clud-bug 0.6.34 → 0.7.0-rc.11

package/dist/core/formal-review.d.ts

@@ -0,0 +1,79 @@
+/** GitHub's `pulls.createReview` `event` enum, narrowed to the three we use. */
+export type FormalReviewEvent = 'APPROVE' | 'REQUEST_CHANGES' | 'COMMENT';
+/**
+ * GitHub `author_association` on a PR. Verbatim union from the REST API
+ * (per https://docs.github.com/en/rest/pulls/pulls — `author_association`).
+ *
+ * The "external" tier for §7.2.1 auto-approve gating is:
+ *
+ *   { 'NONE', 'FIRST_TIME_CONTRIBUTOR', 'FIRST_TIMER', 'MANNEQUIN' }
+ *
+ * Everything else (OWNER, MEMBER, COLLABORATOR, CONTRIBUTOR) is the
+ * "org-trusted" tier and eligible for auto-approve on a clean review.
+ *
+ * `FIRST_TIMER` is the legacy spelling (October 2018 era); GitHub
+ * currently emits `FIRST_TIME_CONTRIBUTOR` but some PR fixtures in
+ * downstream tests still carry the old token. We keep both so the
+ * external-contributor gate doesn't silently regress on the next
+ * REST-API rename.
+ */
+export type AuthorAssociation = 'OWNER' | 'MEMBER' | 'COLLABORATOR' | 'CONTRIBUTOR' | 'FIRST_TIME_CONTRIBUTOR' | 'FIRST_TIMER' | 'NONE' | 'MANNEQUIN';
+/**
+ * SPEC §7.2.1 + §7.2 rule table.
+ *
+ * Order matters — earlier rows short-circuit later ones:
+ *
+ * | Priority | Condition                                              | Event           |
+ * |----------|--------------------------------------------------------|-----------------|
+ * | 1        | PR author === clud-bug[bot]                            | 'skip'          |
+ * | 2        | authorAssociation ∈ EXTERNAL                           | 'COMMENT'       |
+ * | 3        | criticalCount > 0 AND strictMode=true                  | REQUEST_CHANGES |
+ * | 4        | criticalCount > 0 AND strictMode=false                 | COMMENT         |
+ * | 5        | minorCount > 0  (no critical)                          | COMMENT         |
+ * | 6        | 0 critical + 0 minor                                   | APPROVE         |
+ *
+ * The external-contributor row (Priority 2) sits BETWEEN self-PR-skip
+ * and the severity-driven rules: external contributors who open a
+ * critical-finding PR still get COMMENT (NOT REQUEST_CHANGES — we don't
+ * block their PR on a bot review; that's a human reviewer's call to
+ * make). External contributors who open a clean PR also get COMMENT
+ * (NOT APPROVE — the §7.2.1 precondition #3 gate).
+ *
+ * The 'skip' verdict tells the caller NOT to invoke `pulls.createReview`
+ * — GitHub returns 422 when a user reviews their own PR, so we
+ * short-circuit before the network round-trip. Self-PRs land during D.7
+ * migration fan-out (the App opens cross-repo update PRs under its own
+ * identity).
+ */
+export interface SelectReviewEventInput {
+    /** Count of `severity: critical` findings on the review. */
+    criticalCount: number;
+    /** Count of `severity: minor` findings on the review. */
+    minorCount: number;
+    /**
+     * `strictMode` flag read from `.clud-bug.json` at the PR's BASE ref.
+     * Older manifests may not carry this field — callers MUST pass
+     * `undefined` in that case so this function applies the safe default
+     * (false) rather than surprising users with REQUEST_CHANGES.
+     */
+    strictMode?: boolean;
+    /**
+     * GitHub login of the PR author. When it equals 'clud-bug[bot]' we
+     * skip the formal review entirely (GitHub disallows self-review with
+     * 422). This is the structural guard for D.7 migration fan-out PRs.
+     */
+    prAuthorLogin: string;
+    /**
+     * GitHub `author_association` on the PR. NEW in v0.7.0-rc.3 / SPEC
+     * §7.2.1: when this is in EXTERNAL_ASSOCIATIONS, a clean review gets
+     * COMMENT (not APPROVE) so external-contributor PRs require a human
+     * reviewer to satisfy the `required_approving_review_count: 1` floor.
+     *
+     * Callers that don't have this metadata (older webhook payloads,
+     * tests, etc.) should pass `'CONTRIBUTOR'` as the safe default — that
+     * tier is org-trusted and preserves pre-§7.2.1 behaviour.
