@telora/daemon 0.19.47 → 0.19.82

package/dist/verification-default-on.js

@@ -0,0 +1,186 @@
+/**
+ * Default-on deterministic verification: selection + concurrency cap.
+ *
+ * The deterministic verification method used to be opt-in (a delivery only ran
+ * a check when it carried an explicit verification_method). This module makes
+ * it the DEFAULT for every delivery entering verify: it discovers verify-status
+ * deliveries with no explicit method and synthesizes a `deterministic`
+ * PendingVerification carrying the config-default command, and it caps
+ * concurrent daemon-side runs so a burst cannot spawn N whole-repo suites.
+ *
+ * Extracted from verification-engine.ts to keep that file under the daemon
+ * 800-line limit. The dispatch (runVerificationForDelivery / runVerificationTick)
+ * stays in verification-engine.ts and imports from here.
+ *
+ * @module verification-default-on
+ */
+import { DELIVERY_STATUS } from '@telora/daemon-core';
+// ---------------------------------------------------------------------------
+// Concurrency cap
+// ---------------------------------------------------------------------------
+/**
+ * Counting semaphore capping concurrent daemon-side verification runs.
+ *
+ * A default-on deterministic run is a full build+test sweep (minutes), while
+ * the verification loop ticks every 60s and `safeInterval` has NO re-entry
+ * guard -- so without a cap, overlapping ticks (and multiple products in one
+ * tick) could spawn N whole-repo suites at once and thrash the host. The
+ * module-level singleton below is shared across every tick invocation, so the
+ * cap holds across overlapping ticks, not just within one.
+ *
+ * A dedicated semaphore (rather than the shared ResourceGovernor) because the
+ * governor's per-engine slots model agent-team spawns and are wired through
+ * the governor-construction path; runVerificationTick is invoked with only
+ * `config` and has no governor handle. The cap value comes from
+ * resolveDefaultVerification (maxConcurrent).
+ */
+export class VerificationSemaphore {
+    permits;
+    limit;
+    waiters = [];
+    constructor(limit) {
+        this.limit = Math.max(1, limit);
+        this.permits = this.limit;
+    }
+    /** Adjust the cap (config change between ticks). Only frees waiters on a raise. */
+    setLimit(limit) {
+        const next = Math.max(1, limit);
+        if (next === this.limit)
+            return;
+        const delta = next - this.limit;
+        this.limit = next;
+        this.permits += delta;
+        while (this.permits > 0 && this.waiters.length > 0) {
+            const w = this.waiters.shift();
+            this.permits--;
+            w?.();
+        }
+    }
+    async acquire() {
+        if (this.permits > 0) {
+            this.permits--;
+            return;
+        }
+        await new Promise((resolve) => this.waiters.push(resolve));
+    }
+    release() {
+        const w = this.waiters.shift();
+        if (w) {
+            w();
+        }
+        else if (this.permits < this.limit) {
+            this.permits++;
+        }
+    }
+    /** Test-only: how many permits are currently available. */
+    availablePermits() {
+        return this.permits;
+    }
+}
+/** Shared cap across all tick invocations. Sized from config at each tick. */
+export const verificationSemaphore = new VerificationSemaphore(1);
+/** Test-only: inspect the concurrency semaphore. */
+export function __getVerificationSemaphoreForTests() {
+    return verificationSemaphore;
+}
+// ---------------------------------------------------------------------------
+// Steady-state re-run guard
+// ---------------------------------------------------------------------------
+/**
+ * A delivery synthesized by the default-on scan is NOT filtered server-side
+ * (the edge `daemon_get_pending_verifications` only returns explicit-method
+ * rows), so without a guard a delivery sitting in verify -- e.g. awaiting a
+ * review window -- would re-run the whole-repo suite on every verification
+ * tick. This set records deliveries whose default-on run has already been
+ * dispatched during THIS daemon run; a delivery is pruned the moment it is no
+ * longer observed in verify (so a genuine re-entry re-runs). Across a daemon
+ * restart the set is empty, so at most one extra run per stuck-in-verify
+ * delivery -- bounded and idempotent.
