@rryando/arcs 3.10.0 → 4.0.0

package/dist/web-server/routes/events.js

@@ -0,0 +1,25 @@
+/**
+ * SSE route: pushes debounced data-dir change events to connected clients.
+ */
+import { Hono } from "hono";
+import { streamSSE } from "hono/streaming";
+import { onDataChange } from "../watcher.js";
+export const eventsRoute = new Hono();
+const HEARTBEAT_MS = 25_000;
+eventsRoute.get("/api/events", (c) => streamSSE(c, async (stream) => {
+    const listener = (event) => {
+        void stream.writeSSE({ event: "change", data: JSON.stringify(event) }).catch(() => { });
+    };
+    const unsubscribe = onDataChange(listener);
+    const heartbeat = setInterval(() => {
+        void stream.writeSSE({ event: "ping", data: "{}" }).catch(() => { });
+    }, HEARTBEAT_MS);
+    await new Promise((resolve) => {
+        stream.onAbort(() => {
+            clearInterval(heartbeat);
+            unsubscribe();
+            resolve();
+        });
+    });
+}));
+//# sourceMappingURL=events.js.map

package/dist/web-server/routes/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/web-server/routes/events.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAoB,YAAY,EAAE,MAAM,eAAe,CAAC;AAE/D,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;AAEtC,MAAM,YAAY,GAAG,MAAM,CAAC;AAE5B,WAAW,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CACnC,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;IAC5B,MAAM,QAAQ,GAAG,CAAC,KAAkB,EAAE,EAAE;QACtC,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACzF,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IAE3C,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QACjC,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACtE,CAAC,EAAE,YAAY,CAAC,CAAC;IAEjB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;YAClB,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,WAAW,EAAE,CAAC;YACd,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}

package/dist/web-server/routes/hook-events.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Claude Code session-bridge endpoint.
+ *
+ * Claude Code has no live-injection channel: hooks are stateless, fire per
+ * event, and hold no persistent connection. So the session drives the bridge —
+ * it announces itself at `SessionStart`, picks up whatever the web UI queued at
+ * every `UserPromptSubmit` checkpoint, closes out at `SessionEnd`, and reports
+ * its transcript at `Stop` (the last checkpoint before teardown).
+ *
+ * Those checkpoints are also the only liveness signal an observed session ever
+ * emits, so each one stamps `lastCheckpointAt` — the field the session's derived
+ * phase reads to decide whether a terminal is still working.
+ *
+ * `SessionStart` additionally answers with `stagedContext`: the same staged
+ * environment an ARCS-owned headless run carries on `--append-system-prompt`,
+ * so a terminal a human drives knows its project, its workspace and its DAG
+ * position without the human setting the stage by hand. See
+ * `sessionStartContext` for what differs from the owned path.
+ *
+ * The response stays ARCS-shaped (`{sessionId, queuedMessages, stagedContext?}`);
+ * turning that into Claude Code's `hookSpecificOutput` envelope is the hook
+ * script's job, so a change to Claude Code's wire format never reaches the
+ * server.
+ *
+ * Unlike every other route here this one is not browser-facing, so it sits
+ * behind `requireHookToken` in addition to the global loopback check.
+ */
+import { Hono } from "hono";
+export declare const hookEventsRoute: Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+/**
+ * Ceiling on the block a SessionStart mirrors into a terminal, in characters.
+ *
+ * Deliberately far below `STAGE_SOFT_CAP` (6000): that budget is spent inside a
+ * headless `claude -p` process nobody is watching, whereas this text lands at
+ * the head of a live session a human is about to type into. Anything wider buys
+ * context nobody asked for at the cost of the window they did.
+ *
+ * Enforced by SELECTION, never by clipping — see `sessionStartContext`.
+ * `scripts/claude-code-session-hook.mjs` carries its own, wider refusal bound
+ * (`MAX_CONTEXT_CHARS`), pinned against this constant by
+ * `test/claude-code-hook-script.test.ts`.
