@oharness/sync 0.1.0

package/dist/feed.d.ts

@@ -0,0 +1,68 @@
+import type { WireRecord, WireSession } from "./protocol.ts";
+/**
+ * One project's history, as an append-only log.
+ *
+ * The only question a syncing client asks is "what has happened since cursor
+ * N" — which is what a log answers natively and what a document store has to
+ * be indexed into answering. So the server's storage is the same shape as its
+ * protocol: append, and read forward from an offset.
+ *
+ * A database would buy indexed queries this does not need and cost a dependency
+ * or an unstable built-in (`node:sqlite` still needs a flag on the oldest Node
+ * this package supports). If multi-tenant scale ever arrives, `Feed` is the
+ * seam to reimplement — nothing above it knows how a cursor is stored.
+ */
+export type Entry = ({
+    cursor: number;
+    kind: "record";
+} & WireRecord) | ({
+    cursor: number;
+    kind: "session";
+} & WireSession);
+/**
+ * Who a feed belongs to.
+ *
+ * A person by default, and a team when a team is paying for the seat. The
+ * distinction is the whole of session collaboration: two people cannot hand
+ * each other a session by both being logged in, they have to be reading and
+ * writing one feed, and a feed keyed by whoever pushed first is not that.
+ *
+ * The kind is part of the directory name rather than implied by the id, so a
+ * team named after a user's id cannot land on that user's feed.
+ */
+export type Owner = {
+    kind: "user" | "team";
+    id: string;
+};
+export declare function ownerDir(owner: Owner): string;
+export declare class Feed {
+    private readonly file;
+    private state;
+    /** Appends run one at a time: two writers would hand out the same cursor. */
+    private tail;
+    private readonly waiters;
+    constructor(root: string, owner: Owner, project: string);
+    private load;
+    cursor(): Promise<number>;
+    /**
+     * Add what the caller does not already have.
+     *
+     * Records are identified by the client, so "already held" is a set lookup
+     * rather than a comparison — pushing the same batch twice after a failed
+     * response adds nothing the second time.
+     */
+    append(records: WireRecord[], sessions: WireSession[]): Promise<{
+        cursor: number;
+        accepted: number;
+    }>;
+    /** Everything after `since`, oldest first. */
+    since(since: number, limit: number): Promise<{
+        entries: Entry[];
+        more: boolean;
+    }>;
+    /** Resolve when the feed moves past `since`, or when the wait runs out. */
+    wait(since: number, seconds: number): Promise<void>;
+    private wake;
+}
+/** Projects anything has been pushed to, under one owner. */
+export declare function listProjects(root: string, owner: Owner): Promise<string[]>;

package/dist/feed.js

@@ -0,0 +1,228 @@
+import { appendFile, mkdir, open, readdir } from "node:fs/promises";
+import path from "node:path";
+import { parseJson } from "@oharness/engine/util/json.ts";
+/** How often a byte offset is remembered, so a pull seeks instead of scans. */
+const CHECKPOINT_EVERY = 128;
+export function ownerDir(owner) {
+    return `${owner.kind}-${safe(owner.id)}`;
+}
+export class Feed {
+    file;
+    state;
+    /** Appends run one at a time: two writers would hand out the same cursor. */
+    tail = Promise.resolve();
+    waiters = new Set();
+    constructor(root, owner, project) {
+        this.file = path.join(root, "feed", ownerDir(owner), `${safe(project)}.jsonl`);
+    }
+    load() {
+        this.state ??= scan(this.file);
+        return this.state;
+    }
+    async cursor() {
+        return (await this.load()).lastCursor;
+    }
+    /**
+     * Add what the caller does not already have.
+     *
+     * Records are identified by the client, so "already held" is a set lookup
+     * rather than a comparison — pushing the same batch twice after a failed
+     * response adds nothing the second time.
+     */
+    append(records, sessions) {
+        const run = async () => {
+            const state = await this.load();
+            const lines = [];
+            let cursor = state.lastCursor;
+            for (const record of records) {
+                const key = `${record.session}/${record.id}`;
+                if (state.seen.has(key))
+                    continue;
+                state.seen.add(key);
+                lines.push({ ...record, cursor: ++cursor, kind: "record" });
+            }
+            for (const session of sessions) {
+                const held = state.sessions.get(session.id);
+                // Generation first, then time: a rewrite beats an older device's
+                // appends however recently its clock says they happened.
+                if (held && (held.gen > session.gen ||
+                    (held.gen === session.gen && held.updatedAt >= session.updatedAt)))
+                    continue;
+                state.sessions.set(session.id, { gen: session.gen, updatedAt: session.updatedAt });
+                lines.push({ ...session, cursor: ++cursor, kind: "session" });
+            }
+            if (lines.length) {
+                await mkdir(path.dirname(this.file), { recursive: true });
+                const body = lines.map((line) => JSON.stringify(line)).join("\n") + "\n";
+                await appendFile(this.file, body, "utf8");
+                for (const line of lines) {
+                    state.size += Buffer.byteLength(JSON.stringify(line)) + 1;
+                    const last = state.checkpoints[state.checkpoints.length - 1];
+                    if (!last || line.cursor - last.cursor >= CHECKPOINT_EVERY) {
+                        state.checkpoints.push({ cursor: line.cursor, offset: state.size });
+                    }
+                }
+                state.lastCursor = cursor;
+                this.wake();
+            }
+            return { cursor: state.lastCursor, accepted: lines.length };
+        };
+        const next = this.tail.then(run, run);
+        // The chain must survive a failed append, or every later push inherits the
+        // rejection and the feed wedges.
