@kya-os/cli 1.8.1 → 1.8.3

package/dist/utils/agent/markers.js

@@ -0,0 +1,147 @@
+import { FixAttestationSchema, ReviewVerdictBodySchema, } from "@kya-os/contracts/review";
+import { verifyReviewVerdictProof } from "@kya-os/contracts/review/verify";
+import { sanitizeForMarkdownBlock } from "../dco/fix.js";
+const VERDICT_MARKER_PATTERN = /<!-- kya-os-verdict:v1 repo=(\S+) pr=(\d+) head=([0-9a-f]{40}) reviewer=(\S+) -->/;
+function sanitizedMarkerFields(marker) {
+    return {
+        repo: sanitizeForMarkdownBlock(marker.repo),
+        prNumber: marker.prNumber,
+        headSha: marker.headSha,
+        reviewerDid: sanitizeForMarkdownBlock(marker.reviewerDid),
+    };
+}
+export function buildVerdictMarker(marker) {
+    const safe = sanitizedMarkerFields(marker);
+    return `<!-- kya-os-verdict:v1 repo=${safe.repo} pr=${safe.prNumber} head=${safe.headSha} reviewer=${safe.reviewerDid} -->`;
+}
+/** Parse the first `kya-os-verdict:v1` marker out of a review/comment body, if present. */
+export function findVerdictMarker(body) {
+    const match = VERDICT_MARKER_PATTERN.exec(body);
+    if (!match)
+        return null;
+    return { repo: match[1], prNumber: Number(match[2]), headSha: match[3], reviewerDid: match[4] };
+}
+function markerMatches(marker, target) {
+    return (marker !== null &&
+        marker.repo === target.repo &&
+        marker.prNumber === target.prNumber &&
+        marker.headSha === target.headSha &&
+        marker.reviewerDid === target.reviewerDid);
+}
+/**
+ * Whether any of `bodies` already carries a marker for the exact same
+ * `(repo, pr, head, reviewer)` — the idempotency check `kya-os agent
+ * review` runs before posting a new verdict for a head it may have already
+ * reviewed (e.g. the hub/PR replaying events to a reconnecting consumer, or
+ * a `--watch` loop's own poll tick landing right after its own post).
+ */
+export function hasVerdictMarker(bodies, target) {
+    const safeTarget = sanitizedMarkerFields(target);
+    return bodies.some((body) => markerMatches(findVerdictMarker(body), safeTarget));
+}
+/**
+ * Find the `ReviewVerdictBody` actually posted AND cryptographically
+ * verified for `target`'s `(repo, pr, head, reviewer)`, if any. Used on an
+ * idempotent skip to recover the TRUE prior verdict instead of trusting a
+ * freshly recomputed one: the review-analysis pass is LLM-driven and can be
+ * non-deterministic, so re-running it against an already-reviewed head can
+ * produce a different verdict than what is actually signed and posted on
+ * the PR. A caller that returned the recompute instead (e.g. treating a
+ * recomputed "approve" as equivalent to a truly-posted one) could report
+ * success without a real approve ever having landed.
+ *
+ * `publicKeyRaw` MUST be this reviewer's own Ed25519 public key -- the only
+ * key a genuine prior post from this same `reviewerDid` could have signed
+ * with. This is not optional: the marker is free text and a fenced block's
+ * shape is Zod-checked only, so without a signature check anyone who can
+ * post a `COMMENT` review could plant a matching marker plus a schema-valid
+ * but unsigned "approve" block and have it trusted as a real prior post. The
+ * search keeps scanning past a marker match whose block is missing, corrupt,
+ * or fails verification, rather than stopping at the first one found --
+ * a forged comment must never be able to shadow a real, later, genuinely
+ * signed post. Returns `null` (never a partial/unverified value) when no
+ * candidate verifies, so a caller can tell "nothing genuine was posted" from
+ * "something was posted"; treating null the same as "not yet posted" (i.e.
+ * proceeding to post a real verdict) is the correct, fail-safe response to
+ * either a missing OR a forged prior post.
+ */
+export function findPostedVerdict(bodies, target, publicKeyRaw) {
+    const safeTarget = sanitizedMarkerFields(target);
+    for (const body of bodies) {
+        if (!markerMatches(findVerdictMarker(body), safeTarget))
+            continue;
+        for (const verdict of extractSignedVerdicts(body)) {
+            const subjectMatches = verdict.subject.repo === target.repo &&
+                verdict.subject.prNumber === target.prNumber &&
+                verdict.subject.headSha === target.headSha;
+            if (subjectMatches && verifyReviewVerdictProof(verdict, publicKeyRaw)) {
+                return verdict;
+            }
+        }
+    }
+    return null;
+}
+/**
+ * Build the review body posted for a signed verdict: the idempotency
+ * marker, a human-readable findings section, then the fenced
+ * `kya-os-signed-verdict` JSON block `kya-os agent verify` reads back.