+     */
+    authorAssociation: AuthorAssociation;
+}
+export declare function selectReviewEvent(input: SelectReviewEventInput): FormalReviewEvent | 'skip';
+//# sourceMappingURL=formal-review.d.ts.map

package/dist/core/formal-review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"formal-review.d.ts","sourceRoot":"","sources":["../../src/core/formal-review.ts"],"names":[],"mappings":"AAuBA,gFAAgF;AAChF,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,iBAAiB,GAAG,SAAS,CAAC;AAE1E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,iBAAiB,GACzB,OAAO,GACP,QAAQ,GACR,cAAc,GACd,aAAa,GACb,wBAAwB,GACxB,aAAa,GACb,MAAM,GACN,WAAW,CAAC;AAkBhB;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,WAAW,sBAAsB;IACrC,4DAA4D;IAC5D,aAAa,EAAE,MAAM,CAAC;IACtB,yDAAyD;IACzD,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;;;;OASG;IACH,iBAAiB,EAAE,iBAAiB,CAAC;CACtC;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,sBAAsB,GAC5B,iBAAiB,GAAG,MAAM,CAsC5B"}

package/dist/core/formal-review.js

@@ -0,0 +1,71 @@
+// SPEC §7.2.1 formal-review event selector.
+//
+// This is the PURE half of clud-bug-app's `lib/formal-review.ts` (the
+// Octokit-side `postFormalReview` IO wrapper stays App-side — it depends
+// on `getInstallationOctokit` + `@octokit/rest` which we don't want to
+// pull into core). The pure rule-table lives here so:
+//
+//   1. The npm workflow template's new post-step (added in v0.7.0-rc.3)
+//      can `import { selectReviewEvent } from 'clud-bug/core'` and post
+//      formal `pulls.createReview` calls under the workflow path — until
+//      this PR shipped, the workflow path NEVER satisfied the canonical
+//      ruleset's `required_approving_review_count: 1` floor because no
+//      APPROVE review was ever posted.
+//
+//   2. clud-bug-app (Phase 7 PR B) deletes its local copy and imports
+//      this version, gaining the §7.2.1 author_association extension
+//      (clud-bug-app's PR #40 shipped APPROVE without it, so the App
+//      currently auto-approves drive-by external-contributor PRs — a
+//      security bug closed by Phase 7 PR B's dep bump).
+//
+// Ported from clud-bug-app/lib/formal-review.ts (PR #40, MERGED 2026-06-10)
+// with the §7.2.1 `authorAssociation` extension new in Phase 7 PR A.
+/**
+ * Author-association values that route a clean-review APPROVE *down* to
+ * COMMENT per SPEC §7.2.1 precondition #3 ("PR author is an org member —
+ * NOT a first-time external contributor"). These authors still get a
+ * COMMENT review (so they SEE the bot's verdict) but the formal APPROVE
+ * vote stays withheld — a human reviewer must click Approve before the
+ * PR can merge under the canonical ruleset.
+ *
+ * Drive-by exploitation prevention: a malicious external contributor
+ * who opens a clean-looking PR cannot leverage clud-bug[bot]'s APPROVE
+ * vote to auto-merge.
+ */
+const EXTERNAL_ASSOCIATIONS = new Set(['NONE', 'FIRST_TIME_CONTRIBUTOR', 'FIRST_TIMER', 'MANNEQUIN']);
+export function selectReviewEvent(input) {
+    // Priority 1: self-PR guard. GitHub returns 422 on a self-review;
+    // we short-circuit before the network round-trip. Self-PRs land
+    // during D.7 migration fan-out (the App opens cross-repo update PRs
+    // under its own identity).
+    if (input.prAuthorLogin === 'clud-bug[bot]') {
+        return 'skip';
+    }
+    // Priority 2: external-contributor gate (SPEC §7.2.1 precondition #3).
+    // External contributors NEVER get APPROVE (no auto-merge bypass via
+    // drive-by) and NEVER get REQUEST_CHANGES (we don't block their PR on
+    // a bot review — that escalation is a human reviewer's call). They
+    // always get an advisory COMMENT so they see the bot's verdict.
+    if (EXTERNAL_ASSOCIATIONS.has(input.authorAssociation)) {
+        return 'COMMENT';
+    }
+    // Priority 6 (note: priorities 3-5 fall through to here when there
+    // are no findings): clean review on an org-trusted author → APPROVE.
+    // APPROVE flips the `required_approving_review_count: 1` ruleset and
+    // lets auto-merge fire under the canonical SPEC §7.2 ruleset.
+    if (input.criticalCount === 0 && input.minorCount === 0) {
+        return 'APPROVE';
+    }
+    // Priority 3 + 4: critical finding → gate on strictMode. Default
+    // `strictMode === undefined` → false (advisory-only). REQUEST_CHANGES
+    // blocks the PR until the author dismisses or fixes; we only honor
+    // it when the repo opted in.
+    if (input.criticalCount > 0) {
+        return input.strictMode === true ? 'REQUEST_CHANGES' : 'COMMENT';
+    }
+    // Priority 5: minor-only or preexisting-only finding → advisory
+    // COMMENT. We never REQUEST_CHANGES on a minor — those are noted,
+    // not blocking.
