@kraki/head 0.1.0

package/dist/cli.d.ts

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+/**
+ * @kraki/head — CLI entry point for the Kraki relay server.
+ *
+ * Usage:
+ *   npx @kraki/head
+ *   npx @kraki/head --port 8080
+ *   npx @kraki/head --auth github --e2e true
+ *
+ * Environment variables:
+ *   PORT         Server port (default: 4000)
+ *   DB_PATH      SQLite database path (default: kraki-head.db)
+ *   AUTH_MODE    Auth mode: open | github | apikey (default: open)
+ *   E2E_MODE     Enable E2E encryption: true | false (default: false)
+ *   API_KEY               API key for apikey auth mode
+ *   GITHUB_CLIENT_ID      GitHub OAuth App client ID (for web login)
+ *   GITHUB_CLIENT_SECRET  GitHub OAuth App client secret (for web login)
+ *   LOG_LEVEL             Log level: debug | info | warn | error (default: info)
+ *   LOG_PATH     Log file path (optional)
+ */
+export {};

package/dist/cli.js

@@ -0,0 +1,156 @@
+#!/usr/bin/env node
+/**
+ * @kraki/head — CLI entry point for the Kraki relay server.
+ *
+ * Usage:
+ *   npx @kraki/head
+ *   npx @kraki/head --port 8080
+ *   npx @kraki/head --auth github --e2e true
+ *
+ * Environment variables:
+ *   PORT         Server port (default: 4000)
+ *   DB_PATH      SQLite database path (default: kraki-head.db)
+ *   AUTH_MODE    Auth mode: open | github | apikey (default: open)
+ *   E2E_MODE     Enable E2E encryption: true | false (default: false)
+ *   API_KEY               API key for apikey auth mode
+ *   GITHUB_CLIENT_ID      GitHub OAuth App client ID (for web login)
+ *   GITHUB_CLIENT_SECRET  GitHub OAuth App client secret (for web login)
+ *   LOG_LEVEL             Log level: debug | info | warn | error (default: info)
+ *   LOG_PATH     Log file path (optional)
+ */
+import { config as dotenvConfig } from 'dotenv';
+import { resolve, dirname } from 'path';
+import { fileURLToPath } from 'url';
+// Load .env from the head package directory (works regardless of cwd)
+const __dirname = dirname(fileURLToPath(import.meta.url));
+dotenvConfig({ path: resolve(__dirname, '..', '.env') });
+import { createServer } from 'http';
+import { Storage } from './storage.js';
+import { ChannelManager } from './channel-manager.js';
+import { Router } from './router.js';
+import { HeadServer } from './server.js';
+import { GitHubAuthProvider, OpenAuthProvider, ApiKeyAuthProvider, ThrottledAuthProvider } from './auth.js';
+import { Logger, setGlobalLogger } from './logger.js';
+const VERSION = '0.1.0';
+// --- CLI flags ---
+const args = process.argv.slice(2);
+if (args.includes('--help') || args.includes('-h')) {
+    console.log(`
+  🦑 @kraki/head v${VERSION}
+
+  Usage: kraki-relay [options]
+
+  Options:
+    --port <n>      Server port (default: 4000, env: PORT)
+    --db <path>     SQLite database path (default: kraki-head.db, env: DB_PATH)
+    --auth <mode>   Auth mode: open | github | apikey (default: open, env: AUTH_MODE)
+    --e2e <bool>    Enable E2E encryption (default: false, env: E2E_MODE)
+    --log <level>   Log level: debug | info | warn | error (default: info)
+    --help, -h      Show this help
+    --version, -v   Show version
+
+  GitHub OAuth (env only, for web login):
+    GITHUB_CLIENT_ID      GitHub OAuth App client ID
+    GITHUB_CLIENT_SECRET  GitHub OAuth App client secret
+  `);
+    process.exit(0);
+}
+if (args.includes('--version') || args.includes('-v')) {
+    console.log(VERSION);
+    process.exit(0);
+}
+function flag(name, fallback) {
+    const i = args.indexOf(`--${name}`);
+    if (i === -1)
+        return fallback;
+    return args[i + 1] || fallback;
+}
+const PORT = parseInt(flag('port', process.env.PORT || '4000'), 10);
+const DB_PATH = flag('db', process.env.DB_PATH || 'kraki-head.db');
+const AUTH_MODES = flag('auth', process.env.AUTH_MODE || 'open').split(',').map(s => s.trim());
+const API_KEY = process.env.API_KEY;
