@kdonev/termscape 0.1.0

package/dist/protocol/inject.js

@@ -0,0 +1,40 @@
+/**
+ * Encoding for text written into another agent's PTY.
+ *
+ * Two properties matter here and both are security-relevant:
+ *
+ *  1. Attribution cannot be forged. The `from` address is supplied by the hub
+ *     from the sender's bearer token, never by the sending agent.
+ *
+ *  2. A message cannot break out of its own paste. Bracketed paste is framed
+ *     by ESC[200~ ... ESC[201~; a body containing the terminator would end the
+ *     paste early and let the remainder be interpreted as keystrokes. We strip
+ *     the terminator (and bare ESC) from the body before framing.
+ */
+export const PASTE_START = '\x1b[200~';
+export const PASTE_END = '\x1b[201~';
+/** Strip anything that would let a body escape its paste framing. */
+export function sanitizeMessageBody(text) {
+    return text
+        .replace(/\x1b/g, '') // no escape sequences of any kind survive
+        .replace(/\r\n?/g, '\n') // normalize newlines; CR would submit early
+        .replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g, ''); // other control chars
+}
+/** The visible, unspoofable prefix a receiving agent sees. */
+export function formatMessage(from, text) {
+    return `[from ${from}] ${sanitizeMessageBody(text)}`;
+}
+/**
+ * Wire bytes for injecting `body` into a PTY.
+ *
+ * Bracketed paste makes a multi-line body arrive as one atomic paste rather
+ * than as a line-by-line keystroke stream, so a CLI that reads line-at-a-time
+ * does not act on a half-delivered message. The trailing CR submits it.
+ */
+export function encodeInjection(body, mode) {
+    const clean = sanitizeMessageBody(body);
+    if (mode === 'raw')
+        return `${clean}\r`;
+    return `${PASTE_START}${clean}${PASTE_END}\r`;
+}
+//# sourceMappingURL=inject.js.map

package/dist/protocol/inject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inject.js","sourceRoot":"","sources":["../src/inject.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,WAAW,CAAC;AACvC,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAAC;AAIrC,qEAAqE;AACrE,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,IAAI;SACR,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,0CAA0C;SAC/D,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,4CAA4C;SACpE,OAAO,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC,CAAC,sBAAsB;AAC7E,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAY;IACtD,OAAO,SAAS,IAAI,KAAK,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,IAAgB;IAC5D,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,GAAG,KAAK,IAAI,CAAC;IACxC,OAAO,GAAG,WAAW,GAAG,KAAK,GAAG,SAAS,IAAI,CAAC;AAChD,CAAC"}

package/dist/protocol/mcp-tools.d.ts

@@ -0,0 +1,45 @@
+import { z } from 'zod';
+/**
+ * MCP tool schemas. The *caller* is never a parameter: the hub derives the
+ * sender from the per-agent bearer token, so `from` cannot be spoofed by an
+ * agent that has been talked into lying about who it is.
+ */
+export declare const WhoamiInput: z.ZodObject<{}, z.core.$strip>;
+export declare const ListAgentsInput: z.ZodObject<{
+    workspace: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const SendMessageInput: z.ZodObject<{
+    to: z.ZodString;
+    text: z.ZodString;
+}, z.core.$strip>;
+export declare const SpawnAgentInput: z.ZodObject<{
+    profile: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    workspace: z.ZodOptional<z.ZodString>;
+    prompt: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const ReadScreenInput: z.ZodObject<{
+    address: z.ZodString;
+    lines: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const SetStatusInput: z.ZodObject<{
+    text: z.ZodString;
+}, z.core.$strip>;
+export declare const StopAgentInput: z.ZodObject<{
+    address: z.ZodString;
+}, z.core.$strip>;
+export type WhoamiInput = z.infer<typeof WhoamiInput>;
+export type ListAgentsInput = z.infer<typeof ListAgentsInput>;
+export type SendMessageInput = z.infer<typeof SendMessageInput>;
+export type SpawnAgentInput = z.infer<typeof SpawnAgentInput>;
+export type ReadScreenInput = z.infer<typeof ReadScreenInput>;
+export type SetStatusInput = z.infer<typeof SetStatusInput>;
+export type StopAgentInput = z.infer<typeof StopAgentInput>;
+/** Max bytes accepted in a single send_message body (mirrors the zod cap). */
+export declare const MAX_MESSAGE_BYTES = 8000;
+/** Per-sender delivery budget, enforced by the router. */
+export declare const MESSAGE_RATE_LIMIT: {
+    readonly windowMs: 10000;
+    readonly max: 20;
+};
+//# sourceMappingURL=mcp-tools.d.ts.map

