@geohar/un-bien 0.7.0

package/dist/session/cwd_lock.js

@@ -0,0 +1,127 @@
+import { mkdirSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { roomIdFor } from "../rooms.js";
+import { removeStaleSock, tryBind, tryConnect } from "./leader_election.js";
+import { ipcAddress, usesNamedPipe } from "./ipc.js";
+import { unbienStateHome } from "../paths.js";
+/**
+ * Per-cwd singleton lock for `/unbien`. At most one Pi process per
+ * working directory may hold the lock; the second attempt is refused.
+ *
+ * Why a UDS bind instead of a PID lock file:
+ *   - The OS releases the socket handle the instant the process dies, even
+ *     on `kill -9` or hard crash. No stale-lock cleanup needed.
+ *   - The next Pi to try in the same cwd detects the dead socket via
+ *     `ECONNREFUSED` on `tryConnect`, unlinks the leftover file, and
+ *     binds successfully. Fully self-healing.
+ *   - Kernel-enforced — there is no race window between "check if held"
+ *     and "claim", which an explicit PID file would have.
+ *
+ * Lock files live in `<root>/.pi/un-bien/locks/<roomId>.sock` (where `roomId`
+ * is `sha256(realpath(cwd))[:12]` and `<root>` is `$UNBIEN_HOME` or the
+ * home dir), NOT inside the cwd itself, to dodge:
+ *   - The 104/108-char path-length limit on UDS sockets on macOS/Linux.
+ *   - Symlinked cwds (realpath canonicalization happens in `roomIdFor`).
+ *   - Read-only cwds (the home directory is always writable).
+ *
+ * Caller workflow:
+ *   const lock = await acquireCwdLock(cwd);
+ *   if (!lock.ok) { ui.notify("Já tem um agente rodando nessa pasta."); return; }
+ *   // …run /unbien normally; lock auto-releases on process exit
+ */
+/** Resolved at call time (not module load) so tests can redirect the lock
+ *  dir away from the developer's real `~/.pi/un-bien/locks` via
+ *  `UNBIEN_DIR` / `UNBIEN_HOME` — the shared override every site honors. */
+function locksDir() {
+    return join(unbienStateHome(), "locks");
+}
+/**
+ * Lock id for an agent. Keyed by **(cwd, name)** so several agents can run in
+ * the SAME folder as long as their names differ — the per-folder singleton is
+ * now a per-(folder,name) singleton.
+ *
+ * plan/41: this is the SAME derivation as the App↔Pi `room_id` — `lockIdFor`
+ * delegates to the shared `roomIdFor(cwd, name)`. So the per-(folder,name) lock
+ * and the announced room stay in lockstep: a default/unnamed agent locks the
+ * legacy cwd id (and owns the legacy room); a custom or `#N`-suffixed name gets
+ * a name-scoped id for both. Symlinks canonicalize via `realpath` inside
+ * `roomIdFor`.
+ */
+function lockIdFor(cwd, name) {
+    return roomIdFor(cwd, name);
+}
+/**
+ * Local-IPC address of the lock for a given (cwd, name). Pure helper (no IO).
+ * POSIX → a `.sock` file under `locksDir()`; Windows → a per-user named pipe.
+ */
+export function lockPathFor(cwd, name) {
+    const id = lockIdFor(cwd, name);
+    return ipcAddress(`lock-${id}`, join(locksDir(), `${id}.sock`));
+}
+/** Back-compat alias: the cwd-only lock path (no name component). */
+export function lockPathForCwd(cwd) {
+    return lockPathFor(cwd);
+}
+/**
+ * Attempts to acquire the cwd lock. Resolves with either:
+ *   - `{ ok: true, release }` when we own it (server bound + retained).
+ *   - `{ ok: false, lockPath }` when a live Pi already holds the lock.
+ *
+ * Self-healing path: if the prior holder crashed, the leftover socket file
+ * fails `tryConnect` (ECONNREFUSED). We unlink it and retry the bind — the
+ * second attempt then succeeds.
+ *
+ * The server holds no actual listener logic; its only job is to keep the
+ * UDS endpoint pinned by the OS. No incoming connection ever does anything
+ * useful — the next-Pi-attempt's `tryConnect` succeeding is the entire
+ * signal we care about.
+ */
+export async function acquireCwdLock(cwd, name) {
+    const lockPath = lockPathFor(cwd, name);
+    // POSIX: the lock socket is a file under locksDir → ensure the dir exists.
+    // Windows: lockPath is a named pipe (`\\.\pipe\…`) — no parent dir to create.
+    if (!usesNamedPipe())
+        mkdirSync(dirname(lockPath), { recursive: true });
+    // First attempt: bind directly.
+    let server = await tryBind(lockPath);
+    if (server)
+        return _acquired(server, lockPath);
+    // Bind failed — check whether the existing socket has a live listener.
+    const probe = await tryConnect(lockPath);
+    if (probe) {
+        probe.destroy();
+        return { ok: false, lockPath };
+    }
+    // POSIX: a leftover stale `.sock` file blocks the bind → clean it + retry.
+    // Windows: a named pipe auto-disappears when its owner exits, so there is
+    // never a stale pipe to remove.
+    if (!usesNamedPipe())
+        removeStaleSock(lockPath);
+    server = await tryBind(lockPath);
+    if (server)
+        return _acquired(server, lockPath);
+    // Race: someone else bound between our unlink and retry. Treat as held.
+    return { ok: false, lockPath };
+}
+function _acquired(server, _lockPath) {
+    let released = false;
+    // Don't keep the event loop alive just to hold the socket — the Pi
+    // process has its own reasons to stay up (relay WS, broker, etc.).
+    // When those are gone, the OS will tear the socket down with us.
+    server.unref();
+    return {
+        ok: true,
+        release: () => {
+            if (released)
+                return;
+            released = true;
+            try {
+                server.close();
+            }
+            catch {
+                /* ignored */
+            }
+        },
+    };
+}
+//# sourceMappingURL=cwd_lock.js.map

