@jobshimo/browser-link 0.2.0 → 0.4.0

package/dist/bridge/dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../../src/bridge/dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EACL,iBAAiB,EACjB,aAAa,GAEd,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAiBhE,MAAM,UAAU,eAAe,CAAC,IAAkB;IAChD,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,wBAAwB,EAAE,GAAG,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACzE,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAC1C;KACF,CAAC;AACJ,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAoB,EAAE,IAAkB;IAC3E,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;IACtC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7C,uEAAuE;QACvE,qEAAqE;QACrE,OAAO,SAAS,CACd,SAAS,IAAI,6CAA6C;YACxD,8EAA8E,IAAI,KAAK,CAC1F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,IAAI,SAAS,CAAC,IAAI,CAAC;YAAE,OAAO,YAAY,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACpE,IAAI,aAAa,CAAC,IAAI,CAAC;YACrB,OAAO,YAAY,CAAC,MAAM,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAC9E,OAAO,SAAS,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,SAAS,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACrE,CAAC;AACH,CAAC"}

package/dist/bridge/events.d.ts

@@ -0,0 +1,39 @@
+/**
+ * In-memory ring buffer of bridge lifecycle events. Exposed to the agent
+ * through the `browser.events` MCP tool so it can self-recover after a
+ * primary swap or tab id rename: instead of failing blind on a stale
+ * tab_id, the agent calls browser.events, sees a `tab-renamed` entry,
+ * and resumes work on the new id.
+ *
+ * The buffer is per-process. When the primary dies and a new primary
+ * takes over, the new primary starts with an empty buffer plus its own
+ * `primary-elected` event as the fundamental marker — older history is
+ * intentionally lost (the agent has nothing useful to do with it anyway).
+ */
+export type BridgeEventKind = 'primary-elected' | 'tab-registered' | 'tab-disconnected' | 'tab-renamed';
+export interface BridgeEvent {
+    /** Monotonic id assigned by addEvent. */
+    id: number;
+    /** ISO-8601 timestamp. */
+    at: string;
+    kind: BridgeEventKind;
+    /** Kind-specific payload. Documented per-kind in the JSDoc below. */
+    data: Record<string, unknown>;
+}
+export declare class BridgeEventLog {
+    private buffer;
+    private nextId;
+    /** Append an event and return it. Drops the oldest if the buffer is full. */
+    add(kind: BridgeEventKind, data?: Record<string, unknown>): BridgeEvent;
+    /** Return up to `limit` recent events, optionally filtered to those
+     * with id > sinceId. Cursor pattern — pass the previous-call's last id
+     * back in as sinceId to get only what's new. */
+    recent(opts?: {
+        sinceId?: number;
+        limit?: number;
+    }): BridgeEvent[];
+    /** The highest id currently in the buffer (0 if empty). */
+    latestId(): number;
+    /** Total number of events in the buffer. */
+    size(): number;
+}

package/dist/bridge/events.js

@@ -0,0 +1,47 @@
+/**
+ * In-memory ring buffer of bridge lifecycle events. Exposed to the agent
+ * through the `browser.events` MCP tool so it can self-recover after a
+ * primary swap or tab id rename: instead of failing blind on a stale
+ * tab_id, the agent calls browser.events, sees a `tab-renamed` entry,
+ * and resumes work on the new id.
+ *
+ * The buffer is per-process. When the primary dies and a new primary
+ * takes over, the new primary starts with an empty buffer plus its own
+ * `primary-elected` event as the fundamental marker — older history is
+ * intentionally lost (the agent has nothing useful to do with it anyway).
+ */
+const MAX_EVENTS = 200;
+export class BridgeEventLog {
+    buffer = [];
+    nextId = 1;
+    /** Append an event and return it. Drops the oldest if the buffer is full. */
+    add(kind, data = {}) {
+        const event = {
+            id: this.nextId++,
+            at: new Date().toISOString(),
+            kind,
+            data,
+        };
+        this.buffer.push(event);
+        if (this.buffer.length > MAX_EVENTS)
+            this.buffer.shift();
+        return event;
+    }
+    /** Return up to `limit` recent events, optionally filtered to those
+     * with id > sinceId. Cursor pattern — pass the previous-call's last id
+     * back in as sinceId to get only what's new. */
+    recent(opts = {}) {
+        const limit = Math.max(1, Math.min(opts.limit ?? 20, MAX_EVENTS));
+        const filtered = opts.sinceId === undefined ? this.buffer : this.buffer.filter((e) => e.id > opts.sinceId);
+        return filtered.slice(-limit);
+    }
+    /** The highest id currently in the buffer (0 if empty). */
+    latestId() {
+        return this.buffer.length === 0 ? 0 : this.buffer[this.buffer.length - 1].id;
+    }
+    /** Total number of events in the buffer. */
+    size() {
+        return this.buffer.length;
+    }
+}
+//# sourceMappingURL=events.js.map

