@loompad/cli 0.1.0 → 1.1.2

package/dist/daemon/routes/pairing.js

@@ -0,0 +1,155 @@
+import QRCode from "qrcode";
+import { logbook } from "../../core/logbook.js";
+import { findProject } from "../../core/registry.js";
+import { lanIp, tailscaleIp, tailscaleState, tailscaleUp } from '../system.js';
+/** Register pairing routes in the order established by LoomDaemon.routes(). */
+export function registerPairingRoutes(app, ctx) {
+    /**
+     * The two networks a phone could use to reach this daemon — the LAN and the
+     * tailnet — with, for each, the address and whether the phone can actually
+     * get here on it *right now*. It can't when we're bound to localhost, which
+     * is the default; `reachable:false` is the modal's cue to offer "enable
+     * phone access" (expose) before showing a QR that wouldn't resolve.
+     */
+    app.get("/api/pair/networks", (req, res) => {
+        if (!req.isAdmin) {
+            return void res.status(403).json({ error: "admin only" });
+        }
+        void (async () => {
+            const exposed = ctx.exposedIps();
+            const reach = (ip) => Boolean(ip) && (ctx.host === "0.0.0.0" || ctx.host === ip || exposed.includes(ip));
+            const lan = lanIp();
+            const tstate = await tailscaleState();
+            const ts = tstate.loggedIn ? tstate.ip : null;
+            res.json({
+                port: ctx.port,
+                boundHost: ctx.host,
+                exposed,
+                localnet: { ip: lan, reachable: reach(lan) },
+                tailnet: ts
+                    ? { ip: ts, available: true, reachable: reach(ts), installed: true }
+                    : {
+                        ip: null,
+                        available: false,
+                        reachable: false,
+                        installed: false,
+                        signedOut: tstate.installed,
+                        reason: tstate.installed
+                            ? "Tailscale is installed but signed out."
+                            : "Tailscale isn't installed on this machine.",
+                    },
+            });
+        })();
+    });
+    /**
+     * Tailscale, from inside the app. `status` powers the connect-a-phone modal's
+     * "Start Tailscale" affordance; `up` runs `tailscale up` and hands back the
+     * one-time sign-in URL so the user finishes in a browser tab — no terminal.
+     */
+    app.get("/api/tailscale/status", (req, res) => {
+        if (!req.isAdmin) {
+            return void res.status(403).json({ error: "admin only" });
+        }
+        void tailscaleState().then((s) => res.json(s));
+    });
+    app.post("/api/tailscale/up", (req, res) => {
+        if (!req.isAdmin) {
+            return void res.status(403).json({ error: "admin only" });
+        }
+        void tailscaleUp().then((r) => res.json(r), (err) => {
+            logbook.error("tailscale", "could not bring Tailscale up", err);
+            res.status(500).json({ error: err instanceof Error ? err.message : String(err) });
+        });
+    });
+    /**
+     * Make a phone-reachable address go live — a phone can't reach a
+     * localhost-only daemon. We add a second listener on the requested LAN or
+     * tailnet IP (never touching localhost), so this is safe to await and report
+     * on directly. Explicit and user-driven (you clicked "connect a phone"), and
+     * behind the token wall the whole time.
+     */
+    app.post("/api/pair/expose", (req, res) => {
+        if (!req.isAdmin) {
+            return void res.status(403).json({ error: "admin only" });
+        }
+        void (async () => {
+            const wanted = typeof req.body?.host === "string" ? req.body.host.trim() : "";
+            let ts = null;
+            try {
+                ts = await tailscaleIp();
+            }
+            catch {
+                ts = null;
+            }
+            // Only ever bind an address that is genuinely ours (LAN or tailnet).
+            const allowed = new Set([lanIp(), ts].filter(Boolean));
+            if (!wanted || !allowed.has(wanted)) {
+                return void res.status(400).json({ error: "not a local or tailnet address of this machine" });
+            }
+            try {
+                await ctx.expose(wanted);
+                res.json({ ok: true, ip: wanted, port: ctx.port, exposed: ctx.exposedIps() });
+            }
+            catch (err) {
+                logbook.error("daemon", `could not open phone access on ${wanted}`, err);
+                res.status(500).json({ error: err instanceof Error ? err.message : String(err) });
+            }
+        })();
+    });
+    app.post("/api/pair/new", (req, res) => {
+        if (!req.isAdmin) {
+            return void res.status(403).json({ error: "admin only" });
+        }
+        void (async () => {
+            // The QR must point at the address the phone will actually use, so the
+            // caller may ask for the LAN or tailnet host — but only those. An
+            // arbitrary host from the client never reaches the link.
+            const wanted = typeof req.body?.host === "string" ? req.body.host.trim() : "";
+            let ts = null;
+            try {
+                ts = await tailscaleIp();
+            }
+            catch {
+                ts = null;
+            }
+            const allowed = new Set([ctx.host, lanIp(), ts].filter(Boolean));
+            const host = wanted && allowed.has(wanted) ? wanted : ctx.host;
+            const scopeIds = Array.isArray(req.body?.projects)
+                ? req.body.projects.map(String).filter(Boolean)
+                : [];
+            // Scope is resolved to ids at mint: a name that matches nothing is a
+            // typo the admin should hear about now, not a permanently useless token.
+            const resolvedScope = [];
+            for (const p of scopeIds) {
+                const info = findProject(p);
+                if (!info) {
+                    return void res.status(400).json({ error: `unknown project "${p}" in scope` });
+                }
+                resolvedScope.push(info.id);
+            }
+            const { token, expiresAt } = ctx.auth.newPairingToken(resolvedScope.length ? resolvedScope : undefined);
+            const url = `http://${host}:${ctx.port}`;
+            // Deep link: scanning it with any camera opens the app, which claims the
+            // single-use token from the URL fragment and pairs itself.
+            // With Loom Cloud on, the fragment also carries the relay channel + key
+            // and the Supabase project, so the phone can reach this daemon from any
+            // network. Fragment only: none of it is ever sent to a server.
+            const cloud = ctx.cloudLinkParams();
+            const link = `${url}/app#pair=${token}${cloud}`;
+            let qrSvg;
+            try {
+                qrSvg = await QRCode.toString(link, {
+                    type: "svg",
+                    margin: 1,
+                    errorCorrectionLevel: "M",
+                });
+            }
+            catch (err) {
+                // The link still works even if the QR doesn't render — degrade, don't fail.
+                logbook.warn("pair", "QR render failed — the copy link still works", err);
+            }
+            res.json({ token, expiresAt, url, link, ...(qrSvg ? { qrSvg } : {}) });
+        })();
+    });
+}
+//# sourceMappingURL=pairing.js.map

