audit-tools 0.32.41 → 0.32.43

package/dist/audit/reporting/scoreTokens.d.ts

@@ -0,0 +1,112 @@
+/**
+ * score-tokens — the COST counterpart to the A-2 quality oracle (`score-audit`).
+ *
+ * `scoreTokens` is a PURE function of a run's recorded token-usage ledger
+ * (`token-usage.jsonl`, appended post-hoc at packet-completion time by
+ * `appendTokenUsageLine` — see `src/audit/io/tokenUsageLedger.ts`). It reports
+ * real per-step input/output tokens and prefix cache-hit ratio, exactly what the
+ * provider reported on a COMPLETED response — never a metered/token-counting API
+ * call and never `estimateTokensFromBytes` (that estimator is for PLANNING only).
+ *
+ * No-silent-scoring (mirrors score-audit's `unmatched[]` discipline): a step
+ * whose usage is entirely unreported (the agentic-CLI providers — claude-code /
+ * codex / opencode — spawn an external process with no structured usage) is
+ * counted in `totals.unmeasured_steps` and excluded from the token/cache-hit
+ * aggregates — NEVER folded in as a silent 0.
+ *
+ * Pure module: no IO, no clock (the ledger's wall-clock timestamp is read but
+ * never used to influence the verdict), no model identity — the same (entries,
+ * prefixHashes) always yields a byte-identical scorecard, order-independent.
+ */
+/** One packet's recorded usage, read from a `token-usage.jsonl` line. */
+export interface TokenUsageEntry {
+    packet_id: string;
+    pool_id?: string | null;
+    lens?: string | null;
+    input_tokens?: number | null;
+    output_tokens?: number | null;
+    cache_read_tokens?: number | null;
+    cache_creation_tokens?: number | null;
+}
+/** Per-packet prefix-cache-eligibility verdict (structural, provider-independent). */
+export interface PrefixStability {
+    /** True iff every packet in the corpus hashed to the SAME fixed-prefix. */
+    stable: boolean;
+    /** Packet ids whose fixed-prefix hash diverged from the majority, sorted. */
+    diverging_packet_ids: string[];
+}
+/** The deterministic scorecard `scoreTokens` emits. */
+export interface TokenScorecard {
+    schema_version: "score-tokens-scorecard/v1";
+    run_id: string;
+    steps: Array<{
+        packet_id: string;
+        pool_id: string | null;
+        lens: string | null;
+        input_tokens: number | null;
+        output_tokens: number | null;
+        cache_read_tokens: number | null;
+        /** cacheRead / (cacheRead + input) when BOTH legs are measured, else null. */
+        cache_hit_ratio: number | null;
+    }>;
+    totals: {
+        /** Sum of `input_tokens` over MEASURED steps only. */
+        input_tokens: number;
+        /** Sum of `output_tokens` over MEASURED steps only. */
+        output_tokens: number;
+        /** Steps with at least one reported usage field. */
+        measured_steps: number;
+        /** Steps whose usage was entirely unreported (never folded into totals as 0). */
+        unmeasured_steps: number;
+    };
+    /** Aggregate cache_hit_ratio over measured steps only; null when none qualify. */
+    cache_hit_ratio_overall: number | null;
+    /** Structural (provider-independent) prompt-prefix cache-eligibility signal. */
+    prefix_stability: PrefixStability;
+    /** Per-pool (== per-provider identity, `pool_id` is `provider#account/model`) coverage. */
+    provider_coverage: Record<string, "measured" | "unmeasured">;
+}
+/**
+ * Score a run's recorded token-usage ledger — the pure score-tokens oracle.
+ *
+ * `prefixHashes` is an OPTIONAL caller-supplied map of `packet_id ->
+ * fixed-prefix hash` (see {@link packetPromptPrefixHash}), computed by the
+ * caller from the run's recorded packet prompts. Omit it when wiring real
+ * prompt hashes end-to-end is not available — `prefix_stability` then defaults
+ * to `{ stable: true, diverging_packet_ids: [] }` (no signal, not a false
+ * failure).
+ */
+export declare function scoreTokens(runId: string, entries: TokenUsageEntry[], prefixHashes?: Record<string, string>): TokenScorecard;
+/**
+ * The structural, provider-independent prefix-stability boundary: hash of the
+ * FIXED prefix of a packet's rendered prompt — everything BEFORE the volatile
+ * `## Packet` section (the same boundary
+ * `tests/audit/dispatch-helpers.test.mjs` pins for prompt-caching:
+ * `prompt.slice(0, prompt.indexOf("## Packet"))`). Two packets in the same run
+ * whose fixed prefix hashes to the SAME value are byte-identical up to that
+ * point — the structural precondition for a provider's prefix cache to hit,
+ * independent of whether the provider actually reports a cache-hit ratio.
+ *
+ * A prompt with no `## Packet` marker hashes its entirety (defensive — never
+ * throws on an unexpected prompt shape).
+ */
+export declare function packetPromptPrefixHash(prompt: string): string;
+/**
+ * The SOLE gate predicate: did the overall cache-hit ratio REGRESS (drop)
+ * against a baseline? Mirrors score-audit's `hallucinationRegressed` mechanism
+ * exactly, direction-flipped (higher cache-hit ratio is BETTER, so a regression
+ * is a DECREASE, not an increase).
+ *
+ * - With no baseline, nothing has regressed.
+ * - A `null` current ratio (no measured cache-eligible steps this run) cannot
+ *   regress.
+ * - A `null` baseline ratio is treated as 0 (the floor a ratio can't drop
+ *   below), so a null baseline never triggers a regression.
+ *
+ * Token totals are tracked (`totals`) but never gate — track-don't-gate, same
+ * policy as score-audit's precision/recall.
+ */
+export declare function cacheHitRatioRegressed(current: TokenScorecard, baseline: TokenScorecard | null | undefined, epsilon?: number): boolean;
+/** A compact, deterministic human summary of a {@link TokenScorecard}. */
+export declare function renderTokenScorecardMarkdown(scorecard: TokenScorecard): string;
+//# sourceMappingURL=scoreTokens.d.ts.map