package/dist/bridge/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/bridge/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAkBH,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB,MAAM,OAAO,cAAc;IACjB,MAAM,GAAkB,EAAE,CAAC;IAC3B,MAAM,GAAG,CAAC,CAAC;IAEnB,6EAA6E;IAC7E,GAAG,CAAC,IAAqB,EAAE,OAAgC,EAAE;QAC3D,MAAM,KAAK,GAAgB;YACzB,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE;YACjB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI;YACJ,IAAI;SACL,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,UAAU;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;oDAEgD;IAChD,MAAM,CAAC,OAA6C,EAAE;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QAClE,MAAM,QAAQ,GACZ,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,OAAQ,CAAC,CAAC;QAC7F,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,2DAA2D;IAC3D,QAAQ;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,EAAE,CAAC;IAChF,CAAC;IAED,4CAA4C;IAC5C,IAAI;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;CACF"}

package/dist/bridge/protocol.d.ts

@@ -0,0 +1,80 @@
+/**
+ * IPC protocol between browser-link primary and proxy instances.
+ *
+ * Wire format: newline-delimited JSON (NDJSON). Each line is one frame.
+ * The protocol version is bumped on any non-backwards-compatible change
+ * to frame shapes. A primary running version N rejects proxies that
+ * don't advertise the same N — they fall back to a clear error.
+ *
+ * This module is pure data + helpers; no I/O.
+ */
+export declare const IPC_HOST = "127.0.0.1";
+export declare const IPC_PORT = 17530;
+export declare const IPC_PROTOCOL_VERSION = "1";
+/** Pings cadence. If a side doesn't reply within IPC_PONG_TIMEOUT_MS,
+ * the connection is considered dead. */
+export declare const IPC_PING_INTERVAL_MS = 5000;
+export declare const IPC_PONG_TIMEOUT_MS = 10000;
+/** Initial handshake — proxy → primary. */
+export interface HelloFrame {
+    kind: 'hello';
+    /** Protocol version the proxy speaks. Must match the primary's version. */
+    version: string;
+    /** Per-session token the proxy read from the data dir. */
+    token: string;
+}
+/** Successful handshake — primary → proxy. */
+export interface HelloAckFrame {
+    kind: 'hello-ack';
+    /** Protocol version (always === IPC_PROTOCOL_VERSION). */
+    version: string;
+    /** Server-assigned id for this proxy session — used for logging. */
+    sessionId: string;
+}
+/** Rejected handshake — primary → proxy. The proxy closes after seeing this. */
+export interface HelloRejectFrame {
+    kind: 'hello-reject';
+    reason: string;
+}
+/** Forwarded MCP request — proxy → primary. */
+export interface McpRequestFrame {
+    kind: 'mcp.request';
+    /** Correlation id; the primary echoes it on the response. */
+    requestId: number;
+    /** Raw JSON-RPC 2.0 request frame from the proxy's stdin. */
+    payload: unknown;
+}
+/** Forwarded MCP response — primary → proxy. */
+export interface McpResponseFrame {
+    kind: 'mcp.response';
+    requestId: number;
+    /** Raw JSON-RPC 2.0 response frame to be written to the proxy's stdout. */
+    payload: unknown;
+}
+/** Forwarded MCP notification — both directions. No response expected. */
+export interface McpNotificationFrame {
+    kind: 'mcp.notification';
+    /** Raw JSON-RPC 2.0 notification frame (no id). */
+    payload: unknown;
+}
+/** Keep-alive frames. */
+export interface PingFrame {
+    kind: 'ping';
+}
+export interface PongFrame {
+    kind: 'pong';
+}
+/** Broadcast from primary just before it closes its IPC server. Proxies
+ * use this to trigger the autoReelect race. */
+export interface PrimaryClosingFrame {
+    kind: 'primary-closing';
+    reason?: string;
+}
+export type Frame = HelloFrame | HelloAckFrame | HelloRejectFrame | McpRequestFrame | McpResponseFrame | McpNotificationFrame | PingFrame | PongFrame | PrimaryClosingFrame;
+/** Serialise one frame to its on-the-wire representation (a single NDJSON line). */
+export declare function encodeFrame(frame: Frame): string;
+/** Parse one NDJSON line into a frame. Returns null when the input is
+ * not a recognised frame (defensive — never throw on malformed data). */
+export declare function parseFrame(line: string): Frame | null;
+/** True when a peer's announced protocol version is compatible with ours. */
+export declare function isCompatibleVersion(peerVersion: string): boolean;

