dorfl 0.0.0 → 0.1.0

package/dist/retry-backoff.js

@@ -0,0 +1,98 @@
+/**
+ * A small, shared **bounded exponential-backoff** retry helper for git / provider
+ * NETWORK ops on the needs-attention route (the OBSERVABLE surface push, the
+ * RECOVERABLE branch push, and the propose-mode PR create). The route does a
+ * LOCAL move that always succeeds offline, then these best-effort remote ops; a
+ * transient OUTAGE (unreachable arbiter / flaky provider) should be RETRIED a few
+ * times with a temporal delay before a clean BOUNDED give-up into the local-only
+ * degraded state — never an indefinite hang, never an uncaught throw out of the
+ * failure handler.
+ *
+ * This is DELIBERATELY NOT the model in {@link file://./claim-cas.ts}: that loop
+ * retries CONTENTION (a REJECTED push — someone advanced the ref) INSTANTLY with
+ * NO delay, refetching+rebuilding against the new base. THIS helper is for the
+ * OUTAGE/unreachable case, which needs a temporal back-off (the remote may come
+ * back); the two are distinct and must not be conflated.
+ *
+ * Bounds (all configurable, sensible defaults):
+ *   - `initialDelayMs` (X): the first inter-attempt delay.
+ *   - `maxDelayMs` (Y): the cap the exponentially-growing delay never exceeds.
+ *   - `maxTotalMs` (Z): the wall-clock budget; once the NEXT delay would push the
+ *     cumulative sleep past this, we stop retrying (a clean bounded give-up).
+ *   - `maxAttempts`: a hard upper bound on attempts (a belt-and-braces cap so a
+ *     tiny/zero delay budget still terminates).
+ *
+ * The SLEEP is INJECTABLE (reusing the `sleep?: (ms) => Promise<void>` /
+ * `realSleep` seam `src/run.ts` already uses for the inter-tick sleep) so tests
+ * drive the whole retry TIMELINE deterministically with NO real wall-clock waits.
+ *
+ * Model-endpoint retries are NOT this helper's job — the pi harness retries its
+ * own API. This is git/provider network resilience only.
+ */
+/** The default real sleep (a `setTimeout`-backed promise). */
+export const realSleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+/**
+ * The default bounds: a short first delay growing exponentially to a modest cap,
+ * with a small total budget — enough to ride out a blip, NOT a hang. A clean
+ * bounded give-up into the local-only degraded state beats waiting forever;
+ * CI/humans then retry deliberately.
+ */
+export const DEFAULT_BACKOFF = {
+    initialDelayMs: 500,
+    maxDelayMs: 8_000,
+    maxTotalMs: 30_000,
+    maxAttempts: 6,
+};
+/**
+ * Run `op` and, if it reports failure, RETRY it with bounded exponential backoff
+ * until it succeeds or the bounds are exhausted (then a clean give-up — NEVER an
+ * indefinite loop). `op` reports failure in EITHER of two ways, both treated the
+ * same so callers can use whichever fits the underlying API:
+ *
+ *   - it RETURNS `{ok: false, error?}` (e.g. a git `RunResult` mapped to a
+ *     boolean — a non-zero exit is a failure, not a throw), OR
+ *   - it THROWS (e.g. a git plumbing helper's hard-fetch against an unreachable
+ *     remote) — the throw is CAUGHT here and treated as a failed attempt.
+ *
+ * On success it returns `{ok: true, value}`. On exhaustion it returns
+ * `{ok: false, lastError}` — it NEVER throws out (the route must not crash on a
+ * git outage). The delay schedule is `initialDelayMs`, doubling each attempt up
+ * to `maxDelayMs`, stopping once another attempt's delay would exceed the
+ * `maxTotalMs` budget or `maxAttempts` is reached.
+ */
+export async function retryWithBackoff(op, options = {}) {
+    const initialDelayMs = options.initialDelayMs ?? DEFAULT_BACKOFF.initialDelayMs;
+    const maxDelayMs = options.maxDelayMs ?? DEFAULT_BACKOFF.maxDelayMs;
+    const maxTotalMs = options.maxTotalMs ?? DEFAULT_BACKOFF.maxTotalMs;
+    const maxAttempts = options.maxAttempts ?? DEFAULT_BACKOFF.maxAttempts;
+    const sleep = options.sleep ?? realSleep;
+    let attempts = 0;
+    let elapsed = 0;
+    let delay = initialDelayMs;
+    let lastError;
+    // eslint-disable-next-line no-constant-condition
+    while (true) {
+        attempts++;
+        try {
+            const r = await op();
+            if (r.ok) {
+                return { ok: true, value: r.value, attempts };
+            }
+            lastError = r.error;
+        }
+        catch (err) {
+            lastError = err instanceof Error ? err.message : String(err);
+        }
+        // Decide whether ANOTHER attempt is allowed (bounded give-up, not a hang).
