oc-pilot 0.5.1 → 0.88.1

package/dist/core/pack.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack.test.js","sourceRoot":"","sources":["../../src/core/pack.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE3E,MAAM,IAAI,GAAG;IACX,4CAA4C;IAC5C,qBAAqB;IACrB,qBAAqB;IACrB,iBAAiB;IACjB,2CAA2C;IAC3C,+CAA+C;IAC/C,mBAAmB;IACnB,IAAI;IACJ,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,SAAS,QAAQ,CAAC,KAA6B;IAC7C,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC1D,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACjE,MAAM,MAAM,GAAG;QACb,kCAAkC;QAClC,EAAE;QACF,yBAAyB;QACzB,eAAe;QACf,GAAG;QACH,EAAE;QACF,0CAA0C;QAC1C,kBAAkB;QAClB,GAAG;QACH,EAAE;QACF,uBAAuB;QACvB,gBAAgB;QAChB,EAAE;QACF,6BAA6B;QAC7B,oBAAoB;QACpB,KAAK;QACL,GAAG;QACH,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,qCAAqC,CAAC,CAAC;IAChE,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,0CAA0C,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;IAChD,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;IACtD,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,MAAM,GAAG;QACb,4BAA4B;QAC5B,qCAAqC;QACrC,wCAAwC;QACxC,KAAK;KACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAClG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yEAAyE,EAAE,GAAG,EAAE;IACnF,MAAM,GAAG,GAAG,QAAQ,CAAC;QACnB,eAAe,EAAE,qEAAqE;QACtF,iBAAiB,EAAE,0FAA0F;QAC7G,oBAAoB,EAAE,iCAAiC;KACxD,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE;YAC5B,IAAI,EAAE,6BAA6B;YACnC,IAAI,EAAE,IAAI;YACV,YAAY,EAAE,CAAC,eAAe,CAAC;YAC/B,OAAO,EAAE,yCAAyC;SACnD,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC;QACjG,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC;IACrG,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACnD,MAAM,GAAG,GAAG,QAAQ,CAAC;QACnB,eAAe,EAAE;YACf,0CAA0C;YAC1C,kBAAkB;YAClB,GAAG;YACH,0CAA0C;YAC1C,kBAAkB;YAClB,GAAG;YACH,sEAAsE;YACtE,gCAAgC;YAChC,GAAG;YACH,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC;KACb,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE;YAC5B,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,IAAI;YACV,YAAY,EAAE,CAAC,eAAe,CAAC;YAC/B,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;SAC1B,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,EAAE,SAAS,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/core/phantom.js

@@ -0,0 +1,155 @@
+import { spawnSync } from "node:child_process";
+import { existsSync, mkdtempSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join, relative, resolve, sep } from "node:path";
+import { PilotError } from "./errors.js";
+const DEFAULT_TIMEOUT_MS = 2_000;
+const DEFAULT_MEMORY_MB = 128;
+const MAX_FILE_BYTES = 256_000;
+const WORKER = `import { readFileSync } from "node:fs";
+import vm from "node:vm";
+
+const payload = JSON.parse(readFileSync(process.argv[2], "utf8"));
+const output = [];
+const push = (...args) => output.push(args.map((value) => String(value)).join(" "));
+const blocked = (label) => {
+  throw new Error("PhantomError: " + label + " blocked");
+};
+const context = vm.createContext({
+  console: { log: push, info: push, warn: push, error: push },
+  fetch: () => blocked("fetch"),
+  require: (id) => blocked("require(" + id + ")"),
+  process: {
+    env: {},
+    argv: [],
+    cwd: () => "/sandbox",
+    platform: process.platform,
+    exit: () => blocked("process.exit"),
+    kill: () => blocked("process.kill"),
+  },
+  setTimeout: (fn, ms) => {
+    if (Number(ms) > 1000) throw new Error("PhantomError: long timer blocked");
+    return setTimeout(fn, Number(ms));
+  },
+  clearTimeout,
+  Buffer: undefined,
+});
+
+try {
+  const code = readFileSync(payload.file, "utf8");
+  const isModule = payload.file.endsWith(".mjs") || /^\\s*(?:import|export)\\b/m.test(code);
+  if (isModule) {
+    const module = new vm.SourceTextModule(code, { context, identifier: payload.file });
+    await module.link(() => {
+      throw new Error("PhantomError: import blocked");
+    });
+    await module.evaluate({ timeout: payload.timeoutMs });
+  } else {
+    new vm.Script(code, { filename: payload.file }).runInContext(context, { timeout: payload.timeoutMs });
+  }
+  console.log(JSON.stringify({ status: "ok", output }));
