@songsid/agend 2.1.12 → 2.2.0-alpha.2

package/dist/web-auth.js

@@ -1,20 +1,22 @@
+import { gatewayRequestContext, isWebRequestCurrent } from "./web-request-context.js";
 import { chmodSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
-import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
+import { randomBytes, timingSafeEqual } from "node:crypto";
 import { join } from "node:path";
+import { csrfTokenFor, tokenEpoch, } from "./web-session.js";
 export const WEB_TOKEN_INVALID_MESSAGE = "Token expired or invalid — run /dashboard again";
 /** No credential at all. Distinct from "wrong credential" so a browser that
  * silently drops cookies is diagnosable instead of looking like a bad token. */
 export const WEB_SESSION_REQUIRED_MESSAGE = "No session — open the dashboard link again (cookies must be enabled for this site)";
+/** A cookie was sent and the server no longer honours it: expired, signed out, revoked or rotated away. */
+export const WEB_SESSION_EXPIRED_MESSAGE = "Session expired or signed out — sign in again";
 export const WEB_CROSS_SITE_MESSAGE = "Cross-site request rejected";
-/** A URL token is redeemed for a session cookie on a GET; it is never a
- * credential for a write, where it would also survive in history and logs. */
-export const WEB_URL_TOKEN_WRITE_MESSAGE = "URL tokens are only redeemed on GET — send X-Agend-Token for API writes";
 const WEB_TOKEN_PATTERN = /^[0-9a-f]{48}$/i;
+/** Plain over http (loopback); `__Host-` over https, which pins Secure + Path=/ + no Domain in the browser. */
 export const WEB_SESSION_COOKIE = "agend_session";
-/** 12h. The old model was "valid forever"; the panel is an escape hatch, so the
- * cookie outlives a working day and nothing more. `web-token rotate` kills every
- * issued cookie immediately regardless of this. */
-export const WEB_SESSION_MAX_AGE_SECONDS = 12 * 60 * 60;
+export const WEB_SESSION_COOKIE_SECURE = "__Host-agend_session";
+/** Sent by pages on every write; the value is `csrfTokenFor(sessionId)`, handed out by `GET /auth/session`. */
+export const WEB_CSRF_HEADER = "x-agend-csrf";
+export const WEB_CSRF_MESSAGE = "Write rejected — missing or wrong CSRF token (reload the page)";
 function readValidToken(path) {
     try {
         const token = readFileSync(path, "utf8").trim();
@@ -100,15 +102,6 @@ export function rotateWebToken(dataDir) {
     catch { /* best effort */ }
     return token;
 }
-/**
- * The cookie carries a derivation of the token, never the token itself: a
- * stolen cookie opens the panel but cannot be replayed as `?token=` /
- * `X-Agend-Token` (which also authorize /view writes and the CLI). Rotating
- * `web.token` changes the derivation, so every issued cookie dies with it.
- */
-export function webSessionCookieValue(token) {
-    return createHash("sha256").update(`agend-web-session-v1:${token}`).digest("hex");
-}
 function constantTimeEquals(a, b) {
     const left = Buffer.from(a, "utf8");
     const right = Buffer.from(b, "utf8");
@@ -149,7 +142,10 @@ function headerValue(req, name) {
  * caller, which is the same `X-Agend-Token` path the CLI uses.
  */
 export function isSameOriginRequest(req) {
+    const gateway = gatewayRequestContext(req);
     const origin = headerValue(req, "origin");
+    if (gateway)
+        return isWebRequestCurrent(req) && (!origin || origin === gateway.expectedOrigin);
     if (!origin)
         return true;
     const host = headerValue(req, "host");
@@ -168,93 +164,197 @@ export function isSameOriginRequest(req) {
  * attribute. The health server is always plain HTTP, so the only signal is the
  * tunnel/proxy in front of it. A forged header can only make us set Secure on a
  * plain-HTTP response, which costs the forger their own cookie and nothing else. */
-function isSecureRequest(req) {
+export function isSecureRequest(req) {
+    if (gatewayRequestContext(req))
+        return true;
     const proto = headerValue(req, "x-forwarded-proto");
     if (!proto)
         return false;
     return proto.split(",")[0].trim().toLowerCase() === "https";
 }
-export function buildSessionCookie(token, secure) {
+/**
+ * The session cookie for a freshly minted session.
+ *
+ * `Max-Age` is a courtesy so the browser forgets it when the server would; the
+ * server enforces the expiry itself and does not rely on the browser doing so.
+ */
+export function buildSessionCookie(sessionId, secure, maxAgeSeconds) {
     const attrs = [
-        `${WEB_SESSION_COOKIE}=${webSessionCookieValue(token)}`,
+        `${secure ? WEB_SESSION_COOKIE_SECURE : WEB_SESSION_COOKIE}=${sessionId}`,
         "Path=/",
         "HttpOnly",
         // Strict, not Lax: the panel can restart instances, so a cross-site
-        // navigation must not arrive already authenticated.
+        // navigation must not arrive already authenticated. The sign-in page
+        // handles the resulting "landed from a chat link" case.
