@indigoai-us/hq-cloud 6.18.99 → 6.18.100

package/dist/push-identity-fence.js

@@ -0,0 +1,348 @@
+/**
+ * Push identity fence (feedback_3bf773c5).
+ *
+ * The sync root is one folder on disk. When a different person signs in on the
+ * same machine, files the previous person left in that folder look like new
+ * local files to the new person's first push, and would be uploaded into the
+ * new person's vault (the personal vault) or under the new person's name (a
+ * shared company vault). hq-cloud#1028 binds the personal journal to the
+ * signed-in identity so a switch cannot delete files; this fence covers the
+ * other direction.
+ *
+ * Contract:
+ * - A machine switch marker is written whenever the personal journal bind sees
+ *   a different person (or an interrupted or unproven switch). It carries a new
+ *   id each time.
+ * - One record per sync scope (journal slug) names the person who last pushed
+ *   it: the personal vault uid, or the Cognito sub for a company vault, plus
+ *   the Cognito sub when known, and the id of the last machine switch the scope
+ *   has seen.
+ * - A scope is fenced for the pushing person when: its record names someone
+ *   else; its record is unreadable; a machine switch happened since the scope
+ *   last pushed (this covers every company scope, not only the personal one);
+ *   or the scope has no record and this machine shows any sign of another
+ *   person (a switch marker, another scope's record naming a different person,
+ *   or the caller's evidence from the personal journal identity state). So
+ *   deleting the fence state does not lift a fence on a machine that more than
+ *   one person has used.
+ * - A company scope is also fenced when this machine's personal sync belongs
+ *   to someone (hq-cloud#1028 owner record) and the pusher cannot be proven to
+ *   be that person: the runner records each signed-in person's Cognito sub and
+ *   personal vault uid before any push, so a company push that runs before the
+ *   new person's personal sync still fails closed.
+ * - A push with no identity at all is held whenever this machine has seen a
+ *   switch (see share.ts); it cannot be released, and the next push with an
+ *   identity is admitted normally.
+ * - While a scope is fenced, its push uploads nothing and deletes nothing
+ *   remotely. Local files are never touched. This does not depend on file
+ *   timestamps, so clock skew, future modification times and coarse
+ *   filesystem timestamps (FAT, exFAT) cannot let a file through. The cost is
+ *   that the signed-in person's own new files also wait until they decide.
+ * - A fence ends only by an explicit release from the person it was written
+ *   for ({@link releasePushIdentityFence}). A single-person machine never sees
+ *   the fence.
+ */
+import * as crypto from "crypto";
+import * as fs from "fs";
+import * as path from "path";
+import { fsyncWithCompatibility } from "./sync/fsync-compat.js";
+const RECORD_FORMAT = "hq-push-identity@2";
+const MACHINE_FORMAT = "hq-push-identity-machine@1";
+const PERSON_FORMAT = "hq-push-identity-person@1";
+const HELD_SAMPLE_CAP = 50;
+/**
+ * Record that Cognito `sub` signs in as personal vault `personalUid` on this
+ * machine. The sync runner writes it before any scope pushes; a personal push
+ * writes it too. Company pushes use it to check the pusher against the
+ * personal vault owner.
+ */
+export function recordSignedInPerson(stateDir, sub, personalUid) {
+    if (!sub || !personalUid)
+        return;
+    const filePath = personPath(stateDir, sub);
+    const current = readPerson(filePath);
+    if (current.kind === "ok" && current.value === personalUid)
+        return;
+    writeJsonAtomic(filePath, { format: PERSON_FORMAT, sub, personalUid });
+}
+/** True when a switch marker exists (or cannot be read) on this machine. */
+export function machineIdentitySwitchRecorded(stateDir) {
+    return readMachine(stateDir).kind !== "none";
+}
+/**
+ * Record that a different person signed in on this machine. Every scope is
+ * fenced on its next push.