package/dist/session/cwd_lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cwd_lock.js","sourceRoot":"","sources":["../../src/session/cwd_lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;4EAE4E;AAC5E,SAAS,QAAQ;IACf,OAAO,IAAI,CAAC,eAAe,EAAE,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAgBD;;;;;;;;;;;GAWG;AACH,SAAS,SAAS,CAAC,GAAW,EAAE,IAAa;IAC3C,OAAO,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,IAAa;IACpD,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAChC,OAAO,UAAU,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAW,EACX,IAAa;IAEb,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxC,2EAA2E;IAC3E,8EAA8E;IAC9E,IAAI,CAAC,aAAa,EAAE;QAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAExE,gCAAgC;IAChC,IAAI,MAAM,GAAkB,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,MAAM;QAAE,OAAO,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAE/C,uEAAuE;IACvE,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,CAAC,OAAO,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACjC,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,gCAAgC;IAChC,IAAI,CAAC,aAAa,EAAE;QAAE,eAAe,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,MAAM;QAAE,OAAO,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAE/C,wEAAwE;IACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,SAAiB;IAClD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,mEAAmE;IACnE,mEAAmE;IACnE,iEAAiE;IACjE,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,GAAG,EAAE;YACZ,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa;YACf,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/session/debug_log.d.ts

@@ -0,0 +1,3 @@
+/** Append a timestamped line to `<state>/envelope-debug.log` when the
+ *  `debug.envelope` config pref is set. Safe inside SDK callbacks. */
+export declare function envLog(msg: string): void;

