@momentiq/dark-factory-cli 0.1.0-alpha.4

package/dist/runner.js

@@ -0,0 +1,456 @@
+import { buildReviewPacket } from "./trusted-surface/rebind.js";
+import { collectChangedPaths } from "./evidence/index.js";
+import { buildRubricContext, enforceVerificationRoutes, evaluateCommitGate, runTddClassifier, } from "./policy/gate.js";
+import { changedFiles, commitParent, resolveCommit } from "./git.js";
+import { diagnosticsDir, resolveArtifactDir } from "./paths.js";
+import { resolvePolicyBaseline } from "./policy/baseline.js";
+import { applyProfileAuth, applyProfileParamOverrides, resolveProfileWithConfig, } from "./policy/profile.js";
+import { runQualityGates } from "./evidence/index.js";
+import { acquireCommitLock, buildAggregate, quorumAggregateVerdict, releaseCommitLock, writeArtifacts, writePending, } from "./report.js";
+export async function runReview(options) {
+    const { registry } = options;
+    const cwd = options.cwd ?? options.loaded.repoRoot;
+    const ref = options.ref ?? "HEAD";
+    const sha = await resolveCommit(ref, cwd);
+    // Self-modification guard across the whole trusted policy surface
+    // (config + guidance files + prompt fragments). See `policy-baseline.ts`.
+    const baseline = await resolvePolicyBaseline({ loaded: options.loaded, sha, cwd });
+    const loaded = baseline.loaded;
+    const lock = await acquireCommitLock(loaded, sha);
+    if (!lock.acquired) {
+        throw new Error(`another agent-review is already in progress for commit ${sha} (lock at ${lock.lockPath}). Wait for it to finish or remove the lock if stale.`);
+    }
+    // Wrap EVERYTHING after lock acquisition in try/finally so the lock is
+    // always released — even on early failures from runQualityGates,
+    // buildReviewPacket, writePending, or any critic promise rejection.
+    // Without this, an exception during preparation leaves a stale `.lock`
+    // file that permanently blocks future reviews of the same SHA. (Cycle 3 #6)
+    const startedAt = new Date().toISOString();
+    const startMs = Date.now();
+    let packet;
+    let paths;
+    let artifact;
+    try {
+        // Honor `runBeforeReview`: when true, run the configured required quality
+        // gates synchronously before invoking the critic. The result file is
+        // picked up by `buildReviewPacket` → `readValidationEvidence`, so the
+        // packet carries fresh deterministic evidence. Without this, the flag was
+        // dead and operators always had to attach evidence by hand.
+        if (loaded.config.validation.runBeforeReview) {
+            await runQualityGates({
+                loaded,
+                commit: sha,
+                cwd,
+                ...(options.signal !== undefined ? { signal: options.signal } : {}),
+            });
+        }
+        packet = await buildReviewPacket(loaded, {
+            ref: sha,
+            cwd,
+            ...(baseline.baselineRef !== undefined ? { trustedSurfaceRef: baseline.baselineRef } : {}),
+        });
+        await writePending(loaded, {
+            loaded,
+            commit: sha,
+            parent: packet.commit.parent,
+            range: packet.range,
+            diffHash: packet.diffHash,
+            createdAt: startedAt,
+        });
+        const sink = options.telemetry;
+        // Cycle 322.7 Phase C — Emergency revert audit trail. When the
+        // config-load path applied `AGENT_REVIEW_AGGREGATION_POLICY`, it
+        // populated `loaded.policyOverride` with the audit record. Emit
+        // the matching `aggregation_policy_overridden` event so the
+        // run's NDJSON timeline captures the override + any auto-promoted
+        // critics. Fires BEFORE profile_selected so the audit ordering is
+        // "policy override → profile selection → review_started → critic
+        // runs → review_finished".
+        if (loaded.policyOverride) {
+            emit(sink, {
+                ts: new Date().toISOString(),
+                event: "aggregation_policy_overridden",
+                commit: sha,
+                configured: loaded.policyOverride.configured,
+                overridden: loaded.policyOverride.overridden,
+                autoPromotedCritics: loaded.policyOverride.autoPromotedCritics,
+            });
+        }
+        // Cycle 322.7 — Profile resolution. The caller has already
+        // applied --profile / AGENT_REVIEW_PROFILE precedence and passed
+        // the resolved name. Look it up against the loaded config:
+        //   - If config has no `profiles` map → back-compat: profile is
+        //     undefined, full critic list, root aggregation.quorum.
+        //   - If config HAS `profiles` and name matches → filter critics
+        //     to profile.criticIds, override aggregation quorum, emit
+        //     profile_selected telemetry.
+        //   - If config HAS `profiles` and name doesn't match → throw a
+        //     clear error (resolveProfileWithConfig handles this).
