@aitne/daemon 0.1.0

package/dist/observers/github-poller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-poller.d.ts","sourceRoot":"","sources":["../../src/observers/github-poller.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAIrD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAiB7C;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,QAAQ,GAAG,CACrB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAE,KAClC,OAAO,CAAC,YAAY,CAAC,CAAC;AAE3B,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB;;;;OAIG;IACH,YAAY,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;IACtC;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,EAAE,CAChB,OAAO,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,KAC/B,OAAO,CAAC,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IAC5C;;;;;;OAMG;IACH,wBAAwB,CAAC,EAAE,CAAC,KAAK,EAAE;QACjC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;KAClB,KAAK,MAAM,GAAG,SAAS,CAAC;IACzB;;;;;;;;;;OAUG;IACH,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;CACpD;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,qBAAa,YAAa,YAAW,QAAQ;IAC3C,QAAQ,CAAC,IAAI,YAAY;IAEzB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAoB;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoB;IAC9C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoB;IAClD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAW;IAClC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAgC;IACrE,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAsB;IAC9D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAEvB;IACT,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAEhC;IACT,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAE1B;IACT,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqC;IACnE,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAS;IAC/C,wEAAwE;IACxE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IAExD,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,KAAK,CAAqB;IAClC,OAAO,CAAC,mBAAmB,CAAK;IAChC,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,OAAO,CAAS;gBAEZ,IAAI,EAAE,mBAAmB;IAoB/B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAwBtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAQb,IAAI;IAiDlB;;;;;;OAMG;IACH,OAAO,CAAC,sBAAsB;IAQ9B;;;;;OAKG;IACH,OAAO,CAAC,SAAS;IAOjB,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,eAAe;YA2BT,iBAAiB;YAqDjB,gBAAgB;IA8D9B;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;IAkE3B;;;;;OAKG;IACH,OAAO,CAAC,0BAA0B;YASpB,mBAAmB;IA8DjC;;;;;OAKG;YACW,iBAAiB;IAe/B,OAAO,CAAC,yBAAyB;YAOnB,kBAAkB;CA4BjC;AAsDD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;CACd,CA8BA;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,GACV,OAAO,CAOT;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,YAAY,EAAE,MAAM,GACnB,OAAO,CAOT"}

package/dist/observers/github-poller.js

@@ -0,0 +1,609 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { createEvent, EventPriority } from "@aitne/shared";
+import { recordObservation } from "../db/observations.js";
+import { readRuntimeState, writeRuntimeState } from "../db/runtime-state.js";
+import { createLogger } from "../logging.js";
+import { classifyNotification, classifyWorkflowRun, parseGitHubRepoFullName, parseGitHubRemote, } from "./github-poller-classifier.js";
+const execFileAsync = promisify(execFile);
+const logger = createLogger("github-poller");
+const NOTIF_ETAG_KEY = "github_poller.notifications_etag";
+const NOTIF_LAST_MODIFIED_KEY = "github_poller.notifications_last_modified";
+/**
+ * GitHubPoller — daemon-side polling of GitHub Notifications + workflow runs
+ * via `gh` CLI. Replaces the webhook-driven path for local-first installs
+ * where exposing a public URL is impractical.
+ *
+ * Two cadences on a single timer:
+ *   1. `gh api notifications` — ETag-cached; 304s cost no rate quota.
+ *      Classifies by `reason` and records observations; HIGH-priority
+ *      reasons (review_requested / assign / security_alert) also push to
+ *      the EventBus for direct DM via the matching task-flow.
+ *   2. `gh api repos/<o>/<r>/actions/runs?status=failure` per watched repo.
+ *      Default-branch failures are HIGH; feature-branch failures stay as
+ *      observations only.
+ *
+ * Idempotency: a notification or workflow_run that the poller has emitted
+ * for in the past does NOT re-emit on subsequent polls. The pre-check on
+ * `observations(source, ref)` (any consumed_at) guards the EventBus push;
+ * `recordObservation` itself is UPSERT-idempotent on (source, ref) WHERE
+ * consumed_at IS NULL.
+ *
+ * Cold-start safety: the workflow_runs path checks the observations table
+ * for any prior row keyed `github:workflow:<owner>/<repo>`. When none exists,
+ * the first batch is recorded WITHOUT EventBus emission — otherwise the
+ * user would wake up to one HIGH-priority DM per historical CI failure on
+ * the default branch. Subsequent polls go through the normal
+ * idempotency-checked path: `applyClassification` records, and emits only
+ * if the (source, ref) pair is fresh.
+ *
+ * No cursor on the workflow_runs query — the API returns the latest 30
+ * `?status=failure` runs sorted desc by creation time, and the (source,
+ * ref) pre-check naturally suppresses re-emission. An older approach that
+ * filtered by `created>cursor` was abandoned because long-running workflows
+ * (created at T1, fail at T3) would be silently dropped after the cursor
+ * advanced past T1.
+ *
+ * Notifications cold-start is handled inherently by GitHub (only unread
+ * items are returned).
+ *
+ * Auth: re-uses the user's `gh auth login` keychain entry. The daemon's
+ * SecretBroker is intentionally NOT consulted — auth lives where `gh`
+ * already manages it. If `gh auth status` is non-zero, polls back off
+ * exponentially.
