@quickchatai/pi-quickreview 0.0.0-stage → 1.2.0

package/dist/src/profilelookup.d.ts

@@ -0,0 +1,59 @@
+/** Whether `name` is a plain path segment — the one admission rule behind
+ * `assertPathSegment` and every listing that skips what it would refuse. */
+export declare function isPathSegment(name: string): boolean;
+/** Refuse a name that could escape its parent directory. `kind` names what the
+ * segment is for, so the error says which knob is wrong. */
+export declare function assertPathSegment(kind: string, name: string): string;
+/** The directory, in every home, that holds one subdirectory per profile. */
+export declare const PROFILES_DIR = "profiles";
+/**
+ * The checkout's generic profiles — the ones that belong to the app, not to
+ * any install: the examples, and `default`, the shipped behaviour every
+ * generated profile extends. They are the only profiles the lookup reads
+ * from the checkout. Any other directory under the checkout's `profiles/` is
+ * an install's own profile stranded in its old place: never read, and
+ * `qcr install migrate` moves it into the config home. A new example is
+ * registered here (a test holds the checkout to it, and the shell mirror's
+ * `QCR_EXAMPLE_PROFILES` to this list).
+ */
+export declare const EXAMPLE_PROFILES: readonly string[];
+/** Which search place a profile was found in. */
+export type ProfileSource = "home" | "override" | "checkout";
+/** One place profiles are looked up in. */
+export interface ProfilePlace {
+    dir: string;
+    source: ProfileSource;
+}
+/** Every search place, in order, deduplicated (the first place a directory
+ * is reached by names its source): the `homes`, then the checkout's. */
+export declare function profileSearchPlaces(root: string, homes: readonly ProfilePlace[]): ProfilePlace[];
+export interface LocatedProfile {
+    name: string;
+    dir: string;
+    source: ProfileSource;
+}
+export declare function isDirectory(path: string): boolean;
+/**
+ * Find the named profile: the first search place that holds it as a
+ * directory — the checkout only for a generic example — or `null` when none
+ * does (each loader words its own not-found). The name is a plain path
+ * segment or a throw — `../x`, `a/b` and kin never reach a join.
+ */
+export declare function findProfile(opts: {
+    root: string;
+    profile: string;
+    homes: readonly ProfilePlace[];
+    isDir?: (path: string) => boolean;
+}): LocatedProfile | null;
+/**
+ * The checkout's `profiles/<name>` when it is an install's own profile left
+ * there (not a generic example) — stranded, never read. Only for a
+ * not-found to name `qcr install migrate`; null when there is none, or when
+ * one of the `homes` is the checkout's `profiles/` (then it was read).
+ */
+export declare function strandedProfile(opts: {
+    root: string;
+    profile: string;
+    homes: readonly ProfilePlace[];
+}): string | null;
+//# sourceMappingURL=profilelookup.d.ts.map

package/dist/src/profilelookup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profilelookup.d.ts","sourceRoot":"","sources":["../../src/profilelookup.ts"],"names":[],"mappings":"AAmBA;4EAC4E;AAC5E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED;4DAC4D;AAC5D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAOpE;AAED,6EAA6E;AAC7E,eAAO,MAAM,YAAY,aAAa,CAAC;AAEvC;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAM7C,CAAC;AAEF,iDAAiD;AACjD,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CAAC;AAE7D,2CAA2C;AAC3C,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,aAAa,CAAC;CACvB;AAED;wEACwE;AACxE,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,YAAY,EAAE,GAAG,YAAY,EAAE,CAGhG;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMjD;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;IAC/B,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CACnC,GAAG,cAAc,GAAG,IAAI,CASxB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;CAChC,GAAG,MAAM,GAAG,IAAI,CAYhB"}

package/dist/src/profilelookup.js

@@ -0,0 +1,98 @@
+// Where a repo profile is found, given the places to look. Pure over its
+// inputs: the profile directories outside the checkout (the install's homes)
+// are an explicit argument, resolved by the caller (src/homes.ts
+// `homeProfilePlaces` from the environment), so the review core never reads
+// the environment or a home itself.
+//
+// The search order (the first place that holds the profile wins):
+//   1. the install's config home — `<home>/profiles/`
+//   2. `profiles/` beside `$QCR_CONFIG`, when it is set (the compose route's
+//      mounted config home; the VM's shipped one; the bench image's)
+//   3. the checkout's `profiles/` — the generic examples only
+// Places 1 and 2 are the caller's `homes`; place 3 is `<root>/profiles`.