+    return 'COMMENT';
+}
+//# sourceMappingURL=formal-review.js.map

package/dist/core/formal-review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formal-review.js","sourceRoot":"","sources":["../../src/core/formal-review.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,EAAE;AACF,sEAAsE;AACtE,yEAAyE;AACzE,uEAAuE;AACvE,sDAAsD;AACtD,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AACxE,uEAAuE;AACvE,uCAAuC;AACvC,EAAE;AACF,sEAAsE;AACtE,qEAAqE;AACrE,qEAAqE;AACrE,qEAAqE;AACrE,wDAAwD;AACxD,EAAE;AACF,4EAA4E;AAC5E,qEAAqE;AAgCrE;;;;;;;;;;;GAWG;AACH,MAAM,qBAAqB,GAAmC,IAAI,GAAG,CAEnE,CAAC,MAAM,EAAE,wBAAwB,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AA4DlE,MAAM,UAAU,iBAAiB,CAC/B,KAA6B;IAE7B,kEAAkE;IAClE,gEAAgE;IAChE,oEAAoE;IACpE,2BAA2B;IAC3B,IAAI,KAAK,CAAC,aAAa,KAAK,eAAe,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,uEAAuE;IACvE,oEAAoE;IACpE,sEAAsE;IACtE,mEAAmE;IACnE,gEAAgE;IAChE,IAAI,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,mEAAmE;IACnE,qEAAqE;IACrE,qEAAqE;IACrE,8DAA8D;IAC9D,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,iEAAiE;IACjE,sEAAsE;IACtE,mEAAmE;IACnE,6BAA6B;IAC7B,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,CAAC;IAED,gEAAgE;IAChE,kEAAkE;IAClE,gBAAgB;IAChB,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/core/index.d.ts

@@ -0,0 +1,17 @@
+export { reviewPrompt, type ReviewPromptOptions, type ReviewPromptLanguage } from './prompts.js';
+export { REVIEW_SCHEMA, serializedReviewSchema, type ReviewData, type ReviewFinding, type ReviewSummaryCounts, type ReviewStatusHeader, type FindingSeverity, type PerSkillScanItem, type DedicatedSection, } from './review-schema.js';
+export { renderReview, SEVERITY_LABEL } from './render-review.js';
+export { detect, buildDescriptionLine, EXT_TO_LANG, DEP_TO_TERM, PY_DEP_TO_TERM, fileHistogram, firstParagraph, type DetectedSignals, type DescriptionLineSignals, } from './detect.js';
+export { render, renderFile, pickTemplate, templateLanguage, DEFAULTS, type RenderDefaults, type RenderVars, type TemplateLanguage, } from './render.js';
+export { durationToGitSince, renderAuditHeader, type AuditHeaderInput, } from './audit.js';
+export { reviewSchema, crossCheckSchema, findingItemSchema, findingSchema, perSkillScanItemSchema, dedicatedSectionSchema, summaryCountsSchema, severitySchema, statusHeaderSchema, crossCheckVerdictSchema, severityValues, statusHeaderValues, flattenFindings, unflattenFindings, deriveSummaryCounts, deriveSkillsReferenced, buildReviewFromFindings, type Review, type CrossCheck, type CrossCheckVerdictSchema, type Severity, type StatusHeader, type SummaryCounts, type FindingItem, type PerSkillScanItem as ZodPerSkillScanItem, type DedicatedSection as ZodDedicatedSection, type Finding as ZodFinding, } from './review-schema-zod.js';
+export { buildReviewPrompt, buildCrossCheckPrompt, buildConsensusPrompt, skillMatchesDiff, globMatch, truncatePatch, sliceUtf8Bytes, MAX_PATCH_BYTES_PER_FILE, DEFAULT_MAX_SKILL_BYTES, type BuildReviewPromptInput, type BuildCrossCheckPromptInput, type BuiltPrompt, type ChangedFile, type ChangedFileStatus, type PullRequestDiff, type PromptAppliesToRule, type PromptSkillFrontmatter, type PromptLoadedSkill, } from './prompt-builder.js';
+export { renderReviewFile, renderMultiPassMarkdown, reviewFilePath, reviewCommitMessage, PROTOCOL_VERSION, WRITTEN_BY, SEVERITY_EMOJI as REVIEW_FILE_SEVERITY_EMOJI, type RenderReviewFileInput, type RenderedFindingRef, type CacheStats, type RenderMultiPassMarkdownInput, type MultiPassReview, type UnifiedFinding, type PassAttribution, type PassSource, type ReviewPassMode, type MultiPassVerdict, } from './review-writeback.js';
+export { selectReviewEvent, type FormalReviewEvent, type AuthorAssociation, type SelectReviewEventInput, } from './formal-review.js';
+export { parsePriorReviewFile, diffFindings, findingIdentity, type ParsedFinding, type ParsedReview, } from './diff-findings.js';
+export { findingId, parseHeadLines, findingAnchorable, extractAnchorContext, renderThreadBody, extractFindingIdFromBody, parseThreadBody, planInlineThreads, REVIEW_THREADS_QUERY, REVIEW_THREADS_STATE_QUERY, RESOLVE_THREAD_MUTATION, ADD_REPLY_MUTATION, type Severity as InlineThreadSeverity, type FindingForThread, type DiffFile, type InlineCommentPlan, type PlanInlineThreadsResult, } from './inline-threads.js';
