@quickchatai/quickreview 0.0.0-stage → 1.1.0

package/dist/src/worktrees.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktrees.js","sourceRoot":"","sources":["../../src/worktrees.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,4EAA4E;AAC5E,6EAA6E;AAC7E,8EAA8E;AAC9E,+BAA+B;AAC/B,OAAO,EACL,cAAc,EACd,UAAU,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,MAAM,EACN,QAAQ,GACT,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,+CAA+C,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EACL,mBAAmB,EACnB,YAAY,EACZ,aAAa,EACb,UAAU,EACV,gBAAgB,EAChB,WAAW,GAEZ,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,gDAAgD,CAAC;AAGhF,OAAO,EAAE,cAAc,EAAE,CAAC;AAC1B,OAAO,EACL,cAAc,EACd,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,GAQnB,MAAM,4CAA4C,CAAC;AAuBpD;wBACwB;AACxB,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sIAAsI;AACtI,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC;AAE/B;+EAC+E;AAC/E,MAAM,UAAU,cAAc,CAC5B,KAA0B,EAC1B,IAAmB,EACnB,MAAM,GAAG,aAAa;IAEtB,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACtB,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC;QAC1B,6DAA6D;QAC7D,MAAM,GAAG,GAAG,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;QAChF,OAAO,KAAK,IAAI,IAAI,GAAG,MAAM,IAAI,GAAG,IAAI,IAAI,GAAG,MAAM,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;iDACiD;AACjD,MAAM,UAAU,aAAa,CAAC,EAAU;IACtC,OAAO,SAAS,EAAE,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,MAAM,GAAG,mBAAmB,CAAC;AACnC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B;uEACuE;AACvE,MAAM,iBAAiB,GAAG,yDAAyD,CAAC;AAEpF;;;;;;;;qEAQqE;AACrE,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC1C,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACnC,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACxC,OAAO,GAAG,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC7E,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,QAAQ,GAAG,KAAK,CAAC;QAC5C,IAAI,OAAO,KAAK,IAAI;YAAE,SAAS;QAC/B,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+EAA+E;AAE/E,+FAA+F;AAC/F,6EAA6E;AAE7E;+DAC+D;AAC/D,MAAM,uBAAuB,GAAG,oBAAoB,CAAC;AAErD;4CAC4C;AAC5C,MAAM,oBAAoB,GAAG,IAAI,MAAM,CACrC,IAAI,uBAAuB,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,2BAA2B,CAC7E,CAAC;AAEF;yBACyB;AACzB,SAAS,kBAAkB,CAAC,EAAU;IACpC,OAAO,GAAG,uBAAuB,MAAM,EAAE,GAAG,CAAC;AAC/C,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,eAAe,CAAC,EAAU,EAAE,GAAW;IACrD,OAAO,GAAG,kBAAkB,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;AACtE,CAAC;AAED;mCACmC;AACnC,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;mCAKmC;AACnC,MAAM,UAAU,eAAe,CAC7B,GAAW,EACX,EAAU,EACV,UAAkB;IAElB,IAAI,IAAI,GAAiF,IAAI,CAAC;IAC9F,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IAC9D,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,SAAS;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG;YACzB,IAAI,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;IACvF,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACjG,CAAC;AAkCD,6CAA6C;AAC7C,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7C,KAAK,EAAE,GAAG;IACV,YAAY,EAAE,EAAE;IAChB,MAAM,EAAE,EAAE;IACV,SAAS,EAAE,GAAG;CACf,CAAC,CAAC;AAQH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAC7F,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,sBAAsB,IAAI,MAAM,CAAC;AACvC,CAAC;AAED;;;;;;+CAM+C;AAC/C,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClC,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,EAAE,CAAC,WAAW,EAAE;QAAE,OAAO,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC7D,MAAM,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC;QACnC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,CAAC,CAAC,MAAM,CAAC;IACX,OAAO,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,OAAe;IAChE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC;QAC5B,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,OAAO,EAAE,EAAE,GAAG,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QACzE,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3E,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,8DAA8D;QAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,cAAc,CAAC,OAAO,EAAE,GAAG,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;0CAC0C;AAC1C,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,eAAe,GAA2C;IACrE,CAAC,gBAAgB,EAAE,WAAW,CAAC;IAC/B,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAC3B,CAAC,oBAAoB,EAAE,OAAO,CAAC;CAChC,CAAC;AAEF,+DAA+D;AAC/D,MAAM,UAAU,YAAY,CAAC,IAAuB;IAClD,MAAM,GAAG,GAAsB,EAAE,GAAG,IAAI,EAAE,gBAAgB,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;IAC7F,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QAC/B,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,MAAM,aAAa,GAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CAC5D,GAAG,KAAK,KAAK;IACX,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9E,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEhC,MAAM,OAAO,eAAe;IACjB,IAAI,CAAS;IACb,QAAQ,CAAS;IACjB,MAAM,CAAS;IACP,QAAQ,CAAS;IACjB,GAAG,CAAS;IAE7B,YAAY,IAA4B;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,aAAa,CAAC;IACvC,CAAC;IAEO,GAAG,CAAC,IAAc,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ;QAC7C,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,YAAY,CAAC,EAAU;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,eAAe;QACnB,mEAAmE;QACnE,sCAAsC;QACtC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YACxD,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QAClE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;mFAC+E;IACvE,KAAK,CAAC,EAAU;QACtB,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;IAED;+DAC2D;IACnD,OAAO,CAAC,MAAc;QAC5B,OAAO,uBAAuB,MAAM,EAAE,CAAC;IACzC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,cAAc,CAClB,EAAU,EACV,OAAoD,EAAE;QAEtD,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7B,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,CAAC,cAAc,EAAE,SAAS,GAAG,EAAE,CAAC,CAAC;QAClD,IAAI,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrE,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;QAC5D,IAAI,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAClE,6EAA6E;QAC7E,4EAA4E;QAC5E,4EAA4E;QAC5E,0EAA0E;QAC1E,6EAA6E;QAC7E,6EAA6E;QAC7E,+BAA+B;QAC/B,IAAI,YAAgC,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC7C,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAC7F,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YAC1C,YAAY,GAAG,QAAQ,CAAC;YACxB,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAEjD,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,IAAI,EAAE,CAAC;YACT,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC7E,yEAAyE;YACzE,kEAAkE;YAClE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7F,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC;gBAAE,UAAU,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACnD,CAAC;QACD,OAAO;YACL,IAAI;YACJ,QAAQ;YACR,QAAQ,EAAE,IAAI,IAAI,EAAE;YACpB,QAAQ;YACR,UAAU;YACV,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;IACJ,CAAC;IAED;;gCAE4B;IACpB,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,IAAY;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC1B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;gBACnF,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC;IACzD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