@mcoda/codali 0.1.134 → 0.1.135-codali.4

package/dist/runtime/WorkspaceSnapshot.d.ts

@@ -0,0 +1,13 @@
+export interface WorkspaceSnapshot {
+    git: boolean;
+    head?: string;
+    hashes: Record<string, string>;
+    dirtyPaths: string[];
+}
+export declare const workspaceGit: (root: string, args: string[]) => Promise<string>;
+export declare const workspaceHash: (value: string | Buffer) => string;
+/** The same content identity is used by baselines, validation and completion. */
+export declare const hashWorkspacePath: (root: string, relative: string) => Promise<string>;
+export declare const captureWorkspace: (root: string) => Promise<WorkspaceSnapshot>;
+export declare const changedWorkspacePaths: (before: WorkspaceSnapshot, after: WorkspaceSnapshot) => string[];
+//# sourceMappingURL=WorkspaceSnapshot.d.ts.map

package/dist/runtime/WorkspaceSnapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkspaceSnapshot.d.ts","sourceRoot":"","sources":["../../src/runtime/WorkspaceSnapshot.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,iBAAiB;IAAG,GAAG,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;CAAE;AACzH,eAAO,MAAM,YAAY,GAAI,MAAM,MAAM,EAAE,MAAM,MAAM,EAAE,KAAG,OAAO,CAAC,MAAM,CAKxE,CAAC;AACH,eAAO,MAAM,aAAa,GAAI,OAAO,MAAM,GAAG,MAAM,KAAG,MAA0D,CAAC;AAClH,iFAAiF;AACjF,eAAO,MAAM,iBAAiB,GAAU,MAAM,MAAM,EAAE,UAAU,MAAM,KAAG,OAAO,CAAC,MAAM,CAuBtF,CAAC;AACF,eAAO,MAAM,gBAAgB,GAAU,MAAM,MAAM,KAAG,OAAO,CAAC,iBAAiB,CA+B9E,CAAC;AACF,eAAO,MAAM,qBAAqB,GAAI,QAAQ,iBAAiB,EAAE,OAAO,iBAAiB,KAAG,MAAM,EACsC,CAAC"}

