@gtc6244/immediacy-daemon 0.1.0

package/dist/src/agent/openrouter.d.ts

@@ -0,0 +1,38 @@
+/**
+ * OpenRouterAgent — an OpenRouter-hosted model driven through the Claude Agent
+ * SDK.
+ *
+ * OpenRouter exposes an Anthropic-compatible Messages endpoint ("Anthropic
+ * skin") that passes through extended thinking and native tool use, so the SDK
+ * that already powers ClaudeAgent works unchanged — we just retarget it. That
+ * means every guarantee ClaudeAgent gives (worktree-scoped auto-approve, phone
+ * permission gate on escape, streaming, session resume, no `bypassPermissions`)
+ * holds identically here; the only difference is where the tokens are billed.
+ *
+ * We subclass ClaudeAgent and hand it SDK `env` overrides instead of touching
+ * `process.env`, so a native-Claude workspace and an OpenRouter workspace can be
+ * live at the same time without stepping on each other's credentials.
+ *
+ * Config (nothing sensitive in source):
+ *   OpenRouter API key   required — billing + routing. Resolved by the daemon's
+ *                        CredentialsStore (app-managed key, falling back to the
+ *                        OPENROUTER_API_KEY env var) and passed to the ctor.
+ *   OPENROUTER_BASE_URL  default https://openrouter.ai/api — override for a
+ *                        self-hosted proxy or a region-specific endpoint
+ *
+ * The model id (`ctx.model`) is an OpenRouter `vendor/model` slug (see
+ * models.ts); it flows to the SDK's `model` option via ClaudeAgent. We also pin
+ * every Claude Code "model class" to that same slug so a stray built-in default
+ * (e.g. a background haiku call) can't be sent to OpenRouter, which would only
+ * recognize its own slugs.
+ */
+import { ClaudeAgent } from "./claude.js";
+import type { AgentContext } from "./agent.js";
+export declare class OpenRouterAgent extends ClaudeAgent {
+    /**
+     * @param apiKey OpenRouter key resolved by the daemon (CredentialsStore →
+     *   app-managed key or the OPENROUTER_API_KEY env fallback). Empty → the
+     *   session fails auth (OpenRouter has no login fallback).
+     */
+    constructor(ctx: AgentContext, apiKey?: string);
+}

package/dist/src/agent/openrouter.js

@@ -0,0 +1,60 @@
+/**
+ * OpenRouterAgent — an OpenRouter-hosted model driven through the Claude Agent
+ * SDK.
+ *
+ * OpenRouter exposes an Anthropic-compatible Messages endpoint ("Anthropic
+ * skin") that passes through extended thinking and native tool use, so the SDK
+ * that already powers ClaudeAgent works unchanged — we just retarget it. That
+ * means every guarantee ClaudeAgent gives (worktree-scoped auto-approve, phone
+ * permission gate on escape, streaming, session resume, no `bypassPermissions`)
+ * holds identically here; the only difference is where the tokens are billed.
+ *
+ * We subclass ClaudeAgent and hand it SDK `env` overrides instead of touching
+ * `process.env`, so a native-Claude workspace and an OpenRouter workspace can be
+ * live at the same time without stepping on each other's credentials.
+ *
+ * Config (nothing sensitive in source):
+ *   OpenRouter API key   required — billing + routing. Resolved by the daemon's
+ *                        CredentialsStore (app-managed key, falling back to the
+ *                        OPENROUTER_API_KEY env var) and passed to the ctor.
+ *   OPENROUTER_BASE_URL  default https://openrouter.ai/api — override for a
+ *                        self-hosted proxy or a region-specific endpoint
+ *
+ * The model id (`ctx.model`) is an OpenRouter `vendor/model` slug (see
+ * models.ts); it flows to the SDK's `model` option via ClaudeAgent. We also pin
+ * every Claude Code "model class" to that same slug so a stray built-in default
+ * (e.g. a background haiku call) can't be sent to OpenRouter, which would only
+ * recognize its own slugs.
+ */
+import { ClaudeAgent } from "./claude.js";
+const OPENROUTER_BASE_URL = process.env.OPENROUTER_BASE_URL ?? "https://openrouter.ai/api";
+export class OpenRouterAgent extends ClaudeAgent {
+    /**
+     * @param apiKey OpenRouter key resolved by the daemon (CredentialsStore →
+     *   app-managed key or the OPENROUTER_API_KEY env fallback). Empty → the
+     *   session fails auth (OpenRouter has no login fallback).
+     */
+    constructor(ctx, apiKey) {
+        const key = apiKey ?? "";
+        // OpenRouter authenticates via ANTHROPIC_AUTH_TOKEN (a bearer token);
+        // ANTHROPIC_API_KEY must be blank so the SDK doesn't prefer a stored
+        // Anthropic key and bypass the token.
+        const slug = ctx.model;
+        super(ctx, {
+            ANTHROPIC_BASE_URL: OPENROUTER_BASE_URL,
+            ANTHROPIC_AUTH_TOKEN: key,
+            ANTHROPIC_API_KEY: "",
+            // Route every model class to the selected slug; leaving these unset lets
+            // the CLI fall back to Anthropic default ids OpenRouter can't serve.
+            ...(slug
+                ? {
+                    ANTHROPIC_MODEL: slug,
+                    ANTHROPIC_DEFAULT_OPUS_MODEL: slug,
+                    ANTHROPIC_DEFAULT_SONNET_MODEL: slug,
+                    ANTHROPIC_DEFAULT_HAIKU_MODEL: slug,
+                }
+                : {}),
+        });
+    }
+}
+//# sourceMappingURL=openrouter.js.map

