@kya-os/cli 1.8.3 → 2.0.2

package/dist/utils/agent/markers.js

@@ -1,147 +0,0 @@
-import { FixAttestationSchema, ReviewVerdictBodySchema, } from "@kya-os/contracts/review";
-import { verifyReviewVerdictProof } from "@kya-os/contracts/review/verify";
-import { sanitizeForMarkdownBlock } from "../dco/fix.js";
-const VERDICT_MARKER_PATTERN = /<!-- kya-os-verdict:v1 repo=(\S+) pr=(\d+) head=([0-9a-f]{40}) reviewer=(\S+) -->/;
-function sanitizedMarkerFields(marker) {
-    return {
-        repo: sanitizeForMarkdownBlock(marker.repo),
-        prNumber: marker.prNumber,
-        headSha: marker.headSha,
-        reviewerDid: sanitizeForMarkdownBlock(marker.reviewerDid),
-    };
-}
-export function buildVerdictMarker(marker) {
-    const safe = sanitizedMarkerFields(marker);
-    return `<!-- kya-os-verdict:v1 repo=${safe.repo} pr=${safe.prNumber} head=${safe.headSha} reviewer=${safe.reviewerDid} -->`;
-}
-/** Parse the first `kya-os-verdict:v1` marker out of a review/comment body, if present. */
-export function findVerdictMarker(body) {
-    const match = VERDICT_MARKER_PATTERN.exec(body);
-    if (!match)
-        return null;
-    return { repo: match[1], prNumber: Number(match[2]), headSha: match[3], reviewerDid: match[4] };
-}
-function markerMatches(marker, target) {
-    return (marker !== null &&
-        marker.repo === target.repo &&
-        marker.prNumber === target.prNumber &&
-        marker.headSha === target.headSha &&
-        marker.reviewerDid === target.reviewerDid);
-}
-/**
- * Whether any of `bodies` already carries a marker for the exact same
- * `(repo, pr, head, reviewer)` — the idempotency check `kya-os agent
- * review` runs before posting a new verdict for a head it may have already
- * reviewed (e.g. the hub/PR replaying events to a reconnecting consumer, or
- * a `--watch` loop's own poll tick landing right after its own post).
- */
-export function hasVerdictMarker(bodies, target) {
-    const safeTarget = sanitizedMarkerFields(target);
-    return bodies.some((body) => markerMatches(findVerdictMarker(body), safeTarget));
-}
-/**
- * Find the `ReviewVerdictBody` actually posted AND cryptographically
- * verified for `target`'s `(repo, pr, head, reviewer)`, if any. Used on an
- * idempotent skip to recover the TRUE prior verdict instead of trusting a
- * freshly recomputed one: the review-analysis pass is LLM-driven and can be
- * non-deterministic, so re-running it against an already-reviewed head can
- * produce a different verdict than what is actually signed and posted on
- * the PR. A caller that returned the recompute instead (e.g. treating a
- * recomputed "approve" as equivalent to a truly-posted one) could report
- * success without a real approve ever having landed.
- *
- * `publicKeyRaw` MUST be this reviewer's own Ed25519 public key -- the only
- * key a genuine prior post from this same `reviewerDid` could have signed
- * with. This is not optional: the marker is free text and a fenced block's
- * shape is Zod-checked only, so without a signature check anyone who can
- * post a `COMMENT` review could plant a matching marker plus a schema-valid
- * but unsigned "approve" block and have it trusted as a real prior post. The
- * search keeps scanning past a marker match whose block is missing, corrupt,
- * or fails verification, rather than stopping at the first one found --
- * a forged comment must never be able to shadow a real, later, genuinely
- * signed post. Returns `null` (never a partial/unverified value) when no
- * candidate verifies, so a caller can tell "nothing genuine was posted" from
- * "something was posted"; treating null the same as "not yet posted" (i.e.
- * proceeding to post a real verdict) is the correct, fail-safe response to
- * either a missing OR a forged prior post.
- */
-export function findPostedVerdict(bodies, target, publicKeyRaw) {
-    const safeTarget = sanitizedMarkerFields(target);
-    for (const body of bodies) {
-        if (!markerMatches(findVerdictMarker(body), safeTarget))
-            continue;
-        for (const verdict of extractSignedVerdicts(body)) {
-            const subjectMatches = verdict.subject.repo === target.repo &&
-                verdict.subject.prNumber === target.prNumber &&
-                verdict.subject.headSha === target.headSha;
-            if (subjectMatches && verifyReviewVerdictProof(verdict, publicKeyRaw)) {
-                return verdict;
-            }
-        }
-    }
-    return null;
-}
-/**
- * Build the review body posted for a signed verdict: the idempotency
- * marker, a human-readable findings section, then the fenced
- * `kya-os-signed-verdict` JSON block `kya-os agent verify` reads back.