         "SameSite=Strict",
-        `Max-Age=${WEB_SESSION_MAX_AGE_SECONDS}`,
+        `Max-Age=${Math.max(0, Math.floor(maxAgeSeconds))}`,
     ];
     if (secure)
         attrs.push("Secure");
     return attrs.join("; ");
 }
-export function hasValidSessionCookie(req, token) {
-    const cookie = parseCookieHeader(headerValue(req, "cookie") ?? undefined).get(WEB_SESSION_COOKIE);
-    return !!cookie && constantTimeEquals(cookie, webSessionCookieValue(token));
+/** Expire the cookie under both names: which one was set depends on how the browser reached us. */
+export function buildClearedSessionCookies() {
+    return [
+        `${WEB_SESSION_COOKIE}=; Path=/; HttpOnly; SameSite=Strict; Max-Age=0`,
+        `${WEB_SESSION_COOKIE_SECURE}=; Path=/; HttpOnly; SameSite=Strict; Max-Age=0; Secure`,
+    ];
+}
+/** The presented session id, or undefined. A `__Host-` cookie wins: it cannot have been planted by a sibling site. */
+export function readSessionCookie(req) {
+    const jar = parseCookieHeader(headerValue(req, "cookie") ?? undefined);
+    return gatewayRequestContext(req) ? jar.get(WEB_SESSION_COOKIE_SECURE) : jar.get(WEB_SESSION_COOKIE_SECURE) ?? jar.get(WEB_SESSION_COOKIE);
 }
-function hasValidHeaderToken(req, token) {
+export function hasValidHeaderToken(req, token) {
+    if (gatewayRequestContext(req))
+        return false;
     const provided = headerValue(req, "x-agend-token");
     return !!provided && constantTimeEquals(provided, token);
 }
-/** Same-origin relative target with the token stripped and every other query
- * parameter kept. Relative on purpose: an absolute Location built from
- * attacker-supplied Host would be an open redirect. */
-function locationWithoutToken(url) {
-    const stripped = new URL(url.href);
-    stripped.searchParams.delete("token");
-    return `${stripped.pathname}${stripped.search}`;
+function isSafeMethod(method) {
+    return method === "GET" || method === "HEAD" || method === "OPTIONS";
 }
 /**
- * The single authorization decision for every gated web route.
+ * The extra checks a write must pass when the only thing authorizing it is a
+ * cookie — an ambient credential the browser attaches to whatever page asks.
  *
- * Accepts, in order: a session cookie, an `X-Agend-Token` header (CLI and
- * scripts), and — only to be redeemed for a cookie on a GET — a `?token=` in
- * the URL. After the redemption the token is gone from the address bar, from
- * browser history, and from anything that logs request URLs.
+ * Three independent ones, so that a gap in any single one (a browser without
+ * `Sec-Fetch-Site`, a same-site sibling that SameSite cannot tell from us) is
+ * not the whole defence:
+ * 1. `Origin` must be present and equal to `Host`. Present, unlike the read
+ *    path: every browser sends it on a same-origin write, and its absence on a
+ *    cookie-authenticated POST is a request nobody legitimate makes.
+ * 2. `Sec-Fetch-Site`, when the browser sends it, must say `same-origin`.
+ * 3. `X-Agend-CSRF` must equal the value derived from this session's id. A
+ *    cross-site page cannot set a custom header without a preflight this server
+ *    never approves, and cannot read the value.
+ */
+function passesCookieWriteChecks(req, sessionId) {
+    if (!headerValue(req, "origin"))
+        return false;
+    const site = headerValue(req, "sec-fetch-site");
+    if (site !== null && site !== "same-origin")
+        return false;
+    const presented = headerValue(req, WEB_CSRF_HEADER);
+    return !!presented && constantTimeEquals(presented, csrfTokenFor(sessionId));
+}
+/**
+ * Session-only authorization, for the endpoints that are *about* the session
+ * (who am I, sign out, list devices). A header token is not a session and is not
+ * accepted here; everything else — Origin, expiry, rotation, and the write
+ * checks for an unsafe method — is the same as for any gated route.
  */
-export function decideWebGate(req, url, token) {
+export function authorizeSession(req, token, sessions, opts = {}) {
+    if (!token || !isWebRequestCurrent(req))
+        return { kind: "reject", status: 401, message: WEB_TOKEN_INVALID_MESSAGE };
+    if (!isSameOriginRequest(req))
+        return { kind: "reject", status: 403, message: WEB_CROSS_SITE_MESSAGE };
+    const cookie = readSessionCookie(req);
+    const session = sessions && cookie ? sessions.authenticate(cookie, tokenEpoch(token), { touch: opts.touch !== false, surface: gatewayRequestContext(req)?.surface, exposureId: gatewayRequestContext(req)?.exposureId }) : null;
+    if (!session || !cookie) {
+        return { kind: "reject", status: 401, message: cookie ? WEB_SESSION_EXPIRED_MESSAGE : WEB_SESSION_REQUIRED_MESSAGE };
+    }
+    const method = (req.method ?? "GET").toUpperCase();
+    if (!isSafeMethod(method) && !passesCookieWriteChecks(req, cookie)) {
+        return { kind: "reject", status: 403, message: WEB_CSRF_MESSAGE };
+    }
+    return { kind: "ok", session, sessionId: cookie };
+}
+function authorize(req, url, token, sessions, opts) {
     // No token on disk means the panel is closed, not open to everyone. Without
     // this, a null token compared against a missing credential authorizes.