package/dist/bridge/protocol.js

@@ -0,0 +1,79 @@
+/**
+ * IPC protocol between browser-link primary and proxy instances.
+ *
+ * Wire format: newline-delimited JSON (NDJSON). Each line is one frame.
+ * The protocol version is bumped on any non-backwards-compatible change
+ * to frame shapes. A primary running version N rejects proxies that
+ * don't advertise the same N — they fall back to a clear error.
+ *
+ * This module is pure data + helpers; no I/O.
+ */
+export const IPC_HOST = '127.0.0.1';
+export const IPC_PORT = 17530;
+export const IPC_PROTOCOL_VERSION = '1';
+/** Pings cadence. If a side doesn't reply within IPC_PONG_TIMEOUT_MS,
+ * the connection is considered dead. */
+export const IPC_PING_INTERVAL_MS = 5_000;
+export const IPC_PONG_TIMEOUT_MS = 10_000;
+/** Serialise one frame to its on-the-wire representation (a single NDJSON line). */
+export function encodeFrame(frame) {
+    return JSON.stringify(frame) + '\n';
+}
+/** Parse one NDJSON line into a frame. Returns null when the input is
+ * not a recognised frame (defensive — never throw on malformed data). */
+export function parseFrame(line) {
+    let obj;
+    try {
+        obj = JSON.parse(line);
+    }
+    catch {
+        return null;
+    }
+    if (!obj || typeof obj !== 'object' || Array.isArray(obj))
+        return null;
+    const o = obj;
+    if (typeof o.kind !== 'string')
+        return null;
+    switch (o.kind) {
+        case 'hello':
+            if (typeof o.version === 'string' && typeof o.token === 'string')
+                return o;
+            return null;
+        case 'hello-ack':
+            if (typeof o.version === 'string' && typeof o.sessionId === 'string')
+                return o;
+            return null;
+        case 'hello-reject':
+            if (typeof o.reason === 'string')
+                return o;
+            return null;
+        case 'mcp.request':
+            if (typeof o.requestId === 'number' && 'payload' in o)
+                return o;
+            return null;
+        case 'mcp.response':
+            if (typeof o.requestId === 'number' && 'payload' in o)
+                return o;
+            return null;
+        case 'mcp.notification':
+            if ('payload' in o)
+                return o;
+            return null;
+        case 'ping':
+            return { kind: 'ping' };
+        case 'pong':
+            return { kind: 'pong' };
+        case 'primary-closing':
+            return {
+                kind: 'primary-closing',
+                reason: typeof o.reason === 'string' ? o.reason : undefined,
+            };
+        default:
+            return null;
+    }
+}
+/** True when a peer's announced protocol version is compatible with ours. */
+export function isCompatibleVersion(peerVersion) {
+    return peerVersion === IPC_PROTOCOL_VERSION;
+}
+//# sourceMappingURL=protocol.js.map

package/dist/bridge/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../src/bridge/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG,WAAW,CAAC;AACpC,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC;AAC9B,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAExC;wCACwC;AACxC,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAC1C,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AA4E1C,oFAAoF;AACpF,MAAM,UAAU,WAAW,CAAC,KAAY;IACtC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;AACtC,CAAC;AAED;yEACyE;AACzE,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC5C,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,OAAO;YACV,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;gBAC9D,OAAO,CAA0B,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,KAAK,WAAW;YACd,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;gBAClE,OAAO,CAA6B,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,KAAK,cAAc;YACjB,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;gBAAE,OAAO,CAAgC,CAAC;YAC1E,OAAO,IAAI,CAAC;QACd,KAAK,aAAa;YAChB,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,SAAS,IAAI,CAAC;gBAAE,OAAO,CAA+B,CAAC;YAC9F,OAAO,IAAI,CAAC;QACd,KAAK,cAAc;YACjB,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,SAAS,IAAI,CAAC;gBACnD,OAAO,CAAgC,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,KAAK,kBAAkB;YACrB,IAAI,SAAS,IAAI,CAAC;gBAAE,OAAO,CAAoC,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,KAAK,MAAM;YACT,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC1B,KAAK,MAAM;YACT,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC1B,KAAK,iBAAiB;YACpB,OAAO;gBACL,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;aAC5D,CAAC;QACJ;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,OAAO,WAAW,KAAK,oBAAoB,CAAC;AAC9C,CAAC"}