+const GITHUB_CLIENT_ID = process.env.GITHUB_CLIENT_ID;
+const GITHUB_CLIENT_SECRET = process.env.GITHUB_CLIENT_SECRET;
+const E2E = flag('e2e', process.env.E2E_MODE || 'false') === 'true';
+const PAIRING = process.env.PAIRING_ENABLED !== 'false'; // default true
+const LOG_LEVEL = flag('log', process.env.LOG_LEVEL || 'info');
+const LOG_PATH = process.env.LOG_PATH;
+function createAuthProviders() {
+    const providers = new Map();
+    for (const mode of AUTH_MODES) {
+        switch (mode) {
+            case 'github': {
+                if (!GITHUB_CLIENT_ID || !GITHUB_CLIENT_SECRET) {
+                    console.warn('  ⚠ GitHub OAuth: GITHUB_CLIENT_ID / GITHUB_CLIENT_SECRET not set.');
+                    console.warn('    Web "Sign in with GitHub" will be disabled. Add them to .env or environment.');
+                    console.warn('    Token auth (gh auth token) and QR pairing still work.');
+                }
+                const ghProvider = new GitHubAuthProvider({
+                    clientId: GITHUB_CLIENT_ID,
+                    clientSecret: GITHUB_CLIENT_SECRET,
+                });
+                providers.set('github', new ThrottledAuthProvider(ghProvider));
+                if (GITHUB_CLIENT_ID && GITHUB_CLIENT_SECRET) {
+                    console.log('  GitHub OAuth configured (web login enabled)');
+                }
+                break;
+            }
+            case 'apikey':
+                if (!API_KEY) {
+                    console.error('Error: API_KEY environment variable required for apikey auth mode');
+                    process.exit(1);
+                }
+                providers.set('apikey', new ThrottledAuthProvider(new ApiKeyAuthProvider(API_KEY)));
+                break;
+            case 'open':
+                providers.set('open', new OpenAuthProvider());
+                break;
+            default:
+                console.error(`Error: Unknown auth mode '${mode}'. Use: github, apikey, open`);
+                process.exit(1);
+        }
+    }
+    return providers;
+}
+const logger = new Logger({
+    level: LOG_LEVEL,
+    filePath: LOG_PATH,
+    stdout: true,
+});
+setGlobalLogger(logger);
+logger.info('Kraki Head starting...');
+const authProviders = createAuthProviders();
+const storage = new Storage(DB_PATH);
+const cm = new ChannelManager(storage);
+const router = new Router(cm);
+const head = new HeadServer(cm, router, {
+    authProviders,
+    authModes: AUTH_MODES,
+    e2e: E2E,
+    pairingEnabled: PAIRING,
+});
+const httpServer = createServer((req, res) => {
+    res.writeHead(200, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify({ name: '@kraki/head', version: VERSION, status: 'ok' }));
+});
+head.attach(httpServer);
+httpServer.listen(PORT, () => {
+    logger.info(`Kraki Head listening on port ${PORT}`, {
+        ws: `ws://localhost:${PORT}`,
+        auth: AUTH_MODES.join(', '),
+        e2e: E2E,
+        pairing: PAIRING,
+        db: DB_PATH,
+    });
+});
+async function shutdown() {
+    logger.info('Shutting down...');
+    head.close();
+    storage.close();
+    logger.close();
+    httpServer.close();
+    process.exit(0);
+}
+process.on('SIGINT', shutdown);
+process.on('SIGTERM', shutdown);
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,sEAAsE;AACtE,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;AAEzD,OAAO,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAE5G,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,oBAAoB;AACpB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEnC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC;oBACM,OAAO;;;;;;;;;;;;;;;;GAgBxB,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,IAAI,CAAC,IAAY,EAAE,QAAgB;IAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,CAAC;AACjC,CAAC;AAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;AACpE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