gcb-client 0.0.0 → 0.0.2

package/lib/commands/pr.js

@@ -0,0 +1,402 @@
+/**
+ * `pr` — open, update or inspect one pull request through the broker.
+ *
+ * `pr <subcommand>` runs as the catalogued gh action when the catalog has one (`pr:view`,
+ * `pr:close`, …); this file is the flag-only lifecycle for the actions gh cannot express.
+ *
+ * The credential never leaves the broker. The broker mints a token narrowed to `pull_requests: write`
+ * plus read access to the branches it names, performs the action itself, and answers with the number,
+ * the URL and the state: the agent gets the lifecycle of a pull request without ever holding
+ * something that could push to it.
+ *
+ * Exit codes: 0 done, 1 refused, 3 broker unreachable.
+ */
+import { readFileSync } from 'node:fs';
+import { ANSWER_TIMEOUT_MS, channelDir, findGitDir, readOpener, removeResult, waitForResult, writeRequest, } from 'gcb-core';
+import { requestOverSocket, resolveSocketPath } from '../helper.js';
+import { baseBranchFor, qualifiedBranch, remoteRepo } from './remotes.js';
+import { runGh } from './gh.js';
+import { fail, parseArgs, say } from 'gcb-core';
+/** Every flag the flag-only lifecycle understands. */
+const KNOWN_FLAGS = new Set([
+    'help', 'h', 'draft', 'close', 'comment', 'file', 'line', 'side', 'threads',
+    'reply-to', 'edit', 'resolve', 'id', 'jq', 'proxy', 'no-proxy', 'socket', 'host', 'repo',
+    'head', 'base', 'title', 'body', 'body-file', 'number', 'via-host', 'status',
+]);
+/** Longer than a credential request: a token is minted, then the action is performed. */
+const PR_TIMEOUT_MS = 60_000;
+/** Usage text for `pr`. */
+export const PR_USAGE = `Usage: gcb pr [options]
+
+Open, update or inspect a pull request through the broker, without the credential
+ever reaching this side.
+
+A subcommand the gh action catalog has (pr view, pr close, …) runs as that action instead;
+gcb gh --help lists them. The flags below are the flag-only lifecycle gh cannot express.
+
+Opening (the default)
+  --head <branch>      The branch holding the change                 [required]
+                       May be <remote>:<branch>, e.g. origin:feat/x, to name a fork
+  --base <branch>      The branch to merge into (default: main)
+                       A <remote>:<branch> here names the same repository as --repo
+  --title <text>       The title                                     [required]
+  --body <text>        The body, inline
+  --body-file <path>   The body, read from a file — a pull request body is usually long
+  --draft              Open it as a draft
+  --via-host           Ask a host-side opener to create it, as you, instead of as the app
+                       (run 'gcb host-opener' on the host to provide one)
+
+Acting on one
+  --number <n>         The pull request number                       [required]
+  --proxy <url>        Use this proxy for this request
+  --no-proxy           Reach GitHub directly for this request
+  --status             Report its state, mergeability and the runs for its commit
+  --comment            Post an anchored review comment (also needs --file and --line);
+                       for a plain comment use: gcb gh pr comment <number> --body ...
+  --file <path>        Anchor that comment to a line of this file, repository-relative
+  --line <n>           The line to anchor to, in the new file unless --side says otherwise
+  --side <left|right>  Which side of the diff --line counts on (default: right)
+  --threads            List its review threads: their ids, whether they are resolved, and the comments
+  --reply-to <id>      Reply inside the thread that comment id belongs to, with --body/--body-file
+  --edit <id>          Replace the body of that review comment, with --body/--body-file
+                       (an id --threads prints; no --number is needed)
+  --resolve <thread>   Mark that review thread resolved (the id --threads prints)
+  --id <review-id>     Show one existing review (with --number)
+  --jq <expr>          Filter that review's JSON (with --id)
+  With --number and none of the above, the title, body or base is updated.
+
+Common
+  --socket <path>      Broker socket (default: $GIT_BROKER_SOCKET or the socket file)
+  --host <host>        Host as configured, e.g. github.com (default: github.com)
+  --repo <owner/name>  Repository the pull request belongs to (default: origin remote)
+  -h, --help           Show this help
+`;
+/** A positive decimal identifier that survives Number() without losing precision. */
+const isPositiveSafeInteger = (value) => value !== undefined && /^[1-9][0-9]*$/.test(value) && Number.isSafeInteger(Number(value));
+/**
+ * Read the action out of the flags.
+ *
+ * @param args - the parsed arguments.