+ */
+export declare const SESSION_START_STAGE_CAP = 2500;
+//# sourceMappingURL=hook-events.d.ts.map

package/dist/web-server/routes/hook-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-events.d.ts","sourceRoot":"","sources":["../../../src/web-server/routes/hook-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAkB5B,eAAO,MAAM,eAAe,4EAAa,CAAC;AAsI1C;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,uBAAuB,OAAO,CAAC"}

package/dist/web-server/routes/hook-events.js

@@ -0,0 +1,320 @@
+/**
+ * Claude Code session-bridge endpoint.
+ *
+ * Claude Code has no live-injection channel: hooks are stateless, fire per
+ * event, and hold no persistent connection. So the session drives the bridge —
+ * it announces itself at `SessionStart`, picks up whatever the web UI queued at
+ * every `UserPromptSubmit` checkpoint, closes out at `SessionEnd`, and reports
+ * its transcript at `Stop` (the last checkpoint before teardown).
+ *
+ * Those checkpoints are also the only liveness signal an observed session ever
+ * emits, so each one stamps `lastCheckpointAt` — the field the session's derived
+ * phase reads to decide whether a terminal is still working.
+ *
+ * `SessionStart` additionally answers with `stagedContext`: the same staged
+ * environment an ARCS-owned headless run carries on `--append-system-prompt`,
+ * so a terminal a human drives knows its project, its workspace and its DAG
+ * position without the human setting the stage by hand. See
+ * `sessionStartContext` for what differs from the owned path.
+ *
+ * The response stays ARCS-shaped (`{sessionId, queuedMessages, stagedContext?}`);
+ * turning that into Claude Code's `hookSpecificOutput` envelope is the hook
+ * script's job, so a change to Claude Code's wire format never reaches the
+ * server.
+ *
+ * Unlike every other route here this one is not browser-facing, so it sits
+ * behind `requireHookToken` in addition to the global loopback check.
+ */
+import { join } from "node:path";
+import { Hono } from "hono";
+import { z } from "zod";
+import { mirrorSessionTranscript } from "../../utils/claude-transcript.js";
+import { HOOK_EVENTS } from "../../utils/hook-contract.js";
+import { readJsonSafe } from "../../utils/json.js";
+import { readPlanIndex } from "../../utils/plan-store.js";
+import { drainSessionMessageQueue, getSession, updateSession, upsertSession, } from "../../utils/session-store.js";
+import { listTasks } from "../../utils/task-store.js";
+import { deriveOperatingBrief } from "../../utils/workflow-policy.js";
+import { buildStagedEnvironment, stripStageDelimiters } from "../prompt-assembly.js";
+import { parseBody, requireProjectDir, respond } from "../respond.js";
+export const hookEventsRoute = new Hono();
+/**
+ * Claude Code's native stdin fields, forwarded verbatim by the hook script.
+ * Unknown extra fields are ignored rather than rejected — Claude Code adds
+ * fields between releases and a hook must not start failing because of it.
+ *
+ * The accepted event names come straight from the bridge contract: the server
+ * cannot end up rejecting an event the installer registered the hook for.
+ */
+const hookEventSchema = z.object({
+    hook_event_name: z.enum(HOOK_EVENTS),
+    session_id: z.string().min(1),
+    cwd: z.string().optional(),
+    source: z.string().optional(),
+    prompt: z.string().optional(),
+    reason: z.string().optional(),
+    transcript_path: z.string().optional(),
+    control: z.string().optional(),
+});
+/**
+ * Builds the metadata persisted on the session. Claude Code's `cwd` lands under
+ * the `directory` key: that is the metadata key the sessions UI and the opencode
+ * bridge already read, so both runtimes render their worktree the same way.
+ * `transcript_path` is persisted under `transcriptPath` (the sessions UI reads
+ * that key) so headless-run write-backs can resolve the transcript without the
+ * client resupplying it, and `control` is persisted verbatim for back-compat
+ * with readers that still display it — it no longer decides anything here, the
+ * session's persisted `origin` does.
+ */
+function sessionMetadata(event) {
+    const metadata = {
+        ...(event.cwd && { directory: event.cwd }),
+        ...(event.source && { source: event.source }),
+        ...(event.control !== undefined && { control: event.control }),
+        ...(event.transcript_path !== undefined && { transcriptPath: event.transcript_path }),
+    };
+    return Object.keys(metadata).length > 0 ? metadata : undefined;
+}
+/**
+ * Registers (or refreshes) the session behind a hook event.