,eAAe,CAAC,CAAC;AACnE,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC/F,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;AACpC,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;AACtD,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;AAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,MAAM,CAAC;AACpE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,OAAO,CAAC,CAAC,eAAe;AACxE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM,CAAwC,CAAC;AACtG,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;AAEtC,SAAS,mBAAmB;IAC1B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAwB,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,IAAI,CAAC,gBAAgB,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAC/C,OAAO,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;oBACnF,OAAO,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;oBACjG,OAAO,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;gBAC5E,CAAC;gBACD,MAAM,UAAU,GAAG,IAAI,kBAAkB,CAAC;oBACxC,QAAQ,EAAE,gBAAgB;oBAC1B,YAAY,EAAE,oBAAoB;iBACnC,CAAC,CAAC;gBACH,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,qBAAqB,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC/D,IAAI,gBAAgB,IAAI,oBAAoB,EAAE,CAAC;oBAC7C,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;gBAC/D,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,QAAQ;gBACX,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;oBACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBACD,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,qBAAqB,CAAC,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACpF,MAAM;YACR,KAAK,MAAM;gBACT,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,gBAAgB,EAAE,CAAC,CAAC;gBAC9C,MAAM;YACR;gBACE,OAAO,CAAC,KAAK,CAAC,6BAA6B,IAAI,8BAA8B,CAAC,CAAC;gBAC/E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;IACxB,KAAK,EAAE,SAAS;IAChB,QAAQ,EAAE,QAAQ;IAClB,MAAM,EAAE,IAAI;CACb,CAAC,CAAC;AACH,eAAe,CAAC,MAAM,CAAC,CAAC;AAExB,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;AAEtC,MAAM,aAAa,GAAG,mBAAmB,EAAE,CAAC;AAC5C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;AACrC,MAAM,EAAE,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;AACvC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC;AAC9B,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE;IACtC,aAAa;IACb,SAAS,EAAE,UAAU;IACrB,GAAG,EAAE,GAAG;IACR,cAAc,EAAE,OAAO;CACxB,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAC3C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACnF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AAExB,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;IAC3B,MAAM,CAAC,IAAI,CAAC,gCAAgC,IAAI,EAAE,EAAE;QAClD,EAAE,EAAE,kBAAkB,IAAI,EAAE;QAC5B,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3B,GAAG,EAAE,GAAG;QACR,OAAO,EAAE,OAAO;QAChB,EAAE,EAAE,OAAO;KACZ,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,QAAQ;IACrB,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,CAAC;IACb,OAAO,CAAC,KAAK,EAAE,CAAC;IAChB,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,UAAU,CAAC,KAAK,EAAE,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export { Storage } from './storage.js';
+export { ChannelManager } from './channel-manager.js';
+export { Router } from './router.js';
+export { HeadServer } from './server.js';
+export type { HeadServerOptions } from './server.js';
+export { GitHubAuthProvider, OpenAuthProvider, ApiKeyAuthProvider, ThrottledAuthProvider } from './auth.js';
+export type { AuthProvider, AuthUser, AuthOutcome, AuthCredentials } from './auth.js';
+export { Logger, getLogger, setGlobalLogger } from './logger.js';
+export type { LoggerOptions, LogLevel } from './logger.js';

package/dist/index.js

@@ -0,0 +1,7 @@
+export { Storage } from './storage.js';
+export { ChannelManager } from './channel-manager.js';
+export { Router } from './router.js';
+export { HeadServer } from './server.js';