+ */
+export class GitHubPoller {
+    name = "github";
+    db;
+    eventBus;
+    repoPaths;
+    repoFullNames;
+    pollIntervalMs;
+    runner;
+    repoBindingsOverride;
+    directNotificationRepos;
+    accountResolver;
+    repoAccountAliasResolver;
+    onTriggerableEvent;
+    repoIntervals;
+    globalIntervalSeconds;
+    /** Per-repo next-fire timestamp (ms). Notifications poll separately. */
+    nextFireAt = new Map();
+    timer = null;
+    repos = [];
+    consecutiveFailures = 0;
+    skipRemaining = 0;
+    polling = false;
+    constructor(opts) {
+        this.db = opts.db;
+        this.eventBus = opts.eventBus;
+        this.repoPaths = opts.repoPaths;
+        this.repoFullNames = opts.repoFullNames ?? [];
+        this.pollIntervalMs = opts.pollIntervalSeconds * 1000;
+        this.runner = opts.runner ?? makeDefaultRunner(opts.ghBin ?? "gh");
+        this.repoBindingsOverride = opts.repoBindings ?? null;
+        this.accountResolver = opts.accountResolver ?? null;
+        this.repoAccountAliasResolver = opts.repoAccountAliasResolver ?? null;
+        this.onTriggerableEvent = opts.onTriggerableEvent ?? null;
+        this.repoIntervals = opts.repoIntervals ?? new Map();
+        this.globalIntervalSeconds = opts.pollIntervalSeconds;
+        this.directNotificationRepos = new Set(this.repoFullNames
+            .map((repo) => parseGitHubRepoFullName(repo)?.fullName.toLowerCase())
+            .filter((repo) => typeof repo === "string"));
+    }
+    async start() {
+        // Resolve repo bindings (owner/name + default branch). A repo whose
+        // remote isn't GitHub, or whose default-branch lookup fails, is skipped
+        // — observers continue without it. Tests may bypass git/gh round-trips
+        // entirely via `repoBindings`.
+        this.repos = this.repoBindingsOverride
+            ? [...this.repoBindingsOverride]
+            : await this.resolveRepoBindings();
+        this.repos = dedupeRepoBindings(this.repos);
+        // Initial poll. Errors here back off but don't prevent the timer from
+        // firing — auth might be configured after daemon start.
+        await this.poll();
+        this.timer = setInterval(() => void this.poll(), this.pollIntervalMs);
+        logger.info({
+            intervalMs: this.pollIntervalMs,
+            watchedRepos: this.repos.length,
+        }, "GitHub poller started");
+    }
+    async stop() {
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+        logger.info("GitHub poller stopped");
+    }
+    async poll() {
+        if (this.skipRemaining > 0) {
+            this.skipRemaining--;
+            return;
+        }
+        // Concurrent-fire guard. With the default 600s interval the previous
+        // tick has long completed, but a slow API or low-interval test could
+        // overlap; serialize for determinism.
+        if (this.polling)
+            return;
+        this.polling = true;
+        let anyFailed = false;
+        try {
+            try {
+                await this.pollNotifications();
+            }
+            catch (err) {
+                anyFailed = true;
+                this.handlePollError("notifications", err);
+            }
+            const nowMs = Date.now();
+            for (const repo of this.repos) {
+                // Per-row scheduling gate (unified-repositories §5). Skipping
+                // is best-effort: a row whose interval is shorter than the
+                // global tick still polls every tick, but a row with a longer
+                // override polls less often.
+                if (!this.isRepoDue(repo.fullName, nowMs))
+                    continue;
+                try {
+                    await this.pollWorkflowRuns(repo);
+                    this.markRepoFired(repo.fullName, nowMs);
+                }
+                catch (err) {
+                    anyFailed = true;
+                    this.handlePollError(`workflow:${repo.fullName}`, err);
+                    // Mark fired even on failure so we don't tight-loop a broken
+                    // repo across ticks. The exponential backoff in
+                    // handlePollError still throttles globally.
+                    this.markRepoFired(repo.fullName, nowMs);
+                }
+            }
+            if (!anyFailed) {
+                this.consecutiveFailures = 0;
+            }
+        }
+        finally {
+            this.polling = false;
+        }
+    }
+    /**
+     * Per-row scheduling helpers. Returns the override (seconds) only
+     * when one is configured *and* longer than the global tick. Rows
+     * with no override (or an override <= global) fall through to the
+     * "every tick" cadence — the global `setInterval` already enforces
+     * that floor, so we don't need a per-row mark.
+     */
+    getRepoOverrideSeconds(fullName) {
+        const override = this.repoIntervals.get(fullName);
+        if (typeof override === "number" && override > this.globalIntervalSeconds) {
+            return override;
+        }
+        return null;
+    }
+    /**
+     * True when the row is due for its next poll. Rows with no override
+     * (the common case) are always due — `nextFireAt` is never set for
+     * them. Rows with a longer override are gated until the override
+     * window elapses.
