@rubytech/create-sitedesk-code 0.1.340

package/payload/platform/services/whatsapp-channel/dist/jsonl-watch.js

@@ -0,0 +1,70 @@
+import { existsSync, readdirSync, statSync, watch } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+function claudeConfigRoot(env) {
+    return env.CLAUDE_CONFIG_DIR ?? join(homedir(), '.claude');
+}
+// Walk `${CLAUDE_CONFIG_DIR}/projects/<slug>/` for `${sessionId}.jsonl` (live
+// and archived). Returns the first match or null. Inlined from
+// claude-session-manager/src/jsonl-path.ts to avoid a cross-package dep.
+export function findJsonlForSessionId(sessionId, env = process.env) {
+    const projectsRoot = join(claudeConfigRoot(env), 'projects');
+    if (!existsSync(projectsRoot))
+        return null;
+    let slugs;
+    try {
+        slugs = readdirSync(projectsRoot, { withFileTypes: true })
+            .filter((d) => d.isDirectory())
+            .map((d) => d.name);
+    }
+    catch {
+        return null;
+    }
+    const basename = `${sessionId}.jsonl`;
+    for (const slug of slugs) {
+        const live = join(projectsRoot, slug, basename);
+        if (existsSync(live))
+            return live;
+        const archived = join(projectsRoot, slug, 'archive', basename);
+        if (existsSync(archived))
+            return archived;
+    }
+    return null;
+}
+/**
+ * Watch `jsonlPath` for any byte growth within `timeoutMs` ms.
+ * Returns true if the file grew before the deadline, false otherwise.
+ * Returns false immediately if the file cannot be statted.
+ */
+export async function watchForGrowth(jsonlPath, timeoutMs) {
+    let initialSize;
+    try {
+        initialSize = statSync(jsonlPath).size;
+    }
+    catch {
+        return false;
+    }
+    return new Promise((resolve) => {
+        let settled = false;
+        const settle = (v) => {
+            if (settled)
+                return;
+            settled = true;
+            watcher.close();
+            clearTimeout(timer);
+            resolve(v);
+        };
+        const timer = setTimeout(() => settle(false), timeoutMs);
+        const watcher = watch(jsonlPath, { persistent: false }, () => {
+            try {
+                if (statSync(jsonlPath).size > initialSize)
+                    settle(true);
+            }
+            catch {
+                settle(false);
+            }
+        });
+        watcher.on('error', () => settle(false));
+    });
+}
+//# sourceMappingURL=jsonl-watch.js.map

package/payload/platform/services/whatsapp-channel/dist/jsonl-watch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonl-watch.js","sourceRoot":"","sources":["../src/jsonl-watch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAKhC,SAAS,gBAAgB,CAAC,GAAsB;IAC9C,OAAO,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;AAC5D,CAAC;AAED,8EAA8E;AAC9E,+DAA+D;AAC/D,yEAAyE;AACzE,MAAM,UAAU,qBAAqB,CACnC,SAAiB,EACjB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,CAAA;IAC5D,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAA;IAC1C,IAAI,KAAe,CAAA;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aACvD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,SAAS,QAAQ,CAAA;IACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC/C,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;QAC9D,IAAI,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAA;IAC3C,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,SAAiB;IACvE,IAAI,WAAmB,CAAA;IACvB,IAAI,CAAC;QACH,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAA;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;QACtC,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,MAAM,GAAG,CAAC,CAAU,EAAE,EAAE;YAC5B,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,OAAO,CAAC,KAAK,EAAE,CAAA;YACf,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,CAAC,CAAC,CAAC,CAAA;QACZ,CAAC,CAAA;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAA;QAExD,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE;YAC3D,IAAI,CAAC;gBACH,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,GAAG,WAAW;oBAAE,MAAM,CAAC,IAAI,CAAC,CAAA;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,KAAK,CAAC,CAAA;YACf,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/payload/platform/services/whatsapp-channel/dist/notification.d.ts

@@ -0,0 +1,194 @@
+export interface MediaInbound {
+    path: string;
+    type: 'image' | 'audio' | 'video' | 'document' | 'sticker';
+    mimetype?: string;
+}
+export interface InboundPayload {
+    /** The WhatsApp sender this payload is for (E.164 digits or JID). */
+    senderId: string;
+    /** The message body, verbatim — multi-line content is preserved. */
+    text: string;
+    /** The WhatsApp message id, for dedup/observability. */
+    waMessageId: string;
+    /** Task 697 — every downloaded inbound media item this turn. [] when none.