- * `findingsSummary` is caller-built (severity/path:line/summary lines) so
- * this function stays about structure, not findings formatting.
- */
-export function buildVerdictReviewBody(verdict, reviewerDid, findingsSummary) {
-    const marker = buildVerdictMarker({
-        repo: verdict.subject.repo,
-        prNumber: verdict.subject.prNumber,
-        headSha: verdict.subject.headSha,
-        reviewerDid,
-    });
-    const block = ["```kya-os-signed-verdict", JSON.stringify(verdict, null, 2), "```"].join("\n");
-    return [marker, "", findingsSummary, "", block, ""].join("\n");
-}
-/**
- * Extract every ` ```<tag> ... ``` ` fenced block from `body`, JSON-parsing
- * each one. A block whose contents don't parse is still returned (with
- * `parsed` absent) rather than silently dropped: `kya-os agent verify`
- * needs to report "found but INVALID: schema" for a corrupted block, not
- * make it disappear as if it were never posted.
- */
-export function extractFencedBlocks(body, tag) {
-    const escapedTag = tag.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-    const pattern = new RegExp("```" + escapedTag + "\\n([\\s\\S]*?)\\n```", "g");
-    const blocks = [];
-    for (const match of body.matchAll(pattern)) {
-        const raw = match[1];
-        try {
-            blocks.push({ raw, parsed: JSON.parse(raw) });
-        }
-        catch {
-            blocks.push({ raw });
-        }
-    }
-    return blocks;
-}
-/** Every `kya-os-signed-verdict` block in `body` that parses AND validates against the schema. */
-export function extractSignedVerdicts(body) {
-    const verdicts = [];
-    for (const block of extractFencedBlocks(body, "kya-os-signed-verdict")) {
-        if (block.parsed === undefined)
-            continue;
-        const result = ReviewVerdictBodySchema.safeParse(block.parsed);
-        if (result.success)
-            verdicts.push(result.data);
-    }
-    return verdicts;
-}
-/** Every `kya-os-fix-attestation` block in `body` that parses AND validates against the schema. */
-export function extractFixAttestations(body) {
-    const attestations = [];
-    for (const block of extractFencedBlocks(body, "kya-os-fix-attestation")) {
-        if (block.parsed === undefined)
-            continue;
-        const result = FixAttestationSchema.safeParse(block.parsed);
-        if (result.success)
-            attestations.push(result.data);
-    }
-    return attestations;
-}
-//# sourceMappingURL=markers.js.map

package/dist/utils/agent/markers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"markers.js","sourceRoot":"","sources":["../../../src/utils/agent/markers.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GAGxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAyBzD,MAAM,sBAAsB,GAC1B,mFAAmF,CAAC;AAEtF,SAAS,qBAAqB,CAAC,MAAqB;IAClD,OAAO;QACL,IAAI,EAAE,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC;QAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,wBAAwB,CAAC,MAAM,CAAC,WAAW,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAqB;IACtD,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC3C,OAAO,+BAA+B,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,QAAQ,SAAS,IAAI,CAAC,OAAO,aAAa,IAAI,CAAC,WAAW,MAAM,CAAC;AAC9H,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAClG,CAAC;AAED,SAAS,aAAa,CAAC,MAA4B,EAAE,MAAqB;IACxE,OAAO,CACL,MAAM,KAAK,IAAI;QACf,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;QAC3B,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;QACnC,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QACjC,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAC1C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAyB,EAAE,MAAqB;IAC/E,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;AACnF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAyB,EACzB,MAAqB,EACrB,YAAiC;IAEjC,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;YAAE,SAAS;QAClE,KAAK,MAAM,OAAO,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YAClD,MAAM,cAAc,GAClB,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;gBACpC,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;gBAC5C,OAAO,CAAC,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC;YAC7C,IAAI,cAAc,IAAI,wBAAwB,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;gBACtE,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAA0B,EAAE,WAAmB,EAAE,eAAuB;IAC7G,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAChC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;QAC1B,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;QAClC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO;QAChC,WAAW;KACZ,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,CAAC,0BAA0B,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/F,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AASD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,GAAW;IAC3D,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,KAAK,GAAG,UAAU,GAAG,uBAAuB,EAAE,GAAG,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,QAAQ,GAAwB,EAAE,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,CAAC,EAAE,CAAC;QACvE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QACzC,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,OAAO;YAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,YAAY,GAAqB,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,mBAAmB,CAAC,IAAI,EAAE,wBAAwB,CAAC,EAAE,CAAC;QACxE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QACzC,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,OAAO;YAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/dist/utils/agent/review.d.ts

@@ -1,67 +0,0 @@
-import { type ReviewVerdict } from "@kya-os/contracts/review";
-import { type ResolveSigningIdentityResult } from "../dco/dispatch.js";
-import { type PullRequestReview, type PullRequestSummary, type PostPullRequestReviewResult, type PullRequestReviewEvent } from "../dco/github.js";
-import { type RunHeadlessAgentOptions } from "./spawn-agent.js";
-export interface AgentReviewGithubClient {
-    getPullRequestSummary: (target: string, repo?: string) => Promise<PullRequestSummary>;
-    getPullRequestDiff: (target: string, repo?: string) => Promise<string>;
-    getPullRequestReviews: (target: string, repo?: string) => Promise<PullRequestReview[]>;
-    postPullRequestReview: (target: string, options: {
-        event: PullRequestReviewEvent;
-        body: string;
-    }, repo?: string) => Promise<PostPullRequestReviewResult>;
-}
-export interface RunAgentReviewOptions {
-    agentSlug: string;
-    cwd?: string;
-    /** owner/name. Derived from the PR URL when omitted. */
-    repo?: string;
-    /** Diffs at or above this size are refused before ever reaching the agent. */
-    maxDiffBytes?: number;
-    /** Not writeCapable: this is a read-only analysis pass, never file/commit access. */
-    agentOptions?: Omit<RunHeadlessAgentOptions, "cwd" | "writeCapable">;
-    github?: AgentReviewGithubClient;
-    resolveIdentity?: (cwd: string, agentSlug: string | undefined) => Promise<ResolveSigningIdentityResult>;
-}
-export interface AgentReviewOnceResult {
-    ok: boolean;
-    headSha: string;
-    verdict?: ReviewVerdict;
-    findingsCount?: number;
-    posted: boolean;
-    /** True when this exact (repo, pr, head, reviewer) was already reviewed — nothing was posted again. */
-    skippedAlreadyPosted?: boolean;
-    /** True when GitHub's self-review 422 forced a COMMENT review instead of APPROVE/REQUEST_CHANGES. */
-    fellBackToComment?: boolean;
-    failure?: string;
-}
-/**
- * One review pass against the PR's CURRENT head at call time. Never
- * approves a diff that exceeded the size cap or failed to fetch fully —
- * that head is failed with an actionable REQUEST_CHANGES instead, the same
- * rule review-loop P8's review-executor documents.
- */
-export declare function runAgentReviewOnce(prTarget: string, options: RunAgentReviewOptions): Promise<AgentReviewOnceResult>;
-export type AgentReviewWatchStopReason = "approved" | "max-heads-reached" | "pr-closed" | "review-failed";
-export interface AgentReviewWatchResult {
-    ok: boolean;
-    stopReason: AgentReviewWatchStopReason;
-    rounds: AgentReviewOnceResult[];
-}
-export interface RunAgentReviewWatchOptions extends RunAgentReviewOptions {
-    maxHeads?: number;
-    pollSeconds?: number;
-    sleepImpl?: (ms: number) => Promise<void>;
-}
-/**
- * Poll the PR's head SHA, running a fresh review whenever it changes, until
- * an approve verdict is posted (`ok:true, stopReason:"approved"`),
- * `maxHeads` heads have been reviewed (`ok:false,
- * stopReason:"max-heads-reached"`), the PR closes
- * (`stopReason:"pr-closed"`), or a review round itself fails
- * (`stopReason:"review-failed"` — a signing/identity/analysis failure, not
- * merely a request-changes verdict, which is a normal outcome that keeps
- * the loop running).
