@winspan/claude-forge 8.54.4 → 9.12.0

package/dist/core/insights/violation-reporter.js

@@ -0,0 +1,391 @@
+/**
+ * Violation Reporter — Phase C feedback loop
+ *
+ * Produces a markdown summary of recent main-thread violations so the next
+ * session can read them at the top of CLAUDE.md (forge:violations block).
+ *
+ * Three signal sources, merged + deduped + capped:
+ *   1. routing_events.obeyed = 0 (within rolling window)
+ *   2. UserPromptSubmit events whose user_prompt contains explicit
+ *      "you broke the rule" keywords
+ *   3. tool_intercepts rows with decision='deny' or 'warn' (Phase 2).
+ *      decision='dry_run' is intentionally EXCLUDED — when the kill switch
+ *      is off the intercept never fired and the main thread had no chance
+ *      to "correct" itself, so counting it as a violation would be noise.
+ *
+ * Pure functions: input is the storage facade + filter options, output is
+ * either an array of Violation rows or the rendered markdown body.
+ */
+import { truncateString } from '../utils/format.js';
+import { daysAgoMs } from '../utils/time.js';
+import { NOISE_PROMPT_PREFIXES } from '../utils/noise-prompt.js';
+/** Rolling window default (D4) */
+const DEFAULT_DAYS = 7;
+/** Top-N detail rendering (D4) */
+const DEFAULT_LIMIT = 5;
+/** Internal scan cap before slice; prevents pathological reads */
+const MAX_SCAN = 200;
+/** user_prompt summary truncation in the report (also dedupe key prefix) */
+const SUMMARY_MAX = 80;
+/**
+ * Prompt-text prefixes that identify tool-generated or system messages
+ * masquerading as user_prompt rows. These must not be scanned for
+ * violation keywords because they reflect agent reports / image attachments
+ * / framework reminders, not the human's actual unhappiness.
+ *
+ * Historical export name (single source of truth lives in
+ * `core/utils/noise-prompt.ts` as `NOISE_PROMPT_PREFIXES`). Kept here as a
+ * re-export so existing call sites (`import { TOOL_MESSAGE_PREFIXES }` from
+ * violation-reporter) and the `__testing` shim continue to work unchanged.
+ */
+export const TOOL_MESSAGE_PREFIXES = NOISE_PROMPT_PREFIXES;
+/**
+ * Keywords that strongly indicate the user is calling out a violation
+ * or expressing concrete dissatisfaction with the assistant's behavior.
+ *
+ * Principles:
+ *   - Must imply the user is unhappy / pointing out wrong behavior.
+ *   - Avoid bare common verbs/nouns (e.g. "改了", "用了") to dodge false
+ *     positives in normal coding prompts.
+ *   - Variants with/without space between Chinese and Latin words because
+ *     IMEs differ.
+ *
+ * Extend here as new patterns emerge.
+ */
+const VIOLATION_KEYWORDS = [
+    // Explicit rule-breaking callouts
+    '违反规则',
+    '违规',
+    '再次违反',
+    '又违反',
+    // Agent / spawn related
+    '不使用 Agent',
+    '不使用agent',
+    '没有使用 Agent',
+    '没有使用agent',
+    '应该 spawn',
+    '应该spawn',
+    '没有 spawn',
+    '没有spawn',
+    '为什么没有 spawn',
+    '为什么不 spawn',
+    '为什么不spawn',
+    // Skill related
+    '为什么 skill',
+    '为什么skill',
+    '没有调用 skill',
+    '没有调用skill',
+    'skill 没有',
+    'skill没有',
+    'skill 一直没',
+    'skill一直没',
+    '一直没有使用',
+    // Direct hook / harness / hybrid edits
+    '不要直接改',
+    '应该走 harness',
+    '应该走harness',
+    '应该走 hybrid',
+    '应该走hybrid',
+    // Soft frustration phrases (load-bearing dissatisfaction signals)
+    '丑爆了',
+    '完全看不懂',
+    '看不懂',
+];
+/**
+ * Collect violations from both signal sources, merge + dedupe + slice.