+     */
+    isRepoDue(fullName, nowMs) {
+        const override = this.getRepoOverrideSeconds(fullName);
+        if (override === null)
+            return true;
+        const next = this.nextFireAt.get(fullName);
+        return next === undefined || nowMs >= next;
+    }
+    markRepoFired(fullName, nowMs) {
+        const override = this.getRepoOverrideSeconds(fullName);
+        if (override === null)
+            return; // no gating needed
+        this.nextFireAt.set(fullName, nowMs + override * 1000);
+    }
+    handlePollError(scope, err) {
+        this.consecutiveFailures++;
+        this.skipRemaining = Math.min(2 ** (this.consecutiveFailures - 1), 16);
+        const message = err instanceof Error ? err.message : String(err);
+        if (message.includes("ENOENT") || message.includes("not found")) {
+            logger.warn({ scope, consecutiveFailures: this.consecutiveFailures, skipRemaining: this.skipRemaining }, "`gh` CLI is not on PATH — install via `brew install gh` (or platform equivalent), then `gh auth login`. Backing off.");
+        }
+        else if (message.includes("authentication") || message.includes("401")) {
+            logger.warn({ scope, consecutiveFailures: this.consecutiveFailures, skipRemaining: this.skipRemaining }, "GitHub poll failed (auth) — run `gh auth status` to verify; backing off.");
+        }
+        else if (message.includes("rate limit") || message.includes("429")) {
+            logger.warn({ scope, consecutiveFailures: this.consecutiveFailures, skipRemaining: this.skipRemaining }, "GitHub rate limited — backing off");
+        }
+        else {
+            logger.error({ scope, err, consecutiveFailures: this.consecutiveFailures, skipRemaining: this.skipRemaining }, "GitHub poll failed — backing off");
+        }
+    }
+    async pollNotifications() {
+        const lastEtag = readRuntimeState(this.db, NOTIF_ETAG_KEY);
+        const lastModified = readRuntimeState(this.db, NOTIF_LAST_MODIFIED_KEY);
+        const args = ["api", "notifications", "--include"];
+        if (lastEtag)
+            args.push("-H", `If-None-Match: ${lastEtag}`);
+        if (lastModified)
+            args.push("-H", `If-Modified-Since: ${lastModified}`);
+        const result = await this.runner(args);
+        const { headers, body, statusCode } = parseGhIncludeResponse(result.stdout);
+        if (statusCode === 304) {
+            return; // No changes — cheapest path, also no rate-quota cost.
+        }
+        if (statusCode === 0) {
+            // No HTTP status parsed — gh CLI itself failed (network down, binary
+            // missing, killed). Surface with whatever stderr / exit signal we have.
+            throw new Error(`gh api notifications failed: ${result.stderr || result.stdout || `exit ${result.exitCode}`}`);
+        }
+        if (statusCode < 200 || statusCode >= 300) {
+            throw new Error(`gh api notifications returned ${statusCode}: ${result.stderr || body}`);
+        }
+        let notifications;
+        try {
+            notifications = JSON.parse(body);
+        }
+        catch (err) {
+            throw new Error(`Failed to parse notifications JSON: ${err.message}`);
+        }
+        // Process items first; only persist new ETag/Last-Modified after the
+        // batch lands. If processing throws midway the next tick re-fetches
+        // the whole window — idempotency on (source, ref) absorbs the duplicate
+        // recording, and the EventBus emit is gated by isObservationFresh.
+        for (const n of notifications) {
+            if (!this.shouldProcessNotification(n))
+                continue;
+            const binding = this.findBindingForNotification(n);
+            this.applyClassification(classifyNotification(n), binding);
+        }
+        const etag = headers["etag"];
+        const lastMod = headers["last-modified"];
+        if (etag)
+            writeRuntimeState(this.db, NOTIF_ETAG_KEY, etag);
+        if (lastMod)
+            writeRuntimeState(this.db, NOTIF_LAST_MODIFIED_KEY, lastMod);
+    }
+    async pollWorkflowRuns(repo) {
+        // No cursor — fetch the latest 30 failed runs every tick. The GitHub
+        // API returns most-recent-first, so this is bounded; the (source, ref)
+        // idempotency check handles re-emission. Filtering by `created>cursor`
+        // would silently drop long-running workflows that fail later than their
+        // creation timestamp suggests.
+        const filterArg = `repos/${repo.owner}/${repo.repo}/actions/runs?status=failure&per_page=30`;
+        const env = await this.resolveAccountEnv(repo.accountAlias);
+        // Preserve the legacy single-argument call shape when no env overlay
+        // is in play. Tests assert `toHaveBeenCalledWith([...])` without a
+        // trailing options arg, and dropping the second positional means a
+        // pre-multi-account caller's runner stub keeps matching.
+        const result = env
+            ? await this.runner(["api", filterArg], { env })
+            : await this.runner(["api", filterArg]);
+        if (result.exitCode !== 0) {
+            throw new Error(`gh api ${filterArg} failed: ${result.stderr || result.stdout || `exit ${result.exitCode}`}`);
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(result.stdout);
+        }
+        catch (err) {
+            throw new Error(`Failed to parse workflow_runs JSON: ${err.message}`);
+        }
+        const runs = parsed.workflow_runs ?? [];
+        // Cold-start: if no observations exist yet for this repo's workflow
+        // source, this is the first time the poller has seen this repo.