package/dist/daemon/routes/pairing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.js","sourceRoot":"","sources":["../../../src/daemon/routes/pairing.ts"],"names":[],"mappings":"AAEA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE/E,+EAA+E;AAC/E,MAAM,UAAU,qBAAqB,CAAC,GAAY,EAAE,GAA+F;IAEjJ;;;;;;OAMG;IACH,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACzC,IAAI,CAAE,GAAuC,CAAC,OAAO,EAAE,CAAC;YACtD,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,CAAC,EAAiB,EAAE,EAAE,CAClC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAG,CAAC,CAAC,CAAC;YACtF,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;YACtC,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC9C,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,SAAS,EAAE,GAAG,CAAC,IAAI;gBACnB,OAAO;gBACP,QAAQ,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE;gBAC5C,OAAO,EAAE,EAAE;oBACT,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE;oBACpE,CAAC,CAAC;wBACA,EAAE,EAAE,IAAI;wBACR,SAAS,EAAE,KAAK;wBAChB,SAAS,EAAE,KAAK;wBAChB,SAAS,EAAE,KAAK;wBAChB,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,MAAM,EAAE,MAAM,CAAC,SAAS;4BACtB,CAAC,CAAC,wCAAwC;4BAC1C,CAAC,CAAC,4CAA4C;qBACjD;aACJ,CAAC,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,IAAI,CAAE,GAAuC,CAAC,OAAO,EAAE,CAAC;YACtD,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,KAAK,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACzC,IAAI,CAAE,GAAuC,CAAC,OAAO,EAAE,CAAC;YACtD,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,KAAK,WAAW,EAAE,CAAC,IAAI,CACrB,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAClB,CAAC,GAAG,EAAE,EAAE;YACN,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,8BAA8B,EAAE,GAAG,CAAC,CAAC;YAChE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH;;;;;;OAMG;IACH,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACxC,IAAI,CAAE,GAAuC,CAAC,OAAO,EAAE,CAAC;YACtD,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,IAAI,CAAC,IAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,IAAI,EAAE,GAAkB,IAAI,CAAC;YAC7B,IAAI,CAAC;gBACH,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,EAAE,GAAG,IAAI,CAAC;YACZ,CAAC;YACD,qEAAqE;YACrE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAa,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpC,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAC,CAAC;YAChG,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACzB,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAChF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,kCAAkC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;gBACzE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpF,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACrC,IAAI,CAAE,GAAuC,CAAC,OAAO,EAAE,CAAC;YACtD,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,uEAAuE;YACvE,kEAAkE;YAClE,yDAAyD;YACzD,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,IAAI,CAAC,IAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,IAAI,EAAE,GAAkB,IAAI,CAAC;YAC7B,IAAI,CAAC;gBACH,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,EAAE,GAAG,IAAI,CAAC;YACZ,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAa,CAAC,CAAC;YAC7E,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YAC/D,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;gBAChD,CAAC,CAAE,GAAG,CAAC,IAAI,CAAC,QAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC9D,CAAC,CAAC,EAAE,CAAC;YACP,qEAAqE;YACrE,yEAAyE;YACzE,MAAM,aAAa,GAAa,EAAE,CAAC;YACnC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;gBAC5B,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,CAAC,YAAY,EAAE,CAAC,CAAC;gBACjF,CAAC;gBACD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9B,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,eAAe,CACnD,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CACjD,CAAC;YACF,MAAM,GAAG,GAAG,UAAU,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACzC,yEAAyE;YACzE,2DAA2D;YAC3D,wEAAwE;YACxE,wEAAwE;YACxE,+DAA+D;YAC/D,MAAM,KAAK,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,GAAG,GAAG,aAAa,KAAK,GAAG,KAAK,EAAE,CAAC;YAChD,IAAI,KAAyB,CAAC;YAC9B,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE;oBAClC,IAAI,EAAE,KAAK;oBACX,MAAM,EAAE,CAAC;oBACT,oBAAoB,EAAE,GAAG;iBAC1B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,4EAA4E;gBAC5E,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,8CAA8C,EAAE,GAAG,CAAC,CAAC;YAC5E,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/daemon/routes/preview.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Artifact previews: an HTML page, SVG, image or PDF an agent made, shown as
+ * the thing itself in the dock rather than as source.
+ *
+ * An <iframe> can't send the app's bearer token, so a preview is reached
+ * through a short-lived token: POST /api/projects/:id/preview (authed) mints
+ * one for a project directory, and GET /preview/<token>/<path> serves files
+ * from that directory — and only that directory — for half an hour. Relative
+ * links in the page (its CSS, scripts, images) resolve under the same token.
+ *
+ * Every response carries `Content-Security-Policy: sandbox …` without
+ * allow-same-origin: the page runs in an opaque origin even when opened on its
+ * own, so its scripts can't read the app's storage or call the daemon as you.
+ * The iframe adds the same sandbox; the header is what holds if it's opened
+ * in a tab.
+ */
+import type { Express } from "express";
+export declare const IMAGE_EXT: RegExp;
+/** Before the auth wall: the token is the credential, scoped to one directory. */
+export declare function registerPreviewPublic(app: Express): void;
+/** Behind the auth wall: mint a preview link, and serve a project's images to the thread. */
+export declare function registerPreviewRoutes(app: Express): void;
+/** Tests. */
+export declare function clearPreviewTokens(): void;