+ *
+ * Dedupe key: `${truncatedPrompt}|${minute-bucketed-timestamp}` — same prompt
+ * within the same minute counts once even if multiple sources triggered.
+ */
+export function collectViolations(storage, options = {}) {
+    const days = options.days ?? DEFAULT_DAYS;
+    const limit = options.limit ?? DEFAULT_LIMIT;
+    const cutoffMs = daysAgoMs(days);
+    const cutoffIso = new Date(cutoffMs).toISOString();
+    const out = [];
+    // ── Source 1: routing_events with obeyed=0 ──────────────────────────────
+    try {
+        const rows = storage.queryRoutingEvents({
+            session_id: options.sessionId,
+            project_path: options.projectPath,
+            since_ts: cutoffMs,
+            obeyed: 0,
+            limit: MAX_SCAN,
+        });
+        for (const row of rows) {
+            out.push({
+                timestamp: new Date(row.ts).toISOString(),
+                user_prompt_summary: truncateString(row.prompt ?? '', SUMMARY_MAX),
+                signal: 'routing_disobeyed',
+                expected_agent: row.routed_to_name ?? undefined,
+            });
+        }
+    }
+    catch {
+        // storage hiccups must not break Stop flow
+    }
+    // ── Source 2: UserPromptSubmit events containing violation keywords ────
+    try {
+        const events = storage.queryEvents({
+            session_id: options.sessionId,
+            project_path: options.projectPath,
+            hook_type: 'UserPromptSubmit',
+            limit: MAX_SCAN,
+        });
+        for (const ev of events) {
+            const prompt = ev.user_prompt;
+            if (!prompt)
+                continue;
+            // Skip tool-generated and system messages that landed in user_prompt
+            // (e.g. <task-notification>, <system-reminder>, image attachments).
+            // These can themselves quote the word "违规" inside agent reports
+            // and would otherwise produce noisy false positives.
+            if (isToolMessage(prompt))
+                continue;
+            // 7-day window filter (events table stores ISO strings, not millis)
+            if (ev.timestamp < cutoffIso)
+                continue;
+            const matched = matchKeyword(prompt);
+            if (!matched)
+                continue;
+            out.push({
+                timestamp: ev.timestamp,
+                user_prompt_summary: truncateString(prompt, SUMMARY_MAX),
+                signal: 'user_keyword',
+                detected_keyword: matched,
+            });
+        }
+    }
+    catch {
+        // storage hiccups must not break Stop flow
+    }
+    // ── Source 3: tool_intercepts with decision=deny|warn (Phase 2) ─────────
+    // dry_run / bypass intentionally excluded — see file header.
+    try {
+        const intercepts = storage.queryToolIntercepts({
+            session_id: options.sessionId,
+            project_path: options.projectPath,
+            decisions: ['deny', 'warn'],
+            since: cutoffIso,
+            limit: MAX_SCAN,
+        });
+        for (const row of intercepts) {
+            out.push({
+                timestamp: row.timestamp,
+                user_prompt_summary: truncateString(`${row.tool_name} blocked by ${row.rule_id}`, SUMMARY_MAX),
+                signal: 'tool_intercept',
+                rule_id: row.rule_id,
+                tool_name: row.tool_name,
+                severity: row.decision === 'deny' ? 'high' : 'medium',
+                note: row.hint ? truncateString(row.hint, 200) : undefined,
+            });
+        }
+    }
+    catch {
+        // storage hiccups must not break Stop flow
+    }
+    // ── Dedupe + sort + slice ──────────────────────────────────────────────
+    const deduped = dedupe(out);
+    deduped.sort((a, b) => b.timestamp.localeCompare(a.timestamp));
+    const sliced = deduped.slice(0, limit);
+    // Attach (read-only) the main-thread content the Stop handler backfilled into
+    // each violation window's inline-edit row (spec 1446). Done AFTER slice so we
+    // only query for the rows actually returned. PURE read — never triggers a
+    // backfill, never mutates ai_response. Only meaningful when scoped to a
+    // session (windowed inline-edit lookup needs a session id).
