nexus-agents 8.8.2 → 8.9.0

package/dist/chunk-2ONCHXIW.js

@@ -0,0 +1,7 @@
+// src/version.ts
+var VERSION = true ? "8.9.0" : "dev";
+
+export {
+  VERSION
+};
+//# sourceMappingURL=chunk-2ONCHXIW.js.map

package/dist/{chunk-BYUVLVN7.js → chunk-3W4L63ML.js}

@@ -112,4 +112,4 @@ export {
   SEVERITY_EMOJI,
   DECISION_EMOJI
 };
-//# sourceMappingURL=chunk-BYUVLVN7.js.map
+//# sourceMappingURL=chunk-3W4L63ML.js.map

package/dist/chunk-3W4L63ML.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/dogfooding/pr-review-types.ts","../src/security/sarif-types.ts"],"sourcesContent":["/**\n * nexus-agents/dogfooding - PR Review Types\n *\n * Type definitions for automated pull request review using\n * multi-agent collaboration.\n *\n * @module dogfooding/pr-review-types\n * (Source: Issue #161, Alignment Roadmap Phase 3)\n */\n\nimport { z } from 'zod';\nimport type { FullCapableProvider } from '../scm/types.js';\nimport { FINDING_SEVERITY_LEVELS } from '../security/sarif-types.js';\n\n/**\n * Pull request file change information.\n */\nexport interface PRFileChange {\n  /** File path */\n  readonly filename: string;\n  /** Change status */\n  readonly status: 'added' | 'removed' | 'modified' | 'renamed' | 'copied';\n  /** Number of additions */\n  readonly additions: number;\n  /** Number of deletions */\n  readonly deletions: number;\n  /** File patch/diff content */\n  readonly patch?: string | undefined;\n  /** Previous filename if renamed */\n  readonly previousFilename?: string | undefined;\n}\n\n/**\n * Pull request metadata from GitHub API.\n */\nexport interface PRMetadata {\n  /** PR number */\n  readonly number: number;\n  /** PR title */\n  readonly title: string;\n  /** PR description/body */\n  readonly body: string;\n  /** Author username */\n  readonly author: string;\n  /** GitHub API author_association (e.g., 'OWNER', 'COLLABORATOR', 'NONE') */\n  readonly authorAssociation: string;\n  /** Base branch */\n  readonly base: string;\n  /** Head branch */\n  readonly head: string;\n  /** Repository owner */\n  readonly owner: string;\n  /** Repository name */\n  readonly repo: string;\n  /** PR URL */\n  readonly url: string;\n  /** Whether PR is draft */\n  readonly draft: boolean;\n  /** PR labels */\n  readonly labels: readonly string[];\n  /** Changed files */\n  readonly files: readonly PRFileChange[];\n  /** Total additions */\n  readonly additions: number;\n  /** Total deletions */\n  readonly deletions: number;\n  /** Commit SHA of head */\n  readonly headSha: string;\n}\n\n/**\n * Review severity levels.\n */\nexport type ReviewSeverity = (typeof FINDING_SEVERITY_LEVELS)[number];\n\n/**\n * Review category for organizing findings.\n */\nexport type ReviewCategory =\n  'security' | 'performance' | 'code_quality' | 'testing' | 'documentation' | 'architecture';\n\n/**\n * Individual review finding from an expert.\n */\nexport interface ReviewFinding {\n  /** Unique finding ID */\n  readonly id: string;\n  /** Category of finding */\n  readonly category: ReviewCategory;\n  /** Severity level */\n  readonly severity: ReviewSeverity;\n  /** Finding title */\n  readonly title: string;\n  /** Detailed description */\n  readonly description: string;\n  /** Affected file (if applicable) */\n  readonly file?: string | undefined;\n  /** Line number (if applicable) */\n  readonly line?: number | undefined;\n  /** Suggested fix */\n  readonly suggestion?: string | undefined;\n  /** Expert that found this issue */\n  readonly expertId: string;\n  /** Confidence score (0-1) */\n  readonly confidence: number;\n}\n\n/**\n * Review result from a single expert agent.\n */\nexport interface ExpertReviewResult {\n  /** Expert ID */\n  readonly expertId: string;\n  /** Expert role/type */\n  readonly expertType: string;\n  /** Overall approval */\n  readonly approved: boolean;\n  /** Review summary */\n  readonly summary: string;\n  /** Individual findings */\n  readonly findings: readonly ReviewFinding[];\n  /** Execution time in ms */\n  readonly durationMs: number;\n  /** Confidence in review (0-1) */\n  readonly confidence: number;\n  /**\n   * The expert never produced a verdict — its adapter failed or returned\n   * nothing (#5012).\n   *\n   * `approved` cannot express this. A failed expert used to be recorded as\n   * `approved: true` (\"don't block on failures\"), so a review in which every\n   * expert failed resolved to `approve` at 100% consensus and was posted to\n   * GitHub as a real APPROVE. Absence of a review is not approval — a consumer\n   * must be able to tell them apart, and `confidence: 0` was already present\n   * and already ignored.\n   */\n  readonly errored?: boolean;\n}\n\n/**\n * Aggregated review decision after multi-agent debate.\n */\nexport type ReviewDecision = 'approve' | 'request_changes' | 'comment';\n\n/**\n * Complete PR review result from multi-agent collaboration.\n */\n/**\n * Trust + reputation assessment of the PR author, surfaced for observability\n * (#3123, epic #3118 Phase 5). Mirrors `issue_triage`'s assessment.\n */\nexport interface PRTrustAssessment {\n  /** Classifier trust tier (1-4) from author association. */\n  readonly trustTier: string;\n  /** Author's GitHub role. */\n  readonly userRole: string;\n  /**\n   * Whether the author is on the maintainer allowlist — present only when an\n   * allowlist was consulted (#4992). Absent means \"no allowlist was consulted\",\n   * which is the state on every live path today; it was previously recorded\n   * as `false` without being measured.\n   */\n  readonly isAllowlisted?: boolean;\n  /**\n   * Whether a durable `AuditLogger` was configured for this process (#4992\n   * review). `configured` — the trust event was handed to it; delivery to the\n   * hash chain is subject to the logger's own severity filter (trust events\n   * are `info`), queue and fail-loud flush, and is not confirmed per call.\n   * `none` — no audit logger (audit disabled, or the CLI path).