package/dist/src/agent/openrouter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openrouter.js","sourceRoot":"","sources":["../../../src/agent/openrouter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,MAAM,mBAAmB,GACvB,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,2BAA2B,CAAC;AAEjE,MAAM,OAAO,eAAgB,SAAQ,WAAW;IAC9C;;;;OAIG;IACH,YAAY,GAAiB,EAAE,MAAe;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,EAAE,CAAC;QACzB,sEAAsE;QACtE,qEAAqE;QACrE,sCAAsC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC;QACvB,KAAK,CAAC,GAAG,EAAE;YACT,kBAAkB,EAAE,mBAAmB;YACvC,oBAAoB,EAAE,GAAG;YACzB,iBAAiB,EAAE,EAAE;YACrB,yEAAyE;YACzE,qEAAqE;YACrE,GAAG,CAAC,IAAI;gBACN,CAAC,CAAC;oBACE,eAAe,EAAE,IAAI;oBACrB,4BAA4B,EAAE,IAAI;oBAClC,8BAA8B,EAAE,IAAI;oBACpC,6BAA6B,EAAE,IAAI;iBACpC;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/src/agent/workspace-scope.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Workspace scoping for Claude's per-tool-call permission gate.
+ *
+ * A workspace *is* its git worktree, and the Claude session runs with
+ * `cwd = worktreePath`. Anything that stays inside that folder is, by policy,
+ * fully trusted and runs without a phone round-trip — the same trust boundary
+ * Codex enforces natively with `-s workspace-write`. Only calls that reach
+ * *outside* the worktree (or that we can't bound to it) still defer to the phone.
+ *
+ * This keeps the two backends' permission models consistent: work inside the
+ * workspace is free; escaping it is gated.
+ */
+/**
+ * True when a tool call is confined to `worktreePath` and may be auto-approved.
+ *
+ * - Bash and the shell tools execute with `cwd = worktreePath`, so they are
+ *   treated as workspace-scoped by policy (this is the deliberate "bash scripts
+ *   in the workspace just run" decision).
+ * - File and search tools are scoped by resolving their target path against the
+ *   worktree; an absolute or `..`-escaping path outside the worktree is NOT
+ *   scoped and falls through to the phone.
+ * - Everything else (WebFetch, WebSearch, MCP tools, unknown tools) is not
+ *   workspace-scoped and stays gated.
+ */
+export declare function isWorkspaceScoped(tool: string, input: Record<string, unknown>, worktreePath: string): boolean;