+export { resolveAutoResolveConfig, readAutoResolveConfigFromCludBug, runAutoResolve, applyResolutionRules, renderAutoResolveMarker, DEFAULT_AUTO_RESOLVE_CONFIG, type AutoResolveConfig, type PriorThread, type PriorFinding, type ThreadAction, type AutoResolveInput, type AutoResolveResult, type VerifyOutcome, } from './auto-resolve.js';
+export { VERIFIER_SYSTEM, buildVerifierPrompt, parseVerifierResponse, type VerifySingleFindingInput, } from './resolve-verifier.js';
+export { applyCanonicalRuleset, loadCanonicalV1, type CanonicalRuleset, type OctokitLike, type ApplyCanonicalRulesetParams, type ApplyResult, } from './configure-github.js';
+export { API_BASE, MAX_SKILLS, SkillsClient, normalizeList, rankAndCap, readReviewMode, readAppliesTo, appliesToPr, appliesToAuthor, partitionByReviewMode, extractPerSkillLine, selectReviewHeader, extractFirstReviewHeaderLine, selectReviewBody, extractStatsHeader, isCriticalReviewHeader, classifyPerSkillOutcome, parseFrontmatter, stripFrontmatter, type SkillDescriptor, type RankableSkill, type AppliesToRule, type SkillWithOptionalContent, type PrComment, type ReviewStatsHeader, type SkillFrontmatter, type SkillSource, type SkillReviewMode, type SkillKind, type VoiceScope, } from './skills.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,YAAY,EAAE,KAAK,mBAAmB,EAAE,KAAK,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACjG,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EACL,MAAM,EACN,oBAAoB,EACpB,WAAW,EACX,WAAW,EACX,cAAc,EACd,aAAa,EACb,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,sBAAsB,GAC5B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,MAAM,EACN,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,QAAQ,EACR,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,KAAK,gBAAgB,GACtB,MAAM,YAAY,CAAC;AAUpB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,uBAAuB,EACvB,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,KAAK,MAAM,EACX,KAAK,UAAU,EACf,KAAK,uBAAuB,EAC5B,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,gBAAgB,IAAI,mBAAmB,EAC5C,KAAK,gBAAgB,IAAI,mBAAmB,EAC5C,KAAK,OAAO,IAAI,UAAU,GAC3B,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,SAAS,EACT,aAAa,EACb,cAAc,EACd,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAC/B,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,qBAAqB,CAAC;AAI7B,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,cAAc,EACd,mBAAmB,EACnB,gBAAgB,EAChB,UAAU,EACV,cAAc,IAAI,0BAA0B,EAC5C,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,UAAU,EACf,KAAK,4BAA4B,EACjC,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,uBAAuB,CAAC;AAQ/B,OAAO,EACL,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,oBAAoB,CAAC;AAM5B,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,YAAY,GAClB,MAAM,oBAAoB,CAAC;AAU5B,OAAO,EACL,SAAS,EACT,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,wBAAwB,EACxB,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,0BAA0B,EAC1B,uBAAuB,EACvB,kBAAkB,EAClB,KAAK,QAAQ,IAAI,oBAAoB,EACrC,KAAK,gBAAgB,EACrB,KAAK,QAAQ,EACb,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,GAC7B,MAAM,qBAAqB,CAAC;AAK7B,OAAO,EACL,wBAAwB,EACxB,gCAAgC,EAChC,cAAc,EACd,oBAAoB,EACpB,uBAAuB,EACvB,2BAA2B,EAC3B,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,aAAa,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,wBAAwB,GAC9B,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,2BAA2B,EAChC,KAAK,WAAW,GACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,aAAa,EACb,UAAU,EACV,cAAc,EACd,aAAa,EACb,WAAW,EACX,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,4BAA4B,EAC5B,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,EACtB,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,wBAAwB,EAC7B,KAAK,SAAS,EACd,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,UAAU,GAChB,MAAM,aAAa,CAAC"}

package/dist/core/index.js

@@ -0,0 +1,66 @@
+// Public API surface for `clud-bug/core` (consumed via the package's
+// `./core` exports map → `dist/core/index.js`).
+//
+// Each line re-exports one core module's public symbols. Modules are
+// added incrementally as the v0.7.0 TypeScript migration converts each
+// lib/* JS file.