+        this.tail = next.catch(() => { });
+        return next;
+    }
+    /** Everything after `since`, oldest first. */
+    async since(since, limit) {
+        const state = await this.load();
+        if (since >= state.lastCursor)
+            return { entries: [], more: false };
+        // Start from the last checkpoint at or before the caller's cursor rather
+        // than the top of the file: catching up should not cost a full history read.
+        let offset = 0;
+        for (const point of state.checkpoints) {
+            if (point.cursor > since)
+                break;
+            offset = point.offset;
+        }
+        const entries = [];
+        let more = false;
+        for (const line of await readFrom(this.file, offset)) {
+            const parsed = parseJson(line);
+            if (!parsed.ok || parsed.value.cursor <= since)
+                continue;
+            if (entries.length >= limit) {
+                more = true;
+                break;
+            }
+            entries.push(parsed.value);
+        }
+        return { entries, more };
+    }
+    /** Resolve when the feed moves past `since`, or when the wait runs out. */
+    wait(since, seconds) {
+        return new Promise((resolve) => {
+            let done = false;
+            const finish = () => {
+                if (done)
+                    return;
+                done = true;
+                this.waiters.delete(finish);
+                clearTimeout(timer);
+                resolve();
+            };
+            const timer = setTimeout(finish, seconds * 1000);
+            // Unref: a pending long-poll must not hold the process open on shutdown.
+            timer.unref?.();
+            this.waiters.add(finish);
+            void this.cursor().then((now) => {
+                if (now > since)
+                    finish();
+            });
+        });
+    }
+    wake() {
+        for (const waiter of [...this.waiters])
+            waiter();
+    }
+}
+/** Projects anything has been pushed to, under one owner. */
+export async function listProjects(root, owner) {
+    const dir = path.join(root, "feed", ownerDir(owner));
+    const entries = await readdir(dir).catch(() => []);
+    return entries.filter((name) => name.endsWith(".jsonl")).map((name) => name.slice(0, -6)).sort();
+}
+/**
+ * Rebuild what is only kept in memory: the cursor, the checkpoints, and what
+ * has already been seen. One pass, on first touch of a feed.
+ */
+async function scan(file) {
+    const state = {
+        lastCursor: 0,
+        checkpoints: [],
+        seen: new Set(),
+        sessions: new Map(),
+        size: 0,
+    };
+    let handle;
+    try {
+        handle = await open(file, "r");
+    }
+    catch {
+        return state;
+    }
+    try {
+        let carry = "";
+        for await (const chunk of handle.createReadStream({ encoding: "utf8" })) {
+            const text = carry + chunk;
+            const lines = text.split("\n");
+            carry = lines.pop() ?? "";
+            for (const line of lines) {
+                state.size += Buffer.byteLength(line) + 1;
+                if (line.trim() === "")
+                    continue;
+                const parsed = parseJson(line);
+                // A torn line from a killed append costs that line, not the feed.
+                if (!parsed.ok || typeof parsed.value.cursor !== "number")
+                    continue;
+                remember(state, parsed.value);
+            }
+        }
+        if (carry.trim() !== "") {
+            const parsed = parseJson(carry);
+            if (parsed.ok && typeof parsed.value.cursor === "number") {
+                state.size += Buffer.byteLength(carry) + 1;
+                remember(state, parsed.value);
+            }
+        }
+    }
+    finally {
+        await handle.close();
+    }
+    return state;
+}
+function remember(state, entry) {
+    state.lastCursor = Math.max(state.lastCursor, entry.cursor);
+    if (entry.kind === "record")
+        state.seen.add(`${entry.session}/${entry.id}`);
+    if (entry.kind === "session") {
+        state.sessions.set(entry.id, { gen: entry.gen, updatedAt: entry.updatedAt });
+    }
+    const last = state.checkpoints[state.checkpoints.length - 1];
+    if (!last || entry.cursor - last.cursor >= CHECKPOINT_EVERY) {
+        state.checkpoints.push({ cursor: entry.cursor, offset: state.size });
+    }
+}
+async function readFrom(file, offset) {
+    const handle = await open(file, "r").catch(() => undefined);
+    if (!handle)
+        return [];
+    try {
+        const { size } = await handle.stat();
+        const start = Math.min(offset, size);
+        const buffer = Buffer.alloc(size - start);
+        if (buffer.length === 0)
+            return [];
+        await handle.read(buffer, 0, buffer.length, start);
+        return buffer.toString("utf8").split("\n");
+    }
+    finally {
+        await handle.close();
+    }
+}
+/**
+ * Ids reach the filesystem, so they are constrained rather than trusted: a
+ * project called `../../etc` must name a file inside the feed directory.