+export { GitHubAuthProvider, OpenAuthProvider, ApiKeyAuthProvider, ThrottledAuthProvider } from './auth.js';
+export { Logger, getLogger, setGlobalLogger } from './logger.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAE5G,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}

package/dist/logger.d.ts

@@ -0,0 +1,31 @@
+export type LogLevel = 'debug' | 'info' | 'warn' | 'error';
+export interface LoggerOptions {
+    /** Minimum log level to output. Default: 'info' */
+    level?: LogLevel;
+    /** Log file path. If not set, logs to stdout only. */
+    filePath?: string;
+    /** Max file size in bytes before rotation. Default: 10MB */
+    maxFileSize?: number;
+    /** Max number of rotated files to keep. Default: 5 */
+    maxFiles?: number;
+    /** Also log to stdout. Default: true */
+    stdout?: boolean;
+}
+export declare class Logger {
+    private level;
+    private filePath?;
+    private maxFileSize;
+    private maxFiles;
+    private stdout;
+    private currentSize;
+    constructor(options?: LoggerOptions);
+    debug(message: string, data?: Record<string, unknown>): void;
+    info(message: string, data?: Record<string, unknown>): void;
+    warn(message: string, data?: Record<string, unknown>): void;
+    error(message: string, data?: Record<string, unknown>): void;
+    close(): void;
+    private log;
+    private rotate;
+}
+export declare function setGlobalLogger(logger: Logger): void;
+export declare function getLogger(): Logger;

package/dist/logger.js

@@ -0,0 +1,103 @@
+import { appendFileSync, mkdirSync, existsSync, renameSync, statSync } from 'fs';
+import { dirname } from 'path';
+const LEVEL_ORDER = {
+    debug: 0,
+    info: 1,
+    warn: 2,
+    error: 3,
+};
+export class Logger {
+    level;
+    filePath;
+    maxFileSize;
+    maxFiles;
+    stdout;
+    currentSize = 0;
+    constructor(options = {}) {
+        this.level = LEVEL_ORDER[options.level ?? 'info'];
+        this.filePath = options.filePath;
+        this.maxFileSize = options.maxFileSize ?? 10 * 1024 * 1024; // 10MB
+        this.maxFiles = options.maxFiles ?? 5;
+        this.stdout = options.stdout ?? true;
+        if (this.filePath) {
+            const dir = dirname(this.filePath);
+            if (!existsSync(dir))
+                mkdirSync(dir, { recursive: true });
+            try {
+                if (existsSync(this.filePath)) {
+                    this.currentSize = statSync(this.filePath).size;
+                }
+            }
+            catch {
+                this.currentSize = 0;
+            }
+        }
+    }
+    debug(message, data) {
+        this.log('debug', message, data);
+    }
+    info(message, data) {
+        this.log('info', message, data);
+    }
+    warn(message, data) {
+        this.log('warn', message, data);
+    }
+    error(message, data) {
+        this.log('error', message, data);
+    }
+    close() {
+        // No-op for sync writes, but keeps the interface consistent
+    }
+    log(level, message, data) {
+        if (LEVEL_ORDER[level] < this.level)
+            return;
+        const entry = {
+            time: new Date().toISOString(),
+            level,
+            msg: message,
+            ...data,
+        };
+        const line = JSON.stringify(entry) + '\n';
+        if (this.stdout) {
+            const prefix = level === 'error' ? '❌' : level === 'warn' ? '⚠️' : level === 'debug' ? '🔍' : '◈';
+            process.stdout.write(`${prefix} [${entry.time}] ${message}${data ? ' ' + JSON.stringify(data) : ''}\n`);
+        }
+        if (this.filePath) {
+            appendFileSync(this.filePath, line);
+            this.currentSize += Buffer.byteLength(line);
+            if (this.currentSize >= this.maxFileSize) {
+                this.rotate();
+            }
+        }
+    }
+    rotate() {
+        if (!this.filePath)
+            return;
+        // Shift existing rotated files: .4 → .5, .3 → .4, etc.
