@corenel/harness 0.8.0 → 0.10.0

package/dist/sessions/jsonl.js

@@ -8,6 +8,7 @@ export function foldSession(text) {
     const turns = [];
     let title = '';
     let titleLocked;
+    let movedTo;
     let updatedAt = 0;
     for (const raw of text.split('\n')) {
         const s = raw.trim();
@@ -36,6 +37,10 @@ export function foldSession(text) {
             turns[line.i] = line.m;
             updatedAt = Math.max(updatedAt, line.at);
         }
+        else if (line.k === 'moved' && typeof line.roomId === 'string' && typeof line.at === 'number') {
+            movedTo = { movedToRoom: line.roomId, at: line.at };
+            updatedAt = Math.max(updatedAt, line.at);
+        }
     }
     if (!meta)
         return null;
@@ -46,7 +51,12 @@ export function foldSession(text) {
         updatedAt: updatedAt || meta.createdAt,
         messages: turns.filter((t) => t !== undefined),
         ...(meta.surface ? { surface: meta.surface } : {}),
+        // Only a STRING owner survives the fold: the line came from disk (or a
+        // sidecar), so its declared type guarantees nothing, and a non-string here
+        // would reach a comparison that decides how a row is drawn.
+        ...(typeof meta.owner === 'string' && meta.owner ? { owner: meta.owner } : {}),
         ...(titleLocked !== undefined ? { titleLocked } : {}),
+        ...(movedTo !== undefined ? { movedTo } : {}),
     };
 }
 //# sourceMappingURL=jsonl.js.map

package/dist/sessions/jsonl.js.map

@@ -1 +1 @@
-{"version":3,"file":"jsonl.js","sourceRoot":"","sources":["../../sessions/jsonl.ts"],"names":[],"mappings":"AAgBA,MAAM,UAAU,UAAU,CAAC,IAAiB;IAC1C,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACrC,CAAC;AAED;uCACuC;AACvC,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,IAAI,GAA+C,IAAI,CAAC;IAC5D,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,WAAgC,CAAC;IACrC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,IAAiB,CAAC;QACtB,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAgB,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QAChE,IAAI,IAAI,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACpG,IAAI,GAAG,IAAI,CAAC;YACZ,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,IAAI,CAAC,CAAC,KAAK,aAAa,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACnE,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;gBAAE,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACvD,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,SAAS;gBAAE,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YAC1E,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,CAAC;aAAM,IAAI,IAAI,CAAC,CAAC,KAAK,MAAM,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACvG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;YACvB,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK;QACL,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,SAAS,IAAI,IAAI,CAAC,SAAS;QACtC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"jsonl.js","sourceRoot":"","sources":["../../sessions/jsonl.ts"],"names":[],"mappings":"AAkBA,MAAM,UAAU,UAAU,CAAC,IAAiB;IAC1C,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACrC,CAAC;AAED;uCACuC;AACvC,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,IAAI,GAA+C,IAAI,CAAC;IAC5D,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,WAAgC,CAAC;IACrC,IAAI,OAAwD,CAAC;IAC7D,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,IAAiB,CAAC;QACtB,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAgB,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QAChE,IAAI,IAAI,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACpG,IAAI,GAAG,IAAI,CAAC;YACZ,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,IAAI,CAAC,CAAC,KAAK,aAAa,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACnE,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;gBAAE,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACvD,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,SAAS;gBAAE,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YAC1E,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,CAAC;aAAM,IAAI,IAAI,CAAC,CAAC,KAAK,MAAM,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACvG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;YACvB,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,CAAC;aAAM,IAAI,IAAI,CAAC,CAAC,KAAK,OAAO,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAChG,OAAO,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;YACpD,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK;QACL,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,SAAS,IAAI,IAAI,CAAC,SAAS;QACtC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,uEAAuE;QACvE,2EAA2E;QAC3E,4DAA4D;QAC5D,GAAG,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC"}

package/dist/sidecar/server.d.ts

@@ -13,19 +13,29 @@ export type PermissionAsk = Omit<Extract<SidecarMsg, {
  * MORE members than this (isAttended, outstanding, broadcastAsk, settle, nextId)
  * and is structurally assignable here without either package importing the other. */
 export interface SidecarAttendanceRegistry {
-    /** Attach a client to receive asks/resolutions; returns a detach function. */
+    /** Attach a client to receive asks/resolutions; returns a detach function.
