@open-agent-toolkit/cli 0.2.23 → 0.2.25

package/assets/skills/oat-project-review-receive-remote/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: oat-project-review-receive-remote
-version: 1.4.2
+version: 1.5.0
 description: Use when processing GitHub PR review comments within project context. Fetches PR comments, creates plan tasks, and updates project artifacts.
 disable-model-invocation: true
 user-invocable: true
@@ -115,6 +115,33 @@ Confirm resolved PR number with user.
 npx agent-reviews --json --unresolved --pr <N>
 ```
 
+Resolve provenance from the GitHub review event that produced the fetched
+feedback, not from the PR's current head. Parse its OAT marker block when
+present:
+
+- accept `oat_review_head_sha` only as a full 40-character hexadecimal SHA;
+- preserve `oat_review_invocation` as the invocation kind;
+- preserve `oat_gate_target` only for a gate invocation.
+
+If the source review is legacy, multiple source reviews disagree, or the
+lineage cannot be associated with this receive event, leave the corresponding
+ledger cells unknown (`-`). Never infer lineage from the reviewer identity or
+substitute the current PR head for the commit that was actually reviewed.
+
+**Reviews ledger write contract (all receive paths):**
+
+- Resolve `Scope`, `Type`, `Status`, `Date`, `Artifact`, `Reviewed Head`,
+  `Invocation`, and `Gate Target` by header name before mutating a row; never
+  use fixed cell positions.
+- If the Reviews table has only the legacy five columns, add `Reviewed Head`,
+  `Invocation`, and `Gate Target` to its header and separator and pad every
+  existing row with `-`. In an already widened table, pad a shorter row with
+  `-` through the current header width before mutation.
+- Mutate only the event selected by the event-identity rules below. Preserve
+  every unknown column in its original position and every existing known value
+  unless the operation explicitly advances that cell. Never truncate a row to
+  five, eight, or any other assumed width.
+
 If no unresolved comments:
 
 1. Create a UTC timestamp and event-distinct filename:
@@ -125,10 +152,14 @@ If no unresolved comments:
    remain in top-level `reviews/`.
 3. Record the clean result as a `passed` Reviews event whose event identity
    combines `Scope`, `Type`, and artifact filename:
+   - Apply the Reviews ledger write contract above before claiming, appending,
+     or mutating the event.
    - Claim only an unbound `pending` placeholder with matching Scope + Type and
      Artifact `-`; otherwise append a distinct row.
    - Set Date and Artifact to this clean event. Advance only this event and
      never mutate another row by scope alone.
+   - Populate `Reviewed Head`, `Invocation`, and `Gate Target` only from the
+     validated source-review provenance above; use `-` when it is unknown.
 4. Commit `plan.md` and the clean review artifact atomically with
    `chore(oat): record clean remote review (pr-#<N>)`. Do not stop with
    uncommitted bookkeeping.
@@ -176,7 +207,8 @@ For each converted finding:
 ### Step 6: Update Project Artifacts
 
 Before changing the ledger, write an event-distinct review artifact containing
-the PR number, fetch timestamp, normalized findings, and dispositions:
+the PR number, fetch timestamp, normalized findings, dispositions, and any
+validated source-review head/invocation/gate-target provenance:
 `reviews/archived/remote-pr-<N>-review-YYYY-MM-DDTHHMMSSZ.md`. Remote receive
 fully dispositions the event as `passed` or `fixes_added`, so the artifact is
 consumed immediately and belongs in `reviews/archived/`, not top-level
@@ -198,11 +230,16 @@ Update `plan.md`:
   - status `passed` when no actionable findings remain
   - date set to today
   - artifact `reviews/archived/remote-pr-<N>-review-YYYY-MM-DDTHHMMSSZ.md`
+  - reviewed head set to the validated full source-review SHA, or `-`
+  - invocation set to the source-review invocation kind, or `-`
+  - gate target set only for a gate source review, or `-`
 - Claim an unbound `pending` placeholder only when its Scope + Type matches and
   its Artifact is `-`; otherwise append the event. Later mutations select it by
   Scope + Type + artifact filename, never by scope or `github-pr #<N>` alone.
 - Never move an event status backward or overwrite an earlier event from the
   same PR.
+- Apply the Reviews ledger write contract above before claiming, appending, or
+  mutating the event.
 - Update `## Implementation Complete` totals.
 
 Update `implementation.md`:

package/assets/skills/oat-review-provide-remote/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: oat-review-provide-remote
-version: 1.0.3
+version: 1.1.0
 description: Use when reviewing a GitHub PR opened on another machine and posting findings back as a single PR review, outside any OAT project context. Fetches the PR via gh, reviews it, and posts via gh api.
 disable-model-invocation: true
 user-invocable: true
@@ -77,7 +77,7 @@ oat-review-provide-remote [--pr <N>] [--no-checkout] [--narrow|--no-narrow]
 
 - `--pr <N>`: target PR number. When omitted, auto-detect from the current branch.
 - `--no-checkout`: skip the ephemeral worktree and review from `gh pr diff` only (degraded context).