\n   */\n  readonly auditSink: 'configured' | 'none';\n  /** Reputation score (0-100) when reputation is enabled. */\n  readonly reputationScore?: number | undefined;\n  /** Suspicious signals detected (e.g. `new_account`, `injection_patterns_detected`). */\n  readonly suspiciousSignals: readonly string[];\n  /** Whether the author is flagged as suspicious. */\n  readonly isSuspicious: boolean;\n  /** Tier the policy gate ACTUALLY enforced (== trustTier under audit/off). */\n  readonly enforcedTrustTier?: string | undefined;\n  /** Tier reputation reconciliation computed — what enforce mode WOULD gate on. */\n  readonly reputationReconciledTier?: string | undefined;\n  /** Reputation-gating rollout mode applied: `off` | `audit` | `enforce`. */\n  readonly gatingMode?: string | undefined;\n}\n\n/**\n * Result of fetching PR data plus best-effort author signals (#3133).\n */\nexport interface PRFetchData {\n  readonly metadata: PRMetadata;\n  readonly provider: FullCapableProvider;\n  /** Author's real account age in days, when the lookup succeeded (#3133). */\n  readonly accountAgeDays?: number;\n}\n\nexport interface PRReviewResult {\n  /** Pull request number */\n  readonly prNumber: number;\n  /** Repository full name (owner/repo) */\n  readonly repository: string;\n  /** Overall decision */\n  readonly decision: ReviewDecision;\n  /** Executive summary */\n  readonly summary: string;\n  /** Individual expert reviews */\n  readonly expertReviews: readonly ExpertReviewResult[];\n  /** Aggregated findings by severity */\n  readonly findingsBySeverity: Readonly<Record<ReviewSeverity, number>>;\n  /** Aggregated findings by category */\n  readonly findingsByCategory: Readonly<Record<ReviewCategory, number>>;\n  /** Total execution time in ms */\n  readonly totalDurationMs: number;\n  /** Number of experts that participated */\n  readonly expertCount: number;\n  /**\n   * Number of changed files the review covered (#4350).\n   *\n   * The demo command's progress line printed `expertReviews.length` under a\n   * \"files\" label, so a 7-file PR reported \"3 files\" — the expert count. The\n   * fetch was always correct; the result simply carried no file count to print.\n   */\n  readonly filesReviewed: number;\n  /** Consensus score (0-1) */\n  readonly consensusScore: number;\n  /** Debate rounds completed */\n  readonly debateRounds: number;\n  /** Timestamp of review */\n  readonly timestamp: string;\n  /** Author trust + reputation assessment (#3123). */\n  readonly trustAssessment: PRTrustAssessment;\n  /**\n   * What actually happened when the review was posted to GitHub (#4354).\n   *\n   * The review previously reported success whether or not the post landed: a\n   * `createReview` rejection was logged and discarded, and a Rule-of-Two block\n   * returned early, both leaving the CLI to print \"Review posted to GitHub.\"\n   * over a review that does not exist. Callers must consult this rather than\n   * inferring a successful post from a successful review.\n   */\n  readonly postOutcome: ReviewPostOutcome;\n}\n\n/**\n * A completed review before the posting step has run (#4354).\n *\n * Everything the reviewer aggregates is known before the post is attempted; the\n * outcome is stamped on afterwards. Keeping the two apart in the types is what\n * stops `postOutcome` from being defaulted to a hopeful value.\n */\nexport type PRReviewDraft = Omit<PRReviewResult, 'postOutcome'>;\n\n/** Terminal state of the GitHub review-posting step (#4354). */\nexport type ReviewPostOutcome =\n  /** The review was created on GitHub. */\n  | { readonly status: 'posted' }\n  /** Posting was deliberately not attempted (dry-run, or a policy gate blocked it). */\n  | { readonly status: 'skipped'; readonly reason: string }\n  /** Posting was attempted and GitHub rejected it. */\n  | { readonly status: 'failed'; readonly error: string };\n\n/**\n * Configuration for PR review.\n */\nexport interface PRReviewConfig {\n  /** Experts to include in review */\n  readonly experts: readonly ReviewCategory[];\n  /** Maximum debate rounds */\n  readonly maxDebateRounds: number;\n  /** Consensus threshold (0-1) */\n  readonly consensusThreshold: number;\n  /** Minimum severity to report */\n  readonly minSeverity: ReviewSeverity;\n  /** Whether to post inline comments */\n  readonly enableInlineComments: boolean;\n  /** Whether to run in dry-run mode (no GitHub posting) */\n  readonly dryRun: boolean;\n  /** Whether to assess author reputation and gate on it (#3123). */\n  readonly enableReputation: boolean;\n  /** GitHub token for API access */\n  readonly githubToken?: string | undefined;\n  /** Model adapter configuration */\n  readonly modelConfig?: {\n    readonly temperature?: number;\n    readonly maxTokens?: number;\n  };\n}\n\n/**\n * Default PR review configuration.\n */\nexport const DEFAULT_PR_REVIEW_CONFIG: PRReviewConfig = {\n  experts: ['security', 'code_quality', 'testing'],\n  maxDebateRounds: 3,\n  consensusThreshold: 0.7,\n  minSeverity: 'low',\n  enableInlineComments: true,\n  dryRun: false,\n  enableReputation: true,\n  modelConfig: {\n    temperature: 0.3,\n    maxTokens: 8192,\n  },\n};\n\n/**\n * Zod schema for PR review configuration.\n */\nexport const PRReviewConfigSchema = z.object({\n  experts: z\n    .array(\n      z.enum([\n        'security',\n        'performance',\n        'code_quality',\n        'testing',\n        'documentation',\n        'architecture',\n      ])\n    )\n    .default(['security', 'code_quality', 'testing']),\n  maxDebateRounds: z.number().int().min(1).max(10).default(3),\n  consensusThreshold: z.number().min(0).max(1).default(0.7),\n  minSeverity: z.enum(FINDING_SEVERITY_LEVELS).default('low'),\n  enableInlineComments: z.boolean().default(true),\n  dryRun: z.boolean().default(false),\n  enableReputation: z.boolean().default(true),\n  githubToken: z.string().optional(),\n  modelConfig: z\n    .object({\n      temperature: z.number().min(0).max(2).default(0.3),\n      maxTokens: z.number().int().positive().default(8192),\n    })\n    .optional(),\n});\n\n/**\n * Severity order for comparison. INVERTED vs sarif-types' SEVERITY_ORDER by\n * design (higher = more severe here, for descending sort); only the KEY SET is\n * shared. Derived from the canonical {@link FINDING_SEVERITY_LEVELS} so the keys\n * can't drift (#3570): critical→5 … info→1.