-    if (!token)
-        return { kind: "reject", status: 401, message: WEB_TOKEN_INVALID_MESSAGE };
+    if (!token || !isWebRequestCurrent(req))
+        return { kind: "reject", status: 401, message: WEB_TOKEN_INVALID_MESSAGE, reason: "closed" };
     if (!isSameOriginRequest(req)) {
-        return { kind: "reject", status: 403, message: WEB_CROSS_SITE_MESSAGE };
+        return { kind: "reject", status: 403, message: WEB_CROSS_SITE_MESSAGE, reason: "cross-site" };
     }
-    if (hasValidSessionCookie(req, token))
-        return { kind: "allow" };
+    const method = (req.method ?? "GET").toUpperCase();
+    // A header credential is not ambient — a page cannot make the browser add it —
+    // so it needs none of the cookie write checks, and is tried first: a request
+    // carrying both is the CLI's, not a forged form's.
     if (hasValidHeaderToken(req, token))
-        return { kind: "allow" };
-    const queryToken = url.searchParams.get("token");
-    if (queryToken && constantTimeEquals(queryToken, token)) {
-        const method = (req.method ?? "GET").toUpperCase();
-        if (method !== "GET" && method !== "HEAD") {
-            return { kind: "reject", status: 401, message: WEB_URL_TOKEN_WRITE_MESSAGE };
+        return { kind: "allow", via: "header-token" };
+    const cookie = readSessionCookie(req);
+    if (sessions && cookie) {
+        const session = sessions.authenticate(cookie, tokenEpoch(token), { touch: opts.touch, surface: gatewayRequestContext(req)?.surface, exposureId: gatewayRequestContext(req)?.exposureId });
+        if (session) {
+            if (!isSafeMethod(method) && !passesCookieWriteChecks(req, cookie)) {
+                return { kind: "reject", status: 403, message: WEB_CSRF_MESSAGE, reason: "csrf" };
+            }
+            return { kind: "allow", via: "session", session };
         }
-        return {
-            kind: "exchange",
-            setCookie: buildSessionCookie(token, isSecureRequest(req)),
-            location: locationWithoutToken(url),
-        };
     }
-    const presented = queryToken ?? headerValue(req, "x-agend-token") ?? headerValue(req, "cookie");
+    // A `?token=` in the URL is not a credential (it used to be redeemed for a cookie on a GET). A URL
+    // ends up in browser history, chat scrollback, screenshots and request logs; the dashboard now
+    // gives a one-time sign-in code instead, and the CLI and scripts send the X-Agend-Token header.
+    // A link that still carries one is answered like no credential at all: the sign-in page.
+    // A wrong header token is somebody presenting a credential and getting it wrong.
+    // A cookie that no longer works is the ordinary end of a session, not that: it is the same
+    // "you need to sign in" as no cookie at all, and a browser navigation should be answered
+    // with the sign-in page either way.
+    if (headerValue(req, "x-agend-token")) {
+        return { kind: "reject", status: 401, message: WEB_TOKEN_INVALID_MESSAGE, reason: "invalid" };
+    }
     return {
         kind: "reject",
         status: 401,
-        message: presented ? WEB_TOKEN_INVALID_MESSAGE : WEB_SESSION_REQUIRED_MESSAGE,
+        message: cookie ? WEB_SESSION_EXPIRED_MESSAGE : WEB_SESSION_REQUIRED_MESSAGE,
+        reason: "no-credential",
     };
 }
-/** Defence in depth for handlers that run behind the gate: authorization only,
- * no cookie issuing (the gate already did that). */
-export function isWebRequestAuthorized(req, url, token) {
-    if (!token)
-        return false;
-    if (!isSameOriginRequest(req))
+/**
+ * Requests a page makes on its own timer, with nobody at it. They are authorized in full — session, expiry,
+ * revocation, token epoch — but never count as activity, or a tab left open would keep its session alive until the
+ * absolute cap and the idle limit would mean nothing (#1251 review; #1373 for /view and the stream).
+ *
+ * An explicit list of method + path, decided by the server. Never a header or a parameter the client sets: a page
+ * that could declare itself passive could also declare itself active.
+ *
+ * - `GET /ui/poll`: the dashboard's fallback poll, every 5 s while the stream is down.
+ * - `GET /ui/events`: the dashboard's live stream. The page opens it after it has loaded, and the browser reopens it
+ *   on its own whenever it drops; the page load that opened it already counted. (Its heartbeat re-check passes
+ *   `touch: false` itself.)
+ * - `GET /api/pane/<instance>`: `/view`'s terminal, every 0.8 s.
+ * - `GET /api/profiles`: `/view`'s roster, every 5 s.
+ * - `GET /api/ai-usage`: the usage panel, every minute while it is open.
+ *
+ * Everything else a session authorizes — a page load, a chat's history, any write — is the person, and slides the
+ * idle expiry. Only these matter when a session is required for them: `/view`'s reads and the usage panel are open by
+ * default and then touch nothing at all.