+ */
+const defaultOnRan = new Set();
+/** Test-only: reset the default-on re-run guard. */
+export function __resetDefaultOnGuardForTests() {
+    defaultOnRan.clear();
+}
+/** Test-only: snapshot of the default-on re-run guard. */
+export function __getDefaultOnGuardForTests() {
+    return defaultOnRan;
+}
+/** Mark a delivery as already run this verify-entry (dispatch-time bookkeeping). */
+export function markDefaultOnRan(deliveryId) {
+    defaultOnRan.add(deliveryId);
+}
+/** Test-only alias for markDefaultOnRan. */
+export function __markDefaultOnRanForTests(deliveryId) {
+    defaultOnRan.add(deliveryId);
+}
+// ---------------------------------------------------------------------------
+// Selection
+// ---------------------------------------------------------------------------
+/**
+ * Discover deliveries that should receive a DEFAULT-ON deterministic run: in
+ * `verify` status, anchored to an injection, with no explicit verification
+ * method (so not already returned by getPendingVerifications), not in a
+ * read-only audit focus (those are discovery-only and never run a suite), and
+ * not already run this verify-entry (steady-state guard).
+ *
+ * Synthesizes a `deterministic` PendingVerification carrying the resolved
+ * config-default command + timeout. Returns [] when the default-on path is
+ * disabled (no command configured) so the feature is inert until opted in.
+ *
+ * `config` must be product-scoped (config.productId identifies the product).
+ */
+export async function collectDefaultOnVerifications(config, resolved, explicitDeliveryIds, deps) {
+    if (!resolved.enabled)
+        return [];
+    const focuses = await deps.getActiveFocuses(config.organizationId, config.productId);
+    const candidates = [];
+    const observedInVerify = new Set();
+    for (const focus of focuses) {
+        // Read-only audit/discovery focuses terminalize on Context Group findings;
+        // they must never trigger a whole-repo suite.
+        if (focus.read_only === true)
+            continue;
+        let deliveries;
+        try {
+            deliveries = await deps.getFocusDeliveries(focus.focus_id);
+        }
+        catch (err) {
+            console.warn(`[verification] default-on: failed to fetch deliveries for focus ${focus.focus_id.slice(0, 8)}:`, err.message);
+            continue;
+        }
+        for (const d of deliveries) {
+            if (d.executionStatus !== DELIVERY_STATUS.VERIFY)
+                continue;
+            // The default-on path retires an injection on pass, so it requires an
+            // injection anchor. Unanchored deliveries fall through to focus-level review.
+            if (!d.injectionId)
+                continue;
+            // An explicit-method delivery is already handled by getPendingVerifications.
+            if (explicitDeliveryIds.has(d.id))
+                continue;
+            observedInVerify.add(d.id);
+            if (defaultOnRan.has(d.id))
+                continue; // already ran this verify-entry
+            candidates.push({
+                deliveryId: d.id,
+                deliveryName: d.name,
+                productId: config.productId,
+                focusId: focus.focus_id,
+                injectionNodeId: d.injectionId,
+                verificationMethod: 'deterministic',
+                verificationConfig: { command: resolved.command, timeoutMs: resolved.timeoutMs },
+                verificationOutcome: null,
+                verificationLastRunAt: null,
+            });
+        }
+    }
+    // Prune guard entries for deliveries no longer sitting in verify, so a
+    // genuine re-entry (verify_failed -> coding -> verify) runs again.
