chorus-codes 0.7.0 → 0.7.1

package/dist/lib/cli-detect.js

@@ -0,0 +1,388 @@
+"use strict";
+/**
+ * Detect whether each supported CLI is installed and runnable.
+ *
+ * Layered probe:
+ *   1. PATH lookup via `which` (Unix) / `where` (Windows)
+ *   2. Fallback known install dirs per CLI (covers OpenCode/Kimi installers
+ *      that drop binaries in non-PATH locations)
+ *   3. Verify with `<bin> --version` (2s timeout) so dead symlinks fail
+ *
+ * Cursor and Windsurf are IDEs invoked via MCP, not CLIs on PATH, so they're
+ * not part of this probe — onboarding leaves their checkboxes for the user.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectAllClis = detectAllClis;
+exports.clearDetectionCache = clearDetectionCache;
+exports.validateCliPath = validateCliPath;
+const child_process_1 = require("child_process");
+const fs_1 = require("fs");
+const os_1 = require("os");
+const path_1 = __importDefault(require("path"));
+const cli_paths_js_1 = require("./cli-paths.js");
+const BINARY_NAME = {
+    'claude-code': 'claude',
+    'codex-cli': 'codex',
+    'gemini-cli': 'gemini',
+    'opencode-cli': 'opencode',
+    'kimi-cli': 'kimi',
+};
+const isWindows = (0, os_1.platform)() === 'win32';
+const HOME = (0, os_1.homedir)();
+/**
+ * Discovered npm prefix bin dirs — populated lazily by `discoverNpmPrefixes`.
+ * Cached at module scope so we shell out once per daemon lifetime, not once
+ * per CLI per probe.
+ */
+let cachedNpmDirs = null;
+/**
+ * Ask npm where it installs global binaries. Covers users with custom
+ * `prefix` configs (e.g. ~/.npm-global, ~/.config/npm), nvm-active
+ * versions, or an OS package manager that put npm in a non-default
+ * location. Best-effort — a missing/broken npm just yields an empty
+ * list so we fall back to the static probes.
+ */
+function discoverNpmPrefixes() {
+    if (cachedNpmDirs !== null)
+        return cachedNpmDirs;
+    const dirs = new Set();
+    // Try `npm config get prefix` (1s budget — slow npm shouldn't block detect).
+    try {
+        const result = (0, child_process_1.spawnSync)('npm', ['config', 'get', 'prefix'], {
+            encoding: 'utf-8',
+            timeout: 1000,
+            stdio: ['ignore', 'pipe', 'ignore'],
+        });
+        if (result.status === 0) {
+            const prefix = result.stdout.trim();
+            if (prefix) {
+                dirs.add(isWindows ? prefix : path_1.default.join(prefix, 'bin'));
+            }
+        }
+    }
+    catch {
+        /* npm not installed / not on PATH — fall through */
+    }
+    // NPM_CONFIG_PREFIX env override (common in CI, asdf, custom shells).
+    const envPrefix = process.env.NPM_CONFIG_PREFIX || process.env.npm_config_prefix;
+    if (envPrefix) {
+        dirs.add(isWindows ? envPrefix : path_1.default.join(envPrefix, 'bin'));
+    }
+    cachedNpmDirs = Array.from(dirs);
+    return cachedNpmDirs;
+}
+/**
+ * Per-CLI fallback install locations to probe when PATH lookup misses.
+ *
+ * Covers the common installers in the wild — npm global with various
+ * prefixes (default, custom, volta, fnm, nvm), Yarn, PNPM, Bun, Cargo,
+ * Homebrew (Intel + Apple Silicon), system package dirs — plus per-CLI
+ * installer-script locations (OpenCode + Kimi drop binaries in their
+ * own dot-folders by default).
+ *
+ * Order matters: PATH lookup runs first; this list is the second-chance
+ * scan, so cheap/common locations come first to keep the probe fast.
