules/ai-agent/review-pipeline/types.ts"],"names":[],"mappings":"AAwDA,MAAM,CAAC,MAAM,qBAAqB,GAChC;IACE,WAAW,EAAE;QACX,WAAW,EACT,2HAA2H;QAC7H,KAAK,EACH,6FAA6F;KAChG;IACD,QAAQ,EAAE;QACR,WAAW,EACT,mIAAmI;QACrI,KAAK,EACH,8FAA8F;KACjG;IACD,WAAW,EAAE;QACX,WAAW,EACT,qHAAqH;QACvH,KAAK,EACH,oGAAoG;KACvG;IACD,WAAW,EAAE;QACX,WAAW,EACT,4GAA4G;QAC9G,KAAK,EACH,6FAA6F;KAChG;IACD,YAAY,EAAE;QACZ,WAAW,EACT,mHAAmH;QACrH,KAAK,EACH,wGAAwG;KAC3G;IACD,eAAe,EAAE;QACf,WAAW,EACT,sGAAsG;QACxG,KAAK,EAAE,sEAAsE;KAC9E;CACF,CAAC;AAEJ,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,UAAkB;IAClE,MAAM,KAAK,GAAG,MAAM,GAAG,UAAU,CAAC;IAClC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACjC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAkB;IACvD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,YAAY,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/modules/ai-agent/tool-executor.d.ts

@@ -0,0 +1,37 @@
+import type { MainModule } from '../main.module.js';
+import type { RuntimeTool, ToolContext } from './tool-types.js';
+export declare function normalizeToolArguments(value: unknown): Record<string, unknown>;
+export declare function serializeToolResult(result: unknown): string;
+/**
+ * Validates that no duplicate tool names reach inference. Duplicate names
+ * cause silent, non-deterministic execution because the first match wins.
+ */
+export declare function validateTools(tools: RuntimeTool[]): RuntimeTool[];
+/**
+ * Resolves a model-emitted tool name (which may be an alias or hallucination)
+ * to the actual registered runtime tool name.
+ */
+export declare function resolveToolName(name: string): string;
+/**
+ * Centralizes tool execution. The LLM proposes an action; the runtime decides
+ * whether it is allowed to execute it.
+ *
+ *   validate args → determine effect → build preview → ask confirmation if
+ *   required → execute → record audit event
+ */
+export declare class ToolExecutor {
+    private mainModule;
+    private tools;
+    constructor(tools: RuntimeTool[], mainModule: MainModule);
+    getTool(name: string): RuntimeTool | undefined;
+    hasTool(name: string): boolean;
+    get names(): string[];
+    /**
+     * Execute a single tool call. Mutation tools (effect !== 'read') that
+     * declare confirmation.required will be gated behind a structured
+     * confirmation request bound to the initiating socket.
+     */
+    execute(toolCall: any, context: ToolContext): Promise<unknown>;
+    private requestConfirmation;
+}
+//# sourceMappingURL=tool-executor.d.ts.map

package/dist/modules/ai-agent/tool-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-executor.d.ts","sourceRoot":"","sources":["../../../src/modules/ai-agent/tool-executor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAA4B,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE1F,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgB9E;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAQ3D;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,CAWjE;AA6BD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;;;;;GAMG;AACH,qBAAa,YAAY;IAKrB,OAAO,CAAC,UAAU;IAJpB,OAAO,CAAC,KAAK,CAAuC;gBAGlD,KAAK,EAAE,WAAW,EAAE,EACZ,UAAU,EAAE,UAAU;IAQhC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAM9C,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI9B,IAAI,KAAK,IAAI,MAAM,EAAE,CAEpB;IAED;;;;OAIG;IACG,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;YAiEtD,mBAAmB;CAoDlC"}