+ */
+function safe(id) {
+    const cleaned = id
+        .replace(/[^A-Za-z0-9._-]/g, "_")
+        // Runs of dots go too. Separators are already gone by this point, so `..`
+        // cannot traverse anything — but a name that still reads as a traversal is
+        // one someone will eventually pass to a path join that does.
+        .replace(/\.{2,}/g, "_")
+        .replace(/^\./, "_");
+    return cleaned.slice(0, 128) || "_";
+}
+//# sourceMappingURL=feed.js.map

package/dist/feed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feed.js","sourceRoot":"","sources":["../src/feed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAqB1D,+EAA+E;AAC/E,MAAM,gBAAgB,GAAG,GAAG,CAAC;AA0B7B,MAAM,UAAU,QAAQ,CAAC,KAAY;IACnC,OAAO,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,OAAO,IAAI;IACE,IAAI,CAAS;IACtB,KAAK,CAA6B;IAC1C,6EAA6E;IACrE,IAAI,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAClC,OAAO,GAAG,IAAI,GAAG,EAAc,CAAC;IAEjD,YAAY,IAAY,EAAE,KAAY,EAAE,OAAe;QACrD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjF,CAAC;IAEO,IAAI;QACV,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC;IACxC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,OAAqB,EAAE,QAAuB;QACnD,MAAM,GAAG,GAAG,KAAK,IAAI,EAAE;YACrB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,KAAK,GAAY,EAAE,CAAC;YAC1B,IAAI,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC;YAE9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBAC7C,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAClC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9D,CAAC;YAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC5C,iEAAiE;gBACjE,yDAAyD;gBACzD,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG;oBACjC,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC;oBAAE,SAAS;gBAC/E,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;gBACnF,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YAChE,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;gBACzE,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;gBAE1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;oBAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;oBAC7D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,gBAAgB,EAAE,CAAC;wBAC3D,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;oBACtE,CAAC;gBACH,CAAC;gBACD,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC;gBAC1B,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,CAAC;YAED,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC9D,CAAC,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,2EAA2E;QAC3E,iCAAiC;QACjC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8CAA8C;IAC9C,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,KAAa;QACtC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,KAAK,IAAI,KAAK,CAAC,UAAU;YAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAEnE,yEAAyE;QACzE,6EAA6E;QAC7E,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK;gBAAE,MAAM;YAChC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QACxB,CAAC;QAED,MAAM,OAAO,GAAY,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,KAAK,MAAM,IAAI,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,SAAS,CAAQ,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK;gBAAE,SAAS;YACzD,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;gBAC5B,IAAI,GAAG,IAAI,CAAC;gBACZ,MAAM;YACR,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,2EAA2E;IAC3E,IAAI,CAAC,KAAa,EAAE,OAAe;QACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,IAAI,GAAG,KAAK,CAAC;YACjB,MAAM,MAAM,GAAG,GAAG,EAAE;gBAClB,IAAI,IAAI;oBAAE,OAAO;gBACjB,IAAI,GAAG,IAAI,CAAC;gBACZ,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC5B,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC;YACjD,yEAAyE;YACzE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzB,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC9B,IAAI,GAAG,GAAG,KAAK;oBAAE,MAAM,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,IAAI;QACV,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;YAAE,MAAM,EAAE,CAAC;IACnD,CAAC;CACF;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,KAAY;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,CAAC;IAC/D,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACnG,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,IAAI,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAU;QACnB,UAAU,EAAE,CAAC;QACb,WAAW,EAAE,EAAE;QACf,IAAI,EAAE,IAAI,GAAG,EAAE;QACf,QAAQ,EAAE,IAAI,GAAG,EAAE;QACnB,IAAI,EAAE,CAAC;KACR,CAAC;IAEF,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,GAAG,KAAK,GAAI,KAAgB,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YAC1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC1C,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;oBAAE,SAAS;gBACjC,MAAM,MAAM,GAAG,SAAS,CAAQ,IAAI,CAAC,CAAC;gBACtC,kEAAkE;gBAClE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ;oBAAE,SAAS;gBACpE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,SAAS,CAAQ,KAAK,CAAC,CAAC;YACvC,IAAI,MAAM,CAAC,EAAE,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACzD,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAY,EAAE,KAAY;IAC1C,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,gBAAgB,EAAE,CAAC;QAC5D,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,MAAc;IAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACnC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACnD,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,IAAI,CAAC,EAAU;IACtB,MAAM,OAAO,GAAG,EAAE;SACf,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC;QACjC,0EAA0E;QAC1E,2EAA2E;QAC3E,6DAA6D;SAC5D,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvB,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC;AACtC,CAAC"}

package/dist/main.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/main.js

@@ -0,0 +1,114 @@
+#!/usr/bin/env node
+import { userPath } from "@oharness/engine/paths.ts";
+import { errorMessage } from "@oharness/engine/core/errors.ts";
+import { issueToken, readUsers, startSyncServer } from "./server.js";
+/**
+ * The sync server's entry point — a separate binary because it is a separate
+ * decision. Running the harness never starts one.