-- `--narrow` / `--no-narrow`: force or forbid re-review narrowing against a prior provide-remote review. When neither is passed, honor `workflow.autoNarrowReReviewScope` (no prompt when `true`; confirm prompt otherwise).
+- `--narrow` / `--no-narrow`: force or forbid re-review narrowing against a prior ad-hoc provide-remote review. `--narrow` takes precedence over the configured preference; `--no-narrow` forces full scope. When neither is passed, honor `workflow.autoNarrowReReviewScope`: unset and `true` narrow automatically, while only `false` forces full scope. This path never prompts for a narrowing decision.
 
 Inputs are CLI-style args parsed from `$ARGUMENTS`. No file inputs. No file outputs on this machine.
 
@@ -143,26 +143,63 @@ gh pr view "$PR" --json title,body,headRefOid,baseRefName,state
 
 ### Step 3: Detect Prior Reviews + Narrow Scope
 
-List prior PR reviews and parse each body's marker block. Filter to reviews where `oat_provide_remote: true` AND `oat_review_scope == "ad-hoc"` AND no `oat_project` key — project-rail markers are ignored by the ad-hoc filter.
+Resolve preference and per-invocation flags before candidate enumeration:
+
+1. `--no-narrow` forces full PR scope with reason `narrowing-disabled` and skips `gh api` review enumeration entirely.
+2. `--narrow` forces a narrowing attempt even when the configured preference is `false`.
+3. With neither flag, unset and `true` attempt narrowing; only `false` forces full PR scope with reason `narrowing-disabled` and skips `gh api` review enumeration entirely.
+
+Only when narrowing will be attempted, list prior PR reviews and parse each body's GitHub review marker block. Capture command status and stderr separately:
 
 ```bash
-gh api "/repos/{owner}/{repo}/pulls/$PR/reviews"
+REVIEWS_ERROR_FILE=""
+REVIEWS_DIAGNOSTIC=""
+REVIEWS_DISCOVERY_OK=false
+
+if ! REVIEWS_ERROR_FILE=$(mktemp "${TMPDIR:-/tmp}/oat-review-errors.XXXXXX"); then
+  REVIEWS_DIAGNOSTIC="diagnostic-file-unavailable: unable to create a temporary stderr file"
+elif REVIEWS_JSON=$(gh api "/repos/{owner}/{repo}/pulls/$PR/reviews" 2>"$REVIEWS_ERROR_FILE"); then
+  REVIEWS_DISCOVERY_OK=true
+  rm -f -- "$REVIEWS_ERROR_FILE"
+  REVIEWS_ERROR_FILE=""
+else
+  REVIEWS_DIAGNOSTIC=$(dd if="$REVIEWS_ERROR_FILE" bs=500 count=1 2>/dev/null)
+  rm -f -- "$REVIEWS_ERROR_FILE"
+  REVIEWS_ERROR_FILE=""
+fi
 ```
 
-Take the most recent matching review (by submitted timestamp). Before narrowing to `<prior_sha>..<HEAD>`, run the stale-SHA guard (design.md → Error Handling → Stale prior-review SHA):
+Do not run `gh api` when diagnostic-file creation fails. Treat that failure, a nonzero `gh api` result, or a response-level enumeration/parsing failure as discovery failure. Before removing the diagnostic file, preserve at most 500 bytes from stderr. If response parsing later fails, set `REVIEWS_DISCOVERY_OK=false` and put at most 500 characters of the parse error in `REVIEWS_DIAGNOSTIC`. Apply the forced/automatic policy below whenever `REVIEWS_DISCOVERY_OK=false`. Do not treat individual irrelevant or lineage-ineligible marker blocks as response-level failure.
+
+- With forced `--narrow`, discovery failure is a hard error with reason `prior-reviews-unavailable`; report the diagnostic and stop instead of pretending to narrow.
+- On the automatic path, discovery failure fails open to full PR scope with stable reason `prior-reviews-unavailable` plus the diagnostic detail, then continues to review the full PR diff.
+
+After successful enumeration, candidate discovery belongs to this rail: use only marker blocks where `oat_provide_remote: true`, `oat_review_scope == "ad-hoc"`, no `oat_project` key is present, and the invocation is in the ad-hoc lifecycle lineage (`manual` or `auto`). Project-rail, gate, and invocation-less or unknown legacy markers remain unknown and ineligible. This rail has no project-plan or local lifecycle Reviews-table fallback.
+
+Take the most recent eligible marker by submitted timestamp. Candidate discovery and marker provenance remain rail-specific; only after this rail supplies that candidate apply the shared guard, fallback, and classification semantics mirrored by `packages/cli/src/review-remote/narrowing.ts`. When no eligible marker supplies a full 40-character hexadecimal `oat_review_head_sha`, use full PR scope with reason `no-prior-review`. Do not run Git guards for an invalid candidate.
+
+Before accepting `<prior_sha>..<PR_HEAD_SHA>`, run the stale-SHA guard (design.md → Error Handling → Stale prior-review SHA):
 
 Run the guard in the available git context `$GIT_CTX` — `$EPHEMERAL_PATH` in rich-context (checkout) mode, or `$REPO_ROOT` in diff-only mode (where no worktree exists):
 
 1. **Existence:** `git -C "$GIT_CTX" cat-file -e <prior_sha>` (diff-only mode: `git -C "$REPO_ROOT" fetch origin <prior_sha>:refs/oat-prior-review` first, then re-check; if that fetch fails, fall back to full PR scope).
