@oharness/server 0.9.2 → 0.10.0

package/dist/remote.js

@@ -0,0 +1,498 @@
+import { randomBytes } from "node:crypto";
+import { MacHandshake, SealedSession, b64, loadIdentity, newIdentity, readHello } from "./remote-crypto.js";
+import { hostname } from "node:os";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { userPath } from "@oharness/engine/paths.ts";
+/**
+ * Remote control: this machine, reachable from a phone through the relay.
+ *
+ * The Mac dials out — it never listens on anything but loopback — and holds
+ * one WebSocket to the relay while remote is on. A phone on the same account
+ * opens a channel to it; each request that arrives on the channel is replayed
+ * against this process's own HTTP server, so the phone speaks exactly the
+ * routes the page speaks and there is no second API to keep in step.
+ *
+ * A channel is useless until its handshake (remote-crypto.ts) finishes: the
+ * phone proves which device it is, the Mac proves it is this Mac, and every
+ * frame after that is sealed end to end. A phone this Mac has not seen before
+ * is then held until someone at the Mac allows it — the same account is what
+ * gets a phone to the door, and the Allow is what opens it. Both screens show
+ * a six-digit code derived from the handshake, so a relay that put itself in
+ * the middle would be caught by two codes that disagree.
+ *
+ * Once a channel is ready, inside each sealed frame:
+ *
+ *   ← {pair: "ok"} | {pair: "pending", code} | {pair: "denied"}
+ *   → {id, method, path, query?, body?}    ← {id, status, body}
+ *   → {id, subscribe: "/events"}           ← {sub: id, event} …  ← {sub: id, end: true}
+ *   → {id, unsubscribe: <sub id>}          ← {id, status: 200, body: {ok: true}}
+ */
+/**
+ * What a phone may ask for. Chat and its controls, read-only views of what the
+ * agent produced — not the terminal, the browser, the file system, settings,
+ * sign-in or computer use. A route not here is refused before anything runs.
+ */
+export const REMOTE_ROUTES = new Set([
+    "GET /state",
+    "GET /sessions",
+    "GET /open",
+    "GET /history",
+    "GET /projects",
+    "GET /models",
+    "GET /changes",
+    "GET /artifacts",
+    "GET /usage",
+    "GET /context",
+    "GET /provider-icon",
+    "POST /session",
+    "POST /prompt",
+    "POST /permission",
+    "POST /question",
+    "POST /interrupt",
+    "POST /unqueue",
+    "POST /sendnow",
+    "POST /mode",
+    "POST /effort",
+    "POST /upload",
+    "POST /upload/drop",
+    "POST /model",
+    // Background tasks: the list, one task's conversation, and stopping,
+    // dismissing or messaging one — the same reach over a conversation's work
+    // as /prompt and /interrupt, and the page's own routes for it.
+    "GET /tasks",
+    "GET /task",
+    "POST /task",
+]);
+/** Subscriptions a phone may hold: the event stream the page itself listens to. */
+const REMOTE_STREAMS = new Set(["/events"]);
+/** `POST /session` does more than open and switch; a phone gets those two only. */
+const SESSION_ACTIONS = new Set(["resume", "new", "focus"]);
+/** The relay a Mac dials when nothing names another. */
+export const DEFAULT_RELAY = "wss://relay.oharness.ai/v1/connect";
+/**
+ * Where remote control connects, and whether this run is told to use it
+ * whatever the setting says.
+ *
+ * OHARNESS_REMOTE_RELAY names another relay for development (a local one is
+ * `ws://127.0.0.1:4490/v1/connect`) and, as it did before there was a switch,
+ * turns remote on by itself. Without it the relay is ours and the switch in
+ * Settings decides.
+ */
+export function remoteRelay(env = process.env) {
+    const named = env["OHARNESS_REMOTE_RELAY"]?.trim();
+    return named ? { relay: named, always: true } : { relay: DEFAULT_RELAY, always: false };
+}
+const MAX_BACKOFF_MS = 30_000;
+const NO_TOKEN_RETRY_MS = 5_000;
+const remoteFile = () => userPath("remote.json");
+async function readRemoteFile() {
+    try {
+        return JSON.parse(await readFile(remoteFile(), "utf8"));
+    }
+    catch {
+        return {};
+    }
+}
+async function writeRemoteFile(value) {
+    await mkdir(path.dirname(remoteFile()), { recursive: true });
+    // 0600: it holds this Mac's private identity key.