package/dist/bridge/server.d.ts

@@ -0,0 +1,42 @@
+import { type DispatchDeps } from './dispatch.js';
+export interface IpcServerOptions {
+    /** Override the bind host. Default 127.0.0.1. Production callers should
+     * never set this — tests use it to dodge cross-suite port collisions. */
+    host?: string;
+    /** Override the bind port. Default 17530. Pass 0 to let the OS pick a
+     * free port; the chosen port is exposed via boundPort() after start(). */
+    port?: number;
+}
+export declare class IpcServer {
+    private deps;
+    private options;
+    private server;
+    private sessions;
+    private token;
+    private boundHost;
+    private boundPortValue;
+    constructor(deps: DispatchDeps, options?: IpcServerOptions);
+    /** Bind the IPC port. Rejects on EADDRINUSE so the caller (server.ts)
+     * can log and continue without multi-agent — never throws after listen. */
+    start(): Promise<void>;
+    /** The actual host+port the server is listening on. Set after start()
+     * resolves; meaningful even when port:0 was passed. */
+    boundAddress(): {
+        host: string;
+        port: number;
+    };
+    /** Tell every connected proxy we're going down (so auto-reelect can fire),
+     * then close the listening socket. Safe to call when start() never ran. */
+    stop(): Promise<void>;
+    /** Visible to tests + doctor. */
+    sessionCount(): number;
+    /** Exposed for tests only. Production callers never need this. */
+    currentToken(): string;
+    private handleConnection;
+    private heartbeat;
+    private handleFrame;
+    /** Dispatch a JSON-RPC 2.0 MCP request to the shared handlers and return
+     * a JSON-RPC 2.0 response object. Errors are converted to JSON-RPC error
+     * envelopes — never thrown back to the socket layer. */
+    private dispatchMcpRequest;
+}