+ *
+ * Anything announcing itself through this endpoint is by definition a real
+ * terminal session ARCS is watching, so a record created here is `observed` —
+ * which is what makes it queueable. Provenance is create-only in the store, so
+ * an event arriving for an ARCS-owned thread refreshes it without demoting it.
+ */
+function registerSession(projectDir, event) {
+    const metadata = sessionMetadata(event);
+    return upsertSession(projectDir, {
+        runtimeType: "claude-code",
+        runtimeSessionId: event.session_id,
+        origin: "observed",
+        status: "active",
+        ...(metadata && { metadata }),
+    });
+}
+/**
+ * Records the checkpoint itself, plus whatever it carried.
+ *
+ * `lastCheckpointAt` is written at EVERY UserPromptSubmit and Stop, even for an
+ * event with no metadata at all: it is the only proof of life a session ARCS
+ * merely observes ever emits, and the derived phase reads nothing else for such
+ * a session. Miss one and a working terminal reads idle.
+ *
+ * ISO-8601, like every other top-level session timestamp (`metadata.run` keeps
+ * epoch ms — the two units never mix). Checkpoint-derived metadata
+ * (transcriptPath, directory…) rides the same write, so the transcript path a
+ * checkpoint carries is still never dropped.
+ */
+async function persistCheckpoint(projectDir, session, event) {
+    const metadata = sessionMetadata(event);
+    return updateSession(projectDir, {
+        id: session.normalizedId,
+        lastCheckpointAt: new Date().toISOString(),
+        ...(metadata !== undefined && { metadata }),
+    });
+}
+/**
+ * Whether a checkpoint's runtime transcript should be mirrored into the
+ * session's sidecar.
+ *
+ * Only sessions ARCS observes qualify. An `arcs`-origin record owns its sidecar
+ * through the run route's own turn appends, so mirroring a runtime transcript
+ * on top would duplicate the conversation. The rule reads the persisted origin,
+ * never `metadata.control`.
+ */
+function shouldMirrorTranscript(session) {
+    return session.origin === "observed";
+}
+/**
+ * Resolves the session behind a checkpoint, registering it if this is the first
+ * event ARCS has seen. `resume`/`compact` can deliver a prompt for a session
+ * whose SessionStart never reached us, and dropping the checkpoint would strand
+ * every message queued for it.
+ */
+async function resolveCheckpointSession(projectDir, event) {
+    try {
+        return await getSession(projectDir, event.session_id);
+    }
+    catch {
+        return registerSession(projectDir, event);
+    }
+}
+// ---------------------------------------------------------------------------
+// SessionStart staged context
+// ---------------------------------------------------------------------------
+/**
+ * Ceiling on the block a SessionStart mirrors into a terminal, in characters.
+ *
+ * Deliberately far below `STAGE_SOFT_CAP` (6000): that budget is spent inside a
+ * headless `claude -p` process nobody is watching, whereas this text lands at
+ * the head of a live session a human is about to type into. Anything wider buys
+ * context nobody asked for at the cost of the window they did.
+ *
+ * Enforced by SELECTION, never by clipping — see `sessionStartContext`.
+ * `scripts/claude-code-session-hook.mjs` carries its own, wider refusal bound
+ * (`MAX_CONTEXT_CHARS`), pinned against this constant by
+ * `test/claude-code-hook-script.test.ts`.
+ */
+export const SESSION_START_STAGE_CAP = 2500;
+/** Width for one value interpolated into the degraded block. */
+const DEGRADED_FIELD_WIDTH = 160;
+/**
+ * Normalizes one untrusted value for an ARCS-authored line: delimiter-stripped,
+ * whitespace-collapsed, width-bounded. Mirrors prompt-assembly's `field` (not
+ * exported), and applies to EVERY slot below rather than to the values that
+ * look risky — a project name and a task title are both agent- or user-authored
+ * text arriving in the controller's voice.
+ */
+function degradedField(value, width = DEGRADED_FIELD_WIDTH) {
+    const clean = stripStageDelimiters(value).replace(/\s+/g, " ").trim();
+    return clean.length <= width ? clean : `${clean.slice(0, width - 1)}…`;
+}
+/**
+ * The two lines a session with nothing staged for it still deserves.