+    await writeFile(remoteFile(), JSON.stringify(value, null, 2) + "\n", { mode: 0o600 });
+}
+/**
+ * This Mac's id and identity for remote control, made on first use and kept
+ * in ~/.oharness/remote.json. The identity is what a phone pins: replacing it
+ * makes every paired phone refuse this Mac until it is paired again.
+ */
+export async function remoteMachine() {
+    const stored = await readRemoteFile();
+    let id = typeof stored.machineId === "string" && /^[A-Za-z0-9_-]{8,64}$/.test(stored.machineId) ? stored.machineId : "";
+    let identity;
+    try {
+        if (typeof stored.identity === "string")
+            identity = loadIdentity(stored.identity);
+    }
+    catch {
+        identity = undefined;
+    }
+    if (!id || !identity) {
+        id ||= `mac-${randomBytes(12).toString("base64url")}`;
+        const made = identity ? undefined : newIdentity();
+        identity ??= made.identity;
+        await writeRemoteFile({ ...stored, machineId: id, ...(made ? { identity: made.pkcs8, devices: [] } : {}) });
+    }
+    return { machine: { id, name: hostname().replace(/\.local$/, "") }, identity };
+}
+export async function pairedDevices() {
+    const stored = await readRemoteFile();
+    if (!Array.isArray(stored.devices))
+        return [];
+    return stored.devices.filter((d) => !!d && typeof d === "object" && typeof d.id === "string" && typeof d.publicKey === "string");
+}
+async function savePairedDevice(device) {
+    const stored = await readRemoteFile();
+    const others = (await pairedDevices()).filter((d) => d.id !== device.id);
+    await writeRemoteFile({ ...stored, devices: [...others, device] });
+}
+export async function revokeDevice(id) {
+    const stored = await readRemoteFile();
+    const devices = await pairedDevices();
+    const kept = devices.filter((d) => d.id !== id);
+    if (kept.length === devices.length)
+        return false;
+    await writeRemoteFile({ ...stored, devices: kept });
+    return true;
+}
+export function startRemote(options) {
+    const log = options.log ?? (() => { });
+    const local = new URL(options.local);
+    const localToken = local.searchParams.get("token") ?? "";
+    const channels = new Map();
+    let socket;
+    let connected = false;
+    let stopped = false;
+    let signedOut = false;
+    let backoff = 1000;
+    let retry;
+    function relaySend(message) {
+        if (socket?.readyState === WebSocket.OPEN)
+            socket.send(JSON.stringify(message));
+    }
+    /** A sealed frame to a phone. Nothing but the handshake ever goes out in the clear. */
+    function reply(channelId, message) {
+        const sealed = channels.get(channelId)?.sealed;
+        if (sealed)
+            relaySend({ t: "data", channel: channelId, data: sealed.seal(message) });
+    }
+    function closeChannel(id) {
+        const channel = channels.get(id);
+        if (!channel)
+            return;
+        for (const controller of channel.subscriptions.values())
+            controller.abort();
+        if (channel.waiting) {
+            channel.waiting.abort();
+            options.withdrawn?.(id);
+        }
+        channels.delete(id);
+    }
+    /** Ends a channel this side no longer trusts, and tells the relay so the phone hears it. */
+    function drop(id, why) {
+        log(`remote: closed a channel — ${why}`);
+        closeChannel(id);
+        relaySend({ t: "close", channel: id });
+    }
+    async function forward(request) {
+        const method = String(request.method ?? "GET").toUpperCase();
+        const route = String(request.path ?? "");
+        if (!REMOTE_ROUTES.has(`${method} ${route}`)) {
+            return { status: 403, body: { error: `${method} ${route} is not available remotely` } };
+        }
+        if (route === "/session") {
+            const action = request.body?.action;
+            if (typeof action !== "string" || !SESSION_ACTIONS.has(action)) {
+                return { status: 403, body: { error: "that session action is not available remotely" } };
+            }
+        }
+        // Running with no approvals at all is a decision made at the Mac, not from a phone.