+} catch (error) {
+  const message = error instanceof Error ? error.message : String(error);
+  const code = error && typeof error === "object" && "code" in error ? String(error.code) : "";
+  const status = message.includes("PhantomError")
+    ? "blocked"
+    : code === "ERR_SCRIPT_EXECUTION_TIMEOUT" || /timed out/i.test(message)
+      ? "timeout"
+      : "error";
+  console.log(JSON.stringify({ status, output, error: message.slice(0, 500) }));
+}
+`;
+function inside(cwd, file) {
+    const root = resolve(cwd);
+    const target = resolve(root, file);
+    const rel = relative(root, target);
+    if (rel.startsWith("..") || rel.includes(`..${sep}`) || resolve(root, rel) !== target) {
+        throw new PilotError("Путь выходит за пределы проекта", { exitCode: 2 });
+    }
+    return target;
+}
+function runnableFile(cwd, file) {
+    if (file.endsWith(".tsx"))
+        return { reason: "TSX не исполняется в vm" };
+    if (file.endsWith(".ts")) {
+        if (file.startsWith("src/")) {
+            const built = join(cwd, "dist", file.slice(4).replace(/\.ts$/, ".js"));
+            if (existsSync(built))
+                return { path: built };
+        }
+        return { reason: "TypeScript требует собранный JS: sandbox не транспилирует" };
+    }
+    return { path: inside(cwd, file) };
+}
+function parseWorker(stdout) {
+    const line = stdout
+        .split(/\r?\n/)
+        .map((value) => value.trim())
+        .filter((value) => value.startsWith("{"))
+        .pop();
+    if (!line)
+        return undefined;
+    try {
+        return JSON.parse(line);
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Runs one JS/MJS file in node:vm with blocked imports, fs, net, http and child_process. */
+export function runSandbox(cwd, file, options = {}) {
+    const timeoutMs = Math.max(50, Math.min(30_000, options.timeoutMs ?? DEFAULT_TIMEOUT_MS));
+    const memoryMb = Math.max(16, Math.min(4096, options.memoryMb ?? DEFAULT_MEMORY_MB));
+    const target = runnableFile(cwd, file);
+    if (!target.path) {
+        return { file, status: "error", output: [], error: target.reason, durationMs: 0 };
+    }
+    if (!existsSync(target.path)) {
+        return { file, status: "error", output: [], error: "файл не найден", durationMs: 0 };
+    }
+    if (statSync(target.path).size > MAX_FILE_BYTES) {
+        return { file, status: "error", output: [], error: `файл больше ${String(MAX_FILE_BYTES)} байт`, durationMs: 0 };
+    }
+    const dir = mkdtempSync(join(tmpdir(), "oc-pilot-phantom-"));
+    const started = Date.now();
+    try {
+        const worker = join(dir, "worker.mjs");
+        const payload = join(dir, "payload.json");
+        writeFileSync(worker, WORKER, "utf8");
+        writeFileSync(payload, JSON.stringify({ file: target.path, timeoutMs }), "utf8");
+        const result = spawnSync(process.execPath, ["--experimental-vm-modules", `--max-old-space-size=${String(memoryMb)}`, worker, payload], { cwd, encoding: "utf8", timeout: timeoutMs + 1000, killSignal: "SIGKILL", maxBuffer: 2 * 1024 * 1024 });
+        const durationMs = Date.now() - started;
+        if (result.error && result.error.code === "ETIMEDOUT") {
+            return { file, status: "timeout", output: [], error: "worker timeout", durationMs };
+        }
+        const parsed = parseWorker(result.stdout ?? "");
+        if (!parsed) {
+            return {
+                file,
+                status: "error",
+                output: [],
+                error: (result.stderr || "worker не вернул результат").slice(0, 500),
+                durationMs,
+            };
+        }
+        return {
+            file,
+            status: parsed.status === "ok" || parsed.status === "blocked" || parsed.status === "timeout" ? parsed.status : "error",
+            output: parsed.output ?? [],
+            error: parsed.error,
+            durationMs,
+        };
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+}
+export function renderSandbox(result) {
+    const lines = [`Sandbox: ${result.status} (${String(result.durationMs)} ms) ${result.file}`];
