@quickchatai/quickreview 0.0.0-stage → 1.1.0

package/dist/src/tui/tmuxsocket.js

@@ -0,0 +1,101 @@
+// The containerised TUI's companion transport.
+//
+// The sidebar, the rollover and the lifecycle all drive the companion through
+// one `DockerRunner`, with `docker exec <container> tmux …` argv. A TUI that
+// runs in a container has no docker.sock, and must not get one. It shares the
+// companion's tmux socket through a named volume instead, so this runner takes
+// the same argv and runs it against that socket:
+//
+//   exec <name> tmux <args…>   →  tmux -S <socket> <args…>
+//   exec <name> sh -c <script> →  tmux -S <socket> run-shell <script>, its stdout
+//                                  read back through a tmux buffer (the script
+//                                  runs inside the companion's tmux server, so
+//                                  it sees the companion's pi home)
+//
+// Anything else is refused by name: the host wrapper owns the container's
+// lifecycle, and a call that wanted docker is a bug to see, not to absorb.
+//
+// One hazard this closes: a tmux client that finds no server starts one. Here
+// that would put the companion's pi inside the TUI container (with the ssh
+// agent) instead of the companion's. So a command that can start a server runs
+// only after `show-options` proved one is answering on the socket.
+import { randomBytes } from "node:crypto";
+import { runCommand } from "./companion.js";
+/** Env var that puts the TUI in this mode, naming the mode. The wrapper sets it
+ * on the TUI container only. */
+export const TUI_COMPANION_ENV = "QCR_TUI_COMPANION";
+export const TUI_COMPANION_TMUX_SOCKET = "tmux-socket";
+/** tmux commands that start a server when none is listening. */
+const SERVER_STARTING = new Set(["new-session", "new", "start-server", "start"]);
+/** The tmux command word of `args` (after an optional `-S <path>`). */
+function commandWord(args) {
+    const rest = args[0] === "-S" ? args.slice(2) : args;
+    return rest.find((a) => !a.startsWith("-"));
+}
+const refuse = (stderr) => ({ ok: false, stdout: "", stderr, code: null });
+const shellQuote = (s) => `'${s.replaceAll("'", `'\\''`)}'`;
+/** The `run-shell` command that runs `script` and hands its output back
+ * through a tmux buffer: its stdout, the exit status appended as `x<code>`,
+ * then a line holding `buffer` (unique per call, so no output can forge it) and
+ * the script's stderr.
+ *
+ * `tmux run-shell` is not a reliable way to read a script's output: tmux 3.4
+ * (Ubuntu 24.04) never sends it to the invoking client's stdout. It lands in
+ * the active pane's view-mode, or is dropped when no session exists, and the
+ * client prints nothing. Newer tmux prints it. Worse, the view-mode swallows
+ * the keys meant for the companion's pi. A buffer is read the same way on every
+ * version, and the `x<code>` suffix keeps trailing newlines (the `$( )` would
+ * strip them) and the exit status, which `run-shell` reports as its own. The
+ * stderr goes to a temp file so it reaches the caller (as `docker exec` would
+ * give it) instead of the pane's view-mode. */
+function captureCommand(socket, buffer, script) {
+    return (`e=$(mktemp) || e=/dev/null; ` +
+        `o=$(sh -c ${shellQuote(script)} 2>"$e"; printf 'x%s' "$?"); ` +
+        `{ printf '%s\n%s\n' "$o" ${shellQuote(buffer)}; cat "$e"; } | tmux -S ${shellQuote(socket)} load-buffer -b ${buffer} -; ` +
+        `rm -f "$e"`);
+}
+/** Splits a captured buffer into the script's stdout, exit status and stderr. */
+function parseCaptured(text, buffer) {
+    const m = new RegExp(`^([\\s\\S]*)x(\\d+)\\n${buffer}\\n([\\s\\S]*)$`).exec(text);
+    return m ? { stdout: m[1], code: Number(m[2]), stderr: m[3] } : undefined;
+}
+export function tmuxSocketRunner(socket, containerName, deps = {}) {
+    const run = deps.run ?? ((argv, opts) => runCommand("tmux", argv, opts));
+    const alive = async () => (await run(["-S", socket, "show-options", "-s", "exit-empty"], { timeoutMs: 5_000 })).ok;
+    return async (argv, opts) => {
+        if (argv[0] !== "exec" || argv[1] !== containerName)
+            return refuse(`docker ${argv[0] ?? ""} is not available in the tui container — the host wrapper runs the companion`);
+        const [bin, ...rest] = argv.slice(2);
+        if (bin === "tmux") {
+            const args = rest[0] === "-S" ? rest : ["-S", socket, ...rest];
+            const word = commandWord(args);
+            if (word !== undefined && SERVER_STARTING.has(word) && !(await alive()))