+ * @returns the selected action; `--id` is applied by the caller as `review`.
+ */
+function actionOf(args) {
+    // `--resolve`, `--reply-to` and `--edit` take a value, and a bare one is parsed as a boolean flag with
+    // no value at all. Selecting the action from the flag's *presence* is what turns that into the refusal
+    // below — reading only `value` let a bare `--edit` fall through to `update`, which patched the pull
+    // request itself with the body meant for the comment.
+    const present = (name) => args.has(name) || args.value(name) !== undefined;
+    if (present('resolve'))
+        return 'resolve';
+    if (present('reply-to'))
+        return 'reply';
+    if (present('edit'))
+        return 'edit';
+    if (args.has('threads'))
+        return 'threads';
+    if (args.has('comment'))
+        return 'comment';
+    if (args.has('status'))
+        return 'status';
+    if (args.value('number') !== undefined)
+        return 'update';
+    return 'open';
+}
+/**
+ * Run the `pr` command.
+ *
+ * @param argv - arguments after the command name.
+ * @returns the process exit code: 0 done, 1 refused, 3 unreachable.
+ */
+export async function runPr(argv) {
+    const args = parseArgs(argv, {
+        booleans: ['help', 'draft', 'status', 'comment', 'threads', 'via-host', 'no-proxy'],
+    });
+    if (args.has('help') || args.has('h')) {
+        say(PR_USAGE);
+        return 0;
+    }
+    // Unknown options are refused rather than ignored: a typo must not silently fall through to an update.
+    for (const name of args.names) {
+        if (!KNOWN_FLAGS.has(name))
+            fail('unknown option --' + name + ' for gcb pr');
+    }
+    if (args.positionals.length > 0)
+        fail('unexpected argument ' + JSON.stringify(args.positionals[0]) + ' for gcb pr');
+    // Before --repo: the point of the message is to name the command that does it now.
+    if (args.has('close') || args.value('close') !== undefined) {
+        fail('--close moved to: gcb gh pr close <number> --repo owner/name');
+    }
+    // Before --repo too: a bare `gcb pr --comment` should hear what the flag needs, not that --repo
+    // is missing. An anchored comment (--file and --line) is still this command's to post.
+    if (args.has('comment') && args.value('file') === undefined && args.value('line') === undefined) {
+        fail('--comment only posts an anchored review comment; pass --file and --line');
+    }
+    if (args.has('no-proxy') && args.value('proxy') !== undefined) {
+        fail('--proxy and --no-proxy are mutually exclusive');
+    }
+    if (args.has('proxy') && args.value('proxy') === undefined)
+        fail('--proxy needs a value');
+    const proxy = args.has('no-proxy') ? null : args.value('proxy');
+    const socketPath = resolveSocketPath(args.value('socket'), process.env);
+    const looksLikeOption = (value) => value.startsWith('--') || /^-(?=[A-Za-z])/.test(value);
+    const invalidValue = (name) => args.has(name) || args.values(name).some((value) => value.trim() === '' || looksLikeOption(value));
+    const hasValue = (name) => args.has(name) || args.values(name).length > 0;
+    const hostArg = args.value('host');
+    if (hasValue('host') && invalidValue('host'))
+        fail('--host needs a value (e.g. github.com)');
+    const host = hostArg ?? 'github.com';
+    const repoArg = args.value('repo');
+    if (hasValue('repo') && invalidValue('repo'))
+        fail('--repo needs a value (e.g. owner/name)');
+    let repo = repoArg;
+    if (repo === undefined) {
+        const found = remoteRepo('origin', process.cwd());
+        if (found === undefined)
+            fail('--repo is required when the checkout has no usable origin remote');
+        if (found.host !== host.toLowerCase()) {
+            fail(`the checkout's remote is on ${found.host}, but --host is ${host}; pass --repo or --host`);
+        }
+        repo = `${found.owner}/${found.repo}`;
+    }
+    if (repo.trim() === '')
+        fail('--repo needs a value (e.g. owner/name)');
+    let action = actionOf(args);
+    const hasReviewId = args.has('id') || args.value('id') !== undefined;
+    if (hasReviewId) {
+        const conflicts = [
+            'status', 'comment', 'threads', 'reply-to', 'edit', 'resolve', 'close', 'draft', 'via-host',
+            'head', 'base', 'title', 'body', 'body-file', 'file', 'line', 'side',
+        ];
+        if (conflicts.some((name) => args.has(name) || args.value(name) !== undefined) || (action !== 'update' && action !== 'open')) {
+            fail('--id only goes with --number and --jq');
+        }
+        action = 'review';
+    }
+    if (args.has('via-host') && action !== 'open') {
+        fail('--via-host only creates a pull request, so it does not go with ' + JSON.stringify(action));
+    }
+    const viaHost = action === 'open' && args.has('via-host');
+    const number = args.value('number');
+    // `--head origin:feat/x` and `--base upstream:main` name a configured remote instead of a repository
+    // typed by hand: it is the name this checkout already pushes to, and a typo lists the ones that exist.