+        if (attempts >= maxAttempts) {
+            return { ok: false, attempts, lastError };
+        }
+        if (elapsed + delay > maxTotalMs) {
+            return { ok: false, attempts, lastError };
+        }
+        await sleep(delay);
+        elapsed += delay;
+        delay = Math.min(delay * 2, maxDelayMs);
+    }
+}
+//# sourceMappingURL=retry-backoff.js.map

package/dist/retry-backoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry-backoff.js","sourceRoot":"","sources":["../src/retry-backoff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAKH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,SAAS,GAAU,CAAC,EAAU,EAAiB,EAAE,CAC7D,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAgBnD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAA4C;IACvE,cAAc,EAAE,GAAG;IACnB,UAAU,EAAE,KAAK;IACjB,UAAU,EAAE,MAAM;IAClB,WAAW,EAAE,CAAC;CACd,CAAC;AAOF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,EAAqE,EACrE,UAA0B,EAAE;IAE5B,MAAM,cAAc,GACnB,OAAO,CAAC,cAAc,IAAI,eAAe,CAAC,cAAc,CAAC;IAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,eAAe,CAAC,UAAU,CAAC;IACpE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,eAAe,CAAC,UAAU,CAAC;IACpE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,eAAe,CAAC,WAAW,CAAC;IACvE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC;IAEzC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,KAAK,GAAG,cAAc,CAAC;IAC3B,IAAI,SAA6B,CAAC;IAElC,iDAAiD;IACjD,OAAO,IAAI,EAAE,CAAC;QACb,QAAQ,EAAE,CAAC;QACX,IAAI,CAAC;YACJ,MAAM,CAAC,GAAG,MAAM,EAAE,EAAE,CAAC;YACrB,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;gBACV,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAC,CAAC;YAC7C,CAAC;YACD,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9D,CAAC;QAED,2EAA2E;QAC3E,IAAI,QAAQ,IAAI,WAAW,EAAE,CAAC;YAC7B,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAC,CAAC;QACzC,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,GAAG,UAAU,EAAE,CAAC;YAClC,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAC,CAAC;QACzC,CAAC;QAED,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,IAAI,KAAK,CAAC;QACjB,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;IACzC,CAAC;AACF,CAAC"}

package/dist/review-gate.d.ts

@@ -0,0 +1,173 @@
+import { type Harness } from './harness.js';
+import { type ReviewVerdict } from './review-verdict.js';
+export { parseReviewVerdict, ReviewParseError, type ReviewFinding, type ReviewVerdict, } from './review-verdict.js';
+/**
+ * **Gate 2 — the PR/code review gate** (GATES prd `work/prds/tasked/review.md`), the
+ * JUDGEMENT layer that rides ON TOP of the deterministic `verify` floor (ADR §8).
+ *
+ * After the green `verify` and BEFORE the done-move, `complete`/`do` invoke the
+ * `review` SKILL (`skills/review/SKILL.md`) as a **fresh-context** agent — its
+ * OWN harness launch, never the builder's session — to read the diff against the
+ * task it claims and EMIT a verdict. The verdict is then ROUTED by the caller
+ * (`complete.ts`): `approve` → done-move/commit/integrate; `block` → the SAME
+ * `needs-attention` machinery the red gate uses (never a merge).
+ *
+ * This module is the SEAM (the {@link ReviewGate} function type) + its
+ * production harness-backed implementation ({@link harnessReviewGate}). The seam
+ * is injectable exactly like `do`'s `dorfl`: tests stub a canned
+ * `approve`/`block` verdict (no real model); production launches the review agent
+ * through the EXISTING harness seam ({@link Harness}/`LaunchInput`), routing the
+ * `reviewModel` override through `LaunchInput.model` / {@link substituteModel} —
+ * NOT a new model/launch mechanism (the §13 model-routing intent).
+ *
+ * Determinism boundary (ADR §8), explicit: review is a JUDGEMENT gate, never a
+ * replacement for `verify`. `verify` stays the non-skippable model-free floor;
+ * review runs ON TOP, only when `review` resolves on.
+ */
+/** What the review gate needs to launch a fresh-context review of one task. */
+export interface ReviewGateInput {
+    /** The slug under review (the task the diff claims to deliver). */
+    slug: string;
+    /** The working clone/checkout the gate runs in (the prepared work branch). */
+    cwd: string;
+    /**
+     * The model the REVIEW agent runs on (`reviewModel`, de-correlated from the
+     * builder). `undefined` ⇒ no forced model (the harness's own default). Flows
+     * to the launch through `LaunchInput.model` / {@link substituteModel}.
+     */
+    reviewModel?: string;
+    /** Which review ROUND this is (1-based), for the revise↔review loop bound. */
+    round: number;
+    /**
+     * `--watch`: tail the REVIEW agent's pi session `.jsonl` live, the SAME way the
+     * build agent's is tailed (task `watch-review-session`). Threaded in from the
+     * caller's `CompleteOptions`/`DoOptions` so the production gate
+     * ({@link harnessReviewGate}) can route its launch through the shared
+     * {@link launchWithOptionalWatch} helper. OFF (the default) ⇒ the gate does a
+     * plain sync `launch`, byte-identical to before. A pure observer — it never
+     * changes the verdict.
