@bragi-gmbh/codebus 1.2.0

package/dist/commands/plan-gh.js

@@ -0,0 +1,425 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { resolveConfig } from "../config.js";
+import { makeCtx } from "../client.js";
+import { render } from "../output.js";
+import { CodebusError } from "../errors.js";
+import { sendMessageCore } from "./send.js";
+import { ACT_DIRECTIVE_CORE } from "../directives.js";
+const execFileP = promisify(execFile);
+/**
+ * GitHub bridge (spec §A.2.5) — the marker-keyed issue flow.
+ *
+ * Round-1 review (CB-MSG-005365) BLOCKER 1/3 fix: gh-ensure no longer
+ * trusts caller-supplied --ticket/--repo as identity. It first calls
+ * `plan_gh_reserve(dispatch_id)` (supabase/migrations/0056_plan_gh_
+ * reserve_and_view_invoker.sql) — authenticated exactly like plan_gh_record
+ * (caller must be the dispatch's CURRENT recipient) — which returns the
+ * SERVER's own ticket_id/repo binding for that dispatch and takes a short
+ * per-ticket LEASE (closing the redelivery race where two concurrent
+ * gh-ensure runs could both see zero marker matches and both create a
+ * duplicate issue — BLOCKER 3). Caller-supplied --ticket/--repo, if given,
+ * are cross-checked against this server truth and REJECTED on mismatch —
+ * BEFORE any `gh` call — rather than trusted outright; if omitted, the
+ * server values are used directly. This RPC exists because 0049's RLS
+ * (`plan_visible`: owner/planner/workspace-admin only) gives the dispatch
+ * RECIPIENT itself no read access to plan_tickets/plan_ticket_dispatches —
+ * a plain SELECT as the worker returns zero rows — so a SECURITY DEFINER
+ * RPC authenticated on dispatch-recipient identity is the only path.
+ *
+ * gh-ensure never calls the real GitHub API in tests — the GhRunner
+ * interface is injected (default: realGhRunner(), which shells out to the
+ * `gh` binary); tests pass a mock recording invocations.
+ */
+export function planTicketMarker(ticketId) {
+    // HTML-comment wrapped, exact line, keyed by TICKET id (not dispatch id)
+    // per §A.2.5 — a re-dispatch after failure must still find the FIRST
+    // attempt's issue.
+    return `<!-- codebus-plan-ticket: ${ticketId} -->`;
+}
+/**
+ * Parses a github.com remote_url into 'owner/repo' (lowercased). Originally
+ * written to mirror 0049's plan_repo_from_remote_url SQL function —
+ * reimplemented here in TS rather than called via RPC, since that helper
+ * carries no explicit grant to `authenticated` (it's an internal helper
+ * invoked only from inside other SECURITY DEFINER functions; the CLI runs
+ * as an ordinary authenticated agent, never the migration-owning role).
+ *
+ * Round-16 review finding (CONFIRMED, MAJOR): that SQL function's own regex
+ * — and the ORIGINAL version of this one, which faithfully mirrored it — is
+ * UNANCHORED: it matches the literal substring `github.com` followed by
+ * `:` or `/` ANYWHERE in the input, not only at the start of the host
+ * component. `https://notgithub.com/acme/widgets` contains that exact
+ * substring (`notGITHUB.COM/acme/widgets`) and parsed to `acme/widgets` —
+ * identical to what the GENUINE `https://github.com/acme/widgets` parses
+ * to. 0070's own `repos_enforce_remote_url_normalized` trigger already
+ * closed this exact class of bug for `repos.remote_url` on the WRITE path
+ * (round-9 review finding 7a, via its own separate anchored host check
+ * BEFORE calling the SQL function) — but `ingest.ts`'s automatic repo
+ * resolution (resolveConnectedRepo) calls this function on the READ path
+ * against an ENTIRELY UNTRUSTED value: the local checkout's own `git
+ * remote get-url origin`, which no trigger ever validates. A checkout
+ * whose origin points at a lookalike host (`notgithub.com`, or
+ * `github.com.evil.com` — a subdomain-suffix trick, also unanchored-substring-
+ * matched by the old regex) would parse to the SAME `owner/repo` string as
+ * the genuine GitHub repo already connected in this workspace, and
+ * `ingest.ts`'s own equality match (`parseOwnerRepo(r.remote_url) ===
+ * ownerRepo`) would then attribute that checkout's local content to the
+ * genuine repo's graph record.