 2. **Ancestry:** `git -C "$GIT_CTX" merge-base --is-ancestor <prior_sha> "$PR_HEAD_SHA"`.
 
-Guard outcomes:
+Guard outcomes and reasons:
 
-- Both pass -> narrow to `<prior_sha>..<HEAD>`.
-- Either fails -> fall back to full PR scope and warn that the prior SHA is unreachable (likely rebase/force-push).
+- Both pass -> narrow to exactly `<prior_sha>..<PR_HEAD_SHA>` with reason `narrowed from guarded prior reviewed head`.
+- Object missing or fetch failure -> fall back to full PR scope with reason `stale-sha` and detail `prior-commit-missing`.
+- Ancestry failure -> fall back to full PR scope with reason `stale-sha` and detail `prior-commit-not-ancestor`.
 - `--narrow` set AND guard fails -> hard error; surface unreachability and stop.
-- `workflow.autoNarrowReReviewScope == true` -> never prompt; guard failure auto-falls back to full scope with the warning as the auto-fallback notice.
-- No matching prior review -> use full PR diff.
+- The automatic path fails open for every candidate or guard failure and preserves the applicable reason.
+
+When a guarded narrow range is accepted, enumerate its changed files with `git diff --name-only "<prior_sha>..<PR_HEAD_SHA>"` and classify it for reporting:
+
+- `empty`: no changed files.
+- `substantive`: any non-empty range. The ad-hoc rail has no active project prefix, so it cannot classify a range as `bookkeeping-only`.
+- If changed-file enumeration fails, conservatively classify as `substantive` and add `changed-files-unavailable` to the reason.
+
+The shared vocabulary remains `empty`, `bookkeeping-only`, or `substantive`; `bookkeeping-only` is reachable only on a project rail with an exact active-project prefix. Classification is reporting-only: it never skips, gates, or shortens the review. Print one narrowing resolution line containing the resolved full-scope or narrow range, classification when narrowed, and the explicit reason. Do not print another narrowing prompt or decision line elsewhere.
 
 ### Step 4: Run the Review (Inline)
 
@@ -233,6 +270,9 @@ Posting failure handling (design.md → Error Handling → Posting failures): on
 Always release the ephemeral worktree in a `finally`, even when review or posting fails:
 
 ```bash
+if [[ -n "${REVIEWS_ERROR_FILE:-}" ]]; then
+  rm -f -- "$REVIEWS_ERROR_FILE"
+fi
 git -C "$REPO_ROOT" worktree remove --force "$EPHEMERAL_PATH" || git -C "$REPO_ROOT" worktree prune
 rm -rf "$EPHEMERAL_PATH"
 ```
@@ -252,7 +292,7 @@ At completion, report:
 
 - PR number and HEAD SHA reviewed.
 - Read mode (worktree checkout vs diff-only).
-- Narrowing decision (full scope vs `<prior_sha>..<HEAD>`, and why).
+- Narrowing decision (full scope vs `<prior_sha>..<PR_HEAD_SHA>`), reporting-only classification when narrowed, and the explicit reason.
 - Severity counts and total findings.
 - Inline-comment count posted vs findings downgraded to the body (out-of-diff).
 - Verdict (`REQUEST_CHANGES` or `COMMENT`).
@@ -263,7 +303,10 @@ At completion, report:
 
 - PR scope resolved and confirmed.
 - PR content acquired via ephemeral worktree (or diff-only fallback) without mutating the caller's working tree.
-- Prior provide-remote reviews detected; re-review narrowing applied only after the stale-SHA guard passes.
+- Prior ad-hoc GitHub markers detected and restricted to the ad-hoc lifecycle lineage; project and gate markers are ineligible, and no project-plan or local Reviews-table fallback is used.
+- Re-review narrowing applies only after the full-SHA, existence, and ancestry guards pass, with explicit fail-open reasons.
+- Unset and `true` narrow automatically, only `false` forces full scope, per-invocation flags retain precedence, and no narrowing prompt remains.
+- Narrowed ranges are classified as `empty` or `substantive` for reporting only; changed-file enumeration failure conservatively reports `substantive`.
 - Findings produced with consistent 4-tier severities and file:line references.
 - Inline comments mapped to in-diff positions; out-of-diff findings downgraded to the body, never dropped.
 - Posted-review body carries the marker block first, correct severity counts, and the minor-fix nudge when minors are present.

