@loompad/cli 0.1.0 → 1.1.2

package/dist/core/relay-protocol.js

@@ -0,0 +1,189 @@
+/**
+ * Loom Cloud relay — the wire format.
+ *
+ * Reaching your daemon from a phone on another network without a VPN: both
+ * ends join one Supabase Realtime broadcast channel and pass encrypted
+ * envelopes through it. The daemon turns each request into an ordinary local
+ * HTTP call (or WebSocket) against itself, with the phone's own paired token,
+ * so every auth and scope rule is the one the LAN path already enforces.
+ *
+ * **Supabase sees only ciphertext.** The channel name and the 32-byte key are
+ * minted by the daemon and travel only inside the pairing QR / link fragment.
+ * Every envelope is XChaCha20-Poly1305 with a fresh random nonce; a message
+ * that doesn't authenticate is dropped. The relay can't read your code, your
+ * prompts or your tokens, and it can't forge a request.
+ *
+ * Pattern credits: the pairing token rides the URL *fragment* (never sent to a
+ * server) and clients resume a stream from a sequence number — both from
+ * T3 Code (github.com/pingdotgg/t3code, MIT).
+ *
+ * This file is dependency-light on purpose (only @noble/ciphers): the Expo app
+ * carries a copy (app/src/relay-protocol.ts) and the two must stay in step.
+ */
+import { xchacha20poly1305 } from "@noble/ciphers/chacha.js";
+import { randomBytes } from "@noble/ciphers/utils.js";
+export const RELAY_PROTOCOL = 1;
+/** Supabase's default broadcast payload cap is 256 KB; stay well under after base64. */
+export const MAX_CHUNK = 96 * 1024;
+// ---------------------------------------------------------------------------
+// base64url without Buffer (the phone has none)
+// ---------------------------------------------------------------------------
+const B64 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
+export function toB64(bytes) {
+    let out = "";
+    let i = 0;
+    for (; i + 2 < bytes.length; i += 3) {
+        const n = (bytes[i] << 16) | (bytes[i + 1] << 8) | bytes[i + 2];
+        out += B64[(n >> 18) & 63] + B64[(n >> 12) & 63] + B64[(n >> 6) & 63] + B64[n & 63];
+    }
+    if (i < bytes.length) {
+        const n = (bytes[i] << 16) | ((bytes[i + 1] ?? 0) << 8);
+        out += B64[(n >> 18) & 63] + B64[(n >> 12) & 63];
+        if (i + 1 < bytes.length)
+            out += B64[(n >> 6) & 63];
+    }
+    return out;
+}
+export function fromB64(s) {
+    const clean = s.replace(/=+$/, "").replace(/\+/g, "-").replace(/\//g, "_");
+    const out = new Uint8Array(Math.floor((clean.length * 3) / 4));
+    let bits = 0;
+    let acc = 0;
+    let o = 0;
+    for (const ch of clean) {
+        const v = B64.indexOf(ch);
+        if (v < 0)
+            throw new Error("bad base64");
+        acc = (acc << 6) | v;
+        bits += 6;
+        if (bits >= 8) {
+            bits -= 8;
+            out[o++] = (acc >> bits) & 0xff;
+        }
+    }
+    return out.slice(0, o);
+}
+const enc = new TextEncoder();
+const dec = new TextDecoder();
+export function newRelayCredentials() {
+    return { channel: toB64(randomBytes(16)), key: toB64(randomBytes(32)) };
+}
+/** The Supabase channel topic for a credential set. */
+export function relayTopic(channel) {
+    return `loom-relay:${channel}`;
+}
+/** `channel.key` — the compact form carried in a pairing link. */
+export function packCredentials(c) {
+    return `${c.channel}.${c.key}`;
+}
+export function unpackCredentials(s) {
+    const [channel, key] = s.split(".");
+    if (!channel || !key)
+        return null;
+    try {
+        if (fromB64(key).length !== 32)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return { channel, key };
+}
+export function seal(key, plaintext) {
+    const nonce = randomBytes(24);
+    const ct = xchacha20poly1305(key, nonce).encrypt(plaintext);
+    const out = new Uint8Array(nonce.length + ct.length);
+    out.set(nonce, 0);
+    out.set(ct, nonce.length);
+    return toB64(out);
+}
+/** Null when the envelope doesn't authenticate — never throws on hostile input. */
+export function open(key, sealed) {
+    try {
+        const raw = fromB64(sealed);
+        if (raw.length < 24 + 16)
+            return null;
+        return xchacha20poly1305(key, raw.slice(0, 24)).decrypt(raw.slice(24));
+    }
+    catch {
+        return null;
+    }
+}
+/** Encode a message into one or more envelopes (split when large). */
+export function encodeMessage(key, dir, msg) {
+    const bytes = enc.encode(JSON.stringify(msg));
+    if (bytes.length <= MAX_CHUNK)
+        return [{ v: RELAY_PROTOCOL, d: dir, x: seal(key, bytes) }];
+    const id = toB64(randomBytes(9));
+    const count = Math.ceil(bytes.length / MAX_CHUNK);
+    const out = [];
+    for (let i = 0; i < count; i++) {
+        out.push({
+            v: RELAY_PROTOCOL,
+            d: dir,
+            x: seal(key, bytes.slice(i * MAX_CHUNK, (i + 1) * MAX_CHUNK)),
+            p: [id, i, count],
+        });
+    }
+    return out;
+}
+/**
+ * Reassembles multipart messages and decrypts. Feed every envelope from the
+ * other side; it yields each complete message once.
