@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/daemon/state.js

@@ -0,0 +1,454 @@
+import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
+import { rename } from "node:fs/promises";
+import { join } from "node:path";
+import { createEmptyIrohRemoteHostState, parseIrohRemoteHostState, } from "../core/remote/iroh/state.js";
+import { DEFAULT_INTEGRATED_DETACHED_RUNTIME_TTL_MS } from "../remote/integrated-runtime-retention.js";
+import { writeDurableAtomicFile } from "../utils/durable-atomic-write.js";
+/** Apply worktree-cleanup defaults: retention off, pruneOnStart on. */
+export function resolveWorktreeCleanupPolicy(settings) {
+    const cleanup = settings.worktreeCleanup;
+    const retention = cleanup?.retention?.enabled && cleanup.retention.ttlMs > 0
+        ? { enabled: true, ttlMs: cleanup.retention.ttlMs }
+        : undefined;
+    return { retention, pruneOnStart: cleanup?.pruneOnStart !== false };
+}
+function parseWorktreeCleanupSettings(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        return undefined;
+    }
+    const record = value;
+    const retentionRecord = typeof record.retention === "object" && record.retention !== null && !Array.isArray(record.retention)
+        ? record.retention
+        : undefined;
+    const retention = retentionRecord !== undefined &&
+        typeof retentionRecord.enabled === "boolean" &&
+        typeof retentionRecord.ttlMs === "number" &&
+        Number.isInteger(retentionRecord.ttlMs) &&
+        retentionRecord.ttlMs > 0
+        ? { enabled: retentionRecord.enabled, ttlMs: retentionRecord.ttlMs }
+        : undefined;
+    const pruneOnStart = typeof record.pruneOnStart === "boolean" ? record.pruneOnStart : undefined;
+    if (retention === undefined && pruneOnStart === undefined) {
+        return undefined;
+    }
+    return {
+        ...(retention === undefined ? {} : { retention }),
+        ...(pruneOnStart === undefined ? {} : { pruneOnStart }),
+    };
+}
+export function createEmptyVoltdState() {
+    return {
+        version: 1,
+        irohSecretKey: undefined,
+        clients: [],
+        revokedClients: [],
+        workspaces: [],
+        worktrees: [],
+        pendingPairingTickets: [],
+        pairingSecretTombstones: [],
+        settings: {
+            detachedRuntimeTtlMs: DEFAULT_INTEGRATED_DETACHED_RUNTIME_TTL_MS,
+            allowTools: null,
+        },
+    };
+}
+export function voltdStateToHostState(state) {
+    return {
+        hostSecretKey: state.irohSecretKey,
+        clients: state.clients,
+        revokedClients: state.revokedClients,
+        workspaces: state.workspaces,
+        worktrees: state.worktrees,
+        pendingPairingTickets: state.pendingPairingTickets,
+        pairingSecretTombstones: state.pairingSecretTombstones,
+    };
+}
+export function hostStateToVoltdState(hostState, settings) {
+    return {
+        version: 1,
+        irohSecretKey: hostState.hostSecretKey,
+        clients: hostState.clients,
+        revokedClients: hostState.revokedClients ?? [],
+        workspaces: hostState.workspaces,
+        worktrees: hostState.worktrees ?? [],
+        pendingPairingTickets: hostState.pendingPairingTickets ?? [],
+        pairingSecretTombstones: hostState.pairingSecretTombstones ?? [],
+        settings,
+    };
+}
+export function parseVoltdState(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        throw new Error("voltd state must be an object");
+    }
+    const record = value;
+    if (record.version !== 1) {
+        throw new Error(`unsupported voltd state version: ${String(record.version)}`);
+    }
+    const hostState = parseIrohRemoteHostState({
+        ...record,
+        hostSecretKey: record.irohSecretKey,
+    });
+    const settings = typeof record.settings === "object" && record.settings !== null ? record.settings : {};
+    const settingsRecord = settings;
+    const detachedRuntimeTtlMs = typeof settingsRecord.detachedRuntimeTtlMs === "number" &&
+        Number.isInteger(settingsRecord.detachedRuntimeTtlMs) &&
+        settingsRecord.detachedRuntimeTtlMs > 0
+        ? settingsRecord.detachedRuntimeTtlMs
+        : DEFAULT_INTEGRATED_DETACHED_RUNTIME_TTL_MS;
+    const allowTools = Array.isArray(settingsRecord.allowTools)
+        ? settingsRecord.allowTools.filter((tool) => typeof tool === "string")
+        : null;
+    const themeName = typeof settingsRecord.themeName === "string" ? settingsRecord.themeName : undefined;
+    const themeTokenPush = settingsRecord.themeTokenPush === true;
+    const keepAwakeEnabled = settingsRecord.keepAwakeEnabled === true;
+    const relayAuthToken = typeof settingsRecord.relayAuthToken === "string" && settingsRecord.relayAuthToken.length > 0
+        ? settingsRecord.relayAuthToken
+        : undefined;
+    const worktreeCleanup = parseWorktreeCleanupSettings(settingsRecord.worktreeCleanup);
+    return hostStateToVoltdState(hostState, {
+        detachedRuntimeTtlMs,
+        allowTools,
+        ...(themeName === undefined ? {} : { themeName }),
+        ...(themeTokenPush ? { themeTokenPush } : {}),
+        ...(keepAwakeEnabled ? { keepAwakeEnabled } : {}),
+        ...(relayAuthToken === undefined ? {} : { relayAuthToken }),
+        ...(worktreeCleanup === undefined ? {} : { worktreeCleanup }),
+    });
+}
+export function getLegacyRemoteStatePath(agentDir) {
+    return join(agentDir, "remote", "iroh-host.json");
+}
+/**
+ * One-time migration from remote/iroh-host.json. A pre-grant file keeps the
+ * Iroh identity plus validated workspace/worktree metadata, but deliberately
+ * drops every old authority-bearing record. Those clients must pair again
+ * under an explicit RPC grant; expected pre-grant migration is not corruption.
+ */
+export function migrateLegacyRemoteState(agentDir, statePath) {
+    if (existsSync(statePath)) {
+        return null;
+    }
+    const legacyPath = getLegacyRemoteStatePath(agentDir);
+    if (!existsSync(legacyPath)) {
+        return null;
+    }
+    const parsedJson = JSON.parse(readFileSync(legacyPath, "utf8"));
+    let legacyState;
+    let droppedAccess = { clients: 0, revokedClients: 0, pendingPairingTickets: 0 };
+    try {
+        legacyState = parseIrohRemoteHostState(parsedJson);
+    }
+    catch (error) {
+        if (!isPreGrantLegacyHostState(parsedJson)) {
+            throw error;
+        }
+        const record = parsedJson;
+        droppedAccess = {
+            clients: Array.isArray(record.clients) ? record.clients.length : 0,
+            revokedClients: Array.isArray(record.revokedClients) ? record.revokedClients.length : 0,
+            pendingPairingTickets: Array.isArray(record.pendingPairingTickets) ? record.pendingPairingTickets.length : 0,
+        };
+        legacyState = parseIrohRemoteHostState({
+            ...record,
+            clients: [],
+            revokedClients: [],
+            pendingPairingTickets: [],
+        });
+    }
+    return {
+        state: hostStateToVoltdState(legacyState, createEmptyVoltdState().settings),
+        droppedAccess,
+    };
+}
+function isPreGrantLegacyHostState(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        return false;
+    }
+    const record = value;
+    for (const field of ["clients", "revokedClients", "pendingPairingTickets"]) {
+        const entries = record[field];
+        if (!Array.isArray(entries)) {
+            continue;
+        }
+        if (entries.some((entry) => typeof entry === "object" && entry !== null && !Array.isArray(entry) && !("rpcGrant" in entry))) {
+            return true;
+        }
+    }
+    return false;
+}
+const DEFAULT_STATE_DEBOUNCE_MS = 250;
+function stateFileErrorMessage(path, error) {
+    const reason = error instanceof Error ? error.message : String(error);
+    return `Daemon state file ${path} is invalid or incompatible: ${reason}`;
+}
+function invalidStateFileError(path, error) {
+    return new Error(`${stateFileErrorMessage(path, error)}. Confirm regeneration from /remote or run ` +
+        "`volt daemon regenerate-state`; existing phones will need to pair again.");
+}
+/** Inspect persisted daemon state without modifying or migrating it. */
+export function inspectVoltdStateFiles(agentDir) {
+    const statePath = join(agentDir, "daemon", "state.json");
+    if (existsSync(statePath)) {
+        try {
+            parseVoltdState(JSON.parse(readFileSync(statePath, "utf8")));
+            return undefined;
+        }
+        catch (error) {
+            return { path: statePath, error: stateFileErrorMessage(statePath, error) };
+        }
+    }
+    const legacyPath = getLegacyRemoteStatePath(agentDir);