+     */
+    watch?: boolean;
+    /** Where the tailed review lines are written (defaults to stderr). */
+    watchSink?: (line: string) => void;
+    /** Emit ANSI colour in the tailed review lines (the caller's TTY decision). */
+    color?: boolean;
+    /**
+     * The HOST-ONLY sessions root the review session FILE is generated under
+     * (resolved `config.sessionsDir`). `undefined` ⇒ pi's per-cwd default. Same
+     * bridge the build launch uses; the review launch passes a DISTINCT session id
+     * (`<slug>-review`) under it so its session never collides with the build's.
+     */
+    sessionsDir?: string;
+    /** Environment for the review-agent launch. */
+    env?: NodeJS.ProcessEnv;
+}
+/**
+ * The review-gate SEAM: run a fresh-context review of the slug's diff and return
+ * a parsed verdict. Injected by tests (a canned verdict, no real model);
+ * production uses {@link harnessReviewGate}. Mirrors `do`'s `DoDorfl`
+ * injectable-seam shape so the gate wiring is testable as pure logic.
+ */
+export type ReviewGate = (input: ReviewGateInput) => Promise<ReviewVerdict>;
+/**
+ * Render the review-agent PROMPT: instruct a fresh-context agent to apply the
+ * **review discipline** (`work/protocol/REVIEW-PROTOCOL.md`) to the code
+ * changes on this work branch against the task that specified them, and to
+ * EMIT a single unified `ReviewVerdict` JSON object (so
+ * {@link parseReviewVerdict} can read it). The discipline body (the lenses +
+ * the destination check) lives in `REVIEW-PROTOCOL.md` — NOT inlined here —
+ * and the JSON-emitted-shape contract comes from
+ * {@link verdictContractPrompt}, the ONE shared helper called by all four
+ * review-prompt builders (task `review-protocol-doc-and-shared-machinery`).
+ *
+ * This builder owns ONLY the PER-BUILDER framing: who you are (Gate 2 — PR/code
+ * review), what you are reviewing (code-vs-its-task, the diff on this work
+ * branch), and which optional verdict channels to fill (the `review` prose for
+ * the in-core PR-comment poster; an in-scope DECISION ratification hunt; a
+ * conceptual-coherence check). The shared discipline body and the verdict
+ * contract are NOT duplicated here.
+ */
+export declare function buildReviewPrompt(slug: string): string;
+/** What a harness-backed review gate needs to launch the review agent. */
+export interface HarnessReviewGateOptions {
+    /** The harness seam used to launch the fresh-context review agent. */
+    harness?: Harness;
+    /** The agent command the null/shell adapter shells out to (`{model}`-aware). */
+    agentCmd?: string;
+    /**
+     * Read the review agent's textual output for parsing. The harness now surfaces
+     * the agent's final assistant message in `LaunchResult.output` (task
+     * `harness-agent-output`, Option C) — the ANSWER channel, distinct from
+     * `detail` (the failure/`stderr` channel). Production reads `launched.output`;
+     * tests inject `readOutput` to stub a canned verdict string. The reader is
+     * passed the launch's `output` and returns the text to parse.
+     */
+    readOutput?: (output: string | undefined) => string;
+}
+/**
+ * The PRODUCTION review gate: launch the `review` SKILL as a fresh-context agent
+ * through the EXISTING harness seam, routing the `reviewModel` override via
+ * `LaunchInput.model` (the §13 model-routing intent — NOT a new mechanism), then
+ * parse the emitted `{verdict, findings}`.
+ *
+ * It is a SEPARATE harness launch (fresh context = not the builder's session) in
+ * the same checkout `cwd` (the prepared, gated work branch). The launch is fed
+ * {@link buildReviewPrompt}; the model flows through `LaunchInput.model`, which
+ * each adapter injects natively (pi: `--model`; null/shell: the `{model}`
+ * placeholder via {@link substituteModel}). auth/keys stay the harness's job.
+ */
+export declare function harnessReviewGate(options?: HarnessReviewGateOptions): ReviewGate;
+/**
+ * Render the TASK-SET acceptance-gate PROMPT — the task-path mirror of
+ * {@link buildReviewPrompt} (task `slice-acceptance-gate`). Instead of
+ * reviewing a code diff against ONE task, this instructs a FRESH-CONTEXT
+ * agent to review the WHOLE candidate SET of tasks produced for prd `slug`,
+ * using the **review discipline**'s SET-OF-TASKS lens (coherence / dependency
+ * graph / gaps + overlap / "if every task is built exactly as written, do we
+ * reach the system the prd describes, and is each task
+ * correct-if-implemented?"). It emits the SAME unified `ReviewVerdict` shape
+ * so {@link parseReviewVerdict} reads it identically.
+ *
+ * This is a TERMINAL, ONE-SHOT accept/reject gate (it runs BEFORE the task
+ * set integrates) — NOT the tasker IMPROVER loop (`tasker-review-loop.ts`),
+ * which EDITS tasks between passes. This prompt explicitly forbids editing.
