@agentsean/daemon 1.0.0

package/dist/action-routes.js

@@ -0,0 +1,303 @@
+import { createHash } from "node:crypto";
+import { desc, eq } from "drizzle-orm";
+import { actions, changeSnapshots, changes, findings, pages, sites, } from "@agentsean/db";
+import { claimForChange, DEFAULT_EVIDENCE_TIER, EVIDENCE_MEANING, } from "@agentsean/measure";
+import { actionFromRow, executeAction, loadChange, loadGitConnection, markReverted, planTitleActions, revertChange, saveAction, listAdapterConnections, upsertAdapterConnection, upsertGitConnection, } from "@agentsean/actions";
+import { adapterForSite } from "@agentsean/adapter-factory";
+import { isCmsWriteKind, isHostedMode, refuseHostedCmsCredential, } from "@agentsean/hosted";
+import { isHalted } from "./paths.js";
+import { activityPageHtml } from "./activity-page.js";
+function approvalKey(token) {
+    return createHash("sha256").update(token).digest();
+}
+function siteOf(db, origin) {
+    if (origin) {
+        return db.select().from(sites).where(eq(sites.origin, origin)).get();
+    }
+    return db.select().from(sites).all()[0];
+}
+function adapterFor(db, siteId, opts, repoOverride) {
+    if (repoOverride) {
+        upsertGitConnection(db, siteId, {
+            ...loadGitConnection(db, siteId),
+            repoPath: repoOverride,
+        });
+    }
+    const factoryOpts = opts.gitFetch ? { fetch: opts.gitFetch } : undefined;
+    return adapterForSite(db, siteId, factoryOpts);
+}
+export function registerActionRoutes(app, opts) {
+    const html = activityPageHtml();
+    app.get("/activity", async (_req, reply) => {
+        reply.type("text/html").send(html);
+    });
+    app.get("/api/actions", (req) => {
+        const q = req.query;
+        const rows = q.siteId
+            ? opts.db.select().from(actions).where(eq(actions.siteId, q.siteId)).all()
+            : opts.db.select().from(actions).all();
+        return {
+            actions: rows.map((r) => ({
+                id: r.id,
+                kind: r.actionType,
+                tier: r.tier,
+                state: r.state,
+                targetRef: r.targetRef,
+                error: r.error,
+                createdAt: r.createdAt,
+                appliedAt: r.appliedAt,
+            })),
+        };
+    });
+    app.get("/api/changes", () => {
+        const rows = opts.db.select().from(changes).orderBy(desc(changes.appliedAt)).all();
+        const out = rows.map((row) => {
+            const snaps = opts.db
+                .select()
+                .from(changeSnapshots)
+                .where(eq(changeSnapshots.changeId, row.id))
+                .all();
+            const before = snaps.find((s) => s.kind === "before")?.body ?? "";
+            const after = snaps.find((s) => s.kind === "after")?.body ?? "";
+            const metaRaw = snaps.find((s) => s.kind === "meta")?.body;
+            let prUrl = null;
+            if (metaRaw) {
+                try {
+                    const meta = JSON.parse(metaRaw);
+                    prUrl = meta.prUrl ?? null;
+                }
+                catch {
+                    prUrl = null;
+                }
+            }
+            const claim = claimForChange(opts.db, row.id);
+            return {
+                id: row.id,
+                actionId: row.actionId,
+                summary: row.summary,
+                appliedAt: row.appliedAt,
+                revertedAt: row.revertedAt,
+                revertible: Boolean(row.revertible) && !row.revertedAt,
+                before,
+                after,
+                prUrl,
+                evidenceTier: claim?.evidenceTier ?? DEFAULT_EVIDENCE_TIER,
+                causationClaimed: claim?.causationClaimed ?? false,
+                evidenceStatement: claim?.statement ?? EVIDENCE_MEANING.E,
+            };
+        });
+        return { changes: out };
+    });