package/dist/src/agent/workspace-scope.js

@@ -0,0 +1,71 @@
+/**
+ * Workspace scoping for Claude's per-tool-call permission gate.
+ *
+ * A workspace *is* its git worktree, and the Claude session runs with
+ * `cwd = worktreePath`. Anything that stays inside that folder is, by policy,
+ * fully trusted and runs without a phone round-trip — the same trust boundary
+ * Codex enforces natively with `-s workspace-write`. Only calls that reach
+ * *outside* the worktree (or that we can't bound to it) still defer to the phone.
+ *
+ * This keeps the two backends' permission models consistent: work inside the
+ * workspace is free; escaping it is gated.
+ */
+import { isInside } from "../fs-scope.js";
+/** Input fields that name a filesystem target we can bound to the worktree. */
+const PATH_FIELDS = ["file_path", "path", "notebook_path"];
+/**
+ * True when a tool call is confined to `worktreePath` and may be auto-approved.
+ *
+ * - Bash and the shell tools execute with `cwd = worktreePath`, so they are
+ *   treated as workspace-scoped by policy (this is the deliberate "bash scripts
+ *   in the workspace just run" decision).
+ * - File and search tools are scoped by resolving their target path against the
+ *   worktree; an absolute or `..`-escaping path outside the worktree is NOT
+ *   scoped and falls through to the phone.
+ * - Everything else (WebFetch, WebSearch, MCP tools, unknown tools) is not
+ *   workspace-scoped and stays gated.
+ */
+export function isWorkspaceScoped(tool, input, worktreePath) {
+    switch (tool) {
+        // Confined to cwd (= the worktree) by construction, or path-bounded below.
+        case "Bash":
+        case "BashOutput":
+        case "KillShell":
+        case "Glob":
+        case "Grep":
+        case "LS":
+        case "Read":
+        case "Write":
+        case "Edit":
+        case "MultiEdit":
+        case "NotebookEdit":
+        case "NotebookRead":
+            return pathsWithin(input, worktreePath);
+        default:
+            return false;
+    }
+}
+/**
+ * True when every filesystem path named in `input` resolves inside the worktree.
+ * Tools with no path field (e.g. Bash) are scoped by cwd and return true here.
+ *
+ * Fails closed: a path field that is present but not a usable in-worktree string
+ * (empty, whitespace, an array/object, or anything resolving outside) makes the
+ * whole call NOT workspace-scoped, so it defers to the phone rather than slipping
+ * through the auto-approve path on an unmodeled value shape.
+ */
+function pathsWithin(input, worktreePath) {
+    for (const field of PATH_FIELDS) {
+        if (!(field in input))
+            continue;
+        const value = input[field];
+        if (typeof value !== "string")
+            return false; // present but non-string → gate
+        if (value.trim().length === 0)
+            return false; // empty/whitespace → gate
+        if (!isInside(worktreePath, value))
+            return false;
+    }
+    return true;
+}
+//# sourceMappingURL=workspace-scope.js.map

package/dist/src/agent/workspace-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-scope.js","sourceRoot":"","sources":["../../../src/agent/workspace-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,+EAA+E;AAC/E,MAAM,WAAW,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,CAAU,CAAC;AAEpE;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,KAA8B,EAC9B,YAAoB;IAEpB,QAAQ,IAAI,EAAE,CAAC;QACb,2EAA2E;QAC3E,KAAK,MAAM,CAAC;QACZ,KAAK,YAAY,CAAC;QAClB,KAAK,WAAW,CAAC;QACjB,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ,KAAK,IAAI,CAAC;QACV,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO,CAAC;QACb,KAAK,MAAM,CAAC;QACZ,KAAK,WAAW,CAAC;QACjB,KAAK,cAAc,CAAC;QACpB,KAAK,cAAc;YACjB,OAAO,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC1C;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,WAAW,CAAC,KAA8B,EAAE,YAAoB;IACvE,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC;YAAE,SAAS;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC,CAAC,gCAAgC;QAC7E,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,0BAA0B;QACvE,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/allowlist.d.ts