+                return refuse(`the companion's tmux server is not up on ${socket} (is not running) — the host wrapper starts the companion container`);
+            return run(args, opts);
+        }
+        if (bin === "sh" && rest[0] === "-c" && rest.length === 2) {
+            const script = rest[1];
+            const buffer = `qcr-run-${randomBytes(6).toString("hex")}`;
+            const ran = await run(["-S", socket, "run-shell", captureCommand(socket, buffer, script)], opts);
+            if (!ran.ok)
+                return ran;
+            const read = await run(["-S", socket, "show-buffer", "-b", buffer], opts);
+            void run(["-S", socket, "delete-buffer", "-b", buffer], { timeoutMs: 5_000 });
+            if (!read.ok)
+                return read;
+            const got = parseCaptured(read.stdout, buffer);
+            if (!got)
+                return refuse(`tmux returned no output for the script on ${socket}`);
+            return got.code === 0
+                ? { ok: true, stdout: got.stdout, stderr: got.stderr, code: 0 }
+                : {
+                    ok: false,
+                    stdout: got.stdout,
+                    stderr: `exit ${got.code}${got.stderr === "" ? "" : `\n${got.stderr.trimEnd()}`}`,
+                    code: got.code,
+                };
+        }
+        return refuse(`docker exec ${bin ?? ""} is not available in the tui container — only tmux and sh -c reach the companion`);
+    };
+}
+//# sourceMappingURL=tmuxsocket.js.map

package/dist/src/tui/tmuxsocket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tmuxsocket.js","sourceRoot":"","sources":["../../../src/tui/tmuxsocket.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,iDAAiD;AACjD,EAAE;AACF,2DAA2D;AAC3D,kFAAkF;AAClF,+EAA+E;AAC/E,+EAA+E;AAC/E,oEAAoE;AACpE,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,+EAA+E;AAC/E,mEAAmE;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAwC,MAAM,gBAAgB,CAAC;AAElF;gCACgC;AAChC,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AACrD,MAAM,CAAC,MAAM,yBAAyB,GAAG,aAAa,CAAC;AAEvD,gEAAgE;AAChE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;AAEjF,uEAAuE;AACvE,SAAS,WAAW,CAAC,IAAc;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9C,CAAC;AAOD,MAAM,MAAM,GAAG,CAAC,MAAc,EAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAEjG,MAAM,UAAU,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAE5E;;;;;;;;;;;;;+CAa+C;AAC/C,SAAS,cAAc,CAAC,MAAc,EAAE,MAAc,EAAE,MAAc;IACpE,OAAO,CACL,8BAA8B;QAC9B,aAAa,UAAU,CAAC,MAAM,CAAC,+BAA+B;QAC9D,4BAA4B,UAAU,CAAC,MAAM,CAAC,2BAA2B,UAAU,CAAC,MAAM,CAAC,mBAAmB,MAAM,MAAM;QAC1H,YAAY,CACb,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,SAAS,aAAa,CACpB,IAAY,EACZ,MAAc;IAEd,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,yBAAyB,MAAM,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClF,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,MAAc,EACd,aAAqB,EACrB,OAAuB,EAAE;IAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,KAAK,IAAsB,EAAE,CACzC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3F,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC1B,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,aAAa;YACjD,OAAO,MAAM,CACX,UAAU,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,8EAA8E,CACtG,CAAC;QACJ,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,IAAI,KAAK,SAAS,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC;gBACrE,OAAO,MAAM,CACX,4CAA4C,MAAM,qEAAqE,CACxH,CAAC;YACJ,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,IAAI,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;YACxB,MAAM,MAAM,GAAG,WAAW,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3D,MAAM,GAAG,GAAG,MAAM,GAAG,CACnB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,EACnE,IAAI,CACL,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,GAAG,CAAC;YACxB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;YAC1E,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9E,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC1B,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,GAAG;gBAAE,OAAO,MAAM,CAAC,6CAA6C,MAAM,EAAE,CAAC,CAAC;YAC/E,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC;gBACnB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE;gBAC/D,CAAC,CAAC;oBACE,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,MAAM,EAAE,QAAQ,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE;oBACjF,IAAI,EAAE,GAAG,CAAC,IAAI;iBACf,CAAC;QACR,CAAC;QACD,OAAO,MAAM,CACX,eAAe,GAAG,IAAI,EAAE,kFAAkF,CAC3G,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/src/tui/trackertickets.js

@@ -0,0 +1,77 @@
+// Read-only tracker-ticket projection for the `[4] tickets` tab (and the
+// `[7] feedback` tab's FILED summary).