+ */
+export class RelayDecoder {
+    key;
+    reads;
+    parts = new Map();
+    constructor(key, 
+    /** Which direction this side reads: the daemon reads "c", the client "d". */
+    reads) {
+        this.key = key;
+        this.reads = reads;
+    }
+    push(env) {
+        if (!env || typeof env !== "object")
+            return null;
+        const e = env;
+        if (e.v !== RELAY_PROTOCOL || e.d !== this.reads || typeof e.x !== "string")
+            return null;
+        const plain = open(this.key, e.x);
+        if (!plain)
+            return null;
+        let bytes = plain;
+        if (e.p) {
+            const [id, index, count] = e.p;
+            if (!Number.isInteger(index) || !Number.isInteger(count) || count < 1 || count > 512 || index < 0 || index >= count) {
+                return null;
+            }
+            const entry = this.parts.get(id) ?? { chunks: new Array(count).fill(undefined), at: Date.now() };
+            entry.chunks[index] = plain;
+            this.parts.set(id, entry);
+            this.gc();
+            if (entry.chunks.some((c) => !c))
+                return null;
+            this.parts.delete(id);
+            const total = entry.chunks.reduce((n, c) => n + c.length, 0);
+            bytes = new Uint8Array(total);
+            let o = 0;
+            for (const c of entry.chunks) {
+                bytes.set(c, o);
+                o += c.length;
+            }
+        }
+        try {
+            const msg = JSON.parse(dec.decode(bytes));
+            return msg && typeof msg === "object" && typeof msg.t === "string" ? msg : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    gc() {
+        const cutoff = Date.now() - 60_000;
+        for (const [id, e] of this.parts)
+            if (e.at < cutoff)
+                this.parts.delete(id);
+    }
+}
+//# sourceMappingURL=relay-protocol.js.map

package/dist/core/relay-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-protocol.js","sourceRoot":"","sources":["../../src/core/relay-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAChC,wFAAwF;AACxF,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,CAAC;AA0FnC,8EAA8E;AAC9E,gDAAgD;AAChD,8EAA8E;AAE9E,MAAM,GAAG,GAAG,kEAAkE,CAAC;AAE/E,MAAM,UAAU,KAAK,CAAC,KAAiB;IACrC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;QACnE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAE,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAE,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAE,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,CAAE,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAE,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAE,CAAC;QACnD,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM;YAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAE,CAAC;IACvD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,CAAS;IAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QACzC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACrB,IAAI,IAAI,CAAC,CAAC;QACV,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,CAAC;YACV,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAC9B,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAa9B,MAAM,UAAU,mBAAmB;IACjC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,OAAO,cAAc,OAAO,EAAE,CAAC;AACjC,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,eAAe,CAAC,CAAmB;IACjD,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,CAAS;IACzC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,GAAe,EAAE,SAAqB;IACzD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,EAAE,GAAG,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IACrD,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAClB,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;AACpB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,IAAI,CAAC,GAAe,EAAE,MAAc;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,aAAa,CAAC,GAAe,EAAE,GAAc,EAAE,GAAiB;IAC9E,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAC3F,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC;YACP,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,GAAG;YACN,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;YAC7D,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC;SAClB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,YAAY;IAGb;IAEA;IAJF,KAAK,GAAG,IAAI,GAAG,EAA8D,CAAC;IACtF,YACU,GAAe;IACvB,6EAA6E;IACrE,KAAgB;QAFhB,QAAG,GAAH,GAAG,CAAY;QAEf,UAAK,GAAL,KAAK,CAAW;IACvB,CAAC;IAEJ,IAAI,CAAC,GAAY;QACf,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACjD,MAAM,CAAC,GAAG,GAAoB,CAAC;QAC/B,IAAI,CAAC,CAAC,CAAC,KAAK,cAAc,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACzF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACR,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;gBACpH,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACjG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,EAAE,EAAE,CAAC;YACV,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC9C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtB,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC9D,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC7B,KAAK,CAAC,GAAG,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC;gBACjB,CAAC,IAAI,CAAE,CAAC,MAAM,CAAC;YACjB,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAiB,CAAC;YAC1D,OAAO,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,EAAE;QACR,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;QACnC,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,CAAC,EAAE,GAAG,MAAM;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;CACF"}

package/dist/core/replay.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Replay: a chat as one self-contained HTML page you can send anyone.
+ *
+ * What was asked, what the agents said, what they ran, what they changed, and
+ * what Loom checked — Proof's verdicts, the loop watch, the shield, a night
+ * shift's report — in one file with no scripts and nothing to load: every
+ * value escaped, a Content-Security-Policy that forbids the rest, the diffs
+ * and tool output folded away in <details>. Opens in any browser, offline.
+ */
+import type { LoomEvent } from "../types.js";
+/** Just enough Markdown for agent replies: fenced code, inline code, bold, headings, lists, http(s) links. Escaped first. */
+export declare function miniMarkdown(text: string): string;
+export interface ReplayMeta {
+    project: string;
+    chat: string;
+    now?: Date;
+}
+export declare function threadReplay(events: LoomEvent[], meta: ReplayMeta): string;

package/dist/core/replay.js

@@ -0,0 +1,191 @@
+/**
+ * Replay: a chat as one self-contained HTML page you can send anyone.
+ *
+ * What was asked, what the agents said, what they ran, what they changed, and
+ * what Loom checked — Proof's verdicts, the loop watch, the shield, a night
+ * shift's report — in one file with no scripts and nothing to load: every
+ * value escaped, a Content-Security-Policy that forbids the rest, the diffs
+ * and tool output folded away in <details>. Opens in any browser, offline.