+ */
+const HELP = `oharness-sync — an optional server for syncing sessions between devices
+
+Usage:
+  oharness-sync [options]           Serve
+  oharness-sync token <user>        Issue a token for a user, printed once
+
+Options:
+      --port <n>     Port to listen on (default 4483)
+      --host <addr>  Interface to bind (default 127.0.0.1)
+      --root <dir>   Where feeds are stored (default ~/.oharness/sync)
+      --team <id>    With 'token': a team the holder may sync with. Repeatable.
+  -h, --help         Show this help
+
+A team is a shared feed. Everyone issued a token carrying the same team id
+reads and writes one history for a project, which is what lets two people
+continue each other's sessions; without one, a token reaches only its own.
+
+This speaks plain HTTP and authenticates with a bearer token. Put it behind a
+reverse proxy that terminates TLS before exposing it to a network you do not
+control — a token sent in the clear is a token everyone on the path now holds.
+
+It stores what it is given and hands it back in order. It never runs a model,
+and it does not need to read anything it stores.
+
+Environment, for a deployment fronting an account system. Set either the
+secret or the JWKS URL and this also accepts tokens that system signed, so
+subscribers are not issued one by hand:
+
+  OHARNESS_SYNC_JWT_SECRET    HS256 shared secret (Supabase: the JWT secret)
+  OHARNESS_SYNC_JWKS_URL      public keys, for asymmetric signing
+  OHARNESS_SYNC_JWT_ISSUER    required iss, if set
+  OHARNESS_SYNC_JWT_AUDIENCE  required aud (Supabase: authenticated)
+  OHARNESS_SYNC_TEAMS_CLAIM   claim carrying team ids (default: teams)
+
+Locally issued tokens keep working either way.`;
+async function main() {
+    const argv = process.argv.slice(2);
+    if (argv.includes("-h") || argv.includes("--help")) {
+        console.log(HELP);
+        return;
+    }
+    const flag = (name) => {
+        const at = argv.indexOf(`--${name}`);
+        return at === -1 ? undefined : argv[at + 1];
+    };
+    const root = flag("root") ?? userPath("sync");
+    if (argv[0] === "token") {
+        const user = argv[1];
+        if (!user) {
+            console.error("usage: oharness-sync token <user> [--team <id>]...");
+            process.exitCode = 1;
+            return;
+        }
+        const teams = argv.flatMap((arg, at) => (arg === "--team" && argv[at + 1] ? [argv[at + 1]] : []));
+        const token = await issueToken(root, user, teams);
+        console.log(`\nToken for ${user}:\n\n  ${token}\n`);
+        if (teams.length)
+            console.log(`Teams: ${teams.join(", ")}\n`);
+        console.log("Stored as a hash — this is the only time it is shown.\n");
+        return;
+    }
+    const port = Number.parseInt(flag("port") ?? "4483", 10);
+    if (Number.isNaN(port)) {
+        console.error("--port needs a number");
+        process.exitCode = 1;
+        return;
+    }
+    const host = flag("host");
+    const env = process.env;
+    const jwt = {
+        ...(env["OHARNESS_SYNC_JWT_SECRET"] ? { secret: env["OHARNESS_SYNC_JWT_SECRET"] } : {}),
+        ...(env["OHARNESS_SYNC_JWKS_URL"] ? { jwksUrl: env["OHARNESS_SYNC_JWKS_URL"] } : {}),
+        ...(env["OHARNESS_SYNC_JWT_ISSUER"] ? { issuer: env["OHARNESS_SYNC_JWT_ISSUER"] } : {}),
+        ...(env["OHARNESS_SYNC_JWT_AUDIENCE"] ? { audience: env["OHARNESS_SYNC_JWT_AUDIENCE"] } : {}),
+        ...(env["OHARNESS_SYNC_TEAMS_CLAIM"] ? { teamsClaim: env["OHARNESS_SYNC_TEAMS_CLAIM"] } : {}),
+    };
+    const signedIn = Boolean(jwt.secret || jwt.jwksUrl);
+    const server = await startSyncServer({
+        root,
+        port,
+        ...(host ? { host } : {}),
+        ...(signedIn ? { jwt } : {}),
+    });
+    const users = await readUsers(root);
+    console.log(`\noharness sync  ·  ${server.url}`);
+    console.log(`storage ${root}`);
+    console.log(signedIn ? "accounts signed tokens, plus users.json" : "accounts users.json only");
+    if (!users.length && !signedIn) {
+        console.log("\n!  No users yet — nothing can authenticate.");
+        console.log("!  Run: oharness-sync token <your-name>\n");
+    }
+    else if (users.length) {
+        console.log(`local tokens ${users.map((user) => user.id).join(", ")}\n`);
+    }
+    else {
+        console.log("");
+    }
+    const stop = () => void server.close().then(() => process.exit(0));
+    process.on("SIGINT", stop);
+    process.on("SIGTERM", stop);
+}
+main().catch((err) => {
+    console.error(errorMessage(err));
+    process.exitCode = 1;
+});
+//# sourceMappingURL=main.js.map

package/dist/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAErE;;;GAGG;AAEH,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+CAkCkC,CAAC;AAEhD,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,IAAY,EAAsB,EAAE;QAChD,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACrC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9C,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACpE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnG,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,UAAU,KAAK,IAAI,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;QACvE,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACvC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,MAAM,GAAG,GAAG;QACV,GAAG,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,GAAG,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9F,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAEpD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,IAAI;QACJ,IAAI;QACJ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7B,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IAEpC,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;IAC/F,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;IAC3D,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/protocol.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The wire, re-exported.
