@tokenfactory/acc-runner 0.44.0 → 0.44.1

package/dist/runtime/review-cost-cap.js

@@ -0,0 +1,182 @@
+/**
+ * REV-COST — runner-side per-review cost cap (size-scaled).
+ *
+ * THE EPISODE (PR #1937). The runner reviewer applied the org's FLAT
+ * `max_cost_usd_per_review` and, the instant the spend crossed it, discarded the
+ * review with `cost_cap_exceeded`. #1937 is a ~1800-line PR: it cost ~$18 against
+ * an $8 flat cap and produced NO verdict at all — the money was spent, the
+ * analysis was done, and the harness threw both away, then re-charged the same
+ * review on the next tick. That is the measured 239-decisions-over-9-tasks loop
+ * AU-5 fixed on the SERVER path (api/_lib/cost-cap.ts) and left unfixed here,
+ * which is why a large PR could still be stranded whenever a runner picked the
+ * broadcast up (the normal case — the server path is the emergency fallback).
+ *
+ * This module is the runner's copy of AU-5's PURE cost-cap core:
+ *
+ *   • `effectiveReviewCostCap` — the cap for THIS review, scaled by assembled
+ *     diff size, FLOORED at the org's flat cap (so a median PR is judged against
+ *     exactly today's number — never inflated) and CLAMPED at
+ *     REVIEW_CAP_MAX_MULTIPLE.
+ *   • `foldReviewCostLedger` — the chargeable-vs-infra split. Only PRODUCTIVE
+ *     attempts (a spawn that returned a readable reviewer envelope) are charged
+ *     to the cap; capacity/auth/tooling faults are reported but never charged.
+ *   • `classifyReviewCost` — within / overrun / runaway. `overrun` keeps the
+ *     verdict (the money is already spent; discarding it only strands the PR);
+ *     `runaway` is the hard backstop that still refuses.
+ *
+ * The runner is a standalone published package and cannot import from api/_lib
+ * (the same convention as the duplicated PRICING / MODEL_ALIASES maps and
+ * review-diff-guard.ts). KEEP IN SYNC with the AU-5 block at the bottom of
+ * api/_lib/cost-cap.ts — the constants and all three functions are pinned
+ * byte-for-behaviour by tests/unit/revcost1-runner-cap-parity.test.ts, which
+ * fails the build the moment the two drift.
+ */
+/**
+ * Assembled-diff size the flat cap is treated as calibrated for: the measured
+ * p50 production churn (750 changed lines ≈ 30k chars of unified diff). At or
+ * below this the effective cap is EXACTLY `max_cost_usd_per_review`.
+ * Mirrors api/_lib/cost-cap.ts. // keep in sync
+ */
+export const REVIEW_CAP_REFERENCE_DIFF_CHARS = 30_000;
+/** Fraction of the base cap added per reference-diff-worth of EXCESS size. */
+export const REVIEW_CAP_SIZE_SLOPE = 0.5;
+/**
+ * Ceiling on the scaled cap as a multiple of the base cap. Deliberately tight
+ * (1.5× → $3.00 at a $2 base) because the measured size↔cost correlation is
+ * weak (Pearson r = 0.100): a bigger ramp would be unjustified by the data.
+ */
+export const REVIEW_CAP_MAX_MULTIPLE = 1.5;
+/**
+ * Multiple of the effective cap above which an already-PAID review is still
+ * discarded as a runaway — the hard backstop that survives this change. Between
+ * 1× and this, the verdict is KEPT and flagged (`cost_overrun`) instead of
+ * stranding the PR.
+ */
+export const REVIEW_COST_OVERRUN_TOLERANCE = 3;
+/**
+ * The size-scaled per-review cost cap. Monotone non-decreasing in `diffChars`,
+ * floored at `baseCapUsd` (so it can only ever LOOSEN relative to the flat cap —
+ * a small PR's effective cap is unchanged) and clamped at
+ * `REVIEW_CAP_MAX_MULTIPLE × baseCapUsd`. Pure.
+ *
+ * A base cap of 0 (or a non-finite/negative one) means "cap disabled" — the
+ * existing `max_cost_usd_per_review > 0` semantics — and is returned verbatim.
+ *
+ * Mirrors api/_lib/cost-cap.ts `effectiveReviewCostCap`. // keep in sync
+ */
+export function effectiveReviewCostCap(baseCapUsd, diffChars) {
+    const base = typeof baseCapUsd === "number" && Number.isFinite(baseCapUsd) && baseCapUsd > 0
+        ? baseCapUsd
+        : 0;
+    const chars = typeof diffChars === "number" && Number.isFinite(diffChars) && diffChars > 0
+        ? diffChars
+        : 0;
+    if (base === 0) {
+        return {
+            cap_usd: 0,
+            base_cap_usd: 0,
+            enabled: false,
+            diff_chars: chars,
+            scale: 1,
+            ceiling_applied: false,
+            runaway_usd: 0,
+        };
+    }
+    const excess = Math.max(0, chars - REVIEW_CAP_REFERENCE_DIFF_CHARS);
+    const raw = 1 + (REVIEW_CAP_SIZE_SLOPE * excess) / REVIEW_CAP_REFERENCE_DIFF_CHARS;
+    const scale = Math.min(raw, REVIEW_CAP_MAX_MULTIPLE);
+    const cap = base * scale;
+    return {
+        cap_usd: cap,
+        base_cap_usd: base,
+        enabled: true,
+        diff_chars: chars,
+        scale,
+        ceiling_applied: raw > REVIEW_CAP_MAX_MULTIPLE,
+        runaway_usd: cap * REVIEW_COST_OVERRUN_TOLERANCE,
+    };
+}
+function usableUsd(value) {
+    return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : 0;
+}
+/**
+ * Fold an attempt list into the chargeable / infra split. Pure.