@@ -0,0 +1,56 @@
+/**
+ * AllowlistStore — the daemon-global "Allow all" list, persisted to disk.
+ *
+ * When a client answers a permission request with `allow_all`, the daemon
+ * derives an {@link AllowRule} from that call (see permission-scope.ts) and adds
+ * it here. Thereafter every gated tool call is checked against these rules
+ * *before* it defers to the phone — a match auto-approves. The list is
+ * daemon-global (one list for every workspace, keyed on absolute dirs / hosts /
+ * tool names) and durable across restarts: it lives in
+ * `~/.immediacy/allowlist.json`.
+ *
+ * Storage mirrors config.ts: an in-memory cache, a serialized atomic-rename
+ * persist() so concurrent add()s can't tear the file, and world-readable 0644
+ * (no secret material — just categories the user chose to trust). Each entry
+ * keeps light provenance (when it was granted, and the call that created it) so
+ * the admin list can show *why* a rule exists.
+ */
+import { type AllowRule } from "./permission-scope.js";
+/** A stored grant: the matching rule plus provenance for the admin list. */
+export interface AllowEntry {
+    /** Stable identity (see ruleKey); also this entry's handle for revoke. */
+    key: string;
+    rule: AllowRule;
+    /** One-line human description, e.g. "all requests to example.com". */
+    description: string;
+    /** Epoch ms the grant was made. */
+    createdMs: number;
+    /** The workspace and tool the grant was created from (context, not scope). */
+    fromWorkspace?: string;
+    fromTool?: string;
+}
+export declare class AllowlistStore {
+    /** Insertion-ordered cache, keyed by ruleKey for O(1) dedup + revoke. */
+    private entries;
+    /** Serializes writes so two concurrent add()s can't interleave. */
+    private writeChain;
+    load(): Promise<void>;
+    /** True when a persisted rule already covers this call. */
+    isAllowed(tool: string, input: Record<string, unknown>, worktreePath: string): boolean;
+    /**
+     * Grant "allow all" for a call: derive its rule, add it (dedup by key), and
+     * persist. Returns the entry (new or pre-existing), or null if the call can't
+     * be generalized — in which case the caller should fall back to a one-shot
+     * allow. Idempotent: re-granting the same category returns the existing entry
+     * and does not rewrite the file.
+     */
+    allowFromCall(tool: string, input: Record<string, unknown>, worktreePath: string, fromWorkspace?: string): Promise<AllowEntry | null>;
+    /** Snapshot of every grant (newest last), for the admin list. */
+    list(): AllowEntry[];
+    /** Drop one grant by key. Returns true if it existed. Persists on change. */
+    revoke(key: string): Promise<boolean>;
+    /** Drop every grant. Persists (writes an empty list). */
+    clear(): Promise<void>;
+    private rules;
+    private persist;
+}