+ *
+ * The definitions live in the engine because both halves need them and only
+ * one direction of dependency is allowed: this package depends on the engine,
+ * so the engine cannot import from here. Keeping one copy is the point —
+ * a client and a server that each own their idea of the wire drift, and the
+ * drift shows up as records that silently fail to merge.
+ */
+export type { PullResponse, PushRequest, PushResponse, WireRecord, WireSession } from "@oharness/engine/sync/protocol.ts";
+export { DEFAULT_PULL_LIMIT, MAX_BODY_BYTES, MAX_PUSH_RECORDS, MAX_WAIT_SECONDS, } from "@oharness/engine/sync/protocol.ts";

package/dist/protocol.js

@@ -0,0 +1,2 @@
+export { DEFAULT_PULL_LIMIT, MAX_BODY_BYTES, MAX_PUSH_RECORDS, MAX_WAIT_SECONDS, } from "@oharness/engine/sync/protocol.ts";
+//# sourceMappingURL=protocol.js.map

package/dist/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,mCAAmC,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,66 @@
+import type { JwtOptions } from "@oharness/engine/util/jwt.ts";
+/**
+ * The optional half of sync.
+ *
+ * Nothing here runs unless someone starts it. A harness with no `sync` block in
+ * its config never opens a socket, and the local store is complete on its own —
+ * this exists because two machines cannot hand each other a transcript without
+ * somewhere to leave it, not because the harness needs a backend.
+ *
+ * It is deliberately dumb: it orders opaque blobs and hands them back. It does
+ * not parse messages, call models, or know what a tool is. That is what keeps
+ * it safe to leave running, and what keeps the message format free to change
+ * without a deploy.
+ *
+ * **TLS is not handled here.** Put it behind a reverse proxy that terminates
+ * HTTPS. A bearer token over plaintext on an untrusted network is a token
+ * anyone on that network now has.
+ */
+export interface SyncUser {
+    id: string;
+    /** sha256 of the bearer token. The token itself is never stored. */
+    tokenHash: string;
+    /**
+     * Teams this token may act for.
+     *
+     * Membership is recorded against the token rather than asked for per
+     * request, because the alternative is a sync server that has to call an
+     * account service to answer a push — putting someone else's availability in
+     * front of every write, on the one endpoint that exists to make transcripts
+     * durable.
+     */
+    teams?: string[];
+}
+export interface SyncServerOptions {
+    /** Where feeds are written. Defaults to `sync/` under the user directory. */
+    root: string;
+    port?: number;
+    /** Defaults to loopback. Bind wider only behind a proxy you control. */
+    host?: string;
+    /**
+     * Accept tokens the account system signed, alongside locally issued ones.
+     *
+     * This is what makes the hosted deployment possible: without it every new
+     * subscriber needs a shell on this container to be given a token, which is
+     * not a sign-up flow. Self-hosting stays exactly as it was — nothing here is
+     * required, and users.json keeps working whether or not it is set.
+     */
+    jwt?: JwtOptions;
+}
+export interface SyncServer {
+    url: string;
+    port: number;
+    close(): Promise<void>;
+}
+export declare function startSyncServer(opts: SyncServerOptions): Promise<SyncServer>;
+/**
+ * Accounts, in a file.
+ *
+ * One entry is the single-user case and costs nothing; more entries isolate
+ * users by feed directory. There is no sign-up flow on purpose — issuing a
+ * token is an administrative act, and a sync server that can create accounts
+ * is a sync server with a registration endpoint to defend.