+     *  Audio is present but skipped by the weaver (its transcript rode in as
+     *  `text`); each non-audio item becomes one Read-this-file note. The local
+     *  mirror of platform/ui's MediaRef — this package never cross-imports it. */
+    media: MediaInbound[];
+}
+/**
+ * Task 753 — the standing select-and-dispatch instruction. The inbound message
+ * is demoted to payload and the turn becomes a routing question: pick the owning
+ * specialist (dispatch via the Agent tool), else load the owning skill, else
+ * answer directly. Freestyle inline authoring is the `direct` floor, reached only
+ * when nothing owns the work — which is why a greeting/confirmation needs no
+ * separate skip: it falls through to `direct`. The turn is now framed in two
+ * markdown sections (see {@link composeAdminContent}): `## Context` carries the
+ * inbound payload first, then `## Instruction` carries this directive — so the
+ * agent reads the request, then how to act on it.
+ *
+ * Task 761 — the cadence clause. A long turn (e.g. building a quote across many
+ * Write/Bash/Edit steps) was producing one channel message, dispatched only at
+ * turn-end, leaving the sender in silence for minutes. The agent's interim
+ * narration is surfaced in the dashboard but is never dispatched to the channel;
+ * only `reply`-tool calls reach WhatsApp. So the clause directs the agent to use
+ * the reply tool for an early acknowledgement and mid-turn progress, then the
+ * result — not just the final message. Outcome, not script.
+ *
+ * Task 805 — the artefact and self-check clauses. Session e48c2a5e showed the
+ * cascade alone is ignored on artefact work (0 Agent dispatches across a 52 MB
+ * session while content-producer owned the work): the agent authored emails,
+ * an Excel→HTML template, and PDF iterations inline, and the first inline
+ * artefact anchored every follow-up edit inline. The instruction now names
+ * content-producer for deliverable artefacts — including follow-up edits to an
+ * artefact a specialist already produced — and adds a self-check: deciding
+ * against an agent/skill on artefact work is itself the violation signal.
+ * Quick conversational replies still fall through to the direct branch.
+ *
+ * Task 890 — the capability-denial clause. A turn framed as an action (not a
+ * how-to) had the agent answer from the partial state visible to it and report
+ * the wall it hit as fact (a narrow Cloudflare token seen, "can't list
+ * databases" declared) without ever loading the owning skill that held the
+ * full capability. The instruction now states the capabilities are well
+ * defined and requires a skill search before any "cannot be done" statement —
+ * a denial is valid only once that search returns nothing.
+ *
+ * Exported so the unit tests assert the exact wrapped shape.
+ */
+export declare const REFRAME_INSTRUCTION: string;
+/** Task 853 — the two doors a unified (multi-target) session can be bound to. */
+export type ChannelSource = 'whatsapp' | 'webchat';
+/** Task 753 — the reframe decision for one inbound: the wrapped `content` the
+ *  agent receives, and `payloadBytes`, the byte length of the inner payload
+ *  (message + woven media notes, excluding the wrapper) for the observability
+ *  line. */
+export interface ComposedInbound {
+    content: string;
+    payloadBytes: number;
+    /** Task 853 — the door this inbound arrived on. Default 'whatsapp'
+     *  (single-target back-compat); the multi-target loop passes the door. */
+    source: ChannelSource;
+}
+/**
+ * Shape an inbound WhatsApp payload as a Claude Code channel notification.
+ *
+ * The event carries ONLY the reframed message text — no `meta`. The sender,
+ * session id, and WhatsApp message id are all held server-side (the reply is
+ * pinned to the server's fixed sender), so none of it needs to reach the
+ * model's context. Two reasons: (1) data minimisation — the operator's phone
+ * number is never handed to Claude; (2) a bare event gives the agent nothing to
+ * narrate, so it acts on the message instead of announcing "incoming message
+ * from +44 …".
+ */
+export declare function buildInboundNotification(p: InboundPayload): {
+    method: "notifications/claude/channel";
+    params: {
+        content: string;
+    };
+};
+/**
+ * Task 753 — frame the composed payload as two markdown sections so the agent
+ * routes the request instead of authoring it inline: `## Context` carries the
+ * inbound payload, then `## Instruction` carries {@link REFRAME_INSTRUCTION}.
+ * Every channel turn is framed — there is no deterministic trivia-skip (operator
+ * decision): a greeting is handled by the cascade's `direct` branch, not by a
+ * pre-classifier here. Returns the framed `content` plus `payloadBytes` (the
+ * inner payload's byte length) for the channel server's `[reframe]`
+ * observability line.
+ */
+export declare function composeAdminContent(p: InboundPayload, source?: ChannelSource): ComposedInbound;
+/**
+ * Task 853 — the inner source tag for multi-target emissions. The harness
+ * wraps every channel notification as `<channel source="<registration-key>">`,
+ * and the unified server registers as `channel`, so the outer wrapper cannot
+ * name the door (a `source` notification param is ignored — probe-verified).