+    // The base is a branch of the repository --repo names, so the owner a remote resolves to is a check
+    // rather than part of the value: sending `owner:branch` as a base names a branch that cannot exist.
+    const baseBranch = () => {
+        const raw = args.value('base');
+        if (raw === undefined)
+            return undefined;
+        try {
+            return baseBranchFor(raw, repo, process.cwd());
+        }
+        catch (error) {
+            fail(error.message);
+        }
+    };
+    const qualified = (value) => {
+        if (value === undefined)
+            return undefined;
+        try {
+            return qualifiedBranch(value, process.cwd());
+        }
+        catch (error) {
+            fail(error.message);
+        }
+    };
+    const head = qualified(args.value('head'));
+    const base = baseBranch();
+    const title = args.value('title');
+    const bodyFile = args.value('body-file');
+    let body = args.value('body');
+    if (bodyFile !== undefined) {
+        try {
+            body = readFileSync(bodyFile, 'utf8');
+        }
+        catch (error) {
+            fail(`cannot read ${bodyFile}: ${error.message}`);
+        }
+    }
+    if (action === 'open') {
+        if (!head)
+            fail('--head is required to open a pull request');
+        if (!title)
+            fail('--title is required to open a pull request');
+    }
+    else if (action !== 'resolve' && action !== 'edit' && number === undefined) {
+        const verb = action === 'status' ? 'inspect' : action;
+        fail(`--number is required to ${verb} a pull request`);
+    }
+    // `--resolve` and `--edit` name their target by id and need no pull request number, but one given
+    // anyway still has to be a number.
+    if (number !== undefined && !isPositiveSafeInteger(number)) {
+        fail(`--number must be a positive integer, got ${JSON.stringify(number)}`);
+    }
+    const jq = args.value('jq');
+    if ((args.has('jq') && jq === undefined) || (jq !== undefined && jq.trim() === '')) {
+        fail('--jq needs an expression');
+    }
+    if (jq !== undefined && action !== 'review') {
+        fail('--jq only goes with --id');
+    }
+    if (action === 'update' && title === undefined && body === undefined && base === undefined) {
+        fail('an update has to change something: pass --title, --body/--body-file or --base');
+    }
+    if ((action === 'comment' || action === 'reply' || action === 'edit') && (body === undefined || body.trim() === '')) {
+        fail('a comment has to say something: pass --body or --body-file');
+    }
+    const filePath = args.value('file');
+    const lineArg = args.value('line');
+    const side = (args.value('side') ?? 'right').toLowerCase();
+    if ((filePath === undefined) !== (lineArg === undefined)) {
+        fail('an anchored comment needs both --file and --line, or neither');
+    }
+    if (filePath !== undefined) {
+        if (action !== 'comment')
+            fail('--file and --line anchor a comment, so they only go with --comment');
+        if (!Number.isInteger(Number(lineArg)) || Number(lineArg) <= 0) {
+            fail(`--line must be a positive integer, got ${JSON.stringify(lineArg)}`);
+        }
+        if (side !== 'left' && side !== 'right') {
+            fail(`--side must be left or right, got ${JSON.stringify(args.value('side'))}`);
+        }
+    }
+    const replyTo = args.value('reply-to');
+    if (action === 'reply' && (replyTo === undefined || !Number.isInteger(Number(replyTo)) || Number(replyTo) <= 0)) {
+        fail(`--reply-to needs the id of the comment being answered, got ${JSON.stringify(replyTo)}`);
+    }
+    const editId = args.value('edit');
+    if (action === 'edit' && (editId === undefined || !Number.isInteger(Number(editId)) || Number(editId) <= 0)) {
+        fail(`--edit needs the id of the review comment being changed, got ${JSON.stringify(editId)}`);
+    }
+    const reviewId = args.value('id');
+    if (action === 'review' && !isPositiveSafeInteger(reviewId)) {
+        fail(`--id needs a positive review id, got ${JSON.stringify(reviewId)}`);
+    }
+    const resolveId = args.value('resolve');
+    if (action === 'resolve' && (resolveId === undefined || resolveId.trim() === '')) {
+        fail(`--resolve needs the id of the thread being resolved, got ${JSON.stringify(resolveId)}`);
+    }
+    if (action === 'review') {
+        const ghArgs = ['pr', 'review-by-id', String(number), reviewId, '--repo', repo, '--host', host];
+        const socketArg = args.value('socket');
+        if (socketArg !== undefined)
+            ghArgs.push('--socket', socketArg);
+        if (args.has('no-proxy'))
+            ghArgs.push('--no-proxy');
+        else if (args.value('proxy') !== undefined)