+        for (let i = this.maxFiles - 1; i >= 1; i--) {
+            const from = `${this.filePath}.${i}`;
+            const to = `${this.filePath}.${i + 1}`;
+            if (existsSync(from)) {
+                try {
+                    renameSync(from, to);
+                }
+                catch { /* best effort */ }
+            }
+        }
+        // Current → .1
+        try {
+            renameSync(this.filePath, `${this.filePath}.1`);
+        }
+        catch { /* best effort */ }
+        this.currentSize = 0;
+    }
+}
+/** Global logger instance — set via createLogger() in index.ts */
+let globalLogger = new Logger();
+export function setGlobalLogger(logger) {
+    globalLogger = logger;
+}
+export function getLogger() {
+    return globalLogger;
+}
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACjF,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAI/B,MAAM,WAAW,GAA6B;IAC5C,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACT,CAAC;AAeF,MAAM,OAAO,MAAM;IACT,KAAK,CAAS;IACd,QAAQ,CAAU;IAClB,WAAW,CAAS;IACpB,QAAQ,CAAS;IACjB,MAAM,CAAU;IAChB,WAAW,GAAG,CAAC,CAAC;IAExB,YAAY,UAAyB,EAAE;QACrC,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;QACnE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC;QAErC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,IAAI,CAAC;gBACH,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC9B,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;gBAClD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,IAA8B;QACnD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,IAA8B;QAClD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,IAA8B;QAClD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,IAA8B;QACnD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,KAAK;QACH,4DAA4D;IAC9D,CAAC;IAEO,GAAG,CAAC,KAAe,EAAE,OAAe,EAAE,IAA8B;QAC1E,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK;YAAE,OAAO;QAE5C,MAAM,KAAK,GAAG;YACZ,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9B,KAAK;YACL,GAAG,EAAE,OAAO;YACZ,GAAG,IAAI;SACR,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;QAE1C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;YAClG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,KAAK,KAAK,CAAC,IAAI,KAAK,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1G,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACzC,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAEO,MAAM;QACZ,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO;QAE3B,uDAAuD;QACvD,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,IAAI,CAAC;oBAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,eAAe;QACf,IAAI,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpF,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;IACvB,CAAC;CACF;AAED,kEAAkE;AAClE,IAAI,YAAY,GAAW,IAAI,MAAM,EAAE,CAAC;AAExC,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,YAAY,GAAG,MAAM,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/dist/router.d.ts

@@ -0,0 +1,30 @@
+import type { ProducerMessage, ConsumerMessage, HeadNotice, EncryptedMessage } from '@kraki/protocol';
+import { ChannelManager } from './channel-manager.js';
+type IncomingMessage = ProducerMessage | ConsumerMessage | EncryptedMessage;
+export declare class Router {
+    private cm;
+    constructor(cm: ChannelManager);
+    /**
+     * Handle an incoming message from a connected device.
+     * Assigns seq, stores if needed, routes to correct recipients.
+     */
+    handleMessage(fromDeviceId: string, raw: IncomingMessage): void;
+    /**
+     * Replay stored messages to a device after a given seq.
+     * Filters out encrypted messages the device cannot decrypt.
+     */
+    replay(deviceId: string, afterSeq: number, sessionId?: string): void;
+    /**
+     * Send a HeadNotice to all connected devices on a channel.
+     */
+    broadcastNotice(channelId: string, notice: HeadNotice): void;
+    private broadcastToTentacles;
+    private sendToApps;
+    private sendToSessionOwner;
+    /**
+     * Route create_session to a specific tentacle.
+     * Works for both plaintext and encrypted (targetDeviceId from envelope).
+     */
+    private sendToTentacle;
+}
+export {};

package/dist/router.js

@@ -0,0 +1,217 @@
+import { shouldStore } from './storage.js';
+import { getLogger } from './logger.js';
+/** Normalize SQLite datetime ("2024-01-15 20:00:00") to ISO 8601 ("2024-01-15T20:00:00.000Z") */
+function toISO(sqliteTimestamp) {
+    if (sqliteTimestamp.includes('T'))
+        return sqliteTimestamp; // already ISO
+    return sqliteTimestamp.replace(' ', 'T') + '.000Z';
+}
+export class Router {
+    cm;
+    constructor(cm) {
+        this.cm = cm;
+    }
+    /**
+     * Handle an incoming message from a connected device.
+     * Assigns seq, stores if needed, routes to correct recipients.
+     */
+    handleMessage(fromDeviceId, raw) {
+        const device = this.cm.getConnection(fromDeviceId);
+        if (!device)
+            return;
+        const channelId = device.channelId;
+        const seq = this.cm.nextSeq(channelId);
+        const logger = getLogger();
+        // Track session ownership on session_created (narrow on raw, not stamped)
+        if (raw.type === 'session_created' && raw.sessionId) {
+            const payload = raw.payload;
+            this.cm.registerSession(raw.sessionId, fromDeviceId, {
+                agent: payload.agent,
+                model: payload.model,
+            });
+            logger.debug('Session registered', { sessionId: raw.sessionId, device: fromDeviceId, agent: payload.agent });
+        }
+        // In E2E mode, encrypted messages from tentacles may contain session_created.
+        // The tentacle exposes agent/model in the outer envelope for session registration.
