@tokenfactory/acc-runner 0.44.0 → 0.44.2

package/dist/runtime/reviewer-abstain.d.ts

@@ -0,0 +1,101 @@
+/**
+ * S15-FU/REVIEW-1 (AC2) — reviewer FAULT ⇒ explicit abstain, never a verdict.
+ *
+ * THE RULE. A reviewer fault is a statement about the HARNESS, not about the
+ * code. When the reviewer cannot render a faithful prompt, cannot parse its own
+ * output, or cites content it never actually read, the only sound outcome is
+ * "I did not review this — a human must": an explicit ABSTAIN that routes the PR
+ * to needs-review. It must NEVER be a confident reject, and it must never carry
+ * a defect reason, because on a fault path there is no evidence for one.
+ *
+ * WHY THIS MODULE EXISTS. The #1933 episode produced 0.75–0.85-confidence
+ * rejects naming a "prose spliced into the SQL literal" corruption that did not
+ * exist — the reviewer was reporting, in good faith, the harness's own prompt
+ * text that a `replace()` bug had spliced into the diff (see
+ * `./prompt-substitute.ts`). Two of those sessions even self-logged the fault and
+ * still emitted a reject. Fixing the splice (AC1) removes THAT trigger; this
+ * module removes the whole CLASS, by making every fault path structurally
+ * incapable of producing a defect claim.
+ *
+ * MECHANISM, and why the decision string is unchanged. `decision` stays
+ * `reviewer_error`, which downstream ALREADY treats as "never merges, retry or
+ * hold" — introducing a new decision value would silently fall through every
+ * classifier that switches on it. What is new is that the outcome is explicitly
+ * MARKED as an abstain, its confidence is pinned to 0, and any model-authored
+ * text is QUARANTINED behind a prefix that the finding classifiers skip, so it
+ * can be read as context by an operator and never scored as a defect.
+ *
+ * Pure. No I/O, no DB, no throw.
+ * Mirrored from `api/_lib/reviewer/abstain.ts`; the runner ships as a published
+ * npm package and cannot import from `api/_lib`.
+ * // keep in sync with api/_lib/reviewer/abstain.ts
+ */
+/** What faulted. Recorded verbatim on the outcome so the trail is diagnosable. */
+export type ReviewerFaultKind = 
+/** The rendered prompt did not carry the PR content verbatim (#1933 class). */
+"prompt_render"
+/** The reviewer's own JSON verdict could not be parsed, even after repair. */
+ | "verdict_parse"
+/** The CLI/API envelope around the verdict could not be parsed. */
+ | "envelope_parse"
+/** The verdict cited a file/diff the verification tooling never read (RR-3). */
+ | "tooling_read";
+/**
+ * Stable marker for cheap row detection — mirrors TOOLING_FAILURE_MARKER /
+ * ACCOUNT_CAP_MARKER in `api/_lib/review-retry.ts`, so ONLY rows we classified
+ * are ever treated as abstentions.
+ */
+export declare const REVIEWER_ABSTAIN_MARKER = "reviewer abstained:";
+/** The headline stamped on every abstain outcome. Explicit by design: an
+ *  operator reading the row must not have to infer that nothing was judged. */
+export declare const REVIEWER_ABSTAIN_REASON: string;
+/**
+ * Prefix applied to every model-authored / fault-detail line carried alongside an
+ * abstain. Deliberately leads with "advisory" so the RR-3 severity classifiers
+ * and the calibration reason-matchers read it as non-blocking context.
+ */
+export declare const ABSTAIN_DETAIL_PREFIX = "abstain_context (advisory, not a finding):";
+/** A one-line, machine-greppable statement of which fault kind fired. */
+export declare function abstainFaultLine(kind: ReviewerFaultKind): string;
+/**
+ * Quarantine fault detail behind ABSTAIN_DETAIL_PREFIX. Empty/blank lines are
+ * dropped, each line is capped, and the list is bounded so a runaway model
+ * response cannot bloat the stored row.
+ */
+export declare function quarantineAbstainDetail(lines: ReadonlyArray<string | null | undefined>, opts?: {
+    maxLines?: number;
+    maxChars?: number;
+}): string[];
+/**
+ * The full `reasons` array for an abstain outcome: the explicit headline, the
+ * fault kind, then quarantined detail. Callers pin `confidence: 0` and keep
+ * `decision: 'reviewer_error'`.
+ */
+export declare function abstainReasons(kind: ReviewerFaultKind, detail?: ReadonlyArray<string | null | undefined>): string[];
+/**
+ * A short operator-facing stderr line for an abstain. Names the fault kind and
+ * the abstain routing, never the model's text (which may be corrupted content).
+ */
+export declare function describeAbstainForLog(kind: ReviewerFaultKind, detail?: string): string;
+/**
+ * True when a completed review outcome/row is an ABSTAIN. Marker-based and
+ * defensive: a non-`reviewer_error` decision or absent reasons ⇒ false, so a
+ * legacy row that merely mentions abstaining is never reclassified.