+ */
+function fallbackPaths(cli) {
+    const bin = BINARY_NAME[cli];
+    const exts = isWindows ? ['.cmd', '.exe', ''] : [''];
+    const dirs = [];
+    if (isWindows) {
+        if (process.env.APPDATA)
+            dirs.push(path_1.default.join(process.env.APPDATA, 'npm'));
+        if (process.env.LOCALAPPDATA) {
+            dirs.push(path_1.default.join(process.env.LOCALAPPDATA, 'Programs'), 
+            // Volta on Windows
+            path_1.default.join(process.env.LOCALAPPDATA, 'Volta', 'bin'));
+        }
+        dirs.push(path_1.default.join(HOME, 'AppData', 'Roaming', 'npm'), path_1.default.join(HOME, '.volta', 'bin'), path_1.default.join(HOME, '.bun', 'bin'));
+    }
+    else {
+        dirs.push(
+        // User-local
+        path_1.default.join(HOME, '.local', 'bin'), path_1.default.join(HOME, '.npm-global', 'bin'), path_1.default.join(HOME, '.config', 'yarn', 'global', 'node_modules', '.bin'), path_1.default.join(HOME, '.yarn', 'bin'), 
+        // Node version managers
+        path_1.default.join(HOME, '.volta', 'bin'), path_1.default.join(HOME, '.fnm', 'aliases', 'default', 'bin'), 
+        // Alt package managers
+        path_1.default.join(HOME, '.bun', 'bin'), path_1.default.join(HOME, '.cargo', 'bin'), path_1.default.join(HOME, '.local', 'share', 'pnpm'), path_1.default.join(HOME, 'Library', 'pnpm'), 
+        // System-wide
+        '/usr/local/bin', '/opt/homebrew/bin', '/usr/bin', 
+        // Common npm-global system dirs
+        '/usr/local/lib/node_modules/.bin', '/opt/homebrew/lib/node_modules/.bin');
+    }
+    // CLI-specific installer locations (their own install scripts).
+    if (cli === 'opencode-cli') {
+        dirs.push(path_1.default.join(HOME, '.opencode', 'bin'));
+    }
+    if (cli === 'kimi-cli') {
+        dirs.push(path_1.default.join(HOME, '.kimi', 'bin'));
+    }
+    // npm-discovered prefixes — cheapest signal for "where did the user
+    // actually install global packages?". Pulled last so the static list
+    // wins on cache hits, but still covers exotic setups.
+    for (const npmDir of discoverNpmPrefixes()) {
+        dirs.push(npmDir);
+    }
+    const candidates = [];
+    // Dedup while preserving order — a user with PNPM_HOME=~/.local/share/pnpm
+    // shouldn't pay for two probes of the same dir.
+    const seen = new Set();
+    for (const dir of dirs) {
+        for (const ext of exts) {
+            const full = path_1.default.join(dir, `${bin}${ext}`);
+            if (seen.has(full))
+                continue;
+            seen.add(full);
+            candidates.push(full);
+        }
+    }
+    return candidates;
+}
+function pathLookup(name) {
+    const cmd = isWindows ? 'where' : 'which';
+    const result = (0, child_process_1.spawnSync)(cmd, [name], { encoding: 'utf-8' });
+    if (result.status !== 0)
+        return null;
+    // `where` returns one path per line on Windows; take the first.
+    const first = result.stdout.split(/\r?\n/).map((s) => s.trim()).find((s) => s.length > 0);
+    return first || null;
+}
+/**
+ * Per-CLI version-output signatures. The shape varies wildly between
+ * CLIs — claude prints "2.1.126 (Claude Code)", codex prints
+ * "codex-cli 0.128.0", but gemini / opencode print just a bare
+ * version like "0.40.1" with NO CLI name. So each CLI gets its own
+ * matcher rather than a uniform name-substring regex.
+ *
+ * Strategy:
+ *   - CLIs whose output includes the name → match the name (case-insensitive).
+ *   - CLIs that print a bare version → accept output that STARTS with a
+ *     digit-dot-digit (semver-ish). This rules out e.g. `cat --version`
+ *     (output starts with "cat (GNU…") while accepting any reasonable
+ *     `<bin> --version` from a real install.
+ *
+ * False positives here (a runnable binary that happens to print a bare
+ * version) are still better than rubber-stamping `cat --version` as a
+ * valid Claude install — which is what the original exit-0-only check
+ * did.
+ */
+const STARTS_WITH_VERSION = /^\s*\d+\.\d+/;
+const CLI_SIGNATURES = {
+    'claude-code': /\bclaude\b/i,
+    'codex-cli': /\bcodex\b/i,
+    // Bare version output — "0.40.1" — no CLI name to grep for.