+ *
+ * Per-builder framing only — the discipline body lives in
+ * `work/protocol/REVIEW-PROTOCOL.md`; the JSON shape comes from
+ * {@link verdictContractPrompt}.
+ */
+export declare function buildTaskAcceptancePrompt(slug: string): string;
+/**
+ * The PRODUCTION task-SET acceptance gate (task `slice-acceptance-gate`): the
+ * task-path mirror of {@link harnessReviewGate}. It launches the `review` SKILL
+ * as a fresh-context agent through the SAME harness seam, routing the
+ * `reviewModel` override via `LaunchInput.model`, then parses the emitted
+ * `{verdict, findings}` — IDENTICAL machinery to the build gate, differing ONLY
+ * in the PROMPT ({@link buildTaskAcceptancePrompt}, a task-SET review) and in
+ * being driven ONE-SHOT by the caller (the tasking path passes
+ * `reviewMaxRounds: 1`).
+ *
+ * Reuses the `ReviewGate` seam type verbatim so `performIntegration`'s review
+ * block runs it with no shape change. The review uses a DISTINCT session id
+ * (`<slug>-task-acceptance`) so it never collides with the build review session
+ * OR the tasker improver loop's review session. NAME: `harnessTaskAcceptanceGate`
+ * (the ACCEPTANCE gate), DISTINCT from `tasker-review-loop.ts`'s
+ * `harnessTaskReviewGate` (the IMPROVER loop seam, which EDITS tasks) — the two
+ * are non-overlapping concepts (gate = terminal pass/fail; loop = review→edit).
+ */
+export declare function harnessTaskAcceptanceGate(options?: HarnessReviewGateOptions): ReviewGate;
+/**
+ * Format a review's BLOCKING findings into a needs-attention reason string —
+ * recorded in the item body when the gate routes a `block` (the SAME body-prose
+ * mechanism the red gate's reason uses; WORK-CONTRACT rule 3). Non-blocking
+ * findings are omitted from the reason (they do not block). On exhaustion of
+ * `reviewMaxRounds`, {@link reviewRoundsExhaustedReason} is used instead.
+ */
+export declare function formatBlockReason(verdict: ReviewVerdict): string;
+/**
+ * The needs-attention reason when Gate 2 does not reach a UNANIMOUS approve —
+ * either a round returned a (terminal) block, or not all `reviewMaxRounds` rounds
+ * corroborated the approve.
+ */
+export declare function reviewRoundsExhaustedReason(maxRounds: number): string;
+//# sourceMappingURL=review-gate.d.ts.map

package/dist/review-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-gate.d.ts","sourceRoot":"","sources":["../src/review-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAA+B,KAAK,OAAO,EAAC,MAAM,cAAc,CAAC;AAGxE,OAAO,EAMN,KAAK,aAAa,EAClB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACN,kBAAkB,EAClB,gBAAgB,EAChB,KAAK,aAAa,EAClB,KAAK,aAAa,GAClB,MAAM,qBAAqB,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,+EAA+E;AAC/E,MAAM,WAAW,eAAe;IAC/B,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;;;OAQG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,sEAAsE;IACtE,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,+EAA+E;IAC/E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;AAE5E;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAsDtD;AAED,0EAA0E;AAC1E,MAAM,WAAW,wBAAwB;IACxC,sEAAsE;IACtE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,CAAC;CACpD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAChC,OAAO,GAAE,wBAA6B,GACpC,UAAU,CAgDZ;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAoC9D;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACxC,OAAO,GAAE,wBAA6B,GACpC,UAAU,CAoCZ;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAQhE;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAMrE"}

package/dist/review-gate.js

@@ -0,0 +1,261 @@
+import { NullHarness } from './harness.js';
+import { launchWithOptionalWatch } from './agent-launch.js';
+import { boundaryLine } from './watch-session.js';
+import { parseReviewVerdict, ReviewParseError, reviewDisciplinePrompt, verdictContractPrompt, } from './review-verdict.js';
+export { parseReviewVerdict, ReviewParseError, } from './review-verdict.js';
+/**
+ * Render the review-agent PROMPT: instruct a fresh-context agent to apply the
+ * **review discipline** (`work/protocol/REVIEW-PROTOCOL.md`) to the code
+ * changes on this work branch against the task that specified them, and to
+ * EMIT a single unified `ReviewVerdict` JSON object (so
+ * {@link parseReviewVerdict} can read it). The discipline body (the lenses +
+ * the destination check) lives in `REVIEW-PROTOCOL.md` — NOT inlined here —
+ * and the JSON-emitted-shape contract comes from
+ * {@link verdictContractPrompt}, the ONE shared helper called by all four
+ * review-prompt builders (task `review-protocol-doc-and-shared-machinery`).
+ *
+ * This builder owns ONLY the PER-BUILDER framing: who you are (Gate 2 — PR/code
+ * review), what you are reviewing (code-vs-its-task, the diff on this work
+ * branch), and which optional verdict channels to fill (the `review` prose for
+ * the in-core PR-comment poster; an in-scope DECISION ratification hunt; a
+ * conceptual-coherence check). The shared discipline body and the verdict
+ * contract are NOT duplicated here.