+     * `identity` is OPTIONAL and additive: a caller that supplies none gets
+     * today's behaviour. Declared structurally rather than imported, for the
+     * dependency-direction reason in this interface's own header. */
     attach(client: {
         send(ask: PermissionAsk): void;
-        resolved(id: number, decision: PermissionDecision, by: 'client' | 'timeout' | 'unattended'): void;
+        resolved(id: number, decision: PermissionDecision, by: 'client' | 'timeout' | 'unattended', byClientId?: string): void;
         /** Optional: a daemon-side run started or settled. Optional here for the
          * same reason it is optional on the registry - a sidecar build (or a test
          * double) that only ever forwarded permission asks stays valid. */
         runActivity?(activity: DaemonRunActivity): void;
         registrations?(list: DaemonRegistration[]): void;
+    }, identity?: {
+        clientId: string;
+        accounts: readonly string[];
     }): () => void;
     /** Record this connection's answer to an outstanding ask. Ignored for an
-     * unknown/already-resolved id. */
-    answer(id: number, decision: PermissionDecision): void;
+     * unknown/already-resolved id. `by` is the attached-client object this
+     * connection registered, so the registry can name who answered -- typed
+     * `unknown` deliberately: this port must not learn `packages/sidecar`'s
+     * types, and the registry looks the object up in its own map, so an
+     * unrecognised value simply yields no name. */
+    answer(id: number, decision: PermissionDecision, by?: unknown): void;
 }
 /** The minimal shape SidecarServer needs from a live-run hub, so a second client
  * can watch a run it did not start. Declared HERE (harness-side), not imported
@@ -267,6 +277,14 @@ export interface SidecarServerOptions {
      * resolved). Absent means no room can be opened/listed/read/answered here,
      * and `welcome.features` omits `'rooms'` -- mirrors `roots`/`procs`. */
     rooms?: SidecarRooms;
+    /** Whether this daemon was started `--mode team`. Off (the default) changes
+     * nothing about rooms: `room-list` returns every room, exactly as it always
+     * has. On, `room-list` narrows to rooms the connection's OWN authenticated
+     * `clientId` is a member of -- see `onRoomList`. Named the same as
+     * `attendance.ts`'s `teamMode` because it is the same operator choice,
+     * threaded here for the same reason: private-by-default only once an
+     * operator has opted in. */
+    teamMode?: boolean;
     /** The daemon's process table, behind `proc-*`. Present ONLY when the operator
      * allowed shell: a streaming spawn is the same capability as the one-shot
      * `sidecar_shell_exec`, held open, so it must not appear on a daemon whose
@@ -405,6 +423,11 @@ export declare class SidecarServer {
     /** The friendly label from the same `hello`, kept beside `clientId` so the
      * dirName resolver is handed the identity the manifest keys on. */
     private clientName?;
+    /** This connection's attended-client object, retained so an answer it sends
+     * can be attributed to it. Typed `unknown` because its only consumer is the
+     * registry's own identity lookup, which takes `unknown` for the
+     * dependency-direction reason on `SidecarAttendanceRegistry.answer`. */
+    private attended?;
     /** Detach function for this connection's attendance attachment, set on a
      * successful `hello` when `opts.attendance` is wired. Called once, on channel
      * close, so a dead connection stops receiving/counting toward asks. */
@@ -540,6 +563,7 @@ export declare class SidecarServer {
     private onRoomList;
     private onRoomRead;
     private onRoomResume;
+    private actingId;
     private onRoomAnswer;
     private onRoomInterject;
     private onRoomClose;

package/dist/sidecar/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../sidecar/server.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,SAAS,EAEmC,UAAU,EAAE,kBAAkB,EAAE,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,EACxJ,YAAY,EAAE,eAAe,EAAe,eAAe,EAAE,WAAW,EACxE,WAAW,EAAE,eAAe,EAC7B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAEL,KAAK,cAAc,EAAE,KAAK,UAAU,EAAoC,KAAK,WAAW,EACxF,KAAK,aAAa,EAAE,KAAK,eAAe,EACxC,KAAK,aAAa,EAAE,KAAK,UAAU,EACpC,MAAM,mBAAmB,CAAC;AAE3B;6EAC6E;AAC7E,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;IAAE,CAAC,EAAE,gBAAgB,CAAA;CAAE,CAAC,EAAE,GAAG,CAAC,CAAC;AAEpF;;;;;;qFAMqF;AACrF,MAAM,WAAW,yBAAyB;IACxC,8EAA8E;IAC9E,MAAM,CAAC,MAAM,EAAE;QACb,IAAI,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAAC;QAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,GAAG,SAAS,GAAG,YAAY,GAAG,IAAI,CAAC;QAClG;;2EAEmE;QACnE,WAAW,CAAC,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAC;QAChD,aAAa,CAAC,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;KAClD,GAAG,MAAM,IAAI,CAAC;IACf;sCACkC;IAClC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACxD;AAED;;;;;kFAKkF;AAClF,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;IAChD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE;QAC5B,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QACzD,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;KAC9B,GAAG;QAAE,MAAM,EAAE;YAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,UAAU,EAAE,MAAM,CAAA;aAAE,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,MAAM,EAAE,MAAM,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CACnJ;AAED;;;;;;;;;;;;qBAYqB;AACrB,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACzG,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACtG;mDAC+C;IAC/C,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACtG;;gDAE4C;IAC5C,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7C;6EACyE;IACzE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACrF;mFAC+E;IAC/E,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACnF;8EAC0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACjD;;;oCAGgC;IAChC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAClG,SAAS,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACxD;AAED;;;;;;;;;;;;qBAYqB;AACrB,MAAM,WAAW,aAAa;IAC5B,IAAI,IAAI,UAAU,EAAE,CAAC;IACrB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1E,0DAA0D;IAC1D,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;gFAkBgF;AAChF,MAAM,WAAW,YAAY;IAC3B;0DACsD;IACtD,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/B;;wCAEoC;IACpC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/E,2EAA2E;IAC3E,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,IAAI,CAAC;CACrC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AAiBH,MAAM,WAAW,eAAe;IAC9B,WAAW,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC,CAAC;IACjG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAC/E;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CACxF,CAAC;IACF,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E;AAED,MAAM,WAAW,UAAU;IACzB;;2DAEuD;IACvD,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAC3E;;;gFAG4E;IAC5E,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3E;;0EAEsE;IACtE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACvF;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,cAAc,CAAC;IACxB,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB;gFAC4E;IAC5E,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB;4FACwF;IACxF,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B;iFAC6E;IAC7E,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;+CAG2C;IAC3C,UAAU,CAAC,EAAE,yBAAyB,CAAC;IACvC;;kEAE8D;IAC9D,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB;;0CAEsC;IACtC,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB;;kDAE8C;IAC9C,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;4EAGwE;IACxE,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;;2EAIuE;IACvE,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;wEAEoE;IACpE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;;;;;;;4BAUwB;IACxB,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAClE;;;;uEAImE;IACnE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;;4DAKwD;IACxD,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;6BAGyB;IACzB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;yDAGqD;IACrD,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;yEAGqE;IACrE,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,KAAK,MAAM,CAAC;IACzF;;;;;;;;;;;;;;;OAeG;IACH,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC;IAChC;;;;;;;;;;;;;;OAcG;IACH,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC1F;AAoDD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAiB;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAuB;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IACtD,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAC1D;;0DAEsD;IACtD,OAAO,CAAC,YAAY,CAAc;IAClC;;;;;;gFAM4E;IAC5E,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B;uEACmE;IACnE,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B;;2EAEuE;IACvE,OAAO,CAAC,cAAc,CAAC,CAAa;IACpC;;;8EAG0E;IAC1E,OAAO,CAAC,OAAO,CAAC,CAAS;IACzB,uEAAuE;IACvE,OAAO,CAAC,WAAW,CAAC,CAAa;IACjC;wDACoD;IACpD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;IAEtD;;;;iEAI6D;IAC7D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,SAAS,CAA2B;gBAEhC,IAAI,EAAE,oBAAoB;IAsDtC,OAAO,CAAC,SAAS;IA4OjB,OAAO,CAAC,OAAO;IA8Hf;gEAC4D;YAC9C,cAAc;IAc5B;;;eAGW;IACX,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,WAAW;IAiFnB;;sEAEkE;YACpD,SAAS;IA0BvB;;;;gEAI4D;IAC5D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqC;IAElE,OAAO,CAAC,eAAe;YAMT,SAAS;IAkGvB,OAAO,CAAC,YAAY;IASpB;;wBAEoB;IACpB,OAAO,CAAC,YAAY;IAMpB;;mDAE+C;IAC/C,OAAO,CAAC,gBAAgB;YAoBV,WAAW;IA6BzB;4EACwE;IACxE,OAAO,CAAC,YAAY;IAoBpB,mEAAmE;IACnE,OAAO,CAAC,YAAY;YASN,QAAQ;IAqCtB;;;;;;;;;uCASmC;YACrB,UAAU;YAwBV,YAAY;YAcZ,WAAW;IAczB;;;;;;;OAOG;IACH,OAAO,CAAC,WAAW;IA+CnB;;;;;;;;;OASG;YACW,YAAY;IAa1B;+EAC2E;YAC7D,eAAe;IAW7B;;;;iBAIa;YACC,YAAY;YAcZ,KAAK;IAmEnB;;;;;4EAKwE;IACxE,OAAO,CAAC,uBAAuB;YAQjB,aAAa;YAYb,UAAU;YAeV,aAAa;IAgB3B;wEACoE;YACtD,WAAW;IAYzB,OAAO,CAAC,SAAS;IAIjB;;;;;;;;;OASG;YACW,aAAa;IA4B3B,OAAO,CAAC,gBAAgB;YAeV,eAAe;YA2Bf,UAAU;YAiBV,UAAU;YAkBV,UAAU;YAqBV,YAAY;YAeZ,YAAY;YAeZ,eAAe;YAef,WAAW;IAazB;;;;;;;;;;;;;;;;;OAiBG;YAYW,UAAU;YAmCV,SAAS;YAuBT,cAAc;YAed,iBAAiB;IAe/B;;2DAEuD;YACzC,QAAQ;YAyBR,aAAa;YAkBb,gBAAgB;IAkB9B;;;;oEAIgE;IAChE,OAAO,CAAC,WAAW;IAanB,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAOrB;IAEF,OAAO,CAAC,QAAQ,CAAC,EAAE,CAKjB;IAEF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAErB;IAEF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAOvB;IAEF;mFAC+E;IAC/E,OAAO,CAAC,QAAQ,CAAC,KAAK,CAcpB;IAEF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAC2D;IAEnF,OAAO,CAAC,QAAQ,CAAC,GAAG,CACuE;CAC5F"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../sidecar/server.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,SAAS,EAEmC,UAAU,EAAE,kBAAkB,EAAE,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,EACxJ,YAAY,EAAE,eAAe,EAAe,eAAe,EAAE,WAAW,EACxE,WAAW,EAAE,eAAe,EAC7B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAEL,KAAK,cAAc,EAAE,KAAK,UAAU,EAAoC,KAAK,WAAW,EACxF,KAAK,aAAa,EAAE,KAAK,eAAe,EACxC,KAAK,aAAa,EAAE,KAAK,UAAU,EACpC,MAAM,mBAAmB,CAAC;AAE3B;6EAC6E;AAC7E,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;IAAE,CAAC,EAAE,gBAAgB,CAAA;CAAE,CAAC,EAAE,GAAG,CAAC,CAAC;AAEpF;;;;;;qFAMqF;AACrF,MAAM,WAAW,yBAAyB;IACxC;;;qEAGiE;IACjE,MAAM,CAAC,MAAM,EAAE;QACb,IAAI,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAAC;QAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,GAAG,SAAS,GAAG,YAAY,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvH;;2EAEmE;QACnE,WAAW,CAAC,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAC;QAChD,aAAa,CAAC,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;KAClD,EAAE,QAAQ,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,MAAM,IAAI,CAAC;IAC7E;;;;;mDAK+C;IAC/C,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAAE,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CACtE;AAED;;;;;kFAKkF;AAClF,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;IAChD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE;QAC5B,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QACzD,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;KAC9B,GAAG;QAAE,MAAM,EAAE;YAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,UAAU,EAAE,MAAM,CAAA;aAAE,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,MAAM,EAAE,MAAM,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CACnJ;AAED;;;;;;;;;;;;qBAYqB;AACrB,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACzG,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACtG;mDAC+C;IAC/C,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACtG;;gDAE4C;IAC5C,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7C;6EACyE;IACzE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACrF;mFAC+E;IAC/E,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACnF;8EAC0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACjD;;;oCAGgC;IAChC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAClG,SAAS,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACxD;AAED;;;;;;;;;;;;qBAYqB;AACrB,MAAM,WAAW,aAAa;IAC5B,IAAI,IAAI,UAAU,EAAE,CAAC;IACrB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1E,0DAA0D;IAC1D,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;gFAkBgF;AAChF,MAAM,WAAW,YAAY;IAC3B;0DACsD;IACtD,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/B;;wCAEoC;IACpC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/E,2EAA2E;IAC3E,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,IAAI,CAAC;CACrC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AAiBH,MAAM,WAAW,eAAe;IAC9B,WAAW,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC,CAAC;IACjG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAC/E;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CACxF,CAAC;IACF,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E;AAED,MAAM,WAAW,UAAU;IACzB;;2DAEuD;IACvD,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAC3E;;;gFAG4E;IAC5E,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3E;;0EAEsE;IACtE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACvF;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,cAAc,CAAC;IACxB,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB;gFAC4E;IAC5E,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB;4FACwF;IACxF,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B;iFAC6E;IAC7E,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;+CAG2C;IAC3C,UAAU,CAAC,EAAE,yBAAyB,CAAC;IACvC;;kEAE8D;IAC9D,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB;;0CAEsC;IACtC,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB;;kDAE8C;IAC9C,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;4EAGwE;IACxE,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;;;;gCAM4B;IAC5B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;2EAIuE;IACvE,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;wEAEoE;IACpE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;;;;;;;4BAUwB;IACxB,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAClE;;;;uEAImE;IACnE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;;4DAKwD;IACxD,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;6BAGyB;IACzB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;yDAGqD;IACrD,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;yEAGqE;IACrE,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,KAAK,MAAM,CAAC;IACzF;;;;;;;;;;;;;;;OAeG;IACH,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC;IAChC;;;;;;;;;;;;;;OAcG;IACH,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC1F;AAoDD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAiB;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAuB;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IACtD,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAC1D;;0DAEsD;IACtD,OAAO,CAAC,YAAY,CAAc;IAClC;;;;;;gFAM4E;IAC5E,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B;uEACmE;IACnE,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B;;;4EAGwE;IACxE,OAAO,CAAC,QAAQ,CAAC,CAAU;IAC3B;;2EAEuE;IACvE,OAAO,CAAC,cAAc,CAAC,CAAa;IACpC;;;8EAG0E;IAC1E,OAAO,CAAC,OAAO,CAAC,CAAS;IACzB,uEAAuE;IACvE,OAAO,CAAC,WAAW,CAAC,CAAa;IACjC;wDACoD;IACpD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;IAEtD;;;;iEAI6D;IAC7D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,SAAS,CAA2B;gBAEhC,IAAI,EAAE,oBAAoB;IAsDtC,OAAO,CAAC,SAAS;IA4OjB,OAAO,CAAC,OAAO;IAoJf;gEAC4D;YAC9C,cAAc;IAc5B;;;eAGW;IACX,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,WAAW;IAiFnB;;sEAEkE;YACpD,SAAS;IA0BvB;;;;gEAI4D;IAC5D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqC;IAElE,OAAO,CAAC,eAAe;YAMT,SAAS;IAkGvB,OAAO,CAAC,YAAY;IASpB;;wBAEoB;IACpB,OAAO,CAAC,YAAY;IAMpB;;mDAE+C;IAC/C,OAAO,CAAC,gBAAgB;YAoBV,WAAW;IA6BzB;4EACwE;IACxE,OAAO,CAAC,YAAY;IAoBpB,mEAAmE;IACnE,OAAO,CAAC,YAAY;YASN,QAAQ;IAqCtB;;;;;;;;;uCASmC;YACrB,UAAU;YAwBV,YAAY;YAcZ,WAAW;IAczB;;;;;;;OAOG;IACH,OAAO,CAAC,WAAW;IA+CnB;;;;;;;;;OASG;YACW,YAAY;IAa1B;+EAC2E;YAC7D,eAAe;IAW7B;;;;iBAIa;YACC,YAAY;YAcZ,KAAK;IAmEnB;;;;;4EAKwE;IACxE,OAAO,CAAC,uBAAuB;YAQjB,aAAa;YAYb,UAAU;YAeV,aAAa;IAgB3B;wEACoE;YACtD,WAAW;IAYzB,OAAO,CAAC,SAAS;IAIjB;;;;;;;;;OASG;YACW,aAAa;IA4B3B,OAAO,CAAC,gBAAgB;YAeV,eAAe;YA2Bf,UAAU;YAyEV,UAAU;YAsCV,UAAU;YA+CV,YAAY;IAmC1B,OAAO,CAAC,QAAQ;YAQF,YAAY;YAoBZ,eAAe;YAoBf,WAAW;IAkBzB;;;;;;;;;;;;;;;;;OAiBG;YAYW,UAAU;YAmCV,SAAS;YAuBT,cAAc;YAed,iBAAiB;IAoB/B;;2DAEuD;YACzC,QAAQ;YAyBR,aAAa;YAkBb,gBAAgB;IAkB9B;;;;oEAIgE;IAChE,OAAO,CAAC,WAAW;IAanB,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAOrB;IAEF,OAAO,CAAC,QAAQ,CAAC,EAAE,CAKjB;IAEF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAErB;IAEF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAOvB;IAEF;mFAC+E;IAC/E,OAAO,CAAC,QAAQ,CAAC,KAAK,CAcpB;IAEF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAC2D;IAEnF,OAAO,CAAC,QAAQ,CAAC,GAAG,CACuE;CAC5F"}

package/dist/sidecar/server.js

@@ -112,6 +112,16 @@ export class SidecarServer {
             writable: true,
             value: void 0
         });
+        /** This connection's attended-client object, retained so an answer it sends
+         * can be attributed to it. Typed `unknown` because its only consumer is the
+         * registry's own identity lookup, which takes `unknown` for the
+         * dependency-direction reason on `SidecarAttendanceRegistry.answer`. */
+        Object.defineProperty(this, "attended", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
         /** Detach function for this connection's attendance attachment, set on a
          * successful `hello` when `opts.attendance` is wired. Called once, on channel
          * close, so a dead connection stops receiving/counting toward asks. */
@@ -387,7 +397,7 @@ export class SidecarServer {
                 // answer is dropped silently rather than forwarded into the registry.
                 if (!this.authed)
                     return;
-                this.opts.attendance?.answer(m.id, m.decision);
+                this.opts.attendance?.answer(m.id, m.decision, this.attended);
                 return;
             case 'roots-browse':
                 // Auth-gated like every other request: directory enumeration must never
@@ -676,6 +686,13 @@ export class SidecarServer {
         // or object) must never reach `onClient`: downstream consumers use it as an
         // object key (a daemon's hosts manifest) or feed it to a directory-name
         // sanitizer that assumes a string.