+    for (const line of result.output)
+        lines.push(`  ${line}`);
+    if (result.error)
+        lines.push(`  ${result.error}`);
+    return `${lines.join("\n")}\n`;
+}
+//# sourceMappingURL=phantom.js.map

package/dist/core/phantom.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phantom.js","sourceRoot":"","sources":["../../src/core/phantom.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAiBzC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoDd,CAAC;AAEF,SAAS,MAAM,CAAC,GAAW,EAAE,IAAY;IACvC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC;QACtF,MAAM,IAAI,UAAU,CAAC,iCAAiC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,IAAY;IAC7C,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IACxE,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YACvE,IAAI,UAAU,CAAC,KAAK,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAChD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,2DAA2D,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,IAAI,GAAG,MAAM;SAChB,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;SACxC,GAAG,EAAE,CAAC;IACT,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA2D,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,IAAY,EAAE,UAA0B,EAAE;IAChF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;QAChD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,eAAe,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IACnH,CAAC;IAED,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC1C,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACtC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,SAAS,CACtB,OAAO,CAAC,QAAQ,EAChB,CAAC,2BAA2B,EAAE,wBAAwB,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAC1F,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,GAAG,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CACxG,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACxC,IAAI,MAAM,CAAC,KAAK,IAAK,MAAM,CAAC,KAA+B,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC;QACtF,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,IAAI;gBACJ,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,4BAA4B,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBACpE,UAAU;aACX,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;YACtH,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU;SACX,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAqB;IACjD,MAAM,KAAK,GAAG,CAAC,YAAY,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7F,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,MAAM,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAClD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC"}

package/dist/core/phantom.test.js

@@ -0,0 +1,58 @@
+import assert from "node:assert/strict";
+import { spawnSync } from "node:child_process";
+import { mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import test from "node:test";
+import { renderSandbox, runSandbox } from "./phantom.js";
+function makeRepo(files) {
+    const dir = mkdtempSync(join(tmpdir(), "oc-pilot-phantom-test-"));
+    const init = spawnSync("git", ["init", "-q"], { cwd: dir, encoding: "utf8" });
+    assert.equal(init.status, 0, init.stderr);
+    for (const [path, content] of Object.entries(files))
+        writeFileSync(join(dir, path), content, "utf8");
+    return dir;
+}
+test("runSandbox executes a self-contained script and captures console", () => {
+    const dir = makeRepo({ "ok.mjs": 'console.log("hello");\nconsole.log(2 + 2);\n' });
+    try {
+        const result = runSandbox(dir, "ok.mjs");
+        assert.equal(result.status, "ok");
+        assert.deepEqual(result.output, ["hello", "4"]);
+        assert.match(renderSandbox(result), /Sandbox: ok/);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("runSandbox blocks static imports and require", () => {
+    const dir = makeRepo({
+        "blocked.mjs": 'import fs from "node:fs";\nconsole.log(fs);\n',
+        "blocked.cjs": 'const fs = require("node:fs");\nconsole.log(fs);\n',
+    });
+    try {
+        const esm = runSandbox(dir, "blocked.mjs");
+        assert.equal(esm.status, "blocked");
+        assert.match(esm.error ?? "", /import blocked/);