\n */\nexport const SEVERITY_ORDER: Record<ReviewSeverity, number> = Object.fromEntries(\n  FINDING_SEVERITY_LEVELS.map((level, index) => [level, FINDING_SEVERITY_LEVELS.length - index])\n) as Record<ReviewSeverity, number>;\n\n/**\n * Category display names.\n */\nexport const CATEGORY_DISPLAY_NAMES: Record<ReviewCategory, string> = {\n  security: 'Security',\n  performance: 'Performance',\n  code_quality: 'Code Quality',\n  testing: 'Testing',\n  documentation: 'Documentation',\n  architecture: 'Architecture',\n};\n\n/**\n * Severity emoji for GitHub comments.\n */\nexport const SEVERITY_EMOJI: Record<ReviewSeverity, string> = {\n  critical: ':rotating_light:',\n  high: ':warning:',\n  medium: ':yellow_circle:',\n  low: ':large_blue_circle:',\n  info: ':information_source:',\n};\n\n/**\n * Decision emoji for GitHub comments.\n */\nexport const DECISION_EMOJI: Record<ReviewDecision, string> = {\n  approve: ':white_check_mark:',\n  request_changes: ':x:',\n  comment: ':speech_balloon:',\n};\n","/**\n * SARIF Types and Security Finding Schema (#1682)\n *\n * Types for parsing SARIF (Static Analysis Results Interchange Format)\n * output from security scanners (Semgrep, CodeQL, Bandit, ESLint).\n * Normalizes findings into a unified schema for MCP tool consumption.\n *\n * @module security/sarif-types\n * (Source: Issue #1681, #1682 — Proactive Defensive Security)\n */\n\nimport { z } from 'zod';\n\n// ============================================================================\n// Unified Security Finding Schema\n// ============================================================================\n\n/**\n * Canonical 5-value finding-severity vocabulary (CVSS-aligned), most→least\n * severe. THE single source of truth — every 5-value finding-severity zod enum\n * (severity-consensus, finding-triage, agents/output-schemas, expert-types\n * VulnerabilitySeverity) and both SEVERITY_ORDER maps derive from this (#3570).\n * Tuple order is authoritative: SEVERITY_ORDER below maps it to ascending ranks.\n */\nexport const FINDING_SEVERITY_LEVELS = ['critical', 'high', 'medium', 'low', 'info'] as const;\n\n/** Severity levels aligned with CVSS and common scanner output. */\nexport const FindingSeveritySchema = z.enum(FINDING_SEVERITY_LEVELS);\nexport type FindingSeverity = z.infer<typeof FindingSeveritySchema>;\n\n/** A normalized security finding from any SARIF-compatible scanner. */\nexport const SecurityFindingSchema = z.object({\n  /** Unique finding ID (scanner-specific rule ID). */\n  id: z.string().min(1),\n  /** Scanner that produced this finding. */\n  scanner: z.string().min(1),\n  /** Rule identifier (e.g., 'javascript.lang.security.detect-eval'). */\n  rule: z.string().min(1),\n  /** Normalized severity. */\n  severity: FindingSeveritySchema,\n  /** Human-readable description of the finding. */\n  message: z.string().min(1).max(2000),\n  /** File path where the finding was detected. */\n  file: z.string().min(1),\n  /** Start line number (1-based). */\n  startLine: z.number().int().min(1),\n  /** End line number (1-based, optional). */\n  endLine: z.number().int().min(1).optional(),\n  /** CWE identifiers (e.g., ['CWE-79', 'CWE-89']). */\n  cweIds: z.array(z.string()).default([]),\n  /** Scanner confidence (0-1). */\n  confidence: z.number().min(0).max(1).default(0.5),\n  /** Code snippet around the finding (optional). */\n  snippet: z.string().max(500).optional(),\n  /** Help URL for remediation guidance. */\n  helpUrl: z.string().optional(),\n});\n\nexport type SecurityFinding = z.infer<typeof SecurityFindingSchema>;\n\n/** Result of parsing a SARIF file. */\nexport interface SarifParseResult {\n  /** Scanner name extracted from SARIF. */\n  readonly scanner: string;\n  /** Total findings parsed. */\n  readonly totalFindings: number;\n  /** Findings sorted by severity (critical first). */\n  readonly findings: readonly SecurityFinding[];\n  /** Parsing errors (non-fatal). */\n  readonly errors: readonly string[];\n}\n\n// ============================================================================\n// SARIF Input Types (subset of the SARIF 2.1.0 spec we need)\n// ============================================================================\n\n/** SARIF result level → our severity mapping. */\nexport const SARIF_LEVEL_MAP: Readonly<Record<string, FindingSeverity>> = {\n  error: 'high',\n  warning: 'medium',\n  note: 'low',\n  none: 'info',\n};\n\n/**\n * Severity order for sorting (lower = more severe). Derived from the canonical\n * tuple so it can never drift from {@link FINDING_SEVERITY_LEVELS} (#3570).\n */\nexport const SEVERITY_ORDER: Readonly<Record<FindingSeverity, number>> = Object.fromEntries(\n  FINDING_SEVERITY_LEVELS.map((level, index) => [level, index])\n) as Record<FindingSeverity, number>;\n"],"mappings":";AAUA,SAAS,KAAAA,UAAS;;;ACClB,SAAS,SAAS;AAaX,IAAM,0BAA0B,CAAC,YAAY,QAAQ,UAAU,OAAO,MAAM;AAG5E,IAAM,wBAAwB,EAAE,KAAK,uBAAuB;AAI5D,IAAM,wBAAwB,EAAE,OAAO;AAAA;AAAA,EAE5C,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEpB,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEzB,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEtB,UAAU;AAAA;AAAA,EAEV,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI;AAAA;AAAA,EAEnC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEtB,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA;AAAA,EAEjC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA,EAE1C,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAEtC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG;AAAA;AAAA,EAEhD,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,EAEtC,SAAS,EAAE,OAAO,EAAE,SAAS;AAC/B,CAAC;AAqBM,IAAM,kBAA6D;AAAA,EACxE,OAAO;AAAA,EACP,SAAS;AAAA,EACT,MAAM;AAAA,EACN,MAAM;AACR;AAMO,IAAM,iBAA4D,OAAO;AAAA,EAC9E,wBAAwB,IAAI,CAAC,OAAO,UAAU,CAAC,OAAO,KAAK,CAAC;AAC9D;;;ADwMO,IAAM,2BAA2C;AAAA,EACtD,SAAS,CAAC,YAAY,gBAAgB,SAAS;AAAA,EAC/C,iBAAiB;AAAA,EACjB,oBAAoB;AAAA,EACpB,aAAa;AAAA,EACb,sBAAsB;AAAA,EACtB,QAAQ;AAAA,EACR,kBAAkB;AAAA,EAClB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,WAAW;AAAA,EACb;AACF;AAKO,IAAM,uBAAuBC,GAAE,OAAO;AAAA,EAC3C,SAASA,GACN;AAAA,IACCA,GAAE,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,EACC,QAAQ,CAAC,YAAY,gBAAgB,SAAS,CAAC;AAAA,EAClD,iBAAiBA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,CAAC;AAAA,EAC1D,oBAAoBA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG;AAAA,EACxD,aAAaA,GAAE,KAAK,uBAAuB,EAAE,QAAQ,KAAK;AAAA,EAC1D,sBAAsBA,GAAE,QAAQ,EAAE,QAAQ,IAAI;AAAA,EAC9C,QAAQA,GAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA,EACjC,kBAAkBA,GAAE,QAAQ,EAAE,QAAQ,IAAI;AAAA,EAC1C,aAAaA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAaA,GACV,OAAO;AAAA,IACN,aAAaA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG;AAAA,IACjD,WAAWA,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EACrD,CAAC,EACA,SAAS;AACd,CAAC;AAQM,IAAMC,kBAAiD,OAAO;AAAA,EACnE,wBAAwB,IAAI,CAAC,OAAO,UAAU,CAAC,OAAO,wBAAwB,SAAS,KAAK,CAAC;AAC/F;AAKO,IAAM,yBAAyD;AAAA,EACpE,UAAU;AAAA,EACV,aAAa;AAAA,EACb,cAAc;AAAA,EACd,SAAS;AAAA,EACT,eAAe;AAAA,EACf,cAAc;AAChB;AAKO,IAAM,iBAAiD;AAAA,EAC5D,UAAU;AAAA,EACV,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,KAAK;AAAA,EACL,MAAM;AACR;AAKO,IAAM,iBAAiD;AAAA,EAC5D,SAAS;AAAA,EACT,iBAAiB;AAAA,EACjB,SAAS;AACX;","names":["z","z","SEVERITY_ORDER"]}

package/dist/{chunk-YQUM3UWK.js → chunk-GRBOJFKA.js}

@@ -1,9 +1,9 @@
 import {
   VERSION
-} from "./chunk-H5DTHO7O.js";
+} from "./chunk-2ONCHXIW.js";
 import {
   emitClawGuardViolation
-} from "./chunk-3YKFLM2B.js";
+} from "./chunk-LP4W7RTH.js";
 import {
   CACHE_TIMEOUTS,
   MCP_TIMEOUTS,
@@ -2246,4 +2246,4 @@ export {
   VOTING_THRESHOLDS,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-YQUM3UWK.js.map
+//# sourceMappingURL=chunk-GRBOJFKA.js.map

package/dist/{chunk-W6SM3MU5.js → chunk-ISE53XGS.js}

@@ -7,7 +7,7 @@ import {
   toolStructuredError,
   toolSuccessStructured,
   wrapToolWithTimeout
-} from "./chunk-YQUM3UWK.js";
+} from "./chunk-GRBOJFKA.js";
 import {
   JsonlStore,
   SECURITY_KEYWORDS,
@@ -2159,4 +2159,4 @@ export {
   runImprovementReview,
   registerImprovementReviewTool
 };
-//# sourceMappingURL=chunk-W6SM3MU5.js.map
+//# sourceMappingURL=chunk-ISE53XGS.js.map

package/dist/{chunk-FBWOWMEB.js → chunk-ISUMI6BV.js}

@@ -3,19 +3,19 @@ import {
   DECISION_EMOJI,
   SEVERITY_EMOJI,
   SEVERITY_ORDER2 as SEVERITY_ORDER
-} from "./chunk-BYUVLVN7.js";
+} from "./chunk-3W4L63ML.js";
 import {
   allOf
 } from "./chunk-OQB3XC5O.js";
 import {
   assessReputation,
-  gateWithReputation,
-  resolveReputationGatingMode,
   sanitizeInput
-} from "./chunk-N347WXTT.js";
+} from "./chunk-SHE6SSTO.js";
 import {
   createLogger,
-  getTimeProvider
+  err,
+  getTimeProvider,
+  ok
 } from "./chunk-ERL3XHQO.js";
 
 // src/dogfooding/pr-reviewer-helpers.ts
@@ -43,12 +43,15 @@ function assessPRReputation(pr, cache, enableReputation, accountAgeDays) {
   };
   return assessReputation(metadata, cache);
 }
-function buildPRTrustAssessment(trustResult, reputation, gateDecision) {
+function buildPRTrustAssessment(firewall, reputation, gateDecision) {
+  const trustResult = firewall.trust;
   const isTier1 = trustResult.trustTier === "1";
   return {
     trustTier: trustResult.trustTier,
     userRole: trustResult.userRole,
-    isAllowlisted: trustResult.isAllowlisted,
+    // Measured or absent (#4992): never the classifier's default `false`.
+    ...firewall.isAllowlisted !== void 0 ? { isAllowlisted: firewall.isAllowlisted } : {},
+    auditSink: firewall.auditSink,
     reputationScore: reputation?.reputationScore,
     suspiciousSignals: isTier1 ? [] : reputation?.suspiciousSignals ?? [],
     isSuspicious: isTier1 ? false : reputation?.isSuspicious ?? false,
@@ -57,13 +60,12 @@ function buildPRTrustAssessment(trustResult, reputation, gateDecision) {
     gatingMode: gateDecision.mode
   };
 }
-function gatePRAuthor(pr, trustResult, accountAgeDays, cache, enableReputation) {
-  const reputation = assessPRReputation(pr, cache, enableReputation, accountAgeDays);
-  const gateDecision = gateWithReputation(
-    trustResult.trustTier,
-    reputation,
-    resolveReputationGatingMode()
-  );
+function gatePRAuthor(pr, firewall, reputation) {
+  const trustResult = firewall.trust;
+  const gateDecision = firewall.reputationGate;
+  if (gateDecision === void 0) {
+    return err(new Error("Untrusted-input firewall returned no reputation gate decision"));
+  }
   if (gateDecision.demotionSuppressed) {
     repLogger.warn("Reputation demotion suppressed by gating mode (would block under enforce)", {
       prNumber: pr.number,
@@ -73,10 +75,10 @@ function gatePRAuthor(pr, trustResult, accountAgeDays, cache, enableReputation)
       reconciledTier: gateDecision.reconciledTier
     });
   }
-  return {
+  return ok({
     gateDecision,
-    trustAssessment: buildPRTrustAssessment(trustResult, reputation, gateDecision)
-  };
+    trustAssessment: buildPRTrustAssessment(firewall, reputation, gateDecision)
+  });
 }
 function parseSeverity(value) {
   if (typeof value === "string") {
@@ -303,4 +305,4 @@ export {
   createFailedReview,
   reviewPostingBlock
 };
-//# sourceMappingURL=chunk-FBWOWMEB.js.map
+//# sourceMappingURL=chunk-ISUMI6BV.js.map

