@momentiq/dark-factory-cli 0.1.0-alpha.4

package/dist/paths.js

@@ -0,0 +1,42 @@
+import { resolve } from "node:path";
+import { gitCommonDir, gitDir } from "./git.js";
+export async function resolveArtifactRoot(loaded) {
+    if (loaded.config.git.artifactScope === "git-common-dir") {
+        return gitCommonDir(loaded.repoRoot);
+    }
+    return gitDir(loaded.repoRoot);
+}
+export async function resolveArtifactDir(loaded) {
+    return resolve(await resolveArtifactRoot(loaded), loaded.config.git.artifactDir);
+}
+export function artifactJsonPath(artifactDir, sha) {
+    return resolve(artifactDir, `${sha}.json`);
+}
+export function artifactMarkdownPath(artifactDir, sha) {
+    return resolve(artifactDir, `${sha}.md`);
+}
+export function artifactLockPath(artifactDir, sha) {
+    return resolve(artifactDir, `${sha}.lock`);
+}
+export function diagnosticsDir(artifactDir) {
+    return resolve(artifactDir, "diagnostics");
+}
+export function telemetryPath(artifactDir) {
+    return resolve(artifactDir, "_runs.ndjson");
+}
+export async function resolveValidationResultPath(loaded) {
+    const root = await resolveArtifactRoot(loaded);
+    return resolve(root, loaded.config.validation.resultFile);
+}
+// Cycle 332 — per-PR finding-cache directory. Lives under the
+// artifact dir (git-common-dir) so a single worktree can hold caches
+// for multiple PRs simultaneously without collision. The CI runner
+// is the primary writer; the local critic does not touch this path
+// in Phase 2 (Q7 of the cycle doc).
+export function findingCacheDir(artifactDir, prNumber) {
+    return resolve(artifactDir, `_pr-${prNumber}`);
+}
+export function findingCachePath(artifactDir, prNumber) {
+    return resolve(findingCacheDir(artifactDir, prNumber), "findings.ndjson");
+}
+//# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAEhD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAoB;IAC5D,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,KAAK,gBAAgB,EAAE,CAAC;QACzD,OAAO,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAoB;IAC3D,OAAO,OAAO,CAAC,MAAM,mBAAmB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,WAAmB,EAAE,GAAW;IAC/D,OAAO,OAAO,CAAC,WAAW,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,WAAmB,EAAE,GAAW;IACnE,OAAO,OAAO,CAAC,WAAW,EAAE,GAAG,GAAG,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,WAAmB,EAAE,GAAW;IAC/D,OAAO,OAAO,CAAC,WAAW,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,WAAmB;IAChD,OAAO,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,WAAmB;IAC/C,OAAO,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,MAAoB;IACpE,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC5D,CAAC;AAED,8DAA8D;AAC9D,qEAAqE;AACrE,mEAAmE;AACnE,mEAAmE;AACnE,oCAAoC;AACpC,MAAM,UAAU,eAAe,CAAC,WAAmB,EAAE,QAAgB;IACnE,OAAO,OAAO,CAAC,WAAW,EAAE,OAAO,QAAQ,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,WAAmB,EAAE,QAAgB;IACpE,OAAO,OAAO,CAAC,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,iBAAiB,CAAC,CAAC;AAC5E,CAAC"}

package/dist/policy/baseline.d.ts

@@ -0,0 +1,15 @@
+import { type LoadedConfig } from "./config.js";
+export declare const TRUSTED_SCRIPT_PATHS: ReadonlySet<string>;
+export interface PolicyBaseline {
+    loaded: LoadedConfig;
+    baselineRef?: string;
+    triggeredBy: string[];
+}
+export interface ResolveBaselineOptions {
+    loaded: LoadedConfig;
+    sha: string;
+    cwd: string;
+    warn?: (message: string) => void;
+}
+export declare function resolvePolicyBaseline(options: ResolveBaselineOptions): Promise<PolicyBaseline>;
+//# sourceMappingURL=baseline.d.ts.map

package/dist/policy/baseline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline.d.ts","sourceRoot":"","sources":["../../src/policy/baseline.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,YAAY,EAElB,MAAM,aAAa,CAAC;AAiCrB,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAYnD,CAAC;AAcH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,YAAY,CAAC;IAIrB,WAAW,CAAC,EAAE,MAAM,CAAC;IAGrB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,YAAY,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IAGZ,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAClC;AAED,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,cAAc,CAAC,CAuEzB"}

package/dist/policy/baseline.js

@@ -0,0 +1,115 @@
+import { CONFIG_RELATIVE_PATH, loadAgentReviewConfigFromRef, } from "./config.js";
+import { changedFiles, commitParent } from "../git.js";
+// Cycle 318.4 trusted-surface extension.
+//
+// Three different enforcement surfaces have OVERLAPPING-BUT-DIFFERENT
+// concerns and therefore intentionally different path lists:
+//
+//   1. This file (`TRUSTED_SCRIPT_PATHS`) — paths that should trigger
+//      the LOCAL critic's self-modification guard (review against
+//      parent baseline). Limited to the declarative policy artifacts
+//      and the two enforcement scripts + their tests + the three
+//      workflows. Build-time files (Makefile, dist/, lockfiles) are
+//      excluded because they're not policy code per se.
+//
+//   2. `.github/workflows/branch-protection-audit.yml` "Detect spec-
+//      relevant changes" regex — paths that should trigger the LIVE
+//      ruleset audit (PR-time). Wider than (1): covers spec.yaml +
+//      ANY `.github/workflows/*.{yml,yaml}` (including `*.disabled`
+//      renames) + the audit/validator scripts. Broadened in issue
+//      #1385 (Codex P1 #1) so that a PR adding `[skip ci]` checks to
+//      ANY workflow (e.g. `pr.yml`) cannot bypass the audit.