+ */
+export function recordMachineIdentitySwitch(stateDir, now = Date.now()) {
+    const marker = {
+        format: MACHINE_FORMAT,
+        id: `${now}-${process.pid}-${crypto.randomBytes(4).toString("hex")}`,
+        sinceMs: now,
+    };
+    writeJsonAtomic(machinePath(stateDir), marker);
+}
+/**
+ * Admit `uid` as the pusher for `journalSlug` and return the fence that
+ * applies to this push, if any. Fails closed on unreadable state.
+ */
+export function admitPushIdentity(stateDir, journalSlug, uid, options = {}) {
+    const now = options.now ?? Date.now();
+    const sub = options.sub;
+    let marker = readMachine(stateDir);
+    if (marker.kind === "unreadable") {
+        recordMachineIdentitySwitch(stateDir, now);
+        marker = readMachine(stateDir);
+    }
+    const machine = marker.kind === "ok" ? marker.value : undefined;
+    const personalOwner = options.personalOwnerUid;
+    if (options.personalScope === true && sub)
+        recordSignedInPerson(stateDir, sub, uid);
+    const fenceNow = (previous) => {
+        const fence = { uid, sinceMs: machine?.sinceMs ?? now };
+        const recordSub = sub ?? previous?.sub;
+        writeRecord(stateDir, {
+            format: RECORD_FORMAT,
+            slug: journalSlug,
+            owner: uid,
+            ...(recordSub ? { sub: recordSub } : {}),
+            ...(machine ? { machineSwitchId: machine.id } : {}),
+            ...(typeof personalOwner === "string" ? { personalOwnerSeen: personalOwner } : {}),
+            fence,
+        });
+        return fence;
+    };
+    const read = readRecord(stateDir, journalSlug);
+    // A company pusher must be provably the person this machine's personal sync
+    // belongs to. When the signed-in person's personal uid is unknown, unreadable
+    // or different, fence the scope once for this owner state.
+    if (options.personalScope !== true && typeof personalOwner === "string") {
+        const seen = read.kind === "ok" ? read.value.personalOwnerSeen : undefined;
+        if (seen !== personalOwner) {
+            const mapped = sub ? readPerson(personPath(stateDir, sub)) : { kind: "none" };
+            const proven = personalOwner !== "unreadable" && mapped.kind === "ok" && mapped.value === personalOwner;
+            if (!proven)
+                return fenceNow(read.kind === "ok" ? read.value : undefined);
+        }
+    }
+    if (read.kind === "unreadable")
+        return fenceNow();
+    if (read.kind === "none") {
+        if (machine || options.otherIdentityEvidence === true || (sub && anotherPersonPushedHere(stateDir, sub))) {
+            return fenceNow();
+        }
+        writeRecord(stateDir, { format: RECORD_FORMAT, slug: journalSlug, owner: uid, ...(sub ? { sub } : {}) });
+        return undefined;
+    }
+    const record = read.value;
+    if (record.owner !== uid || (sub && record.sub && record.sub !== sub))
+        return fenceNow();
+    if (machine && record.machineSwitchId !== machine.id)
+        return fenceNow(record);
+    if (sub && !record.sub)
+        writeRecord(stateDir, { ...record, sub });
+    return record.fence?.uid === uid ? record.fence : undefined;
+}
+/** Remember how many files the last fenced push held, with a short sample. */
+export function notePushIdentityHeld(stateDir, journalSlug, count, paths) {
+    const read = readRecord(stateDir, journalSlug);
+    if (read.kind !== "ok")
+        return;
+    writeRecord(stateDir, {
+        ...read.value,
+        held: { count, samplePaths: paths.slice(0, HELD_SAMPLE_CAP), at: new Date().toISOString() },
+    });
+}
+/** Every scope on this machine whose pushes are held, with its last held sample. */
+export function listPushIdentityFences(stateDir) {
+    const out = [];
+    for (const filePath of recordFiles(stateDir)) {
+        const read = parseRecord(filePath);
+        if (read.kind !== "ok" || !read.value.fence)
+            continue;
+        out.push({
+            slug: read.value.slug,
+            uid: read.value.fence.uid,
+            sinceMs: read.value.fence.sinceMs,
+            ...(read.value.held ? { held: read.value.held } : {}),
+        });
+    }
+    return out.sort((a, b) => a.slug.localeCompare(b.slug));
+}
+/**
+ * The signed-in person confirms the files held after a switch are theirs to
+ * push. Only the person the fence was written for can release it.