+ */
+const esc = (s) => String(s ?? "").replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
+const clock = (ts) => new Date(ts).toLocaleTimeString([], { hour: "2-digit", minute: "2-digit" });
+const day = (ts) => new Date(ts).toLocaleDateString([], { weekday: "short", month: "short", day: "numeric", year: "numeric" });
+const dur = (ms) => { const s = Math.round(ms / 1000); return s < 60 ? `${s}s` : `${Math.floor(s / 60)}m ${s % 60}s`; };
+const money = (n) => (n < 0.00005 ? "$0" : `$${n >= 0.01 ? n.toFixed(2) : n.toFixed(4)}`);
+/** Just enough Markdown for agent replies: fenced code, inline code, bold, headings, lists, http(s) links. Escaped first. */
+export function miniMarkdown(text) {
+    const out = [];
+    const parts = String(text ?? "").split(/```/);
+    parts.forEach((part, i) => {
+        if (i % 2 === 1) {
+            const nl = part.indexOf("\n");
+            const body = nl >= 0 && /^[\w+-]*$/.test(part.slice(0, nl).trim()) ? part.slice(nl + 1) : part;
+            out.push(`<pre><code>${esc(body.replace(/\n$/, ""))}</code></pre>`);
+            return;
+        }
+        let list = false;
+        for (const raw of part.split("\n")) {
+            const line = esc(raw)
+                .replace(/`([^`]+)`/g, "<code>$1</code>")
+                .replace(/\*\*([^*]+)\*\*/g, "<strong>$1</strong>")
+                .replace(/\[([^\]]+)\]\((https?:\/\/[^\s)]+)\)/g, '<a href="$2" rel="noopener noreferrer">$1</a>');
+            const li = /^\s*(?:[-*]|\d+\.)\s+(.*)$/.exec(line);
+            if (li) {
+                if (!list) {
+                    out.push("<ul>");
+                    list = true;
+                }
+                out.push(`<li>${li[1]}</li>`);
+                continue;
+            }
+            if (list) {
+                out.push("</ul>");
+                list = false;
+            }
+            const h = /^(#{1,4})\s+(.*)$/.exec(line);
+            if (h)
+                out.push(`<h${h[1].length + 2}>${h[2]}</h${h[1].length + 2}>`);
+            else if (line.trim())
+                out.push(`<p>${line}</p>`);
+        }
+        if (list)
+            out.push("</ul>");
+    });
+    return out.join("\n");
+}
+function diffHtml(patch) {
+    return String(patch ?? "").split("\n").map((l) => {
+        const cls = l.startsWith("+++") || l.startsWith("---") || l.startsWith("diff --git") ? "dh" : l.startsWith("@@") ? "dn" : l.startsWith("+") ? "da" : l.startsWith("-") ? "dd" : "";
+        return cls ? `<span class="${cls}">${esc(l)}</span>` : esc(l);
+    }).join("\n");
+}
+const PROOF_WORD = { verified: "Verified", contradicted: "Didn’t hold", unverified: "Unverified" };
+const SHIFT_WORD = { verified: "Verified", done: "Done", didnt_hold: "Didn’t hold", failed: "Failed", needs_you: "Needs you", not_started: "Not started", running: "Running" };
+function item(e) {
+    const p = (e.payload ?? {});
+    const who = esc(e.agentId ?? "loom");
+    const at = `<time>${clock(e.ts)}</time>`;
+    switch (e.kind) {
+        case "message":
+            if (p.reasoning)
+                return "";
+            if (!e.agentId)
+                return p.author === "loom" ? `<div class="sys">${esc(p.text)}</div>` : `<section class="you"><header>You ${at}</header>${miniMarkdown(p.text)}</section>`;
+            return `<section class="agent"><header>${who}${p.model ? ` <span class="m">${esc(p.model)}</span>` : ""} ${at}${p.partial ? ' <span class="m">stopped</span>' : ""}</header>${miniMarkdown(p.text)}</section>`;
+        case "tool_call": {
+            const failed = p.ok === false || (typeof p.exitCode === "number" && p.exitCode !== 0);
+            const title = esc(String(p.summary ?? p.tool ?? "tool").split("\n")[0].slice(0, 200));
+            const out = [p.preview, p.output, p.error].filter((x) => typeof x === "string" && x.trim()).join("\n").slice(-4000);
+            const tail = failed ? ` <span class="bad">${typeof p.exitCode === "number" ? `exit ${p.exitCode}` : "failed"}</span>` : "";
+            return out ? `<details class="tool"><summary>⚙ ${title}${tail}</summary><pre>${esc(out)}</pre></details>` : `<div class="tool">⚙ ${title}${tail}</div>`;
+        }
+        case "turn_diff": {
+            const files = p.files ?? [];
+            const look = (p.triage ?? []).filter((t) => t.level !== "low").slice(0, 3);
+            return `<details class="diff"><summary>✎ Edited ${files.length} file${files.length === 1 ? "" : "s"} <span class="da">+${Number(p.added ?? 0)}</span> <span class="dd">−${Number(p.removed ?? 0)}</span> <span class="m">${esc(files.slice(0, 5).map((f) => f.path).join(", "))}${files.length > 5 ? " …" : ""}</span></summary>` +
+                (look.length ? `<p class="tri">Review first: ${look.map((t) => `<code>${esc(t.path)}</code> ${esc(t.reasons?.[0] ?? "")}`).join(" · ")}</p>` : "") +
+                `<pre class="patch">${diffHtml(String(p.patch ?? ""))}</pre></details>`;
+        }
+        case "proof": {
+            const claims = (p.claims ?? []).map((c) => `<li class="c-${esc(c.status)}">“${esc(c.text)}” <span class="m">— ${esc(c.why)}</span></li>`).join("");
+            return `<div class="card proof v-${esc(p.verdict)}"><b>Proof · ${esc(PROOF_WORD[String(p.verdict)] ?? p.verdict)}</b> ${esc(p.headline)}${claims ? `<ul>${claims}</ul>` : ""}</div>`;
+        }
+        case "shift":
+            if (p.phase === "started")
+                return `<div class="sys">🌙 Night shift started — ${(p.tasks ?? []).length} tasks${p.to ? ` for ${esc(p.to)}` : ""}</div>`;