+ */
+const PASSIVE_GET_PATHS = new Set(["/ui/poll", "/ui/events", "/api/profiles", "/api/ai-usage"]);
+const PASSIVE_GET_PANE = /^\/api\/pane\/[^/]+$/;
+export function isPassiveWebRead(method, path) {
+    if ((method ?? "GET") !== "GET")
         return false;
-    if (hasValidSessionCookie(req, token))
-        return true;
-    if (hasValidHeaderToken(req, token))
-        return true;
-    const queryToken = url.searchParams.get("token");
-    return !!queryToken && constantTimeEquals(queryToken, token);
+    return PASSIVE_GET_PATHS.has(path) || PASSIVE_GET_PANE.test(path) || /^\/api\/settings\/pending(?:\/[0-9a-f]{32})?$/.test(path);
+}
+/**
+ * The single authorization decision for every gated web route.
+ *
+ * Accepts, in order: an `X-Agend-Token` header (CLI and scripts) and a session
+ * cookie (made by signing in with a one-time code). Never a credential in the URL.
+ */
+export function decideWebGate(req, url, token, sessions) {
+    return authorize(req, url, token, sessions, { touch: !isPassiveWebRead(req.method, url.pathname) });
+}
+/**
+ * The decision, for a handler that needs to say *why* it refused (401 vs the 403
+ * a cross-site or CSRF failure earns) rather than only whether. A `?token=` in the
+ * URL is not a credential here either. Counts as activity exactly when the gate
+ * does (`isPassiveWebRead`), unless `touch` says otherwise.
+ */
+export function evaluateWebRequest(req, url, token, sessions, opts = {}) {
+    // A handler re-checking a request the gate already let through must not count it as activity when the gate did not.
+    return authorize(req, url, token, sessions, { touch: opts.touch ?? !isPassiveWebRead(req.method, url.pathname) });
+}
+/**
+ * Defence in depth for handlers that run behind the gate: the same decision, as a boolean.
+ *
+ * `touch: false` is for a long-lived stream re-checking itself on a timer, which
+ * must be able to notice a revocation without counting as activity.
+ */
+export function isWebRequestAuthorized(req, url, token, sessions, opts = {}) {
+    return authorize(req, url, token, sessions, { touch: opts.touch ?? !isPassiveWebRead(req.method, url.pathname) }).kind === "allow";
 }
 //# sourceMappingURL=web-auth.js.map

package/dist/web-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"web-auth.js","sourceRoot":"","sources":["../src/web-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,yBAAyB,GAAG,iDAAiD,CAAC;AAC3F;gFACgF;AAChF,MAAM,CAAC,MAAM,4BAA4B,GACvC,oFAAoF,CAAC;AACvF,MAAM,CAAC,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AACpE;8EAC8E;AAC9E,MAAM,CAAC,MAAM,2BAA2B,GACtC,yEAAyE,CAAC;AAE5E,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAE5C,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAClD;;mDAEmD;AACnD,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAExD,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,KAAa;IACzD,MAAM,IAAI,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC5E,IAAI,CAAC;QACH,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,6CAA6C,CAAC,CAAC;QACjF,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC3D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC;QAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,uDAAuD;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC;QAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAS,EAAE,CAAS;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACrC,+EAA+E;IAC/E,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAA0B;IAC1D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,IAAI,CAAC,MAAM;QAAE,OAAO,GAAG,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,GAAG,CAAC;YAAE,SAAS;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACrC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAcD,SAAS,WAAW,CAAC,GAAmB,EAAE,IAAY;IACpD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC9C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAmB;IACrD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,uDAAuD;QACvD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;oFAGoF;AACpF,SAAS,eAAe,CAAC,GAAmB;IAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,MAAe;IAC/D,MAAM,KAAK,GAAG;QACZ,GAAG,kBAAkB,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE;QACvD,QAAQ;QACR,UAAU;QACV,oEAAoE;QACpE,oDAAoD;QACpD,iBAAiB;QACjB,WAAW,2BAA2B,EAAE;KACzC,CAAC;IACF,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAmB,EAAE,KAAa;IACtE,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,SAAS,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAClG,OAAO,CAAC,CAAC,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAmB,EAAE,KAAa;IAC7D,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACnD,OAAO,CAAC,CAAC,QAAQ,IAAI,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED;;uDAEuD;AACvD,SAAS,oBAAoB,CAAC,GAAQ;IACpC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,GAAG,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,GAAmB,EAAE,GAAQ,EAAE,KAAoB;IAC/E,4EAA4E;IAC5E,uEAAuE;IACvE,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;IAEvF,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAC1E,CAAC;IAED,IAAI,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAChE,IAAI,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAE9D,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,UAAU,IAAI,kBAAkB,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;QAC/E,CAAC;QACD,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,kBAAkB,CAAC,KAAK,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC;YAC1D,QAAQ,EAAE,oBAAoB,CAAC,GAAG,CAAC;SACpC,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,IAAI,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,IAAI,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAChG,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,4BAA4B;KAC9E,CAAC;AACJ,CAAC;AAED;oDACoD;AACpD,MAAM,UAAU,sBAAsB,CAAC,GAAmB,EAAE,GAAQ,EAAE,KAAoB;IACxF,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,CAAC,CAAC,UAAU,IAAI,kBAAkB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AAC/D,CAAC"}