package/dist/bridge/server.js

@@ -0,0 +1,336 @@
+import { createServer } from 'node:net';
+import { randomUUID } from 'node:crypto';
+import { lookupPeerProcess } from '../auth/process-identity.js';
+import { SERVER_INSTRUCTIONS } from '../tools/server-instructions.js';
+import { VERSION } from '../version.js';
+import { IPC_HOST, IPC_PING_INTERVAL_MS, IPC_PONG_TIMEOUT_MS, IPC_PORT, IPC_PROTOCOL_VERSION, encodeFrame, isCompatibleVersion, parseFrame, } from './protocol.js';
+import { handleToolCall, handleToolsList } from './dispatch.js';
+import { rotateToken } from './token.js';
+/**
+ * Primary's side of the IPC bridge. Listens on 127.0.0.1:17530, validates
+ * incoming peer processes via the same kernel-level process binding that
+ * protects the WS bridge, then runs the hello/token handshake. After auth,
+ * forwards MCP JSON-RPC frames through the shared dispatch handlers.
+ *
+ * Construction does NOT bind the port. Call `start()` and await.
+ */
+function log(msg) {
+    // stderr — stdout belongs to the MCP transport.
+    console.error(`[browser-link ipc] ${msg}`);
+}
+/** Binaries we'll accept as legitimate peers. The token is the real auth;
+ * this is defence in depth. Names normalised to lowercase before comparison. */
+const NODE_PROCESS_NAMES = new Set([
+    'node',
+    'node.exe',
+    'nodejs',
+    'tsx',
+    'tsx.exe',
+    'browser-link',
+    'browser-link.exe',
+]);
+/** Same loopback normalisation as server.ts uses for the WS bridge. */
+function normaliseLoopback(addr) {
+    if (addr === '::1' || addr === '::ffff:127.0.0.1')
+        return '127.0.0.1';
+    if (addr.startsWith('::ffff:'))
+        return addr.slice('::ffff:'.length);
+    return addr;
+}
+export class IpcServer {
+    deps;
+    options;
+    server = null;
+    sessions = new Map();
+    token;
+    boundHost = IPC_HOST;
+    boundPortValue = IPC_PORT;
+    constructor(deps, options = {}) {
+        this.deps = deps;
+        this.options = options;
+        // Rotate the token on every primary startup. Any stale token left by a
+        // crashed previous primary is invalidated immediately.
+        this.token = rotateToken();
+    }
+    /** Bind the IPC port. Rejects on EADDRINUSE so the caller (server.ts)
+     * can log and continue without multi-agent — never throws after listen. */
+    start() {
+        return new Promise((resolve, reject) => {
+            const host = this.options.host ?? IPC_HOST;
+            const port = this.options.port ?? IPC_PORT;
+            const server = createServer((socket) => {
+                this.handleConnection(socket).catch((err) => {
+                    log(`Connection handler error: ${err instanceof Error ? err.message : String(err)}`);
+                    socket.destroy();
+                });
+            });
+            let settled = false;
+            server.on('error', (err) => {
+                if (!settled) {
+                    settled = true;
+                    if (err.code === 'EADDRINUSE') {
+                        reject(new Error(`IPC port ${host}:${port} already in use — another browser-link primary may already be running.`));
+                    }
+                    else {
+                        reject(err);
+                    }
+                }
+                else {
+                    log(`Server error after listening: ${err.message}`);
+                }
+            });
+            server.listen(port, host, () => {
+                settled = true;
+                this.server = server;
+                const addr = server.address();
+                if (addr && typeof addr === 'object') {
+                    this.boundHost = addr.address;
+                    this.boundPortValue = addr.port;
+                }
+                else {
+                    this.boundHost = host;
+                    this.boundPortValue = port;
+                }
+                log(`IPC server listening on ${this.boundHost}:${this.boundPortValue}`);
+                resolve();
+            });
+        });
+    }
+    /** The actual host+port the server is listening on. Set after start()
+     * resolves; meaningful even when port:0 was passed. */
+    boundAddress() {
+        return { host: this.boundHost, port: this.boundPortValue };
+    }
+    /** Tell every connected proxy we're going down (so auto-reelect can fire),
+     * then close the listening socket. Safe to call when start() never ran. */
+    async stop() {
+        for (const session of this.sessions.values()) {
+            try {
+                session.socket.write(encodeFrame({ kind: 'primary-closing', reason: 'shutdown' }));
+            }
+            catch {
+                /* socket already gone */
+            }
+            clearInterval(session.pingTimer);
+            if (session.pongDeadline)
+                clearTimeout(session.pongDeadline);
+            session.socket.end();
+        }
+        this.sessions.clear();
+        if (this.server) {
+            await new Promise((res) => this.server.close(() => res()));
+            this.server = null;
+        }
+    }
+    /** Visible to tests + doctor. */
+    sessionCount() {
+        return this.sessions.size;
+    }
+    /** Exposed for tests only. Production callers never need this. */
+    currentToken() {
+        return this.token;
+    }
+    async handleConnection(socket) {
+        const remoteAddr = normaliseLoopback(socket.remoteAddress ?? '');
+        const remotePort = socket.remotePort;
+        if (!remoteAddr || remotePort == null) {
+            log('Rejected IPC connection: peer address/port not exposed by socket.');
+            socket.destroy();
+            return;
+        }
+        // Kernel-level process binding. Same trick as the WS bridge: we ask the
+        // OS which process owns the peer's TCP port, and reject anything that
+        // does not look like a Node-family binary.
+        const peer = await lookupPeerProcess(remoteAddr, remotePort).catch(() => null);
+        if (!peer || !NODE_PROCESS_NAMES.has(peer.binaryName.toLowerCase())) {
+            log(`Rejected IPC connection from ${remoteAddr}:${remotePort}: not a known Node process (${peer?.binaryName ?? 'unknown'}).`);
+            socket.destroy();
+            return;
+        }
+        let buffer = '';
+        let authenticated = false;
+        let sessionId = null;
+        const handleLine = (line) => {
+            if (line.length === 0)
+                return;
+            const frame = parseFrame(line);
+            if (!frame) {
+                log('Invalid frame received; closing connection.');
+                socket.destroy();
+                return;
+            }
+            if (!authenticated) {
+                if (frame.kind !== 'hello') {
+                    log(`First frame was not "hello" (got ${frame.kind}); closing.`);
+                    socket.destroy();
