feat-chv-to10：往 10 分方向提升（类型/lint 清零、worker 适配抽取、审计落盘、lockfile 生成脚本、前端四态与统一文案、就绪清单 §13）

chv-guest/generate_lockfile.py

@@ -0,0 +1,160 @@
+#!/usr/bin/env python3
+"""在构建宿主上生成 CHV 客机镜像的供应链 lockfile（to10 轨）。
+
+事后校验见 check_lockfile.py（校验 BUILDINFO.versions）；
+本脚本是事前/事中生成端：在构建宿主上跑，读 BUILDINFO
+的 tag 与 contents（仅名字清单，不含版本号），逐项从本
+机 dpkg / pip 查真实版本，写出 lockfile.json：
+
+  {"tag": ..., "image_sha256": ... | null,
+   "generated_at": UTC ISO 时间,
+   "versions": {"dpkg": ["name version", ...],
+                "pip": ["name version", ...]},
+   "unresolved": ["查不到版本的名", ...]}
+
+绝不编造版本号：查不到的进 unresolved，不猜、不填占位
+版本。--verify 模式校验一份 lockfile：tag 与 BUILDINFO
+一致、dpkg/pip 非空、每条都有非空版本、unresolved 为空；
+任一不满足即退出非 0（unresolved 非空 = 清单不完整，
+不是“生成成功”）。
+
+用法（均在构建宿主上跑）：
+  python3 generate_lockfile.py BUILDINFO.json --output lockfile.json
+  python3 generate_lockfile.py --verify lockfile.json \
+      --buildinfo BUILDINFO.json
+本轨无构建宿主：脚本已落地且可跑（见回执里的 /tmp 合成
+BUILDINFO 实测），真实清单待构建宿主产出，绝不把合成
+数据写成生产清单。
+"""
+
+import json
+import subprocess
+import sys
+from datetime import datetime, timezone
+
+
+def _dpkg_version(name):
+    """dpkg 查版本，查不到回 None（不抛）。"""
+    try:
+        out = subprocess.run(
+            ["dpkg-query", "-W", "-f=${Version}", name],
+            capture_output=True, text=True, timeout=30)
+    except Exception:
+        return None
+    if out.returncode != 0:
+        return None
+    version = out.stdout.strip()
+    return version or None
+
+
+def _pip_version(name):
+    """pip 查版本，查不到回 None（不抛）。"""
+    try:
+        out = subprocess.run(
+            [sys.executable, "-m", "pip", "show", name],
+            capture_output=True, text=True, timeout=30)
+    except Exception:
+        return None
+    if out.returncode != 0:
+        return None
+    for line in out.stdout.splitlines():
+        if line.startswith("Version:"):
+            version = line.split(":", 1)[1].strip()
+            return version or None
+    return None
+
+
+def generate(buildinfo_path, output_path):
+    with open(buildinfo_path) as fh:
+        buildinfo = json.load(fh)
+    names = buildinfo.get("contents") or []
+    if not isinstance(names, list):
+        print("BUILDINFO.contents 不是列表", file=sys.stderr)
+        return 2
+    dpkg, pip, unresolved = [], [], []
+    for name in names:
+        version = _dpkg_version(name)
+        if version is not None:
+            dpkg.append("%s %s" % (name, version))
+            continue
+        version = _pip_version(name)
+        if version is not None:
+            pip.append("%s %s" % (name, version))
+            continue
+        unresolved.append(name)
+    lockfile = {
+        "tag": buildinfo.get("tag"),
+        "image_sha256": buildinfo.get("image_sha256")
+        or buildinfo.get("sha256"),
+        "generated_at": datetime.now(timezone.utc).isoformat(),
+        "versions": {"dpkg": sorted(dpkg), "pip": sorted(pip)},
+        "unresolved": sorted(unresolved),
+    }
+    with open(output_path, "w") as fh:
+        json.dump(lockfile, fh, indent=2, sort_keys=True)
+        fh.write("\n")
+    if unresolved:
+        print("警告：%d 项查不到版本，已列入 unresolved：%s"
+              % (len(unresolved), ", ".join(sorted(unresolved))),
+              file=sys.stderr)
+    return 0
+
+
+def verify(lockfile_path, buildinfo_path):
+    with open(lockfile_path) as fh:
+        lockfile = json.load(fh)
+    if buildinfo_path:
+        with open(buildinfo_path) as fh:
+            buildinfo = json.load(fh)
+        if lockfile.get("tag") != buildinfo.get("tag"):
+            print("tag 不一致：lockfile %s != BUILDINFO %s"
+                  % (lockfile.get("tag"), buildinfo.get("tag")),
+                  file=sys.stderr)
+            return 1
+    versions = lockfile.get("versions") or {}
+    for kind in ("dpkg", "pip"):
+        entries = versions.get(kind)
+        if not entries:
+            print("versions.%s 为空，供应链清单缺失" % kind,
+                  file=sys.stderr)
+            return 1
+        for entry in entries:
+            parts = str(entry).split()
+            if len(parts) < 2 or not parts[1]:
+                print("版本为空的条目：%s %r" % (kind, entry),
+                      file=sys.stderr)
+                return 1
+    unresolved = lockfile.get("unresolved") or []
+    if unresolved:
+        print("清单不完整，unresolved 非空：%s" % sorted(unresolved),
+              file=sys.stderr)
+        return 1
+    print("lockfile 校验通过：tag=%s dpkg=%d pip=%d"
+          % (lockfile.get("tag"), len(versions["dpkg"]),
+             len(versions["pip"])))
+    return 0
+
+
+def main(argv):
+    if "--verify" in argv:
+        lockfile_path = argv[argv.index("--verify") + 1]
+        buildinfo_path = None
+        if "--buildinfo" in argv:
+            buildinfo_path = argv[argv.index("--buildinfo") + 1]
+        return verify(lockfile_path, buildinfo_path)
+    if len(argv) < 2:
+        print("用法：generate_lockfile.py BUILDINFO.json "
+              "--output lockfile.json | --verify lockfile.json "
+              "[--buildinfo BUILDINFO.json]", file=sys.stderr)
+        return 2
+    output_path = None
+    if "--output" in argv:
+        output_path = argv[argv.index("--output") + 1]
+    if not output_path:
+        print("缺少 --output", file=sys.stderr)
+        return 2
+    return generate(argv[1], output_path)
+
+
+if __name__ == "__main__":
+    raise SystemExit(main(sys.argv))

cloud/chv/compat215.py

@@ -48,7 +48,6 @@ cloud.quota，测试钉住这些模块在本基线里不存在）：
 
 import os
 
-
 # 合并后替换清单：每项的 local/replacement/test 字段由测试
 # 逐项核对（local 函数真实存在、#215 模块当前不存在、
 # test 命名的测试类真实存在），清单本身不得漂移。

cloud/chv/config.py

@@ -27,6 +27,33 @@ import os
 import re
 
 
+def _to_int(value: object) -> int:
+    """动态配置值转 int（env/参数均未定型）：bool 拒绝，
+    int/float 按 int()，str 按 strip 后 int()，其它 ValueError。
+    旧行为是 int(value) 抛 TypeError/ValueError 后由调用方
+    转 ValueError；这里直接统一成 ValueError，文案由调用方定。"""
+    if isinstance(value, bool):
+        raise ValueError("布尔值不是整数")
+    if isinstance(value, int):
+        return value
+    if isinstance(value, float):
+        return int(value)
+    if isinstance(value, str):
+        return int(value.strip())
+    raise ValueError("不是整数：%r" % (value,))
+
+
+def _to_float(value: object) -> float:
+    """动态配置值转 float，与 _to_int 同款口径。"""
+    if isinstance(value, bool):
+        raise ValueError("布尔值不是数字")
+    if isinstance(value, (int, float)):
+        return float(value)
+    if isinstance(value, str):
+        return float(value.strip())
+    raise ValueError("不是数字：%r" % (value,))
+
+
 def _parse_memory_bytes(value: str) -> int:
     """内存字符串转字节：2G/512M/1024K/2048（无单位=字节）。
     非法值 ValueError，绝不静默按默认算。"""
@@ -93,7 +120,7 @@ def _ssh_fragment(params: dict, env: dict) -> dict:
     else:
         raw_port = env.get("CHV_SSH_PORT") or 2222
     try:
-        ssh_port = int(raw_port)
+        ssh_port = _to_int(raw_port)
     except (TypeError, ValueError):
         raise ValueError("CHV_SSH_PORT 必须是整数")
     if not 1 <= ssh_port <= 65535:
@@ -134,11 +161,11 @@ def _quota_fragment(env: dict) -> dict:
     磁盘/快照数上限不在这里，它们是磁盘行为，见
     _disk_fragment。校验文案与旧代码逐字一致。"""
     try:
-        max_vms = int(env.get("CHV_MAX_VMS") or 4)
+        max_vms = _to_int(env.get("CHV_MAX_VMS") or 4)
     except ValueError:
         raise ValueError("CHV_MAX_VMS 必须是整数")
     try:
-        warm_pool_size = int(env.get("CHV_WARM_POOL_SIZE") or 0)
+        warm_pool_size = _to_int(env.get("CHV_WARM_POOL_SIZE") or 0)
     except ValueError:
         raise ValueError("CHV_WARM_POOL_SIZE 必须是整数")
     return {"max_vms": max_vms, "warm_pool_size": warm_pool_size}
@@ -154,18 +181,18 @@ def _disk_fragment(env: dict) -> dict:
         raise ValueError(
             "CHV_DISK_MODE 只能是 copy 或 reuse：%s" % disk_mode)
     try:
-        disk_gb = float(env.get("CHV_DISK_GB")) \
+        disk_gb = _to_float(env.get("CHV_DISK_GB")) \
             if env.get("CHV_DISK_GB") else 50.0
     except ValueError:
         raise ValueError("CHV_DISK_GB 必须是数字")
     if disk_gb <= 0:
         raise ValueError("CHV_DISK_GB 必须大于 0")
     try:
-        snapshot_max_count = int(env.get("CHV_SNAPSHOT_MAX_COUNT")
+        snapshot_max_count = _to_int(env.get("CHV_SNAPSHOT_MAX_COUNT")
                                      or 10)
-        snapshot_max_total_gb = float(
+        snapshot_max_total_gb = _to_float(
             env.get("CHV_SNAPSHOT_MAX_TOTAL_GB") or 20.0)
-        snapshot_retention_days = float(
+        snapshot_retention_days = _to_float(
             env.get("CHV_SNAPSHOT_RETENTION_DAYS") or 30.0)
     except ValueError:
         raise ValueError("CHV_SNAPSHOT_* 必须是数字")
@@ -192,18 +219,18 @@ def _timeout_fragment(params: dict, env: dict) -> dict:
     超时、客机就绪超时/间隔。ready_interval <= 0 时回落
     5 秒（旧语义，非校验失败）。校验文案逐字一致。"""
     task_timeout_raw = env.get("CHV_TASK_TIMEOUT")
-    task_timeout = float(task_timeout_raw) \
+    task_timeout = _to_float(task_timeout_raw) \
         if task_timeout_raw else None
     try:
-        api_timeout = float(
+        api_timeout = _to_float(
             params.get("api_timeout")
             if params.get("api_timeout") is not None
             else env.get("CHV_API_TIMEOUT") or 30)
-        ready_timeout = float(
+        ready_timeout = _to_float(
             params.get("ready_timeout")
             if params.get("ready_timeout") is not None
             else env.get("CHV_READY_TIMEOUT") or 120)
-        ready_interval = float(
+        ready_interval = _to_float(
             params.get("ready_interval")
             if params.get("ready_interval") is not None
             else env.get("CHV_READY_INTERVAL") or 5)

cloud/chv/disk.py

@@ -203,7 +203,7 @@ def check_snapshot_limits(state_dir: str, vm_name: str, max_count: int,
         raise ChvFailure(
             "snapshot_quota_exceeded",
             "快照数量已达上限 %d（VM %s）" % (max_count, vm_name))
-    total = 0
+    total: float = 0.0
     for entry in kept:
         size = entry.get("size")
         if isinstance(size, (int, float)):

cloud/chv/executor.py

@@ -34,30 +34,35 @@ import shutil
 import subprocess
 import threading
 import time
+from collections.abc import Callable
 
-from cloud.chv.api_client import _unix_socket_api
-from cloud.chv.api_client import normalize_api_result
-from cloud.executor_base import Executor
-from cloud.chv.config import _parse_memory_bytes
-from cloud.chv.config import build_chv_config
-from cloud.chv.disk import check_disk_quota
-from cloud.chv.disk import check_snapshot_limits
-from cloud.chv.disk import delete_task_disk
-from cloud.chv.disk import provision_task_disk
-from cloud.chv.disk import record_snapshot
-from cloud.chv.disk import task_disk_path
+from cloud.chv.api_client import _unix_socket_api, normalize_api_result
+from cloud.chv.config import _parse_memory_bytes, build_chv_config
+from cloud.chv.disk import (
+    check_disk_quota,
+    check_snapshot_limits,
+    delete_task_disk,
+    provision_task_disk,
+    record_snapshot,
+    task_disk_path,
+)
 from cloud.chv.errors import ChvFailure
-from cloud.chv.hardening import ensure_secure_state_dir
-from cloud.chv.hardening import parse_net_entries
-from cloud.chv.hardening import socket_is_live
-from cloud.chv.hardening import validate_egress_proxy
-from cloud.chv.hardening import validate_net_entries
-from cloud.chv.hardening import validate_snapshot_url
+from cloud.chv.hardening import (
+    ensure_secure_state_dir,
+    parse_net_entries,
+    socket_is_live,
+    validate_egress_proxy,
+    validate_net_entries,
+    validate_snapshot_url,
+)
 from cloud.chv.ssh_transport import build_ssh_command as _build_ssh_cmd
 from cloud.chv.ssh_transport import known_hosts_path as _known_hosts_path
-from cloud.chv.ssh_transport import parse_keyscan_output
-from cloud.chv.ssh_transport import split_secret_env
-from cloud.chv.ssh_transport import write_known_hosts
+from cloud.chv.ssh_transport import (
+    parse_keyscan_output,
+    split_secret_env,
+    write_known_hosts,
+)
+from cloud.executor_base import Executor
 
 _LOGGER = logging.getLogger("cloud.cloud_hypervisor")
 
@@ -246,6 +251,57 @@ class CloudHypervisorExecutor(Executor):
     开启嵌套虚拟化的实例，那是用户侧开通决策，不在本轨内。
     """
 
+    # to10：mypy 属性声明（仅注解、不赋值，运行时仍由
+    # _copy_config_fields/_init_runtime 抄写）。没有这组声明，
+    # 动态 setattr 会让 mypy 认为全部配置属性不存在（基线
+    # 115 个报错里近 90 个属此类），类型检查等于没跑。
+    binary: str | None
+    kernel: str | None
+    rootfs: str | None
+    cpus: str
+    memory: str
+    state_dir: str
+    ssh_key: str | None
+    ssh_user: str
+    ssh_port: int
+    guest_host_py: str
+    cmdline: str
+    net: str | None
+    net_json: str | None
+    kvm_path: str
+    cpuinfo_path: str
+    ch_remote: str
+    model: str | None
+    max_vms: int
+    disk_mode: str
+    disk_gb: float
+    egress_proxy: str | None
+    allow_direct_egress: bool
+    task_timeout: float | None
+    snapshot_url: str | None
+    warm_pool_size: int
+    api_timeout: float
+    ready_timeout: float
+    ready_interval: float
+    host_key_mode: str
+    ssh_host: str | None
+    ssh_forward: bool
+    reuse_experiment: bool
+    single_tenant_project: str | None
+    snapshot_max_count: int
+    snapshot_max_total_gb: float
+    snapshot_retention_days: float
+    snapshot_dir: str | None
+    allow_remote_snapshot: bool
+    runner: "Callable[..., object]"
+    launcher: "Callable[..., object]"
+    api_client: "Callable[..., object]"
+    sleeper: "Callable[..., object]"
+    audit_callback: object
+    audit_failure_count: int
+    _vms: dict
+    _guest_env_delivered: dict
+
     def __init__(self, binary: str | None = None,
                  kernel: str | None = None,
                  rootfs: str | None = None,
@@ -253,7 +309,8 @@ class CloudHypervisorExecutor(Executor):
                  cpus: str | int | None = None,
                  memory: str | None = None,
                  state_dir: str | None = None,
-                 runner: object = None, launcher: object = None,
+                 runner: Callable[..., object] | None = None,
+                 launcher: Callable[..., object] | None = None,
                  ssh_key: str | None = None,
                  ssh_user: str | None = None,
                  ssh_port: int | str | None = None,
@@ -265,12 +322,13 @@ class CloudHypervisorExecutor(Executor):
                  cpuinfo_path: str = "/proc/cpuinfo",
                  env: dict | None = None,
                  model: str | None = None, ch_remote: str | None = None,
-                 api_client: object = None,
-                 sleeper: object = None, api_timeout: float | None = None,
+                 api_client: Callable[..., object] | None = None,
+                 sleeper: Callable[..., object] | None = None,
+                 api_timeout: float | None = None,
                  ready_timeout: float | None = None,
                  ready_interval: float | None = None,
                  host_key_mode: str | None = None) -> None:
-        self._env = env if env is not None else os.environ
+        self._env: dict = env if env is not None else os.environ  # type: ignore[assignment]
         # 配置解析已拆到 cloud/chv/config.py（参数优先于环境
         # 变量，默认值与 #216 一致；显式空用户/越界端口的收紧
         # 见 config.py 头注释）。字段名与原属性一一对应，旧
@@ -291,7 +349,15 @@ class CloudHypervisorExecutor(Executor):
         self._copy_config_fields(_cfg)
         self._init_runtime(runner, launcher, api_client, sleeper)
 
-    def _init_runtime(self, runner, launcher, api_client, sleeper) -> None:
+    def _init_runtime(self, runner: Callable[..., object] | None,
+                        launcher: Callable[..., object] | None,
+                        api_client: Callable[..., object] | None,
+                        sleeper: Callable[..., object] | None) -> None:
+        # to10：runner/launcher/api_client/sleeper 均为可调用注入对象；
+        # 形参保持 object 以兼容旧测试的任意 lambda，调用点用
+        # getattr 可调用检查后调用（见 _call_runner 等），mypy
+        # 的 object-not-callable 在 _call_runner 处以 Callable 局部
+        # 变量处理。
         """运行时注入：seed 投递集合、API 客户端、睡眠器、
         runner/launcher 默认值（纯移动）。"""
         # feat-chv-secfix（H2）：本实例已 seed 投递密钥的 VM
@@ -346,7 +412,11 @@ class CloudHypervisorExecutor(Executor):
         幂等：传入的已是 chv- 前缀名时不再二次加前缀（清理
         扫描 socket 文件名时传的就是 chv- 名，二次加前缀会
         把 chv-dead 算成 chv-chv-dead、永远清不掉）。"""
-        raw = task_or_name.get("id") if isinstance(task_or_name, dict) \
+        # to10：id 按契约是 str；cast 只给 mypy 用，运行时原样
+        # 传给 re.sub（id 缺失时仍按旧行为 TypeError，不静默
+        # 编成 "None"）。
+        from typing import cast as _cast
+        raw = _cast(str, task_or_name.get("id")) if isinstance(task_or_name, dict) \
             else str(task_or_name)
         safe = re.sub(r"[^A-Za-z0-9_.-]", "-", raw)
         if safe.startswith("chv-"):
@@ -589,7 +659,7 @@ class CloudHypervisorExecutor(Executor):
         - egress_not_configured：CHV_EGRESS_PROXY 未设且未显式
           允许直连（默认 fail-closed，VM 出口必须过白名单代理）
         """
-        missing = []  # (kind, 文本) 列表，全部收集完再一次抛
+        missing: list = []  # (kind, 文本) 列表，全部收集完再一次抛
         self._preflight_host_checks(missing)
         self._preflight_file_checks(missing)
         self._preflight_net_checks(missing)
@@ -637,6 +707,34 @@ class CloudHypervisorExecutor(Executor):
                 self, "audit_failure_count", 0) + 1
             _LOGGER.error("chv_audit_failed event=%s kind=%s error=%s",
                           event, kind, exc)
+            # to10（ADR-14）：回调失败的事件再落盘一份——
+            # 宿主日志可能轮转、计数只剩数字，落盘文件是
+            # 唯一能事后找回“哪次事件丢了”的取证。落盘
+            # 本身 best-effort，失败只记日志，绝不炸任务。
+            self._spill_audit(event, task, detail, kind)
+
+    def _spill_audit(self, event, task, detail, kind) -> None:
+        """审计失败事件落盘（to10，见 ADR-14 取舍）：
+        state_dir/chv-audit-spill.jsonl，每行一 JSON
+        {ts, event, kind, detail, task_id}；文件超 1MB 时
+        先轮转成 .old 再写。detail 沿用 _emit 契约，绝不
+        含密钥值。落盘不是 DB 替代：timeline 查询看不到它，
+        需宿主人工查阅；轮转只留最新两代，旧事件会丢。"""
+        try:
+            path = os.path.join(self.state_dir,
+                                "chv-audit-spill.jsonl")
+            if os.path.exists(path) \
+                    and os.path.getsize(path) > 1024 * 1024:
+                os.replace(path, path + ".old")
+            task_id = task.get("id") if isinstance(task, dict) \
+                else str(task)
+            line = json.dumps({"ts": time.time(), "event": event,
+                               "kind": kind, "detail": detail,
+                               "task_id": task_id})
+            with open(path, "a") as fh:
+                fh.write(line + "\n")
+        except Exception as exc:
+            _LOGGER.error("chv_audit_spill_failed error=%s", exc)
 
     # -- 命令构造（纯函数，不做文件校验） -------------------------------
     def _build_vm_command(self, task):
@@ -671,7 +769,7 @@ class CloudHypervisorExecutor(Executor):
         return _known_hosts_path(self.state_dir,
                                  self.vm_name(task_or_name))
 
-    def _net_guest_ip(self):
+    def _net_guest_ip(self) -> str | None:
         """VmConfig net 首个带 ip 的条目（静态 tap 客机 IP）。"""
         if not self.net_json:
             return None
@@ -691,8 +789,9 @@ class CloudHypervisorExecutor(Executor):
         显式 CHV_SSH_HOST > net 静态客机 IP > 显式转发宣称下
         的回环；三者皆无时报 ChvFailure（ssh_target_undeclared），
         绝不无条件假设 127.0.0.1:2222 能通。"""
-        if getattr(self, "ssh_host", None):
-            return self.ssh_host
+        _ssh_host = self.ssh_host
+        if _ssh_host:
+            return _ssh_host
         guest_ip = self._net_guest_ip()
         if guest_ip:
             return guest_ip
@@ -704,6 +803,30 @@ class CloudHypervisorExecutor(Executor):
             "里给 net 条目配 ip（静态 tap 客机 IP）、或显式设 "
             "CHV_SSH_FORWARD=1 宣称宿主 NAT 已转发回环端口")
 
+    def _read_keypair_texts(self, paths: dict) -> tuple:
+        """读 key 对文本（to10 提取，provision_host_key 降行用）。"""
+        with open(paths["public"], "r") as fh:
+            public_text = fh.read()
+        with open(paths["private"], "r") as fh:
+            private_text = fh.read()
+        return public_text, private_text
+
+    def _write_provisioned_known_hosts(self, paths: dict,
+                                       public_text: str) -> None:
+        """写预置 known_hosts（to10 提取）。主机部分跟 SSH
+        目标走（客机 IP 时不再写死回环，否则钉死校验永远
+        对不上）；解析失败时回环仅作钉死写入，不放宽校验。"""
+        from cloud.chv.hostkeys import known_hosts_line
+        from cloud.chv.ssh_transport import write_known_hosts
+        try:
+            ssh_host = self.resolve_ssh_host()
+        except ChvFailure:
+            ssh_host = "127.0.0.1"
+        write_known_hosts(
+            paths["known_hosts"],
+            [known_hosts_line(self.ssh_port, public_text,
+                              host=ssh_host)])
+
     def provision_host_key(self, task: dict, secret_env: dict | None = None) -> dict:
         """按 VM 预置 host key（补缺口轨强方案，见 hostkeys.py）：
         启动前为该 VM 生成一次性 ed25519 host key 对，公钥
@@ -718,10 +841,13 @@ class CloudHypervisorExecutor(Executor):
         脏标记存在时直接拒绝（清理失败即拒起，不再复用
         旧 key 对）。成功后审计 host_key_generated（只含
         VM 名与密钥名，不含任何 key 值）。"""
+        # to10：known_hosts 写入已抽到 _write_provisioned_known_hosts，
+        # 此处只留生成与 seed 写入的 import（删后不再有未用 import）。
         from cloud.chv.hostkeys import (
-            dirty_marker_path, generate_host_keypair,
-            known_hosts_line, write_seed)
-        from cloud.chv.ssh_transport import write_known_hosts
+            dirty_marker_path,
+            generate_host_keypair,
+            write_seed,
+        )
         vm = self.vm_name(task)
         if os.path.exists(dirty_marker_path(self.state_dir, vm)):
             raise ChvFailure(
@@ -732,20 +858,8 @@ class CloudHypervisorExecutor(Executor):
         paths = generate_host_keypair(
             self.state_dir, vm,
             runner=lambda cmd: self._call_runner(cmd))
-        with open(paths["public"], "r") as fh:
-            public_text = fh.read()
-        with open(paths["private"], "r") as fh:
-            private_text = fh.read()
-        # feat-chv-fix：known_hosts 行的主机部分跟 SSH 目标走
-        # （客机 IP 时不再写死回环，否则钉死校验永远对不上）。
-        try:
-            ssh_host = self.resolve_ssh_host()
-        except ChvFailure:
-            ssh_host = "127.0.0.1"
-        write_known_hosts(
-            paths["known_hosts"],
-            [known_hosts_line(self.ssh_port, public_text,
-                              host=ssh_host)])
+        public_text, private_text = self._read_keypair_texts(paths)
+        self._write_provisioned_known_hosts(paths, public_text)
         seed_dir = write_seed(paths["seed_dir"], vm,
                               private_text, public_text,
                               secret_env=secret_env)
@@ -819,7 +933,7 @@ class CloudHypervisorExecutor(Executor):
             from cloud.chv.hostkeys import GUEST_ENV_PATH
             delivered = self._guest_env_delivered.get(
                 self.vm_name(task), set())
-            missing = [name for name in secrets if name not in delivered]
+            missing: list = [name for name in secrets if name not in delivered]
             if missing:
                 raise ChvFailure(
                     "secret_env_not_delivered",
@@ -835,6 +949,27 @@ class CloudHypervisorExecutor(Executor):
             guest_env_file=guest_env_file)
 
     # -- API 模式：VmConfig / API 调用 / 就绪轮询 -----------------------
+    def _vm_config_disks(self, task_disk: str | None,
+                         seed_disk: str | None) -> list:
+        """VmConfig 磁盘列表（to10 提取，含 L2 白名单校验）。
+        任务盘 + 可选 seed 只读盘（CIDATA ISO，cloud-init
+        NoCloud 数据源）；显式给的盘若不是基础镜像本身，
+        须在 state_dir 内，否则 VmConfig 不能挂进宿主任意文件。"""
+        # 旧文案逐字保留：任务盘“任务磁盘须在…”，seed 盘
+        # “seed 磁盘须在…”（label 本身含“磁盘”与空格）。
+        for path, label in ((task_disk, "任务磁盘"),
+                            (seed_disk, "seed 磁盘")):
+            if path and path != self.rootfs:
+                if not os.path.realpath(path).startswith(
+                        os.path.realpath(self.state_dir) + os.sep):
+                    raise ChvFailure(
+                        "disk_path_not_allowed",
+                        "%s须在 state_dir 内：%s" % (label, path))
+        disks: list = [{"path": task_disk or self.rootfs}]
+        if seed_disk:
+            disks.append({"path": seed_disk, "readonly": True})
+        return disks
+
     def build_vm_config(self, task_disk: str | None = None, seed_disk: str | None = None) -> dict:
         """API 模式的 VmConfig（vm.create 请求体，纯函数）：
         cpus{boot_vcpus,max_vcpus}、memory{size: 字节}、
@@ -847,36 +982,14 @@ class CloudHypervisorExecutor(Executor):
             cpus = int(self.cpus)
         except ValueError:
             raise ValueError("CHV_CPU 必须是整数：%r" % (self.cpus,))
-        # feat-chv-secfix（L2）：磁盘路径白名单。显式给的
-        # task_disk 若不是基础镜像本身（reuse 模式的合法
-        # 情形），须在 state_dir 内；seed 盘须在 state_dir
-        # 内——VmConfig 再也不能挂进宿主任意文件。
-        if task_disk and task_disk != self.rootfs:
-            if not os.path.realpath(task_disk).startswith(
-                    os.path.realpath(self.state_dir) + os.sep):
-                raise ChvFailure(
-                    "disk_path_not_allowed",
-                    "任务磁盘须在 state_dir 内：%s" % task_disk)
-        if seed_disk:
-            if not os.path.realpath(seed_disk).startswith(
-                    os.path.realpath(self.state_dir) + os.sep):
-                raise ChvFailure(
-                    "disk_path_not_allowed",
-                    "seed 磁盘须在 state_dir 内：%s" % seed_disk)
         config = {
             "cpus": {"boot_vcpus": cpus, "max_vcpus": cpus},
             "memory": {"size": _parse_memory_bytes(self.memory)},
             "kernel": {"path": self.kernel},
             "cmdline": {"args": self.cmdline},
-            "disks": [{"path": task_disk or self.rootfs}],
+            "disks": self._vm_config_disks(task_disk, seed_disk),
             "rng": {"src": "/dev/urandom"},
         }
-        # feat-chv-fix（P0-1）：seed 磁盘是 VmConfig 第二块
-        # 只读盘（CIDATA 卷标 ISO，客机 cloud-init NoCloud
-        # 数据源），不是宿主目录——目录本身从不进 VmConfig。
-        if seed_disk:
-            config["disks"].append({"path": seed_disk,
-                                    "readonly": True})
         if self.net_json:
             try:
                 net = json.loads(self.net_json)
@@ -1230,7 +1343,7 @@ class CloudHypervisorExecutor(Executor):
             raise
         return secrets, net_entries
 
-    def _provision_seed_disk(self, task: dict, name: str, secrets) -> str:
+    def _provision_seed_disk(self, task: dict, name: str, secrets) -> str | None:
         """provisioned 模式的 seed 盘供给：生成→制盘→挂盘，
         任一步失败即抛（调用方 stop_vm 清理），纯移动。"""
         seed_disk = None
@@ -1248,8 +1361,10 @@ class CloudHypervisorExecutor(Executor):
             # 失败即 fail-fast（VM 尚未启动，此时拒绝最
             # 安全，except 里 stop_vm 会清掉 seed）。
             from cloud.chv.hostkeys import (
-                build_seed_disk, delete_host_private_key,
-                seed_disk_path)
+                build_seed_disk,
+                delete_host_private_key,
+                seed_disk_path,
+            )
             provisioned = self.provision_host_key(
                 task, secret_env=secrets or None)
             seed_disk = seed_disk_path(self.state_dir, name)
@@ -1498,8 +1613,8 @@ class CloudHypervisorExecutor(Executor):
         self.pause_vm(task_or_name)
         self.snapshot_vm(task_or_name, snapshot_url)
         self.stop_vm(task_or_name)
-        task = task_or_name if isinstance(task_or_name, dict) \
-            else {"id": task_or_name}
+        # to10：删死赋值（task 建出后未用，F841；返回值直接
+        # 用 task_or_name 算 VM 名，行为不变）。
         return {"vm": self.vm_name(task_or_name),
                 "state": "hibernated", "snapshot": snapshot_url}
 
