@miller-tech/uap 2.1.7 → 2.11.1

package/dist/review/visual-captures.js

@@ -0,0 +1,222 @@
+/**
+ * Before/after visual captures bound to a review (uplift 0.3).
+ *
+ * A diff that touches UI files is not reviewable from code alone — the change
+ * is to what the user SEES. This module records capture pairs (produced by
+ * the agent via agent-browser for web surfaces, tuistory/pty-capture for
+ * terminal surfaces) into a sibling artifact and validates that a UI diff is
+ * covered by fresh, complete pairs before the ship gate opens.
+ *
+ * Artifact: .uap/reviews/<branch-slug>.captures.json — a SIBLING of the
+ * review artifact, for the same reason the pre-pass is one (see
+ * src/review/prepass.ts): the expert-review enforcer treats the existence of
+ * <slug>.json as "a review happened", so nothing advisory may create it.
+ * Consolidation embeds the capture paths into the real review artifact.
+ *
+ * The gate is deterministic pairing/freshness, not judgment: the model (or
+ * human) looks at the captures; the policy only proves they exist, form
+ * before/after pairs, and postdate the newest UI change on disk.
+ */
+import { execFileSync } from 'child_process';
+import { existsSync, mkdirSync, readFileSync, renameSync, statSync, writeFileSync, } from 'fs';
+import { join, relative, resolve } from 'path';
+import { branchSlug } from './prepass.js';
+/** UI surface definition — mirrored (with matching case handling) by
+ * UI_EXT/UI_DIR_PREFIXES in src/policies/enforcers/expert_review_required.py
+ * and visual_verification.py. Keep all three in sync; the parity test in
+ * test/visual-captures.test.ts pins the intended surface. */
+export const UI_EXT = new Set([
+    '.css', '.scss', '.sass', '.less',
+    '.tsx', '.jsx', '.vue', '.svelte', '.html', '.astro',
+]);
+export const UI_DIR_PREFIXES = ['web/', 'src/dashboard/', 'public/'];
+function git(projectDir, args) {
+    try {
+        const out = execFileSync('git', args, {
+            cwd: projectDir,
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        return out.trim();
+    }
+    catch {
+        return null; // fail-soft: non-git/detached/no-base states disable the gate
+    }
+}
+export function isUiFile(file) {
+    const lower = file.toLowerCase();
+    const dot = lower.lastIndexOf('.');
+    if (dot >= 0 && UI_EXT.has(lower.slice(dot)))
+        return true;
+    return UI_DIR_PREFIXES.some((p) => lower.startsWith(p));
+}
+/** Files changed vs the upstream base (origin/master, origin/main, master,
+ * main — first that resolves), or null when no base exists (fail-open). */
+export function changedFilesVsBase(projectDir) {
+    for (const base of ['origin/master', 'origin/main', 'master', 'main']) {
+        const out = git(projectDir, ['diff', '--name-only', `${base}...HEAD`]);
+        if (out !== null)
+            return out.split('\n').map((l) => l.trim()).filter(Boolean);
+    }
+    return null;
+}
+export function capturesArtifactPath(projectDir, branch) {
+    return join(projectDir, '.uap', 'reviews', `${branchSlug(branch)}.captures.json`);
+}
+function readArtifact(path) {
+    try {
+        const data = JSON.parse(readFileSync(path, 'utf-8'));
+        if (typeof data !== 'object' || data === null)
+            return null;
+        // Normalize: a hand-edited artifact with a non-array `captures` must not
+        // crash validation or corrupt the file on the next `add` (spreading a
+        // string yields its chars). Unknown entries are dropped, not trusted.
+        const raw = data.captures;
+        return {
+            ...data,
+            captures: Array.isArray(raw)
+                ? raw.filter((c) => typeof c === 'object' && c !== null)
+                : [],
+        };
+    }
+    catch {
+        return null; // missing or malformed — treated as absent by callers
+    }
+}
+/** Project-relative normalization: absolute paths under the project are
+ * relativized; anything escaping the project is refused by the caller-visible
+ * existence check below (we never write paths we cannot verify). */
+function toProjectRelative(projectDir, p) {
+    const abs = resolve(projectDir, p);
+    return relative(projectDir, abs);
+}
+/**
+ * Register one before/after capture pair for the current branch.
+ * Returns the artifact path, or an error string when the pair is unusable.
+ */
+export function recordCapture(projectDir, entry) {
+    const tool = entry.tool.trim();
+    if (!tool)
+        return { error: 'capture tool is required (agent-browser, tuistory, pty-capture, ...)' };
+    const before = toProjectRelative(projectDir, entry.before);
+    const after = toProjectRelative(projectDir, entry.after);
+    for (const [label, rel] of [['before', before], ['after', after]]) {
+        // `..` alone or as a leading segment escapes the project; a leading `..`
+        // inside a filename (`..assets/x.png`) is legitimate and stays allowed.