+        // Recording without emit prevents the user from getting one HIGH DM
+        // per historical default-branch failure when they first enable the
+        // integration. After the cold batch is in the table, future polls
+        // emit only for genuinely new failures (idempotency check passes only
+        // for refs absent from the table).
+        const cold = isWorkflowRepoCold(this.db, repo.fullName);
+        for (const run of runs) {
+            const classification = classifyWorkflowRun(run, repo.defaultBranch, repo.fullName);
+            if (classification.kind === "skip")
+                continue;
+            if (cold) {
+                recordObservation(this.db, {
+                    source: classification.source,
+                    ref: classification.ref,
+                    changeType: classification.changeType,
+                    actor: "user",
+                    payload: classification.payload,
+                });
+            }
+            else {
+                this.applyClassification(classification, repo);
+            }
+        }
+    }
+    /**
+     * Apply a classifier verdict — record the observation (UPSERT-idempotent
+     * on the partial unique index) and emit to the EventBus only when the
+     * (source, ref) pair has not been recorded before. The pre-check guards
+     * against re-DM-ing the user about a notification that re-appears on
+     * subsequent polls before the user dismisses it on GitHub.
+     */
+    applyClassification(classification, binding = null) {
+        if (classification.kind === "skip")
+            return;
+        const isFresh = isObservationFresh(this.db, classification.source, classification.ref);
+        recordObservation(this.db, {
+            source: classification.source,
+            ref: classification.ref,
+            changeType: classification.changeType,
+            actor: "user",
+            payload: classification.payload,
+        });
+        if (classification.emitEvent && isFresh) {
+            this.eventBus.put(createEvent({
+                type: classification.eventType,
+                source: "github-poller",
+                priority: classification.priority,
+                data: classification.payload,
+            }));
+            logger.info({
+                eventType: classification.eventType,
+                priority: EventPriority[classification.priority],
+                ref: classification.ref,
+            }, "GitHub event emitted");
+        }
+        // Trigger evaluator hook (unified-repositories §4.4). Fires for every
+        // fresh observation — `emitEvent` gates the broadcast to the existing
+        // task-flow pipeline, but per-repo triggers should fire regardless of
+        // priority (a user-defined trigger on `github.notification` is valid
+        // even though the classifier doesn't broadcast that key by default).
+        if (isFresh && this.onTriggerableEvent) {
+            Promise.resolve(this.onTriggerableEvent({
+                binding,
+                eventType: classification.eventType,
+                source: classification.source,
+                ref: classification.ref,
+                payload: classification.payload,
+            })).catch((err) => {
+                logger.warn({
+                    err,
+                    eventType: classification.eventType,
+                    ref: classification.ref,
+                }, "GitHub trigger hook failed");
+            });
+        }
+    }
+    /**
+     * Match a notification's `repository.full_name` against the resolved
+     * `repos` list so trigger dispatch can carry the binding through. Returns
+     * null when the notification's repo isn't watched (which happens for the
+     * global-inbox path with no `directNotificationRepos` filter).
+     */
+    findBindingForNotification(notification) {
+        const target = notification.repository.full_name.toLowerCase();
+        return (this.repos.find((b) => b.fullName.toLowerCase() === target) ?? null);
+    }
+    async resolveRepoBindings() {
+        const out = [];
+        for (const localPath of this.repoPaths) {
+            try {
+                const remoteResult = await execFileAsync("git", ["remote", "get-url", "origin"], { cwd: localPath, timeout: 5000 });
+                const parsed = parseGitHubRemote(remoteResult.stdout);
+                if (!parsed) {
+                    logger.debug({ localPath }, "Skipping non-GitHub remote");
+                    continue;
+                }
+                const fullName = `${parsed.owner}/${parsed.repo}`;
+                const accountAlias = this.repoAccountAliasResolver?.({
+                    localPath,
+                    fullName,
+                });
+                // Resolve env BEFORE the default-branch lookup so private repos
+                // accessible only via the aliased credential don't silently fall
+                // back to "main" — that wrong branch would freeze onto the binding
+                // for the lifetime of the poller and break `git.merge_to_default`.
+                const env = await this.resolveAccountEnv(accountAlias);
+                const defaultBranch = await this.fetchDefaultBranch(parsed.owner, parsed.repo, env);
+                out.push({
+                    localPath,
+                    owner: parsed.owner,
+                    repo: parsed.repo,
+                    fullName,
+                    defaultBranch,
+                    ...(accountAlias ? { accountAlias } : {}),
+                });
+            }
+            catch (err) {
+                logger.warn({ localPath, err: err.message }, "Failed to resolve GitHub remote — skipping");
+            }
+        }
+        for (const configured of this.repoFullNames) {
+            const parsed = parseGitHubRepoFullName(configured);
+            if (!parsed) {
+                logger.warn({ repo: configured }, "Invalid configured GitHub repo — skipping");
+                continue;
+            }
+            const accountAlias = this.repoAccountAliasResolver?.({
+                fullName: parsed.fullName,
+            });
+            const env = await this.resolveAccountEnv(accountAlias);
+            const defaultBranch = await this.fetchDefaultBranch(parsed.owner, parsed.repo, env);
+            out.push({
+                owner: parsed.owner,
+                repo: parsed.repo,
+                fullName: parsed.fullName,
+                defaultBranch,
+                ...(accountAlias ? { accountAlias } : {}),
+            });
+        }
+        return out;
+    }
+    /**
+     * Wrap `accountResolver` invocation with the standard try/catch that
+     * keeps a misconfigured alias from stalling the entire poll cycle.