+//
+//   3. `.github/workflows/agent-critic.yml` "Detect trusted-surface
+//      changes" regex — paths that could weaponize the workflow
+//      runtime to exfiltrate `CURSOR_API_KEY`. Broader: includes the
+//      Makefile, the entire `tools/agent-review/` source tree, and
+//      `.husky/` hooks, because any of those run during gate-prepare
+//      / review / gate-push with the secret in env.
+//
+// Codex P1 (PR #1380 review) flagged the surfaces as drifting; the
+// drift is intentional. Updates to (1) MUST be considered for (2) and
+// (3) too — but they don't have to match byte-for-byte.
+export const TRUSTED_SCRIPT_PATHS = new Set([
+    "tools/branch-protection/spec.yaml",
+    "scripts/ci/audit_branch_protection.py",
+    "scripts/ci/test_audit_branch_protection.py",
+    "scripts/ci/validate_cycle_doc.py",
+    "scripts/ci/test_validate_cycle_doc.py",
+    // Cycle 318.4 workflow files themselves are merge-boundary policy.
+    // A commit that weakens these workflows is a policy change; force the
+    // critic baseline reload AND the live ruleset audit on that PR.
+    ".github/workflows/agent-critic.yml",
+    ".github/workflows/cycle-doc-validation.yml",
+    ".github/workflows/branch-protection-audit.yml",
+]);
+export async function resolvePolicyBaseline(options) {
+    const { loaded, sha, cwd } = options;
+    const warn = options.warn ?? ((m) => process.stderr.write(m));
+    let parent;
+    try {
+        parent = await commitParent(sha, cwd);
+    }
+    catch {
+        return { loaded, triggeredBy: [] };
+    }
+    if (!parent)
+        return { loaded, triggeredBy: [] };
+    const files = await changedFiles(parent, sha, cwd, { readContent: false });
+    const trustedPaths = new Set([
+        CONFIG_RELATIVE_PATH,
+        ...loaded.config.context.guidanceFiles,
+        ...loaded.config.context.promptFragments,
+    ]);
+    const triggeredBy = [];
+    for (const f of files) {
+        if (trustedPaths.has(f.path) || f.path.startsWith(".agent-review/")) {
+            triggeredBy.push(f.path);
+            continue;
+        }
+        // Cycle 318.4: extend trusted-surface coverage to the branch-protection
+        // spec and the two policy-enforcement scripts (and their tests). This
+        // set is INTENTIONALLY NARROWER than the workflow regex in
+        // `.github/workflows/branch-protection-audit.yml`'s "Detect spec-
+        // relevant changes" step — issue #1385 broadened that regex to cover
+        // any `.github/workflows/*.{yml,yaml}` while this set still enumerates
+        // only the declarative policy artifacts + their enforcement scripts.
+        // See the header comment block above for why the two surfaces drift
+        // intentionally; the compensating control is that the PR-time live
+        // ruleset audit catches workflow edits that don't trigger the local
+        // policy-baseline reload.
+        if (TRUSTED_SCRIPT_PATHS.has(f.path)) {
+            triggeredBy.push(f.path);
+        }
+    }
+    if (triggeredBy.length === 0)
+        return { loaded, triggeredBy: [] };
+    // Self-modification detected. Try to load policy from parent.
+    let parentLoaded;
+    try {
+        // Cycle 322.7 Phase C — thread the typo-guard `warn` callback through
+        // to the parent-ref load so an operator who mistyped
+        // `AGENT_REVIEW_AGGREGATION_POLICY` sees the diagnostic regardless of
+        // which load path the run took. Without this, the baseline-reload
+        // path would silently swallow the warning (Cursor critic MEDIUM on
+        // dce8fd9e).
+        parentLoaded = await loadAgentReviewConfigFromRef(loaded.repoRoot, parent, { warn });
+    }
+    catch (err) {
+        // Parent has no config (commit introduces it for the first time) —
+        // fall back to HEAD policy with a loud warning. Self-modification
+        // check is skipped, but the warning makes this visible to operators
+        // (and to the artifact, since stderr is captured by the post-commit
+        // hook log).