package/dist/daemon/routes/preview.js

@@ -0,0 +1,122 @@
+/**
+ * Artifact previews: an HTML page, SVG, image or PDF an agent made, shown as
+ * the thing itself in the dock rather than as source.
+ *
+ * An <iframe> can't send the app's bearer token, so a preview is reached
+ * through a short-lived token: POST /api/projects/:id/preview (authed) mints
+ * one for a project directory, and GET /preview/<token>/<path> serves files
+ * from that directory — and only that directory — for half an hour. Relative
+ * links in the page (its CSS, scripts, images) resolve under the same token.
+ *
+ * Every response carries `Content-Security-Policy: sandbox …` without
+ * allow-same-origin: the page runs in an opaque origin even when opened on its
+ * own, so its scripts can't read the app's storage or call the daemon as you.
+ * The iframe adds the same sandbox; the header is what holds if it's opened
+ * in a tab.
+ */
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { findProject } from "../../core/registry.js";
+const TTL_MS = 30 * 60_000;
+const tokens = new Map();
+const TYPES = {
+    ".html": "text/html; charset=utf-8", ".htm": "text/html; charset=utf-8", ".css": "text/css; charset=utf-8",
+    ".js": "text/javascript; charset=utf-8", ".mjs": "text/javascript; charset=utf-8", ".json": "application/json; charset=utf-8",
+    ".svg": "image/svg+xml", ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".gif": "image/gif",
+    ".webp": "image/webp", ".avif": "image/avif", ".ico": "image/x-icon", ".bmp": "image/bmp", ".pdf": "application/pdf",
+    ".txt": "text/plain; charset=utf-8", ".md": "text/plain; charset=utf-8", ".csv": "text/plain; charset=utf-8",
+    ".woff": "font/woff", ".woff2": "font/woff2", ".ttf": "font/ttf", ".mp4": "video/mp4", ".webm": "video/webm",
+    ".mp3": "audio/mpeg", ".wav": "audio/wav", ".wasm": "application/wasm",
+};
+export const IMAGE_EXT = /\.(png|jpe?g|gif|webp|avif|svg|bmp|ico)$/i;
+const SANDBOX = "sandbox allow-scripts allow-forms allow-popups allow-modals allow-downloads";
+/** Inside `base` after resolving links, or null. */
+function inside(base, rel) {
+    let root;
+    try {
+        root = fs.realpathSync(base);
+    }
+    catch {
+        return null;
+    }
+    const target = path.resolve(root, rel.replace(/^\/+/, ""));
+    const ok = (p) => p === root || p.startsWith(root + path.sep);
+    if (!ok(target))
+        return null;
+    try {
+        if (!ok(fs.realpathSync(target)))
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return target;
+}
+function sweep() {
+    const now = Date.now();
+    for (const [t, v] of tokens)
+        if (v.exp < now)
+            tokens.delete(t);
+}
+/** Before the auth wall: the token is the credential, scoped to one directory. */
+export function registerPreviewPublic(app) {
+    app.get("/preview/:tok/*rest", (req, res) => {
+        const entry = tokens.get(String(req.params.tok));
+        if (!entry || entry.exp < Date.now())
+            return void res.status(410).type("text/plain").send("this preview link has expired — open it again from Loom");
+        const rest = req.params.rest;
+        const rel = decodeURIComponent(Array.isArray(rest) ? rest.join("/") : String(rest ?? ""));
+        let file = inside(entry.dir, rel);
+        if (file && fs.statSync(file).isDirectory())
+            file = inside(entry.dir, path.join(rel, "index.html"));
+        if (!file || !fs.statSync(file).isFile())
+            return void res.status(404).type("text/plain").send("not found");
+        res.setHeader("Content-Type", TYPES[path.extname(file).toLowerCase()] ?? "application/octet-stream");
+        res.setHeader("Content-Security-Policy", SANDBOX);
+        res.setHeader("X-Content-Type-Options", "nosniff");
+        res.setHeader("Cache-Control", "no-store");
+        res.setHeader("Referrer-Policy", "no-referrer");
+        fs.createReadStream(file).on("error", () => res.status(500).end()).pipe(res);
+    });
+}
+/** Behind the auth wall: mint a preview link, and serve a project's images to the thread. */
+export function registerPreviewRoutes(app) {
+    app.post("/api/projects/:id/preview", (req, res) => {
+        const info = findProject(String(req.params.id));
+        if (!info)
+            return void res.status(404).json({ error: "not found" });
+        const rel = String(req.body?.path ?? "").replace(/^\/+/, "");
+        const file = inside(info.dir, rel);
+        if (!rel || !file || !fs.existsSync(file))
+            return void res.status(404).json({ error: `no file ${rel || "(none)"} in this project` });
+        sweep();
+        // the token covers the file's own folder, so a page's relative assets load and nothing above it does
+        const dir = fs.statSync(file).isDirectory() ? file : path.dirname(file);
+        const tok = crypto.randomBytes(18).toString("base64url");
+        tokens.set(tok, { dir, exp: Date.now() + TTL_MS });
+        const name = fs.statSync(file).isDirectory() ? "" : path.basename(file);
+        res.json({ url: `/preview/${tok}/${encodeURIComponent(name)}`, expiresAt: Date.now() + TTL_MS });
+    });
+    // An image in the project (a screenshot the agent saved, a chart it drew),
+    // for markdown and artifact cards in the thread. Images only.
+    app.get("/api/projects/:id/image", (req, res) => {
+        const info = findProject(String(req.params.id));
+        const rel = String(req.query.path ?? "");
+        if (!info || !IMAGE_EXT.test(rel))
+            return void res.status(400).json({ error: "not an image" });
+        const file = path.isAbsolute(rel) ? inside(info.dir, path.relative(info.dir, rel)) : inside(info.dir, rel);
+        if (!file || !fs.existsSync(file) || !fs.statSync(file).isFile())
+            return void res.status(404).json({ error: "not found" });
+        res.setHeader("Content-Type", TYPES[path.extname(file).toLowerCase()] ?? "application/octet-stream");
+        res.setHeader("Content-Security-Policy", SANDBOX);
+        res.setHeader("X-Content-Type-Options", "nosniff");
+        res.setHeader("Cache-Control", "private, max-age=60");
+        fs.createReadStream(file).on("error", () => res.status(500).end()).pipe(res);
+    });
+}
+/** Tests. */
+export function clearPreviewTokens() {
+    tokens.clear();
+}
+//# sourceMappingURL=preview.js.map

