@quickchatai/quickreview 0.0.0-stage → 1.2.0

package/dist/src/takeoverpi.js

@@ -0,0 +1,262 @@
+// The pane's side of a takeover: what runs inside tmux `takeover-pr-<n>`.
+//
+// The daemon (src/takeover.ts) starts
+//
+//     node dist/src/ipc/launcher.js <launch-file> -- node dist/src/takeoverpi.js <spec-file>
+//
+// so this process already holds the takeover's IPC capability on fd 3 (the
+// launcher claimed it). It then
+//
+//   1. reads the spec file the daemon wrote (0600, no secret) and removes it;
+//   2. makes the pi its OWN agent dir: the owner's login BORROWED as a
+//      refresh-blanked copy (packages/pi-plugin/src/engine/auth.ts), never the refresher's file
+//      and never a write to it, plus the model and settings files. The pi cannot
+//      refresh, so it can neither rotate the grant nor hold a file the refresher
+//      reads; the copy is refused when its token would expire inside the lease's
+//      idle window;
+//   3. runs interactive pi on the PR's REAL session JSONL (`--session`, which
+//      appends: not a fork) in the production tree's root even when the JSONL's
+//      header names the legacy tree (src/picwd.ts), with bash-guard (its takeover policy blocks the post
+//      scripts), the read tools and bash, and no write tools;
+//   4. returns pi's exit code. The tmux session ends with this process, and the
+//      daemon's sweep frees the lease.
+//
+// The pi runs as the separate tool uid where the image has one, as a debug
+// round's does. The env it gets is an allowlist: no GitHub token of any name.
+import { spawn } from "node:child_process";
+import { chmodSync, copyFileSync, existsSync, readFileSync, unlinkSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { GITHUB_TOKEN_ENVS } from "@quickchatai/pi-quickreview/src/envstrip.js";
+import { routeModelSpecForLogin } from "@quickchatai/pi-quickreview/src/modelroute.js";
+import { CAP_FD_INDEX } from "./ipc/capability.js";
+import { PI_REFRESH_MARGIN_MS, ENGINE_AUTH_WORDS, copyPiAuth, } from "@quickchatai/pi-quickreview/src/engine/auth.js";
+import { TOOL_UMASK, checkToolUid, shareWithToolGroup, toolIsolation, toolUidEnv, } from "@quickchatai/pi-quickreview/src/engine/tooluid.js";
+/** The env names the pane's pi may inherit. Everything else is dropped. */
+export const TAKEOVER_ENV_ALLOW = [
+    "PATH",
+    "HOME",
+    "LANG",
+    "LC_ALL",
+    "LC_CTYPE",
+    "TZ",
+    "TMPDIR",
+    "TERM",
+    "COLORTERM",
+    "NODE_EXTRA_CA_CERTS",
+    "SSL_CERT_FILE",
+    "SSL_CERT_DIR",
+    "HTTP_PROXY",
+    "HTTPS_PROXY",
+    "NO_PROXY",
+    "http_proxy",
+    "https_proxy",
+    "no_proxy",
+    "QCR_TOOL_UID",
+    "QCR_TOOL_GID",
+    "QCR_TOOL_UID_REQUIRED",
+    "QCR_ALLOW_SHARED_TOOL_UID",
+    // The capability fd's index: the launcher sets it, the post shims read it.
+    "QCR_IPC_CAP_FD",
+];
+/** The agent-dir files the pi needs besides the login: copied, not linked. */
+const AGENT_FILES = ["models.json", "settings.json"];
+/** Read the spec the daemon wrote and remove the file. Throws on anything that is
+ * not a v1 takeover spec. */
+export function readTakeoverSpec(file) {
+    const raw = JSON.parse(readFileSync(file, "utf8"));
+    try {
+        unlinkSync(file);
+    }
+    catch {
+        /* removed by someone else */
+    }
+    if (!raw ||
+        raw.v !== 1 ||
+        typeof raw.pr !== "number" ||
+        raw.session !== `takeover-pr-${raw.pr}` ||
+        typeof raw.session_file !== "string" ||
+        typeof raw.agent_dir !== "string" ||
