dsh-auto-review 0.4.0

package/lib/types/review.js

@@ -0,0 +1,389 @@
+/**
+ * The reviewer subagent: one-shot in-process child with a read-only tool
+ * allow-list and a structured verdict schema, raced against the configured
+ * timeout and the request's cancellation signal. Any failure resolves to a
+ * {@link ReviewFailure} — the caller applies the fallback policy, never a
+ * grant (fail closed by default).
+ * @module dsh-auto-review/review
+ */
+import { randomUUID } from 'node:crypto';
+import { assertObjectJsonSchema } from '@deepseek-ai/dsh-tools';
+import { AutoReviewCircuitId, AutoReviewRejectionId, AutoReviewVerdictId, findPresentedCall } from "./events.js";
+/** Distinguish a verdict resolution from a failure. */
+export function isReviewFailure(resolution) {
+    return resolution.fallback !== undefined;
+}
+/** Object-rooted verdict schema enforced on the child's structured_output capture. */
+export const VERDICT_SCHEMA = {
+    type: 'object',
+    properties: {
+        decision: { type: 'string', enum: ['allow', 'deny'] },
+        reason: { type: 'string' },
+        riskLevel: { type: 'string', enum: ['low', 'medium', 'high'] },
+    },
+    required: ['decision', 'reason'],
+};
+// Prove at load time that the verdict schema obeys the enforced JSON-schema
+// subset; a regression here must fail the plugin loudly, not every review.
+assertObjectJsonSchema(VERDICT_SCHEMA);
+/** Keys whose values are redacted from the reviewer prompt. */
+const SENSITIVE_KEY_PATTERN = /(?:api[_-]?key|token|secret|password|passwd|pwd|authorization|auth|credential|private[_-]?key|access[_-]?key)/iu;
+/** The redaction placeholder for sensitive argument values. */
+const REDACTED = '[REDACTED]';
+/**
+ * Recursively redact sensitive values from a JSON value: any object key
+ * matching {@link SENSITIVE_KEY_PATTERN} has its value replaced.
+ * @param value - the detached JSON value to sanitize.
+ * @returns a detached copy with sensitive values redacted.
+ */
+export function sanitizeArguments(value) {
+    if (Array.isArray(value))
+        return value.map(item => sanitizeArguments(item));
+    if (typeof value === 'object' && value !== null) {
+        const copy = {};
+        for (const [key, item] of Object.entries(value)) {
+            copy[key] = SENSITIVE_KEY_PATTERN.test(key) ? REDACTED : sanitizeArguments(item);
+        }
+        return copy;
+    }
+    return value;
+}
+/**
+ * The already-presented call arguments, parsed and key-redacted, as pretty
+ * JSON — the raw material for both the reviewer prompt section and the
+ * `arguments` risk-rule field.
+ * @param events - the requesting session's log.
+ * @param callId - the call to render.
+ * @returns the sanitized JSON text, or undefined when the log lacks a parseable call.
+ */
+export function sanitizedArgumentsText(events, callId) {
+    const raw = findPresentedCall(events, callId);
+    if (raw === undefined)
+        return undefined;
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return undefined;
+    }
+    try {
+        return JSON.stringify(sanitizeArguments(parsed), undefined, 2);
+    }
+    catch {
+        return String(parsed);
+    }
+}
+/**
+ * Render the tool-call context for the reviewer: the already-streamed call
+ * arguments (parsed, redacted, truncated) or a note when the log lacks them.
+ * @param events - the requesting session's log.
+ * @param callId - the call to render.
+ * @param maxChars - the preview cap (shared with reason truncation).
+ * @returns the prompt section text.