+        //
+        // profile_selected fires BEFORE review_started so the timeline
+        // operators see in telemetry has "selection happens before run".
+        const resolvedProfile = options.profileName
+            ? resolveProfileWithConfig(loaded.config, options.profileName)
+            : undefined;
+        const activeCritics = resolvedProfile?.criticIds
+            ? loaded.config.critics.filter((c) => resolvedProfile.criticIds.includes(c.id))
+            : loaded.config.critics;
+        if (resolvedProfile?.profile) {
+            emit(sink, {
+                ts: new Date().toISOString(),
+                event: "profile_selected",
+                commit: sha,
+                profile: resolvedProfile.profileName,
+                criticIds: resolvedProfile.profile.criticIds,
+                quorum: resolvedProfile.profile.quorum,
+            });
+        }
+        emit(sink, {
+            ts: startedAt,
+            event: "review_started",
+            commit: sha,
+        });
+        const adapterDiagnosticsDir = diagnosticsDir(await resolveArtifactDir(loaded));
+        const reviewOptions = {
+            blockingSeverities: loaded.config.aggregation.blockingSeverities,
+            diagnosticsDir: adapterDiagnosticsDir,
+            ...(options.signal !== undefined ? { signal: options.signal } : {}),
+            ...(sink !== undefined ? { emit: (e) => sink.emit(e) } : {}),
+        };
+        // Cycle 322.8 — apply profile-scoped modelParamOverrides BEFORE
+        // dispatching to adapters. Identity (same reference) when no
+        // override applies to a critic; otherwise a clone with the
+        // overridden params. Adapters see the resolved critic via their
+        // existing `critic.model.params` surface — no adapter-side change.
+        //
+        // Issue #2103 — chain `applyProfileAuth` AFTER `applyProfileParamOverrides`.
+        // Both are pure and commute (no field overlap), so order is only a
+        // convention; documenting it makes the pipeline reviewable.
+        const requiredCritics = activeCritics.map((c) => applyProfileAuth(applyProfileParamOverrides(c, resolvedProfile?.profile), resolvedProfile?.profile));
+        const results = await Promise.all(requiredCritics.map(async (critic) => {
+            if (!registry.has(critic.adapter)) {
+                return {
+                    criticId: critic.id,
+                    status: "error",
+                    requiresHumanJudgment: false,
+                    reviewer: {
+                        name: critic.name,
+                        adapter: critic.adapter,
+                        model: critic.model,
+                        runtime: critic.runtime,
+                    },
+                    summary: `no adapter registered for "${critic.adapter}"`,
+                    findings: [],
+                    validation: { qualityGateResults: [], qualityGatesMissing: [] },
+                    confidence: "unknown",
+                    error: { message: `no adapter registered for "${critic.adapter}"`, retryable: false },
+                };
+            }
+            const adapter = registry.resolve(critic.adapter);
+            return adapter.review(packet, critic, reviewOptions);
+        }));
+        const finishedAt = new Date().toISOString();
+        artifact = buildAggregate({
+            loaded,
+            commit: sha,
+            parent: packet.commit.parent,
+            range: packet.range,
+            diffHash: packet.diffHash,
+            criticResults: results,
+            status: "complete",
+            createdAt: startedAt,
+            // Cycle 322.7 — thread profile quorum so the persisted artifact's
+            // gateVerdict uses the same effective quorum as the runtime gate
+            // evaluator (Codex P2 on PR #1468).
+            ...(resolvedProfile?.quorum !== undefined
+                ? { quorumOverride: resolvedProfile.quorum }
+                : {}),
+        });
+        artifact.updatedAt = finishedAt;
+        paths = await writeArtifacts(loaded, artifact);
+        // Cycle 322.3 — populate quorum-aware telemetry on review_finished
+        // even when the live config policy is still `block-if-any`. This
+        // lets operators inspect the calibration-window data: how would
+        // the gate behave under quorum, today? The artifact's actual
+        // gateVerdict still reflects the live policy; `aggregateReason`
+        // is always the quorum interpretation (one of "majority", "veto",
+        // "quorum_unmet").
+        //
+        // The reason that the field is ALWAYS the quorum interpretation
+        // (instead of "block-if-any" sometimes) addresses Cursor critic
+        // 367476d3 finding #2 (observability, §5): under the live
+        // block-if-any policy, operators need to count would-be
+        // `majority` / `veto` outcomes across the calibration window —
+        // not just `quorum_unmet`. The active policy is encoded in the
+        // artifact's `aggregationPolicy` field; operators correlate
+        // `aggregateReason` against that to interpret the value (live
+        // gate-decision path vs. hypothetical 322.3.1 outcome).