+ */
+export declare function readUsers(root: string): Promise<SyncUser[]>;
+/** Issue a token for a user, returning it once. Only the hash is stored. */
+export declare function issueToken(root: string, id: string, teams?: string[]): Promise<string>;

package/dist/server.js

@@ -0,0 +1,241 @@
+import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
+import { createServer } from "node:http";
+import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { errorMessage } from "@oharness/engine/core/errors.ts";
+import { parseJson } from "@oharness/engine/util/json.ts";
+import { Feed, listProjects } from "./feed.js";
+import { JwtVerifier } from "@oharness/engine/util/jwt.ts";
+import { DEFAULT_PULL_LIMIT, MAX_BODY_BYTES, MAX_PUSH_RECORDS, MAX_WAIT_SECONDS, } from "./protocol.js";
+export async function startSyncServer(opts) {
+    const host = opts.host ?? "127.0.0.1";
+    const verifier = opts.jwt ? new JwtVerifier(opts.jwt) : undefined;
+    const feeds = new Map();
+    const feed = (owner, project) => {
+        const key = `${owner.kind}\u0000${owner.id}\u0000${project}`;
+        let held = feeds.get(key);
+        if (!held) {
+            held = new Feed(opts.root, owner, project);
+            feeds.set(key, held);
+        }
+        return held;
+    };
+    const server = createServer((req, res) => {
+        void handle(req, res).catch((err) => send(res, 500, { error: errorMessage(err) }));
+    });
+    async function handle(req, res) {
+        const url = new URL(req.url ?? "/", `http://${req.headers.host ?? "localhost"}`);
+        const route = `${req.method} ${url.pathname}`;
+        // Unauthenticated on purpose: a health check that needs a credential is a
+        // health check nobody wires up.
+        if (route === "GET /v1/health")
+            return send(res, 200, { ok: true });
+        const user = await authenticate(opts.root, req, verifier);
+        if (!user) {
+            res.setHeader("www-authenticate", "Bearer");
+            return send(res, 401, { error: "missing or bad token" });
+        }
+        /**
+         * Whose feed this request is for.
+         *
+         * Absent `team`, a person's own. Naming a team the token does not hold is
+         * refused rather than quietly answered with the caller's own feed — that
+         * substitution reads to the user as "the team has nothing in it", which is
+         * the one wrong answer they would act on.
+         */
+        const owned = (named) => {
+            const team = (named ?? "").trim();
+            if (!team)
+                return { kind: "user", id: user.id };
+            return (user.teams ?? []).includes(team) ? { kind: "team", id: team } : undefined;
+        };
+        switch (route) {
+            case "GET /v1/projects": {
+                const owner = owned(url.searchParams.get("team"));
+                if (!owner)
+                    return send(res, 403, { error: "not a member of that team" });
+                return send(res, 200, { projects: await listProjects(opts.root, owner) });
+            }
+            case "POST /v1/push": {
+                const body = (await readJson(req));
+                const project = typeof body.project === "string" ? body.project : "";
+                if (!project)
+                    return send(res, 400, { error: "project is required" });
+                const records = (Array.isArray(body.records) ? body.records : []).filter(isRecord);
+                const sessions = (Array.isArray(body.sessions) ? body.sessions : []).filter(isSession);
+                // Refused rather than truncated: accepting half a batch and reporting
+                // success would lose turns the client then considers delivered.
+                if (records.length > MAX_PUSH_RECORDS || sessions.length > MAX_PUSH_RECORDS) {
+                    return send(res, 413, { error: `at most ${MAX_PUSH_RECORDS} entries per push` });
+                }
+                const owner = owned(typeof body.team === "string" ? body.team : undefined);
+                if (!owner)
+                    return send(res, 403, { error: "not a member of that team" });
+                const result = await feed(owner, project).append(records, sessions);
+                return send(res, 200, result);
+            }
+            case "GET /v1/pull": {
+                const project = url.searchParams.get("project") ?? "";
+                if (!project)
+                    return send(res, 400, { error: "project is required" });
+                const since = Number.parseInt(url.searchParams.get("since") ?? "0", 10) || 0;
+                const limit = clamp(Number.parseInt(url.searchParams.get("limit") ?? "", 10) || DEFAULT_PULL_LIMIT, 1, DEFAULT_PULL_LIMIT);
+                const wait = clamp(Number.parseInt(url.searchParams.get("wait") ?? "0", 10) || 0, 0, MAX_WAIT_SECONDS);
+                const owner = owned(url.searchParams.get("team"));
+                if (!owner)
+                    return send(res, 403, { error: "not a member of that team" });
+                const target = feed(owner, project);
+                // A long poll is how the second device sees a turn while it is being
+                // typed rather than on the next timer.
+                if (wait > 0 && since >= (await target.cursor()))
+                    await target.wait(since, wait);
+                const { entries, more } = await target.since(since, limit);
+                const answer = {
+                    cursor: entries.length ? entries[entries.length - 1].cursor : since,
+                    records: entries.filter((entry) => entry.kind === "record").map(stripCursor),
+                    sessions: entries.filter((entry) => entry.kind === "session").map(stripCursor),
+                    more,
+                };
+                return send(res, 200, answer);
+            }
+            default:
+                return send(res, 404, { error: "no such endpoint" });
+        }
+    }
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(opts.port ?? 0, host, () => {
+            server.off("error", reject);
+            resolve();
+        });
+    });
+    const address = server.address();
+    const port = typeof address === "object" && address ? address.port : (opts.port ?? 0);
+    return {
+        url: `http://${host}:${port}`,
+        port,
+        close: () => closeServer(server),
+    };
+}
+// --- users -----------------------------------------------------------------
+/**
+ * Accounts, in a file.