+        if (rel === '..' || rel.startsWith('../')) {
+            return { error: `${label} capture escapes the project: ${label === 'before' ? entry.before : entry.after}` };
+        }
+        if (!existsSync(join(projectDir, rel))) {
+            return { error: `${label} capture not found: ${rel}` };
+        }
+    }
+    const branch = git(projectDir, ['rev-parse', '--abbrev-ref', 'HEAD']);
+    if (!branch || branch === 'HEAD')
+        return { error: 'not on a branch (detached/non-git)' };
+    const head = git(projectDir, ['rev-parse', 'HEAD']);
+    const changed = changedFilesVsBase(projectDir) ?? [];
+    const uiFiles = changed.filter(isUiFile);
+    const path = capturesArtifactPath(projectDir, branch);
+    const existing = readArtifact(path);
+    const now = new Date().toISOString();
+    const artifact = {
+        branch,
+        head,
+        ui_files: uiFiles,
+        captures: [
+            ...(existing?.captures ?? []),
+            { tool, before, after, ...(entry.note ? { note: entry.note } : {}), at: now },
+        ],
+        at: now,
+    };
+    mkdirSync(join(projectDir, '.uap', 'reviews'), { recursive: true });
+    // Atomic write: a crash mid-write must not leave a torn artifact that a
+    // later validation half-reads.
+    const tmp = `${path}.${process.pid}.tmp`;
+    writeFileSync(tmp, JSON.stringify(artifact, null, 2));
+    renameSync(tmp, path);
+    return { path, artifact };
+}
+const STALENESS_GRACE_S = 1; // same 1s grace the commit-time visual enforcer uses
+/**
+ * Validate that a UI diff is covered by complete, fresh capture pairs.
+ * Fail-open only when no base is resolvable (non-git/detached), matching the
+ * expert-review enforcer's posture.
+ */
+export function validateCaptures(projectDir) {
+    const branch = git(projectDir, ['rev-parse', '--abbrev-ref', 'HEAD']);
+    const artifactPath = capturesArtifactPath(projectDir, branch ?? 'HEAD');
+    const base = {
+        required: false,
+        ok: true,
+        reasons: [],
+        uiFiles: [],
+        artifactPath,
+        captures: [],
+    };
+    // Detached HEAD: the enforcer fails open there (no branch → no slug), and
+    // the advisory CLI must not claim otherwise.
+    if (!branch || branch === 'HEAD') {
+        base.reasons.push('detached HEAD — gate inactive (fail-open)');
+        return base;
+    }
+    const changed = changedFilesVsBase(projectDir);
+    if (changed === null) {
+        base.reasons.push('no upstream base resolvable — gate inactive (fail-open)');
+        return base;
+    }
+    const uiFiles = changed.filter(isUiFile);
+    if (uiFiles.length === 0) {
+        base.reasons.push('no UI files in the diff');
+        return base;
+    }
+    base.required = true;
+    base.uiFiles = uiFiles;
+    const artifact = readArtifact(artifactPath);
+    if (!artifact) {
+        base.ok = false;
+        base.reasons.push(`no captures artifact at ${relative(projectDir, artifactPath)} — capture before/after ` +
+            'evidence (agent-browser / tuistory / pty-capture) and register each pair with ' +
+            '`uap review captures add --before <img> --after <img> --tool <name>`');
+        return base;
+    }
+    base.captures = artifact.captures ?? [];
+    const pairs = base.captures.filter((c) => c.before && c.after);
+    if (pairs.length === 0) {
+        base.ok = false;
+        base.reasons.push('captures artifact has no complete before/after pair');
+        return base;
+    }
+    const missing = pairs.flatMap((c) => [c.before, c.after].filter((p) => !existsSync(join(projectDir, p))));
+    if (missing.length > 0) {
+        base.ok = false;
+        base.reasons.push(`capture file(s) missing on disk: ${missing.join(', ')}`);
+        return base;
+    }
+    // Freshness: captures recorded before the newest UI edit prove nothing
+    // about the CURRENT look. Fail CLOSED when `at` is missing/unparseable —
+    // the ship enforcer coerces the same failure to epoch 0 (everything stale),
+    // so the advisory CLI must not say OK where the gate will refuse.