+ */
+export declare function isAbstainReviewerOutcome(decision: string | null | undefined, reasons: string[] | null | undefined): boolean;
+/**
+ * Reason prefixes that are STRUCTURAL — emitted by the harness, describing the
+ * review itself rather than the code. Anything not in this set is a finding.
+ *
+ * `"review diff coverage:"` is REVIEW_DIFF_COVERAGE_MARKER from
+ * `./absence-claims.ts`; it is inlined (and pinned by a test) so this module
+ * stays dependency-free and trivially mirrorable into the runner package.
+ */
+export declare const ABSTAIN_STRUCTURAL_PREFIXES: readonly string[];
+/**
+ * True when `reasons` carries NO unquarantined, model-authored finding — the
+ * invariant an abstain must satisfy. Used by the AC2 test to prove that a
+ * simulated fault cannot smuggle a fabricated defect reason through.
+ */
+export declare function abstainCarriesNoFinding(reasons: string[] | null | undefined): boolean;
+//# sourceMappingURL=reviewer-abstain.d.ts.map

package/dist/runtime/reviewer-abstain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewer-abstain.d.ts","sourceRoot":"","sources":["../../src/runtime/reviewer-abstain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,kFAAkF;AAClF,MAAM,MAAM,iBAAiB;AAC3B,+EAA+E;AAC7E,eAAe;AACjB,8EAA8E;GAC5E,eAAe;AACjB,mEAAmE;GACjE,gBAAgB;AAClB,gFAAgF;GAC9E,cAAc,CAAC;AAEnB;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAE7D;+EAC+E;AAC/E,eAAO,MAAM,uBAAuB,QAI2C,CAAC;AAEhF;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,+CAA+C,CAAC;AAElF,yEAAyE;AACzE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAEhE;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,aAAa,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,EAC/C,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAClD,MAAM,EAAE,CAeV;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,iBAAiB,EACvB,MAAM,GAAE,aAAa,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAM,GACpD,MAAM,EAAE,CAMV;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,iBAAiB,EACvB,MAAM,GAAE,MAAW,GAClB,MAAM,CAMR;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACnC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GACnC,OAAO,CAKT;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EAOxD,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAMrF"}

package/dist/runtime/reviewer-abstain.js

@@ -0,0 +1,138 @@
+/**
+ * S15-FU/REVIEW-1 (AC2) — reviewer FAULT ⇒ explicit abstain, never a verdict.
+ *
+ * THE RULE. A reviewer fault is a statement about the HARNESS, not about the
+ * code. When the reviewer cannot render a faithful prompt, cannot parse its own
+ * output, or cites content it never actually read, the only sound outcome is
+ * "I did not review this — a human must": an explicit ABSTAIN that routes the PR
+ * to needs-review. It must NEVER be a confident reject, and it must never carry
+ * a defect reason, because on a fault path there is no evidence for one.
+ *
+ * WHY THIS MODULE EXISTS. The #1933 episode produced 0.75–0.85-confidence
+ * rejects naming a "prose spliced into the SQL literal" corruption that did not
+ * exist — the reviewer was reporting, in good faith, the harness's own prompt
+ * text that a `replace()` bug had spliced into the diff (see
+ * `./prompt-substitute.ts`). Two of those sessions even self-logged the fault and
+ * still emitted a reject. Fixing the splice (AC1) removes THAT trigger; this
+ * module removes the whole CLASS, by making every fault path structurally
+ * incapable of producing a defect claim.
+ *
+ * MECHANISM, and why the decision string is unchanged. `decision` stays
+ * `reviewer_error`, which downstream ALREADY treats as "never merges, retry or
+ * hold" — introducing a new decision value would silently fall through every
+ * classifier that switches on it. What is new is that the outcome is explicitly
+ * MARKED as an abstain, its confidence is pinned to 0, and any model-authored
+ * text is QUARANTINED behind a prefix that the finding classifiers skip, so it
+ * can be read as context by an operator and never scored as a defect.
+ *
+ * Pure. No I/O, no DB, no throw.
+ * Mirrored from `api/_lib/reviewer/abstain.ts`; the runner ships as a published
+ * npm package and cannot import from `api/_lib`.
+ * // keep in sync with api/_lib/reviewer/abstain.ts
+ */
+/**
+ * Stable marker for cheap row detection — mirrors TOOLING_FAILURE_MARKER /
+ * ACCOUNT_CAP_MARKER in `api/_lib/review-retry.ts`, so ONLY rows we classified
+ * are ever treated as abstentions.