+        warn(`agent-review: WARNING — commit ${sha.slice(0, 12)} modifies trusted policy ` +
+            `surface (${triggeredBy.join(", ")}) but parent policy is unavailable ` +
+            `(${err.message}); falling back to HEAD policy. ` +
+            `Self-modification check skipped.\n`);
+        return { loaded, triggeredBy };
+    }
+    warn(`agent-review: commit ${sha.slice(0, 12)} modifies trusted policy surface ` +
+        `(${triggeredBy.join(", ")}); reviewing against parent baseline ${parent.slice(0, 12)} ` +
+        `to prevent self-modification.\n`);
+    return { loaded: parentLoaded, baselineRef: parent, triggeredBy };
+}
+//# sourceMappingURL=baseline.js.map

package/dist/policy/baseline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline.js","sourceRoot":"","sources":["../../src/policy/baseline.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EAEpB,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEvD,yCAAyC;AACzC,EAAE;AACF,sEAAsE;AACtE,6DAA6D;AAC7D,EAAE;AACF,sEAAsE;AACtE,kEAAkE;AAClE,qEAAqE;AACrE,iEAAiE;AACjE,oEAAoE;AACpE,wDAAwD;AACxD,EAAE;AACF,qEAAqE;AACrE,oEAAoE;AACpE,mEAAmE;AACnE,oEAAoE;AACpE,kEAAkE;AAClE,qEAAqE;AACrE,6DAA6D;AAC7D,EAAE;AACF,oEAAoE;AACpE,gEAAgE;AAChE,qEAAqE;AACrE,mEAAmE;AACnE,qEAAqE;AACrE,oDAAoD;AACpD,EAAE;AACF,mEAAmE;AACnE,sEAAsE;AACtE,wDAAwD;AACxD,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IAC/D,mCAAmC;IACnC,uCAAuC;IACvC,4CAA4C;IAC5C,kCAAkC;IAClC,uCAAuC;IACvC,mEAAmE;IACnE,sEAAsE;IACtE,gEAAgE;IAChE,oCAAoC;IACpC,4CAA4C;IAC5C,+CAA+C;CAChD,CAAC,CAAC;AAkCH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAA+B;IAE/B,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9D,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAEhD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS;QACnC,oBAAoB;QACpB,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa;QACtC,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe;KACzC,CAAC,CAAC;IACH,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACpE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,wEAAwE;QACxE,sEAAsE;QACtE,2DAA2D;QAC3D,kEAAkE;QAClE,qEAAqE;QACrE,uEAAuE;QACvE,qEAAqE;QACrE,oEAAoE;QACpE,mEAAmE;QACnE,oEAAoE;QACpE,0BAA0B;QAC1B,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAEjE,8DAA8D;IAC9D,IAAI,YAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,sEAAsE;QACtE,qDAAqD;QACrD,sEAAsE;QACtE,kEAAkE;QAClE,mEAAmE;QACnE,aAAa;QACb,YAAY,GAAG,MAAM,4BAA4B,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACvF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mEAAmE;QACnE,kEAAkE;QAClE,oEAAoE;QACpE,oEAAoE;QACpE,aAAa;QACb,IAAI,CACF,kCAAkC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,2BAA2B;YAC3E,YAAY,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC;YACvE,IAAK,GAAa,CAAC,OAAO,kCAAkC;YAC5D,oCAAoC,CACvC,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjC,CAAC;IACD,IAAI,CACF,wBAAwB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,mCAAmC;QACzE,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,wCAAwC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG;QACxF,iCAAiC,CACpC,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACpE,CAAC"}

package/dist/policy/config.d.ts

@@ -0,0 +1,64 @@
+import { type AgentReviewConfig, type AggregationPolicy } from "@momentiq/dark-factory-schemas";
+export declare const CONFIG_RELATIVE_PATH = ".agent-review/config.json";
+export declare const POLICY_OVERRIDE_ENV = "AGENT_REVIEW_AGGREGATION_POLICY";
+export interface LoadedConfig {
+    config: AgentReviewConfig;
+    repoRoot: string;
+    configPath: string;
+    loadedFromRef?: string;
+    policyOverride?: PolicyOverrideRecord;
+}
+export interface PolicyOverrideRecord {
+    configured: AggregationPolicy;
+    overridden: AggregationPolicy;
+    autoPromotedCritics: string[];
+}
+export interface ApplyEnvOverridesOptions {
+    warn?: (message: string) => void;
+}
+export interface ApplyEnvOverridesResult {
+    config: AgentReviewConfig;
+    applied: boolean;
+    configured: AggregationPolicy;
+    overridden?: AggregationPolicy;
+    autoPromotedCritics: string[];
+}
+/**
+ * Apply environment-variable overrides to a loaded config.
+ *
+ * Cycle 322.7 Phase C — Emergency revert toggle.
+ *
+ * Reads `AGENT_REVIEW_AGGREGATION_POLICY` from `env`. When set to a
+ * recognized AggregationPolicy value, returns a config with
+ * `aggregation.policy` stamped to the overridden value. When unset or
+ * unrecognized, returns the config unchanged (and warns on the
+ * unrecognized path so a typo doesn't silently fall through).
+ *
+ * Safety invariant — when the override is `block-if-any` AND no critic
+ * has `required: true` in the source config, auto-promote
+ * `cursor-local-chief-engineer` to `required: true`. Under `block-if-any`,
+ * `gate.ts:evaluateCommitGate` only blocks pushes on required critics;
+ * the auto-promotion preserves the "single trusted critic gates the
+ * push" semantics that operators expect during an emergency revert.
+ * This complements the load-time schema validation (which rejects a
+ * config with `policy: "block-if-any"` and zero required critics
+ * outright) — the runtime auto-promotion is the safety net for the
+ * env-override path specifically.
+ *
+ * Mutation-free: the returned config is a fresh object; the input is
+ * never modified. The returned record is suitable for emitting an
+ * `aggregation_policy_overridden` telemetry event when `applied: true`.