+    app.post("/api/adapters/git", async (req, reply) => {
+        const body = (req.body ?? {});
+        const site = siteOf(opts.db, body.origin);
+        if (!site)
+            return reply.code(400).send({ error: "unknown_site" });
+        if (!body.repoPath)
+            return reply.code(400).send({ error: "missing_repoPath" });
+        const config = { repoPath: body.repoPath };
+        if (body.token)
+            config["token"] = body.token;
+        upsertGitConnection(opts.db, site.id, config);
+        return { ok: true, siteId: site.id, kind: "git" };
+    });
+    app.get("/api/adapters", (req) => {
+        const q = req.query;
+        const site = q.siteId
+            ? opts.db.select().from(sites).where(eq(sites.id, q.siteId)).get()
+            : opts.db.select().from(sites).all()[0];
+        if (!site)
+            return { adapters: [] };
+        return {
+            adapters: listAdapterConnections(opts.db, site.id).map((r) => ({
+                kind: r.kind,
+                connected: true,
+            })),
+        };
+    });
+    app.post("/api/adapters", async (req, reply) => {
+        const body = (req.body ?? {});
+        const site = siteOf(opts.db, body.origin);
+        if (!site)
+            return reply.code(400).send({ error: "unknown_site" });
+        if (!body.kind || !body.config)
+            return reply.code(400).send({ error: "missing_kind_or_config" });
+        if (isHostedMode() && isCmsWriteKind(body.kind)) {
+            try {
+                refuseHostedCmsCredential(body.kind);
+            }
+            catch (err) {
+                return reply.code(403).send({
+                    error: "hosted_connector",
+                    message: err instanceof Error ? err.message : "refused",
+                });
+            }
+        }
+        upsertAdapterConnection(opts.db, site.id, body.kind, body.config);
+        return { ok: true, siteId: site.id, kind: body.kind };
+    });
+    app.post("/api/actions/plan", async (req, reply) => {
+        const body = (req.body ?? {});
+        const site = siteOf(opts.db, body.origin);
+        if (!site)
+            return reply.code(400).send({ error: "unknown_site" });
+        const pageRows = opts.db
+            .select()
+            .from(pages)
+            .where(eq(pages.siteId, site.id))
+            .all();
+        const findingRows = opts.db
+            .select()
+            .from(findings)
+            .where(eq(findings.siteId, site.id))
+            .all();
+        const planned = planTitleActions({
+            siteId: site.id,
+            origin: site.origin,
+            pages: pageRows.map((p) => ({
+                id: p.id,
+                url: p.url,
+                title: p.title,
+                metaDescription: p.metaDescription,
+                h1: p.h1,
+            })),
+            findings: findingRows.map((f) => ({
+                id: f.id,
+                siteId: f.siteId,
+                pageId: f.pageId,
+                ruleId: f.ruleId,
+                status: f.status,
+            })),
+        });
+        for (const a of planned)
+            saveAction(opts.db, a, "proposed");
+        return { ok: true, actions: planned };
+    });
+    app.post("/api/actions/:id/apply", async (req, reply) => {
+        const id = req.params.id;
+        const body = (req.body ?? {});
+        const row = opts.db.select().from(actions).where(eq(actions.id, id)).get();
+        if (!row)
+            return reply.code(404).send({ error: "unknown_action" });
+        const action = actionFromRow(row);
+        if (!action)
+            return reply.code(400).send({ error: "malformed_action" });
+        let adapter;
+        try {
+            adapter = adapterFor(opts.db, action.siteId, opts, body.repoPath);
+        }
+        catch (e) {
+            return reply.code(400).send({
+                error: "adapter",