+ * `findingsSummary` is caller-built (severity/path:line/summary lines) so
+ * this function stays about structure, not findings formatting.
+ */
+export function buildVerdictReviewBody(verdict, reviewerDid, findingsSummary) {
+    const marker = buildVerdictMarker({
+        repo: verdict.subject.repo,
+        prNumber: verdict.subject.prNumber,
+        headSha: verdict.subject.headSha,
+        reviewerDid,
+    });
+    const block = ["```kya-os-signed-verdict", JSON.stringify(verdict, null, 2), "```"].join("\n");
+    return [marker, "", findingsSummary, "", block, ""].join("\n");
+}
+/**
+ * Extract every ` ```<tag> ... ``` ` fenced block from `body`, JSON-parsing
+ * each one. A block whose contents don't parse is still returned (with
+ * `parsed` absent) rather than silently dropped: `kya-os agent verify`
+ * needs to report "found but INVALID: schema" for a corrupted block, not
+ * make it disappear as if it were never posted.
+ */
+export function extractFencedBlocks(body, tag) {
+    const escapedTag = tag.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    const pattern = new RegExp("```" + escapedTag + "\\n([\\s\\S]*?)\\n```", "g");
+    const blocks = [];
+    for (const match of body.matchAll(pattern)) {
+        const raw = match[1];
+        try {
+            blocks.push({ raw, parsed: JSON.parse(raw) });
+        }
+        catch {
+            blocks.push({ raw });
+        }
+    }
+    return blocks;
+}
+/** Every `kya-os-signed-verdict` block in `body` that parses AND validates against the schema. */
+export function extractSignedVerdicts(body) {
+    const verdicts = [];
+    for (const block of extractFencedBlocks(body, "kya-os-signed-verdict")) {
+        if (block.parsed === undefined)
+            continue;
+        const result = ReviewVerdictBodySchema.safeParse(block.parsed);
+        if (result.success)
+            verdicts.push(result.data);
+    }
+    return verdicts;
+}
+/** Every `kya-os-fix-attestation` block in `body` that parses AND validates against the schema. */
+export function extractFixAttestations(body) {
+    const attestations = [];
+    for (const block of extractFencedBlocks(body, "kya-os-fix-attestation")) {
+        if (block.parsed === undefined)
+            continue;
+        const result = FixAttestationSchema.safeParse(block.parsed);
+        if (result.success)
+            attestations.push(result.data);
+    }
+    return attestations;
+}
+//# sourceMappingURL=markers.js.map

package/dist/utils/agent/markers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"markers.js","sourceRoot":"","sources":["../../../src/utils/agent/markers.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GAGxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAyBzD,MAAM,sBAAsB,GAC1B,mFAAmF,CAAC;AAEtF,SAAS,qBAAqB,CAAC,MAAqB;IAClD,OAAO;QACL,IAAI,EAAE,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC;QAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,wBAAwB,CAAC,MAAM,CAAC,WAAW,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAqB;IACtD,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC3C,OAAO,+BAA+B,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,QAAQ,SAAS,IAAI,CAAC,OAAO,aAAa,IAAI,CAAC,WAAW,MAAM,CAAC;AAC9H,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAClG,CAAC;AAED,SAAS,aAAa,CAAC,MAA4B,EAAE,MAAqB;IACxE,OAAO,CACL,MAAM,KAAK,IAAI;QACf,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;QAC3B,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;QACnC,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QACjC,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAC1C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAyB,EAAE,MAAqB;IAC/E,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;AACnF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAyB,EACzB,MAAqB,EACrB,YAAiC;IAEjC,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;YAAE,SAAS;QAClE,KAAK,MAAM,OAAO,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YAClD,MAAM,cAAc,GAClB,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;gBACpC,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;gBAC5C,OAAO,CAAC,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC;YAC7C,IAAI,cAAc,IAAI,wBAAwB,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;gBACtE,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAA0B,EAAE,WAAmB,EAAE,eAAuB;IAC7G,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAChC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;QAC1B,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;QAClC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO;QAChC,WAAW;KACZ,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,CAAC,0BAA0B,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/F,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AASD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,GAAW;IAC3D,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,KAAK,GAAG,UAAU,GAAG,uBAAuB,EAAE,GAAG,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,QAAQ,GAAwB,EAAE,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,CAAC,EAAE,CAAC;QACvE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QACzC,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,OAAO;YAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,YAAY,GAAqB,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,mBAAmB,CAAC,IAAI,EAAE,wBAAwB,CAAC,EAAE,CAAC;QACxE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QACzC,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,OAAO;YAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/dist/utils/agent/review.d.ts

@@ -0,0 +1,67 @@
+import { type ReviewVerdict } from "@kya-os/contracts/review";
+import { type ResolveSigningIdentityResult } from "../dco/dispatch.js";
+import { type PullRequestReview, type PullRequestSummary, type PostPullRequestReviewResult, type PullRequestReviewEvent } from "../dco/github.js";
+import { type RunHeadlessAgentOptions } from "./spawn-agent.js";
+export interface AgentReviewGithubClient {
+    getPullRequestSummary: (target: string, repo?: string) => Promise<PullRequestSummary>;
+    getPullRequestDiff: (target: string, repo?: string) => Promise<string>;
+    getPullRequestReviews: (target: string, repo?: string) => Promise<PullRequestReview[]>;
+    postPullRequestReview: (target: string, options: {
+        event: PullRequestReviewEvent;
+        body: string;
+    }, repo?: string) => Promise<PostPullRequestReviewResult>;
+}
+export interface RunAgentReviewOptions {
+    agentSlug: string;
+    cwd?: string;
+    /** owner/name. Derived from the PR URL when omitted. */
+    repo?: string;
+    /** Diffs at or above this size are refused before ever reaching the agent. */
+    maxDiffBytes?: number;
+    /** Not writeCapable: this is a read-only analysis pass, never file/commit access. */
+    agentOptions?: Omit<RunHeadlessAgentOptions, "cwd" | "writeCapable">;
+    github?: AgentReviewGithubClient;
+    resolveIdentity?: (cwd: string, agentSlug: string | undefined) => Promise<ResolveSigningIdentityResult>;
+}
+export interface AgentReviewOnceResult {
+    ok: boolean;
+    headSha: string;
+    verdict?: ReviewVerdict;
+    findingsCount?: number;
+    posted: boolean;
+    /** True when this exact (repo, pr, head, reviewer) was already reviewed — nothing was posted again. */
+    skippedAlreadyPosted?: boolean;
+    /** True when GitHub's self-review 422 forced a COMMENT review instead of APPROVE/REQUEST_CHANGES. */
+    fellBackToComment?: boolean;
+    failure?: string;
+}
+/**
+ * One review pass against the PR's CURRENT head at call time. Never
+ * approves a diff that exceeded the size cap or failed to fetch fully —
+ * that head is failed with an actionable REQUEST_CHANGES instead, the same
+ * rule review-loop P8's review-executor documents.
+ */
+export declare function runAgentReviewOnce(prTarget: string, options: RunAgentReviewOptions): Promise<AgentReviewOnceResult>;
+export type AgentReviewWatchStopReason = "approved" | "max-heads-reached" | "pr-closed" | "review-failed";
+export interface AgentReviewWatchResult {
+    ok: boolean;
+    stopReason: AgentReviewWatchStopReason;
+    rounds: AgentReviewOnceResult[];
+}
+export interface RunAgentReviewWatchOptions extends RunAgentReviewOptions {
+    maxHeads?: number;
+    pollSeconds?: number;
+    sleepImpl?: (ms: number) => Promise<void>;
+}
+/**
+ * Poll the PR's head SHA, running a fresh review whenever it changes, until
+ * an approve verdict is posted (`ok:true, stopReason:"approved"`),
+ * `maxHeads` heads have been reviewed (`ok:false,
+ * stopReason:"max-heads-reached"`), the PR closes
+ * (`stopReason:"pr-closed"`), or a review round itself fails
+ * (`stopReason:"review-failed"` — a signing/identity/analysis failure, not
+ * merely a request-changes verdict, which is a normal outcome that keeps
+ * the loop running).