+ */
+export declare function applyEnvOverrides(config: AgentReviewConfig, env: Record<string, string | undefined>, options?: ApplyEnvOverridesOptions): ApplyEnvOverridesResult;
+export interface LoadConfigOptions {
+    cwd?: string;
+    validateGuidanceFiles?: boolean;
+    env?: Record<string, string | undefined>;
+    warn?: (message: string) => void;
+}
+export declare function loadAgentReviewConfig(options?: LoadConfigOptions): Promise<LoadedConfig>;
+export declare function loadAgentReviewConfigFromRef(rootDir: string, ref: string, options?: {
+    env?: Record<string, string | undefined>;
+    warn?: (message: string) => void;
+}): Promise<LoadedConfig>;
+//# sourceMappingURL=config.d.ts.map

package/dist/policy/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/policy/config.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACvB,MAAM,gCAAgC,CAAC;AAExC,eAAO,MAAM,oBAAoB,8BAA8B,CAAC;AAchE,eAAO,MAAM,mBAAmB,oCAAoC,CAAC;AAWrE,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IAKnB,aAAa,CAAC,EAAE,MAAM,CAAC;IAKvB,cAAc,CAAC,EAAE,oBAAoB,CAAC;CACvC;AAMD,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,iBAAiB,CAAC;IAC9B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,wBAAwB;IAMvC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,uBAAuB;IAGtC,MAAM,EAAE,iBAAiB,CAAC;IAE1B,OAAO,EAAE,OAAO,CAAC;IAEjB,UAAU,EAAE,iBAAiB,CAAC;IAE9B,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAK/B,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,iBAAiB,EACzB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,OAAO,GAAE,wBAA6B,GACrC,uBAAuB,CA8NzB;AAMD,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAMhC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAKzC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAClC;AAED,wBAAsB,qBAAqB,CACzC,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,YAAY,CAAC,CAoDvB;AAWD,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CAAO,GAC3F,OAAO,CAAC,YAAY,CAAC,CAkCvB"}

package/dist/policy/config.js

@@ -0,0 +1,363 @@
+import { existsSync, readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { gitShowFile, repoRoot } from "../git.js";
+import { AGGREGATION_POLICIES, parseAgentReviewConfig, } from "@momentiq/dark-factory-schemas";
+export const CONFIG_RELATIVE_PATH = ".agent-review/config.json";
+// Cycle 322.7 Phase C — Emergency revert env var. When set to a
+// recognized AggregationPolicy value (`block-if-any` or
+// `min-complete-quorum`), the config-load path overrides
+// `aggregation.policy` at runtime so operators can revert the live
+// policy WITHOUT shipping a new PR.
+//
+// Primary use case: a newly-added critic generates spurious blockers
+// in the first 48h post-policy-flip; the team needs to roll back to
+// the previous policy immediately. Setting this env var in the shell
+// (or as part of a single `git push` invocation) accomplishes the
+// revert; subsequent telemetry events surface the override as an
+// `aggregation_policy_overridden` event for audit traceability.
+export const POLICY_OVERRIDE_ENV = "AGENT_REVIEW_AGGREGATION_POLICY";
+// Critic id that gets auto-promoted to `required: true` when the env
+// override flips policy to `block-if-any` AND the source config has
+// zero required critics. The historically-trusted critic (single
+// blocker since the pre-multi-critic days) is the cleanest restoration
+// of the "single trusted critic gates the push" semantics operators
+// expect during an emergency revert. Documented in CONTRIBUTING.md
+// "Reverting the agent-review aggregation policy (emergency)".
+const AUTO_PROMOTE_CRITIC_ID = "cursor-local-chief-engineer";
+/**
+ * Apply environment-variable overrides to a loaded config.
+ *
+ * Cycle 322.7 Phase C — Emergency revert toggle.
+ *
+ * Reads `AGENT_REVIEW_AGGREGATION_POLICY` from `env`. When set to a
+ * recognized AggregationPolicy value, returns a config with
+ * `aggregation.policy` stamped to the overridden value. When unset or
+ * unrecognized, returns the config unchanged (and warns on the
+ * unrecognized path so a typo doesn't silently fall through).
+ *
+ * Safety invariant — when the override is `block-if-any` AND no critic
+ * has `required: true` in the source config, auto-promote
+ * `cursor-local-chief-engineer` to `required: true`. Under `block-if-any`,
+ * `gate.ts:evaluateCommitGate` only blocks pushes on required critics;
+ * the auto-promotion preserves the "single trusted critic gates the
+ * push" semantics that operators expect during an emergency revert.
+ * This complements the load-time schema validation (which rejects a
+ * config with `policy: "block-if-any"` and zero required critics
+ * outright) — the runtime auto-promotion is the safety net for the
+ * env-override path specifically.
+ *
+ * Mutation-free: the returned config is a fresh object; the input is
+ * never modified. The returned record is suitable for emitting an
+ * `aggregation_policy_overridden` telemetry event when `applied: true`.
+ */
+export function applyEnvOverrides(config, env, options = {}) {
+    const configured = config.aggregation.policy;
+    const raw = env[POLICY_OVERRIDE_ENV];
+    // Unset OR empty-string: silent fall-through. Empty string is the
+    // "unset" sentinel in many shell pipelines (e.g., `VAR=${X:-} make`
+    // patterns) so we deliberately do NOT warn — that would create noise
+    // on every invocation that propagates env vars from a CI runner.
+    if (raw === undefined || raw === "") {
+        return {
+            config,
+            applied: false,
+            configured,
+            autoPromotedCritics: [],
+        };
+    }
+    if (!isAggregationPolicy(raw)) {
+        // Unrecognized non-empty value: warn so the operator notices the
+        // typo, but never throw. The config policy stands (defense in depth
+        // against misconfiguration aborting the pre-commit critic).
+        if (options.warn) {
+            options.warn(`${POLICY_OVERRIDE_ENV}=${raw} is not a recognized aggregation policy; ` +
+                `expected one of: ${AGGREGATION_POLICIES.join(", ")}. ` +
+                `Falling through to configured policy "${configured}".`);
+        }
+        return {
+            config,
+            applied: false,
+            configured,
+            autoPromotedCritics: [],
+        };
+    }
+    // Recognized override — apply it. Build the new critic list first
+    // so the resulting config is fully consistent.