+    for (const id of [...defaultOnRan]) {
+        if (!observedInVerify.has(id))
+            defaultOnRan.delete(id);
+    }
+    return candidates;
+}
+//# sourceMappingURL=verification-default-on.js.map

package/dist/verification-default-on.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-default-on.js","sourceRoot":"","sources":["../src/verification-default-on.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAgBtD,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,qBAAqB;IACxB,OAAO,CAAS;IAChB,KAAK,CAAS;IACL,OAAO,GAAsB,EAAE,CAAC;IAEjD,YAAY,KAAa;QACvB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC;IAC5B,CAAC;IAED,mFAAmF;IACnF,QAAQ,CAAC,KAAa;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,IAAI,CAAC,KAAK;YAAE,OAAO;QAChC,MAAM,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;QACtB,OAAO,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,CAAC,EAAE,EAAE,CAAC;QACR,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,OAAO;QACL,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,EAAE,CAAC;YACN,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,gBAAgB;QACd,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,qBAAqB,CAAC,CAAC,CAAC,CAAC;AAElE,oDAAoD;AACpD,MAAM,UAAU,kCAAkC;IAChD,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;AAEvC,oDAAoD;AACpD,MAAM,UAAU,6BAA6B;IAC3C,YAAY,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,2BAA2B;IACzC,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC/B,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,0BAA0B,CAAC,UAAkB;IAC3D,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC/B,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,MAAoB,EACpB,QAAqC,EACrC,mBAAwC,EACxC,IAAuB;IAEvB,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAEjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACrF,MAAM,UAAU,GAA0B,EAAE,CAAC;IAC7C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE3C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,2EAA2E;QAC3E,8CAA8C;QAC9C,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI;YAAE,SAAS;QAEvC,IAAI,UAA0D,CAAC;QAC/D,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,mEAAmE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAC/F,GAAa,CAAC,OAAO,CACvB,CAAC;YACF,SAAS;QACX,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,eAAe,KAAK,eAAe,CAAC,MAAM;gBAAE,SAAS;YAC3D,sEAAsE;YACtE,8EAA8E;YAC9E,IAAI,CAAC,CAAC,CAAC,WAAW;gBAAE,SAAS;YAC7B,6EAA6E;YAC7E,IAAI,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,SAAS;YAE5C,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3B,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,SAAS,CAAC,gCAAgC;YAEtE,UAAU,CAAC,IAAI,CAAC;gBACd,UAAU,EAAE,CAAC,CAAC,EAAE;gBAChB,YAAY,EAAE,CAAC,CAAC,IAAI;gBACpB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,KAAK,CAAC,QAAQ;gBACvB,eAAe,EAAE,CAAC,CAAC,WAAW;gBAC9B,kBAAkB,EAAE,eAAe;gBACnC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE;gBAChF,mBAAmB,EAAE,IAAI;gBACzB,qBAAqB,EAAE,IAAI;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,mEAAmE;IACnE,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,YAAY,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/verification-deterministic.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Deterministic verification strategy: run a shell command and map exit 0 to a
+ * pass, streaming the full stdout+stderr to a persistent log file under the
+ * daemon state dir.
+ *
+ * Extracted from verification-engine.ts (which owns dispatch + the pass-path
+ * side effects) to keep that file under the daemon 800-line limit. The
+ * StrategyResult shape lives here because this is the strategy that produces
+ * every field on it; verification-engine imports the type back.
+ *
+ * @module verification-deterministic
+ */
+import type { VerificationOutcome } from './queries/verification.js';
+/** Default deterministic timeout when the config sets none: 5 minutes. */
+export declare const DEFAULT_VERIFICATION_TIMEOUT_MS: number;
+export interface StrategyResult {
+    outcome: VerificationOutcome;
+    rationale?: string;
+    exitCode?: number | null;
+    stdoutTail?: string;
+    stderrTail?: string;
+    /**
+     * Absolute path to the persistent full-log file for a deterministic run
+     * (full stdout+stderr, not just the 4000-char tails). Written under the
+     * daemon state dir. Undefined when no log sink was supplied (e.g. a strategy
+     * that runs no shell command). Carried on the result so the feedback loop
+     * (gate_state) can point at it.