+    if (!existsSync(legacyPath)) {
+        return undefined;
+    }
+    try {
+        migrateLegacyRemoteState(agentDir, statePath);
+        return undefined;
+    }
+    catch (error) {
+        return { path: legacyPath, error: stateFileErrorMessage(legacyPath, error) };
+    }
+}
+function regeneratePreGrantVoltdState(value) {
+    if (!isPreGrantLegacyHostState(value)) {
+        return undefined;
+    }
+    const record = value;
+    try {
+        return parseVoltdState({
+            ...record,
+            clients: [],
+            revokedClients: [],
+            pendingPairingTickets: [],
+        });
+    }
+    catch {
+        return undefined;
+    }
+}
+function readRecoverableVoltdState(path) {
+    try {
+        const value = JSON.parse(readFileSync(path, "utf8"));
+        try {
+            return parseVoltdState(value);
+        }
+        catch {
+            return regeneratePreGrantVoltdState(value);
+        }
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Find the newest validated daemon-state backup that can be safely regenerated. */
+export function findRecoverableVoltdStateBackup(agentDir) {
+    const daemonDir = join(agentDir, "daemon");
+    if (!existsSync(daemonDir)) {
+        return undefined;
+    }
+    const candidates = readdirSync(daemonDir)
+        .filter((name) => /^state\.json\.(?:corrupt|invalid)-\d+$/.test(name))
+        .map((name) => {
+        const path = join(daemonDir, name);
+        return { path, modifiedAtMs: statSync(path).mtimeMs, state: readRecoverableVoltdState(path) };
+    })
+        .filter((candidate) => candidate.state !== undefined)
+        .sort((left, right) => right.modifiedAtMs - left.modifiedAtMs);
+    const candidate = candidates[0];
+    return candidate
+        ? { path: candidate.path, preservedIdentity: candidate.state.irohSecretKey !== undefined }
+        : undefined;
+}
+/** Replace current state from a validated backup, preserving the source and backing up the current file. */
+export async function recoverVoltdStateFromBackup(agentDir, backupPath) {
+    const candidate = findRecoverableVoltdStateBackup(agentDir);
+    if (!candidate || candidate.path !== backupPath) {
+        throw new Error("The selected daemon-state recovery backup is no longer available.");
+    }
+    const recovered = readRecoverableVoltdState(backupPath);
+    if (!recovered) {
+        throw new Error("The selected daemon-state backup is no longer recoverable.");
+    }
+    const statePath = join(agentDir, "daemon", "state.json");
+    let previousStateBackupPath;
+    if (existsSync(statePath)) {
+        previousStateBackupPath = `${statePath}.invalid-${Date.now()}`;
+        await rename(statePath, previousStateBackupPath);
+    }
+    await writeDurableAtomicFile(statePath, `${JSON.stringify(recovered, null, 2)}\n`);
+    return {
+        ...(previousStateBackupPath === undefined ? {} : { previousStateBackupPath }),
+        preservedIdentity: recovered.irohSecretKey !== undefined,
+    };
+}
+/** Back up invalid state and regenerate validated non-authority data when possible. */
+export async function regenerateInvalidVoltdState(agentDir) {
+    const invalid = inspectVoltdStateFiles(agentDir);
+    if (!invalid) {
+        throw new Error("Daemon state is valid; regeneration is not needed.");
+    }
+    let regenerated;
+    if (invalid.path === join(agentDir, "daemon", "state.json")) {
+        try {
+            regenerated = regeneratePreGrantVoltdState(JSON.parse(readFileSync(invalid.path, "utf8")));
+        }
+        catch {
+            // Malformed JSON cannot be partially recovered. The original is still backed up below.
+        }
+    }
+    const backupPath = `${invalid.path}.invalid-${Date.now()}`;
+    await rename(invalid.path, backupPath);
+    if (regenerated) {
+        await writeDurableAtomicFile(invalid.path, `${JSON.stringify(regenerated, null, 2)}\n`);
+    }
+    return { backupPath, preservedIdentity: regenerated?.irohSecretKey !== undefined };
+}
+/** Debounced, atomic (tmp + rename, 0600) persistence for VoltdStateFileV1. */
+export class VoltdStateStore {
+    statePath;
+    agentDir;
+    debounceMs;
+    writeStateFile;
+    current;
+    flushTimer;
+    pendingFlush = Promise.resolve();
+    stateRevision = 0;
+    persistedRevision = 0;
+    migrated = false;
+    legacyDroppedAccess;
+    constructor(options) {
+        this.statePath = options.statePath;
+        this.agentDir = options.agentDir;
+        this.debounceMs = options.debounceMs ?? DEFAULT_STATE_DEBOUNCE_MS;
+        this.writeStateFile = options.writeStateFile ?? writeDurableAtomicFile;
+    }
+    async load() {
+        if (this.current) {
+            return {
+                state: this.current,
+                migratedFromLegacyState: this.migrated,
+                ...(this.legacyDroppedAccess === undefined ? {} : { legacyDroppedAccess: this.legacyDroppedAccess }),
+            };
+        }
+        let migration;
+        try {
+            migration = migrateLegacyRemoteState(this.agentDir, this.statePath);
+        }
+        catch (error) {
+            throw invalidStateFileError(getLegacyRemoteStatePath(this.agentDir), error);
+        }
+        if (migration) {
+            this.current = migration.state;
+            this.markStateChanged();
+            this.migrated = true;
+            this.legacyDroppedAccess = migration.droppedAccess;
+            await this.enqueueWrite();
+            const legacyPath = getLegacyRemoteStatePath(this.agentDir);
+            try {
+                await rename(legacyPath, `${legacyPath}.migrated`);
+            }
+            catch (error) {
+                // A daemon started concurrently (before the single-instance socket bind)
+                // may have already migrated and renamed the legacy file. Its absence is
+                // benign: the migrated content is identical and already persisted, so a
+                // racing start must not crash here — it will fail cleanly at the socket
+                // bind instead.
+                if (error.code !== "ENOENT") {
+                    throw error;
+                }
+            }
+            return {
+                state: this.current,
+                migratedFromLegacyState: true,
+                legacyDroppedAccess: migration.droppedAccess,
+            };
+        }
+        if (existsSync(this.statePath)) {
+            try {
+                this.current = parseVoltdState(JSON.parse(readFileSync(this.statePath, "utf8")));
+            }
+            catch (error) {
+                throw invalidStateFileError(this.statePath, error);
+            }
+        }
+        else {
+            this.current = createEmptyVoltdState();
+            this.markStateChanged();
+            await this.enqueueWrite();
+        }
+        return { state: this.current, migratedFromLegacyState: false };
+    }
+    get state() {
+        if (!this.current) {
+            throw new Error("voltd state not loaded");
+        }
+        return this.current;
+    }
+    /** Replace the host-state portion (used as the state-manager write hook). */
+    setHostState(hostState) {
+        this.current = hostStateToVoltdState(hostState, this.state.settings);
+        this.scheduleFlush();
+    }
+    getHostState() {
+        return this.current ? voltdStateToHostState(this.current) : createEmptyIrohRemoteHostState();
+    }
+    updateSettings(settings) {
+        this.current = { ...this.state, settings: { ...this.state.settings, ...settings } };
+        this.scheduleFlush();
+    }
+    scheduleFlush() {
+        this.markStateChanged();
+        if (this.flushTimer) {
+            return;
+        }
+        this.flushTimer = setTimeout(() => {
+            this.flushTimer = undefined;
+            void this.enqueueWrite().catch(() => { });
+        }, this.debounceMs);
+        this.flushTimer.unref?.();
+    }
+    /**
+     * Force an immediate durable write, cancelling any pending debounce. Use after
+     * minting state that must survive a crash the moment it exists (e.g. the freshly
+     * generated Iroh identity, before the endpoint starts accepting pairings).
+     */
+    async flush() {
+        if (this.flushTimer) {
+            clearTimeout(this.flushTimer);
+            this.flushTimer = undefined;
+        }
+        if (this.current) {
+            // Force an explicit current-snapshot revision. Besides preserving flush's
+            // historical semantics, this catches callers that deliberately mutate the
+            // loaded state object before requesting durability.