+ * Mirrors api/_lib/cost-cap.ts `foldReviewCostLedger`. // keep in sync
+ */
+export function foldReviewCostLedger(attempts) {
+    let chargeable = 0;
+    let infra = 0;
+    let productiveN = 0;
+    let infraN = 0;
+    for (const a of attempts) {
+        const cost = usableUsd(a.cost_usd);
+        if (a.attempt_class === "productive") {
+            chargeable += cost;
+            productiveN += 1;
+        }
+        else {
+            infra += cost;
+            infraN += 1;
+        }
+    }
+    return {
+        attempts,
+        chargeable_usd: chargeable,
+        infra_usd: infra,
+        total_usd: chargeable + infra,
+        productive_attempts: productiveN,
+        infra_attempts: infraN,
+    };
+}
+export function classifyReviewCost(chargeableUsd, cap) {
+    if (!cap.enabled)
+        return "within";
+    const spent = usableUsd(chargeableUsd);
+    if (spent <= cap.cap_usd)
+        return "within";
+    return spent > cap.runaway_usd ? "runaway" : "overrun";
+}
+/** Open a cost context for a review over `diffChars` of assembled diff. */
+export function openReviewCostContext(baseCapUsd, diffChars) {
+    return { cap: effectiveReviewCostCap(baseCapUsd, diffChars), attempts: [] };
+}
+/** Record one attempt and return the folded ledger. */
+export function chargeReviewAttempt(ctx, modelId, attemptClass, costUsd) {
+    ctx.attempts.push({
+        attempt: ctx.attempts.length + 1,
+        model_id: modelId,
+        attempt_class: attemptClass,
+        cost_usd: costUsd,
+    });
+    return foldReviewCostLedger(ctx.attempts);
+}
+/** The current folded ledger without recording anything. */
+export function reviewCostLedger(ctx) {
+    return foldReviewCostLedger(ctx.attempts);
+}
+/**
+ * Advisory reason for an ACCEPTED overrun. Deliberately phrased to match none of
+ * the absence-claim patterns in review-chunking.ts (asserted by this wave's
+ * test), so an audit line can never be re-read as a read-coverage claim.
+ */
+export function reviewCostOverrunReason(cap, ledger) {
+    return (`cost_overrun: review cost $${ledger.chargeable_usd.toFixed(4)} exceeded the ` +
+        `effective cap $${cap.cap_usd.toFixed(2)} (base $${cap.base_cap_usd.toFixed(2)}, ` +
+        `scale ${cap.scale.toFixed(2)}×, ${cap.diff_chars} chars of assembled changes) — ` +
+        `verdict KEPT (already paid) and escalated for cap ratification`);
+}
+/**
+ * Refusal reason for a RUNAWAY — the backstop above the scaled cap. Carries the
+ * PRODUCTIVE attempt count, which is what distinguishes a single-pass runaway
+ * from a chunked review that accumulated past the tolerance over several part
+ * passes (the old chunked-only reason string), without needing two call sites.
+ */
+export function reviewCostRunawayReason(cap, ledger) {
+    const n = ledger.productive_attempts;
+    return (`reviewer cost $${ledger.chargeable_usd.toFixed(4)} across ${n} productive ` +
+        `${n === 1 ? "attempt" : "attempts"} exceeded cap $${cap.cap_usd.toFixed(2)} ` +
+        `(base $${cap.base_cap_usd.toFixed(2)}, scale ${cap.scale.toFixed(2)}×) by more ` +
+        `than the ${REVIEW_COST_OVERRUN_TOLERANCE}× runaway tolerance ` +
+        `($${cap.runaway_usd.toFixed(2)}) — verdict refused`);
+}
+//# sourceMappingURL=review-cost-cap.js.map

package/dist/runtime/review-cost-cap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-cost-cap.js","sourceRoot":"","sources":["../../src/runtime/review-cost-cap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC;AACtD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AACzC;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAC3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAmB/C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAkB,EAClB,SAAiB;IAEjB,MAAM,IAAI,GACR,OAAO,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC;QAC7E,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,CAAC,CAAC;IACR,MAAM,KAAK,GACT,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC;QAC1E,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,CAAC,CAAC;IACR,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,CAAC;YACV,YAAY,EAAE,CAAC;YACf,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,KAAK;YACjB,KAAK,EAAE,CAAC;YACR,eAAe,EAAE,KAAK;YACtB,WAAW,EAAE,CAAC;SACf,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,+BAA+B,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,qBAAqB,GAAG,MAAM,CAAC,GAAG,+BAA+B,CAAC;IACnF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,GAAG,KAAK,CAAC;IACzB,OAAO;QACL,OAAO,EAAE,GAAG;QACZ,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,KAAK;QACjB,KAAK;QACL,eAAe,EAAE,GAAG,GAAG,uBAAuB;QAC9C,WAAW,EAAE,GAAG,GAAG,6BAA6B;KACjD,CAAC;AACJ,CAAC;AA+CD,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAA6B;IAE7B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