@@ -1616,7 +1731,8 @@ class CloudHypervisorExecutor(Executor):
         非 live（无 api-socket 文件且无登记活进程）即删盘
         并审计；删失败审计 vm_disk_delete_failed 并计入
         failed。返回 {deleted, failed}。"""
-        deleted, failed = [], []
+        deleted: list = []
+        failed: list = []
         try:
             entries = os.listdir(self.state_dir)
         except Exception:
@@ -1693,7 +1809,7 @@ class CloudHypervisorExecutor(Executor):
         """崩溃残留扫描（H5）：私钥一律删、非 live VM 的 seed
         同理删并审计；返回已清理 VM 名。worker 启动与
         cleanup_stale_vms 时调它，不依赖 socket 是否存在。"""
-        cleaned = []
+        cleaned: list = []
         try:
             entries = os.listdir(self.state_dir)
         except Exception:
@@ -1814,8 +1930,7 @@ class CloudHypervisorExecutor(Executor):
             extra_env=extra_env)
         result = self._call_runner(ssh_cmd, timeout=self.task_timeout)
         # 方法内 import：见模块头注释的循环导入说明。
-        from cloud.sandbox import _parse_host_result
-        from cloud.sandbox import SimpleNamespaceShim
+        from cloud.sandbox import SimpleNamespaceShim, _parse_host_result
         parsed = _parse_host_result(task["id"],
                                     SimpleNamespaceShim(result))
         parsed["executor"] = "cloud-hypervisor"

cloud/chv/experimental_pool.py

@@ -4,6 +4,7 @@
 cloud/chv/pool.py 移到本文件，cloud/chv/__init__ 与
 cloud/sandbox.py 不再 re-export 它，生产代码 import 本
 模块即违规（见 docs/chv-architecture.md ADR-12 的禁
+
 import 清单与测试钉住）。实验用法只走
 `from cloud.chv.experimental_pool import WarmPool`。
 生产残留清理已彻底分文件：见 cloud/chv/orphans.py 的
@@ -53,11 +54,14 @@ Registry（本轨新增）：
   仍可用，重启后孤儿改由 socket 扫描兜底）。
 """
 
+from typing import TYPE_CHECKING
+
+if TYPE_CHECKING:
+    from cloud.chv.executor import CloudHypervisorExecutor
+
 import os
 
-from cloud.chv.orphans import _REGISTRY_FILENAME
-from cloud.chv.orphans import _read_registry
-from cloud.chv.orphans import _write_registry
+from cloud.chv.orphans import _REGISTRY_FILENAME, _read_registry, _write_registry
 
 
 class WarmPool:
@@ -81,7 +85,7 @@ class WarmPool:
 
     wired_to_dispatch = False
 
-    def __init__(self, executor: object, size: int | None = None,
+    def __init__(self, executor: "CloudHypervisorExecutor", size: int | None = None,
                  snapshot_url: str | None = None,
                  registry_path: str | None = None) -> None:
         self.executor = executor
@@ -90,7 +94,7 @@ class WarmPool:
         self.snapshot_url = snapshot_url \
             if snapshot_url is not None \
             else getattr(executor, "snapshot_url", None)
-        self._entries = {}  # 合成名 -> {"state", "vm", "task", ...}
+        self._entries: dict = {}  # 合成名 -> {"state", "vm", "task", ...}
         self.registry_path = registry_path
         if self.registry_path is None:
             state_dir = getattr(executor, "state_dir", None)

cloud/chv/hardening.py

@@ -20,7 +20,7 @@ from cloud.chv.errors import ChvFailure
 _NET_FIELDS = frozenset({"tap", "mac", "ip", "mask"})
 
 
-def ensure_secure_state_dir(state_dir: str) -> None:
+def ensure_secure_state_dir(state_dir: str) -> str:
     """建 state_dir 并保证 0700（H6）：目录不存在即按 0700
     建；已存在但组/其它位可访时 chmod 0700；失败即
     ChvFailure（state_dir_insecure），绝不带着 /tmp 式
@@ -125,7 +125,7 @@ def _normalize_net_entry(entry: dict) -> dict:
 
 def _check_net_duplicates(normalized: list) -> None:
     """本次条目内 tap/mac/ip 重复即 net_config_invalid。"""
-    seen = {"tap": set(), "mac": set(), "ip": set()}
+    seen: dict[str, set[str]] = {"tap": set(), "mac": set(), "ip": set()}
     for entry in normalized:
         for kind in ("tap", "mac", "ip"):
             value = entry.get(kind)
@@ -152,7 +152,7 @@ def _check_net_conflicts(normalized: list, existing_entries: list) -> None:
                         % (kind, value, other.get("vm")))
 
 
-def validate_egress_proxy(egress_proxy: str) -> None:
+def validate_egress_proxy(egress_proxy: str) -> str | None:
     """egress 代理地址校验（H1 代码门的一部分）：须为
     http/https URL 且带主机名；否则 net_config_invalid…
     实际 kind 用 config_invalid（preflight 的配置类失败）。

cloud/chv/hostkeys.py

@@ -32,6 +32,7 @@
 
 import os
 import shlex
+from collections.abc import Callable
 
 # seed 投递的客内密钥环境文件路径（feat-chv-secfix，H2）：
 # 只在 provisioned 模式的 seed user-data 里写出，0600 root，
@@ -88,7 +89,8 @@ def seed_disk_path(state_dir: str, vm_name: str) -> str:
     return os.path.join(state_dir, vm_name, "seed.iso")
 
 
-def build_seed_disk(seed_dir: str, seed_disk: str, runner: object = None) -> str:
+def build_seed_disk(seed_dir: str, seed_disk: str,
+                      runner: Callable[[list[str]], object] | None = None) -> str:
     """把 seed 目录做成 CIDATA 卷标 ISO（feat-chv-fix，P0-1 的
     注入载体）：genisoimage -volid CIDATA -joliet -rock。
 
@@ -206,7 +208,7 @@ def write_seed(seed_dir: str, vm_name: str, private_key_text: str,
 
 
 def generate_host_keypair(state_dir: str, vm_name: str,
-                          runner: object = None,
+                          runner: Callable[[list[str]], object] | None = None,
                           keygen: str = "ssh-keygen") -> dict:
     """为该 VM 生成（或复用本 VM 已有的）host key 对。
 

cloud/chv/ssh_transport.py

@@ -52,7 +52,7 @@ import shlex
 _CHV_SECRET_ENV_NAMES = frozenset({"SUB2API_API_KEY"})
 
 
-def split_secret_env(extra_env: dict) -> tuple:
+def split_secret_env(extra_env: dict | None) -> tuple[dict, dict]:
     """把 extra_env 拆成（密钥子集，非密钥子集）。"""
     secrets, plain = {}, {}
     for key, value in dict(extra_env or {}).items():

cloud/chv/worker_adapter.py

@@ -0,0 +1,196 @@
+"""CHV worker 适配模块（to10 轨，见 ADR-13）。
+
+worker.py 里散落的 CHV 强相关接线抽到这里，worker 只留
+薄包装（方法名、签名、调用点不变，旧测试继续走 worker
+方法）。本模块只依赖标准库 + cloud.chv 叶子模块 +
+cloud.logging_config，不 import cloud.worker，绝无循环。
+
+抽入本模块的（行为与错误文案逐字搬运）：
+- call_goal_resume_breakpoint：通用断点调用（原 worker
+  顶层函数 _call_goal_resume_breakpoint 的本体）。
+- make_chv_audit_callback：VM 生命周期事件进审计的回调
+  （原 Worker.__init__ 里的闭包本体）。
+- reconcile_warm_pool：生产残留清理 facade 调用 + 审计
+  （原 Worker._reconcile_warm_pool 的本体）。
+- cancel_watchdog_loop / quota_watchdog_loop：同步路径
+  两条看门狗循环（原 Worker._chv_*_watchdog 的本体，
+  self 依赖全部改成回调参数）。
+- watchdog_vm_name：看门狗启动时的 VM 名派生（原
+  _run_attempt 里的 try/except 块）。
+
+明确不抽的（见 ADR-13 诚实清单，worker 通用流程）：
+cancel() 里的 cancel_vm 分支、cleanup_stale_containers
+的 CHV 分支、网关守卫、_executor_name 的 CHV 分支、
+_run_attempt 的看门狗线程启动、VM 死亡写回——它们都
+嵌在 Docker/Local 共用的通用流程里，硬抽只会把通用
+流程撕成两半，行为不变的收益为零。
+"""
+
+import inspect
+import threading
+from collections.abc import Callable
+
+from cloud.chv.executor import CloudHypervisorExecutor
+from cloud.logging_config import log_event
+
+
+def is_chv_executor(executor: object) -> bool:
+    """是否为 CHV 执行器（worker 各处 isinstance 的同款判断）。"""
+    return isinstance(executor, CloudHypervisorExecutor)
+
+
+def call_goal_resume_breakpoint(executor: object, task: dict,
+                                model_provider: str | None = None,
+                                extra_env: dict | None = None) -> object:
+    """通用断点调用：执行器提供 goal_resume_breakpoint_task
+    时调用它。
+
+    Local 仍走原路径（调用方直接传 model_provider，不经过
+    这里，以免改生产语义）；这里只用于非 Local 执行器：
+    签名接受 model_provider 时传它（CHV/Docker 均接受），
+    否则只传 task（旧假执行器单参）。feat-chv-secfix（H2）：
+    CHV 的 gateway_env 不再经 SSH env 前缀注入（密钥值进
+    argv 的旧路径已废除），改走 provisioned seed 盘客内文件
+    投递；CHV 没有 Local 那样的进程 env 通道，seed 文件是
+    唯一通道，keyscan 模式下密钥投递 fail-closed。"""
+    method = getattr(executor, "goal_resume_breakpoint_task")
+    try:
+        params = inspect.signature(method).parameters
+    except (TypeError, ValueError):
+        return method(task)
+    kwargs: dict = {}
+    if "model_provider" in params:
+        kwargs["model_provider"] = model_provider
+    if "extra_env" in params and extra_env is not None:
+        kwargs["extra_env"] = extra_env
+    return method(task, **kwargs)
+
+
+def make_chv_audit_callback(audit_fn: Callable) -> Callable:
+    """VM 生命周期事件进审计的回调（原 __init__ 闭包本体）。
+
+    audit_fn 即 Worker._audit（best-effort，失败不影响任务）；
+    时间线展示 VM 事件时读审计表即可，不另起一套 VM 事件表；
+    成本/配额仍走 worker 现有 quota 语义，本回调绝不记账。"""
+
+    def _chv_audit(event, task, detail, kind=None):
+        try:
+            project_id = task.get("project_id") \
+                if isinstance(task, dict) else None
+            audit_fn(project_id, "chv_vm_" + event, detail or "")
+        except Exception:
+            pass
+
+    return _chv_audit
+
+
+def reconcile_warm_pool(executor: object, audit_fn: Callable,
+                          when: str) -> list:
+    """显式调生产残留清理 facade，返回已清理 VM 名。
+
+    仅 CHV worker 有效（其它执行器返回 []）。实现是
+    cloud.chv.orphans.reconcile_orphans_for_executor()：
+    直接读 registry 文件做清理，不构造 WarmPool、不碰
+    实验接口。调用失败不炸主流程，但进审计（失败本身
+    也审计，不静默丢弃）。orphan 条目绝不发给任务，
+    reconcile 只做清理。"""
+    if not isinstance(executor, CloudHypervisorExecutor):
+        return []
+    try:
+        from cloud.chv.orphans import reconcile_orphans_for_executor as _reconcile
+        cleaned = _reconcile(executor) or []
+    except Exception as exc:
+        try:
+            audit_fn(None, "chv_warm_pool_reconcile_failed",
+                     "when=%s error=%s" % (when, exc))
+        except Exception:
+            pass
+        return []
+    if cleaned:
+        try:
+            audit_fn(None, "chv_warm_pool_reconcile",
+                     "when=%s cleaned=%s" % (when, ",".join(cleaned)))
+        except Exception:
+            pass
+    return cleaned
+
+
+def cancel_watchdog_loop(task_id: str, vm_name: str | None,
+                         stop_event: threading.Event,
+                         cancel_requested: set,
+                         get_task: Callable,
+                         cancel_vm: Callable | None,
+                         logger: object) -> None:
+    """CHV 同步路径的取消看门狗（feat-chv-fix，P1-2，Docker
+    取消看门狗同款模式）：同步 SSH 阻塞时 worker 的 cancel()
+    只能改库、清 _running 项，阻塞中的 run 本身不会醒；
+    本线程每 1 秒查库/取消标志，命中时调 cancel_vm 真关
+    VM，然后退出。查库失败时当没取消，不误杀。"""
+    while not stop_event.wait(1.0):
+        try:
+            if task_id in cancel_requested:
+                cancelled = True
+            else:
+                db_task = get_task(task_id)
+                cancelled = (db_task is not None and
+                             db_task.get("status") == "interrupted")
+        except Exception:
+            cancelled = False
+        if not cancelled:
+            continue
+        try:
+            if cancel_vm is not None and vm_name:
+                cancel_vm(vm_name)
+                log_event(logger, "worker_chv_killed",
+                          task_id=task_id,
+                          message="cancel watchdog killed VM %s "
+                                  "(task interrupted/cancelled)"
+                                  % vm_name)
+        except Exception:
+            pass
+        return
+
+
+def quota_watchdog_loop(task_id: str, vm_name: str | None,
+                        stop_event: threading.Event,
+                        quota_check: Callable | None,
+                        mark_quota_hit: Callable,
+                        cancel_vm: Callable | None,
+                        logger: object,
+                        interval: float = 30.0) -> None:
+    """CHV 同步路径的配额看门狗（feat-chv-fix，P1-2，Docker
+    配额看门狗同款）：命中时记 _quota_hit_tasks 并调
+    cancel_vm 真关 VM；_run_attempt 在同步返回后把结果
+    改写成 quota_exceeded，走统一配额中断收尾。"""
+    while not stop_event.wait(interval):
+        try:
+            over = bool(quota_check()) if quota_check else False
+        except Exception:
+            over = False
+        if not over:
+            continue
+        mark_quota_hit(task_id)
+        try:
+            if cancel_vm is not None and vm_name:
+                cancel_vm(vm_name)
+                log_event(logger, "worker_chv_killed",
+                          task_id=task_id,
+                          message="quota watchdog killed VM %s "
+                                  "(quota exceeded)" % vm_name)
+        except Exception:
+            pass
+        return
+
+
+def watchdog_vm_name(executor: object, task: dict) -> str | None:
+    """看门狗启动时的 VM 名派生（原 _run_attempt 块）：
+    executor.vm_name(task) 抛错时回 None（不建看门狗），
+    绝不炸主派发流程。executor 无 vm_name 时等同抛错
+    （原代码里 AttributeError 同样被 except 吞掉回 None）。"""
+    get_vm_name = getattr(executor, "vm_name", None)
+    if not callable(get_vm_name):
+        return None
+    try:
+        return get_vm_name(task)
+    except Exception:
+        return None

cloud/console-react/src/api/chv.test.ts

@@ -1,5 +1,5 @@
 import { describe, expect, it } from "vitest";
-import { chvAttachmentBlocked, chvAvailability, chvQueueHint, chvVmBadge, chvVmStatusText, countChvWorkers, isChvExecutor, isWorkerAlive } from "./chv";
+import { chvAttachmentBlocked, chvAvailability, chvAvailabilityText, chvQueueHint, chvVmBadge, chvVmDisplay, chvVmStatusText, countChvWorkers, isChvExecutor, isWorkerAlive } from "./chv";
 
 // 纯逻辑测试：只测 chv.ts，不渲染组件、不发请求、不读 localStorage。
 // alive 规则与 WorkersSection 现有口径一致：alive 字段优先，
@@ -103,3 +103,53 @@ describe("chvQueueHint", () => {
     expect(chvQueueHint("cloud-hypervisor", "queued", { state: "known" as const, online: 1, total: 1 })).toBe("");
   });
 });
+
+describe("chvVmDisplay（to10 四态）", () => {
+  it("字段 present=true → dead", () => {
+    const d = chvVmDisplay({ executor: "cloud-hypervisor", chv_vm_dead: true });
+    expect(d.state).toBe("dead");
+    expect(d.text).toContain("VM 中途死亡");
+  });
+  it("字段 absent → not-reported，不猜 live", () => {
+    const d = chvVmDisplay({ executor: "cloud-hypervisor" });
+    expect(d.state).toBe("not-reported");
+    expect(d.text).toContain("不代表 VM 活着");
+  });
+  it("任务未加载 → unknown", () => {
+    const d = chvVmDisplay(null);
+    expect(d.state).toBe("unknown");
+    expect(d.text).toContain("无法判断");
+  });
+  it("非 CHV → not-applicable，text 为空", () => {
+    const d = chvVmDisplay({ executor: "docker", chv_vm_dead: true });
+    expect(d.state).toBe("not-applicable");
+    expect(d.text).toBe("");
+  });
+  it("旧入口仍是 display 的 text（unknown/not-applicable 回空）", () => {
+    expect(chvVmStatusText({ executor: "cloud-hypervisor", chv_vm_dead: true })).toContain("VM 中途死亡");
+    expect(chvVmStatusText(null)).toBe("");
+    expect(chvVmStatusText({ executor: "docker" })).toBe("");
+  });
+});
+
+describe("chvAvailabilityText（to10 四处统一文案）", () => {
+  it("known 零在线：不拦提交、后端是最终权威", () => {
+    const text = chvAvailabilityText({ state: "known", online: 0, total: 2 });
+    expect(text).toContain("在线 0 / 共 2");
+    expect(text).toContain("不拦提交");
+    expect(text).toContain("最终权威");
+  });
+  it("known 非零：只有在线数，无排队警告", () => {
+    const text = chvAvailabilityText({ state: "known", online: 1, total: 1 });
+    expect(text).toContain("在线 1 / 共 1");
+    expect(text).not.toContain("排队");
+  });
+  it("未知三原因各有不同文案，绝不写成 0", () => {
+    expect(chvAvailabilityText({ state: "unknown", reason: "aggregate-only" })).toContain("仅全局管理员可见");
+    expect(chvAvailabilityText({ state: "unknown", reason: "load-failed" })).toContain("加载失败");
+    expect(chvAvailabilityText({ state: "unknown", reason: "not-loaded" })).toContain("尚未加载");
+    for (const reason of ["aggregate-only", "load-failed", "not-loaded"] as const) {
+      expect(chvAvailabilityText({ state: "unknown", reason })).not.toContain("在线 0");
+    }
+  });
+});

cloud/console-react/src/api/chv.ts

@@ -54,27 +54,85 @@ export function chvAttachmentBlocked(
   return isChvExecutor(executor) && hasAttachments;
 }
 
-// VM 只读状态文案：输入只有后端已返回的两个字段，输出
-// 三种情形之一，绝不编造第四种：
-// - chv_vm_dead 为 true → 已报告死亡（来源：worker 终局
-//   写回的 interrupted_reason，见 server _chv_vm_dead_from_row）；
-// - CHV 任务但无该字段 → 未报告死亡，且明写“后端无 live
-//   状态，不代表 VM 活着”（server 没有 VM 登记表）；
-// - 非 CHV 任务 → 空串（不显示 VM 行）。
-export function chvVmStatusText(task: {
+// VM 只读状态：四种情形各有明确文案，绝不编造第五种，
+// 绝不猜 live（to10 精确化，见 ADR-15）：
+// - dead：CHV 任务且 chv_vm_dead 为 true（字段已 present；
+//   来源：worker 终局写回的 interrupted_reason，见 server
+//   _chv_vm_dead_from_row）；
+// - not-reported：CHV 任务但字段 absent（后端只在死亡时
+//   才返回该字段；absent 只表示“未报告”，且明写“后端无
+//   live 状态字段，不代表 VM 活着”，server 没有 VM 登记表）；
+// - unknown：任务详情本身未加载（task 为 null），无法判断；
+// - not-applicable：非 CHV 任务，不显示 VM 行（text 为空）。
+export type ChvVmDisplay =
+  | { state: "dead"; text: string }
+  | { state: "not-reported"; text: string }
+  | { state: "unknown"; text: string }
+  | { state: "not-applicable"; text: string };
+
+export function chvVmDisplay(task: {
   executor?: string | null;
   chv_vm_dead?: boolean;
-}): string {
+} | null | undefined): ChvVmDisplay {
+  if (task === null || task === undefined) {
+    return {
+      state: "unknown",
+      text: "任务详情未加载，无法判断 VM 状态（后端无 live 状态字段，详情加载后才显示）",
+    };
+  }
   // 死亡文案同样先过执行器门：后端只对 CHV 任务派生该字段，
   // 万一某天非 CHV 行误带该字段，前端也不把 docker 任务
   // 写成“VM 死亡”。
   if (task.chv_vm_dead && isChvExecutor(task.executor)) {
-    return "VM 中途死亡，任务未完成、断点可续跑（后端只读字段 chv_vm_dead）";
+    return {
+      state: "dead",
+      text: "VM 中途死亡，任务未完成、断点可续跑（后端只读字段 chv_vm_dead）",
+    };
   }
   if (isChvExecutor(task.executor)) {
-    return "未报告 VM 死亡（后端无 live 状态字段，不代表 VM 活着）";
+    return {
+      state: "not-reported",
+      text: "未报告 VM 死亡（后端无 live 状态字段，不代表 VM 活着）",
+    };
   }
-  return "";
+  return { state: "not-applicable", text: "" };
+}
+
+// 旧入口（保留给已测调用点）：即 chvVmDisplay 的 text，
+// not-applicable 与 unknown 均回空串（调用点只在已加载的
+// CHV 行上用它，unknown 分支由详情页的新入口处理）。
+export function chvVmStatusText(task: {
+  executor?: string | null;
+  chv_vm_dead?: boolean;
+} | null | undefined): string {
+  const display = chvVmDisplay(task);
+  return display.state === "not-applicable" ||
+    display.state === "unknown"
+    ? ""
+    : display.text;
+}
+
+// CHV 可用性统一文案（to10）：新建任务、Workers、环境
+// 三处此前各写各的，Workers 的未知分支甚至恒写“仅全局
+// 管理员可见”（加载失败/未加载时也是这句，是文案 bug）。
+// 四处统一走本函数：known 零在线时不拦提交、后端是最终
+// 权威；未知时按 reason 分三句，绝不把未知写成 0。
+export function chvAvailabilityText(
+  availability: ChvAvailability,
+): string {
+  if (availability.state === "known") {
+    const base = `CHV worker 在线 ${availability.online} / 共 ${availability.total}（来自 /workers）`;
+    return availability.online === 0
+      ? `${base}：当前无 CHV worker 在线，任务将一直排队，请先确认宿主 worker 已起；本提示不拦提交，worker 随后上线可认领，后端是最终权威。`
+      : base;
+  }
+  if (availability.reason === "aggregate-only") {
+    return "CHV worker 在线数未知：完整 worker 清单仅全局管理员可见，非管理员只能看到聚合数，无法按执行器分项。";
+  }
+  if (availability.reason === "load-failed") {
+    return "CHV worker 在线数未知：/workers 加载失败，请到 Workers 区刷新后重试。";
+  }
+  return "CHV worker 在线数未知：/workers 尚未加载，请到 Workers 区刷新。";
 }
 
 // 列表行徽标：只有已报告死亡时才出现短徽标；未报告时

cloud/console-react/src/sections/DispatchSection.tsx

@@ -2,7 +2,7 @@ import { useRef, useState } from "react";
 import { useConsole } from "../context";
 import { Card, Bar } from "../components/ui";
 import { gatherAttachments, shortId } from "../api/client";
-import { chvAttachmentBlocked, chvAvailability, isChvExecutor } from "../api/chv";
+import { chvAttachmentBlocked, chvAvailability, chvAvailabilityText, isChvExecutor } from "../api/chv";
 import { EFFORTS } from "../api/types";
 
 export default function DispatchSection() {
@@ -125,14 +125,8 @@ export default function DispatchSection() {
       </Bar>
       {isChv ? <div className="muted">实验执行器，默认关闭：需后端已开启 CHV worker 且宿主有 KVM，否则任务无人认领、一直排队；带附件时建任务即被后端拒绝（错误文案原样显示在下方）。前端只传 executor 值，不绕过后端白名单；默认仍是 docker。</div> : null}
       {isChv ? (
-        <div className="muted">
-          {chvAvail.state === "known"
-            ? <>CHV worker 在线 {chvAvail.online} / 共 {chvAvail.total}（来自 /workers）{chvAvail.online === 0 ? <b>：当前无 CHV worker 在线，任务将一直排队，请先确认宿主 worker 已起；本提示不拦提交，worker 随后上线可认领，后端是最终权威。</b> : null}</>
-            : chvAvail.reason === "aggregate-only"
-              ? "CHV worker 在线数未知：完整 worker 清单仅全局管理员可见，非管理员只能看到聚合数，无法按执行器分项。"
-              : chvAvail.reason === "load-failed"
-                ? "CHV worker 在线数未知：/workers 加载失败，请到 Workers 区刷新后重试。"
-                : "CHV worker 在线数未知：/workers 尚未加载，请到 Workers 区刷新。"}
+        <div className="muted" aria-live="polite">
+          {chvAvailabilityText(chvAvail)}
           {" "}<button type="button" onClick={ctx.refreshWorkers}>刷新 CHV 可用性</button>
         </div>
       ) : null}
@@ -171,15 +165,15 @@ export default function DispatchSection() {
       {isSide ? null : (<>
         <Bar>
           <span className="muted">附件（放进任务工作区，图片与普通文件不区分）：</span>
-          <input ref={filesRef} type="file" multiple title="文件" disabled={isChv} onChange={refreshAttachments} />
-          <input ref={dirRef} type="file" multiple title="文件夹" disabled={isChv} onChange={refreshAttachments} {...({ webkitdirectory: "" } as any)} />
-          <input ref={imgRef} type="file" accept="image/*" multiple title="图片" disabled={isChv} onChange={refreshAttachments} />
+          <input ref={filesRef} type="file" multiple title="文件" aria-label="附件文件" disabled={isChv} onChange={refreshAttachments} />
+          <input ref={dirRef} type="file" multiple title="文件夹" aria-label="附件文件夹" disabled={isChv} onChange={refreshAttachments} {...({ webkitdirectory: "" } as any)} />
+          <input ref={imgRef} type="file" accept="image/*" multiple title="图片" aria-label="附件图片" disabled={isChv} onChange={refreshAttachments} />
         </Bar>
         {isChv ? <div className="muted">cloud-hypervisor 任务不支持附件：附件输入已禁用（后端对带附件的 CHV 任务会 400，错误文案原样显示在下方；切换回其他执行器可恢复附件输入）。{hasAttachments ? <>当前仍有已选附件，请先清空再提交。 <button type="button" onClick={() => { if (filesRef.current) filesRef.current.value = ""; if (dirRef.current) dirRef.current.value = ""; if (imgRef.current) imgRef.current.value = ""; setHasAttachments(false); }}>清空附件</button></> : ""}</div> : null}
       </>)}
       <Bar>
         <button className="seal" onClick={submit}>提交任务</button>
-        <span className="muted">{msg || ctx.dispatchMsg}</span>
+        <span className="muted" role="status" aria-live="polite">{msg || ctx.dispatchMsg}</span>
       </Bar>
     </Card>
   );

cloud/console-react/src/sections/EnvSection.tsx

@@ -2,7 +2,7 @@ import { useState } from "react";
 import { useConsole } from "../context";
 import { Card, Bar, DataListRaw } from "../components/ui";
 import { shortId } from "../api/client";
-import { chvAvailability } from "../api/chv";
+import { chvAvailability, chvAvailabilityText } from "../api/chv";
 
 export default function EnvSection() {
   const ctx = useConsole();
@@ -37,7 +37,7 @@ export default function EnvSection() {
         </select>
         <button onClick={async () => { await ctx.createEnv(name, branch, executor); setName(""); setBranch(""); }}>新建环境</button>
       </Bar>
-      {executor === "cloud-hypervisor" ? <div className="muted">实验执行器，默认关闭：环境创建白名单同样允许 cloud-hypervisor（后端环境接口 allowlist：local / docker / cloud-hypervisor，不含 cloud）；仍需后端有 KVM 宿主上的 CHV worker 才会认领，否则任务排队。前端只传值，不绕过后端白名单。{chvAvail.state === "known" ? <> CHV worker 在线 {chvAvail.online} / 共 {chvAvail.total}（来自 /workers）{chvAvail.online === 0 ? "：当前无 CHV worker 在线，任务将一直排队。" : ""}</> : " CHV worker 在线数未知：完整 worker 清单仅全局管理员可见。"}</div> : null}
+      {executor === "cloud-hypervisor" ? <div className="muted" aria-live="polite">实验执行器，默认关闭：环境创建白名单同样允许 cloud-hypervisor（后端环境接口 allowlist：local / docker / cloud-hypervisor，不含 cloud）；仍需后端有 KVM 宿主上的 CHV worker 才会认领，否则任务排队。前端只传值，不绕过后端白名单。 {chvAvailabilityText(chvAvail)}</div> : null}
       <span className="muted">{ctx.envMsg}</span>
     </Card>
   );

cloud/console-react/src/sections/TaskDetailPanel.tsx

@@ -4,7 +4,7 @@ import { Card } from "../components/ui";
 import { shortId, fmt } from "../api/client";
 import { STATUS_EXPLAIN } from "../api/types";
 import { firstChar, durationOf, tokenOf, fmtCostUsd } from "../api/taskMeta";
-import { chvAvailability, chvQueueHint, chvVmStatusText } from "../api/chv";
+import { chvAvailability, chvQueueHint, chvVmDisplay } from "../api/chv";
 import DetailActions from "./detail/DetailActions";
 import BrowserPanel from "./detail/BrowserPanel";
 import ReviewPanel from "./detail/ReviewPanel";
@@ -131,7 +131,7 @@ export default function TaskDetailPanel() {
           <div><dt>turn</dt><dd>{shortId(t.turn_id)}</dd></div>
           <div><dt>root turn</dt><dd>{shortId(t.root_turn_id)}</dd></div>
           <div><dt>executor</dt><dd>{t.executor || ""}{t.executor === "cloud-hypervisor" ? "（实验执行器，默认关闭；仅展示，无 VM 控制按钮）" : ""}</dd></div>
-          {t.executor === "cloud-hypervisor" ? <div><dt>VM 状态</dt><dd>{chvVmStatusText(t)}</dd></div> : null}
+          {t.executor === "cloud-hypervisor" ? <div><dt>VM 状态</dt><dd role="status" aria-label="VM 状态">{chvVmDisplay(t).text}</dd></div> : null}
           <div><dt>主机</dt><dd>{t.worktree_host || ""}</dd></div>
           <div><dt>模型</dt><dd>{t.model || "默认"}</dd></div>
           <div><dt>强度</dt><dd>{t.effort || "默认"}</dd></div>

cloud/console-react/src/sections/WorkersSection.tsx

@@ -2,7 +2,7 @@ import { useState } from "react";
 import { useConsole } from "../context";
 import { Card, Bar, DataListRaw } from "../components/ui";
 import { workerAgeText, shortId } from "../api/client";
-import { chvAvailability } from "../api/chv";
+import { chvAvailability, chvAvailabilityText } from "../api/chv";
 
