aicodeman 1.48.0 → 1.49.0

package/dist/foreign-tmux-discovery.d.ts

@@ -0,0 +1,140 @@
+/**
+ * @fileoverview Runs the foreign-tmux probe at the three locations Codeman
+ * already knows how to reach: this host, inside a container, and across ssh.
+ *
+ * All the judgement lives in `foreign-tmux.ts` (pure). This module is only
+ * transport + caching + the promise that it never throws.
+ *
+ * ## Cost policy
+ *
+ * The home screen shows LOCAL results automatically, so a local scan runs on a
+ * TTL cache: N browser tabs polling every few seconds still trigger at most one
+ * scan per `FOREIGN_CACHE_TTL_MS`. Docker and remote are ON DEMAND only:
+ * opening the home page must never fan out one ssh connection per saved host.
+ *
+ * ## ⚠️ The probe must not cross an extra shell
+ *
+ * The script contains `$TMUX_TMPDIR` and `$(id -u)`, which the INNER shell has to
+ * expand. Local and docker therefore spawn with an argv array, where no outer
+ * shell exists to eat them first. Remote is the exception: the ssh
+ * command line is a string like every other ssh call in this codebase, so the
+ * script is wrapped in SINGLE quotes there, which is exactly why
+ * `buildForeignProbeScript()` may not contain one.
+ *
+ * This was measured, not reasoned: running the probe through `execSync` (which
+ * spawns `sh -c`) expanded `$TMUX_TMPDIR` and `$U` in the OUTER shell, leaving the
+ * inner loop iterating over the literal `/tmux-/*` and reporting zero sessions on
+ * a machine that had three.
+ *
+ * ## A probe that goes wrong still answers
+ *
+ * All three transports go through `runForeignProbe`, which never rejects and hands
+ * back what it read. A timeout has to reach the whole process tree, not just the
+ * `sh` on top (the same rule as `runFetch` in git-fetch.ts): signalling only `sh`
+ * left its tmux child stuck on a stopped server, one more per scan, for as long as
+ * the home screen stayed open. And a scan cut short keeps the rows it already has,
+ * since one bad server must not empty the list of a machine with good ones.
+ *
+ * @module foreign-tmux-discovery
+ */
+import type { ForeignDiscoveryResult, ForeignTmuxSession } from './types/foreign-tmux.js';
+import type { DockerCase, RemoteHost, SessionDocker } from './types/session.js';
+/** What one probe produced, however it ended. */
+export interface ForeignProbeRun {
+    /** Everything read before it finished or was stopped. */
+    stdout: string;
+    /** False when it timed out, flooded, exited non-zero or could not start. */
+    ok: boolean;
+}
+/**
+ * Run one probe in its own process group. Never rejects (see @fileoverview).
+ *
+ * The caller is answered AT the deadline, while the group is still dying.
+ */
+export declare function runForeignProbe(argv: readonly string[], opts?: {
+    timeoutMs?: number;
+    maxBytes?: number;
+}): Promise<ForeignProbeRun>;
+/**
+ * Turn one probe's stdout into candidates. Shared by all three transports, so a
+ * container's sessions and the host's are classified by identical rules.
+ *
+ * `where` opens every note this scan writes (`local`, `docker <name>`, `remote
+ * <label>`). The browser tells the two kinds apart by it: a local note is re-read on
+ * every poll, a container or host note only by the next explicit scan.
+ */
+export declare function candidatesFrom(stdout: string, location: ForeignTmuxSession['location'], hostKey: string, extra: Pick<ForeignTmuxSession, 'hostId' | 'hostLabel' | 'containerName'>, where: string, notes: string[]): ForeignTmuxSession[];
+/**
+ * Scan this host. TTL-cached and single-flight, because this is the one location
+ * the home screen polls on its own.