package/assets/templates/plan.md

@@ -168,13 +168,19 @@ git commit -m "feat(p01-t02): {description}"
 
 {Keep both code + artifact rows below. Add additional code rows (p03, p04, etc.) as needed, but do not delete `spec`/`design`.}
 
-| Scope  | Type     | Status  | Date | Artifact |
-| ------ | -------- | ------- | ---- | -------- |
-| p01    | code     | pending | -    | -        |
-| p02    | code     | pending | -    | -        |
-| final  | code     | pending | -    | -        |
-| spec   | artifact | pending | -    | -        |
-| design | artifact | pending | -    | -        |
+| Scope  | Type     | Status  | Date | Artifact | Reviewed Head | Invocation | Gate Target |
+| ------ | -------- | ------- | ---- | -------- | ------------- | ---------- | ----------- |
+| p01    | code     | pending | -    | -        | -             | -          | -           |
+| p02    | code     | pending | -    | -        | -             | -          | -           |
+| final  | code     | pending | -    | -        | -             | -          | -           |
+| spec   | artifact | pending | -    | -        | -             | -          | -           |
+| design | artifact | pending | -    | -        | -             | -          | -           |
+
+For code-review events, `Reviewed Head` is the full 40-character SHA at the
+head of the reviewed range. `Invocation` records `manual`, `auto`, or `gate`;
+`Gate Target` is populated only for gate events. Legacy five-column rows remain
+valid. Writers must preserve every existing row and every unknown trailing
+cell; never truncate a widened row back to five columns.
 
 **Status values:** `pending` → `received` → `fixes_added` → `fixes_completed` → `passed`
 

package/dist/commands/config/index.js

@@ -508,7 +508,7 @@ const CONFIG_CATALOG = [
         defaultValue: 'unset',
         mutability: 'read/write',
         owningCommand: 'oat config set workflow.hillCheckpointDefault <value>',
-        description: 'Default HiLL checkpoint behavior in oat-project-implement: "every" pauses after every phase, "final" pauses only after the last phase. When unset, the skill prompts. Resolution: env > local > shared > user > default.',
+        description: 'Default HiLL checkpoint behavior in oat-project-implement: "every" pauses after every phase, "final" pauses only after the last phase. When unset, the skill prompts. Resolution: local > shared > user > default.',
     },
     {
         key: 'workflow.archiveOnComplete',
@@ -519,7 +519,7 @@ const CONFIG_CATALOG = [
         defaultValue: 'unset',
         mutability: 'read/write',
         owningCommand: 'oat config set workflow.archiveOnComplete <true|false>',
-        description: 'Skip the "Archive after completion?" prompt in oat-project-complete. When unset, the skill prompts. Resolution: env > local > shared > user > default.',
+        description: 'Skip the "Archive after completion?" prompt in oat-project-complete. When unset, the skill prompts. Resolution: local > shared > user > default.',
     },
     {
         key: 'workflow.createPrOnComplete',
@@ -530,7 +530,7 @@ const CONFIG_CATALOG = [
         defaultValue: 'unset',
         mutability: 'read/write',
         owningCommand: 'oat config set workflow.createPrOnComplete <true|false>',
-        description: 'Skip the "Open a PR?" prompt in oat-project-complete. When true, completion auto-triggers PR creation. Resolution: env > local > shared > user > default.',
+        description: 'Skip the "Open a PR?" prompt in oat-project-complete. When true, completion auto-triggers PR creation. Resolution: local > shared > user > default.',
     },
     {
         key: 'workflow.postImplementSequence',
@@ -541,7 +541,7 @@ const CONFIG_CATALOG = [
         defaultValue: 'unset',
         mutability: 'read/write',
         owningCommand: "oat config set workflow.postImplementSequence '<legacy-or-json>'",
-        description: 'Default post-implementation chaining. Legacy strings remain supported unchanged. Structured JSON uses {"preApproval":[...],"postApproval":[...]} with the canonical sequence steps. Plain get/list/dump output serializes structured values as compact JSON; get --json preserves the object value. When unset, the skill prompts. Resolution: env > local > shared > user > default.',
+        description: 'Default post-implementation chaining. Legacy strings remain supported unchanged. Structured JSON uses {"preApproval":[...],"postApproval":[...]} with the canonical sequence steps. Plain get/list/dump output serializes structured values as compact JSON; get --json preserves the object value. When unset, the skill prompts. Resolution: local > shared > user > default.',
     },
     {
         key: 'workflow.reviewExecutionModel',
@@ -552,7 +552,7 @@ const CONFIG_CATALOG = [
         defaultValue: 'unset',
         mutability: 'read/write',
         owningCommand: 'oat config set workflow.reviewExecutionModel <value>',