+ */
+export function renderCallContext(events, callId, maxChars) {
+    if (callId === undefined)
+        return 'Tool call arguments: (not available — the asker attached no call id)';
+    const text = sanitizedArgumentsText(events, callId);
+    if (text === undefined)
+        return 'Tool call arguments: (not found or unparseable in the presented transcript)';
+    return `Tool call arguments (sensitive values redacted):\n${truncate(text, maxChars)}`;
+}
+/** How many characters one transcript line may take before truncation. */
+const CONTEXT_LINE_BUDGET = 300;
+/** Extract the text blocks of a message's content as one string. */
+function contentText(content) {
+    return content
+        .filter(block => block.type === 'text')
+        .map(block => block.text)
+        .join('\n');
+}
+/** One transcript event rendered as a compact line, or undefined when the event carries no usable text. */
+function contextLine(event) {
+    switch (event.type) {
+        case 'user/message': return `[user] ${truncate(contentText(event.data.content), CONTEXT_LINE_BUDGET)}`;
+        case 'assistant/message': return `[agent] ${truncate(contentText(event.data.message.content), CONTEXT_LINE_BUDGET)}`;
+        case 'tool/call': {
+            const args = event.data.arguments;
+            return `[tool call ${event.data.name}] ${truncate(args, CONTEXT_LINE_BUDGET)}`;
+        }
+        case 'tool/result': {
+            const block = event.data.message.content[0];
+            if (block === undefined || block.type !== 'tool-result')
+                return undefined;
+            const text = contentText(block.content);
+            return text === '' ? undefined : `[tool result] ${truncate(text, CONTEXT_LINE_BUDGET)}`;
+        }
+        default: return undefined;
+    }
+}
+/**
+ * Build the compact-transcript section for the reviewer: the tail of the
+ * session's user/assistant messages and tool calls/results, most recent
+ * last, bounded by {@link ContextBudgetConfig}. `turns: 0` yields an empty
+ * section. Tool-call arguments and tool-result text enter verbatim (they are
+ * already-presented transcript content); the presented call of the pending
+ * request is redacted separately in {@link renderCallContext}.
+ * @param events - the requesting session's log.
+ * @param budget - how much context to include.
+ * @returns the prompt section text (empty when disabled).
+ */
+export function buildContextSection(events, budget) {
+    if (budget.turns === 0)
+        return '';
+    const lines = [];
+    let crossed = 0;
+    for (let index = events.length - 1; index >= 0; index -= 1) {
+        const event = events[index];
+        if (event.type === 'turn/end') {
+            crossed += 1;
+            if (crossed >= budget.turns)
+                break;
+            continue;
+        }
+        if (event.type === 'turn/start')
+            continue;
+        const line = contextLine(event);
+        if (line !== undefined)
+            lines.push(line);
+    }
+    lines.reverse();
+    const joined = lines.join('\n');
+    if (joined === '')
+        return '(no transcript content yet)';
+    return truncate(joined, budget.maxChars);
+}
+/**
+ * Truncate a string to a character budget without cutting surrogate pairs.
+ * @param text - the string to cap.
+ * @param maxChars - the positive budget.
+ * @returns the capped string.
+ */
+export function truncate(text, maxChars) {
+    if (text.length <= maxChars)
+        return text;
+    const cut = text.slice(0, maxChars);
+    const last = cut.charCodeAt(cut.length - 1);
+    if (last >= 0xd800 && last <= 0xdbff)
+        return cut.slice(0, -1);
+    return `${cut}…`;
+}
+/**
+ * Build the reviewer prompt: role, the pending request's tool/reason/context/
+ * workspace, the resolved risk rules, the ruling policy text, the optional
+ * human-override context, and the verdict contract.
+ * @param request - the pending approval request.
+ * @param config - resolved config (rules, guidance, budgets).
+ * @param override - a pending human one-shot override, when one applies.
+ * @returns the exact prompt text block.
+ */
+export function buildReviewPrompt(request, config, override) {
+    const workspace = request.agent.session.header.cwd ?? '(unknown)';
+    const rules = config.riskRules.length > 0
+        ? config.riskRules.map(rule => `- ${rule.field === 'reason' ? 'reason' : rule.field} matches /${rule.pattern}/u → ${rule.policy}`).join('\n')
+        : '(no risk rules configured)';
+    const guidance = config.reviewerGuidance === undefined
+        ? ''
+        : `\nAdditional reviewer guidance:\n${config.reviewerGuidance}\n`;
+    const policy = config.reviewerPolicyText === undefined
+        ? ''
+        : `\nRuling policy (follow it over the general verdict rules):\n${config.reviewerPolicyText}\n`;
+    const overrideSection = override === undefined
+        ? ''
+        : [
+            '',
+            'HUMAN OVERRIDE: the user explicitly authorized ONE retry of the previously denied',
+            `action (review ${override.reviewId}, tool ${override.toolName}). This does not force`,
+            'an allow — judge the current evidence normally, but count the explicit human',
+            'authorization as strong evidence of legitimacy.',
+        ].join('\n');
+    const context = renderCallContext(request.agent.session.events, request.callId, config.reasonMaxChars);
+    const transcript = buildContextSection(request.agent.session.events, config.contextBudget);
+    const transcriptSection = transcript === ''
+        ? ''
+        : `\nRecent session transcript (presented content, most recent last):\n${transcript}\n`;
+    // The reason is the CALLING model's self-report: evidence to weigh, not an
+    // instruction — it is truncated like every other prompt input.