,GAAW;QACtC,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7B,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;YAC/C,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,wEAAwE;YACxE,sEAAsE;YACtE,sEAAsE;YACtE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,sEAAsE;QACtE,qDAAqD;QACrD,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;cAEU;IACF,KAAK,CAAC,aAAa,CAAC,IAAY;QACtC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAClD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,EAAE,kBAAkB,CAAC,EAAE;YACtF,GAAG,EAAE,IAAI;SACV,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACjC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAClC,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7F,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,kBAAkB,CAAC,GAAW;QAClC,yEAAyE;QACzE,2EAA2E;QAC3E,yEAAyE;QACzE,mDAAmD;QACnD,mDAAmD;QACnD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,EAAE,CAAC,CAAC;QACvF,sEAAsE;QACtE,iDAAiD;QACjD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC;QACxE,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,qBAAqB,CACzB,IAAY,EACZ,EAAU,EACV,EAAW;QAEX,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACnE,wEAAwE;QACxE,2DAA2D;QAC3D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,IAAI,CAAC;YACH,sEAAsE;YACtE,wEAAwE;YACxE,4CAA4C;YAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACrD,IAAI,IAAI,CAAC,MAAM;gBACb,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACvF,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM;iBAC/E,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;qBAC7E,IAAI,EAAE;qBACN,KAAK,CAAC,KAAK,CAAC;qBACZ,KAAK,CAAC,CAAC,CAAC,CAAC;gBACZ,sEAAsE;gBACtE,uEAAuE;gBACvE,kDAAkD;gBAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACnB,SAAS;gBACX,CAAC;gBACD,sEAAsE;gBACtE,yCAAyC;gBACzC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC,CAAE,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC,EAAE;oBACzF,GAAG,EAAE,IAAI,CAAC,QAAQ;iBACnB,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACrD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;oBACjC,OAAO;wBACL,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC;wBACjB,QAAQ,EAAE,IAAI;wBACd,MAAM,EAAE,+BAA+B,CAAC,UAAU,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;qBAChG,CAAC;gBACJ,uEAAuE;gBACvE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;gBAChF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;oBAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACxE,CAAC;YACD,OAAO,UAAU,CAAC,MAAM;gBACtB,CAAC,CAAC;oBACE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC;oBACjB,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,sDAAsD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBACtF;gBACH,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC;gBACjB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aACzE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,YAAY,CAAC,IAAuB,EAAE,EAAW;QAC7D,OAAO,mBAAmB,CACxB,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAC9E,IAAI,EACJ,EAAE,CACH,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,eAAe,CACnB,GAAW,EACX,KAAe,EACf,OAAiC,EAAE;QAEnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC;YACzB,qBAAqB;YACrB,KAAK;YACL,qBAAqB;YACrB,GAAG;YACH,IAAI;YACJ,GAAG,KAAK;SACT,CAAC,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;gBAAE,SAAS;YAC9B,MAAM,KAAK,GACT,kDAAkD,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YACrF,MAAM,KAAK,GACT,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;gBACrB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;gBACtB,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;gBACjD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACnC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YACvC,IAAI,KAAK;gBAAE,SAAS;YACpB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;6DACyD;IACxC,QAAQ,GAAG,IAAI,GAAG,EAAgC,CAAC;IACpE;sEACkE;IACjD,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACpD,2EAA2E;IAC1D,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACvD,4DAA4D;IAC3C,WAAW,GAAG,IAAI,GAAG,EAAmB,CAAC;IAE1D;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,aAAa,CACjB,IAAY,EACZ,IAAmB,EACnB,IAAY,EACZ,EAAU,EACV,MAAM,GAAG,aAAa;QAEtB,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QACjE,MAAM,GAAG,GAAG,GAAG,IAAI,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;QACtC,IAAI,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBAAE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;wBAAE,OAAO,IAAI,CAAC;gBAC1E,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAClD,IAAI,IAAI,KAAK,EAAE;oBAAE,KAAK,GAAG,EAAE,CAAC;qBACvB,CAAC;oBACJ,yDAAyD;oBACzD,wDAAwD;oBACxD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC;wBACzB,qBAAqB;wBACrB,MAAM;wBACN,YAAY;wBACZ,eAAe;wBACf,cAAc;wBACd,KAAK;wBACL,IAAI;wBACJ,EAAE;wBACF,IAAI;wBACJ,IAAI;qBACL,CAAC,CAAC;oBACH,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBAC1C,KAAK,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;gBACvF,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,gBAAgB;gBAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,KAAK,KAAK,OAAO,IAAI,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,iBAAiB,CAAC,GAAW,EAAE,IAAY,EAAE,EAAU;QAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7E,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBAAE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC;YACtE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAC7B,KAAK,EACL,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,WAAW,CAAC,EACvD,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,CACvB,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;YACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC/B,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACnD,IAAI,MAAM,KAAK,IAAI;oBAAE,OAAO,IAAI,CAAC;gBACjC,MAAM,GAAG,CAAC,MAAM,CAAC;YACnB,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,gBAAgB;gBAAE,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;YACxE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAClC,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,gBAAgB,CAAC,CAKtB;QACC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QACpF,IACE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YACrC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YACzB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAExB,OAAO,IAAI,CAAC;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,WAAW,CAAC,EAAE;gBACzF,GAAG,EAAE,IAAI,CAAC,QAAQ;aACnB,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAChC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrD,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACvD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC;gBACzB,KAAK;gBACL,gBAAgB;gBAChB,gCAAgC;gBAChC,WAAW,GAAG,CAAC,QAAQ,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE;gBACpC,WAAW,GAAG,CAAC,QAAQ,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE;gBACpC,GAAG;aACJ,CAAC,CAAC;YACH,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACtD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC9C,MAAM,KAAK,GAA2B,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;YACjF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3C,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAG,CACX,MAAM,IAAI,CAAC,GAAG,CAAC;oBACb,UAAU;oBACV,eAAe,iBAAiB,CAAC,SAAS,GAAG,CAAC,EAAE;oBAChD,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;iBACnC,CAAC,CACH,CAAC,MAAM;qBACL,KAAK,CAAC,IAAI,CAAC;qBACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;qBACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3C,IAAI,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,SAAS;oBAAE,SAAS,GAAG,IAAI,CAAC;gBAChE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,SAAS,CAAC;oBAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC/E,CAAC;YACD,qEAAqE;YACrE,qDAAqD;YACrD,IAAI,KAAK,GAAG,CACV,MAAM,IAAI,CAAC,GAAG,CAAC;gBACb,MAAM;gBACN,YAAY;gBACZ,eAAe;gBACf,cAAc;gBACd,IAAI;gBACJ,aAAa;gBACb,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE;gBACb,CAAC,CAAC,GAAG;aACN,CAAC,CACH,CAAC,MAAM;iBACL,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,OAAO,CAAC,CAAC;YACnB,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB,CAAC,KAAK,EAAE,CAAC;gBAC3C,SAAS,GAAG,IAAI,CAAC;gBACjB,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAClD,CAAC;YACD,MAAM,IAAI,GAAkB;gBAC1B,KAAK,EAAE,CAAC,CAAC,GAAG;gBACZ,KAAK;gBACL,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,EAAE;gBACX,SAAS;gBACT,MAAM,EAAE,KAAK;aACd,CAAC;YACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpC,qEAAqE;YACrE,uEAAuE;YACvE,qEAAqE;YACrE,wEAAwE;YACxE,oDAAoD;YACpD,MAAM,WAAW,GAAG,CAClB,MAAM,IAAI,CAAC,GAAG,CAAC;gBACb,qBAAqB;gBACrB,KAAK;gBACL,gBAAgB;gBAChB,cAAc;gBACd,0BAA0B;gBAC1B,WAAW,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC,EAAE;gBAC/C,GAAG,CAAC,CAAC,GAAG,KAAK,GAAG,EAAE;gBAClB,IAAI;gBACJ,GAAG,KAAK;aACT,CAAC,CACH,CAAC,MAAM;iBACL,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;iBACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;iBAChD,OAAO,EAAE,CAAC;YACb,IAAI,WAAW,CAAC,MAAM,GAAG,iBAAiB,CAAC,YAAY;gBAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YAC/E,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,KAAK,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,WAAW,CAAC,KAAK,CAC7D,CAAC,EACD,iBAAiB,CAAC,YAAY,CAC/B,EAAE,CAAC;gBACF,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;gBAClB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC;oBAC1B,qBAAqB;oBACrB,MAAM;oBACN,YAAY;oBACZ,eAAe;oBACf,cAAc;oBACd,iBAAiB;oBACjB,iBAAiB;oBACjB,KAAK;oBACL,GAAG,MAAM,IAAI;oBACb,MAAM;oBACN,IAAI;oBACJ,GAAG,KAAK;iBACT,CAAC,CAAC;gBACH,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC9D,IAAI,EAAE,GAAG,QAAQ,CAAC;oBAClB,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC;oBACnB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;wBACtB,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC;4BAAE,SAAS,CAAC,kDAAkD;wBACnF,IAAI,MAAM,IAAI,iBAAiB,CAAC,MAAM,EAAE,CAAC;4BACvC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;4BACtB,MAAM;wBACR,CAAC;wBACD,MAAM,IAAI,CAAC,CAAC;wBACZ,MAAM,GAAG,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;wBAC1C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAC1B,KAAK,EACL,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,SAAS,IAAI,GAAG,EAAE,EAAE,GAAG,MAAM,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAClF,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,CACvB,CAAC;wBACF,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;4BACrB,+DAA+D;4BAC/D,oDAAoD;4BACpD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;4BACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;4BACnB,SAAS;wBACX,CAAC;wBACD,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;wBAC1C,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;4BAChD,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;4BAC/B,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;wBACzB,CAAC;oBACH,CAAC;oBACD,IAAI,EAAE,KAAK,QAAQ;wBACjB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;4BAChB,MAAM;4BACN,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;4BACxB,YAAY,EAAE,EAAE;4BAChB,IAAI;4BACJ,KAAK,EAAE,EAAE;4BACT,GAAG,EAAE,EAAE;yBACR,CAAC,CAAC;gBACP,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,iDAAiD;IACzC,KAAK,CAAC,OAAO,CAAC,GAAW;QAC/B,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,gBAAgB;YAAE,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC9E,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mDAAmD;IAC3C,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,IAAY;QAC5C,MAAM,GAAG,GAAG,GAAG,GAAG,KAAK,IAAI,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,EAAE;YACtE,GAAG,EAAE,IAAI,CAAC,QAAQ;SACnB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,gBAAgB;YAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0EAA0E;IAClE,KAAK,CAAC,UAAU,CAAC,CAAS,EAAE,CAAS;QAC3C,OAAO,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,SAAS,CAAC,GAAW;QACzB,OAAO,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACpD,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,OAA6B,EAAE;QACvD,OAAO,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;QACzE,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAAC,CAOlB;QACC,OAAO,gBAAgB,CACrB;YACE,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,QAAQ;YAClB,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;YACvC,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YACvD,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC;SAC9C,EACD,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CAAC,EAAU,EAAE,GAAW;QAC3C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC;YACjF,OAAO,KAAK,CAAC;QACf,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE;gBAC/E,GAAG,EAAE,IAAI,CAAC,QAAQ;aACnB,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,gBAAgB,CAAC,EAAU;QAC/B,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CACxB,KAAK,EACL,CAAC,cAAc,EAAE,qBAAqB,EAAE,uBAAuB,CAAC,EAChE;YACE,GAAG,EAAE,IAAI,CAAC,QAAQ;SACnB,CACF,CAAC;QACF,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC,MAAM;aACd,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,0EAA0E;IAClE,KAAK,CAAC,WAAW;QACvB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,qBAAqB,EAAE,WAAW,CAAC,CAAC,CAAC;QACjF,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClF,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;gBAAE,SAAS;YACnD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACtD,IAAI,IAAI,CAAC,MAAM;YACb,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE;gBAC3D,GAAG,EAAE,IAAI,CAAC,QAAQ;gBAClB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;aACrD,CAAC,CAAC;QACL,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YACvF,yEAAyE;YACzE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,eAAe;QACb,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACxC,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aACrD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;aAC1C,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;aAC3C,GAAG,CAAC,MAAM,CAAC;aACX,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,SAA2B;QAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,eAAe,EAAE,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9F,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACvD,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC7B,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/docker/Dockerfile

@@ -0,0 +1,284 @@
+# The release image: one image for every shape of qcr (laptop, Action, bot).