+    'gemini-cli': STARTS_WITH_VERSION,
+    // Bare version output — "1.14.30" — same as gemini.
+    'opencode-cli': STARTS_WITH_VERSION,
+    'kimi-cli': /\bkimi\b/i,
+};
+/**
+ * Basename allowlist — the binary's filename must match the expected
+ * name (case-insensitive, .exe/.cmd suffixes stripped) before we even
+ * try to verify the version output. This is the primary guard against
+ * the STARTS_WITH_VERSION regex being too permissive: `npm --version`
+ * prints "11.7.0" and would otherwise pass as gemini/opencode. The
+ * regex stays as a secondary check — a binary that's named correctly
+ * but whose --version output is total junk still gets rejected.
+ *
+ * Validated locally before adding (2026-05-04):
+ *   npm 11.7.0   → matches version regex (would've false-passed)
+ *   pip 24.0     → no (starts with "pip ")
+ *   node v20.19  → no (starts with "v")
+ *   python 3.12  → no (starts with "Python ")
+ */
+function basenameMatches(cli, binPath) {
+    const expected = BINARY_NAME[cli].toLowerCase();
+    const base = path_1.default.basename(binPath).toLowerCase();
+    // Strip Windows extensions so claude.exe / claude.cmd both match "claude".
+    const stripped = base.replace(/\.(exe|cmd|bat|ps1)$/i, '');
+    return stripped === expected;
+}
+function verifyRunnable(cli, binPath, timeoutMs = 2000) {
+    if (!(0, fs_1.existsSync)(binPath)) {
+        return { ok: false, reason: 'no file at that path' };
+    }
+    if (!basenameMatches(cli, binPath)) {
+        return {
+            ok: false,
+            reason: `expected a binary named "${BINARY_NAME[cli]}" — got "${path_1.default.basename(binPath)}"`,
+        };
+    }
+    let result;
+    try {
+        result = (0, child_process_1.spawnSync)(binPath, ['--version'], {
+            encoding: 'utf-8',
+            timeout: timeoutMs,
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+    }
+    catch (err) {
+        return { ok: false, reason: `failed to spawn (${err.message})` };
+    }
+    if (result.status !== 0) {
+        return {
+            ok: false,
+            reason: `${path_1.default.basename(binPath)} --version exited ${result.status}`,
+        };
+    }
+    const output = `${result.stdout ?? ''}\n${result.stderr ?? ''}`;
+    const signature = CLI_SIGNATURES[cli];
+    if (!signature.test(output)) {
+        return {
+            ok: false,
+            reason: `that binary ran, but its --version output doesn't look like the ${BINARY_NAME[cli]} CLI`,
+        };
+    }
+    return { ok: true };
+}
+function detectOne(cli) {
+    // 0. User-supplied manual path wins over PATH/fallback. Without this,
+    //    a fresh boot's PATH lookup would silently miss a CLI in a custom
+    //    location even though the user had explicitly told us where to
+    //    find it via the onboarding "I know where it is" affordance.
+    //    Read from the sync cache populated at daemon boot — async settings
+    //    fetch isn't available here without refactoring every detect caller.
+    const manual = cli_paths_js_1.cliPaths.getCached(cli);
+    if (manual && (0, fs_1.existsSync)(manual) && verifyRunnable(cli, manual).ok) {
+        return { id: cli, found: true, path: manual, source: 'manual' };
+    }
+    // 1. PATH lookup
+    const onPath = pathLookup(BINARY_NAME[cli]);
+    if (onPath && verifyRunnable(cli, onPath).ok) {
+        return { id: cli, found: true, path: onPath, source: 'path' };
+    }
+    // 2. Fallback known dirs
+    for (const candidate of fallbackPaths(cli)) {
+        if ((0, fs_1.existsSync)(candidate) && verifyRunnable(cli, candidate).ok) {
+            return { id: cli, found: true, path: candidate, source: 'fallback' };
+        }
+    }
+    return { id: cli, found: false };
+}
+/**
+ * Cache for `detectAllClis` — every detect spawns up to 5 child
+ * processes (one `--version` per CLI), so when a daemon route resolves
+ * a CLI path on every HTTP poll (e.g. /orchestrators/opencode/models
+ * during onboarding), we'd fork ~50 processes/second without a cache.