package/dist/audit/reporting/scoreTokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoreTokens.d.ts","sourceRoot":"","sources":["../../../src/audit/reporting/scoreTokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,yEAAyE;AACzE,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC;AAED,sFAAsF;AACtF,MAAM,WAAW,eAAe;IAC9B,2EAA2E;IAC3E,MAAM,EAAE,OAAO,CAAC;IAChB,6EAA6E;IAC7E,oBAAoB,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,uDAAuD;AACvD,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,2BAA2B,CAAC;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,CAAC;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,8EAA8E;QAC9E,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;KAChC,CAAC,CAAC;IACH,MAAM,EAAE;QACN,sDAAsD;QACtD,YAAY,EAAE,MAAM,CAAC;QACrB,uDAAuD;QACvD,aAAa,EAAE,MAAM,CAAC;QACtB,oDAAoD;QACpD,cAAc,EAAE,MAAM,CAAC;QACvB,iFAAiF;QACjF,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,kFAAkF;IAClF,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,gFAAgF;IAChF,gBAAgB,EAAE,eAAe,CAAC;IAClC,2FAA2F;IAC3F,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,GAAG,YAAY,CAAC,CAAC;CAC9D;AAgBD;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,eAAe,EAAE,EAC1B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACpC,cAAc,CA2EhB;AAuBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAI7D;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,cAAc,GAAG,IAAI,GAAG,SAAS,EAC3C,OAAO,SAAO,GACb,OAAO,CAMT;AAED,0EAA0E;AAC1E,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,cAAc,GAAG,MAAM,CAwB9E"}