+            this.markStateChanged();
+            await this.enqueueWrite();
+        }
+        else {
+            await this.pendingFlush;
+        }
+    }
+    /** Flush pending changes and stop the debounce timer (graceful shutdown). */
+    async close() {
+        await this.flush();
+    }
+    markStateChanged() {
+        this.stateRevision++;
+    }
+    enqueueWrite() {
+        const write = this.pendingFlush.then(() => this.writeNow());
+        this.pendingFlush = write.catch(() => { });
+        return write;
+    }
+    /** Must only be invoked through enqueueWrite so atomic renames cannot overtake one another. */
+    async writeNow() {
+        if (!this.current || this.persistedRevision >= this.stateRevision) {
+            return;
+        }
+        const revision = this.stateRevision;
+        const content = `${JSON.stringify(this.current, null, 2)}\n`;
+        await this.writeStateFile(this.statePath, content);
+        this.persistedRevision = Math.max(this.persistedRevision, revision);
+    }
+}
+//# sourceMappingURL=state.js.map

package/dist/daemon/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../src/daemon/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACN,8BAA8B,EAQ9B,wBAAwB,GACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAoD1E,uEAAuE;AACvE,MAAM,UAAU,4BAA4B,CAC3C,QAA+D,EAC/B;IAChC,MAAM,OAAO,GAAG,QAAQ,CAAC,eAAe,CAAC;IACzC,MAAM,SAAS,GACd,OAAO,EAAE,SAAS,EAAE,OAAO,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC;QACzD,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE;QACnD,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,KAAK,KAAK,EAAE,CAAC;AAAA,CACpE;AAED,SAAS,4BAA4B,CAAC,KAAc,EAAuC;IAC1F,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,eAAe,GACpB,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;QACpG,CAAC,CAAE,MAAM,CAAC,SAAqC;QAC/C,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,SAAS,GACd,eAAe,KAAK,SAAS;QAC7B,OAAO,eAAe,CAAC,OAAO,KAAK,SAAS;QAC5C,OAAO,eAAe,CAAC,KAAK,KAAK,QAAQ;QACzC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC;QACvC,eAAe,CAAC,KAAK,GAAG,CAAC;QACxB,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,KAAK,EAAE;QACpE,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,YAAY,GAAG,OAAO,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAChG,IAAI,SAAS,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC3D,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO;QACN,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;KACvD,CAAC;AAAA,CACF;AAED,MAAM,UAAU,qBAAqB,GAAqB;IACzD,OAAO;QACN,OAAO,EAAE,CAAC;QACV,aAAa,EAAE,SAAS;QACxB,OAAO,EAAE,EAAE;QACX,cAAc,EAAE,EAAE;QAClB,UAAU,EAAE,EAAE;QACd,SAAS,EAAE,EAAE;QACb,qBAAqB,EAAE,EAAE;QACzB,uBAAuB,EAAE,EAAE;QAC3B,QAAQ,EAAE;YACT,oBAAoB,EAAE,0CAA0C;YAChE,UAAU,EAAE,IAAI;SAChB;KACD,CAAC;AAAA,CACF;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAuB,EAAuB;IACnF,OAAO;QACN,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;KACtD,CAAC;AAAA,CACF;AAED,MAAM,UAAU,qBAAqB,CACpC,SAA8B,EAC9B,QAAsC,EACnB;IACnB,OAAO;QACN,OAAO,EAAE,CAAC;QACV,aAAa,EAAE,SAAS,CAAC,aAAa;QACtC,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,cAAc,EAAE,SAAS,CAAC,cAAc,IAAI,EAAE;QAC9C,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,EAAE;QACpC,qBAAqB,EAAE,SAAS,CAAC,qBAAqB,IAAI,EAAE;QAC5D,uBAAuB,EAAE,SAAS,CAAC,uBAAuB,IAAI,EAAE;QAChE,QAAQ;KACR,CAAC;AAAA,CACF;AAED,MAAM,UAAU,eAAe,CAAC,KAAc,EAAoB;IACjE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,SAAS,GAAG,wBAAwB,CAAC;QAC1C,GAAG,MAAM;QACT,aAAa,EAAE,MAAM,CAAC,aAAa;KACnC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACxG,MAAM,cAAc,GAAG,QAAmC,CAAC;IAC3D,MAAM,oBAAoB,GACzB,OAAO,cAAc,CAAC,oBAAoB,KAAK,QAAQ;QACvD,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,oBAAoB,CAAC;QACrD,cAAc,CAAC,oBAAoB,GAAG,CAAC;QACtC,CAAC,CAAC,cAAc,CAAC,oBAAoB;QACrC,CAAC,CAAC,0CAA0C,CAAC;IAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC;QAC1D,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;QACtF,CAAC,CAAC,IAAI,CAAC;IACR,MAAM,SAAS,GAAG,OAAO,cAAc,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACtG,MAAM,cAAc,GAAG,cAAc,CAAC,cAAc,KAAK,IAAI,CAAC;IAC9D,MAAM,gBAAgB,GAAG,cAAc,CAAC,gBAAgB,KAAK,IAAI,CAAC;IAClE,MAAM,cAAc,GACnB,OAAO,cAAc,CAAC,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;QAC5F,CAAC,CAAC,cAAc,CAAC,cAAc;QAC/B,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,eAAe,GAAG,4BAA4B,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;IACrF,OAAO,qBAAqB,CAAC,SAAS,EAAE;QACvC,oBAAoB;QACpB,UAAU;QACV,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;QAC3D,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;KAC7D,CAAC,CAAC;AAAA,CACH;AAED,MAAM,UAAU,wBAAwB,CAAC,QAAgB,EAAU;IAClE,OAAO,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;AAAA,CAClD;AAWD;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAgB,EAAE,SAAiB,EAAqC;IAChH,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,UAAU,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,UAAU,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IACzE,IAAI,WAAgC,CAAC;IACrC,IAAI,aAAa,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,qBAAqB,EAAE,CAAC,EAAE,CAAC;IAChF,IAAI,CAAC;QACJ,WAAW,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5C,MAAM,KAAK,CAAC;QACb,CAAC;QACD,MAAM,MAAM,GAAG,UAAqC,CAAC;QACrD,aAAa,GAAG;YACf,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAClE,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvF,qBAAqB,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;SAC5G,CAAC;QACF,WAAW,GAAG,wBAAwB,CAAC;YACtC,GAAG,MAAM;YACT,OAAO,EAAE,EAAE;YACX,cAAc,EAAE,EAAE;YAClB,qBAAqB,EAAE,EAAE;SACzB,CAAC,CAAC;IACJ,CAAC;IACD,OAAO;QACN,KAAK,EAAE,qBAAqB,CAAC,WAAW,EAAE,qBAAqB,EAAE,CAAC,QAAQ,CAAC;QAC3E,aAAa;KACb,CAAC;AAAA,CACF;AAED,SAAS,yBAAyB,CAAC,KAAc,EAAoC;IACpF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,gBAAgB,EAAE,uBAAuB,CAAU,EAAE,CAAC;QACrF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,SAAS;QACV,CAAC;QACD,IACC,OAAO,CAAC,IAAI,CACX,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC,CACzG,EACA,CAAC;YACF,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAiBD,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAOtC,SAAS,qBAAqB,CAAC,IAAY,EAAE,KAAc,EAAU;IACpE,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,OAAO,qBAAqB,IAAI,gCAAgC,MAAM,EAAE,CAAC;AAAA,CACzE;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,KAAc,EAAS;IACnE,OAAO,IAAI,KAAK,CACf,GAAG,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,6CAA6C;QACjF,0EAA0E,CAC3E,CAAC;AAAA,CACF;AAED,wEAAwE;AACxE,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAqC;IAC3F,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACJ,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YAC7D,OAAO,SAAS,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,qBAAqB,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;QAC5E,CAAC;IACF,CAAC;IACD,MAAM,UAAU,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACJ,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,qBAAqB,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC;IAC9E,CAAC;AAAA,CACD;AAED,SAAS,4BAA4B,CAAC,KAAc,EAAgC;IACnF,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,CAAC;QACJ,OAAO,eAAe,CAAC;YACtB,GAAG,MAAM;YACT,OAAO,EAAE,EAAE;YACX,cAAc,EAAE,EAAE;YAClB,qBAAqB,EAAE,EAAE;SACzB,CAAC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