+            if (p.phase !== "report")
+                return "";
+            return `<div class="card shift"><b>🌙 Night shift report</b> ${esc(p.summary)}${p.stopped ? ` <span class="m">— stopped: ${esc(p.stopped)}</span>` : ""}<ul>${(p.tasks ?? []).map((t) => `<li><span class="tag s-${esc(t.status)}">${esc(SHIFT_WORD[t.status] ?? t.status)}</span> ${esc(t.text)}${t.question ? ` <span class="m">— asks: ${esc(t.question)}</span>` : t.error ? ` <span class="m">— ${esc(t.error)}</span>` : t.headline ? ` <span class="m">— ${esc(t.headline)}</span>` : ""}</li>`).join("")}</ul></div>`;
+        case "status":
+            if (p.state === "loop_detected")
+                return `<div class="card warn"><b>↻ ${who} was going in circles</b> <code>${esc(p.call)}</code> — ${esc(p.count)}× this turn${p.nudged ? "; Loom stopped it and asked it to step back" : ""}</div>`;
+            if (p.state === "shield_tripped")
+                return `<div class="card bad"><b>⛔ ${who} ran ${esc(p.what)}</b> <code>${esc(p.command)}</code> — ${esc(p.why)}${p.stopped ? ". Loom stopped the turn." : ""}</div>`;
+            if (typeof p.state === "string" && p.state.startsWith("quota_") && p.text)
+                return `<div class="sys">⇄ ${esc(p.text)}</div>`;
+            if (p.state === "interrupted" || p.state === "stopped")
+                return `<div class="sys">■ ${who} stopped</div>`;
+            return "";
+        case "needs_input": return `<div class="card warn"><b>? ${who} asked</b> ${esc(p.question)}</div>`;
+        case "approval":
+            if (p.phase === "requested")
+                return `<div class="sys">${who} asked to use ${esc(p.tool)}</div>`;
+            if (p.phase === "decided")
+                return `<div class="sys">${p.behavior === "allow" ? "✓ allowed" : "✕ denied"} ${esc(p.tool)} for ${who}</div>`;
+            return "";
+        case "handoff": return `<div class="sys">⇢ the baton passed${p.from ? ` from ${esc(p.from)}` : ""} to ${esc(p.to)}</div>`;
+        case "error": return `<div class="card bad"><b>Error</b> ${esc(String(p.message ?? p.error ?? "").split("\n")[0])}</div>`;
+        case "run_complete": return `<div class="done">${who} finished${p.durationMs ? ` in ${dur(Number(p.durationMs))}` : ""}${p.costUsd ? ` · ${money(Number(p.costUsd))}` : ""}${p.error ? ` · <span class="bad">${esc(p.error)}</span>` : ""}</div>`;
+        default: return "";
+    }
+}
+export function threadReplay(events, meta) {
+    const now = meta.now ?? new Date();
+    const agents = [...new Set(events.filter((e) => e.agentId && e.kind === "run_complete").map((e) => e.agentId))];
+    const turns = events.filter((e) => e.kind === "run_complete" && e.agentId).length;
+    const cost = events.reduce((n, e) => n + (e.kind === "status" && e.payload.state === "turn_cost" ? Number(e.payload.costUsd ?? 0) || 0 : 0), 0);
+    const ms = events.reduce((n, e) => n + (e.kind === "run_complete" ? Number(e.payload.durationMs ?? 0) || 0 : 0), 0);
+    const files = new Set(events.flatMap((e) => (e.kind === "turn_diff" ? (e.payload.files ?? []).map((f) => f.path) : [])));
+    const proofs = events.filter((e) => e.kind === "proof");
+    const verified = proofs.filter((e) => e.payload.verdict === "verified").length;
+    const facts = [
+        agents.length ? `${agents.map(esc).join(", ")}` : "",
+        `${turns} turn${turns === 1 ? "" : "s"}`,
+        ms ? dur(ms) : "",
+        files.size ? `${files.size} file${files.size === 1 ? "" : "s"} changed` : "",
+        proofs.length ? `${verified}/${proofs.length} checks verified` : "",
+        cost ? money(cost) : "",
+    ].filter(Boolean).join(" · ");
+    let lastDay = "";
+    const body = [];
+    for (const e of events) {
+        const d = day(e.ts);
+        if (d !== lastDay) {
+            lastDay = d;
+            body.push(`<h2 class="day">${esc(d)}</h2>`);
+        }
+        const h = item(e);
+        if (h)
+            body.push(h);
+    }
+    const title = `${meta.project} — ${meta.chat}`;
+    return `<!doctype html>
+<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+<meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; img-src data:">
+<meta name="referrer" content="no-referrer">
+<title>${esc(title)} · Loom replay</title>
+<style>
+:root{--bg:#fbfaf8;--fg:#1d1c1a;--mut:#6f6b64;--line:#e6e2db;--card:#fff;--ok:#1f8a4c;--err:#c0392b;--warn:#b7791f;--add:#1f8a4c;--del:#c0392b;--code:#f3f0ea}
+@media (prefers-color-scheme:dark){:root{--bg:#141413;--fg:#ecebe7;--mut:#9b978f;--line:#2b2a27;--card:#1c1b19;--ok:#4fbf7f;--err:#ef6f61;--warn:#e0a548;--add:#4fbf7f;--del:#ef6f61;--code:#23221f}}
+*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--fg);font:14.5px/1.55 ui-sans-serif,system-ui,-apple-system,"Segoe UI",sans-serif}
+main{max-width:860px;margin:0 auto;padding:28px 16px 64px}
+.top h1{font-size:22px;margin:0 0 4px}.top p{margin:0;color:var(--mut)}
+h2.day{font-size:12px;letter-spacing:.06em;text-transform:uppercase;color:var(--mut);margin:28px 0 8px;border-bottom:1px solid var(--line);padding-bottom:4px}
+section{margin:12px 0;padding:10px 14px;border-radius:12px;border:1px solid var(--line);background:var(--card)}
+section.you{background:var(--code)}
+section header{font-size:12.5px;font-weight:650;margin-bottom:4px}section header time,.m,time{font-weight:400;color:var(--mut);font-size:12px}
+section p{margin:6px 0}section h3,section h4,section h5,section h6{margin:10px 0 4px}
+code{font:12.5px ui-monospace,SFMono-Regular,Menlo,monospace;background:var(--code);border-radius:4px;padding:1px 4px}