package/dist/audit/reporting/scoreTokens.js

@@ -0,0 +1,195 @@
+/**
+ * score-tokens — the COST counterpart to the A-2 quality oracle (`score-audit`).
+ *
+ * `scoreTokens` is a PURE function of a run's recorded token-usage ledger
+ * (`token-usage.jsonl`, appended post-hoc at packet-completion time by
+ * `appendTokenUsageLine` — see `src/audit/io/tokenUsageLedger.ts`). It reports
+ * real per-step input/output tokens and prefix cache-hit ratio, exactly what the
+ * provider reported on a COMPLETED response — never a metered/token-counting API
+ * call and never `estimateTokensFromBytes` (that estimator is for PLANNING only).
+ *
+ * No-silent-scoring (mirrors score-audit's `unmatched[]` discipline): a step
+ * whose usage is entirely unreported (the agentic-CLI providers — claude-code /
+ * codex / opencode — spawn an external process with no structured usage) is
+ * counted in `totals.unmeasured_steps` and excluded from the token/cache-hit
+ * aggregates — NEVER folded in as a silent 0.
+ *
+ * Pure module: no IO, no clock (the ledger's wall-clock timestamp is read but
+ * never used to influence the verdict), no model identity — the same (entries,
+ * prefixHashes) always yields a byte-identical scorecard, order-independent.
+ */
+import { createHash } from "node:crypto";
+function ratio(numerator, denominator) {
+    return denominator === 0 ? null : numerator / denominator;
+}
+/** True iff at least one of the four usage legs was reported (not null/undefined). */
+function isMeasured(entry) {
+    return (entry.input_tokens != null ||
+        entry.output_tokens != null ||
+        entry.cache_read_tokens != null ||
+        entry.cache_creation_tokens != null);
+}
+/**
+ * Score a run's recorded token-usage ledger — the pure score-tokens oracle.
+ *
+ * `prefixHashes` is an OPTIONAL caller-supplied map of `packet_id ->
+ * fixed-prefix hash` (see {@link packetPromptPrefixHash}), computed by the
+ * caller from the run's recorded packet prompts. Omit it when wiring real
+ * prompt hashes end-to-end is not available — `prefix_stability` then defaults
+ * to `{ stable: true, diverging_packet_ids: [] }` (no signal, not a false
+ * failure).
+ */
+export function scoreTokens(runId, entries, prefixHashes) {
+    // Deterministic (sorted by packet_id) iteration so the scorecard is
+    // byte-identical regardless of input order.
+    const sorted = [...entries].sort((a, b) => a.packet_id.localeCompare(b.packet_id));
+    const steps = [];
+    let totalInput = 0;
+    let totalOutput = 0;
+    let measuredSteps = 0;
+    let unmeasuredSteps = 0;
+    let cacheHitReadSum = 0;
+    let cacheHitDenomSum = 0;
+    let cacheHitQualifyingSteps = 0;
+    const providerCoverage = new Map();
+    for (const entry of sorted) {
+        const poolKey = entry.pool_id ?? "unknown";
+        const measured = isMeasured(entry);
+        if (measured) {
+            measuredSteps += 1;
+            totalInput += entry.input_tokens ?? 0;
+            totalOutput += entry.output_tokens ?? 0;
+            // A pool is "measured" the moment ANY of its steps reported usage.
+            providerCoverage.set(poolKey, "measured");
+        }
+        else {
+            unmeasuredSteps += 1;
+            // Never downgrade a pool already proven "measured" by an earlier step.
+            if (providerCoverage.get(poolKey) !== "measured") {
+                providerCoverage.set(poolKey, "unmeasured");
+            }
+        }
+        // cache_hit_ratio requires BOTH legs measured (a lone cache_read with no
+        // input denominator, or vice versa, is not a ratio — surfaced as null).
+        const cacheRead = entry.cache_read_tokens;
+        const input = entry.input_tokens;
+        let cacheHitRatio = null;
+        if (cacheRead != null && input != null) {
+            cacheHitRatio = ratio(cacheRead, cacheRead + input);
+            if (cacheHitRatio !== null) {
+                cacheHitReadSum += cacheRead;
+                cacheHitDenomSum += cacheRead + input;
+                cacheHitQualifyingSteps += 1;
+            }
+        }
+        steps.push({
+            packet_id: entry.packet_id,
+            pool_id: entry.pool_id ?? null,
+            lens: entry.lens ?? null,
+            input_tokens: entry.input_tokens ?? null,
+            output_tokens: entry.output_tokens ?? null,
+            cache_read_tokens: entry.cache_read_tokens ?? null,
+            cache_hit_ratio: cacheHitRatio,
+        });
+    }
+    return {
+        schema_version: "score-tokens-scorecard/v1",
+        run_id: runId,
+        steps,
+        totals: {
+            input_tokens: totalInput,
+            output_tokens: totalOutput,