,aAAa,KAAK,YAAY,EAAE,CAAC;YACrC,UAAU,IAAI,IAAI,CAAC;YACnB,WAAW,IAAI,CAAC,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,KAAK,IAAI,IAAI,CAAC;YACd,MAAM,IAAI,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO;QACL,QAAQ;QACR,cAAc,EAAE,UAAU;QAC1B,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,UAAU,GAAG,KAAK;QAC7B,mBAAmB,EAAE,WAAW;QAChC,cAAc,EAAE,MAAM;KACvB,CAAC;AACJ,CAAC;AAeD,MAAM,UAAU,kBAAkB,CAChC,aAAqB,EACrB,GAA0B;IAE1B,IAAI,CAAC,GAAG,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,KAAK,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;IACvC,IAAI,KAAK,IAAI,GAAG,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC;IAC1C,OAAO,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAeD,2EAA2E;AAC3E,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EAClB,SAAiB;IAEjB,OAAO,EAAE,GAAG,EAAE,sBAAsB,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAC9E,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,mBAAmB,CACjC,GAAsB,EACtB,OAAe,EACf,YAAgC,EAChC,OAAe;IAEf,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAChB,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAChC,QAAQ,EAAE,OAAO;QACjB,aAAa,EAAE,YAAY;QAC3B,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAC;IACH,OAAO,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,gBAAgB,CAAC,GAAsB;IACrD,OAAO,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAA0B,EAC1B,MAAwB;IAExB,OAAO,CACL,8BAA8B,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB;QAC9E,kBAAkB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QAClF,SAAS,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,iCAAiC;QAClF,gEAAgE,CACjE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAA0B,EAC1B,MAAwB;IAExB,MAAM,CAAC,GAAG,MAAM,CAAC,mBAAmB,CAAC;IACrC,OAAO,CACL,kBAAkB,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,cAAc;QAC5E,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,kBAAkB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;QAC9E,UAAU,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa;QACjF,YAAY,6BAA6B,sBAAsB;QAC/D,KAAK,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CACrD,CAAC;AACJ,CAAC"}

package/dist/runtime/reviewer-abstain.d.ts

@@ -0,0 +1,101 @@
+/**
+ * S15-FU/REVIEW-1 (AC2) — reviewer FAULT ⇒ explicit abstain, never a verdict.
+ *
+ * THE RULE. A reviewer fault is a statement about the HARNESS, not about the
+ * code. When the reviewer cannot render a faithful prompt, cannot parse its own
+ * output, or cites content it never actually read, the only sound outcome is
+ * "I did not review this — a human must": an explicit ABSTAIN that routes the PR
+ * to needs-review. It must NEVER be a confident reject, and it must never carry
+ * a defect reason, because on a fault path there is no evidence for one.
+ *
+ * WHY THIS MODULE EXISTS. The #1933 episode produced 0.75–0.85-confidence
+ * rejects naming a "prose spliced into the SQL literal" corruption that did not
+ * exist — the reviewer was reporting, in good faith, the harness's own prompt
+ * text that a `replace()` bug had spliced into the diff (see
+ * `./prompt-substitute.ts`). Two of those sessions even self-logged the fault and
+ * still emitted a reject. Fixing the splice (AC1) removes THAT trigger; this
+ * module removes the whole CLASS, by making every fault path structurally
+ * incapable of producing a defect claim.
+ *
+ * MECHANISM, and why the decision string is unchanged. `decision` stays
+ * `reviewer_error`, which downstream ALREADY treats as "never merges, retry or
+ * hold" — introducing a new decision value would silently fall through every
+ * classifier that switches on it. What is new is that the outcome is explicitly
+ * MARKED as an abstain, its confidence is pinned to 0, and any model-authored
+ * text is QUARANTINED behind a prefix that the finding classifiers skip, so it
+ * can be read as context by an operator and never scored as a defect.
+ *
+ * Pure. No I/O, no DB, no throw.
+ * Mirrored from `api/_lib/reviewer/abstain.ts`; the runner ships as a published
+ * npm package and cannot import from `api/_lib`.
+ * // keep in sync with api/_lib/reviewer/abstain.ts
+ */
+/** What faulted. Recorded verbatim on the outcome so the trail is diagnosable. */
+export type ReviewerFaultKind = 
+/** The rendered prompt did not carry the PR content verbatim (#1933 class). */
+"prompt_render"
+/** The reviewer's own JSON verdict could not be parsed, even after repair. */
+ | "verdict_parse"
+/** The CLI/API envelope around the verdict could not be parsed. */
+ | "envelope_parse"
+/** The verdict cited a file/diff the verification tooling never read (RR-3). */
+ | "tooling_read";
+/**
+ * Stable marker for cheap row detection — mirrors TOOLING_FAILURE_MARKER /
+ * ACCOUNT_CAP_MARKER in `api/_lib/review-retry.ts`, so ONLY rows we classified
+ * are ever treated as abstentions.