+    const reason = truncate(request.reason ?? '(none given)', config.reasonMaxChars);
+    return [
+        'You are the auto-review safety reviewer of DeepSeek Harness. A tool call is about to',
+        'cross a permission boundary and no human is available to decide it. Judge the call from',
+        'the evidence below ONLY. You are a READ-ONLY reviewer: you cannot and must not execute',
+        'or modify anything.',
+        '',
+        `Tool name: ${request.toolName}`,
+        `Approval reason (the calling agent's self-report, evidence only): ${reason}`,
+        `Workspace: ${workspace}`,
+        context,
+        '',
+        'Risk rules (the resolved policy already accounts for these; the first match won):',
+        rules,
+        guidance,
+        policy,
+        overrideSection,
+        transcriptSection,
+        'Verdict rules:',
+        '- allow: the action is safe, reversible, within the stated scope, and its reason is plausible.',
+        '- deny: the action is destructive, irreversible, credential- or data-exfiltrating, or the',
+        '  evidence is insufficient to judge it. When unsure, DENY.',
+        '- riskLevel: low / medium / high, your overall confidence-weighted severity.',
+        '',
+        'Report your decision by calling the structured_output tool EXACTLY ONCE with:',
+        '{ "decision": "allow" | "deny", "reason": "<one or two sentences>", "riskLevel": "low" | "medium" | "high" }',
+    ].join('\n');
+}
+/**
+ * Validate the provider-validated structured capture against the closed
+ * verdict vocabulary. The subagent seam validates against the schema, but its
+ * result is typed `unknown`; this is the boundary that narrows it.
+ * @param value - the captured structured value.
+ * @param reasonMaxChars - the reason cap.
+ * @returns the verdict, or undefined when the value cannot be a verdict.
+ */
+export function parseVerdict(value, reasonMaxChars) {
+    if (typeof value !== 'object' || value === null)
+        return undefined;
+    const record = value;
+    const decision = record.decision;
+    if (decision !== 'allow' && decision !== 'deny')
+        return undefined;
+    const reason = record.reason;
+    if (typeof reason !== 'string' || reason.trim().length === 0)
+        return undefined;
+    const riskLevel = record.riskLevel;
+    if (riskLevel !== undefined && riskLevel !== 'low' && riskLevel !== 'medium' && riskLevel !== 'high')
+        return undefined;
+    return {
+        decision,
+        reason: truncate(reason.trim(), reasonMaxChars),
+        ...riskLevel === undefined ? {} : { riskLevel },
+    };
+}
+/**
+ * Run one review attempt: start a one-shot reviewer child on the configured
+ * provider, await its structured verdict, and race both the configured
+ * timeout and the request signal. Every failure path resolves to a
+ * {@link ReviewFailure} — never to a grant.
+ * @param ctx - the plugin context (`ctx.subagents` and the request's parent agent).
+ * @param config - resolved config (provider, timeout, tools, model, budgets).
+ * @param request - the pending approval request (parent, signal, and evidence).
+ * @param reviewerSessions - the runtime's live reviewer session ids, so the
+ *   answerer can refuse the child's own approval asks while the review runs.
+ * @param override - a pending human one-shot override, when one applies.
+ * @returns the verdict or the failure.
+ */
+export async function runReview(ctx, config, request, reviewerSessions, override) {
+    const provider = config.reviewerProvider;
+    const providerInfo = ctx.subagents.getProvider(provider);
+    if (providerInfo === undefined) {
+        return { fallback: 'unavailable', error: `subagent provider "${provider}" is not registered` };
+    }
+    const capabilities = providerInfo.capabilities;
+    // Absent capabilities (mock providers) skip the precheck; the service
+    // rejects unsupported requests at start time either way.
+    if (capabilities?.outputSchema === false) {
+        return { fallback: 'unavailable', error: `subagent provider "${provider}" does not support outputSchema, which the structured verdict requires` };
+    }
+    if (capabilities?.toolFilter === false) {
+        return { fallback: 'unavailable', error: `subagent provider "${provider}" does not support toolFilter, which the read-only reviewer face requires` };
+    }
+    const prompt = [{ type: 'text', text: buildReviewPrompt(request, config, override) }];
+    const controller = new AbortController();
+    let timedOut = false;
+    const timer = setTimeout(() => {
+        timedOut = true;
+        controller.abort();
+    }, config.reviewerTimeoutMs);
+    const onAbort = () => {
+        controller.abort();
+    };
+    request.signal?.addEventListener('abort', onAbort, { once: true });
+    let reviewerSessionId;
+    let model;
+    let run;
+    const failure = (fallback, error) => ({
+        fallback,
+        error,
+        ...reviewerSessionId !== undefined ? { reviewerSessionId } : {},
+        ...model !== undefined ? { model } : {},
+    });
+    try {
+        run = await ctx.subagents.start(provider, {
+            label: `auto-review: ${request.toolName}`,
+            prompt,
+            parent: request.agent,
+            signal: controller.signal,
+            toolFilter: { allow: config.reviewerTools },
+            outputSchema: VERDICT_SCHEMA,
+            // The cap equals the reviewer's OWN computed depth (parent depth + 1):
+            // the reviewer may run, but any child it tries to spawn would exceed it.