 // Workers are read-only by design (GET /workers + worker-side
 // heartbeat only — no start/stop/kill actions exist to surface), so
@@ -29,10 +29,8 @@ export default function WorkersSection() {
   return (
     <Card id="nav-workers" title="Workers">
       <Bar><button onClick={ctx.refreshWorkers}>刷新</button></Bar>
-      <div className="muted">
-        {chvAvail.state === "known"
-          ? <>cloud-hypervisor worker 在线 {chvAvail.online} / 共 {chvAvail.total}（实验，默认关闭）{chvAvail.online === 0 ? "：当前无 CHV worker 在线，CHV 任务将一直排队。" : ""}</>
-          : "cloud-hypervisor worker 在线数未知：完整 worker 清单仅全局管理员可见，非管理员只能看到聚合数，无法按执行器分项。"}
+      <div className="muted" aria-live="polite">
+        {chvAvailabilityText(chvAvail)}
       </div>
       <Bar>
         <input type="text" placeholder="搜索 worker_id / 执行器" aria-label="搜索 Worker" value={query} onChange={(e) => setQuery(e.target.value)} />

cloud/console.html

@@ -4,7 +4,7 @@
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <title>Codex 命令台</title>
-  <script type="module" crossorigin>(function(){const r=document.createElement("link").relList;if(r&&r.supports&&r.supports("modulepreload"))return;for(const g of document.querySelectorAll('link[rel="modulepreload"]'))f(g);new MutationObserver(g=>{for(const A of g)if(A.type==="childList")for(const O of A.addedNodes)O.tagName==="LINK"&&O.rel==="modulepreload"&&f(O)}).observe(document,{childList:!0,subtree:!0});function h(g){const A={};return g.integrity&&(A.integrity=g.integrity),g.referrerPolicy&&(A.referrerPolicy=g.referrerPolicy),g.crossOrigin==="use-credentials"?A.credentials="include":g.crossOrigin==="anonymous"?A.credentials="omit":A.credentials="same-origin",A}function f(g){if(g.ep)return;g.ep=!0;const A=h(g);fetch(g.href,A)}})();function Ih(i){return i&&i.__esModule&&Object.prototype.hasOwnProperty.call(i,"default")?i.default:i}var fo={exports:{}},ci={};/**
+  <script type="module" crossorigin>(function(){const r=document.createElement("link").relList;if(r&&r.supports&&r.supports("modulepreload"))return;for(const g of document.querySelectorAll('link[rel="modulepreload"]'))f(g);new MutationObserver(g=>{for(const A of g)if(A.type==="childList")for(const O of A.addedNodes)O.tagName==="LINK"&&O.rel==="modulepreload"&&f(O)}).observe(document,{childList:!0,subtree:!0});function h(g){const A={};return g.integrity&&(A.integrity=g.integrity),g.referrerPolicy&&(A.referrerPolicy=g.referrerPolicy),g.crossOrigin==="use-credentials"?A.credentials="include":g.crossOrigin==="anonymous"?A.credentials="omit":A.credentials="same-origin",A}function f(g){if(g.ep)return;g.ep=!0;const A=h(g);fetch(g.href,A)}})();function Ph(i){return i&&i.__esModule&&Object.prototype.hasOwnProperty.call(i,"default")?i.default:i}var fo={exports:{}},ci={};/**
  * @license React
  * react-jsx-runtime.production.js
  *
@@ -12,7 +12,7 @@
  *
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.
- */var Uh;function Gy(){if(Uh)return ci;Uh=1;var i=Symbol.for("react.transitional.element"),r=Symbol.for("react.fragment");function h(f,g,A){var O=null;if(A!==void 0&&(O=""+A),g.key!==void 0&&(O=""+g.key),"key"in g){A={};for(var b in g)b!=="key"&&(A[b]=g[b])}else A=g;return g=A.ref,{$$typeof:i,type:f,key:O,ref:g!==void 0?g:null,props:A}}return ci.Fragment=r,ci.jsx=h,ci.jsxs=h,ci}var Hh;function Vy(){return Hh||(Hh=1,fo.exports=Gy()),fo.exports}var c=Vy(),mo={exports:{}},St={};/**
+ */var Hh;function Qy(){if(Hh)return ci;Hh=1;var i=Symbol.for("react.transitional.element"),r=Symbol.for("react.fragment");function h(f,g,A){var O=null;if(A!==void 0&&(O=""+A),g.key!==void 0&&(O=""+g.key),"key"in g){A={};for(var b in g)b!=="key"&&(A[b]=g[b])}else A=g;return g=A.ref,{$$typeof:i,type:f,key:O,ref:g!==void 0?g:null,props:A}}return ci.Fragment=r,ci.jsx=h,ci.jsxs=h,ci}var Bh;function Vy(){return Bh||(Bh=1,fo.exports=Qy()),fo.exports}var c=Vy(),mo={exports:{}},St={};/**
  * @license React
  * react.production.js
  *
@@ -20,7 +20,7 @@
  *
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.
- */var Bh;function Qy(){if(Bh)return St;Bh=1;var i=Symbol.for("react.transitional.element"),r=Symbol.for("react.portal"),h=Symbol.for("react.fragment"),f=Symbol.for("react.strict_mode"),g=Symbol.for("react.profiler"),A=Symbol.for("react.consumer"),O=Symbol.for("react.context"),b=Symbol.for("react.forward_ref"),E=Symbol.for("react.suspense"),M=Symbol.for("react.memo"),q=Symbol.for("react.lazy"),p=Symbol.for("react.activity"),H=Symbol.for("react.view_transition"),Z=Symbol.iterator;function F(y){return y===null||typeof y!="object"?null:(y=Z&&y[Z]||y["@@iterator"],typeof y=="function"?y:null)}var it={isMounted:function(){return!1},enqueueForceUpdate:function(){},enqueueReplaceState:function(){},enqueueSetState:function(){}},ft=Object.assign,Et={};function st(y,k,nt){this.props=y,this.context=k,this.refs=Et,this.updater=nt||it}st.prototype.isReactComponent={},st.prototype.setState=function(y,k){if(typeof y!="object"&&typeof y!="function"&&y!=null)throw Error("takes an object of state variables to update or a function which returns an object of state variables.");this.updater.enqueueSetState(this,y,k,"setState")},st.prototype.forceUpdate=function(y){this.updater.enqueueForceUpdate(this,y,"forceUpdate")};function Ht(){}Ht.prototype=st.prototype;function V(y,k,nt){this.props=y,this.context=k,this.refs=Et,this.updater=nt||it}var ct=V.prototype=new Ht;ct.constructor=V,ft(ct,st.prototype),ct.isPureReactComponent=!0;var z=Array.isArray;function L(){}var at={H:null,A:null,T:null,S:null},jt=Object.prototype.hasOwnProperty;function Mt(y,k,nt){var et=nt.ref;return{$$typeof:i,type:y,key:k,ref:et!==void 0?et:null,props:nt}}function yt(y,k){return Mt(y.type,k,y.props)}function bt(y){return typeof y=="object"&&y!==null&&y.$$typeof===i}function B(y){var k={"=":"=0",":":"=2"};return"$"+y.replace(/[=:]/g,function(nt){return k[nt]})}var mt=/\/+/g;function Ct(y,k){return typeof y=="object"&&y!==null&&y.key!=null?B(""+y.key):k.toString(36)}function Q(y){switch(y.status){case"fulfilled":return y.value;case"rejected":throw y.reason;default:switch(typeof y.status=="string"?y.then(L,L):(y.status="pending",y.then(function(k){y.status==="pending"&&(y.status="fulfilled",y.value=k)},function(k){y.status==="pending"&&(y.status="rejected",y.reason=k)})),y.status){case"fulfilled":return y.value;case"rejected":throw y.reason}}throw y}function Y(y,k,nt,et,xt){var Nt=typeof y;(Nt==="undefined"||Nt==="boolean")&&(y=null);var Ot=!1;if(y===null)Ot=!0;else switch(Nt){case"bigint":case"string":case"number":Ot=!0;break;case"object":switch(y.$$typeof){case i:case r:Ot=!0;break;case q:return Ot=y._init,Y(Ot(y._payload),k,nt,et,xt)}}if(Ot)return xt=xt(y),Ot=et===""?"."+Ct(y,0):et,z(xt)?(nt="",Ot!=null&&(nt=Ot.replace(mt,"$&/")+"/"),Y(xt,k,nt,"",function(Ne){return Ne})):xt!=null&&(bt(xt)&&(xt=yt(xt,nt+(xt.key==null||y&&y.key===xt.key?"":(""+xt.key).replace(mt,"$&/")+"/")+Ot)),k.push(xt)),1;Ot=0;var W=et===""?".":et+":";if(z(y))for(var ht=0;ht<y.length;ht++)et=y[ht],Nt=W+Ct(et,ht),Ot+=Y(et,k,nt,Nt,xt);else if(ht=F(y),typeof ht=="function")for(y=ht.call(y),ht=0;!(et=y.next()).done;)et=et.value,Nt=W+Ct(et,ht++),Ot+=Y(et,k,nt,Nt,xt);else if(Nt==="object"){if(typeof y.then=="function")return Y(Q(y),k,nt,et,xt);throw k=String(y),Error("Objects are not valid as a React child (found: "+(k==="[object Object]"?"object with keys {"+Object.keys(y).join(", ")+"}":k)+"). If you meant to render a collection of children, use an array instead.")}return Ot}function J(y,k,nt){if(y==null)return y;var et=[],xt=0;return Y(y,et,"","",function(Nt){return k.call(nt,Nt,xt++)}),et}function dt(y){if(y._status===-1){var k=y._result,nt=k();nt.then(function(et){(y._status===0||y._status===-1)&&(y._status=1,y._result=et,nt.status===void 0&&(nt.status="fulfilled",nt.value=et))},function(et){(y._status===0||y._status===-1)&&(y._status=2,y._result=et,nt.status===void 0&&(nt.status="rejected",nt.reason=et))}),y._status===-1&&(y._status=0,y._result=nt)}if(y._status===1)return y._result.default;throw y._result}var gt=typeof reportError=="function"?reportError:function(y){if(typeof window=="object"&&typeof window.ErrorEvent=="function"){var k=new window.ErrorEvent("error",{bubbles:!0,cancelable:!0,message:typeof y=="object"&&y!==null&&typeof y.message=="string"?String(y.message):String(y),error:y});if(!window.dispatchEvent(k))return}else if(typeof process=="object"&&typeof process.emit=="function"){process.emit("uncaughtException",y);return}console.error(y)};function ee(y){var k=at.T,nt={};nt.types=k!==null?k.types:null,at.T=nt;try{var et=y(),xt=at.S;xt!==null&&xt(nt,et),typeof et=="object"&&et!==null&&typeof et.then=="function"&&et.then(L,gt)}catch(Nt){gt(Nt)}finally{k!==null&&nt.types!==null&&(k.types=nt.types),at.T=k}}function fe(y){var k=at.T;if(k!==null){var nt=k.types;nt===null?k.types=[y]:nt.indexOf(y)===-1&&nt.push(y)}else ee(fe.bind(null,y))}var X={map:J,forEach:function(y,k,nt){J(y,function(){k.apply(this,arguments)},nt)},count:function(y){var k=0;return J(y,function(){k++}),k},toArLine truncated
+ */var qh;function Xy(){if(qh)return St;qh=1;var i=Symbol.for("react.transitional.element"),r=Symbol.for("react.portal"),h=Symbol.for("react.fragment"),f=Symbol.for("react.strict_mode"),g=Symbol.for("react.profiler"),A=Symbol.for("react.consumer"),O=Symbol.for("react.context"),b=Symbol.for("react.forward_ref"),N=Symbol.for("react.suspense"),M=Symbol.for("react.memo"),q=Symbol.for("react.lazy"),p=Symbol.for("react.activity"),H=Symbol.for("react.view_transition"),Z=Symbol.iterator;function F(y){return y===null||typeof y!="object"?null:(y=Z&&y[Z]||y["@@iterator"],typeof y=="function"?y:null)}var it={isMounted:function(){return!1},enqueueForceUpdate:function(){},enqueueReplaceState:function(){},enqueueSetState:function(){}},ft=Object.assign,Et={};function st(y,k,nt){this.props=y,this.context=k,this.refs=Et,this.updater=nt||it}st.prototype.isReactComponent={},st.prototype.setState=function(y,k){if(typeof y!="object"&&typeof y!="function"&&y!=null)throw Error("takes an object of state variables to update or a function which returns an object of state variables.");this.updater.enqueueSetState(this,y,k,"setState")},st.prototype.forceUpdate=function(y){this.updater.enqueueForceUpdate(this,y,"forceUpdate")};function Ht(){}Ht.prototype=st.prototype;function Q(y,k,nt){this.props=y,this.context=k,this.refs=Et,this.updater=nt||it}var ct=Q.prototype=new Ht;ct.constructor=Q,ft(ct,st.prototype),ct.isPureReactComponent=!0;var z=Array.isArray;function L(){}var at={H:null,A:null,T:null,S:null},jt=Object.prototype.hasOwnProperty;function Mt(y,k,nt){var et=nt.ref;return{$$typeof:i,type:y,key:k,ref:et!==void 0?et:null,props:nt}}function vt(y,k){return Mt(y.type,k,y.props)}function bt(y){return typeof y=="object"&&y!==null&&y.$$typeof===i}function B(y){var k={"=":"=0",":":"=2"};return"$"+y.replace(/[=:]/g,function(nt){return k[nt]})}var dt=/\/+/g;function Ct(y,k){return typeof y=="object"&&y!==null&&y.key!=null?B(""+y.key):k.toString(36)}function V(y){switch(y.status){case"fulfilled":return y.value;case"rejected":throw y.reason;default:switch(typeof y.status=="string"?y.then(L,L):(y.status="pending",y.then(function(k){y.status==="pending"&&(y.status="fulfilled",y.value=k)},function(k){y.status==="pending"&&(y.status="rejected",y.reason=k)})),y.status){case"fulfilled":return y.value;case"rejected":throw y.reason}}throw y}function Y(y,k,nt,et,xt){var Nt=typeof y;(Nt==="undefined"||Nt==="boolean")&&(y=null);var Ot=!1;if(y===null)Ot=!0;else switch(Nt){case"bigint":case"string":case"number":Ot=!0;break;case"object":switch(y.$$typeof){case i:case r:Ot=!0;break;case q:return Ot=y._init,Y(Ot(y._payload),k,nt,et,xt)}}if(Ot)return xt=xt(y),Ot=et===""?"."+Ct(y,0):et,z(xt)?(nt="",Ot!=null&&(nt=Ot.replace(dt,"$&/")+"/"),Y(xt,k,nt,"",function(Ne){return Ne})):xt!=null&&(bt(xt)&&(xt=vt(xt,nt+(xt.key==null||y&&y.key===xt.key?"":(""+xt.key).replace(dt,"$&/")+"/")+Ot)),k.push(xt)),1;Ot=0;var W=et===""?".":et+":";if(z(y))for(var mt=0;mt<y.length;mt++)et=y[mt],Nt=W+Ct(et,mt),Ot+=Y(et,k,nt,Nt,xt);else if(mt=F(y),typeof mt=="function")for(y=mt.call(y),mt=0;!(et=y.next()).done;)et=et.value,Nt=W+Ct(et,mt++),Ot+=Y(et,k,nt,Nt,xt);else if(Nt==="object"){if(typeof y.then=="function")return Y(V(y),k,nt,et,xt);throw k=String(y),Error("Objects are not valid as a React child (found: "+(k==="[object Object]"?"object with keys {"+Object.keys(y).join(", ")+"}":k)+"). If you meant to render a collection of children, use an array instead.")}return Ot}function J(y,k,nt){if(y==null)return y;var et=[],xt=0;return Y(y,et,"","",function(Nt){return k.call(nt,Nt,xt++)}),et}function pt(y){if(y._status===-1){var k=y._result,nt=k();nt.then(function(et){(y._status===0||y._status===-1)&&(y._status=1,y._result=et,nt.status===void 0&&(nt.status="fulfilled",nt.value=et))},function(et){(y._status===0||y._status===-1)&&(y._status=2,y._result=et,nt.status===void 0&&(nt.status="rejected",nt.reason=et))}),y._status===-1&&(y._status=0,y._result=nt)}if(y._status===1)return y._result.default;throw y._result}var yt=typeof reportError=="function"?reportError:function(y){if(typeof window=="object"&&typeof window.ErrorEvent=="function"){var k=new window.ErrorEvent("error",{bubbles:!0,cancelable:!0,message:typeof y=="object"&&y!==null&&typeof y.message=="string"?String(y.message):String(y),error:y});if(!window.dispatchEvent(k))return}else if(typeof process=="object"&&typeof process.emit=="function"){process.emit("uncaughtException",y);return}console.error(y)};function ee(y){var k=at.T,nt={};nt.types=k!==null?k.types:null,at.T=nt;try{var et=y(),xt=at.S;xt!==null&&xt(nt,et),typeof et=="object"&&et!==null&&typeof et.then=="function"&&et.then(L,yt)}catch(Nt){yt(Nt)}finally{k!==null&&nt.types!==null&&(k.types=nt.types),at.T=k}}function fe(y){var k=at.T;if(k!==null){var nt=k.types;nt===null?k.types=[y]:nt.indexOf(y)===-1&&nt.push(y)}else ee(fe.bind(null,y))}var X={map:J,forEach:function(y,k,nt){J(y,function(){k.apply(this,arguments)},nt)},count:function(y){var k=0;return J(y,function(){k++}),k},toArLine truncated
  * @license React
  * scheduler.production.js
  *
@@ -28,7 +28,7 @@
  *
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.
- */var Yh;function Ly(){return Yh||(Yh=1,(function(i){function r(Q,Y){var J=Q.length;Q.push(Y);t:for(;0<J;){var dt=J-1>>>1,gt=Q[dt];if(0<g(gt,Y))Q[dt]=Y,Q[J]=gt,J=dt;else break t}}function h(Q){return Q.length===0?null:Q[0]}function f(Q){if(Q.length===0)return null;var Y=Q[0],J=Q.pop();if(J!==Y){Q[0]=J;t:for(var dt=0,gt=Q.length,ee=gt>>>1;dt<ee;){var fe=2*(dt+1)-1,X=Q[fe],y=fe+1,k=Q[y];if(0>g(X,J))y<gt&&0>g(k,X)?(Q[dt]=k,Q[y]=J,dt=y):(Q[dt]=X,Q[fe]=J,dt=fe);else if(y<gt&&0>g(k,J))Q[dt]=k,Q[y]=J,dt=y;else break t}}return Y}function g(Q,Y){var J=Q.sortIndex-Y.sortIndex;return J!==0?J:Q.id-Y.id}if(i.unstable_now=void 0,typeof performance=="object"&&typeof performance.now=="function"){var A=performance;i.unstable_now=function(){return A.now()}}else{var O=Date,b=O.now();i.unstable_now=function(){return O.now()-b}}var E=[],M=[],q=1,p=null,H=3,Z=!1,F=!1,it=!1,ft=!1,Et=typeof setTimeout=="function"?setTimeout:null,st=typeof clearTimeout=="function"?clearTimeout:null,Ht=typeof setImmediate<"u"?setImmediate:null;function V(Q){for(var Y=h(M);Y!==null;){if(Y.callback===null)f(M);else if(Y.startTime<=Q)f(M),Y.sortIndex=Y.expirationTime,r(E,Y);else break;Y=h(M)}}function ct(Q){if(it=!1,V(Q),!F)if(h(E)!==null)F=!0,z||(z=!0,bt());else{var Y=h(M);Y!==null&&Ct(ct,Y.startTime-Q)}}var z=!1,L=-1,at=5,jt=-1;function Mt(){return ft?!0:!(i.unstable_now()-jt<at)}function yt(){if(ft=!1,z){var Q=i.unstable_now();jt=Q;var Y=!0;try{t:{F=!1,it&&(it=!1,st(L),L=-1),Z=!0;var J=H;try{e:{for(V(Q),p=h(E);p!==null&&!(p.expirationTime>Q&&Mt());){var dt=p.callback;if(typeof dt=="function"){p.callback=null,H=p.priorityLevel;var gt=dt(p.expirationTime<=Q);if(Q=i.unstable_now(),typeof gt=="function"){p.callback=gt,V(Q),Y=!0;break e}p===h(E)&&f(E),V(Q)}else f(E);p=h(E)}if(p!==null)Y=!0;else{var ee=h(M);ee!==null&&Ct(ct,ee.startTime-Q),Y=!1}}break t}finally{p=null,H=J,Z=!1}Y=void 0}}finally{Y?bt():z=!1}}}var bt;if(typeof Ht=="function")bt=function(){Ht(yt)};else if(typeof MessageChannel<"u"){var B=new MessageChannel,mt=B.port2;B.port1.onmessage=yt,bt=function(){mt.postMessage(null)}}else bt=function(){Et(yt,0)};function Ct(Q,Y){L=Et(function(){Q(i.unstable_now())},Y)}i.unstable_IdlePriority=5,i.unstable_ImmediatePriority=1,i.unstable_LowPriority=4,i.unstable_NormalPriority=3,i.unstable_Profiling=null,i.unstable_UserBlockingPriority=2,i.unstable_cancelCallback=function(Q){Q.callback=null},i.unstable_forceFrameRate=function(Q){0>Q||125<Q?console.error("forceFrameRate takes a positive int between 0 and 125, forcing frame rates higher than 125 fps is not supported"):at=0<Q?Math.floor(1e3/Q):5},i.unstable_getCurrentPriorityLevel=function(){return H},i.unstable_next=function(Q){switch(H){case 1:case 2:case 3:var Y=3;break;default:Y=H}var J=H;H=Y;try{return Q()}finally{H=J}},i.unstable_requestPaint=function(){ft=!0},i.unstable_runWithPriority=function(Q,Y){switch(Q){case 1:case 2:case 3:case 4:case 5:break;default:Q=3}var J=H;H=Q;try{return Y()}finally{H=J}},i.unstable_scheduleCallback=function(Q,Y,J){var dt=i.unstable_now();switch(typeof J=="object"&&J!==null?(J=J.delay,J=typeof J=="number"&&0<J?dt+J:dt):J=dt,Q){case 1:var gt=-1;break;case 2:gt=250;break;case 5:gt=1073741823;break;case 4:gt=1e4;break;default:gt=5e3}return gt=J+gt,Q={id:q++,callback:Y,priorityLevel:Q,startTime:J,expirationTime:gt,sortIndex:-1},J>dt?(Q.sortIndex=J,r(M,Q),h(E)===null&&Q===h(M)&&(it?(st(L),L=-1):it=!0,Ct(ct,J-dt))):(Q.sortIndex=gt,r(E,Q),F||Z||(F=!0,z||(z=!0,bt()))),Q},i.unstable_shouldYield=Mt,i.unstable_wrapCallback=function(Q){var Y=H;return function(){var J=H;H=Y;try{return Q.apply(this,arguments)}finally{H=J}}}})(yo)),yo}var Gh;function Zy(){return Gh||(Gh=1,vo.exports=Ly()),vo.exports}var go={exports:{}},ke={};/**
+ */var Gh;function Zy(){return Gh||(Gh=1,(function(i){function r(V,Y){var J=V.length;V.push(Y);t:for(;0<J;){var pt=J-1>>>1,yt=V[pt];if(0<g(yt,Y))V[pt]=Y,V[J]=yt,J=pt;else break t}}function h(V){return V.length===0?null:V[0]}function f(V){if(V.length===0)return null;var Y=V[0],J=V.pop();if(J!==Y){V[0]=J;t:for(var pt=0,yt=V.length,ee=yt>>>1;pt<ee;){var fe=2*(pt+1)-1,X=V[fe],y=fe+1,k=V[y];if(0>g(X,J))y<yt&&0>g(k,X)?(V[pt]=k,V[y]=J,pt=y):(V[pt]=X,V[fe]=J,pt=fe);else if(y<yt&&0>g(k,J))V[pt]=k,V[y]=J,pt=y;else break t}}return Y}function g(V,Y){var J=V.sortIndex-Y.sortIndex;return J!==0?J:V.id-Y.id}if(i.unstable_now=void 0,typeof performance=="object"&&typeof performance.now=="function"){var A=performance;i.unstable_now=function(){return A.now()}}else{var O=Date,b=O.now();i.unstable_now=function(){return O.now()-b}}var N=[],M=[],q=1,p=null,H=3,Z=!1,F=!1,it=!1,ft=!1,Et=typeof setTimeout=="function"?setTimeout:null,st=typeof clearTimeout=="function"?clearTimeout:null,Ht=typeof setImmediate<"u"?setImmediate:null;function Q(V){for(var Y=h(M);Y!==null;){if(Y.callback===null)f(M);else if(Y.startTime<=V)f(M),Y.sortIndex=Y.expirationTime,r(N,Y);else break;Y=h(M)}}function ct(V){if(it=!1,Q(V),!F)if(h(N)!==null)F=!0,z||(z=!0,bt());else{var Y=h(M);Y!==null&&Ct(ct,Y.startTime-V)}}var z=!1,L=-1,at=5,jt=-1;function Mt(){return ft?!0:!(i.unstable_now()-jt<at)}function vt(){if(ft=!1,z){var V=i.unstable_now();jt=V;var Y=!0;try{t:{F=!1,it&&(it=!1,st(L),L=-1),Z=!0;var J=H;try{e:{for(Q(V),p=h(N);p!==null&&!(p.expirationTime>V&&Mt());){var pt=p.callback;if(typeof pt=="function"){p.callback=null,H=p.priorityLevel;var yt=pt(p.expirationTime<=V);if(V=i.unstable_now(),typeof yt=="function"){p.callback=yt,Q(V),Y=!0;break e}p===h(N)&&f(N),Q(V)}else f(N);p=h(N)}if(p!==null)Y=!0;else{var ee=h(M);ee!==null&&Ct(ct,ee.startTime-V),Y=!1}}break t}finally{p=null,H=J,Z=!1}Y=void 0}}finally{Y?bt():z=!1}}}var bt;if(typeof Ht=="function")bt=function(){Ht(vt)};else if(typeof MessageChannel<"u"){var B=new MessageChannel,dt=B.port2;B.port1.onmessage=vt,bt=function(){dt.postMessage(null)}}else bt=function(){Et(vt,0)};function Ct(V,Y){L=Et(function(){V(i.unstable_now())},Y)}i.unstable_IdlePriority=5,i.unstable_ImmediatePriority=1,i.unstable_LowPriority=4,i.unstable_NormalPriority=3,i.unstable_Profiling=null,i.unstable_UserBlockingPriority=2,i.unstable_cancelCallback=function(V){V.callback=null},i.unstable_forceFrameRate=function(V){0>V||125<V?console.error("forceFrameRate takes a positive int between 0 and 125, forcing frame rates higher than 125 fps is not supported"):at=0<V?Math.floor(1e3/V):5},i.unstable_getCurrentPriorityLevel=function(){return H},i.unstable_next=function(V){switch(H){case 1:case 2:case 3:var Y=3;break;default:Y=H}var J=H;H=Y;try{return V()}finally{H=J}},i.unstable_requestPaint=function(){ft=!0},i.unstable_runWithPriority=function(V,Y){switch(V){case 1:case 2:case 3:case 4:case 5:break;default:V=3}var J=H;H=V;try{return Y()}finally{H=J}},i.unstable_scheduleCallback=function(V,Y,J){var pt=i.unstable_now();switch(typeof J=="object"&&J!==null?(J=J.delay,J=typeof J=="number"&&0<J?pt+J:pt):J=pt,V){case 1:var yt=-1;break;case 2:yt=250;break;case 5:yt=1073741823;break;case 4:yt=1e4;break;default:yt=5e3}return yt=J+yt,V={id:q++,callback:Y,priorityLevel:V,startTime:J,expirationTime:yt,sortIndex:-1},J>pt?(V.sortIndex=J,r(M,V),h(N)===null&&V===h(M)&&(it?(st(L),L=-1):it=!0,Ct(ct,J-pt))):(V.sortIndex=yt,r(N,V),F||Z||(F=!0,z||(z=!0,bt()))),V},i.unstable_shouldYield=Mt,i.unstable_wrapCallback=function(V){var Y=H;return function(){var J=H;H=Y;try{return V.apply(this,arguments)}finally{H=J}}}})(yo)),yo}var Qh;function Ky(){return Qh||(Qh=1,vo.exports=Zy()),vo.exports}var go={exports:{}},ke={};/**
  * @license React
  * react-dom.production.js
  *
@@ -36,7 +36,7 @@
  *
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.
- */var Vh;function Ky(){if(Vh)return ke;Vh=1;var i=jo();function r(q){var p="https://react.dev/errors/"+q;if(1<arguments.length){p+="?args[]="+encodeURIComponent(arguments[1]);for(var H=2;H<arguments.length;H++)p+="&args[]="+encodeURIComponent(arguments[H])}return"Minified React error #"+q+"; visit "+p+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}function h(){}var f={d:{f:h,r:function(){throw Error(r(522))},D:h,C:h,L:h,m:h,X:h,S:h,M:h},p:0,findDOMNode:null},g=Symbol.for("react.portal"),A=Symbol.for("react.recoverable"),O=Symbol.for("react.optimistic_key");function b(q,p,H){var Z=3<arguments.length&&arguments[3]!==void 0?arguments[3]:null;return{$$typeof:g,key:Z==null?null:Z===O?O:""+Z,children:q,containerInfo:p,implementation:H}}var E=i.__CLIENT_INTERNALS_DO_NOT_USE_OR_WARN_USERS_THEY_CANNOT_UPGRADE;function M(q,p){if(q==="font")return"";if(typeof p=="string")return p==="use-credentials"?p:""}return ke.__DOM_INTERNALS_DO_NOT_USE_OR_WARN_USERS_THEY_CANNOT_UPGRADE=f,ke.browser=function(q){return{$$typeof:A,_reason:q}},ke.createPortal=function(q,p){var H=2<arguments.length&&arguments[2]!==void 0?arguments[2]:null;if(!p||p.nodeType!==1&&p.nodeType!==9&&p.nodeType!==11)throw Error(r(299));return b(q,p,null,H)},ke.flushSync=function(q){var p=E.T,H=f.p;try{if(E.T=null,f.p=2,q)return q()}finally{E.T=p,f.p=H,f.d.f()}},ke.preconnect=function(q,p){typeof q=="string"&&(p?(p=p.crossOrigin,p=typeof p=="string"?p==="use-credentials"?p:"":void 0):p=null,f.d.C(q,p))},ke.prefetchDNS=function(q){typeof q=="string"&&f.d.D(q)},ke.preinit=function(q,p){if(typeof q=="string"&&p&&typeof p.as=="string"){var H=p.as,Z=M(H,p.crossOrigin),F=typeof p.integrity=="string"?p.integrity:void 0,it=typeof p.fetchPriority=="string"?p.fetchPriority:void 0;H==="style"?f.d.S(q,typeof p.precedence=="string"?p.precedence:void 0,{crossOrigin:Z,integrity:F,fetchPriority:it}):H==="script"&&f.d.X(q,{crossOrigin:Z,integrity:F,fetchPriority:it,nonce:typeof p.nonce=="string"?p.nonce:void 0})}},ke.preinitModule=function(q,p){if(typeof q=="string")if(typeof p=="object"&&p!==null){if(p.as==null||p.as==="script"){var H=M(p.as,p.crossOrigin);f.d.M(q,{crossOrigin:H,integrity:typeof p.integrity=="string"?p.integrity:void 0,nonce:typeof p.nonce=="string"?p.nonce:void 0,fetchPriority:typeof p.fetchPriority=="string"?p.fetchPriority:void 0})}}else p==null&&f.d.M(q)},ke.preload=function(q,p){if(typeof q=="string"&&typeof p=="object"&&p!==null&&typeof p.as=="string"){var H=p.as,Z=M(H,p.crossOrigin);f.d.L(q,H,{crossOrigin:Z,integrity:typeof p.integrity=="string"?p.integrity:void 0,nonce:typeof p.nonce=="string"?p.nonce:void 0,type:typeof p.type=="string"?p.type:void 0,fetchPriority:typeof p.fetchPriority=="string"?p.fetchPriority:void 0,referrerPolicy:typeof p.referrerPolicy=="string"?p.referrerPolicy:void 0,imageSrcSet:typeof p.imageSrcSet=="string"?p.imageSrcSet:void 0,imageSizes:typeof p.imageSizes=="string"?p.imageSizes:void 0,media:typeof p.media=="string"?p.media:void 0})}},ke.preloadModule=function(q,p){if(typeof q=="string")if(p){var H=M(p.as,p.crossOrigin);f.d.m(q,{as:typeof p.as=="string"&&p.as!=="script"?p.as:void 0,crossOrigin:H,integrity:typeof p.integrity=="string"?p.integrity:void 0,nonce:typeof p.nonce=="string"?p.nonce:void 0,fetchPriority:typeof p.fetchPriority=="string"?p.fetchPriority:void 0})}else f.d.m(q)},ke.requestFormReset=function(q){f.d.r(q)},ke.unstable_batchedUpdates=function(q,p){return q(p)},ke.useFormState=function(q,p,H){return E.H.useFormState(q,p,H)},ke.useFormStatus=function(){return E.H.useHostTransitionStatus()},ke.version="19.3.1",ke}var Qh;function Jy(){if(Qh)return go.exports;Qh=1;function i(){if(!(typeof __REACT_DEVTOOLS_GLOBAL_HOOK__>"u"||typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE!="function"))try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(i)}catch(r){console.error(r)}}return i(),go.exports=Ky(),go.exports}/**
+ */var Vh;function Jy(){if(Vh)return ke;Vh=1;var i=jo();function r(q){var p="https://react.dev/errors/"+q;if(1<arguments.length){p+="?args[]="+encodeURIComponent(arguments[1]);for(var H=2;H<arguments.length;H++)p+="&args[]="+encodeURIComponent(arguments[H])}return"Minified React error #"+q+"; visit "+p+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}function h(){}var f={d:{f:h,r:function(){throw Error(r(522))},D:h,C:h,L:h,m:h,X:h,S:h,M:h},p:0,findDOMNode:null},g=Symbol.for("react.portal"),A=Symbol.for("react.recoverable"),O=Symbol.for("react.optimistic_key");function b(q,p,H){var Z=3<arguments.length&&arguments[3]!==void 0?arguments[3]:null;return{$$typeof:g,key:Z==null?null:Z===O?O:""+Z,children:q,containerInfo:p,implementation:H}}var N=i.__CLIENT_INTERNALS_DO_NOT_USE_OR_WARN_USERS_THEY_CANNOT_UPGRADE;function M(q,p){if(q==="font")return"";if(typeof p=="string")return p==="use-credentials"?p:""}return ke.__DOM_INTERNALS_DO_NOT_USE_OR_WARN_USERS_THEY_CANNOT_UPGRADE=f,ke.browser=function(q){return{$$typeof:A,_reason:q}},ke.createPortal=function(q,p){var H=2<arguments.length&&arguments[2]!==void 0?arguments[2]:null;if(!p||p.nodeType!==1&&p.nodeType!==9&&p.nodeType!==11)throw Error(r(299));return b(q,p,null,H)},ke.flushSync=function(q){var p=N.T,H=f.p;try{if(N.T=null,f.p=2,q)return q()}finally{N.T=p,f.p=H,f.d.f()}},ke.preconnect=function(q,p){typeof q=="string"&&(p?(p=p.crossOrigin,p=typeof p=="string"?p==="use-credentials"?p:"":void 0):p=null,f.d.C(q,p))},ke.prefetchDNS=function(q){typeof q=="string"&&f.d.D(q)},ke.preinit=function(q,p){if(typeof q=="string"&&p&&typeof p.as=="string"){var H=p.as,Z=M(H,p.crossOrigin),F=typeof p.integrity=="string"?p.integrity:void 0,it=typeof p.fetchPriority=="string"?p.fetchPriority:void 0;H==="style"?f.d.S(q,typeof p.precedence=="string"?p.precedence:void 0,{crossOrigin:Z,integrity:F,fetchPriority:it}):H==="script"&&f.d.X(q,{crossOrigin:Z,integrity:F,fetchPriority:it,nonce:typeof p.nonce=="string"?p.nonce:void 0})}},ke.preinitModule=function(q,p){if(typeof q=="string")if(typeof p=="object"&&p!==null){if(p.as==null||p.as==="script"){var H=M(p.as,p.crossOrigin);f.d.M(q,{crossOrigin:H,integrity:typeof p.integrity=="string"?p.integrity:void 0,nonce:typeof p.nonce=="string"?p.nonce:void 0,fetchPriority:typeof p.fetchPriority=="string"?p.fetchPriority:void 0})}}else p==null&&f.d.M(q)},ke.preload=function(q,p){if(typeof q=="string"&&typeof p=="object"&&p!==null&&typeof p.as=="string"){var H=p.as,Z=M(H,p.crossOrigin);f.d.L(q,H,{crossOrigin:Z,integrity:typeof p.integrity=="string"?p.integrity:void 0,nonce:typeof p.nonce=="string"?p.nonce:void 0,type:typeof p.type=="string"?p.type:void 0,fetchPriority:typeof p.fetchPriority=="string"?p.fetchPriority:void 0,referrerPolicy:typeof p.referrerPolicy=="string"?p.referrerPolicy:void 0,imageSrcSet:typeof p.imageSrcSet=="string"?p.imageSrcSet:void 0,imageSizes:typeof p.imageSizes=="string"?p.imageSizes:void 0,media:typeof p.media=="string"?p.media:void 0})}},ke.preloadModule=function(q,p){if(typeof q=="string")if(p){var H=M(p.as,p.crossOrigin);f.d.m(q,{as:typeof p.as=="string"&&p.as!=="script"?p.as:void 0,crossOrigin:H,integrity:typeof p.integrity=="string"?p.integrity:void 0,nonce:typeof p.nonce=="string"?p.nonce:void 0,fetchPriority:typeof p.fetchPriority=="string"?p.fetchPriority:void 0})}else f.d.m(q)},ke.requestFormReset=function(q){f.d.r(q)},ke.unstable_batchedUpdates=function(q,p){return q(p)},ke.useFormState=function(q,p,H){return N.H.useFormState(q,p,H)},ke.useFormStatus=function(){return N.H.useHostTransitionStatus()},ke.version="19.3.1",ke}var Xh;function Fy(){if(Xh)return go.exports;Xh=1;function i(){if(!(typeof __REACT_DEVTOOLS_GLOBAL_HOOK__>"u"||typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE!="function"))try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(i)}catch(r){console.error(r)}}return i(),go.exports=Jy(),go.exports}/**
  * @license React
  * react-dom-client.production.js
  *
@@ -44,37 +44,37 @@
  *
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.
- */var Xh;function Fy(){if(Xh)return si;Xh=1;var i=Zy(),r=jo(),h=Jy();function f(t){var e="https://react.dev/errors/"+t;if(1<arguments.length){e+="?args[]="+encodeURIComponent(arguments[1]);for(var l=2;l<arguments.length;l++)e+="&args[]="+encodeURIComponent(arguments[l])}return"Minified React error #"+t+"; visit "+e+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}function g(t){return!(!t||t.nodeType!==1&&t.nodeType!==9&&t.nodeType!==11)}function A(t){for(var e=t,l=e;l&&!l.alternate;)e=l,(e.flags&4098)!==0&&(t=e.return),l=e.return;for(;e.return;)e=e.return;return e.tag===3?t:null}function O(t){if(t.tag===13){var e=t.memoizedState;if(e===null&&(t=t.alternate,t!==null&&(e=t.memoizedState)),e!==null)return e.dehydrated}return null}function b(t){if(t.tag===31){var e=t.memoizedState;if(e===null&&(t=t.alternate,t!==null&&(e=t.memoizedState)),e!==null)return e.dehydrated}return null}function E(t){if(A(t)!==t)throw Error(f(188))}function M(t){var e=t.alternate;if(!e){if(e=A(t),e===null)throw Error(f(188));return e!==t?null:t}for(var l=t,a=e;;){var n=l.return;if(n===null)break;var u=n.alternate;if(u===null){if(a=n.return,a!==null){l=a;continue}break}if(n.child===u.child){for(u=n.child;u;){if(u===l)return E(n),t;if(u===a)return E(n),e;u=u.sibling}throw Error(f(188))}if(l.return!==a.return)l=n,a=u;else{for(var s=!1,o=n.child;o;){if(o===l){s=!0,l=n,a=u;break}if(o===a){s=!0,a=n,l=u;break}o=o.sibling}if(!s){for(o=u.child;o;){if(o===l){s=!0,l=u,a=n;break}if(o===a){s=!0,a=u,l=n;break}o=o.sibling}if(!s)throw Error(f(189))}}if(l.alternate!==a)throw Error(f(190))}if(l.tag!==3)throw Error(f(188));return l.stateNode.current===l?t:e}function q(t){var e=t.tag;if(e===5||e===26||e===27||e===6)return t;for(t=t.child;t!==null;){if(e=q(t),e!==null)return e;t=t.sibling}return null}function p(t,e,l,a,n,u){for(;t!==null;){if((t.tag===5||t.tag===27||t.tag===6)&&l(t,a,n,u)||(t.tag!==22||t.memoizedState===null)&&(e||t.tag!==5&&t.tag!==27)&&p(t.child,e,l,a,n,u))return!0;t=t.sibling}return!1}function H(t){for(t=t.return;t!==null;){if(t.tag===3||t.tag===5||t.tag===27)return t;t=t.return}return null}function Z(t){var e=!1;for(t=t.return;t!==null&&(t.tag===4&&(e=!0),!(t.tag===3||t.tag===5||t.tag===27));)t=t.return;return e}function F(t){var e=[null,null],l=H(t);return l===null||it(e,t,l.child,{foundSelf:!1}),e}function it(t,e,l,a){for(;l!==null;){if(l===e)a.foundSelf=!0;else if(l.tag===5||l.tag===27||l.tag===6){if(a.foundSelf)return t[1]=l,!0;t[0]=l}else if((l.tag!==22||l.memoizedState===null)&&it(t,e,l.child,a))return!0;l=l.sibling}return!1}function ft(t){switch(t.tag){case 5:case 27:case 6:return t.stateNode;case 3:return t.stateNode.containerInfo;default:throw Error(f(559))}}var Et=null,st=null;function Ht(t,e,l){return t===l?!0:t===e?(Et=t,!0):!1}function V(t,e,l){return t===l?(st=t,!1):t===e?(st!==null&&(Et=t),!0):!1}function ct(t){if(t===null)return null;do t=t===null?null:t.return;while(t&&t.tag!==5&&t.tag!==27&&t.tag!==3);return t||null}function z(t,e,l){for(var a=0,n=t;n;n=l(n))a++;n=0;for(var u=e;u;u=l(u))n++;for(;0<a-n;)t=l(t),a--;for(;0<n-a;)e=l(e),n--;for(;a--;){if(t===e||e!==null&&t===e.alternate)return t;t=l(t),e=l(e)}return null}var L=Object.assign,at=Symbol.for("react.element"),jt=Symbol.for("react.transitional.element"),Mt=Symbol.for("react.portal"),yt=Symbol.for("react.fragment"),bt=Symbol.for("react.strict_mode"),B=Symbol.for("react.profiler"),mt=Symbol.for("react.consumer"),Ct=Symbol.for("react.context"),Q=Symbol.for("react.forward_ref"),Y=Symbol.for("react.suspense"),J=Symbol.for("react.suspense_list"),dt=Symbol.for("react.memo"),gt=Symbol.for("react.lazy"),ee=Symbol.for("react.activity"),fe=Symbol.for("react.legacy_hidden"),X=Symbol.for("react.memo_cache_sentinel"),y=Symbol.for("react.view_transition"),k=Symbol.for("react.recoverable"),nt=Symbol.iterator;function et(t){return t===null||typeof t!="object"?null:(t=nt&&t[nt]||t["@@iterator"],typeof t=="function"?t:null)}var xt=Symbol.for("react.client.reference");function Nt(t){if(t==null)return null;if(typeof t=="function")return t.$$typeof===xt?null:t.displayName||t.name||null;if(typeof t=="string")return t;switch(t){case yt:return"Fragment";case B:return"Profiler";case bt:return"StrictMode";case Y:return"Suspense";case J:return"SuspenseList";case ee:return"Activity";case y:return"ViewTransition"}if(typeof t=="object")switch(t.$$typeof){case Mt:return"Portal";case Ct:return t.displayName||"Context";case mt:return(t._context.displayName||"Context")+".Consumer";case Q:var e=t.render;return t=t.displayName,t||(t=e.displayName||e.name||"",t=t!==""?"ForwardRef("+t+")":"ForwardRef"),t;case dt:return e=t.displayName||null,e!==null?e:Nt(t.type)||"Memo";case gt:e=t._payload,t=t._init;try{return Nt(t(e))}catch{}}return null}var Ot=Array.isArray,W=r.__CLIENT_INTERNALS_DO_NOT_USE_OR_WARN_USERS_THEY_CANNOT_UPGRADE,ht=h.__DOM_INTERNALS_DO_NOT_USE_OR_WARN_USERS_THEY_CANNOT_UPGRADE,Ne={pending:!1,data:null,method:null,action:Line truncated