package/dist/session/debug_log.js

@@ -0,0 +1,32 @@
+// File-based envelope debug log. The fork usually runs detached (no visible
+// stderr), so gated diagnostics go to a file the user can `tail -f`.
+// Enabled by the `debug.envelope` pref in the global config
+// (`extensions/un-bien.json`) — NOT an env var, because the detached fork
+// doesn't inherit a shell's env. Best-effort, never throws.
+import { appendFileSync, mkdirSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { loadConfig } from "../config.js";
+import { unbienStateHome } from "../paths.js";
+const LOG_PATH = join(unbienStateHome(), "envelope-debug.log");
+// Resolved once: the debug pref is a dev switch, not something that flips
+// mid-process, so we read the config file a single time on first use.
+let enabled;
+function isEnabled() {
+    if (enabled === undefined)
+        enabled = loadConfig().debug?.envelope === true;
+    return enabled;
+}
+/** Append a timestamped line to `<state>/envelope-debug.log` when the
+ *  `debug.envelope` config pref is set. Safe inside SDK callbacks. */
+export function envLog(msg) {
+    if (!isEnabled())
+        return;
+    try {
+        mkdirSync(dirname(LOG_PATH), { recursive: true });
+        appendFileSync(LOG_PATH, `${new Date().toISOString()} ${msg}\n`);
+    }
+    catch {
+        /* best-effort */
+    }
+}
+//# sourceMappingURL=debug_log.js.map

package/dist/session/debug_log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"debug_log.js","sourceRoot":"","sources":["../../src/session/debug_log.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,qEAAqE;AACrE,4DAA4D;AAC5D,0EAA0E;AAC1E,4DAA4D;AAE5D,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,EAAE,oBAAoB,CAAC,CAAC;AAE/D,0EAA0E;AAC1E,sEAAsE;AACtE,IAAI,OAA4B,CAAC;AACjC,SAAS,SAAS;IAChB,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,GAAG,UAAU,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC3E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;sEACsE;AACtE,MAAM,UAAU,MAAM,CAAC,GAAW;IAChC,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO;IACzB,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,cAAc,CAAC,QAAQ,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC"}

package/dist/session/envelope.d.ts

@@ -0,0 +1,33 @@
+/**
+ * 5-field envelope for the agent-network local protocol (plano 19).
+ * Serialized as JSONL (one JSON object per line) over UDS streams.
+ */
+export interface Envelope {
+    from: string;
+    to: string | string[];
+    id: string;
+    re: string | null;
+    body: unknown;
+}
+export declare const TRANSPORT_ERROR_REASONS: readonly ["offline", "not_authorized", "bad_envelope"];
+export type TransportErrorReason = (typeof TRANSPORT_ERROR_REASONS)[number];
+export interface TransportErrorBody {
+    type: "transport_error";
+    reason: TransportErrorReason;
+}
+export declare function isUuid(value: unknown): value is string;
+export declare function hasTransportErrorType(value: unknown): boolean;
+export declare function asTransportErrorBody(value: unknown): TransportErrorBody | null;
+/**
+ * Generates a UUID v7 — time-ordered, monotonically increasing within the
+ * same millisecond. Format:
+ *   <48-bit ts ms><4-bit ver=7><12-bit rand><2-bit var=10><62-bit rand>
+ */
+export declare function uuidv7(): string;
+export declare class EnvelopeError extends Error {
+    constructor(message: string);
+}
+export declare function serialize(env: Envelope): string;
+export declare function parse(line: string): Envelope;
+/** Convenience: builds an envelope with id auto-generated. */
+export declare function envelope(from: string, to: string | string[], body: unknown, re?: string | null): Envelope;