+    const autoPromotedCritics = [];
+    let critics = config.critics;
+    if (raw === "block-if-any") {
+        // Safety invariant: under block-if-any, the gate only blocks pushes
+        // on `required: true` critics. Two ways the override path could
+        // produce an unsafe runtime:
+        //
+        //   (a) FULL critic list has zero required critics → gate sees
+        //       only optional critics in the artifact → blocker findings
+        //       silently demote to warnings.
+        //
+        //   (b) FULL list HAS a required critic, but the ACTIVE PROFILE
+        //       narrows critics to an all-optional subset → same outcome
+        //       in the profile-filtered runtime view. Schema validation
+        //       (schema.ts:931-965) catches this for the on-disk
+        //       `block-if-any` shape, but the env-override path needs its
+        //       own runtime guarantee because the on-disk policy may be
+        //       `min-complete-quorum` (which has no profile invariant) at
+        //       the time of override.
+        //
+        // Handle (a) by auto-promoting `cursor-local-chief-engineer` (the
+        // historically-trusted critic) in the full list. Handle (b) by
+        // additionally promoting one critic per all-optional profile so
+        // every profile carries at least one required critic. The promoted
+        // ids surface in the `aggregation_policy_overridden` telemetry
+        // event's `autoPromotedCritics` array — that's the audit trail
+        // operators grep `_runs.ndjson` for (CONTRIBUTING.md "Audit trail"
+        // section). The stderr `warn` callback fires only on the
+        // REFUSED-fail-closed and unrecognized-value paths; successful
+        // promotions are observable in telemetry, not stderr (avoiding
+        // noise on every push when the override is the normal path).
+        // (Codex finding on 7e780bd3 / security §11 is closed by the
+        // promotion logic; visibility is via telemetry, not stderr.)
+        if (!critics.some((c) => c.required)) {
+            critics = critics.map((c) => c.id === AUTO_PROMOTE_CRITIC_ID ? { ...c, required: true } : c);
+            if (critics.some((c) => c.id === AUTO_PROMOTE_CRITIC_ID && c.required)) {
+                autoPromotedCritics.push(AUTO_PROMOTE_CRITIC_ID);
+            }
+        }
+        // Profile coverage check — required for the case where the on-disk
+        // config has a required critic OUTSIDE the active-profile set, or
+        // where cursor (the auto-promotion target) isn't in every profile.
+        if (config.profiles) {
+            const requiredIds = new Set(critics.filter((c) => c.required).map((c) => c.id));
+            // Sort profile names for deterministic auto-promotion order
+            // (mirrors schema.ts:947 sort for determinism in error messages).
+            const profileNames = Object.keys(config.profiles).sort();
+            for (const name of profileNames) {
+                const profile = config.profiles[name];
+                const hasRequired = profile.criticIds.some((id) => requiredIds.has(id));
+                if (!hasRequired) {
+                    // Promote the FIRST critic in the profile's `criticIds` list.
+                    // The profile author defined this ordering; respecting it is
+                    // less surprising than picking alphabetically or by adapter.
+                    const promoteTarget = profile.criticIds[0];
+                    if (promoteTarget !== undefined) {
+                        critics = critics.map((c) => c.id === promoteTarget ? { ...c, required: true } : c);
+                        if (!autoPromotedCritics.includes(promoteTarget)) {
+                            autoPromotedCritics.push(promoteTarget);
+                        }
+                        requiredIds.add(promoteTarget);
+                    }
+                }
+            }
+        }
+        // FAIL-CLOSED CHECK — Codex critic HIGH on 33dcb1b9 (security §0).
+        //
+        // If the override would result in a `block-if-any` config with ZERO
+        // required critics (neither the hard-coded cursor target nor any
+        // profile-first critic was promotable), refuse the override outright.
+        // Without this, the gate would silently downgrade blocker findings
+        // to warnings — the exact unsafe runtime state the auto-promotion
+        // is meant to prevent. Operators get a clear warning and the on-disk
+        // policy stands; they can re-apply after promoting a critic on-disk.
+        //
+        // This rejection only fires for the no-profiles + no-cursor edge
+        // case (the schema's profile-coverage invariant catches the rest at
+        // load time). Returning `applied: false` keeps the result type
+        // identical to the unset/garbage paths so the caller's audit code
+        // doesn't need a new branch.
+        if (!critics.some((c) => c.required)) {
+            if (options.warn) {
+                options.warn(`${POLICY_OVERRIDE_ENV}=block-if-any: REFUSED — no critic could be auto-promoted to required. ` +
+                    `Neither "${AUTO_PROMOTE_CRITIC_ID}" nor any profile-first critic was available in this config. ` +
+                    `Under block-if-any with zero required critics, the gate would silently downgrade blocker ` +
+                    `findings to warnings, defeating the revert's safety purpose. ` +
+                    `Falling through to configured policy "${configured}". ` +
+                    `Promote a critic on-disk (set \`required: true\`) before re-applying the revert.`);
+            }
+            return {
+                config,
+                applied: false,
+                configured,
+                autoPromotedCritics: [],
+            };
+        }
+    }
+    // Build the new aggregation block. Schema invariants (per
+    // parseAgentReviewConfig):
+    //   - `block-if-any` REJECTS a `quorum` field (a stale quorum after
+    //     a policy roll-back would be a silent foot-gun).
+    //   - `min-complete-quorum` REQUIRES a quorum integer >= 2.