+            ghArgs.push('--proxy', args.value('proxy'));
+        if (jq !== undefined)
+            ghArgs.push('--jq', jq);
+        return runGh(ghArgs, { unreachableExitCode: 3 });
+    }
+    if (action === 'update') {
+        const ghArgs = ['pr', 'edit', String(number), '--repo', repo, '--host', host];
+        if (title !== undefined)
+            ghArgs.push(`--title=${title}`);
+        if (body !== undefined)
+            ghArgs.push(`--body=${body}`);
+        if (base !== undefined)
+            ghArgs.push(`--base=${base}`);
+        const socketArg = args.value('socket');
+        if (socketArg !== undefined)
+            ghArgs.push('--socket', socketArg);
+        if (args.has('no-proxy'))
+            ghArgs.push('--no-proxy');
+        else if (args.value('proxy') !== undefined)
+            ghArgs.push('--proxy', args.value('proxy'));
+        return runGh(ghArgs, { unreachableExitCode: 3 });
+    }
+    if (viaHost) {
+        if (head === undefined || title === undefined)
+            fail('--via-host needs --head and --title');
+        const gitDir = findGitDir(process.cwd());
+        if (gitDir === undefined)
+            fail('--via-host needs a git repository: run it from the checkout');
+        const dir = channelDir(gitDir);
+        if (readOpener(dir) === undefined) {
+            fail(`no host opener is watching ${dir}\n` +
+                '  start one on the host: gcb host-opener --repo <that checkout>\n' +
+                '  or drop --via-host to open it as the app instead');
+        }
+        // writeRequest refuses a request the opener would have to refuse: a title past its limit, a body past
+        // its limit, a head equal to its base. It throws, and a stack trace tells the caller none of that.
+        let id;
+        try {
+            id = writeRequest(dir, {
+                repo,
+                head,
+                base: base ?? 'main',
+                title,
+                body: body ?? '',
+                draft: args.has('draft'),
+                proxy,
+                session: 'pr',
+                pid: process.pid,
+            });
+        }
+        catch (error) {
+            fail(error.message);
+        }
+        const answer = await waitForResult(dir, id, ANSWER_TIMEOUT_MS);
+        removeResult(dir, id);
+        if (answer === undefined) {
+            fail(`the host opener did not answer ${id} within ${Math.round(ANSWER_TIMEOUT_MS / 1000)}s\n` +
+                '  it may still be working: the request is not cancelled, and the opener removes it only once\n' +
+                '  it has created the pull request or failed. Check the pull request list before asking again.');
+        }
+        if (answer.error !== undefined)
+            fail(`the host opener could not open it: ${answer.error}`);
+        say(`opened #${answer.number ?? '?'} (as you, through the host opener): ${answer.url ?? '(no url)'}`);
+        return 0;
+    }
+    if (socketPath === undefined) {
+        fail('no broker socket: pass --socket, set GIT_BROKER_SOCKET, or run `gcb setup`');
+    }
+    let response;
+    try {
+        response = await requestOverSocket(socketPath, {
+            v: 1,
+            op: 'pull-request',
+            host,
+            path: repo,
+            action,
+            ...(number === undefined || action === 'edit' ? {} : { number: Number(number) }),
+            ...(action === 'reply' ? { commentId: Number(replyTo) } : {}),
+            ...(action === 'edit' ? { commentId: Number(editId) } : {}),
+            ...(action === 'resolve' ? { threadId: args.value('resolve') } : {}),
+            ...(head === undefined ? {} : { head }),
+            ...(base === undefined ? {} : { base }),
+            ...(title === undefined ? {} : { title }),
+            ...(body === undefined ? {} : { body }),
+            ...(filePath === undefined ? {} : { filePath, line: Number(lineArg), side }),
+            draft: args.has('draft'),
+            session: 'pr',
+            pid: process.pid,
+            proxy,
+        }, PR_TIMEOUT_MS);
+    }
+    catch (error) {
+        process.stderr.write(`unreachable: ${error.message}\n`);
+        return 3;
+    }
+    if (!response.ok) {
+        process.stderr.write(`refused [${response.code ?? 'unknown'}]: ${response.reason ?? 'no reason given'}\n`);
+        return 1;
+    }
+    if (action === 'status' || action === 'threads' || action === 'resolve') {
+        say(response.prStatus ?? 'no report');
+        return 0;
+    }
+    const done = action === 'open'
+        ? 'opened'
+        : action === 'comment'
+            ? 'commented on'
+            : action === 'reply'
+                ? 'replied in'
+                : action === 'edit'
+                    ? 'edited a review comment on'
+                    : 'updated';