package/dist/runtime/WorkspaceSnapshot.js

@@ -0,0 +1,88 @@
+import { createHash } from "node:crypto";
+import { constants, promises as fs } from "node:fs";
+import path from "node:path";
+import { execFile } from "node:child_process";
+export const workspaceGit = (root, args) => new Promise((resolve, reject) => {
+    execFile("git", ["--no-optional-locks", "-c", "core.fsmonitor=false", ...args], {
+        cwd: root, timeout: 15000, maxBuffer: 8 * 1024 * 1024,
+        env: { PATH: process.env.PATH, LANG: "C", GIT_CONFIG_NOSYSTEM: "1", GIT_CONFIG_GLOBAL: "/dev/null", GIT_TERMINAL_PROMPT: "0" },
+    }, (error, output) => error ? reject(new Error(`Git inspection failed (${error.code ?? "unknown"})`)) : resolve(output));
+});
+export const workspaceHash = (value) => createHash("sha256").update(value).digest("hex");
+/** The same content identity is used by baselines, validation and completion. */
+export const hashWorkspacePath = async (root, relative) => {
+    root = await fs.realpath(root);
+    const file = path.resolve(root, relative);
+    if (!file.startsWith(`${root}${path.sep}`))
+        throw new Error("Unsafe workspace inventory path");
+    try {
+        const parent = await fs.realpath(path.dirname(file));
+        if (parent !== root && !parent.startsWith(`${root}${path.sep}`))
+            throw new Error("Workspace parent symlink escapes the repository");
+        const stat = await fs.lstat(file);
+        if (stat.isSymbolicLink())
+            return `symlink:${await fs.readlink(file)}`;
+        if (!stat.isFile())
+            return `directory:${stat.ino}`;
+        const handle = await fs.open(file, constants.O_RDONLY | constants.O_NOFOLLOW);
+        try {
+            const before = await handle.stat();
+            const digest = createHash("sha256");
+            for await (const chunk of handle.createReadStream({ autoClose: false }))
+                digest.update(chunk);
+            const after = await handle.stat();
+            if (before.ino !== stat.ino || before.size !== after.size || before.mtimeMs !== after.mtimeMs || before.ctimeMs !== after.ctimeMs)
+                throw new Error(`Workspace file changed during inspection: ${relative}`);
+            return digest.digest("hex");
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return "missing";
+        throw error;
+    }
+};
+export const captureWorkspace = async (root) => {
+    root = await fs.realpath(root);
+    const snapshot = { git: true, hashes: {}, dirtyPaths: [] };
+    let files;
+    try {
+        files = (await workspaceGit(root, ["ls-files", "-z", "--cached", "--others", "--exclude-standard"])).split("\0").filter(Boolean);
+        snapshot.head = await workspaceGit(root, ["rev-parse", "HEAD"]).then(v => v.trim()).catch(() => "unborn");
+        const dirty = await Promise.all([
+            workspaceGit(root, ["diff", "--relative", "--no-ext-diff", "--no-textconv", "--name-only", "-z"]),
+            workspaceGit(root, ["diff", "--cached", "--relative", "--no-ext-diff", "--no-textconv", "--name-only", "-z"]),
+            workspaceGit(root, ["ls-files", "--others", "--exclude-standard", "-z"]),
+        ]);
+        snapshot.dirtyPaths = [...new Set(dirty.flatMap(value => value.split("\0").filter(Boolean)))].sort();
+    }
+    catch {
+        snapshot.git = false;
+        files = [];
+        const walk = async (directory) => {
+            for (const entry of await fs.readdir(path.join(root, directory), { withFileTypes: true })) {
+                if ([".git", "node_modules", ".docdex", ".mcoda", ".codali", "dist", "build"].includes(entry.name))
+                    continue;
+                const relative = path.join(directory, entry.name);
+                if (entry.isDirectory())
+                    await walk(relative);
+                else
+                    files.push(relative);
+                if (files.length > 20000)
+                    throw new Error("Workspace inventory exceeds 20000 files; narrow the workspace");
+            }
+        };
+        await walk("");
+    }
+    files = [...new Set(files)].filter(file => !/^(?:\.docdex|\.mcoda|\.codali)\//.test(file));
+    if (files.length > 20000)
+        throw new Error("Workspace inventory exceeds 20000 files; narrow the workspace");
+    for (const relative of files) {
+        snapshot.hashes[relative] = await hashWorkspacePath(root, relative);
+    }
+    return snapshot;
+};
+export const changedWorkspacePaths = (before, after) => [...new Set([...Object.keys(before.hashes), ...Object.keys(after.hashes)])].filter(file => before.hashes[file] !== after.hashes[file]);

package/dist/session/AtomicState.d.ts

@@ -0,0 +1,13 @@
+/** Windows cannot flush a directory handle through Node's fsync. File contents
+ * are still flushed before publication; POSIX directory durability is retained. */
+export declare const syncStateDirectory: (directory: string) => Promise<void>;
+export declare const atomicWriteJson: (file: string, value: unknown) => Promise<void>;
+/** Probe an execution lock without relying on process IDs or waiting behind a live owner. */
+export declare const tryStateLock: <T>(file: string, operation: () => Promise<T>) => Promise<{
+    acquired: false;
+} | {
+    acquired: true;
+    value: T;
+}>;
+export declare const withStateLock: <T>(file: string, operation: () => Promise<T>, timeoutMs?: number) => Promise<T>;
+//# sourceMappingURL=AtomicState.d.ts.map