+        typeof raw.borrow_dir !== "string" ||
+        typeof raw.model !== "string" ||
+        typeof raw.cwd !== "string" ||
+        typeof raw.idle_ms !== "number" ||
+        !Array.isArray(raw.extensions) ||
+        typeof raw.env !== "object" ||
+        raw.env === null)
+        throw new Error("not a takeover spec");
+    return raw;
+}
+/** The login file in an agent dir, as text; null when there is none. */
+export function readLogin(agentDir) {
+    try {
+        return readFileSync(join(agentDir, "auth.json"), "utf8");
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The pi's own agent dir: the owner's login borrowed as a refresh-blanked copy
+ * (0600, refused when its token would expire inside the lease's idle window plus
+ * pi's refresh margin), and the model and settings files. Nothing is written to
+ * the owner's dir.
+ */
+export function prepareBorrowedAgent(spec, now) {
+    const { expiresAt } = copyPiAuth({
+        srcDir: spec.agent_dir,
+        dstDir: spec.borrow_dir,
+        needMs: spec.idle_ms + PI_REFRESH_MARGIN_MS,
+        words: ENGINE_AUTH_WORDS,
+        ...(now ? { now } : {}),
+    });
+    for (const name of AGENT_FILES) {
+        const from = join(spec.agent_dir, name);
+        if (!existsSync(from))
+            continue;
+        const to = join(spec.borrow_dir, name);
+        copyFileSync(from, to);
+        chmodSync(to, 0o600);
+    }
+    return { expiresAt };
+}
+/** The entry that runs pi's CLI in its own cwd (src/picwd.ts), beside this file. */
+export const PICWD_MAIN = fileURLToPath(new URL("./picwd.js", import.meta.url));
+/** How a pane starts its pi: pi's own CLI through src/picwd.ts, so a session the
+ * legacy bot wrote (its header names the legacy tree) still runs its tools in the
+ * pane's cwd, the production tree's root, where bash-guard sanctions the scripts.
+ * An explicit `piBin` (a test's or a dev's own pi) is started as given. Pure. */
+export function paneLaunch(piArgv, piBin, node = process.execPath) {
+    return piBin !== undefined
+        ? { bin: piBin, argv: piArgv }
+        : { bin: node, argv: [PICWD_MAIN, ...piArgv] };
+}
+/** pi's argv for a takeover. Pure. */
+export function takeoverArgv(spec) {
+    return [
+        // Pre-trust the cwd's project resources: the modal would stall the pane.
+        "--approve",
+        // pi discovers no extension or skill of its own.
+        "-ne",
+        "-ns",
+        "--model",
+        spec.model,
+        // The PR's real session, written to (not forked).
+        "--session",
+        spec.session_file,
+        "--tools",
+        spec.tools,
+        ...(spec.system_prompt_file ? ["--system-prompt", spec.system_prompt_file] : []),
+        ...spec.extensions.flatMap((e) => ["--extension", e]),
+        "--name",
+        spec.session,
+    ];
+}
+/** The env the pi is started with: the allowlisted part of the pane's env, then the
+ * daemon's spec env, then the agent dir. No GitHub token of any name. */
+export function takeoverEnv(base, spec) {
+    const env = {};
+    for (const name of TAKEOVER_ENV_ALLOW)
+        if (base[name] !== undefined)
+            env[name] = base[name];
+    Object.assign(env, spec.env);
+    env["PI_CODING_AGENT_DIR"] = spec.borrow_dir;
+    for (const name of GITHUB_TOKEN_ENVS)
+        delete env[name];
+    return env;
+}
+export function onTerminal(cmd) {
+    return new Promise((resolve) => {
+        // stdio[3] is the capability fd the launcher passed to this process.
+        const child = spawn(cmd.bin, cmd.args, {