+        if (route === "/mode" && request.body?.mode === "bypassPermissions") {
+            return { status: 403, body: { error: "bypass mode can only be turned on at the Mac" } };
+        }
+        const url = new URL(route, local.origin);
+        for (const [key, value] of Object.entries(request.query ?? {})) {
+            if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
+                url.searchParams.set(key, String(value));
+            }
+        }
+        // A file from the phone rides the JSON frame as base64; the upload route
+        // takes it as the raw bytes a browser would send, with its name and type.
+        const upload = route === "/upload" ? request.body : undefined;
+        if (upload && typeof upload.base64 !== "string") {
+            return { status: 400, body: { error: "upload needs base64" } };
+        }
+        const response = await fetch(url, {
+            method,
+            headers: {
+                authorization: `Bearer ${localToken}`,
+                ...(upload
+                    ? {
+                        "content-type": typeof upload.type === "string" ? upload.type : "application/octet-stream",
+                        // A header carries ASCII only; the page sends names the same way.
+                        "x-filename": typeof upload.name === "string" ? upload.name.replace(/[^\x20-\x7e]/g, "_").slice(0, 200) : "file",
+                    }
+                    : method === "POST" ? { "content-type": "application/json" } : {}),
+            },
+            ...(upload
+                ? { body: Buffer.from(upload.base64, "base64") }
+                : method === "POST" ? { body: JSON.stringify(request.body ?? {}) } : {}),
+            signal: AbortSignal.timeout(60_000),
+        });
+        // An image (a vendor's icon) cannot ride in a JSON frame as it is.
+        const type = response.headers.get("content-type") ?? "";
+        if (type.startsWith("image/")) {
+            const bytes = Buffer.from(await response.arrayBuffer());
+            return { status: response.status, body: { type, base64: bytes.toString("base64") } };
+        }
+        const text = await response.text();
+        let body = text;
+        try {
+            body = text ? JSON.parse(text) : null;
+        }
+        catch {
+            // Not JSON: handed over as the text it is.
+        }
+        return { status: response.status, body };
+    }
+    /** Relay one SSE stream from the local server, event by event, until aborted. */
+    async function subscribe(channelId, channel, id, route) {
+        const controller = new AbortController();
+        channel.subscriptions.set(id, controller);
+        try {
+            const response = await fetch(new URL(route, local.origin), {
+                headers: { authorization: `Bearer ${localToken}`, accept: "text/event-stream" },
+                signal: controller.signal,
+            });
+            if (!response.ok || !response.body)
+                throw new Error(`HTTP ${response.status}`);
+            const decoder = new TextDecoder();
+            let buffered = "";
+            for await (const chunk of response.body) {
+                buffered += decoder.decode(chunk, { stream: true });
+                let boundary;
+                while ((boundary = buffered.indexOf("\n\n")) >= 0) {
+                    const block = buffered.slice(0, boundary);
+                    buffered = buffered.slice(boundary + 2);
+                    const data = block
+                        .split("\n")
+                        .filter((line) => line.startsWith("data:"))
+                        .map((line) => line.slice(5).replace(/^ /, ""))
+                        .join("\n");
+                    if (!data)
+                        continue;
+                    let event;
+                    try {
+                        event = JSON.parse(data);
+                    }
+                    catch {
+                        continue; // A line that is not JSON is not an event the page would act on either.
+                    }
+                    // Another phone's pairing, code and all, is the Mac's business, not this phone's.
+                    if (typeof event.type === "string" && event.type.startsWith("remote_"))
+                        continue;
+                    reply(channelId, { sub: id, event });
+                }
+            }
+            reply(channelId, { sub: id, end: true });
+        }
+        catch (err) {
+            if (!controller.signal.aborted) {
+                reply(channelId, { sub: id, end: true, error: err instanceof Error ? err.message : String(err) });
+            }
+        }
+        finally {
+            channel.subscriptions.delete(id);
+        }
+    }
+    /**
+     * One frame from a phone. Synchronous up to the point a request is handed
+     * off, because sealed frames carry counters that must be opened in the
+     * order they arrived.
+     */
+    function onData(channelId, raw) {
+        const channel = channels.get(channelId);
+        if (!channel)
+            return;
+        try {
+            switch (channel.stage) {
+                case "hello": {
+                    const hello = readHello(JSON.parse(raw));
+                    if (hello.device.id !== channel.announced.id)
+                        throw new Error("the hello names a different device");
+                    channel.handshake = new MacHandshake(channelId, hello, options.identity);
+                    channel.stage = "proof";
+                    relaySend({ t: "data", channel: channelId, data: JSON.stringify(channel.handshake.welcome()) });
+                    return;
+                }
+                case "proof": {
+                    const handshake = channel.handshake;
+                    channel.sealed = handshake.accept(JSON.parse(raw));
+                    void admit(channelId, channel, handshake);
+                    return;
+                }
+                case "pairing":
+                    // Nothing is acted on before the Mac says yes; opened only to keep the counter in step.