+        const criticVerdicts = {};
+        const criticCompletionStates = {};
+        for (const r of results) {
+            if (r.verdict !== undefined) {
+                criticVerdicts[r.criticId] = r.verdict;
+            }
+            criticCompletionStates[r.criticId] =
+                r.status === "complete"
+                    ? "completed"
+                    : r.status === "error"
+                        ? "errored"
+                        : "pending";
+        }
+        // Cycle 322.7 — when a profile is active, profile.quorum
+        // overrides root aggregation.quorum for the aggregateReason
+        // computation. Under back-compat (no profile), fall back to the
+        // 322.3 logic: root quorum on min-complete-quorum, hypothetical
+        // quorum=2 on block-if-any (so calibration metrics still surface).
+        const quorum = resolvedProfile?.quorum ??
+            (loaded.config.aggregation.policy === "min-complete-quorum"
+                ? (loaded.config.aggregation.quorum ?? 2)
+                : 2);
+        const aggregateReason = quorumAggregateVerdict(results, loaded.config.aggregation.blockingSeverities, quorum).reason;
+        emit(sink, {
+            ts: finishedAt,
+            event: "review_finished",
+            commit: sha,
+            durationMs: Date.now() - startMs,
+            ...(artifact.gateVerdict !== undefined ? { verdict: artifact.gateVerdict } : {}),
+            findingCount: results.reduce((acc, r) => acc + r.findings.length, 0),
+            aggregateReason,
+            criticVerdicts,
+            criticCompletionStates,
+        });
+    }
+    catch (err) {
+        // Convert the pending artifact to a terminal error artifact so the gate
+        // sees a real failure instead of perpetually-pending. Without this, a
+        // throw here leaves `<sha>.json` at status=pending and `gate-push`
+        // blocks forever with `review_in_progress`. (Cycle 3 #9)
+        //
+        // Recovery runs whenever `packet` is built, NOT only when writePending
+        // returned successfully — `writePending` -> `writeArtifacts` writes JSON
+        // first; if any subsequent step throws, the JSON is already on disk and
+        // would otherwise stay at status=pending forever. `writeArtifacts` is
+        // now JSON-authoritative (markdown best-effort), so a hostile markdown
+        // path cannot block recovery.
+        if (packet) {
+            try {
+                const errArtifact = buildAggregate({
+                    loaded,
+                    commit: sha,
+                    parent: packet.commit.parent,
+                    range: packet.range,
+                    diffHash: packet.diffHash,
+                    criticResults: [],
+                    status: "error",
+                    createdAt: startedAt,
+                });
+                errArtifact.updatedAt = new Date().toISOString();
+                await writeArtifacts(loaded, errArtifact);
+            }
+            catch {
+                // Best-effort. If the error-artifact write itself fails, the lock
+                // release in the finally block still happens; the operator can
+                // re-run agent-review-commit to recover.
+            }
+        }
+        emit(options.telemetry, {
+            ts: new Date().toISOString(),
+            event: "review_error",
+            commit: sha,
+            durationMs: Date.now() - startMs,
+            error: err.message,
+        });
+        throw err;
+    }
+    finally {
+        releaseCommitLock(lock.lockPath);
+    }
+    // Re-narrow after try/finally — a successful path guarantees these are set.
+    if (!artifact || !paths || !packet) {
+        throw new Error("internal: artifact/paths/packet not set after successful runReview");
+    }
+    return {
+        artifact,
+        paths,
+        packet,
+        acquired: true,
+    };
+}
+export async function runCommitGate(options) {
+    const cwd = options.cwd ?? options.loaded.repoRoot;
+    // Apply the same self-modification guard as `runReview`: a commit that
+    // touches the trusted policy surface (config + guidance + fragments) is
+    // not allowed to weaken its OWN gate evaluation. Without this, a commit
+    // could set `blockOnMissingReview=false` or empty `requiredQualityGates`
+    // and have pre-push respect the weakened HEAD policy.
+    const sha = await resolveCommit(options.commit, cwd);
+    const baseline = await resolvePolicyBaseline({ loaded: options.loaded, sha, cwd });
+    const loaded = baseline.loaded;
+    // Cycle 322.7 Phase C — Emergency revert audit trail (gate path).
+    // The documented operator flow is `AGENT_REVIEW_AGGREGATION_POLICY=
+    // block-if-any git push`, which goes through gate-push → runCommitGate.
+    // If we only emitted the event in runReview, that primary operator
+    // surface would lose the audit record. Emit here too so every override
+    // application — whether through the local critic subprocess or the
+    // pre-push gate evaluator — appears in `_runs.ndjson`. The Cursor critic
+    // finding on dce8fd9e flagged the gap (HIGH, observability §5).