package/dist/session/envelope.js

@@ -0,0 +1,117 @@
+import { randomBytes } from "node:crypto";
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+export const TRANSPORT_ERROR_REASONS = [
+    "offline",
+    "not_authorized",
+    "bad_envelope",
+];
+export function isUuid(value) {
+    return typeof value === "string" && UUID_RE.test(value);
+}
+export function hasTransportErrorType(value) {
+    return (value !== null &&
+        typeof value === "object" &&
+        !Array.isArray(value) &&
+        Object.hasOwn(value, "type") &&
+        value["type"] === "transport_error");
+}
+export function asTransportErrorBody(value) {
+    if (!hasTransportErrorType(value) ||
+        !Object.hasOwn(value, "reason")) {
+        return null;
+    }
+    const reason = value["reason"];
+    if (reason !== "offline" &&
+        reason !== "not_authorized" &&
+        reason !== "bad_envelope") {
+        return null;
+    }
+    return { type: "transport_error", reason };
+}
+/**
+ * Generates a UUID v7 — time-ordered, monotonically increasing within the
+ * same millisecond. Format:
+ *   <48-bit ts ms><4-bit ver=7><12-bit rand><2-bit var=10><62-bit rand>
+ */
+export function uuidv7() {
+    const ts = Date.now();
+    const rand = randomBytes(10);
+    // Encode 48-bit timestamp into bytes 0-5.
+    const buf = Buffer.alloc(16);
+    buf[0] = (ts / 2 ** 40) & 0xff;
+    buf[1] = (ts / 2 ** 32) & 0xff;
+    buf[2] = (ts / 2 ** 24) & 0xff;
+    buf[3] = (ts / 2 ** 16) & 0xff;
+    buf[4] = (ts / 2 ** 8) & 0xff;
+    buf[5] = ts & 0xff;
+    rand.copy(buf, 6);
+    // Set version (7) in upper nibble of byte 6.
+    buf[6] = (buf[6] & 0x0f) | 0x70;
+    // Set variant (10) in upper two bits of byte 8.
+    buf[8] = (buf[8] & 0x3f) | 0x80;
+    const hex = buf.toString("hex");
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+export class EnvelopeError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "EnvelopeError";
+    }
+}
+export function serialize(env) {
+    return JSON.stringify(env) + "\n";
+}
+export function parse(line) {
+    let raw;
+    try {
+        raw = JSON.parse(line);
+    }
+    catch (e) {
+        throw new EnvelopeError(`not JSON: ${e.message}`);
+    }
+    if (!raw || typeof raw !== "object") {
+        throw new EnvelopeError("not an object");
+    }
+    const o = raw;
+    if (typeof o["from"] !== "string" || o["from"].length === 0) {
+        throw new EnvelopeError("from must be non-empty string");
+    }
+    const to = o["to"];
+    if (typeof to !== "string" && !Array.isArray(to)) {
+        throw new EnvelopeError("to must be string or array");
+    }
+    if (typeof to === "string" && to.length === 0) {
+        throw new EnvelopeError("to must be non-empty");
+    }
+    if (Array.isArray(to)) {
+        if (to.length === 0)
+            throw new EnvelopeError("to[] must not be empty");
+        for (const t of to) {
+            if (typeof t !== "string" || t.length === 0) {
+                throw new EnvelopeError("to[] entries must be non-empty strings");
+            }
+        }
+    }
+    if (!isUuid(o["id"])) {
+        throw new EnvelopeError("id must be UUID");
+    }
+    const re = o["re"];
+    if (re !== null && !isUuid(re)) {
+        throw new EnvelopeError("re must be null or UUID");
+    }
+    if (!("body" in o)) {
+        throw new EnvelopeError("body required");
+    }
+    return {
+        from: o["from"],
+        to: to,
+        id: o["id"],
+        re: re,
+        body: o["body"],
+    };
+}
+/** Convenience: builds an envelope with id auto-generated. */
+export function envelope(from, to, body, re = null) {
+    return { from, to, id: uuidv7(), re, body };
+}
+//# sourceMappingURL=envelope.js.map