+    const capturedAt = Date.parse(artifact.at) / 1000;
+    if (!Number.isFinite(capturedAt)) {
+        base.ok = false;
+        base.reasons.push('captures artifact has no parseable `at` timestamp — re-register a pair');
+        return base;
+    }
+    const stale = uiFiles.filter((f) => {
+        try {
+            return statSync(join(projectDir, f)).mtimeMs / 1000 > capturedAt + STALENESS_GRACE_S;
+        }
+        catch {
+            return false; // deleted files cannot be stale
+        }
+    });
+    if (stale.length > 0) {
+        base.ok = false;
+        base.reasons.push(`UI file(s) changed after the captures were taken: ${stale.join(', ')} — re-capture`);
+        return base;
+    }
+    base.reasons.push(`${pairs.length} before/after pair(s) cover ${uiFiles.length} UI file(s)`);
+    return base;
+}
+//# sourceMappingURL=visual-captures.js.map

package/dist/review/visual-captures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"visual-captures.js","sourceRoot":"","sources":["../../src/review/visual-captures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,aAAa,GACd,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C;;;6DAG6D;AAC7D,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC;IAC5B,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO;IACjC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ;CACrD,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC;AAgCrE,SAAS,GAAG,CAAC,UAAkB,EAAE,IAAc;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;YACpC,GAAG,EAAE,UAAU;YACf,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,8DAA8D;IAC7E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,GAAG,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED;2EAC2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,KAAK,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;QACtE,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC;QACvE,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,MAAc;IACrE,OAAO,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC3D,yEAAyE;QACzE,sEAAsE;QACtE,sEAAsE;QACtE,MAAM,GAAG,GAAa,IAA+B,CAAC,QAAQ,CAAC;QAC/D,OAAO;YACL,GAAI,IAAyB;YAC7B,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;gBAC1B,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAqB,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC;gBAC3E,CAAC,CAAC,EAAE;SACP,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,sDAAsD;IACrE,CAAC;AACH,CAAC;AAED;;oEAEoE;AACpE,SAAS,iBAAiB,CAAC,UAAkB,EAAE,CAAS;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,UAAkB,EAClB,KAAqE;IAErE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,sEAAsE,EAAE,CAAC;IACpG,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACzD,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAU,EAAE,CAAC;QAC3E,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,OAAO,EAAE,KAAK,EAAE,GAAG,KAAK,iCAAiC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAC/G,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,KAAK,EAAE,GAAG,KAAK,uBAAuB,GAAG,EAAE,EAAE,CAAC;QACzD,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;IACzF,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,kBAAkB,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEzC,MAAM,IAAI,GAAG,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAqB;QACjC,MAAM;QACN,IAAI;QACJ,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE;YACR,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC;YAC7B,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE;SAC9E;QACD,EAAE,EAAE,GAAG;KACR,CAAC;IACF,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,wEAAwE;IACxE,+BAA+B;IAC/B,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACtB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,iBAAiB,GAAG,CAAC,CAAC,CAAC,qDAAqD;AAElF;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,MAAM,YAAY,GAAG,oBAAoB,CAAC,UAAU,EAAE,MAAM,IAAI,MAAM,CAAC,CAAC;IACxE,MAAM,IAAI,GAAuB;QAC/B,QAAQ,EAAE,KAAK;QACf,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,EAAE;QACX,YAAY;QACZ,QAAQ,EAAE,EAAE;KACb,CAAC;IACF,0EAA0E;IAC1E,6CAA6C;IAC7C,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAEvB,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC;QAChB,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,2BAA2B,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,0BAA0B;YACrF,gFAAgF;YAChF,sEAAsE,CACzE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC;IAExC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC;QAChB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAClC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CACpE,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC;QAChB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oCAAoC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uEAAuE;IACvE,yEAAyE;IACzE,4EAA4E;IAC5E,kEAAkE;IAClE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC;QAChB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;QAC5F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACjC,IAAI,CAAC;YACH,OAAO,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,GAAG,UAAU,GAAG,iBAAiB,CAAC;QACvF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,CAAC,gCAAgC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC;QAChB,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,qDAAqD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CACrF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,+BAA+B,OAAO,CAAC,MAAM,aAAa,CAAC,CAAC;IAC7F,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/supervise/assess.d.ts

@@ -0,0 +1,73 @@
+/**
+ * The nine assessment dimensions — each a PURE function over a bounded
+ * Observation. Heuristics are the floor: they always answer. An optional
+ * classifier (structural contract only — the SYS1 classifier lands
+ * separately) may RAISE a flag when confident, but can never clear one the
+ * heuristic set, and a throwing/absent classifier changes nothing. That is
+ * the fail-closed posture: model failure degrades to reviewed heuristics,
+ * never to looser supervision.
+ */
+import type { DimensionAssessment, Observation, SupervisorConfig } from './types.js';
+/**
+ * Structural match for the SYS1 classifier contract (PR #807 — do NOT import
+ * src/classify, it is unmerged). Only the built-in question names below may
+ * be sent; the backend throws on custom names, so none exist here. When #807
+ * lands, this interface is replaced by the real import and reconciled.
+ */
+export interface ClassifierQuestion {
+    name: string;
+    kind: 'noul' | 'choice' | 'score';
+    prompt: string;
+    options?: string[];
+}
+export interface ClassifierLike {
+    name: string;
+    assess(state: string, questions: ClassifierQuestion[]): Record<string, {
+        value: unknown;
+        probability: number;
+        confidence: number;
+    }>;
+}
+/** 1. running, but no state update past the stall budget. */
+export declare function progressStalled(obs: Observation, cfg: SupervisorConfig): DimensionAssessment;
+/**
+ * 2. diff touches paths with NO overlap with instruction keywords. A simple
+ * heuristic by design: absence of evidence (no diff, no keywords) is an
+ * abstention (defer), never an accusation.
+ */
+export declare function offTrack(obs: Observation): DimensionAssessment;
+/** 3. the mission is asking for something only a human can provide. */
+export declare function humanNeeded(obs: Observation): DimensionAssessment;
+/**
+ * 4. stuck-loop: too many recorded failures, or ONE error signature repeated
+ * >= 3 times in the tail (same normalized line — the loop is saying the same
+ * thing, not making new mistakes).