+ */
+export function buildReviewPrompt(slug) {
+    return [
+        `You are a FRESH-CONTEXT reviewer (Gate 2 — PR/code review). Review the`,
+        `code changes on this work branch AGAINST the task that specified them`,
+        `(work/in-progress/${slug}.md or work/done/${slug}.md) and its source prd.`,
+        ``,
+        reviewDisciplinePrompt(),
+        ``,
+        `The acceptance gate (Gate 1 — build + tests + format) has ALREADY passed`,
+        `and is GREEN before you run (review runs only on a green gate), so ASSUME`,
+        `it is green and do NOT re-run build/tests/format — that is settled. You may`,
+        `still READ and reason about the tests for coverage/judgement; just do not`,
+        `re-execute the suite. Spend your budget on JUDGEMENT.`,
+        `Do NOT edit any files, run no git — you EMIT a verdict only.`,
+        ``,
+        `ALSO HUNT for IN-SCOPE DECISIONS THE TASK DID NOT SPECIFY — a non-obvious`,
+        `design choice the agent made on its own while building: a CROSS-TASK`,
+        `INTERACTION (a choice affecting another command/flag/task's behaviour), a new`,
+        `ERROR/REFUSAL, or a user-visible DEFAULT. The agent SHOULD have recorded these`,
+        `in a "## Decisions" block in its PR description — START from that block (ratify`,
+        `each entry) AND hunt for any it MISSED. Flag EACH such decision as a finding`,
+        `for the human to RATIFY — "non-blocking" by DEFAULT (the build proceeds; the`,
+        `human ratifies or reverses), escalating to "blocking" ONLY if the decision looks`,
+        `WRONG or is genuinely load-bearing-and-hard-to-reverse. An un-recorded in-scope`,
+        `decision is NOT itself a block — it is a ratification finding.`,
+        ``,
+        `ALSO CHECK CONCEPTUAL COHERENCE — does this diff fit the system's existing`,
+        `LANGUAGE? For each concept / flag / config key / status / verb it introduces or`,
+        `touches: (a) is the term used CONSISTENTLY with how it is already defined`,
+        `elsewhere (CONTEXT.md glossary + the ADRs + the code), not silently re-meaning`,
+        `an existing word or meaning two things in two places? (b) is the concept at the`,
+        `RIGHT LAYER (e.g. a policy gate on the autonomous-SELECTION step vs the explicit`,
+        `VERB someone typed)? (c) does it DUPLICATE/overlap an existing concept it should`,
+        `reuse or rename instead of forking? A mechanism that is correct in isolation but`,
+        `INCOHERENT against the system's language is a defect — BLOCK if it re-means or`,
+        `forks a load-bearing concept or sits at the wrong layer; otherwise flag it as a`,
+        `coherence finding.`,
+        ``,
+        verdictContractPrompt(),
+        ``,
+        `Fill the "review" field: a human-readable REVIEW that gets posted as a`,
+        `comment on the PR — write it FOR a human landing there, NOT as scratch`,
+        `thinking. LEAD with the verdict ("Approved" or "Blocked") and then give the`,
+        `lenses' reasoning and the destination check ("merged as written, do we reach`,
+        `the task/prd goal?"). Write it deliberately; do NOT narrate your process`,
+        `("Let me check…"). Keep it TIGHT: aim for a few short sentences and DO NOT`,
+        `exceed ~1500 characters — a long, multi-paragraph field is exactly what`,
+        `corrupts the JSON on large diffs; say less, not more. It is plain text inside`,
+        `the JSON string (escape any newline as \\n; better, keep it to ONE line). Do`,
+        `NOT fill "edits"/"edit"/`,
+        `"questions"/"uncertainTasks"/"decompositionUnclear" — those channels are`,
+        `for other review callers (the tasker loop / the lone-task review), not this`,
+        `code-review gate.`,
+    ].join('\n');
+}
+/**
+ * The PRODUCTION review gate: launch the `review` SKILL as a fresh-context agent
+ * through the EXISTING harness seam, routing the `reviewModel` override via
+ * `LaunchInput.model` (the §13 model-routing intent — NOT a new mechanism), then
+ * parse the emitted `{verdict, findings}`.
+ *
+ * It is a SEPARATE harness launch (fresh context = not the builder's session) in
+ * the same checkout `cwd` (the prepared, gated work branch). The launch is fed
+ * {@link buildReviewPrompt}; the model flows through `LaunchInput.model`, which
+ * each adapter injects natively (pi: `--model`; null/shell: the `{model}`
+ * placeholder via {@link substituteModel}). auth/keys stay the harness's job.
+ */
+export function harnessReviewGate(options = {}) {
+    const harness = options.harness ?? new NullHarness();
+    const readOutput = options.readOutput ?? ((output) => output ?? '');
+    return async (input) => {
+        // When watching, print the build→review BOUNDARY banner so the human knows
+        // the build stream ended and the review stream is beginning (reuses the watch
+        // formatting; task `watch-review-session`). A pure observability line.