+    if (options.sessionId) {
+        attachMainThreadContent(storage, sliced, options.sessionId);
+    }
+    return sliced;
+}
+/** Window (minutes) around a violation ts to look for its backfilled edit row. */
+const CONTENT_WINDOW_MIN = 10;
+/**
+ * For each violation, read (don't write) the main-thread `ai_response` the Stop
+ * handler backfilled onto the violation window's inline-edit row, and attach it
+ * to `v.main_thread_content`. Read-only: never writes, never throws.
+ *
+ * Lookup: scan inline-edit (PostToolUse Edit/Write/NotebookEdit) rows in a
+ * ±CONTENT_WINDOW_MIN window around the violation ts and take the first
+ * non-empty ai_response — that's where backfillViolationContent wrote it (the
+ * window's earliest inline-edit row).
+ */
+export function attachMainThreadContent(storage, violations, sessionId) {
+    if (violations.length === 0 || !sessionId)
+        return;
+    for (const v of violations) {
+        try {
+            const t = new Date(v.timestamp).getTime();
+            if (!Number.isFinite(t))
+                continue;
+            const sinceIso = new Date(t - CONTENT_WINDOW_MIN * 60_000).toISOString();
+            const untilIso = new Date(t + CONTENT_WINDOW_MIN * 60_000).toISOString();
+            const rows = storage.queryInlineEditEvents({
+                session_id: sessionId,
+                since_iso: sinceIso,
+                until_iso: untilIso,
+            });
+            const withContent = rows.find((r) => r.ai_response && r.ai_response.length > 0);
+            if (withContent?.ai_response) {
+                v.main_thread_content = withContent.ai_response;
+            }
+        }
+        catch {
+            // read hiccup must not break the reporter
+        }
+    }
+}
+/**
+ * Count violations in the rolling window WITHOUT the user-facing `limit` cap.
+ *
+ * Why a separate function vs. reusing collectViolations():
+ *   collectViolations applies `.slice(0, limit)` at the end (default 5 in
+ *   /api/violations) for the markdown report + Stop hook. The Web KPI
+ *   "近 7d 共 N 条 violation" wants the TRUE deduped count regardless of
+ *   limit, so this function returns the same merged-deduped set's length
+ *   plus a per-signal breakdown (so the InterceptsTab "tool intercept (7d)"
+ *   stat can also bind to an unbounded count).
+ *
+ * The scan is still bounded by MAX_SCAN (200) per source as a pathological-
+ * read guard — same as collectViolations. If the window contains more than
+ * MAX_SCAN raw rows per source the returned counts are floor-estimates, not
+ * undercounts caused by the user-facing limit. Callers needing a true >200
+ * count should add cursor-style pagination (Phase 8+ work).
+ *
+ * Added 2026-05-26 to fix "Violations page 近 7d 共 N 条" + "tool intercept
+ * (7d)" both stuck at ≤20 (=limit) regardless of true volume.
+ */
+export function countViolationsBySignal(storage, options = {}) {
+    // Reuse collectViolations with a synthetic high limit so the dedupe logic
+    // stays in one place. MAX_SCAN (200) is the per-source upper bound; the
+    // post-dedupe set can't exceed 3 * MAX_SCAN = 600, so a limit of 1000 is
+    // a safe ceiling that still benefits from the slice() short-circuit.
+    const all = collectViolations(storage, { ...options, limit: 1000 });
+    const by_signal = {
+        routing_disobeyed: 0,
+        user_keyword: 0,
+        tool_intercept: 0,
+    };
+    for (const v of all) {
+        by_signal[v.signal] += 1;
+    }
+    return { total: all.length, by_signal };
+}
+/**
+ * Render the violation list as markdown suitable for embedding in the
+ * forge:violations block body. Returns '' for an empty list (caller should
+ * check this and skip writing the block to avoid polluting CLAUDE.md).