package/dist/session/envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../../src/session/envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAc1C,MAAM,OAAO,GACX,iEAAiE,CAAC;AAEpE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS;IACT,gBAAgB;IAChB,cAAc;CACN,CAAC;AASX,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,OAAO,CACL,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;QAC3B,KAAiC,CAAC,MAAM,CAAC,KAAK,iBAAiB,CACjE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAc;IAEd,IACE,CAAC,qBAAqB,CAAC,KAAK,CAAC;QAC7B,CAAC,MAAM,CAAC,MAAM,CAAC,KAAe,EAAE,QAAQ,CAAC,EACzC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAI,KAAiC,CAAC,QAAQ,CAAC,CAAC;IAC5D,IACE,MAAM,KAAK,SAAS;QACpB,MAAM,KAAK,gBAAgB;QAC3B,MAAM,KAAK,cAAc,EACzB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,MAAM;IACpB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7B,0CAA0C;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7B,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IAC/B,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IAC/B,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IAC/B,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IAC/B,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IAC9B,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACnB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAClB,6CAA6C;IAC7C,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACjC,gDAAgD;IAChD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACjC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,UAAU,SAAS,CAAC,GAAa;IACrC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,IAAY;IAChC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,aAAa,CAAC,aAAc,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,aAAa,CAAC,eAAe,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,MAAM,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,aAAa,CAAC,+BAA+B,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IACnB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,aAAa,CAAC,4BAA4B,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,aAAa,CAAC,sBAAsB,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACtB,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,wBAAwB,CAAC,CAAC;QACvE,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACnB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,aAAa,CAAC,wCAAwC,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IACnB,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,aAAa,CAAC,yBAAyB,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,aAAa,CAAC,eAAe,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,MAAM,CAAW;QACzB,EAAE,EAAE,EAAuB;QAC3B,EAAE,EAAE,CAAC,CAAC,IAAI,CAAW;QACrB,EAAE,EAAE,EAAmB;QACvB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;KAChB,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,QAAQ,CACtB,IAAY,EACZ,EAAqB,EACrB,IAAa,EACb,KAAoB,IAAI;IAExB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AAC9C,CAAC"}

package/dist/session/global_config.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Fixed UDS session name. The local mesh is single per machine — every Pi
+ * process on the host shares this broker. Previous versions exposed
+ * multi-session support (named sessions, leave/rename/sessions commands);
+ * those were removed in the 2026-05-23 simplification because in practice
+ * every install converged on one session anyway and multi-session UX added
+ * friction without value.
+ */
+export declare const LOCAL_SESSION_NAME = "local";
+/** Ensures the new subdirs exist inside the existing ~/.pi/un-bien/. */
+export declare function ensureGlobalDirs(): void;
+/**
+ * Local-IPC address for a session's broker. POSIX → a `.sock` file under the
+ * session dir; Windows → a per-user named pipe (plan/40). The `net` API treats
+ * both the same; only the address string differs.
+ */
+export declare function sessionSockPath(name: string): string;
+/** Path to the audit log for a named session. */
+export declare function sessionAuditPath(name: string): string;
+/** Path to the session metadata JSON. */
+export declare function sessionMetaPath(name: string): string;
+export declare function sessionsDir(): string;
+export declare function skillsDir(): string;
+/** Lists discovered session names from disk. */
+export declare function listSessions(): string[];
+/**
+ * Heuristic: a session has an existing broker socket FILE (POSIX only). On
+ * Windows the broker is a named pipe with no file to stat, so this returns
+ * false — the authoritative liveness check there is a connect-probe
+ * (`leader_election.tryConnect` / `client.supervisorOnline`), not this. Only
+ * legacy `session/wizard.ts` consumes this.
+ */
+export declare function sessionHasSock(name: string): boolean;