package/dist/session/AtomicState.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AtomicState.d.ts","sourceRoot":"","sources":["../../src/session/AtomicState.ts"],"names":[],"mappings":"AAMA;mFACmF;AACnF,eAAO,MAAM,kBAAkB,GAAU,WAAW,MAAM,KAAG,OAAO,CAAC,IAAI,CAOxE,CAAC;AAEF,eAAO,MAAM,eAAe,GAAU,MAAM,MAAM,EAAE,OAAO,OAAO,KAAG,OAAO,CAAC,IAAI,CAyBhF,CAAC;AAIF,6FAA6F;AAC7F,eAAO,MAAM,YAAY,GAAU,CAAC,EAAE,MAAM,MAAM,EAAE,WAAW,MAAM,OAAO,CAAC,CAAC,CAAC,KAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,GAAG;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,CAK3I,CAAC;AACF,eAAO,MAAM,aAAa,GAAU,CAAC,EAAE,MAAM,MAAM,EAAE,WAAW,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,kBAAkB,KAAG,OAAO,CAAC,CAAC,CAS/G,CAAC"}

package/dist/session/AtomicState.js

@@ -0,0 +1,123 @@
+import { randomUUID } from "node:crypto";
+import { promises as fs } from "node:fs";
+import path from "node:path";
+import { Connection } from "@mcoda/db";
+import { assertRegularStateFile } from "./SessionStoragePath.js";
+/** Windows cannot flush a directory handle through Node's fsync. File contents
+ * are still flushed before publication; POSIX directory durability is retained. */
+export const syncStateDirectory = async (directory) => {
+    const handle = await fs.open(directory, "r");
+    try {
+        await handle.sync();
+    }
+    catch (error) {
+        const code = error.code ?? "";
+        if (!["EINVAL", "ENOTSUP"].includes(code) && !(process.platform === "win32" && code === "EPERM"))
+            throw error;
+    }
+    finally {
+        await handle.close();
+    }
+};
+export const atomicWriteJson = async (file, value) => {
+    await assertRegularStateFile(file);
+    await fs.mkdir(path.dirname(file), { recursive: true, mode: 0o700 });
+    const temporary = `${file}.${randomUUID()}.tmp`;
+    const handle = await fs.open(temporary, "wx", 0o600);
+    try {
+        await handle.writeFile(`${JSON.stringify(value, null, 2)}\n`, "utf8");
+        await handle.sync();
+        await handle.close();
+        // A concurrent Windows reader or scanner can briefly deny replacement.
+        // Retry the same atomic rename; never remove the previous durable state.
+        for (let attempt = 0;; attempt++) {
+            try {
+                await fs.rename(temporary, file);
+                break;
+            }
+            catch (error) {
+                const code = error.code ?? "";
+                if (process.platform !== "win32" || !["EPERM", "EACCES", "EBUSY"].includes(code) || attempt >= 7)
+                    throw error;
+                await assertRegularStateFile(file);
+                await new Promise(resolve => setTimeout(resolve, Math.min(20 * 2 ** attempt, 160)));
+            }
+        }
+        await syncStateDirectory(path.dirname(file));
+    }
+    finally {
+        await handle.close().catch(() => undefined);
+        await fs.unlink(temporary).catch(() => undefined);
+    }
+};
+/** Short storage transaction lock. Never hold across inference or tool execution. */
+const localTransactions = new Map();
+/** Probe an execution lock without relying on process IDs or waiting behind a live owner. */
+export const tryStateLock = async (file, operation) => {
+    if (localTransactions.has(file))
+        return { acquired: false };
+    let entered = false;
+    try {
+        return { acquired: true, value: await withStateLock(file, async () => { entered = true; return operation(); }, 0) };
+    }
+    catch (error) {
+        if (!entered && error.code === "SQLITE_BUSY")
+            return { acquired: false };
+        throw error;
+    }
+};
+export const withStateLock = async (file, operation, timeoutMs = 10000) => {
+    const previous = localTransactions.get(file) ?? Promise.resolve();
+    let release;
+    const next = new Promise(resolve => { release = resolve; });
+    const tail = previous.then(() => next);
+    localTransactions.set(file, tail);
+    await previous;
+    try {
+        return await transact(file, operation, timeoutMs);
+    }
+    finally {
+        release();
+        if (localTransactions.get(file) === tail)
+            localTransactions.delete(file);
+    }
+};
+const transact = async (file, operation, timeoutMs) => {
+    await fs.mkdir(path.dirname(file), { recursive: true, mode: 0o700 });
+    // Reuse mcoda's SQLite dependency for an OS-owned transaction lock. A killed
+    // process releases it automatically, without PID reuse or stale recovery files.
+    const databasePath = `${file}.transactions.sqlite`;
+    for (const suffix of ["", "-wal", "-shm", "-journal"])
+        await assertRegularStateFile(databasePath + suffix);
+    const connection = await Connection.open(databasePath);
+    try {
+        await fs.chmod(databasePath, 0o600);
+        // Do not park SQLite busy handlers on libuv threads needed by the owner to
+        // finish its filesystem transaction. Retry asynchronously across processes.
+        await connection.db.exec("PRAGMA busy_timeout = 0;");
+        const deadline = Date.now() + timeoutMs;
+        while (true) {
+            try {
+                await connection.db.exec("BEGIN IMMEDIATE;");
+                break;
+            }
+            catch (error) {
+                if (error.code !== "SQLITE_BUSY" || Date.now() >= deadline)
+                    throw error;
+                await new Promise(resolve => setTimeout(resolve, 20));
+            }
+        }
+        try {
+            const result = await operation();
+            await connection.db.exec("COMMIT;");
+            return result;
+        }
+        catch (error) {
+            await connection.db.exec("ROLLBACK;").catch(() => undefined);
+            throw error;
+        }
+    }
+    finally {
+        await connection.close();
+    }
+};