+ */
+export function generateViolationReport(violations) {
+    if (violations.length === 0)
+        return '';
+    const lines = [];
+    lines.push('## 最近违规记录');
+    lines.push('');
+    lines.push('⚠️ **以下是最近 7 天内主线程的合规问题，请在新任务开始前回顾，避免重复违规**');
+    lines.push('');
+    for (const v of violations) {
+        const when = formatRelative(v.timestamp);
+        let tag;
+        if (v.signal === 'routing_disobeyed') {
+            tag = `路由未遵守${v.expected_agent ? `（应路由到 ${v.expected_agent}）` : ''}`;
+        }
+        else if (v.signal === 'user_keyword') {
+            tag = `用户指出违规${v.detected_keyword ? `（关键词："${v.detected_keyword}"）` : ''}`;
+        }
+        else {
+            // tool_intercept
+            const sev = v.severity === 'high' ? '[deny]' : '[warn]';
+            tag = `工具拦截 ${sev}${v.rule_id ? `（规则：${v.rule_id}）` : ''}`;
+        }
+        lines.push(`- **${when}** ${tag}`);
+        lines.push(`  - 上下文：${v.user_prompt_summary || '(空)'}`);
+        if (v.signal === 'tool_intercept' && v.note) {
+            lines.push(`  - 提示：${v.note}`);
+        }
+        // spec 1446: surface the main-thread content generated during the violation
+        // window (backfilled into ai_response). Truncated for the CLAUDE.md block.
+        if (v.main_thread_content) {
+            lines.push(`  - 主线程当时生成：${truncateString(v.main_thread_content, 200)}`);
+        }
+    }
+    lines.push('');
+    lines.push('如要清空本块，运行：`cf violations clear`');
+    return lines.join('\n');
+}
+// ── Helpers ───────────────────────────────────────────────────────────────
+function matchKeyword(prompt) {
+    for (const kw of VIOLATION_KEYWORDS) {
+        if (prompt.includes(kw))
+            return kw;
+    }
+    return null;
+}
+/**
+ * True if the user_prompt row is actually a tool-generated or system
+ * message (task-notification, system-reminder, image attachment, etc.)
+ * rather than a real human prompt.
+ *
+ * Unlike {@link isNoisePrompt} (core/utils), this function applies a
+ * stricter rule: ANY prompt that starts with a known envelope prefix is
+ * considered a tool message, regardless of what follows the first newline.
+ * The "envelope-with-content" exception in isNoisePrompt is intentional for
+ * other consumers (e.g. auto-spec triggers where "[Image #2]\n<real question>"
+ * should still fire), but violation-reporter must skip all envelope rows to
+ * avoid false positives from agent-reported violation summaries embedded inside
+ * <task-notification> or <system-reminder> envelopes.
+ */
+function isToolMessage(prompt) {
+    const trimmed = prompt.trimStart();
+    return NOISE_PROMPT_PREFIXES.some((p) => trimmed.startsWith(p));
+}
+function dedupe(items) {
+    const seen = new Map();
+    for (const v of items) {
+        // Bucket to minute precision so two signals firing on the same prompt
+        // within seconds collapse into one entry.
+        const minuteBucket = v.timestamp.slice(0, 16);
+        const key = `${minuteBucket}|${v.user_prompt_summary}`;
+        const existing = seen.get(key);
+        if (!existing) {
+            seen.set(key, v);
+            continue;
+        }
+        // Prefer routing_disobeyed entry when both sources matched the same row,
+        // since it carries expected_agent metadata.