package/dist/session/global_config.js

@@ -0,0 +1,73 @@
+import { existsSync, mkdirSync, readdirSync, statSync } from "node:fs";
+import { join } from "node:path";
+import { ipcAddress, usesNamedPipe } from "./ipc.js";
+import { unbienStateHome } from "../paths.js";
+const HOME_PI_REMOTE = unbienStateHome();
+const SESSIONS_DIR = join(HOME_PI_REMOTE, "sessions");
+const SKILLS_DIR = join(HOME_PI_REMOTE, "skills");
+/**
+ * Fixed UDS session name. The local mesh is single per machine — every Pi
+ * process on the host shares this broker. Previous versions exposed
+ * multi-session support (named sessions, leave/rename/sessions commands);
+ * those were removed in the 2026-05-23 simplification because in practice
+ * every install converged on one session anyway and multi-session UX added
+ * friction without value.
+ */
+export const LOCAL_SESSION_NAME = "local";
+/** Ensures the new subdirs exist inside the existing ~/.pi/un-bien/. */
+export function ensureGlobalDirs() {
+    mkdirSync(SESSIONS_DIR, { recursive: true });
+    mkdirSync(SKILLS_DIR, { recursive: true });
+}
+/**
+ * Local-IPC address for a session's broker. POSIX → a `.sock` file under the
+ * session dir; Windows → a per-user named pipe (plan/40). The `net` API treats
+ * both the same; only the address string differs.
+ */
+export function sessionSockPath(name) {
+    return ipcAddress(`broker-${name}`, join(SESSIONS_DIR, name, "broker.sock"));
+}
+/** Path to the audit log for a named session. */
+export function sessionAuditPath(name) {
+    return join(SESSIONS_DIR, name, "audit.jsonl");
+}
+/** Path to the session metadata JSON. */
+export function sessionMetaPath(name) {
+    return join(SESSIONS_DIR, name, "session.json");
+}
+export function sessionsDir() {
+    return SESSIONS_DIR;
+}
+export function skillsDir() {
+    return SKILLS_DIR;
+}
+/** Lists discovered session names from disk. */
+export function listSessions() {
+    ensureGlobalDirs();
+    try {
+        return readdirSync(SESSIONS_DIR).filter((entry) => {
+            try {
+                return statSync(join(SESSIONS_DIR, entry)).isDirectory();
+            }
+            catch {
+                return false;
+            }
+        });
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Heuristic: a session has an existing broker socket FILE (POSIX only). On
+ * Windows the broker is a named pipe with no file to stat, so this returns
+ * false — the authoritative liveness check there is a connect-probe
+ * (`leader_election.tryConnect` / `client.supervisorOnline`), not this. Only
+ * legacy `session/wizard.ts` consumes this.
+ */
+export function sessionHasSock(name) {
+    if (usesNamedPipe())
+        return false;
+    return existsSync(sessionSockPath(name));
+}
+//# sourceMappingURL=global_config.js.map

package/dist/session/global_config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"global_config.js","sourceRoot":"","sources":["../../src/session/global_config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,cAAc,GAAG,eAAe,EAAE,CAAC;AACzC,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;AACtD,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;AAClD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAE1C,wEAAwE;AACxE,MAAM,UAAU,gBAAgB;IAC9B,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,UAAU,CAAC,UAAU,IAAI,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;AACjD,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,YAAY;IAC1B,gBAAgB,EAAE,CAAC;IACnB,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAChD,IAAI,CAAC;gBACH,OAAO,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,aAAa,EAAE;QAAE,OAAO,KAAK,CAAC;IAClC,OAAO,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/session/ipc.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Cross-platform local-IPC address resolution (plan/40).
+ *
+ * Node's `net` implements local IPC differently per OS:
+ *   - **POSIX**: a filesystem Unix-domain socket — a `.sock` path under
+ *     `~/.pi/un-bien/`. The file lingers if the owner crashes (stale-socket
+ *     cleanup via `unlink` matters).
+ *   - **Windows**: a **named pipe** (`\\.\pipe\<name>`). There is NO file —
+ *     `existsSync`/`unlink` don't apply, and the pipe vanishes automatically
+ *     when the owning process exits (so there's never a stale pipe to clean).
+ *     Pipes are machine-global, so the name embeds the user to avoid collisions
+ *     between two accounts on the same host.
+ *
+ * The `net` API itself (`createServer().listen(addr)`, `createConnection({ path:
+ * addr })`, framing) is identical — only the address STRING and the lifecycle
+ * (skip file cleanup on Windows) change. `platform`/`user` are injectable so
+ * tests can exercise the win32 branch on a POSIX dev host.
+ */
+export type Plat = NodeJS.Platform;
+/** True when local IPC uses named pipes (no socket files to manage). */
+export declare function usesNamedPipe(plat?: Plat): boolean;
+/**
+ * Resolve a local-IPC address. On Windows returns a per-user named pipe
+ * (`\\.\pipe\un-bien-<suffix>-<user>`); on POSIX returns `filePath` (the
+ * filesystem UDS path) unchanged.
+ */
+export declare function ipcAddress(suffix: string, filePath: string, plat?: Plat, user?: string): string;