+{"version":3,"file":"web-auth.js","sourceRoot":"","sources":["../src/web-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACtF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,YAAY,EAEZ,UAAU,GAGX,MAAM,kBAAkB,CAAC;AAE1B,MAAM,CAAC,MAAM,yBAAyB,GAAG,iDAAiD,CAAC;AAC3F;gFACgF;AAChF,MAAM,CAAC,MAAM,4BAA4B,GACvC,oFAAoF,CAAC;AACvF,2GAA2G;AAC3G,MAAM,CAAC,MAAM,2BAA2B,GAAG,+CAA+C,CAAC;AAC3F,MAAM,CAAC,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AAEpE,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAE5C,+GAA+G;AAC/G,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAClD,MAAM,CAAC,MAAM,yBAAyB,GAAG,sBAAsB,CAAC;AAChE,+GAA+G;AAC/G,MAAM,CAAC,MAAM,eAAe,GAAG,cAAc,CAAC;AAC9C,MAAM,CAAC,MAAM,gBAAgB,GAAG,gEAAgE,CAAC;AAEjG,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,KAAa;IACzD,MAAM,IAAI,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC5E,IAAI,CAAC;QACH,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,6CAA6C,CAAC,CAAC;QACjF,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC3D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC;QAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,uDAAuD;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC;QAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAS,EAAE,CAAS;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACrC,+EAA+E;IAC/E,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAA0B;IAC1D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,IAAI,CAAC,MAAM;QAAE,OAAO,GAAG,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,GAAG,CAAC;YAAE,SAAS;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACrC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAoBD,SAAS,WAAW,CAAC,GAAmB,EAAE,IAAY;IACpD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC9C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAmB;IACrD,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,OAAO;QAAE,OAAO,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/F,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,uDAAuD;QACvD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;oFAGoF;AACpF,MAAM,UAAU,eAAe,CAAC,GAAmB;IACjD,IAAI,qBAAqB,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,MAAe,EAAE,aAAqB;IAC1F,MAAM,KAAK,GAAG;QACZ,GAAG,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,kBAAkB,IAAI,SAAS,EAAE;QACzE,QAAQ;QACR,UAAU;QACV,oEAAoE;QACpE,qEAAqE;QACrE,wDAAwD;QACxD,iBAAiB;QACjB,WAAW,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE;KACpD,CAAC;IACF,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,0BAA0B;IACxC,OAAO;QACL,GAAG,kBAAkB,iDAAiD;QACtE,GAAG,yBAAyB,yDAAyD;KACtF,CAAC;AACJ,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,iBAAiB,CAAC,GAAmB;IACnD,MAAM,GAAG,GAAG,iBAAiB,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,SAAS,CAAC,CAAC;IACvE,OAAO,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAC7I,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAmB,EAAE,KAAa;IACpE,IAAI,qBAAqB,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACnD,OAAO,CAAC,CAAC,QAAQ,IAAI,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,OAAO,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,CAAC;AACvE,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,uBAAuB,CAAC,GAAmB,EAAE,SAAiB;IACrE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAChD,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACpD,OAAO,CAAC,CAAC,SAAS,IAAI,kBAAkB,CAAC,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;AAC/E,CAAC;AAMD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAmB,EACnB,KAAoB,EACpB,QAA4C,EAC5C,OAA4B,EAAE;IAE9B,IAAI,CAAC,KAAK,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;IACpH,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IACvG,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,OAAO,EAAE,qBAAqB,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,qBAAqB,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChO,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,4BAA4B,EAAE,CAAC;IACvH,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AACpD,CAAC;AAOD,SAAS,SAAS,CAChB,GAAmB,EACnB,GAAQ,EACR,KAAoB,EACpB,QAA4C,EAC5C,IAAsB;IAEtB,4EAA4E;IAC5E,uEAAuE;IACvE,IAAI,CAAC,KAAK,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,yBAAyB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAEtI,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAChG,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAEnD,+EAA+E;IAC/E,6EAA6E;IAC7E,mDAAmD;IACnD,IAAI,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC;IAEnF,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,qBAAqB,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,qBAAqB,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1L,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;gBACnE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YACpF,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;QACpD,CAAC;IACH,CAAC;IAED,mGAAmG;IACnG,+FAA+F;IAC/F,gGAAgG;IAChG,yFAAyF;IAEzF,iFAAiF;IACjF,2FAA2F;IAC3F,yFAAyF;IACzF,oCAAoC;IACpC,IAAI,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,yBAAyB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAChG,CAAC;IACD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,4BAA4B;QAC5E,MAAM,EAAE,eAAe;KACxB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC;AACrH,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;AAEhD,MAAM,UAAU,gBAAgB,CAAC,MAA0B,EAAE,IAAY;IACvE,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,+CAA+C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClI,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAmB,EACnB,GAAQ,EACR,KAAoB,EACpB,QAA4C;IAE5C,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACtG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAmB,EACnB,GAAQ,EACR,KAAoB,EACpB,QAAiC,EACjC,OAA4B,EAAE;IAE9B,oHAAoH;IACpH,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACpH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAmB,EACnB,GAAQ,EACR,KAAoB,EACpB,QAAiC,EACjC,OAA4B,EAAE;IAE9B,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC;AACrI,CAAC"}