package/dist/session/SessionStoragePath.d.ts

@@ -0,0 +1,15 @@
+/** Existing state files must not alias another file or an external endpoint. */
+export declare function assertRegularStateFile(file: string): Promise<void>;
+/** Resolve trusted outer aliases (e.g. macOS /var) once, then reject symlinks
+ * beneath the storage boundary. The terminal sandbox prevents model processes
+ * from replacing these parents; this is not isolation from a hostile OS user. */
+export declare function sessionStoragePath(options: {
+    workspaceRoot: string;
+    storageRoot: string;
+    file: string;
+    allowExternal: boolean;
+    createParents?: boolean;
+    directory?: boolean;
+}): Promise<string>;
+export declare function readStateFile(file: string): Promise<string>;
+//# sourceMappingURL=SessionStoragePath.d.ts.map

package/dist/session/SessionStoragePath.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionStoragePath.d.ts","sourceRoot":"","sources":["../../src/session/SessionStoragePath.ts"],"names":[],"mappings":"AAGA,gFAAgF;AAChF,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKxE;AAED;;iFAEiF;AACjF,wBAAsB,kBAAkB,CAAC,OAAO,EAAE;IAChD,aAAa,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;CAChI,GAAG,OAAO,CAAC,MAAM,CAAC,CAuClB;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOjE"}