+                message: e instanceof Error ? e.message : String(e),
+            });
+        }
+        const result = await executeAction({
+            db: opts.db,
+            action,
+            adapter,
+            approvalKey: approvalKey(opts.token),
+            halted: isHalted(opts.seanHome),
+        });
+        return result;
+    });
+    app.post("/api/changes/:id/revert", async (req, reply) => {
+        const id = req.params.id;
+        const change = loadChange(opts.db, id);
+        if (!change)
+            return reply.code(404).send({ error: "unknown_change" });
+        const existing = opts.db.select().from(changes).where(eq(changes.id, id)).get();
+        if (existing?.revertedAt)
+            return reply.code(409).send({ error: "already_reverted" });
+        let adapter;
+        try {
+            adapter = adapterFor(opts.db, change.siteId, opts);
+        }
+        catch (e) {
+            return reply.code(400).send({
+                error: "adapter",
+                message: e instanceof Error ? e.message : String(e),
+            });
+        }
+        const result = await revertChange({ db: opts.db, change, adapter });
+        if (!result.ok)
+            return reply.code(500).send({ error: result.error });
+        markReverted(opts.db, id);
+        const actionRow = opts.db
+            .select()
+            .from(actions)
+            .where(eq(actions.id, change.actionId))
+            .get();
+        if (actionRow) {
+            opts.db
+                .update(actions)
+                .set({ state: "reverted" })
+                .where(eq(actions.id, actionRow.id))
+                .run();
+        }
+        return { ok: true, changeId: id };
+    });
+    app.post("/api/apply", async (req, reply) => {
+        const body = (req.body ?? {});
+        const site = siteOf(opts.db, body.origin);
+        if (!site)
+            return reply.code(400).send({ error: "unknown_site" });
+        if (body.repoPath) {
+            upsertGitConnection(opts.db, site.id, {
+                ...loadGitConnection(opts.db, site.id),
+                repoPath: body.repoPath,
+            });
+        }
+        let adapter;
+        try {
+            adapter = adapterFor(opts.db, site.id, opts, body.repoPath);
+        }
+        catch (e) {
+            return reply.code(400).send({
+                error: "adapter",
+                message: e instanceof Error ? e.message : String(e),
+            });
+        }
+        const pageRows = opts.db
+            .select()
+            .from(pages)
+            .where(eq(pages.siteId, site.id))
+            .all();
+        const findingRows = opts.db
+            .select()
+            .from(findings)
+            .where(eq(findings.siteId, site.id))
+            .all();
+        const planned = planTitleActions({
+            siteId: site.id,
+            origin: site.origin,
+            pages: pageRows.map((p) => ({
+                id: p.id,
+                url: p.url,
+                title: p.title,
+                metaDescription: p.metaDescription,
+                h1: p.h1,
+            })),
+            findings: findingRows.map((f) => ({
+                id: f.id,
+                siteId: f.siteId,
+                pageId: f.pageId,
+                ruleId: f.ruleId,
+                status: f.status,
+            })),
+        });
+        const results = [];
+        for (const action of planned) {
+            results.push(await executeAction({
+                db: opts.db,
+                action,
+                adapter,
+                approvalKey: approvalKey(opts.token),
+                halted: isHalted(opts.seanHome),
+                dryRun: Boolean(body.dryRun),
+            }));
+        }
+        return { ok: true, results, activity: "/activity" };
+    });
+}
+//# sourceMappingURL=action-routes.js.map