+    //
+    // To keep the result config round-trippable through the same schema
+    // validation, strip `quorum` on `block-if-any` overrides. For
+    // `min-complete-quorum` overrides, preserve a pre-existing valid
+    // `quorum` OR synthesize one from the critic count when the source
+    // config had `block-if-any` shape (no quorum) — refusing the override
+    // would be hostile to operators who actually want to PIN
+    // min-complete-quorum during a calibration window. The synthesized
+    // value MUST satisfy the schema's `>= 2 && <= critics.length` bounds.
+    // (Codex HIGH on c849d47d / schema §0.)
+    let newAggregation;
+    if (raw === "block-if-any") {
+        newAggregation = {
+            policy: raw,
+            blockingSeverities: config.aggregation.blockingSeverities,
+        };
+    }
+    else {
+        // raw === "min-complete-quorum"
+        const sourceQuorum = config.aggregation.quorum;
+        const valid = typeof sourceQuorum === "number" &&
+            Number.isInteger(sourceQuorum) &&
+            sourceQuorum >= 2 &&
+            sourceQuorum <= critics.length;
+        if (valid) {
+            newAggregation = {
+                ...config.aggregation,
+                policy: raw,
+            };
+        }
+        else if (critics.length >= 2) {
+            // Synthesize a safe quorum: 2 (the schema minimum). The profile
+            // selector overrides this at runtime if a profile is active;
+            // otherwise the runner uses this for hypothetical-quorum
+            // telemetry. Safe per schema: 2 <= critics.length is guaranteed
+            // by the branch condition.
+            newAggregation = {
+                ...config.aggregation,
+                policy: raw,
+                quorum: 2,
+            };
+        }
+        else {
+            // critics.length < 2 — cannot synthesize a schema-valid quorum.
+            // Refuse the override and fall through to configured policy.
+            if (options.warn) {
+                options.warn(`${POLICY_OVERRIDE_ENV}=min-complete-quorum: REFUSED — cannot synthesize a schema-valid quorum ` +
+                    `(min-complete-quorum requires quorum >= 2 and <= critics.length, but only ${critics.length} ` +
+                    `critic(s) are configured). Falling through to configured policy "${configured}". ` +
+                    `Add a second critic to the config or pin quorum on-disk before re-applying the revert.`);
+            }
+            return {
+                config,
+                applied: false,
+                configured,
+                autoPromotedCritics: [],
+            };
+        }
+    }
+    const newConfig = {
+        ...config,
+        critics,
+        aggregation: newAggregation,
+    };
+    return {
+        config: newConfig,
+        applied: true,
+        configured,
+        overridden: raw,
+        autoPromotedCritics,
+    };
+}
+function isAggregationPolicy(s) {
+    return AGGREGATION_POLICIES.includes(s);
+}
+export async function loadAgentReviewConfig(options = {}) {
+    const root = await repoRoot(options.cwd ?? process.cwd());
+    const configPath = resolve(root, CONFIG_RELATIVE_PATH);
+    if (!existsSync(configPath)) {
+        throw new Error(`agent-review config not found at ${configPath}. ` +
+            "Run from a repository that contains .agent-review/config.json or copy the template.");
+    }
+    const raw = readFileSync(configPath, "utf8");
+    const parsedConfig = parseConfigJson(raw, configPath);
+    if (options.validateGuidanceFiles ?? true) {
+        const missing = [];
+        for (const rel of parsedConfig.context.guidanceFiles) {
+            if (!existsSync(resolve(root, rel)))
+                missing.push(rel);
+        }
+        for (const rel of parsedConfig.context.promptFragments) {
+            if (!existsSync(resolve(root, rel)))
+                missing.push(rel);
+        }
+        if (missing.length > 0) {
+            throw new Error(`agent-review config references missing guidance files: ${missing.join(", ")}`);
+        }
+    }
+    // Cycle 322.7 Phase C — apply env-var overrides AFTER schema parse
+    // but BEFORE the runner sees the config. The override path is
+    // applied here (not deeper) so all consumers of `LoadedConfig`
+    // (runReview, runCommitGate, evals) see the overridden policy
+    // automatically without needing to re-thread the env source.
+    const overrideResult = applyEnvOverrides(parsedConfig, options.env ?? process.env, {
+        ...(options.warn !== undefined ? { warn: options.warn } : {}),
+    });
+    return {
+        config: overrideResult.config,
+        repoRoot: root,
+        configPath,
+        ...(overrideResult.applied
+            ? {
+                policyOverride: {
+                    configured: overrideResult.configured,
+                    // `overridden` is guaranteed-set when applied=true; the
+                    // type system can't see that, so we assert here.
+                    overridden: overrideResult.overridden,
+                    autoPromotedCritics: overrideResult.autoPromotedCritics,
+                },
+            }
+            : {}),
+    };
+}
+// Load config from a specific git ref (e.g., the parent of the reviewed
+// commit). Used by the self-modification guard in `runReview`: if the
+// commit being reviewed touches `.agent-review/**`, we refuse to use HEAD's
+// (potentially-weakened) policy and instead review against the prior baseline.
+//
+// Throws if the ref doesn't have the config file, leaving the caller to
+// decide how to handle (typically: fall back to working-tree policy with a
+// loud warning, since the commit is introducing the config for the first
+// time).
+export async function loadAgentReviewConfigFromRef(rootDir, ref, options = {}) {
+    const raw = await gitShowFile(ref, CONFIG_RELATIVE_PATH, rootDir);
+    if (raw === null) {
+        throw new Error(`agent-review config not present at ref ${ref}:${CONFIG_RELATIVE_PATH}`);
+    }
+    const parsedConfig = parseConfigJson(raw, `${ref}:${CONFIG_RELATIVE_PATH}`);
+    // Cycle 322.7 Phase C — env override applies to the policy-baseline
+    // path too. The self-modification guard wants to evaluate against
+    // the parent ref's config, but the operator's emergency revert
+    // still applies: if the env says block-if-any, the parent-ref
+    // policy is also stamped to block-if-any. Without this, an operator
+    // who reverted to block-if-any via env would see the gate run
+    // min-complete-quorum against a baseline that triggered the
+    // self-modification guard — inconsistent and confusing.