+ *
+ * 30s TTL is short enough that a `chorus install <cli>` run from a
+ * different shell shows up before the user finishes onboarding, but
+ * long enough that a polling UI doesn't keep retriggering scans.
+ * Tests can call detectAllClis with `force: true` to bypass.
+ */
+let detectCache = null;
+const DETECT_CACHE_TTL_MS = 30_000;
+function detectAllClis(force = false) {
+    const now = Date.now();
+    if (!force && detectCache && detectCache.expiresAt > now) {
+        return detectCache.results;
+    }
+    const results = Object.keys(BINARY_NAME).map(detectOne);
+    detectCache = { results, expiresAt: now + DETECT_CACHE_TTL_MS };
+    return results;
+}
+/** Clear the detection cache. Used by callers that mutated state we
+ *  know will change the answer (e.g. user just supplied a manual path,
+ *  or installed a new CLI via the cockpit). */
+function clearDetectionCache() {
+    detectCache = null;
+}
+/**
+ * Validate a user-supplied path for a given CLI. Used by the
+ * "Set path manually" fallback when auto-detect misses.
+ *
+ * Layered checks (any failure returns found=false + a reason):
+ *   1. Basename matches the expected binary name. Catches the common
+ *      paste-the-wrong-tool mistake — e.g. `/usr/bin/npm` for gemini-cli
+ *      passes the bare-version regex but its basename is `npm`, not
+ *      `gemini`. Both round-1 reviewers (claude + gemini) flagged this
+ *      gap when smoke-testing the previous version.
+ *   2. File exists.
+ *   3. `--version` exits 0 with output that matches the CLI's signature.
+ *
+ * Auto-detect doesn't need step 1 — pathLookup/fallback already bound
+ * the search to the expected binary name.
+ */
+function validateCliPath(cli, customPath) {
+    const trimmed = customPath.trim();
+    if (!trimmed)
+        return { id: cli, found: false, reason: 'path is empty' };
+    // Basename gate — strip extension on Windows so claude.cmd / claude.exe
+    // both match `claude`.
+    const expectedBin = BINARY_NAME[cli];
+    const actualBase = isWindows
+        ? path_1.default.basename(trimmed).replace(/\.(cmd|exe)$/i, '')
+        : path_1.default.basename(trimmed);
+    if (actualBase.toLowerCase() !== expectedBin.toLowerCase()) {
+        return {
+            id: cli,
+            found: false,
+            reason: `that file is named "${actualBase}", but the ${cli} binary should be "${expectedBin}". Pasted the wrong path?`,
+        };
+    }
+    // Symlink-aware validation:
+    //   - Reject sockets / pipes / directories outright (lstat).
+    //   - For symlinks, realpath the target and re-check it's a regular
+    //     file. This keeps Homebrew / asdf / mise / npm-global / fnm /
+    //     volta installs working (most ship the user-facing binary as a
+    //     symlink) while neutralising the TOCTOU attack from Audit D3:
+    //     we persist the CANONICAL path, so a later swap of the symlink
+    //     can't redirect daemon spawns to a malicious binary.
+    //   - existsSync alone (the pre-fix call) followed symlinks silently
+    //     and stored the symlink path — that's the attack surface we're
+    //     closing.
+    let canonical = trimmed;
+    let lstat;
+    try {
+        lstat = (0, fs_1.lstatSync)(trimmed);
+    }
+    catch {
+        return { id: cli, found: false, reason: `no file at ${trimmed}` };
+    }
+    if (lstat.isSymbolicLink()) {
+        try {
+            canonical = path_1.default.resolve(path_1.default.dirname(trimmed), 
+            // realpath resolves the chain; spawning the canonical target
+            // means a later symlink-swap can't redirect us.