+    const state = response.prState === undefined ? '' : ` (${response.prState})`;
+    say(`${done} #${response.prNumber ?? '?'}${state}: ${response.prUrl ?? '(no url)'}`);
+    return 0;
+}
+//# sourceMappingURL=pr.js.map

package/lib/commands/pr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr.js","sourceRoot":"","sources":["../../src/commands/pr.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EACL,iBAAiB,EACjB,UAAU,EACV,UAAU,EACV,UAAU,EACV,YAAY,EACZ,aAAa,EACb,YAAY,GACb,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAEhD,sDAAsD;AACtD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS;IAC3E,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM;IACxF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ;CAC7E,CAAC,CAAC;AAEH,yFAAyF;AACzF,MAAM,aAAa,GAAG,MAAM,CAAC;AAE7B,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4CvB,CAAC;AAGF,qFAAqF;AACrF,MAAM,qBAAqB,GAAG,CAAC,KAAyB,EAAmB,EAAE,CAC3E,KAAK,KAAK,SAAS,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAE5F;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,IAA6E;IAC7F,uGAAuG;IACvG,uGAAuG;IACvG,oGAAoG;IACpG,sDAAsD;IACtD,MAAM,OAAO,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;IAC5F,IAAI,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,SAAkB,CAAC;IAClD,IAAI,OAAO,CAAC,UAAU,CAAC;QAAE,OAAO,OAAgB,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAe,CAAC;IAC5C,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,SAAkB,CAAC;IACnD,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,SAAkB,CAAC;IACnD,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAiB,CAAC;IACjD,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,SAAS;QAAE,OAAO,QAAiB,CAAC;IACjE,OAAO,MAAe,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAuB;IACjD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE;QAC3B,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC;KACpF,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACd,OAAO,CAAC,CAAC;IACX,CAAC;IACD,uGAAuG;IACvG,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,mBAAmB,GAAG,IAAI,GAAG,aAAa,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC;IAEpH,mFAAmF;IACnF,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3D,IAAI,CAAC,8DAA8D,CAAC,CAAC;IACvE,CAAC;IACD,gGAAgG;IAChG,uFAAuF;IACvF,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;QAChG,IAAI,CAAC,yEAAyE,CAAC,CAAC;IAClF,CAAC;IAED,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;QAC9D,IAAI,CAAC,+CAA+C,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,SAAS;QAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACxE,MAAM,eAAe,GAAG,CAAC,KAAa,EAAW,EAAE,CACjD,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,CAAC,IAAY,EAAW,EAAE,CAC7C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IACrG,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,wCAAwC,CAAC,CAAC;IAC7F,MAAM,IAAI,GAAG,OAAO,IAAI,YAAY,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,wCAAwC,CAAC,CAAC;IAC7F,IAAI,IAAI,GAAG,OAAO,CAAC;IACnB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,kEAAkE,CAAC,CAAC;QAClG,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,+BAA+B,KAAK,CAAC,IAAI,mBAAmB,IAAI,yBAAyB,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;IACxC,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACvE,IAAI,MAAM,GAA2C,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;IACrE,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,SAAS,GAAG;YAChB,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU;YAC3F,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;SACrE,CAAC;QACF,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;YAC7H,IAAI,CAAC,uCAAuC,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,GAAG,QAAQ,CAAC;IACpB,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9C,IAAI,CAAC,iEAAiE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAE1D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpC,qGAAqG;IACrG,uGAAuG;IACvG,oGAAoG;IACpG,oGAAoG;IACpG,MAAM,UAAU,GAAG,GAAuB,EAAE;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,KAAyB,EAAsB,EAAE;QAClE,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,CAAC;YACH,OAAO,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,eAAe,QAAQ,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,4CAA4C,CAAC,CAAC;IACjE,CAAC;SAAM,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7E,MAAM,IAAI,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;QACtD,IAAI,CAAC,2BAA2B,IAAI,iBAAiB,CAAC,CAAC;IACzD,CAAC;IACD,kGAAkG;IAClG,mCAAmC;IACnC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,4CAA4C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,SAAS,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACnF,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,EAAE,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5C,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC3F,IAAI,CAAC,+EAA+E,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACpH,IAAI,CAAC,4DAA4D,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3D,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,8DAA8D,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,oEAAoE,CAAC,CAAC;QACrG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,0CAA0C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACxC,IAAI,CAAC,qCAAqC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACvC,IAAI,MAAM,KAAK,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAChH,IAAI,CAAC,8DAA8D,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC5G,IAAI,CAAC,gEAAgE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,wCAAwC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACjF,IAAI,CAAC,4DAA4D,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAkB,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1G,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;aAC/C,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAW,CAAC,CAAC;QAClG,IAAI,EAAE,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9C,OAAO,KAAK,CAAC,MAAM,EAAE,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC9E,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;QACzD,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QACtD,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;aAC/C,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAW,CAAC,CAAC;QAClG,OAAO,KAAK,CAAC,MAAM,EAAE,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,qCAAqC,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,6DAA6D,CAAC,CAAC;QAC9F,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CACF,8BAA8B,GAAG,IAAI;gBACnC,mEAAmE;gBACnE,oDAAoD,CACvD,CAAC;QACJ,CAAC;QACD,sGAAsG;QACtG,mGAAmG;QACnG,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,EAAE,GAAG,YAAY,CAAC,GAAG,EAAE;gBACrB,IAAI;gBACJ,IAAI;gBACJ,IAAI,EAAE,IAAI,IAAI,MAAM;gBACpB,KAAK;gBACL,IAAI,EAAE,IAAI,IAAI,EAAE;gBAChB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACxB,KAAK;gBACL,OAAO,EAAE,IAAI;gBACb,GAAG,EAAE,OAAO,CAAC,GAAG;aACjB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAC/D,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACtB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CACF,kCAAkC,EAAE,WAAW,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC,KAAK;gBACtF,gGAAgG;gBAChG,+FAA+F,CAClG,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,sCAAsC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3F,GAAG,CAAC,WAAW,MAAM,CAAC,MAAM,IAAI,GAAG,uCAAuC,MAAM,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC,CAAC;QACtG,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,4EAA4E,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,iBAAiB,CAChC,UAAU,EACV;YACE,CAAC,EAAE,CAAC;YACJ,EAAE,EAAE,cAAc;YAClB,IAAI;YACJ,IAAI,EAAE,IAAI;YACV,MAAM;YACN,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAChF,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACvC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACvC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YACzC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACvC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;YAC5E,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YACxB,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK;SACN,EACD,aAAa,CACd,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAiB,KAAe,CAAC,OAAO,IAAI,CAAC,CAAC;QACnE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,QAAQ,CAAC,IAAI,IAAI,SAAS,MAAM,QAAQ,CAAC,MAAM,IAAI,iBAAiB,IAAI,CAAC,CAAC;QAC3G,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACxE,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,WAAW,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,IAAI,GACR,MAAM,KAAK,MAAM;QACf,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,MAAM,KAAK,SAAS;YAChB,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,MAAM,KAAK,OAAO;gBAClB,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,MAAM,KAAK,MAAM;oBACjB,CAAC,CAAC,4BAA4B;oBAC9B,CAAC,CAAC,SAAS,CAAC;IAC1B,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,OAAO,GAAG,CAAC;IAC7E,GAAG,CAAC,GAAG,IAAI,KAAK,QAAQ,CAAC,QAAQ,IAAI,GAAG,GAAG,KAAK,KAAK,QAAQ,CAAC,KAAK,IAAI,UAAU,EAAE,CAAC,CAAC;IACrF,OAAO,CAAC,CAAC;AACX,CAAC"}

package/lib/commands/probe.d.ts

@@ -0,0 +1,10 @@
+/** Usage text for `probe`. */
+export declare const PROBE_USAGE = "Usage: gcb probe [options]\n\nAsk the broker for a credential without pushing. Prints a fingerprint, never the credential.\n\n  --socket <path>   Broker socket (default: $GIT_BROKER_SOCKET or the socket file)\n  --host <host>     Host as git reports it (default: github.com)\n  --repo <owner/name>  Repository path                            [required]\n  --protocol <p>    https (default) or http for a host that opted in\n  --proxy <url>     Use this proxy for this request\n  --no-proxy        Reach GitHub directly for this request\n  -h, --help        Show this help\n";
+/**
+ * Run the `probe` command.