+            cwd: cmd.cwd,
+            env: cmd.env,
+            stdio: ["inherit", "inherit", "inherit", CAP_FD_INDEX],
+        });
+        // The terminal's ^C reaches pi and this process alike; pi decides what it means.
+        const ignore = () => { };
+        const forward = (sig) => () => child.kill(sig);
+        const relays = [
+            ["SIGINT", ignore],
+            ["SIGTERM", forward("SIGTERM")],
+            ["SIGHUP", forward("SIGHUP")],
+        ];
+        for (const [sig, fn] of relays)
+            process.on(sig, fn);
+        const done = (code) => {
+            for (const [sig, fn] of relays)
+                process.off(sig, fn);
+            resolve(code);
+        };
+        child.on("error", (e) => {
+            console.error(`could not start ${cmd.bin}: ${e.message}`);
+            done(1);
+        });
+        child.on("close", (code) => done(code ?? 1));
+    });
+}
+/** Run the takeover the spec describes; resolves pi's exit code. A login that
+ * cannot be borrowed is a one-line failure and no pi: the pane ends, and the
+ * daemon's sweep frees the lease. */
+export async function runTakeover(specFile, deps = {}) {
+    const log = deps.log ?? ((line) => console.error(line));
+    const procEnv = deps.env ?? process.env;
+    let spec;
+    try {
+        spec = readTakeoverSpec(specFile);
+    }
+    catch (e) {
+        log(`takeover: ${e.message}`);
+        return 2;
+    }
+    try {
+        // The pi's bash runs in pi's uid: where the image asks for a separate tool uid
+        // the pi is started as that uid (below); where it asked and could not arrange
+        // it, there is no takeover.
+        checkToolUid(procEnv, {
+            what: "a takeover in pi",
+            instead: "none; the image must arrange the tool uid",
+            isolated: true,
+        });
+        prepareBorrowedAgent(spec, deps.now);
+    }
+    catch (e) {
+        log(`takeover: ${e.message}`);
+        return 3;
+    }
+    const env = takeoverEnv(procEnv, spec);
+    // An OpenAI model runs on the OpenAI login the borrowed copy holds
+    // (packages/pi-plugin/src/modelroute.ts): the spec's own provider when it is there.
+    spec = { ...spec, model: routeModelSpecForLogin(spec.model, readLogin(spec.borrow_dir), env) };
+    const pi = paneLaunch(takeoverArgv(spec), deps.piBin ?? spec.pi_bin);
+    const launch = toolIsolation(pi.bin, pi.argv, procEnv);
+    if ("refused" in launch) {
+        log(`takeover: ${launch.refused}`);
+        return 3;
+    }
+    // The pi, as the tool uid, reads the agent dir the run uid made private, and
+    // appends to the PR's JSONL, which the run uid's worker wrote. What it
+    // writes stays group-writable for the worker of the next round.
+    const isolated = launch.isolated;
+    if (isolated) {
+        shareWithToolGroup(spec.borrow_dir);
+        shareWithToolGroup(dirname(spec.session_file));
+        process.umask(TOOL_UMASK);
+    }
+    return (deps.run ?? onTerminal)({
+        bin: launch.bin,
+        args: launch.argv,
+        cwd: spec.cwd,
+        env: isolated ? toolUidEnv(env) : env,
+    });
+}
+// Run only as the entry point, not when a test imports runTakeover.
+if (process.argv[1]?.endsWith("takeoverpi.js")) {
+    const file = process.argv[2];
+    if (!file) {
+        console.error("usage: takeoverpi <spec-file>");
+        process.exit(2);
+    }
+    void runTakeover(file).then((code) => process.exit(code));
+}
+//# sourceMappingURL=takeoverpi.js.map