package/dist/web-body.d.ts

@@ -0,0 +1,3 @@
+import type { IncomingMessage } from "node:http";
+/** Byte-bounded, abort-aware reader. Socket/request deadlines belong to the listener. */
+export declare function readBoundedWebBody(req: IncomingMessage, maxBytes: number): Promise<Buffer>;

package/dist/web-body.js

@@ -0,0 +1,55 @@
+import { cachedSettingsBody, settingsRequestExecution } from "./settings-request-capability.js";
+/** Byte-bounded, abort-aware reader. Socket/request deadlines belong to the listener. */
+export function readBoundedWebBody(req, maxBytes) {
+    const cached = cachedSettingsBody(req);
+    if (cached) {
+        if (cached.length > maxBytes)
+            return Promise.reject(new Error("payload too large"));
+        try {
+            settingsRequestExecution(req)?.assert();
+            return Promise.resolve(cached);
+        }
+        catch (err) {
+            return Promise.reject(err);
+        }
+    }
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let size = 0, settled = false;
+        const finish = (error) => {
+            if (settled)
+                return;
+            settled = true;
+            req.off("data", data);
+            req.off("end", end);
+            req.off("error", fail);
+            req.off("aborted", aborted);
+            req.off("close", closed);
+            if (error)
+                reject(error);
+            else
+                resolve(Buffer.concat(chunks));
+        };
+        const data = (chunk) => {
+            const bytes = typeof chunk === "string" ? Buffer.from(chunk, "utf8") : chunk;
+            size += bytes.length;
+            if (size > maxBytes) {
+                finish(new Error("payload too large"));
+                req.destroy();
+            }
+            else
+                chunks.push(bytes);
+        };
+        const end = () => finish();
+        const fail = (error) => finish(error);
+        const aborted = () => finish(new Error("request aborted"));
+        const closed = () => { if (!settled)
+            finish(new Error("request closed")); };
+        req.on("data", data);
+        req.on("end", end);
+        req.on("error", fail);
+        req.on("aborted", aborted);
+        req.on("close", closed);
+    });
+}
+//# sourceMappingURL=web-body.js.map

package/dist/web-body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-body.js","sourceRoot":"","sources":["../src/web-body.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAEhG,yFAAyF;AACzF,MAAM,UAAU,kBAAkB,CAAC,GAAoB,EAAE,QAAgB;IACvE,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC;YAAC,wBAAwB,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAChF,OAAO,GAAG,EAAE,CAAC;YAAC,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC;QAC9B,MAAM,MAAM,GAAG,CAAC,KAAa,EAAQ,EAAE;YACrC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1H,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAChE,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,KAAsB,EAAQ,EAAE;YAC5C,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAC7E,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;gBAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAAC,CAAC;;gBAC1E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC,CAAC;QACF,MAAM,GAAG,GAAG,GAAS,EAAE,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,CAAC,KAAY,EAAQ,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,GAAS,EAAE,GAAG,IAAI,CAAC,OAAO;YAAE,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAAC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACvH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/web-channel-echo.d.ts

@@ -0,0 +1,9 @@
+/** Shared visible protocol prefix; provenance is the platform's author identity. */
+export declare const WEB_ECHO_PREFIX = "\uD83C\uDF10 web \u00B7 ";
+/** Visible ASCII labels survive compatibility normalisation/format stripping.
+ * URLs and email local parts are data, not mention/command tokens.
+ */
+export declare function neutralizeWebEchoText(text: string): string;
+export declare function formatWebChannelEcho(user: string, preview: string, fullTextNote?: string): string;
+/** Before trigger evaluation, independent of flags, send ACKs or recent IDs. */
+export declare function isWebChannelEcho(text: string, authorId: string, fleetBotIds: ReadonlySet<string>): boolean;

package/dist/web-channel-echo.js

@@ -0,0 +1,55 @@
+/** Shared visible protocol prefix; provenance is the platform's author identity. */
+export const WEB_ECHO_PREFIX = "🌐 web · ";
+function clip(text, length) {
+    return text.slice(0, length).replace(/[\uD800-\uDBFF]$/, "");
+}
+function neutralizeTokens(text) {
+    return text
+        .replace(/<@([!&]?)(\d+)>/g, (_token, kind, id) => `[${kind === "&" ? "role" : "mention"}: ${id}]`)
+        .replace(/<#(\d+)>/g, (_token, id) => `[channel: ${id}]`)
+        .replace(/(?<![\p{L}\p{N}_/])\/([A-Za-z0-9_]+)(?:@([A-Za-z0-9_]+))?(?![\p{L}\p{N}_/@])/gu, (_token, command, bot) => `[command: ${command}${bot ? ` at ${bot}` : ""}]`)
+        .replace(/@([A-Za-z0-9_]+)(?=@)/g, (_token, name) => `[at: ${name}]`)
+        .replace(/(?<![\p{L}\p{N}_@.+%\-])@([A-Za-z0-9_]+)(?![A-Za-z0-9_])/gu, (_token, name) => `[at: ${name}]`);
+}
+/** Visible ASCII labels survive compatibility normalisation/format stripping.
+ * URLs and email local parts are data, not mention/command tokens.