+ *
+ * @param argv - arguments after the command name.
+ * @returns the process exit code: 0 allowed, 1 denied, 3 unreachable.
+ */
+export declare function runProbe(argv: readonly string[]): Promise<number>;
+//# sourceMappingURL=probe.d.ts.map

package/lib/commands/probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.d.ts","sourceRoot":"","sources":["../../src/commands/probe.ts"],"names":[],"mappings":"AAWA,8BAA8B;AAC9B,eAAO,MAAM,WAAW,kkBAWvB,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAsDvE"}

package/lib/commands/probe.js

@@ -0,0 +1,83 @@
+/**
+ * `probe` — ask the broker what it would do for one repository, without pushing.
+ *
+ * Exercises the real path (JWT, installation lookup, permission pre-flight, token mint) and
+ * reports the decision with the credential reduced to a fingerprint, so the output is safe to
+ * paste anywhere. Exit codes: 0 allowed, 1 denied, 3 broker unreachable.
+ */
+import { tokenFingerprint } from 'gcb-core';
+import { requestOverSocket, resolveSocketPath } from '../helper.js';
+import { fail, parseArgs, say } from 'gcb-core';
+/** Usage text for `probe`. */
+export const PROBE_USAGE = `Usage: gcb probe [options]
+
+Ask the broker for a credential without pushing. Prints a fingerprint, never the credential.
+
+  --socket <path>   Broker socket (default: $GIT_BROKER_SOCKET or the socket file)
+  --host <host>     Host as git reports it (default: github.com)
+  --repo <owner/name>  Repository path                            [required]
+  --protocol <p>    https (default) or http for a host that opted in
+  --proxy <url>     Use this proxy for this request
+  --no-proxy        Reach GitHub directly for this request
+  -h, --help        Show this help
+`;
+/**
+ * Run the `probe` command.
+ *
+ * @param argv - arguments after the command name.
+ * @returns the process exit code: 0 allowed, 1 denied, 3 unreachable.
+ */
+export async function runProbe(argv) {
+    const args = parseArgs(argv, { booleans: ['help', 'no-proxy'] });
+    if (args.has('no-proxy') && args.value('proxy') !== undefined)
+        fail('--proxy and --no-proxy are mutually exclusive');
+    if (args.has('proxy') && args.value('proxy') === undefined)
+        fail('--proxy needs a value');
+    const proxy = args.has('no-proxy') ? null : args.value('proxy');
+    if (args.has('help') || args.has('h')) {
+        say(PROBE_USAGE);
+        return 0;
+    }
+    const socketPath = resolveSocketPath(args.value('socket'), process.env);
+    const hostArg = args.value('host');
+    if (args.has('host') && hostArg === undefined)
+        fail('--host needs a value');
+    if (hostArg === '')
+        fail('--host needs a value');
+    const host = hostArg ?? 'github.com';
+    const repo = args.value('repo');
+    if (!socketPath) {
+        fail('no broker socket: pass --socket, set GIT_BROKER_SOCKET, or run `gcb setup`');
+    }
+    if (!repo)
+        fail('--repo is required (e.g. owner/name)');
+    const protocol = args.value('protocol') ?? 'https';
+    let response;
+    try {
+        response = await requestOverSocket(socketPath, {
+            v: 1,
+            op: 'credential',
+            protocol,
+            host,
+            path: repo,
+            proxy,
+            session: 'probe',
+            pid: process.pid,
+        });
+    }
+    catch (error) {
+        process.stderr.write(`unreachable: ${error.message}\n`);
+        return 3;
+    }
+    if (!response.ok) {
+        process.stderr.write(`denied [${response.code ?? 'unknown'}]: ${response.reason ?? 'no reason given'}\n`);
+        return 1;
+    }
+    const password = response.password ?? '';
+    say(`allowed: ${host}/${repo} over ${protocol}`);
+    say(`  username      : ${response.username ?? '(none)'}`);
+    say(`  expires_at    : ${response.expires_at ?? '(unknown)'}`);
+    say(`  credential    : ${password ? `present, fingerprint ${tokenFingerprint(password)} (value not printed)` : 'MISSING'}`);
+    return 0;
+}
+//# sourceMappingURL=probe.js.map

