@quickchatai/quickreview 0.0.0-stage → 1.1.0

package/dist/src/sessions.js

@@ -0,0 +1,541 @@
+// The daemon↔pi boundary: birth, wake, archive and kill of the per-PR
+// pi sessions.
+//
+// PR sessions are hosted by workers only (worker-session-host.ts); this file
+// no longer births, wakes or kills one. What stays is the tmux host of the
+// replay harness and the path/archive helpers the worker host shares.
+//
+// Shape of a session: a detached tmux session
+// running the pinned interactive pi TUI with cwd = the sandbox root, the
+// substituted system prompt passed by path, and the two sandbox extensions
+// loaded. The daemon never types into that TUI: it wakes the session by
+// dropping a Markdown file into inject/<session>/, which the inject-bridge
+// extension picks up (tmux send-keys is not used).
+//
+// pi's package is a dependency here, but its CLI is not run in tests; every
+// assumption about its CLI surface is tagged VERIFY-ON-PIN and confined to
+// buildPiCommand().
+import { randomUUID } from "node:crypto";
+import { mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { coreExtensionPath } from "./coreext.js";
+import { DEFAULT_SESSION_BRIDGE_READY_TIMEOUT_S, githubCloneDir, openVikingBaseUrl, } from "./config.js";
+import { OV_DEFAULT_BASE_URL, OV_REVIEWER_KEY_SECRET, OV_REVIEWER_USER, openVikingSessionEnv, ovSessionIdForPr, ovcliConfPathIn, ovRecallHintPathIn, ovRetiredPathIn, writeOvcliConf, } from "./memory/ovsession.js";
+import { waitForSessionBridgeReady, writeSessionBridgeState } from "./session-bridge.js";
+import { messagePayload } from "./session-command-payload.js";
+import { piCliPath } from "./picli.js";
+import { Tmux } from "./tmux.js";
+import { WorktreeManager } from "./worktrees.js";
+import { PrSessionLifecycle, prOfSession, prSessionName, } from "./pr-session-lifecycle.js";
+// The PR session naming lives with the lifecycle; sessions.ts keeps exporting it.
+export { prOfSession, prSessionName };
+/** Environment-variable prefixes that ride the `env K=V … pi …` argv (see
+ * spawnSession). `QCR_` is the daemon's routing surface; `OPENVIKING_` is the
+ * session's memory identity, which must be per-session and therefore cannot
+ * come from the tmux server environment; `GIT_CONFIG_` is the config-scope pin
+ * (see sessionGitConfigPins). Secrets are never prefixed — argv is
+ * world-readable — so no prefix carries a credential. */
+const ARGV_ENV_PREFIXES = ["QCR_", "OPENVIKING_", "GIT_CONFIG_"];
+/**
+ * The config-scope pin: which files git may read configuration from, decided by
+ * the daemon at spawn time rather than discovered by git at run time.
+ *
+ * Why this exists. `packages/pi-plugin/extensions/bash-guard.ts` vets command strings, and a
+ * command-string guard cannot see git's implicit config search path:
+ * `HOME=/tmp/evil git diff --no-index A B` executes arbitrary shell out of
+ * `$HOME/.gitconfig`, and a session can equally write the real
+ * `$HOME/.gitconfig` with its ordinary write tool and then run a plain
+ * `git diff` — no suspicious token anywhere for the guard to see. No length of
+ * blocklist reaches that.
+ *
+ * So the search path is not searched. Setting `GIT_CONFIG_GLOBAL` makes both
+ * `$HOME/.gitconfig` and `$XDG_CONFIG_HOME/git/config` inert — git consults the
+ * named file instead, so `HOME` and `XDG_CONFIG_HOME` stop being config
+ * vectors whether or not the guard knows their names. Verified by execution:
+ *
+ *   HOME=<evil> git diff --no-index A B                        → ran <cmd>
+ *   HOME=<evil> GIT_CONFIG_GLOBAL=<pin> git diff --no-index A B → did NOT run
+ *   XDG_CONFIG_HOME=<evil> …                                    → same pair
+ *
+ * …and end-to-end through the real spawn shape (`tmux new-session -d -s <n> -c
+ * <cwd> env K=V … <cmd>`), because tmux panes inherit the tmux server
+ * environment: a pin that rode the client env would silently do nothing.
+ * Hence `GIT_CONFIG_` in ARGV_ENV_PREFIXES above.
+ *
+ * The target is the pi HOME's own `.gitconfig` — the same file git would have
+ * found by searching — and not `/dev/null`: the container's entrypoint writes
+ * a `credential.helper` shell snippet into the global config
+ * (docker/entrypoint.sh, daemon mode), and `fetch` is deliberately on
+ * the session's read-verb allowlist because refusing it would wedge a review.