+ */var Lh;function Wy(){if(Lh)return si;Lh=1;var i=Ky(),r=jo(),h=Fy();function f(t){var e="https://react.dev/errors/"+t;if(1<arguments.length){e+="?args[]="+encodeURIComponent(arguments[1]);for(var l=2;l<arguments.length;l++)e+="&args[]="+encodeURIComponent(arguments[l])}return"Minified React error #"+t+"; visit "+e+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}function g(t){return!(!t||t.nodeType!==1&&t.nodeType!==9&&t.nodeType!==11)}function A(t){for(var e=t,l=e;l&&!l.alternate;)e=l,(e.flags&4098)!==0&&(t=e.return),l=e.return;for(;e.return;)e=e.return;return e.tag===3?t:null}function O(t){if(t.tag===13){var e=t.memoizedState;if(e===null&&(t=t.alternate,t!==null&&(e=t.memoizedState)),e!==null)return e.dehydrated}return null}function b(t){if(t.tag===31){var e=t.memoizedState;if(e===null&&(t=t.alternate,t!==null&&(e=t.memoizedState)),e!==null)return e.dehydrated}return null}function N(t){if(A(t)!==t)throw Error(f(188))}function M(t){var e=t.alternate;if(!e){if(e=A(t),e===null)throw Error(f(188));return e!==t?null:t}for(var l=t,a=e;;){var n=l.return;if(n===null)break;var u=n.alternate;if(u===null){if(a=n.return,a!==null){l=a;continue}break}if(n.child===u.child){for(u=n.child;u;){if(u===l)return N(n),t;if(u===a)return N(n),e;u=u.sibling}throw Error(f(188))}if(l.return!==a.return)l=n,a=u;else{for(var s=!1,o=n.child;o;){if(o===l){s=!0,l=n,a=u;break}if(o===a){s=!0,a=n,l=u;break}o=o.sibling}if(!s){for(o=u.child;o;){if(o===l){s=!0,l=u,a=n;break}if(o===a){s=!0,a=u,l=n;break}o=o.sibling}if(!s)throw Error(f(189))}}if(l.alternate!==a)throw Error(f(190))}if(l.tag!==3)throw Error(f(188));return l.stateNode.current===l?t:e}function q(t){var e=t.tag;if(e===5||e===26||e===27||e===6)return t;for(t=t.child;t!==null;){if(e=q(t),e!==null)return e;t=t.sibling}return null}function p(t,e,l,a,n,u){for(;t!==null;){if((t.tag===5||t.tag===27||t.tag===6)&&l(t,a,n,u)||(t.tag!==22||t.memoizedState===null)&&(e||t.tag!==5&&t.tag!==27)&&p(t.child,e,l,a,n,u))return!0;t=t.sibling}return!1}function H(t){for(t=t.return;t!==null;){if(t.tag===3||t.tag===5||t.tag===27)return t;t=t.return}return null}function Z(t){var e=!1;for(t=t.return;t!==null&&(t.tag===4&&(e=!0),!(t.tag===3||t.tag===5||t.tag===27));)t=t.return;return e}function F(t){var e=[null,null],l=H(t);return l===null||it(e,t,l.child,{foundSelf:!1}),e}function it(t,e,l,a){for(;l!==null;){if(l===e)a.foundSelf=!0;else if(l.tag===5||l.tag===27||l.tag===6){if(a.foundSelf)return t[1]=l,!0;t[0]=l}else if((l.tag!==22||l.memoizedState===null)&&it(t,e,l.child,a))return!0;l=l.sibling}return!1}function ft(t){switch(t.tag){case 5:case 27:case 6:return t.stateNode;case 3:return t.stateNode.containerInfo;default:throw Error(f(559))}}var Et=null,st=null;function Ht(t,e,l){return t===l?!0:t===e?(Et=t,!0):!1}function Q(t,e,l){return t===l?(st=t,!1):t===e?(st!==null&&(Et=t),!0):!1}function ct(t){if(t===null)return null;do t=t===null?null:t.return;while(t&&t.tag!==5&&t.tag!==27&&t.tag!==3);return t||null}function z(t,e,l){for(var a=0,n=t;n;n=l(n))a++;n=0;for(var u=e;u;u=l(u))n++;for(;0<a-n;)t=l(t),a--;for(;0<n-a;)e=l(e),n--;for(;a--;){if(t===e||e!==null&&t===e.alternate)return t;t=l(t),e=l(e)}return null}var L=Object.assign,at=Symbol.for("react.element"),jt=Symbol.for("react.transitional.element"),Mt=Symbol.for("react.portal"),vt=Symbol.for("react.fragment"),bt=Symbol.for("react.strict_mode"),B=Symbol.for("react.profiler"),dt=Symbol.for("react.consumer"),Ct=Symbol.for("react.context"),V=Symbol.for("react.forward_ref"),Y=Symbol.for("react.suspense"),J=Symbol.for("react.suspense_list"),pt=Symbol.for("react.memo"),yt=Symbol.for("react.lazy"),ee=Symbol.for("react.activity"),fe=Symbol.for("react.legacy_hidden"),X=Symbol.for("react.memo_cache_sentinel"),y=Symbol.for("react.view_transition"),k=Symbol.for("react.recoverable"),nt=Symbol.iterator;function et(t){return t===null||typeof t!="object"?null:(t=nt&&t[nt]||t["@@iterator"],typeof t=="function"?t:null)}var xt=Symbol.for("react.client.reference");function Nt(t){if(t==null)return null;if(typeof t=="function")return t.$$typeof===xt?null:t.displayName||t.name||null;if(typeof t=="string")return t;switch(t){case vt:return"Fragment";case B:return"Profiler";case bt:return"StrictMode";case Y:return"Suspense";case J:return"SuspenseList";case ee:return"Activity";case y:return"ViewTransition"}if(typeof t=="object")switch(t.$$typeof){case Mt:return"Portal";case Ct:return t.displayName||"Context";case dt:return(t._context.displayName||"Context")+".Consumer";case V:var e=t.render;return t=t.displayName,t||(t=e.displayName||e.name||"",t=t!==""?"ForwardRef("+t+")":"ForwardRef"),t;case pt:return e=t.displayName||null,e!==null?e:Nt(t.type)||"Memo";case yt:e=t._payload,t=t._init;try{return Nt(t(e))}catch{}}return null}var Ot=Array.isArray,W=r.__CLIENT_INTERNALS_DO_NOT_USE_OR_WARN_USERS_THEY_CANNOT_UPGRADE,mt=h.__DOM_INTERNALS_DO_NOT_USE_OR_WARN_USERS_THEY_CANNOT_UPGRADE,Ne={pending:!1,data:null,method:null,action:Line truncated
     at`)?" (<anonymous>)":-1<l.stack.indexOf("@")?"@unknown:0:0":""}return`
-`+xl+t+Dl}var me=!1;function il(t,e){if(!t||me)return"";me=!0;var l=Error.prepareStackTrace;Error.prepareStackTrace=void 0;try{var a={DetermineComponentFrameRoot:function(){try{if(e){var D=function(){throw Error()};if(Object.defineProperty(D.prototype,"props",{set:function(){throw Error()}}),typeof Reflect=="object"&&Reflect.construct){try{Reflect.construct(D,[])}catch(K){var S=K}Reflect.construct(t,[],D)}else{try{D.call()}catch(K){S=K}D=!1;try{var _=Object.getOwnPropertyDescriptor(t.prototype,"props");Object.defineProperty(t.prototype,"props",{configurable:!0,set:function(){throw Error()}}),D=!0,new t}finally{D&&(_!==void 0?Object.defineProperty(t.prototype,"props",_):delete t.prototype.props)}}}else{try{throw Error()}catch(K){S=K}(D=t())&&typeof D.catch=="function"&&D.catch(function(){})}}catch(K){if(K&&S&&typeof K.stack=="string")return[K.stack,S.stack]}return[null,null]}};a.DetermineComponentFrameRoot.displayName="DetermineComponentFrameRoot";var n=Object.getOwnPropertyDescriptor(a.DetermineComponentFrameRoot,"name");n&&n.configurable&&Object.defineProperty(a.DetermineComponentFrameRoot,"name",{value:"DetermineComponentFrameRoot"});var u=a.DetermineComponentFrameRoot(),s=u[0],o=u[1];if(s&&o){var m=s.split(`
+`+xl+t+Rl}var me=!1;function il(t,e){if(!t||me)return"";me=!0;var l=Error.prepareStackTrace;Error.prepareStackTrace=void 0;try{var a={DetermineComponentFrameRoot:function(){try{if(e){var R=function(){throw Error()};if(Object.defineProperty(R.prototype,"props",{set:function(){throw Error()}}),typeof Reflect=="object"&&Reflect.construct){try{Reflect.construct(R,[])}catch(K){var S=K}Reflect.construct(t,[],R)}else{try{R.call()}catch(K){S=K}R=!1;try{var _=Object.getOwnPropertyDescriptor(t.prototype,"props");Object.defineProperty(t.prototype,"props",{configurable:!0,set:function(){throw Error()}}),R=!0,new t}finally{R&&(_!==void 0?Object.defineProperty(t.prototype,"props",_):delete t.prototype.props)}}}else{try{throw Error()}catch(K){S=K}(R=t())&&typeof R.catch=="function"&&R.catch(function(){})}}catch(K){if(K&&S&&typeof K.stack=="string")return[K.stack,S.stack]}return[null,null]}};a.DetermineComponentFrameRoot.displayName="DetermineComponentFrameRoot";var n=Object.getOwnPropertyDescriptor(a.DetermineComponentFrameRoot,"name");n&&n.configurable&&Object.defineProperty(a.DetermineComponentFrameRoot,"name",{value:"DetermineComponentFrameRoot"});var u=a.DetermineComponentFrameRoot(),s=u[0],o=u[1];if(s&&o){var m=s.split(`
 `),j=o.split(`
 `);for(n=a=0;a<m.length&&!m[a].includes("DetermineComponentFrameRoot");)a++;for(;n<j.length&&!j[n].includes("DetermineComponentFrameRoot");)n++;if(a===m.length||n===j.length)for(a=m.length-1,n=j.length-1;1<=a&&0<=n&&m[a]!==j[n];)n--;for(;1<=a&&0<=n;a--,n--)if(m[a]!==j[n]){if(a!==1||n!==1)do if(a--,n--,0>n||m[a]!==j[n]){var C=`
 `+m[a].replace(" at new "," at ");return t.displayName&&C.includes("<anonymous>")&&(C=C.replace("<anonymous>",t.displayName)),C}while(1<=a&&0<=n);break}}}finally{me=!1,Error.prepareStackTrace=l}return(l=t?t.displayName||t.name:"")?de(l):""}function kl(t,e){switch(t.tag){case 26:case 27:case 5:return de(t.type);case 16:return de("Lazy");case 13:return t.child!==e&&e!==null?de("Suspense Fallback"):de("Suspense");case 19:return de("SuspenseList");case 0:case 15:return il(t.type,!1);case 11:return il(t.type.render,!1);case 1:return il(t.type,!0);case 31:return de("Activity");case 30:return de("ViewTransition");default:return""}}function Fl(t){try{var e="",l=null;do e+=kl(t,l),l=t,t=t.return;while(t);return e}catch(a){return`
 Error generating stack: `+a.message+`
-`+a.stack}}var ue=Object.prototype.hasOwnProperty,jl=i.unstable_scheduleCallback,wl=i.unstable_cancelCallback,Ul=i.unstable_shouldYield,cl=i.unstable_requestPaint,Xt=i.unstable_now,bl=i.unstable_getCurrentPriorityLevel,Tl=i.unstable_ImmediatePriority,_l=i.unstable_UserBlockingPriority,Se=i.unstable_NormalPriority,Wl=i.unstable_LowPriority,$l=i.unstable_IdlePriority,Il=i.log,du=i.unstable_setDisableYieldValue,Pl=null,Ce=null;function sl(t){if(typeof Il=="function"&&du(t),Ce&&typeof Ce.setStrictMode=="function")try{Ce.setStrictMode(Pl,t)}catch{}}var Ae=Math.clz32?Math.clz32:vu,mu=Math.log,hu=Math.LN2;function vu(t){return t>>>=0,t===0?32:31-(mu(t)/hu|0)|0}var pa=256,Sa=262144,xa=4194304;function U(t){var e=t&42;if(e!==0)return e;switch(t&-t){case 1:return 1;case 2:return 2;case 4:return 4;case 8:return 8;case 16:return 16;case 32:return 32;case 64:return 64;case 128:return 128;case 256:case 512:case 1024:case 2048:case 4096:case 8192:case 16384:case 32768:case 65536:case 131072:return t&-t;case 262144:case 524288:case 1048576:case 2097152:return t&3932160;case 4194304:case 8388608:case 16777216:case 33554432:return t&62914560;case 67108864:return 67108864;case 134217728:return 134217728;case 268435456:return 268435456;case 536870912:return 536870912;case 1073741824:return 0;default:return t}}function w(t,e,l){var a=t.pendingLanes;if(a===0)return 0;var n=0,u=t.suspendedLanes,s=t.pingedLanes;t=t.warmLanes;var o=a&134217727;return o!==0?(a=o&~u,a!==0?n=U(a):(s&=o,s!==0?n=U(s):l||(l=o&~t,l!==0&&(n=U(l))))):(o=a&~u,o!==0?n=U(o):s!==0?n=U(s):l||(l=a&~t,l!==0&&(n=U(l)))),n===0?0:e!==0&&e!==n&&(e&u)===0&&(u=n&-n,l=e&-e,u>=l||u===32&&(l&4194048)!==0)?e:n}function P(t,e){return(t.pendingLanes&~(t.suspendedLanes&~t.pingedLanes)&e)===0}function N(t,e){(e&8)!==0&&(e|=e&32);var l=t.entangledLanes;if(l!==0)for(t=t.entanglements,l&=e;0<l;){var a=31-Ae(l),n=1<<a;e|=t[a],l&=~n}return e}function G(t,e){switch(t){case 1:case 2:case 4:case 8:case 64:return e+250;case 16:case 32:case 128:case 256:case 512:case 1024:case 2048:case 4096:case 8192:case 16384:case 32768:case 65536:case 131072:case 262144:case 524288:case 1048576:case 2097152:return e+5e3;case 4194304:case 8388608:case 16777216:case 33554432:return-1;case 67108864:case 134217728:case 268435456:case 536870912:case 1073741824:return-1;default:return-1}}function lt(){var t=xa;return xa<<=1,(xa&62914560)===0&&(xa=4194304),t}function Ut(t){for(var e=[],l=0;31>l;l++)e.push(t);return e}function pt(t,e){t.pendingLanes|=e,e!==268435456&&(t.suspendedLanes=0,t.pingedLanes=0,t.warmLanes=0)}function $t(t,e,l,a,n,u){var s=t.pendingLanes;t.pendingLanes=l,t.suspendedLanes=0,t.pingedLanes=0,t.warmLanes=0,t.expiredLanes&=l,t.entangledLanes&=l,t.errorRecoveryDisabledLanes&=l,t.shellSuspendCounter=0;var o=t.entanglements,m=t.expirationTimes,j=t.hiddenUpdates;for(l=s&~l;0<l;){var C=31-Ae(l),D=1<<C;o[C]=0,m[C]=-1;var S=j[C];if(S!==null)for(j[C]=null,C=0;C<S.length;C++){var _=S[C];_!==null&&(_.lane&=-536870913)}l&=~D}a!==0&&rl(t,a,0),u!==0&&n===0&&t.tag!==0&&(t.suspendedLanes|=u&~(s&~e))}function rl(t,e,l){t.pendingLanes|=e,t.suspendedLanes&=~e;var a=31-Ae(e);t.entangledLanes|=e,t.entanglements[a]=t.entanglements[a]|1073741824|l&261930}function ja(t,e){var l=t.entangledLanes|=e;for(t=t.entanglements;l;){var a=31-Ae(l),n=1<<a;n&e|t[a]&e&&(t[a]|=e),l&=~n}}function di(t,e){var l=e&-e;return l=(l&42)!==0?1:yu(l),(l&(t.suspendedLanes|e))!==0?0:l}function yu(t){switch(t){case 2:t=1;break;case 8:t=4;break;case 32:t=16;break;case 256:case 512:case 1024:case 2048:case 4096:case 8192:case 16384:case 32768:case 65536:case 131072:case 262144:case 524288:case 1048576:case 2097152:case 4194304:case 8388608:case 16777216:case 33554432:t=128;break;case 268435456:t=134217728;break;default:t=0}return t}function Fa(t){return t&=-t,2<t?8<t?(t&134217727)!==0?32:268435456:8:2}function ta(){var t=ht.p;return t!==0?t:(t=window.event,t===void 0?32:Mh(t.type))}function ea(t,e){var l=ht.p;try{return ht.p=t,e()}finally{ht.p=l}}var El=Math.random().toString(36).slice(2),he="__reactFiber$"+El,It="__reactProps$"+El,xe="__reactContainer$"+El,mi="__reactEvents$"+El,av="__reactListeners$"+El,nv="__reactHandles$"+El,_o="__reactResources$"+El,gu="__reactMarker$"+El,hi="__reactLoad$"+El;function vi(t){delete t[he],delete t[It],delete t[av],delete t[nv]}function Wa(t){var e;if(e=t[he])return e;for(var l=t.parentNode;l;){if(e=l[xe]||l[he]){if(l=e.alternate,e.child!==null||l!==null&&l.child!==null)for(t=rh(t);t!==null;){if(l=t[he])return l;t=rh(t)}return e}t=l,l=t.parentNode}return null}function xn(t){if(t=t[he]||t[xe]){var e=t.tag;if(e===5||e===6||e===13||e===31||e===26||e===27||e===3)return t}return null}function pu(t){var e=t.tag;if(e===5||e===26||e===27||e===6)return t.stateNode;throw Error(f(33))}function jn(t){var e=t[_o];return e||(e=t[_o]={hoistableStyles:new Map,hoistableScripts:new Map}),e}function be(t){t[gu]=!0}function Eo(t){t[hi]=void 0}var No=new Set,Co={};function $a(t,e){bn(t,e),bn(t+"Capture",e)}function bn(t,e)Line truncated
-`).replace(L0,"")}function Qm(t,e){return e=Vm(e),Vm(t)===e}function Kt(t,e,l,a,n,u){switch(l){case"children":if(typeof a=="string")e==="body"||e==="textarea"&&a===""||_n(t,a);else if(typeof a=="number"||typeof a=="bigint")e!=="body"&&_n(t,""+a);else return;break;case"className":gi(t,"class",a);break;case"tabIndex":gi(t,"tabindex",a);break;case"dir":case"role":case"viewBox":case"width":case"height":gi(t,l,a);break;case"style":Ho(t,a,u);return;case"data":if(e!=="object"){gi(t,"data",a);break}case"src":case"href":if(a===""&&(e!=="a"||l!=="href")){t.removeAttribute(l);break}if(a==null||typeof a=="function"||typeof a=="symbol"||typeof a=="boolean"){t.removeAttribute(l);break}a=pi(a),t.setAttribute(l,a);break;case"action":case"formAction":if(typeof a=="function"){t.setAttribute(l,"javascript:throw new Error('A React form was unexpectedly submitted. If you called form.submit() manually, consider using form.requestSubmit() instead. If you\\'re trying to use event.stopPropagation() in a submit event handler, consider also calling event.preventDefault().')");break}else typeof u=="function"&&(l==="formAction"?(e!=="input"&&Kt(t,e,"name",n.name,n,null),Kt(t,e,"formEncType",n.formEncType,n,null),Kt(t,e,"formMethod",n.formMethod,n,null),Kt(t,e,"formTarget",n.formTarget,n,null)):(Kt(t,e,"encType",n.encType,n,null),Kt(t,e,"method",n.method,n,null),Kt(t,e,"target",n.target,n,null)));if(a==null||typeof a=="symbol"||typeof a=="boolean"){t.removeAttribute(l);break}a=pi(a),t.setAttribute(l,a);break;case"onClick":a!=null&&(t.onclick=Hl);return;case"onScroll":a!=null&&Dt("scroll",t);return;case"onScrollEnd":a!=null&&Dt("scrollend",t);return;case"dangerouslySetInnerHTML":if(a!=null){if(typeof a!="object"||!("__html"in a))throw Error(f(61));if(l=a.__html,l!=null){if(n.children!=null)throw Error(f(60));(u!=null?u.__html:void 0)!==l&&(t.innerHTML=l)}}break;case"multiple":t.multiple=a&&typeof a!="function"&&typeof a!="symbol";break;case"muted":t.muted=a&&typeof a!="function"&&typeof a!="symbol";break;case"suppressContentEditableWarning":case"suppressHydrationWarning":case"defaultValue":case"defaultChecked":case"innerHTML":case"ref":break;case"autoFocus":break;case"xlinkHref":if(a==null||typeof a=="function"||typeof a=="boolean"||typeof a=="symbol"){t.removeAttribute("xlink:href");break}l=pi(a),t.setAttributeNS("http://www.w3.org/1999/xlink","xlink:href",l);break;case"contentEditable":case"spellCheck":case"draggable":case"value":case"autoReverse":case"externalResourcesRequired":case"focusable":case"preserveAlpha":a!=null&&typeof a!="function"&&typeof a!="symbol"?t.setAttribute(l,a):t.removeAttribute(l);break;case"inert":case"allowFullScreen":case"async":case"autoPlay":case"controls":case"credentialless":case"default":case"defer":case"disabled":case"disablePictureInPicture":case"disableRemotePlayback":case"formNoValidate":case"hidden":case"loop":case"noModule":case"noValidate":case"open":case"playsInline":case"readOnly":case"required":case"reversed":case"scoped":case"seamless":case"itemScope":a&&typeof a!="function"&&typeof a!="symbol"?t.setAttribute(l,""):t.removeAttribute(l);break;case"capture":case"download":a===!0?t.setAttribute(l,""):a!==!1&&a!=null&&typeof a!="function"&&typeof a!="symbol"?t.setAttribute(l,a):t.removeAttribute(l);break;case"cols":case"rows":case"size":case"span":a!=null&&typeof a!="function"&&typeof a!="symbol"&&!isNaN(a)&&1<=a?t.setAttribute(l,a):t.removeAttribute(l);break;case"rowSpan":case"start":a==null||typeof a=="function"||typeof a=="symbol"||isNaN(a)?t.removeAttribute(l):t.setAttribute(l,a);break;case"popover":Dt("beforetoggle",t),Dt("toggle",t),yi(t,"popover",a);break;case"xlinkActuate":la(t,"http://www.w3.org/1999/xlink","xlink:actuate",a);break;case"xlinkArcrole":la(t,"http://www.w3.org/1999/xlink","xlink:arcrole",a);break;case"xlinkRole":la(t,"http://www.w3.org/1999/xlink","xlink:role",a);break;case"xlinkShow":la(t,"http://www.w3.org/1999/xlink","xlink:show",a);break;case"xlinkTitle":la(t,"http://www.w3.org/1999/xlink","xlink:title",a);break;case"xlinkType":la(t,"http://www.w3.org/1999/xlink","xlink:type",a);break;case"xmlBase":la(t,"http://www.w3.org/XML/1998/namespace","xml:base",a);break;case"xmlLang":la(t,"http://www.w3.org/XML/1998/namespace","xml:lang",a);break;case"xmlSpace":la(t,"http://www.w3.org/XML/1998/namespace","xml:space",a);break;case"is":yi(t,"is",a);break;case"innerText":case"textContent":return;default:if(!(2<l.length)||l[0]!=="o"&&l[0]!=="O"||l[1]!=="n"&&l[1]!=="N")l=ov.get(l)||l,yi(t,l,a);else return}qt=!0}function Vr(t,e,l,a,n,u){switch(l){case"style":Ho(t,a,u);return;case"dangerouslySetInnerHTML":if(a!=null){if(typeof a!="object"||!("__html"in a))throw Error(f(61));if(l=a.__html,l!=null){if(n.children!=null)throw Error(f(60));(u!=null?u.__html:void 0)!==l&&(t.innerHTML=l)}}break;case"children":if(typeof a=="string")_n(t,a);else if(typeof a=="number"||typeof a=="bigint")_n(t,""+a);else return;break;case"onScroll":a!=null&&Dt("scroll",t);return;case"onScrollEnd":a!=null&&Dt("scroLine truncated
+`+a.stack}}var ue=Object.prototype.hasOwnProperty,jl=i.unstable_scheduleCallback,wl=i.unstable_cancelCallback,Ul=i.unstable_shouldYield,cl=i.unstable_requestPaint,Xt=i.unstable_now,bl=i.unstable_getCurrentPriorityLevel,Tl=i.unstable_ImmediatePriority,_l=i.unstable_UserBlockingPriority,Se=i.unstable_NormalPriority,Wl=i.unstable_LowPriority,$l=i.unstable_IdlePriority,Il=i.log,du=i.unstable_setDisableYieldValue,Pl=null,Ce=null;function sl(t){if(typeof Il=="function"&&du(t),Ce&&typeof Ce.setStrictMode=="function")try{Ce.setStrictMode(Pl,t)}catch{}}var Ae=Math.clz32?Math.clz32:vu,mu=Math.log,hu=Math.LN2;function vu(t){return t>>>=0,t===0?32:31-(mu(t)/hu|0)|0}var pa=256,Sa=262144,xa=4194304;function U(t){var e=t&42;if(e!==0)return e;switch(t&-t){case 1:return 1;case 2:return 2;case 4:return 4;case 8:return 8;case 16:return 16;case 32:return 32;case 64:return 64;case 128:return 128;case 256:case 512:case 1024:case 2048:case 4096:case 8192:case 16384:case 32768:case 65536:case 131072:return t&-t;case 262144:case 524288:case 1048576:case 2097152:return t&3932160;case 4194304:case 8388608:case 16777216:case 33554432:return t&62914560;case 67108864:return 67108864;case 134217728:return 134217728;case 268435456:return 268435456;case 536870912:return 536870912;case 1073741824:return 0;default:return t}}function w(t,e,l){var a=t.pendingLanes;if(a===0)return 0;var n=0,u=t.suspendedLanes,s=t.pingedLanes;t=t.warmLanes;var o=a&134217727;return o!==0?(a=o&~u,a!==0?n=U(a):(s&=o,s!==0?n=U(s):l||(l=o&~t,l!==0&&(n=U(l))))):(o=a&~u,o!==0?n=U(o):s!==0?n=U(s):l||(l=a&~t,l!==0&&(n=U(l)))),n===0?0:e!==0&&e!==n&&(e&u)===0&&(u=n&-n,l=e&-e,u>=l||u===32&&(l&4194048)!==0)?e:n}function P(t,e){return(t.pendingLanes&~(t.suspendedLanes&~t.pingedLanes)&e)===0}function E(t,e){(e&8)!==0&&(e|=e&32);var l=t.entangledLanes;if(l!==0)for(t=t.entanglements,l&=e;0<l;){var a=31-Ae(l),n=1<<a;e|=t[a],l&=~n}return e}function G(t,e){switch(t){case 1:case 2:case 4:case 8:case 64:return e+250;case 16:case 32:case 128:case 256:case 512:case 1024:case 2048:case 4096:case 8192:case 16384:case 32768:case 65536:case 131072:case 262144:case 524288:case 1048576:case 2097152:return e+5e3;case 4194304:case 8388608:case 16777216:case 33554432:return-1;case 67108864:case 134217728:case 268435456:case 536870912:case 1073741824:return-1;default:return-1}}function lt(){var t=xa;return xa<<=1,(xa&62914560)===0&&(xa=4194304),t}function Ut(t){for(var e=[],l=0;31>l;l++)e.push(t);return e}function gt(t,e){t.pendingLanes|=e,e!==268435456&&(t.suspendedLanes=0,t.pingedLanes=0,t.warmLanes=0)}function $t(t,e,l,a,n,u){var s=t.pendingLanes;t.pendingLanes=l,t.suspendedLanes=0,t.pingedLanes=0,t.warmLanes=0,t.expiredLanes&=l,t.entangledLanes&=l,t.errorRecoveryDisabledLanes&=l,t.shellSuspendCounter=0;var o=t.entanglements,m=t.expirationTimes,j=t.hiddenUpdates;for(l=s&~l;0<l;){var C=31-Ae(l),R=1<<C;o[C]=0,m[C]=-1;var S=j[C];if(S!==null)for(j[C]=null,C=0;C<S.length;C++){var _=S[C];_!==null&&(_.lane&=-536870913)}l&=~R}a!==0&&rl(t,a,0),u!==0&&n===0&&t.tag!==0&&(t.suspendedLanes|=u&~(s&~e))}function rl(t,e,l){t.pendingLanes|=e,t.suspendedLanes&=~e;var a=31-Ae(e);t.entangledLanes|=e,t.entanglements[a]=t.entanglements[a]|1073741824|l&261930}function ja(t,e){var l=t.entangledLanes|=e;for(t=t.entanglements;l;){var a=31-Ae(l),n=1<<a;n&e|t[a]&e&&(t[a]|=e),l&=~n}}function di(t,e){var l=e&-e;return l=(l&42)!==0?1:yu(l),(l&(t.suspendedLanes|e))!==0?0:l}function yu(t){switch(t){case 2:t=1;break;case 8:t=4;break;case 32:t=16;break;case 256:case 512:case 1024:case 2048:case 4096:case 8192:case 16384:case 32768:case 65536:case 131072:case 262144:case 524288:case 1048576:case 2097152:case 4194304:case 8388608:case 16777216:case 33554432:t=128;break;case 268435456:t=134217728;break;default:t=0}return t}function Fa(t){return t&=-t,2<t?8<t?(t&134217727)!==0?32:268435456:8:2}function ta(){var t=mt.p;return t!==0?t:(t=window.event,t===void 0?32:Oh(t.type))}function ea(t,e){var l=mt.p;try{return mt.p=t,e()}finally{mt.p=l}}var El=Math.random().toString(36).slice(2),he="__reactFiber$"+El,It="__reactProps$"+El,xe="__reactContainer$"+El,mi="__reactEvents$"+El,nv="__reactListeners$"+El,uv="__reactHandles$"+El,Eo="__reactResources$"+El,gu="__reactMarker$"+El,hi="__reactLoad$"+El;function vi(t){delete t[he],delete t[It],delete t[nv],delete t[uv]}function Wa(t){var e;if(e=t[he])return e;for(var l=t.parentNode;l;){if(e=l[xe]||l[he]){if(l=e.alternate,e.child!==null||l!==null&&l.child!==null)for(t=oh(t);t!==null;){if(l=t[he])return l;t=oh(t)}return e}t=l,l=t.parentNode}return null}function xn(t){if(t=t[he]||t[xe]){var e=t.tag;if(e===5||e===6||e===13||e===31||e===26||e===27||e===3)return t}return null}function pu(t){var e=t.tag;if(e===5||e===26||e===27||e===6)return t.stateNode;throw Error(f(33))}function jn(t){var e=t[Eo];return e||(e=t[Eo]={hoistableStyles:new Map,hoistableScripts:new Map}),e}function be(t){t[gu]=!0}function No(t){t[hi]=void 0}var Co=new Set,Ao={};function $a(t,e){bn(t,e),bn(t+"Capture",e)}function bn(t,e)Line truncated
+`).replace(Z0,"")}function Xm(t,e){return e=Vm(e),Vm(t)===e}function Kt(t,e,l,a,n,u){switch(l){case"children":if(typeof a=="string")e==="body"||e==="textarea"&&a===""||_n(t,a);else if(typeof a=="number"||typeof a=="bigint")e!=="body"&&_n(t,""+a);else return;break;case"className":gi(t,"class",a);break;case"tabIndex":gi(t,"tabindex",a);break;case"dir":case"role":case"viewBox":case"width":case"height":gi(t,l,a);break;case"style":Bo(t,a,u);return;case"data":if(e!=="object"){gi(t,"data",a);break}case"src":case"href":if(a===""&&(e!=="a"||l!=="href")){t.removeAttribute(l);break}if(a==null||typeof a=="function"||typeof a=="symbol"||typeof a=="boolean"){t.removeAttribute(l);break}a=pi(a),t.setAttribute(l,a);break;case"action":case"formAction":if(typeof a=="function"){t.setAttribute(l,"javascript:throw new Error('A React form was unexpectedly submitted. If you called form.submit() manually, consider using form.requestSubmit() instead. If you\\'re trying to use event.stopPropagation() in a submit event handler, consider also calling event.preventDefault().')");break}else typeof u=="function"&&(l==="formAction"?(e!=="input"&&Kt(t,e,"name",n.name,n,null),Kt(t,e,"formEncType",n.formEncType,n,null),Kt(t,e,"formMethod",n.formMethod,n,null),Kt(t,e,"formTarget",n.formTarget,n,null)):(Kt(t,e,"encType",n.encType,n,null),Kt(t,e,"method",n.method,n,null),Kt(t,e,"target",n.target,n,null)));if(a==null||typeof a=="symbol"||typeof a=="boolean"){t.removeAttribute(l);break}a=pi(a),t.setAttribute(l,a);break;case"onClick":a!=null&&(t.onclick=Hl);return;case"onScroll":a!=null&&Rt("scroll",t);return;case"onScrollEnd":a!=null&&Rt("scrollend",t);return;case"dangerouslySetInnerHTML":if(a!=null){if(typeof a!="object"||!("__html"in a))throw Error(f(61));if(l=a.__html,l!=null){if(n.children!=null)throw Error(f(60));(u!=null?u.__html:void 0)!==l&&(t.innerHTML=l)}}break;case"multiple":t.multiple=a&&typeof a!="function"&&typeof a!="symbol";break;case"muted":t.muted=a&&typeof a!="function"&&typeof a!="symbol";break;case"suppressContentEditableWarning":case"suppressHydrationWarning":case"defaultValue":case"defaultChecked":case"innerHTML":case"ref":break;case"autoFocus":break;case"xlinkHref":if(a==null||typeof a=="function"||typeof a=="boolean"||typeof a=="symbol"){t.removeAttribute("xlink:href");break}l=pi(a),t.setAttributeNS("http://www.w3.org/1999/xlink","xlink:href",l);break;case"contentEditable":case"spellCheck":case"draggable":case"value":case"autoReverse":case"externalResourcesRequired":case"focusable":case"preserveAlpha":a!=null&&typeof a!="function"&&typeof a!="symbol"?t.setAttribute(l,a):t.removeAttribute(l);break;case"inert":case"allowFullScreen":case"async":case"autoPlay":case"controls":case"credentialless":case"default":case"defer":case"disabled":case"disablePictureInPicture":case"disableRemotePlayback":case"formNoValidate":case"hidden":case"loop":case"noModule":case"noValidate":case"open":case"playsInline":case"readOnly":case"required":case"reversed":case"scoped":case"seamless":case"itemScope":a&&typeof a!="function"&&typeof a!="symbol"?t.setAttribute(l,""):t.removeAttribute(l);break;case"capture":case"download":a===!0?t.setAttribute(l,""):a!==!1&&a!=null&&typeof a!="function"&&typeof a!="symbol"?t.setAttribute(l,a):t.removeAttribute(l);break;case"cols":case"rows":case"size":case"span":a!=null&&typeof a!="function"&&typeof a!="symbol"&&!isNaN(a)&&1<=a?t.setAttribute(l,a):t.removeAttribute(l);break;case"rowSpan":case"start":a==null||typeof a=="function"||typeof a=="symbol"||isNaN(a)?t.removeAttribute(l):t.setAttribute(l,a);break;case"popover":Rt("beforetoggle",t),Rt("toggle",t),yi(t,"popover",a);break;case"xlinkActuate":la(t,"http://www.w3.org/1999/xlink","xlink:actuate",a);break;case"xlinkArcrole":la(t,"http://www.w3.org/1999/xlink","xlink:arcrole",a);break;case"xlinkRole":la(t,"http://www.w3.org/1999/xlink","xlink:role",a);break;case"xlinkShow":la(t,"http://www.w3.org/1999/xlink","xlink:show",a);break;case"xlinkTitle":la(t,"http://www.w3.org/1999/xlink","xlink:title",a);break;case"xlinkType":la(t,"http://www.w3.org/1999/xlink","xlink:type",a);break;case"xmlBase":la(t,"http://www.w3.org/XML/1998/namespace","xml:base",a);break;case"xmlLang":la(t,"http://www.w3.org/XML/1998/namespace","xml:lang",a);break;case"xmlSpace":la(t,"http://www.w3.org/XML/1998/namespace","xml:space",a);break;case"is":yi(t,"is",a);break;case"innerText":case"textContent":return;default:if(!(2<l.length)||l[0]!=="o"&&l[0]!=="O"||l[1]!=="n"&&l[1]!=="N")l=fv.get(l)||l,yi(t,l,a);else return}qt=!0}function Qr(t,e,l,a,n,u){switch(l){case"style":Bo(t,a,u);return;case"dangerouslySetInnerHTML":if(a!=null){if(typeof a!="object"||!("__html"in a))throw Error(f(61));if(l=a.__html,l!=null){if(n.children!=null)throw Error(f(60));(u!=null?u.__html:void 0)!==l&&(t.innerHTML=l)}}break;case"children":if(typeof a=="string")_n(t,a);else if(typeof a=="number"||typeof a=="bigint")_n(t,""+a);else return;break;case"onScroll":a!=null&&Rt("scroll",t);return;case"onScrollEnd":a!=null&&Rt("scroLine truncated
 `;Ut&&($t+=Ut+`
-`),pt&&($t+=(Array.isArray(pt)?pt.join(`
-`):String(pt))+`
-`),$t+=JSON.stringify(lt,null,2).slice(0,4e3),Ve($t),Ne("已返回登录信息，见下方")}catch(lt){Ne("发起失败："+lt.message)}},[]),xa=d.useCallback(async()=>{const N=F.trim();if(!N){Z("请填要查配额的用户 id");return}try{const G=await I($.adminQuotaUser(N));Z("用户 "+N.slice(0,8)+"：本月用量 "+su(G.used_usd_micros)+" / 配额 "+su(G.quota_usd_micros)+(G.remaining_usd_micros!==null&&G.remaining_usd_micros!==void 0?"（剩余 "+su(G.remaining_usd_micros)+"）":"")+" ｜ 月份 "+(G.month||""))}catch(G){Z(Uc(G))}},[F]),U=d.useCallback(async(N,G)=>{const lt=N.trim();if(!lt){Z("请填要设置配额的用户 id");return}let Ut;if(!G.trim())Ut=null;else{const pt=Number(G.trim());if(!Number.isFinite(pt)||pt<0){Z("配额金额无效：请输入 >= 0 的美元数，留空表示不限额");return}Ut=Math.round(pt*1e6)}try{const pt=await I($.adminQuotas,"POST",{user_id:lt,quota_usd_micros:Ut});Z("配额已设置：用户 "+lt.slice(0,8)+"：本月用量 "+su(pt.used_usd_micros)+" / 配额 "+su(pt.quota_usd_micros)+(pt.remaining_usd_micros!==null&&pt.remaining_usd_micros!==void 0?"（剩余 "+su(pt.remaining_usd_micros)+"）":"")+" ｜ 月份 "+(pt.month||""))}catch(pt){Z(Uc(pt))}},[]),w=d.useCallback(async()=>{if(window.confirm("确定手动触发 sweep 吗？超阈值的陈旧 running 任务会被标为 interrupted。"))try{const G=(await I($.adminSweep,"POST",{})).swept||[];Z("sweep 完成，清理 "+G.length+" 个任务"+(G.length?"："+G.join("、"):""))}catch(N){Z(Uc(N))}},[]),P=d.useCallback(async()=>{try{const N=await I($.adminBackup,"POST",{});Z("备份完成：backend="+N.backend+" ｜ 路径 "+N.path+" ｜ 大小 "+N.size_bytes+" 字节 ｜ 任务 "+N.task_count+" 行")}catch(N){Z(Uc(N))}},[]);return{keySaved:i,keyState:h,quotaText:g,healthText:O,adminGate:E,adminBody:q,adminResult:H,adminUserId:F,setAdminUserId:it,projects:ft,projectId:st,setProjectId:Ht,projectMsg:V,githubRepos:z,workers:at,workersSummary:Mt,workersError:bt,members:mt,memberMsg:Q,memberError:J,skills:gt,apps:fe,mcpServers:y,skillMsg:nt,skillError:xt,mcpMsg:Ot,mcpOauthMsg:ht,mcpOauthBox:Ja,envs:Qe,envCount:Vt,envMsg:Jl,envRepoLine:ya,envRepoBar:Rl,envRepoMsg:ga,envSelect:Dl,setEnvSelect:de,models:me,modelCustomVisible:kl,refreshHealth:wl,loadQuota:Ul,probeAdmin:cl,refreshProjects:Xt,loadGithubRepos:bl,loadRelayModels:Tl,refreshWorkers:_l,refreshEnvs:Se,refreshMembers:Wl,refreshSkills:$l,saveKeyInput:Il,clearKeyInput:du,createProject:Pl,createEnv:Ce,archiveEnv:sl,saveEnvRepo:Ae,inviteMember:mu,changeMemberRole:hu,removeMember:vu,reloadMcp:pa,mcpOauth:Sa,adminQuota:xa,adminSetQuota:U,adminSweep:w,adminBackup:P}}const po=20;function cg(){const[i,r]=d.useState([]),[h,f]=d.useState(""),[g,A]=d.useState(""),[O,b]=d.useState(""),[E,M]=d.useState(""),[q,p]=d.useState(""),[H,Z]=d.useState(0),[F,it]=d.useState(0),[ft,Et]=d.useState({}),st=d.useRef(0),Ht=d.useRef({status:"",executor:"",q:"",kind:""});Ht.current={status:g,executor:O,q,kind:E};const V=d.useRef(""),ct=d.useCallback(async(Y,J,dt)=>{const gt=Y!==void 0?Y:J;if(!gt){r([]),it(0),Et({});return}V.current=gt;const ee=dt!==void 0?dt:st.current,fe=Ht.current;try{const X=await I($.tasksPage(gt,po,ee*po,fe.status,fe.executor,fe.q,fe.kind));r(X.tasks||[]),it(X.total??(X.tasks||[]).length),Et(X.status_counts||{}),f("")}catch(X){f("加载失败："+X.message)}},[]),z=d.useCallback(Y=>{const J=Math.max(0,Y);st.current=J,Z(J)},[]),L=d.useCallback(Y=>{z(Y),ct(V.current||void 0,void 0,Y)},[ct,z]);d.useEffect(()=>{if(!V.current)return;const Y=setTimeout(()=>{ct(V.current,void 0,0)},300);return()=>clearTimeout(Y)},[g,O,q,E]);const at=d.useCallback(Y=>{A(Y),z(0)},[z]),jt=d.useCallback(Y=>{b(Y),z(0)},[z]),Mt=d.useCallback(Y=>{M(Y),z(0)},[z]),yt=d.useCallback(Y=>{p(Y),z(0)},[z]),bt=d.useCallback(async Y=>{z(0),await ct(Y,void 0,0)},[ct,z]),B=Math.max(1,Math.ceil(F/po)),mt=F===0?"共 0 个任务":"共 "+F+" 个任务，第 "+(H+1)+" / "+B+" 页",Ct=i,Q=d.useCallback(async(Y,J)=>{const dt={...Y};J.length&&(dt.upload_id=await ng(J));const gt=await I($.tasksCreate,"POST",dt);return"任务已建："+se(gt.id)},[]);return{tasks:i,taskError:h,statusFilter:g,setStatusFilter:at,executorFilter:O,setExecutorFilter:jt,kindFilter:E,setKindFilter:Mt,searchText:q,setSearchText:yt,filteredTasks:Ct,taskCountText:mt,refreshTasks:ct,refreshTasksFirstPage:bt,page:H,totalPages:B,taskTotal:F,taskStatusCounts:ft,goToPage:L,dispatch:Q}}function sg(i,r){const[h,f]=d.useState(null),[g,A]=d.useState(""),[O,b]=d.useState(""),[E,M]=d.useState(""),[q,p]=d.useState(""),[H,Z]=d.useState(void 0),[F,it]=d.useState(!1),[ft,Et]=d.useState(""),[st,Ht]=d.useState([]),[V,ct]=d.useState([]),[z,L]=d.useState([]),[at,jt]=d.useState(""),[Mt,yt]=d.useState([]),[bt,B]=d.useState(""),[mt,Ct]=d.useState(""),[Q,Y]=d.useState([]),[J,dt]=d.useState(""),[gt,ee]=d.useState(""),[fe,X]=d.useState(""),[y,k]=d.useState(""),[nt,et]=d.useState([]),[xt,Nt]=d.useState([]),[Ot,W]=d.useState(""),[ht,Ne]=d.useState([]),[Ja,Ve]=d.useState(""),[Qe,Line truncated
+`),gt&&($t+=(Array.isArray(gt)?gt.join(`
+`):String(gt))+`
+`),$t+=JSON.stringify(lt,null,2).slice(0,4e3),Qe($t),Ne("已返回登录信息，见下方")}catch(lt){Ne("发起失败："+lt.message)}},[]),xa=d.useCallback(async()=>{const E=F.trim();if(!E){Z("请填要查配额的用户 id");return}try{const G=await I($.adminQuotaUser(E));Z("用户 "+E.slice(0,8)+"：本月用量 "+su(G.used_usd_micros)+" / 配额 "+su(G.quota_usd_micros)+(G.remaining_usd_micros!==null&&G.remaining_usd_micros!==void 0?"（剩余 "+su(G.remaining_usd_micros)+"）":"")+" ｜ 月份 "+(G.month||""))}catch(G){Z(Uc(G))}},[F]),U=d.useCallback(async(E,G)=>{const lt=E.trim();if(!lt){Z("请填要设置配额的用户 id");return}let Ut;if(!G.trim())Ut=null;else{const gt=Number(G.trim());if(!Number.isFinite(gt)||gt<0){Z("配额金额无效：请输入 >= 0 的美元数，留空表示不限额");return}Ut=Math.round(gt*1e6)}try{const gt=await I($.adminQuotas,"POST",{user_id:lt,quota_usd_micros:Ut});Z("配额已设置：用户 "+lt.slice(0,8)+"：本月用量 "+su(gt.used_usd_micros)+" / 配额 "+su(gt.quota_usd_micros)+(gt.remaining_usd_micros!==null&&gt.remaining_usd_micros!==void 0?"（剩余 "+su(gt.remaining_usd_micros)+"）":"")+" ｜ 月份 "+(gt.month||""))}catch(gt){Z(Uc(gt))}},[]),w=d.useCallback(async()=>{if(window.confirm("确定手动触发 sweep 吗？超阈值的陈旧 running 任务会被标为 interrupted。"))try{const G=(await I($.adminSweep,"POST",{})).swept||[];Z("sweep 完成，清理 "+G.length+" 个任务"+(G.length?"："+G.join("、"):""))}catch(E){Z(Uc(E))}},[]),P=d.useCallback(async()=>{try{const E=await I($.adminBackup,"POST",{});Z("备份完成：backend="+E.backend+" ｜ 路径 "+E.path+" ｜ 大小 "+E.size_bytes+" 字节 ｜ 任务 "+E.task_count+" 行")}catch(E){Z(Uc(E))}},[]);return{keySaved:i,keyState:h,quotaText:g,healthText:O,adminGate:N,adminBody:q,adminResult:H,adminUserId:F,setAdminUserId:it,projects:ft,projectId:st,setProjectId:Ht,projectMsg:Q,githubRepos:z,workers:at,workersSummary:Mt,workersError:bt,members:dt,memberMsg:V,memberError:J,skills:yt,apps:fe,mcpServers:y,skillMsg:nt,skillError:xt,mcpMsg:Ot,mcpOauthMsg:mt,mcpOauthBox:Ja,envs:Ve,envCount:Qt,envMsg:Jl,envRepoLine:ya,envRepoBar:Dl,envRepoMsg:ga,envSelect:Rl,setEnvSelect:de,models:me,modelCustomVisible:kl,refreshHealth:wl,loadQuota:Ul,probeAdmin:cl,refreshProjects:Xt,loadGithubRepos:bl,loadRelayModels:Tl,refreshWorkers:_l,refreshEnvs:Se,refreshMembers:Wl,refreshSkills:$l,saveKeyInput:Il,clearKeyInput:du,createProject:Pl,createEnv:Ce,archiveEnv:sl,saveEnvRepo:Ae,inviteMember:mu,changeMemberRole:hu,removeMember:vu,reloadMcp:pa,mcpOauth:Sa,adminQuota:xa,adminSetQuota:U,adminSweep:w,adminBackup:P}}const po=20;function sg(){const[i,r]=d.useState([]),[h,f]=d.useState(""),[g,A]=d.useState(""),[O,b]=d.useState(""),[N,M]=d.useState(""),[q,p]=d.useState(""),[H,Z]=d.useState(0),[F,it]=d.useState(0),[ft,Et]=d.useState({}),st=d.useRef(0),Ht=d.useRef({status:"",executor:"",q:"",kind:""});Ht.current={status:g,executor:O,q,kind:N};const Q=d.useRef(""),ct=d.useCallback(async(Y,J,pt)=>{const yt=Y!==void 0?Y:J;if(!yt){r([]),it(0),Et({});return}Q.current=yt;const ee=pt!==void 0?pt:st.current,fe=Ht.current;try{const X=await I($.tasksPage(yt,po,ee*po,fe.status,fe.executor,fe.q,fe.kind));r(X.tasks||[]),it(X.total??(X.tasks||[]).length),Et(X.status_counts||{}),f("")}catch(X){f("加载失败："+X.message)}},[]),z=d.useCallback(Y=>{const J=Math.max(0,Y);st.current=J,Z(J)},[]),L=d.useCallback(Y=>{z(Y),ct(Q.current||void 0,void 0,Y)},[ct,z]);d.useEffect(()=>{if(!Q.current)return;const Y=setTimeout(()=>{ct(Q.current,void 0,0)},300);return()=>clearTimeout(Y)},[g,O,q,N]);const at=d.useCallback(Y=>{A(Y),z(0)},[z]),jt=d.useCallback(Y=>{b(Y),z(0)},[z]),Mt=d.useCallback(Y=>{M(Y),z(0)},[z]),vt=d.useCallback(Y=>{p(Y),z(0)},[z]),bt=d.useCallback(async Y=>{z(0),await ct(Y,void 0,0)},[ct,z]),B=Math.max(1,Math.ceil(F/po)),dt=F===0?"共 0 个任务":"共 "+F+" 个任务，第 "+(H+1)+" / "+B+" 页",Ct=i,V=d.useCallback(async(Y,J)=>{const pt={...Y};J.length&&(pt.upload_id=await ug(J));const yt=await I($.tasksCreate,"POST",pt);return"任务已建："+se(yt.id)},[]);return{tasks:i,taskError:h,statusFilter:g,setStatusFilter:at,executorFilter:O,setExecutorFilter:jt,kindFilter:N,setKindFilter:Mt,searchText:q,setSearchText:vt,filteredTasks:Ct,taskCountText:dt,refreshTasks:ct,refreshTasksFirstPage:bt,page:H,totalPages:B,taskTotal:F,taskStatusCounts:ft,goToPage:L,dispatch:V}}function rg(i,r){const[h,f]=d.useState(null),[g,A]=d.useState(""),[O,b]=d.useState(""),[N,M]=d.useState(""),[q,p]=d.useState(""),[H,Z]=d.useState(void 0),[F,it]=d.useState(!1),[ft,Et]=d.useState(""),[st,Ht]=d.useState([]),[Q,ct]=d.useState([]),[z,L]=d.useState([]),[at,jt]=d.useState(""),[Mt,vt]=d.useState([]),[bt,B]=d.useState(""),[dt,Ct]=d.useState(""),[V,Y]=d.useState([]),[J,pt]=d.useState(""),[yt,ee]=d.useState(""),[fe,X]=d.useState(""),[y,k]=d.useState(""),[nt,et]=d.useState([]),[xt,Nt]=d.useState([]),[Ot,W]=d.useState(""),[mt,Ne]=d.useState([]),[Ja,Qe]=d.useState(""),[Ve,Line truncated
 