+export { reviewPrompt } from './prompts.js';
+export { REVIEW_SCHEMA, serializedReviewSchema, } from './review-schema.js';
+export { renderReview, SEVERITY_LABEL } from './render-review.js';
+export { detect, buildDescriptionLine, EXT_TO_LANG, DEP_TO_TERM, PY_DEP_TO_TERM, fileHistogram, firstParagraph, } from './detect.js';
+export { render, renderFile, pickTemplate, templateLanguage, DEFAULTS, } from './render.js';
+export { durationToGitSince, renderAuditHeader, } from './audit.js';
+// Zod-typed wire-shape review + internal-shape helpers for the
+// AI-Gateway consumer (clud-bug-app). The CLI-shape JSON Schema +
+// CLI summary-comment renderer above stay first-class; the Zod port
+// below is additive.
+//
+// Naming: the wire-shape `FindingItem` collides with neither CLI nor
+// App existing exports. The internal-shape `Finding` (FindingItem +
+// severity) is re-exported as `ZodFinding` to disambiguate from the
+// CLI's `ReviewFinding`.
+export { reviewSchema, crossCheckSchema, findingItemSchema, findingSchema, perSkillScanItemSchema, dedicatedSectionSchema, summaryCountsSchema, severitySchema, statusHeaderSchema, crossCheckVerdictSchema, severityValues, statusHeaderValues, flattenFindings, unflattenFindings, deriveSummaryCounts, deriveSkillsReferenced, buildReviewFromFindings, } from './review-schema-zod.js';
+// AI-Gateway prompt builder (App's review pass). The CLI-shape
+// `reviewPrompt` workflow-string above stays; this is additive.
+export { buildReviewPrompt, buildCrossCheckPrompt, buildConsensusPrompt, skillMatchesDiff, globMatch, truncatePatch, sliceUtf8Bytes, MAX_PATCH_BYTES_PER_FILE, DEFAULT_MAX_SKILL_BYTES, } from './prompt-builder.js';
+// SPEC §1.8.1 doc-file renderer (`docs/reviews/PR-<n>.md`). Renamed
+// from the App's `renderReview` to `renderReviewFile` to disambiguate
+// from the CLI's `renderReview` (summary PR-comment shape) above.
+export { renderReviewFile, renderMultiPassMarkdown, reviewFilePath, reviewCommitMessage, PROTOCOL_VERSION, WRITTEN_BY, SEVERITY_EMOJI as REVIEW_FILE_SEVERITY_EMOJI, } from './review-writeback.js';
+// SPEC §7.2.1 formal-review event selector. Pure rule-table half of
+// clud-bug-app's `lib/formal-review.ts`; the Octokit-side IO wrapper
+// (`postFormalReview`) stays App-side. v0.7.0-rc.3 adds the
+// `authorAssociation` extension so a clean review on an external
+// contributor's PR routes to COMMENT (not APPROVE) — the canonical
+// ruleset's `required_approving_review_count: 1` floor then requires
+// a human reviewer.
+export { selectReviewEvent, } from './formal-review.js';
+// SPEC §1.8.1 Resolved / Still-open block helpers. `parsePriorReviewFile`
+// reads a prior `docs/reviews/PR-<n>.md`; `diffFindings` splits prior vs
+// current into resolved + still-open lists that `renderReviewFile`
+// emits as the §1.8.1 blocks. Identity scheme is shareable with future
+// inline-thread anchoring in clud-bug-app.
+export { parsePriorReviewFile, diffFindings, findingIdentity, } from './diff-findings.js';
+// Wave 5a — D.2.X per-finding inline review threads. Pure helpers
+// (anchor detection, comment rendering, plan partitioning) + the GraphQL
+// constants the CLI's `post-inline-threads` verb invokes via `gh api`.
+// `findingId` returns the SHA-256[:16] hash and is distinct from the
+// plain-string `findingIdentity` above (both serve different matchers).
+//
+// Wave 5b additions: `parseThreadBody` (inverts renderThreadBody) +
+// `ADD_REPLY_MUTATION` (for posting the auto-resolve marker reply
+// before resolving a thread).
+export { findingId, parseHeadLines, findingAnchorable, extractAnchorContext, renderThreadBody, extractFindingIdFromBody, parseThreadBody, planInlineThreads, REVIEW_THREADS_QUERY, REVIEW_THREADS_STATE_QUERY, RESOLVE_THREAD_MUTATION, ADD_REPLY_MUTATION, } from './inline-threads.js';
+// Wave 5b — D.2.6 auto-resolve on fix-push. Pure rule tables + config
+// merge + marker rendering. The CLI's `resolve-threads` verb owns the
+// Anthropic Messages call + GraphQL mutations; `runAutoResolve` is
+// pure modulo the injected verifier callback.