+ * The pinned file's own `credential.helper` is still read and still invoked
+ * (`git credential fill`), so nothing legitimate changes.
+ *
+ * What this does not do:
+ *
+ *   - It does not cover the repo scope. `<clone>/.git/config` is still read,
+ *     and a session that writes `diff.external` there gets execution from a
+ *     plain `git diff <base> <head>`. That half is closed at the write
+ *     boundary instead (`checkWritePath` in bash-guard), because git has no
+ *     "ignore the local config" switch to pin.
+ *   - It does not stop a caller re-pointing these three variables on the
+ *     command line: a later `GIT_CONFIG_GLOBAL=…` prefix wins over the spawn
+ *     environment. The bash guard's COMMAND_INJECTING_ENV blocks that, and
+ *     that block stays load-bearing. Env pins the floor; the guard stops it
+ *     being lifted.
+ */
+/** `QCR_SECRETS_MOUNT` from the daemon's own environment, when it names an
+ * absolute path (`docker/entrypoint.sh` exports it in every daemon container). */
+export function secretsMountEnv(env = process.env) {
+    const mount = env.QCR_SECRETS_MOUNT?.trim() ?? "";
+    return mount.startsWith("/") ? { QCR_SECRETS_MOUNT: mount } : {};
+}
+export function sessionGitConfigPins(piHome) {
+    return {
+        // The global scope, named rather than searched for.
+        GIT_CONFIG_GLOBAL: join(piHome, ".gitconfig"),
+        // The system scope, twice: the pointer AND the switch. Either alone is
+        // enough today; both because they are independent in git and cost nothing.
+        GIT_CONFIG_SYSTEM: "/dev/null",
+        GIT_CONFIG_NOSYSTEM: "1",
+    };
+}
+export function isSandboxSession(name) {
+    return prOfSession(name) !== undefined;
+}
+/**
+ * The pi argv for a session.
+ *
+ * VERIFY-ON-PIN, every flag:
+ * - `--model <provider/id>` — documented.
+ * - `--session-dir <path>` — documented for RPC mode; assumed to
+ *   apply to the interactive TUI as well. Per-session dir (not the shared
+ *   store) so archival can pick "the newest .jsonl" unambiguously — all PR
+ *   sessions share one cwd, so the cwd-keyed global store would mix them.
+ * - `--system-prompt <path>` — not documented; pi documents only the
+ *   `.pi/SYSTEM.md` / `~/.pi/agent/SYSTEM.md` override files. If no such flag
+ *   exists, fall back to writing the substituted prompt to
+ *   `<pi home>/.pi/SYSTEM.md` per session home (the substituted text is
+ *   already on disk at systemPromptPath either way).
+ * - `--extension <path>` — not documented; pi documents discovery dirs and a
+ *   settings.json "extensions" array. Fallback: emit the same paths into the
+ *   session's settings.json.
+ * - `--name <display name>` — documented.
+ * - `--theme <path>` — same flag the companion uses (VERIFY-ON-PIN); loads the
+ *   fleet muted theme so no session ever flashes pi's bright-green tool panel.
+ * There is deliberately no update/auto-update flag: the pi version is pinned by
+ * config.pi.version and the container image.
+ */
+export function buildPiCommand(spec) {
+    const argv = [
+        spec.piBin,
+        // --approve: pre-trust project-local .pi resources for this run. Without
+        // it a cwd carrying .pi/ (our settings.json) hits pi's interactive "Trust
+        // project folder?" modal and the session stalls forever. The reviewer
+        // never blocks on interactive input.
+        "--approve",
+        "--model",
+        spec.model,
+        "--session-dir",
+        spec.sessionDir,
+        "--system-prompt",
+        spec.systemPromptPath,
+    ];
+    if (spec.themePath)
+        argv.push("--theme", spec.themePath);
+    for (const ext of spec.extensionPaths)
+        argv.push("--extension", ext);
+    argv.push("--name", spec.sessionName);
+    return argv;
+}
+/** The lifecycle's host for a manager that hosts no PR session. The lifecycle
+ * is built for the paths, the archive record and the worktree sweep; a birth,
+ * kill or fence through it is a bug. Only spawn throws; the kill, fence and
+ * reuse operations are inert (`false` / `undefined`). */
+const NO_PR_HOST = {
+    liveSessions: async () => null,
+    provenGone: async () => false,
+    killConfirmed: async () => false,
+    stop: async () => undefined,
+    reuseLive: async () => undefined,
+    spawn: async (pr) => {
+        throw new Error(`the tmux manager hosts no PR session (#${pr}); workers are the only PR host`);
+    },
+};
+export class PiSessionManager {
+    cfg;
+    root;
+    tmux;
+    worktrees;
+    piBin;
+    piHome;
+    now;
+    commandStore;
+    configPath;
+    /** The host-neutral lifecycle, used here for its paths, the archive record
+     * and the worktree sweep only: this class hosts no PR session (the workers
+     * are the only PR host, src/worker-session-host.ts). */
+    lifecycle;
+    injectSeq = 0;
+    constructor(opts) {
+        this.cfg = opts.cfg;
+        this.root = opts.root;
+        this.tmux = opts.tmux ?? new Tmux({ exec: opts.exec });
+        this.worktrees =
+            opts.worktrees ??