+import { statSync } from "node:fs";
+import { join } from "node:path";
+/** A single path segment an install or a profile may be named by.
+ * No separators, no leading dot, so `..` and `a/../../b` are unspellable. */
+const SEGMENT_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
+/** Whether `name` is a plain path segment — the one admission rule behind
+ * `assertPathSegment` and every listing that skips what it would refuse. */
+export function isPathSegment(name) {
+    return SEGMENT_RE.test(name) && !name.includes("..");
+}
+/** Refuse a name that could escape its parent directory. `kind` names what the
+ * segment is for, so the error says which knob is wrong. */
+export function assertPathSegment(kind, name) {
+    if (!isPathSegment(name)) {
+        throw new Error(`${kind} ${JSON.stringify(name)} is not a plain name — letters, digits, '.', '_' and '-' only, no path separators or '..'`);
+    }
+    return name;
+}
+/** The directory, in every home, that holds one subdirectory per profile. */
+export const PROFILES_DIR = "profiles";
+/**
+ * The checkout's generic profiles — the ones that belong to the app, not to
+ * any install: the examples, and `default`, the shipped behaviour every
+ * generated profile extends. They are the only profiles the lookup reads
+ * from the checkout. Any other directory under the checkout's `profiles/` is
+ * an install's own profile stranded in its old place: never read, and
+ * `qcr install migrate` moves it into the config home. A new example is
+ * registered here (a test holds the checkout to it, and the shell mirror's
+ * `QCR_EXAMPLE_PROFILES` to this list).
+ */
+export const EXAMPLE_PROFILES = [
+    "default",
+    "example-django",
+    "minimal",
+    "snappy",
+    "fast",
+];
+/** Every search place, in order, deduplicated (the first place a directory
+ * is reached by names its source): the `homes`, then the checkout's. */
+export function profileSearchPlaces(root, homes) {
+    const places = [...homes, { dir: join(root, PROFILES_DIR), source: "checkout" }];
+    return places.filter((p, i) => places.findIndex((q) => q.dir === p.dir) === i);
+}
+export function isDirectory(path) {
+    try {
+        return statSync(path).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Find the named profile: the first search place that holds it as a
+ * directory — the checkout only for a generic example — or `null` when none
+ * does (each loader words its own not-found). The name is a plain path
+ * segment or a throw — `../x`, `a/b` and kin never reach a join.
+ */
+export function findProfile(opts) {
+    const name = assertPathSegment("profile", opts.profile);
+    const isDir = opts.isDir ?? isDirectory;
+    for (const place of profileSearchPlaces(opts.root, opts.homes)) {
+        if (place.source === "checkout" && !EXAMPLE_PROFILES.includes(name))
+            continue;
+        const dir = join(place.dir, name);
+        if (isDir(dir))
+            return { name, dir, source: place.source };
+    }
+    return null;
+}
+/**
+ * The checkout's `profiles/<name>` when it is an install's own profile left
+ * there (not a generic example) — stranded, never read. Only for a
+ * not-found to name `qcr install migrate`; null when there is none, or when
+ * one of the `homes` is the checkout's `profiles/` (then it was read).
+ */
+export function strandedProfile(opts) {
+    const name = assertPathSegment("profile", opts.profile);
+    if (EXAMPLE_PROFILES.includes(name))
+        return null;
+    const checkout = join(opts.root, PROFILES_DIR);
+    if (!profileSearchPlaces(opts.root, opts.homes).some((p) => p.dir === checkout && p.source === "checkout"))
+        return null;
+    const dir = join(checkout, name);
+    return isDirectory(dir) ? dir : null;
+}
+//# sourceMappingURL=profilelookup.js.map

package/dist/src/profilelookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profilelookup.js","sourceRoot":"","sources":["../../src/profilelookup.