+     */
+    logPath?: string;
+    /** Delivery diff against integration, when the strategy resolved one (ai_inspection). */
+    deliveryDiff?: string;
+    /** Baseline-diff attribution: NEW failures the focus introduced (these gate). */
+    newFailures?: string[];
+    /** Baseline-diff attribution: pre-existing base failures (recorded, non-blocking). */
+    preExisting?: string[];
+}
+/**
+ * Context for persisting a deterministic run's full log to a file. When
+ * supplied, runDeterministicStrategy streams the complete stdout+stderr to
+ * `<stateDir>/verification/verification-<deliveryId>-<startedAtMs>.log` and
+ * returns the absolute path on the result. Optional so unit tests that only
+ * assert exit-code handling can omit it (no file written).
+ */
+export interface DeterministicLogContext {
+    deliveryId: string;
+    /** Millisecond timestamp for a stable, unique filename (injectable for tests). */
+    startedAtMs: number;
+    /** Override the log directory (defaults to <stateDir>/verification). */
+    logDir?: string;
+}
+/**
+ * Run a configured shell command in the focus's worktree (or the product
+ * repo path as fallback). Pass = exit 0.
+ */
+export declare function runDeterministicStrategy(config: Record<string, unknown> | null, cwd: string, logContext?: DeterministicLogContext): Promise<StrategyResult>;
+//# sourceMappingURL=verification-deterministic.d.ts.map

package/dist/verification-deterministic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-deterministic.d.ts","sourceRoot":"","sources":["../src/verification-deterministic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAErE,0EAA0E;AAC1E,eAAO,MAAM,+BAA+B,QAAgB,CAAC;AAE7D,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,mBAAmB,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yFAAyF;IACzF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,WAAW,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACtC,GAAG,EAAE,MAAM,EACX,UAAU,CAAC,EAAE,uBAAuB,GACnC,OAAO,CAAC,cAAc,CAAC,CAsGzB"}

package/dist/verification-deterministic.js

@@ -0,0 +1,123 @@
+/**
+ * Deterministic verification strategy: run a shell command and map exit 0 to a
+ * pass, streaming the full stdout+stderr to a persistent log file under the
+ * daemon state dir.
+ *
+ * Extracted from verification-engine.ts (which owns dispatch + the pass-path
+ * side effects) to keep that file under the daemon 800-line limit. The
+ * StrategyResult shape lives here because this is the strategy that produces
+ * every field on it; verification-engine imports the type back.
+ *
+ * @module verification-deterministic
+ */
+import { spawn } from 'node:child_process';
+import { createWriteStream, mkdirSync } from 'node:fs';
+import { resolve as resolvePath } from 'node:path';
+import { resolveGlobalStateDir } from './daemon-process.js';
+/** Default deterministic timeout when the config sets none: 5 minutes. */
+export const DEFAULT_VERIFICATION_TIMEOUT_MS = 5 * 60 * 1000;
+/**
+ * Run a configured shell command in the focus's worktree (or the product
+ * repo path as fallback). Pass = exit 0.
+ */
+export async function runDeterministicStrategy(config, cwd, logContext) {
+    const command = config?.command;
+    if (typeof command !== 'string' || command.length === 0 || !config) {
+        return {
+            outcome: 'escalated',
+            rationale: 'deterministic strategy missing config.command',
+        };
+    }
+    const timeoutMs = typeof config.timeoutMs === 'number' && config.timeoutMs > 0
+        ? config.timeoutMs
+        : DEFAULT_VERIFICATION_TIMEOUT_MS;
+    // Open a persistent full-log sink under the state dir (best-effort). The
+    // 4000-char tails stay as inline evidence; the file captures the WHOLE run
+    // so a failure discovered later has the complete output to point at.
+    let logPath;
+    let logStream;
+    if (logContext) {
+        try {
+            const dir = logContext.logDir ?? resolvePath(resolveGlobalStateDir(), 'verification');
+            mkdirSync(dir, { recursive: true });
+            logPath = resolvePath(dir, `verification-${logContext.deliveryId}-${logContext.startedAtMs}.log`);
+            logStream = createWriteStream(logPath, { mode: 0o600 });
+            // Swallow late write/close errors (e.g. the dir removed mid-flush): a log
+            // sink failure must never crash the tick with an unhandled 'error' event.