+            measured_steps: measuredSteps,
+            unmeasured_steps: unmeasuredSteps,
+        },
+        cache_hit_ratio_overall: cacheHitQualifyingSteps > 0 ? ratio(cacheHitReadSum, cacheHitDenomSum) : null,
+        prefix_stability: computePrefixStability(prefixHashes),
+        provider_coverage: Object.fromEntries([...providerCoverage.entries()].sort(([a], [b]) => a.localeCompare(b))),
+    };
+}
+/**
+ * Derive `prefix_stability` from an optional `packet_id -> fixed-prefix hash`
+ * map. Absent/empty input defaults to "stable" (no structural signal available,
+ * not a false failure). Otherwise every packet must share the FIRST (by sorted
+ * packet_id) hash; any divergence is surfaced, never silently averaged away.
+ */
+function computePrefixStability(prefixHashes) {
+    const entries = prefixHashes ? Object.entries(prefixHashes) : [];
+    if (entries.length === 0)
+        return { stable: true, diverging_packet_ids: [] };
+    const sortedEntries = [...entries].sort(([a], [b]) => a.localeCompare(b));
+    const referenceHash = sortedEntries[0][1];
+    const diverging = sortedEntries
+        .filter(([, hash]) => hash !== referenceHash)
+        .map(([packetId]) => packetId)
+        .sort();
+    return { stable: diverging.length === 0, diverging_packet_ids: diverging };
+}
+/**
+ * The structural, provider-independent prefix-stability boundary: hash of the
+ * FIXED prefix of a packet's rendered prompt — everything BEFORE the volatile
+ * `## Packet` section (the same boundary
+ * `tests/audit/dispatch-helpers.test.mjs` pins for prompt-caching:
+ * `prompt.slice(0, prompt.indexOf("## Packet"))`). Two packets in the same run
+ * whose fixed prefix hashes to the SAME value are byte-identical up to that
+ * point — the structural precondition for a provider's prefix cache to hit,
+ * independent of whether the provider actually reports a cache-hit ratio.
+ *
+ * A prompt with no `## Packet` marker hashes its entirety (defensive — never
+ * throws on an unexpected prompt shape).
+ */
+export function packetPromptPrefixHash(prompt) {
+    const markerIdx = prompt.indexOf("## Packet");
+    const prefix = markerIdx >= 0 ? prompt.slice(0, markerIdx) : prompt;
+    return createHash("sha256").update(prefix, "utf8").digest("hex");
+}
+/**
+ * The SOLE gate predicate: did the overall cache-hit ratio REGRESS (drop)
+ * against a baseline? Mirrors score-audit's `hallucinationRegressed` mechanism
+ * exactly, direction-flipped (higher cache-hit ratio is BETTER, so a regression
+ * is a DECREASE, not an increase).
+ *
+ * - With no baseline, nothing has regressed.
+ * - A `null` current ratio (no measured cache-eligible steps this run) cannot
+ *   regress.
+ * - A `null` baseline ratio is treated as 0 (the floor a ratio can't drop
+ *   below), so a null baseline never triggers a regression.
+ *
+ * Token totals are tracked (`totals`) but never gate — track-don't-gate, same
+ * policy as score-audit's precision/recall.
+ */
+export function cacheHitRatioRegressed(current, baseline, epsilon = 1e-9) {
+    if (!baseline)
+        return false;
+    const currentRatio = current.cache_hit_ratio_overall;
+    if (currentRatio === null)
+        return false;
+    const baselineRatio = baseline.cache_hit_ratio_overall ?? 0;
+    return currentRatio < baselineRatio - epsilon;
+}
+/** A compact, deterministic human summary of a {@link TokenScorecard}. */
+export function renderTokenScorecardMarkdown(scorecard) {
+    const pct = (value) => value === null ? "n/a" : `${(value * 100).toFixed(1)}%`;
+    const t = scorecard.totals;
+    const lines = [
+        `# Token scorecard — ${scorecard.run_id}`,
+        "",
+        `- Steps: ${t.measured_steps + t.unmeasured_steps} (measured ${t.measured_steps}, unmeasured ${t.unmeasured_steps})`,
+        `- Input tokens (measured only): ${t.input_tokens}`,
+        `- Output tokens (measured only): ${t.output_tokens}`,
+        `- Cache-hit ratio (gated): ${pct(scorecard.cache_hit_ratio_overall)}`,
+        `- Prefix stability: ${scorecard.prefix_stability.stable ? "stable" : "DIVERGING"}` +
+            (scorecard.prefix_stability.diverging_packet_ids.length > 0
+                ? ` (${scorecard.prefix_stability.diverging_packet_ids.join(", ")})`
+                : ""),
+    ];
+    const coverageEntries = Object.entries(scorecard.provider_coverage);
+    if (coverageEntries.length > 0) {
+        lines.push("", "## Provider coverage");
+        for (const [poolId, status] of coverageEntries) {
+            lines.push(`- \`${poolId}\`: ${status}`);
+        }
+    }
+    return lines.join("\n") + "\n";
+}
+//# sourceMappingURL=scoreTokens.js.map