+        if (device.role === 'tentacle' && raw.sessionId && !this.cm.getSessionOwner(raw.sessionId)) {
+            const enc = raw.type === 'encrypted' ? raw : null;
+            this.cm.registerSession(raw.sessionId, fromDeviceId, {
+                agent: enc?.agent ?? raw.payload?.agent ?? 'unknown',
+                model: enc?.model ?? raw.payload?.model,
+            });
+            logger.debug('Session registered (from envelope)', { sessionId: raw.sessionId, device: fromDeviceId });
+        }
+        // Stamp envelope fields
+        const stamped = {
+            ...raw,
+            channel: channelId,
+            deviceId: fromDeviceId,
+            seq,
+            timestamp: new Date().toISOString(),
+        };
+        // Store if this is a storable message type (skip ephemeral messages like deltas)
+        const isEphemeral = stamped.type === 'encrypted' && stamped.ephemeral;
+        if (shouldStore(stamped.type) && !isEphemeral) {
+            // For encrypted messages, store the full envelope (head can't read the inner payload)
+            let payloadToStore;
+            if (stamped.type === 'encrypted') {
+                const enc = stamped;
+                payloadToStore = JSON.stringify({ iv: enc.iv, ciphertext: enc.ciphertext, tag: enc.tag, keys: enc.keys });
+            }
+            else {
+                payloadToStore = JSON.stringify(stamped.payload);
+            }
+            this.cm.getStorage().storeMessage({
+                channelId,
+                deviceId: fromDeviceId,
+                sessionId: stamped.sessionId ?? null,
+                seq,
+                type: stamped.type,
+                payload: payloadToStore,
+            });
+        }
+        const serialized = JSON.stringify(stamped);
+        // Route based on sender role
+        if (device.role === 'tentacle') {
+            this.sendToApps(channelId, serialized);
+            logger.debug('Routed tentacle→apps', { type: stamped.type, seq, channel: channelId });
+        }
+        else if (device.role === 'app') {
+            // Encrypted create_session: targetDeviceId in outer envelope
+            const targetDeviceId = raw.type === 'create_session'
+                ? raw.payload?.targetDeviceId
+                : raw.targetDeviceId;
+            if (targetDeviceId) {
+                const requestId = raw.type === 'create_session'
+                    ? raw.payload?.requestId
+                    : undefined;
+                this.sendToTentacle(channelId, targetDeviceId, serialized, logger, fromDeviceId, requestId);
+            }
+            else {
+                this.sendToSessionOwner(stamped.sessionId, serialized);
+                logger.debug('Routed app→tentacle', { type: stamped.type, seq, sessionId: stamped.sessionId });
+            }
+        }
+    }
+    /**
+     * Replay stored messages to a device after a given seq.
+     * Filters out encrypted messages the device cannot decrypt.
+     */
+    replay(deviceId, afterSeq, sessionId) {
+        const device = this.cm.getConnection(deviceId);
+        if (!device)
+            return;
+        const logger = getLogger();
+        const storage = this.cm.getStorage();
+        const messages = storage.getMessagesForDevice(device.channelId, afterSeq, deviceId, sessionId);
+        let sent = 0;
+        let skipped = 0;
+        for (const msg of messages) {
+            try {
+                let envelope;
+                if (msg.type === 'encrypted') {
+                    // Encrypted messages: reconstruct original wire format
+                    const stored = JSON.parse(msg.payload);
+                    envelope = {
+                        channel: msg.channelId,
+                        deviceId: msg.deviceId,
+                        seq: msg.seq,
+                        timestamp: toISO(msg.createdAt),
+                        type: 'encrypted',
+                        sessionId: msg.sessionId,
+                        iv: stored.iv,
+                        ciphertext: stored.ciphertext,
+                        tag: stored.tag,
+                        keys: stored.keys,
+                    };
+                }
+                else {
+                    // Normal messages: reconstruct envelope with parsed payload
+                    envelope = {
+                        channel: msg.channelId,
+                        deviceId: msg.deviceId,
+                        seq: msg.seq,
+                        timestamp: toISO(msg.createdAt),
+                        type: msg.type,
+                        sessionId: msg.sessionId,
+                        payload: JSON.parse(msg.payload),
+                    };
+                }
+                device.send(JSON.stringify(envelope));
+                sent++;
+            }
+            catch {
+                logger.warn('Skipped corrupt message during replay', {
+                    messageId: msg.id,
+                    seq: msg.seq,
+                    type: msg.type,
+                });
+                skipped++;
+            }
+        }
+        // Send replay_complete with the channel's max seq so the client
+        // advances past skipped messages and doesn't re-request them.