package/lib/commands/probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.js","sourceRoot":"","sources":["../../src/commands/probe.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAEhD,8BAA8B;AAC9B,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;CAW1B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAuB;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;IACjE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,SAAS;QAAE,IAAI,CAAC,+CAA+C,CAAC,CAAC;IACrH,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,SAAS;QAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,WAAW,CAAC,CAAC;QACjB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,KAAK,SAAS;QAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC5E,IAAI,OAAO,KAAK,EAAE;QAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,IAAI,YAAY,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAI,CAAC,4EAA4E,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAExD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC;IACnD,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE;YAC7C,CAAC,EAAE,CAAC;YACJ,EAAE,EAAE,YAAY;YAChB,QAAQ;YACR,IAAI;YACJ,IAAI,EAAE,IAAI;YACV,KAAK;YACL,OAAO,EAAE,OAAO;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAiB,KAAe,CAAC,OAAO,IAAI,CAAC,CAAC;QACnE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,QAAQ,CAAC,IAAI,IAAI,SAAS,MAAM,QAAQ,CAAC,MAAM,IAAI,iBAAiB,IAAI,CAAC,CAAC;QAC1G,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC;IACzC,GAAG,CAAC,YAAY,IAAI,IAAI,IAAI,SAAS,QAAQ,EAAE,CAAC,CAAC;IACjD,GAAG,CAAC,qBAAqB,QAAQ,CAAC,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC;IAC1D,GAAG,CAAC,qBAAqB,QAAQ,CAAC,UAAU,IAAI,WAAW,EAAE,CAAC,CAAC;IAC/D,GAAG,CACD,qBACE,QAAQ,CAAC,CAAC,CAAC,wBAAwB,gBAAgB,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,SACxF,EAAE,CACH,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC"}

package/lib/commands/remotes.d.ts

@@ -0,0 +1,56 @@
+/** What a remote's URL says: the owner, repository and host key, for a GitHub-shaped URL. */
+export interface RemoteRepo {
+    readonly owner: string;
+    readonly repo: string;
+    /** The host key: `host:port` for HTTP(S), or the host alone for SSH and git URLs. */
+    readonly host: string;
+}
+/**
+ * The remotes this checkout knows, in the order git lists them.
+ *
+ * @param cwd - the directory to ask.
+ * @returns the names, possibly empty.
+ */
+export declare function listRemotes(cwd: string): string[];
+/**
+ * What repository a remote points at.
+ *
+ * HTTPS and SSH spell the same thing differently, and both end in `owner/repo`, optionally with a `.git`.
+ *
+ * @param name - the remote name.
+ * @param cwd - the directory to ask.
+ * @returns the owner, repository and host, or undefined when there is no such remote or the URL is not one.
+ */
+export declare function remoteRepo(name: string, cwd: string, push?: boolean): RemoteRepo | undefined;
+/**
+ * The URL a remote points at, for saying what was wrong with it.
+ *
+ * @param name - the remote name.
+ * @param cwd - the directory to ask.
+ * @returns the URL, or undefined when there is no such remote.
+ */
+export declare function remoteUrl(name: string, cwd: string): string | undefined;
+/**
+ * Turn `remote:branch` into `owner:branch`, and leave a plain branch alone.
+ *
+ * @param value - what the operator wrote.
+ * @param cwd - the directory to resolve remotes in.
+ * @returns the value to send.
+ * @throws {Error} when the prefix is not a remote this checkout knows, naming the ones it does.
+ */
+export declare function qualifiedBranch(value: string, cwd: string): string;
+/**
+ * The branch a `--base` means, given the repository the pull request lands in.
+ *
+ * `--base upstream:main` names the remote for the check and the branch for the wire: a base is a branch of
+ * `--repo`, and `owner:branch` is not a branch name anywhere. A remote pointing at a different repository
+ * is a mistake worth catching here rather than letting GitHub answer confusingly.
+ *
+ * @param raw - what the operator wrote.
+ * @param repo - the repository `--repo` names, as `owner/name`.
+ * @param cwd - the directory to resolve remotes in.
+ * @returns the branch to send.
+ * @throws {Error} when the remote points at a repository other than `repo`.
+ */
+export declare function baseBranchFor(raw: string, repo: string, cwd: string): string;
+//# sourceMappingURL=remotes.d.ts.map

package/lib/commands/remotes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remotes.d.ts","sourceRoot":"","sources":["../../src/commands/remotes.ts"],"names":[],"mappings":"AAcA,6FAA6F;AAC7F,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,qFAAqF;IACrF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAsBD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAKjD;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,UAAQ,GAAG,UAAU,GAAG,SAAS,CAmC1F;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEvE;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAoBlE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAe5E"}