+//
+// The tracker is a local PC directory already mounted/configured for the TUI's
+// qcr-tui auto-filer. This reader never claims, locks, or rewrites a ticket: it
+// tolerates a concurrent temp+rename by skipping an unreadable file and tries
+// again on the next refresh. The companion sees the selected ticket through
+// the last-painted-frame surface — no second state channel and no VM access.
+import { existsSync, readFileSync, readdirSync } from "node:fs";
+import { join } from "node:path";
+function header(body, key) {
+    return new RegExp(`^${key}:\\s*(.*)$`, "m").exec(body)?.[1]?.trim() ?? "—";
+}
+export function parseTrackerTicket(body, path = "") {
+    const title = /^#\s+(.+)$/m.exec(body)?.[1]?.trim();
+    const id = header(body, "Id");
+    // Four digits or more: the tracker pads ids to four and keeps counting.
+    if (!title || !/^FT-\d{4,}$/.test(id))
+        return undefined;
+    return {
+        id,
+        title,
+        status: header(body, "Status"),
+        role: header(body, "Role"),
+        category: header(body, "Category"),
+        updated: header(body, "Updated"),
+        path,
+        body: body.trim(),
+    };
+}
+export function isActionableTicket(ticket) {
+    return ticket.status === "open" || ticket.status === "claimed";
+}
+/** Actionable first, then newest update, then id. */
+export function orderTrackerTickets(tickets) {
+    return [...tickets].sort((a, b) => {
+        const action = Number(isActionableTicket(b)) - Number(isActionableTicket(a));
+        if (action !== 0)
+            return action;
+        if (a.updated !== b.updated)
+            return a.updated < b.updated ? 1 : -1;
+        return a.id.localeCompare(b.id);
+    });
+}
+/** The effort is CONFIG (`[sink] tickets_effort`, falling back to
+ * the filer's `effort`), never a literal — index.ts wires both arguments. */
+export function readEffortTickets(root, effort) {
+    // A tracker root or effort that is not there is a read that FAILED (a
+    // missing mount, a checkout this machine does not have, a typo in the
+    // effort) — it throws, and the store shows it unreadable. Only an
+    // EXISTING effort that has no tickets/ yet is a real, empty tracker.
+    if (!existsSync(root))
+        throw new Error(`tracker root ${root} does not exist`);
+    const effortDir = join(root, "efforts", effort);
+    if (!existsSync(effortDir))
+        throw new Error(`tracker effort '${effort}' does not exist under ${root}`);
+    const dir = join(effortDir, "tickets");
+    if (!existsSync(dir))
+        return [];
+    const tickets = [];
+    for (const name of readdirSync(dir)) {
+        if (!/^FT-\d{4,}-.+\.md$/.test(name))
+            continue;
+        try {
+            const path = join(dir, name);
+            const ticket = parseTrackerTicket(readFileSync(path, "utf8"), path);
+            if (ticket)
+                tickets.push(ticket);
+        }
+        catch {
+            // A concurrent tracker writer may be between rename steps. Refresh will
+            // see the stable file; one missing row is better than breaking the TUI.