+ */
+export declare function stuckLoop(obs: Observation, cfg: SupervisorConfig): DimensionAssessment;
+/** 5. delivered status, or the mission's own success markers in the tail. */
+export declare function completionSignaled(obs: Observation): DimensionAssessment;
+/** 6. a checkpoint exists but the tail shows no test run to back it. */
+export declare function verificationPending(obs: Observation): DimensionAssessment;
+/** 7. error-line density in the tail, scored 1-5. */
+export declare function errorDensity(obs: Observation): DimensionAssessment;
+/** 8. how much of the turn budget is spent, scored 1-5. */
+export declare function iterationPressure(obs: Observation, cfg: SupervisorConfig): DimensionAssessment;
+/** 9. destructive-token density in the tail, scored 1-5. */
+export declare function risk(obs: Observation): DimensionAssessment;
+export declare const DIMENSIONS: readonly ["progress-stalled", "off-track", "human-needed", "stuck-loop", "completion-signaled", "verification-pending", "error-density", "iteration-pressure", "risk"];
+export declare function heuristicAssessAll(obs: Observation, cfg: SupervisorConfig): DimensionAssessment[];
+/** Bounded, redaction-friendly summary handed to the classifier. */
+export declare function summarizeObservation(obs: Observation): string;
+/**
+ * Assess all nine dimensions. With a classifier, ONLY the SYS1 built-in
+ * questions are asked (escalation-risk noul, action-class choice); confident
+ * answers map onto flag dimensions:
+ *   escalation-risk=true (probability ≥ classifierTau AND confidence ≥
+ *     classifierConfidenceMin) → raises off-track
+ *   action-class 'escalate'   → raises stuck-loop
+ *   action-class 'stop'       → raises off-track
+ * The classifier may RAISE a flag, never clear one (never looser), and any
+ * classifier error leaves the pure heuristics in charge (fail closed).
+ */
+export declare function assessAll(obs: Observation, cfg: SupervisorConfig, classifier?: ClassifierLike): DimensionAssessment[];
+//# sourceMappingURL=assess.d.ts.map

package/dist/supervise/assess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assess.d.ts","sourceRoot":"","sources":["../../src/supervise/assess.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAErF;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CACJ,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,kBAAkB,EAAE,GAC9B,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChF;AA8CD,6DAA6D;AAC7D,wBAAgB,eAAe,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,gBAAgB,GAAG,mBAAmB,CAG5F;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,WAAW,GAAG,mBAAmB,CAc9D;AAED,uEAAuE;AACvE,wBAAgB,WAAW,CAAC,GAAG,EAAE,WAAW,GAAG,mBAAmB,CAEjE;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,gBAAgB,GAAG,mBAAmB,CAgBtF;AAED,6EAA6E;AAC7E,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,WAAW,GAAG,mBAAmB,CAGxE;AAED,wEAAwE;AACxE,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,WAAW,GAAG,mBAAmB,CAGzE;AAED,qDAAqD;AACrD,wBAAgB,YAAY,CAAC,GAAG,EAAE,WAAW,GAAG,mBAAmB,CAKlE;AAED,2DAA2D;AAC3D,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,gBAAgB,GAAG,mBAAmB,CAG9F;AAED,4DAA4D;AAC5D,wBAAgB,IAAI,CAAC,GAAG,EAAE,WAAW,GAAG,mBAAmB,CAG1D;AAED,eAAO,MAAM,UAAU,wKAUb,CAAC;AAEX,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,gBAAgB,GAAG,mBAAmB,EAAE,CAYjG;AAED,oEAAoE;AACpE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,WAAW,GAAG,MAAM,CAS7D;AA4BD;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CACvB,GAAG,EAAE,WAAW,EAChB,GAAG,EAAE,gBAAgB,EACrB,UAAU,CAAC,EAAE,cAAc,GAC1B,mBAAmB,EAAE,CA0BvB"}

package/dist/supervise/assess.js

@@ -0,0 +1,215 @@
+/** The ONLY questions ever sent — the SYS1 built-ins. */
+const BUILTIN_QUESTIONS = [
+    {
+        name: 'escalation-risk',
+        kind: 'noul',
+        prompt: 'Does this mission evidence indicate escalation-level risk (stuck, off-track, or needing a human)?',
+    },
+    {
+        name: 'action-class',
+        kind: 'choice',
+        prompt: 'Which supervisor action class does this evidence most suggest?',
+    },
+];
+/**
+ * Human-need means an INTERROGATIVE the mission cannot answer itself:
+ * credential prompts and approve/confirm questions. Declaratives like
+ * "Permission denied" or "approved the change" must NOT fire.