+ * This inner tag is the door marker readers attribute from. Single-target
+ * servers never call this: their registration key IS the door.
+ */
+export declare function wrapSourceTag(composed: ComposedInbound): string;
+/**
+ * Defence in depth: this server serves exactly one sender. Even though the
+ * gateway only streams that sender's messages, refuse anything else before
+ * it reaches the session.
+ */
+export declare function acceptsSender(mySenderId: string, p: {
+    senderId: string;
+}): boolean;
+/**
+ * Build the body for POST /wa-channel/reply. The reply tool exposes only
+ * `text` to the model; the senderId is the server's fixed sender (from spawn
+ * env), never trusted from the model, so a compromised turn cannot redirect a
+ * reply to a different WhatsApp recipient.
+ */
+export declare function buildReplyPostBody(mySenderId: string, text: string): {
+    senderId: string;
+    text: string;
+};
+/**
+ * Build the body for POST /wa-channel/reply-document — the file-reply the
+ * channel server posts when the agent calls the `reply-document` tool. Like the
+ * text reply, the senderId is the server's fixed sender (from spawn env), never
+ * model-supplied, so a compromised turn cannot redirect a document to a
+ * different recipient. The caption is omitted entirely when absent.
+ */
+export declare function buildReplyDocumentPostBody(mySenderId: string, files: string[], caption?: string): {
+    senderId: string;
+    files: string[];
+    caption?: string;
+};
+/**
+ * Build the body for POST /wa-channel/received — the receipt ack the channel
+ * server sends after it has emitted a drained inbound to the agent. It confirms
+ * the dev-channel side received the message so the gateway can mark it delivered
+ * (op=channel-received) instead of timing out as drain-undelivered. The senderId
+ * is the server's fixed sender, never model-supplied.
+ */
+export declare function buildReceivedPostBody(mySenderId: string, waMessageId: string): {
+    senderId: string;
+    waMessageId: string;
+};
+/**
+ * Retry an idempotent POST until it is accepted or the attempt cap is reached.
+ * `attempt` returns whether the POST was accepted; the helper returns on the
+ * first acceptance, otherwise sleeps `delayMs` and retries, up to `attempts`
+ * total. `sleep` is injected so tests run without real timers. Pure of the MCP
+ * SDK, like the other helpers here.
+ */
+export declare function postWithRetry(attempt: () => Promise<boolean>, opts: {
+    attempts: number;
+    delayMs: number;
+    sleep: (ms: number) => Promise<void>;
+}): Promise<boolean>;
+/**
+ * Build the body for POST /wa-channel/turn-end — the turn-end decision the
+ * channel server posts once per turn (Task 832). senderId + sessionId are the
+ * server's fixed values (spawn env), never model-supplied; `replied` is whether
+ * a reply/reply-document tool_use occurred in the turn; `finalText` is the
+ * end_turn message's text (the conclusion the gateway delivers only when nothing
+ * was delivered).
+ */
+export declare function buildTurnEndPostBody(mySenderId: string, sessionId: string, replied: boolean, finalText: string): {
+    senderId: string;
+    sessionId: string;
+    replied: boolean;
+    finalText: string;
+};
+/** Map a non-OK /wa-channel/reply response into an actionable MCP error string.
+ *  Terminal (logged out / device removed) tells the agent re-pairing is needed
+ *  and it must NOT promise an automatic recovery; transient keeps the
+ *  underlying reason (retryable). Falls back to the bare status when the body
+ *  carries no usable reason. */
+export declare function buildReplyError(status: number, body: unknown): string;
+export declare const INTERNAL_LEAK_PATTERNS: {
+    name: string;
+    re: RegExp;
+}[];
+export interface Redaction {
+    pattern: string;
+    match: string;
+}
+export declare function redactInternalLeaks(text: string): {
+    clean: string;
+    redactions: Redaction[];
+};
+//# sourceMappingURL=notification.d.ts.map

package/payload/platform/services/whatsapp-channel/dist/notification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification.d.ts","sourceRoot":"","sources":["../src/notification.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAA;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAA;IAChB,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAA;IACZ,wDAAwD;IACxD,WAAW,EAAE,MAAM,CAAA;IACnB;;;kFAG8E;IAC9E,KAAK,EAAE,YAAY,EAAE,CAAA;CACtB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,eAAO,MAAM,mBAAmB,QA4CO,CAAA;AAEvC,iFAAiF;AACjF,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,SAAS,CAAA;AAElD;;;YAGY;AACZ,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB;8EAC0E;IAC1E,MAAM,EAAE,aAAa,CAAA;CACtB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,cAAc;;;;;EAOzD;AA0BD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,GAAE,aAA0B,GAAG,eAAe,CAO1G;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,CAE/D;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAElF;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAEvG;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EAAE,EACf,OAAO,CAAC,EAAE,MAAM,GACf;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAIzD;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAE3C;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,EAC/B,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,GAChF,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,GAChB;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAE9E;AAED;;;;gCAIgC;AAChC,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAMrE;AAYD,eAAO,MAAM,sBAAsB,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAOhE,CAAA;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;CACd;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,SAAS,EAAE,CAAA;CAAE,CAU5F"}

package/payload/platform/services/whatsapp-channel/dist/notification.js

@@ -0,0 +1,265 @@
+// Pure helpers for the WhatsApp channel server. No MCP SDK import here, so
+// these can be unit-tested without the SDK installed and so the server's
+// transport wiring (server.ts) stays separable from its message shaping.