+                    channel.sealed.open(raw);
+                    return;
+                case "ready":
+                    void handle(channelId, channel, channel.sealed.open(raw));
+                    return;
+            }
+        }
+        catch (err) {
+            drop(channelId, err instanceof Error ? err.message : String(err));
+        }
+    }
+    /** A known phone goes straight in; a new one waits for the person at the Mac. */
+    async function admit(channelId, channel, handshake) {
+        const { device, identity } = handshake.hello;
+        const publicKey = b64(identity);
+        const known = (await pairedDevices()).some((d) => d.id === device.id && d.publicKey === publicKey);
+        if (channels.get(channelId) !== channel)
+            return;
+        if (known) {
+            channel.stage = "ready";
+            reply(channelId, { pair: "ok" });
+            log(`remote: ${device.name} connected`);
+            return;
+        }
+        channel.stage = "pairing";
+        channel.waiting = new AbortController();
+        reply(channelId, { pair: "pending", code: handshake.code });
+        log(`remote: ${device.name} asks to pair, code ${handshake.code}`);
+        let allowed = false;
+        try {
+            allowed = await options.approve({ id: channelId, device, code: handshake.code }, channel.waiting.signal);
+        }
+        catch {
+            allowed = false;
+        }
+        if (channels.get(channelId) !== channel)
+            return;
+        channel.waiting = undefined;
+        if (!allowed) {
+            reply(channelId, { pair: "denied" });
+            return drop(channelId, `${device.name} was not allowed`);
+        }
+        await savePairedDevice({ id: device.id, name: device.name, publicKey, pairedAt: Date.now() });
+        channel.stage = "ready";
+        reply(channelId, { pair: "ok" });
+        log(`remote: ${device.name} paired`);
+    }
+    async function handle(channelId, channel, request) {
+        if (typeof request.id !== "number")
+            return;
+        if (typeof request.subscribe === "string") {
+            if (!REMOTE_STREAMS.has(request.subscribe)) {
+                return reply(channelId, { sub: request.id, end: true, error: "not available remotely" });
+            }
+            void subscribe(channelId, channel, request.id, request.subscribe);
+            return;
+        }
+        if (typeof request.unsubscribe === "number") {
+            channel.subscriptions.get(request.unsubscribe)?.abort();
+            return reply(channelId, { id: request.id, status: 200, body: { ok: true } });
+        }
+        try {
+            reply(channelId, { id: request.id, ...(await forward(request)) });
+        }
+        catch (err) {
+            reply(channelId, { id: request.id, status: 502, body: { error: err instanceof Error ? err.message : String(err) } });
+        }
+    }
+    function onMessage(raw) {
+        let message;
+        try {
+            message = JSON.parse(raw);
+        }
+        catch {
+            return;
+        }
+        const channel = typeof message["channel"] === "string" ? message["channel"] : "";
+        switch (message["t"]) {
+            case "ready":
+                connected = true;
+                backoff = 1000;
+                log(`remote: online as ${options.machine.name}`);
+                break;
+            case "open": {
+                const device = message["device"];
+                if (!channel || !device || typeof device.id !== "string")
+                    return;
+                channels.set(channel, { announced: device, stage: "hello", subscriptions: new Map() });
+                break;
+            }
+            case "data":
+                if (typeof message["data"] === "string")
+                    onData(channel, message["data"]);
+                break;
+            case "close":
+                closeChannel(channel);
+                break;
+            case "error":
+                log(`remote: relay said ${String(message["code"])}`);
+                break;
+        }
+    }
+    async function connect() {
+        if (stopped)
+            return;
+        const token = await options.token().catch(() => undefined);
+        if (stopped)
+            return;
+        if (!token) {
+            // Said once, not every few seconds for as long as nobody signs in.
+            if (!signedOut)
+                log("remote: no account token — sign in to use remote control");
+            signedOut = true;
+            // Looked for again soon, so signing in brings the Mac online in seconds
+            // rather than at the end of a backoff that grew while nobody was.