+        /* Declared OUT here, not inside the identity block that fills it, because
+         * the attendance attach below needs the same bounded list -- and must get
+         * the ALREADY-BOUNDED one rather than re-reading `m.accounts`, which would
+         * reintroduce the unbounded walk the block below exists to prevent. A
+         * connection that carried no usable clientId leaves this empty, which is
+         * the right claim for a peer that identified itself as nobody. */
+        let accounts = [];
         if (typeof m.clientId === 'string' && m.clientId) {
             const wireId = m.clientId.slice(0, MAX_IDENTITY_FIELD_LEN);
             /* THE ONE PLACE IDENTITY IS DECIDED, and it has to be here.
@@ -709,7 +726,7 @@ export class SidecarServer {
              * `<account><spaces>` behind, which a normalizing comparison then trims
              * into a match nobody claimed. */
             const claimed = Array.isArray(m.accounts) ? m.accounts : [];
-            const accounts = claimed.length > MAX_CLAIMED_ACCOUNTS
+            accounts = claimed.length > MAX_CLAIMED_ACCOUNTS
                 ? []
                 : claimed.filter((a) => typeof a === 'string' && a.length <= MAX_IDENTITY_FIELD_LEN);
             let clientId = wireId;
@@ -757,11 +774,25 @@ export class SidecarServer {
             }
         }
         if (this.opts.attendance) {
-            this.attendedDetach = this.opts.attendance.attach({
+            const attended = {
                 send: (ask) => this.ch.send({ t: 'permission-ask', ...ask }),
-                resolved: (id, decision, by) => this.ch.send({ t: 'permission-resolved', id, decision, by }),
+                resolved: (id, decision, by, byClientId) => this.ch.send({ t: 'permission-resolved', id, decision, by, ...(byClientId ? { byClientId } : {}) }),
                 runActivity: (activity) => this.ch.send({ t: 'run-activity', activity }),
                 registrations: (registrations) => this.ch.send({ t: 'registrations', registrations }),
+            };
+            // Retained so `permission-answer` can name THIS connection as the
+            // answerer -- the registry identifies an answerer by the object it
+            // attached, not by anything the answer message claims.
+            this.attended = attended;
+            /* The identity is what routes an ask under `--mode team`. `clientId` is
+             * the key this connection was FILED under (mapped through `clientKey`
+             * where the daemon supplies one), i.e. the same value its RunIdentity
+             * carries -- which is what makes a run's owner and its ask's recipient
+             * the same connection. `accounts` are CLAIMED and only ever widen a
+             * delivery; see the registry's `recipients`. */
+            this.attendedDetach = this.opts.attendance.attach(attended, {
+                clientId: this.clientId ?? '',
+                accounts,
             });
         }
         this.opts.log?.(`paired — ${this.tools.size} ${this.tools.size === 1 ? 'tool' : 'tools'} advertised (host dir: ${this.hostStateDir})`);
@@ -1588,8 +1619,64 @@ export class SidecarServer {
             this.ch.send({ t: 'room-open-result', id: m.id, ok: false, problems: ['this sidecar does not host rooms'] });
             return;
         }
+        /* Ownership must be OBSERVED, not claimed. `m.req.participants` crossed
+         * the wire from a caller this connection has not otherwise proven
+         * anything about beyond its `hello` token -- every id in it, including
+         * the id the sender picked to represent THEMSELVES, is whatever they
+         * typed. Without this, `room-list`'s membership filter and `mayAct`'s
+         * role gate both key off a string the caller chose for itself, which
+         * makes the whole boundary decorative: connect, claim to be the id
+         * already recorded as owner, done.
+         *
+         * So a room cannot be opened at all without a connection that proved an
+         * identity at `hello` (`this.clientId`) -- an unauthenticated-by-identity
+         * opener could otherwise claim to be anyone, including someone already
+         * seated in an existing room. And whichever participant in the request is
+         * marked `role: 'owner'` has its id OVERWRITTEN with that proven
+         * identity, never trusted as sent.