+        const lastSeq = storage.getMaxSeq(device.channelId);
+        device.send(JSON.stringify({ type: 'replay_complete', lastSeq }));
+        logger.debug('Replay complete', { deviceId, afterSeq, sent, skipped, lastSeq });
+    }
+    /**
+     * Send a HeadNotice to all connected devices on a channel.
+     */
+    broadcastNotice(channelId, notice) {
+        const serialized = JSON.stringify(notice);
+        for (const device of this.cm.getConnectedDevices(channelId)) {
+            device.send(serialized);
+        }
+    }
+    broadcastToTentacles(channelId, notice) {
+        const serialized = JSON.stringify(notice);
+        for (const tentacle of this.cm.getConnectedByRole(channelId, 'tentacle')) {
+            tentacle.send(serialized);
+        }
+    }
+    sendToApps(channelId, data) {
+        for (const app of this.cm.getConnectedByRole(channelId, 'app')) {
+            app.send(data);
+        }
+    }
+    sendToSessionOwner(sessionId, data) {
+        if (!sessionId)
+            return;
+        const ownerDeviceId = this.cm.getSessionOwner(sessionId);
+        if (!ownerDeviceId)
+            return;
+        const device = this.cm.getConnection(ownerDeviceId);
+        if (device)
+            device.send(data);
+    }
+    /**
+     * Route create_session to a specific tentacle.
+     * Works for both plaintext and encrypted (targetDeviceId from envelope).
+     */
+    sendToTentacle(channelId, targetDeviceId, serialized, logger, fromDeviceId, requestId) {
+        const device = this.cm.getConnection(targetDeviceId);
+        // Verify target is a tentacle in the SAME channel
+        if (device && device.role === 'tentacle' && device.channelId === channelId) {
+            device.send(serialized);
+            logger.debug('Routed create_session→tentacle', { targetDeviceId });
+        }
+        else {
+            const reason = device && device.channelId !== channelId
+                ? `Target device "${targetDeviceId}" belongs to a different channel`
+                : `Target device "${targetDeviceId}" is not online`;
+            logger.warn('create_session rejected', { targetDeviceId, reason });
+            if (fromDeviceId) {
+                const sender = this.cm.getConnection(fromDeviceId);
+                if (sender) {
+                    sender.send(JSON.stringify({
+                        type: 'server_error',
+                        message: reason,
+                        requestId,
+                    }));
+                }
+            }
+        }
+    }
+}
+//# sourceMappingURL=router.js.map

package/dist/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../src/router.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,iGAAiG;AACjG,SAAS,KAAK,CAAC,eAAuB;IACpC,IAAI,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,eAAe,CAAC,CAAC,cAAc;IACzE,OAAO,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC;AACrD,CAAC;AAID,MAAM,OAAO,MAAM;IACT,EAAE,CAAiB;IAE3B,YAAY,EAAkB;QAC5B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,YAAoB,EAAE,GAAoB;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAE3B,0EAA0E;QAC1E,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YACpD,MAAM,OAAO,GAAI,GAA6B,CAAC,OAAO,CAAC;YACvD,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE;gBACnD,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/G,CAAC;QAED,8EAA8E;QAC9E,mFAAmF;QACnF,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3F,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,GAAuB,CAAC,CAAC,CAAC,IAAI,CAAC;YACtE,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE;gBACnD,KAAK,EAAE,GAAG,EAAE,KAAK,IAAK,GAA6B,CAAC,OAAO,EAAE,KAAK,IAAI,SAAS;gBAC/E,KAAK,EAAE,GAAG,EAAE,KAAK,IAAK,GAA6B,CAAC,OAAO,EAAE,KAAK;aACnE,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;QACzG,CAAC;QAED,wBAAwB;QACxB,MAAM,OAAO,GAAG;YACd,GAAG,GAAG;YACN,OAAO,EAAE,SAAS;YAClB,QAAQ,EAAE,YAAY;YACtB,GAAG;YACH,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,iFAAiF;QACjF,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,KAAK,WAAW,IAAK,OAA4B,CAAC,SAAS,CAAC;QAC5F,IAAI,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC9C,sFAAsF;YACtF,IAAI,cAAsB,CAAC;YAC3B,