+        if (existing.signal === 'user_keyword' && v.signal === 'routing_disobeyed') {
+            seen.set(key, v);
+        }
+    }
+    return Array.from(seen.values());
+}
+export function formatRelative(iso) {
+    const t = new Date(iso).getTime();
+    if (!Number.isFinite(t))
+        return iso;
+    const diff = Date.now() - t;
+    if (diff < 0)
+        return '刚刚';
+    const mins = Math.floor(diff / 60000);
+    if (mins < 1)
+        return '刚刚';
+    if (mins < 60)
+        return `${mins} 分钟前`;
+    const hours = Math.floor(mins / 60);
+    if (hours < 24)
+        return `${hours} 小时前`;
+    const days = Math.floor(hours / 24);
+    return `${days} 天前`;
+}
+/** Exported for tests only */
+export const __testing = {
+    VIOLATION_KEYWORDS,
+    TOOL_MESSAGE_PREFIXES,
+    SUMMARY_MAX,
+    DEFAULT_DAYS,
+    DEFAULT_LIMIT,
+    matchKeyword,
+    isToolMessage,
+    dedupe,
+};
+//# sourceMappingURL=violation-reporter.js.map

package/dist/core/insights/violation-reporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"violation-reporter.js","sourceRoot":"","sources":["../../../src/core/insights/violation-reporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAiB,MAAM,0BAA0B,CAAC;AAEhF,kCAAkC;AAClC,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,kCAAkC;AAClC,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,kEAAkE;AAClE,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,4EAA4E;AAC5E,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA0B,qBAAqB,CAAC;AAElF;;;;;;;;;;;;GAYG;AACH,MAAM,kBAAkB,GAA0B;IAChD,kCAAkC;IAClC,MAAM;IACN,IAAI;IACJ,MAAM;IACN,KAAK;IACL,wBAAwB;IACxB,WAAW;IACX,UAAU;IACV,YAAY;IACZ,WAAW;IACX,UAAU;IACV,SAAS;IACT,UAAU;IACV,SAAS;IACT,aAAa;IACb,YAAY;IACZ,WAAW;IACX,gBAAgB;IAChB,WAAW;IACX,UAAU;IACV,YAAY;IACZ,WAAW;IACX,UAAU;IACV,SAAS;IACT,WAAW;IACX,UAAU;IACV,QAAQ;IACR,uCAAuC;IACvC,OAAO;IACP,aAAa;IACb,YAAY;IACZ,YAAY;IACZ,WAAW;IACX,kEAAkE;IAClE,KAAK;IACL,OAAO;IACP,KAAK;CACN,CAAC;AA4CF;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAsB,EACtB,UAAoC,EAAE;IAEtC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC;IAC7C,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAEnD,MAAM,GAAG,GAAgB,EAAE,CAAC;IAE5B,2EAA2E;IAC3E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,kBAAkB,CAAC;YACtC,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,YAAY,EAAE,OAAO,CAAC,WAAW;YACjC,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,CAAC;YACT,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC;gBACP,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE;gBACzC,mBAAmB,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,WAAW,CAAC;gBAClE,MAAM,EAAE,mBAAmB;gBAC3B,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,SAAS;aAChD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;IAED,0EAA0E;IAC1E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;YACjC,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,YAAY,EAAE,OAAO,CAAC,WAAW;YACjC,SAAS,EAAE,kBAAkB;YAC7B,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC;YAC9B,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,qEAAqE;YACrE,oEAAoE;YACpE,gEAAgE;YAChE,qDAAqD;YACrD,IAAI,aAAa,CAAC,MAAM,CAAC;gBAAE,SAAS;YACpC,oEAAoE;YACpE,IAAI,EAAE,CAAC,SAAS,GAAG,SAAS;gBAAE,SAAS;YAEvC,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,GAAG,CAAC,IAAI,CAAC;gBACP,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,mBAAmB,EAAE,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC;gBACxD,MAAM,EAAE,cAAc;gBACtB,gBAAgB,EAAE,OAAO;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;IAED,2EAA2E;IAC3E,6DAA6D;IAC7D,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,OAAO,CAAC,mBAAmB,CAAC;YAC7C,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,YAAY,EAAE,OAAO,CAAC,WAAW;YACjC,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;YAC3B,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,GAAG,CAAC,IAAI,CAAC;gBACP,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,mBAAmB,EAAE,cAAc,CACjC,GAAG,GAAG,CAAC,SAAS,eAAe,GAAG,CAAC,OAAO,