+ */
+export function releasePushIdentityFence(stateDir, journalSlug, uid) {
+    const read = readRecord(stateDir, journalSlug);
+    if (read.kind !== "ok" || read.value.owner !== uid || read.value.fence?.uid !== uid)
+        return false;
+    const released = {
+        format: RECORD_FORMAT,
+        slug: read.value.slug,
+        owner: read.value.owner,
+        ...(read.value.sub ? { sub: read.value.sub } : {}),
+        ...(read.value.machineSwitchId ? { machineSwitchId: read.value.machineSwitchId } : {}),
+        ...(read.value.personalOwnerSeen ? { personalOwnerSeen: read.value.personalOwnerSeen } : {}),
+    };
+    writeRecord(stateDir, released);
+    return true;
+}
+/**
+ * Release every fenced scope that belongs to one of `identities` (the
+ * signed-in person's personal vault uid and Cognito sub). Optionally limited
+ * to `slugs`. Returns the released scope slugs.
+ */
+export function releasePushIdentityFences(stateDir, identities, slugs) {
+    const allowed = new Set(identities.filter((identity) => identity.length > 0));
+    const only = slugs ? new Set(slugs) : undefined;
+    const released = [];
+    for (const listing of listPushIdentityFences(stateDir)) {
+        if (!allowed.has(listing.uid))
+            continue;
+        if (only && !only.has(listing.slug))
+            continue;
+        if (releasePushIdentityFence(stateDir, listing.slug, listing.uid))
+            released.push(listing.slug);
+    }
+    return released;
+}
+/** True when any scope's record on this machine names a different person, or cannot be read. */
+function anotherPersonPushedHere(stateDir, sub) {
+    for (const filePath of recordFiles(stateDir)) {
+        const read = parseRecord(filePath);
+        if (read.kind === "unreadable")
+            return true;
+        if (read.kind === "ok" && read.value.sub && read.value.sub !== sub)
+            return true;
+    }
+    return false;
+}
+function recordFiles(stateDir) {
+    const dir = path.join(stateDir, "push-identity");
+    let names;
+    try {
+        names = fs.readdirSync(dir);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return [];
+        throw error;
+    }
+    return names
+        .filter((name) => name.startsWith("scope-") && name.endsWith(".json"))
+        .map((name) => path.join(dir, name));
+}
+function personPath(stateDir, sub) {
+    const id = crypto.createHash("sha256").update(sub).digest("hex").slice(0, 32);
+    return path.join(stateDir, "push-identity", `person-${id}.json`);
+}
+function readPerson(filePath) {
+    const raw = readText(filePath);
+    if (raw.kind !== "ok")
+        return raw;
+    try {
+        const parsed = JSON.parse(raw.value);
+        if (parsed?.format !== PERSON_FORMAT || typeof parsed.personalUid !== "string" || !parsed.personalUid) {
+            return { kind: "unreadable" };
+        }
+        return { kind: "ok", value: parsed.personalUid };
+    }
+    catch {
+        return { kind: "unreadable" };
+    }
+}
+function machinePath(stateDir) {
+    return path.join(stateDir, "push-identity", "machine.json");
+}
+function recordPath(stateDir, journalSlug) {
+    const id = crypto.createHash("sha256").update(journalSlug).digest("hex").slice(0, 32);
+    return path.join(stateDir, "push-identity", `scope-${id}.json`);
+}
+function readMachine(stateDir) {
+    const raw = readText(machinePath(stateDir));
+    if (raw.kind !== "ok")
+        return raw;
+    try {
+        const parsed = JSON.parse(raw.value);
+        if (parsed?.format !== MACHINE_FORMAT || typeof parsed.id !== "string" || typeof parsed.sinceMs !== "number") {
+            return { kind: "unreadable" };
+        }
+        return { kind: "ok", value: { format: MACHINE_FORMAT, id: parsed.id, sinceMs: parsed.sinceMs } };
+    }
+    catch {
+        return { kind: "unreadable" };
+    }
+}
+function readRecord(stateDir, journalSlug) {
+    const read = parseRecord(recordPath(stateDir, journalSlug));
+    // A record filed under this slug's name but naming another slug was moved
+    // or edited by hand: do not trust it.