+ */
+const HUMAN_NEEDED_RE = /\b(enter|type|provide|requires?)\b.{0,24}\b(password|passphrase|credentials?)\b|\b(password|passphrase)\s*[:?]|\b(approve|confirm|allow)\s+(this|the|these)?\s*(action|change|operation)s?\?|\[y(?:es)?\/n(?:o)?\]/i;
+const SUCCESS_RE = /(delivered in \d+ turn|delivery complete|mission complete|✓ delivered)/i;
+const TEST_EVIDENCE_RE = /(npm (run )?test|vitest|pytest|go test|cargo test|tests? (passed|pass)|✓ tests)/i;
+const ERROR_LINE_RE = /(error|fatal|exception|failed)/i;
+/** Healthy summaries like "0 failed" / "0 errors" are not error evidence. */
+const HEALTHY_COUNT_RE = /\b0\s+(failed|failures?|errors?)\b/i;
+const DESTRUCTIVE_RE = /(rm\s+-rf|drop\s+table|force-push|git\s+push\s+--force|delete\s+from|truncate\s+table|mkfs|git\s+reset\s+--hard)/gi;
+/** Error-evidence lines: error-shaped MINUS healthy zero-count summaries. */
+function errorLines(tail) {
+    return tail
+        .split('\n')
+        .filter((l) => ERROR_LINE_RE.test(l) && !HEALTHY_COUNT_RE.test(l));
+}
+function flag(name, value, confidence, defer = false) {
+    return { name, value, probability: value ? confidence : 1 - confidence, confidence, defer, source: 'heuristic' };
+}
+function score(name, value, confidence) {
+    const v = Math.max(1, Math.min(5, Math.round(value)));
+    return { name, value: v, probability: confidence, confidence, defer: false, source: 'heuristic' };
+}
+/** 1. running, but no state update past the stall budget. */
+export function progressStalled(obs, cfg) {
+    const stalled = obs.status === 'running' && obs.minutesSinceUpdate > cfg.stallMinutes;
+    return flag('progress-stalled', stalled, 0.9);
+}
+/**
+ * 2. diff touches paths with NO overlap with instruction keywords. A simple
+ * heuristic by design: absence of evidence (no diff, no keywords) is an
+ * abstention (defer), never an accusation.
+ */
+export function offTrack(obs) {
+    const stat = obs.diffStat;
+    if (!stat || !stat.trim())
+        return flag('off-track', false, 0.2, true);
+    const keywords = obs.instruction
+        .toLowerCase()
+        .split(/[^a-z0-9]+/)
+        .filter((w) => w.length >= 4);
+    const paths = stat
+        .split('\n')
+        .map((l) => l.split('|')[0].trim())
+        .filter((p) => p.length > 0 && !p.startsWith('...'));
+    if (keywords.length === 0 || paths.length === 0)
+        return flag('off-track', false, 0.2, true);
+    const related = paths.some((p) => keywords.some((k) => p.toLowerCase().includes(k)));
+    return flag('off-track', !related, 0.6);
+}
+/** 3. the mission is asking for something only a human can provide. */
+export function humanNeeded(obs) {
+    return flag('human-needed', HUMAN_NEEDED_RE.test(obs.recentLogTail), 0.9);
+}
+/**
+ * 4. stuck-loop: too many recorded failures, or ONE error signature repeated
+ * >= 3 times in the tail (same normalized line — the loop is saying the same
+ * thing, not making new mistakes).
+ */
+export function stuckLoop(obs, cfg) {
+    if (obs.failures >= cfg.maxFailures)
+        return flag('stuck-loop', true, 0.9);
+    const counts = new Map();
+    for (const line of errorLines(obs.recentLogTail)) {
+        const sig = line
+            .toLowerCase()
+            .replace(/\d{4}-\d{2}-\d{2}[t ][\d:.]+z?/g, '')
+            .replace(/\d+/g, '#')
+            .trim()
+            .slice(0, 120);
+        if (!sig)
+            continue;
+        counts.set(sig, (counts.get(sig) ?? 0) + 1);
+    }
+    let maxRepeat = 0;
+    for (const n of counts.values())
+        maxRepeat = Math.max(maxRepeat, n);
+    return flag('stuck-loop', maxRepeat >= 3, 0.8);
+}
+/** 5. delivered status, or the mission's own success markers in the tail. */
+export function completionSignaled(obs) {
+    const done = obs.status === 'delivered' || SUCCESS_RE.test(obs.recentLogTail);
+    return flag('completion-signaled', done, 0.9);
+}
+/** 6. a checkpoint exists but the tail shows no test run to back it. */
+export function verificationPending(obs) {
+    const pending = obs.hasCheckpoint && !TEST_EVIDENCE_RE.test(obs.recentLogTail);
+    return flag('verification-pending', pending, 0.6, !obs.hasCheckpoint);
+}
+/** 7. error-line density in the tail, scored 1-5. */
+export function errorDensity(obs) {
+    const lines = obs.recentLogTail.split('\n').filter((l) => l.trim().length > 0);
+    if (lines.length === 0)
+        return score('error-density', 1, 0.5);
+    const errors = errorLines(obs.recentLogTail).length;
+    return score('error-density', 1 + Math.min(4, Math.floor((errors / lines.length) * 20)), 0.7);
+}
+/** 8. how much of the turn budget is spent, scored 1-5. */
+export function iterationPressure(obs, cfg) {
+    const ratio = obs.turnsCompleted / cfg.maxTurns;
+    return score('iteration-pressure', 1 + Math.min(4, Math.round(ratio * 4)), 0.9);
+}
+/** 9. destructive-token density in the tail, scored 1-5. */
+export function risk(obs) {
+    const matches = obs.recentLogTail.match(DESTRUCTIVE_RE);