+#
+#   docker buildx build --platform linux/amd64,linux/arm64 -f docker/Dockerfile .
+#   docker build -f docker/Dockerfile --target build .     # compile only
+#
+# Stages: `tmux-build` and `build` are throwaway; `release` is the image and
+# the default target. Bench is NOT a target here: it is bench/aacr/Dockerfile
+# built FROM this release image, so the claude arm lives only there
+# (the no-Claude-Code rule) and this file asserts its absence.
+#
+# What the image is (all of it under /opt/qcr, root-owned, read-only to every
+# runtime uid):
+#   - the compiled app (dist/), its production dependencies (pi among them,
+#     from `npm ci`), and src/ + extensions/ so a pi extension loaded from here
+#     resolves its imports;
+#   - the review core's workspace package, packages/pi-plugin (its sources
+#     and its compiled dist/), which node_modules/@quickchatai/pi-quickreview
+#     links to;
+#   - the frozen seeds (agents/, prompts/, seeds/), the profiles, and the seed
+#     manifest, checked against each other at build time (AGENTS.md invariant 3);
+#   - the reviewer context stub as /opt/qcr/AGENTS.override.md: pi loads the
+#     first of AGENTS.override.md / AGENTS.md / CLAUDE.md from the cwd and each
+#     ancestor, and the engine's cwd here is /opt/qcr, so every session and
+#     lens reads the stub, never the contributor guide (the ruling on context
+#     files, tests/fixtures/context-files/inventory.json);
+#   - docker/entrypoint.sh, the one entrypoint (mode dispatch), and
+#     <root>/state, the one writable directory under /opt/qcr.
+#
+# Any uid: the image carries no passwd entry for the user it runs as. The
+# caller picks it (`docker run --user "$(id -u):$(id -g)"`), HOME is fixed at
+# /home/qcr and writable by every uid, and nothing under /opt/qcr but state/
+# is ever written at run time. This replaces the companion image's 1001/1000 split
+# and its COMPANION_UID build arg.
+#
+# The local companion on the owner's PC is this image too, in `companion` mode:
+# `qcr companion rebuild` builds it from the checkout (src/tui/companion.ts
+# appImageBuildArgv) and `docker run --user <host uid>` starts it, so its
+# extensions, prompt and agent set are the image's, never the /workspace mount
+# (no hot reload for the companion - a change lands with a rebuild).
+#
+# The build context is the repo root, narrowed by docker/Dockerfile.dockerignore
+# (BuildKit reads it in preference to the root .dockerignore, which belongs to
+# the clone route's scan sandbox image, docker/companion/Dockerfile).
+
+# ---- pinned versions ---------------------------------------------------------
+# A MIRROR of config.toml [pi] / package.json / group_vars: PI_VERSION must
+# equal the version `npm ci` puts in node_modules (the image's one pi, checked
+# below), and tests/release-image.test.ts fails the moment either default
+# drifts. Bump them together, never one alone.
+ARG NODE_MAJOR=26
+# The Debian release under node. bookworm is the image; bench/aacr/Dockerfile's
+# ocr, claude and pragent arms need git >= 2.41 and python >= 3.12, so bench.sh
+# builds this same file with NODE_DISTRO=trixie for those three.
+ARG NODE_DISTRO=bookworm
+ARG TMUX_VERSION=3.5a
+ARG PI_PACKAGE=@earendil-works/pi-coding-agent
+ARG PI_VERSION=1.4.0
+
+# The always-on bot's tool identity: the uid and gid the model's
+# tools run as, compiled into the setid helper, which can switch to nothing else.
+ARG QCR_TOOL_UID=65534
+ARG QCR_TOOL_GID=4749
+
+# ---- the setid helper ---------------------------------------------------------
+# docker/setid/qcr-setid.c, built here so the release stage carries the binary,
+# not a compiler. It takes setpriv's argv as the engine spells it and refuses any
+# identity but the one compiled in.
+FROM node:${NODE_MAJOR}-${NODE_DISTRO} AS setid-build
+ARG QCR_TOOL_UID
+ARG QCR_TOOL_GID
+COPY docker/setid/qcr-setid.c /src/qcr-setid.c
+RUN mkdir -p /out \
+    && gcc -O2 -Wall -Wextra -Werror -DTOOL_UID="${QCR_TOOL_UID}" -DTOOL_GID="${QCR_TOOL_GID}" \
+         -o /out/qcr-setid /src/qcr-setid.c
+
+# ---- tmux from source --------------------------------------------------------
+# bookworm ships 3.3a, below the >=3.5 that `extended-keys-format csi-u` needs
+# (modified keys actually reaching pi). Built once here so the release stage
+# carries the binary and its two runtime libraries, not a compiler.
+FROM node:${NODE_MAJOR}-${NODE_DISTRO} AS tmux-build
+ARG TMUX_VERSION
+RUN apt-get update && apt-get install -y --no-install-recommends \
+      libevent-dev libncurses-dev bison pkg-config \
+    && curl -fsSL "https://github.com/tmux/tmux/releases/download/${TMUX_VERSION}/tmux-${TMUX_VERSION}.tar.gz" \
+      | tar xz -C /tmp \
+    && cd "/tmp/tmux-${TMUX_VERSION}" && ./configure && make -j"$(nproc)" \
+    && make install DESTDIR=/out \
+    && rm -rf /var/lib/apt/lists/*
+
+# ---- build -------------------------------------------------------------------
+# Compiles the TypeScript and leaves production-only node_modules (native
+# addons - better-sqlite3 - are built here for the target arch).
+FROM node:${NODE_MAJOR}-${NODE_DISTRO} AS build
+WORKDIR /src
+COPY package.json package-lock.json ./
+# A workspace's manifest must be in place before `npm ci`, which links it.
+COPY packages/pi-plugin/package.json packages/pi-plugin/package.json
+RUN npm ci --no-audit --no-fund
+COPY tsconfig.json ./
+COPY scripts/verify-dist.mjs scripts/verify-dist.mjs
+COPY packages packages
+COPY src src
+COPY extensions extensions
+RUN npx tsc -b && node scripts/verify-dist.mjs
+RUN npm prune --omit=dev --no-audit --no-fund && npm cache clean --force
+
+# ---- release -----------------------------------------------------------------
+FROM node:${NODE_MAJOR}-${NODE_DISTRO}-slim AS release
+ARG PI_PACKAGE
+ARG PI_VERSION
+
+ENV DEBIAN_FRONTEND=noninteractive TZ=UTC LANG=C.UTF-8
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+      ca-certificates curl git jq ripgrep openssh-client python3 tzdata \
+      'libevent-core-2.1-7*' libncurses6 libnss-wrapper libcap2-bin \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY --from=tmux-build /out/usr/local/bin/tmux /usr/local/bin/tmux
+RUN tmux -V
+
+# GitHub CLI. The scripts the daemon mode runs (scripts/post-review.sh and
+# friends) call it; bench, which posts nothing, purges it (bench/aacr/Dockerfile).