+         *
+         * The overwrite below is `.find()` -- it stamps the FIRST human carrying
+         * `role: 'owner'`. Nothing here, or upstream of this call, guarantees a
+         * request names only one: `.find()` picks the first regardless of how
+         * many there are. A request naming more than one owner is separately
+         * refused, wholesale, by `validateRoomRequest`'s own one-owner check
+         * (packages/crew/room/open.ts) -- but that runs INSIDE `rooms.open`,
+         * after this overwrite has already happened, and this code neither
+         * depends on nor is ordered by it. If that downstream rule were ever
+         * relaxed, this line would silently start choosing arbitrarily among
+         * several claimed owners rather than refusing anything itself.
+         *
+         * Every OTHER human in the request keeps the id it was sent with: those
+         * are clientIds the owner picked from their own attached connections, and
+         * this connection has no way to verify them. A wrong one there grants
+         * nobody rather than displacing the person it should have named -- widen
+         * never redirect.
+         *
+         * ALL OF THAT IS GATED ON `--mode team`. With team mode off this handler
+         * must be exactly what it was before rooms grew roles: a CLI, an ACP
+         * client or an older host that sends no `clientId` at `hello` opens rooms
+         * as it always did, and the id it sent for itself stands. Refusing them
+         * unconditionally would make the opt-in flag not an opt-in -- see the
+         * team-mode-off test in host.rooms.test.ts, which is the merge-safety
+         * claim for this whole branch. */
+        if (this.opts.teamMode && this.clientId === undefined) {
+            this.ch.send({
+                t: 'room-open-result',
+                id: m.id,
+                ok: false,
+                problems: ['This connection has no verified identity (no clientId from hello), so it cannot open a room.'],
+            });
+            return;
+        }
+        const clientId = this.clientId;
+        const owner = clientId === undefined
+            ? undefined
+            : m.req.participants.find((p) => p.kind === 'human' && p.role === 'owner');
+        const req = owner && clientId !== undefined
+            ? { ...m.req, participants: m.req.participants.map((p) => (p === owner ? { ...p, id: clientId } : p)) }
+            : m.req;
         try {
-            const r = await this.opts.rooms.open(m.req);
+            const r = await this.opts.rooms.open(req);
             this.ch.send(r.ok
                 ? { t: 'room-open-result', id: m.id, ok: true, room: r.room }
                 : { t: 'room-open-result', id: m.id, ok: false, problems: r.problems });
@@ -1609,7 +1696,27 @@ export class SidecarServer {
             return;
         }
         try {
-            this.ch.send({ t: 'room-list-result', id: m.id, ok: true, rooms: await this.opts.rooms.list() });
+            const rooms = await this.opts.rooms.list();
+            /* Private by default, but ONLY once an operator opted into `--mode
+             * team` -- off, this is the same list every daemon has always
+             * returned, unnarrowed, for every existing room test and every daemon
+             * nobody has reconfigured.
+             *
+             * Team mode on: membership is judged against `this.clientId`, the
+             * connection's OWN proven identity, never a participant id read out of
+             * the request -- that is what `onRoomOpen` just finished making
+             * trustworthy. A caller with NO clientId is not "an older client that
+             * predates identity" here the way it is at `hello` -- membership
+             * cannot be proven without an identity, and under private-by-default
+             * the honest answer to "what can you not prove you're in" is nothing,
+             * not everything. Answering with every room would make the boundary
+             * opt-out: connect without a clientId and see it all anyway. */
+            const mine = !this.opts.teamMode
+                ? rooms
+                : this.clientId === undefined
+                    ? []
+                    : rooms.filter((r) => r.participants.some((p) => p.id === this.clientId));
+            this.ch.send({ t: 'room-list-result', id: m.id, ok: true, rooms: mine });
         }
         catch (err) {
             // A room failure must never kill the connection, and it must not read
@@ -1625,6 +1732,32 @@ export class SidecarServer {
         }
         try {
             const found = await this.opts.rooms.read(m.roomId);
+            /* Private by default extends past `room-list` (R7) to the read itself:
+             * without this, an authenticated connection that merely knows or
+             * guesses a roomId got the full transcript regardless of membership --
+             * the list filter alone was obscurity, not a boundary. Gated under
+             * `teamMode` exactly like `room-list`, and judged against the same
+             * proven `this.clientId`, never anything claimed in the message.
+             *
+             * A refusal here says SO -- "not a member" -- rather than answering
+             * `room: null`, which is the honest "no such room" answer and would be
+             * a lie about a room that does in fact exist. */
+            if (found && this.opts.teamMode) {
+                if (this.clientId === undefined) {
+                    this.ch.send({
+                        t: 'room-read-result', id: m.id, ok: false,
+                        error: 'This connection has no verified identity, so membership in this room cannot be proven.',
+                    });
+                    return;
+                }
+                if (!found.room.participants.some((p) => p.id === this.clientId)) {
+                    this.ch.send({
+                        t: 'room-read-result', id: m.id, ok: false,
+                        error: `"${this.clientId}" is not a member of room "${m.roomId}".`,
+                    });
+                    return;
+                }
+            }
             // `found === null` here is Task 5's considered "no such room" -- keep
             // it a successful `ok: true, room: null`, never conflated with the
             // catch below's "could not read it" failure.