+/**
+ * Task 753 — the standing select-and-dispatch instruction. The inbound message
+ * is demoted to payload and the turn becomes a routing question: pick the owning
+ * specialist (dispatch via the Agent tool), else load the owning skill, else
+ * answer directly. Freestyle inline authoring is the `direct` floor, reached only
+ * when nothing owns the work — which is why a greeting/confirmation needs no
+ * separate skip: it falls through to `direct`. The turn is now framed in two
+ * markdown sections (see {@link composeAdminContent}): `## Context` carries the
+ * inbound payload first, then `## Instruction` carries this directive — so the
+ * agent reads the request, then how to act on it.
+ *
+ * Task 761 — the cadence clause. A long turn (e.g. building a quote across many
+ * Write/Bash/Edit steps) was producing one channel message, dispatched only at
+ * turn-end, leaving the sender in silence for minutes. The agent's interim
+ * narration is surfaced in the dashboard but is never dispatched to the channel;
+ * only `reply`-tool calls reach WhatsApp. So the clause directs the agent to use
+ * the reply tool for an early acknowledgement and mid-turn progress, then the
+ * result — not just the final message. Outcome, not script.
+ *
+ * Task 805 — the artefact and self-check clauses. Session e48c2a5e showed the
+ * cascade alone is ignored on artefact work (0 Agent dispatches across a 52 MB
+ * session while content-producer owned the work): the agent authored emails,
+ * an Excel→HTML template, and PDF iterations inline, and the first inline
+ * artefact anchored every follow-up edit inline. The instruction now names
+ * content-producer for deliverable artefacts — including follow-up edits to an
+ * artefact a specialist already produced — and adds a self-check: deciding
+ * against an agent/skill on artefact work is itself the violation signal.
+ * Quick conversational replies still fall through to the direct branch.
+ *
+ * Task 890 — the capability-denial clause. A turn framed as an action (not a
+ * how-to) had the agent answer from the partial state visible to it and report
+ * the wall it hit as fact (a narrow Cloudflare token seen, "can't list
+ * databases" declared) without ever loading the owning skill that held the
+ * full capability. The instruction now states the capabilities are well
+ * defined and requires a skill search before any "cannot be done" statement —
+ * a denial is valid only once that search returns nothing.
+ *
+ * Exported so the unit tests assert the exact wrapped shape.
+ */
+export const REFRAME_INSTRUCTION = 'Choose the installed specialist that owns this request and dispatch it with the Agent tool. ' +
+    'Any deliverable artefact — an email or letter draft, a quote, an order, a report, a PDF, an image, a page — ' +
+    'is content-producer work: dispatch content-producer for it, without exception, ' +
+    'including follow-up edits to an artefact a specialist already produced. ' +
+    'If no specialist fits, load the owning skill. ' +
+    'If neither fits (a greeting, a quick question, a confirmation, a direct continuation), just answer. ' +
+    'If you are about to do artefact work without an agent or skill, that decision is itself the violation signal — ' +
+    'stop and reconsider before answering directly. ' +
+    'Your capabilities here are very well defined: before you tell the sender something cannot be done, ' +
+    'search the skills for the owning capability, and treat a denial as valid only once that search comes back empty. ' +
+    'Then carry it out. ' +
+    'Call the reply tool right away to acknowledge you are on it, ' +
+    'send a brief progress note with the reply tool before each long step, and call the reply tool again with the result — ' +
+    'never stay silent until the end. ' +
+    // Task 980 — the channel/visibility model. A channel turn can end with its
+    // substantive answer written as plain assistant text and no reply-tool call;
+    // the operator never receives it. The bare cadence clause above read as
+    // progress-note etiquette, so this clause states the mechanism and consequence
+    // outright: the operator sees ONLY reply-tool text, so a turn-final plain text
+    // block delivers nothing. IDENTICAL to the webchat twin's clause in
+    // ADMIN_REFRAME_INSTRUCTION (recipient-neutral so the literal matches),
+    // drift-guarded by a test in each service.