- */
-export declare function runAgentReviewWatch(prTarget: string, options: RunAgentReviewWatchOptions): Promise<AgentReviewWatchResult>;
-//# sourceMappingURL=review.d.ts.map

package/dist/utils/agent/review.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"review.d.ts","sourceRoot":"","sources":["../../../src/utils/agent/review.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,aAAa,EAEnB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAA0B,KAAK,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAE/F,OAAO,EAKL,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC5B,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EAAoB,KAAK,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAoBlF,MAAM,WAAW,uBAAuB;IACtC,qBAAqB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACtF,kBAAkB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE,qBAAqB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACvF,qBAAqB,EAAE,CACrB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;QAAE,KAAK,EAAE,sBAAsB,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EACxD,IAAI,CAAC,EAAE,MAAM,KACV,OAAO,CAAC,2BAA2B,CAAC,CAAC;CAC3C;AASD,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qFAAqF;IACrF,YAAY,CAAC,EAAE,IAAI,CAAC,uBAAuB,EAAE,KAAK,GAAG,cAAc,CAAC,CAAC;IACrE,MAAM,CAAC,EAAE,uBAAuB,CAAC;IACjC,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,4BAA4B,CAAC,CAAC;CACzG;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB,uGAAuG;IACvG,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,qGAAqG;IACrG,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAwED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,qBAAqB,CAAC,CA6KhC;AAED,MAAM,MAAM,0BAA0B,GAAG,UAAU,GAAG,mBAAmB,GAAG,WAAW,GAAG,eAAe,CAAC;AAE1G,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,0BAA0B,CAAC;IACvC,MAAM,EAAE,qBAAqB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,0BAA2B,SAAQ,qBAAqB;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAKD;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,sBAAsB,CAAC,CAqCjC"}

package/dist/utils/agent/review.js

@@ -1,305 +0,0 @@
-import { readFileSync } from "fs";
-import { ReviewFindingSchema, ReviewVerdictBodySchema, } from "@kya-os/contracts/review";
-import { computeFindingsDigest, getVerdictCanonicalSigningString } from "@kya-os/contracts/review";
-import { resolveSigningIdentity } from "../dco/dispatch.js";
-import { parseOwnerRepoFromPrUrl, sanitizeForMarkdownBlock } from "../dco/fix.js";
-import { getPullRequestDiff, getPullRequestReviews, getPullRequestSummary, postPullRequestReview, } from "../dco/github.js";
-import { deriveEd25519PublicKey, parseEd25519SshPrivateKeyPem, signWithEd25519Seed } from "../dco/ssh-key.js";
-import { withGithubBackoff } from "./backoff.js";
-import { buildVerdictReviewBody, findPostedVerdict } from "./markers.js";
-import { runHeadlessAgent } from "./spawn-agent.js";
-/**
- * `kya-os agent review` — the reviewer half of review-loop P13's two-party
- * loop. One-shot ({@link runAgentReviewOnce}) fetches the PR diff read-only,
- * runs a headless-agent analysis pass (see spawn-agent.ts; `claude` by
- * default, provider-agnostic), derives a verdict, signs it, and
- * posts it as a real GitHub review with the `kya-os-verdict:v1` marker +
- * fenced `kya-os-signed-verdict` block for idempotency and later
- * verification. `--watch` ({@link runAgentReviewWatch}) repeats this across
- * new heads until an approve lands, `--max-heads` is exhausted, or the PR
- * closes.
- */
-const DEFAULT_MAX_DIFF_BYTES = 200000;
-function errorMessage(error) {
-    return error instanceof Error ? error.message : String(error);
-}
-const defaultGithubClient = {
-    getPullRequestSummary,
-    getPullRequestDiff,
-    getPullRequestReviews,
-    postPullRequestReview,
-};
-/**
- * Build the review-analysis prompt: instructs the agent to return STRICT
- * JSON — an array matching `ReviewFindingSchema` — and nothing else. A
- * response that doesn't parse and validate is treated as a failed run, never
- * as "no findings" (see `runAgentReviewOnce`'s parse step): a garbled
- * response silently becoming an empty findings array would silently become
- * an approve.
- */
-function buildReviewAnalysisPrompt(diff, context) {
-    return [
-        `You are reviewing pull request #${context.prNumber} on ${context.repo} at commit ${context.headSha}.`,
-        "Analyze the unified diff below for bugs, correctness issues, and other findings worth flagging.",
-        "",
-        "Respond with ONLY a strict JSON array (no markdown fences, no prose before or after) where each",
-        'element has the shape: {"path"?: string, "line"?: number, "severity": "blocking"|"major"|"minor"|"nit",',
-        '"summary": string, "detail"?: string}. Return an empty array [] if you find nothing worth flagging.',
-        "Do not wrap the array in an object. Do not include any text outside the JSON array.",
-        "",
-        "--- BEGIN DIFF ---",
-        diff,
-        "--- END DIFF ---",
-    ].join("\n");
-}
-/**
- * `path` and `summary` are free-form text from the LLM analysis pass — as
- * hostile-diff-influenceable as any other reviewer-visible LLM output — and
- * this summary is interpolated ahead of the `kya-os-signed-verdict` fence in
- * `buildVerdictReviewBody`. Sanitized with the same `sanitizeForMarkdownBlock`
- * `dco/fix.ts` uses for the marker's own free-text fields, for the same
- * reason: an unsanitized backtick could close the fence early, and an
- * unsanitized `<!--`/`-->` could forge or prematurely close an HTML-comment
- * marker, letting `extractFencedBlocks`/`kya-os agent verify` pick up
- * spurious blocks even when the real signed verdict is fine.