 `);Fa=ea.pop()||"";for(const El of ea){const he=El.split(`
 `).filter(It=>It.indexOf("data: ")===0).map(It=>It.slice(6)).join(`
-`);if(he)try{const It=JSON.parse(he);if(It.type==="snapshot")N=It.entries||[],Object.keys(G).forEach(xe=>delete G[xe]),N.forEach((xe,mi)=>{xe.id&&(G[xe.id]=mi)}),lt=It.note||"",Y([...N]),dt(lt),Fl(U);else if(It.type==="entry"){const xe=It.entry;xe.id&&xe.id in G?N[G[xe.id]]=xe:(xe.id&&(G[xe.id]=N.length),N.push(xe)),Y([...N]),Fl(U)}else It.type==="done"&&(Ut=!0,pt=It.status,ee(pt))}catch{}}if(Ut)break}}catch($t){if($t&&$t.name==="AbortError")return;dt("链路流中断："+$t.message);return}Ut&&r()},[il,Fl,r]),Il=d.useCallback(async U=>{il();try{const w=await I($.task(U));f(w);let P="";w.result_text&&(P+=`=== result ===
+`);if(he)try{const It=JSON.parse(he);if(It.type==="snapshot")E=It.entries||[],Object.keys(G).forEach(xe=>delete G[xe]),E.forEach((xe,mi)=>{xe.id&&(G[xe.id]=mi)}),lt=It.note||"",Y([...E]),pt(lt),Fl(U);else if(It.type==="entry"){const xe=It.entry;xe.id&&xe.id in G?E[G[xe.id]]=xe:(xe.id&&(G[xe.id]=E.length),E.push(xe)),Y([...E]),Fl(U)}else It.type==="done"&&(Ut=!0,gt=It.status,ee(gt))}catch{}}if(Ut)break}}catch($t){if($t&&$t.name==="AbortError")return;pt("链路流中断："+$t.message);return}Ut&&r()},[il,Fl,r]),Il=d.useCallback(async U=>{il();try{const w=await I($.task(U));f(w);let P="";w.result_text&&(P+=`=== result ===
 `+w.result_text.slice(0,8e3)+`
 `),w.error_text&&(P+=`=== error ===
 `+w.error_text.slice(0,8e3)+`
-`),P||(P="（暂无 result/error 输出）"),A(P),p(""),Z(void 0),wl(U),it(!1),Et(""),Ve(""),re(""),Wl(w.status);const N=i(w.project_id),G=N==="maintainer"||N==="owner",lt=N==="contributor"||G,Ut=ou.includes(w.status),pt=[];["failed","interrupted","merge-failed"].includes(w.status)&&G||pt.push("重试：不可用——仅 failed/interrupted/merge-failed 可重试"+(G?"":"，且仅 maintainer 可重试")),!Ut&&lt||pt.push("取消：不可用——"+(Ut?"终态任务不可取消":"仅项目成员（contributor 及以上）可取消")),w.status==="completed"&&G||pt.push("合并：不可用——仅 completed 可合并"+(G?"":"，且仅 maintainer 可合并")),w.status==="merged"&&G||pt.push("提 PR：不可用——仅 merged 可提 PR"+(G?"":"，且仅 maintainer 可提 PR")),M(pt.join("；")),b(""),$l(U,w.status),kl(U),ue(w),jl(w),cl(U),Ul(U),Tl(U),_l(U),Se(U),Xt(U),bl(U)}catch(w){f(null),A("加载失败："+w.message)}},[il,$l,kl,ue,jl,cl,Ul,Tl,_l,Se,Xt,bl,wl,i]),du=d.useCallback(async()=>{const U=me.current;if(U){try{const w=await I($.task(U.id));f(w);let P="";w.result_text&&(P+=`=== result ===
+`),P||(P="（暂无 result/error 输出）"),A(P),p(""),Z(void 0),wl(U),it(!1),Et(""),Qe(""),re(""),Wl(w.status);const E=i(w.project_id),G=E==="maintainer"||E==="owner",lt=E==="contributor"||G,Ut=ou.includes(w.status),gt=[];["failed","interrupted","merge-failed"].includes(w.status)&&G||gt.push("重试：不可用——仅 failed/interrupted/merge-failed 可重试"+(G?"":"，且仅 maintainer 可重试")),!Ut&&lt||gt.push("取消：不可用——"+(Ut?"终态任务不可取消":"仅项目成员（contributor 及以上）可取消")),w.status==="completed"&&G||gt.push("合并：不可用——仅 completed 可合并"+(G?"":"，且仅 maintainer 可合并")),w.status==="merged"&&G||gt.push("提 PR：不可用——仅 merged 可提 PR"+(G?"":"，且仅 maintainer 可提 PR")),M(gt.join("；")),b(""),$l(U,w.status),kl(U),ue(w),jl(w),cl(U),Ul(U),Tl(U),_l(U),Se(U),Xt(U),bl(U)}catch(w){f(null),A("加载失败："+w.message)}},[il,$l,kl,ue,jl,cl,Ul,Tl,_l,Se,Xt,bl,wl,i]),du=d.useCallback(async()=>{const U=me.current;if(U){try{const w=await I($.task(U.id));f(w);let P="";w.result_text&&(P+=`=== result ===
 `+w.result_text.slice(0,8e3)+`
 `),w.error_text&&(P+=`=== error ===
 `+w.error_text.slice(0,8e3)+`
-`),A(P||"（暂无 result/error 输出）")}catch{}Ul(U.id),cl(U.id),Xt(U.id),bl(U.id),ue(U),jl(U),kl(U.id),Tl(U.id),_l(U.id),Se(U.id),wl(U.id)}},[Ul,cl,Xt,bl,ue,jl,kl,Tl,_l,Se,wl]),Pl=d.useCallback(async U=>{const w=me.current;if(!w)return;const P={cancel:"确定取消该任务吗？",merge:"确定把 completed 任务标为 merged 吗？",pr:"确定为该任务提 PR 吗？（会在仓库真实建 PR）"};if(!(P[U]&&!window.confirm(P[U])))try{const N=await I($.taskAction(w.id,U),"POST",{});b(U+" 已提交："+JSON.stringify(N).slice(0,300)),r(),await Il(w.id)}catch(N){b(U+" 失败："+N.message)}},[Il,r]),Ce=d.useCallback(async()=>{const U=me.current;if(U)try{const w=await I($.taskCost(U.id));p(JSON.stringify(w,null,2).slice(0,4e3))}catch(w){p("查成本失败："+w.message)}},[]),sl=d.useCallback(async U=>{const w=me.current;if(w){if(!U.trim()){Et("分支消息必填");return}if(!ou.includes(w.status)){Et("仅终态任务可分支");return}try{const P=await I($.taskFork(w.id),"POST",{message:U.trim()});Et("分支任务已建："+P.id.slice(0,8)),r()}catch(P){Et("分支失败："+P.message)}}},[r]),Ae=d.useCallback(async U=>{const w=me.current;if(w)try{await I($.taskReviews(w.id),"POST",U),B("评审已登记（requested）"),await Xt(w.id)}catch(P){B("登记评审需求失败："+P.message)}},[Xt]),mu=d.useCallback(U=>{const w=me.current;if(!w)return;const P=window.prompt("输入该条评审的 findings（将写回记录并标为 completed）：");P!==null&&I($.taskReviewFindings(w.id,U),"POST",{findings:P}).then(()=>void Xt(w.id)).catch(N=>B("写 findings 失败："+N.message))},[Xt]),hu=d.useCallback((U,w)=>{const P=me.current;if(!P)return;const N=w==="approved"?"approve":"deny";I($.taskApprovalDecision(P.id,U,N),"POST",{}).then(()=>{W("已记录"+(w==="approved"?"允许":"拒绝")+"（当前版本只留回执，不拦截实时行为）"),bl(P.id)}).catch(G=>W("决定失败："+G.message))},[bl]),vu=d.useCallback(async(U,w,P)=>{const N=me.current;if(N){if(!w.trim()){Ve("目标任务 id 不能为空");return}if(!P.trim()){Ve("消息正文不能为空");return}try{const G=await I($.taskMessagesTo(w.trim()),"POST",{from_task_id:N.id,body:P.trim(),mode:U});Ve("已发送（"+G.delivery+"）"),await Tl(N.id)}catch(G){Ve("发送失败："+G.message)}}},[Tl]),pa=d.useCallback((U,w)=>{const P=me.current;if(!P)return;if(!["completed","failed","interrupted"].includes(P.status)){re("仅 completed/failed/interrupted 任务可操作线程（merged/merge-failed 不可改，服务端同样 409）");return}const N={};if(U==="rename"){if(!w.trim()){re("新线程名不能为空");return}N.name=w.trim()}I($.taskThreadAction(P.id,U),"POST",N).then(G=>{re(U+" 已提交："+JSON.stringify(G).slice(0,300)),_l(P.id),Se(P.id)}).catch(G=>re(U+" 失败："+G.message))},[_l,Se]),Sa=d.useCallback(async U=>{const w=me.current;if(!w)return;const P=U.trim();if(!P){Fe("消息不能为空");return}try{ou.includes(w.status)&&w.status!=="merged"?(await I($.taskContinue(w.id),"POST",{message:P}),Fe("已重新排队，同一会话继续"),r(),await Il(w.id)):["queued","running"].includes(w.status)?(await I($.taskFollowups(w.id),"POST",{body:P,mode:"direct"}),Fe("已直接发送"),await Ul(w.id),await cl(w.id)):Fe("merged/merge-failed 任务不可继续，也不可发后续消息")}catch(N){Fe("发送失败："+N.message)}},[Il,r,Ul,cl]),xa=d.useCallback(async()=>{const U=me.current;if(!U){k("先选一个任务");return}try{const w=await I($.taskTrace(U.id)),P=new Blob([JSON.stringify({task_id:U.id,status:w.status,note:w.note||"",count:(w.entries||[]).length,entries:w.entries||[]},null,2)],{type:"application/json"}),N=document.createElement("a");N.href=URL.createObjectURL(P),N.download="trace-"+U.id.slice(0,8)+".json",document.body.appendChild(N),N.click(),N.remove(),setTimeout(()=>URL.revokeObjectURL(N.href),1e3),k("已下载完整链路 "+(w.entries||[]).length+" 条")}catch(w){k("下载失败："+w.message)}},[]);return d.useEffect(()=>()=>il(),[il]),{currentTask:h,detailBody:g,actionMsg:O,actionReasons:E,costBox:q,costSummary:H,forkVisible:F,setForkVisible:it,forkMsg:ft,coordChildren:st,sideThreads:V,agents:z,agentsNote:at,reviews:Mt,reviewMsg:bt,reviewError:mt,traceEntries:Q,traceNote:J,traceDone:gt,traceKind:fe,setTraceKind:X,traceMsg:y,followups:nt,approvals:xt,approvalMsg:Ot,peerMessages:ht,peerMsg:Ja,threadText:Qe,threadGateNote:Vt,threadMsg:Jl,threadList:ya,chatMsg:Rl,chatHistory:ga,showDetail:Il,refreshDetailLists:du,doAction:Pl,taskCost:Ce,forkTask:sl,postReview:Ae,submitFindings:mu,decideApproval:hu,postPeer:vu,threadAction:pa,sendChatMessage:Sa,downloadTrace:xa,refreshReviews:()=>void Xt(),refreshApprovals:()=>void bl()}}function rg(i){const[r,h]=d.useState([]),[f,g]=d.useState(""),[A,O]=d.useState(null),[b,E]=d.useState(""),[M,q]=d.useState(null),[p,H]=d.useState(""),Z=d.useCallback(async V=>{const ct=V!==void 0?V:i();if(!ct){h([]);return}try{const z=await I($.projectAutomations(ct));h(z.automations||[])}catch(z){g("自动化Line truncated
-（链路摘要已截断至 300 字，完整回复见右侧任务结果）`:f,label:"助手"}}if(i.kind==="exec"||i.kind==="file"||i.kind==="tool"||i.kind==="call"){const f=i.kind==="exec"?"命令":i.kind==="file"?"文件":i.kind==="tool"?"工具":"调用";return{id:h,role:"tool",kind:i.kind,text:xo(i),label:f}}return i.kind==="plan"?{id:h,role:"status",kind:i.kind,text:i.text||""}:i.kind==="reasoning"?{id:h,role:"status",kind:i.kind,text:"思考："+(i.summary||"")}:i.kind==="agent-start"?{id:h,role:"status",kind:i.kind,text:"子代理开始："+(i.name||"")+(i.prompt?"（"+i.prompt+"）":"")}:i.kind==="agent-done"?{id:h,role:"status",kind:i.kind,text:"子代理结束："+(i.name||"")+" "+(i.status||"")}:{id:h,role:"status",kind:i.kind,text:xo(i)}}function Ng(){const i=Gt(),r=i.currentTask,h=d.useMemo(()=>{if(!r)return[];let E;if(i.chatHistory){E=i.chatHistory.messages.map(F=>({id:F.id,role:F.role,text:F.text,label:F.label,kind:F.kind}));const H=new Set(E.map(F=>F.id)),Z=i.traceEntries.filter(F=>F.id&&!H.has(F.id)&&!String(F.id).startsWith("fu-")).map((F,it)=>Jh(F,it));E=[...E,...Z]}else{const H=r.prompt?[{id:"task-prompt",role:"user",text:r.prompt}]:[],Z=i.traceEntries.filter(it=>!String(it.id||"").startsWith("fu-")).map((it,ft)=>Jh(it,ft)),F=i.followups.map((it,ft)=>({id:"followup-"+ft,role:"user",text:String(it.body||""),label:"后续消息"}));E=[...H,...Z,...F]}const M=i.traceKind,q=M?E.filter(H=>H.role==="user"||!H.kind||H.kind===M):E,p=i.traceDone?[{id:"trace-done",role:"status",text:"链路已结束（"+i.traceDone+"）"}]:[];return[...q,...p]},[r,i.chatHistory,i.traceEntries,i.followups,i.traceKind,i.traceDone]);if(!r)return c.jsx("div",{className:"muted",children:"点任务行查看详情后，这里显示继续会话"});const f=ou.includes(r.status),g=["queued","running"].includes(r.status),A=f||g,O=f?"终态任务：发送走继续接口（同一会话再跑一轮）":g?"运行中/排队中：发送走后续消息直接发送（跑完当前轮后优先执行）":"merged/merge-failed 任务不可继续，也不可发后续消息",b=i.chatHistory?i.chatHistory.legacy_continue_count??null:null;return c.jsxs("div",{className:"chat-column",children:[c.jsx("div",{className:"muted",children:"实时对话"}),c.jsxs(zt,{children:[c.jsxs("select",{"aria-label":"链路类型",value:i.traceKind,onChange:E=>i.setTraceKind(E.target.value),children:[c.jsx("option",{value:"",children:"链路类型：全部"}),["exec","file","call","tool","message","reasoning","plan","agent-start","agent-done"].map(E=>c.jsx("option",{value:E,children:E==="exec"?"命令":E==="file"?"文件":E==="call"?"调用":E==="tool"?"工具":E==="message"?"消息":E==="reasoning"?"思考":E==="plan"?"计划":"子代理"},E))]}),c.jsx("button",{onClick:i.downloadTrace,children:"下载完整链路"}),c.jsx("span",{className:"muted",children:i.traceMsg})]}),i.traceNote?c.jsx("div",{children:c.jsx("span",{className:"err",children:i.traceNote})}):null,b!==null&&b>0?c.jsxs("div",{className:"muted",children:["此前有 ",b," 条继续消息发生在持久化之前，未入库，上面历史不完整；部署后新发的继续消息会正常显示。"]}):null,i.chatHistory&&i.chatHistory.trace_note?c.jsx("div",{className:"muted",children:i.chatHistory.trace_note}):null,c.jsx(_g,{messages:h,empty:"（暂无会话消息）"}),c.jsx(Eg,{disabled:!A,placeholder:"消息",onSend:E=>void i.sendChatMessage(E)}),c.jsxs("div",{className:"muted",children:[O,"。",i.chatMsg]}),c.jsx("div",{className:"muted",children:"对话时间线：首条是本任务 prompt（用户）；助手回复、命令/文件/工具/调用、计划/思考/子代理开始结束都在同一列里，不再另起一份链路名单。流式进行中时新条目实时追加；你在底部时自动跟随，往上翻时暂停跟随，点“回到最新”恢复。"})]})}function Cg(){return Gt().currentTask?c.jsx("div",{className:"conversation",children:c.jsx(Ng,{})}):c.jsx("div",{className:"conversation",children:c.jsx("div",{className:"muted",children:"在任务列表里点一条任务，对话和详情就切到该任务；也可以在上面派发一个新任务。"})})}function Ag(){const i=Gt(),r=i.currentTask,[h,f]=d.useState("");if(!r)return null;const g=ou.includes(r.status),A=["failed","interrupted","merge-failed"].includes(r.status),O=r.kind==="side";return c.jsxs(c.Fragment,{children:[c.jsxs(zt,{children:[c.jsx("button",{disabled:!A,title:A?"":"仅 failed/interrupted/merge-failed 可重试",onClick:()=>i.doAction("retry"),children:"重试"}),c.jsx("button",{className:"danger",disabled:g,title:g?"终态任务不可取消":"",onClick:()=>i.doAction("cancel"),children:"取消"}),O?null:c.jsxs(c.Fragment,{children:[c.jsx("button",{disabled:r.status!=="completed",title:r.status!=="completed"?"仅 completed 可合并":"",onClick:()=>i.doAction("merge"),children:"合并（completed → merged）"}),c.jsx("button",{disabled:r.status!=="merged",title:r.status!=="merged"?"仅 merged 可提 Line truncated
+`),A(P||"（暂无 result/error 输出）")}catch{}Ul(U.id),cl(U.id),Xt(U.id),bl(U.id),ue(U),jl(U),kl(U.id),Tl(U.id),_l(U.id),Se(U.id),wl(U.id)}},[Ul,cl,Xt,bl,ue,jl,kl,Tl,_l,Se,wl]),Pl=d.useCallback(async U=>{const w=me.current;if(!w)return;const P={cancel:"确定取消该任务吗？",merge:"确定把 completed 任务标为 merged 吗？",pr:"确定为该任务提 PR 吗？（会在仓库真实建 PR）"};if(!(P[U]&&!window.confirm(P[U])))try{const E=await I($.taskAction(w.id,U),"POST",{});b(U+" 已提交："+JSON.stringify(E).slice(0,300)),r(),await Il(w.id)}catch(E){b(U+" 失败："+E.message)}},[Il,r]),Ce=d.useCallback(async()=>{const U=me.current;if(U)try{const w=await I($.taskCost(U.id));p(JSON.stringify(w,null,2).slice(0,4e3))}catch(w){p("查成本失败："+w.message)}},[]),sl=d.useCallback(async U=>{const w=me.current;if(w){if(!U.trim()){Et("分支消息必填");return}if(!ou.includes(w.status)){Et("仅终态任务可分支");return}try{const P=await I($.taskFork(w.id),"POST",{message:U.trim()});Et("分支任务已建："+P.id.slice(0,8)),r()}catch(P){Et("分支失败："+P.message)}}},[r]),Ae=d.useCallback(async U=>{const w=me.current;if(w)try{await I($.taskReviews(w.id),"POST",U),B("评审已登记（requested）"),await Xt(w.id)}catch(P){B("登记评审需求失败："+P.message)}},[Xt]),mu=d.useCallback(U=>{const w=me.current;if(!w)return;const P=window.prompt("输入该条评审的 findings（将写回记录并标为 completed）：");P!==null&&I($.taskReviewFindings(w.id,U),"POST",{findings:P}).then(()=>void Xt(w.id)).catch(E=>B("写 findings 失败："+E.message))},[Xt]),hu=d.useCallback((U,w)=>{const P=me.current;if(!P)return;const E=w==="approved"?"approve":"deny";I($.taskApprovalDecision(P.id,U,E),"POST",{}).then(()=>{W("已记录"+(w==="approved"?"允许":"拒绝")+"（当前版本只留回执，不拦截实时行为）"),bl(P.id)}).catch(G=>W("决定失败："+G.message))},[bl]),vu=d.useCallback(async(U,w,P)=>{const E=me.current;if(E){if(!w.trim()){Qe("目标任务 id 不能为空");return}if(!P.trim()){Qe("消息正文不能为空");return}try{const G=await I($.taskMessagesTo(w.trim()),"POST",{from_task_id:E.id,body:P.trim(),mode:U});Qe("已发送（"+G.delivery+"）"),await Tl(E.id)}catch(G){Qe("发送失败："+G.message)}}},[Tl]),pa=d.useCallback((U,w)=>{const P=me.current;if(!P)return;if(!["completed","failed","interrupted"].includes(P.status)){re("仅 completed/failed/interrupted 任务可操作线程（merged/merge-failed 不可改，服务端同样 409）");return}const E={};if(U==="rename"){if(!w.trim()){re("新线程名不能为空");return}E.name=w.trim()}I($.taskThreadAction(P.id,U),"POST",E).then(G=>{re(U+" 已提交："+JSON.stringify(G).slice(0,300)),_l(P.id),Se(P.id)}).catch(G=>re(U+" 失败："+G.message))},[_l,Se]),Sa=d.useCallback(async U=>{const w=me.current;if(!w)return;const P=U.trim();if(!P){Fe("消息不能为空");return}try{ou.includes(w.status)&&w.status!=="merged"?(await I($.taskContinue(w.id),"POST",{message:P}),Fe("已重新排队，同一会话继续"),r(),await Il(w.id)):["queued","running"].includes(w.status)?(await I($.taskFollowups(w.id),"POST",{body:P,mode:"direct"}),Fe("已直接发送"),await Ul(w.id),await cl(w.id)):Fe("merged/merge-failed 任务不可继续，也不可发后续消息")}catch(E){Fe("发送失败："+E.message)}},[Il,r,Ul,cl]),xa=d.useCallback(async()=>{const U=me.current;if(!U){k("先选一个任务");return}try{const w=await I($.taskTrace(U.id)),P=new Blob([JSON.stringify({task_id:U.id,status:w.status,note:w.note||"",count:(w.entries||[]).length,entries:w.entries||[]},null,2)],{type:"application/json"}),E=document.createElement("a");E.href=URL.createObjectURL(P),E.download="trace-"+U.id.slice(0,8)+".json",document.body.appendChild(E),E.click(),E.remove(),setTimeout(()=>URL.revokeObjectURL(E.href),1e3),k("已下载完整链路 "+(w.entries||[]).length+" 条")}catch(w){k("下载失败："+w.message)}},[]);return d.useEffect(()=>()=>il(),[il]),{currentTask:h,detailBody:g,actionMsg:O,actionReasons:N,costBox:q,costSummary:H,forkVisible:F,setForkVisible:it,forkMsg:ft,coordChildren:st,sideThreads:Q,agents:z,agentsNote:at,reviews:Mt,reviewMsg:bt,reviewError:dt,traceEntries:V,traceNote:J,traceDone:yt,traceKind:fe,setTraceKind:X,traceMsg:y,followups:nt,approvals:xt,approvalMsg:Ot,peerMessages:mt,peerMsg:Ja,threadText:Ve,threadGateNote:Qt,threadMsg:Jl,threadList:ya,chatMsg:Dl,chatHistory:ga,showDetail:Il,refreshDetailLists:du,doAction:Pl,taskCost:Ce,forkTask:sl,postReview:Ae,submitFindings:mu,decideApproval:hu,postPeer:vu,threadAction:pa,sendChatMessage:Sa,downloadTrace:xa,refreshReviews:()=>void Xt(),refreshApprovals:()=>void bl()}}function og(i){const[r,h]=d.useState([]),[f,g]=d.useState(""),[A,O]=d.useState(null),[b,N]=d.useState(""),[M,q]=d.useState(null),[p,H]=d.useState(""),Z=d.useCallback(async Q=>{const ct=Q!==void 0?Q:i();if(!ct){h([]);return}try{const z=await I($.projectAutomations(ct));h(z.automations||[])}catch(z){g("自动化Line truncated
+（链路摘要已截断至 300 字，完整回复见右侧任务结果）`:f,label:"助手"}}if(i.kind==="exec"||i.kind==="file"||i.kind==="tool"||i.kind==="call"){const f=i.kind==="exec"?"命令":i.kind==="file"?"文件":i.kind==="tool"?"工具":"调用";return{id:h,role:"tool",kind:i.kind,text:xo(i),label:f}}return i.kind==="plan"?{id:h,role:"status",kind:i.kind,text:i.text||""}:i.kind==="reasoning"?{id:h,role:"status",kind:i.kind,text:"思考："+(i.summary||"")}:i.kind==="agent-start"?{id:h,role:"status",kind:i.kind,text:"子代理开始："+(i.name||"")+(i.prompt?"（"+i.prompt+"）":"")}:i.kind==="agent-done"?{id:h,role:"status",kind:i.kind,text:"子代理结束："+(i.name||"")+" "+(i.status||"")}:{id:h,role:"status",kind:i.kind,text:xo(i)}}function Cg(){const i=Gt(),r=i.currentTask,h=d.useMemo(()=>{if(!r)return[];let N;if(i.chatHistory){N=i.chatHistory.messages.map(F=>({id:F.id,role:F.role,text:F.text,label:F.label,kind:F.kind}));const H=new Set(N.map(F=>F.id)),Z=i.traceEntries.filter(F=>F.id&&!H.has(F.id)&&!String(F.id).startsWith("fu-")).map((F,it)=>Fh(F,it));N=[...N,...Z]}else{const H=r.prompt?[{id:"task-prompt",role:"user",text:r.prompt}]:[],Z=i.traceEntries.filter(it=>!String(it.id||"").startsWith("fu-")).map((it,ft)=>Fh(it,ft)),F=i.followups.map((it,ft)=>({id:"followup-"+ft,role:"user",text:String(it.body||""),label:"后续消息"}));N=[...H,...Z,...F]}const M=i.traceKind,q=M?N.filter(H=>H.role==="user"||!H.kind||H.kind===M):N,p=i.traceDone?[{id:"trace-done",role:"status",text:"链路已结束（"+i.traceDone+"）"}]:[];return[...q,...p]},[r,i.chatHistory,i.traceEntries,i.followups,i.traceKind,i.traceDone]);if(!r)return c.jsx("div",{className:"muted",children:"点任务行查看详情后，这里显示继续会话"});const f=ou.includes(r.status),g=["queued","running"].includes(r.status),A=f||g,O=f?"终态任务：发送走继续接口（同一会话再跑一轮）":g?"运行中/排队中：发送走后续消息直接发送（跑完当前轮后优先执行）":"merged/merge-failed 任务不可继续，也不可发后续消息",b=i.chatHistory?i.chatHistory.legacy_continue_count??null:null;return c.jsxs("div",{className:"chat-column",children:[c.jsx("div",{className:"muted",children:"实时对话"}),c.jsxs(zt,{children:[c.jsxs("select",{"aria-label":"链路类型",value:i.traceKind,onChange:N=>i.setTraceKind(N.target.value),children:[c.jsx("option",{value:"",children:"链路类型：全部"}),["exec","file","call","tool","message","reasoning","plan","agent-start","agent-done"].map(N=>c.jsx("option",{value:N,children:N==="exec"?"命令":N==="file"?"文件":N==="call"?"调用":N==="tool"?"工具":N==="message"?"消息":N==="reasoning"?"思考":N==="plan"?"计划":"子代理"},N))]}),c.jsx("button",{onClick:i.downloadTrace,children:"下载完整链路"}),c.jsx("span",{className:"muted",children:i.traceMsg})]}),i.traceNote?c.jsx("div",{children:c.jsx("span",{className:"err",children:i.traceNote})}):null,b!==null&&b>0?c.jsxs("div",{className:"muted",children:["此前有 ",b," 条继续消息发生在持久化之前，未入库，上面历史不完整；部署后新发的继续消息会正常显示。"]}):null,i.chatHistory&&i.chatHistory.trace_note?c.jsx("div",{className:"muted",children:i.chatHistory.trace_note}):null,c.jsx(Eg,{messages:h,empty:"（暂无会话消息）"}),c.jsx(Ng,{disabled:!A,placeholder:"消息",onSend:N=>void i.sendChatMessage(N)}),c.jsxs("div",{className:"muted",children:[O,"。",i.chatMsg]}),c.jsx("div",{className:"muted",children:"对话时间线：首条是本任务 prompt（用户）；助手回复、命令/文件/工具/调用、计划/思考/子代理开始结束都在同一列里，不再另起一份链路名单。流式进行中时新条目实时追加；你在底部时自动跟随，往上翻时暂停跟随，点“回到最新”恢复。"})]})}function Ag(){return Gt().currentTask?c.jsx("div",{className:"conversation",children:c.jsx(Cg,{})}):c.jsx("div",{className:"conversation",children:c.jsx("div",{className:"muted",children:"在任务列表里点一条任务，对话和详情就切到该任务；也可以在上面派发一个新任务。"})})}function Mg(){const i=Gt(),r=i.currentTask,[h,f]=d.useState("");if(!r)return null;const g=ou.includes(r.status),A=["failed","interrupted","merge-failed"].includes(r.status),O=r.kind==="side";return c.jsxs(c.Fragment,{children:[c.jsxs(zt,{children:[c.jsx("button",{disabled:!A,title:A?"":"仅 failed/interrupted/merge-failed 可重试",onClick:()=>i.doAction("retry"),children:"重试"}),c.jsx("button",{className:"danger",disabled:g,title:g?"终态任务不可取消":"",onClick:()=>i.doAction("cancel"),children:"取消"}),O?null:c.jsxs(c.Fragment,{children:[c.jsx("button",{disabled:r.status!=="completed",title:r.status!=="completed"?"仅 completed 可合并":"",onClick:()=>i.doAction("merge"),children:"合并（completed → merged）"}),c.jsx("button",{disabled:r.status!=="merged",title:r.status!=="merged"?"仅 merged 可提 Line truncated
 