+    const overrideResult = applyEnvOverrides(parsedConfig, options.env ?? process.env, {
+        ...(options.warn !== undefined ? { warn: options.warn } : {}),
+    });
+    return {
+        config: overrideResult.config,
+        repoRoot: rootDir,
+        configPath: `${ref}:${CONFIG_RELATIVE_PATH}`,
+        loadedFromRef: ref,
+        ...(overrideResult.applied
+            ? {
+                policyOverride: {
+                    configured: overrideResult.configured,
+                    overridden: overrideResult.overridden,
+                    autoPromotedCritics: overrideResult.autoPromotedCritics,
+                },
+            }
+            : {}),
+    };
+}
+function parseConfigJson(raw, source) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (err) {
+        throw new Error(`agent-review config at ${source} is not valid JSON: ${err.message}`);
+    }
+    return parseAgentReviewConfig(parsed);
+}
+//# sourceMappingURL=config.js.map

package/dist/policy/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/policy/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EACL,oBAAoB,EACpB,sBAAsB,GAGvB,MAAM,gCAAgC,CAAC;AAExC,MAAM,CAAC,MAAM,oBAAoB,GAAG,2BAA2B,CAAC;AAEhE,gEAAgE;AAChE,wDAAwD;AACxD,yDAAyD;AACzD,mEAAmE;AACnE,oCAAoC;AACpC,EAAE;AACF,qEAAqE;AACrE,oEAAoE;AACpE,qEAAqE;AACrE,kEAAkE;AAClE,iEAAiE;AACjE,gEAAgE;AAChE,MAAM,CAAC,MAAM,mBAAmB,GAAG,iCAAiC,CAAC;AAErE,qEAAqE;AACrE,oEAAoE;AACpE,iEAAiE;AACjE,uEAAuE;AACvE,oEAAoE;AACpE,mEAAmE;AACnE,+DAA+D;AAC/D,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AAsD7D;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAyB,EACzB,GAAuC,EACvC,UAAoC,EAAE;IAEtC,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;IAC7C,MAAM,GAAG,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAErC,kEAAkE;IAClE,oEAAoE;IACpE,qEAAqE;IACrE,iEAAiE;IACjE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACpC,OAAO;YACL,MAAM;YACN,OAAO,EAAE,KAAK;YACd,UAAU;YACV,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,iEAAiE;QACjE,oEAAoE;QACpE,4DAA4D;QAC5D,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CACV,GAAG,mBAAmB,IAAI,GAAG,2CAA2C;gBACtE,oBAAoB,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBACvD,yCAAyC,UAAU,IAAI,CAC1D,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM;YACN,OAAO,EAAE,KAAK;YACd,UAAU;YACV,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,+CAA+C;IAC/C,MAAM,mBAAmB,GAAa,EAAE,CAAC;IACzC,IAAI,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC7B,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;QAC3B,oEAAoE;QACpE,gEAAgE;QAChE,6BAA6B;QAC7B,EAAE;QACF,+DAA+D;QAC/D,iEAAiE;QACjE,qCAAqC;QACrC,EAAE;QACF,gEAAgE;QAChE,iEAAiE;QACjE,gEAAgE;QAChE,yDAAyD;QACzD,kEAAkE;QAClE,gEAAgE;QAChE,kEAAkE;QAClE,8BAA8B;QAC9B,EAAE;QACF,kEAAkE;QAClE,+DAA+D;QAC/D,gEAAgE;QAChE,mEAAmE;QACnE,+DAA+D;QAC/D,+DAA+D;QAC/D,mEAAmE;QACnE,yDAAyD;QACzD,+DAA+D;QAC/D,+DAA+D;QAC/D,6DAA6D;QAC7D,6DAA6D;QAC7D,6DAA6D;QAC7D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1B,CAAC,CAAC,EAAE,KAAK,sBAAsB,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAC/D,CAAC;YACF,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,sBAAsB,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvE,mBAAmB,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAED,mEAAmE;QACnE,kEAAkE;QAClE,mEAAmE;QACnE,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAChF,4DAA4D;YAC5D,kEAAkE;YAClE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YACzD,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;gBAChC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAE,CAAC;gBACvC,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;gBACxE,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,8DAA8D;oBAC9D,6DAA6D;oBAC7D,6DAA6D;oBAC7D,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;oBAC3C,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;wBAChC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1B,CAAC,CAAC,EAAE,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CACtD,CAAC;wBACF,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;4BACjD,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;wBAC1C,CAAC;wBACD,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;oBACjC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,mEAAmE;QACnE,EAAE;QACF,oEAAoE;QACpE,iEAAiE;QACjE,sEAAsE;QACtE,mEAAmE;QACnE,kEAAkE;QAClE,qEAAqE;QACrE,qEAAqE;QACrE,EAAE;