+ *
+ * Fixed by anchoring the host component precisely — mirroring the SAME
+ * technique repo.ts's own `parseGithubUrl` already uses correctly (verified:
+ * neither `notgithub.com` nor `github.com.evil.com` nor `gist.github.com`
+ * matches that function's anchored pattern either) — rather than a bare
+ * substring search: the literal `github.com` must appear starting
+ * IMMEDIATELY after the scheme (and optional userinfo `user@`) for the
+ * https/ssh forms, or immediately after `git@` for the scp-style form, with
+ * nothing else (no leading characters, no trailing characters before the
+ * required `:`/`/` delimiter) allowed to precede or extend it. Case-
+ * insensitive (matches GitHub's own case-insensitive host semantics).
+ *
+ * Audited every caller of this shared parser before fixing it here directly
+ * (rather than adding a separate anchored variant): both existing callers —
+ * this file's own `ghEnsureCore` (line ~196, parsing a DB-stored
+ * `repos.remote_url` that 0070's trigger already anchors at write time —
+ * unaffected by this fix, since a value that already passed that trigger's
+ * check is, by construction, an anchored github.com URL either way) and
+ * `ingest.ts`'s `resolveConnectedRepo` (the vulnerable read-path call this
+ * finding is about) — already assumed GitHub-only semantics; the pre-
+ * existing test suite (`plan-gh.test.ts`) already asserted a non-github.com
+ * host (gitlab.com) returns null, so no caller relies on this function
+ * accepting anything this fix newly rejects. No `graph-remote` file exists
+ * in this codebase to audit (checked). Deliberately does NOT add bare
+ * `owner/repo` (no-host) acceptance the way repo.ts's `parseGithubUrl`
+ * does — neither caller here ever passes a bare string (ingest.ts's input
+ * is always a real `git remote get-url` result; plan-gh.ts's is always a
+ * `repos.remote_url` already constrained to a full URL by 0070's trigger),
+ * so adding it now would be unrelated, untested scope creep, not a fix.
+ */
+export function parseOwnerRepo(remoteUrl) {
+    const s = remoteUrl.trim();
+    const tail = "([A-Za-z0-9._-]+)/([A-Za-z0-9._-]+?)(?:\\.git)?/?$";
+    const patterns = [
+        new RegExp(`^https?://(?:[^/@\\s]+@)?github\\.com(?::\\d+)?/${tail}`, "i"),
+        new RegExp(`^git@github\\.com:${tail}`, "i"),
+        new RegExp(`^ssh://git@github\\.com(?::\\d+)?/${tail}`, "i"),
+    ];
+    for (const re of patterns) {
+        const m = s.match(re);
+        if (m)
+            return `${m[1]}/${m[2].replace(/\.git$/i, "")}`.toLowerCase();
+    }
+    return null;
+}
+/**
+ * Round-19 review (Luna PR #55 review, 3 CONFIRMED findings — comments
+ * 3826839023/3826839028/3826839029 — all one theme, credential leakage via
+ * remote URLs): a git remote URL can legally embed HTTP Basic-style
+ * userinfo (`https://x-access-token:ghp_xxx@github.com/owner/repo` is a
+ * normal way to authenticate a clone). `parseOwnerRepo` above already
+ * discards that segment in its own return value (it is inside the
+ * non-capturing `(?:[^/@\s]+@)?` group, never one of the captured owner/
+ * repo groups), so parseOwnerRepo's OUTPUT was never the leak. The leak was
+ * always at the CALL SITES: every caller that echoes the RAW input URL back
+ * in an error message once parsing fails or a lookup comes up empty
+ * (`ingest.ts`'s resolveConnectedRepo, `repo.ts`'s repoConnectCore/
+ * validateOriginMatchesConnectedRepo, and this file's own dispatchAct)
+ * printed that string verbatim — including any credential it carried — to
+ * stderr/CI logs. `hasUrlUserinfo`/`redactUrlUserinfo` are the shared
+ * helpers every one of those call sites now uses (this file's own
+ * `ghEnsureCore`, below, included — same class of leak, found while
+ * sweeping for every other place a remote URL could reach error text);
+ * mirrors the identical
+ * pair added server-side in `supabase/migrations/0070_repo_connect.sql`
+ * (`has_url_userinfo`/`redact_url_userinfo`) — same regex, same contract,
+ * kept in the two languages this codebase actually needs it in rather than
+ * a single shared module neither side can import from the other.