package/dist/src/allowlist.js

@@ -0,0 +1,141 @@
+/**
+ * AllowlistStore — the daemon-global "Allow all" list, persisted to disk.
+ *
+ * When a client answers a permission request with `allow_all`, the daemon
+ * derives an {@link AllowRule} from that call (see permission-scope.ts) and adds
+ * it here. Thereafter every gated tool call is checked against these rules
+ * *before* it defers to the phone — a match auto-approves. The list is
+ * daemon-global (one list for every workspace, keyed on absolute dirs / hosts /
+ * tool names) and durable across restarts: it lives in
+ * `~/.immediacy/allowlist.json`.
+ *
+ * Storage mirrors config.ts: an in-memory cache, a serialized atomic-rename
+ * persist() so concurrent add()s can't tear the file, and world-readable 0644
+ * (no secret material — just categories the user chose to trust). Each entry
+ * keeps light provenance (when it was granted, and the call that created it) so
+ * the admin list can show *why* a rule exists.
+ */
+import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { anyRuleMatches, deriveRule, describeRule, ruleKey, sanitizeRule, } from "./permission-scope.js";
+/**
+ * Resolved lazily (per load/persist) rather than captured at module load, so a
+ * test — or any runtime override — can point ALLOWLIST_FILE at a scratch path
+ * before the store touches disk. A module-level `const` bound the default before
+ * the test's `process.env` assignment ran, which silently routed the store's
+ * writes (including `clear()`) at the user's real ~/.immediacy/allowlist.json.
+ */
+function allowlistFile() {
+    return process.env.ALLOWLIST_FILE ?? join(homedir(), ".immediacy", "allowlist.json");
+}
+export class AllowlistStore {
+    /** Insertion-ordered cache, keyed by ruleKey for O(1) dedup + revoke. */
+    entries = new Map();
+    /** Serializes writes so two concurrent add()s can't interleave. */
+    writeChain = Promise.resolve();
+    async load() {
+        try {
+            const raw = await readFile(allowlistFile(), "utf8");
+            const parsed = JSON.parse(raw);
+            const list = Array.isArray(parsed) ? parsed : [];
+            for (const item of list) {
+                const entry = sanitizeEntry(item);
+                if (entry)
+                    this.entries.set(entry.key, entry);
+            }
+            console.log(`[allowlist] restored ${this.entries.size} rule(s)`);
+        }
+        catch {
+            /* no prior state — start empty */
+        }
+    }
+    /** True when a persisted rule already covers this call. */
+    isAllowed(tool, input, worktreePath) {
+        if (this.entries.size === 0)
+            return false;
+        return anyRuleMatches(this.rules(), tool, input, worktreePath);
+    }
+    /**
+     * Grant "allow all" for a call: derive its rule, add it (dedup by key), and
+     * persist. Returns the entry (new or pre-existing), or null if the call can't
+     * be generalized — in which case the caller should fall back to a one-shot
+     * allow. Idempotent: re-granting the same category returns the existing entry
+     * and does not rewrite the file.
+     */
+    async allowFromCall(tool, input, worktreePath, fromWorkspace) {
+        const rule = deriveRule(tool, input, worktreePath);
+        if (!rule)
+            return null;
+        const key = ruleKey(rule);
+        const existing = this.entries.get(key);
+        if (existing)
+            return existing;
+        const entry = {
+            key,
+            rule,
+            description: describeRule(rule),
+            createdMs: Date.now(),
+            fromWorkspace,
+            fromTool: tool,
+        };
+        this.entries.set(key, entry);
+        await this.persist();
+        return entry;
+    }
+    /** Snapshot of every grant (newest last), for the admin list. */
+    list() {
+        return [...this.entries.values()];
+    }
+    /** Drop one grant by key. Returns true if it existed. Persists on change. */
+    async revoke(key) {
+        if (!this.entries.delete(key))
+            return false;
+        await this.persist();
+        return true;
+    }
+    /** Drop every grant. Persists (writes an empty list). */
+    async clear() {
+        if (this.entries.size === 0)
+            return;
+        this.entries.clear();
+        await this.persist();
+    }
+    rules() {
+        return [...this.entries.values()].map((e) => e.rule);
+    }
+    persist() {
+        // Snapshot synchronously so a later add() can't race this write, then chain
+        // onto any in-flight write so concurrent calls serialize (mirrors config.ts).
+        const snapshot = JSON.stringify([...this.entries.values()], null, 2);
+        this.writeChain = this.writeChain
+            .catch(() => { })
+            .then(async () => {
+            const file = allowlistFile();
+            await mkdir(dirname(file), { recursive: true });
+            const tmp = `${file}.${process.pid}.tmp`;
+            await writeFile(tmp, snapshot, "utf8");
+            await rename(tmp, file);
+        });
+        return this.writeChain;
+    }
+}
+/** Coerce one parsed JSON item into a valid AllowEntry, or null if malformed. */
+function sanitizeEntry(input) {
+    if (!input || typeof input !== "object")
+        return null;
+    const o = input;
+    const rule = sanitizeRule(o.rule);
+    if (!rule)
+        return null;
+    const key = ruleKey(rule);
+    return {
+        key,
+        rule,
+        description: typeof o.description === "string" ? o.description : describeRule(rule),
+        createdMs: typeof o.createdMs === "number" ? o.createdMs : Date.now(),
+        fromWorkspace: typeof o.fromWorkspace === "string" ? o.fromWorkspace : undefined,
+        fromTool: typeof o.fromTool === "string" ? o.fromTool : undefined,
+    };
+}
+//# sourceMappingURL=allowlist.js.map