+     * Returns `undefined` for repos without an alias OR when the resolver
+     * throws — both fall back to the daemon's own env.
+     */
+    async resolveAccountEnv(accountAlias) {
+        if (!accountAlias || !this.accountResolver)
+            return undefined;
+        try {
+            return await this.accountResolver({ accountAlias });
+        }
+        catch (err) {
+            logger.warn({ alias: accountAlias, err }, "GitHub per-repo credential resolution failed — falling back to default profile");
+            return undefined;
+        }
+    }
+    shouldProcessNotification(notification) {
+        if (this.directNotificationRepos.size === 0)
+            return true;
+        return this.directNotificationRepos.has(notification.repository.full_name.toLowerCase());
+    }
+    async fetchDefaultBranch(owner, repo, env) {
+        try {
+            const result = env
+                ? await this.runner(["api", `repos/${owner}/${repo}`, "--jq", ".default_branch"], { env })
+                : await this.runner([
+                    "api",
+                    `repos/${owner}/${repo}`,
+                    "--jq",
+                    ".default_branch",
+                ]);
+            const branch = result.stdout.trim();
+            if (!branch)
+                return "main";
+            return branch;
+        }
+        catch (err) {
+            logger.warn({ owner, repo, err: err.message }, "Default-branch lookup failed — falling back to 'main'");
+            return "main";
+        }
+    }
+}
+/**
+ * Default `gh` runner: invokes `execFile(ghBin, args)` via Node
+ * child_process. Caller-injected runners are used by tests to bypass the
+ * subprocess entirely. The factory captures `ghBin` so tests that pass
+ * `ghBin: "/path/to/fake/gh"` still work.
+ */
+function makeDefaultRunner(ghBin) {
+    return async (args, options) => {
+        try {
+            const { stdout, stderr } = await execFileAsync(ghBin, [...args], {
+                timeout: 30_000,
+                maxBuffer: 4 * 1024 * 1024,
+                ...(options?.env ? { env: options.env } : {}),
+            });
+            return { stdout, stderr, exitCode: 0 };
+        }
+        catch (err) {
+            const e = err;
+            // ENOENT: binary not on PATH. Surface with a marker substring the
+            // poller's error classifier can detect for an actionable log line.
+            if (e.code === "ENOENT") {
+                return {
+                    stdout: "",
+                    stderr: `ENOENT: gh CLI not found at "${ghBin}"`,
+                    exitCode: 127,
+                };
+            }
+            const exitCode = typeof e.code === "number" ? e.code : 1;
+            return {
+                stdout: e.stdout ?? "",
+                stderr: e.stderr ?? e.message ?? "",
+                exitCode,
+            };
+        }
+    };
+}
+function dedupeRepoBindings(bindings) {
+    const seen = new Set();
+    const deduped = [];
+    for (const binding of bindings) {
+        const key = binding.fullName.toLowerCase();
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        deduped.push(binding);
+    }
+    return deduped;
+}
+/**
+ * Parse the headers + body returned by `gh api --include`. Output looks like:
+ *
+ *   HTTP/2.0 200 OK
+ *   Etag: W/"abc"
+ *   Content-Type: application/json
+ *
+ *   [{...}]
+ *
+ * Headers are case-folded to lowercase. Both LF (`\n\n`) and CRLF
+ * (`\r\n\r\n`) header-body separators are recognized — `gh api` is
+ * implemented in Go and may emit either depending on GitHub server output.
+ *
+ * Returns `statusCode: 0` when no recognizable separator is present so
+ * callers can distinguish "no HTTP status parsed" from a legitimate 2xx.
+ *
+ * Exported for the test file; not used elsewhere.
+ */
+export function parseGhIncludeResponse(raw) {
+    const crlfIdx = raw.indexOf("\r\n\r\n");
+    const lfIdx = raw.indexOf("\n\n");
+    let splitIdx;
+    let separatorLen;
+    if (crlfIdx !== -1 && (lfIdx === -1 || crlfIdx <= lfIdx)) {
+        splitIdx = crlfIdx;
+        separatorLen = 4;
+    }
+    else if (lfIdx !== -1) {
+        splitIdx = lfIdx;
+        separatorLen = 2;
+    }
+    else {
+        return { statusCode: 0, headers: {}, body: raw };
+    }
+    const headerBlock = raw.slice(0, splitIdx);
+    const body = raw.slice(splitIdx + separatorLen);
+    // Split on either CRLF or LF — handles mixed-form responses defensively.