+ *
+ * An observed session carries no `linkedNodeId` until a human sets one —
+ * discovery never links — so this is the COMMON case at SessionStart, not an
+ * edge. It therefore states what is true and useful (which project this
+ * workspace is, how to read its DAG, and what the operating brief says the
+ * project is currently on) instead of apologising for the missing link.
+ *
+ * No wrapper, and none needed: nothing here is a quoted body. The two variable
+ * values are stripped, collapsed and width-bounded through `degradedField`,
+ * exactly as prompt-assembly treats the same task title in its own brief block.
+ */
+async function degradedStagedContext(projectDir, slug) {
+    const [projectMeta, tasks, planIndex] = await Promise.all([
+        readJsonSafe(join(projectDir, "meta.json")),
+        listTasks(projectDir),
+        readPlanIndex(projectDir),
+    ]);
+    const operating = deriveOperatingBrief({
+        tasks: tasks.map((t) => ({
+            id: t.id,
+            title: t.title,
+            status: t.status,
+            planId: t.planId,
+            priority: t.priority,
+            dependsOn: t.dependsOn,
+        })),
+        plans: planIndex.plans.map((p) => ({ id: p.id, title: p.title, status: p.status })),
+    });
+    return [
+        `This workspace is tracked by ARCS as project ${degradedField(slug)} ` +
+            `"${degradedField(projectMeta?.name ?? slug)}" — read its DAG with ` +
+            `\`arcs brief ${degradedField(slug)} --lean --json\`. Link this session to a task in the ` +
+            "ARCS web UI to stage that task's scope, acceptance and verify command here.",
+        `Project current focus: ${degradedField(operating.currentFocus)} · ` +
+            `Next action: ${degradedField(operating.nextAction)}`,
+    ].join("\n");
+}
+/**
+ * The staged block a SessionStart answers with, or nothing at all.
+ *
+ * Same builder as an ARCS-owned headless run (`buildStagedEnvironment`), and
+ * deliberately NOT the same call:
+ *  - no references — those are attached per SEND, and a session that has not
+ *    started yet has none;
+ *  - no argv, no permission segment — the terminal's user owns their own
+ *    permissions and ARCS does not get to narrow them from here;
+ *  - a much tighter cap (see SESSION_START_STAGE_CAP);
+ *  - STATELESS — no fingerprint, no `metadata.stage`, no restage bookkeeping at
+ *    all. The staleness machinery exists to avoid re-injecting an unchanged
+ *    block across turns of one conversation; a SessionStart IS turn zero, so
+ *    there is nothing to compare against and nothing to persist.
+ *
+ * The cap is enforced by SELECTION — the whole assembled text, or the whole
+ * degraded block — never by clipping the assembled text. A head truncation
+ * would keep an untrusted body's opener and sever its closer, putting every
+ * later ARCS-authored line (including the one stating the controller's own
+ * scope) inside an unterminated untrusted region. `softCap` lets the builder's
+ * own ladder degrade gracefully first; the degraded block is the floor for the
+ * DAG wide enough that even a fully degraded build does not fit.
+ *
+ * Any failure returns `undefined`: the hook script's hard rule is that a broken
+ * bridge is invisible, so a staging error must reach it as an absent field, not
+ * as a 500.
+ *
+ * ONE builder, but not one wording: prompt-assembly conditions its IDENTITY and
+ * LIMITS blocks on the session's PERSISTED origin, and provenance is CREATE-ONLY
+ * (see `registerSession`). A first sighting is created `observed`; an event
+ * arriving for an ARCS-owned thread refreshes it without demoting it, so an
+ * `arcs`-origin session reaching SessionStart keeps its origin and therefore gets
+ * the `arcs` variant. Either variant states what is true of THAT session — for
+ * the observed one, that ARCS is NOT setting its tools, permissions or lifecycle,
+ * which the bullets above are the reason for, since no argv exists to set them
+ * with. The untrusted-content half is identical on both origins; only the claim
+ * of control moves.