+        if (input.watch === true) {
+            const sink = input.watchSink ??
+                ((line) => process.stderr.write(`${line}\n`));
+            sink(boundaryLine(`review gate — reviewing ${input.slug}…`, input.color ?? false));
+        }
+        // The SAME shared launch helper the BUILD launch uses (task
+        // `watch-review-session`) — NOT a copy of the watch block. When `watch` is on
+        // (pi harness), it tails the review session `.jsonl` live; OFF, it does a
+        // plain sync `launch`, byte-identical to before. The review uses a DISTINCT
+        // session id (`<slug>-review`) so it never collides with the build session.
+        const launched = await launchWithOptionalWatch({
+            harness,
+            dir: input.cwd,
+            slug: input.slug,
+            command: options.agentCmd ?? '',
+            prompt: buildReviewPrompt(input.slug),
+            // The reviewModel override rides the EXISTING model-routing seam.
+            model: input.reviewModel,
+            sessionId: `${input.slug}-review`,
+            sessionsDir: input.sessionsDir,
+            watch: input.watch,
+            watchSink: input.watchSink,
+            color: input.color,
+            env: input.env,
+        });
+        if (!launched.ok) {
+            throw new ReviewParseError(`review agent launch failed${launched.detail ? `: ${launched.detail}` : ''}`);
+        }
+        // Read the verdict from the agent's ANSWER channel (`output`), NOT `detail`
+        // (which is empty on success). An empty/absent output → parseReviewVerdict
+        // throws ReviewParseError → needs-attention (never a silent approve).
+        return parseReviewVerdict(readOutput(launched.output));
+    };
+}
+/**
+ * Render the TASK-SET acceptance-gate PROMPT — the task-path mirror of
+ * {@link buildReviewPrompt} (task `slice-acceptance-gate`). Instead of
+ * reviewing a code diff against ONE task, this instructs a FRESH-CONTEXT
+ * agent to review the WHOLE candidate SET of tasks produced for prd `slug`,
+ * using the **review discipline**'s SET-OF-TASKS lens (coherence / dependency
+ * graph / gaps + overlap / "if every task is built exactly as written, do we
+ * reach the system the prd describes, and is each task
+ * correct-if-implemented?"). It emits the SAME unified `ReviewVerdict` shape
+ * so {@link parseReviewVerdict} reads it identically.
+ *
+ * This is a TERMINAL, ONE-SHOT accept/reject gate (it runs BEFORE the task
+ * set integrates) — NOT the tasker IMPROVER loop (`tasker-review-loop.ts`),
+ * which EDITS tasks between passes. This prompt explicitly forbids editing.
+ *
+ * Per-builder framing only — the discipline body lives in
+ * `work/protocol/REVIEW-PROTOCOL.md`; the JSON shape comes from
+ * {@link verdictContractPrompt}.
+ */
+export function buildTaskAcceptancePrompt(slug) {
+    return [
+        `You are a FRESH-CONTEXT reviewer (the task-SET ACCEPTANCE GATE). Review`,
+        `the candidate tasks this tasking run produced for the prd "${slug}" — the`,
+        `new/changed candidate task files on this work branch — AGAINST their source`,
+        `prd (work/prds/ready/${slug}.md — the held prd stays in prds/ready/ while it is being`,
+        `tasked).`,
+        ``,
+        reviewDisciplinePrompt(),
+        ``,
+        `Review the WHOLE SET as a SET, not each task in isolation. The set-level`,
+        `framings the review discipline names:`,
+        `  - COHERENCE — do the tasks speak the prd's (and the system's) language`,
+        `    consistently; no task re-means or forks a concept another task/the prd`,
+        `    already owns?`,
+        `  - DEPENDENCY GRAPH — is the \`blockedBy\`/ordering graph sound (acyclic, the`,
+        `    keystone first, each task's stated blockers really land its premise)?`,
+        `  - GAPS + OVERLAP — does the set COVER the prd with no missing piece, and`,
+        `    without two tasks doing the same work or fighting over the same seam?`,
+        `  - CORRECT-IF-IMPLEMENTED — if EVERY task is built EXACTLY as written, do we`,
+        `    reach the system the prd describes, and is each task individually`,
+        `    correct-if-implemented (no task that compiles but builds the wrong thing)?`,
+        ``,
+        `This is a TERMINAL one-shot accept/reject gate: do NOT edit any task, do NOT`,
+        `run git — you EMIT a verdict only (the tasker improver loop, a SEPARATE`,
+        `concept, is what edits tasks; this gate does not).`,
+        ``,
+        verdictContractPrompt(),
+        ``,
+        `Fill the "review" field: a human-readable REVIEW of the SET — write it FOR a`,
+        `human deciding whether to land these tasks. LEAD with the verdict`,
+        `("Approved" or "Blocked") and then give the lenses' reasoning and the`,
+        `destination check. Do NOT fill the improver-loop channels ("edits",`,
+        `"uncertainTasks", "decompositionUnclear") — this is a terminal gate, not the`,
+        `loop.`,
+    ].join('\n');
+}
+/**
+ * The PRODUCTION task-SET acceptance gate (task `slice-acceptance-gate`): the
+ * task-path mirror of {@link harnessReviewGate}. It launches the `review` SKILL
+ * as a fresh-context agent through the SAME harness seam, routing the
+ * `reviewModel` override via `LaunchInput.model`, then parses the emitted
+ * `{verdict, findings}` — IDENTICAL machinery to the build gate, differing ONLY
+ * in the PROMPT ({@link buildTaskAcceptancePrompt}, a task-SET review) and in
+ * being driven ONE-SHOT by the caller (the tasking path passes
+ * `reviewMaxRounds: 1`).