+            retry = setTimeout(() => void connect(), NO_TOKEN_RETRY_MS);
+            retry.unref?.();
+            return;
+        }
+        signedOut = false;
+        const ws = new WebSocket(options.relay);
+        socket = ws;
+        ws.addEventListener("open", () => {
+            ws.send(JSON.stringify({ t: "hello", v: 1, role: "host", token, machine: options.machine }));
+        });
+        ws.addEventListener("message", (event) => {
+            if (typeof event.data === "string")
+                onMessage(event.data);
+        });
+        ws.addEventListener("close", (event) => {
+            if (socket !== ws)
+                return;
+            connected = false;
+            for (const id of [...channels.keys()])
+                closeChannel(id);
+            // Refused credentials will be refused again; wait for the longest step
+            // rather than hammering the relay with a token it has already turned down.
+            if (event.code === 4401)
+                backoff = MAX_BACKOFF_MS;
+            schedule();
+        });
+        ws.addEventListener("error", () => {
+            // "close" follows and does the retrying.
+        });
+    }
+    function schedule() {
+        if (stopped)
+            return;
+        retry = setTimeout(() => void connect(), backoff);
+        retry.unref?.();
+        backoff = Math.min(backoff * 2, MAX_BACKOFF_MS);
+    }
+    void connect();
+    return {
+        get connected() {
+            return connected;
+        },
+        forget(deviceId) {
+            for (const [id, channel] of [...channels]) {
+                if (channel.announced.id === deviceId)
+                    drop(id, `${channel.announced.name} was forgotten`);
+            }
+        },
+        close() {
+            stopped = true;
+            if (retry)
+                clearTimeout(retry);
+            for (const id of [...channels.keys()])
+                closeChannel(id);
+            socket?.close();
+            socket = undefined;
+        },
+    };
+}
+//# sourceMappingURL=remote.js.map

package/dist/remote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.js","sourceRoot":"","sources":["../src/remote.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAiB,MAAM,oBAAoB,CAAC;AAC3H,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC;IACxD,YAAY;IACZ,eAAe;IACf,WAAW;IACX,cAAc;IACd,eAAe;IACf,aAAa;IACb,cAAc;IACd,gBAAgB;IAChB,YAAY;IACZ,cAAc;IACd,oBAAoB;IACpB,eAAe;IACf,cAAc;IACd,kBAAkB;IAClB,gBAAgB;IAChB,iBAAiB;IACjB,eAAe;IACf,eAAe;IACf,YAAY;IACZ,cAAc;IACd,cAAc;IACd,mBAAmB;IACnB,aAAa;IACb,qEAAqE;IACrE,0EAA0E;IAC1E,+DAA+D;IAC/D,YAAY;IACZ,WAAW;IACX,YAAY;CACb,CAAC,CAAC;AAEH,mFAAmF;AACnF,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAEjE,mFAAmF;AACnF,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAEjF,wDAAwD;AACxD,MAAM,CAAC,MAAM,aAAa,GAAG,oCAAoC,CAAC;AAElE;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC9D,MAAM,KAAK,GAAG,GAAG,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,CAAC;IACnD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC1F,CAAC;AAwDD,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAiBhC,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AAEjD,KAAK,UAAU,cAAc;IAC3B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAe,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,KAAiB;IAC9C,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,kDAAkD;IAClD,MAAM,SAAS,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACxF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;IACtC,IAAI,EAAE,GAAG,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACxH,IAAI,QAA8B,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAAE,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,SAAS,CAAC;IACvB,CAAC;IACD,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrB,EAAE,KAAK,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAClD,QAAQ,KAAK,IAAK,CAAC,QAAQ,CAAC;QAC5B,MAAM,eAAe,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9G,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9C,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAC1B,CAAC,CAAC,EAAqB,EAAE,CACvB,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAQ,CAAkB,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAQ,CAAkB,CAAC,SAAS,KAAK,QAAQ,CAClI,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,MAAoB;IAClD,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;IACzE,MAAM,eAAe,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAU;IAC3C,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,eAAe,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,OAAO,IAAI,CAAC;AACd,CAAC;AAUD,MAAM,UAAU,WAAW,CAAC,OAAsB;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACzD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAE5C,IAAI,MAA6B,CAAC;IAClC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,KAAgD,CAAC;IAErD,SAAS,SAAS,CAAC,OAAgC;QACjD,IAAI,MAAM,EAAE,UAAU,KAAK,SAAS,CAAC,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAClF,CAAC;IAED,uFAAuF;IACvF,SAAS,KAAK,CAAC,SAAiB,EAAE,OAAgC;QAChE,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC/C,IAAI,MAAM;YAAE,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,SAAS,YAAY,CAAC,EAAU;QAC9B,