package/dist/protocol/mcp-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tools.d.ts","sourceRoot":"","sources":["../src/mcp-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AAEH,eAAO,MAAM,WAAW,gCAAe,CAAC;AAExC,eAAO,MAAM,eAAe;;iBAK1B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;iBAK3B,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;iBAW1B,CAAC;AAEH,eAAO,MAAM,eAAe;;;iBAG1B,CAAC;AAEH,eAAO,MAAM,cAAc;;iBAEzB,CAAC;AAEH,eAAO,MAAM,cAAc;;iBAEzB,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AACtD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC9D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAChE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC9D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC9D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAC5D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,8EAA8E;AAC9E,eAAO,MAAM,iBAAiB,OAAO,CAAC;AACtC,0DAA0D;AAC1D,eAAO,MAAM,kBAAkB;;;CAAyC,CAAC"}

package/dist/protocol/mcp-tools.js

@@ -0,0 +1,46 @@
+import { z } from 'zod';
+/**
+ * MCP tool schemas. The *caller* is never a parameter: the hub derives the
+ * sender from the per-agent bearer token, so `from` cannot be spoofed by an
+ * agent that has been talked into lying about who it is.
+ */
+export const WhoamiInput = z.object({});
+export const ListAgentsInput = z.object({
+    workspace: z
+        .string()
+        .optional()
+        .describe('Limit to one workspace. Defaults to all workspaces on all hosts.'),
+});
+export const SendMessageInput = z.object({
+    to: z
+        .string()
+        .describe('Target agent address, "workspace/name". Use list_agents to discover.'),
+    text: z.string().min(1).max(8000).describe('Message body, injected into the target terminal.'),
+});
+export const SpawnAgentInput = z.object({
+    profile: z.string().optional().describe('Agent profile id. Defaults to your own profile.'),
+    name: z.string().optional().describe('Name for the new agent. Auto-generated if omitted.'),
+    workspace: z
+        .string()
+        .optional()
+        .describe('Workspace to spawn into. Defaults to your own workspace.'),
+    prompt: z
+        .string()
+        .optional()
+        .describe('First instruction, injected once the new agent is ready.'),
+});
+export const ReadScreenInput = z.object({
+    address: z.string().describe('Agent address to inspect.'),
+    lines: z.number().int().positive().max(200).optional().describe('Trailing lines to return (default 40).'),
+});
+export const SetStatusInput = z.object({
+    text: z.string().max(120).describe('Short status shown under your window title on the canvas.'),
+});
+export const StopAgentInput = z.object({
+    address: z.string().describe('Agent to stop. You may only stop agents you spawned.'),
+});
+/** Max bytes accepted in a single send_message body (mirrors the zod cap). */
+export const MAX_MESSAGE_BYTES = 8000;
+/** Per-sender delivery budget, enforced by the router. */
+export const MESSAGE_RATE_LIMIT = { windowMs: 10_000, max: 20 };
+//# sourceMappingURL=mcp-tools.js.map

package/dist/protocol/mcp-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tools.js","sourceRoot":"","sources":["../src/mcp-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAExC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,kEAAkE,CAAC;CAChF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC;SACF,MAAM,EAAE;SACR,QAAQ,CAAC,sEAAsE,CAAC;IACnF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,kDAAkD,CAAC;CAC/F,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IAC1F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAC1F,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,0DAA0D,CAAC;IACvE,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,0DAA0D,CAAC;CACxE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IACzD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;CAC1G,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,2DAA2D,CAAC;CAChG,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;CACrF,CAAC,CAAC;AAUH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AACtC,0DAA0D;AAC1D,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAW,CAAC"}