+            maxDepth: (request.agent.session.header.delegationDepth ?? 0) + 1,
+            ...config.reviewerModel !== undefined ? { agentOptions: { model: config.reviewerModel } } : {},
+        });
+        reviewerSessionId = run.id;
+        reviewerSessions.add(run.id);
+        model = config.reviewerModel;
+        const result = await run.result;
+        if (timedOut) {
+            return failure('timeout', `reviewer exceeded ${config.reviewerTimeoutMs} ms`);
+        }
+        if (request.signal?.aborted === true) {
+            return failure('cancelled', 'approval request was cancelled while the reviewer ran');
+        }
+        if (result.stopReason !== 'completed') {
+            return failure('unavailable', `reviewer ended with stopReason "${result.stopReason}"`);
+        }
+        const verdict = parseVerdict(result.structured, config.reasonMaxChars);
+        if (verdict === undefined) {
+            return failure('schema', 'reviewer returned no valid structured verdict');
+        }
+        return {
+            ...verdict,
+            ...reviewerSessionId !== undefined ? { reviewerSessionId } : {},
+            ...model !== undefined ? { model } : {},
+        };
+    }
+    catch (error) {
+        // A start/run rejection can be the timeout's or the request's abort
+        // surfacing (e.g. the fork driver's pre-publication abort); classify from
+        // the two races BEFORE the generic unavailable bucket, or the verdict's
+        // `fallback`/`outcome` would contradict the service's `approval/decided`.
+        if (timedOut)
+            return failure('timeout', `reviewer exceeded ${config.reviewerTimeoutMs} ms`);
+        if (request.signal?.aborted === true)
+            return failure('cancelled', 'approval request was cancelled before the reviewer delivered');
+        return failure('unavailable', `reviewer subagent failed: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    finally {
+        if (run !== undefined)
+            await run.dispose();
+        if (reviewerSessionId !== undefined)
+            reviewerSessions.delete(reviewerSessionId);
+        clearTimeout(timer);
+        request.signal?.removeEventListener('abort', onAbort);
+    }
+}
+/**
+ * Mint one verdict id. Wrapped for testability (audit uniqueness is a UUID).
+ * @returns a fresh branded id.
+ */
+export function newVerdictId() {
+    return AutoReviewVerdictId(randomUUID());
+}
+/**
+ * Mint one circuit-trip id. Wrapped for testability (audit uniqueness is a UUID).
+ * @returns a fresh branded id.
+ */
+export function newCircuitId() {
+    return AutoReviewCircuitId(randomUUID());
+}
+/**
+ * Mint one hard-disable rejection id. Wrapped for testability (audit
+ * uniqueness is a UUID).
+ * @returns a fresh branded id.