+ */
+export function hasUrlUserinfo(url) {
+    // Userinfo lives between the scheme separator and the first '/' — i.e.
+    // anywhere in the authority component, never in the path/query/fragment.
+    // `[^/]*@` bounded by "no slash before the '@'" is exactly that
+    // component, so `https://github.com/user@example` (an '@' in the PATH,
+    // after the host) correctly does not match.
+    return /^https?:\/\/[^/]*@/.test(url);
+}
+/** No-op (returns `url` unchanged) when there is no userinfo to strip.
+ *  Otherwise replaces the ENTIRE matched `scheme://...@` prefix with
+ *  `scheme://[redacted]@`, so the host/path stay visible for debugging
+ *  while the credential itself never appears in output. MUST be called on
+ *  any variable holding a raw git remote URL before it appears in a thrown
+ *  error, a console.log/console.error, or any other human- or log-visible
+ *  text — never interpolate a raw remote/origin URL directly. */
+export function redactUrlUserinfo(url) {
+    return url.replace(/^(https?:\/\/)[^/]*@/, "$1[redacted]@");
+}
+/**
+ * Round-1 review (CB-MSG-005365) finding 4/MINOR-3 fix: `filterMarkerMatches`
+ * used to check `body.includes(marker)` — a plain substring test, so a
+ * lookalike body carrying the marker text with an adversarial PREFIX or
+ * SUFFIX on the same line (e.g. `xxx<!-- codebus-plan-ticket: ID -->`, or
+ * the marker embedded mid-sentence) would be treated as a match, even
+ * though it is not the exact marker LINE the spec requires ("the marker is
+ * the ONLY adoption key... an existing issue without the marker — however
+ * similar its title — is never adopted", §A.2.5). Fixed: split the body
+ * into lines, trim each, and require EXACT equality with the marker on at
+ * least one line — a marker that is merely a substring of a longer line no
+ * longer counts.
+ */
+export function filterMarkerMatches(rows, marker) {
+    return rows
+        .filter((row) => (row.body ?? "").split(/\r\n|\r|\n/).some((line) => line.trim() === marker))
+        .map((row) => ({ number: row.number, state: row.state.toLowerCase(), body: row.body }));
+}
+export function realGhRunner() {
+    return {
+        /* c8 ignore start -- shells out to the real `gh` binary/GitHub API. The
+         * whole point of the GhRunner injection point (see the file header) is
+         * that the test suite NEVER exercises this — every ghEnsureCore test
+         * passes its own mock explicitly, by design ("gh-ensure never calls the
+         * real GitHub API in tests"). Exercising this body for real would mean
+         * either shelling to an actually-installed, authenticated `gh` in CI, or
+         * hitting github.com — neither is something this suite does. Same class
+         * of irreducible external I/O as github-login.ts's DEC-CB-009 EX-001
+         * exemption, scoped narrowly to just these two bodies (filterMarkerMatches
+         * below, which realGhRunner.search delegates to, IS covered directly). */
+        async search(ownerRepo, marker) {
+            const { stdout } = await execFileP("gh", [
+                "issue", "list", "--repo", ownerRepo, "--state", "all",
+                "--search", marker, "--json", "number,state,body", "--limit", "100",
+            ]);
+            const rows = JSON.parse(stdout);
+            return filterMarkerMatches(rows, marker);
+        },
+        async create(ownerRepo, title, body) {
+            const { stdout } = await execFileP("gh", ["issue", "create", "--repo", ownerRepo, "--title", title, "--body", body]);
+            const m = stdout.trim().match(/\/issues\/(\d+)\s*$/);
+            if (!m)
+                throw new CodebusError(`gh-ensure: could not parse an issue number from \`gh issue create\` output: ${stdout.trim()}`);
+            return Number(m[1]);
+        },
+        /* c8 ignore stop */
+    };
+}
+async function releaseReservation(ctx, dispatchId) {
+    // Best-effort — never let a release failure mask the real error/result.
+    try {
+        await ctx.supabase.rpc("plan_gh_reserve_release", { p_dispatch_id: dispatchId });
+    }
+    catch { /* release is an optimization; the lease's own TTL bounds the worst case */ }
+}
+/**
+ * The ensure procedure (§A.2.5), now fronted by the server-authoritative
+ * reservation (BLOCKER 1/3):
+ *  0. plan_gh_reserve(dispatch_id) — server-derived ticket/repo binding +
+ *     per-ticket lease; caller-supplied --ticket/--repo are cross-checked
+ *     against it and rejected on mismatch BEFORE any GitHub call.