package/dist/protocol/peer.d.ts

@@ -0,0 +1,304 @@
+import { z } from 'zod';
+/**
+ * Hub-to-hub RPC.
+ *
+ * The local hub is the only thing that ever speaks this; agents never see it.
+ * A remote agent messaging a local one calls send_message on its own hub,
+ * which forwards here.
+ *
+ * Two things are asymmetric about the link and they are independent: which
+ * side opens the socket, and which side issues requests. The hub that owns the
+ * canvas always issues requests. It dials an SSH-deployed host through the
+ * tunnel, and is dialled by a host that ran the join installer. The frames
+ * below are the same in both cases.
+ *
+ * Knowledge, though, has to travel both ways, or an agent on an attached
+ * machine cannot see or reach the agents on the canvas machine. Two frames
+ * carry it without disturbing who asks whom: `directory` is the canvas telling
+ * a host who else is on the canvas, and `relay` is a host asking the canvas to
+ * act on an address it cannot resolve itself — because only the canvas knows
+ * where every address on it lives.
+ */
+/** One agent as another hub needs to see it: enough to list and address it. */
+export declare const PeerAgent: z.ZodObject<{
+    address: z.ZodString;
+    workspace: z.ZodNullable<z.ZodString>;
+    profile: z.ZodString;
+    state: z.ZodEnum<{
+        starting: "starting";
+        running: "running";
+        stopped: "stopped";
+        exited: "exited";
+        failed: "failed";
+    }>;
+    status: z.ZodEnum<{
+        idle: "idle";
+        busy: "busy";
+        unknown: "unknown";
+    }>;
+    statusText: z.ZodNullable<z.ZodString>;
+    host: z.ZodString;
+}, z.core.$strip>;
+export type PeerAgent = z.infer<typeof PeerAgent>;
+/**
+ * Opens the link, in either direction.
+ *
+ * The dialer always sends this and always receives `welcome`; what flips
+ * between the two attach models is only who dials. An SSH-deployed hub is
+ * dialled by us and `enroll` is absent. A host that ran the join installer
+ * dials us, and introduces itself here — we have never seen it before, so this
+ * frame is the only place its identity can come from.
+ */
+/**
+ * What an attached hub asks its canvas to do for it.
+ *
+ * Everything here is something it could do unaided for its own agents and
+ * cannot do for anyone else's: the address belongs to a machine it has no link
+ * to. The canvas resolves the address and performs it, wherever that lands.
+ */
+export declare const PeerRelayAsk: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    t: z.ZodLiteral<"deliver">;
+    from: z.ZodString;
+    to: z.ZodString;
+    body: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"readScreen">;
+    address: z.ZodString;
+    lines: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>], "t">;
+export type PeerRelayAsk = z.infer<typeof PeerRelayAsk>;
+export declare const PeerHello: z.ZodObject<{
+    t: z.ZodLiteral<"hello">;
+    token: z.ZodString;
+    hubVersion: z.ZodString;
+    schemaVersion: z.ZodNumber;
+    enroll: z.ZodOptional<z.ZodObject<{
+        label: z.ZodString;
+        platform: z.ZodString;
+        arch: z.ZodString;
+        homeDir: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const PeerRequest: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    t: z.ZodLiteral<"hello">;
+    token: z.ZodString;
+    hubVersion: z.ZodString;
+    schemaVersion: z.ZodNumber;
+    enroll: z.ZodOptional<z.ZodObject<{
+        label: z.ZodString;
+        platform: z.ZodString;
+        arch: z.ZodString;
+        homeDir: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"listSessions">;
+    id: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"startSession">;
+    id: z.ZodString;
+    workspaceName: z.ZodString;
+    rootPath: z.ZodString;
+    profile: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    spawnedByAddress: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"stopSession">;
+    id: z.ZodString;
+    address: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"removeSession">;
+    id: z.ZodString;
+    address: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"shutdown">;
+    id: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"resumeSession">;
+    id: z.ZodString;
+    address: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"directory">;
+    id: z.ZodString;
+    agents: z.ZodArray<z.ZodObject<{
+        address: z.ZodString;
+        workspace: z.ZodNullable<z.ZodString>;
+        profile: z.ZodString;
+        state: z.ZodEnum<{
+            starting: "starting";
+            running: "running";
+            stopped: "stopped";
+            exited: "exited";
+            failed: "failed";
+        }>;
+        status: z.ZodEnum<{
+            idle: "idle";
+            busy: "busy";
+            unknown: "unknown";
+        }>;
+        statusText: z.ZodNullable<z.ZodString>;
+        host: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"relayResult">;
+    id: z.ZodString;