package/dist/src/takeoverpi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"takeoverpi.js","sourceRoot":"","sources":["../../src/takeoverpi.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,EAAE;AACF,sCAAsC;AACtC,EAAE;AACF,6FAA6F;AAC7F,EAAE;AACF,2EAA2E;AAC3E,gCAAgC;AAChC,EAAE;AACF,8EAA8E;AAC9E,uEAAuE;AACvE,gGAAgG;AAChG,iFAAiF;AACjF,iFAAiF;AACjF,iFAAiF;AACjF,oBAAoB;AACpB,8EAA8E;AAC9E,gFAAgF;AAChF,yGAAyG;AACzG,8DAA8D;AAC9D,gFAAgF;AAChF,uCAAuC;AACvC,EAAE;AACF,2EAA2E;AAC3E,8EAA8E;AAC9E,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,UAAU,GACX,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,aAAa,EACb,UAAU,GACX,MAAM,mDAAmD,CAAC;AAG3D,2EAA2E;AAC3E,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,UAAU;IACV,IAAI;IACJ,QAAQ;IACR,MAAM;IACN,WAAW;IACX,qBAAqB;IACrB,eAAe;IACf,cAAc;IACd,YAAY;IACZ,aAAa;IACb,UAAU;IACV,YAAY;IACZ,aAAa;IACb,UAAU;IACV,cAAc;IACd,cAAc;IACd,uBAAuB;IACvB,2BAA2B;IAC3B,2EAA2E;IAC3E,gBAAgB;CACjB,CAAC;AAEF,8EAA8E;AAC9E,MAAM,WAAW,GAAG,CAAC,aAAa,EAAE,eAAe,CAAU,CAAC;AAE9D;6BAC6B;AAC7B,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAiC,CAAC;IACnF,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IACD,IACE,CAAC,GAAG;QACJ,GAAG,CAAC,CAAC,KAAK,CAAC;QACX,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ;QAC1B,GAAG,CAAC,OAAO,KAAK,eAAe,GAAG,CAAC,EAAE,EAAE;QACvC,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ;QACpC,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;QACjC,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;QAClC,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;QAC7B,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;QAC3B,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAC9B,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;QAC3B,GAAG,CAAC,GAAG,KAAK,IAAI;QAEhB,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,OAAO,GAAmB,CAAC;AAC7B,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAgE,EAChE,GAAkB;IAElB,MAAM,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC;QAC/B,MAAM,EAAE,IAAI,CAAC,SAAS;QACtB,MAAM,EAAE,IAAI,CAAC,UAAU;QACvB,MAAM,EAAE,IAAI,CAAC,OAAO,GAAG,oBAAoB;QAC3C,KAAK,EAAE,iBAAiB;QACxB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxB,CAAC,CAAC;IACH,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACvC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACvB,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,CAAC;AACvB,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAEhF;;;iFAGiF;AACjF,MAAM,UAAU,UAAU,CACxB,MAAgB,EAChB,KAAc,EACd,OAAe,OAAO,CAAC,QAAQ;IAE/B,OAAO,KAAK,KAAK,SAAS;QACxB,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;QAC9B,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;AACnD,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,YAAY,CAAC,IAAkB;IAC7C,OAAO;QACL,yEAAyE;QACzE,WAAW;QACX,iDAAiD;QACjD,KAAK;QACL,KAAK;QACL,SAAS;QACT,IAAI,CAAC,KAAK;QACV,kDAAkD;QAClD,WAAW;QACX,IAAI,CAAC,YAAY;QACjB,SAAS;QACT,IAAI,CAAC,KAAK;QACV,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QACrD,QAAQ;QACR,IAAI,CAAC,OAAO;KACb,CAAC;AACJ,CAAC;AAED;yEACyE;AACzE,MAAM,UAAU,WAAW,CACzB,IAAkD,EAClD,IAA8C;IAE9C,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,kBAAkB;QAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5F,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7B,GAAG,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,iBAAiB;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IACvD,OAAO,GAAG,CAAC;AACb,CAAC;AAiBD,MAAM,UAAU,UAAU,CAAC,GAK1B;IACC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,qEAAqE;QACrE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE;YACrC,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC;SACvD,CAAC,CAAC;QACH,iFAAiF;QACjF,MAAM,MAAM,GAAG,GAAS,EAAE,GAAE,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,CAAC,GAAmB,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAwC;YAClD,CAAC,QAAQ,EAAE,MAAM,CAAC;YAClB,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YAC/B,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;SAC9B,CAAC;QACF,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,MAAM;YAAE,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAQ,EAAE;YAClC,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACtB,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1D,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;qCAEqC;AACrC,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,OAAwB,EAAE;IAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACxC,IAAI,IAAkB,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,aAAc,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC;QACH,+EAA+E;QAC/E,8EAA8E;QAC9E,4BAA4B;QAC5B,YAAY,CAAC,OAAO,EAAE;YACpB,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,2CAA2C;YACpD,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,aAAc,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvC,mEAAmE;IACnE,oFAAoF;IACpF,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,sBAAsB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAC/F,MAAM,EAAE,GAAG,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;QACxB,GAAG,CAAC,aAAa,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACnC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,6EAA6E;IAC7E,uEAAuE;IACvE,gEAAgE;IAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,IAAI,QAAQ,EAAE,CAAC;QACb,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpC,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAC/C,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC;QAC9B,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG;KACtC,CAAC,CAAC;AACL,CAAC;AAED,oEAAoE;AACpE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,KAAK,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5D,CAAC"}