+            logStream.on('error', (err) => {
+                console.warn(`[verification] log stream error for delivery ${logContext.deliveryId}:`, err.message);
+            });
+            logStream.write(`$ ${command}\n(cwd: ${cwd})\n\n`);
+        }
+        catch (err) {
+            console.warn(`[verification] failed to open log file for delivery ${logContext.deliveryId}:`, err.message);
+            logPath = undefined;
+            logStream = undefined;
+        }
+    }
+    return new Promise((resolve) => {
+        const child = spawn('sh', ['-c', command], {
+            cwd,
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        let stdout = '';
+        let stderr = '';
+        const tail = (buf, max = 4000) => buf.length <= max ? buf : buf.slice(buf.length - max);
+        child.stdout?.on('data', (chunk) => {
+            const text = chunk.toString('utf8');
+            logStream?.write(text);
+            stdout += text;
+            stdout = tail(stdout);
+        });
+        child.stderr?.on('data', (chunk) => {
+            const text = chunk.toString('utf8');
+            logStream?.write(text);
+            stderr += text;
+            stderr = tail(stderr);
+        });
+        const finish = (result) => {
+            const finalResult = { ...result, ...(logPath ? { logPath } : {}) };
+            if (logStream) {
+                // Resolve only AFTER the stream has flushed + closed, so the full log
+                // file is durable on disk before a caller (or a reader) touches logPath.
+                try {
+                    logStream.end(() => resolve(finalResult));
+                    return;
+                }
+                catch {
+                    // fall through to immediate resolve
+                }
+            }
+            resolve(finalResult);
+        };
+        const timer = setTimeout(() => {
+            try {
+                child.kill('SIGKILL');
+            }
+            catch { /* ignore */ }
+        }, timeoutMs);
+        child.on('error', (err) => {
+            clearTimeout(timer);
+            finish({
+                outcome: 'failed',
+                rationale: `deterministic spawn error: ${err.message}`,
+                stdoutTail: stdout,
+                stderrTail: stderr,
+            });
+        });
+        child.on('close', (code) => {
+            clearTimeout(timer);
+            const passed = code === 0;
+            finish({
+                outcome: passed ? 'passed' : 'failed',
+                rationale: passed
+                    ? 'deterministic check passed (exit 0)'
+                    : `deterministic check failed (exit ${code})`,
+                exitCode: code,
+                stdoutTail: stdout,
+                stderrTail: stderr,
+            });
+        });
+    });
+}
+//# sourceMappingURL=verification-deterministic.js.map

package/dist/verification-deterministic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-deterministic.js","sourceRoot":"","sources":["../src/verification-deterministic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAG5D,0EAA0E;AAC1E,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAuC7D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAsC,EACtC,GAAW,EACX,UAAoC;IAEpC,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,CAAC;IAChC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACnE,OAAO;YACL,OAAO,EAAE,WAAW;YACpB,SAAS,EAAE,+CAA+C;SAC3D,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,GAAG,CAAC;QAC5E,CAAC,CAAC,MAAM,CAAC,SAAS;QAClB,CAAC,CAAC,+BAA+B,CAAC;IAEpC,yEAAyE;IACzE,2EAA2E;IAC3E,qEAAqE;IACrE,IAAI,OAA2B,CAAC;IAChC,IAAI,SAAoD,CAAC;IACzD,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,EAAE,cAAc,CAAC,CAAC;YACtF,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