+    const lines = headerBlock.split(/\r?\n/);
+    let statusCode = 0;
+    const statusMatch = lines[0]?.match(/^HTTP\/[\d.]+\s+(\d+)/);
+    if (statusMatch)
+        statusCode = Number(statusMatch[1]);
+    const headers = {};
+    for (let i = 1; i < lines.length; i++) {
+        const colonIdx = lines[i].indexOf(":");
+        if (colonIdx === -1)
+            continue;
+        const name = lines[i].slice(0, colonIdx).trim().toLowerCase();
+        const value = lines[i].slice(colonIdx + 1).trim();
+        if (name)
+            headers[name] = value;
+    }
+    return { statusCode, headers, body };
+}
+/**
+ * Pre-check for orchestrator idempotency. Returns true when no row with this
+ * (source, ref) pair has ever been recorded — consumed or not. Used by
+ * `applyClassification` to gate EventBus emission. The observations UPSERT
+ * itself is idempotent on the partial unique index (consumed_at IS NULL),
+ * but the bus push is not — without this guard a still-unread notification
+ * would re-DM the user on every poll tick.
+ *
+ * Exported for tests.
+ */
+export function isObservationFresh(db, source, ref) {
+    const row = db
+        .prepare("SELECT 1 AS hit FROM observations WHERE source = ? AND ref = ? LIMIT 1")
+        .get(source, ref);
+    return row === undefined;
+}
+/**
+ * Cold-start detection for the workflow_runs path. Returns true when the
+ * observations table contains no rows keyed by `github:workflow:<repoFullName>`.
+ *
+ * Backs the rule: on first poll for a repository, record the latest
+ * failures without emit. After the cold batch is in the table, subsequent
+ * polls emit only for refs that aren't already in the table.
+ *
+ * Exported for tests.
+ */
+export function isWorkflowRepoCold(db, repoFullName) {
+    const row = db
+        .prepare("SELECT 1 AS hit FROM observations WHERE source = ? LIMIT 1")
+        .get(`github:workflow:${repoFullName}`);
+    return row === undefined;
+}
+//# sourceMappingURL=github-poller.js.map

package/dist/observers/github-poller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-poller.js","sourceRoot":"","sources":["../../src/observers/github-poller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,EACvB,iBAAiB,GAIlB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;AAE7C,MAAM,cAAc,GAAG,kCAAkC,CAAC;AAC1D,MAAM,uBAAuB,GAAG,2CAA2C,CAAC;AAwI5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,MAAM,OAAO,YAAY;IACd,IAAI,GAAG,QAAQ,CAAC;IAER,EAAE,CAAoB;IACtB,QAAQ,CAAW;IACnB,SAAS,CAAoB;IAC7B,aAAa,CAAoB;IACjC,cAAc,CAAS;IACvB,MAAM,CAAW;IACjB,oBAAoB,CAAgC;IACpD,uBAAuB,CAAsB;IAC7C,eAAe,CAEvB;IACQ,wBAAwB,CAEhC;IACQ,kBAAkB,CAE1B;IACQ,aAAa,CAAqC;IAClD,qBAAqB,CAAS;IAC/C,wEAAwE;IACvD,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEhD,KAAK,GAA0C,IAAI,CAAC;IACpD,KAAK,GAAkB,EAAE,CAAC;IAC1B,mBAAmB,GAAG,CAAC,CAAC;IACxB,aAAa,GAAG,CAAC,CAAC;IAClB,OAAO,GAAG,KAAK,CAAC;IAExB,YAAY,IAAyB;QACnC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;QACtD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;QACtD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC;QACpD,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC,wBAAwB,IAAI,IAAI,CAAC;QACtE,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC;QAC1D,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,GAAG,EAAE,CAAC;QACrD,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,mBAAmB,CAAC;QACtD,IAAI,CAAC,uBAAuB,GAAG,IAAI,GAAG,CACpC,IAAI,CAAC,aAAa;aACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;aACpE,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAC9D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK;QACT,oEAAoE;QACpE,wEAAwE;QACxE,uEAAuE;QACvE,+BAA+B;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,oBAAoB;YACpC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,oBAAoB,CAAC;YAChC,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE5C,sEAAsE;QACtE,wDAAwD;QACxD,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAElB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CACT;YACE,UAAU,EAAE,IAAI,CAAC,cAAc;YAC/B,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;SAChC,EACD,uBAAuB,CACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QACD,qEAAqE;QACrE,qEAAqE;QACrE,sCAAsC;QACtC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAEpB,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,IAAI,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACjC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,GAAG,IAAI,CAAC;gBACjB,IAAI,CAAC,eAAe,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;YAC7C,CAAC;YAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,8DAA8D;gBAC9D,2DAA2D;gBAC3D,8DAA8D;gBAC9D,6BAA6B;gBAC7B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC;oBAAE,SAAS;gBACpD,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;oBAClC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAC3C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,SAAS,GAAG,IAAI,CAAC;oBACjB,IAAI,CAAC,eAAe,CAAC,YAAY,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;oBACvD,6DAA6D;oBAC7D,gDAAgD;oBAChD,4CAA4C;oBAC5C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;YAED,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,sBAAsB,CAAC,QAAgB;