+ */
+export const REVIEWER_ABSTAIN_MARKER = "reviewer abstained:";
+/** The headline stamped on every abstain outcome. Explicit by design: an
+ *  operator reading the row must not have to infer that nothing was judged. */
+export const REVIEWER_ABSTAIN_REASON = `${REVIEWER_ABSTAIN_MARKER} the reviewer harness faulted, so NO code judgement ` +
+    "was formed — this is NOT a defect finding and NOT a reject. The PR needs " +
+    "HUMAN VERIFICATION: route to needs-review and have an operator read the diff. " +
+    "Any reviewer text below is quarantined diagnostic context, never a finding.";
+/**
+ * Prefix applied to every model-authored / fault-detail line carried alongside an
+ * abstain. Deliberately leads with "advisory" so the RR-3 severity classifiers
+ * and the calibration reason-matchers read it as non-blocking context.
+ */
+export const ABSTAIN_DETAIL_PREFIX = "abstain_context (advisory, not a finding):";
+/** A one-line, machine-greppable statement of which fault kind fired. */
+export function abstainFaultLine(kind) {
+    return `abstain_fault_kind: ${kind}`;
+}
+/**
+ * Quarantine fault detail behind ABSTAIN_DETAIL_PREFIX. Empty/blank lines are
+ * dropped, each line is capped, and the list is bounded so a runaway model
+ * response cannot bloat the stored row.
+ */
+export function quarantineAbstainDetail(lines, opts = {}) {
+    const maxLines = opts.maxLines ?? 6;
+    const maxChars = opts.maxChars ?? 300;
+    const out = [];
+    for (const raw of lines ?? []) {
+        const text = (raw ?? "").trim();
+        if (!text)
+            continue;
+        // Already quarantined (or already the headline) → pass through untouched.
+        const prefixed = text.startsWith(ABSTAIN_DETAIL_PREFIX) || text.startsWith(REVIEWER_ABSTAIN_MARKER)
+            ? text
+            : `${ABSTAIN_DETAIL_PREFIX} ${text}`;
+        out.push(prefixed.slice(0, maxChars));
+        if (out.length >= maxLines)
+            break;
+    }
+    return out;
+}
+/**
+ * The full `reasons` array for an abstain outcome: the explicit headline, the
+ * fault kind, then quarantined detail. Callers pin `confidence: 0` and keep
+ * `decision: 'reviewer_error'`.
+ */
+export function abstainReasons(kind, detail = []) {
+    return [
+        REVIEWER_ABSTAIN_REASON,
+        abstainFaultLine(kind),
+        ...quarantineAbstainDetail(detail),
+    ];
+}
+/**
+ * A short operator-facing stderr line for an abstain. Names the fault kind and
+ * the abstain routing, never the model's text (which may be corrupted content).
+ */
+export function describeAbstainForLog(kind, detail = "") {
+    const tail = detail.trim() ? ` — ${detail.trim().slice(0, 200)}` : "";
+    return (`[reviewer] ABSTAIN (${kind}): harness fault, no code judgement formed; ` +
+        `routing to needs-review for human verification${tail}\n`);
+}
+/**
+ * True when a completed review outcome/row is an ABSTAIN. Marker-based and
+ * defensive: a non-`reviewer_error` decision or absent reasons ⇒ false, so a
+ * legacy row that merely mentions abstaining is never reclassified.
+ */
+export function isAbstainReviewerOutcome(decision, reasons) {
+    if (decision !== "reviewer_error")
+        return false;
+    return (reasons ?? []).some((r) => typeof r === "string" && r.includes(REVIEWER_ABSTAIN_MARKER));
+}
+/**
+ * Reason prefixes that are STRUCTURAL — emitted by the harness, describing the
+ * review itself rather than the code. Anything not in this set is a finding.
+ *
+ * `"review diff coverage:"` is REVIEW_DIFF_COVERAGE_MARKER from
+ * `./absence-claims.ts`; it is inlined (and pinned by a test) so this module
+ * stays dependency-free and trivially mirrorable into the runner package.
+ */
+export const ABSTAIN_STRUCTURAL_PREFIXES = [
+    REVIEWER_ABSTAIN_MARKER,
+    ABSTAIN_DETAIL_PREFIX,
+    "abstain_fault_kind:",
+    // Read-coverage telemetry stamped on every outcome: it states how MUCH was
+    // read, never what is wrong. // keep in sync with REVIEW_DIFF_COVERAGE_MARKER
+    "review diff coverage:",
+];
+/**
+ * True when `reasons` carries NO unquarantined, model-authored finding — the
+ * invariant an abstain must satisfy. Used by the AC2 test to prove that a
+ * simulated fault cannot smuggle a fabricated defect reason through.