,gBAAgB,UAAU,CAAC,UAAU,IAAI,UAAU,CAAC,WAAW,MAAM,CAAC,CAAC;YAClG,SAAS,GAAG,iBAAiB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACxD,0EAA0E;YAC1E,0EAA0E;YAC1E,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC5B,OAAO,CAAC,IAAI,CAAC,gDAAgD,UAAU,CAAC,UAAU,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YACjH,CAAC,CAAC,CAAC;YACH,SAAS,CAAC,KAAK,CAAC,KAAK,OAAO,WAAW,GAAG,OAAO,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,uDAAuD,UAAU,CAAC,UAAU,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YACtH,OAAO,GAAG,SAAS,CAAC;YACpB,SAAS,GAAG,SAAS,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,EAAE;QAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;YACzC,GAAG;YACH,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,GAAG,GAAG,IAAI,EAAE,EAAE,CACvC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;QAExD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM,IAAI,IAAI,CAAC;YACf,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM,IAAI,IAAI,CAAC;YACf,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,CAAC,MAAsB,EAAE,EAAE;YACxC,MAAM,WAAW,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACnE,IAAI,SAAS,EAAE,CAAC;gBACd,sEAAsE;gBACtE,yEAAyE;gBACzE,IAAI,CAAC;oBACH,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;oBAC1C,OAAO;gBACT,CAAC;gBAAC,MAAM,CAAC;oBACP,oCAAoC;gBACtC,CAAC;YACH,CAAC;YACD,OAAO,CAAC,WAAW,CAAC,CAAC;QACvB,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACvD,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC;gBACL,OAAO,EAAE,QAAQ;gBACjB,SAAS,EAAE,8BAA+B,GAAa,CAAC,OAAO,EAAE;gBACjE,UAAU,EAAE,MAAM;gBAClB,UAAU,EAAE,MAAM;aACnB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,CAAC;YAC1B,MAAM,CAAC;gBACL,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;gBACrC,SAAS,EAAE,MAAM;oBACf,CAAC,CAAC,qCAAqC;oBACvC,CAAC,CAAC,oCAAoC,IAAI,GAAG;gBAC/C,QAAQ,EAAE,IAAI;gBACd,UAAU,EAAE,MAAM;gBAClB,UAAU,EAAE,MAAM;aACnB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/verification-engine.d.ts

@@ -22,28 +22,20 @@
  *
  * @module verification-engine
  */
+import { runDeterministicStrategy, type StrategyResult } from './verification-deterministic.js';
+export { runDeterministicStrategy, type DeterministicLogContext } from './verification-deterministic.js';
 import { getPendingVerifications, type PendingVerification, type VerificationOutcome } from './queries/verification.js';
 import type { NodeWriteback } from './reality-writeback.js';
 import { type ReconcileTargetsResult, type TargetRestatement, type VerifyEvidence } from './verify-restatement.js';
 import { type FileEscalationInput } from './escalations.js';
 import type { DaemonConfig } from './types.js';
+import { type ResolvedDefaultVerification } from './verification-config.js';
+import { getActiveFocuses, getFocusDeliveries } from './supabase.js';
+import { type FailureClassification } from './verification-baseline.js';
+export { collectDefaultOnVerifications, verificationSemaphore, VerificationSemaphore, __getVerificationSemaphoreForTests, __resetDefaultOnGuardForTests, __getDefaultOnGuardForTests, __markDefaultOnRanForTests, } from './verification-default-on.js';
 import { type AiInspectionInputs } from './ai-inspection-context.js';
 import { runAiInspection as defaultRunAiInspection, type InspectionResult } from './ai-inspection-runner.js';
 import { type SecurityFindingGateDeps } from './security-finding-gate.js';
-interface StrategyResult {
-    outcome: VerificationOutcome;
-    rationale?: string;
-    exitCode?: number | null;
-    stdoutTail?: string;
-    stderrTail?: string;
-    /** Delivery diff against integration, when the strategy resolved one (ai_inspection). */
-    deliveryDiff?: string;
-}
-/**
- * Run a configured shell command in the focus's worktree (or the product
- * repo path as fallback). Pass = exit 0.