+pre{font:12px/1.45 ui-monospace,SFMono-Regular,Menlo,monospace;background:var(--code);border-radius:8px;padding:10px;overflow:auto;white-space:pre-wrap;word-break:break-word}
+pre code{background:none;padding:0}
+.tool,details.tool summary,details.diff summary{font:12.5px ui-monospace,SFMono-Regular,Menlo,monospace;color:var(--mut);margin:3px 0 3px 4px;cursor:pointer}
+details pre{margin:6px 0 10px}.patch .da{color:var(--add)}.patch .dd{color:var(--del)}.patch .dh{color:var(--mut);font-weight:600}.patch .dn{color:var(--warn)}
+.da{color:var(--add)}.dd{color:var(--del)}.bad{color:var(--err)}
+.tri{font-size:12.5px;margin:6px 0}
+.sys,.done{font-size:12.5px;color:var(--mut);margin:6px 0 6px 4px}
+.card{margin:10px 0;padding:9px 12px;border-radius:10px;border:1px solid var(--line);border-left:3px solid var(--mut);background:var(--card);font-size:13.5px}
+.card ul{margin:6px 0 0;padding-left:18px}.card.warn{border-left-color:var(--warn)}.card.bad{border-left-color:var(--err)}
+.proof.v-verified{border-left-color:var(--ok)}.proof.v-contradicted{border-left-color:var(--err)}
+.c-supported::marker{color:var(--ok)}.c-contradicted::marker{color:var(--err)}
+.tag{font-size:10.5px;text-transform:uppercase;letter-spacing:.05em;border:1px solid var(--line);border-radius:999px;padding:0 7px;color:var(--mut)}
+.s-verified{color:var(--ok)}.s-didnt_hold,.s-failed{color:var(--err)}.s-needs_you{color:var(--warn)}
+footer{margin-top:40px;color:var(--mut);font-size:12px;text-align:center}
+</style></head>
+<body><main>
+<div class="top"><h1>${esc(title)}</h1><p>${facts}</p></div>
+${body.join("\n")}
+<footer>A replay from Loom · exported ${esc(now.toLocaleString())} · ${events.length} events</footer>
+</main></body></html>
+`;
+}
+//# sourceMappingURL=replay.js.map

package/dist/core/replay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay.js","sourceRoot":"","sources":["../../src/core/replay.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;AACtJ,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AAC1G,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;AACvI,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAChI,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAElG,6HAA6H;AAC7H,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9C,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACxB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAChB,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,EAAE,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/F,GAAG,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QACD,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC;iBAClB,OAAO,CAAC,YAAY,EAAE,iBAAiB,CAAC;iBACxC,OAAO,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;iBAClD,OAAO,CAAC,uCAAuC,EAAE,+CAA+C,CAAC,CAAC;YACrG,MAAM,EAAE,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,IAAI,EAAE,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAAC,IAAI,GAAG,IAAI,CAAC;gBAAC,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YAClG,IAAI,IAAI,EAAE,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAAC,IAAI,GAAG,KAAK,CAAC;YAAC,CAAC;YAC9C,MAAM,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;iBACnE,IAAI,IAAI,CAAC,IAAI,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/C,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACnL,OAAO,GAAG,CAAC,CAAC,CAAC,gBAAgB,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,GAA2B,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AAC3H,MAAM,UAAU,GAA2B,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAEvM,SAAS,IAAI,CAAC,CAAY;IACxB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAwB,CAAC;IACnD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC;IACzC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,SAAS;YACZ,IAAI,CAAC,CAAC,SAAS;gBAAE,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,CAAC,OAAO;gBAAE,OAAO,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,oBAAoB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,oCAAoC,EAAE,YAAY,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;YAC1K,OAAO,kCAAkC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,EAAE,YAAY,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;QACjN,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,MAAM,GAAG,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC;YACtF,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACvF,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;YACpH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,sBAAsB,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3H,OAAO,GAAG,CAAC,CAAC,CAAC,oCAAoC,KAAK,GAAG,IAAI,kBAAkB,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,uBAAuB,KAAK,GAAG,IAAI,QAAQ,CAAC;QAC1J,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,KAAK,GAAI,CAAC,CAAC,KAA6C,IAAI,EAAE,CAAC;YACrE,MAAM,IAAI,GAAG,CAAE,CAAC,CAAC,MAAiF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACvJ,OAAO,2CAA2C,KAAK,CAAC,MAAM,QAAQ,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,sBAAsB,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,6BAA6B,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,2BAA2B,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,mBAAmB;gBAC/T,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,gCAAgC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClJ,sBAAsB,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,kBAAkB,CAAC;QAC5E,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,MAAM,GAAG,CAAE,CAAC,CAAC,MAAqD,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnM,OAAO,4BAA4B,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;QACvL,CAAC;QACD,KAAK,OAAO;YACV,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,6CAA6C,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;YACtJ,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YACpC,OAAO,wDAAwD,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,CAAE,CAAC,CAAC,KAAoC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACtN,0BAA0B,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,4BAA4B,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,sBAAsB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,sBAAsB,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC;QACzU,KAAK,QAAQ;YACX,IAAI,CAAC,CAAC,KAAK,KAAK,eAAe;gBAAE,OAAO,+BAA+B,GAAG,mCAAmC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;YACrO,IAAI,CAAC,CAAC,KAAK,KAAK,gBAAgB;gBAAE,OAAO,8BAA8B,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;YACvM,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI;gBAAE,OAAO,sBAAsB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC5H,IAAI,CAAC,CAAC,KAAK,KAAK,aAAa,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,sBAAsB,GAAG,gBAAgB,CAAC;YACzG,OAAO,EAAE,CAAC;QACZ,KAAK,aAAa,CAAC,CAAC,OAAO,+BAA+B,GAAG,cAAc,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACnG,KAAK,UAAU;YACb,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW;gBAAE,OAAO,oBAAoB,GAAG,iBAAiB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;YAChG,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,oBAAoB,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC1I,OAAO,EAAE,CAAC;QACZ,KAAK,SAAS,CAAC,CAAC,OAAO,sCAAsC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC;QAC1H,KAAK,OAAO,CAAC,CAAC,OAAO,sCAAsC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1H,KAAK,cAAc,CAAC,CAAC,OAAO,qBAAqB,GAAG,YAAY,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,wBAAwB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;QAClP,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAID,MAAM,UAAU,YAAY,CAAC,MAAmB,EAAE,IAAgB;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAQ,CAAC,CAAC,CAAC,CAAC;IACjH,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAClF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChJ,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,OAAO,CAAC,KAA6C,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClK,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IAC/E,MAAM,KAAK,GAAG;QACZ,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;QACpD,GAAG,KAAK,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;QACxC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;QACjB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE;QAC5E,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,MAAM,CAAC,MAAM,kBAAkB,CAAC,CAAC,CAAC,EAAE;QACnE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;KACxB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpB,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;YAAC,OAAO,GAAG,CAAC,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAChF,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,OAAO,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/C,OAAO;;;;SAIA,GAAG,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBA6BI,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK;EAC/C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;wCACuB,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,MAAM,MAAM,CAAC,MAAM;;CAEnF,CAAC;AACF,CAAC"}

package/dist/core/review-triage.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Review Triage: what to read first in a turn's diff.
+ *
+ * An agent hands back twelve changed files and you have five minutes. Most of
+ * them are fine to skim; one deleted a test, one touched the auth middleware,
+ * one added a dependency. This reads the patch and ranks the files by what a
+ * reviewer would want to see first — each with the reasons, said plainly.
+ *
+ * It flags what the diff shows, never guesses at intent: "a test was removed",
+ * not "the agent cheated". Pure: the runtime calls it on every turn_diff.
+ */
+export type TriageLevel = "high" | "medium" | "low";
+export interface TriageItem {
+    path: string;
+    level: TriageLevel;
+    score: number;
+    /** Plain reasons, most important first. */
+    reasons: string[];
+    added: number;
+    removed: number;
+}
+export interface Triage {
+    /** Every changed file, the one to read first at the top. */
+    files: TriageItem[];
+    /** How many files are worth a careful look (high or medium). */
+    flagged: number;
+}
+interface FileDiff {
+    path: string;
+    added: string[];
+    removed: string[];
+    deleted: boolean;
+    created: boolean;
+}
+/** Split a unified diff (git's, plus Loom's new-file patches) into files. */
+export declare function splitPatch(patch: string): FileDiff[];
+export declare function triage(patch: string, files?: Array<{
+    path: string;
+    status?: string;
+}>): Triage;
+export {};

package/dist/core/review-triage.js

@@ -0,0 +1,124 @@
+/**
+ * Review Triage: what to read first in a turn's diff.
+ *
+ * An agent hands back twelve changed files and you have five minutes. Most of
+ * them are fine to skim; one deleted a test, one touched the auth middleware,
+ * one added a dependency. This reads the patch and ranks the files by what a
+ * reviewer would want to see first — each with the reasons, said plainly.
+ *
+ * It flags what the diff shows, never guesses at intent: "a test was removed",
+ * not "the agent cheated". Pure: the runtime calls it on every turn_diff.