+ */
+export declare function discoverLocalForeign(force?: boolean): Promise<ForeignDiscoveryResult>;
+/** Drop the local cache so the next scan is real (used right after an adopt). */
+export declare function invalidateForeignCache(): void;
+/** Connection facts for one adoptable container, resolved from the registries. */
+export interface DockerTargetInfo {
+    hostId: string;
+    label: string;
+    containerName: string;
+    base: Pick<SessionDocker, 'engine' | 'context' | 'daemonHost'>;
+}
+/**
+ * The argv of one in-container probe.
+ *
+ * ⚠️ `dockerEngineArgv`, never `buildDockerBaseArgs`, whose `--context` and `-H`
+ * values are shell-quoted for the launch string. `execFile` passes those quotes
+ * through literally, so `docker --context "'default'"` answered "context not found"
+ * and every container behind a named context or a remote daemon read as unreachable.
+ */
+export declare function foreignDockerProbeArgv(target: DockerTargetInfo): string[];
+/**
+ * Scan the containers behind the caller's docker cases. On demand only.
+ *
+ * Read-only by construction: one `docker exec` running the probe. Never inspects
+ * lifecycle, never starts anything: a stopped or missing container simply
+ * contributes a note, mirroring `probeAdoptableContainer`'s "engine unreachable
+ * degrades to an empty list" rule.
+ */
+export declare function discoverDockerForeign(cases: DockerCase[]): Promise<ForeignDiscoveryResult>;
+/**
+ * The ssh command line of one remote probe.
+ *
+ * `exec` so a timeout kill reaches ssh itself, not only the local `sh -c` around it.
+ */
+export declare function foreignRemoteProbeCommand(host: RemoteHost): string;
+/**
+ * Scan saved ssh hosts. On demand only: this is the expensive one.
+ *
+ * ⚠️ The ssh command is a STRING (as every ssh call in this codebase is), so the
+ * probe crosses one extra shell and must be single-quoted. `shellescape` does
+ * that, and `buildForeignProbeScript()` is single-quote-free precisely so the
+ * escaping stays a wrap rather than a rewrite.
+ *
+ * Each host holds a slot of the shared remote-ssh limiter: one saved host per
+ * connection, all at once, is the burst OpenSSH's `MaxStartups` starts dropping.
+ * A host that waits too long for a slot reads as unreachable this round.
+ */
+export declare function discoverRemoteForeign(hosts: RemoteHost[]): Promise<ForeignDiscoveryResult>;
+export interface ForeignDiscoveryRequest {
+    /** Always scanned (cheap, cached). */
+    local?: boolean;
+    /** Docker cases the CALLER may see; ownership filtering happens in the route. */
+    dockerCases?: DockerCase[];
+    /** Remote hosts the CALLER may see. */
+    remoteHosts?: RemoteHost[];
+    /** Skip the local TTL cache. */
+    force?: boolean;
+}
+/**
+ * One scan across the requested locations. Merges notes, never throws.
+ *
+ * The caller supplies the docker cases and remote hosts rather than this module
+ * reading the registries itself: which of them a user may see is an ownership
+ * question, and ownership belongs to the route layer.