+ *
+ * One entry is the single-user case and costs nothing; more entries isolate
+ * users by feed directory. There is no sign-up flow on purpose — issuing a
+ * token is an administrative act, and a sync server that can create accounts
+ * is a sync server with a registration endpoint to defend.
+ */
+export async function readUsers(root) {
+    const raw = await readFile(path.join(root, "users.json"), "utf8").catch(() => undefined);
+    if (!raw)
+        return [];
+    const parsed = parseJson(raw);
+    if (!parsed.ok || !Array.isArray(parsed.value.users))
+        return [];
+    return parsed.value.users
+        .filter((user) => typeof user?.id === "string" && typeof user?.tokenHash === "string")
+        .map((user) => ({
+        ...user,
+        // Normalised on read so a hand-edited users.json cannot turn a string
+        // into a membership that `includes` would match one character of.
+        teams: Array.isArray(user.teams) ? user.teams.filter((t) => typeof t === "string") : [],
+    }));
+}
+/** Issue a token for a user, returning it once. Only the hash is stored. */
+export async function issueToken(root, id, teams = []) {
+    const token = randomBytes(32).toString("base64url");
+    const users = (await readUsers(root)).filter((user) => user.id !== id);
+    users.push({ id, tokenHash: hash(token), ...(teams.length ? { teams } : {}) });
+    const file = path.join(root, "users.json");
+    await mkdir(root, { recursive: true });
+    const temp = `${file}.${process.pid}.tmp`;
+    await writeFile(temp, `${JSON.stringify({ users }, null, 2)}\n`, "utf8");
+    await rename(temp, file);
+    return token;
+}
+function hash(token) {
+    return createHash("sha256").update(token).digest("hex");
+}
+async function authenticate(root, req, verifier) {
+    const supplied = (req.headers.authorization ?? "").replace(/^Bearer\s+/i, "").trim();
+    if (!supplied)
+        return undefined;
+    // A locally issued token is 32 random bytes in base64url and can never hold
+    // a dot, so the two forms are told apart by shape rather than by trying one
+    // and falling through — which would make every bad JWT cost a file read.
+    if (verifier?.enabled && supplied.includes(".")) {
+        const claims = await verifier.verify(supplied);
+        if (!claims)
+            return undefined;
+        // No tokenHash: nothing about this account is stored here. The signature
+        // is the whole of what this server knows, which is the point — it holds no
+        // account records to keep in step with the account system.
+        return { id: claims.sub, tokenHash: "", teams: claims.teams };
+    }
+    const digest = Buffer.from(hash(supplied));
+    for (const user of await readUsers(root)) {
+        const known = Buffer.from(user.tokenHash);
+        // Constant time: comparing hashes rather than tokens keeps the stored form
+        // useless to whoever reads the file, and the timing safe either way.
+        if (known.length === digest.length && timingSafeEqual(known, digest))
+            return user;
+    }
+    return undefined;
+}
+// --- plumbing --------------------------------------------------------------
+function isRecord(value) {
+    const record = value;
+    return Boolean(record &&
+        typeof record.session === "string" &&
+        typeof record.id === "string" &&
+        typeof record.seq === "number" &&
+        typeof record.device === "string");
+}
+function isSession(value) {
+    const session = value;
+    return Boolean(session &&
+        typeof session.id === "string" &&
+        typeof session.gen === "number" &&
+        typeof session.updatedAt === "number");
+}
+function stripCursor(entry) {
+    const { cursor: _cursor, kind: _kind, ...rest } = entry;
+    return rest;
+}
+function clamp(value, low, high) {
+    return Math.min(high, Math.max(low, value));
+}
+function send(res, status, body) {
+    const payload = JSON.stringify(body);
+    res.writeHead(status, {
+        "content-type": "application/json; charset=utf-8",
+        "content-length": Buffer.byteLength(payload),
+    });
+    res.end(payload);
+}
+async function readJson(req) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of req) {
+        size += chunk.length;
+        // Checked while reading: buffering the whole body first is exactly what the
+        // limit exists to prevent.