- */
-function buildFindingsSummary(findings) {
-    if (findings.length === 0) {
-        return "No findings.";
-    }
-    return findings
-        .map((finding) => {
-        const safePath = finding.path ? sanitizeForMarkdownBlock(finding.path) : undefined;
-        const location = safePath ? `${safePath}${finding.line ? `:${finding.line}` : ""}` : "(general)";
-        const safeSummary = sanitizeForMarkdownBlock(finding.summary);
-        return `- **${finding.severity}** ${location}: ${safeSummary}`;
-    })
-        .join("\n");
-}
-/** Whether `finding` alone would force a request-changes verdict. */
-function isBlockingFinding(finding) {
-    return finding.severity === "blocking" || finding.severity === "major";
-}
-/**
- * Strip a markdown code fence wrapping the ENTIRE response, a formatting
- * habit Claude falls back to even when the prompt explicitly asks for none
- * — confirmed live: a real analysis response came back as
- * "```json\n[...]\n```" and would otherwise fail to parse, turning a
- * perfectly good findings array into a hard failure. Only strips a fence
- * that wraps the whole trimmed text; anything else is left untouched and
- * still fails to parse as JSON exactly as before, which is the correct
- * outcome for a genuinely malformed response.
- */
-function stripJsonCodeFence(text) {
-    const trimmed = text.trim();
-    const match = /^```(?:json)?\r?\n([\s\S]*?)\r?\n```$/.exec(trimmed);
-    return match ? match[1] : trimmed;
-}
-/**
- * One review pass against the PR's CURRENT head at call time. Never
- * approves a diff that exceeded the size cap or failed to fetch fully —
- * that head is failed with an actionable REQUEST_CHANGES instead, the same
- * rule review-loop P8's review-executor documents.
- */
-export async function runAgentReviewOnce(prTarget, options) {
-    const github = options.github ?? defaultGithubClient;
-    const resolveIdentity = options.resolveIdentity ?? resolveSigningIdentity;
-    const cwd = options.cwd ?? process.cwd();
-    const maxDiffBytes = options.maxDiffBytes ?? DEFAULT_MAX_DIFF_BYTES;
-    const repo = options.repo ?? parseOwnerRepoFromPrUrl(prTarget) ?? undefined;
-    const identityResult = await resolveIdentity(cwd, options.agentSlug);
-    if (!identityResult.ok) {
-        return { ok: false, headSha: "", posted: false, failure: identityResult.failure };
-    }
-    const { did, keyPath } = identityResult.identity;
-    const summary = await withGithubBackoff(() => github.getPullRequestSummary(prTarget, repo));
-    if (summary.state !== "OPEN") {
-        return {
-            ok: false,
-            headSha: summary.headRefOid,
-            posted: false,
-            failure: `pr-not-open: PR #${summary.number} is ${summary.state.toLowerCase()}, not open`,
-        };
-    }
-    const subjectRepo = repo ?? parseOwnerRepoFromPrUrl(summary.url) ?? "";
-    let diff;
-    try {
-        diff = await withGithubBackoff(() => github.getPullRequestDiff(prTarget, repo));
-    }
-    catch (error) {
-        return {
-            ok: false,
-            headSha: summary.headRefOid,
-            posted: false,
-            failure: `diff-fetch-failed: ${errorMessage(error)}`,
-        };
-    }
-    const diffTooLarge = Buffer.byteLength(diff, "utf8") >= maxDiffBytes;
-    let findings;
-    let verdict;
-    if (diffTooLarge) {
-        findings = [
-            {
-                severity: "blocking",
-                summary: `Diff is at or above the ${maxDiffBytes}-byte review cap; refusing to approve an unreviewed change.`,
-                detail: "Split this PR into smaller, independently reviewable commits.",
-            },
-        ];
-        verdict = "request-changes";
-    }
-    else {
-        const prompt = buildReviewAnalysisPrompt(diff, {
-            repo: subjectRepo,
-            prNumber: summary.number,
-            headSha: summary.headRefOid,
-        });
-        const agentResult = await runHeadlessAgent(prompt, { cwd, ...options.agentOptions });
-        let parsedJson;
-        try {
-            parsedJson = JSON.parse(stripJsonCodeFence(agentResult.text));
-        }
-        catch {
-            // A parse failure fails the run outright — it must never be
-            // silently treated as "no findings", which would become an approve.