-        description: 'Default execution model for the final review step in oat-project-implement: "subagent" dispatches a review subagent, "inline" runs the review in-context, "fresh-session" prints guidance for running the review in a separate session (with an escape hatch to subagent/inline). When unset, the skill prompts. Resolution: env > local > shared > user > default.',
+        description: 'Default execution model for the final review step in oat-project-implement: "subagent" dispatches a review subagent, "inline" runs the review in-context, "fresh-session" prints guidance for running the review in a separate session (with an escape hatch to subagent/inline). When unset, the skill prompts. Resolution: local > shared > user > default.',
     },
     {
         key: 'workflow.autoReviewAtHillCheckpoints',
@@ -563,7 +563,7 @@ const CONFIG_CATALOG = [
         defaultValue: 'unset',
         mutability: 'read/write',
         owningCommand: 'oat config set workflow.autoReviewAtHillCheckpoints <true|false>',
-        description: 'Automatically run the extra lifecycle review when a HiLL checkpoint is reached. This does not control Tier 1 per-phase oat-reviewer gates. When unset, the skill prompts. Resolution: env > local > shared > user > legacy autoReviewAtCheckpoints > default.',
+        description: 'Automatically run the extra lifecycle review when a HiLL checkpoint is reached. This does not control Tier 1 per-phase oat-reviewer gates. When unset, the skill prompts. Resolution: local > shared > user > legacy autoReviewAtCheckpoints > default.',
     },
     {
         key: 'workflow.autoNarrowReReviewScope',
@@ -571,10 +571,10 @@ const CONFIG_CATALOG = [
         file: '.oat/config.local.json | .oat/config.json | ~/.oat/config.json',
         scope: 'workflow',
         type: 'boolean',
-        defaultValue: 'unset',
+        defaultValue: 'true',
         mutability: 'read/write',
         owningCommand: 'oat config set workflow.autoNarrowReReviewScope <true|false>',
-        description: 'Auto-narrow re-review scope to fix-task commits in oat-project-review-provide when re-reviewing completed fix tasks. Has no effect on initial reviews (there is nothing to narrow to). When unset, the skill prompts. Resolution: env > local > shared > user > default.',
+        description: 'Automatically narrows re-review scope to changes since the prior same-lineage review. Narrowing is enabled by default; false opts out to full scope. Has no effect on initial reviews (there is nothing to narrow to). Resolution: local > shared > user > default.',
     },
     {
         key: 'workflow.autoArtifactReview.plan',

package/dist/commands/gate/child-process.d.ts

@@ -0,0 +1,32 @@
+import type { GateActivityEvidence, GateActivityProbe, GateActivityProbeStatus } from './activity-probes.js';
+export interface ProcessRunOptions {
+    activityProbe?: GateActivityProbe;
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    livenessIntervalMs?: number;
+    onLiveness?: (snapshot: GateLivenessSnapshot) => void;
+    purpose: 'host-detection' | 'availability' | 'execute';
+    stdin: 'ignore' | 'inherit';
+    stdio: 'ignore' | 'inherit' | 'pipe';
+    stdoutDestination?: 'stdout' | 'stderr';
+    timeoutMs: number;
+}
+export interface ProcessRunResult {
+    activityEvidence?: GateActivityEvidence;
+    exitCode: number;
+    refusal?: string;
+    stderrBytes: number;
+    stdoutBytes: number;
+    timedOut?: boolean;
+}
+export interface GateLivenessSnapshot {
+    elapsedMs: number;
+    hardBudgetMs: number;
+    idleMs: number;
+    processAlive: boolean;
+    activityProbeStatus?: GateActivityProbeStatus;
+    lastActivityEvidence?: GateActivityEvidence;
+}
+export declare function runChildProcess(command: string, args: string[], options: ProcessRunOptions): Promise<ProcessRunResult>;
+export declare function extractStructuredRefusal(output: string): string | undefined;
+//# sourceMappingURL=child-process.d.ts.map

package/dist/commands/gate/child-process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-process.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/child-process.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,oBAAoB,EACpB,iBAAiB,EACjB,uBAAuB,EACxB,MAAM,mBAAmB,CAAC;AAS3B,MAAM,WAAW,iBAAiB;IAChC,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,oBAAoB,KAAK,IAAI,CAAC;IACtD,OAAO,EAAE,gBAAgB,GAAG,cAAc,GAAG,SAAS,CAAC;IACvD,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC5B,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,iBAAiB,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,OAAO,CAAC;IACtB,mBAAmB,CAAC,EAAE,uBAAuB,CAAC;IAC9C,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;CAC7C;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,gBAAgB,CAAC,CAgN3B;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG3E"}

package/dist/commands/gate/child-process.js

@@ -0,0 +1,210 @@
+import { spawn } from 'node:child_process';
+// Keep these safety bounds fixed rather than environment-tunable. In particular,
+// changing the force-kill fallback would alter the hard-timeout contract.
+// Revisit the observation grace only if field evidence shows large transcript
+// directories routinely exceed it.