+ */
+export declare function discoverForeignSessions(req: ForeignDiscoveryRequest): Promise<ForeignDiscoveryResult>;
+/** Re-read the caller-visible docker cases, for routes that only hold a username. */
+export declare function readAllDockerCases(): Promise<DockerCase[]>;
+/** Re-read the saved remote hosts. */
+export declare function readAllRemoteHosts(): Promise<RemoteHost[]>;
+//# sourceMappingURL=foreign-tmux-discovery.d.ts.map

package/dist/foreign-tmux-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"foreign-tmux-discovery.d.ts","sourceRoot":"","sources":["../src/foreign-tmux-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAwBH,OAAO,KAAK,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC1F,OAAO,KAAK,EAAE,UAAU,EAAc,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAI5F,iDAAiD;AACjD,MAAM,WAAW,eAAe;IAC9B,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,EAAE,EAAE,OAAO,CAAC;CACb;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GACnD,OAAO,CAAC,eAAe,CAAC,CAsD1B;AAOD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,kBAAkB,CAAC,UAAU,CAAC,EACxC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,WAAW,GAAG,eAAe,CAAC,EACzE,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EAAE,GACd,kBAAkB,EAAE,CAwDtB;AASD;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,UAAQ,GAAG,OAAO,CAAC,sBAAsB,CAAC,CA6BzF;AAED,iFAAiF;AACjF,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C;AAMD,kFAAkF;AAClF,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,GAAG,SAAS,GAAG,YAAY,CAAC,CAAC;CAChE;AA4BD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAEzE;AAED;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,sBAAsB,CAAC,CA+BhG;AAMD;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAOlE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAwBhG;AAMD,MAAM,WAAW,uBAAuB;IACtC,sCAAsC;IACtC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iFAAiF;IACjF,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B,uCAAuC;IACvC,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B,gCAAgC;IAChC,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAW3G;AAED,qFAAqF;AACrF,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAEhE;AAED,sCAAsC;AACtC,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAEhE"}

package/dist/foreign-tmux-discovery.js

@@ -0,0 +1,366 @@
+/**
+ * @fileoverview Runs the foreign-tmux probe at the three locations Codeman
+ * already knows how to reach: this host, inside a container, and across ssh.
+ *
+ * All the judgement lives in `foreign-tmux.ts` (pure). This module is only
+ * transport + caching + the promise that it never throws.
+ *
+ * ## Cost policy
+ *
+ * The home screen shows LOCAL results automatically, so a local scan runs on a
+ * TTL cache: N browser tabs polling every few seconds still trigger at most one
+ * scan per `FOREIGN_CACHE_TTL_MS`. Docker and remote are ON DEMAND only:
+ * opening the home page must never fan out one ssh connection per saved host.
+ *
+ * ## ⚠️ The probe must not cross an extra shell
+ *
+ * The script contains `$TMUX_TMPDIR` and `$(id -u)`, which the INNER shell has to
+ * expand. Local and docker therefore spawn with an argv array, where no outer
+ * shell exists to eat them first. Remote is the exception: the ssh
+ * command line is a string like every other ssh call in this codebase, so the
+ * script is wrapped in SINGLE quotes there, which is exactly why
+ * `buildForeignProbeScript()` may not contain one.
+ *
+ * This was measured, not reasoned: running the probe through `execSync` (which
+ * spawns `sh -c`) expanded `$TMUX_TMPDIR` and `$U` in the OUTER shell, leaving the
+ * inner loop iterating over the literal `/tmux-/*` and reporting zero sessions on
+ * a machine that had three.
+ *
+ * ## A probe that goes wrong still answers
+ *
+ * All three transports go through `runForeignProbe`, which never rejects and hands
+ * back what it read. A timeout has to reach the whole process tree, not just the
+ * `sh` on top (the same rule as `runFetch` in git-fetch.ts): signalling only `sh`
+ * left its tmux child stuck on a stopped server, one more per scan, for as long as
+ * the home screen stayed open. And a scan cut short keeps the rows it already has,
+ * since one bad server must not empty the list of a machine with good ones.
+ *
+ * @module foreign-tmux-discovery
+ */
+import { spawn } from 'node:child_process';
+import { buildForeignProbeScript, classifyForeignPaneMode, createForeignSignatureMatcher, foreignRemoteShellCommand, foreignSessionId, isAdoptableSessionName, isAdoptableSocketPath, isCodemanOwnedPane, parseForeignProbeOutput, } from './foreign-tmux.js';
+import { dockerEngineArgv, readDockerCases, readDockerHosts } from './docker-hosts.js';
+import { buildSshConnectionArgs, readRemoteHosts, remoteSshTarget, shellescape } from './remote-hosts.js';
+import { runWithRemoteSshLimit } from './remote-ssh-limiter.js';
+import { resolveTmuxSocketName, getDataDir } from './config/instance.js';
+import { FOREIGN_CACHE_TTL_MS, FOREIGN_PROBE_KILL_GRACE_MS, FOREIGN_PROBE_MAX_BYTES, FOREIGN_PROBE_TIMEOUT_MS, } from './config/foreign-tmux.js';
+const IS_TEST_MODE = process.env.VITEST === 'true' || process.env.NODE_ENV === 'test';
+/**
+ * Run one probe in its own process group. Never rejects (see @fileoverview).