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE;YAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QAC5E,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACxB,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;QACD,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC;IAED,4FAA4F;IAC5F,SAAS,IAAI,CAAC,EAAU,EAAE,GAAW;QACnC,GAAG,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;QACzC,YAAY,CAAC,EAAE,CAAC,CAAC;QACjB,SAAS,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,OAAgB;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,KAAK,4BAA4B,EAAE,EAAE,CAAC;QAC1F,CAAC;QACD,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACzB,MAAM,MAAM,GAAI,OAAO,CAAC,IAAyC,EAAE,MAAM,CAAC;YAC1E,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/D,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,+CAA+C,EAAE,EAAE,CAAC;YAC3F,CAAC;QACH,CAAC;QACD,oFAAoF;QACpF,IAAI,KAAK,KAAK,OAAO,IAAK,OAAO,CAAC,IAAuC,EAAE,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACxG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,8CAA8C,EAAE,EAAE,CAAC;QAC1F,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;gBACzF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,yEAAyE;QACzE,0EAA0E;QAC1E,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAE,OAAO,CAAC,IAAyE,CAAC,CAAC,CAAC,SAAS,CAAC;QACpI,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,CAAC;QACjE,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM;YACN,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,UAAU,EAAE;gBACrC,GAAG,CAAC,MAAM;oBACR,CAAC,CAAC;wBACE,cAAc,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,0BAA0B;wBAC1F,kEAAkE;wBAClE,YAAY,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM;qBACjH;oBACH,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrE;YACD,GAAG,CAAC,MAAM;gBACR,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAgB,EAAE,QAAQ,CAAC,EAAE;gBAC1D,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,mEAAmE;QACnE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACxD,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YACxD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACvF,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,IAAI,GAAY,IAAI,CAAC;QACzB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;QAC7C,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,iFAAiF;IACjF,KAAK,UAAU,SAAS,CAAC,SAAiB,EAAE,OAAgB,EAAE,EAAU,EAAE,KAAa;QACrF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;gBACzD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,UAAU,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE;gBAC/E,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/E,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;YAClC,IAAI,QAAQ,GAAG,EAAE,CAAC;YAClB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,IAAI,QAAgB,CAAC;gBACrB,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;oBAC1C,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;oBACxC,MAAM,IAAI,GAAG,KAAK;yBACf,KAAK,CAAC,IAAI,CAAC;yBACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;yBAC1C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;yBAC9C,IAAI,CAAC,IAAI,CAAC,CAAC;oBACd,IAAI,CAAC,IAAI;wBAAE,SAAS;oBACpB,IAAI,KAAyB,CAAC;oBAC9B,IAAI,CAAC;wBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,CAAC;oBACjD,CAAC;oBAAC,MAAM,CAAC;wBACP,SAAS,CAAC,wEAAwE;oBACpF,CAAC;oBACD,kFAAkF;oBAClF,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;wBAAE,SAAS;oBACjF,KAAK,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;YACD,KAAK,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC/B,KAAK,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpG,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,SAAS,MAAM,CAAC,SAAiB,EAAE,GAAW;QAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,CAAC;YACH,QAAQ,OAAO,CAAC,KAAK,EAAE,CAAC;gBACtB,KAAK,OAAO,CAAC,CAAC,CAAC;oBACb,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC,CAAC;oBACpE,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,OAAO,CAAC,SAAS,CAAC,EAAE;wBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;oBACpG,OAAO,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;oBACzE,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC;oBACxB,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;oBAChG,OAAO;gBACT,CAAC;gBACD,KAAK,OAAO,CAAC,CAAC,CAAC;oBACb,MAAM,SAAS,GAAG,OAAO,CAAC,SAAU,CAAC;oBACrC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC,CAAC;oBAC9E,KAAK,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;oBAC1C,OAAO;gBACT,CAAC;gBACD,KAAK,SAAS;oBACZ,wFAAwF;oBACxF,OAAO,CAAC,MAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAC1B,OAAO;gBACT,KAAK,OAAO;oBACV,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,MAAO,CAAC,IAAI,CAAC,GAAG,CAAuB,CAAC,CAAC;oBACjF,OAAO;YACX,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,KAAK,UAAU,KAAK,CAAC,SAAiB,EAAE,OAAgB,EAAE,SAAuB;QAC/E,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC;QAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;QACnG,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,OAAO;YAAE,OAAO;QAChD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC;YACxB,KAAK,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACjC,GAAG,CAAC,WAAW,MAAM,CAAC,IAAI,YAAY,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QACD,