+        }
+    }
+    return orderTrackerTickets(tickets);
+}
+//# sourceMappingURL=trackertickets.js.map

package/dist/src/tui/trackertickets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trackertickets.js","sourceRoot":"","sources":["../../../src/tui/trackertickets.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,uCAAuC;AACvC,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,8EAA8E;AAC9E,4EAA4E;AAC5E,6EAA6E;AAC7E,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAajC,SAAS,MAAM,CAAC,IAAY,EAAE,GAAW;IACvC,OAAO,IAAI,MAAM,CAAC,IAAI,GAAG,YAAY,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,IAAI,GAAG,EAAE;IACxD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACpD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9B,wEAAwE;IACxE,IAAI,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IACxD,OAAO;QACL,EAAE;QACF,KAAK;QACL,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC9B,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC;QAClC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC;QAChC,IAAI;QACJ,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;KAClB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAqB;IACtD,OAAO,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC;AACjE,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,mBAAmB,CAAC,OAAwB;IAC1D,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,MAAM,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,IAAI,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QAChC,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,OAAO,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;6EAC6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,MAAc;IAC5D,sEAAsE;IACtE,sEAAsE;IACtE,kEAAkE;IAClE,qEAAqE;IACrE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,iBAAiB,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,0BAA0B,IAAI,EAAE,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC/C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7B,MAAM,MAAM,GAAG,kBAAkB,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;YACpE,IAAI,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,wEAAwE;QAC1E,CAAC;IACH,CAAC;IACD,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC"}

package/dist/src/tui/unwedge.js

@@ -0,0 +1,245 @@
+// Unwedge — the operator's one-key recovery for a PR whose round is
+// stuck, driven from the board instead of from the overseer's pane.
+//
+// WHY THIS IS A WRITE CHANNEL AT ALL. The board is otherwise read-only over
+// ssh, and that property is worth keeping; this is a deliberate, narrow
+// exception (the operator can always unwedge from the board, docs/tui.md). The alternative — typing into the overseer's pi — makes the lever
+// depend on an LLM turn, which fails exactly when things are already stuck.
+//
+// WHAT IT IS NOT. It writes ONE validated command file into the root-owned
+// operator directory under the daemon's existing `commands/` dir
+// (`operatorCommandDirFor`) and then reads the result the daemon writes back.
+// It does not touch GitHub, does not go near the MutationGate, and cannot
+// invent a command: the payload is built here from a fixed shape, and
+// `src/commands.ts` re-validates it against the same strict schema and the
+// same tier gate every other writer faces. In particular it inherits the
+// `local`-dir BELT — a command dropped while a non-owner Slack turn is live
+// is refused — so the TUI cannot be used to slip past the tier table.
+//
+// Two commands, both already in the whitelist:
+//   `rerun-round`     — cancel the running round and re-queue (the default).
+//   `restart-session` — the same, plus kill the tmux session first, for a
+//                       session that is genuinely wedged rather than idle.
+import { randomUUID } from "node:crypto";
+import { sanitizeText } from "./paint.js";
+import { remoteSandboxRoot, resolveLayout } from "./layout.js";
+/** The daemon's command root: results land in `<root>/results/`. */
+export function commandDirFor(cfg) {
+    return `${remoteSandboxRoot(cfg)}/commands`;
+}
+/**
+ * The OPERATOR's command directory. Everything this module and
+ * `qcr drain` write goes here, and it is what makes an operator-issued lever
+ * structurally different from a session-issued one: the directory is created
+ * and written as ROOT (`docker exec -u 0`), mode 0755, and the daemon — which
+ * runs as the same uid every pi session runs as — can read it but not write
+ * into it. A session therefore cannot put a file here, and the daemon treats
+ * a file here as the operator's only when that seal holds (`operatorSealVerdict`
+ * in `src/commands.ts`). The overseer's own commands keep landing in the
+ * daemon-owned `commands/` beside it, where every drain and pause is bounded.
+ */
+export function operatorCommandDirFor(cfg) {
+    return `${commandDirFor(cfg)}/operator`;
+}
+/** A command file's name: the stamp, then — when given — the sender's own
+ * id, then its sequence. Two senders each count from zero, so a sender that
+ * shares the operator directory with another names itself: two commands in
+ * one millisecond never land on one path (and never share one result). */
+export function commandFileName(now, seq, client) {
+    const ts = now.toISOString().replace(/[:.]/g, "-");
+    return `${ts}-tui-${client ? `${client}-` : ""}${String(seq).padStart(4, "0")}.json`;
+}
+/**
+ * The in-container shell that writes one operator command file as root.