+ *  1. search the repo (open+closed) for the EXACT marker line.
+ *  2. exactly one match -> ADOPT (plan_gh_record ... 'adopted').
+ *  3. zero matches -> `gh issue create` with the marker in the body, THEN
+ *     RE-SEARCH (finding 2/MAJOR "re-search-and-reconcile after create"):
+ *     an external actor (not subject to this process's own per-ticket
+ *     lease) could still have created a same-marker issue in the window
+ *     between our search and our create — if the post-create search now
+ *     finds MORE THAN ONE marked issue, this is treated exactly like an
+ *     initial multi-match (fail closed, never guess which one is "ours").
+ *     Otherwise plan_gh_record(..., 'created').
+ *  4. multiple matches (initial or post-create) -> do NOT guess:
+ *     gh_state='failed', owner alert (surfaced later by morning_queue's
+ *     gh_stalled exception); manual recovery is the owner closing
+ *     duplicates and re-running ensure.
+ * The reservation is released (best-effort) on every exit path so an
+ * immediate legitimate re-run is never blocked for the full lease window.
+ */
+export async function ghEnsureCore(ctx, opts, runner = realGhRunner()) {
+    const { data: reserveRows, error: reserveErr } = await ctx.supabase.rpc("plan_gh_reserve", {
+        p_dispatch_id: opts.dispatchId,
+    });
+    if (reserveErr)
+        throw new CodebusError(reserveErr.message);
+    const reserved = Array.isArray(reserveRows) ? reserveRows[0] : reserveRows;
+    if (!reserved)
+        throw new CodebusError(`gh-ensure: dispatch ${opts.dispatchId} did not resolve to a reservable ticket`);
+    // Cross-check caller-supplied --ticket/--repo against the SERVER'S OWN
+    // binding for this dispatch — BEFORE any GitHub side effect (BLOCKER 1).
+    // Caller args are now optional; when supplied they must agree exactly.
+    if (opts.ticketId !== undefined && opts.ticketId !== reserved.ticket_id) {
+        await releaseReservation(ctx, opts.dispatchId);
+        throw new CodebusError(`ticket_mismatch: --ticket ${opts.ticketId} does not match dispatch ${opts.dispatchId}'s ticket (${reserved.ticket_id})`);
+    }
+    if (opts.repo !== undefined && opts.repo !== reserved.repo_slug) {
+        await releaseReservation(ctx, opts.dispatchId);
+        throw new CodebusError(`repo_mismatch: --repo ${opts.repo} does not match dispatch ${opts.dispatchId}'s ticket repo (${reserved.repo_slug ?? "(none)"})`);
+    }
+    if (!reserved.repo_id || !reserved.remote_url) {
+        await releaseReservation(ctx, opts.dispatchId);
+        throw new CodebusError(`repo_required: ticket ${reserved.ticket_id} has no repo bound`);
+    }
+    const ticketId = reserved.ticket_id;
+    const ownerRepo = parseOwnerRepo(reserved.remote_url);
+    if (!ownerRepo) {
+        await releaseReservation(ctx, opts.dispatchId);
+        // Round-19 review finding (CONFIRMED, credential-leakage theme):
+        // reserved.remote_url is a stored repos.remote_url — 0070's own
+        // trigger now rejects userinfo at write time, but a legacy row
+        // predating that fix could still carry one; never echo it raw.
+        throw new CodebusError(`unknown_repo: could not parse owner/repo from remote_url: ${redactUrlUserinfo(reserved.remote_url)}`);
+    }
+    const title = opts.title ?? reserved.title;
+    const marker = planTicketMarker(ticketId);
+    try {
+        const matches = await runner.search(ownerRepo, marker);
+        if (matches.length === 1) {
+            const ref = `issue:${ownerRepo}#${matches[0].number}`;
+            const { error } = await ctx.supabase.rpc("plan_gh_record", {
+                p_dispatch_id: opts.dispatchId, p_ref: ref, p_gh_state: "adopted",
+            });
+            if (error)
+                throw new CodebusError(error.message);
+            return { ref, state: "adopted", issueNumber: matches[0].number };
+        }
+        if (matches.length === 0) {
+            const body = `${opts.body ?? ""}\n\n${marker}\n`.trim();
+            const issueNumber = await runner.create(ownerRepo, title, body);
+            // Re-search-and-reconcile (finding 2/MAJOR): a marker match is keyed
+            // by TICKET id, which this process's own reservation lease
+            // serializes against OTHER CodeBus callers — but not against an
+            // external actor creating a same-marker issue directly on GitHub in
+            // the window between our search and our create. Re-checking here
+            // catches that residual race rather than blindly trusting our own
+            // create() call.