+                    return;
+                }
+                if (!isCompatibleVersion(frame.version)) {
+                    socket.write(encodeFrame({
+                        kind: 'hello-reject',
+                        reason: `version mismatch: primary ${IPC_PROTOCOL_VERSION}, proxy ${frame.version}`,
+                    }));
+                    socket.end();
+                    return;
+                }
+                if (frame.token !== this.token) {
+                    socket.write(encodeFrame({ kind: 'hello-reject', reason: 'invalid token' }));
+                    socket.end();
+                    return;
+                }
+                // Auth ok — register session and start the heartbeat.
+                authenticated = true;
+                sessionId = randomUUID();
+                socket.write(encodeFrame({ kind: 'hello-ack', version: IPC_PROTOCOL_VERSION, sessionId }));
+                const sid = sessionId;
+                const session = {
+                    id: sid,
+                    socket,
+                    pingTimer: setInterval(() => this.heartbeat(sid), IPC_PING_INTERVAL_MS),
+                    pongDeadline: null,
+                };
+                this.sessions.set(sid, session);
+                log(`Proxy connected: session=${sid} pid=${peer.pid}`);
+                return;
+            }
+            void this.handleFrame(frame, sessionId, socket);
+        };
+        socket.on('data', (chunk) => {
+            buffer += chunk.toString('utf8');
+            let nl;
+            while ((nl = buffer.indexOf('\n')) >= 0) {
+                const line = buffer.slice(0, nl);
+                buffer = buffer.slice(nl + 1);
+                handleLine(line);
+            }
+        });
+        socket.on('close', () => {
+            if (sessionId) {
+                const session = this.sessions.get(sessionId);
+                if (session) {
+                    clearInterval(session.pingTimer);
+                    if (session.pongDeadline)
+                        clearTimeout(session.pongDeadline);
+                    this.sessions.delete(sessionId);
+                    log(`Proxy disconnected: session=${sessionId}`);
+                }
+            }
+        });
+        socket.on('error', (err) => {
+            log(`Proxy socket error: ${err.message}`);
+        });
+    }
+    heartbeat(sid) {
+        const session = this.sessions.get(sid);
+        if (!session)
+            return;
+        try {
+            session.socket.write(encodeFrame({ kind: 'ping' }));
+        }
+        catch {
+            // socket already closed; the 'close' handler will clean up
+            return;
+        }
+        if (!session.pongDeadline) {
+            session.pongDeadline = setTimeout(() => {
+                log(`Proxy ${sid} did not pong in time; dropping.`);
+                session.socket.destroy();
+            }, IPC_PONG_TIMEOUT_MS);
+        }
+    }
+    async handleFrame(frame, sessionId, socket) {
+        switch (frame.kind) {
+            case 'pong': {
+                const session = this.sessions.get(sessionId);
+                if (session?.pongDeadline) {
+                    clearTimeout(session.pongDeadline);
+                    session.pongDeadline = null;
+                }
+                return;
+            }
+            case 'mcp.request': {
+                const response = await this.dispatchMcpRequest(frame.payload);
+                try {
+                    socket.write(encodeFrame({ kind: 'mcp.response', requestId: frame.requestId, payload: response }));
+                }
+                catch {
+                    /* socket gone */
+                }
+                return;
+            }
+            case 'mcp.notification': {
+                // Proxies forward notifications like notifications/initialized. We
+                // don't reply (notifications have no id). Future work: route to map
+                // event log when we add the traceability layer.
+                return;
+            }
+            case 'ping': {
+                try {
+                    socket.write(encodeFrame({ kind: 'pong' }));
+                }
+                catch {
+                    /* socket gone */
+                }
+                return;
+            }
+            default:
+                // hello/hello-ack/hello-reject/primary-closing should not arrive
+                // post-handshake from a proxy. Ignore defensively.
+                return;
+        }
+    }
+    /** Dispatch a JSON-RPC 2.0 MCP request to the shared handlers and return
+     * a JSON-RPC 2.0 response object. Errors are converted to JSON-RPC error
+     * envelopes — never thrown back to the socket layer. */
+    async dispatchMcpRequest(payload) {
+        if (!payload || typeof payload !== 'object' || Array.isArray(payload)) {
+            return { jsonrpc: '2.0', id: null, error: { code: -32600, message: 'Invalid request' } };
+        }
+        const req = payload;
+        const id = req.id ?? null;
+        const method = req.method ?? '';
+        try {
+            switch (method) {
+                case 'initialize': {
+                    const result = {
+                        protocolVersion: '2024-11-05',
+                        capabilities: { tools: {} },
+                        serverInfo: { name: 'browser-link', version: VERSION },
+                        instructions: SERVER_INSTRUCTIONS,
+                    };
+                    return { jsonrpc: '2.0', id, result };
+                }
+                case 'tools/list': {
+                    const result = handleToolsList(this.deps);
+                    return { jsonrpc: '2.0', id, result };
+                }
+                case 'tools/call': {
+                    const params = req.params;
+                    if (!params || typeof params.name !== 'string') {
+                        return {
+                            jsonrpc: '2.0',
+                            id,
+                            error: { code: -32602, message: 'Missing tool name in params' },
+                        };
+                    }
+                    const result = await handleToolCall({ name: params.name, arguments: params.arguments }, this.deps);
+                    return { jsonrpc: '2.0', id, result };
+                }
+                case 'ping': {
+                    return { jsonrpc: '2.0', id, result: {} };
+                }
+                default:
+                    return {
+                        jsonrpc: '2.0',
+                        id,
+                        error: { code: -32601, message: `Method not found: ${method}` },
+                    };
+            }
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return { jsonrpc: '2.0', id, error: { code: -32603, message } };
+        }
+    }
+}
+//# sourceMappingURL=server.js.map