+ */
+export declare const REVIEWER_ABSTAIN_MARKER = "reviewer abstained:";
+/** The headline stamped on every abstain outcome. Explicit by design: an
+ *  operator reading the row must not have to infer that nothing was judged. */
+export declare const REVIEWER_ABSTAIN_REASON: string;
+/**
+ * Prefix applied to every model-authored / fault-detail line carried alongside an
+ * abstain. Deliberately leads with "advisory" so the RR-3 severity classifiers
+ * and the calibration reason-matchers read it as non-blocking context.
+ */
+export declare const ABSTAIN_DETAIL_PREFIX = "abstain_context (advisory, not a finding):";
+/** A one-line, machine-greppable statement of which fault kind fired. */
+export declare function abstainFaultLine(kind: ReviewerFaultKind): string;
+/**
+ * Quarantine fault detail behind ABSTAIN_DETAIL_PREFIX. Empty/blank lines are
+ * dropped, each line is capped, and the list is bounded so a runaway model
+ * response cannot bloat the stored row.
+ */
+export declare function quarantineAbstainDetail(lines: ReadonlyArray<string | null | undefined>, opts?: {
+    maxLines?: number;
+    maxChars?: number;
+}): string[];
+/**
+ * The full `reasons` array for an abstain outcome: the explicit headline, the
+ * fault kind, then quarantined detail. Callers pin `confidence: 0` and keep
+ * `decision: 'reviewer_error'`.
+ */
+export declare function abstainReasons(kind: ReviewerFaultKind, detail?: ReadonlyArray<string | null | undefined>): string[];
+/**
+ * A short operator-facing stderr line for an abstain. Names the fault kind and
+ * the abstain routing, never the model's text (which may be corrupted content).
+ */
+export declare function describeAbstainForLog(kind: ReviewerFaultKind, detail?: string): string;
+/**
+ * True when a completed review outcome/row is an ABSTAIN. Marker-based and
+ * defensive: a non-`reviewer_error` decision or absent reasons ⇒ false, so a
+ * legacy row that merely mentions abstaining is never reclassified.
+ */
+export declare function isAbstainReviewerOutcome(decision: string | null | undefined, reasons: string[] | null | undefined): boolean;
+/**
+ * Reason prefixes that are STRUCTURAL — emitted by the harness, describing the
+ * review itself rather than the code. Anything not in this set is a finding.
+ *
+ * `"review diff coverage:"` is REVIEW_DIFF_COVERAGE_MARKER from
+ * `./absence-claims.ts`; it is inlined (and pinned by a test) so this module
+ * stays dependency-free and trivially mirrorable into the runner package.
+ */
+export declare const ABSTAIN_STRUCTURAL_PREFIXES: readonly string[];
+/**
+ * True when `reasons` carries NO unquarantined, model-authored finding — the
+ * invariant an abstain must satisfy. Used by the AC2 test to prove that a
+ * simulated fault cannot smuggle a fabricated defect reason through.
+ */
+export declare function abstainCarriesNoFinding(reasons: string[] | null | undefined): boolean;
+//# sourceMappingURL=reviewer-abstain.d.ts.map

package/dist/runtime/reviewer-abstain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewer-abstain.d.ts","sourceRoot":"","sources":["../../src/runtime/reviewer-abstain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,kFAAkF;AAClF,MAAM,MAAM,iBAAiB;AAC3B,+EAA+E;AAC7E,eAAe;AACjB,8EAA8E;GAC5E,eAAe;AACjB,mEAAmE;GACjE,gBAAgB;AAClB,gFAAgF;GAC9E,cAAc,CAAC;AAEnB;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAE7D;+EAC+E;AAC/E,eAAO,MAAM,uBAAuB,QAI2C,CAAC;AAEhF;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,+CAA+C,CAAC;AAElF,yEAAyE;AACzE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAEhE;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,aAAa,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,EAC/C,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAClD,MAAM,EAAE,CAeV;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,iBAAiB,EACvB,MAAM,GAAE,aAAa,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAM,GACpD,MAAM,EAAE,CAMV;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,iBAAiB,EACvB,MAAM,GAAE,MAAW,GAClB,MAAM,CAMR;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACnC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GACnC,OAAO,CAKT;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EAOxD,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAMrF"}

package/dist/runtime/reviewer-abstain.js

@@ -0,0 +1,138 @@
+/**
+ * S15-FU/REVIEW-1 (AC2) — reviewer FAULT ⇒ explicit abstain, never a verdict.
+ *
+ * THE RULE. A reviewer fault is a statement about the HARNESS, not about the
+ * code. When the reviewer cannot render a faithful prompt, cannot parse its own
+ * output, or cites content it never actually read, the only sound outcome is
+ * "I did not review this — a human must": an explicit ABSTAIN that routes the PR
+ * to needs-review. It must NEVER be a confident reject, and it must never carry
+ * a defect reason, because on a fault path there is no evidence for one.
+ *
+ * WHY THIS MODULE EXISTS. The #1933 episode produced 0.75–0.85-confidence
+ * rejects naming a "prose spliced into the SQL literal" corruption that did not
+ * exist — the reviewer was reporting, in good faith, the harness's own prompt
+ * text that a `replace()` bug had spliced into the diff (see
+ * `./prompt-substitute.ts`). Two of those sessions even self-logged the fault and
+ * still emitted a reject. Fixing the splice (AC1) removes THAT trigger; this
+ * module removes the whole CLASS, by making every fault path structurally
+ * incapable of producing a defect claim.