package/dist/action-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-routes.js","sourceRoot":"","sources":["../src/action-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EACL,OAAO,EACP,eAAe,EACf,OAAO,EACP,QAAQ,EACR,KAAK,EACL,KAAK,GACN,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,aAAa,EACb,aAAa,EACb,UAAU,EACV,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,sBAAsB,EACtB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EACL,cAAc,EACd,YAAY,EACZ,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAStD,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,MAAM,CAAC,EAAkB,EAAE,MAAe;IACjD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,UAAU,CACjB,EAAkB,EAClB,MAAc,EACd,IAAwB,EACxB,YAAqB;IAErB,IAAI,YAAY,EAAE,CAAC;QACjB,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE;YAC9B,GAAG,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC;YAChC,QAAQ,EAAE,YAAY;SACvB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,OAAO,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,GAAoB,EACpB,IAAwB;IAExB,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAEhC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACzC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,EAAE;QAC9B,MAAM,CAAC,GAAG,GAAG,CAAC,KAA4B,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM;YACnB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE;YAC1E,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACxB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,UAAU;gBAClB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,EAAE;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACnF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE;iBAClB,MAAM,EAAE;iBACR,IAAI,CAAC,eAAe,CAAC;iBACrB,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;iBAC3C,GAAG,EAAE,CAAC;YACT,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;YAClE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC;YAC3D,IAAI,KAAK,GAAkB,IAAI,CAAC;YAChC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA8B,CAAC;oBAC9D,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC;gBAC7B,CAAC;gBAAC,MAAM,CAAC;oBACP,KAAK,GAAG,IAAI,CAAC;gBACf,CAAC;YACH,CAAC;YACD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9C,OAAO;gBACL,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU;gBACtD,MAAM;gBACN,KAAK;gBACL,KAAK;gBACL,YAAY,EAAE,KAAK,EAAE,YAAY,IAAI,qBAAqB;gBAC1D,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,IAAI,KAAK;gBAClD,iBAAiB,EAAE,KAAK,EAAE,SAAS,IAAI,gBAAgB,CAAC,CAAC;aAC1D,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACjD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAI3B,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC/E,MAAM,MAAM,GAA4B,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpE,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QAC7C,mBAAmB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC9C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE;QAC/B,MAAM,CAAC,GAAG,GAAG,CAAC,KAA4B,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM;YACnB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE;YAClE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACnC,OAAO;YACL,QAAQ,EAAE,sBAAsB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7D,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC7C,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAI3B,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM;YAC5B,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACnE,IAAI,YAAY,EAAE,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC;gBACH,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC1B,KAAK,EAAE,kBAAkB;oBACzB,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;iBACxD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,uBAAuB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACjD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAwB,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE;aACrB,MAAM,EAAE;aACR,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;aAChC,GAAG,EAAE,CAAC;QACT,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE;aACxB,MAAM,EAAE;aACR,IAAI,CAAC,QAAQ,CAAC;aACd,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;aACnC,GAAG,EAAE,CAAC;QACT,MAAM,OAAO,GAAG,gBAAgB,CAAC;YAC/B,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1B,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,eAAe,EAAE,CAAC,CAAC,eAAe;gBAClC,EAAE,EAAE,CAAC,CAAC,EAAE;aACT,CAAC,CAAC;YACH,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChC,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC,CAAC;SACJ,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACtD,MAAM,EAAE,GAAI,GAAG,CAAC,MAAyB,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA0B,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC3E,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACxE,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aACpD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;YACjC,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,MAAM;YACN,OAAO;YACP,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;YACpC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;SAChC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACvD,MAAM,EAAE,GAAI,GAAG,CAAC,MAAyB,CAAC,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAChF,IAAI,QAAQ,EAAE,UAAU;YACtB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC7D,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aACpD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACrE,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE;aACtB,MAAM,EAAE;aACR,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;aACtC,GAAG,EAAE,CAAC;QACT,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,EAAE;iBACJ,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;iBAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;iBACnC,GAAG,EAAE,CAAC;QACX,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAI3B,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAClE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,mBAAmB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;gBACpC,GAAG,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;gBACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aACpD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE;aACrB,MAAM,EAAE;aACR,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;aAChC,GAAG,EAAE,CAAC;QACT,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE;aACxB,MAAM,EAAE;aACR,IAAI,CAAC,QAAQ,CAAC;aACd,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;aACnC,GAAG,EAAE,CAAC;QACT,MAAM,OAAO,GAAG,gBAAgB,CAAC;YAC/B,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1B,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,eAAe,EAAE,CAAC,CAAC,eAAe;gBAClC,EAAE,EAAE,CAAC,CAAC,EAAE;aACT,CAAC,CAAC;YACH,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChC,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC,CAAC;SACJ,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC;QACnB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CACV,MAAM,aAAa,CAAC;gBAClB,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,MAAM;gBACN,OAAO;gBACP,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;gBACpC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAC/B,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;aAC7B,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/activity-page.d.ts