+    if (loaded.policyOverride) {
+        emit(options.telemetry, {
+            ts: new Date().toISOString(),
+            event: "aggregation_policy_overridden",
+            commit: sha,
+            configured: loaded.policyOverride.configured,
+            overridden: loaded.policyOverride.overridden,
+            autoPromotedCritics: loaded.policyOverride.autoPromotedCritics,
+        });
+    }
+    // Cycle 318.2 wiring: gate-push composes four gates in sequence; first
+    // failure does NOT short-circuit — collect all blockers so a developer
+    // sees the full picture in one pre-push output instead of stair-stepping
+    // through the gate one fix at a time.
+    //
+    //   1. TDD classifier            (Component 1)
+    //   2. Verification routes       (Component 2)
+    //   3. Bypass / artifact / rubric-aware critic gate (Component 5)
+    //
+    // Bypass is handled inside `evaluateCommitGate` and still short-circuits
+    // — the deterministic gates only run when no bypass is in effect.
+    const allBlocks = [];
+    const allWarnings = [];
+    const bypassReason = (process.env["AGENT_REVIEW_BYPASS"] ?? "").trim();
+    const bypassActive = loaded.config.policy.allowEmergencyBypass && bypassReason.length > 0;
+    if (!bypassActive && loaded.config.version === 2) {
+        // TDD classifier — fail-closed per manifesto §8 (AI-Generated Code
+        // with Safety Nets). A classifier exception (missing commit metadata,
+        // shallow clone, IO failure) is a deterministic-gate failure: we
+        // can't confirm whether tests accompany the production change, so
+        // the gate must block. Operators with a genuinely broken local
+        // environment can opt out via AGENT_REVIEW_BYPASS=<reason>.
+        try {
+            const tdd = await runTddClassifier({ loaded, sha, cwd });
+            if (tdd && tdd.verdict === "block") {
+                allBlocks.push({
+                    reason: "tdd_no_test",
+                    detail: `${tdd.reason}; production paths: ${tdd.productionPaths
+                        .slice(0, 5)
+                        .join(", ")}${tdd.productionPaths.length > 5 ? ", ..." : ""}`,
+                });
+            }
+            else if (tdd && tdd.verdict === "justified") {
+                allWarnings.push({
+                    reason: "tdd_justified",
+                    detail: tdd.reason,
+                });
+            }
+        }
+        catch (err) {
+            allBlocks.push({
+                reason: "tdd_classifier_error",
+                detail: `TDD classifier failed: ${err.message}`,
+            });
+        }
+        // Verification routes — also fail-closed. A route evaluation that
+        // throws (corrupted JSON, fs error, etc.) means we can't read the
+        // per-SHA evidence file safely; block by default so a stale or
+        // unreadable artifact cannot let a push through. AGENT_REVIEW_BYPASS
+        // remains the documented escape hatch for tool-broken emergencies.
+        try {
+            const parent = await safeParent(sha, cwd);
+            const files = await changedFiles(parent, sha, cwd, { readContent: false });
+            // Include `oldPath` from rename/copy entries so a rename out of a
+            // routed glob (e.g., `backend/app/foo.py` → `web/generated/foo.ts`)
+            // still triggers the source's route. Without this, the only path
+            // checked was the new path, and the moved-from glob would silently
+            // fall off the gate. (Codex P2 follow-up on PR #1349.)
+            const routeEval = await enforceVerificationRoutes({
+                loaded,
+                sha,
+                changedPaths: collectChangedPaths(files),
+            });
+            for (const r of routeEval.perRoute) {
+                if (r.status === "missing") {
+                    allBlocks.push({
+                        reason: "verification_route_missing",
+                        detail: r.detail,
+                    });
+                }
+                else if (r.status === "failed") {
+                    allBlocks.push({
+                        reason: "verification_route_failed",
+                        detail: r.detail,
+                    });
+                }
+            }
+            if (routeEval.suppressedBy) {
+                allWarnings.push({
+                    reason: "routes_suppressed",
+                    detail: `exclusive route "${routeEval.suppressedBy.id}" suppressed all production routes`,
+                });
+            }
+        }
+        catch (err) {
+            allBlocks.push({
+                reason: "verification_routes_error",
+                detail: `verification-routes evaluation failed: ${err.message}`,
+            });
+        }
+    }
+    // Build the rubric context once (commit trailers + per-SHA evidence)
+    // so the critic-gate finding filter has it without reparsing. Only
+    // build for v2 configs; v1 keeps the legacy behavior.
+    const rubricContext = loaded.config.version === 2 && !bypassActive
+        ? await buildRubricContext({ loaded, sha, cwd })
+        : undefined;
+    // Cycle 322.7 — when a profile is active, override the quorum used
+    // by the gate evaluator AND scope the artifact's critic results to
+    // the profile's allowlist. The profile resolver throws on unknown
+    // profile names so a mistyped --profile fails loudly here too.