+ *
+ * Reuses the `ReviewGate` seam type verbatim so `performIntegration`'s review
+ * block runs it with no shape change. The review uses a DISTINCT session id
+ * (`<slug>-task-acceptance`) so it never collides with the build review session
+ * OR the tasker improver loop's review session. NAME: `harnessTaskAcceptanceGate`
+ * (the ACCEPTANCE gate), DISTINCT from `tasker-review-loop.ts`'s
+ * `harnessTaskReviewGate` (the IMPROVER loop seam, which EDITS tasks) — the two
+ * are non-overlapping concepts (gate = terminal pass/fail; loop = review→edit).
+ */
+export function harnessTaskAcceptanceGate(options = {}) {
+    const harness = options.harness ?? new NullHarness();
+    const readOutput = options.readOutput ?? ((output) => output ?? '');
+    return async (input) => {
+        if (input.watch === true) {
+            const sink = input.watchSink ??
+                ((line) => process.stderr.write(`${line}\n`));
+            sink(boundaryLine(`task acceptance gate — reviewing ${input.slug}…`, input.color ?? false));
+        }
+        const launched = await launchWithOptionalWatch({
+            harness,
+            dir: input.cwd,
+            slug: input.slug,
+            command: options.agentCmd ?? '',
+            prompt: buildTaskAcceptancePrompt(input.slug),
+            model: input.reviewModel,
+            sessionId: `${input.slug}-task-acceptance`,
+            sessionsDir: input.sessionsDir,
+            watch: input.watch,
+            watchSink: input.watchSink,
+            color: input.color,
+            env: input.env,
+        });
+        if (!launched.ok) {
+            throw new ReviewParseError(`task acceptance gate launch failed${launched.detail ? `: ${launched.detail}` : ''}`);
+        }
+        return parseReviewVerdict(readOutput(launched.output));
+    };
+}
+/**
+ * Format a review's BLOCKING findings into a needs-attention reason string —
+ * recorded in the item body when the gate routes a `block` (the SAME body-prose
+ * mechanism the red gate's reason uses; WORK-CONTRACT rule 3). Non-blocking
+ * findings are omitted from the reason (they do not block). On exhaustion of
+ * `reviewMaxRounds`, {@link reviewRoundsExhaustedReason} is used instead.
+ */
+export function formatBlockReason(verdict) {
+    const blocking = verdict.findings.filter((f) => f.severity === 'blocking');
+    const lines = (blocking.length > 0 ? blocking : verdict.findings).map((f) => {
+        const ctx = f.context ? ` (${f.context})` : '';
+        return `- ${f.question}${ctx}`;
+    });
+    const head = 'PR/code review (Gate 2) blocked this work:';
+    return lines.length > 0 ? `${head}\n${lines.join('\n')}` : head;
+}
+/**
+ * The needs-attention reason when Gate 2 does not reach a UNANIMOUS approve —
+ * either a round returned a (terminal) block, or not all `reviewMaxRounds` rounds
+ * corroborated the approve.