+ */
+/** Split a unified diff (git's, plus Loom's new-file patches) into files. */
+export function splitPatch(patch) {
+    const out = [];
+    let cur = null;
+    for (const line of patch.split("\n")) {
+        const head = /^diff --git a\/(.+?) b\/(.+)$/.exec(line);
+        if (head) {
+            cur = { path: head[2], added: [], removed: [], deleted: false, created: false };
+            out.push(cur);
+            continue;
+        }
+        const note = /^\?\? new file: (.+?)( \(binary\))?$/.exec(line);
+        if (note) {
+            cur = null;
+            out.push({ path: note[1], added: [], removed: [], deleted: false, created: true });
+            continue;
+        }
+        if (!cur)
+            continue;
+        if (line.startsWith("deleted file mode"))
+            cur.deleted = true;
+        else if (line.startsWith("new file mode"))
+            cur.created = true;
+        else if (line.startsWith("+++") || line.startsWith("---"))
+            continue;
+        else if (line.startsWith("+"))
+            cur.added.push(line.slice(1));
+        else if (line.startsWith("-"))
+            cur.removed.push(line.slice(1));
+    }
+    return out;
+}
+const TEST_FILE = /(^|\/)(__tests__|tests?|spec)\/|[._-](test|spec)\.[a-z0-9]+$|_test\.(go|py)$|(^|\/)test_[^/]+\.py$/i;
+const GENERATED = /(^|\/)(package-lock\.json|pnpm-lock\.yaml|yarn\.lock|bun\.lockb?|Cargo\.lock|poetry\.lock|go\.sum|composer\.lock|Gemfile\.lock)$|(^|\/)(dist|build|out|coverage|vendor|node_modules)\/|\.min\.(js|css)$|\.snap$|\.map$/;
+const DOCS = /\.(md|mdx|txt|rst)$|(^|\/)(docs?|CHANGELOG|LICENSE)/i;
+const SECURITY = /(^|[/_.-])(auth|oauth|login|logout|session|token|jwt|crypto|password|passwd|secret|permission|acl|rbac|security|csrf|cors|middleware|sanitiz|keychain|credential)/i;
+const CI = /(^|\/)(\.github\/workflows\/|\.gitlab-ci|\.circleci\/|Jenkinsfile|azure-pipelines)|(^|\/)(Dockerfile|docker-compose[^/]*\.ya?ml|Procfile|vercel\.json|netlify\.toml|fly\.toml|railway\.json|app\.json|eas\.json)$|\.(tf|tfvars)$|(^|\/)(k8s|kubernetes|helm|deploy)\//i;
+const DEPS = /(^|\/)(package\.json|requirements[^/]*\.txt|pyproject\.toml|Pipfile|Cargo\.toml|go\.mod|Gemfile|composer\.json|build\.gradle(\.kts)?|pom\.xml)$/;
+const MIGRATION = /(^|\/)(migrations?|migrate|schema)\/|\.sql$|schema\.prisma$|(^|\/)alembic\//i;
+const CONFIG = /(^|\/)(\.env[^/]*|tsconfig[^/]*\.json|\.eslintrc[^/]*|eslint\.config\.[a-z]+|vite\.config\.[a-z]+|next\.config\.[a-z]+|webpack\.config\.[a-z]+|jest\.config\.[a-z]+|vitest\.config\.[a-z]+|\.npmrc|\.gitignore)$/;
+/** What an added line can do that deserves eyes, said the way a reviewer would. */
+const RISKY = [
+    [/-----BEGIN [A-Z ]*PRIVATE KEY-----|\bAKIA[0-9A-Z]{16}\b|\b(sk|rk|pk)_(live|test)_[0-9a-zA-Z]{16,}|\bsk-[A-Za-z0-9_-]{20,}|\bgh[pousr]_[A-Za-z0-9]{30,}|\bxox[baprs]-[A-Za-z0-9-]{10,}/, "what looks like a secret key"],
+    [/\b(password|passwd|secret|api[_-]?key|token)\b\s*[:=]\s*["'][^"'\s]{6,}["']/i, "a hard-coded credential"],
+    [/\beval\s*\(|new Function\s*\(/, "eval of a string"],
+    [/\b(child_process|execSync|spawnSync|os\.system|subprocess\.(call|run|Popen)|shell\s*=\s*True)\b/, "running shell commands"],
+    [/\brm\s+-[a-z]*r[a-z]*f|\bgit\s+push\b.*--force|\bgit\s+reset\s+--hard|\bDROP\s+(TABLE|DATABASE)\b|\bTRUNCATE\s+TABLE\b/i, "a destructive command"],
+    [/dangerouslySetInnerHTML|\.innerHTML\s*=|v-html=/, "raw HTML injection"],
+    [/rejectUnauthorized\s*:\s*false|verify\s*=\s*False|InsecureSkipVerify\s*:\s*true|NODE_TLS_REJECT_UNAUTHORIZED/, "TLS checks turned off"],
+    [/chmod\s+(-R\s+)?777|Access-Control-Allow-Origin["']?\s*[:,]\s*["']\*/, "wide-open permissions"],
+    [/@ts-ignore|@ts-nocheck|eslint-disable(?!-next-line\s+no-console)|#\s*type:\s*ignore|# noqa/, "a check silenced"],
+];
+const SKIPPED_TEST = /\b(it|test|describe)\.(skip|only|todo)\s*\(|\b(xit|xdescribe|fit|fdescribe)\s*\(|@pytest\.mark\.skip|\bt\.Skip\(|#\[ignore\]/;
+const TEST_CASE = /\b(it|test)\s*\(\s*["'`]|\bdef test_|\bfunc Test[A-Z]|#\[test\]|\bexpect\s*\(|\bassert/;
+export function triage(patch, files = []) {
+    const diffs = new Map(splitPatch(patch).map((d) => [d.path, d]));
+    // a file git saw change but the patch doesn't show (truncated, binary, a rename): still listed
+    for (const f of files)
+        if (!diffs.has(f.path))
+            diffs.set(f.path, { path: f.path, added: [], removed: [], deleted: /D/.test(f.status ?? ""), created: (f.status ?? "") === "??" });
+    const all = [...diffs.values()];
+    const testsTouched = all.some((d) => TEST_FILE.test(d.path) && !d.deleted);
+    const items = all.map((d) => {
+        const reasons = [];
+        const isTest = TEST_FILE.test(d.path);
+        const say = (w, why) => { if (!reasons.some(([, r]) => r === why))
+            reasons.push([w, why]); };
+        const added = d.added.join("\n");
+        for (const [re, what] of RISKY)
+            if (re.test(added))
+                say(what.includes("secret") || what.includes("credential") ? 100 : 30, `adds ${what}`);
+        if (isTest) {
+            if (d.deleted)
+                say(45, "deletes a test file");
+            else {
+                if (SKIPPED_TEST.test(added))
+                    say(40, "skips or focuses a test");
+                const gone = d.removed.filter((l) => TEST_CASE.test(l)).length - d.added.filter((l) => TEST_CASE.test(l)).length;
+                if (gone >= 2)
+                    say(35, `removes ${gone} test assertions or cases`);
+            }
+        }
+        if (MIGRATION.test(d.path))
+            say(35, "changes the database schema or a migration");