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,6EAA6E;AAC7E,iEAAiE;AACjE,4EAA4E;AAC5E,oCAAoC;AACpC,EAAE;AACF,kEAAkE;AAClE,sDAAsD;AACtD,6EAA6E;AAC7E,qEAAqE;AACrE,8DAA8D;AAC9D,yEAAyE;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;6EAC6E;AAC7E,MAAM,UAAU,GAAG,mCAAmC,CAAC;AAEvD;4EAC4E;AAC5E,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC;AAED;4DAC4D;AAC5D,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,IAAY;IAC1D,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,2FAA2F,CAC3H,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,YAAY,GAAG,UAAU,CAAC;AAEvC;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,SAAS;IACT,gBAAgB;IAChB,SAAS;IACT,QAAQ;IACR,MAAM;CACP,CAAC;AAWF;wEACwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAA8B;IAC9E,MAAM,MAAM,GAAmB,CAAC,GAAG,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACjG,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACjF,CAAC;AAQD,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,IAK3B;IACC,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAI/B;IACC,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC/C,IACE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAC9C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,CACrD;QAED,OAAO,IAAI,CAAC;IACd,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACjC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC"}

package/dist/src/profileoverrides.d.ts

@@ -0,0 +1,91 @@
+import { type ProfileLookup } from "./profiles.js";
+/** The directory in the repo that holds the repo profile. */
+export declare const REPO_PROFILE_DIR = ".qcr";
+/** Where a replacement came from. */
+export type OverrideOrigin = "user" | "repo";
+/** One directory of override files, `agents/` and `prompts/` under it. */
+export interface OverrideLayer {
+    origin: OverrideOrigin;
+    /** The profile's name (`.qcr` for the repo profile). */
+    name: string;
+    dir: string;
+}
+/** One shipped file a layer replaced with different bytes. */
+export interface OverrideRecord {
+    /** The shipped file, relative to the app root: `agents/pass-security.md`. */
+    path: string;
+    origin: OverrideOrigin;
+    /** The profile whose file won. */
+    layer: string;
+    /** sha256 of the replacement. */
+    sha256: string;
+    /** sha256 of the shipped file. */
+    shipped_sha256: string;
+    /** Whether the shipped file is one of the frozen seeds (AGENTS.md invariant 3). */
+    seed: boolean;
+}
+export interface Customisation {
+    customised: boolean;
+    overrides: OverrideRecord[];
+}
+export interface OverrideSet {
+    /** Lowest precedence first: the repo profile, then the user's chain. */
+    layers: OverrideLayer[];
+    /** What a layer carried that was not applied, one line each. */
+    ignored: string[];
+    /** The loaders' view of the same layers (packages/pi-plugin/src/profiles.ts). */
+    lookup: ProfileLookup;
+}
+/** The seed manifest's `path → sha256`, or null when the install ships none
+ * (then a shipped file is compared by its own hash). Never throws. */
+export declare function loadSeedManifest(root: string): Record<string, string> | null;
+/**
+ * Extract the repo profile from `ref` (a commit, the review's BASE) into
+ * `destDir`, reading git objects only: the working tree and the PR head are
+ * never consulted. Only the files in `REPO_FILE_RE` come out, as regular
+ * blobs under the size caps; a symlink, a submodule, an oversized file and
+ * anything outside the list is dropped and named in `ignored`. `dir` is null
+ * when the base has no `.qcr/` (or nothing in it a repo may carry).
+ */
+export declare function extractRepoProfile(o: {
+    gitDir: string;
+    ref: string;
+    destDir: string;
+}): {
+    dir: string | null;
+    ignored: string[];
+};
+/**
+ * The override layers of one run: the repo profile (when `repo` names a git
+ * dir and a base commit) under the user's named profile and everything it
+ * extends. Files with no shipped namesake apply to nothing and are reported.
+ */
+export declare function resolveOverrides(o: {
+    root: string;
+    /** `[review] profile`; "" is no named profile. */
+    profile: string;
+    lookup?: ProfileLookup;
+    repo?: {
+        gitDir: string;
+        baseRef: string;
+        destDir: string;
+    };
+}): OverrideSet;
+/** Whether any layer carries a file that replaces a shipped one. */
+export declare function hasOverrideFiles(root: string, set: OverrideSet): boolean;
+/**
+ * The `readFile` for `buildAgents` and the prompt renderers: a shipped
+ * `agents/` or `prompts/` file under `root` reads from the winning layer when
+ * one carries it, and everything else reads as usual. Undefined when no layer
+ * replaces anything, so callers that pass it through change nothing.
+ */
+export declare function overrideReader(root: string, set: OverrideSet): ((p: string) => string) | undefined;
+/**
+ * Which shipped files this run's layers replaced with different bytes. The
+ * shipped hash is the seed manifest's for a seed, else the file's own. A
+ * run with no replacement returns at once, without reading the manifest.