package/dist/chunk-ISUMI6BV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/dogfooding/pr-reviewer-helpers.ts"],"sourcesContent":["/**\n * nexus-agents/dogfooding - PR Reviewer Helpers\n *\n * Helper functions for PR review formatting and aggregation.\n *\n * @module dogfooding/pr-reviewer-helpers\n * (Source: Issue #161, Alignment Roadmap Phase 3)\n */\n\nimport { randomUUID } from 'node:crypto';\nimport type { Result } from '../core/index.js';\nimport { getTimeProvider, createLogger, ok, err } from '../core/index.js';\nimport type { ScmUserMetadata } from '../scm/types.js';\nimport type {\n  PRMetadata,\n  PRReviewDraft,\n  PRTrustAssessment,\n  ExpertReviewResult,\n  ReviewFinding,\n  ReviewCategory,\n  ReviewSeverity,\n  ReviewDecision,\n} from './pr-review-types.js';\nimport {\n  SEVERITY_ORDER,\n  CATEGORY_DISPLAY_NAMES,\n  SEVERITY_EMOJI,\n  DECISION_EMOJI,\n} from './pr-review-types.js';\nimport { sanitizeInput } from '../security/input-sanitizer.js';\nimport { allOf } from '../utils/verdict-aggregation.js';\nimport { assessReputation } from '../security/reputation-model.js';\nimport type {\n  ReputationCache,\n  ReputationGateDecision,\n  ReputationAssessment,\n  GitHubUserMetadata,\n} from '../security/reputation-model.js';\nimport type { FirewallResult } from '../security/firewall/firewall-pipeline.js';\n\nconst repLogger = createLogger({ component: 'PRReviewer.reputation' });\n\n// =============================================================================\n// Reputation Gating Helpers (#3123, epic #3118 Phase 5)\n// =============================================================================\n\n/**\n * Best-effort account-age lookup for a PR author (#3133, Phase-3 equivalent for\n * the PR path). Returns the author's real account age in days via the provider's\n * `fetchUserMetadata`, or `undefined` on any failure (err Result, unparseable\n * `createdAt`, or an unexpected rejection) — never fabricated, never throws, so\n * the review is never blocked by this lookup.\n */\nexport async function fetchAccountAgeDays(\n  provider: { fetchUserMetadata: (u: string) => Promise<Result<ScmUserMetadata, Error>> },\n  username: string\n): Promise<number | undefined> {\n  try {\n    const result = await provider.fetchUserMetadata(username);\n    if (!result.ok) return undefined;\n    const createdMs = Date.parse(result.value.createdAt);\n    if (!Number.isFinite(createdMs)) return undefined;\n    return Math.floor((getTimeProvider().now() - createdMs) / 86_400_000);\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Assesses the PR author's reputation from the signals available in the PR\n * event: author association + injection flags from the (sanitized) PR body, plus\n * the author's real account age when it was fetched (#3133). `accountAgeDays` is\n * OMITTED when the lookup failed — never fabricated, so the engine skips the\n * `new_account` signal. Returns undefined when reputation is disabled.\n */\nexport function assessPRReputation(\n  pr: PRMetadata,\n  cache: ReputationCache,\n  enableReputation: boolean,\n  accountAgeDays: number | undefined\n): ReputationAssessment | undefined {\n  if (!enableReputation) return undefined;\n  // Only `injectionFlags` is consumed here, and injection detection is\n  // role-independent — the userRole arg ('unknown') and the sanitizer's own\n  // trustTier output are intentionally irrelevant to this call.\n  const sanitizeResult = sanitizeInput(pr.body, 'unknown', pr.author);\n  const metadata: GitHubUserMetadata = {\n    username: pr.author,\n    ...(accountAgeDays !== undefined ? { accountAgeDays } : {}),\n    authorAssociation: pr.authorAssociation,\n    injectionFlags: sanitizeResult.injectionFlags,\n  };\n  return assessReputation(metadata, cache);\n}\n\n/** Builds the observability assessment surfaced on the review result (#3123). */\nexport function buildPRTrustAssessment(\n  firewall: Pick<FirewallResult, 'trust' | 'isAllowlisted' | 'auditSink'>,\n  reputation: ReputationAssessment | undefined,\n  gateDecision: ReputationGateDecision\n): PRTrustAssessment {\n  const trustResult = firewall.trust;\n  // Tier-1 (owner/allowlisted) authors cannot be suspicious.\n  const isTier1 = trustResult.trustTier === '1';\n  return {\n    trustTier: trustResult.trustTier,\n    userRole: trustResult.userRole,\n    // Measured or absent (#4992): never the classifier's default `false`.\n    ...(firewall.isAllowlisted !== undefined ? { isAllowlisted: firewall.isAllowlisted } : {}),\n    auditSink: firewall.auditSink,\n    reputationScore: reputation?.reputationScore,\n    suspiciousSignals: isTier1 ? [] : (reputation?.suspiciousSignals ?? []),\n    isSuspicious: isTier1 ? false : (reputation?.isSuspicious ?? false),\n    enforcedTrustTier: gateDecision.enforcedTier,\n    reputationReconciledTier: gateDecision.reconciledTier,\n    gatingMode: gateDecision.mode,\n  };\n}\n\n/**\n * Reads the reputation gate decision the firewall computed for this PR (#3123\n * gating; #4992 review: ONE gate, shared with the firewall's Rule-of-Two\n * signal) and builds the assessment surfaced on the result. A suppressed\n * demotion (audit/off) is logged. Fails closed when the firewall returned no\n * gate — structurally unreachable, since the caller always supplies the\n * reputation option, but the classifier tier must never stand in for it.\n */\nexport function gatePRAuthor(\n  pr: PRMetadata,\n  firewall: Pick<FirewallResult, 'trust' | 'isAllowlisted' | 'auditSink' | 'reputationGate'>,\n  reputation: ReputationAssessment | undefined\n): Result<{ gateDecision: ReputationGateDecision; trustAssessment: PRTrustAssessment }, Error> {\n  const trustResult = firewall.trust;\n  const gateDecision = firewall.reputationGate;\n  if (gateDecision === undefined) {\n    return err(new Error('Untrusted-input firewall returned no reputation gate decision'));\n  }\n  if (gateDecision.demotionSuppressed) {\n    repLogger.warn('Reputation demotion suppressed by gating mode (would block under enforce)', {\n      prNumber: pr.number,\n      author: pr.author,\n      mode: gateDecision.mode,\n      classifierTier: trustResult.trustTier,\n      reconciledTier: gateDecision.reconciledTier,\n    });\n  }\n  return ok({\n    gateDecision,\n    trustAssessment: buildPRTrustAssessment(firewall, reputation, gateDecision),\n  });\n}\n\n// =============================================================================\n// Parsing Helpers\n// =============================================================================\n\nexport