+        const cjs = runSandbox(dir, "blocked.cjs");
+        assert.equal(cjs.status, "blocked");
+        assert.match(cjs.error ?? "", /require\(node:fs\) blocked/);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("runSandbox reports errors and kills infinite loops", () => {
+    const dir = makeRepo({ "throw.mjs": 'throw new Error("boom");\n', "loop.mjs": "while (true) {}\n" });
+    try {
+        const thrown = runSandbox(dir, "throw.mjs");
+        assert.equal(thrown.status, "error");
+        assert.match(thrown.error ?? "", /boom/);
+        const loop = runSandbox(dir, "loop.mjs", { timeoutMs: 300 });
+        assert.equal(loop.status, "timeout");
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+//# sourceMappingURL=phantom.test.js.map

package/dist/core/phantom.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phantom.test.js","sourceRoot":"","sources":["../../src/core/phantom.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAEzD,SAAS,QAAQ,CAAC,KAA6B;IAC7C,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACrG,OAAO,GAAG,CAAC;AACb,CAAC;AAED,IAAI,CAAC,kEAAkE,EAAE,GAAG,EAAE;IAC5E,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,QAAQ,EAAE,8CAA8C,EAAE,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;IACrD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8CAA8C,EAAE,GAAG,EAAE;IACxD,MAAM,GAAG,GAAG,QAAQ,CAAC;QACnB,aAAa,EAAE,+CAA+C;QAC9D,aAAa,EAAE,oDAAoD;KACpE,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,4BAA4B,CAAC,CAAC;IAC9D,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,WAAW,EAAE,4BAA4B,EAAE,UAAU,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACrG,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACvC,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/core/pr-comment.js

@@ -0,0 +1,116 @@
+import { spawnSync } from "node:child_process";
+import { PilotError } from "./errors.js";
+import { severityLabel } from "./findings.js";
+import { VERSION } from "../version.js";
+const MAX_COMMENT_FINDINGS = 30;
+/** Builds the markdown summary posted to the pull request. */
+export function buildPrCommentBody(findings, meta) {
+    const lines = ["## oc-pilot review", ""];
+    if (findings.length === 0) {
+        lines.push("No blocking findings. LGTM.", "");
+    }
+    else {
+        const counts = {
+            critical: findings.filter((finding) => finding.severity === "critical").length,
+            warning: findings.filter((finding) => finding.severity === "warning").length,
+            style: findings.filter((finding) => finding.severity === "style").length,
+        };
+        lines.push(`Findings: ${counts.critical} critical · ${counts.warning} warning · ${counts.style} style`, "");
+        for (const finding of findings.slice(0, MAX_COMMENT_FINDINGS)) {
+            const location = finding.location ? `\`${finding.location}\`` : "—";
+            lines.push(`- [${severityLabel(finding.severity)}] ${location} — ${finding.text}`);
+        }
+        if (findings.length > MAX_COMMENT_FINDINGS) {
+            lines.push(`- …and ${findings.length - MAX_COMMENT_FINDINGS} more`);
+        }
+        lines.push("");
+    }
+    if (meta.knownHidden && meta.knownHidden > 0) {
+        lines.push(`${meta.knownHidden} finding(s) hidden by the project baseline (\`.oc-pilot/baseline.json\`).`, "");
+    }
+    lines.push(`---`, `oc-pilot v${VERSION} · commit ${meta.sha.slice(0, 12)}`);
+    return `${lines.join("\n")}\n`;
+}
+function runGh(args, cwd, input) {
+    try {
+        return spawnSync("gh", args, {
+            cwd,
+            input,
+            encoding: "utf8",
+            timeout: 60_000,
+            windowsHide: true,
+        });
+    }
+    catch (error) {
+        throw new PilotError("Не удалось запустить gh", {
+            hint: `Установите GitHub CLI: https://cli.github.com (${error instanceof Error ? error.message : String(error)})`,
+            exitCode: 1,
+        });
+    }
+}
+/**
+ * Detects "running inside a pull-request GitHub Actions job": in that case the
+ * comment can be posted through the REST API with GITHUB_TOKEN — no gh CLI or
+ * local auth needed.