+ */
+export declare function runAgentReviewWatch(prTarget: string, options: RunAgentReviewWatchOptions): Promise<AgentReviewWatchResult>;
+//# sourceMappingURL=review.d.ts.map

package/dist/utils/agent/review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.d.ts","sourceRoot":"","sources":["../../../src/utils/agent/review.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,aAAa,EAEnB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAA0B,KAAK,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAE/F,OAAO,EAKL,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC5B,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EAAoB,KAAK,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAoBlF,MAAM,WAAW,uBAAuB;IACtC,qBAAqB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACtF,kBAAkB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE,qBAAqB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACvF,qBAAqB,EAAE,CACrB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;QAAE,KAAK,EAAE,sBAAsB,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EACxD,IAAI,CAAC,EAAE,MAAM,KACV,OAAO,CAAC,2BAA2B,CAAC,CAAC;CAC3C;AASD,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qFAAqF;IACrF,YAAY,CAAC,EAAE,IAAI,CAAC,uBAAuB,EAAE,KAAK,GAAG,cAAc,CAAC,CAAC;IACrE,MAAM,CAAC,EAAE,uBAAuB,CAAC;IACjC,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,4BAA4B,CAAC,CAAC;CACzG;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB,uGAAuG;IACvG,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,qGAAqG;IACrG,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAwED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,qBAAqB,CAAC,CA6KhC;AAED,MAAM,MAAM,0BAA0B,GAAG,UAAU,GAAG,mBAAmB,GAAG,WAAW,GAAG,eAAe,CAAC;AAE1G,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,0BAA0B,CAAC;IACvC,MAAM,EAAE,qBAAqB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,0BAA2B,SAAQ,qBAAqB;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAKD;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,sBAAsB,CAAC,CAqCjC"}

package/dist/utils/agent/review.js

@@ -0,0 +1,305 @@
+import { readFileSync } from "fs";
+import { ReviewFindingSchema, ReviewVerdictBodySchema, } from "@kya-os/contracts/review";
+import { computeFindingsDigest, getVerdictCanonicalSigningString } from "@kya-os/contracts/review";
+import { resolveSigningIdentity } from "../dco/dispatch.js";
+import { parseOwnerRepoFromPrUrl, sanitizeForMarkdownBlock } from "../dco/fix.js";
+import { getPullRequestDiff, getPullRequestReviews, getPullRequestSummary, postPullRequestReview, } from "../dco/github.js";
+import { deriveEd25519PublicKey, parseEd25519SshPrivateKeyPem, signWithEd25519Seed } from "../dco/ssh-key.js";
+import { withGithubBackoff } from "./backoff.js";
+import { buildVerdictReviewBody, findPostedVerdict } from "./markers.js";
+import { runHeadlessAgent } from "./spawn-agent.js";
+/**
+ * `kya-os agent review` — the reviewer half of review-loop P13's two-party
+ * loop. One-shot ({@link runAgentReviewOnce}) fetches the PR diff read-only,
+ * runs a headless-agent analysis pass (see spawn-agent.ts; `claude` by
+ * default, provider-agnostic), derives a verdict, signs it, and
+ * posts it as a real GitHub review with the `kya-os-verdict:v1` marker +
+ * fenced `kya-os-signed-verdict` block for idempotency and later
+ * verification. `--watch` ({@link runAgentReviewWatch}) repeats this across
+ * new heads until an approve lands, `--max-heads` is exhausted, or the PR
+ * closes.
+ */
+const DEFAULT_MAX_DIFF_BYTES = 200000;
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+const defaultGithubClient = {
+    getPullRequestSummary,
+    getPullRequestDiff,
+    getPullRequestReviews,
+    postPullRequestReview,
+};
+/**
+ * Build the review-analysis prompt: instructs the agent to return STRICT
+ * JSON — an array matching `ReviewFindingSchema` — and nothing else. A
+ * response that doesn't parse and validate is treated as a failed run, never
+ * as "no findings" (see `runAgentReviewOnce`'s parse step): a garbled
+ * response silently becoming an empty findings array would silently become
+ * an approve.
+ */
+function buildReviewAnalysisPrompt(diff, context) {
+    return [
+        `You are reviewing pull request #${context.prNumber} on ${context.repo} at commit ${context.headSha}.`,
+        "Analyze the unified diff below for bugs, correctness issues, and other findings worth flagging.",
+        "",
+        "Respond with ONLY a strict JSON array (no markdown fences, no prose before or after) where each",
+        'element has the shape: {"path"?: string, "line"?: number, "severity": "blocking"|"major"|"minor"|"nit",',
+        '"summary": string, "detail"?: string}. Return an empty array [] if you find nothing worth flagging.',
+        "Do not wrap the array in an object. Do not include any text outside the JSON array.",
+        "",
+        "--- BEGIN DIFF ---",
+        diff,
+        "--- END DIFF ---",
+    ].join("\n");
+}
+/**
+ * `path` and `summary` are free-form text from the LLM analysis pass — as
+ * hostile-diff-influenceable as any other reviewer-visible LLM output — and
+ * this summary is interpolated ahead of the `kya-os-signed-verdict` fence in
+ * `buildVerdictReviewBody`. Sanitized with the same `sanitizeForMarkdownBlock`
+ * `dco/fix.ts` uses for the marker's own free-text fields, for the same
+ * reason: an unsanitized backtick could close the fence early, and an
+ * unsanitized `<!--`/`-->` could forge or prematurely close an HTML-comment
+ * marker, letting `extractFencedBlocks`/`kya-os agent verify` pick up
+ * spurious blocks even when the real signed verdict is fine.