+RUN curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \
+      -o /usr/share/keyrings/githubcli-archive-keyring.gpg \
+    && echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \
+      > /etc/apt/sources.list.d/github-cli.list \
+    && apt-get update && apt-get install -y --no-install-recommends gh \
+    && rm -rf /var/lib/apt/lists/*
+
+# Repos are bind-mounted under whatever uid the caller maps in; without this
+# git refuses every one of them as "dubious ownership".
+RUN git config --system --add safe.directory '*'
+
+# pi: ONE copy, the pinned package npm ci put in node_modules below.
+# There is no global pi CLI: every pi the app starts is that package's own bin,
+# node_modules/.bin/pi (src/picli.ts), or its SDK. Lenses run on the SDK through
+# our own lens tool (packages/pi-plugin/src/engine/lens/).
+
+# The app. COPY lands root-owned; the chmod below makes it world-readable and
+# writable by nobody.
+WORKDIR /opt/qcr
+COPY package.json package-lock.json ./
+COPY --from=build /src/node_modules ./node_modules
+COPY --from=build /src/dist ./dist
+COPY --from=build /src/packages ./packages
+COPY src ./src
+COPY extensions ./extensions
+COPY agents ./agents
+COPY prompts ./prompts
+COPY seeds ./seeds
+COPY profiles ./profiles
+COPY schemas ./schemas
+COPY scripts ./scripts
+COPY config.example.toml ./config.example.toml
+# The entrypoint and the tmux config the daemon and companion modes start from.
+COPY docker/entrypoint.sh ./docker/entrypoint.sh
+COPY docker/vm/tmux.conf ./docker/vm/tmux.conf
+# The companion mode's own files: its agent set (the lens tool's agents dir,
+# linked into pi's user scope) and the memory health watcher. They ride the
+# image, not the /workspace mount (the companion runs the image's code).
+COPY docker/companion/agents ./docker/companion/agents
+COPY docker/companion/memory-health.mjs ./docker/companion/memory-health.mjs
+# The compose stack and the tunnel sidecars' build context, so a Docker-only
+# install extracts them from the image (the wizard's bring-up prints the one
+# `docker run --entrypoint tar` that does it): nothing is cloned.
+COPY docker-compose.yml ./docker-compose.yml
+COPY docker/tunnel ./docker/tunnel
+# The seed manifest, at the path it has in the repo, so code that reads it
+# relative to the app root finds it in the image.
+COPY tests/fixtures/seed-manifest.json ./tests/fixtures/seed-manifest.json
+# The reviewer context stub, in the engine's cwd (see the header).
+COPY deploy/reviewer/AGENTS.override.md ./AGENTS.override.md
+
+# The build stamp: `qcr version --json` reports it. CI passes the commit.
+ARG BUILD_SHA=unstamped
+LABEL qcr.build-sha="${BUILD_SHA}"
+# What the VM's updater (deploy/qcr-update.sh) reads off the image before it
+# stops anything. qcr.layout says this is the release layout (the legacy image
+# has no such label). qcr.runspec is the run-spec version the image needs of
+# /etc/qcr/update.conf, which `provision` renders: an image that needs a newer
+# one than the VM holds is refused with "re-run provision". qcr.pi is the pi pin
+# the preflight holds to config.toml [pi] and group_vars. qcr.preflight says the
+# image has `daemon --preflight` (src/preflight.ts); qcr-update refuses an image
+# without it. tests/deploy.test.ts pins the runspec to scripts/deploy.sh's
+# RUNSPEC_VERSION.
+LABEL qcr.layout="release" \
+      qcr.preflight="true" \
+      qcr.runspec="2" \
+      qcr.pi="${PI_VERSION}"
+RUN printf '%s\n' "${BUILD_SHA}" > /opt/qcr/BUILD_SHA
+
+# The checks that make this the image it claims to be.
+#   - the seeds: the baked agents/ and prompts/ and their seeds/ canonical
+#     copies all hash to the manifest (AGENTS.md invariant 3). A drifted seed fails the build.
+#   - pi: the one copy, in node_modules, is the ARG's version and the version
+#     config.example.toml [pi] pins; its bin is node_modules/.bin/pi, and no
+#     other pi is on the PATH.
+#   - claude: absent (the no-Claude-Code rule). The claude arm exists only in bench/aacr/.
+RUN cd /opt/qcr \
+    && jq -r '.files | to_entries[] | "\(.value)  seeds/\(.key)"' tests/fixtures/seed-manifest.json | sha256sum -c --quiet - \
+    && jq -r '.files | to_entries[] | "\(.value)  \(.key)"' tests/fixtures/seed-manifest.json | sha256sum -c --quiet - \
+    || { echo "FATAL: the baked seeds do not match tests/fixtures/seed-manifest.json" >&2; exit 1; }
+RUN cd /opt/qcr \
+    && local_="$(node -p "require('/opt/qcr/node_modules/${PI_PACKAGE}/package.json').version")" \
+    && pinned="$(awk '/^\[pi\]/{p=1;next} /^\[/{p=0} p && $1=="version"{gsub(/"/,"",$3);print $3}' config.example.toml)" \
+    && [ "${local_}" = "${PI_VERSION}" ] && [ "${pinned}" = "${PI_VERSION}" ] \
+    || { echo "FATAL: pi versions disagree (ARG ${PI_VERSION}, node_modules ${local_:-?}, config ${pinned:-?})" >&2; exit 1; }
+RUN [ -x /opt/qcr/node_modules/.bin/pi ] && ! command -v pi \
+    || { echo "FATAL: pi must be node_modules/.bin/pi alone (bin: $(ls -l /opt/qcr/node_modules/.bin/pi 2>&1); PATH: $(command -v pi || echo none))" >&2; exit 1; }
+RUN ! command -v claude
+# setpriv (util-linux): the engine starts pi through it, as another uid with no
+# capabilities, so the model's tools cannot read the token-holding process.