-`);for(;mt>=0;){const Ct=yt.slice(0,mt);yt=yt.slice(mt+2);for(const Q of Ct.split(`
-`))if(Q.startsWith("data: "))try{const Y=JSON.parse(Q.slice(6));Y.waiting?b(Y.task_status==="interrupted"?"任务已中断，等待续跑…":Y.task_status==="paused"?"任务已暂停…":"等待会话…"):Y.image&&(f("data:image/jpeg;base64,"+Y.image),b("直播中"));const J={};Y.holder&&(J.holder=Y.holder),Y.url&&(J.url=Y.url),Y.title!==void 0&&(J.title=Y.title),Object.keys(J).length>0&&A(dt=>({...dt||{},...J}))}catch{}mt=yt.indexOf(`
+`);for(;dt>=0;){const Ct=vt.slice(0,dt);vt=vt.slice(dt+2);for(const V of Ct.split(`
+`))if(V.startsWith("data: "))try{const Y=JSON.parse(V.slice(6));Y.waiting?b(Y.task_status==="interrupted"?"任务已中断，等待续跑…":Y.task_status==="paused"?"任务已暂停…":"等待会话…"):Y.image&&(f("data:image/jpeg;base64,"+Y.image),b("直播中"));const J={};Y.holder&&(J.holder=Y.holder),Y.url&&(J.url=Y.url),Y.title!==void 0&&(J.title=Y.title),Object.keys(J).length>0&&A(pt=>({...pt||{},...J}))}catch{}dt=vt.indexOf(`
 