package/dist/src/allowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlist.js","sourceRoot":"","sources":["../../src/allowlist.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,cAAc,EACd,UAAU,EACV,YAAY,EACZ,OAAO,EACP,YAAY,GAEb,MAAM,uBAAuB,CAAC;AAE/B;;;;;;GAMG;AACH,SAAS,aAAa;IACpB,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;AACvF,CAAC;AAgBD,MAAM,OAAO,cAAc;IACzB,yEAAyE;IACjE,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAChD,mEAAmE;IAC3D,UAAU,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEtD,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,EAAE,MAAM,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;YAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;gBAClC,IAAI,KAAK;oBAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAChD,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,SAAS,CAAC,IAAY,EAAE,KAA8B,EAAE,YAAoB;QAC1E,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1C,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CACjB,IAAY,EACZ,KAA8B,EAC9B,YAAoB,EACpB,aAAsB;QAEtB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,KAAK,GAAe;YACxB,GAAG;YACH,IAAI;YACJ,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC;YAC/B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,aAAa;YACb,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iEAAiE;IACjE,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5C,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QACpC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IAEO,KAAK;QACX,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAEO,OAAO;QACb,4EAA4E;QAC5E,8EAA8E;QAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU;aAC9B,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;aACf,IAAI,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;YACzC,MAAM,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YACvC,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACL,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF;AAED,iFAAiF;AACjF,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO;QACL,GAAG;QACH,IAAI;QACJ,WAAW,EAAE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;QACnF,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;QACrE,aAAa,EAAE,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;QAChF,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;KAClE,CAAC;AACJ,CAAC"}

package/dist/src/chatlog.d.ts

@@ -0,0 +1,50 @@
+/**
+ * ChatLog — a durable, per-workspace running transcript.
+ *
+ * The daemon already broadcasts every prompt/response as an `event.*` frame,
+ * but those are ephemeral: a phone that reboots (or connects fresh) has missed
+ * them. ChatLog is the memory. Each workspace gets an append-only JSONL file
+ * under `~/.immediacy/chatlogs/<wsId>.jsonl`; one `ChatEntry` per line. New
+ * entries append (cheap); the only mutation is stamping a permission's
+ * `resolved` decision, which rewrites that workspace's file from memory.
+ *
+ * On startup `load()` reads the files back so history survives a daemon
+ * restart too, mirroring how `state.json` re-hydrates workspaces.
+ */
+import type { ChatEntry } from "./protocol.js";
+export declare class ChatLog {
+    private dir;
+    private mem;
+    /**
+     * Per-workspace write chain. `append` and `resolvePermission`→`rewrite` are
+     * fired-and-forgotten from many call sites; without serialization an
+     * appendFile can interleave with a full-file rewrite and corrupt or truncate
+     * the JSONL. Every disk write for a workspace runs strictly after the prior
+     * one by chaining onto this promise.
+     */
+    private writeChain;
+    constructor(dir?: string);
+    private fileFor;
+    /** Serialize a disk operation for `ws` behind any in-flight write. */
+    private enqueue;
+    /** Re-hydrate every persisted transcript into memory. */
+    load(): Promise<void>;
+    /** Chronological transcript for a workspace (empty if none). */
+    entries(ws: string): ChatEntry[];
+    /** Append one entry to the workspace's running log (memory + disk). */
+    append(ws: string, entry: ChatEntry): Promise<void>;
+    /**
+     * Stamp the decision onto the matching (most recent unresolved) permission
+     * entry and rewrite the file. No-op if the request isn't in the log.
+     */
+    resolvePermission(ws: string, requestId: string, decision: "allow" | "deny"): Promise<void>;
+    /**
+     * Stamp the user's answers onto the matching (most recent unanswered) question
+     * entry and rewrite the file, so a replay renders it resolved (collapsed).
+     * No-op if the request isn't in the log.
+     */
+    resolveQuestion(ws: string, requestId: string, answers: Record<string, string | string[]>, response?: string): Promise<void>;
+    /** Drop a workspace's transcript (called on workspace delete). */
+    remove(ws: string): Promise<void>;
+    private rewrite;
+}