AAAA,CACD;AAED,SAAS,yBAAyB,CAAC,IAAY,EAAgC;IAC9E,IAAI,CAAC;QACJ,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC;YACJ,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,4BAA4B,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AAAA,CACD;AAOD,oFAAoF;AACpF,MAAM,UAAU,+BAA+B,CAAC,QAAgB,EAA2C;IAC1G,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,CAAC,SAAS,CAAC;SACvC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACrE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;IAAA,CAC9F,CAAC;SACD,MAAM,CAAC,CAAC,SAAS,EAA+D,EAAE,CAAC,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC;SACjH,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAChC,OAAO,SAAS;QACf,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,iBAAiB,EAAE,SAAS,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE;QAC1F,CAAC,CAAC,SAAS,CAAC;AAAA,CACb;AAED,4GAA4G;AAC5G,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,QAAgB,EAChB,UAAkB,EAC0D;IAC5E,MAAM,SAAS,GAAG,+BAA+B,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,SAAS,GAAG,yBAAyB,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACzD,IAAI,uBAA2C,CAAC;IAChD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,uBAAuB,GAAG,GAAG,SAAS,YAAY,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC/D,MAAM,MAAM,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,sBAAsB,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACnF,OAAO;QACN,GAAG,CAAC,uBAAuB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,CAAC;QAC7E,iBAAiB,EAAE,SAAS,CAAC,aAAa,KAAK,SAAS;KACxD,CAAC;AAAA,CACF;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,QAAgB,EAC8C;IAC9D,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,WAAyC,CAAC;IAC9C,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC;YACJ,WAAW,GAAG,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5F,CAAC;QAAC,MAAM,CAAC;YACR,uFAAuF;QACxF,CAAC;IACF,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,OAAO,CAAC,IAAI,YAAY,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC3D,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACvC,IAAI,WAAW,EAAE,CAAC;QACjB,MAAM,sBAAsB,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,EAAE,aAAa,KAAK,SAAS,EAAE,CAAC;AAAA,CACnF;AAED,+EAA+E;AAC/E,MAAM,OAAO,eAAe;IACV,SAAS,CAAS;IAClB,QAAQ,CAAS;IACjB,UAAU,CAAS;IACnB,cAAc,CAAmD;IAC1E,OAAO,CAA+B;IACtC,UAAU,CAA6B;IACvC,YAAY,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAChD,aAAa,GAAG,CAAC,CAAC;IAClB,iBAAiB,GAAG,CAAC,CAAC;IACtB,QAAQ,GAAG,KAAK,CAAC;IACjB,mBAAmB,CAA0D;IAErF,YAAY,OAA+B,EAAE;QAC5C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,yBAAyB,CAAC;QAClE,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,sBAAsB,CAAC;IAAA,CACvE;IAED,KAAK,CAAC,IAAI,GAAkC;QAC3C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO;gBACN,KAAK,EAAE,IAAI,CAAC,OAAO;gBACnB,uBAAuB,EAAE,IAAI,CAAC,QAAQ;gBACtC,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC;aACpG,CAAC;QACH,CAAC;QACD,IAAI,SAA4C,CAAC;QACjD,IAAI,CAAC;YACJ,SAAS,GAAG,wBAAwB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,qBAAqB,CAAC,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC;YAC/B,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,mBAAmB,GAAG,SAAS,CAAC,aAAa,CAAC;YACnD,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1B,MAAM,UAAU,GAAG,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3D,IAAI,CAAC;gBACJ,MAAM,MAAM,CAAC,UAAU,EAAE,GAAG,UAAU,WAAW,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,yEAAyE;gBACzE,wEAAwE;gBACxE,wEAAwE;gBACxE,0EAAwE;gBACxE,gBAAgB;gBAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACxD,MAAM,KAAK,CAAC;gBACb,CAAC;YACF,CAAC;YACD,OAAO;gBACN,KAAK,EAAE,IAAI,CAAC,OAAO;gBACnB,uBAAuB,EAAE,IAAI;gBAC7B,mBAAmB,EAAE,SAAS,CAAC,aAAa;aAC5C,CAAC;QACH,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBACJ,IAAI,CAAC,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YAClF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACpD,CAAC;QACF,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,OAAO,GAAG,qBAAqB,EAAE,CAAC;YACvC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC;IAAA,CAC/D;IAED,IAAI,KAAK,GAAqB;QAC7B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IAAA,CACpB;IAED,6EAA6E;IAC7E,YAAY,CAAC,SAA8B,EAAQ;QAClD,IAAI,CAAC,OAAO,GAAG,qBAAqB,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrE,IAAI,CAAC,aAAa,EAAE,CAAC;IAAA,CACrB;IAED,YAAY,GAAwB;QACnC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,8BAA8B,EAAE,CAAC;IAAA,CAC7F;IAED,cAAc,CAAC,QAA+C,EAAQ;QACrE,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,QAAQ,EAAE,EAAE,CAAC;QACpF,IAAI,CAAC,aAAa,EAAE,CAAC;IAAA,CACrB;IAED,aAAa,GAAS;QACrB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO;QACR,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;YAClC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC5B,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QAAA,CACzC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACpB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;IAAA,CAC1B;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK,GAAkB;QAC5B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC7B,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,0EAA0E;YAC1E,0EAA0E;YAC1E,oDAAoD;YACpD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC3B,CAAC;aAAM,CAAC;YACP,MAAM,IAAI,CAAC,YAAY,CAAC;QACzB,CAAC;IAAA,CACD;IAED,6EAA6E;IAC7E,KAAK,CAAC,KAAK,GAAkB;QAC5B,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IAAA,CACnB;IAEO,gBAAgB,GAAS;QAChC,IAAI,CAAC,aAAa,EAAE,CAAC;IAAA,CACrB;IAEO,YAAY,GAAkB;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC;IAAA,CACb;IAED,+FAA+F;IACvF,KAAK,CAAC,QAAQ,GAAkB;QACvC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACnE,OAAO;QACR,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC;QACpC,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QAC7D,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACnD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IAAA,CACpE;CACD","sourcesContent":["import { existsSync, readdirSync, readFileSync, statSync } from \"node:fs\";\nimport { rename } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport {\n\tcreateEmptyIrohRemoteHostState,\n\ttype IrohRemoteClient,\n\ttype IrohRemoteHostState,\n\ttype IrohRemotePairingSecretTombstone,\n\ttype IrohRemotePendingPairingTicket,\n\ttype IrohRemoteRevokedClient,\n\ttype IrohRemoteWorkspace,\n\ttype IrohRemoteWorkspaceWorktree,\n\tparseIrohRemoteHostState,\n} from \"../core/remote/iroh/state.ts\";\nimport { DEFAULT_INTEGRATED_DETACHED_RUNTIME_TTL_MS } from \"../remote/integrated-runtime-retention.ts\";\nimport { writeDurableAtomicFile } from \"../utils/durable-atomic-write.ts\";\n\n/**\n * Persistent daemon state. The pairing/client sections reuse the legacy host\n * state shapes verbatim (push targets and live-activity registrations stay\n * embedded in each client, as `src/core/remote/iroh/push.ts` expects). The Iroh\n * identity survives migration; pre-grant client authority is intentionally not imported.