@@ -0,0 +1,2 @@
+export declare function activityPageHtml(): string;
+//# sourceMappingURL=activity-page.d.ts.map

package/dist/activity-page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-page.d.ts","sourceRoot":"","sources":["../src/activity-page.ts"],"names":[],"mappings":"AAAA,wBAAgB,gBAAgB,IAAI,MAAM,CAiHzC"}

package/dist/activity-page.js

@@ -0,0 +1,115 @@
+export function activityPageHtml() {
+    return `<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8"/>
+  <meta name="viewport" content="width=device-width, initial-scale=1"/>
+  <title>Activity — Agent Sean</title>
+  <style>
+    :root { color-scheme: light dark; --fg: #111; --muted: #555; --acc: #0b57d0; --bg: #f6f7f9; --card: #fff; --bd: #d0d7de; --del: #c00; --ins: #0a0; }
+    @media (prefers-color-scheme: dark) {
+      :root { --fg: #eef; --muted: #9aa; --acc: #8ab4f8; --bg: #0f1115; --card: #171a21; --bd: #2c313a; --del: #f88; --ins: #8d8; }
+    }
+    body { font: 16px/1.45 system-ui, sans-serif; margin: 0; background: var(--bg); color: var(--fg); }
+    main { max-width: 880px; margin: 2rem auto; padding: 0 1.25rem 3rem; }
+    h1 { font-size: 1.5rem; margin: 0 0 .25rem; }
+    p.lead { color: var(--muted); margin-top: 0; }
+    .card { background: var(--card); border: 1px solid var(--bd); border-radius: 12px; padding: 1.25rem; margin: 1rem 0; }
+    button { background: var(--acc); color: #fff; border: 0; border-radius: 8px; padding: .5rem 1rem; font: inherit; cursor: pointer; }
+    button.secondary { background: transparent; color: var(--acc); border: 1px solid var(--acc); }
+    pre { overflow: auto; background: var(--bg); padding: .75rem; border-radius: 8px; font-size: .8rem; }
+    .del { color: var(--del); }
+    .ins { color: var(--ins); }
+    .muted { color: var(--muted); font-size: .9rem; }
+    .row { display: flex; gap: .5rem; flex-wrap: wrap; align-items: center; }
+    a { color: var(--acc); }
+  </style>
+</head>
+<body>
+<main>
+  <h1>Activity</h1>
+  <p class="lead">Every write is a reversible diff. One click reverts it. The LLM never holds credentials.</p>
+  <p class="muted"><a href="/connect">Connect Google</a></p>
+  <div id="app"><p class="muted">Loading…</p></div>
+</main>
+<script>
+const csrf = { "x-sean-csrf": "1" };
+function tokenFromHash() {
+  const h = new URLSearchParams(location.hash.replace(/^#/, ""));
+  return h.get("token");
+}
+async function session() {
+  const t = tokenFromHash();
+  const headers = t ? { "x-sean-token": t } : {};
+  const r = await fetch("/api/session", { headers });
+  if (t && r.ok) history.replaceState(null, "", location.pathname + location.search);
+  return r.ok;
+}
+async function api(path, opts = {}) {
+  const r = await fetch(path, {
+    ...opts,
+    headers: { "content-type": "application/json", ...csrf, ...(opts.headers || {}) },
+  });
+  const text = await r.text();
+  let json = null;
+  try { json = text ? JSON.parse(text) : null; } catch { json = { raw: text }; }
+  if (!r.ok) throw new Error((json && (json.error || json.message)) || r.status + " " + path);
+  return json;
+}
+function el(html) { const d = document.createElement("div"); d.innerHTML = html; return d; }
+function render(node) { document.getElementById("app").replaceChildren(node); }
+function esc(s) {
+  return String(s).replace(/[&<>"]/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;" }[c]));
+}
+function diffHtml(before, after) {
+  const a = String(before || "").split("\\n");
+  const b = String(after || "").split("\\n");
+  const max = Math.max(a.length, b.length);
+  const lines = [];
+  for (let i = 0; i < max; i++) {
+    if (a[i] === b[i]) continue;
+    if (a[i] !== undefined) lines.push("<div class='del'>- " + esc(a[i]) + "</div>");
+    if (b[i] !== undefined) lines.push("<div class='ins'>+ " + esc(b[i]) + "</div>");
+  }
+  return lines.join("") || "<div class='muted'>No line-level diff.</div>";
+}
+async function revert(id) {
+  await api("/api/changes/" + id + "/revert", { method: "POST", body: "{}" });
+  await show();
+}
+async function show() {
+  const data = await api("/api/changes");
+  const actions = await api("/api/actions");
+  const wrap = document.createElement("div");
+  if (!data.changes.length && !actions.actions.length) {
+    wrap.appendChild(el("<div class='card'><p>No writes yet. Run <code>sean apply --repo ./site</code> after an audit. Sean fixes a title tag by opening a PR you can revert.</p></div>"));
+    render(wrap);
+    return;
+  }
+  for (const a of actions.actions) {
+    wrap.appendChild(el("<div class='card'><p><strong>" + esc(a.kind) + "</strong> · T" + esc(a.tier) + " · " + esc(a.state) + "</p><p class='muted'>" + esc(a.targetRef) + "</p></div>"));
+  }
+  for (const c of data.changes) {
+    const card = el("<div class='card' data-id='" + esc(c.id) + "'><p><strong>" + esc(c.summary) + "</strong></p><p class='muted'>" + esc(c.appliedAt) + (c.revertedAt ? " · reverted " + esc(c.revertedAt) : "") + (c.prUrl ? " · <a href='" + esc(c.prUrl) + "'>pull request</a>" : "") + "</p><pre>" + diffHtml(c.before, c.after) + "</pre></div>");
+    if (c.revertible && !c.revertedAt) {
+      const b = document.createElement("button");
+      b.textContent = "Revert";
+      b.onclick = () => revert(c.id);
+      card.querySelector(".card")?.appendChild(b) || card.firstElementChild.appendChild(b);
+    }
+    wrap.appendChild(card);
+  }
+  render(wrap);
+}
+session().then((ok) => {
+  if (!ok) {
+    render(el("<div class='card'><p>Open this page from <code>sean apply</code> or <code>sean start</code> so the local session cookie can be set.</p></div>"));
+    return;
+  }
+  return show();
+}).catch((e) => render(el("<div class='card'><p class='err'>" + esc(e.message) + "</p></div>")));
+</script>
+</body>
+</html>`;
+}
+//# sourceMappingURL=activity-page.js.map