+    if (read.kind === "ok" && read.value.slug !== journalSlug)
+        return { kind: "unreadable" };
+    return read;
+}
+function parseRecord(filePath) {
+    const raw = readText(filePath);
+    if (raw.kind !== "ok")
+        return raw;
+    try {
+        const parsed = JSON.parse(raw.value);
+        if (parsed?.format !== RECORD_FORMAT ||
+            typeof parsed.slug !== "string" ||
+            typeof parsed.owner !== "string" ||
+            !parsed.owner ||
+            (parsed.sub !== undefined && typeof parsed.sub !== "string") ||
+            (parsed.machineSwitchId !== undefined && typeof parsed.machineSwitchId !== "string") ||
+            (parsed.personalOwnerSeen !== undefined && typeof parsed.personalOwnerSeen !== "string")) {
+            return { kind: "unreadable" };
+        }
+        const fence = parsed.fence;
+        if (fence !== undefined && (typeof fence?.uid !== "string" || typeof fence.sinceMs !== "number")) {
+            return { kind: "unreadable" };
+        }
+        return { kind: "ok", value: parsed };
+    }
+    catch {
+        return { kind: "unreadable" };
+    }
+}
+function readText(filePath) {
+    try {
+        return { kind: "ok", value: fs.readFileSync(filePath, "utf8") };
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return { kind: "none" };
+        return { kind: "unreadable" };
+    }
+}
+function writeRecord(stateDir, record) {
+    writeJsonAtomic(recordPath(stateDir, record.slug), record);
+}
+function writeJsonAtomic(filePath, value) {
+    fs.mkdirSync(path.dirname(filePath), { recursive: true });
+    const tmp = `${filePath}.${process.pid}.tmp`;
+    const fd = fs.openSync(tmp, "w");
+    try {
+        fs.writeSync(fd, JSON.stringify(value));
+        fs.fsyncSync(fd);
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+    fs.renameSync(tmp, filePath);
+    // Persist the rename itself, so a power loss cannot drop a switch marker or
+    // fence while later journal renames survive. Windows cannot open a
+    // directory for fsync; unsupported directory fsyncs elsewhere are skipped
+    // and logged by fsyncWithCompatibility.
+    if (process.platform === "win32")
+        return;
+    const dirFd = fs.openSync(path.dirname(filePath), "r");
+    try {
+        fsyncWithCompatibility(dirFd, { site: "push-identity-fence", handleKind: "directory" });
+    }
+    finally {
+        fs.closeSync(dirFd);
+    }
+}
+//# sourceMappingURL=push-identity-fence.js.map

package/dist/push-identity-fence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"push-identity-fence.js","sourceRoot":"","sources":["../src/push-identity-fence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAC3C,MAAM,cAAc,GAAG,4BAA4B,CAAC;AACpD,MAAM,aAAa,GAAG,2BAA2B,CAAC;AAClD,MAAM,eAAe,GAAG,EAAE,CAAC;AA6D3B;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,GAAW,EAAE,WAAmB;IACrF,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW;QAAE,OAAO;IACjC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW;QAAE,OAAO;IACnE,eAAe,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,6BAA6B,CAAC,QAAgB;IAC5D,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,QAAgB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACpF,MAAM,MAAM,GAAkB;QAC5B,MAAM,EAAE,cAAc;QACtB,EAAE,EAAE,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;QACpE,OAAO,EAAE,GAAG;KACb,CAAC;IACF,eAAe,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,WAAmB,EACnB,GAAW,EACX,UAAoC,EAAE;IAEtC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,IAAI,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACjC,2BAA2B,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAC/C,IAAI,OAAO,CAAC,aAAa,KAAK,IAAI,IAAI,GAAG;QAAE,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAG,CAAC,QAA6B,EAAqB,EAAE;QACpE,MAAM,KAAK,GAAsB,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC;QAC3E,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,EAAE,GAAG,CAAC;QACvC,WAAW,CAAC,QAAQ,EAAE;YACpB,MAAM,EAAE,aAAa;YACrB,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,GAAG;YACV,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,KAAK;SACN,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC/C,4EAA4E;IAC5E,8EAA8E;IAC9E,2DAA2D;IAC3D,IAAI,OAAO,CAAC,aAAa,KAAK,IAAI,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,MAAM,EAAY,CAAC;YACzF,MAAM,MAAM,GAAG,aAAa,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa,CAAC;YACxG,IAAI,CAAC,MAAM;gBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,QAAQ,EAAE,CAAC;IAClD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,OAAO,CAAC,qBAAqB,KAAK,IAAI,IAAI,CAAC,GAAG,IAAI,uBAAuB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACzG,OAAO,QAAQ,EAAE,CAAC;QACpB,CAAC;QACD,WAAW,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACzG,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;IAC1B,IAAI,MAAM,CAAC,KAAK,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC;QAAE,OAAO,QAAQ,EAAE,CAAC;IACzF,IAAI,OAAO,IAAI,MAAM,CAAC,eAAe,KAAK,OAAO,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9E,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG;QAAE,WAAW,CAAC,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,KAAK,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,WAAmB,EACnB,KAAa,EACb,KAAwB;IAExB,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO;IAC/B,WAAW,CAAC,QAAQ,EAAE;QACpB,GAAG,IAAI,CAAC,KAAK;QACb,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;KAC5F,CAAC,CAAC;AACL,CAAC;AASD,oFAAoF;AACpF,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,MAAM,GAAG,GAA+B,EAAE,CAAC;IAC3C,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK;YAAE,SAAS;QACtD,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG;YACzB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO;YACjC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAgB,EAAE,WAAmB,EAAE,GAAW;IACzF,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAClG,MAAM,QAAQ,GAAuB;QACnC,MAAM,EAAE,aAAa;QACrB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK;QACvB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7F,CAAC;IACF,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAAgB,EAChB,UAA6B,EAC7B,KAAyB;IAEzB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,OAAO,IAAI,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,SAAS;QACxC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QAC9C,IAAI,wBAAwB,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gGAAgG;AAChG,SAAS,uBAAuB,CAAC,QAAgB,EAAE,GAAW;IAC5D,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC;QAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;IAClF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACjD,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAClE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,KAAK;SACT,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SACrE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB,EAAE,GAAW;IAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB;IAClC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAgD,CAAC;QACpF,IAAI,MAAM,EAAE,MAAM,KAAK,aAAa,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACtG,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAChC,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB,EAAE,WAAmB;IACvD,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtF,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAA2B,CAAC;QAC/D,IAAI,MAAM,EAAE,MAAM,KAAK,cAAc,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC7G,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAChC,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;IACnG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB,EAAE,WAAmB;IACvD,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IAC5D,0EAA0E;IAC1E,sCAAsC;IACtC,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IACzF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAgC,CAAC;QACpE,IACE,MAAM,EAAE,MAAM,KAAK,aAAa;YAChC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAChC,CAAC,MAAM,CAAC,KAAK;YACb,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC;YAC5D,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,CAAC;YACpF,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ,CAAC,EACxF,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAChC,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,EAAE,GAAG,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE,CAAC;YACjG,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAChC,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAA4B,EAAE,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB;IAChC,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAChF,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,MAA0B;IAC/D,eAAe,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,KAAc;IACvD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC7C,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IACD,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC7B,4EAA4E;IAC5E,mEAAmE;IACnE,0EAA0E;IAC1E,wCAAwC;IACxC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,sBAAsB,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1F,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cloud",
-  "version": "6.18.99",
+  "version": "6.18.100",
   "description": "HQ by Indigo cloud sync engine — bidirectional S3 sync for mobile access",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",