+                new WorktreeManager({
+                    root: opts.root,
+                    repo: opts.cfg.github.repo,
+                    // [github] clone_dir when set, else the repo slug's basename
+                    // ("acme/widget-app" → "widget-app").
+                    cloneDir: githubCloneDir(opts.cfg.github),
+                    run: opts.exec,
+                });
+        this.piBin = opts.piBin ?? piCliPath();
+        this.piHome = opts.piHome ?? join(opts.root, "pihome");
+        this.now = opts.now ?? (() => new Date());
+        this.commandStore = opts.commandStore;
+        this.configPath = opts.configPath;
+        this.lifecycle = new PrSessionLifecycle({
+            cfg: opts.cfg,
+            root: opts.root,
+            worktrees: this.worktrees,
+            host: NO_PR_HOST,
+            ovSessions: opts.ovSessions,
+            now: this.now,
+            commandStore: opts.commandStore,
+        });
+    }
+    // ---- paths -------------------------------------------------------------
+    injectDir(session) {
+        return join(this.root, "inject", session);
+    }
+    promptPath(session) {
+        return join(this.root, "state", "session-prompts", `${session}.md`);
+    }
+    /** Where every session's `--session-dir` lives (one subdir per session). */
+    sessionsRoot() {
+        return this.lifecycle.sessionsRoot();
+    }
+    sessionDir(session) {
+        return this.lifecycle.sessionDir(session);
+    }
+    ledgerPath(session) {
+        return this.lifecycle.ledgerPath(session);
+    }
+    archiveDir(session) {
+        return this.lifecycle.archiveDir(session);
+    }
+    sessionCommandPayloadPath(id) {
+        return join(this.root, "state", "session-commands", `${id}.md`);
+    }
+    extensionPaths() {
+        return [
+            join(this.root, "extensions", "cli", "inject-bridge.ts"),
+            join(this.root, "extensions", "cli", "ledger-pin.ts"),
+            join(this.root, "extensions", "cli", "muted-theme.ts"),
+            // docs/duplicate-merge.md: the `cluster_findings` tool a round calls
+            // before pass-validate (`[review] dedup_merge`). The bench session
+            // loads the same file (src/bench/runner.ts), so both routes group
+            // candidates with one code path. Pure: it reads and writes nothing.
+            // It is the review core's, so it comes from the core package's own
+            // directory (src/coreext.ts), never from under this root.
+            coreExtensionPath("finding-clusters"),
+            // The vendored + patched OpenViking extension: the memory tools a
+            // session reaches. Last on purpose — it is the only extension
+            // here we did not write, and pi registers handlers in load order, so
+            // ours (ledger-pin above all) are in place before it arrives.
+            //
+            // It rides argv, not the global settings: a lens session loads no argv
+            // extensions, so a lens pass gets no memory surface at all. Its own
+            // PATCH 2 is the second layer.
+            //
+            // Its patches are load-bearing — read
+            // extensions/vendor/openviking-pi/README.md before touching this line.
+            // In particular PATCH 1 removes the extension's session_before_compact
+            // handler so ledger-pin stays the sole owner of compaction.
+            join(this.root, "extensions", "vendor", "openviking-pi", "index.ts"),
+        ];
+    }
+    /** The fleet muted theme — every pi session gets it (no bright greens). */
+    themePath() {
+        return join(this.root, "extensions", "muted-theme.json");
+    }
+    // ---- OpenViking identity ----------------------------------------------
+    /** `http://host:port` from `[openviking]`; a hand-rolled config without the
+     * block falls back to the loopback default (the port is never published). */
+    ovBaseUrl() {
+        const ov = this.cfg.openviking;
+        return ov ? openVikingBaseUrl(ov) : OV_DEFAULT_BASE_URL;
+    }
+    /** The OpenViking user the sessions act as: `[openviking] user`, the same
+     * identity the daemon's own clients use with the same confined key; a
+     * hand-rolled config without it falls back to the reviewer default. */
+    ovUser() {
+        return this.cfg.openviking?.user || OV_REVIEWER_USER;
+    }
+    /** The reviewer credential file every session resolves its key from. */
+    ovcliConfPath() {
+        return ovcliConfPathIn(this.piHome);
+    }
+    /** Where the daemon publishes the retired URIs the sessions' recall
+     * excludes — beside ovcli.conf. */
+    ovRetiredPath() {
+        return ovRetiredPathIn(this.piHome);
+    }
+    /** Where the daemon publishes a PR session's recall hint — the
+     * round's own context query, which the session's recall searches with
+     * instead of the whole round order. */
+    ovRecallHintPath(session) {
+        return ovRecallHintPathIn(this.piHome, session);
+    }
+    /**
+     * Write the reviewer user key into the pi HOME, 0600, before a session is
+     * born. The key is deliberately not an environment variable and not on the
+     * argv — `ps` is readable by anything in the container — and it can never be
+     * the server's root key: `writeOvcliConf` refuses that, leaving the session
+     * unauthenticated (a loud 401) rather than omnipotent (silent).