+            (0, fs_1.realpathSync)(trimmed));
+            const realStat = (0, fs_1.lstatSync)(canonical);
+            if (!realStat.isFile()) {
+                return {
+                    id: cli,
+                    found: false,
+                    reason: `symlink target is not a regular file: ${canonical}`,
+                };
+            }
+        }
+        catch {
+            return {
+                id: cli,
+                found: false,
+                reason: `symlink could not be resolved: ${trimmed}`,
+            };
+        }
+    }
+    else if (!lstat.isFile()) {
+        return {
+            id: cli,
+            found: false,
+            reason: `path is not a regular file: ${trimmed}`,
+        };
+    }
+    // Verify via the user-pasted path so verifyRunnable's internal
+    // basename check passes — "claude" symlinked to a versioned target
+    // like "2.1.126" is the canonical real-world install (npm/Homebrew
+    // both do this). Spawning the symlink path runs the same binary as
+    // spawning the resolved target since the kernel follows the link.
+    const v = verifyRunnable(cli, trimmed);
+    if (!v.ok)
+        return { id: cli, found: false, reason: v.reason };
+    // Persist the canonical (realpath-resolved) target. Daemon spawns
+    // will hit the resolved binary even if the symlink is later swapped
+    // by an attacker — closes the TOCTOU window from Audit D3.
+    return { id: cli, found: true, path: canonical, source: 'manual' };
+}
+//# sourceMappingURL=cli-detect.js.map

package/dist/lib/cli-detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-detect.js","sourceRoot":"","sources":["../../src/lib/cli-detect.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;;;AA6TH,sCAQC;AAKD,kDAEC;AAkBD,0CA8EC;AA1aD,iDAA0C;AAC1C,2BAAyD;AACzD,2BAAuC;AACvC,gDAAwB;AAExB,iDAA0C;AAS1C,MAAM,WAAW,GAAkC;IACjD,aAAa,EAAE,QAAQ;IACvB,WAAW,EAAE,OAAO;IACpB,YAAY,EAAE,QAAQ;IACtB,cAAc,EAAE,UAAU;IAC1B,UAAU,EAAE,MAAM;CACnB,CAAC;AAEF,MAAM,SAAS,GAAG,IAAA,aAAQ,GAAE,KAAK,OAAO,CAAC;AACzC,MAAM,IAAI,GAAG,IAAA,YAAO,GAAE,CAAC;AAEvB;;;;GAIG;AACH,IAAI,aAAa,GAAoB,IAAI,CAAC;AAE1C;;;;;;GAMG;AACH,SAAS,mBAAmB;IAC1B,IAAI,aAAa,KAAK,IAAI;QAAE,OAAO,aAAa,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,6EAA6E;IAC7E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE;YAC3D,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACpC,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oDAAoD;IACtD,CAAC;IACD,sEAAsE;IACtE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACjF,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,aAAa,CAAC,GAAkB;IACvC,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrD,MAAM,IAAI,GAAa,EAAE,CAAC;IAE1B,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO;YAAE,IAAI,CAAC,IAAI,CAAC,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,CACP,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC;YAC/C,mBAAmB;YACnB,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,CACpD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CACP,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,EAC5C,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,EAChC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAC/B,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI;QACP,aAAa;QACb,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,EAChC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC,EACrC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,EACpE,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC;QAC/B,wBAAwB;QACxB,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,EAChC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC;QACpD,uBAAuB;QACvB,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAC9B,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,EAChC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,EAC1C,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC;QAClC,cAAc;QACd,gBAAgB,EAChB,mBAAmB,EACnB,UAAU;QACV,gCAAgC;QAChC,kCAAkC,EAClC,qCAAqC,CACtC,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,oEAAoE;IACpE,qEAAqE;IACrE,sDAAsD;IACtD,KAAK,MAAM,MAAM,IAAI,mBAAmB,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,2EAA2E;IAC3E,gDAAgD;IAChD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC,CAAC;YAC5C,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAaD,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,gEAAgE;IAChE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1F,OAAO,KAAK,IAAI,IAAI,CAAC;AACvB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAC3C,MAAM,cAAc,GAAkC;IACpD,aAAa,EAAE,aAAa;IAC5B,WAAW,EAAE,YAAY;IACzB,4DAA4D;IAC5D,YAAY,EAAE,mBAAmB;IACjC,oDAAoD;IACpD,cAAc,EAAE,mBAAmB;IACnC,UAAU,EAAE,WAAW;CACxB,CAAC;AAOF;;;;;;;;;;;;;;GAcG;AACH,SAAS,eAAe,CAAC,GAAkB,EAAE,OAAe;IAC1D,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,cAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAClD,2EAA2E;IAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO,QAAQ,KAAK,QAAQ,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc,CACrB,GAAkB,EAClB,OAAe,EACf,SAAS,GAAG,IAAI;IAEhB,IAAI,CAAC,IAAA,eAAU,EAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,4BAA4B,WAAW,CAAC,GAAG,CAAC,YAAY,cAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG;SAC1F,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,yBAAS,EAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;YACzC,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAqB,GAAa,CAAC,OAAO,GAAG,EAAE,CAAC;IAC9E,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG,cAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,qBAAqB,MAAM,CAAC,MAAM,EAAE;SACtE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,KAAK,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;IAChE,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,mEAAmE,WAAW,CAAC,GAAG,CAAC,MAAM;SAC5F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,SAAS,CAAC,GAAkB;IACnC,sEAAsE;IACtE,sEAAsE;IACtE,mEAAmE;IACnE,iEAAiE;IACjE,wEAAwE;IACxE,yEAAyE;IACzE,MAAM,MAAM,GAAG,uBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,MAAM,IAAI,IAAA,eAAU,EAAC,MAAM,CAAC,IAAI,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC;QACnE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAClE,CAAC;IAED,iBAAiB;IACjB,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,IAAI,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAChE,CAAC;IAED,yBAAyB;IACzB,KAAK,MAAM,SAAS,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,IAAI,IAAA,eAAU,EAAC,SAAS,CAAC,IAAI,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;YAC/D,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACvE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;;;;;GAUG;AACH,IAAI,WAAW,GAA0D,IAAI,CAAC;AAC9E,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC,SAAgB,aAAa,CAAC,KAAK,GAAG,KAAK;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,CAAC,KAAK,IAAI,WAAW,IAAI,WAAW,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;QACzD,OAAO,WAAW,CAAC,OAAO,CAAC;IAC7B,CAAC;IACD,MAAM,OAAO,GAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC7E,WAAW,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,GAAG,mBAAmB,EAAE,CAAC;IAChE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;+CAE+C;AAC/C,SAAgB,mBAAmB;IACjC,WAAW,GAAG,IAAI,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,eAAe,CAC7B,GAAkB,EAClB,UAAkB;IAElB,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACxE,wEAAwE;IACxE,uBAAuB;IACvB,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,SAAS;QAC1B,CAAC,CAAC,cAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;QACrD,CAAC,CAAC,cAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,UAAU,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3D,OAAO;YACL,EAAE,EAAE,GAAG;YACP,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,uBAAuB,UAAU,cAAc,GAAG,sBAAsB,WAAW,2BAA2B;SACvH,CAAC;IACJ,CAAC;IACD,4BAA4B;IAC5B,6DAA6D;IAC7D,oEAAoE;IACpE,mEAAmE;IACnE,oEAAoE;IACpE,mEAAmE;IACnE,oEAAoE;IACpE,0DAA0D;IAC1D,qEAAqE;IACrE,oEAAoE;IACpE,eAAe;IACf,IAAI,SAAS,GAAG,OAAO,CAAC;IACxB,IAAI,KAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,KAAK,GAAG,IAAA,cAAS,EAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,OAAO,EAAE,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,SAAS,GAAG,cAAI,CAAC,OAAO,CACtB,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YACrB,6DAA6D;YAC7D,gDAAgD;YAChD,IAAA,iBAAY,EAAC,OAAO,CAAC,CACtB,CAAC;YACF,MAAM,QAAQ,GAAG,IAAA,cAAS,EAAC,SAAS,CAAC,CAAC;YACtC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;gBACvB,OAAO;oBACL,EAAE,EAAE,GAAG;oBACP,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE,yCAAyC,SAAS,EAAE;iBAC7D,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,EAAE,EAAE,GAAG;gBACP,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,kCAAkC,OAAO,EAAE;aACpD,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3B,OAAO;YACL,EAAE,EAAE,GAAG;YACP,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,+BAA+B,OAAO,EAAE;SACjD,CAAC;IACJ,CAAC;IACD,+DAA+D;IAC/D,mEAAmE;IACnE,mEAAmE;IACnE,mEAAmE;IACnE,kEAAkE;IAClE,MAAM,CAAC,GAAG,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9D,kEAAkE;IAClE,oEAAoE;IACpE,2DAA2D;IAC3D,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACrE,CAAC"}

package/dist/lib/cli-health.js

@@ -0,0 +1,156 @@
+"use strict";
+/**
+ * Per-CLI health state, persisted in the settings table.