+ */
+export function neutralizeWebEchoText(text) {
+    const normalized = text.normalize("NFKC").replace(/[\p{Cc}\p{Cf}]/gu, char => char === "\n" ? "\n" : char === "\t" ? " " : "");
+    const dataTokens = /[A-Za-z][A-Za-z0-9+.-]*:\/\/[^\s<>"'`]+|(?<![\p{L}\p{N}_@])(?:"[^"\r\n]+"|[\p{L}\p{N}._%+\-]+)@[A-Za-z0-9.\-]+\.[A-Za-z]{2,}(?![\p{L}\p{N}_@])/gu;
+    let result = "", offset = 0;
+    for (const match of normalized.matchAll(dataTokens)) {
+        let end = match.index + match[0].length;
+        // A Markdown/parenthesised URL ends at its balanced closing delimiter;
+        // that delimiter must not hide an adjacent active mention from rewriting.
+        if (/^[A-Za-z][A-Za-z0-9+.-]*:\/\//.test(match[0]) && normalized[match.index - 1] === "(") {
+            let depth = 1;
+            for (let index = match.index; index < end; index++) {
+                if (normalized[index] === "(")
+                    depth++;
+                if (normalized[index] === ")" && --depth === 0) {
+                    end = index;
+                    break;
+                }
+            }
+        }
+        result += neutralizeTokens(normalized.slice(offset, match.index)) + normalized.slice(match.index, end);
+        offset = end;
+    }
+    return result + neutralizeTokens(normalized.slice(offset));
+}
+export function formatWebChannelEcho(user, preview, fullTextNote = "full text in web chat") {
+    const label = clip(neutralizeWebEchoText(user).replace(/\s+/g, " "), 80) || "web-user";
+    const header = `${WEB_ECHO_PREFIX}${label}: `;
+    const body = neutralizeWebEchoText(preview);
+    // Labels can expand short input dramatically. Keep one platform message:
+    // a later Discord chunk would otherwise lose the provenance prefix.
+    const budget = 1800 - header.length;
+    const note = ` … (${clip(neutralizeWebEchoText(fullTextNote), 100)})`;
+    return header + (body.length > budget ? clip(body, budget - note.length) + note : body);
+}
+/** Before trigger evaluation, independent of flags, send ACKs or recent IDs. */
+export function isWebChannelEcho(text, authorId, fleetBotIds) {
+    return fleetBotIds.has(authorId) && text.startsWith(WEB_ECHO_PREFIX);
+}
+//# sourceMappingURL=web-channel-echo.js.map

package/dist/web-channel-echo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-channel-echo.js","sourceRoot":"","sources":["../src/web-channel-echo.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAC;AAE3C,SAAS,IAAI,CAAC,IAAY,EAAE,MAAc;IACxC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,IAAI;SACR,OAAO,CAAC,kBAAkB,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,EAAU,EAAE,EAAE,CAAC,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,KAAK,EAAE,GAAG,CAAC;SAClH,OAAO,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,EAAU,EAAE,EAAE,CAAC,aAAa,EAAE,GAAG,CAAC;SAChE,OAAO,CAAC,gFAAgF,EACvF,CAAC,MAAM,EAAE,OAAe,EAAE,GAAY,EAAE,EAAE,CAAC,aAAa,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;SAC9F,OAAO,CAAC,wBAAwB,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE,CAAC,QAAQ,IAAI,GAAG,CAAC;SAC5E,OAAO,CAAC,4DAA4D,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC;AACtH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/H,MAAM,UAAU,GAAG,kJAAkJ,CAAC;IACtK,IAAI,MAAM,GAAG,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACpD,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACxC,uEAAuE;QACvE,0EAA0E;QAC1E,IAAI,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC1F,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,IAAI,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;gBACnD,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,GAAG;oBAAE,KAAK,EAAE,CAAC;gBACvC,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC;oBAAC,GAAG,GAAG,KAAK,CAAC;oBAAC,MAAM;gBAAC,CAAC;YACzE,CAAC;QACH,CAAC;QACD,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvG,MAAM,GAAG,GAAG,CAAC;IACf,CAAC;IACD,OAAO,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,OAAe,EAAE,YAAY,GAAG,uBAAuB;IACxG,MAAM,KAAK,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC;IACvF,MAAM,MAAM,GAAG,GAAG,eAAe,GAAG,KAAK,IAAI,CAAC;IAC9C,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC5C,yEAAyE;IACzE,oEAAoE;IACpE,MAAM,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;IACpC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC;IACtE,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC1F,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,QAAgB,EAAE,WAAgC;IAC/F,OAAO,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AACvE,CAAC"}

package/dist/web-chat-history.d.ts

@@ -0,0 +1,125 @@
+/** A file shown with a message: an id the dashboard can fetch, never a path. */
+export interface WebChatAttachment {
+    id: string;
+    kind: "photo" | "document";
+    name: string;
+    size: number;
+    mime: string;
+}
+/**
+ * How far a message the web user sent has got (web track C3) — the ticks under it. The same lifecycle a
+ * Telegram message shows as reactions: waiting behind another message, handed to the agent, taken up by it,
+ * or not delivered; and `cancelled` when a Stop dropped it while it was still waiting.