+ */
+export function abstainCarriesNoFinding(reasons) {
+    return (reasons ?? []).every((r) => {
+        const text = (r ?? "").trim();
+        if (!text)
+            return true;
+        return ABSTAIN_STRUCTURAL_PREFIXES.some((p) => text.startsWith(p));
+    });
+}
+//# sourceMappingURL=reviewer-abstain.js.map

package/dist/runtime/reviewer-abstain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewer-abstain.js","sourceRoot":"","sources":["../../src/runtime/reviewer-abstain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAaH;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAE7D;+EAC+E;AAC/E,MAAM,CAAC,MAAM,uBAAuB,GAClC,GAAG,uBAAuB,sDAAsD;IAChF,2EAA2E;IAC3E,gFAAgF;IAChF,6EAA6E,CAAC;AAEhF;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,4CAA4C,CAAC;AAElF,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,IAAuB;IACtD,OAAO,uBAAuB,IAAI,EAAE,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAA+C,EAC/C,OAAiD,EAAE;IAEnD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC;IACtC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC;YACjG,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,GAAG,qBAAqB,IAAI,IAAI,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QACtC,IAAI,GAAG,CAAC,MAAM,IAAI,QAAQ;YAAE,MAAM;IACpC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAuB,EACvB,SAAmD,EAAE;IAErD,OAAO;QACL,uBAAuB;QACvB,gBAAgB,CAAC,IAAI,CAAC;QACtB,GAAG,uBAAuB,CAAC,MAAM,CAAC;KACnC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAuB,EACvB,SAAiB,EAAE;IAEnB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,OAAO,CACL,uBAAuB,IAAI,8CAA8C;QACzE,iDAAiD,IAAI,IAAI,CAC1D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAmC,EACnC,OAAoC;IAEpC,IAAI,QAAQ,KAAK,gBAAgB;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CACzB,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CACpE,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsB;IAC5D,uBAAuB;IACvB,qBAAqB;IACrB,qBAAqB;IACrB,2EAA2E;IAC3E,8EAA8E;IAC9E,uBAAuB;CACxB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAoC;IAC1E,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,OAAO,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/reviewer.d.ts

@@ -16,7 +16,11 @@
  */
 import { type ExecaChildProcess } from "execa";
 import { type ReviewerProbeResult } from "../failure-classifier.js";
+import type { AgentEngine } from "../engines/types.js";
 import { type ReviewChunk } from "./review-chunking.js";
+import { type DecisionProvenance } from "./decision-provenance.js";
+import { type PromptRenderBleed } from "./prompt-substitute.js";
+import { type ReviewCostCapDecision, type ReviewCostLedger } from "./review-cost-cap.js";
 import { type TolerantRemoveResult } from "../review-worktree-cleanup.js";
 import type { RunnerSupabaseClient } from "../supabase.js";
 export interface ReviewAssignment {
@@ -28,6 +32,11 @@ export interface ReviewerPolicy {
     model_id: string;
     confidence_threshold: number;
     max_cost_usd_per_review: number;
+    /**
+     * Org setting: how review chooses an engine independently from the authoring
+     * engine. Missing/malformed defaults to `prefer_different_family`.
+     */
+    reviewer_engine_policy?: ReviewerEngineSelectionPolicy;
 }
 export type ReviewerDecision = "approve" | "reject" | "cost_cap_exceeded" | "reviewer_error" | "reviewer_capacity" | "review_fetch_failed";
 export interface ReviewerOutcome {
@@ -36,6 +45,17 @@ export interface ReviewerOutcome {
     confidence: number;
     session_id: string | null;
     cost_usd: number;
+    /**
+     * RUNNER-DISCARDS-STDOUT-ON-FAILURE-1: the end-truncated, credential-scrubbed
+     * child stdout/stderr tails captured on a genuine `reviewer_error` (task_error
+     * / usage_limit), so the real failure is preserved and not thrown away with
+     * only the banner. Mirrors the task-runner's `claude_exit` event fields.
+     * `submit_review` is a frozen RPC (reasons-only), so these are recorded
+     * durably through the additive `task.reviewer_error` `log_activity` verb in
+     * `runReview`, never sent to `submit_review`. In-memory otherwise.
+     */
+    stdout_tail?: string;
+    stderr_tail?: string;
     /**
      * v0.56 (T-56-1): set only on `reviewer_capacity` — the stated reset
      * instant (ISO-8601) parsed from claude's "...resets <time>" message, or
@@ -43,6 +63,16 @@ export interface ReviewerOutcome {
      * this.
      */
     resume_at?: string | null;
+    /** Coding engine that produced a reviewer capacity outcome. */
+    engine?: string | null;
+    /**
+     * REVIEW-DECISION-PROVENANCE: set only when the decision was SYNTHESIZED (the
+     * prose fallback inferred it from a keyword) rather than asserted by a
+     * structured verdict. In-memory until the submit seam, which renders it into
+     * `reasons` — carrying it as a field keeps it out of every reason classifier
+     * (coverage-claim partitioning, severity calibration) on the way there.
+     */
+    decision_provenance?: DecisionProvenance;
     /**
      * RVU-2 (FU-RVU2R): the model that actually produced (or, on capacity/env
      * failure, was last attempted for) this verdict. On a capacity fallback this
@@ -67,8 +97,49 @@ export interface ReviewerOutcome {
      * for reviews) before ever pausing reviews. In-memory only.