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACjC,MAAM,GAAG,GAAG,OAAiF,CAAC;gBAC9F,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5G,CAAC;iBAAM,CAAC;gBACN,cAAc,GAAG,IAAI,CAAC,SAAS,CAAE,OAAiC,CAAC,OAAO,CAAC,CAAC;YAC9E,CAAC;YAED,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,YAAY,CAAC;gBAChC,SAAS;gBACT,QAAQ,EAAE,YAAY;gBACtB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;gBACpC,GAAG;gBACH,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,cAAc;aACxB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAE3C,6BAA6B;QAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACxF,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACjC,6DAA6D;YAC7D,MAAM,cAAc,GAAG,GAAG,CAAC,IAAI,KAAK,gBAAgB;gBAClD,CAAC,CAAE,GAA4B,CAAC,OAAO,EAAE,cAAc;gBACvD,CAAC,CAAE,GAAwB,CAAC,cAAc,CAAC;YAE7C,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,KAAK,gBAAgB;oBAC7C,CAAC,CAAE,GAA4B,CAAC,OAAO,EAAE,SAAS;oBAClD,CAAC,CAAC,SAAS,CAAC;gBACd,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;YAC9F,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;gBACvD,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,QAAgB,EAAE,QAAgB,EAAE,SAAkB;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,oBAAoB,CAC3C,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAChD,CAAC;QAEF,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,IAAI,QAAiC,CAAC;gBAEtC,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAC7B,uDAAuD;oBACvD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBACvC,QAAQ,GAAG;wBACT,OAAO,EAAE,GAAG,CAAC,SAAS;wBACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;wBACtB,GAAG,EAAE,GAAG,CAAC,GAAG;wBACZ,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;wBAC/B,IAAI,EAAE,WAAW;wBACjB,SAAS,EAAE,GAAG,CAAC,SAAS;wBACxB,EAAE,EAAE,MAAM,CAAC,EAAE;wBACb,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,GAAG,EAAE,MAAM,CAAC,GAAG;wBACf,IAAI,EAAE,MAAM,CAAC,IAAI;qBAClB,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,4DAA4D;oBAC5D,QAAQ,GAAG;wBACT,OAAO,EAAE,GAAG,CAAC,SAAS;wBACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;wBACtB,GAAG,EAAE,GAAG,CAAC,GAAG;wBACZ,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;wBAC/B,IAAI,EAAE,GAAG,CAAC,IAAI;wBACd,SAAS,EAAE,GAAG,CAAC,SAAS;wBACxB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;qBACjC,CAAC;gBACJ,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACtC,IAAI,EAAE,CAAC;YACT,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;oBACnD,SAAS,EAAE,GAAG,CAAC,EAAE;oBACjB,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;iBACf,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,gEAAgE;QAChE,8DAA8D;QAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAElE,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAClF,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAAiB,EAAE,MAAkB;QACnD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5D,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,oBAAoB,CAAC,SAAiB,EAAE,MAAkB;QAChE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;YACzE,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,SAAiB,EAAE,IAAY;QAChD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,SAA6B,EAAE,IAAY;QACpE,IAAI,CAAC,SAAS;YAAE,OAAO;QACvB,MAAM,aAAa,GAAG,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,aAAa;YAAE,OAAO;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;QACpD,IAAI,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED;;;OAGG;IACK,cAAc,CACpB,SAAiB,EACjB,cAAsB,EACtB,UAAkB,EAClB,MAAoC,EACpC,YAAqB,EACrB,SAAkB;QAElB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QACrD,kDAAkD;QAClD,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC3E,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACxB,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;QACrE,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;gBACrD,CAAC,CAAC,kBAAkB,cAAc,kCAAkC;gBACpE,CAAC,CAAC,kBAAkB,cAAc,iBAAiB,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC;YACnE,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;gBACnD,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;wBACzB,IAAI,EAAE,cAAc;wBACpB,OAAO,EAAE,MAAM;wBACf,SAAS;qBACV,CAAC,CAAC,CAAC;gBACN,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;CACF"}