+ *
+ * The caller is answered AT the deadline, while the group is still dying.
+ */
+export function runForeignProbe(argv, opts = {}) {
+    const { timeoutMs = FOREIGN_PROBE_TIMEOUT_MS, maxBytes = FOREIGN_PROBE_MAX_BYTES } = opts;
+    return new Promise((resolve) => {
+        const [file, ...args] = argv;
+        const chunks = [];
+        let bytes = 0;
+        let settled = false;
+        let child;
+        let escalation;
+        const finish = (ok) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(deadline);
+            resolve({ stdout: Buffer.concat(chunks).toString('utf-8'), ok });
+        };
+        const signalGroup = (signal) => {
+            try {
+                if (child?.pid)
+                    process.kill(-child.pid, signal);
+            }
+            catch {
+                /* already gone */
+            }
+        };
+        const stop = () => {
+            signalGroup('SIGTERM');
+            escalation = setTimeout(() => signalGroup('SIGKILL'), FOREIGN_PROBE_KILL_GRACE_MS);
+            escalation.unref();
+            // ⚠️ Let go of the pipe by hand. A stopped tmux server can hold it open with
+            // everything in this group dead (see foreign-tmux.ts), so waiting for its EOF
+            // would keep one handle per scan until that server is resumed.
+            child?.stdout?.destroy();
+            finish(false);
+        };
+        const deadline = setTimeout(stop, timeoutMs);
+        try {
+            child = spawn(file ?? '', args, { stdio: ['ignore', 'pipe', 'ignore'], detached: true });
+        }
+        catch {
+            finish(false);
+            return;
+        }
+        child.stdout?.on('data', (chunk) => {
+            if (settled)
+                return;
+            chunks.push(chunk.subarray(0, Math.max(0, maxBytes - bytes)));
+            bytes += chunk.length;
+            if (bytes > maxBytes)
+                stop();
+        });
+        child.on('error', () => finish(false));
+        child.on('close', (code) => {
+            // The group is gone, so a late SIGKILL could only reach whoever reused its id.
+            clearTimeout(escalation);
+            finish(code === 0);
+        });
+    });
+}
+/** The note for a probe that ended badly. Rows already read stay, so say which case this is. */
+function probeFailureNote(where, run, nothing) {
+    return run.stdout ? `${where}: the scan did not finish, this list may be incomplete` : `${where}: ${nothing}`;
+}
+/**
+ * Turn one probe's stdout into candidates. Shared by all three transports, so a
+ * container's sessions and the host's are classified by identical rules.
+ *
+ * `where` opens every note this scan writes (`local`, `docker <name>`, `remote
+ * <label>`). The browser tells the two kinds apart by it: a local note is re-read on
+ * every poll, a container or host note only by the next explicit scan.
+ */
+export function candidatesFrom(stdout, location, hostKey, extra, where, notes) {
+    const probe = parseForeignProbeOutput(stdout);
+    const match = createForeignSignatureMatcher();
+    const ownSocket = resolveTmuxSocketName();
+    const out = [];
+    const seen = new Set();
+    let unsafe = 0;
+    for (const pane of probe.panes) {
+        if (isCodemanOwnedPane(pane, ownSocket))
+            continue;
+        // ⚠️ THE security gate, and it lives here rather than at the adopt endpoint
+        // on purpose: a name that cannot cross the launch chain safely never gets an
+        // id, so there is nothing for a caller to send. Adoption re-resolves through
+        // this same function, which makes the endpoint fail closed for free.
+        // See `isAdoptableSessionName` for the injection this prevents.