-            throw new Error(`review analysis did not return valid JSON: ${agentResult.text.slice(0, 500)}`);
-        }
-        const parseResult = ReviewFindingSchema.array().max(500).safeParse(parsedJson);
-        if (!parseResult.success) {
-            throw new Error(`review analysis JSON did not match the findings schema: ${parseResult.error.message}`);
-        }
-        findings = parseResult.data;
-        verdict = findings.some(isBlockingFinding) ? "request-changes" : "approve";
-    }
-    const subject = { repo: subjectRepo, prNumber: summary.number, headSha: summary.headRefOid };
-    const findingsDigest = computeFindingsDigest(findings);
-    const signingString = getVerdictCanonicalSigningString(subject, verdict, findingsDigest);
-    const pem = readFileSync(keyPath, "utf-8");
-    const { seed } = parseEd25519SshPrivateKeyPem(pem);
-    const publicKeyRaw = deriveEd25519PublicKey(seed);
-    const signature = signWithEd25519Seed(seed, Buffer.from(signingString, "utf8")).toString("base64url");
-    const taskId = `review-${subject.prNumber}-${subject.headSha.slice(0, 12)}`;
-    const verdictBody = ReviewVerdictBodySchema.parse({
-        taskId,
-        subject,
-        verdict,
-        findings,
-        findingsDigest,
-        proof: { alg: "Ed25519", signature },
-    });
-    const existingReviews = await withGithubBackoff(() => github.getPullRequestReviews(prTarget, repo));
-    const existingBodies = existingReviews.map((review) => review.body ?? "");
-    const verdictMarkerTarget = { repo: subject.repo, prNumber: subject.prNumber, headSha: subject.headSha, reviewerDid: did };
-    // Idempotency is gated on a VERIFIED prior post, never on a marker match
-    // alone: a marker is free text and a fenced block's shape is Zod-checked
-    // only, so anyone who can post a COMMENT review could otherwise plant a
-    // matching marker plus a schema-valid but unsigned "approve" and have it
-    // trusted as a genuine prior post (findPostedVerdict verifies against
-    // THIS reviewer's own key, the only one a real prior post from this
-    // identity could have signed with). When nothing verifies -- nothing was
-    // really posted, or what looks posted is forged/corrupt -- fall through
-    // and post the real verdict below, exactly as if this were a fresh head;
-    // silently treating an unverifiable marker as "already handled" would
-    // otherwise let --watch stall on this head forever.
-    const posted = findPostedVerdict(existingBodies, verdictMarkerTarget, publicKeyRaw);
-    if (posted) {
-        // Return the verdict ACTUALLY posted for this head, recovered from the
-        // matching review's own signed block — never the value this call just
-        // recomputed. The analysis pass is LLM-driven and can come back
-        // differently on a re-run; trusting the recompute here could make
-        // --watch report an approve that never actually landed on the PR.
-        return {
-            ok: true,
-            headSha: subject.headSha,
-            verdict: posted.verdict,
-            findingsCount: posted.findings.length,
-            posted: false,
-            skippedAlreadyPosted: true,
-        };
-    }
-    const body = buildVerdictReviewBody(verdictBody, did, buildFindingsSummary(findings));
-    const event = verdict === "approve" ? "APPROVE" : "REQUEST_CHANGES";
-    const postResult = await withGithubBackoff(() => github.postPullRequestReview(prTarget, { event, body }, repo));
-    if (postResult.ok) {
-        return { ok: true, headSha: subject.headSha, verdict, findingsCount: findings.length, posted: true };
-    }
-    if (postResult.selfReviewRejected) {
-        // GitHub refuses APPROVE/REQUEST_CHANGES from the token that owns the
-        // PR; COMMENT is always allowed. The signed block inside `body` is
-        // unchanged — the signature is the claim that verifies either way.
-        const fallbackResult = await withGithubBackoff(() => github.postPullRequestReview(prTarget, { event: "COMMENT", body }, repo));
-        if (!fallbackResult.ok) {
-            // Don't report `posted: true` for a fallback that itself failed --
-            // --watch would otherwise treat an approve that never reached the PR
-            // as a completed, successful round.