package/dist/src/terminal-failure.js

@@ -0,0 +1,26 @@
+export async function resolveTerminalFailure(deps, input) {
+    let disposition;
+    try {
+        disposition = await deps.getPrDisposition(input.pr);
+    }
+    catch (error) {
+        return {
+            ok: false,
+            reason: `could not prove terminal GitHub state for PR #${input.pr}: ${String(error)}`,
+        };
+    }
+    if (disposition.kind === "open") {
+        return { ok: false, reason: `GitHub says PR #${input.pr} is still open` };
+    }
+    if (disposition.kind === "closed" && disposition.head_sha !== input.head_sha) {
+        return {
+            ok: false,
+            reason: `GitHub closed PR #${input.pr} head ${disposition.head_sha} != expected failure head ${input.head_sha}`,
+        };
+    }
+    return deps.store.resolveTerminalReviewFailure({
+        ...input,
+        disposition: disposition.kind,
+    });
+}
+//# sourceMappingURL=terminal-failure.js.map

package/dist/src/terminal-failure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-failure.js","sourceRoot":"","sources":["../../src/terminal-failure.ts"],"names":[],"mappings":"AAcA,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAyB,EACzB,KAA6B;IAE7B,IAAI,WAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,iDAAiD,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE;SACtF,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,KAAK,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC5E,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC7E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,qBAAqB,KAAK,CAAC,EAAE,SAAS,WAAW,CAAC,QAAQ,6BAA6B,KAAK,CAAC,QAAQ,EAAE;SAChH,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC;QAC7C,GAAG,KAAK;QACR,WAAW,EAAE,WAAW,CAAC,IAAI;KAC9B,CAAC,CAAC;AACL,CAAC"}

package/dist/src/thread-resolution-refusal.js

@@ -0,0 +1,4 @@
+/** A permanent refusal by the own-thread resolver, never a transport failure. */
+export class ThreadResolutionRefusal extends Error {
+}
+//# sourceMappingURL=thread-resolution-refusal.js.map

package/dist/src/thread-resolution-refusal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"thread-resolution-refusal.js","sourceRoot":"","sources":["../../src/thread-resolution-refusal.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,MAAM,OAAO,uBAAwB,SAAQ,KAAK;CAAG"}