+ *
+ * Records the most recent failure mode the error-detector observed per
+ * lineage, plus a timestamp and (when available) a reset-at time so the UI
+ * can show "Codex resets at 10:05 PM".
+ *
+ * Recorded by: daemon's runner when it forwards cli_error events.
+ * Read by: home-page CLI status panel via GET /cli/health.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.recordHealth = recordHealth;
+exports.getHealth = getHealth;
+exports.getAllHealth = getAllHealth;
+exports.clearStaleHealth = clearStaleHealth;
+exports.kindToStatus = kindToStatus;
+exports.classifyOpenRouterError = classifyOpenRouterError;
+const db_1 = require("./db");
+const KEY = (l) => `cli_health.${l}`;
+const ALL_LINEAGES = [
+    'anthropic',
+    'openai',
+    'google',
+    'opencode',
+    'moonshot',
+    'openrouter',
+];
+async function recordHealth(input) {
+    const payload = {
+        lineage: input.lineage,
+        status: input.status,
+        message: input.message,
+        resetAt: input.resetAt,
+        updatedAt: Date.now(),
+    };
+    await db_1.settings.set(KEY(input.lineage), payload);
+}
+async function getHealth(lineage) {
+    const raw = await db_1.settings.get(KEY(lineage));
+    if (raw && typeof raw === 'object' && 'status' in raw) {
+        return raw;
+    }
+    return {
+        lineage,
+        status: 'unknown',
+        updatedAt: 0,
+    };
+}
+async function getAllHealth() {
+    return Promise.all(ALL_LINEAGES.map(getHealth));
+}
+/**
+ * Sweep cli-health entries and reset any whose `resetAt` has passed.
+ * Called periodically from the reaper so the home-page fleet card flips
+ * back to green automatically once a quota window expires — no refresh,
+ * no manual intervention. Bounded by ALL_LINEAGES so this is O(7) DB
+ * roundtrips per tick (six writes max even in the worst case).
+ *
+ * Returns the list of lineages whose state was cleared so the caller
+ * can log them.
+ */
+async function clearStaleHealth() {
+    const now = Date.now();
+    const cleared = [];
+    for (const lineage of ALL_LINEAGES) {
+        const h = await getHealth(lineage);
+        if (h.status !== 'healthy' &&
+            h.status !== 'unknown' &&
+            typeof h.resetAt === 'number' &&
+            h.resetAt > 0 &&
+            h.resetAt <= now) {
+            await recordHealth({ lineage, status: 'healthy' });
+            cleared.push(lineage);
+        }
+    }
+    return cleared;
+}
+/**
+ * Translate an error-detector CliErrorKind into a HealthStatus.
+ * Used by the runner when forwarding cli_error events.
+ */
+function kindToStatus(kind) {
+    switch (kind) {
+        case 'quota_exhausted':
+            return 'quota_exhausted';
+        case 'token_refresh_lost':
+        case 'mcp_handshake_failed':
+            return 'auth_invalid';
+        default:
+            return 'unknown';
+    }
+}
+/**
+ * Classify a headless-shim error kind (e.g. `openrouter_402`,
+ * `openrouter_401`, `openrouter_429`) into a health status + friendlier
+ * one-liner the cockpit can show on the fleet card and run-page error
+ * banner. Returns null when the kind isn't a known OpenRouter HTTP code,
+ * so callers can fall through to generic handling.
+ *
+ * Reference: https://openrouter.ai/docs/errors — 402 means "your account
+ * is out of credits", 401 a bad/revoked key, 429 a rate cap, 403 a model
+ * the key isn't allowed to call (paid tier / BYOK), 5xx an upstream
+ * outage. We deliberately collapse 401 + 403 to auth_invalid since the
+ * remediation is the same (fix the key).