+ *
+ * MECHANISM, and why the decision string is unchanged. `decision` stays
+ * `reviewer_error`, which downstream ALREADY treats as "never merges, retry or
+ * hold" — introducing a new decision value would silently fall through every
+ * classifier that switches on it. What is new is that the outcome is explicitly
+ * MARKED as an abstain, its confidence is pinned to 0, and any model-authored
+ * text is QUARANTINED behind a prefix that the finding classifiers skip, so it
+ * can be read as context by an operator and never scored as a defect.
+ *
+ * Pure. No I/O, no DB, no throw.
+ * Mirrored from `api/_lib/reviewer/abstain.ts`; the runner ships as a published
+ * npm package and cannot import from `api/_lib`.
+ * // keep in sync with api/_lib/reviewer/abstain.ts
+ */
+/**
+ * Stable marker for cheap row detection — mirrors TOOLING_FAILURE_MARKER /
+ * ACCOUNT_CAP_MARKER in `api/_lib/review-retry.ts`, so ONLY rows we classified
+ * are ever treated as abstentions.
+ */
+export const REVIEWER_ABSTAIN_MARKER = "reviewer abstained:";
+/** The headline stamped on every abstain outcome. Explicit by design: an
+ *  operator reading the row must not have to infer that nothing was judged. */
+export const REVIEWER_ABSTAIN_REASON = `${REVIEWER_ABSTAIN_MARKER} the reviewer harness faulted, so NO code judgement ` +
+    "was formed — this is NOT a defect finding and NOT a reject. The PR needs " +
+    "HUMAN VERIFICATION: route to needs-review and have an operator read the diff. " +
+    "Any reviewer text below is quarantined diagnostic context, never a finding.";
+/**
+ * Prefix applied to every model-authored / fault-detail line carried alongside an
+ * abstain. Deliberately leads with "advisory" so the RR-3 severity classifiers
+ * and the calibration reason-matchers read it as non-blocking context.
+ */
+export const ABSTAIN_DETAIL_PREFIX = "abstain_context (advisory, not a finding):";
+/** A one-line, machine-greppable statement of which fault kind fired. */
+export function abstainFaultLine(kind) {
+    return `abstain_fault_kind: ${kind}`;
+}
+/**
+ * Quarantine fault detail behind ABSTAIN_DETAIL_PREFIX. Empty/blank lines are
+ * dropped, each line is capped, and the list is bounded so a runaway model
+ * response cannot bloat the stored row.
+ */
+export function quarantineAbstainDetail(lines, opts = {}) {
+    const maxLines = opts.maxLines ?? 6;
+    const maxChars = opts.maxChars ?? 300;
+    const out = [];
+    for (const raw of lines ?? []) {
+        const text = (raw ?? "").trim();
+        if (!text)
+            continue;
+        // Already quarantined (or already the headline) → pass through untouched.
+        const prefixed = text.startsWith(ABSTAIN_DETAIL_PREFIX) || text.startsWith(REVIEWER_ABSTAIN_MARKER)
+            ? text
+            : `${ABSTAIN_DETAIL_PREFIX} ${text}`;
+        out.push(prefixed.slice(0, maxChars));
+        if (out.length >= maxLines)
+            break;
+    }
+    return out;
+}
+/**
+ * The full `reasons` array for an abstain outcome: the explicit headline, the
+ * fault kind, then quarantined detail. Callers pin `confidence: 0` and keep
+ * `decision: 'reviewer_error'`.
+ */
+export function abstainReasons(kind, detail = []) {
+    return [
+        REVIEWER_ABSTAIN_REASON,
+        abstainFaultLine(kind),
+        ...quarantineAbstainDetail(detail),
+    ];
+}
+/**
+ * A short operator-facing stderr line for an abstain. Names the fault kind and
+ * the abstain routing, never the model's text (which may be corrupted content).
+ */
+export function describeAbstainForLog(kind, detail = "") {
+    const tail = detail.trim() ? ` — ${detail.trim().slice(0, 200)}` : "";
+    return (`[reviewer] ABSTAIN (${kind}): harness fault, no code judgement formed; ` +
+        `routing to needs-review for human verification${tail}\n`);
+}
+/**
+ * True when a completed review outcome/row is an ABSTAIN. Marker-based and
+ * defensive: a non-`reviewer_error` decision or absent reasons ⇒ false, so a
+ * legacy row that merely mentions abstaining is never reclassified.
+ */
+export function isAbstainReviewerOutcome(decision, reasons) {
+    if (decision !== "reviewer_error")
+        return false;
+    return (reasons ?? []).some((r) => typeof r === "string" && r.includes(REVIEWER_ABSTAIN_MARKER));
+}
+/**
+ * Reason prefixes that are STRUCTURAL — emitted by the harness, describing the
+ * review itself rather than the code. Anything not in this set is a finding.
+ *
+ * `"review diff coverage:"` is REVIEW_DIFF_COVERAGE_MARKER from
+ * `./absence-claims.ts`; it is inlined (and pinned by a test) so this module
+ * stays dependency-free and trivially mirrorable into the runner package.