      */
     capacity_degraded?: boolean;
+    /**
+     * REV-COST: the SIZE-SCALED cap this review was actually judged against
+     * (`effectiveReviewCostCap(policy.max_cost_usd_per_review, diff.length)`),
+     * mirroring the server outcome field of the same name. Present on every
+     * outcome that reached the spawn loop. In-memory only — never sent to
+     * submit_review (frozen RPC).
+     */
+    cost_cap?: ReviewCostCapDecision;
+    /**
+     * REV-COST: the per-attempt cost ledger. `chargeable_usd` (productive
+     * attempts only) is what the cap is checked against; `infra_usd`
+     * (capacity/auth faults) is reported but NEVER charged. `cost_usd` above stays
+     * the honest TOTAL, so the queue row and the org daily/cycle budgets still see
+     * every dollar spent.
+     */
+    cost_breakdown?: ReviewCostLedger;
+    /**
+     * REV-COST: the chargeable spend exceeded the effective cap but stayed
+     * inside the runaway tolerance band, so the verdict was KEPT rather than
+     * discarded (the money was already spent; throwing the verdict away only
+     * stranded the PR and re-charged the same review on the next tick — #1937 at
+     * $18 against an $8 flat cap). The verdict is real and mergeable; the overrun
+     * is an operator signal, carried as an advisory reason.
+     */
+    cost_overrun?: boolean;
 }
 export declare const REVIEWER_PROMPT_TEMPLATE: string;
+export declare function isLocCapAdvisoryReason(reason: string): boolean;
+/** Render the machine tag into an operator-legible advisory line (measured/limit kept
+ *  visible), or return the reason unchanged when it is not a cap tag. */
+export declare function renderLocCapAdvisory(reason: string): string;
+/**
+ * D-7: reduce a reviewer verdict under the cap-advisory rule. A `reject` whose EVERY
+ * substantive reason is the pure `loc_cap:` tag is not a rejection — it becomes an
+ * `approve` that STILL carries the measured overrun (rendered) in `reasons`. Any reason
+ * that is not exactly the tag — a defect, forbidden file, unmet AC, body mismatch, scope
+ * creep, or even a cap stated in free prose — keeps the reject (fail-closed). A
+ * non-reject verdict is returned untouched.
+ */
+export declare function applyLocCapAdvisory<T extends {
+    decision: string;
+    reasons: string[];
+}>(verdict: T): T;
 /** Report sections whose prose IS a delivery claim — the rule may fire here. */
 export declare const COMPLETION_SIGNAL_SECTIONS: readonly ["implemented", "verification"];
 /**
@@ -198,6 +269,39 @@ export declare function classifyCapacityRetry(opts: {
 export declare function resolveCapacityRetries(raw: string | undefined | null): number;
 /** Returns true when a claude stderr string indicates a transient API error that is safe to retry. */
 export declare function isRetriableError(stderr: string): boolean;
+/** S15-FU/REVIEW-1 (AC1): a rendered prompt plus its integrity verdict. */
+export interface ReviewerPromptRender {
+    prompt: string;
+    /**
+     * Values that did NOT survive substitution verbatim. Non-empty means the render
+     * mangled PR content (the #1933 class) and the review MUST NOT proceed on this
+     * prompt — the review seam degrades to an abstain instead.
+     */
+    bleed: PromptRenderBleed[];
+}
+export declare function renderReviewerPromptChecked(args: {
+    task_description: string;
+    acceptance_criteria: string[];
+    pr_title: string;
+    pr_body: string;
+    pr_diff: string;
+}): ReviewerPromptRender;
+/**
+ * S15-FU/REVIEW-1 (AC1): the ORDERED placeholder/value pairs a reviewer prompt
+ * substitutes, so the render-integrity check (and its test) can assert that every
+ * one of these values survived into the prompt VERBATIM.
+ * // keep in sync with reviewerPlaceholderPairs in api/_lib/reviewer-agent.ts
+ */
+export declare function reviewerPlaceholderPairs(args: {
+    task_description: string;
+    pr_title: string;
+    pr_body: string;
+}, diff: string, acceptance: string): ReadonlyArray<readonly [string, string]>;
+/**
+ * String façade over `renderReviewerPromptChecked` — the signature every existing
+ * caller and the RF-3 parity tests use. Integrity is enforced at the review seam,
+ * which needs the `bleed` list to build its abstain.
+ */
 export declare function renderReviewerPrompt(args: {
     task_description: string;
     acceptance_criteria: string[];
@@ -247,6 +351,12 @@ export declare function extractReviewerDecision(text: string): {
     decision: "approve" | "reject";
     reasons: string[];
     confidence: number;
+    /**
+     * REVIEW-DECISION-PROVENANCE: present only on the prose fallback, where the
+     * decision is INFERRED from a keyword instead of asserted (the PR #1913
+     * shape). The submit seam renders it into the persisted reasons.