+    relayId: z.ZodString;
+    ok: z.ZodBoolean;
+    result: z.ZodUnknown;
+    error: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"deliver">;
+    id: z.ZodString;
+    from: z.ZodString;
+    to: z.ZodString;
+    body: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"readScreen">;
+    id: z.ZodString;
+    address: z.ZodString;
+    lines: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"attach">;
+    id: z.ZodString;
+    address: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"detach">;
+    id: z.ZodString;
+    address: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"input">;
+    id: z.ZodString;
+    address: z.ZodString;
+    data: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"resize">;
+    id: z.ZodString;
+    address: z.ZodString;
+    cols: z.ZodNumber;
+    rows: z.ZodNumber;
+}, z.core.$strip>], "t">;
+export type PeerRequest = z.infer<typeof PeerRequest>;
+export declare const PeerResponse: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    t: z.ZodLiteral<"welcome">;
+    hubVersion: z.ZodString;
+    schemaVersion: z.ZodNumber;
+    hostToken: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"ok">;
+    id: z.ZodString;
+    result: z.ZodUnknown;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"err">;
+    id: z.ZodString;
+    message: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"sessions">;
+    sessions: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        workspaceId: z.ZodString;
+        name: z.ZodString;
+        address: z.ZodString;
+        profile: z.ZodString;
+        cwd: z.ZodString;
+        agentSessionUuid: z.ZodNullable<z.ZodString>;
+        spawnedBy: z.ZodNullable<z.ZodString>;
+        state: z.ZodEnum<{
+            starting: "starting";
+            running: "running";
+            stopped: "stopped";
+            exited: "exited";
+            failed: "failed";
+        }>;
+        status: z.ZodEnum<{
+            idle: "idle";
+            busy: "busy";
+            unknown: "unknown";
+        }>;
+        statusText: z.ZodNullable<z.ZodString>;
+        title: z.ZodNullable<z.ZodString>;
+        pid: z.ZodNullable<z.ZodNumber>;
+        exitCode: z.ZodNullable<z.ZodNumber>;
+        cols: z.ZodNumber;
+        rows: z.ZodNumber;
+        resumable: z.ZodBoolean;
+        createdAt: z.ZodNumber;
+        exitedAt: z.ZodNullable<z.ZodNumber>;
+        lastActiveAt: z.ZodNumber;
+        window: z.ZodObject<{
+            x: z.ZodNumber;
+            y: z.ZodNumber;
+            w: z.ZodNumber;
+            h: z.ZodNumber;
+            z: z.ZodNumber;
+            collapsed: z.ZodBoolean;
+        }, z.core.$strip>;
+    }, z.core.$strip>>;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"sessionUpserted">;
+    session: z.ZodObject<{
+        id: z.ZodString;
+        workspaceId: z.ZodString;
+        name: z.ZodString;
+        address: z.ZodString;
+        profile: z.ZodString;
+        cwd: z.ZodString;
+        agentSessionUuid: z.ZodNullable<z.ZodString>;
+        spawnedBy: z.ZodNullable<z.ZodString>;
+        state: z.ZodEnum<{
+            starting: "starting";
+            running: "running";
+            stopped: "stopped";
+            exited: "exited";
+            failed: "failed";
+        }>;
+        status: z.ZodEnum<{
+            idle: "idle";
+            busy: "busy";
+            unknown: "unknown";
+        }>;
+        statusText: z.ZodNullable<z.ZodString>;
+        title: z.ZodNullable<z.ZodString>;
+        pid: z.ZodNullable<z.ZodNumber>;
+        exitCode: z.ZodNullable<z.ZodNumber>;
+        cols: z.ZodNumber;
+        rows: z.ZodNumber;
+        resumable: z.ZodBoolean;
+        createdAt: z.ZodNumber;
+        exitedAt: z.ZodNullable<z.ZodNumber>;
+        lastActiveAt: z.ZodNumber;
+        window: z.ZodObject<{
+            x: z.ZodNumber;
+            y: z.ZodNumber;
+            w: z.ZodNumber;
+            h: z.ZodNumber;
+            z: z.ZodNumber;
+            collapsed: z.ZodBoolean;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"sessionRemoved">;
+    address: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"output">;
+    address: z.ZodString;
+    data: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"relay">;
+    relayId: z.ZodString;
+    ask: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        t: z.ZodLiteral<"deliver">;
+        from: z.ZodString;
+        to: z.ZodString;
+        body: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        t: z.ZodLiteral<"readScreen">;
+        address: z.ZodString;
+        lines: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>], "t">;
+}, z.core.$strip>], "t">;
+export type PeerResponse = z.infer<typeof PeerResponse>;
+/**
+ * Bumped whenever the peer protocol or the DB schema changes shape. Hubs
+ * refuse to connect across a mismatch rather than corrupting each other.
+ */
+export declare const PEER_SCHEMA_VERSION = 5;
+//# sourceMappingURL=peer.d.ts.map