+    'Remember you are answering over a channel: the person you are replying to is not watching this session ' +
+    'and sees only the text you send with the reply tool. ' +
+    'Anything you write as an ordinary assistant message, without calling the reply tool, is invisible to them. ' +
+    'So a turn that answers them is finished only once you have called the reply tool with the full answer; ' +
+    'a turn that ends without a reply tool call delivers nothing, no matter what you wrote. ' +
+    // Task 919 — the bridge forwards a SendUserFile call to this conversation as a
+    // real attachment. Steer the agent to deliver the file, not describe it. This
+    // clause is identical in the webchat twin (ADMIN_REFRAME_INSTRUCTION) and
+    // drift-guarded by a test in each service.
+    'When you have produced a file to deliver, deliver it by calling SendUserFile with its path — ' +
+    'the platform forwards it to this conversation as an attachment; ' +
+    'a reply that only names or describes the file is not delivery. ' +
+    // Task 982 — plain English on every operator-facing reply, not only on explicit
+    // "explain in plain English" requests. The plainly skill is installed but
+    // otherwise triggers only on that explicit ask, so ordinary replies carry the
+    // AI tells it already catalogues. This clause points the agent at the skill for
+    // every reply form. IDENTICAL to the webchat twin's clause in
+    // ADMIN_REFRAME_INSTRUCTION (recipient-neutral so the literal matches),
+    // drift-guarded by a test in each service.
+    'Write every reply you send (acknowledgement, progress note, answer, or deliverable summary) ' +
+    'in plain English, in the spoken register and free of the AI tells the plainly skill catalogues; ' +
+    'load that skill for the full rules.';
+/**
+ * Shape an inbound WhatsApp payload as a Claude Code channel notification.
+ *
+ * The event carries ONLY the reframed message text — no `meta`. The sender,
+ * session id, and WhatsApp message id are all held server-side (the reply is
+ * pinned to the server's fixed sender), so none of it needs to reach the
+ * model's context. Two reasons: (1) data minimisation — the operator's phone
+ * number is never handed to Claude; (2) a bare event gives the agent nothing to
+ * narrate, so it acts on the message instead of announcing "incoming message
+ * from +44 …".
+ */
+export function buildInboundNotification(p) {
+    return {
+        method: 'notifications/claude/channel',
+        params: {
+            content: composeAdminContent(p).content,
+        },
+    };
+}
+/**
+ * Task 697 — weave every inbound non-audio media item into the turn for the
+ * admin sender, one Read-this-file note per item (a debounce batch may carry
+ * several). Only admin senders reach the native channel (public WhatsApp was
+ * removed in Task 677 P2). Per-item wording is kept identical to the legacy
+ * bridge's `composeTurn` admin branch (claude-bridge.ts) so behaviour matches
+ * archived Task 637. Audio is skipped: its transcript already arrived as
+ * `p.text`. Only the `/tmp` file paths are added to Claude's context — never
+ * the sender number, preserving the data-minimisation invariant above.
+ */
+function composePayload(p) {
+    const openable = (p.media ?? []).filter((m) => m.type !== 'audio');
+    if (openable.length === 0)
+        return p.text;
+    const notes = openable.map((m) => `[Inbound WhatsApp ${m.type}: ${m.path}` +
+        `${m.mimetype ? ` (${m.mimetype})` : ''}. ` +
+        `Read this file to see what the sender shared.]`);
+    const caption = p.text.trim();
+    const body = notes.join('\n\n');
+    return caption ? `${caption}\n\n${body}` : body;
+}
+/**
+ * Task 753 — frame the composed payload as two markdown sections so the agent
+ * routes the request instead of authoring it inline: `## Context` carries the
+ * inbound payload, then `## Instruction` carries {@link REFRAME_INSTRUCTION}.
+ * Every channel turn is framed — there is no deterministic trivia-skip (operator
+ * decision): a greeting is handled by the cascade's `direct` branch, not by a
+ * pre-classifier here. Returns the framed `content` plus `payloadBytes` (the
+ * inner payload's byte length) for the channel server's `[reframe]`
+ * observability line.
+ */
+export function composeAdminContent(p, source = 'whatsapp') {
+    const payload = composePayload(p);
+    return {
+        content: `## Context\n${payload}\n\n## Instruction\n${REFRAME_INSTRUCTION}`,
+        payloadBytes: Buffer.byteLength(payload, 'utf8'),
+        source,
+    };
+}
+/**
+ * Task 853 — the inner source tag for multi-target emissions. The harness
+ * wraps every channel notification as `<channel source="<registration-key>">`,
+ * and the unified server registers as `channel`, so the outer wrapper cannot
+ * name the door (a `source` notification param is ignored — probe-verified).