+    return score('risk', 1 + Math.min(4, matches ? matches.length : 0), 0.6);
+}
+export const DIMENSIONS = [
+    'progress-stalled',
+    'off-track',
+    'human-needed',
+    'stuck-loop',
+    'completion-signaled',
+    'verification-pending',
+    'error-density',
+    'iteration-pressure',
+    'risk',
+];
+export function heuristicAssessAll(obs, cfg) {
+    return [
+        progressStalled(obs, cfg),
+        offTrack(obs),
+        humanNeeded(obs),
+        stuckLoop(obs, cfg),
+        completionSignaled(obs),
+        verificationPending(obs),
+        errorDensity(obs),
+        iterationPressure(obs, cfg),
+        risk(obs),
+    ];
+}
+/** Bounded, redaction-friendly summary handed to the classifier. */
+export function summarizeObservation(obs) {
+    return [
+        `run=${obs.runId} status=${obs.status}`,
+        `elapsed=${obs.elapsedMinutes.toFixed(1)}m sinceUpdate=${obs.minutesSinceUpdate.toFixed(1)}m`,
+        `turns=${obs.turnsCompleted} failures=${obs.failures} checkpoint=${obs.hasCheckpoint}`,
+        `gitDirty=${obs.gitDirtyFiles ?? 'n/a'}`,
+        `diffStat: ${(obs.diffStat ?? 'n/a').slice(0, 500)}`,
+        `logTail: ${obs.recentLogTail.slice(-2000)}`,
+    ].join('\n');
+}
+function clamp01(n) {
+    return typeof n === 'number' && Number.isFinite(n) ? Math.max(0, Math.min(1, n)) : 0;
+}
+/** Raise a flag dimension from a classifier answer — NEVER clears one. */
+function raiseFlag(dims, name, a) {
+    return dims.map((d) => d.name === name && d.value !== true
+        ? {
+            name,
+            value: true,
+            probability: clamp01(a.probability),
+            confidence: clamp01(a.confidence),
+            defer: false,
+            source: 'classifier',
+        }
+        : d);
+}
+/**
+ * Assess all nine dimensions. With a classifier, ONLY the SYS1 built-in
+ * questions are asked (escalation-risk noul, action-class choice); confident
+ * answers map onto flag dimensions:
+ *   escalation-risk=true (probability ≥ classifierTau AND confidence ≥
+ *     classifierConfidenceMin) → raises off-track
+ *   action-class 'escalate'   → raises stuck-loop
+ *   action-class 'stop'       → raises off-track
+ * The classifier may RAISE a flag, never clear one (never looser), and any
+ * classifier error leaves the pure heuristics in charge (fail closed).
+ */
+export function assessAll(obs, cfg, classifier) {
+    const heuristics = heuristicAssessAll(obs, cfg);
+    if (!classifier)
+        return heuristics;
+    let answers;
+    try {
+        answers = classifier.assess(summarizeObservation(obs), BUILTIN_QUESTIONS);
+    }
+    catch {
+        return heuristics;
+    }
+    if (!answers || typeof answers !== 'object')
+        return heuristics;
+    let out = heuristics;
+    const er = answers['escalation-risk'];
+    if (er &&
+        er.value === true &&
+        clamp01(er.probability) >= cfg.classifierTau &&
+        clamp01(er.confidence) >= cfg.classifierConfidenceMin) {
+        out = raiseFlag(out, 'off-track', er);
+    }
+    const ac = answers['action-class'];
+    if (ac && clamp01(ac.confidence) >= cfg.classifierConfidenceMin) {
+        if (ac.value === 'escalate')
+            out = raiseFlag(out, 'stuck-loop', ac);
+        else if (ac.value === 'stop')
+            out = raiseFlag(out, 'off-track', ac);
+    }
+    return out;
+}
+//# sourceMappingURL=assess.js.map

package/dist/supervise/assess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assess.js","sourceRoot":"","sources":["../../src/supervise/assess.ts"],"names":[],"mappings":"AAgCA,yDAAyD;AACzD,MAAM,iBAAiB,GAAyB;IAC9C;QACE,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,mGAAmG;KAC5G;IACD;QACE,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,gEAAgE;KACzE;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,eAAe,GACnB,qNAAqN,CAAC;AACxN,MAAM,UAAU,GAAG,yEAAyE,CAAC;AAC7F,MAAM,gBAAgB,GAAG,kFAAkF,CAAC;AAC5G,MAAM,aAAa,GAAG,iCAAiC,CAAC;AACxD,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,qCAAqC,CAAC;AAC/D,MAAM,cAAc,GAAG,oHAAoH,CAAC;AAE5I,6EAA6E;AAC7E,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,IAAI,CAAC,IAAY,EAAE,KAAc,EAAE,UAAkB,EAAE,KAAK,GAAG,KAAK;IAC3E,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACnH,CAAC;AAED,SAAS,KAAK,CAAC,IAAY,EAAE,KAAa,EAAE,UAAkB;IAC5D,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACpG,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,eAAe,CAAC,GAAgB,EAAE,GAAqB;IACrE,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,kBAAkB,GAAG,GAAG,CAAC,YAAY,CAAC;IACtF,OAAO,IAAI,CAAC,kBAAkB,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAgB;IACvC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC1B,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW;SAC7B,WAAW,EAAE;SACb,KAAK,CAAC,YAAY,CAAC;SACnB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI;SACf,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACvD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,WAAW,CAAC,GAAgB;IAC1C,OAAO,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