+            const postCreateMatches = await runner.search(ownerRepo, marker);
+            if (postCreateMatches.length > 1) {
+                const { error: failErr } = await ctx.supabase.rpc("plan_gh_record", {
+                    p_dispatch_id: opts.dispatchId, p_ref: "issue:unresolved/post-create-multi-match#1", p_gh_state: "failed",
+                });
+                if (failErr)
+                    throw new CodebusError(failErr.message);
+                throw new CodebusError(`gh-ensure: created issue #${issueNumber} in ${ownerRepo}, but a re-search now finds `
+                    + `${postCreateMatches.length} marked issues for ticket ${ticketId} — a concurrent external actor `
+                    + "created a duplicate; refusing to guess which is authoritative. Close the duplicates and re-run gh-ensure.");
+            }
+            const ref = `issue:${ownerRepo}#${issueNumber}`;
+            const { error } = await ctx.supabase.rpc("plan_gh_record", {
+                p_dispatch_id: opts.dispatchId, p_ref: ref, p_gh_state: "created",
+            });
+            if (error)
+                throw new CodebusError(error.message);
+            return { ref, state: "created", issueNumber };
+        }
+        // Multiple matches (initial search): fail closed rather than guess.
+        // plan_gh_record's 'failed' branch ignores p_ref entirely (only
+        // 'created'/'adopted' normalize+bind it) — the placeholder value below
+        // is never persisted.
+        const { error } = await ctx.supabase.rpc("plan_gh_record", {
+            p_dispatch_id: opts.dispatchId, p_ref: "issue:unresolved/multi-match#1", p_gh_state: "failed",
+        });
+        if (error)
+            throw new CodebusError(error.message);
+        throw new CodebusError(`gh-ensure: ${matches.length} issues in ${ownerRepo} carry the marker for ticket ${ticketId} — `
+            + "refusing to guess (ambiguous_marker); close the duplicates and re-run gh-ensure");
+    }
+    finally {
+        await releaseReservation(ctx, opts.dispatchId);
+    }
+}
+/**
+ * Reconciliation sweep (§A.2.5 lane 3): for dispatches `sent` with
+ * `gh_state='pending'` for over `staleSeconds` (default 1h), nudge the
+ * recipient to re-run gh-ensure — the keeper never holds a GitHub PAT
+ * itself, and this sweep never calls the `gh` binary.
+ *
+ * Round-1 review (CB-MSG-005365) MINOR finding 6 fix: this used to
+ * re-nudge EVERY qualifying dispatch on EVERY run with no cooldown — a
+ * periodic sweep would spam the recipient indefinitely while gh_state
+ * stayed 'pending'. The claim+cooldown is now atomic server-side
+ * (`plan_gh_sweep_claim`, 0056): it marks `gh_last_nudged_at` in the same
+ * transaction that selects candidates (`FOR UPDATE SKIP LOCKED`), so
+ * concurrent sweep runs cannot double-nudge and a repeat run within
+ * `cooldownSeconds` (default 1h) claims nothing for an already-nudged
+ * dispatch. plan_visible() scoping (owner/planner/workspace-admin) is
+ * re-applied INSIDE the RPC, since a SECURITY DEFINER function's own
+ * queries do not otherwise inherit the caller's RLS.
+ */
+export async function ghSweepCore(ctx, opts = {}) {
+    const { data, error } = await ctx.supabase.rpc("plan_gh_sweep_claim", {
+        p_stale_seconds: opts.staleSeconds ?? 3600,
+        p_cooldown_seconds: opts.cooldownSeconds ?? 3600,
+    });
+    if (error)
+        throw new CodebusError(error.message);
+    const nudged = [];
+    for (const row of (data ?? [])) {
+        // Round-4 review IMPORTANT finding (comment 3810828378): plan_gh_sweep_claim
+        // (0056) already committed `gh_last_nudged_at` for this dispatch in its OWN
+        // transaction above — a failure in the sendMessageCore call below (a
+        // transient network error, or the recipient having lost workspace
+        // membership between claim and send) must not leave that watermark set
+        // with no nudge ever delivered, or this dispatch would go silent for the
+        // whole cooldown window. Same outbox discipline as everywhere else in
+        // this program (0047 fleet_drain, 0057 plan_drain): couple the claim to
+        // successful delivery, release on failure, and — mirroring 0057
+        // plan_drain's per-row exception isolation — never let one bad row abort
+        // nudges already earned by the rest of the batch.