+ */
+function buildFindingsSummary(findings) {
+    if (findings.length === 0) {
+        return "No findings.";
+    }
+    return findings
+        .map((finding) => {
+        const safePath = finding.path ? sanitizeForMarkdownBlock(finding.path) : undefined;
+        const location = safePath ? `${safePath}${finding.line ? `:${finding.line}` : ""}` : "(general)";
+        const safeSummary = sanitizeForMarkdownBlock(finding.summary);
+        return `- **${finding.severity}** ${location}: ${safeSummary}`;
+    })
+        .join("\n");
+}
+/** Whether `finding` alone would force a request-changes verdict. */
+function isBlockingFinding(finding) {
+    return finding.severity === "blocking" || finding.severity === "major";
+}
+/**
+ * Strip a markdown code fence wrapping the ENTIRE response, a formatting
+ * habit Claude falls back to even when the prompt explicitly asks for none
+ * — confirmed live: a real analysis response came back as
+ * "```json\n[...]\n```" and would otherwise fail to parse, turning a
+ * perfectly good findings array into a hard failure. Only strips a fence
+ * that wraps the whole trimmed text; anything else is left untouched and
+ * still fails to parse as JSON exactly as before, which is the correct
+ * outcome for a genuinely malformed response.
+ */
+function stripJsonCodeFence(text) {
+    const trimmed = text.trim();
+    const match = /^```(?:json)?\r?\n([\s\S]*?)\r?\n```$/.exec(trimmed);
+    return match ? match[1] : trimmed;
+}
+/**
+ * One review pass against the PR's CURRENT head at call time. Never
+ * approves a diff that exceeded the size cap or failed to fetch fully —
+ * that head is failed with an actionable REQUEST_CHANGES instead, the same
+ * rule review-loop P8's review-executor documents.
+ */
+export async function runAgentReviewOnce(prTarget, options) {
+    const github = options.github ?? defaultGithubClient;
+    const resolveIdentity = options.resolveIdentity ?? resolveSigningIdentity;
+    const cwd = options.cwd ?? process.cwd();
+    const maxDiffBytes = options.maxDiffBytes ?? DEFAULT_MAX_DIFF_BYTES;
+    const repo = options.repo ?? parseOwnerRepoFromPrUrl(prTarget) ?? undefined;
+    const identityResult = await resolveIdentity(cwd, options.agentSlug);
+    if (!identityResult.ok) {
+        return { ok: false, headSha: "", posted: false, failure: identityResult.failure };
+    }
+    const { did, keyPath } = identityResult.identity;
+    const summary = await withGithubBackoff(() => github.getPullRequestSummary(prTarget, repo));
+    if (summary.state !== "OPEN") {
+        return {
+            ok: false,
+            headSha: summary.headRefOid,
+            posted: false,
+            failure: `pr-not-open: PR #${summary.number} is ${summary.state.toLowerCase()}, not open`,
+        };
+    }
+    const subjectRepo = repo ?? parseOwnerRepoFromPrUrl(summary.url) ?? "";
+    let diff;
+    try {
+        diff = await withGithubBackoff(() => github.getPullRequestDiff(prTarget, repo));
+    }
+    catch (error) {
+        return {
+            ok: false,
+            headSha: summary.headRefOid,
+            posted: false,
+            failure: `diff-fetch-failed: ${errorMessage(error)}`,
+        };
+    }
+    const diffTooLarge = Buffer.byteLength(diff, "utf8") >= maxDiffBytes;
+    let findings;
+    let verdict;
+    if (diffTooLarge) {
+        findings = [
+            {
+                severity: "blocking",
+                summary: `Diff is at or above the ${maxDiffBytes}-byte review cap; refusing to approve an unreviewed change.`,
+                detail: "Split this PR into smaller, independently reviewable commits.",
+            },
+        ];
+        verdict = "request-changes";
+    }
+    else {
+        const prompt = buildReviewAnalysisPrompt(diff, {
+            repo: subjectRepo,
+            prNumber: summary.number,
+            headSha: summary.headRefOid,
+        });
+        const agentResult = await runHeadlessAgent(prompt, { cwd, ...options.agentOptions });
+        let parsedJson;
+        try {
+            parsedJson = JSON.parse(stripJsonCodeFence(agentResult.text));
+        }
+        catch {
+            // A parse failure fails the run outright — it must never be
+            // silently treated as "no findings", which would become an approve.