package/dist/protocol/peer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer.d.ts","sourceRoot":"","sources":["../src/peer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,+EAA+E;AAC/E,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;iBASpB,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAElD;;;;;;;;GAQG;AACH;;;;;;GAMG;AACH,eAAO,MAAM,YAAY;;;;;;;;;wBAcvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,eAAO,MAAM,SAAS;;;;;;;;;;;iBAkBpB,CAAC;AAEH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBAqEtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBAuBvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;GAGG;AACH,eAAO,MAAM,mBAAmB,IAAI,CAAC"}

package/dist/protocol/peer.js

@@ -0,0 +1,183 @@
+import { z } from 'zod';
+import { AgentStatus, Session, SessionState } from './domain.js';
+/**
+ * Hub-to-hub RPC.
+ *
+ * The local hub is the only thing that ever speaks this; agents never see it.
+ * A remote agent messaging a local one calls send_message on its own hub,
+ * which forwards here.
+ *
+ * Two things are asymmetric about the link and they are independent: which
+ * side opens the socket, and which side issues requests. The hub that owns the
+ * canvas always issues requests. It dials an SSH-deployed host through the
+ * tunnel, and is dialled by a host that ran the join installer. The frames
+ * below are the same in both cases.
+ *
+ * Knowledge, though, has to travel both ways, or an agent on an attached
+ * machine cannot see or reach the agents on the canvas machine. Two frames
+ * carry it without disturbing who asks whom: `directory` is the canvas telling
+ * a host who else is on the canvas, and `relay` is a host asking the canvas to
+ * act on an address it cannot resolve itself — because only the canvas knows
+ * where every address on it lives.
+ */
+/** One agent as another hub needs to see it: enough to list and address it. */
+export const PeerAgent = z.object({
+    address: z.string(),
+    workspace: z.string().nullable(),
+    profile: z.string(),
+    state: SessionState,
+    status: AgentStatus,
+    statusText: z.string().nullable(),
+    /** Label of the machine it runs on, as the canvas knows that machine. */
+    host: z.string(),
+});
+/**
+ * Opens the link, in either direction.
+ *
+ * The dialer always sends this and always receives `welcome`; what flips
+ * between the two attach models is only who dials. An SSH-deployed hub is
+ * dialled by us and `enroll` is absent. A host that ran the join installer
+ * dials us, and introduces itself here — we have never seen it before, so this
+ * frame is the only place its identity can come from.
+ */
+/**
+ * What an attached hub asks its canvas to do for it.
+ *
+ * Everything here is something it could do unaided for its own agents and
+ * cannot do for anyone else's: the address belongs to a machine it has no link
+ * to. The canvas resolves the address and performs it, wherever that lands.
+ */
+export const PeerRelayAsk = z.discriminatedUnion('t', [
+    // `from` was authenticated by the asking hub from the sender's own bearer
+    // token, exactly as `deliver` is trusted in the other direction.
+    z.object({
+        t: z.literal('deliver'),
+        from: z.string(),
+        to: z.string(),
+        body: z.string(),
+    }),
+    z.object({
+        t: z.literal('readScreen'),
+        address: z.string(),
+        lines: z.number().int().positive().optional(),
+    }),
+]);
+export const PeerHello = z.object({
+    t: z.literal('hello'),
+    /**
+     * For an SSH host, the token we minted for the deploy. For an enrolling
+     * host, its single-use enrollment token on the first connection and its
+     * durable host token on every one after.
+     */
+    token: z.string(),
+    hubVersion: z.string(),
+    schemaVersion: z.number().int(),
+    enroll: z
+        .object({
+        label: z.string(),
+        platform: z.string(),
+        arch: z.string(),
+        homeDir: z.string(),
+    })
+        .optional(),
+});
+export const PeerRequest = z.discriminatedUnion('t', [
+    PeerHello,
+    z.object({ t: z.literal('listSessions'), id: z.string() }),
+    z.object({
+        t: z.literal('startSession'),
+        id: z.string(),
+        workspaceName: z.string(),
+        rootPath: z.string(),
+        profile: z.string(),