package/dist/activity-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-page.js","sourceRoot":"","sources":["../src/activity-page.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,gBAAgB;IAC9B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA+GD,CAAC;AACT,CAAC"}

package/dist/bind.d.ts

@@ -0,0 +1,12 @@
+export declare class BindError extends Error {
+    constructor(message: string);
+}
+export declare function isLoopbackHost(host: string): boolean;
+/**
+ * Refuse to start if the process would be exposed without auth.
+ * Auth is on by default; `--no-auth` is only legal on loopback.
+ */
+export declare function assertBindAllowed(host: string, authEnabled: boolean): void;
+export declare function allowedHosts(port: number, publicOrigin?: string | undefined): Set<string>;
+export declare function allowedOrigins(port: number, publicOrigin?: string | undefined): Set<string>;
+//# sourceMappingURL=bind.d.ts.map

package/dist/bind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bind.d.ts","sourceRoot":"","sources":["../src/bind.ts"],"names":[],"mappings":"AAAA,qBAAa,SAAU,SAAQ,KAAK;gBACtB,OAAO,EAAE,MAAM;CAI5B;AAUD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMpD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,IAAI,CAO1E;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,GAChC,GAAG,CAAC,MAAM,CAAC,CAgBb;AAED,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,GAChC,GAAG,CAAC,MAAM,CAAC,CAQb"}