+ */
+export function githubCommentTarget(env = process.env) {
+    if (env.GITHUB_ACTIONS !== "true")
+        return undefined;
+    const token = env.GITHUB_TOKEN;
+    const repo = env.GITHUB_REPOSITORY;
+    const ref = env.GITHUB_REF ?? "";
+    const pull = /^refs\/pull\/(\d+)\/(?:merge|head)$/.exec(ref);
+    if (!token || !repo || !pull)
+        return undefined;
+    return { repo, issue: pull[1], token, apiUrl: env.GITHUB_API_URL ?? "https://api.github.com" };
+}
+async function postViaGithubApi(target, body) {
+    const response = await fetch(`${target.apiUrl}/repos/${target.repo}/issues/${target.issue}/comments`, {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${target.token}`,
+            Accept: "application/vnd.github+json",
+            "X-GitHub-Api-Version": "2022-11-28",
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({ body }),
+    });
+    if (!response.ok) {
+        const detail = await response.text().catch(() => "");
+        throw new PilotError("Не удалось отправить комментарий в PR (GitHub API)", {
+            hint: `HTTP ${response.status} ${detail.slice(0, 300)}
+
+Проверьте permissions: pull-requests: write у GITHUB_TOKEN.`,
+            exitCode: 1,
+        });
+    }
+}
+/**
+ * Posts one summary comment on the pull request for the current branch.
+ * Inside a PR Actions job posts via the REST API with GITHUB_TOKEN;
+ * everywhere else falls back to the gh CLI.
+ */
+export async function postPrComment(body, cwd) {
+    const target = githubCommentTarget();
+    if (target) {
+        await postViaGithubApi(target, body);
+        return;
+    }
+    const probe = runGh(["--version"], cwd);
+    if (probe.error || probe.status !== 0) {
+        throw new PilotError("GitHub CLI (gh) недоступен", {
+            hint: "Установите gh и выполните `gh auth login` (https://cli.github.com).",
+            exitCode: 1,
+        });
+    }
+    const result = runGh(["pr", "comment", "--body-file", "-"], cwd, body);
+    if (result.error || result.status !== 0) {
+        throw new PilotError("Не удалось отправить комментарий в PR", {
+            hint: `${(result.stderr || result.stdout || "").trim()}
+
+Проверьте: ветка связана с PR (gh pr view), токен авторизован (gh auth status).`,
+            exitCode: 1,
+        });
+    }
+}
+//# sourceMappingURL=pr-comment.js.map

package/dist/core/pr-comment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-comment.js","sourceRoot":"","sources":["../../src/core/pr-comment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAOhC,8DAA8D;AAC9D,MAAM,UAAU,kBAAkB,CAAC,QAA2B,EAAE,IAAmB;IACjF,MAAM,KAAK,GAAa,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;IAEnD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG;YACb,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;YAC9E,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM;YAC5E,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM;SACzE,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,QAAQ,eAAe,MAAM,CAAC,OAAO,cAAc,MAAM,CAAC,KAAK,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC5G,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,EAAE,CAAC;YAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;YACpE,KAAK,CAAC,IAAI,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,UAAU,QAAQ,CAAC,MAAM,GAAG,oBAAoB,OAAO,CAAC,CAAC;QACtE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,2EAA2E,EAAE,EAAE,CAAC,CAAC;IACjH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,OAAO,aAAa,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5E,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,SAAS,KAAK,CAAC,IAAc,EAAE,GAAW,EAAE,KAAc;IACxD,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE;YAC3B,GAAG;YACH,KAAK;YACL,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAC,yBAAyB,EAAE;YAC9C,IAAI,EAAE,kDAAkD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG;YACjH,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AASD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACtE,IAAI,GAAG,CAAC,cAAc,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACpD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC;IAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,iBAAiB,CAAC;IACnC,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,qCAAqC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC/C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,cAAc,IAAI,wBAAwB,EAAE,CAAC;AAClG,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,MAA2B,EAAE,IAAY;IACvE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,UAAU,MAAM,CAAC,IAAI,WAAW,MAAM,CAAC,KAAK,WAAW,EAAE;QACpG,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE;YACvC,MAAM,EAAE,6BAA6B;YACrC,sBAAsB,EAAE,YAAY;YACpC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;KAC/B,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACrD,MAAM,IAAI,UAAU,CAAC,oDAAoD,EAAE;YACzE,IAAI,EAAE,QAAQ,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;;4DAEC;YACtD,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,GAAW;IAC3D,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,UAAU,CAAC,4BAA4B,EAAE;YACjD,IAAI,EAAE,qEAAqE;YAC3E,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,UAAU,CAAC,uCAAuC,EAAE;YAC5D,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;;gFAEoB;YAC1E,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/core/pr-comment.test.js