package/dist/daemon/routes/preview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview.js","sourceRoot":"","sources":["../../../src/daemon/routes/preview.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC;AAC3B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwC,CAAC;AAE/D,MAAM,KAAK,GAA2B;IACpC,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,0BAA0B,EAAE,MAAM,EAAE,yBAAyB;IAC1G,KAAK,EAAE,gCAAgC,EAAE,MAAM,EAAE,gCAAgC,EAAE,OAAO,EAAE,iCAAiC;IAC7H,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW;IAC9G,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,iBAAiB;IACpH,MAAM,EAAE,2BAA2B,EAAE,KAAK,EAAE,2BAA2B,EAAE,MAAM,EAAE,2BAA2B;IAC5G,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY;IAC5G,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB;CACvE,CAAC;AACF,MAAM,CAAC,MAAM,SAAS,GAAG,2CAA2C,CAAC;AACrE,MAAM,OAAO,GAAG,6EAA6E,CAAC;AAE9F,oDAAoD;AACpD,SAAS,MAAM,CAAC,IAAY,EAAE,GAAW;IACvC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3D,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACtE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,CAAC;QAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC7E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,KAAK;IACZ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM;QAAE,IAAI,CAAC,CAAC,GAAG,GAAG,GAAG;YAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,qBAAqB,CAAC,GAAY;IAChD,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;QACrJ,MAAM,IAAI,GAAI,GAAG,CAAC,MAAiD,CAAC,IAAI,CAAC;QACzE,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1F,IAAI,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,IAAI,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;QACpG,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3G,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAC,CAAC;QACrG,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,OAAO,CAAC,CAAC;QAClD,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC3C,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAChD,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,qBAAqB,CAAC,GAAY;IAChD,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACpE,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,MAAM,CAAE,GAAG,CAAC,IAAuC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjG,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI,QAAQ,kBAAkB,EAAE,CAAC,CAAC;QACrI,KAAK,EAAE,CAAC;QACR,qGAAqG;QACrG,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,YAAY,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,8DAA8D;IAC9D,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACjE,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC/F,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3G,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAC3H,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAC,CAAC;QACrG,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,OAAO,CAAC,CAAC;QAClD,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,qBAAqB,CAAC,CAAC;QACtD,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,aAAa;AACb,MAAM,UAAU,kBAAkB;IAChC,MAAM,CAAC,KAAK,EAAE,CAAC;AACjB,CAAC"}

package/dist/daemon/routes/project-actions.d.ts

@@ -0,0 +1,4 @@
+import type { Express } from 'express';
+import type { WithRuntime } from './context.js';
+/** Register project-actions routes in the order established by LoomDaemon.routes(). */
+export declare function registerProjectActionsRoutes(app: Express, withRuntime: WithRuntime): void;

package/dist/daemon/routes/project-actions.js

@@ -0,0 +1,53 @@
+import { renameProject } from "../../core/registry.js";
+/** Register project-actions routes in the order established by LoomDaemon.routes(). */
+export function registerProjectActionsRoutes(app, withRuntime) {
+    // Rename a project. The registry key stays the id; only the label moves —
+    // renames must never orphan scoped tokens, board branches or memory.
+    app.patch("/api/projects/:id", withRuntime(async (rt, req, res) => {
+        const name = String(req.body?.name ?? "").trim().slice(0, 60);
+        if (!name)
+            return void res.status(400).json({ error: "missing name" });
+        if (!renameProject(rt.info.id, name)) {
+            return void res.status(404).json({ error: "no such project" });
+        }
+        rt.info.name = name;
+        res.json({ project: { id: rt.info.id, name } });
+    }));
+    // Search the thread. The event log answers "what did we say about X"
+    // without scrolling — bounded scan of message/decision text, newest first.
+    app.get("/api/projects/:id/events/search", withRuntime(async (rt, req, res) => {
+        const q = String(req.query.q ?? "").trim().toLowerCase();
+        if (!q)
+            return void res.status(400).json({ error: "missing q" });
+        const limit = Math.min(50, Number(req.query.limit) || 20);
+        const hits = rt.log
+            .list({ kinds: ["message", "decision", "needs_input"] })
+            .filter((e) => String(e.payload.text ?? e.payload.question ?? "").toLowerCase().includes(q))
+            .slice(-limit)
+            .reverse();
+        res.json({ hits });
+    }));
+    // Fan a subtask out to a child agent. The parent keeps the baton, so this is
+    // not "send to someone else" — it's one turn borrowing another pair of hands.
+    app.post("/api/projects/:id/subtasks", withRuntime(async (rt, req, res) => {
+        const b = (req.body ?? {});
+        if (!b.parent?.trim())
+            return void res.status(400).json({ error: "missing parent" });
+        if (!b.agentId?.trim())
+            return void res.status(400).json({ error: "missing agentId" });
+        if (!b.task?.trim())
+            return void res.status(400).json({ error: "missing task" });
+        try {
+            const out = await rt.spawnSubAgent(b.parent.trim(), {
+                agentId: b.agentId.trim(),
+                task: b.task,
+                ...(b.chat ? { chat: b.chat } : {}),
+            });
+            res.json(out);
+        }
+        catch (err) {
+            res.status(400).json({ error: err instanceof Error ? err.message : String(err) });
+        }
+    }));
+}
+//# sourceMappingURL=project-actions.js.map