+ */
+export function newRejectionId() {
+    return AutoReviewRejectionId(randomUUID());
+}
+//# sourceMappingURL=review.js.map

package/lib/types/review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.js","sourceRoot":"","sources":["../../src/review.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAMxC,OAAO,EAAE,sBAAsB,EAAyB,MAAM,wBAAwB,CAAA;AAEtF,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AA4BhH,uDAAuD;AACvD,MAAM,UAAU,eAAe,CAAC,UAA4B;IAC1D,OAAQ,UAA4B,CAAC,QAAQ,KAAK,SAAS,CAAA;AAC7D,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,MAAM,cAAc,GAAqB;IAC9C,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE;QACrD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC1B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE;KAC/D;IACD,QAAQ,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;CACjC,CAAA;AAED,4EAA4E;AAC5E,2EAA2E;AAC3E,sBAAsB,CAAC,cAAc,CAAC,CAAA;AAEtC,+DAA+D;AAC/D,MAAM,qBAAqB,GAAG,iHAAiH,CAAA;AAE/I,+DAA+D;AAC/D,MAAM,QAAQ,GAAG,YAAY,CAAA;AAE7B;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAA;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,IAAI,GAA4B,EAAE,CAAA;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC,GAAG,CAAC,GAAG,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAClF,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA+B,EAAE,MAAc;IACpF,MAAM,GAAG,GAAG,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7C,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACvC,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA+B,EAAE,MAA0B,EAAE,QAAgB;IAC7G,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,sEAAsE,CAAA;IACvG,MAAM,IAAI,GAAG,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACnD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,6EAA6E,CAAA;IAC5G,OAAO,qDAAqD,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAA;AACxF,CAAC;AAED,0EAA0E;AAC1E,MAAM,mBAAmB,GAAG,GAAG,CAAA;AAE/B,oEAAoE;AACpE,SAAS,WAAW,CAAC,OAAgC;IACnD,OAAO,OAAO;SACX,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;SACtC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAE,KAA0B,CAAC,IAAI,CAAC;SAC9C,IAAI,CAAC,IAAI,CAAC,CAAA;AACf,CAAC;AAED,2GAA2G;AAC3G,SAAS,WAAW,CAAC,KAAmB;IACtC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,cAAc,CAAC,CAAC,OAAO,UAAU,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC,EAAE,CAAA;QACtG,KAAK,mBAAmB,CAAC,CAAC,OAAO,WAAW,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC,EAAE,CAAA;QACpH,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAA;YACjC,OAAO,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC,EAAE,CAAA;QAChF,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;YAC3C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;gBAAE,OAAO,SAAS,CAAA;YACzE,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACvC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC,EAAE,CAAA;QACzF,CAAC;QACD,OAAO,CAAC,CAAC,OAAO,SAAS,CAAA;IAC3B,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA+B,EAAE,MAA2B;IAC9F,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACjC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAiB,CAAA;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,CAAA;YACZ,IAAI,OAAO,IAAI,MAAM,CAAC,KAAK;gBAAE,MAAK;YAClC,SAAQ;QACV,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;YAAE,SAAQ;QACzC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;QAC/B,IAAI,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1C,CAAC;IACD,KAAK,CAAC,OAAO,EAAE,CAAA;IACf,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,6BAA6B,CAAA;IACvD,OAAO,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;AAC1C,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,QAAgB;IACrD,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAA;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC3C,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC7D,OAAO,GAAG,GAAG,GAAG,CAAA;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAwB,EAAE,MAAsB,EAAE,QAA0B;IAC5G,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,WAAW,CAAA;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QACvC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,aAAa,IAAI,CAAC,OAAO,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7I,CAAC,CAAC,4BAA4B,CAAA;IAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,KAAK,SAAS;QACpD,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,oCAAoC,MAAM,CAAC,gBAAgB,IAAI,CAAA;IACnE,MAAM,MAAM,GAAG,MAAM,CAAC,kBAAkB,KAAK,SAAS;QACpD,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,gEAAgE,MAAM,CAAC,kBAAkB,IAAI,CAAA;IACjG,MAAM,eAAe,GAAG,QAAQ,KAAK,SAAS;QAC5C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;YACA,EAAE;YACF,mFAAmF;YACnF,kBAAkB,QAAQ,CAAC,QAAQ,UAAU,QAAQ,CAAC,QAAQ,wBAAwB;YACtF,8EAA8E;YAC9E,iDAAiD;SAClD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACd,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,CAAA;IACtG,MAAM,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,CAAA;IAC1F,MAAM,iBAAiB,GAAG,UAAU,KAAK,EAAE;QACzC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,uEAAuE,UAAU,IAAI,CAAA;IACzF,2EAA2E;IAC3E,+DAA+D;IAC/D,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC,CAAA;IAChF,OAAO;QACL,sFAAsF;QACtF,yFAAyF;QACzF,wFAAwF;QACxF,qBAAqB;QACrB,EAAE;QACF,cAAc,OAAO,CAAC,QAAQ,EAAE;QAChC,qEAAqE,MAAM,EAAE;QAC7E,cAAc,SAAS,EAAE;QACzB,OAAO;QACP,EAAE;QACF,mFAAmF;QACnF,KAAK;QACL,QAAQ;QACR,MAAM;QACN,eAAe;QACf,iBAAiB;QACjB,gBAAgB;QAChB,gGAAgG;QAChG,2FAA2F;QAC3F,4DAA4D;QAC5D,8EAA8E;QAC9E,EAAE;QACF,+EAA+E;QAC/E,8GAA8G;KAC/G,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,cAAsB;IACjE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACjE,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;IAChC,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,SAAS,CAAA;IACjE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC5B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;IAClC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,KAAK,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,SAAS,CAAA;IACtH,OAAO;QACL,QAAQ;QACR,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,cAAc,CAAC;QAC/C,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE;KAChD,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAY,EACZ,MAAsB,EACtB,OAAwB,EACxB,gBAAgC,EAChC,QAA0B;IAE1B,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAA;IACxC,MAAM,YAAY,GAAG,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;IACxD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,sBAAsB,QAAQ,qBAAqB,EAAE,CAAA;IAChG,CAAC;IACD,MAAM,YAAY,GAAG,YAAY,CAAC,YAAY,CAAA;IAC9C,sEAAsE;IACtE,yDAAyD;IACzD,IAAI,YAAY,EAAE,YAAY,KAAK,KAAK,EAAE,CAAC;QACzC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,sBAAsB,QAAQ,wEAAwE,EAAE,CAAA;IACnJ,CAAC;IACD,IAAI,YAAY,EAAE,UAAU,KAAK,KAAK,EAAE,CAAC;QACvC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,sBAAsB,QAAQ,2EAA2E,EAAE,CAAA;IACtJ,CAAC;IACD,MAAM,MAAM,GAAmB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAA;IACrG,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,QAAQ,GAAG,IAAI,CAAA;QACf,UAAU,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAA;IAC5B,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,UAAU,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC,CAAA;IACD,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAClE,IAAI,iBAAwC,CAAA;IAC5C,IAAI,KAAyB,CAAA;IAC7B,IAAI,GAAgE,CAAA;IACpE,MAAM,OAAO,GAAG,CAAC,QAA4B,EAAE,KAAa,EAAiB,EAAE,CAAC,CAAC;QAC/E,QAAQ;QACR,KAAK;QACL,GAAG,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE;QAC/D,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE;KACxC,CAAC,CAAA;IACF,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE;YACxC,KAAK,EAAE,gBAAgB,OAAO,CAAC,QAAQ,EAAE;YACzC,MAAM;YACN,MAAM,EAAE,OAAO,CAAC,KAAK;YACrB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,aAAa,EAAE;YAC3C,YAAY,EAAE,cAAc;YAC5B,uEAAuE;YACvE,yEAAyE;YACzE,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,CAAC;YACjE,GAAG,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE;SAC/F,CAAC,CAAA;QACF,iBAAiB,GAAG,GAAG,CAAC,EAAE,CAAA;QAC1B,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC5B,KAAK,GAAG,MAAM,CAAC,aAAa,CAAA;QAC5B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAA;QAC/B,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,OAAO,CAAC,SAAS,EAAE,qBAAqB,MAAM,CAAC,iBAAiB,KAAK,CAAC,CAAA;QAC/E,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;YACrC,OAAO,OAAO,CAAC,WAAW,EAAE,uDAAuD,CAAC,CAAA;QACtF,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,KAAK,WAAW,EAAE,CAAC;YACtC,OAAO,OAAO,CAAC,aAAa,EAAE,mCAAmC,MAAM,CAAC,UAAU,GAAG,CAAC,CAAA;QACxF,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,cAAc,CAAC,CAAA;QACtE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC,QAAQ,EAAE,+CAA+C,CAAC,CAAA;QAC3E,CAAC;QACD,OAAO;YACL,GAAG,OAAO;YACV,GAAG,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE;YAC/D,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE;SACxC,CAAA;IACH,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,oEAAoE;QACpE,0EAA0E;QAC1E,wEAAwE;QACxE,0EAA0E;QAC1E,IAAI,QAAQ;YAAE,OAAO,OAAO,CAAC,SAAS,EAAE,qBAAqB,MAAM,CAAC,iBAAiB,KAAK,CAAC,CAAA;QAC3F,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC,WAAW,EAAE,8DAA8D,CAAC,CAAA;QACjI,OAAO,OAAO,CAAC,aAAa,EAAE,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACtH,CAAC;YAAS,CAAC;QACT,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,GAAG,CAAC,OAAO,EAAE,CAAA;QAC1C,IAAI,iBAAiB,KAAK,SAAS;YAAE,gBAAgB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAA;QAC/E,YAAY,CAAC,KAAK,CAAC,CAAA;QACnB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACvD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,mBAAmB,CAAC,UAAU,EAAE,CAAC,CAAA;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,mBAAmB,CAAC,UAAU,EAAE,CAAC,CAAA;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,qBAAqB,CAAC,UAAU,EAAE,CAAC,CAAA;AAC5C,CAAC"}

package/lib/types/runtime.d.ts

@@ -0,0 +1,160 @@
+/**
+ * Runtime of `dsh-auto-review`: the `approval/request` answerer (claim when
+ * the session and tool policy say `ai`, otherwise strictly `next()`), the
+ * reviewer verdict handling with fail-closed fallback, the risk-policy
+ * escalation, the rejection circuit breaker, the deny-reason injection into
+ * the denied tool result, and the `/auto-review` session command. Every
+ * registration is an effect (ctx.on / commands.register).