package/dist/src/tmux.js

@@ -0,0 +1,126 @@
+// A thin tmux wrapper (spec §9: tmux lives inside the container; the local
+// build targets the same commands). Every session-manager command — git, tmux,
+// pi — goes through the injectable ExecFn (packages/pi-plugin/src/execfn.ts, re-exported here) so
+// tests can record invocations instead of spawning anything.
+import { nodeExec, runOrThrow, } from "@quickchatai/pi-quickreview/src/execfn.js";
+export { ExecError, nodeExec, runOrThrow, } from "@quickchatai/pi-quickreview/src/execfn.js";
+/** `Tmux.listSessionsKnown`'s default bound: a tmux that has not answered by
+ * then is killed and read as "could not ask" (null). */
+export const LIST_SESSIONS_TIMEOUT_MS = 10_000;
+/**
+ * Does tmux's stderr say "no server running"? Exactly two answers do:
+ * `no server running on <sock>` (a stale socket, ECONNREFUSED) and
+ * `error connecting to <sock> (No such file or directory)` (no socket at all).
+ * tmux prints the same `error connecting to` prefix for EVERY other connect
+ * errno — Permission denied, EAGAIN — and those are "could not ask", never
+ * "none alive".
+ */
+export function isNoTmuxServer(stderr) {
+    return /no server running|error connecting to .*\(No such file or directory\)/i.test(stderr);
+}
+/** A successful listing's session names, one per non-blank line. */
+function sessionNames(stdout) {
+    return stdout
+        .split("\n")
+        .map((l) => l.trim())
+        .filter((l) => l.length > 0);
+}
+/**
+ * Minimal tmux surface used by the session manager. Deliberately tiny: list,
+ * has, new, kill, send. Nothing here ever kills a session it did not name.
+ */
+export class Tmux {
+    exec;
+    bin;
+    constructor(opts = {}) {
+        this.exec = opts.exec ?? nodeExec;
+        this.bin = opts.bin ?? "tmux";
+    }
+    /** Session names, empty when no tmux server is running. */
+    async listSessions() {
+        const res = await this.exec(this.bin, ["list-sessions", "-F", "#{session_name}"]);
+        if (res.code !== 0)
+            return []; // "no server running on ..." is not an error here
+        return sessionNames(res.stdout);
+    }
+    /**
+     * Session names — or null when tmux could not be asked: its binary would
+     * not start, it did not answer inside `timeoutMs` (killed), or it failed for
+     * any reason but having no server. `listSessions` folds every failure into
+     * []; a caller that must never read "could not ask" as "none alive" — the
+     * archiver's eligibility — reads this one.
+     *
+     * Only `isNoTmuxServer`'s two answers mean "no server, so no sessions"
+     * (the `rollover.ts` kill reads the same two).
+     */
+    async listSessionsKnown(timeoutMs = LIST_SESSIONS_TIMEOUT_MS) {
+        let res;
+        try {
+            res = await this.exec(this.bin, ["list-sessions", "-F", "#{session_name}"], { timeoutMs });
+        }
+        catch {
+            return null;
+        }
+        // A negative code is a kill (the timeout) or no exit status at all.
+        if (res.code < 0)
+            return null;
+        if (res.code !== 0)
+            return isNoTmuxServer(res.stderr) ? [] : null;
+        return sessionNames(res.stdout);
+    }
+    /** Does tmux have `name`? Every failed probe — absent, no server, or one
+     * that could not ask (a socket it may not open) — reads as false; a caller
+     * that must not read "could not ask" as "gone" reads `listSessionsKnown`. */
+    async hasSession(name) {
+        const res = await this.exec(this.bin, ["has-session", "-t", `=${name}`]);
+        return res.code === 0;
+    }
+    /**
+     * Detached session running `command` (argv form — no shell interpolation of
+     * caller data; tmux itself joins the argv).
+     */
+    async newSession(name, command, opts = {}) {
+        const args = ["new-session", "-d", "-s", name];
+        if (opts.cwd)
+            args.push("-c", opts.cwd);
+        args.push(...command);
+        await runOrThrow(this.exec, this.bin, args, { env: opts.env, cwd: opts.cwd });
+    }
+    /** The pid of the session's active pane (the leader of its process group), or
+     * undefined when there is no such session. */
+    async panePid(name) {
+        const res = await this.exec(this.bin, ["list-panes", "-t", `=${name}:`, "-F", "#{pane_pid}"]);
+        if (res.code !== 0)
+            return undefined;
+        const pid = Number(res.stdout.split("\n")[0]?.trim());
+        return Number.isInteger(pid) && pid > 0 ? pid : undefined;
+    }
+    /** When the session last had client or pane activity, in epoch milliseconds;
+     * undefined when tmux does not say. */
+    async lastActivityMs(name) {
+        const res = await this.exec(this.bin, [
+            "display-message",
+            "-p",
+            "-t",
+            `=${name}:`,
+            "#{session_activity}",
+        ]);
+        if (res.code !== 0)
+            return undefined;
+        const seconds = Number(res.stdout.trim());
+        return Number.isFinite(seconds) && seconds > 0 ? seconds * 1000 : undefined;
+    }
+    async killSession(name) {
+        await this.exec(this.bin, ["kill-session", "-t", `=${name}`]);
+    }
+    /** Literal text into the session's active pane; `enter` appends Enter.
+     * Target is `=name:` — tmux 3.5 rejects a bare `=name` as a PANE target
+     * ("can't find pane"), while the trailing colon keeps exact-match session
+     * semantics and resolves to the active window's active pane. */
+    async send(name, text, enter = true) {
+        await runOrThrow(this.exec, this.bin, ["send-keys", "-t", `=${name}:`, "-l", text]);
+        if (enter)
+            await runOrThrow(this.exec, this.bin, ["send-keys", "-t", `=${name}:`, "Enter"]);
+    }
+}
+//# sourceMappingURL=tmux.js.map