function parseSeverity(value: unknown): ReviewSeverity {\n  if (typeof value === 'string') {\n    const lower = value.toLowerCase();\n    if (lower in SEVERITY_ORDER) return lower as ReviewSeverity;\n  }\n  return 'medium';\n}\n\nexport function parseCategory(value: unknown): ReviewCategory {\n  if (typeof value === 'string') {\n    const lower = value.toLowerCase();\n    if (lower in CATEGORY_DISPLAY_NAMES) return lower as ReviewCategory;\n  }\n  return 'code_quality';\n}\n\nexport function extractSummary(output: Record<string, unknown>): string {\n  if (typeof output.summary === 'string') return output.summary;\n  if (typeof output.content === 'string') return output.content;\n  if (typeof output.message === 'string') return output.message;\n  return 'Review completed';\n}\n\nexport function extractStringField(\n  record: Record<string, unknown>,\n  ...keys: string[]\n): string | undefined {\n  for (const key of keys) {\n    const value = record[key];\n    if (typeof value === 'string') return value;\n  }\n  return undefined;\n}\n\n// =============================================================================\n// Finding Parsing\n// =============================================================================\n\nexport function parseFindings(\n  output: Record<string, unknown>,\n  expertId: string,\n  minSeverity: ReviewSeverity\n): ReviewFinding[] {\n  const minOrder = SEVERITY_ORDER[minSeverity];\n  const sources = collectSources(output);\n\n  const findings: ReviewFinding[] = [];\n  for (const source of sources) {\n    if (!Array.isArray(source)) continue;\n    for (const item of source) {\n      const finding = parseOneFinding(item, expertId, minOrder);\n      if (finding !== null) findings.push(finding);\n    }\n  }\n  return findings;\n}\n\nfunction collectSources(output: Record<string, unknown>): unknown[] {\n  return [\n    output.findings,\n    output.vulnerabilities,\n    output.issues,\n    (output as { content?: { findings?: unknown } }).content,\n  ];\n}\n\nfunction parseOneFinding(item: unknown, expertId: string, minOrder: number): ReviewFinding | null {\n  if (typeof item !== 'object' || item === null) return null;\n\n  const record = item as Record<string, unknown>;\n  const severity = parseSeverity(record.severity);\n  if (SEVERITY_ORDER[severity] < minOrder) return null;\n\n  return {\n    id: randomUUID(),\n    category: parseCategory(record.category),\n    severity,\n    title: extractStringField(record, 'title', 'name') ?? 'Finding',\n    description: extractStringField(record, 'description', 'message') ?? '',\n    file: typeof record.file === 'string' ? record.file : undefined,\n    line: typeof record.line === 'number' ? record.line : undefined,\n    suggestion: typeof record.suggestion === 'string' ? record.suggestion : undefined,\n    expertId,\n    confidence: typeof record.confidence === 'number' ? record.confidence : 0.7,\n  };\n}\n\n// =============================================================================\n// Decision Helpers\n// =============================================================================\n\nexport function determineApproval(findings: ReviewFinding[]): boolean {\n  const hasBlocking = findings.some((f) => f.severity === 'critical' || f.severity === 'high');\n  return !hasBlocking;\n}\n\nexport function determineDecision(\n  reviews: ExpertReviewResult[],\n  findings: ReviewFinding[]\n): ReviewDecision {\n  // #5012: an expert that errored produced no verdict, so it can neither\n  // approve nor object. `allOf(reviews, …, false)` already refuses to call\n  // ZERO reviews unanimous approval (#4581); feeding it synthetic approvals\n  // for failed experts defeated that guard by making the list non-empty.\n  const verdicts = reviews.filter((r) => r.errored !== true);\n  const hasCritical = findings.some((f) => f.severity === 'critical');\n  const hasHigh = findings.some((f) => f.severity === 'high');\n  // Zero expert reviews is not unanimous approval (#4581): with `true` here the\n  // `hasHigh && !allApproved` branch could never fire on an unreviewed PR, so a\n  // HIGH finding silently downgraded from request_changes to comment.\n  const allApproved = allOf(verdicts, (r) => r.approved, false);\n\n  if (hasCritical) return 'request_changes';\n  if (hasHigh && !allApproved) return 'request_changes';\n  if (findings.length > 0) return 'comment';\n  // Nothing read the diff, so there is nothing to approve. `comment` posts the\n  // failure summaries without asserting the change is fine.\n  if (verdicts.length === 0) return 'comment';\n  return 'approve';\n}\n\nexport function calculateConsensus(reviews: ExpertReviewResult[]): number {\n  if (reviews.length === 0) return 1;\n  const approvals = reviews.filter((r) => r.approved).length;\n  return approvals / reviews.length;\n}\n\n// =============================================================================\n// Counting Helpers\n// =============================================================================\n\nexport function countBySeverity(findings: ReviewFinding[]): Record<ReviewSeverity, number> {\n  const counts: Record<ReviewSeverity, number> = {\n    critical: 0,\n    high: 0,\n    medium: 0,\n    low: 0,\n    info: 0,\n  };\n\n  for (const f of findings) {\n    counts[f.severity]++;\n  }\n\n  return counts;\n}\n\nexport function countByCategory(findings: ReviewFinding[]): Record<ReviewCategory, number> {\n  const counts: Record<ReviewCategory, number> = {\n    security: 0,\n    performance: 0,\n    code_quality: 0,\n    testing: 0,\n    documentation: 0,\n    architecture: 0,\n  };\n\n  for (const f of findings) {\n    counts[f.category]++;\n  }\n\n  return counts;\n}\n\nexport function sumFindings(counts: Record<ReviewSeverity, number>): number {\n  return Object.values(counts).reduce((a, b) => a + b, 0);\n}\n\n// =============================================================================\n// Summary Generation\n// =============================================================================\n\nexport function generateSummary(\n  pr: PRMetadata,\n  reviews: ExpertReviewResult[],\n  decision: ReviewDecision\n): string {\n  const expertSummaries = reviews\n    .map((r) => `- **${CATEGORY_DISPLAY_NAMES[r.expertType as ReviewCategory]}**: ${r.summary}`)\n    .join('\\n');\n\n  return `Reviewed PR #${String(pr.number)}: ${pr.title}\n\n**Decision:** ${decision.replaceAll('_', ' ')}\n**Experts consulted:** ${String(reviews.length)}\n\n${expertSummaries}`;\n}\n\n// =============================================================================\n// GitHub Comment Formatting\n// =============================================================================\n\n/**\n * Formats the review result as a GitHub comment.