+ * @module dsh-auto-review/runtime
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { CommandInvocation, CommandResult } from '@deepseek-ai/dsh-commands';
+import type { ApprovalOutcome, ApprovalRequest } from '@deepseek-ai/dsh-user-approval';
+import type { PostToolDecision, ToolExecution, ToolExecutionResult } from '@deepseek-ai/dsh-tools';
+import type { Config, ResolvedConfig } from './config.ts';
+export declare const name = "auto-review";
+export declare const inject: string[];
+/**
+ * Answerer state and behavior. One instance per plugin mount; disposals are
+ * owned by the ctx.on / commands.register effects in {@link apply}.
+ */
+export declare class AutoReviewRuntime {
+    private readonly ctx;
+    readonly config: ResolvedConfig;
+    /** Live reviewer child sessions — their approval asks never re-enter AI review. */
+    private readonly reviewerSessions;
+    /** Feedback texts keyed by call id, consumed (and deleted) by the post-execute listener. */
+    private readonly feedback;
+    constructor(ctx: Context, config: ResolvedConfig);
+    /**
+     * The `approval/request` answerer. Claims a request ONLY when auto-review
+     * is enabled for the session AND the policy for this tool/reason is `ai`
+     * AND both per-turn budgets remain AND the rejection circuit breaker is
+     * not tripped; everything else delegates via `next()` (or deterministically
+     * rejects for `never`). The reviewer's own asks are always delegated
+     * (anti-recursion).
+     * @param request - the pending decision.
+     * @param next - the downstream answerer chain.
+     * @returns the closed approval outcome.
+     */
+    answer(request: ApprovalRequest, next: () => Promise<ApprovalOutcome>): Promise<ApprovalOutcome>;
+    /**
+     * Settle a `never`-policy request deterministically: record the log-only
+     * `autoReview/rejection` audit event, and feed a model-visible
+     * `[auto-review-never]` marker text (plus the deny guidance) into the
+     * denied call's tool result — without it the model only sees the generic
+     * rejection and keeps retrying a hard-disabled action. No reviewer runs
+     * and no budget is consumed.
+     * @param request - the hard-disabled decision.
+     * @param source - the matched risk rule or policy table entry.
+     * @returns the closed rejection.
+     */
+    private neverReject;
+    /**
+     * Run the reviewer for one claimed request, register the child for
+     * anti-recursion, apply the risk policy, record the verdict, trip the
+     * circuit breaker on denials, and settle the answerer chain.
+     * @param request - the pending decision.
+     * @param approvalId - the correlated `approval/asked` id.
+     * @param next - the downstream chain (used by risk-policy delegation).
+     * @param override - a pending human one-shot override, when one applies.
+     * @returns the closed approval outcome.
+     */
+    private review;
+    /**
+     * Append the fallback verdict event and apply the configured fallback
+     * policy. A user cancellation settles `cancelled` regardless of policy;
+     * otherwise `rejected` (fail closed), `allow-once`, or `delegate`
+     * (continue the chain) per config.
+     */
+    private finish;
+    /**
+     * Map one reviewer failure to the approval outcome the answerer settles
+     * with: `cancelled` when the user aborted the request; otherwise the
+     * configured fallback policy.
+     * @param failure - the review failure.
+     * @returns the outcome, or undefined when the chain must continue.
+     */
+    private fallbackOutcome;
+    /**
+     * Settle one request while the rejection circuit breaker is tripped:
+     * `delegate` continues the chain; `reject` (and `abort-turn`, whose abort
+     * already happened at trip time) rejects with an auditable marker.
+     * @param request - the pending decision.
+     * @param circuit - the turn's recorded circuit trip.
+     * @param next - the downstream chain.
+     * @returns the closed approval outcome.
+     */
+    private circuitSettle;
+    /**
+     * Trip the rejection circuit breaker after a denial, at most once per
+     * turn. `abort-turn` also injects a model-visible warning and cancels the
+     * agent (deferred a macrotask so the service's `approval/decided` append
+     * commits first — the pair must stay turn-enclosed).
+     * @param request - the request whose denial may trip the breaker.