+ */
+export declare function assessOverrides(root: string, set: OverrideSet): Customisation;
+/** The line a report footer and the terminal carry for a customised run. */
+export declare function customisedNote(c: Customisation): string;
+//# sourceMappingURL=profileoverrides.d.ts.map

package/dist/src/profileoverrides.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profileoverrides.d.ts","sourceRoot":"","sources":["../../src/profileoverrides.ts"],"names":[],"mappings":"AA+CA,OAAO,EAAwC,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAEzF,6DAA6D;AAC7D,eAAO,MAAM,gBAAgB,SAAkB,CAAC;AAEhD,qCAAqC;AACrC,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,CAAC;AAE7C,0EAA0E;AAC1E,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,cAAc,CAAC;IACvB,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAED,8DAA8D;AAC9D,MAAM,WAAW,cAAc;IAC7B,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,cAAc,CAAC;IACvB,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,mFAAmF;IACnF,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,cAAc,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,wEAAwE;IACxE,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,gEAAgE;IAChE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,iFAAiF;IACjF,MAAM,EAAE,aAAa,CAAC;CACvB;AAiBD;sEACsE;AACtE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAa5E;AA2FD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IACvF,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CA6CA;AAUD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,IAAI,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7D,GAAG,WAAW,CAmCd;AAED,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAGxE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,WAAW,GACf,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC,GAAG,SAAS,CAUrC;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,aAAa,CAoB7E;AAED,4EAA4E;AAC5E,wBAAgB,cAAc,CAAC,CAAC,EAAE,aAAa,GAAG,MAAM,CAGvD"}

package/dist/src/profileoverrides.js

@@ -0,0 +1,313 @@
+// Profile overrides of the shipped agents and prompts, and the "customised"
+// mark they put on a review.
+//
+// Two profiles may replace a shipped file, and one set of rules says which:
+//
+//   * the USER profile — the named profile (`[review] profile`) and the
+//     profiles it extends, found in the install's config home. On the user's
+//     own install it is the final word: it wins over the repo profile.
+//   * the REPO profile — `.qcr/` in the reviewed repo, read from the BASE
+//     commit with git, never from the checkout or the PR head: a PR cannot
+//     change the profile that reviews it. It is the lowest layer, and it can
+//     say less: only the files and keys listed below. Everything else in
+//     `.qcr/` is dropped and reported, never applied.
+//
+// What a layer may carry: `agents/<name>.md` and `prompts/<name>.md`, each
+// replacing the shipped file of that name (a file with no shipped namesake
+// replaces nothing and is reported); and the profile's own settings,
+// `profile.toml`, `heuristics.toml` and `addenda/*.md`, which the profile
+// loaders read (packages/pi-plugin/src/profiles.ts). A repo's `profile.toml` is cut down to
+// `ecosystem`, `[lenses]`, `[scan]`, `[posting]` and `[addenda]`.
+//
+// What no layer can reach: the bash-guard policy (extensions/), the secret
+// dirs, and the posting gate (`dry_run`, the MutationGate). None of them is a
+// file this module reads or a key a profile loader knows, so a profile has no
+// way to name them; the repo profile's extraction also refuses the keys that
+// look like them, so the refusal is visible rather than a silent no-op.
+//
+// The mark: each replacement is hashed against the shipped file (the seed
+// manifest's hash for a seed, the file's own hash otherwise). A replacement
+// whose hash differs puts the run in `customised` and lists the file in
+// `overrides[]`; a byte-identical copy changes nothing and marks nothing. With
+// no replacement at all, nothing here runs a model, reads the manifest or
+// hands a callback to anyone, so an uncustomised run is the run it always was.
+// Seeds themselves are never written: layers are read-only inputs.