+ */
+export function reviewRoundsExhaustedReason(maxRounds) {
+    return (`PR/code review (Gate 2) did not reach a unanimous approve across ` +
+        `reviewMaxRounds=${maxRounds} round(s) (a block is terminal and is never ` +
+        `re-rolled); forcing needs-attention (never silently merged or looped).`);
+}
+//# sourceMappingURL=review-gate.js.map

package/dist/review-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-gate.js","sourceRoot":"","sources":["../src/review-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,WAAW,EAAgC,MAAM,cAAc,CAAC;AACxE,OAAO,EAAC,uBAAuB,EAAC,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAC,YAAY,EAAC,MAAM,oBAAoB,CAAC;AAChD,OAAO,EACN,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,GAGrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACN,kBAAkB,EAClB,gBAAgB,GAGhB,MAAM,qBAAqB,CAAC;AAyE7B;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC7C,OAAO;QACN,wEAAwE;QACxE,uEAAuE;QACvE,qBAAqB,IAAI,oBAAoB,IAAI,0BAA0B;QAC3E,EAAE;QACF,sBAAsB,EAAE;QACxB,EAAE;QACF,0EAA0E;QAC1E,2EAA2E;QAC3E,6EAA6E;QAC7E,2EAA2E;QAC3E,uDAAuD;QACvD,8DAA8D;QAC9D,EAAE;QACF,2EAA2E;QAC3E,sEAAsE;QACtE,+EAA+E;QAC/E,gFAAgF;QAChF,iFAAiF;QACjF,8EAA8E;QAC9E,8EAA8E;QAC9E,kFAAkF;QAClF,iFAAiF;QACjF,gEAAgE;QAChE,EAAE;QACF,4EAA4E;QAC5E,iFAAiF;QACjF,2EAA2E;QAC3E,gFAAgF;QAChF,iFAAiF;QACjF,kFAAkF;QAClF,kFAAkF;QAClF,kFAAkF;QAClF,gFAAgF;QAChF,iFAAiF;QACjF,oBAAoB;QACpB,EAAE;QACF,qBAAqB,EAAE;QACvB,EAAE;QACF,wEAAwE;QACxE,wEAAwE;QACxE,6EAA6E;QAC7E,8EAA8E;QAC9E,0EAA0E;QAC1E,4EAA4E;QAC5E,yEAAyE;QACzE,+EAA+E;QAC/E,8EAA8E;QAC9E,0BAA0B;QAC1B,0EAA0E;QAC1E,6EAA6E;QAC7E,mBAAmB;KACnB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACd,CAAC;AAmBD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAChC,UAAoC,EAAE;IAEtC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,WAAW,EAAE,CAAC;IACrD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACpE,OAAO,KAAK,EAAE,KAAsB,EAA0B,EAAE;QAC/D,2EAA2E;QAC3E,8EAA8E;QAC9E,uEAAuE;QACvE,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,IAAI,GACT,KAAK,CAAC,SAAS;gBACf,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;YACvD,IAAI,CACH,YAAY,CACX,2BAA2B,KAAK,CAAC,IAAI,GAAG,EACxC,KAAK,CAAC,KAAK,IAAI,KAAK,CACpB,CACD,CAAC;QACH,CAAC;QACD,4DAA4D;QAC5D,8EAA8E;QAC9E,0EAA0E;QAC1E,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC;YAC9C,OAAO;YACP,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;YAC/B,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC;YACrC,kEAAkE;YAClE,KAAK,EAAE,KAAK,CAAC,WAAW;YACxB,SAAS,EAAE,GAAG,KAAK,CAAC,IAAI,SAAS;YACjC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,EAAE,KAAK,CAAC,GAAG;SACd,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,gBAAgB,CACzB,6BAA6B,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5E,CAAC;QACH,CAAC;QACD,4EAA4E;QAC5E,2EAA2E;QAC3E,sEAAsE;QACtE,OAAO,kBAAkB,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACrD,OAAO;QACN,yEAAyE;QACzE,8DAA8D,IAAI,SAAS;QAC3E,6EAA6E;QAC7E,wBAAwB,IAAI,2DAA2D;QACvF,UAAU;QACV,EAAE;QACF,sBAAsB,EAAE;QACxB,EAAE;QACF,0EAA0E;QAC1E,uCAAuC;QACvC,0EAA0E;QAC1E,4EAA4E;QAC5E,mBAAmB;QACnB,gFAAgF;QAChF,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,+EAA+E;QAC/E,uEAAuE;QACvE,gFAAgF;QAChF,EAAE;QACF,8EAA8E;QAC9E,yEAAyE;QACzE,oDAAoD;QACpD,EAAE;QACF,qBAAqB,EAAE;QACvB,EAAE;QACF,8EAA8E;QAC9E,mEAAmE;QACnE,uEAAuE;QACvE,qEAAqE;QACrE,8EAA8E;QAC9E,OAAO;KACP,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,yBAAyB,CACxC,UAAoC,EAAE;IAEtC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,WAAW,EAAE,CAAC;IACrD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACpE,OAAO,KAAK,EAAE,KAAsB,EAA0B,EAAE;QAC/D,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,IAAI,GACT,KAAK,CAAC,SAAS;gBACf,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;YACvD,IAAI,CACH,YAAY,CACX,oCAAoC,KAAK,CAAC,IAAI,GAAG,EACjD,KAAK,CAAC,KAAK,IAAI,KAAK,CACpB,CACD,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC;YAC9C,OAAO;YACP,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;YAC/B,MAAM,EAAE,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC;YAC7C,KAAK,EAAE,KAAK,CAAC,WAAW;YACxB,SAAS,EAAE,GAAG,KAAK,CAAC,IAAI,kBAAkB;YAC1C,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,EAAE,KAAK,CAAC,GAAG;SACd,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,gBAAgB,CACzB,qCAAqC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACpF,CAAC;QACH,CAAC;QACD,OAAO,kBAAkB,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAsB;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3E,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,4CAA4C,CAAC;IAC1D,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,SAAiB;IAC5D,OAAO,CACN,mEAAmE;QACnE,mBAAmB,SAAS,8CAA8C;QAC1E,wEAAwE,CACxE,CAAC;AACH,CAAC"}