+    const resolvedProfile = options.profileName
+        ? resolveProfileWithConfig(loaded.config, options.profileName)
+        : undefined;
+    const quorumOverride = resolvedProfile?.quorum;
+    const profileCriticIds = resolvedProfile?.criticIds;
+    const result = await evaluateCommitGate({
+        loaded,
+        commit: options.commit,
+        cwd,
+        ...(rubricContext !== undefined ? { rubricContext } : {}),
+        ...(quorumOverride !== undefined ? { quorumOverride } : {}),
+        ...(profileCriticIds !== undefined ? { profileCriticIds } : {}),
+    });
+    // Merge deterministic gate results with the artifact-driven gate result.
+    // Bypass on the artifact gate replaces our collected blocks entirely —
+    // a bypass invocation is a full ceasefire on this push.
+    const merged = result.bypass
+        ? result
+        : {
+            blocked: result.blocked || allBlocks.length > 0,
+            blocks: [...allBlocks, ...result.blocks],
+            warnings: [...allWarnings, ...result.warnings],
+            ...(result.bypass !== undefined ? { bypass: result.bypass } : {}),
+        };
+    emit(options.telemetry, {
+        ts: new Date().toISOString(),
+        event: merged.bypass
+            ? "gate_bypassed"
+            : merged.blocked
+                ? "gate_blocked"
+                : "gate_passed",
+        commit: options.commit,
+        ...(merged.bypass ? { bypassReason: merged.bypass.reason } : {}),
+    });
+    return merged;
+}
+async function safeParent(sha, cwd) {
+    try {
+        return await commitParent(sha, cwd);
+    }
+    catch {
+        return "";
+    }
+}
+function emit(sink, event) {
+    if (sink)
+        sink.emit(event);
+}
+//# sourceMappingURL=runner.js.map

package/dist/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EACL,gBAAgB,EAChB,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,cAAc,EACd,YAAY,GAEb,MAAM,aAAa,CAAC;AAwCrB,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAyB;IACvD,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC;IAClC,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAE1C,kEAAkE;IAClE,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAE/B,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,0DAA0D,GAAG,aAAa,IAAI,CAAC,QAAQ,uDAAuD,CAC/I,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,iEAAiE;IACjE,oEAAoE;IACpE,uEAAuE;IACvE,4EAA4E;IAC5E,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,MAAgC,CAAC;IACrC,IAAI,KAA8B,CAAC;IACnC,IAAI,QAAoC,CAAC;IACzC,IAAI,CAAC;QACH,0EAA0E;QAC1E,qEAAqE;QACrE,sEAAsE;QACtE,0EAA0E;QAC1E,4DAA4D;QAC5D,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC;YAC7C,MAAM,eAAe,CAAC;gBACpB,MAAM;gBACN,MAAM,EAAE,GAAG;gBACX,GAAG;gBACH,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE;YACvC,GAAG,EAAE,GAAG;YACR,GAAG;YACH,GAAG,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3F,CAAC,CAAC;QAEH,MAAM,YAAY,CAAC,MAAM,EAAE;YACzB,MAAM;YACN,MAAM,EAAE,GAAG;YACX,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;YAC5B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,SAAS;SACrB,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC;QAE/B,+DAA+D;QAC/D,iEAAiE;QACjE,gEAAgE;QAChE,4DAA4D;QAC5D,kEAAkE;QAClE,kEAAkE;QAClE,iEAAiE;QACjE,2BAA2B;QAC3B,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,EAAE;gBACT,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,KAAK,EAAE,+BAA+B;gBACtC,MAAM,EAAE,GAAG;gBACX,UAAU,EAAE,MAAM,CAAC,cAAc,CAAC,UAAU;gBAC5C,UAAU,EAAE,MAAM,CAAC,cAAc,CAAC,UAAU;gBAC5C,mBAAmB,EAAE,MAAM,CAAC,cAAc,CAAC,mBAAmB;aAC/D,CAAC,CAAC;QACL,CAAC;QAED,2DAA2D;QAC3D,iEAAiE;QACjE,2DAA2D;QAC3D,gEAAgE;QAChE,4DAA4D;QAC5D,iEAAiE;QACjE,8DAA8D;QAC9D,kCAAkC;QAClC,gEAAgE;QAChE,2DAA2D;QAC3D,EAAE;QACF,+DAA+D;QAC/D,iEAAiE;QACjE,MAAM,eAAe,GAAG,OAAO,CAAC,WAAW;YACzC,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC;YAC9D,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,aAAa,GAAG,eAAe,EAAE,SAAS;YAC9C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,SAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAChF,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC1B,IAAI,eAAe,EAAE,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,EAAE;gBACT,