\n */\nexport interface VoltdStateFileV1 {\n\tversion: 1;\n\t/** Iroh secret key bytes; MUST survive migration so the saved host identity remains stable. */\n\tirohSecretKey?: number[];\n\tclients: IrohRemoteClient[];\n\trevokedClients: IrohRemoteRevokedClient[];\n\tworkspaces: IrohRemoteWorkspace[];\n\tworktrees: IrohRemoteWorkspaceWorktree[];\n\tpendingPairingTickets: IrohRemotePendingPairingTicket[];\n\tpairingSecretTombstones: IrohRemotePairingSecretTombstone[];\n\tsettings: {\n\t\t/** Detached headless runtime retention TTL. */\n\t\tdetachedRuntimeTtlMs: number;\n\t\t/** Tool allowlist applied ONLY to daemon-owned headless runtimes. */\n\t\tallowTools: string[] | null;\n\t\t/** Active daemon theme (theme_set); undefined falls back to the default theme. */\n\t\tthemeName?: string;\n\t\t/** Push sanitized resolved theme tokens to capable phones (§9.5); OFF by default. */\n\t\tthemeTokenPush?: boolean;\n\t\t/** Hold a keep-awake (prevent system sleep) assertion while the daemon runs; OFF by default. */\n\t\tkeepAwakeEnabled?: boolean;\n\t\t/**\n\t\t * Bearer token presented to relay servers (access.shared_token). Seeded\n\t\t * from VOLT_IROH_RELAY_AUTH_TOKEN and persisted so bare restarts keep\n\t\t * authenticating; pairing tickets carry it to phones.\n\t\t */\n\t\trelayAuthToken?: string;\n\t\t/** Worktree cleanup policies (design §5.3); all opt-in except pruneOnStart. */\n\t\tworktreeCleanup?: WorktreeCleanupSettings;\n\t};\n}\n\nexport interface WorktreeCleanupSettings {\n\t/** Remove clean, fully merged worktrees after the TTL once their runtime is disposed. */\n\tretention?: { enabled: boolean; ttlMs: number };\n\t/** Reconcile worktree records/checkouts during daemon startup (default true). */\n\tpruneOnStart?: boolean;\n}\n\nexport interface ResolvedWorktreeCleanupPolicy {\n\tretention: { enabled: boolean; ttlMs: number } | undefined;\n\tpruneOnStart: boolean;\n}\n\n/** Apply worktree-cleanup defaults: retention off, pruneOnStart on. */\nexport function resolveWorktreeCleanupPolicy(\n\tsettings: Pick<VoltdStateFileV1[\"settings\"], \"worktreeCleanup\">,\n): ResolvedWorktreeCleanupPolicy {\n\tconst cleanup = settings.worktreeCleanup;\n\tconst retention =\n\t\tcleanup?.retention?.enabled && cleanup.retention.ttlMs > 0\n\t\t\t? { enabled: true, ttlMs: cleanup.retention.ttlMs }\n\t\t\t: undefined;\n\treturn { retention, pruneOnStart: cleanup?.pruneOnStart !== false };\n}\n\nfunction parseWorktreeCleanupSettings(value: unknown): WorktreeCleanupSettings | undefined {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n\t\treturn undefined;\n\t}\n\tconst record = value as Record<string, unknown>;\n\tconst retentionRecord =\n\t\ttypeof record.retention === \"object\" && record.retention !== null && !Array.isArray(record.retention)\n\t\t\t? (record.retention as Record<string, unknown>)\n\t\t\t: undefined;\n\tconst retention =\n\t\tretentionRecord !== undefined &&\n\t\ttypeof retentionRecord.enabled === \"boolean\" &&\n\t\ttypeof retentionRecord.ttlMs === \"number\" &&\n\t\tNumber.isInteger(retentionRecord.ttlMs) &&\n\t\tretentionRecord.ttlMs > 0\n\t\t\t? { enabled: retentionRecord.enabled, ttlMs: retentionRecord.ttlMs }\n\t\t\t: undefined;\n\tconst pruneOnStart = typeof record.pruneOnStart === \"boolean\" ? record.pruneOnStart : undefined;\n\tif (retention === undefined && pruneOnStart === undefined) {\n\t\treturn undefined;\n\t}\n\treturn {\n\t\t...(retention === undefined ? {} : { retention }),\n\t\t...(pruneOnStart === undefined ? {} : { pruneOnStart }),\n\t};\n}\n\nexport function createEmptyVoltdState(): VoltdStateFileV1 {\n\treturn {\n\t\tversion: 1,\n\t\tirohSecretKey: undefined,\n\t\tclients: [],\n\t\trevokedClients: [],\n\t\tworkspaces: [],\n\t\tworktrees: [],\n\t\tpendingPairingTickets: [],\n\t\tpairingSecretTombstones: [],\n\t\tsettings: {\n\t\t\tdetachedRuntimeTtlMs: DEFAULT_INTEGRATED_DETACHED_RUNTIME_TTL_MS,\n\t\t\tallowTools: null,\n\t\t},\n\t};\n}\n\nexport function voltdStateToHostState(state: VoltdStateFileV1): IrohRemoteHostState {\n\treturn {\n\t\thostSecretKey: state.irohSecretKey,\n\t\tclients: state.clients,\n\t\trevokedClients: state.revokedClients,\n\t\tworkspaces: state.workspaces,\n\t\tworktrees: state.worktrees,\n\t\tpendingPairingTickets: state.pendingPairingTickets,\n\t\tpairingSecretTombstones: state.pairingSecretTombstones,\n\t};\n}\n\nexport function hostStateToVoltdState(\n\thostState: IrohRemoteHostState,\n\tsettings: VoltdStateFileV1[\"settings\"],\n): VoltdStateFileV1 {\n\treturn {\n\t\tversion: 1,\n\t\tirohSecretKey: hostState.hostSecretKey,\n\t\tclients: hostState.clients,\n\t\trevokedClients: hostState.revokedClients ?? [],\n\t\tworkspaces: hostState.workspaces,\n\t\tworktrees: hostState.worktrees ?? [],\n\t\tpendingPairingTickets: hostState.pendingPairingTickets ?? [],\n\t\tpairingSecretTombstones: hostState.pairingSecretTombstones ?? [],\n\t\tsettings,\n\t};\n}\n\nexport function parseVoltdState(value: unknown): VoltdStateFileV1 {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n\t\tthrow new Error(\"voltd state must be an object\");\n\t}\n\tconst record = value as Record<string, unknown>;\n\tif (record.version !== 1) {\n\t\tthrow new Error(`unsupported voltd state version: ${String(record.version)}`);\n\t}\n\tconst hostState = parseIrohRemoteHostState({\n\t\t...record,\n\t\thostSecretKey: record.irohSecretKey,\n\t});\n\tconst settings = typeof record.settings === \"object\" && record.settings !== null ? record.settings : {};\n\tconst settingsRecord = settings as Record<string, unknown>;\n\tconst detachedRuntimeTtlMs =\n\t\ttypeof settingsRecord.detachedRuntimeTtlMs === \"number\" &&\n\t\tNumber.isInteger(settingsRecord.detachedRuntimeTtlMs) &&\n\t\tsettingsRecord.detachedRuntimeTtlMs > 0\n\t\t\t? settingsRecord.detachedRuntimeTtlMs\n\t\t\t: DEFAULT_INTEGRATED_DETACHED_RUNTIME_TTL_MS;\n\tconst allowTools = Array.isArray(settingsRecord.allowTools)\n\t\t? settingsRecord.allowTools.filter((tool): tool is string => typeof tool === \"string\")\n\t\t: null;\n\tconst themeName = typeof settingsRecord.themeName === \"string\" ? settingsRecord.themeName : undefined;\n\tconst themeTokenPush = settingsRecord.themeTokenPush === true;\n\tconst keepAwakeEnabled = settingsRecord.keepAwakeEnabled === true;\n\tconst relayAuthToken =\n\t\ttypeof settingsRecord.relayAuthToken === \"string\" && settingsRecord.relayAuthToken.length > 0\n\t\t\t? settingsRecord.relayAuthToken\n\t\t\t: undefined;\n\tconst worktreeCleanup = parseWorktreeCleanupSettings(settingsRecord.worktreeCleanup);\n\treturn hostStateToVoltdState(hostState, {\n\t\tdetachedRuntimeTtlMs,\n\t\tallowTools,\n\t\t...(themeName === undefined ? {} : { themeName }),\n\t\t...(themeTokenPush ? { themeTokenPush } : {}),\n\t\t...(keepAwakeEnabled ? { keepAwakeEnabled } : {}),\n\t\t...(relayAuthToken === undefined ? {} : { relayAuthToken }),\n\t\t...(worktreeCleanup === undefined ? {} : { worktreeCleanup }),\n\t});\n}\n\nexport function getLegacyRemoteStatePath(agentDir: string): string {\n\treturn join(agentDir, \"remote\", \"iroh-host.json\");\n}\n\nexport interface LegacyRemoteStateMigration {\n\tstate: VoltdStateFileV1;\n\tdroppedAccess: {\n\t\tclients: number;\n\t\trevokedClients: number;\n\t\tpendingPairingTickets: number;\n\t};\n}\n\n/**\n * One-time migration from remote/iroh-host.json. A pre-grant file keeps the\n * Iroh identity plus validated workspace/worktree metadata, but deliberately\n * drops every old authority-bearing record. Those clients must pair again\n * under an explicit RPC grant; expected pre-grant migration is not corruption.