+            throw new Error(`review analysis did not return valid JSON: ${agentResult.text.slice(0, 500)}`);
+        }
+        const parseResult = ReviewFindingSchema.array().max(500).safeParse(parsedJson);
+        if (!parseResult.success) {
+            throw new Error(`review analysis JSON did not match the findings schema: ${parseResult.error.message}`);
+        }
+        findings = parseResult.data;
+        verdict = findings.some(isBlockingFinding) ? "request-changes" : "approve";
+    }
+    const subject = { repo: subjectRepo, prNumber: summary.number, headSha: summary.headRefOid };
+    const findingsDigest = computeFindingsDigest(findings);
+    const signingString = getVerdictCanonicalSigningString(subject, verdict, findingsDigest);
+    const pem = readFileSync(keyPath, "utf-8");
+    const { seed } = parseEd25519SshPrivateKeyPem(pem);
+    const publicKeyRaw = deriveEd25519PublicKey(seed);
+    const signature = signWithEd25519Seed(seed, Buffer.from(signingString, "utf8")).toString("base64url");
+    const taskId = `review-${subject.prNumber}-${subject.headSha.slice(0, 12)}`;
+    const verdictBody = ReviewVerdictBodySchema.parse({
+        taskId,
+        subject,
+        verdict,
+        findings,
+        findingsDigest,
+        proof: { alg: "Ed25519", signature },
+    });
+    const existingReviews = await withGithubBackoff(() => github.getPullRequestReviews(prTarget, repo));
+    const existingBodies = existingReviews.map((review) => review.body ?? "");
+    const verdictMarkerTarget = { repo: subject.repo, prNumber: subject.prNumber, headSha: subject.headSha, reviewerDid: did };
+    // Idempotency is gated on a VERIFIED prior post, never on a marker match
+    // alone: a marker is free text and a fenced block's shape is Zod-checked
+    // only, so anyone who can post a COMMENT review could otherwise plant a
+    // matching marker plus a schema-valid but unsigned "approve" and have it
+    // trusted as a genuine prior post (findPostedVerdict verifies against
+    // THIS reviewer's own key, the only one a real prior post from this
+    // identity could have signed with). When nothing verifies -- nothing was
+    // really posted, or what looks posted is forged/corrupt -- fall through
+    // and post the real verdict below, exactly as if this were a fresh head;
+    // silently treating an unverifiable marker as "already handled" would
+    // otherwise let --watch stall on this head forever.
+    const posted = findPostedVerdict(existingBodies, verdictMarkerTarget, publicKeyRaw);
+    if (posted) {
+        // Return the verdict ACTUALLY posted for this head, recovered from the
+        // matching review's own signed block — never the value this call just
+        // recomputed. The analysis pass is LLM-driven and can come back
+        // differently on a re-run; trusting the recompute here could make
+        // --watch report an approve that never actually landed on the PR.
+        return {
+            ok: true,
+            headSha: subject.headSha,
+            verdict: posted.verdict,
+            findingsCount: posted.findings.length,
+            posted: false,
+            skippedAlreadyPosted: true,
+        };
+    }
+    const body = buildVerdictReviewBody(verdictBody, did, buildFindingsSummary(findings));
+    const event = verdict === "approve" ? "APPROVE" : "REQUEST_CHANGES";
+    const postResult = await withGithubBackoff(() => github.postPullRequestReview(prTarget, { event, body }, repo));
+    if (postResult.ok) {
+        return { ok: true, headSha: subject.headSha, verdict, findingsCount: findings.length, posted: true };
+    }
+    if (postResult.selfReviewRejected) {
+        // GitHub refuses APPROVE/REQUEST_CHANGES from the token that owns the
+        // PR; COMMENT is always allowed. The signed block inside `body` is
+        // unchanged — the signature is the claim that verifies either way.
+        const fallbackResult = await withGithubBackoff(() => github.postPullRequestReview(prTarget, { event: "COMMENT", body }, repo));
+        if (!fallbackResult.ok) {
+            // Don't report `posted: true` for a fallback that itself failed --
+            // --watch would otherwise treat an approve that never reached the PR
+            // as a completed, successful round.