package/dist/bridge/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/bridge/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAyC,MAAM,UAAU,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,QAAQ,EACR,oBAAoB,EACpB,mBAAmB,EACnB,QAAQ,EACR,oBAAoB,EACpB,WAAW,EACX,mBAAmB,EACnB,UAAU,GAEX,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,eAAe,EAAqB,MAAM,eAAe,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC;;;;;;;GAOG;AAEH,SAAS,GAAG,CAAC,GAAW;IACtB,gDAAgD;IAChD,OAAO,CAAC,KAAK,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED;gFACgF;AAChF,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,MAAM;IACN,UAAU;IACV,QAAQ;IACR,KAAK;IACL,SAAS;IACT,cAAc;IACd,kBAAkB;CACnB,CAAC,CAAC;AAEH,uEAAuE;AACvE,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,kBAAkB;QAAE,OAAO,WAAW,CAAC;IACtE,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACpE,OAAO,IAAI,CAAC;AACd,CAAC;AAkBD,MAAM,OAAO,SAAS;IAQV;IACA;IARF,MAAM,GAAqB,IAAI,CAAC;IAChC,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC3C,KAAK,CAAS;IACd,SAAS,GAAG,QAAQ,CAAC;IACrB,cAAc,GAAG,QAAQ,CAAC;IAElC,YACU,IAAkB,EAClB,UAA4B,EAAE;QAD9B,SAAI,GAAJ,IAAI,CAAc;QAClB,YAAO,GAAP,OAAO,CAAuB;QAEtC,uEAAuE;QACvE,uDAAuD;QACvD,IAAI,CAAC,KAAK,GAAG,WAAW,EAAE,CAAC;IAC7B,CAAC;IAED;+EAC2E;IAC3E,KAAK;QACH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC;YAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC;YAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE;gBACrC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBAC1C,GAAG,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACrF,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;gBAChD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,GAAG,IAAI,CAAC;oBACf,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;wBAC9B,MAAM,CACJ,IAAI,KAAK,CACP,YAAY,IAAI,IAAI,IAAI,wEAAwE,CACjG,CACF,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,GAAG,CAAC,CAAC;oBACd,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,iCAAiC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;gBAC7B,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;gBACrB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACrC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC;oBAC9B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC;gBAClC,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;oBACtB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC7B,CAAC;gBACD,GAAG,CAAC,2BAA2B,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;gBACxE,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;2DACuD;IACvD,YAAY;QACV,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;IAC7D,CAAC;IAED;+EAC2E;IAC3E,KAAK,CAAC,IAAI;QACR,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;YACrF,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;YACD,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACjC,IAAI,OAAO,CAAC,YAAY;gBAAE,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC7D,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,MAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAClE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,YAAY;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,kEAAkE;IAClE,YAAY;QACV,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,MAAc;QAC3C,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QAErC,IAAI,CAAC,UAAU,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;YACtC,GAAG,CAAC,mEAAmE,CAAC,CAAC;YACzE,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,wEAAwE;QACxE,sEAAsE;QACtE,2CAA2C;QAC3C,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC/E,IAAI,CAAC,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACpE,GAAG,CACD,gCAAgC,UAAU,IAAI,UAAU,+BACtD,IAAI,EAAE,UAAU,IAAI,SACtB,IAAI,CACL,CAAC;YACF,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,SAAS,GAAkB,IAAI,CAAC;QAEpC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE;YAClC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAC9B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,GAAG,CAAC,6CAA6C,CAAC,CAAC;gBACnD,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC3B,GAAG,CAAC,oCAAoC,KAAK,CAAC,IAAI,aAAa,CAAC,CAAC;oBACjE,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBACxC,MAAM,CAAC,KAAK,CACV,WAAW,CAAC;wBACV,IAAI,EAAE,cAAc;wBACpB,MAAM,EAAE,6BAA6B,oBAAoB,WAAW,KAAK,CAAC,OAAO,EAAE;qBACpF,CAAC,CACH,CAAC;oBACF,MAAM,CAAC,GAAG,EAAE,CAAC;oBACb,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC/B,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;oBAC7E,MAAM,CAAC,GAAG,EAAE,CAAC;oBACb,OAAO;gBACT,CAAC;gBACD,sDAAsD;gBACtD,aAAa,GAAG,IAAI,CAAC;gBACrB,SAAS,GAAG,UAAU,EAAE,CAAC;gBACzB,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;gBAC3F,MAAM,GAAG,GAAG,SAAS,CAAC;gBACtB,MAAM,OAAO,GAAiB;oBAC5B,EAAE,EAAE,GAAG;oBACP,MAAM;oBACN,SAAS,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,oBAAoB,CAAC;oBACvE,YAAY,EAAE,IAAI;iBACnB,CAAC;gBACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAChC,GAAG,CAAC,4BAA4B,GAAG,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACvD,OAAO;YACT,CAAC;YACD,KAAK,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,SAAU,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,EAAU,CAAC;YACf,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC9B,UAAU,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC7C,IAAI,OAAO,EAAE,CAAC;oBACZ,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBACjC,IAAI,OAAO,CAAC,YAAY;wBAAE,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;oBAC7D,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAChC,GAAG,CAAC,+BAA+B,SAAS,EAAE,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,GAAG,CAAC,uBAAuB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,SAAS,CAAC,GAAW;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;YAC3D,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC1B,OAAO,CAAC,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;gBACrC,GAAG,CAAC,SAAS,GAAG,kCAAkC,CAAC,CAAC;gBACpD,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC3B,CAAC,EAAE,mBAAmB,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,KAAY,EAAE,SAAiB,EAAE,MAAc;QACvE,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC7C,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;oBAC1B,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;oBACnC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;gBAC9B,CAAC;gBACD,OAAO;YACT,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC9D,IAAI,CAAC;oBACH,MAAM,CAAC,KAAK,CACV,WAAW,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CACrF,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,iBAAiB;gBACnB,CAAC;gBACD,OAAO;YACT,CAAC;YACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;gBACxB,mEAAmE;gBACnE,oEAAoE;gBACpE,gDAAgD;gBAChD,OAAO;YACT,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,IAAI,CAAC;oBACH,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;gBAC9C,CAAC;gBAAC,MAAM,CAAC;oBACP,iBAAiB;gBACnB,CAAC;gBACD,OAAO;YACT,CAAC;YACD;gBACE,iEAAiE;gBACjE,mDAAmD;gBACnD,OAAO;QACX,CAAC;IACH,CAAC;IAED;;4DAEwD;IAChD,KAAK,CAAC,kBAAkB,CAAC,OAAgB;QAC/C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,CAAC;QAC3F,CAAC;QACD,MAAM,GAAG,GAAG,OAKX,CAAC;QACF,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC;QAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,MAAM,MAAM,GAAG;wBACb,eAAe,EAAE,YAAY;wBAC7B,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;wBAC3B,UAAU,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE;wBACtD,YAAY,EAAE,mBAAmB;qBAClC,CAAC;oBACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;gBACxC,CAAC;gBACD,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;gBACxC,CAAC;gBACD,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,MAAM,MAAM,GAAG,GAAG,CAAC,MAA4D,CAAC;oBAChF,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC/C,OAAO;4BACL,OAAO,EAAE,KAAK;4BACd,EAAE;4BACF,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,6BAA6B,EAAE;yBAChE,CAAC;oBACJ,CAAC;oBACD,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EAClD,IAAI,CAAC,IAAI,CACV,CAAC;oBACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;gBACxC,CAAC;gBACD,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;gBAC5C,CAAC;gBACD;oBACE,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,EAAE;wBACF,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,qBAAqB,MAAM,EAAE,EAAE;qBAChE,CAAC;YACN,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;QAClE,CAAC;IACH,CAAC;CACF"}