+export { resolveAutoResolveConfig, readAutoResolveConfigFromCludBug, runAutoResolve, applyResolutionRules, renderAutoResolveMarker, DEFAULT_AUTO_RESOLVE_CONFIG, } from './auto-resolve.js';
+export { VERIFIER_SYSTEM, buildVerifierPrompt, parseVerifierResponse, } from './resolve-verifier.js';
+// SPEC §7 canonical-ruleset applier. Pure diff + idempotent-PATCH logic;
+// CLI side wraps `gh api` in an Octokit-like adapter and the App passes
+// its real Octokit instance. Shipped in v0.7.0-rc.4 for Marketplace prep
+// (Phase 6 task #227).
+export { applyCanonicalRuleset, loadCanonicalV1, } from './configure-github.js';
+export { API_BASE, MAX_SKILLS, SkillsClient, normalizeList, rankAndCap, readReviewMode, readAppliesTo, appliesToPr, appliesToAuthor, partitionByReviewMode, extractPerSkillLine, selectReviewHeader, extractFirstReviewHeaderLine, selectReviewBody, extractStatsHeader, isCriticalReviewHeader, classifyPerSkillOutcome, parseFrontmatter, stripFrontmatter, } from './skills.js';
+//# sourceMappingURL=index.js.map

package/dist/core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,gDAAgD;AAChD,EAAE;AACF,qEAAqE;AACrE,uEAAuE;AACvE,iBAAiB;AAEjB,OAAO,EAAE,YAAY,EAAuD,MAAM,cAAc,CAAC;AACjG,OAAO,EACL,aAAa,EACb,sBAAsB,GAQvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EACL,MAAM,EACN,oBAAoB,EACpB,WAAW,EACX,WAAW,EACX,cAAc,EACd,aAAa,EACb,cAAc,GAGf,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,MAAM,EACN,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,QAAQ,GAIT,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,GAElB,MAAM,YAAY,CAAC;AACpB,+DAA+D;AAC/D,kEAAkE;AAClE,oEAAoE;AACpE,qBAAqB;AACrB,EAAE;AACF,qEAAqE;AACrE,oEAAoE;AACpE,oEAAoE;AACpE,yBAAyB;AACzB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,uBAAuB,EACvB,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,GAWxB,MAAM,wBAAwB,CAAC;AAChC,+DAA+D;AAC/D,gEAAgE;AAChE,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,SAAS,EACT,aAAa,EACb,cAAc,EACd,wBAAwB,EACxB,uBAAuB,GAUxB,MAAM,qBAAqB,CAAC;AAC7B,oEAAoE;AACpE,sEAAsE;AACtE,kEAAkE;AAClE,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,cAAc,EACd,mBAAmB,EACnB,gBAAgB,EAChB,UAAU,EACV,cAAc,IAAI,0BAA0B,GAW7C,MAAM,uBAAuB,CAAC;AAC/B,oEAAoE;AACpE,qEAAqE;AACrE,4DAA4D;AAC5D,iEAAiE;AACjE,mEAAmE;AACnE,qEAAqE;AACrE,oBAAoB;AACpB,OAAO,EACL,iBAAiB,GAIlB,MAAM,oBAAoB,CAAC;AAC5B,0EAA0E;AAC1E,yEAAyE;AACzE,mEAAmE;AACnE,uEAAuE;AACvE,2CAA2C;AAC3C,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,eAAe,GAGhB,MAAM,oBAAoB,CAAC;AAC5B,kEAAkE;AAClE,yEAAyE;AACzE,uEAAuE;AACvE,qEAAqE;AACrE,wEAAwE;AACxE,EAAE;AACF,oEAAoE;AACpE,kEAAkE;AAClE,8BAA8B;AAC9B,OAAO,EACL,SAAS,EACT,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,wBAAwB,EACxB,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,0BAA0B,EAC1B,uBAAuB,EACvB,kBAAkB,GAMnB,MAAM,qBAAqB,CAAC;AAC7B,sEAAsE;AACtE,sEAAsE;AACtE,mEAAmE;AACnE,8CAA8C;AAC9C,OAAO,EACL,wBAAwB,EACxB,gCAAgC,EAChC,cAAc,EACd,oBAAoB,EACpB,uBAAuB,EACvB,2BAA2B,GAQ5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,qBAAqB,GAEtB,MAAM,uBAAuB,CAAC;AAC/B,yEAAyE;AACzE,wEAAwE;AACxE,yEAAyE;AACzE,uBAAuB;AACvB,OAAO,EACL,qBAAqB,EACrB,eAAe,GAKhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,aAAa,EACb,UAAU,EACV,cAAc,EACd,aAAa,EACb,WAAW,EACX,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,4BAA4B,EAC5B,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,EACtB,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,GAYjB,MAAM,aAAa,CAAC"}

package/dist/core/inline-threads.d.ts

@@ -0,0 +1,160 @@
+export type Severity = 'critical' | 'minor' | 'preexisting';
+/**
+ * Minimal shape this module needs from a review finding. Both the npm CLI
+ * and the App's `Finding` type satisfy this; the App also carries
+ * `reasoning` + nullable `file`/`line` which we tolerate via the optional
+ * fields below.