- */
-export declare function runDeterministicStrategy(config: Record<string, unknown> | null, cwd: string): Promise<StrategyResult>;
 export declare function runBehavioralStrategy(): Promise<StrategyResult>;
 /**
  * Spawn a tool-augmented Claude runner against the focus worktree to judge
@@ -121,6 +113,22 @@ export interface VerificationDeps {
      * and the engine demotes the verification outcome to 'failed'.
      */
     securityFindingGate: SecurityFindingGateDeps;
+    /**
+     * Resolve the default-on deterministic verification config (env > file >
+     * default). When it yields `enabled: false` (no command configured) the
+     * default-on scan is a no-op and only explicit-method deliveries verify.
+     */
+    resolveDefaultVerification: (config: DaemonConfig) => ResolvedDefaultVerification;
+    /** Enumerate active focuses for a product (default-on candidate discovery). */
+    getActiveFocuses: typeof getActiveFocuses;
+    /** Fetch a focus's deliveries (default-on candidate discovery). */
+    getFocusDeliveries: typeof getFocusDeliveries;
+    /** Failed-run feedback (gate_state + live inject). Optional; defaultDeps provides it. */
+    deliverFailureFeedback?: (v: PendingVerification, result: StrategyResult) => Promise<void>;
+    /** cwd for the HEAD run -- the focus worktree. Optional; dispatch falls back to resolveCwd. */
+    resolveVerificationCwd?: (v: PendingVerification) => string;
+    /** Baseline-diff attribution; null => no baseline resolvable (gate all). Optional. */
+    attributeFailures?: (v: PendingVerification, result: StrategyResult) => Promise<FailureClassification | null>;
 }
 /**
  * Run verification for a single delivery.
@@ -151,5 +159,4 @@ export declare function runVerificationTick(config: DaemonConfig, deps?: Partial
     pending: number;
     escalated: number;
 }>;
-export {};
 //# sourceMappingURL=verification-engine.d.ts.map

package/dist/verification-engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verification-engine.d.ts","sourceRoot":"","sources":["../src/verification-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,EACL,uBAAuB,EAIvB,KAAK,mBAAmB,EAExB,KAAK,mBAAmB,EACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE5D,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EAEtB,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAA2C,KAAK,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAGrG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,eAAe,IAAI,sBAAsB,EACzC,KAAK,gBAAgB,EACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,4BAA4B,CAAC;AASpC,UAAU,cAAc;IACtB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yFAAyF;IACzF,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACtC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,cAAc,CAAC,CA2DzB;AAED,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,cAAc,CAAC,CAKrE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,gBAAgB,EACtB,CAAC,EAAE,mBAAmB,GACrB,OAAO,CAAC,cAAc,GAAG;IAAE,UAAU,CAAC,EAAE,gBAAgB,CAAA;CAAE,CAAC,CAmB7D;AAMD,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE;QACX,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,IAAI,EAAE,kBAAkB,GAAG,UAAU,GAAG,aAAa,GAAG,kBAAkB,GAAG,gBAAgB,CAAC;QAC9F,QAAQ,EAAE,MAAM,CAAC;QACjB,mBAAmB,EAAE,MAAM,CAAC;KAC7B,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,aAAa,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnF,eAAe,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,iBAAiB,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChG;;;;;;;;OAQG;IACH,wBAAwB,CAAC,EAAE,CACzB,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,QAAQ,EAAE,cAAc,KACrB,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACrC;;;;;OAKG;IACH,cAAc,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,uCAAuC;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,iBAAiB,EAAE,CAAC,OAAO,EAAE,0BAA0B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E;;;;;;;OAOG;IACH,eAAe,EAAE,CACf,eAAe,EAAE,MAAM,EACvB,UAAU,EAAE,SAAS,aAAa,EAAE,EACpC,aAAa,CAAC,EAAE,MAAM,KACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,gBAAgB,EAAE,OAAO,wBAAwB,CAAC;IAClD,eAAe,EAAE,OAAO,sBAAsB,CAAC;IAC/C,yBAAyB,EAAE,CAAC,CAAC,EAAE,mBAAmB,KAAK,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAC1F,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,KAAK,MAAM,CAAC;IACjD,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;;;;;OAMG;IACH,mBAAmB,EAAE,uBAAuB,CAAC;CAC9C;AA6HD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,0BAA0B,CAC9C,CAAC,EAAE,mBAAmB,EACtB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,cAAc,CAAC,CAsJzB;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,YAAY,EACpB,IAAI,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAC/B,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CA6BlG"}
+{"version":3,"file":"verification-engine.d.ts","sourceRoot":"","sources":["../src/verification-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,wBAAwB,EAAE,KAAK,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,KAAK,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AACzG,OAAO,EACL,uBAAuB,EAIvB,KAAK,mBAAmB,EAExB,KAAK,mBAAmB,EACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE5D,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EAEtB,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAA2C,KAAK,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAGrG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAOrE,OAAO,EAAgF,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAItJ,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,EACrB,qBAAqB,EACrB,kCAAkC,EAClC,6BAA6B,EAC7B,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,eAAe,IAAI,sBAAsB,EACzC,KAAK,gBAAgB,EACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,4BAA4B,CAAC;AAQpC,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,cAAc,CAAC,CAKrE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,gBAAgB,EACtB,CAAC,EAAE,mBAAmB,GACrB,OAAO,CAAC,cAAc,GAAG;IAAE,UAAU,CAAC,EAAE,gBAAgB,CAAA;CAAE,CAAC,CAmB7D;AAMD,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE;QACX,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,IAAI,EAAE,kBAAkB,GAAG,UAAU,GAAG,aAAa,GAAG,kBAAkB,GAAG,gBAAgB,CAAC;QAC9F,QAAQ,EAAE,MAAM,CAAC;QACjB,mBAAmB,EAAE,MAAM,CAAC;KAC7B,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,aAAa,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnF,eAAe,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,iBAAiB,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChG;;;;;;;;OAQG;IACH,wBAAwB,CAAC,EAAE,CACzB,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,QAAQ,EAAE,cAAc,KACrB,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACrC;;;;;OAKG;IACH,cAAc,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,uCAAuC;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,iBAAiB,EAAE,CAAC,OAAO,EAAE,0BAA0B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E;;;;;;;OAOG;IACH,eAAe,EAAE,CACf,eAAe,EAAE,MAAM,EACvB,UAAU,EAAE,SAAS,aAAa,EAAE,EACpC,aAAa,CAAC,EAAE,MAAM,KACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,gBAAgB,EAAE,OAAO,wBAAwB,CAAC;IAClD,eAAe,EAAE,OAAO,sBAAsB,CAAC;IAC/C,yBAAyB,EAAE,CAAC,CAAC,EAAE,mBAAmB,KAAK,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAC1F,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,KAAK,MAAM,CAAC;IACjD,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;;;;;OAMG;IACH,mBAAmB,EAAE,uBAAuB,CAAC;IAE7C;;;;OAIG;IACH,0BAA0B,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,2BAA2B,CAAC;IAClF,+EAA+E;IAC/E,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,mEAAmE;IACnE,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,yFAAyF;IACzF,sBAAsB,CAAC,EAAE,CAAC,CAAC,EAAE,mBAAmB,EAAE,MAAM,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3F,+FAA+F;IAC/F,sBAAsB,CAAC,EAAE,CAAC,CAAC,EAAE,mBAAmB,KAAK,MAAM,CAAC;IAC5D,sFAAsF;IACtF,iBAAiB,CAAC,EAAE,CAAC,CAAC,EAAE,mBAAmB,EAAE,MAAM,EAAE,cAAc,KAAK,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;CAC/G;AAwID;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,0BAA0B,CAC9C,CAAC,EAAE,mBAAmB,EACtB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,cAAc,CAAC,CA2LzB;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,YAAY,EACpB,IAAI,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAC/B,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CA2ElG"}