+RUN setpriv --version >/dev/null
+# The always-on bot's setid helper. The bot runs as its own uid, not
+# root, so a `docker exec` into it lands as that uid; docker gives a non-root
+# uid no ambient capabilities, so it reaches the tool uid through
+# docker/setid/qcr-setid.c, which carries CAP_SETUID/CAP_SETGID as FILE
+# capabilities and switches to exactly one identity, QCR_TOOL_UID:QCR_TOOL_GID,
+# never root. Only the gate group may run it (the run spec's --group-add, the
+# qcr.setid-gid label below). The model's tools run with no_new_privs and
+# without that group: to them the helper is a plain, unrunnable binary. The
+# tool gid is its own group, shared with the daemon (its second --group-add)
+# only through the directories the model's scripts write. setcap comes last: a
+# chown or a copy afterwards would drop the capabilities.
+ARG QCR_SETID_GID=4748
+ARG QCR_TOOL_UID
+ARG QCR_TOOL_GID
+COPY --from=setid-build /out/qcr-setid /tmp/qcr-setid
+RUN install -d -o root -g root -m 0755 /usr/local/libexec/qcr \
+    && install -o root -g "${QCR_SETID_GID}" -m 0750 /tmp/qcr-setid /usr/local/libexec/qcr/qcr-setid \
+    && rm -f /tmp/qcr-setid \
+    && setcap cap_setuid,cap_setgid=ep /usr/local/libexec/qcr/qcr-setid \
+    && getcap /usr/local/libexec/qcr/qcr-setid | grep -q 'cap_setgid,cap_setuid=ep' \
+    || { echo "FATAL: the setid helper has no cap_setuid,cap_setgid=ep ($(getcap /usr/local/libexec/qcr/qcr-setid 2>&1))" >&2; exit 1; }
+ENV QCR_IMAGE_TOOL_UID="${QCR_TOOL_UID}" QCR_IMAGE_TOOL_GID="${QCR_TOOL_GID}"
+LABEL qcr.setid-gid="${QCR_SETID_GID}" \
+      qcr.tool-uid="${QCR_TOOL_UID}" \
+      qcr.tool-gid="${QCR_TOOL_GID}"
+# flock (util-linux): the login refresher's single-instance lock and the login
+# mode's test for whether one is running (src/loginrefresh/lock.ts).
+RUN flock --version >/dev/null
+
+# Root-owned, world-readable, writable by no runtime uid. The stub is 0444 on
+# its own account: it is a policy surface, not data.
+RUN chmod -R a+rX,go-w /opt/qcr && chmod 0444 /opt/qcr/AGENTS.override.md
+
+# The one writable spot under the app root: <root>/state, where the MutationGate
+# writes state/dryrun and every mode keeps its state files. World-writable and
+# sticky, like HOME below; a state volume mounts over it. The entrypoint
+# refuses to start a mode whose uid cannot write here.
+RUN install -d -m 1777 /opt/qcr/state /opt/qcr/state/ingress && chmod 0555 /opt/qcr/docker/entrypoint.sh
+
+# HOME for whatever uid the caller maps in: world-writable and sticky, so
+# `--user 1234:1234` can create ~/.pi and ~/.cache. The login and state
+# volumes mount over parts of it.
+# ~/.pi is pi's home, the mount point the compose stack's pihome volume lands
+# on: a volume mounted over a directory the image has takes that directory's
+# mode, one over a directory it lacks arrives root-owned and unwritable.
+#
+# pi's agent dir, which `qcr login` mounts the login volume over. A new
+# volume starts as this directory is, so it must be writable by whatever uid
+# the caller logs in as; the login mode then moves everything pi wrote into the
+# login group (docker/entrypoint.sh), and file modes keep it private.
+RUN install -d -m 1777 /home/qcr /home/qcr/.pi && install -d -m 0777 /home/qcr/.pi/agent
+
+# The shared tmux-socket volume: the companion's tmux server listens in
+# it and the containerised TUI drives that server over it. Like the dirs above,
+# a new named volume takes this mode, so any uid can create the socket.
+RUN install -d -m 1777 /run/qcr-tmux
+ENV HOME=/home/qcr
+
+# A default for a bare `docker run`; the wrapper always passes --user. A per-call
+# run that reaches a model starts as root instead (--user 0:0 --cap-drop ALL
+# --cap-add SETUID --cap-add SETGID): the entrypoint drops to QCR_RUN_UID and
+# runs the model's tools as QCR_TOOLS_AS (docker/entrypoint.sh). Started as
+# any other uid, the engine refuses to run the model's tools unless QCR_ALLOW_SHARED_TOOL_UID=1.
+USER 1000:1000
+WORKDIR /opt/qcr
+
+# One entrypoint, mode dispatch (docker/entrypoint.sh): install, mint, cli
+# (the default: `docker run <img> version --json`), daemon, worker, tui,
+# companion, login.
+ENTRYPOINT ["/opt/qcr/docker/entrypoint.sh"]

package/docker/Dockerfile.dockerignore

@@ -0,0 +1,35 @@
+# The release image's build context (docker/Dockerfile). BuildKit reads this
+# file in preference to the root .dockerignore, which is the companion
+# image's allowlist (src/appstamp.ts BAKED_PATHS). Admits only what the
+# release image copies; everything else in the checkout stays out.
+*
+!package.json
+!package-lock.json
+!tsconfig.json
+!packages
+!src
+!extensions
+!agents
+!prompts
+!seeds
+!profiles
+!schemas
+!scripts
+!config.example.toml
+!docker/entrypoint.sh
+!docker/setid/qcr-setid.c
+!docker/vm/tmux.conf
+!docker/companion/agents
+!docker/companion/memory-health.mjs
+!docker-compose.yml
+!docker/tunnel
+!tests/fixtures/seed-manifest.json
+!deploy/reviewer/AGENTS.override.md
+**/node_modules
+**/.git
+# A package's build output and its packed data are built in the image, never
+# carried in from the checkout.
+packages/*/dist
+packages/*/assets
+# Agent instruction files, never in an image.
+**/CLAUDE.md

package/docker/README.md

@@ -0,0 +1,221 @@
+# The compose stack — run the daemon on any host with Docker
+
+The review daemon, its memory engine and an optional webhook tunnel, from the
+released images: no checkout, no build, no Ansible, no cloud account. The
+repo-root `docker-compose.yml` is the whole stack, and the release image
+carries a copy of it. The Ansible route (`deploy/ansible/`) remains the path
+for a managed VM; both run the same daemon.