+import { createHash } from "node:crypto";
+import { execFileSync } from "node:child_process";
+import { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, writeFileSync, } from "node:fs";
+import { join, relative, resolve, sep } from "node:path";
+import { parse as parseToml, stringify as stringifyToml } from "smol-toml";
+import { findProfile } from "./profilelookup.js";
+import { REPO_LAYER_NAME, resolveProfileChain } from "./profiles.js";
+/** The directory in the repo that holds the repo profile. */
+export const REPO_PROFILE_DIR = REPO_LAYER_NAME;
+const SHIPPED_DIRS = ["agents", "prompts"];
+const NAME_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+/** Per-file and total caps on what is pulled out of a repo's `.qcr/`. */
+const MAX_FILE_BYTES = 256 * 1024;
+const MAX_TOTAL_BYTES = 2 * 1024 * 1024;
+const MAX_IGNORED_LINES = 20;
+const sha256 = (data) => createHash("sha256").update(data).digest("hex");
+// ---- the seed manifest ---------------------------------------------------------
+/** Where the runtime reads the seed manifest: baked beside the code in the
+ * image (`<root>/seed-manifest.json`), else the checkout's pinned copy. */
+const MANIFEST_PLACES = ["seed-manifest.json", join("tests", "fixtures", "seed-manifest.json")];
+/** The seed manifest's `path → sha256`, or null when the install ships none
+ * (then a shipped file is compared by its own hash). Never throws. */
+export function loadSeedManifest(root) {
+    for (const place of MANIFEST_PLACES) {
+        try {
+            const doc = JSON.parse(readFileSync(join(root, place), "utf8"));
+            if (typeof doc.files !== "object" || doc.files === null)
+                continue;
+            const files = {};
+            for (const [k, v] of Object.entries(doc.files))
+                if (typeof v === "string")
+                    files[k] = v;
+            return files;
+        }
+        catch {
+            // absent or unreadable: try the next place
+        }
+    }
+    return null;
+}
+// ---- reading a layer -------------------------------------------------------------
+/** The override files a layer carries: `<dir>/agents/*.md` and
+ * `<dir>/prompts/*.md`, regular files only, keyed by shipped path. */
+function layerFiles(layer, oversized) {
+    const out = new Map();
+    for (const sub of SHIPPED_DIRS) {
+        let names;
+        try {
+            names = readdirSync(join(layer.dir, sub))
+                .filter((f) => f.endsWith(".md") && NAME_RE.test(f))
+                .sort();
+        }
+        catch {
+            continue;
+        }
+        for (const f of names) {
+            const file = join(layer.dir, sub, f);
+            try {
+                const st = lstatSync(file);
+                if (st.isFile() && st.size <= MAX_FILE_BYTES)
+                    out.set(`${sub}/${f}`, file);
+                else if (st.isFile())
+                    oversized?.push(`${sub}/${f}`);
+            }
+            catch {
+                // gone between the listing and the stat
+            }
+        }
+    }
+    return out;
+}
+/** Each shipped path's winning file, over the layers (later wins). */
+function winners(set) {
+    const out = new Map();
+    for (const layer of set.layers)
+        for (const [path, file] of layerFiles(layer))
+            out.set(path, { layer, file });
+    return out;
+}
+/** Whether a shipped file of that path exists to be replaced. */
+const shipped = (root, path) => existsSync(join(root, path));
+// ---- the repo profile --------------------------------------------------------------
+/** Top-level `profile.toml` keys a repo profile may set. */
+const REPO_TOML_KEYS = new Set(["ecosystem", "lenses", "scan", "posting", "addenda"]);
+/** Keys named for what they would reach, so the refusal says why. */
+const GUARDED_KEY = /^(dry_run|github|secrets?(_dir)?|guard|bash_guard|gate|posting_gate)$/i;
+const REPO_FILE_RE = /^(?:profile\.toml|heuristics\.toml|(?:addenda|agents|prompts)\/[A-Za-z0-9][A-Za-z0-9._-]*\.md)$/;
+const GIT_ENV = {
+    ...process.env,
+    GIT_CONFIG_NOSYSTEM: "1",
+    GIT_CONFIG_GLOBAL: "/dev/null",
+    GIT_TERMINAL_PROMPT: "0",
+};
+function gitOut(gitDir, args, maxBuffer = MAX_FILE_BYTES * 2) {
+    return execFileSync("git", ["-C", gitDir, ...args], {
+        env: GIT_ENV,
+        maxBuffer,
+        stdio: ["ignore", "pipe", "pipe"],
+    });
+}
+/** `profile.toml` cut down to what a repo may say; the rest named in `ignored`. */
+function sanitizeRepoToml(raw, ignored) {
+    let doc;
+    try {
+        doc = parseToml(raw);
+    }
+    catch (err) {
+        throw new Error(`the repo profile ${REPO_PROFILE_DIR}/profile.toml is not valid TOML: ${String(err instanceof Error ? err.message : err)}`, { cause: err });
+    }
+    const kept = {};
+    for (const [key, value] of Object.entries(doc)) {
+        if (REPO_TOML_KEYS.has(key))
+            kept[key] = value;
+        else
+            ignored.push(GUARDED_KEY.test(key)
+                ? `${REPO_PROFILE_DIR}/profile.toml: "${key}" is guarded; a repo profile cannot set it`
+                : `${REPO_PROFILE_DIR}/profile.toml: "${key}" is not a key a repo profile may set`);
+    }
+    return stringifyToml(kept);
+}
+/**
+ * Extract the repo profile from `ref` (a commit, the review's BASE) into
+ * `destDir`, reading git objects only: the working tree and the PR head are
+ * never consulted. Only the files in `REPO_FILE_RE` come out, as regular
+ * blobs under the size caps; a symlink, a submodule, an oversized file and
+ * anything outside the list is dropped and named in `ignored`. `dir` is null
+ * when the base has no `.qcr/` (or nothing in it a repo may carry).