-`)}}b("流已断开")}catch(at){if(at.name==="AbortError")return;M(at instanceof Error?at.message:String(at)),b("未开始")}finally{p(!1)}},[r]),ft=d.useCallback(()=>{var z;(z=H.current)==null||z.abort(),p(!1),b("已停止")},[]),Et=d.useCallback(async z=>{if(r)try{const L=await I($.taskBrowserControl(r.id),"POST",{holder:z});A(L),M("")}catch(L){M(L instanceof Error?L.message:String(L))}},[r]),st=d.useCallback(async z=>{if(!r||(g==null?void 0:g.holder)!=="user"||!Z.current)return;const L=Z.current.getBoundingClientRect(),at=Math.round((z.clientX-L.left)/L.width*1280),jt=Math.round((z.clientY-L.top)/L.height*800);try{await I($.taskBrowserInput(r.id),"POST",{type:"mouse_click",x:at,y:jt})}catch(Mt){M(Mt instanceof Error?Mt.message:String(Mt))}},[r,g]),Ht=d.useCallback(async z=>{if(!(!r||(g==null?void 0:g.holder)!=="user")){z.preventDefault();try{z.key.length===1?await I($.taskBrowserInput(r.id),"POST",{type:"type",text:z.key}):await I($.taskBrowserInput(r.id),"POST",{type:"key",key:z.key})}catch(L){M(L instanceof Error?L.message:String(L))}}},[r,g]);if(!r)return c.jsx("div",{className:"muted",children:"点任务行查看详情"});const V=(g==null?void 0:g.holder)||"—",ct=g!==null;return c.jsxs("div",{children:[c.jsxs("div",{style:{display:"flex",gap:8,flexWrap:"wrap",alignItems:"center"},children:[c.jsxs("span",{children:["状态 ",c.jsx("b",{children:O})]}),c.jsxs("span",{className:"muted",children:["会话 ",ct?"活跃":"未激活（轮次结束即消失）"]}),c.jsxs("span",{className:"muted",children:["控制权 ",V]}),g!=null&&g.url?c.jsx("span",{className:"muted",title:g.url,children:g.url.slice(0,80)}):null]}),c.jsxs("div",{style:{display:"flex",gap:8,flexWrap:"wrap",marginTop:8},children:[q?c.jsx("button",{type:"button",onClick:ft,children:"停止观看"}):c.jsx("button",{type:"button",onClick:()=>void it(),children:"开始观看"}),c.jsx("button",{type:"button",onClick:()=>void F(),children:"刷新状态"}),V!=="user"?c.jsx("button",{type:"button",onClick:()=>void Et("user"),disabled:!ct,children:"接管"}):c.jsx("button",{type:"button",onClick:()=>void Et("agent"),children:"交还给 Agent"})]}),E?c.jsx("div",{className:"muted",style:{marginTop:8},children:E}):null,V==="user"?c.jsx("div",{className:"muted",style:{marginTop:8},children:"你已接管：点画面即点击，键盘输入直达页面。交还后 Agent 续跑前会先快照确认你的改动。"}):null,c.jsx("div",{style:{marginTop:8},children:h?c.jsx("img",{ref:Z,src:h,alt:"浏览器实时画面",tabIndex:0,onClick:z=>void st(z),onKeyDown:z=>void Ht(z),style:{width:"100%",maxWidth:1280,cursor:V==="user"?"crosshair":"default",border:"1px solid var(--border, #ccc)"}}):c.jsx("div",{className:"muted",children:ct?"点“开始观看”接入画面流（接管后点画面即点击）":"浏览器会话未激活：任务本轮未开浏览器，或轮次已结束。"})})]})}function Og(){const i=Gt(),[r,h]=d.useState("uncommittedChanges"),[f,g]=d.useState(""),[A,O]=d.useState(""),[b,E]=d.useState("");return c.jsxs(c.Fragment,{children:[c.jsx("h3",{children:"评审队列"}),c.jsxs("select",{"aria-label":"评审目标",value:r,onChange:M=>h(M.target.value),children:[c.jsx("option",{value:"uncommittedChanges",children:"未提交改动（工作区）"}),c.jsx("option",{value:"baseBranch",children:"与分支的差异"}),c.jsx("option",{value:"commit",children:"指定提交"}),c.jsx("option",{value:"custom",children:"自定义评审指令"})]}),c.jsx("input",{className:"stacked",placeholder:"与分支的差异用：分支名（如 main）",style:{width:"100%"},value:f,onChange:M=>g(M.target.value)}),c.jsx("input",{className:"stacked",placeholder:"指定提交用：提交 sha",style:{width:"100%"},value:A,onChange:M=>O(M.target.value)}),c.jsx("textarea",{placeholder:"自定义评审指令用：评审指令正文",value:b,onChange:M=>E(M.target.value)}),c.jsxs(zt,{children:[c.jsx("button",{className:"primary",onClick:()=>void i.postReview({target_type:r,branch:f.trim()||void 0,sha:A.trim()||void 0,instructions:b.trim()||void 0}),children:"登记评审需求"}),c.jsx("button",{onClick:i.refreshReviews,children:"刷新队列"}),c.jsx("span",{className:"muted",children:i.reviewMsg})]}),c.jsx("div",{className:"muted",children:"本基线只登记评审需求（requested），不自动跑评审；评审是否执行、结果如何，以评审队列里的记录为准。"}),i.reviewError?c.jsx("div",{className:"muted",children:i.reviewError}):i.reviews.length===0?c.jsx("div",{className:"muted",children:"点任务行查看详情后，点“刷新队列”查看评审记录"}):c.jsx(Sn,{children:i.reviews.map(M=>{let q=M.target_type||"";return M.branch&&(q+="："+M.branch),M.sha&&(q+="："+String(M.sha).slice(0,12)),M.instructions&&(q+="："+String(M.instructions).slice(0,80)),c.jsxs("li",{children:[c.jsxs("span",{className:"row-main",children:[c.jsx("b",{children:"评审"})," ",se(M.id)," ｜ ",q," ｜ ",c.jsx("span",{className:"st-"+(M.status||""),children:M.Line truncated
+`)}}b("流已断开")}catch(at){if(at.name==="AbortError")return;M(at instanceof Error?at.message:String(at)),b("未开始")}finally{p(!1)}},[r]),ft=d.useCallback(()=>{var z;(z=H.current)==null||z.abort(),p(!1),b("已停止")},[]),Et=d.useCallback(async z=>{if(r)try{const L=await I($.taskBrowserControl(r.id),"POST",{holder:z});A(L),M("")}catch(L){M(L instanceof Error?L.message:String(L))}},[r]),st=d.useCallback(async z=>{if(!r||(g==null?void 0:g.holder)!=="user"||!Z.current)return;const L=Z.current.getBoundingClientRect(),at=Math.round((z.clientX-L.left)/L.width*1280),jt=Math.round((z.clientY-L.top)/L.height*800);try{await I($.taskBrowserInput(r.id),"POST",{type:"mouse_click",x:at,y:jt})}catch(Mt){M(Mt instanceof Error?Mt.message:String(Mt))}},[r,g]),Ht=d.useCallback(async z=>{if(!(!r||(g==null?void 0:g.holder)!=="user")){z.preventDefault();try{z.key.length===1?await I($.taskBrowserInput(r.id),"POST",{type:"type",text:z.key}):await I($.taskBrowserInput(r.id),"POST",{type:"key",key:z.key})}catch(L){M(L instanceof Error?L.message:String(L))}}},[r,g]);if(!r)return c.jsx("div",{className:"muted",children:"点任务行查看详情"});const Q=(g==null?void 0:g.holder)||"—",ct=g!==null;return c.jsxs("div",{children:[c.jsxs("div",{style:{display:"flex",gap:8,flexWrap:"wrap",alignItems:"center"},children:[c.jsxs("span",{children:["状态 ",c.jsx("b",{children:O})]}),c.jsxs("span",{className:"muted",children:["会话 ",ct?"活跃":"未激活（轮次结束即消失）"]}),c.jsxs("span",{className:"muted",children:["控制权 ",Q]}),g!=null&&g.url?c.jsx("span",{className:"muted",title:g.url,children:g.url.slice(0,80)}):null]}),c.jsxs("div",{style:{display:"flex",gap:8,flexWrap:"wrap",marginTop:8},children:[q?c.jsx("button",{type:"button",onClick:ft,children:"停止观看"}):c.jsx("button",{type:"button",onClick:()=>void it(),children:"开始观看"}),c.jsx("button",{type:"button",onClick:()=>void F(),children:"刷新状态"}),Q!=="user"?c.jsx("button",{type:"button",onClick:()=>void Et("user"),disabled:!ct,children:"接管"}):c.jsx("button",{type:"button",onClick:()=>void Et("agent"),children:"交还给 Agent"})]}),N?c.jsx("div",{className:"muted",style:{marginTop:8},children:N}):null,Q==="user"?c.jsx("div",{className:"muted",style:{marginTop:8},children:"你已接管：点画面即点击，键盘输入直达页面。交还后 Agent 续跑前会先快照确认你的改动。"}):null,c.jsx("div",{style:{marginTop:8},children:h?c.jsx("img",{ref:Z,src:h,alt:"浏览器实时画面",tabIndex:0,onClick:z=>void st(z),onKeyDown:z=>void Ht(z),style:{width:"100%",maxWidth:1280,cursor:Q==="user"?"crosshair":"default",border:"1px solid var(--border, #ccc)"}}):c.jsx("div",{className:"muted",children:ct?"点“开始观看”接入画面流（接管后点画面即点击）":"浏览器会话未激活：任务本轮未开浏览器，或轮次已结束。"})})]})}function zg(){const i=Gt(),[r,h]=d.useState("uncommittedChanges"),[f,g]=d.useState(""),[A,O]=d.useState(""),[b,N]=d.useState("");return c.jsxs(c.Fragment,{children:[c.jsx("h3",{children:"评审队列"}),c.jsxs("select",{"aria-label":"评审目标",value:r,onChange:M=>h(M.target.value),children:[c.jsx("option",{value:"uncommittedChanges",children:"未提交改动（工作区）"}),c.jsx("option",{value:"baseBranch",children:"与分支的差异"}),c.jsx("option",{value:"commit",children:"指定提交"}),c.jsx("option",{value:"custom",children:"自定义评审指令"})]}),c.jsx("input",{className:"stacked",placeholder:"与分支的差异用：分支名（如 main）",style:{width:"100%"},value:f,onChange:M=>g(M.target.value)}),c.jsx("input",{className:"stacked",placeholder:"指定提交用：提交 sha",style:{width:"100%"},value:A,onChange:M=>O(M.target.value)}),c.jsx("textarea",{placeholder:"自定义评审指令用：评审指令正文",value:b,onChange:M=>N(M.target.value)}),c.jsxs(zt,{children:[c.jsx("button",{className:"primary",onClick:()=>void i.postReview({target_type:r,branch:f.trim()||void 0,sha:A.trim()||void 0,instructions:b.trim()||void 0}),children:"登记评审需求"}),c.jsx("button",{onClick:i.refreshReviews,children:"刷新队列"}),c.jsx("span",{className:"muted",children:i.reviewMsg})]}),c.jsx("div",{className:"muted",children:"本基线只登记评审需求（requested），不自动跑评审；评审是否执行、结果如何，以评审队列里的记录为准。"}),i.reviewError?c.jsx("div",{className:"muted",children:i.reviewError}):i.reviews.length===0?c.jsx("div",{className:"muted",children:"点任务行查看详情后，点“刷新队列”查看评审记录"}):c.jsx(Sn,{children:i.reviews.map(M=>{let q=M.target_type||"";return M.branch&&(q+="："+M.branch),M.sha&&(q+="："+String(M.sha).slice(0,12)),M.instructions&&(q+="："+String(M.instructions).slice(0,80)),c.jsxs("li",{children:[c.jsxs("span",{className:"row-main",children:[c.jsx("b",{children:"评审"})," ",se(M.id)," ｜ ",q," ｜ ",c.jsx("span",{className:"st-"+(M.status||""),children:M.Line truncated
   <style rel="stylesheet" crossorigin>:root{--text:#1f2328;--muted:#656d76;--subtle:#6e7781;--line:#d0d7de;--line-muted:#d8dee4;--paper:#ffffff;--card:#ffffff;--subtle-bg:#f6f8fa;--inset-bg:#f6f8fa;--accent:#0969da;--accent-emphasis:#0969da;--green:#2da44e;--green-hover:#2c974b;--success:#1a7f37;--danger:#d1242f;--danger-bg:#ffebe9;--attention:#9a6700;--done:#8250df;--selected-bg:#ddf4ff;--radius:6px;--shadow:0 1px 0 rgba(27,31,36,.04);--sans:-apple-system,BlinkMacSystemFont,"Segoe UI","Noto Sans",Helvetica,Arial,sans-serif;--mono:ui-monospace,SFMono-Regular,SFMono-Regular,Menlo,Consolas,"Liberation Mono",monospace;--ctl:32px}*{box-sizing:border-box}html,body,#root{height:100%}body{font-family:var(--sans);margin:0;color:var(--text);background:#fff;line-height:1.5;font-size:14px}a{color:var(--accent);text-underline-offset:3px}:focus-visible{outline:2px solid var(--accent);outline-offset:2px}@media(prefers-reduced-motion:reduce){*{scroll-behavior:auto!important;transition:none!important}}.muted{color:var(--muted);font-size:12px;line-height:1.5}.err{color:var(--danger)}.ok{color:var(--success)}button{cursor:pointer;font-weight:500;border-radius:var(--radius);border:1px solid var(--line);background:#fff;color:var(--text);box-shadow:var(--shadow)}button:hover{background:var(--subtle-bg)}button:disabled{opacity:.45;cursor:not-allowed;box-shadow:none}button.primary,button.seal{background:var(--green);border-color:#1b1f2426;color:#fff}button.primary:hover,button.seal:hover{background:var(--green-hover)}button.danger{color:var(--danger);border-color:var(--line);background:#fff}button.danger:hover{background:var(--danger-bg);color:var(--danger)}.icon-btn{width:32px;height:32px;padding:0;display:grid;place-items:center;border:1px solid var(--line);border-radius:var(--radius);background:#fff;color:var(--text);font-size:16px;line-height:1}.icon-btn:hover{background:var(--subtle-bg)}.dash-topbar{position:sticky;top:0;z-index:10;background:#24292f;color:#fff;border-bottom:1px solid rgba(255,255,255,.15);padding:10px 20px 8px}.dash-topbar .muted{color:#ffffffbf}.dash-topbar-row{display:flex;gap:14px;align-items:center;flex-wrap:wrap}.dash-brand{font-weight:600;font-size:16px;color:#fff}.dash-status{font-size:13px;font-weight:600;color:#ffffffbf}.dash-status.ok{color:#2da44e}.dash-stamp{margin-left:auto}.dash-nav{display:flex;gap:4px;flex-wrap:wrap;margin-top:8px}.dash-nav a{color:#fff;text-decoration:none;font-size:13px;font-weight:600;padding:6px 12px;border-radius:var(--radius)}.dash-nav a:hover{background:#ffffff1f;text-decoration:none}.tab-nav button{background:transparent;border:0;box-shadow:none;color:#fff;font-size:13px;font-weight:600;padding:6px 12px;border-radius:var(--radius)}.tab-nav button:hover{background:#ffffff1f}.tab-nav button.active{background:#ffffff2e}.dash-page-tabs{display:flex}.dash-page-tabs>.tab-content{grid-column:1 / -1;min-width:0;display:flex;flex-direction:column;gap:20px}.tab-workbench{display:grid;grid-template-columns:320px minmax(0,1fr);gap:20px;align-items:start}.tab-workbench>*{min-width:0}@media(max-width:899px){.tab-workbench{grid-template-columns:1fr}.tab-workbench #sec-dispatch{order:1}.tab-workbench #sec-tasks{order:2}.tab-workbench #sec-conv{order:3}}.dash-page{max-width:1180px;margin:0 auto;padding:20px;display:flex;flex-direction:column;gap:20px}.dash-page>*{min-width:0}.dash-section>*{min-width:0}.dash-section{scroll-margin-top:130px;display:flex;flex-direction:column;gap:16px}.dash-section.card{padding:16px}.dash-cards{display:grid;grid-template-columns:repeat(3,1fr);gap:12px}.dash-card{background:#fff;border:1px solid var(--line);border-radius:var(--radius);padding:16px;min-width:0}.dash-card-label{color:var(--muted);font-size:12px;font-weight:600}.dash-card-value{font-size:24px;font-weight:600;line-height:1.3;overflow-wrap:anywhere}.card{background:var(--card);border:1px solid var(--line);border-radius:var(--radius);box-shadow:none;padding:16px}.card h2{font-size:14px;margin:0 0 12px;font-weight:600}.card h3{font-size:14px;margin:24px 0 12px;padding-top:16px;border-top:1px solid var(--line);font-weight:600}.card h3:first-of-type{border-top:0;padding-top:0}.composer h2{font-size:16px}.composer textarea.prompt{min-height:148px;font-size:14px;padding:12px;border-radius:var(--radius)}.composer textarea.coord{font-family:var(--mono);font-size:13px}.bar{display:flex;gap:8px;flex-wrap:wrap;align-items:center;margin:12px 0}.bar>button,.bar>label{display:inline-flex;align-items:center;height:var(--ctl);min-height:var(--ctl);padding:0 16px;box-sizing:border-box;white-space:nowrap}.bar>input,.bar>select{height:var(--ctl);min-height:var(--ctl)}input,select,textarea,button{font:inherit;font-size:14px;padding:5px 12px;border-radius:var(--radius);border:1px solid var(--line);background:#fff;color:var(--text)}input:focus,select:focus,textarea:focus{outline:none;border-color:var(--accent);box-shadow:0 0 0 3px #0969da4d}select{-moz-appearance:none;appearance:none;-webkit-appearance:none;cursLine truncated
 </head>
 <body>

cloud/tests/test_chv_arch95.py

@@ -225,6 +225,9 @@ class DockerSyncGuardTest(unittest.TestCase):
         try:
             ex = DockerExecutor(runner=lambda cmd, timeout=None:
                                 FakeResult(returncode, stdout, stderr))
+            # to10：goal 解析是纯函数测试，绝不依赖本机 docker
+            # 二进制（无 docker 的机器上 _check_docker 会直接炸）。
+            ex._check_docker = lambda: None
             ex._call_runner = lambda cmd, timeout=None, env=None: \
                 FakeResult(returncode, stdout, stderr)
             return ex.goal_task({"id": "t1", "goal": "do it",

cloud/tests/test_chv_to10.py

@@ -0,0 +1,388 @@
+"""to10 轨新增测试：覆盖率缺口分支（非刷行）。
+
+只测此前 coverage 报告里未覆盖的分支：api_client 的假
+socket 错误路径、hostkeys 的 keygen/seed 失败路径、
+orphans 的 registry 失败路径、keyscan 过滤、compat 的
+fail-closed 分支、config 的类型转换与 assemble 冲突。
+不删旧测试、不改分母；每项都是行为断言，不是 grep。
+"""
+
+import os
+import socket
+import tempfile
+import unittest
+
+from cloud.chv import api_client
+from cloud.chv import compat215
+from cloud.chv import config as chv_config
+from cloud.chv import hostkeys
+from cloud.chv import orphans
+from cloud.chv import ssh_transport
+
+
+class _FakeSocket:
+    """按 recv 调用序列供数据的假 socket。"""
+
+    def __init__(self, chunks, timeout_at=None):
+        self._chunks = list(chunks)
+        self._timeout_at = timeout_at
+        self._calls = 0
+        self.closed = False
+
+    def recv(self, _size):
+        self._calls += 1
+        if self._timeout_at is not None \
+                and self._calls >= self._timeout_at:
+            raise socket.timeout("fake timeout")
+        if not self._chunks:
+            return b""
+        return self._chunks.pop(0)
+
+    def close(self):
+        self.closed = True
+
+
+class ApiClientTest(unittest.TestCase):
+    def test_header_timeout_raises(self):
+        with self.assertRaises(RuntimeError):
+            api_client._read_header(_FakeSocket([], timeout_at=1))
+
+    def test_header_early_close_raises(self):
+        with self.assertRaises(RuntimeError):
+            api_client._read_header(_FakeSocket([]))
+
+    def test_chunked_rejected(self):
+        with self.assertRaises(RuntimeError):
+            api_client._parse_content_length(
+                "HTTP/1.1 200 OK\r\nTransfer-Encoding: chunked")
+
+    def test_no_length_rejected(self):
+        with self.assertRaises(RuntimeError):
+            api_client._parse_content_length("HTTP/1.1 200 OK")
+
+    def test_illegal_length_rejected(self):
+        with self.assertRaises(RuntimeError):
+            api_client._parse_content_length(
+                "HTTP/1.1 200 OK\r\nContent-Length: xx")
+
+    def test_body_timeout_truncation(self):
+        with self.assertRaises(RuntimeError):
+            api_client._read_body(_FakeSocket([], timeout_at=1),
+                                  b"ab", 10)
+
+    def test_body_early_close_truncation(self):
+        with self.assertRaises(RuntimeError):
+            api_client._read_body(_FakeSocket([]), b"ab", 10)
+
+    def test_parse_non_http_status_zero(self):
+        status, _body = api_client._parse_response("garbage", b"{}")
+        self.assertEqual(status, 0)
+
+    def test_parse_non_json_body_is_text(self):
+        _status, body = api_client._parse_response(
+            "HTTP/1.1 200 OK", b"not-json")
+        self.assertEqual(body, "not-json")
+
+    def test_parse_empty_body_is_empty_dict(self):
+        _status, body = api_client._parse_response(
+            "HTTP/1.1 200 OK", b"")
+        self.assertEqual(body, {})
+
+    def test_unix_api_missing_socket_raises(self):
+        with self.assertRaises(RuntimeError):
+            api_client._unix_socket_api("/tmp/no-such-chv.sock",
+                                        "GET", "/vm.info")
+
+
+class HostkeysTest(unittest.TestCase):
+    def test_keygen_reuse_existing_pair(self):
+        with tempfile.TemporaryDirectory() as tmp:
+            paths = hostkeys.host_key_paths(tmp, "vm1")
+            os.makedirs(os.path.dirname(paths["private"]),
+                        exist_ok=True)
+            for key in ("private", "public"):
+                with open(paths[key], "w") as fh:
+                    fh.write("x")
+            out = hostkeys.generate_host_keypair(
+                tmp, "vm1", runner=lambda cmd: (_ for _ in ()).throw(
+                    AssertionError("reuse 不应调 keygen")))
+            self.assertEqual(out, paths)
+
+    def test_keygen_nonzero_rc_raises(self):
+        class _Res:
+            returncode = 1
+        with tempfile.TemporaryDirectory() as tmp:
+            with self.assertRaises(RuntimeError):
+                hostkeys.generate_host_keypair(
+                    tmp, "vm2", runner=lambda cmd: _Res())
+
+    def test_keygen_no_files_after_runner_raises(self):
+        class _Res:
+            returncode = 0
+        with tempfile.TemporaryDirectory() as tmp:
+            with self.assertRaises(RuntimeError):
+                hostkeys.generate_host_keypair(
+                    tmp, "vm3", runner=lambda cmd: _Res())
+
+    def test_seed_disk_nonzero_rc_raises(self):
+        class _Res:
+            returncode = 1
+        with tempfile.TemporaryDirectory() as tmp:
+            with self.assertRaises(RuntimeError):
+                hostkeys.build_seed_disk(
+                    tmp, os.path.join(tmp, "seed.iso"),
+                    runner=lambda cmd: _Res())
+
+    def test_seed_disk_missing_output_raises(self):
+        class _Res:
+            returncode = 0
+        with tempfile.TemporaryDirectory() as tmp:
+            with self.assertRaises(RuntimeError):
+                hostkeys.build_seed_disk(
+                    tmp, os.path.join(tmp, "seed.iso"),
+                    runner=lambda cmd: _Res())
+
+
+class OrphansAndKeyscanTest(unittest.TestCase):
+    def test_quarantine_failure_only_warns(self):
+        with self.assertLogs("cloud.cloud_hypervisor",
+                             level="WARNING") as logs:
+            orphans._quarantine_registry("/tmp/no-such-dir-x/f.json")
+        self.assertTrue(any("quarantine_failed" in line
+                            for line in logs.output))
+
+    def test_write_registry_failure_only_warns(self):
+        with tempfile.TemporaryDirectory() as tmp:
+            blocker = os.path.join(tmp, "blocker")
+            with open(blocker, "w") as fh:
+                fh.write("x")
+            with self.assertLogs("cloud.cloud_hypervisor",
+                                 level="WARNING") as logs:
+                orphans._write_registry(
+                    os.path.join(blocker, "registry.json"), {})
+            self.assertTrue(any("save_failed" in line
+                                for line in logs.output))
+
+    def test_keyscan_filters_short_and_non_ssh_lines(self):
+        text = "\n".join([
+            "# comment",
+            "",
+            "only-two",
+            "127.0.0.1 ecdsa-sha2-nistp256 AAAA",
+            "[127.0.0.1]:2222 ssh-ed25519 AAAA-good",
+            "other-host ssh-ed25519 AAAA-other",
+        ])
+        kept = ssh_transport.parse_keyscan_output(text)
+        self.assertEqual(kept, ["[127.0.0.1]:2222 ssh-ed25519 AAAA-good"])
+
+
+class CompatAndConfigTest(unittest.TestCase):
+    def test_tmpfs_unknown_executor_fail_closed(self):
+        isolated, _reason = compat215.tmpfs_isolated("unknown-kind",
+                                                     "/tmp")
+        self.assertFalse(isolated)
+
+    def test_resolve_inside_empty_rel_is_base(self):
+        self.assertEqual(compat215.resolve_inside("/a/b", ""), "/a/b")
+
+    def test_resolve_inside_absolute_is_none(self):
+        self.assertIsNone(compat215.resolve_inside("/a/b", "/etc/passwd"))
+
+    def test_to_int_bool_and_float_and_bad(self):
+        with self.assertRaises(ValueError):
+            chv_config._to_int(True)
+        self.assertEqual(chv_config._to_int(3.9), 3)
+        self.assertEqual(chv_config._to_int(" 7 "), 7)
+        with self.assertRaises(ValueError):
+            chv_config._to_int(object())
+
+    def test_to_float_bool_and_bad(self):
+        with self.assertRaises(ValueError):
+            chv_config._to_float(False)
+        self.assertEqual(chv_config._to_float("2.5"), 2.5)
+        with self.assertRaises(ValueError):
+            chv_config._to_float(object())
+
+    def test_assemble_conflict_raises(self):
+        with self.assertRaises(ValueError):
+            chv_config._assemble_chv_config(
+                [{"cpus": "2"}, {"cpus": "4"}])
+
+
+if __name__ == "__main__":
+    unittest.main()
+
+
+class WorkerAdapterTest(unittest.TestCase):
+    """to10：worker_adapter 的直接行为测试（worker 薄包装
+    由旧测试 test_chv_fix/test_chv_gaps 覆盖，此处测本体）。"""
+
+    def test_call_breakpoint_prefers_signature_kwargs(self):
+        from cloud.chv import worker_adapter
+        seen = {}
+
+        class _Ex:
+            def goal_resume_breakpoint_task(self, task,
+                                            model_provider=None,
+                                            extra_env=None):
+                seen.update(task=task, model_provider=model_provider,
+                            extra_env=extra_env)
+                return "ok"
+        out = worker_adapter.call_goal_resume_breakpoint(
+            _Ex(), {"id": "t"}, model_provider="m",
+            extra_env={"A": "1"})
+        self.assertEqual(out, "ok")
+        self.assertEqual(seen["model_provider"], "m")
+        self.assertEqual(seen["extra_env"], {"A": "1"})
+
+    def test_call_breakpoint_single_arg_executor(self):
+        from cloud.chv import worker_adapter
+
+        class _Ex:
+            def goal_resume_breakpoint_task(self, task):
+                return "single"
+        self.assertEqual(
+            worker_adapter.call_goal_resume_breakpoint(_Ex(), {"id": "t"}),
+            "single")
+
+    def test_audit_callback_extracts_project_and_swallows(self):
+        from cloud.chv import worker_adapter
+        calls = []
+        cb = worker_adapter.make_chv_audit_callback(calls.append)
+        # append 只接受 1 参，回调内部 except 应吞掉，不炸
+        cb("booted", {"project_id": "p1"}, "detail")
+        self.assertEqual(calls, [])
+        got = []
+        cb2 = worker_adapter.make_chv_audit_callback(
+            lambda pid, ev, detail: got.append((pid, ev, detail)))
+        cb2("booted", {"project_id": "p1"}, "detail")
+        cb2("booted", "not-a-dict", "detail")
+        self.assertEqual(got[0], ("p1", "chv_vm_booted", "detail"))
+        self.assertEqual(got[1], (None, "chv_vm_booted", "detail"))
+
+    def test_reconcile_non_chv_returns_empty(self):
+        from cloud.chv import worker_adapter
+        self.assertEqual(
+            worker_adapter.reconcile_warm_pool(object(), lambda *a: None,
+                                               "startup"),
+            [])
+
+    def test_watchdog_vm_name_error_returns_none(self):
+        from cloud.chv import worker_adapter
+
+        class _Bad:
+            def vm_name(self, task):
+                raise RuntimeError("boom")
+        self.assertIsNone(worker_adapter.watchdog_vm_name(_Bad(), {}))
+
+    def test_cancel_watchdog_loop_kills_on_flag(self):
+        import threading
+        from cloud.chv import worker_adapter
+        killed = []
+        stop = threading.Event()
+        worker_adapter.cancel_watchdog_loop(
+            "t1", "chv-t1", stop, {"t1"},
+            lambda tid: None,
+            lambda vm: killed.append(vm),
+            None)
+        # stop 未置位时循环每 1 秒轮询：flag 已命中，第一轮即
+        # 关 VM 并返回；这里不依赖日志（logger 传 None 时
+        # log_event 内部不炸——若炸则本项失败）。
+        self.assertEqual(killed, ["chv-t1"])
+
+    def test_quota_watchdog_loop_marks_and_kills(self):
+        import threading
+        from cloud.chv import worker_adapter
+        killed = []
+        marked = []
+        stop = threading.Event()
+        worker_adapter.quota_watchdog_loop(
+            "t2", "chv-t2", stop, lambda: True,
+            marked.append,
+            lambda vm: killed.append(vm),
+            None, interval=0.01)
+        self.assertEqual(marked, ["t2"])
+        self.assertEqual(killed, ["chv-t2"])
+
+
+class AuditSpillTest(unittest.TestCase):
+    """to10：_emit 回调失败时落盘（ADR-14），不中断、不抛。"""
+
+    def test_spill_on_callback_failure(self):
+        import json as _json
+        from cloud.chv.executor import CloudHypervisorExecutor
+        with tempfile.TemporaryDirectory() as tmp:
+            ex = CloudHypervisorExecutor(
+                binary="/bin/true", kernel="/tmp/k", rootfs="/tmp/r",
+                state_dir=tmp, ssh_key="/tmp/key")
+            calls = []
+
+            def _bad(event, task, detail, kind=None):
+                raise RuntimeError("db down")
+            ex.audit_callback = _bad
+            ex._emit("booted", {"id": "t-spill"}, "vm=chv-t-spill")
+            self.assertEqual(ex.audit_failure_count, 1)
+            spill = os.path.join(tmp, "chv-audit-spill.jsonl")
+            self.assertTrue(os.path.exists(spill))
+            row = _json.loads(open(spill).readline())
+            self.assertEqual(row["event"], "booted")
+            self.assertEqual(row["task_id"], "t-spill")
+            self.assertEqual(row["detail"], "vm=chv-t-spill")
+
+    def test_spill_rotation_keeps_old(self):
+        from cloud.chv.executor import CloudHypervisorExecutor
+        with tempfile.TemporaryDirectory() as tmp:
+            ex = CloudHypervisorExecutor(
+                binary="/bin/true", kernel="/tmp/k", rootfs="/tmp/r",
+                state_dir=tmp, ssh_key="/tmp/key")
+            spill = os.path.join(tmp, "chv-audit-spill.jsonl")
+            with open(spill, "w") as fh:
+                fh.write("x" * (1024 * 1024 + 10))
+            ex._spill_audit("booted", {"id": "t2"}, "d", None)
+            self.assertTrue(os.path.exists(spill + ".old"))
+            self.assertTrue(os.path.getsize(spill) < 1024)
+
+
+class LockfileScriptTest(unittest.TestCase):
+    """to10：generate_lockfile.py 的 generate/verify（合成
+    BUILDINFO，不碰真实客机清单，不编版本号）。"""
+
+    def _load_script(self):
+        import importlib.util
+        path = os.path.join(
+            os.path.dirname(os.path.dirname(__file__)),
+            "..", "chv-guest", "generate_lockfile.py")
+        path = os.path.normpath(path)
+        spec = importlib.util.spec_from_file_location(
+            "chv_generate_lockfile", path)
+        mod = importlib.util.module_from_spec(spec)
+        spec.loader.exec_module(mod)
+        return mod
+
+    def test_generate_reads_real_dpkg_version(self):
+        import json as _json
+        mod = self._load_script()
+        with tempfile.TemporaryDirectory() as tmp:
+            bi = os.path.join(tmp, "bi.json")
+            out = os.path.join(tmp, "lock.json")
+            with open(bi, "w") as fh:
+                _json.dump({"tag": "t", "contents": ["coreutils"]},
+                           fh)
+            self.assertEqual(mod.generate(bi, out), 0)
+            lock = _json.load(open(out))
+            self.assertEqual(lock["tag"], "t")
+            self.assertEqual(lock["unresolved"], [])
+            self.assertTrue(lock["versions"]["dpkg"][0].startswith(
+                "coreutils "))
+
+    def test_verify_fails_on_unresolved(self):
+        import json as _json
+        mod = self._load_script()
+        with tempfile.TemporaryDirectory() as tmp:
+            lock = os.path.join(tmp, "lock.json")
+            with open(lock, "w") as fh:
+                _json.dump({"tag": "t",
+                            "versions": {"dpkg": ["a 1.0"],
+                                         "pip": ["b 2.0"]},
+                            "unresolved": ["zzz"]}, fh)
+            self.assertEqual(mod.verify(lock, None), 1)