+
+> **`qcr onboard` drives this route for you.** The wizard's **topology** step
+> offers it as one of two first-class answers — "this computer", the zero-server
+> way to run QuickReview — and then does everything below: it captures your uid,
+> writes the version pin, `QCR_UID` and `COMPOSE_PROFILES` into the project
+> `.env`, points `config.toml` at the memory service, tells you about the first
+> pull before starting it, streams it, and checks the container states
+> afterwards. Where the wizard itself runs inside the image there is no Docker
+> to drive, so it prints the exact commands for your host instead and you run
+> them there. It composes this path; it does not replace it, and drift between
+> the two is a bug. Everything here stays true for a manual run. See
+> [../docs/onboarding.md](../docs/onboarding.md).
+
+## Quick start
+
+The images are public on ghcr.io, so no registry login is needed. In an empty directory (the project directory):
+
+```sh
+# 1. the compose file and the tunnels' build context, out of the image
+docker run --rm --entrypoint tar ghcr.io/quickchatai/quickreview:<version> \
+  -C /opt/qcr -cf - docker-compose.yml docker/tunnel | tar -xf -
+
+# 2. .env: what the stack needs (the wizard writes this for you)
+cat > .env <<EOF
+QCR_VERSION=<version>
+QCR_UID=$(id -u)
+QCR_CONFIG_HOME=$HOME/.config/qcr/default
+QCR_SECRETS_DIR=$HOME/.config/qcr/default/secrets
+QCR_CLONE_DIR=<the reviewed repo's name, or your [github] clone_dir>
+EOF
+
+# 3. pull and start
+docker compose pull --ignore-buildable
+docker compose up -d
+
+# 4. check
+curl -s http://127.0.0.1:8787/health
+docker compose logs -f daemon
+```
+
+`QCR_VERSION` is the one pin: the daemon image and the memory image are always
+the same release. To move to another release, change it and run step 3 again.
+Nothing is built except the tunnel sidecar you select (below), and the first
+pull is the slow one: it downloads two images, and the memory one carries its
+embedding model.
+
+## What the stack is
+
+- **`daemon`** — `ghcr.io/quickchatai/quickreview`, run as `daemon` mode, as
+  your uid (`QCR_UID`). The model's tools run as another uid and gid
+  (`65534:4749`, compiled into the image) that cannot read your secrets or
+  pi's login: the daemon reaches it through the image's setid helper, which
+  switches to that one identity and nothing else. So the daemon gets the
+  helper's gate group and the tool gid (`group_add: 4748, 4749`) and, of all
+  capabilities, only `SETUID`/`SETGID` (the helper), and no
+  `no-new-privileges`, which would void the helper. The directories the
+  model's scripts write (`state/`, `verdict/`, `commands/`) belong to the tool
+  gid, setgid, with `state/` and `commands/` sticky, so the tools never rename
+  or remove the daemon's entries. Keep the host's `kernel.yama.ptrace_scope` at
+  1 or higher: every PR's tools share the one tool uid, and at 0 one PR's
+  tools could trace another's. It publishes one port, the webhook port `8787`, bound
+  to `127.0.0.1` by default (`QCR_WEBHOOK_BIND` / `QCR_WEBHOOK_PORT` to
+  change).
+- **`volume-init`** — a one-shot root container that runs before the daemon
+  and hands the roots of the daemon's volumes to `QCR_UID` (it touches no file
+  inside them), shares `state/`, `verdict/` and `commands/` with the tool gid,
+  makes the operator channel `commands/operator` root's own `0755`, then
+  exits.
+- **`memory`** — `ghcr.io/quickchatai/quickreview-memory`: OpenViking, its
+  venv, llama-cpp-python and the pinned embedding model, in a container of its
+  own. It boots offline. `config.toml` must say `[openviking] endpoint =
+"remote"` and `host = "memory"` (the wizard's bring-up writes both); the
+  daemon then only probes its health. Port `1933` is on the compose network and
+  is deliberately never published.
+- **a tunnel**, optional, behind a compose profile (below).
+
+## What the containers expect
+
+- **A config home, mounted read-only** at `/opt/quickreview/config-home`
+  (`QCR_CONFIG_HOME`, and `QCR_CONFIG_NAME` for the file in it, default
+  `config.toml`). The daemon and the memory service read the same file. Both
+  variables are required: an unset one fails `docker compose` before anything
+  starts, rather than mounting an empty directory.
+- **A secrets dir, mounted read-only** at `/opt/quickreview/secrets`
+  (`QCR_SECRETS_DIR`, required; the install's
+  `~/.config/qcr/<install>/secrets`):
+  - `app_id`, `app.pem`, `webhook_secret` — the GitHub App credential
+    (required; the only credential the system ever uses).
+  - `openai_api_key` — optional; pi's model credential on the API-key route
+    (pi can instead use ChatGPT OAuth: `/login` once inside a session; tokens
+    persist on the pihome volume). Never read for memory embeddings.
+  - `openai_embeddings_api_key` — optional, and only under the hosted-embeddings
+    opt-in (`config.toml [openviking] embedding_provider = "openai"`, carried
+    into the memory container as `QCR_OPENVIKING_EMBEDDING_*` in the project
+    `.env`). By default the memory engine embeds locally and nothing but the
+    model call leaves the machine
+    ([docs/memory-embeddings.md](../docs/memory-embeddings.md)).
+  - `openviking_root_key`, `openviking_reviewer_key` — optional; without the
+    root key the memory engine degrades loudly to `auth_mode=dev` (no
+    per-user confinement) rather than blocking the boot.
+    `deploy/collect-secrets.sh` can assemble the dir interactively, from a clone;
+    the wizard's secrets steps write the same files.
+- **Named volumes** (compose creates them): `qcr-state` (`/opt/qcr/state` —
+  SQLite, heartbeat, the dry-run record, the onboarding checklist), `qcr-pihome`
+  (`/home/qcr/.pi` — pi OAuth tokens + session JSONLs; sticky conversations
+  depend on it surviving a recreate), `qcr-memory` (the memory store) and
+  `qcr-ingress` (the tunnel's hostname file), and the daemon's runtime trees
+  under the read-only app root, the same set the VM mounts: `qcr-wt`
+  (`/opt/qcr/wt`, the PR worktrees), `qcr-archive`, `qcr-commands`,
+  `qcr-digest`, `qcr-inject`, `qcr-verdict`, `qcr-sessions-home`
+  (`/opt/qcr/pihome`, the sessions' own HOME) and `qcr-base-clone`
+  (`/opt/qcr/$QCR_CLONE_DIR`, the reviewed repo's base clone; the variable is
+  required). `docker compose down` keeps all of them; `docker compose down -v`
+  deletes them, memory included.