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC;QAC1B,OAAO,CAAC,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;QACxC,KAAK,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5D,GAAG,CAAC,WAAW,MAAM,CAAC,IAAI,uBAAuB,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QACnE,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3G,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,OAAO;YAAE,OAAO;QAChD,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,KAAK,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YACrC,OAAO,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,IAAI,kBAAkB,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,gBAAgB,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9F,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC;QACxB,KAAK,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,GAAG,CAAC,WAAW,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,SAAiB,EAAE,OAAgB,EAAE,OAAgB;QACzE,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ;YAAE,OAAO;QAC3C,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3C,OAAO,KAAK,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,KAAK,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC;YACxD,OAAO,KAAK,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC;YACH,KAAK,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACvH,CAAC;IACH,CAAC;IAED,SAAS,SAAS,CAAC,GAAW;QAC5B,IAAI,OAAgC,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,QAAQ,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,OAAO;gBACV,SAAS,GAAG,IAAI,CAAC;gBACjB,OAAO,GAAG,IAAI,CAAC;gBACf,GAAG,CAAC,qBAAqB,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;gBACjD,MAAM;YACR,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAA8B,CAAC;gBAC9D,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;oBAAE,OAAO;gBACjE,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;gBACvF,MAAM;YACR,CAAC;YACD,KAAK,MAAM;gBACT,IAAI,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,QAAQ;oBAAE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC1E,MAAM;YACR,KAAK,OAAO;gBACV,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM;YACR,KAAK,OAAO;gBACV,GAAG,CAAC,sBAAsB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrD,MAAM;QACV,CAAC;IACH,CAAC;IAED,KAAK,UAAU,OAAO;QACpB,IAAI,OAAO;YAAE,OAAO;QACpB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,OAAO;YAAE,OAAO;QACpB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,mEAAmE;YACnE,IAAI,CAAC,SAAS;gBAAE,GAAG,CAAC,0DAA0D,CAAC,CAAC;YAChF,SAAS,GAAG,IAAI,CAAC;YACjB,wEAAwE;YACxE,kEAAkE;YAClE,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,OAAO,EAAE,EAAE,iBAAiB,CAAC,CAAC;YAC5D,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QACD,SAAS,GAAG,KAAK,CAAC;QAClB,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,GAAG,EAAE,CAAC;QACZ,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE;YAC/B,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;YACvC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACrC,IAAI,MAAM,KAAK,EAAE;gBAAE,OAAO;YAC1B,SAAS,GAAG,KAAK,CAAC;YAClB,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAAE,YAAY,CAAC,EAAE,CAAC,CAAC;YACxD,uEAAuE;YACvE,2EAA2E;YAC3E,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;gBAAE,OAAO,GAAG,cAAc,CAAC;YAClD,QAAQ,EAAE,CAAC;QACb,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;YAChC,yCAAyC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,QAAQ;QACf,IAAI,OAAO;YAAE,OAAO;QACpB,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;QAClD,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,cAAc,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,OAAO,EAAE,CAAC;IAEf,OAAO;QACL,IAAI,SAAS;YACX,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,CAAC,QAAQ;YACb,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC;gBAC1C,IAAI,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ;oBAAE,IAAI,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,gBAAgB,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QACD,KAAK;YACH,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC/B,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAAE,YAAY,CAAC,EAAE,CAAC,CAAC;YACxD,MAAM,EAAE,KAAK,EAAE,CAAC;YAChB,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server.d.ts

@@ -3,7 +3,9 @@ import type { Session } from "@oharness/engine/agent/session.ts";
 import { Harness } from "@oharness/engine/harness.ts";
 import type { PermissionRequest } from "@oharness/engine/agent/permissions.ts";
 import type { QuestionRequest, QuestionResult } from "@oharness/engine/tools/questions.ts";
+import type { Message } from "@oharness/engine/core/types.ts";
 import type { SettingsScope } from "@oharness/engine/agent/settings.ts";
+import type { ComputerUsePlugin } from "@oharness/engine/computer/plugin.ts";
 import type { ScheduleRun } from "@oharness/engine/schedule/scheduler.ts";
 import type { BrowserTargetFactory, BrowserUsePlugin } from "@oharness/engine";
 /**
@@ -23,6 +25,29 @@ export interface WebServerOptions {
     port?: number;
     /** Defaults to loopback. Changing it publishes agent control to the network. */
     host?: string;
+    /**
+     * Remote control through a relay (remote.ts). The Mac dials out; a phone on
+     * the same account that this page has allowed can then drive it.