\n */\nexport function formatReviewComment(result: PRReviewDraft): string {\n  const emoji = DECISION_EMOJI[result.decision];\n  const decisionText = result.decision.replaceAll('_', ' ').toUpperCase();\n\n  const findingsSection = formatFindingsSection(result);\n  const statsSection = formatStatsSection(result);\n\n  return `## ${emoji} Nexus Agents Review: ${decisionText}\n\n${result.summary}\n\n${findingsSection}\n\n${statsSection}\n\n---\n*Reviewed by [nexus-agents](https://github.com/nexus-substrate/nexus-agents) in ${String(result.totalDurationMs)}ms*`;\n}\n\nfunction formatFindingsSection(result: PRReviewDraft): string {\n  const allFindings = result.expertReviews.flatMap((r) => r.findings);\n\n  if (allFindings.length === 0) {\n    return '_No issues found._';\n  }\n\n  const sorted = [...allFindings].sort(\n    (a, b) => SEVERITY_ORDER[b.severity] - SEVERITY_ORDER[a.severity]\n  );\n\n  const lines = ['### Findings', ''];\n\n  for (const f of sorted) {\n    const emoji = SEVERITY_EMOJI[f.severity];\n    const loc =\n      f.file !== undefined\n        ? ` (\\`${f.file}${f.line !== undefined ? `:${String(f.line)}` : ''}\\`)`\n        : '';\n    lines.push(`${emoji} **${f.title}**${loc}`);\n    lines.push(`> ${f.description}`);\n    if (f.suggestion !== undefined) {\n      lines.push(`> 💡 ${f.suggestion}`);\n    }\n    lines.push('');\n  }\n\n  return lines.join('\\n');\n}\n\nfunction formatStatsSection(result: PRReviewDraft): string {\n  const { findingsBySeverity } = result;\n  const total = sumFindings(findingsBySeverity);\n\n  const parts: string[] = [];\n  for (const severity of ['critical', 'high', 'medium', 'low', 'info'] as ReviewSeverity[]) {\n    const count = findingsBySeverity[severity];\n    if (count > 0) {\n      parts.push(`${SEVERITY_EMOJI[severity]} ${String(count)} ${severity}`);\n    }\n  }\n\n  return `<details>\n<summary>Review Statistics (${String(total)} findings)</summary>\n\n- Experts: ${String(result.expertCount)}\n- Consensus: ${(result.consensusScore * 100).toFixed(0)}%\n- Duration: ${String(result.totalDurationMs)}ms\n- Findings: ${parts.join(', ') || 'none'}\n\n</details>`;\n}\n\n// =============================================================================\n// Failed Review Factory\n// =============================================================================\n\nexport function createFailedReview(\n  expertId: string,\n  category: ReviewCategory,\n  durationMs: number,\n  error: string\n): ExpertReviewResult {\n  return {\n    expertId,\n    expertType: category,\n    // #5012: NOT `approved: true`. \"Don't block on failures\" made an expert\n    // that never ran indistinguishable from one that read the diff and had no\n    // objection, and `determineDecision` turned three of those into an APPROVE\n    // posted to GitHub.\n    approved: false,\n    errored: true,\n    summary: `Review failed: ${error}`,\n    findings: [],\n    durationMs,\n    confidence: 0,\n  };\n}\n\n/** The policy gate's verdict on posting a review, as the caller needs it. */\ninterface ReviewPostingVerdict {\n  readonly allowed: boolean;\n  readonly hasRuleOfTwoViolation: boolean;\n  readonly violations: readonly { rule: string }[];\n}\n\n/**\n * Decide whether review posting is blocked, and how to describe it.\n *\n * Consumes the gate's own `allowed` rather than re-deriving a narrower\n * condition. The caller previously blocked on `hasRuleOfTwoViolation` alone\n * while `evaluatePolicy` had already computed `allowed`.\n *\n * For the action `auditReviewAction` builds, the two are currently EQUIVALENT:\n * tiers 1-2 yield no violations, tiers 3-4 yield INSUFFICIENT_TRUST +\n * UNTRUSTED_INFLUENCE + RULE_OF_TWO together. So this changes no behaviour\n * today. It makes the equivalence guaranteed rather than accidental — it holds\n * only because that context hardcodes `hasWriteAccess` and `hasSecretAccess`\n * to true, which is what makes `checkRuleOfTwo` fire at tier 3+. Make either\n * conditional and RULE_OF_TWO stops firing while the other two blocking rules\n * still do, and a review would post against `allowed: false`.\n *\n * Returns `undefined` when posting may proceed. Rule of Two keeps its own\n * label: it is the distinctive condition (untrusted input + write access +\n * secrets at once) and reads very differently from a trust-tier block.\n */\nexport function reviewPostingBlock(\n  verdict: ReviewPostingVerdict\n): { label: string; reason: string } | undefined {\n  if (verdict.allowed) return undefined;\n  const label = verdict.hasRuleOfTwoViolation ? 