package/dist/daemon/routes/project-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-actions.js","sourceRoot":"","sources":["../../../src/daemon/routes/project-actions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,uFAAuF;AACvF,MAAM,UAAU,4BAA4B,CAAC,GAAY,EAAE,WAAwB;IAEjF,0EAA0E;IAC1E,qEAAqE;IACrE,GAAG,CAAC,KAAK,CACP,mBAAmB,EACnB,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,MAAM,CAAE,GAAG,CAAC,IAAsC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjG,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;YACrC,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACpB,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CACH,CAAC;IAEF,qEAAqE;IACrE,2EAA2E;IAC3E,GAAG,CAAC,GAAG,CACL,iCAAiC,EACjC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzD,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG;aAChB,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,CAAC;aACvD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;aAC3F,KAAK,CAAC,CAAC,KAAK,CAAC;aACb,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACrB,CAAC,CAAC,CACH,CAAC;IAEF,6EAA6E;IAC7E,8EAA8E;IAC9E,GAAG,CAAC,IAAI,CACN,4BAA4B,EAC5B,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAKxB,CAAC;QACF,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;gBAClD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE;gBACzB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpC,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/daemon/routes/project-team.d.ts

@@ -0,0 +1,4 @@
+import type { Express } from 'express';
+import type { RouteContext, WithRuntime } from './context.js';
+/** Register project-team routes in the order established by LoomDaemon.routes(). */
+export declare function registerProjectTeamRoutes(app: Express, ctx: Pick<RouteContext, "team">, withRuntime: WithRuntime): void;