+        if (size > MAX_BODY_BYTES)
+            throw new Error("request body too large");
+        chunks.push(chunk);
+    }
+    if (!chunks.length)
+        return {};
+    const parsed = parseJson(Buffer.concat(chunks).toString("utf8"));
+    if (!parsed.ok)
+        throw new Error("invalid JSON body");
+    return parsed.value;
+}
+function closeServer(server) {
+    return new Promise((resolve) => {
+        server.closeAllConnections?.();
+        server.close(() => resolve());
+    });
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AA4DvB,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAuB;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAgB,CAAC;IAEtC,MAAM,IAAI,GAAG,CAAC,KAAY,EAAE,OAAe,EAAQ,EAAE;QACnD,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;QAC7D,IAAI,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YAC3C,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,MAAM,CAAC,GAAoB,EAAE,GAAmB;QAC7D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QAE9C,0EAA0E;QAC1E,gCAAgC;QAChC,IAAI,KAAK,KAAK,gBAAgB;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAEpE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED;;;;;;;WAOG;QACH,MAAM,KAAK,GAAG,CAAC,KAAgC,EAAqB,EAAE;YACpE,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;YAChD,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACpF,CAAC,CAAC;QAEF,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,kBAAkB,CAAC,CAAC,CAAC;gBACxB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;gBAClD,IAAI,CAAC,KAAK;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBAC1E,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;YAC5E,CAAC;YAED,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAA2B,CAAC;gBAC7D,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrE,IAAI,CAAC,OAAO;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;gBAEtE,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACnF,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACvF,sEAAsE;gBACtE,gEAAgE;gBAChE,IAAI,OAAO,CAAC,MAAM,GAAG,gBAAgB,IAAI,QAAQ,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;oBAC5E,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,gBAAgB,mBAAmB,EAAE,CAAC,CAAC;gBACnF,CAAC;gBAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC3E,IAAI,CAAC,KAAK;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBAE1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACpE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YAChC,CAAC;YAED,KAAK,cAAc,CAAC,CAAC,CAAC;gBACpB,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBACtD,IAAI,CAAC,OAAO;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;gBAEtE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC7E,MAAM,KAAK,GAAG,KAAK,CACjB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,kBAAkB,EAC9E,CAAC,EACD,kBAAkB,CACnB,CAAC;gBACF,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC;gBAEvG,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;gBAClD,IAAI,CAAC,KAAK;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBAE1E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACpC,qEAAqE;gBACrE,uCAAuC;gBACvC,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;oBAAE,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAEjF,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC3D,MAAM,MAAM,GAAiB;oBAC3B,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;oBACpE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,WAAW,CAAiB;oBAC5F,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,WAAW,CAAkB;oBAC/F,IAAI;iBACL,CAAC;gBACF,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YAChC,CAAC;YAED;gBACE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;YACvC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IAEtF,OAAO;QACL,GAAG,EAAE,UAAU,IAAI,IAAI,IAAI,EAAE;QAC7B,IAAI;QACJ,KAAK,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY;IAC1C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACzF,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,CAAyB,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChE,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK;SACtB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,EAAE,KAAK,QAAQ,IAAI,OAAO,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC;SACrF,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACd,GAAG,IAAI;QACP,sEAAsE;QACtE,kEAAkE;QAClE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;KACxF,CAAC,CAAC,CAAC;AACR,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,EAAU,EAAE,QAAkB,EAAE;IAC7E,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAE/E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC3C,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC1C,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzE,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAY,EACZ,GAAoB,EACpB,QAAsB;IAEtB,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrF,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAEhC,4EAA4E;IAC5E,4EAA4E;IAC5E,yEAAyE;IACzE,IAAI,QAAQ,EAAE,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,yEAAyE;QACzE,2EAA2E;QAC3E,2DAA2D;QAC3D,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAChE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE3C,KAAK,MAAM,IAAI,IAAI,MAAM,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,2EAA2E;QAC3E,qEAAqE;QACrE,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IACpF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAE9E,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,MAAM,GAAG,KAAmB,CAAC;IACnC,OAAO,OAAO,CACZ,MAAM;QACJ,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAClC,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;QAC7B,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;QAC9B,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CACpC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,OAAO,GAAG,KAAoB,CAAC;IACrC,OAAO,OAAO,CACZ,OAAO;QACL,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ;QAC9B,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAC/B,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CACxC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAuC;IAC1D,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,KAAK,CAAC,KAAa,EAAE,GAAW,EAAE,IAAY;IACrD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,IAAI,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,iCAAiC;QACjD,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;KAC7C,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAoB;IAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,IAAI,IAAK,KAAgB,CAAC,MAAM,CAAC;QACjC,4EAA4E;QAC5E,2BAA2B;QAC3B,IAAI,IAAI,GAAG,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,SAAS,CAA0B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1F,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "@oharness/sync",
+  "version": "0.1.0",
+  "description": "The optional sync server: orders opaque transcript records so two machines can hand each other a session.",
+  "type": "module",
+  "license": "MIT",
+  "engines": {
+    "node": ">=22.6.0"
+  },
+  "main": "./dist/server.js",
+  "types": "./dist/server.d.ts",
+  "exports": {
+    ".": {
+      "oharness-source": "./src/server.ts",
+      "types": "./dist/server.d.ts",
+      "default": "./dist/server.js"
+    },
+    "./*.ts": {
+      "oharness-source": "./src/*.ts",
+      "types": "./dist/*.d.ts",
+      "default": "./dist/*.js"
+    }
+  },
+  "bin": {
+    "oharness-sync": "./dist/main.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "rm -rf dist && tsc -p tsconfig.build.json"
+  },
+  "dependencies": {
+    "@oharness/engine": "0.1.0"
+  }
+}