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,KAAK,EAAE,kBAAkB;gBACzB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,eAAe,CAAC,WAAW;gBACpC,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,SAAS;gBAC5C,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM;aACvC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,EAAE;YACT,EAAE,EAAE,SAAS;YACb,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,GAAG;SACZ,CAAC,CAAC;QAEH,MAAM,qBAAqB,GAAG,cAAc,CAAC,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;QAE/E,MAAM,aAAa,GAAwB;YACzC,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,kBAAkB;YAChE,cAAc,EAAE,qBAAqB;YACrC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7E,CAAC;QAEF,gEAAgE;QAChE,6DAA6D;QAC7D,2DAA2D;QAC3D,gEAAgE;QAChE,mEAAmE;QACnE,EAAE;QACF,6EAA6E;QAC7E,mEAAmE;QACnE,4DAA4D;QAC5D,MAAM,eAAe,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9C,gBAAgB,CACd,0BAA0B,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,EACvD,eAAe,EAAE,OAAO,CACzB,CACF,CAAC;QACF,MAAM,OAAO,GAAmB,MAAM,OAAO,CAAC,GAAG,CAC/C,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClC,OAAO;oBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,MAAM,EAAE,OAAO;oBACf,qBAAqB,EAAE,KAAK;oBAC5B,QAAQ,EAAE;wBACR,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,OAAO,EAAE,MAAM,CAAC,OAAO;qBACxB;oBACD,OAAO,EAAE,8BAA8B,MAAM,CAAC,OAAO,GAAG;oBACxD,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE;oBAC/D,UAAU,EAAE,SAAS;oBACrB,KAAK,EAAE,EAAE,OAAO,EAAE,8BAA8B,MAAM,CAAC,OAAO,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE;iBACtF,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACjD,OAAO,OAAO,CAAC,MAAM,CAAC,MAAO,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QACxD,CAAC,CAAC,CACH,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,QAAQ,GAAG,cAAc,CAAC;YACxB,MAAM;YACN,MAAM,EAAE,GAAG;YACX,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;YAC5B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,aAAa,EAAE,OAAO;YACtB,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,SAAS;YACpB,kEAAkE;YAClE,iEAAiE;YACjE,oCAAoC;YACpC,GAAG,CAAC,eAAe,EAAE,MAAM,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE,cAAc,EAAE,eAAe,CAAC,MAAM,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,QAAQ,CAAC,SAAS,GAAG,UAAU,CAAC;QAEhC,KAAK,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE/C,mEAAmE;QACnE,iEAAiE;QACjE,gEAAgE;QAChE,6DAA6D;QAC7D,gEAAgE;QAChE,kEAAkE;QAClE,mBAAmB;QACnB,EAAE;QACF,gEAAgE;QAChE,gEAAgE;QAChE,0DAA0D;QAC1D,wDAAwD;QACxD,+DAA+D;QAC/D,+DAA+D;QAC/D,4DAA4D;QAC5D,8DAA8D;QAC9D,wDAAwD;QACxD,MAAM,cAAc,GAAqD,EAAE,CAAC;QAC5E,MAAM,sBAAsB,GAAwD,EAAE,CAAC;QACvF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC5B,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;YACzC,CAAC;YACD,sBAAsB,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAChC,CAAC,CAAC,MAAM,KAAK,UAAU;oBACrB,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO;wBACpB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,SAAS,CAAC;QACpB,CAAC;QACD,yDAAyD;QACzD,4DAA4D;QAC5D,gEAAgE;QAChE,gEAAgE;QAChE,mEAAmE;QACnE,MAAM,MAAM,GACV,eAAe,EAAE,MAAM;YACvB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,qBAAqB;gBACzD,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC;gBACzC,CAAC,CAAC,CAAC,CAAC,CAAC;QACT,MAAM,eAAe,GAAG,sBAAsB,CAC5C,OAAO,EACP,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,kBAAkB,EAC5C,MAAM,CACP,CAAC,MAAM,CAAC;QAET,IAAI,CAAC,IAAI,EAAE;YACT,EAAE,EAAE,UAAU;YACd,KAAK,EAAE,iBAAiB;YACxB,MAAM,EAAE,GAAG;YACX,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAChC,GAAG,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACpE,eAAe;YACf,cAAc;YACd,sBAAsB;SACvB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wEAAwE;QACxE,sEAAsE;QACtE,mEAAmE;QACnE,yDAAyD;QACzD,EAAE;QACF,uEAAuE;QACvE,yEAAyE;QACzE,wEAAwE;QACxE,sEAAsE;QACtE,uEAAuE;QACvE,8BAA8B;QAC9B,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,cAAc,CAAC;oBACjC,MAAM;oBACN,MAAM,EAAE,GAAG;oBACX,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;oBAC5B,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,aAAa,EAAE,EAAE;oBACjB,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE,SAAS;iBACrB,CAAC,CAAC;gBACH,WAAW,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACjD,MAAM,