@@ -0,0 +1,53 @@
+import assert from "node:assert/strict";
+import { test } from "node:test";
+import { buildPrCommentBody, githubCommentTarget } from "./pr-comment.js";
+const SHA = "0123456789abcdef0123456789abcdef01234567";
+function finding(severity, index) {
+    return { severity, location: `src/file${index}.ts:${index + 1}`, text: `problem number ${index}` };
+}
+test("an empty findings list produces an LGTM comment", () => {
+    const body = buildPrCommentBody([], { sha: SHA });
+    assert.ok(body.startsWith("## oc-pilot review"));
+    assert.ok(body.includes("No blocking findings. LGTM."));
+    assert.match(body, /oc-pilot v\d+\.\d+\.\d+ · commit 0123456789ab/);
+});
+test("findings are summarized with severity, location and counts", () => {
+    const findings = [
+        finding("critical", 1),
+        finding("critical", 2),
+        finding("warning", 3),
+    ];
+    const body = buildPrCommentBody(findings, { sha: SHA });
+    assert.ok(body.includes("Findings: 2 critical · 1 warning · 0 style"));
+    assert.ok(body.includes("- [🔴 Critical] `src/file1.ts:2` — problem number 1"));
+    assert.ok(body.includes("- [🟡 Warning] `src/file3.ts:4` — problem number 3"));
+});
+test("long finding lists are capped at 30 bullets", () => {
+    const findings = Array.from({ length: 35 }, (_, index) => finding("style", index));
+    const body = buildPrCommentBody(findings, { sha: SHA });
+    assert.ok(body.includes("…and 5 more"));
+    const findingBullets = body.split("\n").filter((line) => line.startsWith("- ["));
+    assert.equal(findingBullets.length, 30);
+});
+test("baseline-hidden findings are mentioned", () => {
+    const body = buildPrCommentBody([], { sha: SHA, knownHidden: 2 });
+    assert.ok(body.includes("2 finding(s) hidden by the project baseline"));
+});
+test("githubCommentTarget resolves only inside pull request Actions runs", () => {
+    const base = {
+        GITHUB_ACTIONS: "true",
+        GITHUB_TOKEN: "token-value",
+        GITHUB_REPOSITORY: "owner/repo",
+        GITHUB_REF: "refs/pull/42/merge",
+        GITHUB_API_URL: "https://api.github.com",
+    };
+    const target = githubCommentTarget(base);
+    assert.ok(target);
+    assert.equal(target.repo, "owner/repo");
+    assert.equal(target.issue, "42");
+    assert.equal(target.apiUrl, "https://api.github.com");
+    assert.equal(githubCommentTarget({ ...base, GITHUB_TOKEN: "" }), undefined);
+    assert.equal(githubCommentTarget({ ...base, GITHUB_REF: "refs/heads/main" }), undefined);
+    assert.equal(githubCommentTarget({ ...base, GITHUB_ACTIONS: "false" }), undefined);
+});
+//# sourceMappingURL=pr-comment.test.js.map

package/dist/core/pr-comment.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-comment.test.js","sourceRoot":"","sources":["../../src/core/pr-comment.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE1E,MAAM,GAAG,GAAG,0CAA0C,CAAC;AAEvD,SAAS,OAAO,CAAC,QAAqC,EAAE,KAAa;IACnE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,KAAK,OAAO,KAAK,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,kBAAkB,KAAK,EAAE,EAAE,CAAC;AACrG,CAAC;AAED,IAAI,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC3D,MAAM,IAAI,GAAG,kBAAkB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAClD,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACjD,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,+CAA+C,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4DAA4D,EAAE,GAAG,EAAE;IACtE,MAAM,QAAQ,GAAG;QACf,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QACtB,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QACtB,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;KACtB,CAAC;IACF,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACxD,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,4CAA4C,CAAC,CAAC,CAAC;IACvE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,qDAAqD,CAAC,CAAC,CAAC;IAChF,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,oDAAoD,CAAC,CAAC,CAAC;AACjF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6CAA6C,EAAE,GAAG,EAAE;IACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACxD,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACjF,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wCAAwC,EAAE,GAAG,EAAE;IAClD,MAAM,IAAI,GAAG,kBAAkB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;IAClE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,6CAA6C,CAAC,CAAC,CAAC;AAC1E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,GAAG,EAAE;IAC9E,MAAM,IAAI,GAAG;QACX,cAAc,EAAE,MAAM;QACtB,YAAY,EAAE,aAAa;QAC3B,iBAAiB,EAAE,YAAY;QAC/B,UAAU,EAAE,oBAAoB;QAChC,cAAc,EAAE,wBAAwB;KACzC,CAAC;IACF,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IAClB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAEtD,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IAC5E,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IACzF,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;AACrF,CAAC,CAAC,CAAC"}

package/dist/core/pr-review.js

@@ -0,0 +1,160 @@
+import { PilotError } from "./errors.js";
+import { severityLabel } from "./findings.js";
+import { log } from "./log.js";
+import { githubCommentTarget, postPrComment } from "./pr-comment.js";
+const MAX_INLINE_COMMENTS = 25;
+const LOCATION_RE = /^(.*?):(\d+)(?::\d+)?$/;
+/**
+ * Collects the new-file line numbers GitHub accepts for inline comments: every
+ * added or context line of every hunk. Commenting on a line outside these
+ * ranges makes GitHub reject the whole review with 422, so findings are checked
+ * against this map before they are sent.
+ */
+export function commentedDiffLines(diff) {
+    const lines = new Map();
+    let current;
+    let line = 0;
+    for (const raw of diff.split("\n")) {
+        if (raw.startsWith("+++ ")) {
+            const target = raw.slice(4).trim();
+            if (!target || target === "/dev/null") {
+                current = undefined;
+                continue;
+            }
+            const path = target.replace(/^b\//, "").replace(/\\/g, "/");
+            current = new Set();
+            lines.set(path, current);
+            line = 0;
+            continue;
+        }
+        if (raw.startsWith("@@")) {
+            const hunk = /^@@\s+-\d+(?:,\d+)?\s+\+(\d+)(?:,\d+)?\s+@@/.exec(raw);
+            if (hunk)
+                line = Number(hunk[1]);
+            continue;
+        }
+        if (!current)
+            continue;
+        if (raw.startsWith("+") || raw.startsWith(" ")) {
+            current.add(line);
+            line += 1;
+        }
+    }
+    return lines;
+}
+/**
+ * Turns findings into inline review comments. Findings without a `file:line`
+ * location, or whose line is not part of the diff, are dropped instead of
+ * failing the whole review.
+ */
+export function buildInlineComments(findings, diff) {
+    const available = commentedDiffLines(diff);
+    const comments = [];
+    for (const finding of findings) {
+        if (comments.length >= MAX_INLINE_COMMENTS)
+            break;
+        const location = finding.location?.trim();
+        if (!location)
+            continue;
+        const match = LOCATION_RE.exec(location);
+        if (!match)
+            continue;
+        const path = match[1].replace(/\\/g, "/").replace(/^\.\//, "");
+        const line = Number(match[2]);
+        const fileLines = available.get(path);
+        if (!fileLines || !fileLines.has(line))
+            continue;
+        comments.push({
+            path,
+            line,
+            body: `**[${severityLabel(finding.severity)}]** ${finding.text}`,
+        });
+    }
+    return comments;
+}
+async function postReview(target, summary, comments) {
+    const response = await fetch(`${target.apiUrl}/repos/${target.repo}/pulls/${target.issue}/reviews`, {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${target.token}`,
+            Accept: "application/vnd.github+json",
+            "X-GitHub-Api-Version": "2022-11-28",
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({
+            body: summary,
+            event: "COMMENT",
+            comments: comments.map((comment) => ({
+                path: comment.path,
+                line: comment.line,
+                side: "RIGHT",
+                body: comment.body,
+            })),
+        }),
+    });
+    if (!response.ok) {
+        const detail = await response.text().catch(() => "");
+        throw new PilotError("Не удалось отправить review в PR (GitHub API)", {
+            hint: `HTTP ${response.status} ${detail.slice(0, 300)}
+
+Проверьте permissions: pull-requests: write у GITHUB_TOKEN.`,
+            exitCode: 1,
+        });
+    }
+}
+/**
+ * Posts a pull-request review: inline comments on the diff when the job runs in
+ * Actions with a token, otherwise (or if GitHub rejects the inline review) one
+ * summary comment through the same channel as `--pr` always used.