+ */
+export const ABSTAIN_STRUCTURAL_PREFIXES = [
+    REVIEWER_ABSTAIN_MARKER,
+    ABSTAIN_DETAIL_PREFIX,
+    "abstain_fault_kind:",
+    // Read-coverage telemetry stamped on every outcome: it states how MUCH was
+    // read, never what is wrong. // keep in sync with REVIEW_DIFF_COVERAGE_MARKER
+    "review diff coverage:",
+];
+/**
+ * True when `reasons` carries NO unquarantined, model-authored finding — the
+ * invariant an abstain must satisfy. Used by the AC2 test to prove that a
+ * simulated fault cannot smuggle a fabricated defect reason through.
+ */
+export function abstainCarriesNoFinding(reasons) {
+    return (reasons ?? []).every((r) => {
+        const text = (r ?? "").trim();
+        if (!text)
+            return true;
+        return ABSTAIN_STRUCTURAL_PREFIXES.some((p) => text.startsWith(p));
+    });
+}
+//# sourceMappingURL=reviewer-abstain.js.map

package/dist/runtime/reviewer-abstain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewer-abstain.js","sourceRoot":"","sources":["../../src/runtime/reviewer-abstain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAaH;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAE7D;+EAC+E;AAC/E,MAAM,CAAC,MAAM,uBAAuB,GAClC,GAAG,uBAAuB,sDAAsD;IAChF,2EAA2E;IAC3E,gFAAgF;IAChF,6EAA6E,CAAC;AAEhF;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,4CAA4C,CAAC;AAElF,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,IAAuB;IACtD,OAAO,uBAAuB,IAAI,EAAE,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAA+C,EAC/C,OAAiD,EAAE;IAEnD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC;IACtC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC;YACjG,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,GAAG,qBAAqB,IAAI,IAAI,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QACtC,IAAI,GAAG,CAAC,MAAM,IAAI,QAAQ;YAAE,MAAM;IACpC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAuB,EACvB,SAAmD,EAAE;IAErD,OAAO;QACL,uBAAuB;QACvB,gBAAgB,CAAC,IAAI,CAAC;QACtB,GAAG,uBAAuB,CAAC,MAAM,CAAC;KACnC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAuB,EACvB,SAAiB,EAAE;IAEnB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,OAAO,CACL,uBAAuB,IAAI,8CAA8C;QACzE,iDAAiD,IAAI,IAAI,CAC1D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAmC,EACnC,OAAoC;IAEpC,IAAI,QAAQ,KAAK,gBAAgB;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CACzB,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CACpE,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsB;IAC5D,uBAAuB;IACvB,qBAAqB;IACrB,qBAAqB;IACrB,2EAA2E;IAC3E,8EAA8E;IAC9E,uBAAuB;CACxB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAoC;IAC1E,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,OAAO,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/reviewer.d.ts

@@ -17,6 +17,9 @@
 import { type ExecaChildProcess } from "execa";
 import { type ReviewerProbeResult } from "../failure-classifier.js";
 import { type ReviewChunk } from "./review-chunking.js";
+import { type DecisionProvenance } from "./decision-provenance.js";
+import { type PromptRenderBleed } from "./prompt-substitute.js";
+import { type ReviewCostCapDecision, type ReviewCostLedger } from "./review-cost-cap.js";
 import { type TolerantRemoveResult } from "../review-worktree-cleanup.js";
 import type { RunnerSupabaseClient } from "../supabase.js";
 export interface ReviewAssignment {
@@ -43,6 +46,14 @@ export interface ReviewerOutcome {
      * this.
      */
     resume_at?: string | null;
+    /**
+     * REVIEW-DECISION-PROVENANCE: set only when the decision was SYNTHESIZED (the
+     * prose fallback inferred it from a keyword) rather than asserted by a
+     * structured verdict. In-memory until the submit seam, which renders it into
+     * `reasons` — carrying it as a field keeps it out of every reason classifier
+     * (coverage-claim partitioning, severity calibration) on the way there.
+     */
+    decision_provenance?: DecisionProvenance;
     /**
      * RVU-2 (FU-RVU2R): the model that actually produced (or, on capacity/env
      * failure, was last attempted for) this verdict. On a capacity fallback this
@@ -67,6 +78,31 @@ export interface ReviewerOutcome {
      * for reviews) before ever pausing reviews. In-memory only.
      */
     capacity_degraded?: boolean;
+    /**
+     * REV-COST: the SIZE-SCALED cap this review was actually judged against
+     * (`effectiveReviewCostCap(policy.max_cost_usd_per_review, diff.length)`),
+     * mirroring the server outcome field of the same name. Present on every
+     * outcome that reached the spawn loop. In-memory only — never sent to
+     * submit_review (frozen RPC).
+     */
+    cost_cap?: ReviewCostCapDecision;
+    /**
+     * REV-COST: the per-attempt cost ledger. `chargeable_usd` (productive
+     * attempts only) is what the cap is checked against; `infra_usd`
+     * (capacity/auth faults) is reported but NEVER charged. `cost_usd` above stays
+     * the honest TOTAL, so the queue row and the org daily/cycle budgets still see
+     * every dollar spent.