package/dist/audit/reporting/scoreTokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoreTokens.js","sourceRoot":"","sources":["../../../src/audit/reporting/scoreTokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAqDzC,SAAS,KAAK,CAAC,SAAiB,EAAE,WAAmB;IACnD,OAAO,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,GAAG,WAAW,CAAC;AAC5D,CAAC;AAED,sFAAsF;AACtF,SAAS,UAAU,CAAC,KAAsB;IACxC,OAAO,CACL,KAAK,CAAC,YAAY,IAAI,IAAI;QAC1B,KAAK,CAAC,aAAa,IAAI,IAAI;QAC3B,KAAK,CAAC,iBAAiB,IAAI,IAAI;QAC/B,KAAK,CAAC,qBAAqB,IAAI,IAAI,CACpC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CACzB,KAAa,EACb,OAA0B,EAC1B,YAAqC;IAErC,oEAAoE;IACpE,4CAA4C;IAC5C,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAEnF,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,uBAAuB,GAAG,CAAC,CAAC;IAChC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAqC,CAAC;IAEtE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,SAAS,CAAC;QAC3C,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAEnC,IAAI,QAAQ,EAAE,CAAC;YACb,aAAa,IAAI,CAAC,CAAC;YACnB,UAAU,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;YACtC,WAAW,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC;YACxC,mEAAmE;YACnE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,eAAe,IAAI,CAAC,CAAC;YACrB,uEAAuE;YACvE,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,UAAU,EAAE,CAAC;gBACjD,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,CAAC;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC;QACjC,IAAI,aAAa,GAAkB,IAAI,CAAC;QACxC,IAAI,SAAS,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YACvC,aAAa,GAAG,KAAK,CAAC,SAAS,EAAE,SAAS,GAAG,KAAK,CAAC,CAAC;YACpD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;gBAC3B,eAAe,IAAI,SAAS,CAAC;gBAC7B,gBAAgB,IAAI,SAAS,GAAG,KAAK,CAAC;gBACtC,uBAAuB,IAAI,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,KAAK,CAAC,IAAI,CAAC;YACT,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;YAC9B,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI;YACxB,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;YACxC,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI;YAC1C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,IAAI,IAAI;YAClD,eAAe,EAAE,aAAa;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,cAAc,EAAE,2BAA2B;QAC3C,MAAM,EAAE,KAAK;QACb,KAAK;QACL,MAAM,EAAE;YACN,YAAY,EAAE,UAAU;YACxB,aAAa,EAAE,WAAW;YAC1B,cAAc,EAAE,aAAa;YAC7B,gBAAgB,EAAE,eAAe;SAClC;QACD,uBAAuB,EACrB,uBAAuB,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI;QAC/E,gBAAgB,EAAE,sBAAsB,CAAC,YAAY,CAAC;QACtD,iBAAiB,EAAE,MAAM,CAAC,WAAW,CACnC,CAAC,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CACvE;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAC7B,YAAgD;IAEhD,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAAC;IAE5E,MAAM,aAAa,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,aAAa,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,aAAa;SAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,aAAa,CAAC;SAC5C,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC;SAC7B,IAAI,EAAE,CAAC;IACV,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,oBAAoB,EAAE,SAAS,EAAE,CAAC;AAC7E,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACpE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAuB,EACvB,QAA2C,EAC3C,OAAO,GAAG,IAAI;IAEd,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,YAAY,GAAG,OAAO,CAAC,uBAAuB,CAAC;IACrD,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,aAAa,GAAG,QAAQ,CAAC,uBAAuB,IAAI,CAAC,CAAC;IAC5D,OAAO,YAAY,GAAG,aAAa,GAAG,OAAO,CAAC;AAChD,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,4BAA4B,CAAC,SAAyB;IACpE,MAAM,GAAG,GAAG,CAAC,KAAoB,EAAU,EAAE,CAC3C,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IAC1D,MAAM,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC;IAC3B,MAAM,KAAK,GAAG;QACZ,uBAAuB,SAAS,CAAC,MAAM,EAAE;QACzC,EAAE;QACF,YAAY,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,gBAAgB,cAAc,CAAC,CAAC,cAAc,gBAAgB,CAAC,CAAC,gBAAgB,GAAG;QACpH,mCAAmC,CAAC,CAAC,YAAY,EAAE;QACnD,oCAAoC,CAAC,CAAC,aAAa,EAAE;QACrD,8BAA8B,GAAG,CAAC,SAAS,CAAC,uBAAuB,CAAC,EAAE;QACtE,uBAAuB,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE;YACjF,CAAC,SAAS,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC;gBACzD,CAAC,CAAC,KAAK,SAAS,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBACpE,CAAC,CAAC,EAAE,CAAC;KACV,CAAC;IACF,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACpE,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,sBAAsB,CAAC,CAAC;QACvC,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,OAAO,MAAM,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC"}