+     */
+    provisionOvCredentials() {
+        return writeOvcliConf(this.ovcliConfPath(), {
+            url: this.ovBaseUrl(),
+            apiKey: this.secret(OV_REVIEWER_KEY_SECRET) ?? "",
+            user: this.ovUser(),
+        }, {
+            serverConfigPath: this.cfg.openviking?.config_file,
+            log: (msg) => console.log(`[quickreviewd] sessions: ${msg}`),
+        });
+    }
+    // ---- environment -------------------------------------------------------
+    /** Read a secret file from the app's secrets dir (never from process.env). */
+    secret(name) {
+        const p = join(this.cfg.github.secrets_dir, name);
+        try {
+            const v = readFileSync(p, "utf8").trim();
+            return v.length > 0 ? v : undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    /**
+     * The environment a session runs in — built from scratch, never spread from
+     * process.env. Only the app credential path is reachable: the OpenAI key
+     * comes out of the app secrets dir, and GitHub auth is minted per command by
+     * scripts/mint-token.sh from the app PEM. No GH_TOKEN/GITHUB_TOKEN, no
+     * personal credential, is ever placed here (the App-only credential rule).
+     */
+    buildEnv(session, extra = {}) {
+        const env = {
+            PATH: process.env.PATH ?? "/usr/local/bin:/usr/bin:/bin",
+            HOME: this.piHome,
+            TERM: "xterm-256color",
+            LANG: "C.UTF-8",
+            QCR_SANDBOX_ROOT: this.root,
+            QCR_SESSION_NAME: session,
+            QCR_INJECT_DIR: this.injectDir(session),
+            QCR_LEDGER_FILE: this.ledgerPath(session),
+            QCR_SECRETS_DIR: this.cfg.github.secrets_dir,
+            // Inside a daemon container the secrets are the mount the entrypoint
+            // names, the install locator's first answer: the session's HOME holds no
+            // install home, so without it mint-token.sh (pr-checks.sh's sanctioned
+            // read) looks for the App id under that HOME and finds none (the 1.0.4
+            // cutover's first worker round). A path, not a credential; bash-guard
+            // also reads it into its secret-path set.
+            ...secretsMountEnv(),
+            QCR_PI_VERSION: this.cfg.pi.version,
+            // The engine lens tool's config (`[engine] lens_*`): the worker's lens
+            // runner reads these names back (lensRunConfigFromEnv).
+            QCR_SUBAGENT_MAX_CONCURRENCY: String(this.cfg.engine.lens_max_concurrency),
+            QCR_SUBAGENT_CACHE_GROUP: String(this.cfg.engine.lens_cache_group),
+            QCR_SUBAGENT_CACHE_STAGGER_MS: String(this.cfg.engine.lens_cache_stagger_ms),
+            // A stalled lens pass is aborted and retried once instead of holding the
+            // round. "0" switches it off.
+            QCR_SUBAGENT_PASS_DEADLINE_MIN: String(this.cfg.engine.lens_pass_deadline_min),
+            // The daemon's own resolved config, so the posting scripts read the
+            // file the daemon read. Set by the daemon — the bash guard
+            // refuses a session's own `QCR_CONFIG=` prefix.
+            ...(this.configPath ? { QCR_CONFIG: this.configPath } : {}),
+            // The config-scope pin. Here as well as on the argv because buildEnv
+            // is also the tmux client's environment; the argv copy is the
+            // one that reaches the pane (ARGV_ENV_PREFIXES carries `GIT_CONFIG_`).