package/dist/bind.js

@@ -0,0 +1,62 @@
+export class BindError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "BindError";
+    }
+}
+const LOOPBACK_EXACT = new Set([
+    "127.0.0.1",
+    "::1",
+    "localhost",
+    "0:0:0:0:0:0:0:1",
+    "::ffff:127.0.0.1",
+]);
+export function isLoopbackHost(host) {
+    const h = host.trim().toLowerCase();
+    if (LOOPBACK_EXACT.has(h))
+        return true;
+    // 127.0.0.0/8
+    if (/^127(?:\.\d{1,3}){3}$/.test(h))
+        return true;
+    return false;
+}
+/**
+ * Refuse to start if the process would be exposed without auth.
+ * Auth is on by default; `--no-auth` is only legal on loopback.
+ */
+export function assertBindAllowed(host, authEnabled) {
+    if (isLoopbackHost(host))
+        return;
+    if (!authEnabled) {
+        throw new BindError(`Refusing to bind ${host}: off-loopback bind requires auth. Use Tailscale Serve or a Cloudflare Tunnel; never bind 0.0.0.0 without auth.`);
+    }
+}
+export function allowedHosts(port, publicOrigin) {
+    const hosts = new Set([
+        `127.0.0.1:${port}`,
+        `localhost:${port}`,
+        `[::1]:${port}`,
+        `::1:${port}`,
+    ]);
+    if (publicOrigin) {
+        try {
+            const u = new URL(publicOrigin);
+            hosts.add(u.host);
+        }
+        catch {
+            // ignore malformed
+        }
+    }
+    return hosts;
+}
+export function allowedOrigins(port, publicOrigin) {
+    const origins = new Set([
+        `http://127.0.0.1:${port}`,
+        `http://localhost:${port}`,
+        `http://[::1]:${port}`,
+    ]);
+    if (publicOrigin)
+        origins.add(publicOrigin.replace(/\/$/, ""));
+    return origins;
+}
+//# sourceMappingURL=bind.js.map

package/dist/bind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bind.js","sourceRoot":"","sources":["../src/bind.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,SAAU,SAAQ,KAAK;IAClC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,WAAW;IACX,KAAK;IACL,WAAW;IACX,iBAAiB;IACjB,kBAAkB;CACnB,CAAC,CAAC;AAEH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,cAAc;IACd,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,WAAoB;IAClE,IAAI,cAAc,CAAC,IAAI,CAAC;QAAE,OAAO;IACjC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,SAAS,CACjB,oBAAoB,IAAI,iHAAiH,CAC1I,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,YAAiC;IAEjC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC;QACpB,aAAa,IAAI,EAAE;QACnB,aAAa,IAAI,EAAE;QACnB,SAAS,IAAI,EAAE;QACf,OAAO,IAAI,EAAE;KACd,CAAC,CAAC;IACH,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;YAChC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,YAAiC;IAEjC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,oBAAoB,IAAI,EAAE;QAC1B,oBAAoB,IAAI,EAAE;QAC1B,gBAAgB,IAAI,EAAE;KACvB,CAAC,CAAC;IACH,IAAI,YAAY;QAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/D,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/boot.d.ts

@@ -0,0 +1,15 @@
+export type BootOptions = {
+    host?: string | undefined;
+    port?: number | undefined;
+    seanHome?: string | undefined;
+    authEnabled?: boolean | undefined;
+    registerSignals?: boolean | undefined;
+};
+export type RunningDaemon = {
+    host: string;
+    port: number;
+    pid: number;
+    close: () => Promise<void>;
+};
+export declare function startDaemon(options?: BootOptions): Promise<RunningDaemon>;
+//# sourceMappingURL=boot.d.ts.map

package/dist/boot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot.d.ts","sourceRoot":"","sources":["../src/boot.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAClC,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B,CAAC;AAEF,wBAAsB,WAAW,CAAC,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,aAAa,CAAC,CA+GnF"}