package/dist/audit/types/externalAnalyzer.d.ts

@@ -94,16 +94,16 @@ export declare const ExternalAnalyzerToolStatusSchema: z.ZodObject<{
     status: "failed" | "findings" | "spawn_error" | "success" | "skipped" | "not_resolved" | "parse_error";
     resolved: boolean;
     tool: string;
-    command?: string | undefined;
     error?: string | undefined;
+    command?: string | undefined;
     exit_code?: number | null | undefined;
     output_snippet?: string | undefined;
 }, {
     status: "failed" | "findings" | "spawn_error" | "success" | "skipped" | "not_resolved" | "parse_error";
     resolved: boolean;
     tool: string;
-    command?: string | undefined;
     error?: string | undefined;
+    command?: string | undefined;
     exit_code?: number | null | undefined;
     output_snippet?: string | undefined;
 }>;
@@ -166,16 +166,16 @@ export declare const ExternalAnalyzerResultsSchema: z.ZodObject<{
         status: "failed" | "findings" | "spawn_error" | "success" | "skipped" | "not_resolved" | "parse_error";
         resolved: boolean;
         tool: string;
-        command?: string | undefined;
         error?: string | undefined;
+        command?: string | undefined;
         exit_code?: number | null | undefined;
         output_snippet?: string | undefined;
     }, {
         status: "failed" | "findings" | "spawn_error" | "success" | "skipped" | "not_resolved" | "parse_error";
         resolved: boolean;
         tool: string;
-        command?: string | undefined;
         error?: string | undefined;
+        command?: string | undefined;
         exit_code?: number | null | undefined;
         output_snippet?: string | undefined;
     }>, "many">>;
@@ -243,8 +243,8 @@ export declare const ExternalAnalyzerResultsSchema: z.ZodObject<{
         status: "failed" | "findings" | "spawn_error" | "success" | "skipped" | "not_resolved" | "parse_error";
         resolved: boolean;
         tool: string;
-        command?: string | undefined;
         error?: string | undefined;
+        command?: string | undefined;
         exit_code?: number | null | undefined;
         output_snippet?: string | undefined;
     }[] | undefined;
@@ -280,8 +280,8 @@ export declare const ExternalAnalyzerResultsSchema: z.ZodObject<{
         status: "failed" | "findings" | "spawn_error" | "success" | "skipped" | "not_resolved" | "parse_error";
         resolved: boolean;
         tool: string;
-        command?: string | undefined;
         error?: string | undefined;
+        command?: string | undefined;
         exit_code?: number | null | undefined;
         output_snippet?: string | undefined;
     }[] | undefined;
@@ -314,16 +314,16 @@ export declare const ExternalAnalyzerAcquisitionMarkerSchema: z.ZodObject<{
         status: "failed" | "findings" | "spawn_error" | "success" | "skipped" | "not_resolved" | "parse_error";
         resolved: boolean;
         tool: string;
-        command?: string | undefined;
         error?: string | undefined;
+        command?: string | undefined;
         exit_code?: number | null | undefined;
         output_snippet?: string | undefined;
     }, {
         status: "failed" | "findings" | "spawn_error" | "success" | "skipped" | "not_resolved" | "parse_error";
         resolved: boolean;
         tool: string;
-        command?: string | undefined;
         error?: string | undefined;
+        command?: string | undefined;
         exit_code?: number | null | undefined;
         output_snippet?: string | undefined;
     }>, "many">;
@@ -333,8 +333,8 @@ export declare const ExternalAnalyzerAcquisitionMarkerSchema: z.ZodObject<{
         status: "failed" | "findings" | "spawn_error" | "success" | "skipped" | "not_resolved" | "parse_error";
         resolved: boolean;
         tool: string;
-        command?: string | undefined;
         error?: string | undefined;
+        command?: string | undefined;
         exit_code?: number | null | undefined;
         output_snippet?: string | undefined;
     }[];
@@ -345,8 +345,8 @@ export declare const ExternalAnalyzerAcquisitionMarkerSchema: z.ZodObject<{
         status: "failed" | "findings" | "spawn_error" | "success" | "skipped" | "not_resolved" | "parse_error";
         resolved: boolean;
         tool: string;
-        command?: string | undefined;
         error?: string | undefined;
+        command?: string | undefined;
         exit_code?: number | null | undefined;
         output_snippet?: string | undefined;
     }[];