,GAAgB,EAAE,GAAqB;IAC/D,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI;aACb,WAAW,EAAE;aACb,OAAO,CAAC,iCAAiC,EAAE,EAAE,CAAC;aAC9C,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;aACpB,IAAI,EAAE;aACN,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE;QAAE,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACpE,OAAO,IAAI,CAAC,YAAY,EAAE,SAAS,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB,CAAC,GAAgB;IACjD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,qBAAqB,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,GAAgB;IAClD,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC/E,OAAO,IAAI,CAAC,sBAAsB,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AACxE,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,YAAY,CAAC,GAAgB;IAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,eAAe,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;IACpD,OAAO,KAAK,CAAC,eAAe,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAChG,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,iBAAiB,CAAC,GAAgB,EAAE,GAAqB;IACvE,MAAM,KAAK,GAAG,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC,QAAQ,CAAC;IAChD,OAAO,KAAK,CAAC,oBAAoB,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAClF,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,IAAI,CAAC,GAAgB;IACnC,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,kBAAkB;IAClB,WAAW;IACX,cAAc;IACd,YAAY;IACZ,qBAAqB;IACrB,sBAAsB;IACtB,eAAe;IACf,oBAAoB;IACpB,MAAM;CACE,CAAC;AAEX,MAAM,UAAU,kBAAkB,CAAC,GAAgB,EAAE,GAAqB;IACxE,OAAO;QACL,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC;QACzB,QAAQ,CAAC,GAAG,CAAC;QACb,WAAW,CAAC,GAAG,CAAC;QAChB,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;QACnB,kBAAkB,CAAC,GAAG,CAAC;QACvB,mBAAmB,CAAC,GAAG,CAAC;QACxB,YAAY,CAAC,GAAG,CAAC;QACjB,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC;KACV,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,oBAAoB,CAAC,GAAgB;IACnD,OAAO;QACL,OAAO,GAAG,CAAC,KAAK,WAAW,GAAG,CAAC,MAAM,EAAE;QACvC,WAAW,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;QAC7F,SAAS,GAAG,CAAC,cAAc,aAAa,GAAG,CAAC,QAAQ,eAAe,GAAG,CAAC,aAAa,EAAE;QACtF,YAAY,GAAG,CAAC,aAAa,IAAI,KAAK,EAAE;QACxC,aAAa,CAAC,GAAG,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;QACpD,YAAY,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE;KAC7C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,CAAU;IACzB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvF,CAAC;AAID,0EAA0E;AAC1E,SAAS,SAAS,CAChB,IAA2B,EAC3B,IAAY,EACZ,CAAmB;IAEnB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACpB,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI;QACjC,CAAC,CAAC;YACE,IAAI;YACJ,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC;YACnC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;YACjC,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,YAAqB;SAC9B;QACH,CAAC,CAAC,CAAC,CACN,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS,CACvB,GAAgB,EAChB,GAAqB,EACrB,UAA2B;IAE3B,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU;QAAE,OAAO,UAAU,CAAC;IACnC,IAAI,OAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC;IAC/D,IAAI,GAAG,GAAG,UAAU,CAAC;IACrB,MAAM,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACtC,IACE,EAAE;QACF,EAAE,CAAC,KAAK,KAAK,IAAI;QACjB,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,aAAa;QAC5C,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,uBAAuB,EACrD,CAAC;QACD,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACnC,IAAI,EAAE,IAAI,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,uBAAuB,EAAE,CAAC;QAChE,IAAI,EAAE,CAAC,KAAK,KAAK,UAAU;YAAE,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;aAC/D,IAAI,EAAE,CAAC,KAAK,KAAK,MAAM;YAAE,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/supervise/config.d.ts

@@ -0,0 +1,13 @@
+import type { SupervisorConfig } from './types.js';
+export declare class SupervisorError extends Error {
+    constructor(message: string);
+}
+export declare const POLICY_VERSION = 1;
+/** The policy shipped with the package (dist/supervise → ../../config). */
+export declare function packagedPolicyPath(): string;
+export declare function resolvePolicyPath(): string;
+/** Validate a parsed policy. Throws SupervisorError on ANY deviation. */
+export declare function validatePolicy(raw: unknown, source: string): SupervisorConfig;
+/** Load + validate the policy. NEVER returns defaults — fail closed. */
+export declare function loadSupervisorConfig(path?: string): SupervisorConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/supervise/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/supervise/config.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAED,eAAO,MAAM,cAAc,IAAI,CAAC;AAgBhC,2EAA2E;AAC3E,wBAAgB,kBAAkB,IAAI,MAAM,CAG3C;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,yEAAyE;AACzE,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,gBAAgB,CA2B7E;AAED,wEAAwE;AACxE,wBAAgB,oBAAoB,CAAC,IAAI,GAAE,MAA4B,GAAG,gBAAgB,CAezF"}

package/dist/supervise/config.js

@@ -0,0 +1,81 @@
+/**
+ * Supervisor policy config — versioned, range-checked, loud.