package/dist/daemon/routes/project-team.js

@@ -0,0 +1,201 @@
+import { loadPolicy } from "../../core/team-policy.js";
+import { repoOf } from "../team.js";
+/** Register project-team routes in the order established by LoomDaemon.routes(). */
+export function registerProjectTeamRoutes(app, ctx, withRuntime) {
+    // ---- team policy in effect for a project (D37) ----
+    app.get("/api/projects/:id/team/policy", withRuntime(async (rt, _req, res) => {
+        res.json({ policy: await loadPolicy(rt.info.dir) });
+    }));
+    // ---- team sharing, per project (D8: opt-in) ----
+    // What this project has chosen (config `team`) and which GitHub repo its
+    // origin is — the two facts the UI needs to show Shared / Private / Auto.
+    app.get("/api/projects/:id/team/share", withRuntime(async (rt, _req, res) => {
+        // cfg is omitted when nothing was chosen — "auto", not "private".
+        res.json({ ...(rt.config.team ? { cfg: rt.config.team } : {}), repo: (await repoOf(rt.info.dir)) ?? "" });
+    }));
+    app.post("/api/projects/:id/team/share", withRuntime(async (rt, req, res) => {
+        try {
+            const b = (req.body ?? {});
+            res.json(await ctx.team.share(rt, b.teamId || undefined));
+        }
+        catch (err) {
+            res.status(400).json({ error: err.message });
+        }
+    }));
+    app.delete("/api/projects/:id/team/share", withRuntime(async (rt, _req, res) => {
+        ctx.team.unshare(rt);
+        res.json({ ok: true });
+    }));
+    // ---- the team brain, per project (Phase 3, daemon/team-brain.ts) ----
+    // The Team view (D49): canon, the team's memories with their tiers, and the
+    // inbox of what needs a human.
+    app.get("/api/projects/:id/team/brain", withRuntime(async (rt, req, res) => {
+        const tb = ctx.team.brainFor(rt);
+        if (req.query.sync === "1")
+            await tb.sync().catch(() => { });
+        res.json({
+            status: tb.status(),
+            memories: tb.memories({ history: req.query.history === "1" }),
+            inbox: tb.inbox(),
+        });
+    }));
+    app.post("/api/projects/:id/team/brain/:action", withRuntime(async (rt, req, res) => {
+        const tb = ctx.team.brainFor(rt);
+        const b = (req.body ?? {});
+        const str = (k) => {
+            const v = String(b[k] ?? "").trim();
+            if (!v)
+                throw new Error(`missing ${k}`);
+            return v;
+        };
+        try {
+            let out = { ok: true };
+            const action = String(req.params.action);
+            if (action === "sync")
+                await tb.sync();
+            else if (action === "promote") {
+                const ids = Array.isArray(b.ids) ? b.ids.map(String) : [str("id")];
+                out = await tb.promote(ids);
+            }
+            else if (action === "correct")
+                out = await tb.correct(str("id"), str("text"));
+            else if (action === "resolve")
+                await tb.resolve(str("winner"), str("loser"), String(b.reason ?? ""));
+            else if (action === "merge")
+                await tb.resolve(str("keep"), str("drop"), "duplicate");
+            else if (action === "trust" || action === "private") {
+                const id = str("id");
+                const value = b.value === undefined ? true : Boolean(b.value);
+                rt.brain.update(id, action === "trust" ? { untrusted: !value } : { private: value }, "user");
+                await tb.sync();
+            }
+            else
+                return void res.status(404).json({ error: `unknown team brain action "${action}"` });
+            res.json({ result: out, status: tb.status(), memories: tb.memories(), inbox: tb.inbox() });
+        }
+        catch (err) {
+            res.status(400).json({ error: err.message });
+        }
+    }));
+    // ---- landing, per project (Phase 4, daemon/landing.ts) ----
+    // Goal PRs on their way to main — checks, fixes, review, Land — plus
+    // teammates' goals waiting for someone to adopt them (D52–D63).
+    app.get("/api/projects/:id/team/landing", withRuntime(async (rt, req, res) => {
+        const l = ctx.team.landingFor(rt);
+        if (req.query.poll === "1")
+            await l.tick().catch(() => { });
+        res.json({ goals: l.status(), adoptable: await l.adoptable().catch(() => []) });
+    }));
+    app.post("/api/projects/:id/team/landing/:action", withRuntime(async (rt, req, res) => {
+        const l = ctx.team.landingFor(rt);
+        const b = (req.body ?? {});
+        const runId = String(b.runId ?? "");
+        try {
+            let out = { ok: true };
+            const action = String(req.params.action);
+            if (action === "land") {
+                // a goal that moved to a runner is landed there (Phase 5)