\n */\nexport function migrateLegacyRemoteState(agentDir: string, statePath: string): LegacyRemoteStateMigration | null {\n\tif (existsSync(statePath)) {\n\t\treturn null;\n\t}\n\tconst legacyPath = getLegacyRemoteStatePath(agentDir);\n\tif (!existsSync(legacyPath)) {\n\t\treturn null;\n\t}\n\tconst parsedJson: unknown = JSON.parse(readFileSync(legacyPath, \"utf8\"));\n\tlet legacyState: IrohRemoteHostState;\n\tlet droppedAccess = { clients: 0, revokedClients: 0, pendingPairingTickets: 0 };\n\ttry {\n\t\tlegacyState = parseIrohRemoteHostState(parsedJson);\n\t} catch (error) {\n\t\tif (!isPreGrantLegacyHostState(parsedJson)) {\n\t\t\tthrow error;\n\t\t}\n\t\tconst record = parsedJson as Record<string, unknown>;\n\t\tdroppedAccess = {\n\t\t\tclients: Array.isArray(record.clients) ? record.clients.length : 0,\n\t\t\trevokedClients: Array.isArray(record.revokedClients) ? record.revokedClients.length : 0,\n\t\t\tpendingPairingTickets: Array.isArray(record.pendingPairingTickets) ? record.pendingPairingTickets.length : 0,\n\t\t};\n\t\tlegacyState = parseIrohRemoteHostState({\n\t\t\t...record,\n\t\t\tclients: [],\n\t\t\trevokedClients: [],\n\t\t\tpendingPairingTickets: [],\n\t\t});\n\t}\n\treturn {\n\t\tstate: hostStateToVoltdState(legacyState, createEmptyVoltdState().settings),\n\t\tdroppedAccess,\n\t};\n}\n\nfunction isPreGrantLegacyHostState(value: unknown): value is Record<string, unknown> {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n\t\treturn false;\n\t}\n\tconst record = value as Record<string, unknown>;\n\tfor (const field of [\"clients\", \"revokedClients\", \"pendingPairingTickets\"] as const) {\n\t\tconst entries = record[field];\n\t\tif (!Array.isArray(entries)) {\n\t\t\tcontinue;\n\t\t}\n\t\tif (\n\t\t\tentries.some(\n\t\t\t\t(entry) => typeof entry === \"object\" && entry !== null && !Array.isArray(entry) && !(\"rpcGrant\" in entry),\n\t\t\t)\n\t\t) {\n\t\t\treturn true;\n\t\t}\n\t}\n\treturn false;\n}\n\nexport interface VoltdStateStoreOptions {\n\tagentDir: string;\n\tstatePath: string;\n\t/** Debounce for coalescing writes; flushes synchronously on close(). */\n\tdebounceMs?: number;\n\t/** Durable writer seam for deterministic persistence-concurrency tests. */\n\twriteStateFile?: (path: string, content: string) => Promise<void>;\n}\n\nexport interface LoadVoltdStateResult {\n\tstate: VoltdStateFileV1;\n\tmigratedFromLegacyState: boolean;\n\tlegacyDroppedAccess?: LegacyRemoteStateMigration[\"droppedAccess\"];\n}\n\nconst DEFAULT_STATE_DEBOUNCE_MS = 250;\n\nexport interface InvalidVoltdStateFile {\n\tpath: string;\n\terror: string;\n}\n\nfunction stateFileErrorMessage(path: string, error: unknown): string {\n\tconst reason = error instanceof Error ? error.message : String(error);\n\treturn `Daemon state file ${path} is invalid or incompatible: ${reason}`;\n}\n\nfunction invalidStateFileError(path: string, error: unknown): Error {\n\treturn new Error(\n\t\t`${stateFileErrorMessage(path, error)}. Confirm regeneration from /remote or run ` +\n\t\t\t\"`volt daemon regenerate-state`; existing phones will need to pair again.\",\n\t);\n}\n\n/** Inspect persisted daemon state without modifying or migrating it. */\nexport function inspectVoltdStateFiles(agentDir: string): InvalidVoltdStateFile | undefined {\n\tconst statePath = join(agentDir, \"daemon\", \"state.json\");\n\tif (existsSync(statePath)) {\n\t\ttry {\n\t\t\tparseVoltdState(JSON.parse(readFileSync(statePath, \"utf8\")));\n\t\t\treturn undefined;\n\t\t} catch (error) {\n\t\t\treturn { path: statePath, error: stateFileErrorMessage(statePath, error) };\n\t\t}\n\t}\n\tconst legacyPath = getLegacyRemoteStatePath(agentDir);\n\tif (!existsSync(legacyPath)) {\n\t\treturn undefined;\n\t}\n\ttry {\n\t\tmigrateLegacyRemoteState(agentDir, statePath);\n\t\treturn undefined;\n\t} catch (error) {\n\t\treturn { path: legacyPath, error: stateFileErrorMessage(legacyPath, error) };\n\t}\n}\n\nfunction regeneratePreGrantVoltdState(value: unknown): VoltdStateFileV1 | undefined {\n\tif (!isPreGrantLegacyHostState(value)) {\n\t\treturn undefined;\n\t}\n\tconst record = value as Record<string, unknown>;\n\ttry {\n\t\treturn parseVoltdState({\n\t\t\t...record,\n\t\t\tclients: [],\n\t\t\trevokedClients: [],\n\t\t\tpendingPairingTickets: [],\n\t\t});\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nfunction readRecoverableVoltdState(path: string): VoltdStateFileV1 | undefined {\n\ttry {\n\t\tconst value: unknown = JSON.parse(readFileSync(path, \"utf8\"));\n\t\ttry {\n\t\t\treturn parseVoltdState(value);\n\t\t} catch {\n\t\t\treturn regeneratePreGrantVoltdState(value);\n\t\t}\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nexport interface RecoverableVoltdStateBackup {\n\tpath: string;\n\tpreservedIdentity: boolean;\n}\n\n/** Find the newest validated daemon-state backup that can be safely regenerated. */\nexport function findRecoverableVoltdStateBackup(agentDir: string): RecoverableVoltdStateBackup | undefined {\n\tconst daemonDir = join(agentDir, \"daemon\");\n\tif (!existsSync(daemonDir)) {\n\t\treturn undefined;\n\t}\n\tconst candidates = readdirSync(daemonDir)\n\t\t.filter((name) => /^state\\.json\\.(?:corrupt|invalid)-\\d+$/.test(name))\n\t\t.map((name) => {\n\t\t\tconst path = join(daemonDir, name);\n\t\t\treturn { path, modifiedAtMs: statSync(path).mtimeMs, state: readRecoverableVoltdState(path) };\n\t\t})\n\t\t.filter((candidate): candidate is typeof candidate & { state: VoltdStateFileV1 } => candidate.state !== undefined)\n\t\t.sort((left, right) => right.modifiedAtMs - left.modifiedAtMs);\n\tconst candidate = candidates[0];\n\treturn candidate\n\t\t? { path: candidate.path, preservedIdentity: candidate.state.irohSecretKey !== undefined }\n\t\t: undefined;\n}\n\n/** Replace current state from a validated backup, preserving the source and backing up the current file. */\nexport async function recoverVoltdStateFromBackup(\n\tagentDir: string,\n\tbackupPath: string,\n): Promise<{ previousStateBackupPath?: string; preservedIdentity: boolean }> {\n\tconst candidate = findRecoverableVoltdStateBackup(agentDir);\n\tif (!candidate || candidate.path !== backupPath) {\n\t\tthrow new Error(\"The selected daemon-state recovery backup is no longer available.\");\n\t}\n\tconst recovered = readRecoverableVoltdState(backupPath);\n\tif (!recovered) {\n\t\tthrow new Error(\"The selected daemon-state backup is no longer recoverable.\");\n\t}\n\tconst statePath = join(agentDir, \"daemon\", \"state.json\");\n\tlet previousStateBackupPath: string | undefined;\n\tif (existsSync(statePath)) {\n\t\tpreviousStateBackupPath = `${statePath}.invalid-${Date.now()}`;\n\t\tawait rename(statePath, previousStateBackupPath);\n\t}\n\tawait writeDurableAtomicFile(statePath, `${JSON.stringify(recovered, null, 2)}\\n`);\n\treturn {\n\t\t...(previousStateBackupPath === undefined ? {} : { previousStateBackupPath }),\n\t\tpreservedIdentity: recovered.irohSecretKey !== undefined,\n\t};\n}\n\n/** Back up invalid state and regenerate validated non-authority data when possible. */\nexport async function regenerateInvalidVoltdState(\n\tagentDir: string,\n): Promise<{ backupPath: string; preservedIdentity: boolean }> {\n\tconst invalid = inspectVoltdStateFiles(agentDir);\n\tif (!invalid) {\n\t\tthrow new Error(\"Daemon state is valid; regeneration is not needed.