+            ...sessionGitConfigPins(this.piHome),
+            ...(this.commandStore && this.commandStore.path !== ":memory:"
+                ? {
+                    QCR_STATE_DB: this.commandStore.path,
+                }
+                : {}),
+        };
+        const openai = this.secret("openai_api_key");
+        if (openai)
+            env.OPENAI_API_KEY = openai;
+        // OpenViking identity. Explicit, because every session shares one
+        // working directory and the extension's path-derived peer id therefore
+        // cannot tell two PRs apart. The PR's raw-notes session is attached by id;
+        // a non-PR session gets no session id (no raw tier, tools only). None of these is a secret — the key rides ovcli.conf at 0600.
+        const pr = prOfSession(session);
+        Object.assign(env, openVikingSessionEnv({
+            baseUrl: this.ovBaseUrl(),
+            user: this.ovUser(),
+            peerId: session,
+            cliConfigPath: this.ovcliConfPath(),
+            serverConfigPath: this.cfg.openviking?.config_file,
+            retiredFile: this.ovRetiredPath(),
+            ...(pr === undefined
+                ? {}
+                : {
+                    ovSessionId: ovSessionIdForPr(pr),
+                    recallHintFile: this.ovRecallHintPath(session),
+                }),
+        }));
+        return { ...env, ...extra };
+    }
+    // ---- birth / adoption --------------------------------------------------
+    writeAtomic(path, body) {
+        mkdirSync(dirname(path), { recursive: true });
+        const tmp = `${path}.tmp-${process.pid}-${this.injectSeq++}`;
+        writeFileSync(tmp, body);
+        renameSync(tmp, path);
+    }
+    /** Substituted system prompt on disk; pi gets it by path. */
+    writeSystemPrompt(session, body) {
+        const path = this.promptPath(session);
+        this.writeAtomic(path, body);
+        return path;
+    }
+    /** Birth an arbitrary session (the replay harness). A
+     * daemon-owned birth is not complete when tmux returns: the exact Pi
+     * generation must prove that its inject bridge opened and swept the mailbox
+     * first. */
+    async spawnSession(session, systemPromptBody, model, extraEnv = {}) {
+        const promptPath = this.writeSystemPrompt(session, systemPromptBody);
+        // The reviewer credential lands before pi starts: the extension resolves it
+        // at load time, and a session born without it is memory-less for its life.
+        this.provisionOvCredentials();
+        mkdirSync(this.injectDir(session), { recursive: true });
+        mkdirSync(join(this.injectDir(session), ".done"), { recursive: true });
+        mkdirSync(this.sessionDir(session), { recursive: true });
+        const command = buildPiCommand({
+            piBin: this.piBin,
+            model,
+            sessionDir: this.sessionDir(session),
+            systemPromptPath: promptPath,
+            extensionPaths: this.extensionPaths(),
+            sessionName: session,
+            themePath: this.themePath(),
+        });
+        const generation = randomUUID();
+        const bridgeStateFile = this.bridgeStatePath(session, generation);
+        const spawnEnv = {
+            ...extraEnv,
+            QCR_SESSION_BRIDGE_GENERATION: generation,
+            QCR_SESSION_BRIDGE_STATE_FILE: bridgeStateFile,
+        };
+        writeSessionBridgeState(bridgeStateFile, {
+            version: 1,
+            session,
+            generation,
+            stage: "starting",
+            updated_at: this.now().toISOString(),
+        });
+        // tmux panes inherit the tmux server's environment, not the client's, so
+        // per-session vars must ride the command line itself. Only the QCR_* routing
+        // vars and the OPENVIKING_* identity are prefixed — HOME/PATH/OPENAI_API_KEY
+        // stay whatever the container (or dev box) provides, which is where pi's
+        // auth actually lives.
+        //
+        // Nothing prefixed here is a secret, and nothing may become one: argv is
+        // world-readable inside the container (`ps`), which is why the OpenViking
+        // key rides a 0600 ovcli.conf instead (see provisionOvCredentials).
+        const qcrPrefix = Object.entries(this.buildEnv(session, spawnEnv))
+            .filter(([k, v]) => ARGV_ENV_PREFIXES.some((p) => k.startsWith(p)) && v !== undefined)
+            .map(([k, v]) => `${k}=${v}`);
+        await this.tmux.newSession(session, ["env", ...qcrPrefix, ...command], {
+            cwd: this.root,
+            env: this.buildEnv(session, spawnEnv),
+        });
+        this.recordBirth(session, generation);
+        // Readiness admission belongs to the two daemon-owned session kinds.
+        // Isolated replay/smoke callers retain their own lifecycle protocol.