+            return {
+                ok: false,
+                headSha: subject.headSha,
+                verdict,
+                findingsCount: findings.length,
+                posted: false,
+                failure: "post-review-failed: COMMENT fallback for the self-review rejection also failed",
+            };
+        }
+        return {
+            ok: true,
+            headSha: subject.headSha,
+            verdict,
+            findingsCount: findings.length,
+            posted: true,
+            fellBackToComment: true,
+        };
+    }
+    return {
+        ok: false,
+        headSha: subject.headSha,
+        verdict,
+        findingsCount: findings.length,
+        posted: false,
+        failure: "post-review-failed",
+    };
+}
+const DEFAULT_MAX_HEADS = 5;
+const DEFAULT_POLL_SECONDS = 30;
+/**
+ * Poll the PR's head SHA, running a fresh review whenever it changes, until
+ * an approve verdict is posted (`ok:true, stopReason:"approved"`),
+ * `maxHeads` heads have been reviewed (`ok:false,
+ * stopReason:"max-heads-reached"`), the PR closes
+ * (`stopReason:"pr-closed"`), or a review round itself fails
+ * (`stopReason:"review-failed"` — a signing/identity/analysis failure, not
+ * merely a request-changes verdict, which is a normal outcome that keeps
+ * the loop running).
+ */
+export async function runAgentReviewWatch(prTarget, options) {
+    const github = options.github ?? defaultGithubClient;
+    const maxHeads = options.maxHeads ?? DEFAULT_MAX_HEADS;
+    const pollMs = (options.pollSeconds ?? DEFAULT_POLL_SECONDS) * 1000;
+    const sleep = options.sleepImpl ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+    const rounds = [];
+    let lastReviewedHead;
+    for (;;) {
+        const summary = await withGithubBackoff(() => github.getPullRequestSummary(prTarget, options.repo));
+        if (summary.state !== "OPEN") {
+            return { ok: false, stopReason: "pr-closed", rounds };
+        }
+        if (summary.headRefOid !== lastReviewedHead) {
+            if (rounds.length >= maxHeads) {
+                return { ok: false, stopReason: "max-heads-reached", rounds };
+            }
+            const result = await runAgentReviewOnce(prTarget, { ...options, github });
+            rounds.push(result);
+            lastReviewedHead = result.headSha || summary.headRefOid;
+            if (!result.ok) {
+                return { ok: false, stopReason: "review-failed", rounds };
+            }
+            if (result.verdict === "approve" && (result.posted || result.skippedAlreadyPosted)) {
+                return { ok: true, stopReason: "approved", rounds };
+            }
+            if (rounds.length >= maxHeads) {
+                return { ok: false, stopReason: "max-heads-reached", rounds };
+            }
+        }
+        await sleep(pollMs);
+    }
+}
+//# sourceMappingURL=review.js.map

package/dist/utils/agent/review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.js","sourceRoot":"","sources":["../../../src/utils/agent/review.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EACL,mBAAmB,EACnB,uBAAuB,GAKxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AACnG,OAAO,EAAE,sBAAsB,EAAqC,MAAM,oBAAoB,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAClF,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,GAKtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC9G,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAgC,MAAM,kBAAkB,CAAC;AAElF;;;;;;;;;;GAUG;AAEH,MAAM,sBAAsB,GAAG,MAAO,CAAC;AAEvC,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAaD,MAAM,mBAAmB,GAA4B;IACnD,qBAAqB;IACrB,kBAAkB;IAClB,qBAAqB;IACrB,qBAAqB;CACtB,CAAC;AA4BF;;;;;;;GAOG;AACH,SAAS,yBAAyB,CAAC,IAAY,EAAE,OAA4D;IAC3G,OAAO;QACL,mCAAmC,OAAO,CAAC,QAAQ,OAAO,OAAO,CAAC,IAAI,cAAc,OAAO,CAAC,OAAO,GAAG;QACtG,iGAAiG;QACjG,EAAE;QACF,iGAAiG;QACjG,yGAAyG;QACzG,qGAAqG;QACrG,qFAAqF;QACrF,EAAE;QACF,oBAAoB;QACpB,IAAI;QACJ,kBAAkB;KACnB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,oBAAoB,CAAC,QAAkC;IAC9D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,OAAO,QAAQ;SACZ,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;QACjG,MAAM,WAAW,GAAG,wBAAwB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9D,OAAO,OAAO,OAAO,CAAC,QAAQ,MAAM,QAAQ,KAAK,WAAW,EAAE,CAAC;IACjE,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,qEAAqE;AACrE,SAAS,iBAAiB,CAAC,OAAsB;IAC/C,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AACzE,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,uCAAuC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAgB,EAChB,OAA8B;IAE9B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,mBAAmB,CAAC;IACrD,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,sBAAsB,CAAC;IAC1E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACpE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,uBAAuB,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;IAE5E,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACrE,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC;IACpF,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,QAAQ,CAAC;IAEjD