cloud/worker.py

@@ -133,7 +133,6 @@ interrupted -> interrupted，is_defect 恒 False）；同一派发内
 
 import argparse
 import hashlib
-import inspect
 import json
 import os
 from datetime import datetime, timezone
@@ -250,6 +249,9 @@ from cloud.queue import budget_exceeded, ready_tasks
 from cloud.repos import RepoError, checkout_dir, resolve_repo
 from cloud.sandbox import CloudExecutor, CloudHypervisorExecutor, \
     DockerExecutor, LocalExecutor
+# to10：CHV 强相关接线抽到 cloud.chv.worker_adapter，见 ADR-13；
+# worker 只留薄包装（方法名/签名/调用点不变）。
+from cloud.chv import worker_adapter as _chv_worker_adapter
 from cloud.uploads import upload_root as _upload_root
 from cloud.sandbox import _default_runner as _sandbox_default_runner
 from cloud.caps import effective_capacity, resolve_capacity
@@ -428,27 +430,13 @@ def _merge_env(base, override):
 
 def _call_goal_resume_breakpoint(executor, task, model_provider=None,
                                extra_env=None):
-    """通用断点调用：执行器提供 goal_resume_breakpoint_task 时调用它。
-
-    Local 仍走原路径（调用方直接传 model_provider，不经过这里，
-    以免改生产语义）；这里只用于非 Local 执行器：签名接受
-    model_provider 时传它（CHV/Docker 均接受），否则只传 task
-    （旧假执行器单参）。feat-chv-secfix（H2）：CHV 的
-    gateway_env 不再经 SSH env 前缀注入（密钥值进 argv 的
-    旧路径已废除），改走 provisioned seed 盘客内文件投递；
-    CHV 没有 Local 那样的进程 env 通道，seed 文件是唯一通道，
-    keyscan 模式下密钥投递 fail-closed。"""
-    method = getattr(executor, "goal_resume_breakpoint_task")
-    try:
-        params = inspect.signature(method).parameters
-    except (TypeError, ValueError):
-        return method(task)
-    kwargs = {}
-    if "model_provider" in params:
-        kwargs["model_provider"] = model_provider
-    if "extra_env" in params and extra_env is not None:
-        kwargs["extra_env"] = extra_env
-    return method(task, **kwargs)
+    """通用断点调用（to10：本体已移到
+    cloud.chv.worker_adapter.call_goal_resume_breakpoint，
+    此处只留薄包装——旧测试从 cloud.worker import 它，名
+    字与签名不变，行为逐字不变）。"""
+    return _chv_worker_adapter.call_goal_resume_breakpoint(
+        executor, task, model_provider=model_provider,
+        extra_env=extra_env)
 
 
 def _resolve_model(model=None, config_path=None):
@@ -790,16 +778,12 @@ class Worker:
         # 读审计表即可，不另起一套 VM 事件表；成本/配额仍走
         # worker 现有 quota 语义，本回调绝不记账。
         if isinstance(self.executor, CloudHypervisorExecutor):
-            def _chv_audit(event, task, detail, kind=None):
+            # to10：回调本体已移到 worker_adapter.make_chv_audit_
+            # callback（原 __init__ 闭包逐字搬运），此处只挂接。
             try:
-                    project_id = task.get("project_id") \
-                        if isinstance(task, dict) else None
-                    self._audit(project_id, "chv_vm_" + event,
-                                detail or "")
-                except Exception:
-                    pass
-            try:
-                self.executor.audit_callback = _chv_audit
+                self.executor.audit_callback = \
+                    _chv_worker_adapter.make_chv_audit_callback(
+                        self._audit)
             except Exception:
                 pass
         # CHV 残留清理：仅孤儿清理接线（feat-chv-arch95 定案，
@@ -1073,36 +1057,11 @@ class Worker:
         return self._cost_store
 
     def _reconcile_warm_pool(self, when):
-        """显式调生产残留清理 facade，返回已清理 VM 名。
-
-        仅 CHV worker 有效（其它执行器返回 []）。实现是
-        cloud.chv.orphans.reconcile_orphans_for_executor()：
-        直接读 registry 文件做清理，不构造 WarmPool、不碰
-        实验接口（方法内 import，失败时按下面分支审计后
-        返回 []）。调用失败不炸主流程，但进审计（失败本身
-        也审计，不静默丢弃）。orphan 条目绝不发给任务，
-        reconcile 只做清理。"""
-        executor = getattr(self, "executor", None)
-        if not isinstance(executor, CloudHypervisorExecutor):
-            return []
-        try:
-            from cloud.chv.orphans import \
-                reconcile_orphans_for_executor as _reconcile
-            cleaned = _reconcile(executor) or []
-        except Exception as exc:
-            try:
-                self._audit(None, "chv_warm_pool_reconcile_failed",
-                            "when=%s error=%s" % (when, exc))
-            except Exception:
-                pass
-            return []
-        if cleaned:
-            try:
-                self._audit(None, "chv_warm_pool_reconcile",
-                            "when=%s cleaned=%s" % (when, ",".join(cleaned)))
-            except Exception:
-                pass
-        return cleaned
+        """显式调生产残留清理 facade，返回已清理 VM 名
+        （to10：本体已移到 worker_adapter.reconcile_warm_
+        pool，此处只留薄包装，旧测试调用点不变）。"""
+        return _chv_worker_adapter.reconcile_warm_pool(
+            getattr(self, "executor", None), self._audit, when)
 
     def close(self):
         """关闭惰性建的成本存储连接（注入的 cost_store 由调用方管）。
@@ -3617,61 +3576,22 @@ class Worker:
         return cleaned
 
     def _chv_cancel_watchdog(self, task_id, vm_name, stop_event):
-        """CHV 同步路径的取消看门狗（feat-chv-fix，P1-2，Docker
-        取消看门狗同款模式）：同步 SSH 阻塞时 worker 的 cancel()
-        只能改库、清 _running 项，阻塞中的 run 本身不会醒；
-        本线程每 1 秒查库/取消标志，命中时调 cancel_vm 真关
-        VM，然后退出。查库失败时当没取消，不误杀。"""
-        while not stop_event.wait(1.0):
-            try:
-                if task_id in self._cancel_requested:
-                    cancelled = True
-                else:
-                    db_task = self.get_task(task_id)
-                    cancelled = (db_task is not None and
-                                 db_task.get("status") == "interrupted")
-            except Exception:
-                cancelled = False
-            if not cancelled:
-                continue
-            try:
-                cancel = getattr(self.executor, "cancel_vm", None)
-                if cancel is not None and vm_name:
-                    cancel(vm_name)
-                    log_event(self.logger, "worker_chv_killed",
-                              task_id=task_id,
-                              message="cancel watchdog killed VM %s "
-                                      "(task interrupted/cancelled)"
-                                      % vm_name)
-            except Exception:
-                pass
-            return
+        """CHV 同步路径的取消看门狗（to10：循环本体已移到
+        worker_adapter.cancel_watchdog_loop，此处只传回调）。"""
+        _chv_worker_adapter.cancel_watchdog_loop(
+            task_id, vm_name, stop_event, self._cancel_requested,
+            self.get_task, getattr(self.executor, "cancel_vm", None),
+            self.logger)
 
     def _chv_quota_watchdog(self, task_id, vm_name, stop_event,
                             quota_check, interval=30.0):
-        """CHV 同步路径的配额看门狗（feat-chv-fix，P1-2，Docker
-        配额看门狗同款）：命中时记 _quota_hit_tasks 并调
-        cancel_vm 真关 VM；_run_attempt 在同步返回后把结果
-        改写成 quota_exceeded，走统一配额中断收尾。"""
-        while not stop_event.wait(interval):
-            try:
-                over = bool(quota_check()) if quota_check else False
-            except Exception:
-                over = False
-            if not over:
-                continue
-            self._mark_quota_hit(task_id)
-            try:
-                cancel = getattr(self.executor, "cancel_vm", None)
-                if cancel is not None and vm_name:
-                    cancel(vm_name)
-                    log_event(self.logger, "worker_chv_killed",
-                              task_id=task_id,
-                              message="quota watchdog killed VM %s "
-                                      "(quota exceeded)" % vm_name)
-            except Exception:
-                pass
-            return
+        """CHV 同步路径的配额看门狗（to10：循环本体已移到
+        worker_adapter.quota_watchdog_loop，此处只传回调）。"""
+        _chv_worker_adapter.quota_watchdog_loop(
+            task_id, vm_name, stop_event, quota_check,
+            self._mark_quota_hit,
+            getattr(self.executor, "cancel_vm", None),
+            self.logger, interval=interval)
 
     def cleanup_stale_containers(self):
         """启动清理兜底：清掉上一轮残留的 codex- 容器。
@@ -5976,10 +5896,10 @@ class Worker:
         # process 已轮询 quota_check）。
         if isinstance(self.executor, CloudHypervisorExecutor) \
                 and hasattr(self.executor, "cancel_vm"):
-            try:
-                _chv_vm_name = self.executor.vm_name(task)
-            except Exception:
-                _chv_vm_name = None
+            # to10：VM 名派生已移到 worker_adapter.watchdog_vm_
+            # name（原 try/except 块逐字搬运）。
+            _chv_vm_name = _chv_worker_adapter.watchdog_vm_name(
+                self.executor, task)
             if _chv_vm_name:
                 _watchdog_stop = threading.Event()
                 _watchdog_thread = threading.Thread(

docs/chv-architecture.md

@@ -232,3 +232,94 @@
   live 状态——server 进程没有 VM 登记表，live 状态编不
   出来；前端无该字段时不显示 VM 状态，不猜测。VM 控制
   按钮仍不做（后端无控制端点且安全审计 No-Go）。
+
+## ADR-13 CHV worker 适配模块（to10 轨）
+
+- 决策：新建 `cloud/chv/worker_adapter.py`，worker.py 只留
+  薄包装。抽入：断点调用（原顶层函数本体）、审计回调
+  （原 `__init__` 闭包）、孤儿清理（原 `_reconcile_warm_pool`
+  本体）、两条看门狗循环（原 `_chv_*_watchdog` 本体，self
+  依赖全部改成回调参数）、看门狗 VM 名派生（原 `_run_attempt`
+  try/except 块）。worker 方法名、签名、调用点、错误文案
+  全部不变，旧测试继续走 worker 方法；适配器本身另有直接
+  行为测试。适配器只依赖标准库 + chv 叶子模块 +
+  `cloud.logging_config`，不 import `cloud.worker`，无循环；
+  公共 API 全注解（#257 的类型测试扫 `cloud/chv/*.py`，
+  新模块不注解会直接炸该测试——本轨已补齐）。
+- 明确不抽（硬抽无收益，只会撕通用流程）：cancel() 里的
+  `cancel_vm` 分支（与 Docker `kill_container` 分支相邻的
+  通用取消流）、`cleanup_stale_containers` 的 CHV 分支
+  （与 Docker 清理相邻的通用清理流）、网关守卫（Local /
+  Docker / CHV 三分支共用的派发流）、`_executor_name` 的
+  CHV 分支（通用执行器名映射）、`_run_attempt` 的看门狗
+  线程启动（线程管理是 worker 通用逻辑，只抽了 VM 名派生）、
+  VM 死亡写回（通用终局流）。以上六处留在 worker.py，
+  不是遗漏，是评估后有理由的结论。
+- 附带清理：`inspect` 在 worker.py 的唯一用处随断点函数
+  移走，import 一并删除（留着会触发 F401）；worker.py
+  基线已有的 I001（两处 import 排序）与 F821（playwright
+  播种块的 `task`）与本轨无关，不顺手重排整个文件。
+
+## ADR-14 审计失败落盘兜底（to10 轨）
+
+- 决策：选“本地审计落盘文件”作为兜底，不选“只记日志 +
+  计数”（已做，仍不够：日志会轮转、计数只剩数字，事后
+  找不回哪次事件丢了）。实现：`executor._emit` 回调失败
+  时，除记宿主 error 日志 + `audit_failure_count` +1 外，
+  再把事件 append 到 `state_dir/chv-audit-spill.jsonl`
+  （每行一 JSON：ts/event/kind/detail/task_id），文件超
+  1MB 时轮转成 `.old` 再写。
+- 取舍（写清，不当成完整修复）：① 落盘本身 best-effort，
+  写失败只记日志，绝不中断任务；② 落盘不是 DB 替代，
+  任务 timeline 查询看不到它，需宿主人工查阅；③ 轮转
+  只留最新两代，更早的丢失事件仍会丢；④ detail 沿用
+  `_emit` 契约（只含 VM 名/路径/URL/kind），绝不含密钥值，
+  落盘文件随 state_dir 的 0700 权限保护。审计完整性本身
+  仍无保证——保证需要 DB 事务级审计写入，那是 worker
+  全局语义的改动，不在本轨硬做。
+- 不选的另一条路：“审计失败即中断任务”——ADR-9 已否决：
+  审计是可观测性不是门禁，DB 短暂不可用时硬中断会把
+  一次审计失败放大成任务失败，且与 worker 全局 best-effort
+  语义冲突。
+
+## ADR-15 前端只读 VM 展示四态与可用性统一文案（to10 轨）
+
+- 决策：`chvVmDisplay(task)` 返回四态而非此前两态文案：
+  dead（字段 present 且 true）、not-reported（CHV 任务但
+  字段 absent，只表示未报告）、unknown（任务详情本身未
+  加载）、not-applicable（非 CHV，不显示行）。旧入口
+  `chvVmStatusText` 保留为 display 的 text 包装（unknown /
+  not-applicable 回空串），已测调用点不变。详情页 VM 行
+  改用 `chvVmDisplay(t).text` 并加 `role="status"` 与
+  `aria-label="VM 状态"`。
+- 决策：`chvAvailabilityText(availability)` 统一新建任务 /
+  Workers / 环境三处可用性文案。此前三处各写各的，Workers
+  的未知分支恒写“仅全局管理员可见”（加载失败/未加载时
+  也是这句，是文案 bug），本轨统一后按 reason 分三句，
+  known 零在线沿用派发页的完整版（不拦提交、后端是最终
+  权威）。无障碍打磨：可用性区与提交结果区加
+  `aria-live="polite"`（结果区另加 `role="status"`），附件
+  三个 input 加 `aria-label`（此前只有 title），禁用态本身
+  已由 `disabled` 传达，不另造禁用文案。控制按钮仍不做
+  （后端无控制端点且安全审计 No-Go）；组件渲染仍不在
+  测试覆盖内（无 testing-library 依赖，不临时加依赖冒充）。
+
+## ADR-16 to10 轨的类型与 lint 口径（诚实标注）
+
+- mypy：`--follow-imports=silent cloud/chv/`，只查 chv 本身
+  （不拖入无关文件）。基线该口径 115 错 → 本轨 0 错；
+  默认 follow-imports 口径基线 117 错 → 本轨 2 错，且
+  2 错全在作用域外的 `cloud/marker_tools.py:142`（与 chv
+  无关，不顺手修它），chv 自身在默认口径下也是 0 错。
+- ruff：作用域 F/E9/W/I（未用变量、语法错、空白、import
+  排序），基线 8 错 → 本轨 0 错；默认全规则基线 208 错
+  （含本仓库未采纳的风格意见，如百分号格式化、
+  best-effort 清理的 try/except-pass），本轨不声称全规则
+  通过。worker.py 不在 lint 作用域内：其基线 I001 两处与
+  F821 一处与本轨无关，未重排；本轨只删了随抽取而变多余
+  的 `inspect` import（否则新增 F401）。
+- 覆盖率：`coverage --source=cloud/chv` 对 CHV 套件（不含
+  worker/server 全量），基线 85% → 本轨 87%（1826 行，
+  缺 268 → 242）；未覆盖大头仍是 executor 深层生命周期
+  分支（需假 VMM 全链路）与 disk 配额分支，不靠删测试
+  或改分母凑数。

docs/chv-production-readiness.md

@@ -459,3 +459,116 @@
   本 PR 顺序合并 → KVM 宿主 + 防火墙清单 → 镜像构建发布
   → §11.5 + 本节真机清单全过 → 默认关闭下单租户/受信项目
   灰度 → 全量多租户（须另行决策，不在本轨内默认开启）。
+
+## 13. to10 提升轨 feat-chv-to10（堆叠于 #257 之上）
+
+本节是准备工作，不是启用结论：代码侧的 to10 项已做，
+生产就绪与动态安全仍未到 10 分（见 §13.4 外部关卡）。
+
+### 13.1 合并前 diff 复核清单（以当前 main 头预填）
+
+- 当前 main 头（本轨核查时）：`aebc6238a613066316ec18796b83ea8fc2d8835e`
+  （Merge PR #201）。链上 10 个 PR 在核查时全部
+  OPEN / MERGEABLE（#216 base main，#221→#257 依次堆叠，
+  本 PR base 为 feat-chv-arch-maint-fe）。合并时必须重新
+  核查：main 头若已前进，整条链须逐个 rebase 并重跑测试，
+  绝不直接合并旧基底。
+- 逐项复核点（合并执行者逐项打勾，任一项不符即停）：
+  1. server 任务创建白名单含 `cloud-hypervisor`，环境创建
+     白名单为 local/docker/cloud-hypervisor（不含 cloud），
+     两处白名单差异仍在前端文案里写清。
+  2. worker 断点分支：Local 原路径不变，CHV 经
+     `worker_adapter.call_goal_resume_breakpoint`（薄包装名
+     `_call_goal_resume_breakpoint` 仍在 worker.py，旧测试
+     导入点不变）。
+  3. sandbox re-export：`cloud/chv` 不再 export WarmPool
+     （#257 已移实验模块），`cloud/sandbox.py` 的 CHV
+     re-export 与 `cloud/chv/__init__.py` 一致。
+  4. 前端产物：`cloud/console.html` 与 `dist/index.html`
+     的 sha256 一致（本轨：`269820d1…f389`，353163 字节），
+     产物内含新文案（“无法判断 VM 状态”1 处、
+     “CHV worker 在线数未知”3 处）；合并时重建后复核，
+     不直接沿用本轨哈希。
+  5. `package.json` 的 vitest 测试脚本与 lockfile 增量只含
+     vitest 新条目，无旧包版本变动。
+  6. 本轨新增文件：`cloud/chv/worker_adapter.py`、
+     `cloud/tests/test_chv_to10.py`、
+     `chv-guest/generate_lockfile.py`；本轨改动文件：
+     `cloud/worker.py`（薄包装 + 删多余 `inspect` import）、
+     `cloud/chv/executor.py`（审计落盘 + 两函数抽 helper）、
+     `cloud/chv/config.py`、`disk.py`、`hardening.py`、
+     `hostkeys.py`、`ssh_transport.py`、`experimental_pool.py`、
+     `compat215.py`（类型注解 + ruff 整理）、前端 6 文件。
+  7. CI：链上全部 PR 的 `verify` 仍是账单故障秒级失败模式
+     （本轨核查时 #257 等均为 UNSTABLE，非代码失败）；
+     CI 变绿前不合并，绝不改 CI 配置绕过。
+  8. 旧链 #199→#205→#207 与 #209–#215 仍全部 OPEN：
+     合并前复核它们与本链的交集（server 白名单、worker
+     断点分支、sandbox re-export），有冲突先解决冲突方，
+     不静默覆盖。
+
+### 13.2 真机验证清单（用例与验收标准细化）
+
+以下用例全部待 KVM 宿主，验收标准是“通过才算”，不是
+“跑过就算”；任一用例未跑即记为未验证，不写进已验。
+
+- V-1 冷启动：CHV worker 在 KVM 宿主上起 VM → guest
+  SSH 就绪（钉死 known_hosts，provisioned 模式）→ 跑通
+  一个真实任务（host.py 在客机内执行）→ 任务完成且 VM
+  已销毁、任务盘已删。验收：任务状态 completed，宿主
+  state_dir 无该任务残留盘与 seed。
+- V-2 seed 首启时序：provisioned 模式下客机 cloud-init
+  在 sshd 启动前应用 seed（host key 不再生、客内密钥文件
+  0600）。验收：`sshd -T` 显示 PasswordAuthentication no
+  等加固项，known_hosts 钉死校验通过，非 TOFU 回落。
+- V-3 快照恢复：任务中途 hibernate（pause + snapshot +
+  shutdown）→ restore 后显式 resume → 断点续跑完成。
+  验收：恢复后 known_hosts 不变（不重预置），快照文件
+  落盘非空且经 `snapshot_not_persisted` 校验。
+- V-4 网关真实任务：sub2api 网关任务在 CHV 上跑通，
+  密钥只走 seed 客内文件，宿主 `ps` / `/proc/*/cmdline`
+  里看不到密钥值。验收：任务完成 + 宿主进程表抽查无密钥。
+- V-5 取消与配额真杀：同步 SSH 阻塞中取消任务、配额超限
+  时，看门狗调 `cancel_vm` 真关 VM。验收：VM 进程消失，
+  任务状态 interrupted 且原因写回正确。
+- V-6 审计落盘：DB 审计回调失败时，`chv-audit-spill.jsonl`
+  里有该事件行、`audit_failure_count` +1、任务不中断。
+  验收：落盘行 event/task_id/detail 与丢失事件一致。
+- V-7 动态安全负向：客机 root  unset 代理后直连（应被
+  tap/防火墙挡住）、跨 VM 探活与 IP 冒用（SSH 钉死应拒）、
+  崩溃注入后残留扫描（私钥/seed/盘应被清理或脏标记拒起）。
+  验收：每一项都有“被挡住”的证据，不是有代码就过。
+- V-8 负载：4 VM 并发（`CHV_MAX_VMS` 默认值）下容量门
+  计数含重启后残留 socket 扫描，死 socket 不占名额、活
+  VM 不被超发。验收：并发任务全部完成或明确排队拒绝，
+  无静默降级到 Docker/Local。
+- V-9 供应链清单：`generate_lockfile.py` 在构建宿主上跑
+  出真实 lockfile，`--verify` 通过且 unresolved 为空；
+  再用 `check_lockfile.py` 对 BUILDINFO.versions 复核。
+  验收：lockfile 由构建宿主产出，不是本轨合成数据。
+
+### 13.3 灰度启用清单
+
+- 阶段 0（合并后、默认关闭）：合并整条链，CHV 仍默认
+  关闭，不进生产任务路由；先跑 §13.2 的 V-1～V-9。
+- 阶段 1（单租户可信项目）：只对明确指定的单租户项目
+  开 CHV（`CHV_REUSE_SINGLE_TENANT_EXPERIMENT` 与
+  `CHV_SINGLE_TENANT_PROJECT` 的声明口径不变，复用
+  实验仍需同时声明，两者缺一即 preflight 拒绝）。
+- 阶段 2（受限多租户）：放开到受邀项目，监控 VM 残留盘、
+  审计落盘、容量门与快照配额三项指标一周无异常。
+- 阶段 3（全量多租户）：仅在阶段 2 指标干净 + 动态安全
+  审计结论由 No-Go 改为有条件启用后，才可讨论；绝不
+  从阶段 0 直跳全量。
+
+### 13.4 外部关卡（本轨代码做不到，逐项列出）
+
+1. CI 账单恢复变绿（硬门禁，合并前提）。
+2. 链上 10 个 PR 按顺序合并 + 本 PR 合并（需先过 §13.1）。
+3. 用户侧 provision KVM 宿主（裸金属或嵌套虚拟化实例，
+   须见 `/dev/kvm`；生产宿主与本 VM 均无 KVM，无法替代）。
+4. 客机镜像真实构建与发布（`build.sh` 全量跑通 + V-9）。
+5. §13.2 真机验证全部通过（含 V-7 动态安全负向）。
+6. 负载测试（V-8）与安全审计结论更新（No-Go → 有条件启用）。
+7. 前端 live 点击验证（用户侧 live browser 检查清单见
+   本 PR 描述；回环地址限制下浏览器任务无法代劳）。