+     */
+    decision_provenance?: DecisionProvenance;
 } | null;
 /**
  * R0-D-REVIEWER-WORKSPACE-INTEGRITY — the verified review tree. Produced by
@@ -287,12 +397,17 @@ export interface RunReviewDeps {
         reviewId: string;
         prNumber: number;
     }) => Promise<ReviewTreeResult>;
-    /** Override for tests. Defaults to `claude --print --output-format=json --model <modelId>` on stdin. */
-    spawnClaude?: (modelId: string) => ExecaChildProcess;
+    /** Override for tests. Defaults to the selected engine on stdin. */
+    spawnClaude?: (modelId: string | null) => ExecaChildProcess;
     /** Override the policy resolver (defaults to org_settings.automerge_policy.reviewer). */
     loadPolicy?: (orgId: string) => Promise<ReviewerPolicy | null>;
     /** Override for tests. Defaults to real setTimeout-based sleep. */
     sleep?: (ms: number) => Promise<void>;
+    /**
+     * CAPS-ENGINES-STALE-KEYCHAIN-1: watcher-supplied repair hook for a review
+     * whose task was routed to an engine this live process cannot resolve.
+     */
+    onUnknownAdvertisedEngine?: (engineId: string, err: Error) => Promise<void>;
     /**
      * RVU-2 (FU-RVU2R): optional env-broken CLI-auth PREFLIGHT canary. When
      * provided, it is run ONCE before the review spawn; if its probe results match
@@ -305,7 +420,49 @@ export interface RunReviewDeps {
     authCanary?: () => Promise<ReviewerProbeResult[]>;
     /** RVU-2: cap on capacity-fallback-chain tiers (default 4 = all catalog tiers). */
     modelChainMax?: number;
+    /**
+     * CROSS-ENGINE-REVIEW-1 (AC3): the assigned runner's advertised `caps.engines`
+     * — the engines THIS runner can actually spawn. Reviewer-engine selection is
+     * constrained to this set so a claude-only runner is never asked to review with
+     * codex (and vice-versa). The production caller (watch.ts) threads the exact
+     * list it published into `acc.runners.caps.engines` at register time
+     * (`detectCapableEngines()`), so selection reflects REAL runner capability, not
+     * the full local registry. When neither this nor `detectEngines` is supplied,
+     * driveReview falls back to the local registry (`engineIds()`) — a
+     * test/direct-caller safety net only; the production path always injects.
+     */
+    advertisedEngineIds?: string[];
+    /**
+     * CROSS-ENGINE-REVIEW-1: async override for `advertisedEngineIds` resolution
+     * (e.g. a live `detectCapableEngines()` probe). Preferred over the registry
+     * fallback when `advertisedEngineIds` is absent. Tests inject a stub.
+     */
+    detectEngines?: () => Promise<string[]>;
 }
+export type ReviewerEngineSelectionPolicy = "prefer_different_family" | "prefer_same_family" | "capacity_first";
+export declare const DEFAULT_REVIEWER_ENGINE_SELECTION_POLICY: ReviewerEngineSelectionPolicy;
+export interface ReviewerEngineSelection {
+    engineIds: string[];
+    policy: ReviewerEngineSelectionPolicy;
+}
+export declare function resolveReviewerEngineSelectionPolicy(policy: ReviewerPolicy | null | undefined): ReviewerEngineSelectionPolicy;
+export declare function selectReviewerEngineIds(authorEngine: string | null | undefined, policy: ReviewerPolicy | null | undefined, availableEngineIds?: string[]): ReviewerEngineSelection;
+/**
+ * CROSS-ENGINE-REVIEW-1 (AC10): map the org policy's single reviewer `model_id`
+ * onto the engine actually chosen for THIS review. The policy historically
+ * carries a Claude id (default 'claude-sonnet-4-6'). Cross-engine selection now
+ * routes a review to codex even when the PR was authored by Claude — so that
+ * Claude model id is meaningless to the reviewer engine and MUST NOT be pinned:
+ *
+ *   - codex → run UNPINNED (model_id → `null`) unless an OpenAI-valid id is
+ *     explicitly configured on an api-key channel (a Claude id is never valid
+ *     for codex and is always dropped to `null`).
+ *   - claude-family → keep the existing catalog fallback chain unchanged.
+ *
+ * Returning `null` tells `engine.spawn` to omit `--model`, so codex never sees
+ * `claude-sonnet-4-6` on argv.
+ */
+export declare function reviewerModelChain(engine: AgentEngine, policyModelId: string | null | undefined, modelChainMax: number): Array<string | null>;
 /**
  * Drive one review end-to-end: fetch task spec + PR meta + diff →
  * render prompt → spawn claude → parse decision → submit_review.
@@ -313,4 +470,10 @@ export interface RunReviewDeps {
  * the cron's poll-merge loop can advance.