+     *
+     * Given, it makes remote control something this page offers: a switch in
+     * Settings, saved in prefs and off until somebody turns it on. Left out,
+     * there is no switch and nothing dials anywhere.
+     */
+    remote?: {
+        /** `wss://…/v1/connect` — `remoteRelay()` says which. */
+        relay: string;
+        /**
+         * On for this run whatever the setting says: a relay named in the
+         * environment, as remote control was switched on before it had a setting.
+         */
+        always?: boolean;
+        /**
+         * The account token presented to the relay, asked again on every
+         * reconnect. Defaults to OHARNESS_REMOTE_TOKEN, else the signed-in
+         * OHarness account.
+         */
+        token?: () => Promise<string | undefined>;
+    };
     /**
      * How the harness for another project is built.
      *
@@ -43,6 +68,24 @@ export interface WebServerOptions {
      */
     browserTarget?: BrowserTargetFactory;
     browserUsePlugin?: BrowserUsePlugin;
+    /**
+     * Computer Use, for the harnesses this server builds. Only the desktop app
+     * has one: it ships the native helper and holds the OS grants. Routines are
+     * never given it — a run nobody is watching does not get the screen.
+     */
+    computerUsePlugin?: ComputerUsePlugin;
+    /**
+     * Restart the app. macOS applies a Screen Recording grant only to a process
+     * started after it, so the permission card offers this once it is granted.
+     */
+    onRelaunch?: () => void;
+    /**
+     * The app macOS holds the grants for — the one the person has to switch on
+     * in System Settings. "OHarness" when packaged; a development run is
+     * Electron.app, and a card naming OHarness there sent people to a switch
+     * that was already on.
+     */
+    computerGrantee?: string;
     /**
      * Told when a turn starts waiting on a person — once, not again on a replay.
      * The desktop shell uses it to notify while its window is in the background;
@@ -103,10 +146,37 @@ export interface WebServer {
     }>;
     /** Answers `ask_user` from the page, the same way. */
     readonly questionPrompt: (request: QuestionRequest, signal: AbortSignal) => Promise<QuestionResult>;
+    /** Stop a conversation's running turn, as the page's stop button does. */
+    interrupt(sessionId: string): void;
 }
 export declare function startWebServer(opts: WebServerOptions): Promise<WebServer>;
+/** An upload waiting for the prompt that will carry it. */
+export interface Staged {
+    name: string;
+    mediaType: string;
+    data: Buffer;
+    /** When it arrived, for the sweep. */
+    at: number;
+}
 /** One thing the composer's + menu attached to a message. */
 export interface Reference {
     kind: "file" | "folder" | "connector" | "plugin" | "skill";
     value: string;
 }
+/**
+ * The user's message, with what they attached.
+ *
+ * An image goes to the model as an image. A PDF goes whole, as a document the
+ * model reads page by page, when the model reads them (`documents`). A text
+ * file is pasted in. Anything else — and every PDF too — is saved in the
+ * project, under .oharness/attachments/<session>/, and its path given, so the
+ * agent can open it with its own tools: a spreadsheet with Python, a model
+ * that takes no PDFs with a PDF tool. Binary files used to be skipped, and
+ * the person was left believing the agent had read what it never received.
+ */
+/** A user message's text without the attachment lines buildMessage adds to it. */
+export declare function withoutAttachmentNotes(text: string): string;
+export declare function buildMessage(prompt: string, staged: Staged[], opts: {
+    documents: boolean;
+    saveDir: string;
+}): Promise<Message[]>;