+ * This inner tag is the door marker readers attribute from. Single-target
+ * servers never call this: their registration key IS the door.
+ */
+export function wrapSourceTag(composed) {
+    return `<channel source="${composed.source}">\n${composed.content}\n</channel>`;
+}
+/**
+ * Defence in depth: this server serves exactly one sender. Even though the
+ * gateway only streams that sender's messages, refuse anything else before
+ * it reaches the session.
+ */
+export function acceptsSender(mySenderId, p) {
+    return p.senderId === mySenderId;
+}
+/**
+ * Build the body for POST /wa-channel/reply. The reply tool exposes only
+ * `text` to the model; the senderId is the server's fixed sender (from spawn
+ * env), never trusted from the model, so a compromised turn cannot redirect a
+ * reply to a different WhatsApp recipient.
+ */
+export function buildReplyPostBody(mySenderId, text) {
+    return { senderId: mySenderId, text };
+}
+/**
+ * Build the body for POST /wa-channel/reply-document — the file-reply the
+ * channel server posts when the agent calls the `reply-document` tool. Like the
+ * text reply, the senderId is the server's fixed sender (from spawn env), never
+ * model-supplied, so a compromised turn cannot redirect a document to a
+ * different recipient. The caption is omitted entirely when absent.
+ */
+export function buildReplyDocumentPostBody(mySenderId, files, caption) {
+    return caption !== undefined
+        ? { senderId: mySenderId, files, caption }
+        : { senderId: mySenderId, files };
+}
+/**
+ * Build the body for POST /wa-channel/received — the receipt ack the channel
+ * server sends after it has emitted a drained inbound to the agent. It confirms
+ * the dev-channel side received the message so the gateway can mark it delivered
+ * (op=channel-received) instead of timing out as drain-undelivered. The senderId
+ * is the server's fixed sender, never model-supplied.
+ */
+export function buildReceivedPostBody(mySenderId, waMessageId) {
+    return { senderId: mySenderId, waMessageId };
+}
+/**
+ * Retry an idempotent POST until it is accepted or the attempt cap is reached.
+ * `attempt` returns whether the POST was accepted; the helper returns on the
+ * first acceptance, otherwise sleeps `delayMs` and retries, up to `attempts`
+ * total. `sleep` is injected so tests run without real timers. Pure of the MCP
+ * SDK, like the other helpers here.
+ */
+export async function postWithRetry(attempt, opts) {
+    for (let i = 0; i < opts.attempts; i++) {
+        if (await attempt())
+            return true;
+        if (i < opts.attempts - 1)
+            await opts.sleep(opts.delayMs);
+    }
+    return false;
+}
+/**
+ * Build the body for POST /wa-channel/turn-end — the turn-end decision the
+ * channel server posts once per turn (Task 832). senderId + sessionId are the
+ * server's fixed values (spawn env), never model-supplied; `replied` is whether
+ * a reply/reply-document tool_use occurred in the turn; `finalText` is the
+ * end_turn message's text (the conclusion the gateway delivers only when nothing
+ * was delivered).
+ */
+export function buildTurnEndPostBody(mySenderId, sessionId, replied, finalText) {
+    return { senderId: mySenderId, sessionId, replied, finalText };
+}
+/** Map a non-OK /wa-channel/reply response into an actionable MCP error string.
+ *  Terminal (logged out / device removed) tells the agent re-pairing is needed
+ *  and it must NOT promise an automatic recovery; transient keeps the
+ *  underlying reason (retryable). Falls back to the bare status when the body
+ *  carries no usable reason. */
+export function buildReplyError(status, body) {
+    const b = body;
+    const reason = typeof b?.error === 'string' && b.error.length > 0 ? b.error : null;
+    if (!reason)
+        return `reply: gateway returned ${status}`;
+    if (b?.terminal === true)
+        return 'reply: WhatsApp logged out — re-link required';
+    return `reply: ${reason}`;
+}
+// Task 834 — runtime internal-leak guard. The build-time gate
+// check-no-task-id-leaks.mjs scans source strings; it cannot catch a task
+// number, repo path, or log tag the model generates at runtime inside a reply.
+// This is its runtime complement: it redacts those patterns from outbound
+// operator text before the reply leaves the box. Precision — the 2-digit floor
+// on task numbers keeps "Task 3 on your list" and a price "£829" out; the
+// hyphen requirement on bracket tags keeps "[urgent]" out; `.js` is not a
+// source-file match (only `.ts`/`.tsx`), and the built bundle server.js is
+// matched explicitly. repo-path is ordered before source-file so a full path
+// like platform/ui/app/page.tsx redacts as ONE match, not path + filename.