+const FORCE_KILL_GRACE_MS = 5_000;
+const ACTIVITY_OBSERVATION_GRACE_MS = 1_000;
+export async function runChildProcess(command, args, options) {
+    return new Promise((resolve, reject) => {
+        let timedOut = false;
+        let suppressLiveness = false;
+        let killTimeout = null;
+        let stderrBytes = 0;
+        let stdoutBytes = 0;
+        let refusal;
+        let stdoutLineBuffer = '';
+        let stderrLineBuffer = '';
+        let latestActivityEvidence;
+        let latestActivityProbeStatus;
+        let activityObservationSequence = 0;
+        let latestActivityEvidenceSequence = 0;
+        let livenessProbePending = false;
+        let pendingPeriodicObservation;
+        let finalActivityObservation;
+        const startedAt = Date.now();
+        let lastActivityAt = startedAt;
+        const child = spawn(command, args, {
+            cwd: options.cwd,
+            env: options.env,
+            stdio: options.stdio === 'pipe'
+                ? [options.stdin, 'pipe', 'pipe']
+                : options.stdio,
+        });
+        const recordActivity = () => {
+            lastActivityAt = Date.now();
+        };
+        const scanChunk = (buffer, chunk) => {
+            const combined = buffer + chunk.toString('utf8');
+            const lines = combined.split('\n');
+            const remainder = lines.pop() ?? '';
+            if (!refusal) {
+                for (const line of lines) {
+                    refusal = extractStructuredRefusal(line.replace(/\r$/, ''));
+                    if (refusal) {
+                        break;
+                    }
+                }
+            }
+            return remainder;
+        };
+        child.stdout?.on('data', (chunk) => {
+            stdoutBytes += chunk.byteLength;
+            stdoutLineBuffer = scanChunk(stdoutLineBuffer, chunk);
+            recordActivity();
+            const destination = options.stdoutDestination === 'stderr'
+                ? process.stderr
+                : process.stdout;
+            destination.write(chunk);
+        });
+        child.stderr?.on('data', (chunk) => {
+            stderrBytes += chunk.byteLength;
+            stderrLineBuffer = scanChunk(stderrLineBuffer, chunk);
+            recordActivity();
+            process.stderr.write(chunk);
+        });
+        const processAlive = () => {
+            if (child.pid === undefined)
+                return false;
+            try {
+                process.kill(child.pid, 0);
+                return true;
+            }
+            catch {
+                return false;
+            }
+        };
+        const observeActivity = async (observedAt) => {
+            if (!options.activityProbe)
+                return undefined;
+            const sequence = ++activityObservationSequence;
+            try {
+                const activityProbeStatus = await options.activityProbe.observe(observedAt);
+                const evidence = activityProbeStatus.evidence;
+                if (evidence && sequence > latestActivityEvidenceSequence) {
+                    latestActivityEvidence = evidence;
+                    latestActivityEvidenceSequence = sequence;
+                }
+                return activityProbeStatus;
+            }
+            catch {
+                // Activity evidence is diagnostic only. Preserve the last valid sample.
+                return undefined;
+            }
+        };
+        const settleWithinActivityGrace = (observation) => new Promise((resolveObservation) => {
+            // Keep this timer referenced so a closed child cannot end the process
+            // before the bounded diagnostic observation settles.
+            const graceTimeout = setTimeout(resolveObservation, ACTIVITY_OBSERVATION_GRACE_MS);
+            const settle = () => {
+                clearTimeout(graceTimeout);
+                resolveObservation();
+            };
+            void observation.then(settle, settle);
+        });
+        const livenessInterval = options.onLiveness && options.livenessIntervalMs
+            ? setInterval(() => {
+                if (livenessProbePending)
+                    return;
+                livenessProbePending = true;
+                const now = Date.now();
+                const observation = (async () => {
+                    const activityProbeStatus = await observeActivity(now);
+                    if (activityProbeStatus) {
+                        latestActivityProbeStatus = activityProbeStatus;
+                    }
+                    if (suppressLiveness)
+                        return;
+                    options.onLiveness?.({
+                        elapsedMs: now - startedAt,
+                        hardBudgetMs: options.timeoutMs,
+                        idleMs: now - lastActivityAt,
+                        processAlive: processAlive(),
+                        ...(latestActivityProbeStatus
+                            ? { activityProbeStatus: latestActivityProbeStatus }
+                            : {}),
+                        ...(latestActivityEvidence
+                            ? { lastActivityEvidence: latestActivityEvidence }
+                            : {}),
+                    });
+                })();
+                pendingPeriodicObservation = observation;
+                const clearPending = () => {
+                    if (pendingPeriodicObservation === observation) {
+                        pendingPeriodicObservation = undefined;
+                    }
+                    livenessProbePending = false;
+                };
+                void observation.then(clearPending, clearPending);
+            }, options.livenessIntervalMs)
+            : null;
+        livenessInterval?.unref();
+        const timeout = setTimeout(() => {
+            timedOut = true;
+            suppressLiveness = true;
+            if (livenessInterval) {
+                clearInterval(livenessInterval);
+            }
+            child.kill('SIGTERM');
+            killTimeout = setTimeout(() => {
+                child.kill('SIGKILL');
+            }, FORCE_KILL_GRACE_MS);
+            killTimeout.unref();
+            finalActivityObservation = observeActivity(Date.now());
+        }, options.timeoutMs);
+        timeout.unref();
+        child.on('error', (error) => {
+            clearTimeout(timeout);
+            if (livenessInterval) {
+                clearInterval(livenessInterval);
+            }
+            if (killTimeout) {
+                clearTimeout(killTimeout);
+            }
+            reject(error);
+        });
+        child.on('close', (code) => {
+            suppressLiveness = true;
+            clearTimeout(timeout);
+            if (livenessInterval) {
+                clearInterval(livenessInterval);
+            }
+            if (killTimeout) {
+                clearTimeout(killTimeout);
+            }
+            void (async () => {
+                if (finalActivityObservation) {
+                    const periodicObservation = pendingPeriodicObservation;
+                    const finalThenFallback = finalActivityObservation.then(async (activityProbeStatus) => {
+                        if (!activityProbeStatus?.evidence && periodicObservation) {
+                            await periodicObservation;
+                        }
+                    });
+                    await settleWithinActivityGrace(finalThenFallback);
+                }
+                else if (pendingPeriodicObservation) {
+                    // Preserve evidence already in flight on a normal close. This can add
+                    // up to the bounded grace to an otherwise successful execution.