+     */
+    cost_breakdown?: ReviewCostLedger;
+    /**
+     * REV-COST: the chargeable spend exceeded the effective cap but stayed
+     * inside the runaway tolerance band, so the verdict was KEPT rather than
+     * discarded (the money was already spent; throwing the verdict away only
+     * stranded the PR and re-charged the same review on the next tick — #1937 at
+     * $18 against an $8 flat cap). The verdict is real and mergeable; the overrun
+     * is an operator signal, carried as an advisory reason.
+     */
+    cost_overrun?: boolean;
 }
 export declare const REVIEWER_PROMPT_TEMPLATE: string;
 /** Report sections whose prose IS a delivery claim — the rule may fire here. */
@@ -198,6 +234,39 @@ export declare function classifyCapacityRetry(opts: {
 export declare function resolveCapacityRetries(raw: string | undefined | null): number;
 /** Returns true when a claude stderr string indicates a transient API error that is safe to retry. */
 export declare function isRetriableError(stderr: string): boolean;
+/** S15-FU/REVIEW-1 (AC1): a rendered prompt plus its integrity verdict. */
+export interface ReviewerPromptRender {
+    prompt: string;
+    /**
+     * Values that did NOT survive substitution verbatim. Non-empty means the render
+     * mangled PR content (the #1933 class) and the review MUST NOT proceed on this
+     * prompt — the review seam degrades to an abstain instead.
+     */
+    bleed: PromptRenderBleed[];
+}
+export declare function renderReviewerPromptChecked(args: {
+    task_description: string;
+    acceptance_criteria: string[];
+    pr_title: string;
+    pr_body: string;
+    pr_diff: string;
+}): ReviewerPromptRender;
+/**
+ * S15-FU/REVIEW-1 (AC1): the ORDERED placeholder/value pairs a reviewer prompt
+ * substitutes, so the render-integrity check (and its test) can assert that every
+ * one of these values survived into the prompt VERBATIM.
+ * // keep in sync with reviewerPlaceholderPairs in api/_lib/reviewer-agent.ts
+ */
+export declare function reviewerPlaceholderPairs(args: {
+    task_description: string;
+    pr_title: string;
+    pr_body: string;
+}, diff: string, acceptance: string): ReadonlyArray<readonly [string, string]>;
+/**
+ * String façade over `renderReviewerPromptChecked` — the signature every existing
+ * caller and the RF-3 parity tests use. Integrity is enforced at the review seam,
+ * which needs the `bleed` list to build its abstain.
+ */
 export declare function renderReviewerPrompt(args: {
     task_description: string;
     acceptance_criteria: string[];
@@ -247,6 +316,12 @@ export declare function extractReviewerDecision(text: string): {
     decision: "approve" | "reject";
     reasons: string[];
     confidence: number;
+    /**
+     * REVIEW-DECISION-PROVENANCE: present only on the prose fallback, where the
+     * decision is INFERRED from a keyword instead of asserted (the PR #1913
+     * shape). The submit seam renders it into the persisted reasons.
+     */
+    decision_provenance?: DecisionProvenance;
 } | null;
 /**
  * R0-D-REVIEWER-WORKSPACE-INTEGRITY — the verified review tree. Produced by

package/dist/runtime/reviewer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reviewer.d.ts","sourceRoot":"","sources":["../../src/runtime/reviewer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAS,KAAK,iBAAiB,EAAE,MAAM,OAAO,CAAC;AAMtD,OAAO,EAIL,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAQlC,OAAO,EAML,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAA2B,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACnG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAI,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uBAAuB,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,QAAQ,GACR,mBAAmB,GACnB,gBAAgB,GAOhB,mBAAmB,GAOnB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAI,gBAAgB,CAAC;IAC7B,OAAO,EAAK,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAI,MAAM,CAAC;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAwBD,eAAO,MAAM,wBAAwB,QA6HzB,CAAC;AAgBb,gFAAgF;AAChF,eAAO,MAAM,0BAA0B,0CAA2C,CAAC;AAEnF;;;GAGG;AACH,eAAO,MAAM,4BAA4B,qDAI/B,CAAC;AAmBX,MAAM,WAAW,mBAAmB;IAClC,8EAA8E;IAC9E,OAAO,EAAK,MAAM,CAAC;IACnB,MAAM,EAAM,MAAM,CAAC;IACnB,IAAI,EAAQ,MAAM,CAAC;IACnB,2EAA2E;IAC3E,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAclE;AASD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAoB3E;AAwBD,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAQ9C,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAKlE;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAOjF;AAED,yFAAyF;AACzF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAItE;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GACpC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAatC;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAerC;AAED,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAO,OAAO,CAAC;IACxB,UAAU,EAAM,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAK,MAAM,CAAC;IACvB,aAAa,EAAG,MAAM,EAAE,CAAC;IACzB,wEAAwE;IACxE,YAAY,EAAI,MAAM,GAAG,IAAI,CAAC;IAC9B,yEAAyE;IACzE,SAAS,EAAO,OAAO,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAc,EAC1C,QAAQ,GAAE,MAAuB,GAChC,kBAAkB,CAuBpB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EAAE,EACjB,WAAW,GAAE,MAAM,GAAG,IAAW,EACjC,SAAS,UAAQ,GAChB,MAAM,CAkCR;AAiBD,eAAO,MAAM,oBAAoB,kCAAkC,CAAC;AACpE,eAAO,MAAM,iCAAiC,IAAI,CAAC;AAWnD,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,QAEmB,CAAC;AAI3D,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,EACpB,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7C,MAAM,CAOR;AAED,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,WAAW,CAAC;AAExD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG;IAAE,MAAM,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAQnD;AAED;kEACkE;AAClE,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAM7E;AAED,sGAAsG;AACtG,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAIxD;AAMD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAmCT;AAaD,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAmC3D;AAED,kEAAkE;AAClE,