+ * Refuses when the daemon's `commands/` root does not exist yet (creating it
+ * as root would leave the daemon unable to write its own results, and a
+ * daemon that has never booted cannot answer anyway) and when the operator
+ * directory is a SYMLINK: `commands/` itself is the daemon's, so a session
+ * could plant `operator` there ahead of the operator.
+ *
+ * A path check alone is not enough, because `commands/` is writable by every
+ * session: it can rename the checked directory away and put a link in its
+ * place between any two root commands, and every later command that names
+ * the PATH would follow it (`chmod` does; only `chown -h` does not). So the
+ * script `cd`s in, proves the directory it is standing in IS the configured
+ * one (`pwd -P`, which resolves the directory it holds, not the name), and
+ * from then on names only `.` and bare entries — a rename or a swap after
+ * that moves nothing root touches. A real directory a session pre-made is
+ * taken over (`chown 0:0` + `0755` is what makes it the operator's, whoever
+ * created it), but it keeps its entries: a link planted at the temp name
+ * would carry root's write anywhere, and a link planted at the final name
+ * to a directory would make `mv` move the file INTO that directory, so both
+ * names are removed first — after the takeover, when no session can put
+ * either back. The expected directory is the PHYSICAL `commands/` (resolved
+ * once, up front) plus `/operator`, so an install whose sandbox root sits
+ * behind a symlink still writes, while a swapped `operator/` still refuses. The file's own mode is set
+ * explicitly rather than left to the exec's umask, because the daemon's seal
+ * check (`operatorSealVerdict`) reads both; that check also `lstat`s the
+ * directory, so a link the script did not catch is still no seal there.
+ *
+ * `drainManualCommand` (cli.ts) prints this script inside a double-quoted
+ * ssh argument and escapes it for that; run it, don't only read it
+ * (`tests/levers.test.ts`).
+ */
+export function operatorCommandWriteScript(cfg, name) {
+    const root = commandDirFor(cfg);
+    const dir = operatorCommandDirFor(cfg);
+    const tmp = `.${name}.tmp`;
+    return (`[ -d '${root}' ] || { echo 'daemon commands dir ${root} missing - is the daemon running?' >&2; exit 1; }; ` +
+        `mkdir -p '${dir}' || exit 1; ` +
+        `[ ! -L '${dir}' ] || { echo '${dir} is a symlink - refusing to write the operator command' >&2; exit 1; }; ` +
+        `R=$(cd -P '${root}' && pwd -P) || exit 1; ` +
+        `cd -P '${dir}' || exit 1; ` +
+        `[ "$(pwd -P)" = "$R/operator" ] || { echo '${dir} was replaced while writing - refusing to write the operator command' >&2; exit 1; }; ` +
+        `chown -h 0:0 . && chmod 0755 . || exit 1; ` +
+        `find . -maxdepth 1 -name '*.json' -mmin +1440 -delete 2>/dev/null; ` +
+        `rm -f '${tmp}' '${name}' && cat > '${tmp}' && chmod 0644 '${tmp}' && mv '${tmp}' '${name}'`);
+}
+/** argv for the atomic command write. The payload rides STDIN, never the
+ * command line: nothing about the request can be shell-interpreted, and the
+ * tmp+mv means the watcher never sees a half-written file (its own writes use
+ * the same idiom). `-u 0` is the operator seal — see `operatorCommandDirFor`. */
+export function commandWriteArgv(cfg, name) {
+    return [
+        ...(cfg.sudo_docker ? ["sudo"] : []),
+        "docker",
+        "exec",
+        "-i",
+        "-u",
+        "0",
+        cfg.container,
+        "sh",
+        "-c",
+        operatorCommandWriteScript(cfg, name),
+    ];
+}
+/** The `reason` of a daemon result file, made safe to paint. Every result
+ * this channel reads sits in `<commands>/results/` — operator results