package/dist/session/SessionStoragePath.js

@@ -0,0 +1,89 @@
+import { constants, promises as fs } from "node:fs";
+import path from "node:path";
+/** Existing state files must not alias another file or an external endpoint. */
+export async function assertRegularStateFile(file) {
+    try {
+        const stat = await fs.lstat(file);
+        if (!stat.isFile() || stat.isSymbolicLink() || stat.nlink !== 1)
+            throw new Error(`Unsafe session state file: ${path.basename(file)}`);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+}
+/** Resolve trusted outer aliases (e.g. macOS /var) once, then reject symlinks
+ * beneath the storage boundary. The terminal sandbox prevents model processes
+ * from replacing these parents; this is not isolation from a hostile OS user. */
+export async function sessionStoragePath(options) {
+    const workspace = path.resolve(options.workspaceRoot);
+    const root = path.resolve(options.storageRoot);
+    const file = path.resolve(options.file);
+    const inside = (base, target) => target === base || target.startsWith(`${base}${path.sep}`);
+    if (!inside(root, file))
+        throw new Error("Session state path escapes its storage root");
+    let anchor;
+    if (inside(workspace, root))
+        anchor = workspace;
+    else {
+        if (!options.allowExternal)
+            throw new Error("Session storage path is outside workspace root");
+        // Only the host can select this external boundary. Existing outer aliases
+        // are trusted, while the root and all descendants must be real directories.
+        anchor = path.dirname(root);
+        while (true) {
+            try {
+                await fs.realpath(anchor);
+                break;
+            }
+            catch (error) {
+                if (error.code !== "ENOENT" || path.dirname(anchor) === anchor)
+                    throw error;
+                anchor = path.dirname(anchor);
+            }
+        }
+    }
+    let canonical = await fs.realpath(anchor);
+    const directory = options.directory ? file : path.dirname(file);
+    const relative = path.relative(anchor, directory);
+    if (relative === ".." || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative))
+        throw new Error("Invalid session storage boundary");
+    for (const component of relative.split(path.sep).filter(Boolean)) {
+        canonical = path.join(canonical, component);
+        let stat;
+        try {
+            stat = await fs.lstat(canonical);
+        }
+        catch (error) {
+            if (error.code !== "ENOENT" || !options.createParents)
+                throw error;
+            try {
+                await fs.mkdir(canonical, { mode: 0o700 });
+            }
+            catch (creation) {
+                if (creation.code !== "EEXIST")
+                    throw creation;
+            }
+            stat = await fs.lstat(canonical);
+        }
+        if (!stat.isDirectory() || stat.isSymbolicLink())
+            throw new Error("Unsafe session storage directory");
+    }
+    if (options.directory)
+        return canonical;
+    const resolved = path.join(canonical, path.basename(file));
+    await assertRegularStateFile(resolved);
+    return resolved;
+}
+export async function readStateFile(file) {
+    const handle = await fs.open(file, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const stat = await handle.stat();
+        if (!stat.isFile() || stat.nlink !== 1)
+            throw new Error("Unsafe session state file");
+        return await handle.readFile("utf8");
+    }
+    finally {
+        await handle.close();
+    }
+}

package/dist/session/SessionStore.d.ts

@@ -1,3 +1,4 @@
+import type { WorkState } from "./WorkTypes.js";
 export type CodaliSessionStatus = "active" | "paused" | "completed" | "failed";
 export interface CodaliSessionMetadata {
     schemaVersion: 1;
@@ -40,6 +41,8 @@ export interface CodaliResumeBundle {
 export interface SessionStoreOptions {
     workspaceRoot: string;
     storageDir?: string;
+    /** Trusted host-only option. Repository configuration must never set this. */
+    allowExternalStorage?: boolean;
 }
 export interface CreateSessionInput {
     sessionId?: string;
@@ -55,8 +58,10 @@ export declare class SessionStore {
     readonly workspaceRoot: string;
     readonly storageDir: string;
     private lastTimestampMs;
+    private readonly allowExternalStorage;
     constructor(options: SessionStoreOptions);
     private rootDir;
+    private checkedPath;
     private sessionDir;
     private metadataPath;
     private transcriptPath;
@@ -66,6 +71,7 @@ export declare class SessionStore {
     readSession(sessionId: string): Promise<CodaliSessionMetadata>;
     getOrCreateSession(input: CreateSessionInput): Promise<CodaliSessionMetadata>;
     updateSession(sessionId: string, patch: Partial<Omit<CodaliSessionMetadata, "schemaVersion" | "sessionId" | "createdAt">>): Promise<CodaliSessionMetadata>;
+    private mutateSession;
     addRun(sessionId: string, runId: string): Promise<CodaliSessionMetadata>;
     appendTranscript(sessionId: string, event: Omit<CodaliSessionTranscriptEvent, "schemaVersion" | "sessionId" | "timestamp"> & {
         timestamp?: string;
@@ -77,5 +83,8 @@ export declare class SessionStore {
     buildResumeBundle(sessionId: string, options?: {
         recentEvents?: number;
     }): Promise<CodaliResumeBundle>;
+    initializeWork(sessionId: string, objective: string): Promise<WorkState>;
+    readWork(sessionId: string): Promise<WorkState>;
+    updateWork(sessionId: string, expectedRevision: number, mutate: (state: WorkState) => void): Promise<WorkState>;
 }
 //# sourceMappingURL=SessionStore.d.ts.map