\");\n\t}\n\tlet regenerated: VoltdStateFileV1 | undefined;\n\tif (invalid.path === join(agentDir, \"daemon\", \"state.json\")) {\n\t\ttry {\n\t\t\tregenerated = regeneratePreGrantVoltdState(JSON.parse(readFileSync(invalid.path, \"utf8\")));\n\t\t} catch {\n\t\t\t// Malformed JSON cannot be partially recovered. The original is still backed up below.\n\t\t}\n\t}\n\tconst backupPath = `${invalid.path}.invalid-${Date.now()}`;\n\tawait rename(invalid.path, backupPath);\n\tif (regenerated) {\n\t\tawait writeDurableAtomicFile(invalid.path, `${JSON.stringify(regenerated, null, 2)}\\n`);\n\t}\n\treturn { backupPath, preservedIdentity: regenerated?.irohSecretKey !== undefined };\n}\n\n/** Debounced, atomic (tmp + rename, 0600) persistence for VoltdStateFileV1. */\nexport class VoltdStateStore {\n\tprivate readonly statePath: string;\n\tprivate readonly agentDir: string;\n\tprivate readonly debounceMs: number;\n\tprivate readonly writeStateFile: (path: string, content: string) => Promise<void>;\n\tprivate current: VoltdStateFileV1 | undefined;\n\tprivate flushTimer: NodeJS.Timeout | undefined;\n\tprivate pendingFlush: Promise<void> = Promise.resolve();\n\tprivate stateRevision = 0;\n\tprivate persistedRevision = 0;\n\tprivate migrated = false;\n\tprivate legacyDroppedAccess: LegacyRemoteStateMigration[\"droppedAccess\"] | undefined;\n\n\tconstructor(options: VoltdStateStoreOptions) {\n\t\tthis.statePath = options.statePath;\n\t\tthis.agentDir = options.agentDir;\n\t\tthis.debounceMs = options.debounceMs ?? DEFAULT_STATE_DEBOUNCE_MS;\n\t\tthis.writeStateFile = options.writeStateFile ?? writeDurableAtomicFile;\n\t}\n\n\tasync load(): Promise<LoadVoltdStateResult> {\n\t\tif (this.current) {\n\t\t\treturn {\n\t\t\t\tstate: this.current,\n\t\t\t\tmigratedFromLegacyState: this.migrated,\n\t\t\t\t...(this.legacyDroppedAccess === undefined ? {} : { legacyDroppedAccess: this.legacyDroppedAccess }),\n\t\t\t};\n\t\t}\n\t\tlet migration: LegacyRemoteStateMigration | null;\n\t\ttry {\n\t\t\tmigration = migrateLegacyRemoteState(this.agentDir, this.statePath);\n\t\t} catch (error) {\n\t\t\tthrow invalidStateFileError(getLegacyRemoteStatePath(this.agentDir), error);\n\t\t}\n\t\tif (migration) {\n\t\t\tthis.current = migration.state;\n\t\t\tthis.markStateChanged();\n\t\t\tthis.migrated = true;\n\t\t\tthis.legacyDroppedAccess = migration.droppedAccess;\n\t\t\tawait this.enqueueWrite();\n\t\t\tconst legacyPath = getLegacyRemoteStatePath(this.agentDir);\n\t\t\ttry {\n\t\t\t\tawait rename(legacyPath, `${legacyPath}.migrated`);\n\t\t\t} catch (error) {\n\t\t\t\t// A daemon started concurrently (before the single-instance socket bind)\n\t\t\t\t// may have already migrated and renamed the legacy file. Its absence is\n\t\t\t\t// benign: the migrated content is identical and already persisted, so a\n\t\t\t\t// racing start must not crash here — it will fail cleanly at the socket\n\t\t\t\t// bind instead.\n\t\t\t\tif ((error as NodeJS.ErrnoException).code !== \"ENOENT\") {\n\t\t\t\t\tthrow error;\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tstate: this.current,\n\t\t\t\tmigratedFromLegacyState: true,\n\t\t\t\tlegacyDroppedAccess: migration.droppedAccess,\n\t\t\t};\n\t\t}\n\t\tif (existsSync(this.statePath)) {\n\t\t\ttry {\n\t\t\t\tthis.current = parseVoltdState(JSON.parse(readFileSync(this.statePath, \"utf8\")));\n\t\t\t} catch (error) {\n\t\t\t\tthrow invalidStateFileError(this.statePath, error);\n\t\t\t}\n\t\t} else {\n\t\t\tthis.current = createEmptyVoltdState();\n\t\t\tthis.markStateChanged();\n\t\t\tawait this.enqueueWrite();\n\t\t}\n\t\treturn { state: this.current, migratedFromLegacyState: false };\n\t}\n\n\tget state(): VoltdStateFileV1 {\n\t\tif (!this.current) {\n\t\t\tthrow new Error(\"voltd state not loaded\");\n\t\t}\n\t\treturn this.current;\n\t}\n\n\t/** Replace the host-state portion (used as the state-manager write hook). */\n\tsetHostState(hostState: IrohRemoteHostState): void {\n\t\tthis.current = hostStateToVoltdState(hostState, this.state.settings);\n\t\tthis.scheduleFlush();\n\t}\n\n\tgetHostState(): IrohRemoteHostState {\n\t\treturn this.current ? voltdStateToHostState(this.current) : createEmptyIrohRemoteHostState();\n\t}\n\n\tupdateSettings(settings: Partial<VoltdStateFileV1[\"settings\"]>): void {\n\t\tthis.current = { ...this.state, settings: { ...this.state.settings, ...settings } };\n\t\tthis.scheduleFlush();\n\t}\n\n\tscheduleFlush(): void {\n\t\tthis.markStateChanged();\n\t\tif (this.flushTimer) {\n\t\t\treturn;\n\t\t}\n\t\tthis.flushTimer = setTimeout(() => {\n\t\t\tthis.flushTimer = undefined;\n\t\t\tvoid this.enqueueWrite().catch(() => {});\n\t\t}, this.debounceMs);\n\t\tthis.flushTimer.unref?.();\n\t}\n\n\t/**\n\t * Force an immediate durable write, cancelling any pending debounce. Use after\n\t * minting state that must survive a crash the moment it exists (e.g. the freshly\n\t * generated Iroh identity, before the endpoint starts accepting pairings).\n\t */\n\tasync flush(): Promise<void> {\n\t\tif (this.flushTimer) {\n\t\t\tclearTimeout(this.flushTimer);\n\t\t\tthis.flushTimer = undefined;\n\t\t}\n\t\tif (this.current) {\n\t\t\t// Force an explicit current-snapshot revision. Besides preserving flush's\n\t\t\t// historical semantics, this catches callers that deliberately mutate the\n\t\t\t// loaded state object before requesting durability.\n\t\t\tthis.markStateChanged();\n\t\t\tawait this.enqueueWrite();\n\t\t} else {\n\t\t\tawait this.pendingFlush;\n\t\t}\n\t}\n\n\t/** Flush pending changes and stop the debounce timer (graceful shutdown). */\n\tasync close(): Promise<void> {\n\t\tawait this.flush();\n\t}\n\n\tprivate markStateChanged(): void {\n\t\tthis.stateRevision++;\n\t}\n\n\tprivate enqueueWrite(): Promise<void> {\n\t\tconst write = this.pendingFlush.then(() => this.writeNow());\n\t\tthis.pendingFlush = write.catch(() => {});\n\t\treturn write;\n\t}\n\n\t/** Must only be invoked through enqueueWrite so atomic renames cannot overtake one another. */\n\tprivate async writeNow(): Promise<void> {\n\t\tif (!this.current || this.persistedRevision >= this.stateRevision) {\n\t\t\treturn;\n\t\t}\n\t\tconst revision = this.stateRevision;\n\t\tconst content = `${JSON.stringify(this.current, null, 2)}\\n`;\n\t\tawait this.writeStateFile(this.statePath, content);\n\t\tthis.persistedRevision = Math.max(this.persistedRevision, revision);\n\t}\n}\n"]}

package/dist/daemon/theme-push.d.ts

@@ -0,0 +1,23 @@
+/**
+ * iOS theme token push (§9.5, M11): the daemon can push its resolved theme
+ * tokens to phones as a `host_theme_tokens` frame on conversation streams.
+ * Ships OFF by default (voltd settings.themeTokenPush or VOLT_HOST_THEME_TOKENS=1)
+ * and is additionally gated on the phone advertising the capability string;
+ * clients that ignore the frame are fully supported.
+ */
+export declare const HOST_THEME_TOKENS_FEATURE = "host_theme_tokens.v1";
+/**
+ * Keep only plain hex color values. Anything else — var refs that failed to
+ * resolve, ansi escape fragments, and especially anything path-like — is
+ * dropped so no host-local information can leak onto the wire.