  */
 export declare function runReview(assignment: ReviewAssignment, deps: RunReviewDeps): Promise<ReviewerOutcome>;
+/** REVIEWER-SPEND-TO-COST-PIPE: the runner's thin mirror of the api-side
+ *  emitReviewCostEvent — a call site of the shared acc.record_cost_event RPC
+ *  (model='reviewer', zero-cost skipped, best-effort), NOT shared logic (the
+ *  runner cannot import api/_lib). Exactly-once HALTed per AC7. Returns the
+ *  outcome for the runner-package test (which root CI does NOT run — see PR body). */
+export declare function recordReviewCost(supabase: RunnerSupabaseClient, taskId: string, costUsd: number): Promise<"emitted" | "skipped_zero" | "error">;
 //# sourceMappingURL=reviewer.d.ts.map

package/dist/runtime/reviewer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reviewer.d.ts","sourceRoot":"","sources":["../../src/runtime/reviewer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAS,KAAK,iBAAiB,EAAE,MAAM,OAAO,CAAC;AAMtD,OAAO,EAIL,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAQlC,OAAO,EAML,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAA2B,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACnG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAI,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uBAAuB,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,QAAQ,GACR,mBAAmB,GACnB,gBAAgB,GAOhB,mBAAmB,GAOnB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAI,gBAAgB,CAAC;IAC7B,OAAO,EAAK,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAI,MAAM,CAAC;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAwBD,eAAO,MAAM,wBAAwB,QA6HzB,CAAC;AAgBb,gFAAgF;AAChF,eAAO,MAAM,0BAA0B,0CAA2C,CAAC;AAEnF;;;GAGG;AACH,eAAO,MAAM,4BAA4B,qDAI/B,CAAC;AAmBX,MAAM,WAAW,mBAAmB;IAClC,8EAA8E;IAC9E,OAAO,EAAK,MAAM,CAAC;IACnB,MAAM,EAAM,MAAM,CAAC;IACnB,IAAI,EAAQ,MAAM,CAAC;IACnB,2EAA2E;IAC3E,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAclE;AASD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAoB3E;AAwBD,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAQ9C,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAKlE;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAOjF;AAED,yFAAyF;AACzF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAItE;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GACpC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAatC;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAerC;AAED,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAO,OAAO,CAAC;IACxB,UAAU,EAAM,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAK,MAAM,CAAC;IACvB,aAAa,EAAG,MAAM,EAAE,CAAC;IACzB,wEAAwE;IACxE,YAAY,EAAI,MAAM,GAAG,IAAI,CAAC;IAC9B,yEAAyE;IACzE,SAAS,EAAO,OAAO,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAc,EAC1C,QAAQ,GAAE,MAAuB,GAChC,kBAAkB,CAuBpB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EAAE,EACjB,WAAW,GAAE,MAAM,GAAG,IAAW,EACjC,SAAS,UAAQ,GAChB,MAAM,CAkCR;AAiBD,eAAO,MAAM,oBAAoB,kCAAkC,CAAC;AACpE,eAAO,MAAM,iCAAiC,IAAI,CAAC;AAWnD,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,QAEmB,CAAC;AAI3D,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,EACpB,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7C,MAAM,CAOR;AAED,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,WAAW,CAAC;AAExD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG;IAAE,MAAM,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAQnD;AAED;kEACkE;AAClE,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAM7E;AAED,sGAAsG;AACtG,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAIxD;AAMD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAmCT;AAaD,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAmC3D;AAED,kEAAkE;AAClE,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAmBhE;AAMD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,WAAW,EAAE,EACrB,MAAM,EAAE,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,EAC1E,QAAQ,EAAE,MAAM,EAAE,GACjB,MAAM,CAmBR;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAKR;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,eAAe,GAAG,eAAe,CAc7E;AAQD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG;IACrD,QAAQ,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC/B,OAAO,EAAG,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,IAAI,CA8DP;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,OAAO,IAAI,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,0EAA0E;IAC1E,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3F;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChC,wGAAwG;IACxG,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,iBAAiB,CAAC;IACrD,yFAAyF;IACzF,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAC/D,mEAAmE;IACnE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAClD,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAoOD;;;;;GAKG;AACH,wBAAsB,SAAS,CAC7B,UAAU,EAAE,gBAAgB,EAC5B,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,eAAe,CAAC,CA2D1B"}