+export const INTERNAL_LEAK_PATTERNS = [
+    { name: 'task-id', re: /\bTasks?[\s-]+\d{2,4}\b/g },
+    { name: 'repo-path', re: /\bplatform\/[A-Za-z0-9_./-]+/g },
+    { name: 'bundle', re: /\bserver\.(?:js|cjs|mjs)\b/g },
+    { name: 'source-file', re: /\b[A-Za-z0-9_-]+\.tsx?\b/g },
+    { name: 'log-tag', re: /\[[a-z]+(?:-[a-z]+)+\]/g },
+    { name: 'op-tag', re: /\bop=[a-z][a-z-]*\b/g },
+];
+export function redactInternalLeaks(text) {
+    const redactions = [];
+    let clean = text;
+    for (const { name, re } of INTERNAL_LEAK_PATTERNS) {
+        clean = clean.replace(re, (m) => {
+            redactions.push({ pattern: name, match: m });
+            return '[redacted]';
+        });
+    }
+    return { clean, redactions };
+}
+//# sourceMappingURL=notification.js.map

package/payload/platform/services/whatsapp-channel/dist/notification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification.js","sourceRoot":"","sources":["../src/notification.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,yEAAyE;AACzE,yEAAyE;AAsBzE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAC9B,8FAA8F;IAC9F,8GAA8G;IAC9G,iFAAiF;IACjF,0EAA0E;IAC1E,gDAAgD;IAChD,sGAAsG;IACtG,iHAAiH;IACjH,iDAAiD;IACjD,qGAAqG;IACrG,mHAAmH;IACnH,qBAAqB;IACrB,+DAA+D;IAC/D,wHAAwH;IACxH,mCAAmC;IACnC,2EAA2E;IAC3E,6EAA6E;IAC7E,wEAAwE;IACxE,+EAA+E;IAC/E,+EAA+E;IAC/E,oEAAoE;IACpE,wEAAwE;IACxE,2CAA2C;IAC3C,yGAAyG;IACzG,uDAAuD;IACvD,6GAA6G;IAC7G,yGAAyG;IACzG,yFAAyF;IACzF,+EAA+E;IAC/E,8EAA8E;IAC9E,0EAA0E;IAC1E,2CAA2C;IAC3C,+FAA+F;IAC/F,kEAAkE;IAClE,iEAAiE;IACjE,gFAAgF;IAChF,0EAA0E;IAC1E,8EAA8E;IAC9E,gFAAgF;IAChF,8DAA8D;IAC9D,wEAAwE;IACxE,2CAA2C;IAC3C,8FAA8F;IAC9F,kGAAkG;IAClG,qCAAqC,CAAA;AAiBvC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CAAC,CAAiB;IACxD,OAAO;QACL,MAAM,EAAE,8BAAuC;QAC/C,MAAM,EAAE;YACN,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,OAAO;SACxC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,cAAc,CAAC,CAAiB;IACvC,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAA;IAClE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,IAAI,CAAA;IACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CACxB,CAAC,CAAC,EAAE,EAAE,CACJ,qBAAqB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE;QACxC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI;QAC3C,gDAAgD,CACnD,CAAA;IACD,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;IAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC/B,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AACjD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,CAAiB,EAAE,SAAwB,UAAU;IACvF,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;IACjC,OAAO;QACL,OAAO,EAAE,eAAe,OAAO,uBAAuB,mBAAmB,EAAE;QAC3E,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;QAChD,MAAM;KACP,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,QAAyB;IACrD,OAAO,oBAAoB,QAAQ,CAAC,MAAM,OAAO,QAAQ,CAAC,OAAO,cAAc,CAAA;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,CAAuB;IACvE,OAAO,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAA;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB,EAAE,IAAY;IACjE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CACxC,UAAkB,EAClB,KAAe,EACf,OAAgB;IAEhB,OAAO,OAAO,KAAK,SAAS;QAC1B,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE;QAC1C,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;AACrC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EAClB,WAAmB;IAEnB,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,CAAA;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA+B,EAC/B,IAAiF;IAEjF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,MAAM,OAAO,EAAE;YAAE,OAAO,IAAI,CAAA;QAChC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,CAAC;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC3D,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,UAAkB,EAClB,SAAiB,EACjB,OAAgB,EAChB,SAAiB;IAEjB,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;AAChE,CAAC;AAED;;;;gCAIgC;AAChC,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,IAAa;IAC3D,MAAM,CAAC,GAAG,IAAsD,CAAA;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;IAClF,IAAI,CAAC,MAAM;QAAE,OAAO,2BAA2B,MAAM,EAAE,CAAA;IACvD,IAAI,CAAC,EAAE,QAAQ,KAAK,IAAI;QAAE,OAAO,+CAA+C,CAAA;IAChF,OAAO,UAAU,MAAM