+        try {
+            await sendMessageCore(ctx, {
+                to: row.recipient_slug,
+                type: "ask",
+                subject: `gh-ensure nudge: dispatch ${row.dispatch_id}`,
+                body: `Reconciliation sweep: dispatch ${row.dispatch_id} (ticket ${row.ticket_id}, "${row.title}") has been `
+                    + `gh_state=pending for a while. Please re-run: codebus plan gh-ensure ${row.dispatch_id} --title "${row.title}"`,
+                // House mail contract (round-1 review finding 2): a work order must
+                // instruct the recipient to act and reply with the outcome, never
+                // bare-acknowledge. `required_action` is the dedicated field
+                // read/inbox render FIRST (delivery gap #9) — reusing the shared
+                // ACT_DIRECTIVE_CORE text here (not hand-rolled) keeps this nudge
+                // consistent with every other surface that delivers mail. The
+                // watch-loop-only REARM suffix (ACT_DIRECTIVE) does not apply — this
+                // is a one-off nudge, not a standing-loop emission.
+                requiredAction: ACT_DIRECTIVE_CORE,
+            });
+            nudged.push({ dispatchId: row.dispatch_id, ticketId: row.ticket_id, recipient: row.recipient_slug });
+        }
+        catch (sendErr) {
+            try {
+                await ctx.supabase.rpc("plan_gh_sweep_release", { p_dispatch_id: row.dispatch_id });
+            }
+            catch (releaseErr) {
+                // Best-effort: if the release itself fails too, the watermark stays
+                // set and this dispatch simply waits out the cooldown like any other
+                // transient miss would — surfaced here, not fatal to the batch.
+                console.error(`plan gh-sweep: dispatch ${row.dispatch_id} failed to send AND failed to release its watermark `
+                    + `(send: ${sendErr.message}; release: ${releaseErr.message})`);
+                continue;
+            }
+            console.error(`plan gh-sweep: dispatch ${row.dispatch_id} failed to send, watermark released for retry: ${sendErr.message}`);
+        }
+    }
+    return { nudged };
+}
+export function registerPlanGh(plan, g) {
+    g(plan.command("gh-ensure").argument("<dispatch-id>"))
+        .option("--ticket <uuid>", "cross-check only — the server derives the ticket from the dispatch itself; a mismatch is rejected before any GitHub call")
+        .option("--repo <slug>", "cross-check only — the server derives the repo from the dispatch's ticket; a mismatch is rejected before any GitHub call")
+        .option("--title <t>", "issue title to use if a new issue must be created (defaults to the ticket's own title)")
+        .option("--body <b>", "extra issue body text (the marker line is always appended)")
+        .action(async (dispatchId, o) => {
+        const ctx = await makeCtx(resolveConfig(o));
+        const result = await ghEnsureCore(ctx, {
+            dispatchId: Number(dispatchId), ticketId: o.ticket, repo: o.repo, title: o.title, body: o.body,
+        });
+        console.log(render([{ dispatch_id: Number(dispatchId), ref: result.ref, state: result.state }], { json: !!o.json }));
+    });
+    g(plan.command("gh-sweep"))
+        .option("--stale-hours <n>", "hours pending before a dispatch qualifies for a nudge", "1")
+        .option("--cooldown-hours <n>", "hours to wait before re-nudging the same dispatch", "1")
+        .action(async (o) => {
+        const ctx = await makeCtx(resolveConfig(o));
+        const result = await ghSweepCore(ctx, {
+            staleSeconds: Number(o.staleHours ?? "1") * 3600,
+            cooldownSeconds: Number(o.cooldownHours ?? "1") * 3600,
+        });
+        console.log(render(result.nudged.map((n) => ({ dispatch_id: n.dispatchId, ticket_id: n.ticketId, nudged: n.recipient })), { json: !!o.json }));
+    });
+}
+//# sourceMappingURL=plan-gh.js.map