+ */
+async function sessionStartContext(projectDir, slug, session, event) {
+    try {
+        if (session.linkedNodeType && session.linkedNodeId) {
+            const staged = await buildStagedEnvironment(projectDir, slug, session, {
+                // Claude Code's own cwd: the directory this terminal is actually in,
+                // which is a truer workspace root than the project's registered first
+                // path when a project spans more than one checkout.
+                ...(event.cwd && { workspaceRoot: event.cwd }),
+                softCap: SESSION_START_STAGE_CAP,
+            });
+            if (staged.text.length <= SESSION_START_STAGE_CAP)
+                return staged.text;
+        }
+        return await degradedStagedContext(projectDir, slug);
+    }
+    catch {
+        return undefined;
+    }
+}
+async function handleHookEvent(projectDir, slug, event) {
+    if (event.hook_event_name === "SessionStart") {
+        const session = await registerSession(projectDir, event);
+        const stagedContext = await sessionStartContext(projectDir, slug, session, event);
+        return {
+            sessionId: session.normalizedId,
+            queuedMessages: [],
+            ...(stagedContext !== undefined && { stagedContext }),
+        };
+    }
+    if (event.hook_event_name === "UserPromptSubmit") {
+        const session = await resolveCheckpointSession(projectDir, event);
+        const checkpoint = await persistCheckpoint(projectDir, session, event);
+        if (event.transcript_path !== undefined && shouldMirrorTranscript(checkpoint)) {
+            await mirrorSessionTranscript(projectDir, checkpoint.normalizedId, event.transcript_path);
+        }
+        const queuedMessages = await drainSessionMessageQueue(projectDir, checkpoint.normalizedId);
+        return { sessionId: checkpoint.normalizedId, queuedMessages };
+    }
+    if (event.hook_event_name === "Stop") {
+        // Stop is a checkpoint like UserPromptSubmit, so an unknown session is
+        // auto-registered — but the queue is deliberately NOT drained: a message
+        // queued for the session must survive to the next UserPromptSubmit, and
+        // Stop can arrive before that checkpoint if the turn ends without one.
+        const session = await resolveCheckpointSession(projectDir, event);
+        const checkpoint = await persistCheckpoint(projectDir, session, event);
+        if (event.transcript_path !== undefined && shouldMirrorTranscript(checkpoint)) {
+            await mirrorSessionTranscript(projectDir, checkpoint.normalizedId, event.transcript_path);
+        }
+        return { sessionId: checkpoint.normalizedId, queuedMessages: [] };
+    }
+    // SessionEnd. Every documented reason (clear|resume|logout|other) is an
+    // ordinary teardown — none of them signals a crash, so none maps to "failed".
+    const metadata = sessionMetadata(event);
+    const session = await updateSession(projectDir, {
+        id: event.session_id,
+        status: "completed",
+        ...(metadata !== undefined && { metadata }),
+    });
+    if (event.transcript_path !== undefined && shouldMirrorTranscript(session)) {
+        await mirrorSessionTranscript(projectDir, session.normalizedId, event.transcript_path);
+    }
+    return { sessionId: session.normalizedId, queuedMessages: [] };
+}
+hookEventsRoute.post("/api/hook/:slug/event", async (c) => respond(c, async () => {
+    const slug = c.req.param("slug");
+    // Validates the slug before it is threaded on to the stager, which uses it
+    // both as a knowledge-selection key and as an interpolated identity value.