package/dist/src/chatlog.js

@@ -0,0 +1,179 @@
+/**
+ * ChatLog — a durable, per-workspace running transcript.
+ *
+ * The daemon already broadcasts every prompt/response as an `event.*` frame,
+ * but those are ephemeral: a phone that reboots (or connects fresh) has missed
+ * them. ChatLog is the memory. Each workspace gets an append-only JSONL file
+ * under `~/.immediacy/chatlogs/<wsId>.jsonl`; one `ChatEntry` per line. New
+ * entries append (cheap); the only mutation is stamping a permission's
+ * `resolved` decision, which rewrites that workspace's file from memory.
+ *
+ * On startup `load()` reads the files back so history survives a daemon
+ * restart too, mirroring how `state.json` re-hydrates workspaces.
+ */
+import { appendFile, mkdir, readdir, readFile, rm, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { logger } from "./log.js";
+const CHATLOG_DIR = process.env.CHATLOG_DIR ?? join(homedir(), ".immediacy", "chatlogs");
+export class ChatLog {
+    dir;
+    mem = new Map();
+    /**
+     * Per-workspace write chain. `append` and `resolvePermission`→`rewrite` are
+     * fired-and-forgotten from many call sites; without serialization an
+     * appendFile can interleave with a full-file rewrite and corrupt or truncate
+     * the JSONL. Every disk write for a workspace runs strictly after the prior
+     * one by chaining onto this promise.
+     */
+    writeChain = new Map();
+    constructor(dir = CHATLOG_DIR) {
+        this.dir = dir;
+    }
+    fileFor(ws) {
+        return join(this.dir, `${safeId(ws)}.jsonl`);
+    }
+    /** Serialize a disk operation for `ws` behind any in-flight write. */
+    enqueue(ws, op) {
+        const next = (this.writeChain.get(ws) ?? Promise.resolve())
+            .catch(() => { }) // a failed prior write must not poison the chain
+            .then(op);
+        this.writeChain.set(ws, next);
+        return next;
+    }
+    /** Re-hydrate every persisted transcript into memory. */
+    async load() {
+        let names;
+        try {
+            names = await readdir(this.dir);
+        }
+        catch {
+            return; // no logs yet
+        }
+        for (const name of names) {
+            if (!name.endsWith(".jsonl"))
+                continue;
+            const ws = name.slice(0, -".jsonl".length);
+            try {
+                const raw = await readFile(join(this.dir, name), "utf8");
+                const entries = [];
+                for (const line of raw.split("\n")) {
+                    if (line.trim().length === 0)
+                        continue;
+                    try {
+                        entries.push(JSON.parse(line));
+                    }
+                    catch {
+                        // Skip only the bad line (e.g. a half-written final record after a
+                        // hard kill) — keep all the valid history rather than dropping the
+                        // whole workspace transcript for one corrupt byte.
+                    }
+                }
+                this.mem.set(ws, entries);
+            }
+            catch {
+                /* unreadable file — skip this workspace rather than crash the daemon */
+            }
+        }
+    }
+    /** Chronological transcript for a workspace (empty if none). */
+    entries(ws) {
+        return this.mem.get(ws) ?? [];
+    }
+    /** Append one entry to the workspace's running log (memory + disk). */
+    async append(ws, entry) {
+        let entries = this.mem.get(ws);
+        if (!entries)
+            this.mem.set(ws, (entries = []));
+        entries.push(entry);
+        return this.enqueue(ws, async () => {
+            try {
+                await mkdir(this.dir, { recursive: true });
+                await appendFile(this.fileFor(ws), JSON.stringify(entry) + "\n", "utf8");
+            }
+            catch (err) {
+                // Logging is best-effort: never let a disk hiccup break the live flow.
+                logger.error("error", "chatlog append failed", {
+                    ws,
+                    data: { message: err instanceof Error ? err.message : String(err) },
+                });
+            }
+        });
+    }
+    /**
+     * Stamp the decision onto the matching (most recent unresolved) permission
+     * entry and rewrite the file. No-op if the request isn't in the log.
+     */
+    async resolvePermission(ws, requestId, decision) {
+        const entries = this.mem.get(ws);
+        if (!entries)
+            return;
+        for (let i = entries.length - 1; i >= 0; i--) {
+            const e = entries[i];
+            if (e.role === "permission" && e.requestId === requestId && !e.resolved) {
+                e.resolved = decision;
+                return this.rewrite(ws);
+            }
+        }
+    }
+    /**
+     * Stamp the user's answers onto the matching (most recent unanswered) question
+     * entry and rewrite the file, so a replay renders it resolved (collapsed).
+     * No-op if the request isn't in the log.
+     */
+    async resolveQuestion(ws, requestId, answers, response) {
+        const entries = this.mem.get(ws);
+        if (!entries)
+            return;
+        for (let i = entries.length - 1; i >= 0; i--) {
+            const e = entries[i];
+            if (e.role === "question" && e.requestId === requestId && !e.answers && !e.response) {
+                e.answers = answers;
+                if (response)
+                    e.response = response;
+                return this.rewrite(ws);
+            }
+        }
+    }
+    /** Drop a workspace's transcript (called on workspace delete). */
+    async remove(ws) {
+        this.mem.delete(ws);
+        return this.enqueue(ws, async () => {
+            try {
+                await rm(this.fileFor(ws), { force: true });
+            }
+            catch {
+                /* best-effort */
+            }
+        });
+    }
+    rewrite(ws) {
+        return this.enqueue(ws, async () => {
+            const entries = this.mem.get(ws) ?? [];
+            try {
+                await mkdir(this.dir, { recursive: true });
+                const body = entries.map((e) => JSON.stringify(e)).join("\n") + "\n";
+                await writeFile(this.fileFor(ws), body, "utf8");
+            }
+            catch (err) {
+                logger.error("error", "chatlog rewrite failed", {
+                    ws,
+                    data: { message: err instanceof Error ? err.message : String(err) },
+                });
+            }
+        });
+    }
+}
+/**
+ * Guard the on-disk filename against path traversal. Workspace ids are UUIDs in
+ * normal operation, but ids reach `fileFor` straight off the wire (`chat.history`)
+ * and via a caller-overridable `CHATLOG_DIR`; a `ws` of `../../foo` must never
+ * let `remove`/`append` touch a file outside the chatlog dir.
+ */
+function safeId(ws) {
+    if (!/^[A-Za-z0-9._-]+$/.test(ws) || ws === "." || ws === "..") {
+        throw new Error(`unsafe workspace id: ${JSON.stringify(ws)}`);
+    }
+    return ws;
+}
+//# sourceMappingURL=chatlog.js.map