+        if (!isAdoptableSessionName(pane.sessionName) || !isAdoptableSocketPath(pane.socketPath)) {
+            unsafe += 1;
+            continue;
+        }
+        // One row per SESSION, not per pane: the first pane is the one we would land
+        // on, and a multi-pane session is still a single thing to adopt.
+        // \u0000 as an ESCAPE, never the literal byte: a raw NUL in the source makes git
+        // treat this whole file as binary (no diff, no review), and the allowlists above
+        // already guarantee neither half can contain one.
+        const key = `${pane.socketPath}\u0000${pane.sessionName}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        const classified = classifyForeignPaneMode(pane, probe, match);
+        out.push({
+            id: foreignSessionId(location, hostKey, pane.socketPath, pane.sessionName),
+            location,
+            ...extra,
+            socketPath: pane.socketPath,
+            sessionName: pane.sessionName,
+            windows: pane.windows,
+            attached: pane.sessionAttached,
+            createdAt: pane.sessionCreated * 1000,
+            mode: classified.mode,
+            command: classified.command,
+            workingDir: pane.paneCurrentPath,
+        });
+    }
+    if (unsafe) {
+        notes.push(`${where}: ${unsafe} session(s) skipped, the tmux session name or socket path is one Codeman cannot pass safely to a shell or to tmux`);
+    }
+    // Another Codeman's server is not a session this list would ever have shown.
+    const hung = probe.hungSockets.filter((socketPath) => !isCodemanOwnedPane({ socketPath, sessionName: '' }, ownSocket));
+    if (hung.length) {
+        notes.push(`${where}: ${hung.length} tmux server(s) did not answer, sessions on them are not listed`);
+    }
+    return out;
+}
+// ===========================================================================
+// Local
+// ===========================================================================
+let localCache = null;
+let localInFlight = null;
+/**
+ * Scan this host. TTL-cached and single-flight, because this is the one location
+ * the home screen polls on its own.
+ */
+export async function discoverLocalForeign(force = false) {
+    if (IS_TEST_MODE)
+        return { sessions: [], scannedAt: Date.now(), notes: [] };
+    const now = Date.now();
+    if (!force && localCache && now - localCache.at < FOREIGN_CACHE_TTL_MS)
+        return localCache.result;
+    if (localInFlight)
+        return localInFlight;
+    localInFlight = (async () => {
+        const notes = [];
+        let sessions = [];
+        try {
+            // argv array: no outer shell, so the script's own `$TMUX_TMPDIR`/`$(id -u)`
+            // reach the inner sh intact (see @fileoverview).
+            const run = await runForeignProbe(['sh', '-c', buildForeignProbeScript()]);
+            sessions = candidatesFrom(run.stdout, 'local', 'local', {}, 'local', notes);
+            if (!run.ok)
+                notes.push(probeFailureNote('local', run, 'tmux probe produced no result'));
+        }
+        catch {
+            // The probe answers rather than throws, so this is the classifier. "Nothing to
+            // adopt here" is the only honest answer and it is never an error to the caller.
+            notes.push('local: tmux probe produced no result');
+        }
+        const result = { sessions, scannedAt: Date.now(), notes };
+        localCache = { at: Date.now(), result };
+        return result;
+    })().finally(() => {
+        localInFlight = null;
+    });
+    return localInFlight;
+}
+/** Drop the local cache so the next scan is real (used right after an adopt). */
+export function invalidateForeignCache() {
+    localCache = null;
+}
+function dockerTargets(cases, hosts) {
+    const byId = new Map(hosts.map((h) => [h.id, h]));
+    const out = [];
+    const seen = new Set();
+    for (const c of cases) {
+        const container = c.container || `codeman-case-${c.name}`;
+        // Per engine, not global: two daemons can each run a container of one name,
+        // and collapsing them here would leave the second one unscanned.
+        const key = `${c.hostId}\u0000${container}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        const host = byId.get(c.hostId);
+        out.push({
+            hostId: c.hostId,
+            label: host?.label || c.name,
+            containerName: container,
+            base: {
+                engine: host?.engine ?? 'docker',
+                context: host?.context,
+                daemonHost: host?.daemonHost,
+            },
+        });
+    }
+    return out;
+}
+/**
+ * The argv of one in-container probe.