+        name: z.string().optional(),
+        spawnedByAddress: z.string().nullable(),
+    }),
+    z.object({ t: z.literal('stopSession'), id: z.string(), address: z.string() }),
+    // Closing a window has to reach the hub that owns the PTY. Handled locally
+    // it would only hide the session until that peer's next resync, which is
+    // exactly what a restart triggers. Idempotent on purpose: a removal deferred
+    // while the host was down may replay one that already went through.
+    z.object({ t: z.literal('removeSession'), id: z.string(), address: z.string() }),
+    // Sent when the canvas drops this host: the hub over there is a daemon we
+    // asked someone to start, so removing it here has to stop it there too,
+    // otherwise it lingers holding its files open and its next install fails.
+    z.object({ t: z.literal('shutdown'), id: z.string() }),
+    z.object({ t: z.literal('resumeSession'), id: z.string(), address: z.string() }),
+    // The canvas telling a host who else is on it. Sent whenever that set
+    // changes, and it is the whole set minus the receiving host's own agents,
+    // which it already knows about and would otherwise list twice.
+    z.object({ t: z.literal('directory'), id: z.string(), agents: z.array(PeerAgent) }),
+    // The answer to a `relay`, matched by the id the host chose for it. A
+    // separate frame rather than an `ok`, because the two ends do not share a
+    // request channel: the canvas asks, the host answers, and this is the canvas
+    // answering something the host asked.
+    z.object({
+        t: z.literal('relayResult'),
+        id: z.string(),
+        relayId: z.string(),
+        ok: z.boolean(),
+        result: z.unknown(),
+        error: z.string().nullable(),
+    }),
+    // The forwarded delivery: `from` is the *originating agent's* address, which
+    // the sending hub already authenticated. A peer is trusted to report it.
+    z.object({
+        t: z.literal('deliver'),
+        id: z.string(),
+        from: z.string(),
+        to: z.string(),
+        body: z.string(),
+    }),
+    z.object({
+        t: z.literal('readScreen'),
+        id: z.string(),
+        address: z.string(),
+        lines: z.number().int().positive().optional(),
+    }),
+    z.object({ t: z.literal('attach'), id: z.string(), address: z.string() }),
+    z.object({ t: z.literal('detach'), id: z.string(), address: z.string() }),
+    z.object({
+        t: z.literal('input'),
+        id: z.string(),
+        address: z.string(),
+        data: z.string(),
+    }),
+    z.object({
+        t: z.literal('resize'),
+        id: z.string(),
+        address: z.string(),
+        cols: z.number().int().positive(),
+        rows: z.number().int().positive(),
+    }),
+]);
+export const PeerResponse = z.discriminatedUnion('t', [
+    z.object({
+        t: z.literal('welcome'),
+        hubVersion: z.string(),
+        schemaVersion: z.number().int(),
+        /**
+         * Issued once, in reply to a hello carrying an enrollment token. The
+         * enrolling host stores it and presents it on every later connection, so a
+         * reboot rejoins without another trip to the download page.
+         */
+        hostToken: z.string().optional(),
+    }),
+    z.object({ t: z.literal('ok'), id: z.string(), result: z.unknown() }),
+    z.object({ t: z.literal('err'), id: z.string(), message: z.string() }),
+    // Unsolicited: the peer pushing state changes and terminal output.
+    z.object({ t: z.literal('sessions'), sessions: z.array(Session) }),
+    z.object({ t: z.literal('sessionUpserted'), session: Session }),
+    z.object({ t: z.literal('sessionRemoved'), address: z.string() }),
+    z.object({ t: z.literal('output'), address: z.string(), data: z.string() }),
+    // A host asking the canvas to act on an address it cannot resolve itself.
+    // Its own agents it handles directly; anything else it can only reach
+    // through the hub that knows where addresses live.
+    z.object({ t: z.literal('relay'), relayId: z.string(), ask: PeerRelayAsk }),
+]);
+/**
+ * Bumped whenever the peer protocol or the DB schema changes shape. Hubs
+ * refuse to connect across a mismatch rather than corrupting each other.
+ */
+export const PEER_SCHEMA_VERSION = 5;
+//# sourceMappingURL=peer.js.map