,EAAE,CAAA;AAC3B,CAAC;AAED,8DAA8D;AAC9D,0EAA0E;AAC1E,+EAA+E;AAC/E,0EAA0E;AAC1E,+EAA+E;AAC/E,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,sBAAsB,GAAmC;IACpE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,0BAA0B,EAAE;IACnD,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,+BAA+B,EAAE;IAC1D,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,6BAA6B,EAAE;IACrD,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,2BAA2B,EAAE;IACxD,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,yBAAyB,EAAE;IAClD,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,sBAAsB,EAAE;CAC/C,CAAA;AAOD,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,UAAU,GAAgB,EAAE,CAAA;IAClC,IAAI,KAAK,GAAG,IAAI,CAAA;IAChB,KAAK,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,sBAAsB,EAAE,CAAC;QAClD,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;YAC9B,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;YAC5C,OAAO,YAAY,CAAA;QACrB,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;AAC9B,CAAC"}

package/payload/platform/services/whatsapp-channel/dist/server.d.ts

@@ -0,0 +1,57 @@
+#!/usr/bin/env node
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { type WatchGrewFn, type FindJsonlFn } from './jsonl-watch.js';
+import { type OnTurnEnd } from './turn-follow.js';
+import { parseTargets, type TargetSet } from './targets.js';
+export { parseTargets };
+export type FollowTurnEndsFn = (jsonlPath: string, startOffset: number, onTurnEnd: OnTurnEnd) => Promise<void>;
+export declare const INSTRUCTIONS: string;
+export declare const MULTI_INSTRUCTIONS: string;
+export declare const mcp: Server<{
+    method: string;
+    params?: {
+        [x: string]: unknown;
+        _meta?: {
+            [x: string]: unknown;
+            progressToken?: string | number | undefined;
+            "io.modelcontextprotocol/related-task"?: {
+                taskId: string;
+            } | undefined;
+        } | undefined;
+    } | undefined;
+}, {
+    method: string;
+    params?: {
+        [x: string]: unknown;
+        _meta?: {
+            [x: string]: unknown;
+            progressToken?: string | number | undefined;
+            "io.modelcontextprotocol/related-task"?: {
+                taskId: string;
+            } | undefined;
+        } | undefined;
+    } | undefined;
+}, {
+    [x: string]: unknown;
+    _meta?: {
+        [x: string]: unknown;
+        progressToken?: string | number | undefined;
+        "io.modelcontextprotocol/related-task"?: {
+            taskId: string;
+        } | undefined;
+    } | undefined;
+}>;
+export declare function subscribeInbound(opts?: {
+    watchGrew?: WatchGrewFn;
+    findJsonl?: FindJsonlFn;
+    notificationTimeoutMs?: number;
+    followTurnEnds?: FollowTurnEndsFn;
+}): Promise<void>;
+export declare function subscribeMultiInbound(targets: TargetSet, opts?: {
+    watchGrew?: WatchGrewFn;
+    findJsonl?: FindJsonlFn;
+    notificationTimeoutMs?: number;
+    followTurnEnds?: FollowTurnEndsFn;
+}): Promise<void>;
+export declare function main(): Promise<void>;
+//# sourceMappingURL=server.d.ts.map

package/payload/platform/services/whatsapp-channel/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";AAcA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAA;AAIlE,OAAO,EAAyC,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC5G,OAAO,EAAkB,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjE,OAAO,EAAE,YAAY,EAA4E,KAAK,SAAS,EAAoB,MAAM,cAAc,CAAA;AAEvJ,OAAO,EAAE,YAAY,EAAE,CAAA;AA+BvB,MAAM,MAAM,gBAAgB,GAAG,CAC7B,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,SAAS,KACjB,OAAO,CAAC,IAAI,CAAC,CAAA;AAMlB,eAAO,MAAM,YAAY,QAkBgE,CAAA;AAMzF,eAAO,MAAM,kBAAkB,QAoB0D,CAAA;AAEzF,eAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAMf,CAAA;AAoKD,wBAAsB,gBAAgB,CAAC,IAAI,CAAC,EAAE;IAC5C,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,cAAc,CAAC,EAAE,gBAAgB,CAAA;CAClC,GAAG,OAAO,CAAC,IAAI,CAAC,CAoLhB;AAUD,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,SAAS,EAClB,IAAI,CAAC,EAAE;IACL,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,cAAc,CAAC,EAAE,gBAAgB,CAAA;CAClC,GACA,OAAO,CAAC,IAAI,CAAC,CAGf;AAuKD,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAkB1C"}