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;gBAClE,+DAA+D;gBAC/D,yCAAyC;YAC3C,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;YACtB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,KAAK,EAAE,cAAc;YACrB,MAAM,EAAE,GAAG;YACX,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAChC,KAAK,EAAG,GAAa,CAAC,OAAO;SAC9B,CAAC,CAAC;QACH,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,4EAA4E;IAC5E,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IAED,OAAO;QACL,QAAQ;QACR,KAAK;QACL,MAAM;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC;AA2BD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAuB;IACzD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;IACnD,uEAAuE;IACvE,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,sDAAsD;IACtD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAE/B,kEAAkE;IAClE,oEAAoE;IACpE,wEAAwE;IACxE,mEAAmE;IACnE,uEAAuE;IACvE,mEAAmE;IACnE,yEAAyE;IACzE,gEAAgE;IAChE,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;YACtB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,KAAK,EAAE,+BAA+B;YACtC,MAAM,EAAE,GAAG;YACX,UAAU,EAAE,MAAM,CAAC,cAAc,CAAC,UAAU;YAC5C,UAAU,EAAE,MAAM,CAAC,cAAc,CAAC,UAAU;YAC5C,mBAAmB,EAAE,MAAM,CAAC,cAAc,CAAC,mBAAmB;SAC/D,CAAC,CAAC;IACL,CAAC;IAED,uEAAuE;IACvE,uEAAuE;IACvE,yEAAyE;IACzE,sCAAsC;IACtC,EAAE;IACF,+CAA+C;IAC/C,+CAA+C;IAC/C,kEAAkE;IAClE,EAAE;IACF,yEAAyE;IACzE,kEAAkE;IAClE,MAAM,SAAS,GAAgB,EAAE,CAAC;IAClC,MAAM,WAAW,GAA2B,EAAE,CAAC;IAE/C,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IAE1F,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACjD,mEAAmE;QACnE,sEAAsE;QACtE,iEAAiE;QACjE,kEAAkE;QAClE,+DAA+D;QAC/D,4DAA4D;QAC5D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACzD,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBACnC,SAAS,CAAC,IAAI,CAAC;oBACb,MAAM,EAAE,aAAa;oBACrB,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,uBAAuB,GAAG,CAAC,eAAe;yBAC5D,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;yBACX,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;iBAChE,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;gBAC9C,WAAW,CAAC,IAAI,CAAC;oBACf,MAAM,EAAE,eAAe;oBACvB,MAAM,EAAE,GAAG,CAAC,MAAM;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,CAAC,IAAI,CAAC;gBACb,MAAM,EAAE,sBAAsB;gBAC9B,MAAM,EAAE,0BAA2B,GAAa,CAAC,OAAO,EAAE;aAC3D,CAAC,CAAC;QACL,CAAC;QAED,kEAAkE;QAClE,kEAAkE;QAClE,+DAA+D;QAC/D,qEAAqE;QACrE,mEAAmE;QACnE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3E,kEAAkE;YAClE,oEAAoE;YACpE,iEAAiE;YACjE,mEAAmE;YACnE,uDAAuD;YACvD,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC;gBAChD,MAAM;gBACN,GAAG;gBACH,YAAY,EAAE,mBAAmB,CAAC,KAAK,CAAC;aACzC,CAAC,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACnC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC3B,SAAS,CAAC,IAAI,CAAC;wBACb,MAAM,EAAE,4BAA4B;wBACpC,MAAM,EAAE,CAAC,CAAC,MAAM;qBACjB,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACjC,SAAS,CAAC,IAAI,CAAC;wBACb,MAAM,EAAE,2BAA2B;wBACnC,MAAM,EAAE,CAAC,CAAC,MAAM;qBACjB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;gBAC3B,WAAW,CAAC,IAAI,CAAC;oBACf,MAAM,EAAE,mBAAmB;oBAC3B,MAAM,EAAE,oBAAoB,SAAS,CAAC,YAAY,CAAC,EAAE,oCAAoC;iBAC1F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,CAAC,IAAI,CAAC;gBACb,MAAM,EAAE,2BAA2B;gBACnC,MAAM,EAAE,0CAA2C,GAAa,CAAC,OAAO,EAAE;aAC3E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,mEAAmE;IACnE,sDAAsD;IACtD,MAAM,aAAa,GACjB,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,YAAY;QAC1C,CAAC,CAAC,MAAM,kBAAkB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;QAChD,CAAC,CAAC,SAAS,CAAC;IAEhB,mEAAmE;IACnE,mEAAmE;IACnE,kEAAkE;IAClE,+DAA+D;IAC/D,MAAM,eAAe,GAAG,OAAO,CAAC,WAAW;QACzC,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC;QAC9D,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,cAAc,GAAG,eAAe,EAAE,MAAM,CAAC;IAC/C,MAAM,gBAAgB,GAAG,eAAe,EAAE,SAAS,CAAC;IAEpD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC;QACtC,MAAM;QACN,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG;QACH,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,CAAC,CAAC;IAEH,yEAAyE;IACzE,uEAAuE;IACvE,wDAAwD;IACxD,MAAM,MAAM,GAAe,MAAM,CAAC,MAAM;QACtC,CAAC,CAAC,MAAM;QACR,CAAC,CAAC;YACE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YAC/C,MAAM,EAAE,CAAC,GAAG,SAAS,