package/dist/src/tmux.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tmux.js","sourceRoot":"","sources":["../../src/tmux.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,+EAA+E;AAC/E,kGAAkG;AAClG,6DAA6D;AAC7D,OAAO,EACL,QAAQ,EACR,UAAU,GAGX,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EACL,SAAS,EACT,QAAQ,EACR,UAAU,GAIX,MAAM,2CAA2C,CAAC;AAEnD;wDACwD;AACxD,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAE/C;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,OAAO,wEAAwE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC/F,CAAC;AAED,oEAAoE;AACpE,SAAS,YAAY,CAAC,MAAc;IAClC,OAAO,MAAM;SACV,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC;AAQD;;;GAGG;AACH,MAAM,OAAO,IAAI;IACE,IAAI,CAAS;IACrB,GAAG,CAAS;IAErB,YAAY,OAAoB,EAAE;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC;QAClC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC;IAChC,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,YAAY;QAChB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,eAAe,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAClF,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC,CAAC,kDAAkD;QACjF,OAAO,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,iBAAiB,CAAC,SAAS,GAAG,wBAAwB;QAC1D,IAAI,GAAe,CAAC;QACpB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,eAAe,EAAE,IAAI,EAAE,iBAAiB,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,oEAAoE;QACpE,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAClE,OAAO,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;iFAE6E;IAC7E,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QACzE,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC;IACxB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CACd,IAAY,EACZ,OAAiB,EACjB,OAAkD,EAAE;QAEpD,MAAM,IAAI,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;QACtB,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAChF,CAAC;IAED;kDAC8C;IAC9C,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,IAAI,GAAG,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;QAC9F,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5D,CAAC;IAED;2CACuC;IACvC,KAAK,CAAC,cAAc,CAAC,IAAY;QAC/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACpC,iBAAiB;YACjB,IAAI;YACJ,IAAI;YACJ,IAAI,IAAI,GAAG;YACX,qBAAqB;SACtB,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAY;QAC5B,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAChE,CAAC;IAED;;;oEAGgE;IAChE,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,IAAY,EAAE,KAAK,GAAG,IAAI;QACjD,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACpF,IAAI,KAAK;YAAE,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,IAAI,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9F,CAAC;CACF"}

package/dist/src/trackerid.js

@@ -0,0 +1,43 @@
+// The issue tracker's id allocation — one claim of `.ids/<NNNN>` for every
+// writer on this side (the scan's tracker sink, the TUI's auto-filer and its
+// memory-incident tickets), so they never disagree about which id is next.
+import { closeSync, openSync, readdirSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+/** How many successive ids one claim tries past the highest taken. */
+const CLAIM_TRIES = 50;
+/**
+ * Claim the next free FT id by exclusive create of `.ids/<NNNN>` — the
+ * tracker's one allocation mechanism (claim-is-the-lock). Ids are at least
+ * four digits, so the highest taken one is read across every width. Only a
+ * collision (another claimer took the number) moves to the next; any other
+ * failure is the tracker's answer and is thrown as it is. Returns the
+ * zero-padded number.
+ */
+export function claimTrackerId(root, relPath) {
+    const idsDir = join(root, ".ids");
+    const taken = readdirSync(idsDir)
+        .filter((f) => /^\d{4,}$/.test(f))
+        .map(Number);
+    let candidate = (taken.length > 0 ? Math.max(...taken) : 0) + 1;
+    for (let tries = 0; tries < CLAIM_TRIES; tries++, candidate++) {
+        const n = String(candidate).padStart(4, "0");
+        let fd;
+        try {
+            fd = openSync(join(idsDir, n), "wx");
+        }
+        catch (err) {
+            if (err.code === "EEXIST")
+                continue;
+            throw err;
+        }
+        try {
+            writeFileSync(fd, `${relPath(n)}\n`);
+        }
+        finally {
+            closeSync(fd);
+        }
+        return n;
+    }
+    throw new Error(`could not claim a tracker id (${CLAIM_TRIES} collisions)`);
+}
+//# sourceMappingURL=trackerid.js.map

package/dist/src/trackerid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trackerid.js","sourceRoot":"","sources":["../../src/trackerid.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,6EAA6E;AAC7E,2EAA2E;AAC3E,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,sEAAsE;AACtE,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,OAA8B;IACzE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC;SAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SACjC,GAAG,CAAC,MAAM,CAAC,CAAC;IACf,IAAI,SAAS,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,WAAW,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;QAC9D,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7C,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YAC/D,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,CAAC;YACH,aAAa,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,WAAW,cAAc,CAAC,CAAC;AAC9E,CAAC"}