QACF,iEAAiE;QACjE,oEAAoE;QACpE,+DAA+D;QAC/D,kEAAkE;QAClE,6BAA6B;QAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,IAAI,CACV,GAAG,mBAAmB,yEAAyE;oBAC7F,YAAY,sBAAsB,+DAA+D;oBACjG,2FAA2F;oBAC3F,+DAA+D;oBAC/D,yCAAyC,UAAU,KAAK;oBACxD,kFAAkF,CACrF,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,MAAM;gBACN,OAAO,EAAE,KAAK;gBACd,UAAU;gBACV,mBAAmB,EAAE,EAAE;aACxB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,2BAA2B;IAC3B,oEAAoE;IACpE,sDAAsD;IACtD,4DAA4D;IAC5D,EAAE;IACF,oEAAoE;IACpE,8DAA8D;IAC9D,iEAAiE;IACjE,mEAAmE;IACnE,sEAAsE;IACtE,yDAAyD;IACzD,mEAAmE;IACnE,sEAAsE;IACtE,wCAAwC;IACxC,IAAI,cAAgD,CAAC;IACrD,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;QAC3B,cAAc,GAAG;YACf,MAAM,EAAE,GAAG;YACX,kBAAkB,EAAE,MAAM,CAAC,WAAW,CAAC,kBAAkB;SAC1D,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,gCAAgC;QAChC,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;QAC/C,MAAM,KAAK,GACT,OAAO,YAAY,KAAK,QAAQ;YAChC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC;YAC9B,YAAY,IAAI,CAAC;YACjB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;QACjC,IAAI,KAAK,EAAE,CAAC;YACV,cAAc,GAAG;gBACf,GAAG,MAAM,CAAC,WAAW;gBACrB,MAAM,EAAE,GAAG;aACZ,CAAC;QACJ,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC/B,gEAAgE;YAChE,6DAA6D;YAC7D,yDAAyD;YACzD,gEAAgE;YAChE,2BAA2B;YAC3B,cAAc,GAAG;gBACf,GAAG,MAAM,CAAC,WAAW;gBACrB,MAAM,EAAE,GAAG;gBACX,MAAM,EAAE,CAAC;aACV,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,gEAAgE;YAChE,6DAA6D;YAC7D,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,IAAI,CACV,GAAG,mBAAmB,0EAA0E;oBAC9F,6EAA6E,OAAO,CAAC,MAAM,GAAG;oBAC9F,oEAAoE,UAAU,KAAK;oBACnF,wFAAwF,CAC3F,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,MAAM;gBACN,OAAO,EAAE,KAAK;gBACd,UAAU;gBACV,mBAAmB,EAAE,EAAE;aACxB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAsB;QACnC,GAAG,MAAM;QACT,OAAO;QACP,WAAW,EAAE,cAAc;KAC5B,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,IAAI;QACb,UAAU;QACV,UAAU,EAAE,GAAG;QACf,mBAAmB;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,CAAS;IACpC,OAAQ,oBAA0C,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAkBD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAA6B,EAAE;IAE/B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,oCAAoC,UAAU,IAAI;YAChD,qFAAqF,CACxF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAEtD,IAAI,OAAO,CAAC,qBAAqB,IAAI,IAAI,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YACrD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YACvD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,0DAA0D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,8DAA8D;IAC9D,+DAA+D;IAC/D,8DAA8D;IAC9D,6DAA6D;IAC7D,MAAM,cAAc,GAAG,iBAAiB,CAAC,YAAY,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;QACjF,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC,CAAC;IAEH,OAAO;QACL,MAAM,EAAE,cAAc,CAAC,MAAM;QAC7B,QAAQ,EAAE,IAAI;QACd,UAAU;QACV,GAAG,CAAC,cAAc,CAAC,OAAO;YACxB,CAAC,CAAC;gBACE,cAAc,EAAE;oBACd,UAAU,EAAE,cAAc,CAAC,UAAU;oBACrC,wDAAwD;oBACxD,iDAAiD;oBACjD,UAAU,EAAE,cAAc,CAAC,UAAW;oBACtC,mBAAmB,EAAE,cAAc,CAAC,mBAAmB;iBACxD;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,sEAAsE;AACtE,4EAA4E;AAC5E,+EAA+E;AAC/E,EAAE;AACF,wEAAwE;AACxE,2EAA2E;AAC3E,yEAAyE;AACzE,SAAS;AACT,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAe,EACf,GAAW,EACX,UAA0F,EAAE;IAE5F,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;IAClE,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,0CAA0C,GAAG,IAAI,oBAAoB,EAAE,CACxE,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,eAAe,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI,oBAAoB,EAAE,CAAC,CAAC;IAC5E,oEAAoE;IACpE,kEAAkE;IAClE,+DAA+D;IAC/D,8DAA8D;IAC9D,oEAAoE;IACpE,8DAA8D;IAC9D,4DAA4D;IAC5D,wDAAwD;IACxD,MAAM,cAAc,GAAG,iBAAiB,CAAC,YAAY,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;QACjF,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC,CAAC;IACH,OAAO;QACL,MAAM,EAAE,cAAc,CAAC,MAAM;QAC7B,QAAQ,EAAE,OAAO;QACjB,UAAU,EAAE,GAAG,GAAG,IAAI,oBAAoB,EAAE;QAC5C,aAAa,EAAE,GAAG;QAClB,GAAG,CAAC,cAAc,CAAC,OAAO;YACxB,CAAC,CAAC;gBACE,cAAc,EAAE;oBACd,UAAU,EAAE,cAAc,CAAC,UAAU;oBACrC,UAAU,EAAE,cAAc,CAAC,UAAW;oBACtC,mBAAmB,EAAE,cAAc,CAAC,mBAAmB;iBACxD;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,GAAW,EAAE,MAAc;IAClD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,0BAA0B,MAAM,uBAAwB,GAAa,CAAC,OAAO,EAAE,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC"}