+ *
+ * ⚠️ `dockerEngineArgv`, never `buildDockerBaseArgs`, whose `--context` and `-H`
+ * values are shell-quoted for the launch string. `execFile` passes those quotes
+ * through literally, so `docker --context "'default'"` answered "context not found"
+ * and every container behind a named context or a remote daemon read as unreachable.
+ */
+export function foreignDockerProbeArgv(target) {
+    return [...dockerEngineArgv(target.base), 'exec', target.containerName, 'sh', '-lc', buildForeignProbeScript()];
+}
+/**
+ * Scan the containers behind the caller's docker cases. On demand only.
+ *
+ * Read-only by construction: one `docker exec` running the probe. Never inspects
+ * lifecycle, never starts anything: a stopped or missing container simply
+ * contributes a note, mirroring `probeAdoptableContainer`'s "engine unreachable
+ * degrades to an empty list" rule.
+ */
+export async function discoverDockerForeign(cases) {
+    if (IS_TEST_MODE)
+        return { sessions: [], scannedAt: Date.now(), notes: [] };
+    const hosts = await readDockerHosts(getDataDir()).catch(() => []);
+    const targets = dockerTargets(cases, hosts);
+    const notes = [];
+    const sessions = [];
+    await Promise.all(targets.map(async (t) => {
+        const where = `docker ${t.containerName}`;
+        try {
+            const run = await runForeignProbe(foreignDockerProbeArgv(t));
+            sessions.push(...candidatesFrom(run.stdout, 'docker', `${t.hostId} ${t.containerName}`, { hostId: t.hostId, hostLabel: t.label, containerName: t.containerName }, where, notes));
+            if (!run.ok)
+                notes.push(probeFailureNote(where, run, 'not running, no tmux, or engine unreachable'));
+        }
+        catch {
+            notes.push(`${where}: not running, no tmux, or engine unreachable`);
+        }
+    }));
+    return { sessions, scannedAt: Date.now(), notes };
+}
+// ===========================================================================
+// Remote
+// ===========================================================================
+/**
+ * The ssh command line of one remote probe.
+ *
+ * `exec` so a timeout kill reaches ssh itself, not only the local `sh -c` around it.
+ */
+export function foreignRemoteProbeCommand(host) {
+    return [
+        'exec',
+        ...buildSshConnectionArgs(host),
+        remoteSshTarget(host),
+        shellescape(foreignRemoteShellCommand(buildForeignProbeScript())),
+    ].join(' ');
+}
+/**
+ * Scan saved ssh hosts. On demand only: this is the expensive one.
+ *
+ * ⚠️ The ssh command is a STRING (as every ssh call in this codebase is), so the
+ * probe crosses one extra shell and must be single-quoted. `shellescape` does
+ * that, and `buildForeignProbeScript()` is single-quote-free precisely so the
+ * escaping stays a wrap rather than a rewrite.
+ *
+ * Each host holds a slot of the shared remote-ssh limiter: one saved host per
+ * connection, all at once, is the burst OpenSSH's `MaxStartups` starts dropping.
+ * A host that waits too long for a slot reads as unreachable this round.
+ */
+export async function discoverRemoteForeign(hosts) {
+    if (IS_TEST_MODE)
+        return { sessions: [], scannedAt: Date.now(), notes: [] };
+    const notes = [];
+    const sessions = [];
+    await Promise.all(hosts.map(async (host) => {
+        const where = `remote ${host.label}`;
+        try {
+            const run = await runWithRemoteSshLimit(() => runForeignProbe(['sh', '-c', foreignRemoteProbeCommand(host)]), {
+                maxWaitMs: FOREIGN_PROBE_TIMEOUT_MS,
+            });
+            sessions.push(...candidatesFrom(run.stdout, 'remote', host.id, { hostId: host.id, hostLabel: host.label }, where, notes));
+            if (!run.ok)
+                notes.push(probeFailureNote(where, run, 'unreachable, or no tmux'));
+        }
+        catch {
+            notes.push(`${where}: unreachable, or no tmux`);
+        }
+    }));
+    return { sessions, scannedAt: Date.now(), notes };
+}
+/**
+ * One scan across the requested locations. Merges notes, never throws.