package/dist/session/SessionStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SessionStore.d.ts","sourceRoot":"","sources":["../../src/session/SessionStore.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE/E,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,mBAAmB,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,gCAAgC,GACxC,aAAa,GACb,kBAAkB,GAClB,mBAAmB,GACnB,aAAa,GACb,iBAAiB,GACjB,iBAAiB,GACjB,OAAO,GACP,OAAO,GACP,MAAM,CAAC;AAEX,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,gCAAgC,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,qBAAqB,CAAC;IAChC,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,YAAY,EAAE,4BAA4B,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAmED,qBAAa,YAAY;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,eAAe,CAAK;gBAEhB,OAAO,EAAE,mBAAmB;IAKxC,OAAO,CAAC,OAAO;IASf,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,gBAAgB;IAWlB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAwBxE,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAK9D,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAa7E,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE,eAAe,GAAG,WAAW,GAAG,WAAW,CAAC,CAAC,GACvF,OAAO,CAAC,qBAAqB,CAAC;IAgB3B,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAMxE,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,IAAI,CAAC,4BAA4B,EAAE,eAAe,GAAG,WAAW,GAAG,WAAW,CAAC,GAAG;QACvF,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GACA,OAAO,CAAC,4BAA4B,CAAC;IAgBlC,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,4BAA4B,EAAE,CAAC;IAY1E,YAAY,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAqBhD,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAwBhE,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IAQ/E,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAO,GACtC,OAAO,CAAC,kBAAkB,CAAC;CAU/B"}
+{"version":3,"file":"SessionStore.d.ts","sourceRoot":"","sources":["../../src/session/SessionStore.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGhD,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE/E,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,mBAAmB,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,gCAAgC,GACxC,aAAa,GACb,kBAAkB,GAClB,mBAAmB,GACnB,aAAa,GACb,iBAAiB,GACjB,iBAAiB,GACjB,OAAO,GACP,OAAO,GACP,MAAM,CAAC;AAEX,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,gCAAgC,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,qBAAqB,CAAC;IAChC,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,YAAY,EAAE,4BAA4B,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8EAA8E;IAC9E,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAgGD,qBAAa,YAAY;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAU;gBAEnC,OAAO,EAAE,mBAAmB;IAMxC,OAAO,CAAC,OAAO;IASf,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,gBAAgB;IAWlB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IA4BxE,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAK9D,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAa7E,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE,eAAe,GAAG,WAAW,GAAG,WAAW,CAAC,CAAC,GACvF,OAAO,CAAC,qBAAqB,CAAC;YAInB,aAAa;IAwBrB,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAIxE,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,IAAI,CAAC,4BAA4B,EAAE,eAAe,GAAG,WAAW,GAAG,WAAW,CAAC,GAAG;QACvF,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GACA,OAAO,CAAC,4BAA4B,CAAC;IAiClC,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,4BAA4B,EAAE,CAAC;IAY1E,YAAY,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAqBhD,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAqBhE,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IAU/E,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAO,GACtC,OAAO,CAAC,kBAAkB,CAAC;IAWxB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAYxE,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAM/C,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC;CAetH"}