package/dist/src/chatlog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatlog.js","sourceRoot":"","sources":["../../src/chatlog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,MAAM,WAAW,GACf,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;AAEvE,MAAM,OAAO,OAAO;IAWE;IAVZ,GAAG,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC7C;;;;;;OAMG;IACK,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;IAEtD,YAAoB,MAAc,WAAW;QAAzB,QAAG,GAAH,GAAG,CAAsB;IAAG,CAAC;IAEzC,OAAO,CAAC,EAAU;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,sEAAsE;IAC9D,OAAO,CAAC,EAAU,EAAE,EAAuB;QACjD,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;aACxD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,iDAAiD;aACjE,IAAI,CAAC,EAAE,CAAC,CAAC;QACZ,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,IAAI;QACR,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,cAAc;QACxB,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACvC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;gBACzD,MAAM,OAAO,GAAgB,EAAE,CAAC;gBAChC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;wBAAE,SAAS;oBACvC,IAAI,CAAC;wBACH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAc,CAAC,CAAC;oBAC9C,CAAC;oBAAC,MAAM,CAAC;wBACP,mEAAmE;wBACnE,mEAAmE;wBACnE,mDAAmD;oBACrD,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,wEAAwE;YAC1E,CAAC;QACH,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,OAAO,CAAC,EAAU;QAChB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,KAAgB;QACvC,IAAI,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/C,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;YACjC,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3C,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,uEAAuE;gBACvE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,uBAAuB,EAAE;oBAC7C,EAAE;oBACF,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBACpE,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CACrB,EAAU,EACV,SAAiB,EACjB,QAA0B;QAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;YACtB,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACxE,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBACtB,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CACnB,EAAU,EACV,SAAiB,EACjB,OAA0C,EAC1C,QAAiB;QAEjB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;YACtB,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACpF,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC;gBACpB,IAAI,QAAQ;oBAAE,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBACpC,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;YACjC,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,EAAU;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;gBACrE,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,wBAAwB,EAAE;oBAC9C,EAAE;oBACF,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBACpE,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;;;GAKG;AACH,SAAS,MAAM,CAAC,EAAU;IACxB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}