package/dist/commands/plan-gh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-gh.js","sourceRoot":"","sources":["../../src/commands/plan-gh.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,aAAa,EAAa,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,OAAO,EAAO,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEtC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,yEAAyE;IACzE,qEAAqE;IACrE,mBAAmB;IACnB,OAAO,6BAA6B,QAAQ,MAAM,CAAC;AACrD,CAAC;AAWD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,oDAAoD,CAAC;IAClE,MAAM,QAAQ,GAAG;QACf,IAAI,MAAM,CAAC,mDAAmD,IAAI,EAAE,EAAE,GAAG,CAAC;QAC1E,IAAI,MAAM,CAAC,qBAAqB,IAAI,EAAE,EAAE,GAAG,CAAC;QAC5C,IAAI,MAAM,CAAC,qCAAqC,IAAI,EAAE,EAAE,GAAG,CAAC;KAC7D,CAAC;IACF,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtB,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,uEAAuE;IACvE,yEAAyE;IACzE,gEAAgE;IAChE,uEAAuE;IACvE,4CAA4C;IAC5C,OAAO,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;iEAMiE;AACjE,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,OAAO,GAAG,CAAC,OAAO,CAAC,sBAAsB,EAAE,eAAe,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAuD,EAAE,MAAc;IAEvE,OAAO,IAAI;SACR,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC,CAAC;SAC5F,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW,EAAuB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AACjH,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO;QACL;;;;;;;;;kFAS0E;QAC1E,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM;YAC5B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE;gBACvC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK;gBACtD,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,EAAE,KAAK;aACpE,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAsD,CAAC;YACrF,OAAO,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI;YACjC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YACrH,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACrD,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,YAAY,CAAC,+EAA+E,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/H,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;QACD,oBAAoB;KACrB,CAAC;AACJ,CAAC;AAgBD,KAAK,UAAU,kBAAkB,CAAC,GAAQ,EAAE,UAAkB;IAC5D,wEAAwE;IACxE,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,yBAAyB,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC,CAAC,2EAA2E,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAQ,EACR,IAA6F,EAC7F,SAAmB,YAAY,EAAE;IAEjC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,EAAE;QACzF,aAAa,EAAE,IAAI,CAAC,UAAU;KAC/B,CAAC,CAAC;IACH,IAAI,UAAU;QAAE,MAAM,IAAI,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAA8B,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IACtG,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,YAAY,CAAC,uBAAuB,IAAI,CAAC,UAAU,yCAAyC,CAAC,CAAC;IAEvH,uEAAuE;IACvE,yEAAyE;IACzE,uEAAuE;IACvE,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QACxE,MAAM,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,IAAI,YAAY,CACpB,6BAA6B,IAAI,CAAC,QAAQ,4BAA4B,IAAI,CAAC,UAAU,cAAc,QAAQ,CAAC,SAAS,GAAG,CACzH,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QAChE,MAAM,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,IAAI,YAAY,CACpB,yBAAyB,IAAI,CAAC,IAAI,4BAA4B,IAAI,CAAC,UAAU,mBAAmB,QAAQ,CAAC,SAAS,IAAI,QAAQ,GAAG,CAClI,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC9C,MAAM,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,IAAI,YAAY,CAAC,yBAAyB,QAAQ,CAAC,SAAS,oBAAoB,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC;IACpC,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/C,iEAAiE;QACjE,gEAAgE;QAChE,+DAA+D;QAC/D,+DAA+D;QAC/D,MAAM,IAAI,YAAY,CAAC,6DAA6D,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAChI,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC;IAC3C,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAEvD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,SAAS,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YACtD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,gBAAgB,EAAE;gBACzD,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS;aAClE,CAAC,CAAC;YACH,IAAI,KAAK;gBAAE,MAAM,IAAI,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACnE,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,OAAO,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YACxD,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAEhE,qEAAqE;YACrE,2DAA2D;YAC3D,gEAAgE;YAChE,oEAAoE;YACpE,iEAAiE;YACjE,kEAAkE;YAClE,iBAAiB;YACjB,MAAM,iBAAiB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACjE,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,gBAAgB,EAAE;oBAClE,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,4CAA4C,EAAE,UAAU,EAAE,QAAQ;iBAC1G,CAAC,CAAC;gBACH,IAAI,OAAO;oBAAE,MAAM,IAAI,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACrD,MAAM,IAAI,YAAY,CACpB,6BAA6B,WAAW,OAAO,SAAS,8BAA8B;sBACpF,GAAG,iBAAiB,CAAC,MAAM,6BAA6B,QAAQ,iCAAiC;sBACjG,2GAA2G,CAC9G,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,GAAG,SAAS,SAAS,IAAI,WAAW,EAAE,CAAC;YAChD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,gBAAgB,EAAE;gBACzD,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS;aAClE,CAAC,CAAC;YACH,IAAI,KAAK;gBAAE,MAAM,IAAI,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;QAChD,CAAC;QAED,oEAAoE;QACpE,gEAAgE;QAChE,uEAAuE;QACvE,sBAAsB;QACtB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,gBAAgB,EAAE;YACzD,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,gCAAgC,EAAE,UAAU,EAAE,QAAQ;SAC9F,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,MAAM,IAAI,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,IAAI,YAAY,CACpB,cAAc,OAAO,CAAC,MAAM,cAAc,SAAS,gCAAgC,QAAQ,KAAK;cAC9F,iFAAiF,CACpF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAID;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAQ,EAAE,OAA4D,EAAE;IAExE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,qBAAqB,EAAE;QACpE,eAAe,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;QAC1C,kBAAkB,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI;KACjD,CAAC,CAAC;IACH,IAAI,KAAK;QAAE,MAAM,IAAI,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAEjD,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAwF,EAAE,CAAC;QACtH,6EAA6E;QAC7E,4EAA4E;QAC5E,qEAAqE;QACrE,kEAAkE;QAClE,uEAAuE;QACvE,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,gEAAgE;QAChE,yEAAyE;QACzE,kDAAkD;QAClD,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,GAAG,EAAE;gBACzB,EAAE,EAAE,GAAG,CAAC,cAAc;gBACtB,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,6BAA6B,GAAG,CAAC,WAAW,EAAE;gBACvD,IAAI,EAAE,kCAAkC,GAAG,CAAC,WAAW,YAAY,GAAG,CAAC,SAAS,MAAM,GAAG,CAAC,KAAK,cAAc;sBACzG,uEAAuE,GAAG,CAAC,WAAW,aAAa,GAAG,CAAC,KAAK,GAAG;gBACnH,oEAAoE;gBACpE,kEAAkE;gBAClE,6DAA6D;gBAC7D,iEAAiE;gBACjE,kEAAkE;gBAClE,8DAA8D;gBAC9D,qEAAqE;gBACrE,oDAAoD;gBACpD,cAAc,EAAE,kBAAkB;aACnC,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;QACvG,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,uBAAuB,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YACtF,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,oEAAoE;gBACpE,qEAAqE;gBACrE,gEAAgE;gBAChE,OAAO,CAAC,KAAK,CACX,2BAA2B,GAAG,CAAC,WAAW,sDAAsD;sBAC9F,UAAW,OAAiB,CAAC,OAAO,cAAe,UAAoB,CAAC,OAAO,GAAG,CACrF,CAAC;gBACF,SAAS;YACX,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,2BAA2B,GAAG,CAAC,WAAW,kDAAmD,OAAiB,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1I,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAa,EAAE,CAA0B;IACtE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;SACnD,MAAM,CAAC,iBAAiB,EAAE,0HAA0H,CAAC;SACrJ,MAAM,CAAC,eAAe,EAAE,0HAA0H,CAAC;SACnJ,MAAM,CAAC,aAAa,EAAE,wFAAwF,CAAC;SAC/G,MAAM,CAAC,YAAY,EAAE,4DAA4D,CAAC;SAClF,MAAM,CAAC,KAAK,EAAE,UAAkB,EAAE,CAAgG,EAAE,EAAE;QACrI,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE;YACrC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;SAC/F,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACvH,CAAC,CAAC,CAAC;IAEL,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;SACxB,MAAM,CAAC,mBAAmB,EAAE,uDAAuD,EAAE,GAAG,CAAC;SACzF,MAAM,CAAC,sBAAsB,EAAE,mDAAmD,EAAE,GAAG,CAAC;SACxF,MAAM,CAAC,KAAK,EAAE,CAA8E,EAAE,EAAE;QAC/F,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE;YACpC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,GAAG,IAAI;YAChD,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,IAAI,GAAG,CAAC,GAAG,IAAI;SACvD,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,MAAM,CAChB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,EACrG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CACnB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC"}