+    const projectDir = requireProjectDir(slug);
+    return handleHookEvent(projectDir, slug, await parseBody(c, hookEventSchema));
+}));
+//# sourceMappingURL=hook-events.js.map

package/dist/web-server/routes/hook-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-events.js","sourceRoot":"","sources":["../../../src/web-server/routes/hook-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EACL,wBAAwB,EACxB,UAAU,EAEV,aAAa,EACb,aAAa,GACd,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAEtE,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC;AAE1C;;;;;;;GAOG;AACH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAgBH;;;;;;;;;GASG;AACH,SAAS,eAAe,CAAC,KAAgB;IACvC,MAAM,QAAQ,GAA4B;QACxC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;QAC1C,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7C,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9D,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;KACtF,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,UAAkB,EAAE,KAAgB;IAC3D,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,aAAa,CAAC,UAAU,EAAE;QAC/B,WAAW,EAAE,aAAa;QAC1B,gBAAgB,EAAE,KAAK,CAAC,UAAU;QAClC,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,QAAQ;QAChB,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC;KAC9B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,iBAAiB,CAC9B,UAAkB,EAClB,OAAoB,EACpB,KAAgB;IAEhB,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,aAAa,CAAC,UAAU,EAAE;QAC/B,EAAE,EAAE,OAAO,CAAC,YAAY;QACxB,gBAAgB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC1C,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;KAC5C,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,sBAAsB,CAAC,OAAoB;IAClD,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,wBAAwB,CACrC,UAAkB,EAClB,KAAgB;IAEhB,IAAI,CAAC;QACH,OAAO,MAAM,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,8BAA8B;AAC9B,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAE5C,gEAAgE;AAChE,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAEjC;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,KAAa,EAAE,KAAK,GAAG,oBAAoB;IAChE,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACtE,OAAO,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,qBAAqB,CAAC,UAAkB,EAAE,IAAY;IACnE,MAAM,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACxD,YAAY,CAAoB,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC9D,SAAS,CAAC,UAAU,CAAC;QACrB,aAAa,CAAC,UAAU,CAAC;KAC1B,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,oBAAoB,CAAC;QACrC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC;QACH,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;KACpF,CAAC,CAAC;IACH,OAAO;QACL,gDAAgD,aAAa,CAAC,IAAI,CAAC,GAAG;YACpE,IAAI,aAAa,CAAC,WAAW,EAAE,IAAI,IAAI,IAAI,CAAC,wBAAwB;YACpE,gBAAgB,aAAa,CAAC,IAAI,CAAC,uDAAuD;YAC1F,6EAA6E;QAC/E,0BAA0B,aAAa,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK;YAClE,gBAAgB,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE;KACxD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,KAAK,UAAU,mBAAmB,CAChC,UAAkB,EAClB,IAAY,EACZ,OAAoB,EACpB,KAAgB;IAEhB,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE;gBACrE,qEAAqE;gBACrE,sEAAsE;gBACtE,oDAAoD;gBACpD,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;gBAC9C,OAAO,EAAE,uBAAuB;aACjC,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,uBAAuB;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QACxE,CAAC;QACD,OAAO,MAAM,qBAAqB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,UAAkB,EAClB,IAAY,EACZ,KAAgB;IAEhB,IAAI,KAAK,CAAC,eAAe,KAAK,cAAc,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAClF,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,YAAY;YAC/B,cAAc,EAAE,EAAE;YAClB,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,CAAC;SACtD,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,eAAe,KAAK,kBAAkB,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9E,MAAM,uBAAuB,CAAC,UAAU,EAAE,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,wBAAwB,CAAC,UAAU,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;QAC3F,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,YAAY,EAAE,cAAc,EAAE,CAAC;IAChE,CAAC;IAED,IAAI,KAAK,CAAC,eAAe,KAAK,MAAM,EAAE,CAAC;QACrC,uEAAuE;QACvE,yEAAyE;QACzE,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9E,MAAM,uBAAuB,CAAC,UAAU,EAAE,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,YAAY,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IACpE,CAAC;IAED,wEAAwE;IACxE,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE;QAC9C,EAAE,EAAE,KAAK,CAAC,UAAU;QACpB,MAAM,EAAE,WAAW;QACnB,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;KAC5C,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3E,MAAM,uBAAuB,CAAC,UAAU,EAAE,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;AACjE,CAAC;AAED,eAAe,CAAC,IAAI,CAAC,uBAAuB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CACxD,OAAO,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE;IACpB,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC3C,OAAO,eAAe,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;AAChF,CAAC,CAAC,CACH,CAAC"}

package/dist/web-server/routes/projects.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Project-level routes: project listing, docs, cross-project graph,
+ * flat search index, and root DAG dependency edits.
+ */
+import { Hono } from "hono";
+export declare const projectsRoute: Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=projects.d.ts.map

package/dist/web-server/routes/projects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.d.ts","sourceRoot":"","sources":["../../../src/web-server/routes/projects.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAoB5B,eAAO,MAAM,aAAa,4EAAa,CAAC"}