+        if (!isSandboxSession(session))
+            return;
+        try {
+            await waitForSessionBridgeReady(bridgeStateFile, session, generation, this.sessionBridgeReadyTimeoutMs());
+        }
+        catch (error) {
+            const detail = String(error);
+            this.commandStore?.logEvent("session_bridge_readiness_failed", prOfSession(session) ?? null, {
+                session,
+                generation,
+                detail,
+            });
+            if (await this.tmux.hasSession(session))
+                await this.tmux.killSession(session);
+            throw error;
+        }
+    }
+    birthFile(session) {
+        return join(this.root, "state", "sessions", `${session}.json`);
+    }
+    bridgeStatePath(session, generation) {
+        return join(this.root, "state", "sessions", `${session}.bridge-${generation}.json`);
+    }
+    /** Remove routing metadata only after the caller has confirmed this session is gone. */
+    removeSessionBirthMetadata(session) {
+        const directory = join(this.root, "state", "sessions");
+        let names;
+        try {
+            names = readdirSync(directory);
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return;
+            throw error;
+        }
+        rmSync(this.birthFile(session), { force: true });
+        for (const name of names) {
+            if (name.startsWith(`${session}.bridge-`) && name.endsWith(".json")) {
+                rmSync(join(directory, name), { force: true });
+            }
+        }
+    }
+    recordBirth(session, bridgeGeneration) {
+        this.writeAtomic(this.birthFile(session), `${JSON.stringify({ session, born_at: this.now().toISOString(), bridge_generation: bridgeGeneration }, null, 2)}\n`);
+    }
+    // ---- injection ---------------------------------------------------------
+    injectFileName() {
+        const ts = this.now().toISOString().replace(/[:.]/g, "-");
+        const prefix = `${ts}-${String(this.injectSeq++).padStart(4, "0")}`;
+        return `${prefix}.md`;
+    }
+    sessionBridgeReadyTimeoutMs() {
+        return ((this.cfg.daemon?.session_bridge_ready_timeout_s ?? DEFAULT_SESSION_BRIDGE_READY_TIMEOUT_S) *
+            1000);
+    }
+    /** Drop a wake file the inject-bridge extension will deliver. */
+    injectFile(session, message) {
+        const dir = this.injectDir(session);
+        mkdirSync(dir, { recursive: true });
+        const path = join(dir, this.injectFileName());
+        this.writeAtomic(path, messagePayload(message));
+        return path;
+    }
+    // ---- archival / death --------------------------------------------------
+    /** Write a session's record into an archive dir (the lifecycle's archive
+     * record: ledger, verdicts, `meta.json`). Returns what landed. */
+    archiveSession(session, dest) {
+        return this.lifecycle.archiveSession(session, dest);
+    }
+    // ---- daemon start ------------------------------------------------------
+    /**
+     * Daemon start: sweep the worktrees of PRs that are no longer active (ported
+     * preflight). `keepPrs` are the active PRs plus any a worker still runs for
+     * (src/workerliveness.ts). The boot adopts no tmux `pr-*` session: whatever a
+     * worker-world boot finds is read from the leases, and a PR with none is idle
+     * with its JSONL.
+     */
+    async preflight(keepPrs) {
+        const sweptWorktrees = await this.lifecycle.sweepStaleWorktrees(new Set(keepPrs));
+        return { sweptWorktrees };
+    }
+}
+//# sourceMappingURL=sessions.js.map

package/dist/src/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../src/sessions.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,eAAe;AACf,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,sEAAsE;AACtE,EAAE;AACF,8CAA8C;AAC9C,yEAAyE;AACzE,2EAA2E;AAC3E,wEAAwE;AACxE,2EAA2E;AAC3E,mDAAmD;AACnD,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,oBAAoB;AACpB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,EACL,sCAAsC,EACtC,cAAc,EACd,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,cAAc,GAGf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AACzF,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EACL,kBAAkB,EAClB,WAAW,EACX,aAAa,GAEd,MAAM,2BAA2B,CAAC;AAEnC,kFAAkF;AAClF,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;AAEtC;;;;;yDAKyD;AACzD,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,CAAU,CAAC;AAE1E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH;kFACkF;AAClF,MAAM,UAAU,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,MAAM,KAAK,GAAG,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAClD,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,OAAO;QACL,oDAAoD;QACpD,iBAAiB,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC;QAC7C,uEAAuE;QACvE,2EAA2E;QAC3E,iBAAiB,EAAE,WAAW;QAC9B,mBAAmB,EAAE,GAAG;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;AACzC,CAAC;AAaD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,cAAc,CAAC,IAAmB;IAChD,MAAM,IAAI,GAAG;QACX,IAAI,CAAC,KAAK;QACV,yEAAyE;QACzE,0EAA0E;QAC1E,sEAAsE;QACtE,qCAAqC;QACrC,WAAW;QACX,SAAS;QACT,IAAI,CAAC,KAAK;QACV,eAAe;QACf,IAAI,CAAC,UAAU;QACf,iBAAiB;QACjB,IAAI,CAAC,gBAAgB;KACtB,CAAC;IACF,IAAI,IAAI,CAAC,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACzD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,cAAc;QAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IACrE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;yDAGyD;AACzD,MAAM,UAAU,GAAkB;IAChC,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;IAC9B,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK;IAC7B,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK;IAChC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;IAC3B,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;IAChC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAClB,MAAM,IAAI,KAAK,CAAC,0CAA0C,EAAE,iCAAiC,CAAC,CAAC;IACjG,CAAC;CACF,CAAC;AA6BF,MAAM,OAAO,gBAAgB;IAClB,GAAG,CAAS;IACZ,IAAI,CAAS;IACb,IAAI,CAAO;IACX,SAAS,CAAkB;IACnB,KAAK,CAAS;IACd,MAAM,CAAS;IACf,GAAG,CAAa;IAChB,YAAY,CAAyB;IACrC,UAAU,CAAqB;IAChD;;4DAEwD;IACvC,SAAS,CAAqB;IACvC,SAAS,GAAG,CAAC,CAAC;IACtB,YAAY,IAA6B;QACvC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS;YACZ,IAAI,CAAC,SAAS;gBACd,IAAI,eAAe,CAAC;oBAClB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI;oBAC1B,6DAA6D;oBAC7D,sCAAsC;oBACtC,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;oBACzC,GAAG,EAAE,IAAI,CAAC,IAAI;iBACf,CAAC,CAAC;QACL,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,IAAI,kBAAkB,CAAC;YACtC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAE3E,SAAS,CAAC,OAAe;QACvB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,UAAU,CAAC,OAAe;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,OAAO,KAAK,CAAC,CAAC;IACtE,CAAC;IAED,4EAA4E;IAC5E,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;IACvC,CAAC;IAED,UAAU,CAAC,OAAe;QACxB,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,UAAU,CAAC,OAAe;QACxB,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,UAAU,CAAC,OAAe;QACxB,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,yBAAyB,CAAC,EAAU;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;IAED,cAAc;QACZ,OAAO;YACL,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,kBAAkB,CAAC;YACxD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,gBAAgB,CAAC;YACtD,qEAAqE;YACrE,mEAAmE;YACnE,kEAAkE;YAClE,oEAAoE;YACpE,mEAAmE;YACnE,0DAA0D;YAC1D,iBAAiB,CAAC,kBAAkB,CAAC;YACrC,kEAAkE;YAClE,8DAA8D;YAC9D,qEAAqE;YACrE,8DAA8D;YAC9D,EAAE;YACF,uEAAuE;YACvE,oEAAoE;YACpE,+BAA+B;YAC/B,EAAE;YACF,sCAAsC;YACtC,uEAAuE;YACvE,uEAAuE;YACvE,4DAA4D;YAC5D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,CAAC;SACrE,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,SAAS;QACP,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC;IAC3D,CAAC;IAED,0EAA0E;IAE1E;iFAC6E;IAC7E,SAAS;QACP,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QAC/B,OAAO,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAC1D,CAAC;IAED;;2EAEuE;IACvE,MAAM;QACJ,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,IAAI,gBAAgB,CAAC;IACvD,CAAC;IAED,wEAAwE;IACxE,aAAa;QACX,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;uCACmC;IACnC,aAAa;QACX,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;2CAEuC;IACvC,gBAAgB,CAAC,OAAe;QAC9B,OAAO,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;OAMG;IACH,sBAAsB;QACpB,OAAO,cAAc,CACnB,IAAI,CAAC,aAAa,EAAE,EACpB;YACE,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,IAAI,EAAE;YACjD,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;SACpB,EACD;YACE,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW;YAClD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,EAAE,CAAC;SAC7D,CACF,CAAC;IACJ,CAAC;IAED,2EAA2E;IAE3E,8EAA8E;IACtE,MAAM,CAAC,IAAY;QACzB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACzC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,OAAe,EAAE,QAA2B,EAAE;QACrD,MAAM,GAAG,GAAsB;YAC7B,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,8BAA8B;YACxD,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,SAAS;YACf,gBAAgB,EAAE,IAAI,CAAC,IAAI;YAC3B,gBAAgB,EAAE,OAAO;YACzB,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YACvC,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YACzC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW;YAC5C,qEAAqE;YACrE,yEAAyE;YACzE,uEAAuE;YACvE,uEAAuE;YACvE,sEAAsE;YACtE,0CAA0C;YAC1C,GAAG,eAAe,EAAE;YACpB,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO;YACnC,uEAAuE;YACvE,wDAAwD;YACxD,4BAA4B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC;YAC1E,wBAAwB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAClE,6BAA6B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC;YAC5E,yEAAyE;YACzE,8BAA8B;YAC9B,8BAA8B