+ */
+export function extractRepoProfile(o) {
+    if (!/^[0-9a-f]{7,64}$/i.test(o.ref))
+        throw new Error(`the repo profile is read from a commit, not ${JSON.stringify(o.ref)}`);
+    const ignored = [];
+    let listing;
+    try {
+        listing = gitOut(o.gitDir, ["ls-tree", "-r", "-z", "--long", o.ref, "--", REPO_PROFILE_DIR], 8 * 1024 * 1024).toString("utf8");
+    }
+    catch {
+        // an unreadable base is no repo profile; the review's own git use reports it
+        return { dir: null, ignored };
+    }
+    let total = 0;
+    let wrote = false;
+    for (const entry of listing.split("\0").filter(Boolean)) {
+        const tab = entry.indexOf("\t");
+        const [mode, type, sha, size] = entry.slice(0, tab).split(/\s+/);
+        const path = entry.slice(tab + 1);
+        const rel = path.slice(REPO_PROFILE_DIR.length + 1);
+        const label = `${REPO_PROFILE_DIR}/${rel}`;
+        if (type !== "blob" || (mode !== "100644" && mode !== "100755")) {
+            ignored.push(`${label}: not a regular file (mode ${mode})`);
+            continue;
+        }
+        if (!REPO_FILE_RE.test(rel)) {
+            ignored.push(`${label}: not a file a repo profile may carry`);
+            continue;
+        }
+        const bytes = Number(size);
+        if (!Number.isFinite(bytes) || bytes > MAX_FILE_BYTES || total + bytes > MAX_TOTAL_BYTES) {
+            ignored.push(`${label}: over the size cap`);
+            continue;
+        }
+        total += bytes;
+        let text = gitOut(o.gitDir, ["cat-file", "blob", sha]).toString("utf8");
+        if (rel === "profile.toml")
+            text = sanitizeRepoToml(text, ignored);
+        const dest = join(o.destDir, rel);
+        mkdirSync(join(dest, ".."), { recursive: true, mode: 0o700 });
+        writeFileSync(dest, text, { mode: 0o600 });
+        wrote = true;
+    }
+    return { dir: wrote ? o.destDir : null, ignored: capIgnored(ignored) };
+}
+function capIgnored(lines) {
+    return lines.length <= MAX_IGNORED_LINES
+        ? lines
+        : [...lines.slice(0, MAX_IGNORED_LINES), `…and ${lines.length - MAX_IGNORED_LINES} more`];
+}
+// ---- the layers of one run -----------------------------------------------------------
+/**
+ * The override layers of one run: the repo profile (when `repo` names a git
+ * dir and a base commit) under the user's named profile and everything it
+ * extends. Files with no shipped namesake apply to nothing and are reported.
+ */
+export function resolveOverrides(o) {
+    const layers = [];
+    const ignored = [];
+    const lookup = { ...(o.lookup ?? {}) };
+    if (o.repo) {
+        const r = extractRepoProfile({
+            gitDir: o.repo.gitDir,
+            ref: o.repo.baseRef,
+            destDir: o.repo.destDir,
+        });
+        ignored.push(...r.ignored);
+        if (r.dir !== null) {
+            layers.push({ origin: "repo", name: REPO_PROFILE_DIR, dir: r.dir });
+            lookup.repoProfile = { dir: r.dir };
+        }
+    }
+    // A profile found nowhere is no named chain, as for the tuning loaders.
+    const named = o.profile === "" ||
+        !findProfile({ root: o.root, profile: o.profile, homes: o.lookup?.homes ?? [] })
+        ? []
+        : resolveProfileChain(o.root, o.profile, o.lookup ?? {});
+    for (const l of named)
+        layers.push({ origin: "user", name: l.name, dir: l.dir });
+    const set = { layers, ignored, lookup };
+    for (const layer of layers) {
+        const over = [];
+        for (const path of layerFiles(layer, over).keys())
+            if (!shipped(o.root, path))
+                ignored.push(`${layer.name}/${path}: no shipped file of that name to replace, so it applies to nothing`);
+        for (const path of over)
+            ignored.push(`${layer.name}/${path}: over the size cap`);
+    }
+    set.ignored = capIgnored(ignored);
+    return set;
+}
+/** Whether any layer carries a file that replaces a shipped one. */
+export function hasOverrideFiles(root, set) {
+    for (const path of winners(set).keys())
+        if (shipped(root, path))
+            return true;
+    return false;
+}
+/**
+ * The `readFile` for `buildAgents` and the prompt renderers: a shipped
+ * `agents/` or `prompts/` file under `root` reads from the winning layer when
+ * one carries it, and everything else reads as usual. Undefined when no layer
+ * replaces anything, so callers that pass it through change nothing.