+
+No checkout is mounted, and neither is `docker.sock`: a stack that can start
+containers could hand a review session the host.
+
+## Ingress — your choice, and three of the shapes are sidecars
+
+**Any HTTPS proxy or tunnel that forwards your webhook hostname to the webhook
+port works** — the GitHub App just needs a reachable HTTPS webhook URL. The
+compose file carries the three tunnel shapes as optional sidecars,
+each behind its own profile, and the onboarding wizard's ingress step picks one
+for you (it writes `COMPOSE_PROFILES` into the project `.env` and the matching
+`[ingress]` block into `config.toml`). **With no profile selected you get the
+daemon and its memory alone** — the fourth shape.
+
+| `COMPOSE_PROFILES` | service        | what you get                                                           | what it costs                                                                                                              |
+| ------------------ | -------------- | ---------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------- |
+| `quick-tunnel`     | `tunnel-quick` | cloudflared quick tunnel — no account, working in seconds              | the `*.trycloudflare.com` hostname **rotates** on every restart, and there is no SLA                                       |
+| `ngrok`            | `tunnel-ngrok` | a stable hostname with a reserved domain                               | an ngrok account, and free-tier caps (~20k requests/month, ~1 GB transfer, 1 agent, ~120 req/min)                          |
+| `named-tunnel`     | `tunnel-named` | your own Cloudflare tunnel on your own domain — what the VM route uses | a Cloudflare account, a zone, and a connector token                                                                        |
+| _(unset)_          | —              | nothing exposed at all; the reconcile poll triggers reviews            | up to one poll interval of latency, and author-reply routing plus the `[feedback]` loop go quiet (both are webhook-driven) |
+
+The sidecars are the one thing built here rather than pulled: a thin wrapper
+over the vendor's own image, built from `docker/tunnel/` (step 1 above extracts
+it) the first time a profile selects one.
+
+The rotating hostname is safe because the daemon fixes itself: the sidecar
+writes its assigned **bare hostname** to `/ingress/hostname` on the shared
+`qcr-ingress` volume, which the daemon sees at
+`/opt/qcr/state/ingress/hostname` — the default `[ingress] hostname_file`
+— and re-points the GitHub App's own webhook URL when it changes
+(`src/webhookheal.ts`; the one mutation class that executes even in dry-run).
+A sidecar restart is therefore a non-event: a new name is written, the daemon
+follows it, and the reconcile poll covers the seconds in between.
+
+```sh
+COMPOSE_PROFILES=quick-tunnel docker compose up -d      # or set it in .env
+docker compose logs -f tunnel-quick                     # the assigned hostname
+```
+
+Credentials never reach a command line. The ngrok authtoken is a file,
+`<secrets dir>/ngrok_authtoken`, and the named tunnel's connector token is the
+`tunnel_token` the secrets wizard already collects; both sidecars mount the
+secrets dir **read-only** and the wrapper passes the value to the client in its
+environment:
+
+```sh
+(umask 077; printf %s '<ngrok authtoken>' > ~/.config/qcr/default/secrets/ngrok_authtoken)
+```
+
+The wrapper itself is `docker/tunnel/sidecar.mjs`: it runs the vendor's own
+binary (copied verbatim out of the official `cloudflare/cloudflared` and
+`ngrok/ngrok` images, pinned by tag and version-verified at build time),
+captures the hostname from the client's output, writes it atomically, restarts
+the client forever on a capped backoff, and never exits — a tunnel that is down
+must never wedge the stack.
+
+Anything else still works too: a reverse proxy with TLS on the same host
+(Caddy, nginx + certbot, …), the Ansible route's host-level cloudflared
+(`cloudflared_enabled`, default true there), or any other tunnel pointed at
+`localhost:8787`.
+
+OpenViking's port (1933) is on the compose network and is deliberately never
+published — not to the host, and not to a tunnel sidecar either (they mount one
+directory: the hostname file's). Per-user confinement is server-side and every
+review session already runs inside the daemon's container. Do not add 1933 to
+any `ports:`.
+
+## Pins — how versions are honored
+
+The images are built from `docker/Dockerfile` and `docker/memory/Dockerfile`
+by the release workflow; the versions they carry are ARG defaults there:
+
+| ARG                                                  | mirrors                                                                                                                                                                                                             |
+| ---------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `PI_VERSION` / `PI_PACKAGE`                          | `config.toml [pi]` = `package.json` = `group_vars pi_version`/`pi_npm_package`                                                                                                                                      |
+| `OPENVIKING_VERSION`                                 | `config.toml [openviking] version` = `group_vars openviking_version`                                                                                                                                                |
+| `LLAMA_CPP_PYTHON_VERSION`                           | same triple mirror (undeclared-but-required embedder dep)                                                                                                                                                           |
+| `LOCAL_EMBEDDER_MODEL` / `_DIR` / `_URL` / `_SHA256` | the local English embedder's model file: `config.toml [openviking] local_embedder_file`/`_url`/`_sha256` = `group_vars openviking_local_embedder_*`; downloaded at build time and refused unless its sha256 matches |
+| `TMUX_VERSION`, `NODE_MAJOR`, `OPENVIKING_VENV`      | `group_vars`                                                                                                                                                                                                        |
+
+`tests/release-image.test.ts` and `tests/memory-image.test.ts` fail the moment
+a default drifts from `config.toml` or `deploy/ansible/group_vars/all.yml`, and
+the daemon refuses to start when `config.toml [pi] version` is not the version
+of the pi inside the image. Bumping a pin is a deliberate act: change every
+mirror together and cut a new release; a stack picks it up by changing
+`QCR_VERSION`. There is nothing to rebuild on your side.
+
+Runtime knobs for the memory engine (port, workers, auth mode, key file names)
+are `QCR_OPENVIKING_*` env vars on the `memory` service, defaulting to the same
+values `group_vars` carries — see `docker/memory/entrypoint.sh`'s header block.
+
+## Developing on the stack
+
+A clone is for working on QuickReview itself, not for running it; the clone
+route is in [CONTRIBUTING.md](../CONTRIBUTING.md). To run locally built
+images through this file, build them and name them:
+`docker build -f docker/Dockerfile -t ghcr.io/quickchatai/quickreview:dev .` and
+`docker build -f docker/memory/Dockerfile -t ghcr.io/quickchatai/quickreview-memory:dev .`,
+set `QCR_VERSION=dev`, and skip the pull: `docker compose up -d` finds both
+images locally.