+                    await settleWithinActivityGrace(pendingPeriodicObservation);
+                }
+                refusal ??=
+                    extractStructuredRefusal(stdoutLineBuffer.replace(/\r$/, '')) ??
+                        extractStructuredRefusal(stderrLineBuffer.replace(/\r$/, ''));
+                resolve({
+                    ...(latestActivityEvidence
+                        ? { activityEvidence: latestActivityEvidence }
+                        : {}),
+                    exitCode: timedOut ? 124 : (code ?? 1),
+                    ...(refusal ? { refusal } : {}),
+                    stderrBytes,
+                    stdoutBytes,
+                    ...(timedOut ? { timedOut: true } : {}),
+                });
+            })();
+        });
+    });
+}
+export function extractStructuredRefusal(output) {
+    const match = output.match(/^OAT_GATE_REFUSAL: (.*)$/m);
+    return match?.[1]?.replace(/\r$/, '');
+}

package/dist/commands/gate/index.d.ts

@@ -5,8 +5,9 @@ import { type ResolvedConfig } from '../../config/resolve.js';
 import { type ModelFamily } from '../../providers/identity/family.js';
 import { type IdentityConfidence, type IdentityProvenance } from '../../providers/identity/provenance.js';
 import { Command } from 'commander';
-import { createGateActivityProbe, type GateActivityEvidence, type GateActivityProbe, type GateActivityProbeStatus } from './activity-probes.js';
+import { createGateActivityProbe } from './activity-probes.js';
 import { createBranchLocalGateCli, currentGateCliLaunch, readGateRouteReceipt, removeBranchLocalGateCli } from './branch-local-cli.js';
+import { type ProcessRunOptions, type ProcessRunResult } from './child-process.js';
 import { parseReviewGateVerdict } from './review-verdict.js';
 interface GateCommandDependencies {
     buildCommandContext: (options: GlobalOptions) => CommandContext;
@@ -31,36 +32,6 @@ interface GateCommandDependencies {
     removeGateRunMarker: (path: string, warn: (message: string) => void) => Promise<void>;
     writeDiagnostic: (message: string) => void;
 }
-interface ProcessRunOptions {
-    activityProbe?: GateActivityProbe;
-    cwd: string;
-    env: NodeJS.ProcessEnv;
-    livenessIntervalMs?: number;
-    onLiveness?: (snapshot: GateLivenessSnapshot) => void;
-    purpose: 'host-detection' | 'availability' | 'execute';
-    stdin: 'ignore' | 'inherit';
-    stdio: 'ignore' | 'inherit' | 'pipe';
-    stdoutDestination?: 'stdout' | 'stderr';
-    timeoutMs: number;
-}
-interface ProcessRunResult {
-    activityEvidence?: GateActivityEvidence;
-    activityProbeStatus?: GateActivityProbeStatus;
-    capturedOutput?: string;
-    exitCode: number;
-    refusal?: string;
-    stderrBytes: number;
-    stdoutBytes: number;
-    timedOut?: boolean;
-}
-interface GateLivenessSnapshot {
-    elapsedMs: number;
-    hardBudgetMs: number;
-    idleMs: number;
-    processAlive: boolean;
-    activityProbeStatus?: GateActivityProbeStatus;
-    lastActivityEvidence?: GateActivityEvidence;
-}
 type GateTimeoutSource = 'cli' | 'target' | 'config' | 'env' | 'scope-default' | 'default';
 interface GateRunMarker {
     runId: string;

package/dist/commands/gate/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAShE,OAAO,EAWL,KAAK,UAAU,EAIf,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EAEhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAC;AAWzB,OAAO,EAEL,KAAK,WAAW,EACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EAExB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EACL,uBAAuB,EACvB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EAEzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,sBAAsB,EAIvB,MAAM,kBAAkB,CAAC;AAG1B,UAAU,uBAAuB;IAC/B,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClE,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,KACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,wBAAwB,EAAE,OAAO,wBAAwB,CAAC;IAC1D,oBAAoB,EAAE,OAAO,oBAAoB,CAAC;IAClD,wBAAwB,EAAE,OAAO,wBAAwB,CAAC;IAC1D,oBAAoB,EAAE,OAAO,oBAAoB,CAAC;IAClD,UAAU,EAAE,CACV,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,iBAAiB,KACvB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/B,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IACtD,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;IAC9B,kBAAkB,EAAE,CAClB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,KAC5B,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,mBAAmB,EAAE,CACnB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,KAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,eAAe,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5C;AA+CD,UAAU,iBAAiB;IACzB,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