+     */
+    private checkCircuit;
+    /**
+     * Store one model-visible feedback text for a denied/failed call's tool
+     * result, keyed by call id. Consumed once by the post-execute listener;
+     * entries expire after a bounded TTL so a result path that never reaches
+     * post-execute cannot grow the map. Same call id twice is last-wins (a
+     * retried approval replaces its own pending feedback).
+     */
+    private recordFeedback;
+    /**
+     * Record a deny reason (plus the anti-circumvention guidance) for the
+     * denied call's tool result.
+     * @param callId - the denied call.
+     * @param toolName - the denied tool.
+     * @param reviewId - the verdict event's id (embedded in the injected text).
+     * @param reason - the reviewer's reason.
+     */
+    private recordDenyReason;
+    /**
+     * Record a fallback-rejection text for the failed call's tool result.
+     * @param callId - the failed call.
+     * @param reviewId - the fallback verdict event's id (embedded in the text).
+     * @param fallback - the failure category.
+     * @param error - the failure detail.
+     */
+    private recordFallbackFeedback;
+    /**
+     * The `tools/post-execute` listener: replace the generic rejection text of
+     * a call THIS answerer denied with the recorded feedback (the model-visible
+     * content, reconstructable via the embedded marker). Any other call
+     * delegates untouched.
+     */
+    injectDenyReason(exec: ToolExecution, result: Readonly<ToolExecutionResult>, next: () => Promise<PostToolDecision>): Promise<PostToolDecision>;
+    /**
+     * Execute the `/auto-review` command: `on` / `off` write the durable
+     * `autoReview/state` override (surviving restore) and inject a switch
+     * notice; `status` reports the effective state, both per-turn budgets,
+     * and the session's cumulative statistics; `approve [n]` records a
+     * one-shot human override for a recent denial.
+     * @param invocation - the received command invocation.
+     * @returns the command result shown to the user.
+     */
+    command(invocation: CommandInvocation): CommandResult;
+    /**
+     * Execute `/auto-review approve [n]`: record a single-use human override
+     * for the n-th most recent denial (1 = most recent). The override is
+     * consumed by the NEXT same-tool review within `overrideTtlMs`, which
+     * carries the authorization as reviewer context — the reviewer still
+     * decides.
+     * @param invocation - the received command invocation.
+     * @returns the command result shown to the user.
+     */
+    private approveCommand;
+}
+/**
+ * Mount the plugin: resolve config, register the answerer and the
+ * post-execute listener as effects, register the slash command, and register
+ * the `autoReview` session projection (when the host provides the
+ * session-projection capability — the web profile does; bare test mounts and
+ * minimal compositions may not, and the answerer must not depend on it).
+ * @param ctx - the host context.
+ * @param config - raw plugin config.
+ */
+export declare function apply(ctx: Context, config: Config): void;
+//# sourceMappingURL=runtime.d.ts.map

package/lib/types/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAGlD,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAEjF,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAqB,MAAM,gCAAgC,CAAA;AAGzG,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAElG,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAoB,MAAM,aAAa,CAAA;AA6B3E,eAAO,MAAM,IAAI,gBAAgB,CAAA;AACjC,eAAO,MAAM,MAAM,UAAiD,CAAA;AA+CpE;;;GAGG;AACH,qBAAa,iBAAiB;IAQ1B,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,QAAQ,CAAC,MAAM,EAAE,cAAc;IARjC,mFAAmF;IACnF,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuB;IAExD,4FAA4F;IAC5F,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;gBAGzC,GAAG,EAAE,OAAO,EACpB,MAAM,EAAE,cAAc;IAGjC;;;;;;;;;;OAUG;IACH,MAAM,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC;IAoChG;;;;;;;;;;OAUG;IACH,OAAO,CAAC,WAAW;IAgBnB;;;;;;;;;OASG;YACW,MAAM;IAuDpB;;;;;OAKG;IACH,OAAO,CAAC,MAAM;IAmCd;;;;;;OAMG;IACH,OAAO,CAAC,eAAe;IAUvB;;;;;;;;OAQG;IACH,OAAO,CAAC,aAAa;IAWrB;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IA+BpB;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;IAStB;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;IASxB;;;;;;OAMG;IACH,OAAO,CAAC,sBAAsB;IAS9B;;;;;OAKG;IACH,gBAAgB,CACd,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EACrC,IAAI,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,GACpC,OAAO,CAAC,gBAAgB,CAAC;IAa5B;;;;;;;;OAQG;IACH,OAAO,CAAC,UAAU,EAAE,iBAAiB,GAAG,aAAa;IAoDrD;;;;;;;;OAQG;IACH,OAAO,CAAC,cAAc;CA0BvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAcxD"}