-            return {
-                ok: false,
-                headSha: subject.headSha,
-                verdict,
-                findingsCount: findings.length,
-                posted: false,
-                failure: "post-review-failed: COMMENT fallback for the self-review rejection also failed",
-            };
-        }
-        return {
-            ok: true,
-            headSha: subject.headSha,
-            verdict,
-            findingsCount: findings.length,
-            posted: true,
-            fellBackToComment: true,
-        };
-    }
-    return {
-        ok: false,
-        headSha: subject.headSha,
-        verdict,
-        findingsCount: findings.length,
-        posted: false,
-        failure: "post-review-failed",
-    };
-}
-const DEFAULT_MAX_HEADS = 5;
-const DEFAULT_POLL_SECONDS = 30;
-/**
- * Poll the PR's head SHA, running a fresh review whenever it changes, until
- * an approve verdict is posted (`ok:true, stopReason:"approved"`),
- * `maxHeads` heads have been reviewed (`ok:false,
- * stopReason:"max-heads-reached"`), the PR closes
- * (`stopReason:"pr-closed"`), or a review round itself fails
- * (`stopReason:"review-failed"` — a signing/identity/analysis failure, not
- * merely a request-changes verdict, which is a normal outcome that keeps
- * the loop running).
- */
-export async function runAgentReviewWatch(prTarget, options) {
-    const github = options.github ?? defaultGithubClient;
-    const maxHeads = options.maxHeads ?? DEFAULT_MAX_HEADS;
-    const pollMs = (options.pollSeconds ?? DEFAULT_POLL_SECONDS) * 1000;
-    const sleep = options.sleepImpl ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
-    const rounds = [];
-    let lastReviewedHead;
-    for (;;) {
-        const summary = await withGithubBackoff(() => github.getPullRequestSummary(prTarget, options.repo));
-        if (summary.state !== "OPEN") {
-            return { ok: false, stopReason: "pr-closed", rounds };
-        }
-        if (summary.headRefOid !== lastReviewedHead) {
-            if (rounds.length >= maxHeads) {
-                return { ok: false, stopReason: "max-heads-reached", rounds };
-            }
-            const result = await runAgentReviewOnce(prTarget, { ...options, github });
-            rounds.push(result);
-            lastReviewedHead = result.headSha || summary.headRefOid;
-            if (!result.ok) {
-                return { ok: false, stopReason: "review-failed", rounds };
-            }
-            if (result.verdict === "approve" && (result.posted || result.skippedAlreadyPosted)) {
-                return { ok: true, stopReason: "approved", rounds };
-            }
-            if (rounds.length >= maxHeads) {
-                return { ok: false, stopReason: "max-heads-reached", rounds };
-            }
-        }
-        await sleep(pollMs);
-    }
-}
-//# sourceMappingURL=review.js.map

package/dist/utils/agent/review.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"review.js","sourceRoot":"","sources":["../../../src/utils/agent/review.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EACL,mBAAmB,EACnB,uBAAuB,GAKxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AACnG,OAAO,EAAE,sBAAsB,EAAqC,MAAM,oBAAoB,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAClF,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,GAKtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC9G,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAgC,MAAM,kBAAkB,CAAC;AAElF;;;;;;;;;;GAUG;AAEH,MAAM,sBAAsB,GAAG,MAAO,CAAC;AAEvC,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAaD,MAAM,mBAAmB,GAA4B;IACnD,qBAAqB;IACrB,kBAAkB;IAClB,qBAAqB;IACrB,qBAAqB;CACtB,CAAC;AA4BF;;;;;;;GAOG;AACH,SAAS,yBAAyB,CAAC,IAAY,EAAE,OAA4D;IAC3G,OAAO;QACL,mCAAmC,OAAO,CAAC,QAAQ,OAAO,OAAO,CAAC,IAAI,cAAc,OAAO,CAAC,OAAO,GAAG;QACtG,iGAAiG;QACjG,EAAE;QACF,iGAAiG;QACjG,yGAAyG;QACzG,qGAAqG;QACrG,qFAAqF;QACrF,EAAE;QACF,oBAAoB;QACpB,IAAI;QACJ,kBAAkB;KACnB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,oBAAoB,CAAC,QAAkC;IAC9D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,OAAO,QAAQ;SACZ,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;QACjG,MAAM,WAAW,GAAG,wBAAwB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9D,OAAO,OAAO,OAAO,CAAC,QAAQ,MAAM,QAAQ,KAAK,WAAW,EAAE,CAAC;IACjE,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,qEAAqE;AACrE,SAAS,iBAAiB,CAAC,OAAsB;IAC/C,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AACzE,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,uCAAuC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAgB,EAChB,OAA8B;IAE9B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,mBAAmB,CAAC;IACrD,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,sBAAsB,CAAC;IAC1E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACpE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,uBAAuB,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;IAE5E,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACrE,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC;IACpF,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,QAAQ,CAAC;IAEjD