package/dist/session/ipc.js

@@ -0,0 +1,22 @@
+import { platform as osPlatform, userInfo } from "node:os";
+/** True when local IPC uses named pipes (no socket files to manage). */
+export function usesNamedPipe(plat = osPlatform()) {
+    return plat === "win32";
+}
+/** Keep a name component safe for a Windows pipe path. */
+function safe(s) {
+    return s.replace(/[^A-Za-z0-9_.-]/g, "_");
+}
+/**
+ * Resolve a local-IPC address. On Windows returns a per-user named pipe
+ * (`\\.\pipe\un-bien-<suffix>-<user>`); on POSIX returns `filePath` (the
+ * filesystem UDS path) unchanged.
+ */
+export function ipcAddress(suffix, filePath, plat = osPlatform(), user) {
+    if (plat === "win32") {
+        const u = safe((user ?? userInfo().username) || "user");
+        return `\\\\.\\pipe\\un-bien-${safe(suffix)}-${u}`;
+    }
+    return filePath;
+}
+//# sourceMappingURL=ipc.js.map

package/dist/session/ipc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipc.js","sourceRoot":"","sources":["../../src/session/ipc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAuB3D,wEAAwE;AACxE,MAAM,UAAU,aAAa,CAAC,OAAa,UAAU,EAAE;IACrD,OAAO,IAAI,KAAK,OAAO,CAAC;AAC1B,CAAC;AAED,0DAA0D;AAC1D,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,MAAc,EACd,QAAgB,EAChB,OAAa,UAAU,EAAE,EACzB,IAAa;IAEb,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC;QACxD,OAAO,wBAAwB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/session/leader_election.d.ts

@@ -0,0 +1,32 @@
+import { type Server, type Socket } from "node:net";
+export type ElectionResult = {
+    role: "leader";
+    server: Server;
+} | {
+    role: "follower";
+    socket: Socket;
+};
+/**
+ * UDS-based leader election. Tries to connect to `sockPath`; on failure, tries
+ * to bind. If both lose the race (EADDRINUSE on bind, ECONNREFUSED on connect),
+ * cleans up stale sock file and retries with jittered backoff.
+ *
+ * Returns the role + the live handle (server for leader, socket for follower).
+ */
+export declare function joinOrLead(sockPath: string): Promise<ElectionResult>;
+/**
+ * Probes a UDS path: if a live listener responds, returns the connected
+ * socket; otherwise returns null (timeout or ECONNREFUSED). Exported so
+ * the cwd-lock primitive can reuse it without duplicating the OS dance.
+ */
+export declare function tryConnect(sockPath: string): Promise<Socket | null>;
+/**
+ * Attempts to bind a UDS server on `sockPath`. Returns the live server on
+ * success, null when the path is already held (EADDRINUSE) or any other
+ * bind error. Caller is responsible for `unlink`ing a stale sock file
+ * before retrying.
+ */
+export declare function tryBind(sockPath: string): Promise<Server | null>;
+/** Unlinks the sock file if it exists and is actually a socket. No-op
+ *  otherwise. Used to clear stale sockets left behind by a crashed peer. */
+export declare function removeStaleSock(sockPath: string): void;