EAAE,EAC5C,WAAW,CACZ;gBACD,MAAM,EAAE,gBAAgB;gBACxB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;gBACrD,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;aAC3D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;IAED,0EAA0E;IAC1E,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAEvC,8EAA8E;IAC9E,8EAA8E;IAC9E,0EAA0E;IAC1E,wEAAwE;IACxE,4DAA4D;IAC5D,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kFAAkF;AAClF,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAsB,EACtB,UAAuB,EACvB,SAAiB;IAEjB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO;IAClD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,SAAS;YAClC,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,kBAAkB,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;YACzE,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,kBAAkB,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;YACzE,MAAM,IAAI,GAAG,OAAO,CAAC,qBAAqB,CAAC;gBACzC,UAAU,EAAE,SAAS;gBACrB,SAAS,EAAE,QAAQ;gBACnB,SAAS,EAAE,QAAQ;aACpB,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAChF,IAAI,WAAW,EAAE,WAAW,EAAE,CAAC;gBAC7B,CAAC,CAAC,mBAAmB,GAAG,WAAW,CAAC,WAAW,CAAC;YAClD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAsB,EACtB,UAAoC,EAAE;IAKtC,0EAA0E;IAC1E,wEAAwE;IACxE,yEAAyE;IACzE,qEAAqE;IACrE,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,SAAS,GAAoC;QACjD,iBAAiB,EAAE,CAAC;QACpB,YAAY,EAAE,CAAC;QACf,cAAc,EAAE,CAAC;KAClB,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAuB;IAC7D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;YACrC,GAAG,GAAG,QAAQ,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACvE,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACvC,GAAG,GAAG,SAAS,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7E,CAAC;aAAM,CAAC;YACN,iBAAiB;YACjB,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;YACxD,GAAG,GAAG,QAAQ,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,GAAG,EAAE,CAAC,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,mBAAmB,IAAI,KAAK,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,CAAC,MAAM,KAAK,gBAAgB,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5C,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,4EAA4E;QAC5E,2EAA2E;QAC3E,IAAI,CAAC,CAAC,mBAAmB,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,eAAe,cAAc,CAAC,CAAC,CAAC,mBAAmB,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,6EAA6E;AAE7E,SAAS,YAAY,CAAC,MAAc;IAClC,KAAK,MAAM,EAAE,IAAI,kBAAkB,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IACnC,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,MAAM,CAAC,KAAkB;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,sEAAsE;QACtE,0CAA0C;QAC1C,MAAM,YAAY,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,GAAG,YAAY,IAAI,CAAC,CAAC,mBAAmB,EAAE,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,yEAAyE;QACzE,4CAA4C;QAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,cAAc,IAAI,CAAC,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;YAC3E,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;IACtC,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,IAAI,GAAG,EAAE;QAAE,OAAO,GAAG,IAAI,MAAM,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IACpC,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,GAAG,KAAK,MAAM,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IACpC,OAAO,GAAG,IAAI,KAAK,CAAC;AACtB,CAAC;AAED,8BAA8B;AAC9B,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,kBAAkB;IAClB,qBAAqB;IACrB,WAAW;IACX,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,aAAa;IACb,MAAM;CACP,CAAC"}

package/dist/core/loop/loop-engine.d.ts

@@ -0,0 +1,140 @@
+/**
+ * loop-engine.ts — Goal-convergence orchestration state machine.
+ *
+ * Spec: docs/design/2026-06-11/0943-loop-goal-convergence-spec.md (Option A)
+ * Decision: 1f9e71be
+ *
+ * CLI-RESIDENT, NEVER daemon. Each iteration:
+ *   spawn coder (implement) → spawn verify-agent → parse `## Verdict:` →
+ *   PASS/SKIP = terminate(success) · FAIL = iterate · BLOCKED/unparseable =
+ *   terminate(blocked, stop-safe).