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC1E,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACK,SAAS,CAAC,QAAgB,EAAE,KAAa;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3C,OAAO,IAAI,KAAK,SAAS,IAAI,KAAK,IAAI,IAAI,CAAC;IAC7C,CAAC;IAEO,aAAa,CAAC,QAAgB,EAAE,KAAa;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,CAAC,mBAAmB;QAClD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC;IACzD,CAAC;IAEO,eAAe,CAAC,KAAa,EAAE,GAAY;QACjD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAChE,MAAM,CAAC,IAAI,CACT,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,EAC3F,sHAAsH,CACvH,CAAC;QACJ,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzE,MAAM,CAAC,IAAI,CACT,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,EAC3F,0EAA0E,CAC3E,CAAC;QACJ,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrE,MAAM,CAAC,IAAI,CACT,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,EAC3F,mCAAmC,CACpC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,CACV,EAAE,KAAK,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,EAChG,kCAAkC,CACnC,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,MAAM,QAAQ,GAAG,gBAAgB,CAAS,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QACnE,MAAM,YAAY,GAAG,gBAAgB,CACnC,IAAI,CAAC,EAAE,EACP,uBAAuB,CACxB,CAAC;QAEF,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;QACnD,IAAI,QAAQ;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,QAAQ,EAAE,CAAC,CAAC;QAC5D,IAAI,YAAY;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,YAAY,EAAE,CAAC,CAAC;QAExE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAE5E,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;YACvB,OAAO,CAAC,uDAAuD;QACjE,CAAC;QACD,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACrB,qEAAqE;YACrE,wEAAwE;YACxE,MAAM,IAAI,KAAK,CACb,gCAAgC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ,MAAM,CAAC,QAAQ,EAAE,EAAE,CAC9F,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,GAAG,GAAG,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,iCAAiC,UAAU,KAAK,MAAM,CAAC,MAAM,IAAI,IAAI,EAAE,CACxE,CAAC;QACJ,CAAC;QAED,IAAI,aAAmC,CAAC;QACxC,IAAI,CAAC;YACH,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAyB,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,uCAAwC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,qEAAqE;QACrE,oEAAoE;QACpE,wEAAwE;QACxE,mEAAmE;QACnE,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC;gBAAE,SAAS;YACjD,MAAM,OAAO,GAAG,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC;YACnD,IAAI,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;QACzC,IAAI,IAAI;YAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;QAC3D,IAAI,OAAO;YAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,uBAAuB,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,IAAiB;QAC9C,qEAAqE;QACrE,uEAAuE;QACvE,uEAAuE;QACvE,wEAAwE;QACxE,+BAA+B;QAC/B,MAAM,SAAS,GACb,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,0CAA0C,CAAC;QAE7E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAE5D,qEAAqE;QACrE,mEAAmE;QACnE,mEAAmE;QACnE,yDAAyD;QACzD,MAAM,MAAM,GAAG,GAAG;YAChB,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC;YAChD,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,UAAU,SAAS,YAAY,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ,MAAM,CAAC,QAAQ,EAAE,EAAE,CAC7F,CAAC;QACJ,CAAC;QAED,IAAI,MAA+C,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAA4C,CAAC;QAChF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,uCAAwC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC;QAExC,oEAAoE;QACpE,gEAAgE;QAChE,oEAAoE;QACpE,mEAAmE;QACnE,kEAAkE;QAClE,sEAAsE;QACtE,mCAAmC;QACnC,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,cAAc,GAAG,mBAAmB,CACxC,GAAG,EACH,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,QAAQ,CACd,CAAC;YACF,IAAI,cAAc,CAAC,IAAI,KAAK,MAAM;gBAAE,SAAS;YAC7C,IAAI,IAAI,EAAE,CAAC;gBACT,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE;oBACzB,MAAM,EAAE,cAAc,CAAC,MAAM;oBAC7B,GAAG,EAAE,cAAc,CAAC,GAAG;oBACvB,UAAU,EAAE,cAAc,CAAC,UAAU;oBACrC,KAAK,EAAE,MAAM;oBACb,OAAO,EAAE,cAAc,CAAC,OAAO;iBAChC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,mBAAmB,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,mBAAmB,CACzB,cAA8B,EAC9B,UAA8B,IAAI;QAElC,IAAI,cAAc,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO;QAE3C,MAAM,OAAO,GAAG,kBAAkB,CAChC,IAAI,CAAC,EAAE,EACP,cAAc,CAAC,MAAM,EACrB,cAAc,CAAC,GAAG,CACnB,CAAC;QAEF,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE;YACzB,MAAM,EAAE,cAAc,CAAC,MAAM;YAC7B,GAAG,EAAE,cAAc,CAAC,GAAG;YACvB,UAAU,EAAE,cAAc,CAAC,UAAU;YACrC,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,cAAc,CAAC,OAAO;SAChC,CAAC,CAAC;QAEH,IAAI,cAAc,CAAC,SAAS,IAAI,OAAO,EAAE,CAAC;YACxC,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf,WAAW,CAAC;gBACV,IAAI,EAAE,cAAc,CAAC,SAAS;gBAC9B,MAAM,EAAE,eAAe;gBACvB,QAAQ,EAAE,cAAc,CAAC,QAAQ;gBACjC,IAAI,EAAE,cAAc,CAAC,OAAO;aAC7B,CAAC,CACH,CAAC;YACF,MAAM,CAAC,IAAI,CACT;gBACE,SAAS,EAAE,cAAc,CAAC,SAAS;gBACnC,QAAQ,EAAE,aAAa,CAAC,cAAc,CAAC,QAAQ,CAAC;gBAChD,GAAG,EAAE,cAAc,CAAC,GAAG;aACxB,EACD,sBAAsB,CACvB,CAAC;QACJ,CAAC;QAED,sEAAsE;QACtE,sEAAsE;QACtE,sEAAsE;QACtE,qEAAqE;QACrE,qEAAqE;QACrE,IAAI,OAAO,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACvC,OAAO,CAAC,OAAO,CACb,IAAI,CAAC,kBAAkB,CAAC;gBACtB,OAAO;gBACP,SAAS,EAAE,cAAc,CAAC,SAAS;gBACnC,MAAM,EAAE,cAAc,CAAC,MAAM;gBAC7B,GAAG,EAAE,cAAc,CAAC,GAAG;gBACvB,OAAO,EAAE,cAAc,CAAC,OAAO;aAChC,CAAC,CACH,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACd,MAAM,CAAC,IAAI,CACT;oBACE,GAAG;oBACH,SAAS,EAAE,cAAc,CAAC,SAAS;oBACnC,GAAG,EAAE,cAAc,CAAC,GAAG;iBACxB,EACD,4BAA4B,CAC7B,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,0BAA0B,CAChC,YAAgC;QAEhC,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;QAC/D,OAAO,CACL,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CACpE,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,mBAAmB;QAC/B,MAAM,GAAG,GAAkB,EAAE,CAAC;QAC9B,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,MAAM,aAAa,CACtC,KAAK,EACL,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAC/B,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAClC,CAAC;gBACF,MAAM,MAAM,GAAG,iBAAiB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBACtD,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,4BAA4B,CAAC,CAAC;oBAC1D,SAAS;gBACX,CAAC;gBACD,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAClD,MAAM,YAAY,GAAG,IAAI,CAAC,wBAAwB,EAAE,CAAC;oBACnD,SAAS;oBACT,QAAQ;iBACT,CAAC,CAAC;gBACH,gEAAgE;gBAChE,iEAAiE;gBACjE,mEAAmE;gBACnE,mEAAmE;gBACnE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;gBACvD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBACpF,GAAG,CAAC,IAAI,CAAC;oBACP,SAAS;oBACT,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,QAAQ;oBACR,aAAa;oBACb,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1C,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CACT,EAAE,SAAS,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,EAC1C,4CAA4C,CAC7C,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;YACnD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,2CAA2C,CAAC,CAAC;gBAC/E,SAAS;YACX,CAAC;YACD,MAAM,YAAY,GAAG,IAAI,CAAC,wBAAwB,EAAE,CAAC;gBACnD,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;YACvD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACpF,GAAG,CAAC,IAAI,CAAC;gBACP,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,aAAa;gBACb,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,iBAAiB,CAC7B,YAAgC;QAEhC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO,SAAS,CAAC;QAC7D,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,EAC5B,gFAAgF,CACjF,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,yBAAyB,CAAC,YAAgC;QAChE,IAAI,IAAI,CAAC,uBAAuB,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACzD,OAAO,IAAI,CAAC,uBAAuB,CAAC,GAAG,CACrC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE,CAChD,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,KAAa,EACb,IAAY,EACZ,GAAkC;QAElC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,GAAG;gBAChB,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CACf,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,IAAI,EAAE,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAC5D,EAAE,GAAG,EAAE,CACR;gBACH,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC;oBAChB,KAAK;oBACL,SAAS,KAAK,IAAI,IAAI,EAAE;oBACxB,MAAM;oBACN,iBAAiB;iBAClB,CAAC,CAAC;YACP,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM;gBAAE,OAAO,MAAM,CAAC;YAC3B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,EAC5C,uDAAuD,CACxD,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;CACF;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;gBAC/D,OAAO,EAAE,MAAM;gBACf,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;gBAC1B,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9C,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,GAIT,CAAC;YACF,kEAAkE;YAClE,mEAAmE;YACnE,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxB,OAAO;oBACL,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,gCAAgC,KAAK,GAAG;oBAChD,QAAQ,EAAE,GAAG;iBACd,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,OAAO;gBACL,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE;gBACtB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE;gBACnC,QAAQ;aACT,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAuB;IACjD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAKhD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,QAAgB,CAAC;IACrB,IAAI,YAAoB,CAAC;IACzB,IAAI,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC;QACzD,QAAQ,GAAG,OAAO,CAAC;QACnB,YAAY,GAAG,CAAC,CAAC;IACnB,CAAC;SAAM,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACxB,QAAQ,GAAG,KAAK,CAAC;QACjB,YAAY,GAAG,CAAC,CAAC;IACnB,CAAC;SAAM,CAAC;QACN,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,GAAG,YAAY,CAAC,CAAC;IAChD,yEAAyE;IACzE,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC7D,IAAI,WAAW;QAAE,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,QAAQ,KAAK,CAAC,CAAC;YAAE,SAAS;QAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAClC,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,EAAqB,EACrB,MAAc,EACd,GAAW;IAEX,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CACN,wEAAwE,CACzE;SACA,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACpB,OAAO,GAAG,KAAK,SAAS,CAAC;AAC3B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,EAAqB,EACrB,YAAoB;IAEpB,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CACN,4DAA4D,CAC7D;SACA,GAAG,CAAC,mBAAmB,YAAY,EAAE,CAAC,CAAC;IAC1C,OAAO,GAAG,KAAK,SAAS,CAAC;AAC3B,CAAC"}