+ */
+export async function postPrReviewSummary(summary, comments, cwd) {
+    const target = githubCommentTarget();
+    if (target && comments.length > 0) {
+        try {
+            await postReview(target, summary, comments);
+            return { inline: true, count: comments.length };
+        }
+        catch (error) {
+            log.warn(`GitHub отклонил inline-комментарии (${error instanceof Error ? error.message : String(error)}) — отправляю сводку.`);
+        }
+    }
+    await postPrComment(summary, cwd);
+    return { inline: false, count: 0 };
+}
+/**
+ * Sets the `oc-pilot` commit status so a branch protection rule can require it.
+ * Only works inside a PR Actions job (needs a token and a sha); returns false
+ * when it cannot report instead of failing the review.
+ */
+export async function postPrStatus(state, description, sha) {
+    const target = githubCommentTarget();
+    if (!target || !sha)
+        return false;
+    try {
+        const response = await fetch(`${target.apiUrl}/repos/${target.repo}/statuses/${sha}`, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${target.token}`,
+                Accept: "application/vnd.github+json",
+                "X-GitHub-Api-Version": "2022-11-28",
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify({
+                state,
+                context: "oc-pilot",
+                description: description.slice(0, 140),
+            }),
+        });
+        if (!response.ok) {
+            const detail = await response.text().catch(() => "");
+            log.warn(`Статус-чек не отправлен: HTTP ${response.status} ${detail.slice(0, 200)}`);
+            return false;
+        }
+        return true;
+    }
+    catch (error) {
+        log.warn(`Статус-чек не отправлен: ${error instanceof Error ? error.message : String(error)}`);
+        return false;
+    }
+}
+//# sourceMappingURL=pr-review.js.map

package/dist/core/pr-review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-review.js","sourceRoot":"","sources":["../../src/core/pr-review.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAA4B,MAAM,iBAAiB,CAAC;AAE/F,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAS7C;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC7C,IAAI,OAAgC,CAAC;IACrC,IAAI,IAAI,GAAG,CAAC,CAAC;IAEb,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;gBACtC,OAAO,GAAG,SAAS,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC5D,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;YAC5B,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACzB,IAAI,GAAG,CAAC,CAAC;YACT,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,6CAA6C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrE,IAAI,IAAI;gBAAE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACjC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,IAAI,IAAI,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAA2B,EAAE,IAAY;IAC3E,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,QAAQ,CAAC,MAAM,IAAI,mBAAmB;YAAE,MAAM;QAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACjD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI;YACJ,IAAI;YACJ,IAAI,EAAE,MAAM,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,OAAO,CAAC,IAAI,EAAE;SACjE,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,MAA2B,EAC3B,OAAe,EACf,QAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,UAAU,MAAM,CAAC,IAAI,UAAU,MAAM,CAAC,KAAK,UAAU,EAAE;QAClG,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE;YACvC,MAAM,EAAE,6BAA6B;YACrC,sBAAsB,EAAE,YAAY;YACpC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACnC,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAC,CAAC;SACJ,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACrD,MAAM,IAAI,UAAU,CAAC,+CAA+C,EAAE;YACpE,IAAI,EAAE,QAAQ,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;;4DAEC;YACtD,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAe,EACf,QAAyB,EACzB,GAAW;IAEX,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,IAAI,MAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC5C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CACN,uCACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,uBAAuB,CACxB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAClC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAsC,EACtC,WAAmB,EACnB,GAAW;IAEX,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAElC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,UAAU,MAAM,CAAC,IAAI,aAAa,GAAG,EAAE,EAAE;YACpF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE;gBACvC,MAAM,EAAE,6BAA6B;gBACrC,sBAAsB,EAAE,YAAY;gBACpC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK;gBACL,OAAO,EAAE,UAAU;gBACnB,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aACvC,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,iCAAiC,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACrF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,IAAI,CAAC,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/F,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}