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,sBAAsB,CAAC;YAC9E,oEAAoE;YACpE,2DAA2D;YAC3D,gDAAgD;YAChD,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,qEAAqE;YACrE,8DAA8D;YAC9D,uEAAuE;YACvE,GAAG,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC;YACpC,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,UAAU;gBAC5D,CAAC,CAAC;oBACE,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;iBACrC;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC7C,IAAI,MAAM;YAAE,GAAG,CAAC,cAAc,GAAG,MAAM,CAAC;QACxC,kEAAkE;QAClE,uEAAuE;QACvE,2EAA2E;QAC3E,+HAA+H;QAC/H,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CACX,GAAG,EACH,oBAAoB,CAAC;YACnB,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE;YACzB,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;YACnB,MAAM,EAAE,OAAO;YACf,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE;YACnC,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW;YAClD,WAAW,EAAE,IAAI,CAAC,aAAa,EAAE;YACjC,GAAG,CAAC,EAAE,KAAK,SAAS;gBAClB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,WAAW,EAAE,gBAAgB,CAAC,EAAE,CAAC;oBACjC,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;iBAC/C,CAAC;SACP,CAAC,CACH,CAAC;QACF,OAAO,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,2EAA2E;IAEnE,WAAW,CAAC,IAAY,EAAE,IAAqB;QACrD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QAC7D,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACzB,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IAED,6DAA6D;IAC7D,iBAAiB,CAAC,OAAe,EAAE,IAAY;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;gBAGY;IACZ,KAAK,CAAC,YAAY,CAChB,OAAe,EACf,gBAAwB,EACxB,KAAa,EACb,WAA8B,EAAE;QAEhC,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QACrE,4EAA4E;QAC5E,2EAA2E;QAC3E,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC9B,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,cAAc,CAAC;YAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK;YACL,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YACpC,gBAAgB,EAAE,UAAU;YAC5B,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE;YACrC,WAAW,EAAE,OAAO;YACpB,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;SAC5B,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;QAChC,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG;YACf,GAAG,QAAQ;YACX,6BAA6B,EAAE,UAAU;YACzC,6BAA6B,EAAE,eAAe;SAC/C,CAAC;QACF,uBAAuB,CAAC,eAAe,EAAE;YACvC,OAAO,EAAE,CAAC;YACV,OAAO;YACP,UAAU;YACV,KAAK,EAAE,UAAU;YACjB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC,CAAC;QACH,yEAAyE;QACzE,6EAA6E;QAC7E,6EAA6E;QAC7E,yEAAyE;QACzE,uBAAuB;QACvB,EAAE;QACF,yEAAyE;QACzE,0EAA0E;QAC1E,oEAAoE;QACpE,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;aAC/D,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;aACrF,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,SAAS,EAAE,GAAG,OAAO,CAAC,EAAE;YACrE,GAAG,EAAE,IAAI,CAAC,IAAI;YACd,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;SACtC,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACtC,qEAAqE;QACrE,qEAAqE;QACrE,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAAE,OAAO;QACvC,IAAI,CAAC;YACH,MAAM,yBAAyB,CAC7B,eAAe,EACf,OAAO,EACP,UAAU,EACV,IAAI,CAAC,2BAA2B,EAAE,CACnC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,iCAAiC,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE;gBAC3F,OAAO;gBACP,UAAU;gBACV,MAAM;aACP,CAAC,CAAC;YACH,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAC9E,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,OAAe;QAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;IACjE,CAAC;IAED,eAAe,CAAC,OAAe,EAAE,UAAkB;QACjD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,WAAW,UAAU,OAAO,CAAC,CAAC;IACtF,CAAC;IAED,wFAAwF;IACxF,0BAA0B,CAAC,OAAe;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QACvD,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO;YAC/D,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,OAAO,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,OAAe,EAAE,gBAAwB;QAC3D,IAAI,CAAC,WAAW,CACd,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EACvB,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACpH,CAAC;IACJ,CAAC;IAED,2EAA2E;IAEnE,cAAc;QACpB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,GAAG,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QACpE,OAAO,GAAG,MAAM,KAAK,CAAC;IACxB,CAAC;IAEO,2BAA2B;QACjC,OAAO,CACL,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,8BAA8B,IAAI,sCAAsC,CAAC;YAC3F,IAAI,CACL,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,UAAU,CAAC,OAAe,EAAE,OAAe;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACpC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2EAA2E;IAE3E;sEACkE;IAClE,cAAc,CAAC,OAAe,EAAE,IAAY;QAC1C,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IAED,2EAA2E;IAE3E;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CAAC,OAAyB;QACvC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAS,OAAO,CAAC,CAAC,CAAC;QAC1F,OAAO,EAAE,cAAc,EAAE,CAAC;IAC5B,CAAC;CACF"}