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5F,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC7B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,OAAO,CAAC,UAAU;YAC3B,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,oBAAoB,OAAO,CAAC,MAAM,OAAO,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,YAAY;SAC1F,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,IAAI,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAEvE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IAClF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,OAAO,CAAC,UAAU;YAC3B,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,sBAAsB,YAAY,CAAC,KAAK,CAAC,EAAE;SACrD,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,YAAY,CAAC;IAErE,IAAI,QAAyB,CAAC;IAC9B,IAAI,OAAsB,CAAC;IAE3B,IAAI,YAAY,EAAE,CAAC;QACjB,QAAQ,GAAG;YACT;gBACE,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,2BAA2B,YAAY,6DAA6D;gBAC7G,MAAM,EAAE,+DAA+D;aACxE;SACF,CAAC;QACF,OAAO,GAAG,iBAAiB,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,yBAAyB,CAAC,IAAI,EAAE;YAC7C,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,OAAO,CAAC,MAAM;YACxB,OAAO,EAAE,OAAO,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;QAErF,IAAI,UAAmB,CAAC;QACxB,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;YAC5D,oEAAoE;YACpE,MAAM,IAAI,KAAK,CACb,8CAA8C,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC/E,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC/E,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,2DAA2D,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,CACvF,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC;QAC5B,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,CAAC;IAED,MAAM,OAAO,GAAkB,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;IAC5G,MAAM,cAAc,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,gCAAgC,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IACzF,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,4BAA4B,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtG,MAAM,MAAM,GAAG,UAAU,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAC5E,MAAM,WAAW,GAAsB,uBAAuB,CAAC,KAAK,CAAC;QACnE,MAAM;QACN,OAAO;QACP,OAAO;QACP,QAAQ;QACR,cAAc;QACd,KAAK,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE;KACrC,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IACpG,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC1E,MAAM,mBAAmB,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;IAC3H,yEAAyE;IACzE,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtE,oEAAoE;IACpE,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtE,oDAAoD;IACpD,MAAM,MAAM,GAAG,iBAAiB,CAAC,cAAc,EAAE,mBAAmB,EAAE,YAAY,CAAC,CAAC;IACpF,IAAI,MAAM,EAAE,CAAC;QACX,uEAAuE;QACvE,sEAAsE;QACtE,gEAAgE;QAChE,kEAAkE;QAClE,kEAAkE;QAClE,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;YACrC,MAAM,EAAE,KAAK;YACb,oBAAoB,EAAE,IAAI;SAC3B,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,sBAAsB,CAAC,WAAW,EAAE,GAAG,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtF,MAAM,KAAK,GAA2B,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC;IAC5F,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IAEhH,IAAI,UAAU,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACvG,CAAC;IAED,IAAI,UAAU,CAAC,kBAAkB,EAAE,CAAC;QAClC,sEAAsE;QACtE,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,CAClD,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CACzE,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACvB,mEAAmE;YACnE,qEAAqE;YACrE,oCAAoC;YACpC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,OAAO;gBACP,aAAa,EAAE,QAAQ,CAAC,MAAM;gBAC9B,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,gFAAgF;aAC1F,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO;YACP,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,MAAM,EAAE,IAAI;YACZ,iBAAiB,EAAE,IAAI;SACxB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK;QACT,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO;QACP,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,oBAAoB;KAC9B,CAAC;AACJ,CAAC;AAgBD,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,OAAmC;IAEnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,mBAAmB,CAAC;IACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACvD,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC,GAAG,IAAI,CAAC;IACpE,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAEvG,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,IAAI,gBAAoC,CAAC;IAEzC,SAAS,CAAC;QACR,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACpG,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QACxD,CAAC;QAED,IAAI,OAAO,CAAC,UAAU,KAAK,gBAAgB,EAAE,CAAC;YAC5C,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC;YAChE,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpB,gBAAgB,GAAG,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC;YAExD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;YAC5D,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBACnF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;YACtD,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC;YAChE,CAAC;QACH,CAAC;QAED,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}