+ */
+export interface FindingForThread {
+    severity: Severity;
+    skill: string;
+    file?: string;
+    line?: number;
+    summary: string;
+    reasoning?: string;
+}
+/**
+ * Per-file unified-diff entry. Matches the shape returned by `gh api
+ * repos/{owner}/{repo}/pulls/{n}/files` (after JSON.parse) AND
+ * `octokit.rest.pulls.listFiles(...).data` so the App can pass either
+ * directly.
+ */
+export interface DiffFile {
+    filename: string;
+    patch?: string;
+}
+/**
+ * Hashes the canonical `${file}:${line}:${severity}:${skill}:${summary[:100]}`
+ * tuple to 16 hex characters. Stable across consumers — the App computes
+ * the same hash for the same finding, so threads posted by one consumer
+ * stay matchable by the other.
+ *
+ * Summary is truncated to 100 chars BEFORE hashing so small wording tweaks
+ * on subsequent review passes don't generate a fresh id and orphan the
+ * prior thread.
+ *
+ * Distinct from `findingIdentity` in `./diff-findings` (which returns the
+ * plain unhashed string — used by the Resolved/Still-open block matcher).
+ * Both helpers coexist on purpose: the unhashed string is human-readable
+ * for in-prose matching; the hash is short + collision-safe for embedding
+ * in `<!-- finding-id: ... -->` comment-body markers.
+ */
+export declare function findingId(finding: {
+    file?: string;
+    line?: number;
+    severity: Severity;
+    skill: string;
+    summary: string;
+}): string;
+/**
+ * Returns the set of 1-indexed HEAD-side line numbers a unified-diff patch
+ * touches (added + context lines). GitHub only accepts inline review
+ * comments on lines that appear in the diff, so this gates whether a
+ * finding's `line` can become a thread.
+ *
+ * "Touched" = appears on the RIGHT side of the unified diff: added (`+`)
+ * lines OR unchanged context (` `) lines inside any hunk. Removed (`-`)
+ * lines are LEFT-side only and can't anchor inline comments.
+ *
+ * If `patch` is undefined (binary file, GitHub truncation) returns an empty
+ * set — the caller falls back to the summary comment for those findings.
+ */
+export declare function parseHeadLines(patch: string | undefined): Set<number>;
+/**
+ * Returns true when the finding's `(file, line)` can be anchored as an
+ * inline comment on the current diff. `diffFiles` is the per-file diff
+ * (as returned by `gh api repos/.../pulls/.../files`).
+ */
+export declare function findingAnchorable(finding: {
+    file?: string;
+    line?: number;
+}, diffFiles: ReadonlyArray<DiffFile>): boolean;
+/**
+ * Builds the `{codeBefore, codeAfter, diffAtAnchor?}` triple Wave 5b's
+ * auto-resolve verifier consumes for a single finding, pulled out of the
+ * unified-diff hunk that touches the finding's line.
+ *
+ * Works entirely from the in-hand patch — no fresh API calls. The patch
+ * already encodes BEFORE (lines with `-` or context) and AFTER (lines with
+ * `+` or context) for every hunk the PR touches.
+ *
+ * Returns empty strings for `codeBefore`/`codeAfter` when the finding's
+ * file isn't in the diff at all. The verifier sees "unchanged" and
+ * typically returns NOT_ADDRESSED / UNCERTAIN, which is the correct
+ * behavior — an unchanged file isn't a fix.
+ */
+export declare function extractAnchorContext(finding: {
+    file?: string;
+    line?: number;
+}, diffFiles: ReadonlyArray<DiffFile>): {
+    codeBefore: string;
+    codeAfter: string;
+    diffAtAnchor?: string;
+};
+/**
+ * Body for a single inline-thread comment. Includes a hidden HTML marker
+ * carrying `findingId` so Wave 5b's auto-resolve can recover the canonical
+ * id from the thread's first comment body without persisting state.
+ */
+export declare function renderThreadBody(finding: FindingForThread): string;
+/**
+ * Extracts the hashed `findingId` from a thread comment body that was
+ * rendered by `renderThreadBody`. Returns null when the marker is absent
+ * (a manual reply, or a comment posted by a different tool).
+ *
+ * Used by Wave 5b's auto-resolve to re-derive finding ids from existing
+ * GitHub threads on a stateless re-run.
+ */
+export declare function extractFindingIdFromBody(body: string): string | null;
+/**
+ * Wave 5b — invert `renderThreadBody` to recover the original finding
+ * tuple from a bot-authored thread comment. The fix-push auto-resolve
+ * CLI verb uses this to reconstruct `PriorFinding` from the GraphQL
+ * `reviewThreads` response without persistent state.