+ *
+ * The caller supplies the docker cases and remote hosts rather than this module
+ * reading the registries itself: which of them a user may see is an ownership
+ * question, and ownership belongs to the route layer.
+ */
+export async function discoverForeignSessions(req) {
+    const parts = [];
+    if (req.local !== false)
+        parts.push(await discoverLocalForeign(req.force));
+    if (req.dockerCases?.length)
+        parts.push(await discoverDockerForeign(req.dockerCases));
+    if (req.remoteHosts?.length)
+        parts.push(await discoverRemoteForeign(req.remoteHosts));
+    return {
+        sessions: parts.flatMap((p) => p.sessions),
+        scannedAt: parts.length ? Math.max(...parts.map((p) => p.scannedAt)) : Date.now(),
+        notes: parts.flatMap((p) => p.notes),
+    };
+}
+/** Re-read the caller-visible docker cases, for routes that only hold a username. */
+export async function readAllDockerCases() {
+    return readDockerCases(getDataDir()).catch(() => []);
+}
+/** Re-read the saved remote hosts. */
+export async function readAllRemoteHosts() {
+    return readRemoteHosts(getDataDir()).catch(() => []);
+}
+//# sourceMappingURL=foreign-tmux-discovery.js.map

package/dist/foreign-tmux-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"foreign-tmux-discovery.js","sourceRoot":"","sources":["../src/foreign-tmux-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,6BAA6B,EAC7B,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC1G,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAIlC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC;AAUtF;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAuB,EACvB,OAAkD,EAAE;IAEpD,MAAM,EAAE,SAAS,GAAG,wBAAwB,EAAE,QAAQ,GAAG,uBAAuB,EAAE,GAAG,IAAI,CAAC;IAC1F,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,KAA+B,CAAC;QACpC,IAAI,UAAsC,CAAC;QAE3C,MAAM,MAAM,GAAG,CAAC,EAAW,EAAE,EAAE;YAC7B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvB,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACnE,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,CAAC,MAAsB,EAAE,EAAE;YAC7C,IAAI,CAAC;gBACH,IAAI,KAAK,EAAE,GAAG;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB;YACpB,CAAC;QACH,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,WAAW,CAAC,SAAS,CAAC,CAAC;YACvB,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,2BAA2B,CAAC,CAAC;YACnF,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,6EAA6E;YAC7E,8EAA8E;YAC9E,+DAA+D;YAC/D,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YACzB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAE7C,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,KAAK,CAAC,CAAC;YACd,OAAO;QACT,CAAC;QACD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,IAAI,OAAO;gBAAE,OAAO;YACpB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC9D,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,GAAG,QAAQ;gBAAE,IAAI,EAAE,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACvC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,+EAA+E;YAC/E,YAAY,CAAC,UAAU,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gGAAgG;AAChG,SAAS,gBAAgB,CAAC,KAAa,EAAE,GAAoB,EAAE,OAAe;IAC5E,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,wDAAwD,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,OAAO,EAAE,CAAC;AAChH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,QAAwC,EACxC,OAAe,EACf,KAAyE,EACzE,KAAa,EACb,KAAe;IAEf,MAAM,KAAK,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,6BAA6B,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC;YAAE,SAAS;QAClD,4EAA4E;QAC5E,6EAA6E;QAC7E,6EAA6E;QAC7E,qEAAqE;QACrE,gEAAgE;QAChE,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACzF,MAAM,IAAI,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QACD,6EAA6E;QAC7E,iEAAiE;QACjE,iFAAiF;QACjF,iFAAiF;QACjF,kDAAkD;QAClD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1D,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,MAAM,UAAU,GAAG,uBAAuB,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/D,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC;YAC1E,QAAQ;YACR,GAAG,KAAK;YACR,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,eAAe;YAC9B,SAAS,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI;YACrC,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,UAAU,EAAE,IAAI,CAAC,eAAe;SACjC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,IAAI,CACR,GAAG,KAAK,KAAK,MAAM,mHAAmH,CACvI,CAAC;IACJ,CAAC;IACD,6EAA6E;IAC7E,