+ */
+function classifyOpenRouterError(kind, message) {
+    const m = (message ?? '').trim();
+    if (kind === 'auth_missing') {
+        return {
+            status: 'auth_invalid',
+            message: 'No OpenRouter API key saved.',
+            cta: 'Add your key on the Connect page.',
+        };
+    }
+    if (!kind.startsWith('openrouter_'))
+        return null;
+    const statusCode = Number(kind.slice('openrouter_'.length));
+    if (statusCode === 402) {
+        return {
+            status: 'quota_exhausted',
+            message: m || 'OpenRouter account is out of credits.',
+            cta: 'Top up at openrouter.ai/credits.',
+        };
+    }
+    if (statusCode === 401 || statusCode === 403) {
+        return {
+            status: 'auth_invalid',
+            message: m || 'OpenRouter rejected the API key.',
+            cta: 'Replace the key on the Connect page.',
+        };
+    }
+    if (statusCode === 429) {
+        return {
+            status: 'rate_limited',
+            message: m || 'OpenRouter rate-limited the request.',
+            cta: 'Slow down or pick a higher-tier model.',
+        };
+    }
+    if (statusCode === 404) {
+        return {
+            status: 'unknown',
+            message: m || 'OpenRouter could not find the requested model.',
+            cta: 'Pick a different model on the Connect page.',
+        };
+    }
+    if (statusCode >= 500 && statusCode < 600) {
+        return {
+            status: 'rate_limited',
+            message: m || `OpenRouter upstream error (${statusCode}).`,
+            cta: 'Try again in a moment.',
+        };
+    }
+    return null;
+}
+//# sourceMappingURL=cli-health.js.map

package/dist/lib/cli-health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-health.js","sourceRoot":"","sources":["../../src/lib/cli-health.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;AAyCH,oCAcC;AAED,8BAUC;AAED,oCAEC;AAYD,4CAiBC;AAMD,oCAUC;AAeD,0DAkDC;AAnLD,6BAAgC;AA4BhC,MAAM,GAAG,GAAG,CAAC,CAAa,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;AAEjD,MAAM,YAAY,GAAiB;IACjC,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,UAAU;IACV,YAAY;CACb,CAAC;AAEK,KAAK,UAAU,YAAY,CAAC,KAKlC;IACC,MAAM,OAAO,GAAc;QACzB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;IACF,MAAM,aAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAEM,KAAK,UAAU,SAAS,CAAC,OAAmB;IACjD,MAAM,GAAG,GAAG,MAAM,aAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;QACtD,OAAO,GAAgB,CAAC;IAC1B,CAAC;IACD,OAAO;QACL,OAAO;QACP,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,CAAC;KACb,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,YAAY;IAChC,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,gBAAgB;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;QACnC,IACE,CAAC,CAAC,MAAM,KAAK,SAAS;YACtB,CAAC,CAAC,MAAM,KAAK,SAAS;YACtB,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAC7B,CAAC,CAAC,OAAO,GAAG,CAAC;YACb,CAAC,CAAC,OAAO,IAAI,GAAG,EAChB,CAAC;YACD,MAAM,YAAY,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAgB,YAAY,CAAC,IAAY;IACvC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,iBAAiB;YACpB,OAAO,iBAAiB,CAAC;QAC3B,KAAK,oBAAoB,CAAC;QAC1B,KAAK,sBAAsB;YACzB,OAAO,cAAc,CAAC;QACxB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,uBAAuB,CACrC,IAAY,EACZ,OAAgB;IAEhB,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC5B,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,8BAA8B;YACvC,GAAG,EAAE,mCAAmC;SACzC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO;YACL,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,CAAC,IAAI,uCAAuC;YACrD,GAAG,EAAE,kCAAkC;SACxC,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QAC7C,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,CAAC,IAAI,kCAAkC;YAChD,GAAG,EAAE,sCAAsC;SAC5C,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,CAAC,IAAI,sCAAsC;YACpD,GAAG,EAAE,wCAAwC;SAC9C,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,CAAC,IAAI,gDAAgD;YAC9D,GAAG,EAAE,6CAA6C;SACnD,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;QAC1C,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,CAAC,IAAI,8BAA8B,UAAU,IAAI;YAC1D,GAAG,EAAE,wBAAwB;SAC9B,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}