+ *
+ * Returns null when the body doesn't match the canonical shape
+ * `<!-- finding-id: XX -->\n🔴|🟡 \`skill\`\n\nsummary[\n\nreasoning]`.
+ * Same start-anchored posture as `extractFindingIdFromBody` for anti-
+ * injection: a user reply that quotes the marker mid-body won't be
+ * misattributed as bot-authored.
+ */
+export declare function parseThreadBody(body: string): {
+    findingId: string;
+    severity: Severity;
+    skill: string;
+    summary: string;
+    reasoning?: string;
+} | null;
+/**
+ * One entry in the createReview `comments[]` array. Matches GitHub's REST
+ * shape exactly so callers can JSON.stringify directly into a `gh api` body.
+ */
+export interface InlineCommentPlan {
+    path: string;
+    line: number;
+    side: 'RIGHT';
+    body: string;
+}
+export interface PlanInlineThreadsResult {
+    /** Comment entries for the createReview `comments[]` field. */
+    comments: InlineCommentPlan[];
+    /** Findings the diff couldn't anchor (file or line not in any hunk). */
+    skipped: FindingForThread[];
+    /** Findings filtered out because severity is 'preexisting' (informational only). */
+    preexisting: FindingForThread[];
+}
+/**
+ * Partitions a flat findings list into the `comments[]` body for
+ * `POST /repos/:owner/:repo/pulls/:n/reviews` + the findings the caller
+ * should surface elsewhere (summary comment for `skipped`; never for
+ * `preexisting`).
+ *
+ * Pure function — no I/O. The CLI verb uses this to compute the API body;
+ * the App can use it after Wave 5c migration to share the same partitioning.
+ */
+export declare function planInlineThreads(findings: ReadonlyArray<FindingForThread>, diffFiles: ReadonlyArray<DiffFile>): PlanInlineThreadsResult;
+export declare const REVIEW_THREADS_QUERY = "\n  query ReviewThreads($owner: String!, $repo: String!, $pr: Int!) {\n    repository(owner: $owner, name: $repo) {\n      pullRequest(number: $pr) {\n        reviewThreads(first: 100) {\n          nodes {\n            id\n            isResolved\n            comments(first: 100) {\n              nodes {\n                databaseId\n                path\n                line\n                originalLine\n                body\n                author {\n                  login\n                }\n              }\n            }\n          }\n        }\n      }\n    }\n  }\n";
+export declare const REVIEW_THREADS_STATE_QUERY = "\n  query ReviewThreadStates($owner: String!, $repo: String!, $pr: Int!) {\n    repository(owner: $owner, name: $repo) {\n      pullRequest(number: $pr) {\n        reviewThreads(first: 100) {\n          nodes {\n            id\n            isResolved\n            comments(first: 1) {\n              nodes {\n                databaseId\n                body\n              }\n            }\n          }\n        }\n      }\n    }\n  }\n";
+export declare const RESOLVE_THREAD_MUTATION = "\n  mutation ResolveThread($threadId: ID!) {\n    resolveReviewThread(input: { threadId: $threadId }) {\n      thread {\n        isResolved\n      }\n    }\n  }\n";
+export declare const ADD_REPLY_MUTATION = "\n  mutation AddThreadReply($threadId: ID!, $body: String!) {\n    addPullRequestReviewThreadReply(\n      input: { pullRequestReviewThreadId: $threadId, body: $body }\n    ) {\n      comment {\n        id\n        body\n      }\n    }\n  }\n";
+//# sourceMappingURL=inline-threads.d.ts.map

package/dist/core/inline-threads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inline-threads.d.ts","sourceRoot":"","sources":["../../src/core/inline-threads.ts"],"names":[],"mappings":"AA6BA,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,OAAO,GAAG,aAAa,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAMT;AAMD;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAkCrE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EACzC,SAAS,EAAE,aAAa,CAAC,QAAQ,CAAC,GACjC,OAAO,CAKT;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EACzC,SAAS,EAAE,aAAa,CAAC,QAAQ,CAAC,GACjC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,CA4DlE;AAMD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAOlE;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMpE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,IAAI,CAwBP;AAMD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,uBAAuB;IACtC,+DAA+D;IAC/D,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,wEAAwE;IACxE,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,oFAAoF;IACpF,WAAW,EAAE,gBAAgB,EAAE,CAAC;CACjC;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,aAAa,CAAC,gBAAgB,CAAC,EACzC,SAAS,EAAE,aAAa,CAAC,QAAQ,CAAC,GACjC,uBAAuB,CAuBzB;AAaD,eAAO,MAAM,oBAAoB,skBAyBhC,CAAC;AAOF,eAAO,MAAM,0BAA0B,ybAmBtC,CAAC;AAEF,eAAO,MAAM,uBAAuB,uKAQnC,CAAC;AAMF,eAAO,MAAM,kBAAkB,uPAW9B,CAAC"}