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAmBhE;AAMD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,WAAW,EAAE,EACrB,MAAM,EAAE,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,EAC1E,QAAQ,EAAE,MAAM,EAAE,GACjB,MAAM,CAmBR;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAKR;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,eAAe,GAAG,eAAe,CAc7E;AAQD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG;IACrD,QAAQ,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC/B,OAAO,EAAG,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,IAAI,CA8DP;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,OAAO,IAAI,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,0EAA0E;IAC1E,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3F;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChC,wGAAwG;IACxG,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,iBAAiB,CAAC;IACrD,yFAAyF;IACzF,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAC/D,mEAAmE;IACnE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAClD,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAoOD;;;;;GAKG;AACH,wBAAsB,SAAS,CAC7B,UAAU,EAAE,gBAAgB,EAC5B,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,eAAe,CAAC,CA2D1B"}
+{"version":3,"file":"reviewer.d.ts","sourceRoot":"","sources":["../../src/runtime/reviewer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAS,KAAK,iBAAiB,EAAE,MAAM,OAAO,CAAC;AAMtD,OAAO,EAIL,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAQlC,OAAO,EAML,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAIL,KAAK,kBAAkB,EACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,wBAAwB,CAAC;AAKhC,OAAO,EAOL,KAAK,qBAAqB,EAE1B,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAA2B,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACnG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAI,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uBAAuB,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,QAAQ,GACR,mBAAmB,GACnB,gBAAgB,GAOhB,mBAAmB,GAOnB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAI,gBAAgB,CAAC;IAC7B,OAAO,EAAK,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAI,MAAM,CAAC;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,kBAAkB,CAAC;IACzC;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAwBD,eAAO,MAAM,wBAAwB,QA6HzB,CAAC;AAgBb,gFAAgF;AAChF,eAAO,MAAM,0BAA0B,0CAA2C,CAAC;AAEnF;;;GAGG;AACH,eAAO,MAAM,4BAA4B,qDAI/B,CAAC;AAmBX,MAAM,WAAW,mBAAmB;IAClC,8EAA8E;IAC9E,OAAO,EAAK,MAAM,CAAC;IACnB,MAAM,EAAM,MAAM,CAAC;IACnB,IAAI,EAAQ,MAAM,CAAC;IACnB,2EAA2E;IAC3E,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAclE;AASD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAoB3E;AAwBD,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAQ9C,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAKlE;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAOjF;AAED,yFAAyF;AACzF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAItE;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GACpC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAatC;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAerC;AAED,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAO,OAAO,CAAC;IACxB,UAAU,EAAM,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAK,MAAM,CAAC;IACvB,aAAa,EAAG,MAAM,EAAE,CAAC;IACzB,wEAAwE;IACxE,YAAY,EAAI,MAAM,GAAG,IAAI,CAAC;IAC9B,yEAAyE;IACzE,SAAS,EAAO,OAAO,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAc,EAC1C,QAAQ,GAAE,MAAuB,GAChC,kBAAkB,CAuBpB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EAAE,EACjB,WAAW,GAAE,MAAM,GAAG,IAAW,EACjC,SAAS,UAAQ,GAChB,MAAM,CAkCR;AAiBD,eAAO,MAAM,oBAAoB,kCAAkC,CAAC;AACpE,eAAO,MAAM,iCAAiC,IAAI,CAAC;AAWnD,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,QAEmB,CAAC;AAI3D,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,EACpB,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7C,MAAM,CAOR;AAED,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,WAAW,CAAC;AAExD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG;IAAE,MAAM,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAQnD;AAED;kEACkE;AAClE,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAM7E;AAED,sGAAsG;AACtG,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAIxD;AAMD,2EAA2E;AAC3E,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,KAAK,EAAE,iBAAiB,EAAE,CAAC;CAC5B;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE;IAChD,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,oBAAoB,CAuCvB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE;IAAE,gBAAgB,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EACrE,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,GACjB,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAQ1C;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAET;AAaD,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAmC3D;AAED,kEAAkE;AAClE,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAmBhE;AAMD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,WAAW,EAAE,EACrB,MAAM,EAAE,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,EAC1E,QAAQ,EAAE,MAAM,EAAE,GACjB,MAAM,CAmBR;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAKR;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,eAAe,GAAG,eAAe,CAc7E;AAQD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG;IACrD,QAAQ,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC/B,OAAO,EAAG,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,kBAAkB,CAAC;CAC1C,GAAG,IAAI,CAyEP;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,OAAO,IAAI,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,0EAA0E;IAC1E,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3F;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChC,wGAAwG;IACxG,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,iBAAiB,CAAC;IACrD,yFAAyF;IACzF,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAC/D,mEAAmE;IACnE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAClD,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAoOD;;;;;GAKG;AACH,wBAAsB,SAAS,CAC7B,UAAU,EAAE,gBAAgB,EAC5B,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,eAAe,CAAC,CA4E1B"}