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CACnC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,SAAS,CAAC,CAChF,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,MAAM,iEAAiE,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,IAAI,UAAU,GAA0D,IAAI,CAAC;AAC7E,IAAI,aAAa,GAA2C,IAAI,CAAC;AAEjE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAK,GAAG,KAAK;IACtD,IAAI,YAAY;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAE5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,CAAC,KAAK,IAAI,UAAU,IAAI,GAAG,GAAG,UAAU,CAAC,EAAE,GAAG,oBAAoB;QAAE,OAAO,UAAU,CAAC,MAAM,CAAC;IACjG,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IAExC,aAAa,GAAG,CAAC,KAAK,IAAqC,EAAE;QAC3D,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,QAAQ,GAAyB,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,4EAA4E;YAC5E,iDAAiD;YACjD,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;YAC3E,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5E,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,+BAA+B,CAAC,CAAC,CAAC;QAC3F,CAAC;QAAC,MAAM,CAAC;YACP,+EAA+E;YAC/E,gFAAgF;YAChF,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,MAAM,GAA2B,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC;QAClF,UAAU,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;QAChB,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,sBAAsB;IACpC,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC;AAcD,SAAS,aAAa,CAAC,KAAmB,EAAE,KAAmB;IAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,IAAI,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,4EAA4E;QAC5E,iEAAiE;QACjE,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,MAAM,SAAS,SAAS,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,IAAI;YAC5B,aAAa,EAAE,SAAS;YACxB,IAAI,EAAE;gBACJ,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,QAAQ;gBAChC,OAAO,EAAE,IAAI,EAAE,OAAO;gBACtB,UAAU,EAAE,IAAI,EAAE,UAAU;aAC7B;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAwB;IAC7D,OAAO,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;AAClH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAmB;IAC7D,IAAI,YAAY;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAE5E,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAkB,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAE1C,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACtB,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,aAAa,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,QAAQ,CAAC,IAAI,CACX,GAAG,cAAc,CACf,GAAG,CAAC,MAAM,EACV,QAAQ,EACR,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,aAAa,EAAE,EAChC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,EACxE,KAAK,EACL,KAAK,CACN,CACF,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,6CAA6C,CAAC,CAAC,CAAC;QACvG,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,+CAA+C,CAAC,CAAC;QACtE,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC;AACpD,CAAC;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAgB;IACxD,OAAO;QACL,MAAM;QACN,GAAG,sBAAsB,CAAC,IAAI,CAAC;QAC/B,eAAe,CAAC,IAAI,CAAC;QACrB,WAAW,CAAC,yBAAyB,CAAC,uBAAuB,EAAE,CAAC,CAAC;KAClE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAmB;IAC7D,IAAI,YAAY;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAE5E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAE1C,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,KAAK,GAAG,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;gBAC5G,SAAS,EAAE,wBAAwB;aACpC,CAAC,CAAC;YACH,QAAQ,CAAC,IAAI,CACX,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,CAC3G,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC,CAAC;QACnF,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC;AACpD,CAAC;AAiBD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAA4B;IACxE,MAAM,KAAK,GAA6B,EAAE,CAAC;IAC3C,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3E,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,qBAAqB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IACtF,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,qBAAqB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAEtF,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1C,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;QACjF,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,OAAO,eAAe,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAkB,CAAC,CAAC;AACvE,CAAC;AAED,sCAAsC;AACtC,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,OAAO,eAAe,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAkB,CAAC,CAAC;AACvE,CAAC"}