+                out = rt.orchestra.get(runId)?.status === "moved" ? await ctx.team.landOnRunner(rt, runId) : await l.land(runId);
+            }
+            else if (action === "poll")
+                await l.tick();
+            else if (action === "review") {
+                const run = rt.orchestra.get(runId);
+                if (!run?.landing?.headSha)
+                    throw new Error("that goal has no PR commit to review yet");
+                await l.review(run, run.landing.headSha);
+                out = run.landing;
+            }
+            else if (action === "override")
+                out = await l.overrideReview(runId, String(b.reason ?? ""));
+            else if (action === "adopt")
+                out = await l.adopt(Number(b.pr), {
+                    ...(b.orchestrator ? { orchestrator: String(b.orchestrator) } : {}),
+                    ...(Array.isArray(b.workers) ? { workers: b.workers.map(String) } : {}),
+                });
+            else
+                return void res.status(404).json({ error: `unknown landing action "${action}"` });
+            res.json({ result: out, goals: l.status() });
+        }
+        catch (err) {
+            res.status(400).json({ error: err.message });
+        }
+    }));
+    // ---- deploys and release notes (Phase 5, daemon/deploys.ts) — read-only ----
+    app.get("/api/projects/:id/team/deploys", withRuntime(async (rt, _req, res) => {
+        try {
+            res.json({ deployments: await ctx.team.deploysFor(rt).list() });
+        }
+        catch (err) {
+            res.status(400).json({ error: err.message });
+        }
+    }));
+    app.get("/api/projects/:id/team/release-notes", withRuntime(async (rt, req, res) => {
+        try {
+            const since = String(req.query.since ?? "").trim();
+            if (!since)
+                throw new Error("since which tag or commit? ?since=v1.2.0");
+            res.json({ markdown: await ctx.team.deploysFor(rt).releaseNotes(since) });
+        }
+        catch (err) {
+            res.status(400).json({ error: err.message });
+        }
+    }));
+    // ---- runners (Phase 5, daemon/runner.ts) ----
+    // A project's view: runners that can take its goals, and the jobs in flight.
+    app.get("/api/projects/:id/team/runners", withRuntime(async (rt, _req, res) => {
+        try {
+            res.json(await ctx.team.runnersView(rt));
+        }
+        catch (err) {
+            res.status(400).json({ error: err.message });
+        }
+    }));
+    app.post("/api/projects/:id/team/runners/:action", withRuntime(async (rt, req, res) => {
+        const b = (req.body ?? {});
+        const str = (k) => (b[k] === undefined || b[k] === null || b[k] === "" ? undefined : String(b[k]));
+        try {
+            const action = String(req.params.action);
+            let out;
+            if (action === "start") {
+                out = await ctx.team.startOnRunner(rt, {
+                    goal: String(b.goal ?? ""),
+                    ...(str("orchestrator") ? { orchestrator: str("orchestrator") } : {}),
+                    ...(Array.isArray(b.workers) ? { workers: b.workers.map(String) } : {}),
+                    ...(b.plan ? { plan: true } : {}),
+                    ...(str("runner") ? { runner: str("runner") } : {}),
+                });
+            }
+            else if (action === "continue")
+                out = await ctx.team.continueOnRunner(rt, String(b.runId ?? ""), { ...(str("runner") ? { runner: str("runner") } : {}) });
+            else if (action === "bring-back")
+                out = await ctx.team.bringBack(rt, String(b.runId ?? ""));
+            else if (action === "land")
+                out = await ctx.team.landOnRunner(rt, String(b.runId ?? ""));
+            else
+                return void res.status(404).json({ error: `unknown runner action "${action}"` });
+            res.json({ result: out, ...(await ctx.team.runnersView(rt)) });
+        }
+        catch (err) {
+            res.status(400).json({ error: err.message });
+        }
+    }));
+    // Repo setup for landing safely (D62): report, and a fix PR on request.
+    app.get("/api/projects/:id/team/doctor", withRuntime(async (rt, _req, res) => {
+        try {
+            res.json(await ctx.team.landingFor(rt).doctor());
+        }
+        catch (err) {
+            res.status(400).json({ error: err.message });
+        }
+    }));
+    app.post("/api/projects/:id/team/doctor/fix", withRuntime(async (rt, _req, res) => {
+        try {
+            res.json(await ctx.team.landingFor(rt).doctorFix());
+        }
+        catch (err) {
+            res.status(400).json({ error: err.message });
+        }
+    }));
+}
+//# sourceMappingURL=project-team.js.map