+ *
+ * Thresholds are POLICY, not preference: they ship reviewed in
+ * `config/supervise-policy.json` and are validated at load. A missing,
+ * corrupt, mis-versioned, or out-of-range file throws SupervisorError rather
+ * than falling back to invented defaults — supervising with unreviewed
+ * numbers is worse than not supervising. Tests and operators may point
+ * `UAP_SUPERVISE_POLICY` at an alternate file.
+ */
+import { existsSync, readFileSync } from 'fs';
+import { dirname, join } from 'path';
+import { fileURLToPath } from 'url';
+export class SupervisorError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'SupervisorError';
+    }
+}
+export const POLICY_VERSION = 1;
+/** [min, max] per numeric threshold — the review envelope. */
+const RANGES = {
+    stallMinutes: [1, 1440],
+    maxMinutes: [1, 2880],
+    maxTurns: [1, 1000],
+    maxRetries: [0, 10],
+    maxFailures: [1, 25],
+    debounceMs: [1000, 60_000],
+    intervalMs: [5_000, 3_600_000],
+    classifierConfidenceMin: [0, 1],
+    classifierTau: [0, 1],
+    maxVerify: [1, 25],
+};
+/** The policy shipped with the package (dist/supervise → ../../config). */
+export function packagedPolicyPath() {
+    const here = dirname(fileURLToPath(import.meta.url));
+    return join(here, '..', '..', 'config', 'supervise-policy.json');
+}
+export function resolvePolicyPath() {
+    return process.env.UAP_SUPERVISE_POLICY || packagedPolicyPath();
+}
+/** Validate a parsed policy. Throws SupervisorError on ANY deviation. */
+export function validatePolicy(raw, source) {
+    if (typeof raw !== 'object' || raw === null || Array.isArray(raw)) {
+        throw new SupervisorError(`supervisor policy ${source}: expected a JSON object`);
+    }
+    const obj = raw;
+    if (obj.version !== POLICY_VERSION) {
+        throw new SupervisorError(`supervisor policy ${source}: version must be ${POLICY_VERSION} (got ${JSON.stringify(obj.version)})`);
+    }
+    const out = {};
+    for (const [key, [min, max]] of Object.entries(RANGES)) {
+        const v = obj[key];
+        if (typeof v !== 'number' || !Number.isFinite(v)) {
+            throw new SupervisorError(`supervisor policy ${source}: ${key} must be a finite number`);
+        }
+        if (v < min || v > max) {
+            throw new SupervisorError(`supervisor policy ${source}: ${key}=${v} outside reviewed range [${min}, ${max}]`);
+        }
+        out[key] = v;
+    }
+    if (out.intervalMs < out.debounceMs) {
+        throw new SupervisorError(`supervisor policy ${source}: intervalMs (${out.intervalMs}) must be >= debounceMs (${out.debounceMs})`);
+    }
+    return { version: POLICY_VERSION, ...out };
+}
+/** Load + validate the policy. NEVER returns defaults — fail closed. */
+export function loadSupervisorConfig(path = resolvePolicyPath()) {
+    if (!existsSync(path)) {
+        throw new SupervisorError(`supervisor policy not found: ${path} — thresholds ship as reviewed config; refusing to run with defaults`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(path, 'utf-8'));
+    }
+    catch (err) {
+        throw new SupervisorError(`supervisor policy ${path}: unreadable JSON (${err instanceof Error ? err.message : String(err)})`);
+    }
+    return validatePolicy(parsed, path);
+}
+//# sourceMappingURL=config.js.map

package/dist/supervise/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/supervise/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAGpC,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAEhC,8DAA8D;AAC9D,MAAM,MAAM,GAAsE;IAChF,YAAY,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;IACvB,UAAU,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;IACrB,QAAQ,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;IACnB,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IACnB,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IACpB,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC;IAC9B,uBAAuB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/B,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACrB,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;CACnB,CAAC;AAEF,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,uBAAuB,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,kBAAkB,EAAE,CAAC;AAClE,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,cAAc,CAAC,GAAY,EAAE,MAAc;IACzD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,eAAe,CAAC,qBAAqB,MAAM,0BAA0B,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,IAAI,GAAG,CAAC,OAAO,KAAK,cAAc,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CACvB,qBAAqB,MAAM,qBAAqB,cAAc,SAAS,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CACtG,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,eAAe,CAAC,qBAAqB,MAAM,KAAK,GAAG,0BAA0B,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,eAAe,CAAC,qBAAqB,MAAM,KAAK,GAAG,IAAI,CAAC,4BAA4B,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC;QAChH,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CACvB,qBAAqB,MAAM,iBAAiB,GAAG,CAAC,UAAU,4BAA4B,GAAG,CAAC,UAAU,GAAG,CACxG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,GAAI,GAAoD,EAAE,CAAC;AAC/F,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,oBAAoB,CAAC,OAAe,iBAAiB,EAAE;IACrE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,eAAe,CACvB,gCAAgC,IAAI,sEAAsE,CAC3G,CAAC;IACJ,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CACvB,qBAAqB,IAAI,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CACnG,CAAC;IACJ,CAAC;IACD,OAAO,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACtC,CAAC"}