+ *
+ * The loop is only safe unattended because every guardrail lands here:
+ *   - max-iterations hard cap (+ a ceiling on explicit overrides)
+ *   - cumulative token budget (pre-emptive stop, conservative estimate)
+ *   - verify-gate (only PASS/SKIP advances success)
+ *   - irreversible-op gate (NEEDS-IRREVERSIBLE sentinel + git-HEAD-moved backstop)
+ *   - no-progress / oscillation detector (identical diff hash repeated)
+ *
+ * `runLoop(cfg, deps)` takes a DEPENDENCY-INJECTION seam (`deps`): in production
+ * `deps.spawnAgent` wraps `spawnClaudeCli` and the git helpers shell out; in
+ * tests they are stubs returning canned verify reports. This seam is what makes
+ * the engine testable WITHOUT spawning real `claude` — mandatory, load-bearing
+ * for coverage in the 38%-line `src/cli` host area.
+ */
+export type Verdict = 'PASS' | 'FAIL' | 'BLOCKED' | 'SKIP';
+export type LoopOutcome = 'success' | 'failed' | 'partial';
+/**
+ * Why the loop stopped. Each maps to a distinct CLI exit code so CI can gate
+ * precisely (see EXIT_CODES).
+ */
+export type ExitReason = 'converged' | 'max-iter-exhausted' | 'stalled' | 'budget-exhausted' | 'irreversible-blocked' | 'verify-blocked';
+export declare const EXIT_CODES: Record<ExitReason, number>;
+export interface LoopConfig {
+    goal: string;
+    maxIterations: number;
+    tokenBudget?: number;
+    noProgressLimit: number;
+    /** What to do when the irreversible gate fires: stop the loop, or skip the op and continue. */
+    onIrreversible: 'stop' | 'skip';
+    /** Opt-in: proceed past the irreversible gate entirely (advanced users). */
+    allowIrreversible: boolean;
+    coderAgent: string;
+    verifyAgent: string;
+    decisionId?: string;
+    /** When true, plan-only: no agent spawns, no git, no decision writes. */
+    dryRun: boolean;
+}
+export interface IterationRecord {
+    iter: number;
+    verdict: Verdict | null;
+    tokensSpent: number;
+    diffHash: string;
+    irreversible: boolean;
+    terminated: boolean;
+    reason?: ExitReason;
+    ts: string;
+}
+export interface LoopResult {
+    outcome: LoopOutcome;
+    terminalVerdict: Verdict | null;
+    iterations: IterationRecord[];
+    totalTokens: number;
+    exitReason: ExitReason;
+    exitCode: number;
+}
+/**
+ * The result of spawning one agent. `text` is the raw assistant output;
+ * `tokens` is the usage reported by the stream-json `result` event (or a
+ * char/4 estimate if usage is unavailable).
+ */
+export interface AgentSpawnResult {
+    text: string;
+    tokens: number;
+}
+/**
+ * Dependency-injection seam. Production wires real `spawnClaudeCli` + git +
+ * run-log + decision-note writers; tests inject stubs.
+ */
+export interface LoopDeps {
+    /** Drive one sub-agent (coder or verify-agent). */
+    spawnAgent(args: {
+        agent: string;
+        prompt: string;
+    }): Promise<AgentSpawnResult>;
+    /** sha1 (or any stable hash) of `git diff HEAD` of the working tree. */
+    gitDiffHash(): Promise<string>;
+    /** Current `git rev-parse HEAD` (to detect HEAD-moved = a commit happened). */
+    gitHeadRef(): Promise<string>;
+    /** Append one JSONL record to the run-log. */
+    appendRunLog(record: Record<string, unknown>): void;
+    /**
+     * Append a per-iteration note. Q4 (resolved): `cf decisions outcome --note`
+     * does NOT work without `--result`, so production routes per-iteration notes
+     * to the JSONL run-log here (engine-local) and writes the single final
+     * `cf decisions outcome --result` once via `writeFinalOutcome`.