package/dist/protocol/peer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer.js","sourceRoot":"","sources":["../src/peer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,WAAW;IACnB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,yEAAyE;IACzE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAGH;;;;;;;;GAQG;AACH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE;IACpD,0EAA0E;IAC1E,iEAAiE;IACjE,CAAC,CAAC,MAAM,CAAC;QACP,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAC9C,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACrB;;;;OAIG;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC/B,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACpB,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE;IACnD,SAAS;IACT,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1D,CAAC,CAAC,MAAM,CAAC;QACP,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;QAC5B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;QACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACxC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC9E,2EAA2E;IAC3E,yEAAyE;IACzE,6EAA6E;IAC7E,oEAAoE;IACpE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAChF,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACtD,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAChF,sEAAsE;IACtE,0EAA0E;IAC1E,+DAA+D;IAC/D,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;IACnF,sEAAsE;IACtE,0EAA0E;IAC1E,6EAA6E;IAC7E,sCAAsC;IACtC,CAAC,CAAC,MAAM,CAAC;QACP,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAC3B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;QACf,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;QACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC;IACF,6EAA6E;IAC7E,yEAAyE;IACzE,CAAC,CAAC,MAAM,CAAC;QACP,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QACvB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QAC1B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAC9C,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACzE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACzE,CAAC,CAAC,MAAM,CAAC;QACP,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACrB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;KAClC,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE;IACpD,CAAC,CAAC,MAAM,CAAC;QACP,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;QAC/B;;;;WAIG;QACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACjC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IACrE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACtE,mEAAmE;IACnE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IAClE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC/D,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACjE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC3E,0EAA0E;IAC1E,sEAAsE;IACtE,mDAAmD;IACnD,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;CAC5E,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC"}