+ */
+export function overrideReader(root, set) {
+    const won = new Map();
+    for (const [path, w] of winners(set))
+        if (shipped(root, path))
+            won.set(path, w.file);
+    if (won.size === 0)
+        return undefined;
+    const base = resolve(root);
+    return (p) => {
+        const rel = relative(base, resolve(p)).split(sep).join("/");
+        const file = won.get(rel);
+        return readFileSync(file ?? p, "utf8");
+    };
+}
+/**
+ * Which shipped files this run's layers replaced with different bytes. The
+ * shipped hash is the seed manifest's for a seed, else the file's own. A
+ * run with no replacement returns at once, without reading the manifest.
+ */
+export function assessOverrides(root, set) {
+    const manifest = loadSeedManifest(root);
+    const overrides = [];
+    for (const [path, w] of winners(set)) {
+        if (!shipped(root, path))
+            continue;
+        const mine = sha256(readFileSync(w.file));
+        const seeded = manifest?.[path];
+        const theirs = seeded ?? sha256(readFileSync(join(root, path)));
+        if (mine === theirs)
+            continue;
+        overrides.push({
+            path,
+            origin: w.layer.origin,
+            layer: w.layer.name,
+            sha256: mine,
+            shipped_sha256: theirs,
+            seed: seeded !== undefined,
+        });
+    }
+    overrides.sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));
+    return { customised: overrides.length > 0, overrides };
+}
+/** The line a report footer and the terminal carry for a customised run. */
+export function customisedNote(c) {
+    const files = c.overrides.map((o) => `${o.path} (${o.origin} profile)`).join(", ");
+    return `Customised: this review ran with ${c.overrides.length} shipped file${c.overrides.length === 1 ? "" : "s"} replaced by a profile: ${files}.`;
+}
+//# sourceMappingURL=profileoverrides.js.map

package/dist/src/profileoverrides.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profileoverrides.js","sourceRoot":"","sources":["../../src/profileoverrides.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,6BAA6B;AAC7B,EAAE;AACF,4EAA4E;AAC5E,EAAE;AACF,wEAAwE;AACxE,6EAA6E;AAC7E,uEAAuE;AACvE,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,yEAAyE;AACzE,sDAAsD;AACtD,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,qEAAqE;AACrE,0EAA0E;AAC1E,4FAA4F;AAC5F,kEAAkE;AAClE,EAAE;AACF,2EAA2E;AAC3E,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,wEAAwE;AACxE,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,wEAAwE;AACxE,+EAA+E;AAC/E,0EAA0E;AAC1E,+EAA+E;AAC/E,mEAAmE;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,UAAU,EACV,SAAS,EACT,SAAS,EACT,YAAY,EACZ,WAAW,EACX,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,WAAW,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAsB,MAAM,eAAe,CAAC;AAEzF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,gBAAgB,GAAG,eAAe,CAAC;AA0ChD,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAU,CAAC;AACpD,MAAM,OAAO,GAAG,8BAA8B,CAAC;AAC/C,yEAAyE;AACzE,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC;AAClC,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,MAAM,MAAM,GAAG,CAAC,IAAqB,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAElG,mFAAmF;AAEnF;2EAC2E;AAC3E,MAAM,eAAe,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAEhG;sEACsE;AACtE,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CAAwB,CAAC;YACvF,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI;gBAAE,SAAS;YAClE,MAAM,KAAK,GAA2B,EAAE,CAAC;YACzC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACxF,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qFAAqF;AAErF;sEACsE;AACtE,SAAS,UAAU,CAAC,KAAoB,EAAE,SAAoB;IAC5D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;iBACtC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;iBACnD,IAAI,EAAE,CAAC;QACZ,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC3B,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,IAAI,cAAc;oBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;qBACtE,IAAI,EAAE,CAAC,MAAM,EAAE;oBAAE,SAAS,EAAE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,wCAAwC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sEAAsE;AACtE,SAAS,OAAO,CAAC,GAAgB;IAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkD,CAAC;IACtE,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM;QAC5B,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iEAAiE;AACjE,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,IAAY,EAAW,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAEtF,uFAAuF;AAEvF,4DAA4D;AAC5D,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AACtF,qEAAqE;AACrE,MAAM,WAAW,GAAG,wEAAwE,CAAC;AAE7F,MAAM,YAAY,GAChB,iGAAiG,CAAC;AAEpG,MAAM,OAAO,GAAG;IACd,GAAG,OAAO,CAAC,GAAG;IACd,mBAAmB,EAAE,GAAG;IACxB,iBAAiB,EAAE,WAAW;IAC9B,mBAAmB,EAAE,GAAG;CACzB,CAAC;AAEF,SAAS,MAAM,CAAC,MAAc,EAAE,IAAc,EAAE,SAAS,GAAG,cAAc,GAAG,CAAC;IAC5E,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE;QAClD,GAAG,EAAE,OAAO;QACZ,SAAS;QACT,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAED,mFAAmF;AACnF,SAAS,gBAAgB,CAAC,GAAW,EAAE,OAAiB;IACtD,IAAI,GAA4B,CAAC;IACjC,IAAI,CAAC;QACH,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,oBAAoB,gBAAgB,oCAAoC,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAC1H,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;;YAE7C,OAAO,CAAC,IAAI,CACV,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;gBACnB,CAAC,CAAC,GAAG,gBAAgB,mBAAmB,GAAG,4CAA4C;gBACvF,CAAC,CAAC,GAAG,gBAAgB,mBAAmB,GAAG,uCAAuC,CACrF,CAAC;IACN,CAAC;IACD,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,CAAmD;IAIpF,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,CACd,CAAC,CAAC,MAAM,EACR,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC,EAChE,CAAC,GAAG,IAAI,GAAG,IAAI,CAChB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;QAC7E,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAChC,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,GAAG,gBAAgB,IAAI,GAAG,EAAE,CAAC;QAC3C,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YAChE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,8BAA8B,IAAI,GAAG,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,uCAAuC,CAAC,CAAC;YAC9D,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,cAAc,IAAI,KAAK,GAAG,KAAK,GAAG,eAAe,EAAE,CAAC;YACzF,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;YAC5C,SAAS;QACX,CAAC;QACD,KAAK,IAAI,KAAK,CAAC;QACf,IAAI,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,GAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClF,IAAI,GAAG,KAAK,cAAc;YAAE,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3C,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,UAAU,CAAC,KAAe;IACjC,OAAO,KAAK,CAAC,MAAM,IAAI,iBAAiB;QACtC,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,EAAE,QAAQ,KAAK,CAAC,MAAM,GAAG,iBAAiB,OAAO,CAAC,CAAC;AAC9F,CAAC;AAED,yFAAyF;AAEzF;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAMhC;IACC,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAkB,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;IACtD,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,CAAC,GAAG,kBAAkB,CAAC;YAC3B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM;YACrB,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO;YACnB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO;SACxB,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;QAC3B,IAAI,CAAC,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YACpE,MAAM,CAAC,WAAW,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;IACD,wEAAwE;IACxE,MAAM,KAAK,GACT,CAAC,CAAC,OAAO,KAAK,EAAE;QAChB,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;QAC9E,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACjF,MAAM,GAAG,GAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACrD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE;YAC/C,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC;gBACxB,OAAO,CAAC,IAAI,CACV,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,qEAAqE,CAC3F,CAAC;QACN,KAAK,MAAM,IAAI,IAAI,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,qBAAqB,CAAC,CAAC;IACpF,CAAC;IACD,GAAG,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,GAAgB;IAC7D,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;QAAE,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAC7E,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,GAAgB;IAEhB,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC;QAAE,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACrF,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAS,EAAU,EAAE;QAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,OAAO,YAAY,CAAC,IAAI,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,GAAgB;IAC5D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAChE,IAAI,IAAI,KAAK,MAAM;YAAE,SAAS;QAC9B,SAAS,CAAC,IAAI,CAAC;YACb,IAAI;YACJ,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM;YACtB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI;YACnB,MAAM,EAAE,IAAI;YACZ,cAAc,EAAE,MAAM;YACtB,IAAI,EAAE,MAAM,KAAK,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC;AACzD,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,cAAc,CAAC,CAAgB;IAC7C,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnF,OAAO,oCAAoC,CAAC,CAAC,SAAS,CAAC,MAAM,gBAAgB,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,2BAA2B,KAAK,GAAG,CAAC;AACtJ,CAAC"}