+ * included (commands.ts writes them to the parent results dir) — and that
+ * dir is writable by the session uid, so the text is untrusted: no control
+ * byte may reach the operator's terminal (ESC/CSI/OSC would repaint or
+ * forge the frame), and no newline may split a one-line notice. Shared by
+ * every reader of that dir (unwedge, deploy drain, issue sink). */
+export function resultReason(value, fallback) {
+    const text = sanitizeText(String(value ?? fallback))
+        .replace(/\s+/g, " ")
+        .trim();
+    return text === "" ? fallback : text;
+}
+/** argv reading the daemon's result file for a command, or `pending`. */
+export function commandResultArgv(cfg, name) {
+    const dir = commandDirFor(cfg);
+    const base = name.replace(/\.json$/, "");
+    return [
+        ...(cfg.sudo_docker ? ["sudo"] : []),
+        "docker",
+        "exec",
+        cfg.container,
+        "sh",
+        "-c",
+        `if [ -f '${dir}/results/${base}.result.json' ]; then cat '${dir}/results/${base}.result.json'; else echo pending; fi`,
+    ];
+}
+/** The command payload. Built here rather than accepted from a caller, so a
+ * malformed or unexpected command cannot be produced by this module at all. */
+export function commandPayload(command, pr) {
+    return `${JSON.stringify({ command, pr }, null, 2)}\n`;
+}
+export class CommandFileSender {
+    cfg;
+    ssh;
+    now;
+    sleep;
+    seq = 0;
+    clientId = `unwedge-${randomUUID().slice(0, 8)}`;
+    constructor(cfg, ssh, now = () => new Date(), sleep = (ms) => new Promise((r) => setTimeout(r, ms))) {
+        this.cfg = cfg;
+        this.ssh = ssh;
+        this.now = now;
+        this.sleep = sleep;
+    }
+    async send(command, pr, onState) {
+        await resolveLayout(this.cfg, this.ssh);
+        if (!Number.isInteger(pr) || pr <= 0) {
+            onState("failed", `✖ ${command} refused (bad PR number)`);
+            return;
+        }
+        const name = commandFileName(this.now(), this.seq++, this.clientId);
+        onState("pending", `→ ${command} #${pr} pending…`);
+        const write = await this.ssh(this.cfg.ssh_host, commandWriteArgv(this.cfg, name), {
+            stdin: commandPayload(command, pr),
+        });
+        // A transport failure (ssh exit 255, a timeout or spawn error: no exit
+        // code) can land after the remote rename published the file, so it is not
+        // proof of non-delivery: the result is still read, and the final notice
+        // says the write was unconfirmed. The write script's own refusal (any
+        // other exit code) is definite.
+        let unconfirmed;
+        if (!write.ok) {
+            // The write script's own refusal (no commands dir, a symlinked operator
+            // dir) or the transport's failure — the operator acts on which.
+            const why = write.stderr.trim().split("\n").at(-1) ?? "";
+            const reason = resultReason(why, `exit ${write.code ?? "?"}`);
+            if (write.code !== null && write.code !== 255) {
+                onState("failed", `✖ ${command} #${pr} failed (write failed: ${reason})`);
+                return;
+            }
+            unconfirmed = reason;
+        }
+        // Read the daemon's own verdict on the request rather than assuming the
+        // write was the outcome. A refusal (tier belt, unknown PR) is a real
+        // answer and the operator must see it, not a silent success.
+        const deadline = this.now().getTime() + this.cfg.msg_timeout_s * 1000;
+        // The daemon writes its result in place, so a read can land mid-write: an
+        // unreadable result is read again until the deadline, and only then said.