+     */
+    writeIterationNote(note: string): void;
+    /** Single final `cf decisions outcome --result` (called at most ONCE). */
+    writeFinalOutcome(outcome: LoopOutcome, note: string): void;
+}
+/**
+ * Parse the verify-agent's `## Verdict: X` line.
+ * Case-insensitive, first match wins. Returns `null` if absent — the caller
+ * MUST treat null as BLOCKED ("FAIL when in doubt"), never as PASS.
+ */
+export declare function parseVerifyVerdict(text: string): Verdict | null;
+/**
+ * Detect whether an iteration attempted or needs an irreversible op.
+ * Two signals (either fires the gate):
+ *   1. coder output contains the `NEEDS-IRREVERSIBLE: <desc>` sentinel.
+ *   2. git HEAD moved (a commit happened) between before/after — backstop for
+ *      a coder that ignored the directive.
+ */
+export declare function detectIrreversible(coderOutput: string, gitHeadBefore: string, gitHeadAfter: string): {
+    fired: boolean;
+    reason?: string;
+};
+/**
+ * Estimate token cost from a spawn. Prefers a reported usage number; falls
+ * back to a coarse char/4 estimate over prompt+output. Conservative by design:
+ * the budget gate stops BEFORE exceeding, so over-estimating is the safe error.
+ */
+export declare function estimateTokens(reportedTokens: number | undefined, promptText: string, outputText: string): number;
+/** Build the coder prompt, injecting the goal, the last verify report (if any), and the irreversible directive. */
+export declare function buildCoderPrompt(goal: string, lastVerifyReport?: string): string;
+/** Build the verify-agent prompt for the current goal. */
+export declare function buildVerifyPrompt(goal: string): string;
+/** Map a terminal verdict + exit reason to a decisions outcome value. */
+export declare function verdictToOutcome(reason: ExitReason): LoopOutcome;
+/** Clamp the requested iteration cap to the hard ceiling. */
+export declare function clampMaxIterations(requested: number): number;
+/**
+ * Drive the goal-convergence loop. Returns a {@link LoopResult}; the caller
+ * (CLI) maps `exitCode` onto `process.exitCode`.
+ *
+ * In `dryRun` mode this spawns NOTHING and returns a zero-iteration success —
+ * the CLI prints the planned prompts/config separately.
+ */
+export declare function runLoop(cfg: LoopConfig, deps: LoopDeps): Promise<LoopResult>;
+//# sourceMappingURL=loop-engine.d.ts.map

package/dist/core/loop/loop-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loop-engine.d.ts","sourceRoot":"","sources":["../../../src/core/loop/loop-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAMH,MAAM,MAAM,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;AAE3D,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE3D;;;GAGG;AACH,MAAM,MAAM,UAAU,GAClB,WAAW,GACX,oBAAoB,GACpB,SAAS,GACT,kBAAkB,GAClB,sBAAsB,GACtB,gBAAgB,CAAC;AAErB,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAOjD,CAAC;AAEF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,+FAA+F;IAC/F,cAAc,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,4EAA4E;IAC5E,iBAAiB,EAAE,OAAO,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,WAAW,CAAC;IACrB,eAAe,EAAE,OAAO,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,UAAU,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,mDAAmD;IACnD,UAAU,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/E,wEAAwE;IACxE,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/B,+EAA+E;IAC/E,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,8CAA8C;IAC9C,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACpD;;;;;OAKG;IACH,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,0EAA0E;IAC1E,iBAAiB,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7D;AAID;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAO/D;AAID;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,GACnB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAOrC;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,MAAM,CAGR;AAED,mHAAmH;AACnH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,MAAM,CAmBhF;AAED,0DAA0D;AAC1D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQtD;AAED,yEAAyE;AACzE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,UAAU,GAAG,WAAW,CAYhE;AAID,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAG5D;AAuCD;;;;;;GAMG;AACH,wBAAsB,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CA0HlF"}