@@ -1654,13 +1787,46 @@ export class SidecarServer {
             this.ch.send({ t: 'room-resume-result', id: m.id, ok: false, error: errMessage(err) });
         }
     }
+    /* ONE identity rule for every room verb.
+     *
+     * `room-read` judges membership on `this.clientId` -- the identity this
+     * connection PROVED at `hello`. The mutating verbs used to hand
+     * `m.participantId` straight off the wire to `requireRole`/`mayAct`, so one
+     * branch enforced while another trusted the caller: a viewer could send the
+     * owner's participantId and close the room. Under team mode every verb now
+     * judges the caller the same way `room-read` does, and a connection with no
+     * proven identity is refused rather than attributed to whatever it claimed.
+     *
+     * KNOWN, DELIBERATE CONSEQUENCE (R9): the observed `clientId` and the
+     * participant ids a room is opened with are currently DIFFERENT NAMESPACES
+     * for everyone but the owner (whose id `onRoomOpen` overwrites with the
+     * observed one). Until those namespaces are reconciled, these verbs will
+     * REFUSE non-owner participants under `--mode team`. That refusal is the
+     * intended outcome -- fail closed, consistently -- and must NOT be "fixed"
+     * by falling back to the wire id, which is the hole this closes.
+     *
+     * With `--mode team` OFF this is the pre-existing behaviour, untouched: the
+     * wire id is attribution only, exactly as the spec knowingly accepted. */
+    actingId(claimed) {
+        if (!this.opts.teamMode)
+            return { ok: true, id: claimed };
+        if (this.clientId === undefined) {
+            return { ok: false, error: 'This connection has no verified identity (no clientId from hello), so it cannot act on a room.' };
+        }
+        return { ok: true, id: this.clientId };
+    }
     async onRoomAnswer(m) {
         if (!this.opts.rooms) {
             this.ch.send({ t: 'room-answer-result', id: m.id, ok: false, error: 'this sidecar does not host rooms' });
             return;
         }
         try {
-            const room = await this.opts.rooms.answer(m.roomId, m.participantId, m.text, m.addressed);
+            const actor = this.actingId(m.participantId);
+            if (!actor.ok) {
+                this.ch.send({ t: 'room-answer-result', id: m.id, ok: false, error: actor.error });
+                return;
+            }
+            const room = await this.opts.rooms.answer(m.roomId, actor.id, m.text, m.addressed);
             this.ch.send({ t: 'room-answer-result', id: m.id, ok: true, room });
         }
         catch (err) {
@@ -1675,7 +1841,12 @@ export class SidecarServer {
             return;
         }
         try {
-            const room = await this.opts.rooms.interject(m.roomId, m.participantId, m.text);
+            const actor = this.actingId(m.participantId);
+            if (!actor.ok) {
+                this.ch.send({ t: 'room-interject-result', id: m.id, ok: false, error: actor.error });
+                return;
+            }
+            const room = await this.opts.rooms.interject(m.roomId, actor.id, m.text);
             this.ch.send({ t: 'room-interject-result', id: m.id, ok: true, room });
         }
         catch (err) {
@@ -1690,7 +1861,12 @@ export class SidecarServer {
             return;
         }
         try {
-            const room = await this.opts.rooms.close(m.roomId, m.participantId, m.reason);
+            const actor = this.actingId(m.participantId);
+            if (!actor.ok) {
+                this.ch.send({ t: 'room-close-result', id: m.id, ok: false, error: actor.error });
+                return;
+            }
+            const room = await this.opts.rooms.close(m.roomId, actor.id, m.reason);
             this.ch.send({ t: 'room-close-result', id: m.id, ok: true, room });
         }
         catch (err) {
@@ -1809,7 +1985,12 @@ export class SidecarServer {
             return;
         }
         try {
-            const findings = await this.opts.rooms.editFinding(m.roomId, m.participantId, m.edit);
+            const actor = this.actingId(m.participantId);
+            if (!actor.ok) {
+                this.ch.send({ t: 'room-finding-edit-result', id: m.id, ok: false, error: actor.error });
+                return;
+            }
+            const findings = await this.opts.rooms.editFinding(m.roomId, actor.id, m.edit);
             this.ch.send({ t: 'room-finding-edit-result', id: m.id, ok: true, findings });
         }
         catch (err) {