+        let unreadable = false;
+        while (this.now().getTime() < deadline) {
+            await this.sleep(2000);
+            const probe = await this.ssh(this.cfg.ssh_host, commandResultArgv(this.cfg, name));
+            if (!probe.ok)
+                continue;
+            const body = probe.stdout.trim();
+            if (body === "pending" || body === "")
+                continue;
+            let parsed;
+            try {
+                parsed = JSON.parse(body);
+            }
+            catch {
+                unreadable = true;
+                continue;
+            }
+            if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+                unreadable = true;
+                continue;
+            }
+            unreadable = false;
+            const result = parsed;
+            if (result.ok === true) {
+                const cancelled = Array.isArray(result.cancelled_rounds)
+                    ? result.cancelled_rounds.length
+                    : 0;
+                onState("done", `✓ ${command} #${pr}${cancelled > 0 ? ` — ${cancelled} round(s) cancelled` : ""}`);
+                return;
+            }
+            onState("failed", `✖ ${command} #${pr} refused (${resultReason(result.reason, "no reason given")})`);
+            return;
+        }
+        if (unconfirmed !== undefined) {
+            onState("failed", `✖ ${command} #${pr} outcome unknown (write failed: ${unconfirmed}; no result found)`);
+            return;
+        }
+        onState("failed", unreadable
+            ? `✖ ${command} #${pr} failed (unreadable result)`
+            : `✖ ${command} #${pr} — no result (daemon down?)`);
+    }
+}
+/** Bind the board's `u` key to the command channel. Same shape as
+ * `installMessageHooks`: the sender is injectable so tests never spawn ssh. */
+export function installUnwedgeHooks(app, sender) {
+    const s = sender ?? new CommandFileSender(app.cfg, app.ssh);
+    app.hooks.unwedge = (pr, theApp) => {
+        void s.send("rerun-round", pr, (_state, label) => theApp.notice(label));
+    };
+}
+//# sourceMappingURL=unwedge.js.map

package/dist/src/tui/unwedge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unwedge.js","sourceRoot":"","sources":["../../../src/tui/unwedge.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,oEAAoE;AACpE,EAAE;AACF,4EAA4E;AAC5E,wEAAwE;AACxE,6IAA6I;AAC7I,4EAA4E;AAC5E,EAAE;AACF,2EAA2E;AAC3E,iEAAiE;AACjE,8EAA8E;AAC9E,0EAA0E;AAC1E,sEAAsE;AACtE,2EAA2E;AAC3E,yEAAyE;AACzE,4EAA4E;AAC5E,sEAAsE;AACtE,EAAE;AACF,+CAA+C;AAC/C,6EAA6E;AAC7E,0EAA0E;AAC1E,2EAA2E;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAO/D,oEAAoE;AACpE,MAAM,UAAU,aAAa,CAAC,GAAc;IAC1C,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAc;IAClD,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC;AAC1C,CAAC;AAED;;;0EAG0E;AAC1E,MAAM,UAAU,eAAe,CAAC,GAAS,EAAE,GAAW,EAAE,MAAe;IACrE,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACnD,OAAO,GAAG,EAAE,QAAQ,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC;AACvF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,0BAA0B,CAAC,GAAc,EAAE,IAAY;IACrE,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,IAAI,MAAM,CAAC;IAC3B,OAAO,CACL,SAAS,IAAI,sCAAsC,IAAI,qDAAqD;QAC5G,aAAa,GAAG,eAAe;QAC/B,WAAW,GAAG,kBAAkB,GAAG,0EAA0E;QAC7G,cAAc,IAAI,0BAA0B;QAC5C,UAAU,GAAG,eAAe;QAC5B,8CAA8C,GAAG,wFAAwF;QACzI,4CAA4C;QAC5C,qEAAqE;QACrE,UAAU,GAAG,MAAM,IAAI,eAAe,GAAG,oBAAoB,GAAG,YAAY,GAAG,MAAM,IAAI,GAAG,CAC7F,CAAC;AACJ,CAAC;AAED;;;iFAGiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,GAAc,EAAE,IAAY;IAC3D,OAAO;QACL,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,QAAQ;QACR,MAAM;QACN,IAAI;QACJ,IAAI;QACJ,GAAG;QACH,GAAG,CAAC,SAAS;QACb,IAAI;QACJ,IAAI;QACJ,0BAA0B,CAAC,GAAG,EAAE,IAAI,CAAC;KACtC,CAAC;AACJ,CAAC;AAED;;;;;;mEAMmE;AACnE,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,QAAgB;IAC3D,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,CAAC;SACjD,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;IACV,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,iBAAiB,CAAC,GAAc,EAAE,IAAY;IAC5D,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACzC,OAAO;QACL,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,QAAQ;QACR,MAAM;QACN,GAAG,CAAC,SAAS;QACb,IAAI;QACJ,IAAI;QACJ,YAAY,GAAG,YAAY,IAAI,8BAA8B,GAAG,YAAY,IAAI,sCAAsC;KACvH,CAAC;AACJ,CAAC;AAED;+EAC+E;AAC/E,MAAM,UAAU,cAAc,CAAC,OAAuB,EAAE,EAAU;IAChE,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AACzD,CAAC;AAYD,MAAM,OAAO,iBAAiB;IAKT;IACA;IACA;IACA;IAPX,GAAG,GAAG,CAAC,CAAC;IACC,QAAQ,GAAG,WAAW,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAElE,YACmB,GAAc,EACd,GAAc,EACd,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAClC,QAAuC,CAAC,EAAE,EAAE,EAAE,CAC7D,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAJtB,QAAG,GAAH,GAAG,CAAW;QACd,QAAG,GAAH,GAAG,CAAW;QACd,QAAG,GAAH,GAAG,CAA+B;QAClC,UAAK,GAAL,KAAK,CACiB;IACtC,CAAC;IAEJ,KAAK,CAAC,IAAI,CACR,OAAuB,EACvB,EAAU,EACV,OAAqD;QAErD,MAAM,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,QAAQ,EAAE,KAAK,OAAO,0BAA0B,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpE,OAAO,CAAC,SAAS,EAAE,KAAK,OAAO,KAAK,EAAE,WAAW,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE;YAChF,KAAK,EAAE,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;SACnC,CAAC,CAAC;QACH,uEAAuE;QACvE,0EAA0E;QAC1E,wEAAwE;QACxE,sEAAsE;QACtE,gCAAgC;QAChC,IAAI,WAA+B,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,wEAAwE;YACxE,gEAAgE;YAChE,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACzD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,QAAQ,KAAK,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;YAC9D,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC9C,OAAO,CAAC,QAAQ,EAAE,KAAK,OAAO,KAAK,EAAE,0BAA0B,MAAM,GAAG,CAAC,CAAC;gBAC1E,OAAO;YACT,CAAC;YACD,WAAW,GAAG,MAAM,CAAC;QACvB,CAAC;QACD,wEAAwE;QACxE,qEAAqE;QACrE,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC;QACtE,0EAA0E;QAC1E,0EAA0E;QAC1E,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;YACvC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YACnF,IAAI,CAAC,KAAK,CAAC,EAAE;gBAAE,SAAS;YACxB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;gBAAE,SAAS;YAChD,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU,GAAG,IAAI,CAAC;gBAClB,SAAS;YACX,CAAC;YACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3E,UAAU,GAAG,IAAI,CAAC;gBAClB,SAAS;YACX,CAAC;YACD,UAAU,GAAG,KAAK,CAAC;YACnB,MAAM,MAAM,GAAG,MAAwE,CAAC;YACxF,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBACvB,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC;oBACtD,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM;oBAChC,CAAC,CAAC,CAAC,CAAC;gBACN,OAAO,CACL,MAAM,EACN,KAAK,OAAO,KAAK,EAAE,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,SAAS,qBAAqB,CAAC,CAAC,CAAC,EAAE,EAAE,CAClF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,OAAO,CACL,QAAQ,EACR,KAAK,OAAO,KAAK,EAAE,aAAa,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAClF,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CACL,QAAQ,EACR,KAAK,OAAO,KAAK,EAAE,mCAAmC,WAAW,oBAAoB,CACtF,CAAC;YACF,OAAO;QACT,CAAC;QACD,OAAO,CACL,QAAQ,EACR,UAAU;YACR,CAAC,CAAC,KAAK,OAAO,KAAK,EAAE,6BAA6B;YAClD,CAAC,CAAC,KAAK,OAAO,KAAK,EAAE,6BAA6B,CACrD,CAAC;IACJ,CAAC;CACF;AAED;+EAC+E;AAC/E,MAAM,UAAU,mBAAmB,CAAC,GAAQ,EAAE,MAAsB;IAClE,MAAM,CAAC,GAAG,MAAM,IAAI,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5D,GAAG,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE;QACjC,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC;AACJ,CAAC"}