package/dist/session/leader_election.js

@@ -0,0 +1,108 @@
+import { createConnection, createServer, } from "node:net";
+import { existsSync, lstatSync, unlinkSync } from "node:fs";
+import { setTimeout as delay } from "node:timers/promises";
+import { usesNamedPipe } from "./ipc.js";
+const MAX_ATTEMPTS = 20;
+const BASE_BACKOFF_MS = 30;
+const JITTER_MS = 70;
+const PROBE_TIMEOUT_MS = 500;
+/**
+ * UDS-based leader election. Tries to connect to `sockPath`; on failure, tries
+ * to bind. If both lose the race (EADDRINUSE on bind, ECONNREFUSED on connect),
+ * cleans up stale sock file and retries with jittered backoff.
+ *
+ * Returns the role + the live handle (server for leader, socket for follower).
+ */
+export async function joinOrLead(sockPath) {
+    const pipe = usesNamedPipe();
+    for (let attempt = 0; attempt < MAX_ATTEMPTS; attempt++) {
+        // Windows named pipes have no file to `existsSync`; always connect-probe
+        // first and never `unlink` (the pipe auto-disappears when its owner exits).
+        // POSIX keeps the existsSync fast-path + stale-socket cleanup.
+        if (pipe || existsSync(sockPath)) {
+            const sock = await _tryConnect(sockPath);
+            if (sock)
+                return { role: "follower", socket: sock };
+            if (!pipe)
+                _removeStaleSock(sockPath);
+        }
+        const server = await _tryBind(sockPath);
+        if (server)
+            return { role: "leader", server };
+        await delay(BASE_BACKOFF_MS + Math.random() * JITTER_MS);
+    }
+    throw new Error(`leader election failed after ${MAX_ATTEMPTS} attempts: ${sockPath}`);
+}
+/**
+ * Probes a UDS path: if a live listener responds, returns the connected
+ * socket; otherwise returns null (timeout or ECONNREFUSED). Exported so
+ * the cwd-lock primitive can reuse it without duplicating the OS dance.
+ */
+export function tryConnect(sockPath) {
+    return _tryConnect(sockPath);
+}
+/**
+ * Attempts to bind a UDS server on `sockPath`. Returns the live server on
+ * success, null when the path is already held (EADDRINUSE) or any other
+ * bind error. Caller is responsible for `unlink`ing a stale sock file
+ * before retrying.
+ */
+export function tryBind(sockPath) {
+    return _tryBind(sockPath);
+}
+/** Unlinks the sock file if it exists and is actually a socket. No-op
+ *  otherwise. Used to clear stale sockets left behind by a crashed peer. */
+export function removeStaleSock(sockPath) {
+    _removeStaleSock(sockPath);
+}
+function _tryConnect(sockPath) {
+    return new Promise((resolve) => {
+        const sock = createConnection({ path: sockPath });
+        let settled = false;
+        const settle = (val) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            if (!val)
+                sock.destroy();
+            resolve(val);
+        };
+        const timer = setTimeout(() => settle(null), PROBE_TIMEOUT_MS);
+        sock.once("connect", () => settle(sock));
+        sock.once("error", () => settle(null));
+    });
+}
+function _tryBind(sockPath) {
+    return new Promise((resolve) => {
+        const server = createServer();
+        let settled = false;
+        const settle = (val) => {
+            if (settled)
+                return;
+            settled = true;
+            if (!val) {
+                try {
+                    server.close();
+                }
+                catch {
+                    /* ignored */
+                }
+            }
+            resolve(val);
+        };
+        server.once("error", () => settle(null));
+        server.listen(sockPath, () => settle(server));
+    });
+}
+function _removeStaleSock(sockPath) {
+    try {
+        const stat = lstatSync(sockPath);
+        if (stat.isSocket())
+            unlinkSync(sockPath);
+    }
+    catch {
+        // ENOENT or not-a-socket — nothing to clean up.
+    }
+}
+//# sourceMappingURL=leader_election.js.map

package/dist/session/leader_election.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leader_election.js","sourceRoot":"","sources":["../../src/session/leader_election.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,gBAAgB,EAChB,YAAY,GACb,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAK7B;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC/C,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,yEAAyE;QACzE,4EAA4E;QAC5E,+DAA+D;QAC/D,IAAI,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACpD,IAAI,CAAC,IAAI;gBAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QAE9C,MAAM,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,KAAK,CACb,gCAAgC,YAAY,cAAc,QAAQ,EAAE,CACrE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,QAAgB;IACtC,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC5B,CAAC;AAED;4EAC4E;AAC5E,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,GAAkB,EAAE,EAAE;YACpC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,GAAG;gBAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB;IAChC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,GAAkB,EAAE,EAAE;YACpC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,IAAI,CAAC;oBACH,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,CAAC;gBAAC,MAAM,CAAC;oBACP,aAAa;gBACf,CAAC;YACH,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,QAAQ,EAAE;YAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;AACH,CAAC"}