+ */
+export type WebDeliveryState = "queued" | "processing" | "delivered" | "failed" | "cancelled";
+/** The state after `next` arrives at a message in `prev`; `prev` itself when `next` would move it back. */
+export declare function nextDeliveryState(prev: WebDeliveryState | undefined, next: WebDeliveryState): WebDeliveryState | undefined;
+export type WebChatRole = "agent" | "user" | "status";
+export interface WebChatMessage {
+    /** Files shown with the message (absent when none). */
+    attachments?: WebChatAttachment[];
+    /** The fleet process generation the id belongs to. */
+    boot: string;
+    /** Where a web user's message has got (absent: nothing reported yet, or not the web user's). */
+    delivery?: WebDeliveryState;
+    id: number;
+    instance: string;
+    /** The `message_id` the agent was given for a web user's message — what delivery reports name it by. */
+    messageId?: string;
+    /**
+     * Who the server says wrote it (#1306), set by the code path that emitted it — never read from the text or the
+     * sender name: `agent` (a delivered reply), `user` (a person, on any surface; the default), `status` (a daemon
+     * status line on a web-only fleet). Only `agent` messages may get HTML preview cards.
+     */
+    role: WebChatRole;
+    sender: string;
+    text: string;
+    ts: string;
+}
+export interface WebChatHistoryOptions {
+    /** Messages kept per instance. */
+    perInstance?: number;
+    /** Bytes of text kept per instance (UTF-16 length × 2 is close enough for a bound). */
+    perInstanceChars?: number;
+    /** Most messages one SSE reconnect is sent. */
+    replayMax?: number;
+    /** The generation id (tests); random otherwise. */
+    boot?: string;
+}
+export declare const WEB_CHAT_TEXT_MAX = 16000;
+/**
+ * The `message_id` a message from the web chat is delivered under. Unique (two sends in one millisecond used
+ * to share `web-<ms>`), and never a platform id: Telegram and Discord ids are digits only.
+ */
+export declare function newWebMessageId(): string;
+/** Whether a delivery report is about a message from the web chat rather than one on a platform. */
+export declare function isWebMessageId(messageId: string): boolean;
+export declare class WebChatHistory {
+    private nextId;
+    /** This process's generation: ids are only unique within it. */
+    readonly boot: string;
+    private readonly byInstance;
+    private readonly perInstance;
+    private readonly perInstanceChars;
+    private readonly replayMax;
+    constructor(opts?: WebChatHistoryOptions);
+    /** The id the next message will get minus one: the newest id handed out so far (0 when none). */
+    get lastId(): number;
+    /** Record one message; returns it with its id. Text beyond WEB_CHAT_TEXT_MAX is cut. */
+    record(msg: {
+        instance: string;
+        sender: string;
+        text: string;
+        ts: string;
+        attachments?: WebChatAttachment[];
+        messageId?: string;
+        role?: string;
+    }): WebChatMessage;
+    /** The most recent `limit` messages of one instance, oldest first. */
+    list(instance: string, limit?: number): WebChatMessage[];
+    /**
+     * Every message newer than `lastId`, across instances, oldest first, at most `replayMax` (the newest ones).
+     * Ids are this boot's: a cursor from another boot goes through replayFor(), never straight here.
+     */
+    after(lastId: number): WebChatMessage[];
+    /**
+     * A delivery report for one of this instance's messages. Returns the message when its state changed (so the
+     * caller tells the pages), null when there is no such message or the report would move it back.
+     */
+    setDelivery(instance: string, messageId: string, state: WebDeliveryState): WebChatMessage | null;
+    /**
+     * A Stop on this instance: the web user's messages still waiting (nothing reported, or queued) were dropped
+     * from the queue. The queue is first in, first out, so nothing older than a message that got further can
+     * still be waiting: the walk goes back from the newest and stops there. Returns the messages it changed.
+     */
+    /**
+     * Where every retained web message got — the ticks — in one list. A delivery report has no cursor of its own and
+     * changes a message already sent, so a page that missed one (a dropped stream, a poll) catches up from this:
+     * the stream sends it on every (re)connect and each poll carries it (#1253 review). Ticks only move forward on
+     * the page, so receiving it twice changes nothing.
+     */
+    deliveries(): Array<{
+        instance: string;
+        messageId: string;
+        delivery: WebDeliveryState;
+    }>;
+    cancelPending(instance: string): WebChatMessage[];
+    /** Forget an instance (deleted). */
+    forget(instance: string): void;
+    /** The SSE cursor for one message: `<boot>-<id>`. */
+    cursorOf(m: WebChatMessage): string;
+    /**
+     * What a reconnecting stream with this `Last-Event-ID` should be sent. A cursor of this boot replays what
+     * came after it; a cursor of another boot (the fleet restarted) gets this boot's whole retained backlog,
+     * since none of it can have been seen; no cursor, or one that is not ours in shape, gets nothing.
+     */
+    replayFor(cursor: {
+        boot: string;
+        id: number;
+    } | null): WebChatMessage[];
+}
+/** `Last-Event-ID` as `<boot>-<id>`, or null when absent or not that shape. */
+export declare function parseLastEventId(header: string | string[] | undefined): {
+    boot: string;
+    id: number;
+} | null;