+        if (SECURITY.test(d.path) && !isTest)
+            say(30, "touches auth or security code");
+        if (CI.test(d.path))
+            say(25, "changes CI, build or deploy");
+        if (DEPS.test(d.path) && d.added.some((l) => /["']?[@\w./-]+["']?\s*[:=]\s*["']?[~^<>=]?\d/.test(l) || /^[\w.-]+([=<>~!]=|>|<)/.test(l.trim())))
+            say(20, "adds or changes dependencies");
+        if (CONFIG.test(d.path))
+            say(15, "changes project config");
+        if (d.deleted && !isTest && !GENERATED.test(d.path))
+            say(15, "deletes the file");
+        const lines = d.added.length + d.removed.length;
+        const source = !isTest && !DOCS.test(d.path) && !GENERATED.test(d.path) && !CONFIG.test(d.path) && !DEPS.test(d.path);
+        if (source && lines >= 20 && !testsTouched)
+            say(15, `${lines} lines changed and no test was touched this turn`);
+        let score = reasons.reduce((n, [w]) => n + w, 0) + Math.min(10, Math.round(lines / 25));
+        if (GENERATED.test(d.path) && score < 100) {
+            score = Math.round(score * 0.2);
+            say(0, "generated or a lockfile: skim it");
+        }
+        else if (DOCS.test(d.path) && score < 30)
+            say(0, "docs");
+        const ranked = reasons.sort((a, b) => b[0] - a[0]).map(([, r]) => r);
+        const level = score >= 40 || reasons.some(([w]) => w >= 40) ? "high" : score >= 15 ? "medium" : "low";
+        return { path: d.path, level, score, reasons: ranked, added: d.added.length, removed: d.removed.length };
+    });
+    items.sort((a, b) => b.score - a.score || (b.added + b.removed) - (a.added + a.removed) || a.path.localeCompare(b.path));
+    return { files: items, flagged: items.filter((i) => i.level !== "low").length };
+}
+//# sourceMappingURL=review-triage.js.map

package/dist/core/review-triage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-triage.js","sourceRoot":"","sources":["../../src/core/review-triage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAuBH,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,IAAI,GAAG,GAAoB,IAAI,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,IAAI,EAAE,CAAC;YAAC,GAAG,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACxH,MAAM,IAAI,GAAG,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,IAAI,EAAE,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACxH,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC;YAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;aACxD,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;aACzD,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,SAAS;aAC/D,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;aACxD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,SAAS,GAAG,qGAAqG,CAAC;AACxH,MAAM,SAAS,GAAG,wNAAwN,CAAC;AAC3O,MAAM,IAAI,GAAG,sDAAsD,CAAC;AACpE,MAAM,QAAQ,GAAG,oKAAoK,CAAC;AACtL,MAAM,EAAE,GAAG,wQAAwQ,CAAC;AACpR,MAAM,IAAI,GAAG,iJAAiJ,CAAC;AAC/J,MAAM,SAAS,GAAG,8EAA8E,CAAC;AACjG,MAAM,MAAM,GAAG,kNAAkN,CAAC;AAElO,mFAAmF;AACnF,MAAM,KAAK,GAA4B;IACrC,CAAC,uLAAuL,EAAE,8BAA8B,CAAC;IACzN,CAAC,8EAA8E,EAAE,yBAAyB,CAAC;IAC3G,CAAC,+BAA+B,EAAE,kBAAkB,CAAC;IACrD,CAAC,iGAAiG,EAAE,wBAAwB,CAAC;IAC7H,CAAC,yHAAyH,EAAE,uBAAuB,CAAC;IACpJ,CAAC,iDAAiD,EAAE,oBAAoB,CAAC;IACzE,CAAC,8GAA8G,EAAE,uBAAuB,CAAC;IACzI,CAAC,sEAAsE,EAAE,uBAAuB,CAAC;IACjG,CAAC,4FAA4F,EAAE,kBAAkB,CAAC;CACnH,CAAC;AAEF,MAAM,YAAY,GAAG,8HAA8H,CAAC;AACpJ,MAAM,SAAS,GAAG,wFAAwF,CAAC;AAE3G,MAAM,UAAU,MAAM,CAAC,KAAa,EAAE,QAAkD,EAAE;IACxF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,+FAA+F;IAC/F,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAClL,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAc,EAAE;QACtC,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,GAAW,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7G,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEjC,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,KAAK;YAAE,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC3I,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,CAAC,OAAO;gBAAE,GAAG,CAAC,EAAE,EAAE,qBAAqB,CAAC,CAAC;iBACzC,CAAC;gBACJ,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;oBAAE,GAAG,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;gBACjE,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBACjH,IAAI,IAAI,IAAI,CAAC;oBAAE,GAAG,CAAC,EAAE,EAAE,WAAW,IAAI,2BAA2B,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,EAAE,EAAE,4CAA4C,CAAC,CAAC;QAClF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,GAAG,CAAC,EAAE,EAAE,+BAA+B,CAAC,CAAC;QAC/E,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,EAAE,EAAE,6BAA6B,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,8CAA8C,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAAE,GAAG,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAC;QACzL,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAC3D,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QAChD,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtH,IAAI,MAAM,IAAI,KAAK,IAAI,EAAE,IAAI,CAAC,YAAY;YAAE,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,kDAAkD,CAAC,CAAC;QAEhH,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;QACxF,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;YAAC,GAAG,CAAC,CAAC,EAAE,kCAAkC,CAAC,CAAC;QAAC,CAAC;aACtH,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,EAAE;YAAE,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAgB,KAAK,IAAI,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QACnH,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;IAC3G,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACzH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;AAClF,CAAC"}