package/dist/remediate/contractPipeline/counterexampleFingerprint.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Content fingerprint for a counterexample.
+ *
+ * The judge↔repair convergence gate ({@link evaluateJudgeGate} in
+ * `../steps/contractPipeline.js`) must detect genuine re-occurrence of the
+ * same unrepaired defect across independent adversarial rounds. The
+ * reviewer-supplied counterexample `id` is free text (see
+ * `Counterexample.id` in `audit-tools/shared`'s obligations types) and is NOT
+ * a stable cross-round identity: two independent critic rounds each commonly
+ * label their genuinely-distinct top counterexample "CE-001" (the prompt
+ * schema's own example value). Keying convergence on the raw id string then
+ * misreads "two different CEs that happen to share a label" as "the same CE
+ * re-accepted after a repair" and falsely escalates a stall while a real new
+ * defect is being correctly repaired.
+ *
+ * This fingerprint keys on CONTENT instead: the tool-constrained
+ * `violated_obligation_ids` vocabulary (sorted, normalized) paired with the
+ * normalized `claim` prose, falling back to the normalized claim alone when
+ * no obligations are cited. Mirrors the derivation style of
+ * `src/shared/findingIdentitySignature.ts` (tiered stable fields, aggressive
+ * title normalization, truncated content hash) rather than introducing a
+ * second identity convention.
+ */
+import { type Counterexample } from "audit-tools/shared";
+/** Deterministic, content-derived identity for a counterexample. */
+export declare function counterexampleFingerprint(ce: Counterexample): string;
+//# sourceMappingURL=counterexampleFingerprint.d.ts.map

package/dist/remediate/contractPipeline/counterexampleFingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"counterexampleFingerprint.d.ts","sourceRoot":"","sources":["../../../src/remediate/contractPipeline/counterexampleFingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAA+B,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEtF,oEAAoE;AACpE,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,cAAc,GAAG,MAAM,CAWpE"}

package/dist/remediate/contractPipeline/counterexampleFingerprint.js

@@ -0,0 +1,37 @@
+/**
+ * Content fingerprint for a counterexample.
+ *
+ * The judge↔repair convergence gate ({@link evaluateJudgeGate} in
+ * `../steps/contractPipeline.js`) must detect genuine re-occurrence of the
+ * same unrepaired defect across independent adversarial rounds. The
+ * reviewer-supplied counterexample `id` is free text (see
+ * `Counterexample.id` in `audit-tools/shared`'s obligations types) and is NOT
+ * a stable cross-round identity: two independent critic rounds each commonly
+ * label their genuinely-distinct top counterexample "CE-001" (the prompt
+ * schema's own example value). Keying convergence on the raw id string then
+ * misreads "two different CEs that happen to share a label" as "the same CE
+ * re-accepted after a repair" and falsely escalates a stall while a real new
+ * defect is being correctly repaired.
+ *
+ * This fingerprint keys on CONTENT instead: the tool-constrained
+ * `violated_obligation_ids` vocabulary (sorted, normalized) paired with the
+ * normalized `claim` prose, falling back to the normalized claim alone when
+ * no obligations are cited. Mirrors the derivation style of
+ * `src/shared/findingIdentitySignature.ts` (tiered stable fields, aggressive
+ * title normalization, truncated content hash) rather than introducing a
+ * second identity convention.
+ */
+import { hashContent, normalizeTitle } from "audit-tools/shared";
+/** Deterministic, content-derived identity for a counterexample. */
+export function counterexampleFingerprint(ce) {
+    const obligations = (ce.violated_obligation_ids ?? [])
+        .map((id) => id.trim().toLowerCase())
+        .filter((id) => id.length > 0)
+        .sort();
+    const claim = normalizeTitle(ce.claim);
+    const key = obligations.length > 0
+        ? `obligations|${obligations.join(",")}|${claim}`
+        : `claim|${claim}`;
+    return hashContent(key, { length: 8 });
+}
+//# sourceMappingURL=counterexampleFingerprint.js.map