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;YACxC,QAAQ,EAAE,CAAC,GAAG,WAAW,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC9C,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC;IAEN,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;QACtB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5B,KAAK,EAAE,MAAM,CAAC,MAAM;YAClB,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,MAAM,CAAC,OAAO;gBACd,CAAC,CAAC,cAAc;gBAChB,CAAC,CAAC,aAAa;QACnB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,GAAW;IAChD,IAAI,CAAC;QACH,OAAO,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,IAA+B,EAAE,KAAqB;IAClE,IAAI,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC"}

package/dist/security.d.ts

@@ -0,0 +1,2 @@
+export declare function redactSecrets(input: string): string;
+//# sourceMappingURL=security.d.ts.map

package/dist/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../src/security.ts"],"names":[],"mappings":"AAYA,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOnD"}

package/dist/security.js

@@ -0,0 +1,19 @@
+const SECRET_PATTERNS = [
+    { name: "openai", re: /sk-[A-Za-z0-9]{20,}/g },
+    { name: "anthropic", re: /sk-ant-[A-Za-z0-9-_]{20,}/g },
+    { name: "cursor", re: /cursor_[A-Za-z0-9-_]{20,}/g },
+    { name: "github_pat", re: /gh[pousr]_[A-Za-z0-9]{20,}/g },
+    { name: "aws_access_key", re: /AKIA[0-9A-Z]{16}/g },
+    { name: "private_key", re: /-----BEGIN [A-Z ]+PRIVATE KEY-----[\s\S]*?-----END [A-Z ]+PRIVATE KEY-----/g },
+    { name: "generic_long_token", re: /(?<![A-Za-z0-9])([A-Za-z0-9_-]{40,})(?![A-Za-z0-9])/g },
+];
+const SECRET_KEY_HINT = /\b(api[_-]?key|secret|token|password|passphrase|auth[_-]?token)\b\s*[:=]\s*["']?(?!\[REDACTED)([^"'\s]{8,})/gi;
+export function redactSecrets(input) {
+    let out = input;
+    for (const { name, re } of SECRET_PATTERNS) {
+        out = out.replace(re, `[REDACTED:${name}]`);
+    }
+    out = out.replace(SECRET_KEY_HINT, (_match, key) => `${key}=[REDACTED]`);
+    return out;
+}
+//# sourceMappingURL=security.js.map

package/dist/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../src/security.ts"],"names":[],"mappings":"AAAA,MAAM,eAAe,GAAmC;IACtD,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,sBAAsB,EAAE;IAC9C,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,4BAA4B,EAAE;IACvD,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,4BAA4B,EAAE;IACpD,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,6BAA6B,EAAE;IACzD,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,mBAAmB,EAAE;IACnD,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,6EAA6E,EAAE;IAC1G,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,EAAE,sDAAsD,EAAE;CAC3F,CAAC;AAEF,MAAM,eAAe,GAAG,+GAA+G,CAAC;AAExI,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,eAAe,EAAE,CAAC;QAC3C,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,aAAa,IAAI,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,GAAW,EAAE,EAAE,CAAC,GAAG,GAAG,aAAa,CAAC,CAAC;IACjF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/trusted-surface/rebind.d.ts

@@ -0,0 +1,10 @@
+import type { LoadedConfig } from "../policy/config.js";
+import type { GuidanceFile, ReviewPacket } from "@momentiq/dark-factory-schemas";
+export interface BuildPacketOptions {
+    ref?: string;
+    cwd?: string;
+    trustedSurfaceRef?: string;
+}
+export declare function buildReviewPacket(loaded: LoadedConfig, options?: BuildPacketOptions): Promise<ReviewPacket>;
+export declare function readContainedFiles(repoRoot: string, paths: string[]): GuidanceFile[];
+//# sourceMappingURL=rebind.d.ts.map

package/dist/trusted-surface/rebind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rebind.d.ts","sourceRoot":"","sources":["../../src/trusted-surface/rebind.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAaxD,OAAO,KAAK,EACV,YAAY,EACZ,YAAY,EAEb,MAAM,gCAAgC,CAAC;AAExC,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IAOb,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAID,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,YAAY,EACpB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,YAAY,CAAC,CA+CvB;AAoBD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,EAAE,CAoBpF"}