'Rule of Two' : 'Policy gate';\n  return { label, reason: `${label}: ${verdict.violations.map((v) => v.rule).join(', ')}` };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AASA,SAAS,kBAAkB;AA+B3B,IAAM,YAAY,aAAa,EAAE,WAAW,wBAAwB,CAAC;AAarE,eAAsB,oBACpB,UACA,UAC6B;AAC7B,MAAI;AACF,UAAM,SAAS,MAAM,SAAS,kBAAkB,QAAQ;AACxD,QAAI,CAAC,OAAO,GAAI,QAAO;AACvB,UAAM,YAAY,KAAK,MAAM,OAAO,MAAM,SAAS;AACnD,QAAI,CAAC,OAAO,SAAS,SAAS,EAAG,QAAO;AACxC,WAAO,KAAK,OAAO,gBAAgB,EAAE,IAAI,IAAI,aAAa,KAAU;AAAA,EACtE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AASO,SAAS,mBACd,IACA,OACA,kBACA,gBACkC;AAClC,MAAI,CAAC,iBAAkB,QAAO;AAI9B,QAAM,iBAAiB,cAAc,GAAG,MAAM,WAAW,GAAG,MAAM;AAClE,QAAM,WAA+B;AAAA,IACnC,UAAU,GAAG;AAAA,IACb,GAAI,mBAAmB,SAAY,EAAE,eAAe,IAAI,CAAC;AAAA,IACzD,mBAAmB,GAAG;AAAA,IACtB,gBAAgB,eAAe;AAAA,EACjC;AACA,SAAO,iBAAiB,UAAU,KAAK;AACzC;AAGO,SAAS,uBACd,UACA,YACA,cACmB;AACnB,QAAM,cAAc,SAAS;AAE7B,QAAM,UAAU,YAAY,cAAc;AAC1C,SAAO;AAAA,IACL,WAAW,YAAY;AAAA,IACvB,UAAU,YAAY;AAAA;AAAA,IAEtB,GAAI,SAAS,kBAAkB,SAAY,EAAE,eAAe,SAAS,cAAc,IAAI,CAAC;AAAA,IACxF,WAAW,SAAS;AAAA,IACpB,iBAAiB,YAAY;AAAA,IAC7B,mBAAmB,UAAU,CAAC,IAAK,YAAY,qBAAqB,CAAC;AAAA,IACrE,cAAc,UAAU,QAAS,YAAY,gBAAgB;AAAA,IAC7D,mBAAmB,aAAa;AAAA,IAChC,0BAA0B,aAAa;AAAA,IACvC,YAAY,aAAa;AAAA,EAC3B;AACF;AAUO,SAAS,aACd,IACA,UACA,YAC6F;AAC7F,QAAM,cAAc,SAAS;AAC7B,QAAM,eAAe,SAAS;AAC9B,MAAI,iBAAiB,QAAW;AAC9B,WAAO,IAAI,IAAI,MAAM,+DAA+D,CAAC;AAAA,EACvF;AACA,MAAI,aAAa,oBAAoB;AACnC,cAAU,KAAK,6EAA6E;AAAA,MAC1F,UAAU,GAAG;AAAA,MACb,QAAQ,GAAG;AAAA,MACX,MAAM,aAAa;AAAA,MACnB,gBAAgB,YAAY;AAAA,MAC5B,gBAAgB,aAAa;AAAA,IAC/B,CAAC;AAAA,EACH;AACA,SAAO,GAAG;AAAA,IACR;AAAA,IACA,iBAAiB,uBAAuB,UAAU,YAAY,YAAY;AAAA,EAC5E,CAAC;AACH;AAMO,SAAS,cAAc,OAAgC;AAC5D,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,QAAQ,MAAM,YAAY;AAChC,QAAI,SAAS,eAAgB,QAAO;AAAA,EACtC;AACA,SAAO;AACT;AAEO,SAAS,cAAc,OAAgC;AAC5D,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,QAAQ,MAAM,YAAY;AAChC,QAAI,SAAS,uBAAwB,QAAO;AAAA,EAC9C;AACA,SAAO;AACT;AAEO,SAAS,eAAe,QAAyC;AACtE,MAAI,OAAO,OAAO,YAAY,SAAU,QAAO,OAAO;AACtD,MAAI,OAAO,OAAO,YAAY,SAAU,QAAO,OAAO;AACtD,MAAI,OAAO,OAAO,YAAY,SAAU,QAAO,OAAO;AACtD,SAAO;AACT;AAEO,SAAS,mBACd,WACG,MACiB;AACpB,aAAW,OAAO,MAAM;AACtB,UAAM,QAAQ,OAAO,GAAG;AACxB,QAAI,OAAO,UAAU,SAAU,QAAO;AAAA,EACxC;AACA,SAAO;AACT;AAMO,SAAS,cACd,QACA,UACA,aACiB;AACjB,QAAM,WAAW,eAAe,WAAW;AAC3C,QAAM,UAAU,eAAe,MAAM;AAErC,QAAM,WAA4B,CAAC;AACnC,aAAW,UAAU,SAAS;AAC5B,QAAI,CAAC,MAAM,QAAQ,MAAM,EAAG;AAC5B,eAAW,QAAQ,QAAQ;AACzB,YAAM,UAAU,gBAAgB,MAAM,UAAU,QAAQ;AACxD,UAAI,YAAY,KAAM,UAAS,KAAK,OAAO;AAAA,IAC7C;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,eAAe,QAA4C;AAClE,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,IACP,OAAO;AAAA,IACN,OAAgD;AAAA,EACnD;AACF;AAEA,SAAS,gBAAgB,MAAe,UAAkB,UAAwC;AAChG,MAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO;AAEtD,QAAM,SAAS;AACf,QAAM,WAAW,cAAc,OAAO,QAAQ;AAC9C,MAAI,eAAe,QAAQ,IAAI,SAAU,QAAO;AAEhD,SAAO;AAAA,IACL,IAAI,WAAW;AAAA,IACf,UAAU,cAAc,OAAO,QAAQ;AAAA,IACvC;AAAA,IACA,OAAO,mBAAmB,QAAQ,SAAS,MAAM,KAAK;AAAA,IACtD,aAAa,mBAAmB,QAAQ,eAAe,SAAS,KAAK;AAAA,IACrE,MAAM,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAAA,IACtD,MAAM,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAAA,IACtD,YAAY,OAAO,OAAO,eAAe,WAAW,OAAO,aAAa;AAAA,IACxE;AAAA,IACA,YAAY,OAAO,OAAO,eAAe,WAAW,OAAO,aAAa;AAAA,EAC1E;AACF;AAMO,SAAS,kBAAkB,UAAoC;AACpE,QAAM,cAAc,SAAS,KAAK,CAAC,MAAM,EAAE,aAAa,cAAc,EAAE,aAAa,MAAM;AAC3F,SAAO,CAAC;AACV;AAEO,SAAS,kBACd,SACA,UACgB;AAKhB,QAAM,WAAW,QAAQ,OAAO,CAAC,MAAM,EAAE,YAAY,IAAI;AACzD,QAAM,cAAc,SAAS,KAAK,CAAC,MAAM,EAAE,aAAa,UAAU;AAClE,QAAM,UAAU,SAAS,KAAK,CAAC,MAAM,EAAE,aAAa,MAAM;AAI1D,QAAM,cAAc,MAAM,UAAU,CAAC,MAAM,EAAE,UAAU,KAAK;AAE5D,MAAI,YAAa,QAAO;AACxB,MAAI,WAAW,CAAC,YAAa,QAAO;AACpC,MAAI,SAAS,SAAS,EAAG,QAAO;AAGhC,MAAI,SAAS,WAAW,EAAG,QAAO;AAClC,SAAO;AACT;AAEO,SAAS,mBAAmB,SAAuC;AACxE,MAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,QAAM,YAAY,QAAQ,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE;AACpD,SAAO,YAAY,QAAQ;AAC7B;AAMO,SAAS,gBAAgB,UAA2D;AACzF,QAAM,SAAyC;AAAA,IAC7C,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AAEA,aAAW,KAAK,UAAU;AACxB,WAAO,EAAE,QAAQ;AAAA,EACnB;AAEA,SAAO;AACT;AAEO,SAAS,gBAAgB,UAA2D;AACzF,QAAM,SAAyC;AAAA,IAC7C,UAAU;AAAA,IACV,aAAa;AAAA,IACb,cAAc;AAAA,IACd,SAAS;AAAA,IACT,eAAe;AAAA,IACf,cAAc;AAAA,EAChB;AAEA,aAAW,KAAK,UAAU;AACxB,WAAO,EAAE,QAAQ;AAAA,EACnB;AAEA,SAAO;AACT;AAEO,SAAS,YAAY,QAAgD;AAC1E,SAAO,OAAO,OAAO,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC;AACxD;AAMO,SAAS,gBACd,IACA,SACA,UACQ;AACR,QAAM,kBAAkB,QACrB,IAAI,CAAC,MAAM,OAAO,uBAAuB,EAAE,UAA4B,CAAC,OAAO,EAAE,OAAO,EAAE,EAC1F,KAAK,IAAI;AAEZ,SAAO,gBAAgB,OAAO,GAAG,MAAM,CAAC,KAAK,GAAG,KAAK;AAAA;AAAA,gBAEvC,SAAS,WAAW,KAAK,GAAG,CAAC;AAAA,yBACpB,OAAO,QAAQ,MAAM,CAAC;AAAA;AAAA,EAE7C,eAAe;AACjB;AASO,SAAS,oBAAoB,QAA+B;AACjE,QAAM,QAAQ,eAAe,OAAO,QAAQ;AAC5C,QAAM,eAAe,OAAO,SAAS,WAAW,KAAK,GAAG,EAAE,YAAY;AAEtE,QAAM,kBAAkB,sBAAsB,MAAM;AACpD,QAAM,eAAe,mBAAmB,MAAM;AAE9C,SAAO,MAAM,KAAK,yBAAyB,YAAY;AAAA;AAAA,EAEvD,OAAO,OAAO;AAAA;AAAA,EAEd,eAAe;AAAA;AAAA,EAEf,YAAY;AAAA;AAAA;AAAA,kFAGoE,OAAO,OAAO,eAAe,CAAC;AAChH;AAEA,SAAS,sBAAsB,QAA+B;AAC5D,QAAM,cAAc,OAAO,cAAc,QAAQ,CAAC,MAAM,EAAE,QAAQ;AAElE,MAAI,YAAY,WAAW,GAAG;AAC5B,WAAO;AAAA,EACT;AAEA,QAAM,SAAS,CAAC,GAAG,WAAW,EAAE;AAAA,IAC9B,CAAC,GAAG,MAAM,eAAe,EAAE,QAAQ,IAAI,eAAe,EAAE,QAAQ;AAAA,EAClE;AAEA,QAAM,QAAQ,CAAC,gBAAgB,EAAE;AAEjC,aAAW,KAAK,QAAQ;AACtB,UAAM,QAAQ,eAAe,EAAE,QAAQ;AACvC,UAAM,MACJ,EAAE,SAAS,SACP,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS,SAAY,IAAI,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,QAChE;AACN,UAAM,KAAK,GAAG,KAAK,MAAM,EAAE,KAAK,KAAK,GAAG,EAAE;AAC1C,UAAM,KAAK,KAAK,EAAE,WAAW,EAAE;AAC/B,QAAI,EAAE,eAAe,QAAW;AAC9B,YAAM,KAAK,eAAQ,EAAE,UAAU,EAAE;AAAA,IACnC;AACA,UAAM,KAAK,EAAE;AAAA,EACf;AAEA,SAAO,MAAM,KAAK,IAAI;AACxB;AAEA,SAAS,mBAAmB,QAA+B;AACzD,QAAM,EAAE,mBAAmB,IAAI;AAC/B,QAAM,QAAQ,YAAY,kBAAkB;AAE5C,QAAM,QAAkB,CAAC;AACzB,aAAW,YAAY,CAAC,YAAY,QAAQ,UAAU,OAAO,MAAM,GAAuB;AACxF,UAAM,QAAQ,mBAAmB,QAAQ;AACzC,QAAI,QAAQ,GAAG;AACb,YAAM,KAAK,GAAG,eAAe,QAAQ,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,QAAQ,EAAE;AAAA,IACvE;AAAA,EACF;AAEA,SAAO;AAAA,8BACqB,OAAO,KAAK,CAAC;AAAA;AAAA,aAE9B,OAAO,OAAO,WAAW,CAAC;AAAA,gBACvB,OAAO,iBAAiB,KAAK,QAAQ,CAAC,CAAC;AAAA,cACzC,OAAO,OAAO,eAAe,CAAC;AAAA,cAC9B,MAAM,KAAK,IAAI,KAAK,MAAM;AAAA;AAAA;AAGxC;AAMO,SAAS,mBACd,UACA,UACA,YACA,OACoB;AACpB,SAAO;AAAA,IACL;AAAA,IACA,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA,IAKZ,UAAU;AAAA,IACV,SAAS;AAAA,IACT,SAAS,kBAAkB,KAAK;AAAA,IAChC,UAAU,CAAC;AAAA,IACX;AAAA,IACA,YAAY;AAAA,EACd;AACF;AA6BO,SAAS,mBACd,SAC+C;AAC/C,MAAI,QAAQ,QAAS,QAAO;AAC5B,QAAM,QAAQ,QAAQ,wBAAwB,gBAAgB;AAC9D,SAAO,EAAE,OAAO,QAAQ,GAAG,KAAK,KAAK,QAAQ,WAAW,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC,GAAG;AAC1F;","names":[]}