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5F,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC7B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,OAAO,CAAC,UAAU;YAC3B,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,oBAAoB,OAAO,CAAC,MAAM,OAAO,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,YAAY;SAC1F,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,IAAI,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAEvE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IAClF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,OAAO,CAAC,UAAU;YAC3B,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,sBAAsB,YAAY,CAAC,KAAK,CAAC,EAAE;SACrD,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,YAAY,CAAC;IAErE,IAAI,QAAyB,CAAC;IAC9B,IAAI,OAAsB,CAAC;IAE3B,IAAI,YAAY,EAAE,CAAC;QACjB,QAAQ,GAAG;YACT;gBACE,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,2BAA2B,YAAY,6DAA6D;gBAC7G,MAAM,EAAE,+DAA+D;aACxE;SACF,CAAC;QACF,OAAO,GAAG,iBAAiB,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,yBAAyB,CAAC,IAAI,EAAE;YAC7C,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,OAAO,CAAC,MAAM;YACxB,OAAO,EAAE,OAAO,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;QAErF,IAAI,UAAmB,CAAC;QACxB,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;YAC5D,oEAAoE;YACpE,MAAM,IAAI,KAAK,CACb,8CAA8C,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC/E,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC/E,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,2DAA2D,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,CACvF,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC;QAC5B,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,CAAC;IAED,MAAM,OAAO,GAAkB,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;IAC5G,MAAM,cAAc,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,gCAAgC,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IACzF,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,4BAA4B,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtG,MAAM,MAAM,GAAG,UAAU,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAC5E,MAAM,WAAW,GAAsB,uBAAuB,CAAC,KAAK,CAAC;QACnE,MAAM;QACN,OAAO;QACP,OAAO;QACP,QAAQ;QACR,cAAc;QACd,KAAK,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE;KACrC,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IACpG,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC1E,MAAM,mBAAmB,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;IAC3H,yEAAyE;IACzE,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtE,oEAAoE;IACpE,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtE,oDAAoD;IACpD,MAAM,MAAM,GAAG,iBAAiB,CAAC,cAAc,EAAE,mBAAmB,EAAE,YAAY,CAAC,CAAC;IACpF,IAAI,MAAM,EAAE,CAAC;QACX,uEAAuE;QACvE,sEAAsE;QACtE,gEAAgE;QAChE,kEAAkE;QAClE,kEAAkE;QAClE,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;YACrC,MAAM,EAAE,KAAK;YACb,oBAAoB,EAAE,IAAI;SAC3B,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,sBAAsB,CAAC,WAAW,EAAE,GAAG,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtF,MAAM,KAAK,GAA2B,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC;IAC5F,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IAEhH,IAAI,UAAU,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACvG,CAAC;IAED,IAAI,UAAU,CAAC,kBAAkB,EAAE,CAAC;QAClC,sEAAsE;QACtE,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,CAClD,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CACzE,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACvB,mEAAmE;YACnE,qEAAqE;YACrE,oCAAoC;YACpC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,OAAO;gBACP,aAAa,EAAE,QAAQ,CAAC,MAAM;gBAC9B,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,gFAAgF;aAC1F,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO;YACP,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,MAAM,EAAE,IAAI;YACZ,iBAAiB,EAAE,IAAI;SACxB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK;QACT,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO;QACP,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,oBAAoB;KAC9B,CAAC;AACJ,CAAC;AAgBD,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,OAAmC;IAEnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,mBAAmB,CAAC;IACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACvD,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC,GAAG,IAAI,CAAC;IACpE,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAEvG,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,IAAI,gBAAoC,CAAC;IAEzC,SAAS,CAAC;QACR,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACpG,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QACxD,CAAC;QAED,IAAI,OAAO,CAAC,UAAU,KAAK,gBAAgB,EAAE,CAAC;YAC5C,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC;YAChE,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpB,gBAAgB,GAAG,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC;YAExD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;YAC5D,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBACnF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;YACtD,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC;YAChE,CAAC;QACH,CAAC;QAED,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}