,oBAAoB,KAAK,IAAI,CAAC;IACtD,OAAO,EAAE,gBAAgB,GAAG,cAAc,GAAG,SAAS,CAAC;IACvD,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC5B,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,iBAAiB,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,gBAAgB;IACxB,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;IACxC,mBAAmB,CAAC,EAAE,uBAAuB,CAAC;IAC9C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,UAAU,oBAAoB;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,OAAO,CAAC;IACtB,mBAAmB,CAAC,EAAE,uBAAuB,CAAC;IAC9C,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;CAC7C;AAED,KAAK,iBAAiB,GAClB,KAAK,GACL,QAAQ,GACR,QAAQ,GACR,KAAK,GACL,eAAe,GACf,SAAS,CAAC;AAOd,UAAU,aAAa;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,iBAAiB,CAAC;CACjC;AAcD,KAAK,kBAAkB,GAAG,aAAa,GAAG,cAAc,GAAG,MAAM,CAAC;AAClE,KAAK,qBAAqB,GACtB,kBAAkB,GAClB,4BAA4B,GAC5B,2CAA2C,GAC3C,kBAAkB,CAAC;AA4BvB,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,UAAU,oBAAoB;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,kBAAkB,CAAC;IAC/B,UAAU,EAAE,kBAAkB,CAAC;IAC/B,MAAM,EAAE,WAAW,CAAC;IACpB,aAAa,EAAE,WAAW,EAAE,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,mBAAmB,GAAG,aAAa,GAAG,SAAS,CAAC;CAC5E;AAED,UAAU,qBAAqB;IAC7B,KAAK,EAAE,kBAAkB,CAAC;IAC1B,QAAQ,EAAE,qBAAqB,CAAC;IAChC,QAAQ,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,kBAAkB,CAAC;QAC/B,UAAU,EAAE,kBAAkB,CAAC;QAC/B,MAAM,EAAE,WAAW,CAAC;QACpB,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACvC,aAAa,EAAE,WAAW,EAAE,CAAC;QAC7B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,QAAQ,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,WAAW,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAu7CD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,EAC9C,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,kBAAkB,EACzB,gBAAgB,CAAC,EAAE,oBAAoB,GACtC,kBAAkB,GAAG,IAAI,CAS3B;AA49DD,wBAAgB,iBAAiB,CAC/B,SAAS,GAAE,OAAO,CAAC,uBAAuB,CAAM,GAC/C,OAAO,CA4NT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAShE,OAAO,EAWL,KAAK,UAAU,EAIf,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EAEhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAC;AAWzB,OAAO,EAEL,KAAK,WAAW,EACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EAExB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EACL,uBAAuB,EAExB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EAEzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,sBAAsB,EAIvB,MAAM,kBAAkB,CAAC;AAG1B,UAAU,uBAAuB;IAC/B,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClE,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,KACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,wBAAwB,EAAE,OAAO,wBAAwB,CAAC;IAC1D,oBAAoB,EAAE,OAAO,oBAAoB,CAAC;IAClD,wBAAwB,EAAE,OAAO,wBAAwB,CAAC;IAC1D,oBAAoB,EAAE,OAAO,oBAAoB,CAAC;IAClD,UAAU,EAAE,CACV,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,iBAAiB,KACvB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/B,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IACtD,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;IAC9B,kBAAkB,EAAE,CAClB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,KAC5B,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,mBAAmB,EAAE,CACnB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,KAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,eAAe,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5C;AA+CD,KAAK,iBAAiB,GAClB,KAAK,GACL,QAAQ,GACR,QAAQ,GACR,KAAK,GACL,eAAe,GACf,SAAS,CAAC;AAOd,UAAU,aAAa;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,iBAAiB,CAAC;CACjC;AAcD,KAAK,kBAAkB,GAAG,aAAa,GAAG,cAAc,GAAG,MAAM,CAAC;AAClE,KAAK,qBAAqB,GACtB,kBAAkB,GAClB,4BAA4B,GAC5B,2CAA2C,GAC3C,kBAAkB,CAAC;AA4BvB,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,UAAU,oBAAoB;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,kBAAkB,CAAC;IAC/B,UAAU,EAAE,kBAAkB,CAAC;IAC/B,MAAM,EAAE,WAAW,CAAC;IACpB,aAAa,EAAE,WAAW,EAAE,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,mBAAmB,GAAG,aAAa,GAAG,SAAS,CAAC;CAC5E;AAED,UAAU,qBAAqB;IAC7B,KAAK,EAAE,kBAAkB,CAAC;IAC1B,QAAQ,EAAE,qBAAqB,CAAC;IAChC,QAAQ,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,kBAAkB,CAAC;QAC/B,UAAU,EAAE,kBAAkB,CAAC;QAC/B,MAAM,EAAE,WAAW,CAAC;QACpB,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACvC,aAAa,EAAE,WAAW,EAAE,CAAC;QAC7B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,QAAQ,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,WAAW,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA+xCD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,EAC9C,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,kBAAkB,EACzB,gBAAgB,CAAC,EAAE,oBAAoB,GACtC,kBAAkB,GAAG,IAAI,CAS3B;AAy/DD,wBAAgB,iBAAiB,CAC/B,SAAS,GAAE,OAAO,CAAC,uBAAuB,CAAM,GAC/C,OAAO,CA4NT"}