+{"version":3,"file":"reviewer.d.ts","sourceRoot":"","sources":["../../src/runtime/reviewer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAS,KAAK,iBAAiB,EAAE,MAAM,OAAO,CAAC;AAStD,OAAO,EAIL,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAMvD,OAAO,EAML,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAIL,KAAK,kBAAkB,EACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,wBAAwB,CAAC;AAKhC,OAAO,EAOL,KAAK,qBAAqB,EAE1B,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAA2B,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACnG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AA6B3D,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAI,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uBAAuB,EAAE,MAAM,CAAC;IAChC;;;OAGG;IACH,sBAAsB,CAAC,EAAE,6BAA6B,CAAC;CACxD;AAED,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,QAAQ,GACR,mBAAmB,GACnB,gBAAgB,GAOhB,mBAAmB,GAOnB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAI,gBAAgB,CAAC;IAC7B,OAAO,EAAK,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAI,MAAM,CAAC;IACnB;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,kBAAkB,CAAC;IACzC;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAwBD,eAAO,MAAM,wBAAwB,QAyIzB,CAAC;AAeb,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;yEACyE;AACzE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAM3D;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,EACnF,OAAO,EAAE,CAAC,GACT,CAAC,CAKH;AAgBD,gFAAgF;AAChF,eAAO,MAAM,0BAA0B,0CAA2C,CAAC;AAEnF;;;GAGG;AACH,eAAO,MAAM,4BAA4B,qDAI/B,CAAC;AAmBX,MAAM,WAAW,mBAAmB;IAClC,8EAA8E;IAC9E,OAAO,EAAK,MAAM,CAAC;IACnB,MAAM,EAAM,MAAM,CAAC;IACnB,IAAI,EAAQ,MAAM,CAAC;IACnB,2EAA2E;IAC3E,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAclE;AASD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAoB3E;AAwBD,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAQ9C,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAKlE;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAOjF;AAED,yFAAyF;AACzF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAItE;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GACpC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAatC;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAerC;AAED,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAO,OAAO,CAAC;IACxB,UAAU,EAAM,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAK,MAAM,CAAC;IACvB,aAAa,EAAG,MAAM,EAAE,CAAC;IACzB,wEAAwE;IACxE,YAAY,EAAI,MAAM,GAAG,IAAI,CAAC;IAC9B,yEAAyE;IACzE,SAAS,EAAO,OAAO,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAc,EAC1C,QAAQ,GAAE,MAAuB,GAChC,kBAAkB,CAuBpB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EAAE,EACjB,WAAW,GAAE,MAAM,GAAG,IAAW,EACjC,SAAS,UAAQ,GAChB,MAAM,CAkCR;AAiBD,eAAO,MAAM,oBAAoB,kCAAkC,CAAC;AACpE,eAAO,MAAM,iCAAiC,IAAI,CAAC;AAWnD,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,QAEmB,CAAC;AAI3D,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,EACpB,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7C,MAAM,CAOR;AAED,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,WAAW,CAAC;AAExD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG;IAAE,MAAM,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAQnD;AAED;kEACkE;AAClE,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAM7E;AAED,sGAAsG;AACtG,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAIxD;AAMD,2EAA2E;AAC3E,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,KAAK,EAAE,iBAAiB,EAAE,CAAC;CAC5B;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE;IAChD,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,oBAAoB,CAuCvB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE;IAAE,gBAAgB,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EACrE,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,GACjB,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAQ1C;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAET;AAaD,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAmC3D;AAED,kEAAkE;AAClE,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAmBhE;AAMD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,WAAW,EAAE,EACrB,MAAM,EAAE,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,EAC1E,QAAQ,EAAE,MAAM,EAAE,GACjB,MAAM,CAmBR;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAKR;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,eAAe,GAAG,eAAe,CAc7E;AAQD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG;IACrD,QAAQ,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC/B,OAAO,EAAG,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,kBAAkB,CAAC;CAC1C,GAAG,IAAI,CAyEP;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,OAAO,IAAI,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,0EAA0E;IAC1E,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3F;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChC,oEAAoE;IACpE,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,KAAK,iBAAiB,CAAC;IAC5D,yFAAyF;IACzF,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAC/D,mEAAmE;IACnE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC;;;OAGG;IACH,yBAAyB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAClD,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;OAUG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACzC;AA4MD,MAAM,MAAM,6BAA6B,GACrC,yBAAyB,GACzB,oBAAoB,GACpB,gBAAgB,CAAC;AAErB,eAAO,MAAM,wCAAwC,EAAE,6BAC5B,CAAC;AAE5B,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,6BAA6B,CAAC;CACvC;AAUD,wBAAgB,oCAAoC,CAClD,MAAM,EAAE,cAAc,GAAG,IAAI,GAAG,SAAS,GACxC,6BAA6B,CAQ/B;AAWD,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACvC,MAAM,EAAE,cAAc,GAAG,IAAI,GAAG,SAAS,EACzC,kBAAkB,GAAE,MAAM,EAAgB,GACzC,uBAAuB,CAqBzB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,WAAW,EACnB,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACxC,aAAa,EAAE,MAAM,GACpB,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAgBtB;AAiDD;;;;;GAKG;AACH,wBAAsB,SAAS,CAC7B,UAAU,EAAE,gBAAgB,EAC5B,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,eAAe,CAAC,CA+F1B;AAwCD;;;;sFAIsF;AACtF,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,oBAAoB,EAC9B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,SAAS,GAAG,cAAc,GAAG,OAAO,CAAC,CAuB/C"}