+ */
+export declare function sanitizeHostThemeTokens(tokens: Record<string, string>): Record<string, string>;
+export interface HostThemeTokensFrame {
+    type: "host_theme_tokens";
+    data: {
+        themeName: string;
+        tokens: Record<string, string>;
+    };
+}
+export declare function createHostThemeTokensFrame(themeName: string, tokens: Record<string, string>): HostThemeTokensFrame;
+//# sourceMappingURL=theme-push.d.ts.map

package/dist/daemon/theme-push.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"theme-push.d.ts","sourceRoot":"","sources":["../../src/daemon/theme-push.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,yBAAyB,yBAAyB,CAAC;AAIhE;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQ9F;AAED,MAAM,WAAW,oBAAoB;IACpC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,IAAI,EAAE;QACL,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAC/B,CAAC;CACF;AAED,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,oBAAoB,CAKlH","sourcesContent":["/**\n * iOS theme token push (§9.5, M11): the daemon can push its resolved theme\n * tokens to phones as a `host_theme_tokens` frame on conversation streams.\n * Ships OFF by default (voltd settings.themeTokenPush or VOLT_HOST_THEME_TOKENS=1)\n * and is additionally gated on the phone advertising the capability string;\n * clients that ignore the frame are fully supported.\n */\n\nexport const HOST_THEME_TOKENS_FEATURE = \"host_theme_tokens.v1\";\n\nconst HEX_COLOR_PATTERN = /^#(?:[0-9a-fA-F]{3,4}|[0-9a-fA-F]{6}|[0-9a-fA-F]{8})$/;\n\n/**\n * Keep only plain hex color values. Anything else — var refs that failed to\n * resolve, ansi escape fragments, and especially anything path-like — is\n * dropped so no host-local information can leak onto the wire.\n */\nexport function sanitizeHostThemeTokens(tokens: Record<string, string>): Record<string, string> {\n\tconst sanitized: Record<string, string> = {};\n\tfor (const [name, value] of Object.entries(tokens)) {\n\t\tif (typeof value === \"string\" && HEX_COLOR_PATTERN.test(value)) {\n\t\t\tsanitized[name] = value;\n\t\t}\n\t}\n\treturn sanitized;\n}\n\nexport interface HostThemeTokensFrame {\n\ttype: \"host_theme_tokens\";\n\tdata: {\n\t\tthemeName: string;\n\t\ttokens: Record<string, string>;\n\t};\n}\n\nexport function createHostThemeTokensFrame(themeName: string, tokens: Record<string, string>): HostThemeTokensFrame {\n\treturn {\n\t\ttype: \"host_theme_tokens\",\n\t\tdata: { themeName, tokens: sanitizeHostThemeTokens(tokens) },\n\t};\n}\n"]}

package/dist/daemon/theme-push.js

@@ -0,0 +1,30 @@
+/**
+ * iOS theme token push (§9.5, M11): the daemon can push its resolved theme
+ * tokens to phones as a `host_theme_tokens` frame on conversation streams.
+ * Ships OFF by default (voltd settings.themeTokenPush or VOLT_HOST_THEME_TOKENS=1)
+ * and is additionally gated on the phone advertising the capability string;
+ * clients that ignore the frame are fully supported.
+ */
+export const HOST_THEME_TOKENS_FEATURE = "host_theme_tokens.v1";
+const HEX_COLOR_PATTERN = /^#(?:[0-9a-fA-F]{3,4}|[0-9a-fA-F]{6}|[0-9a-fA-F]{8})$/;
+/**
+ * Keep only plain hex color values. Anything else — var refs that failed to
+ * resolve, ansi escape fragments, and especially anything path-like — is
+ * dropped so no host-local information can leak onto the wire.
+ */
+export function sanitizeHostThemeTokens(tokens) {
+    const sanitized = {};
+    for (const [name, value] of Object.entries(tokens)) {
+        if (typeof value === "string" && HEX_COLOR_PATTERN.test(value)) {
+            sanitized[name] = value;
+        }
+    }
+    return sanitized;
+}
+export function createHostThemeTokensFrame(themeName, tokens) {
+    return {
+        type: "host_theme_tokens",
+        data: { themeName, tokens: sanitizeHostThemeTokens(tokens) },
+    };
+}
+//# sourceMappingURL=theme-push.js.map

package/dist/daemon/theme-push.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"theme-push.js","sourceRoot":"","sources":["../../src/daemon/theme-push.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,sBAAsB,CAAC;AAEhE,MAAM,iBAAiB,GAAG,uDAAuD,CAAC;AAElF;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAA8B,EAA0B;IAC/F,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAUD,MAAM,UAAU,0BAA0B,CAAC,SAAiB,EAAE,MAA8B,EAAwB;IACnH,OAAO;QACN,IAAI,EAAE,mBAAmB;QACzB,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,CAAC,MAAM,CAAC,EAAE;KAC5D,CAAC;AAAA,CACF","sourcesContent":["/**\n * iOS theme token push (§9.5, M11): the daemon can push its resolved theme\n * tokens to phones as a `host_theme_tokens` frame on conversation streams.\n * Ships OFF by default (voltd settings.themeTokenPush or VOLT_HOST_THEME_TOKENS=1)\n * and is additionally gated on the phone advertising the capability string;\n * clients that ignore the frame are fully supported.\n */\n\nexport const HOST_THEME_TOKENS_FEATURE = \"host_theme_tokens.v1\";\n\nconst HEX_COLOR_PATTERN = /^#(?:[0-9a-fA-F]{3,4}|[0-9a-fA-F]{6}|[0-9a-fA-F]{8})$/;\n\n/**\n * Keep only plain hex color values. Anything else — var refs that failed to\n * resolve, ansi escape fragments, and especially anything path-like — is\n * dropped so no host-local information can leak onto the wire.\n */\nexport function sanitizeHostThemeTokens(tokens: Record<string, string>): Record<string, string> {\n\tconst sanitized: Record<string, string> = {};\n\tfor (const [name, value] of Object.entries(tokens)) {\n\t\tif (typeof value === \"string\" && HEX_COLOR_PATTERN.test(value)) {\n\t\t\tsanitized[name] = value;\n\t\t}\n\t}\n\treturn sanitized;\n}\n\nexport interface HostThemeTokensFrame {\n\ttype: \"host_theme_tokens\";\n\tdata: {\n\t\tthemeName: string;\n\t\ttokens: Record<string, string>;\n\t};\n}\n\nexport function createHostThemeTokensFrame(themeName: string, tokens: Record<string, string>): HostThemeTokensFrame {\n\treturn {\n\t\ttype: \"host_theme_tokens\",\n\t\tdata: { themeName, tokens: sanitizeHostThemeTokens(tokens) },\n\t};\n}\n"]}

package/dist/daemon/viewer-feed.d.ts

@@ -0,0 +1,42 @@
+import type { ControlEvent } from "./control-protocol.ts";
+/**
+ * Read-only viewer feeds for lease drains (§4.3): from drain start, every
+ * AgentSessionEvent of the draining runtime is captured; events are buffered
+ * until the acquiring TUI sends viewer_subscribe, then flushed and streamed
+ * live as viewer_event control messages. The feed is delivered only to the
+ * drain requester's control connection.
+ */
+export declare const VIEWER_BUFFER_MAX_EVENTS = 2000;
+export declare const VIEWER_BUFFER_MAX_BYTES: number;
+/** Structural view of AgentSession as the feed needs it. */
+export interface ViewerFeedSession {
+    subscribe(handler: (event: unknown) => void): () => void;
+    abort(): Promise<void> | void;
+}
+export interface ViewerFeedEffects {
+    /** Deliver a control event to a specific connection; false when it is gone. */
+    sendTo(connectionId: string, event: ControlEvent): boolean;
+}
+export declare class ViewerFeedRegistry {
+    private readonly effects;
+    private readonly feeds;
+    constructor(effects: ViewerFeedEffects);
+    /** Begin capturing the draining runtime's events for the requesting connection. */
+    start(viewerFeedId: string, connectionId: string, session: ViewerFeedSession): void;
+    private onSessionEvent;
+    private emit;
+    /**
+     * viewer_subscribe from the drain requester: flush the buffer (or the
+     * truncation marker) and switch to live forwarding. Returns false for an
+     * unknown feed or a connection that is not the drain requester.
+     */
+    subscribe(viewerFeedId: string, connectionId: string): boolean;
+    /** Stop forwarding without ending the drain (TUI dismissed the overlay). */
+    unsubscribe(viewerFeedId: string, connectionId: string): boolean;
+    /** viewer_abort: stop the draining turn (non-destructive abort, §7.4). */
+    abort(viewerFeedId: string, connectionId: string): Promise<boolean>;
+    /** Drain ended: emit viewer_end (best-effort) and tear the feed down. */
+    end(viewerFeedId: string, reason: "granted" | "cancelled" | "error"): void;
+    has(viewerFeedId: string): boolean;
+}
+//# sourceMappingURL=viewer-feed.d.ts.map