package/dist/daemon/routes/project-team.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-team.js","sourceRoot":"","sources":["../../../src/daemon/routes/project-team.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEpC,oFAAoF;AACpF,MAAM,UAAU,yBAAyB,CAAC,GAAY,EAAE,GAA+B,EAAE,WAAwB;IAE/G,sDAAsD;IACtD,GAAG,CAAC,GAAG,CACL,+BAA+B,EAC/B,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAClC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CACH,CAAC;IAEF,mDAAmD;IACnD,yEAAyE;IACzE,0EAA0E;IAC1E,GAAG,CAAC,GAAG,CACL,8BAA8B,EAC9B,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAClC,kEAAkE;QAClE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5G,CAAC,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,8BAA8B,EAC9B,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAwB,CAAC;YAClD,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,MAAM,CACR,8BAA8B,EAC9B,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAClC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CACH,CAAC;IAEF,wEAAwE;IACxE,4EAA4E;IAC5E,+BAA+B;IAC/B,GAAG,CAAC,GAAG,CACL,8BAA8B,EAC9B,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG;YAAE,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE;YACnB,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,GAAG,EAAE,CAAC;YAC7D,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE;SAClB,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,sCAAsC,EACtC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;QACtD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE;YACxB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACxC,OAAO,CAAC,CAAC;QACX,CAAC,CAAC;QACF,IAAI,CAAC;YACH,IAAI,GAAG,GAAY,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,MAAM,KAAK,MAAM;gBAAE,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;iBAClC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBACnE,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,CAAC;iBAAM,IAAI,MAAM,KAAK,SAAS;gBAAE,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;iBAC3E,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;iBAChG,IAAI,MAAM,KAAK,OAAO;gBAAE,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;iBAChF,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACpD,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;gBACrB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC9D,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;gBAC7F,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;YAClB,CAAC;;gBAAM,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,MAAM,GAAG,EAAE,CAAC,CAAC;YAC5F,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,8DAA8D;IAC9D,qEAAqE;IACrE,gEAAgE;IAChE,GAAG,CAAC,GAAG,CACL,gCAAgC,EAChC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG;YAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5D,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,wCAAwC,EACxC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,IAAI,GAAG,GAAY,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,0DAA0D;gBAC1D,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnH,CAAC;iBACI,IAAI,MAAM,KAAK,MAAM;gBAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;iBACtC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACpC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBACxF,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACzC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC;YACpB,CAAC;iBAAM,IAAI,MAAM,KAAK,UAAU;gBAAE,GAAG,GAAG,MAAM,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;iBACzF,IAAI,MAAM,KAAK,OAAO;gBAAE,GAAG,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;oBAC7D,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxE,CAAC,CAAC;;gBACE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,MAAM,GAAG,EAAE,CAAC,CAAC;YACvF,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,+EAA+E;IAC/E,GAAG,CAAC,GAAG,CACL,gCAAgC,EAChC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,sCAAsC,EACtC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACnD,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACxE,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,gDAAgD;IAChD,6EAA6E;IAC7E,GAAG,CAAC,GAAG,CACL,gCAAgC,EAChC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,wCAAwC,EACxC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;QACtD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3G,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,GAAY,CAAC;YACjB,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE;oBACrC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;oBAC1B,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,cAAc,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrD,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,MAAM,KAAK,UAAU;gBAAE,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;iBACxJ,IAAI,MAAM,KAAK,YAAY;gBAAE,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;iBACvF,IAAI,MAAM,KAAK,MAAM;gBAAE,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;;gBACpF,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,MAAM,GAAG,EAAE,CAAC,CAAC;YACtF,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,wEAAwE;IACxE,GAAG,CAAC,GAAG,CACL,+BAA+B,EAC/B,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,mCAAmC,EACnC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}