package/dist/remediate/contractPipeline/counterexampleFingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"counterexampleFingerprint.js","sourceRoot":"","sources":["../../../src/remediate/contractPipeline/counterexampleFingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,WAAW,EAAE,cAAc,EAAuB,MAAM,oBAAoB,CAAC;AAEtF,oEAAoE;AACpE,MAAM,UAAU,yBAAyB,CAAC,EAAkB;IAC1D,MAAM,WAAW,GAAG,CAAC,EAAE,CAAC,uBAAuB,IAAI,EAAE,CAAC;SACnD,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SACpC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SAC7B,IAAI,EAAE,CAAC;IACV,MAAM,KAAK,GAAG,cAAc,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,GAAG,GACP,WAAW,CAAC,MAAM,GAAG,CAAC;QACpB,CAAC,CAAC,eAAe,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE;QACjD,CAAC,CAAC,SAAS,KAAK,EAAE,CAAC;IACvB,OAAO,WAAW,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC"}

package/dist/remediate/index.d.ts

@@ -1,6 +1,40 @@
 import { Command } from "commander";
 import { runCommand } from "./utils/commands.js";
+import { type ContractPipelineArtifactName } from "./contractPipeline/artifactStore.js";
+import type { ValidationIssue } from "audit-tools/shared";
 declare const program: Command;
+export interface ValidateArtifactActionResult {
+    status: "ok" | "error";
+    name?: ContractPipelineArtifactName;
+    issue_count?: number;
+    issues?: ValidationIssue[];
+    message?: string;
+}
+/**
+ * The `validate-artifact --name X` self-check's full logic, exported so tests
+ * can call it directly (no dist build / subprocess race). Returns the JSON body
+ * + exit code the CLI action prints/exits with, without doing either itself.
+ *
+ * Beyond the per-artifact structural validator, this ALSO loads the on-disk
+ * sibling contract-pipeline artifacts (under `<artifactsDir>/intake/contract/`)
+ * and runs the SAME cross-artifact gates the plural `validate-artifacts` sweep
+ * and `next-step` enforce (evaluateContractPipelineCrossGates — single-sourced
+ * in validation/contractPipelineGates.ts), substituting the in-flight `name`
+ * payload for its on-disk version so the in-flight edit always wins over a
+ * stale/absent sibling. Without this, a shape-valid artifact missing its
+ * cross-artifact obligations (e.g. a test_validator_plan missing its CE-006
+ * scoped negative) could self-validate "ok" here and only fail later at
+ * next-step — the exact authoring round-trip this closes.
+ */
+export declare function runValidateArtifactAction(options: {
+    name: string;
+    file?: string;
+    root: string;
+    artifactsDir: string;
+}): Promise<{
+    result: ValidateArtifactActionResult;
+    exitCode: number;
+}>;
 export { program };
 /**
  * Parse argv through the program after normalizing the `=value` form of the

package/dist/remediate/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/remediate/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAuEjD,QAAA,MAAM,OAAO,SAAgB,CAAC;AA2U9B,OAAO,EAAE,OAAO,EAAE,CAAC;AAEnB;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAEjD;AAUD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAU/E;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,MAAM,EACpB,gBAAgB,EAAE,MAAM,GACvB,MAAM,CAuBR;AAYD;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GACnB,MAAM,CAIR;AAED,wBAAgB,kBAAkB,CAChC,IAAI,GAAE;IACJ,GAAG,CAAC,EAAE,OAAO,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B,GACL,MAAM,CAcR;AA4FD,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,OAAO,EACd,GAAG,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAkB,EACxC,OAAO,SAAY,EACnB,IAAI,SAAgB,GACnB,IAAI,CA4EN"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/remediate/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAajD,OAAO,EAML,KAAK,4BAA4B,EAClC,MAAM,qCAAqC,CAAC;AAE7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAyD1D,QAAA,MAAM,OAAO,SAAgB,CAAC;AAoP9B,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,4BAA4B,CAAC;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,yBAAyB,CAAC,OAAO,EAAE;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,4BAA4B,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAuFtE;AAiCD,OAAO,EAAE,OAAO,EAAE,CAAC;AAEnB;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAEjD;AAUD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAU/E;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,MAAM,EACpB,gBAAgB,EAAE,MAAM,GACvB,MAAM,CAuBR;AAYD;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GACnB,MAAM,CAIR;AAED,wBAAgB,kBAAkB,CAChC,IAAI,GAAE;IACJ,GAAG,CAAC,EAAE,OAAO,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B,GACL,MAAM,CAcR;AA4FD,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,OAAO,EACd,GAAG,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAkB,EACxC,OAAO,SAAY,EACnB,IAAI,SAAgB,GACnB,IAAI,CA4EN"}