@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/terminal/spawn-env.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Iterate G (ADR-095), amended Iterate I (ADR-097), restored Iterate J
+ * (ADR-098) — pure helper that builds the env map handed to the spawned
+ * pty. Factored out of `createNodePtySpawnFn` so it can be unit-tested
+ * without the native node-pty binary.
+ *
+ * Layered as: baseProcessEnv → TERM/COLORTERM color overrides (default
+ * truecolor for VS-Code parity, FR-01.44; the legacy ADR-067 16-color
+ * brand clamp only under SHIPWRIGHT_TERMINAL_LEGACY_BRAND_COLORS=1) →
+ * CLAUDE_CODE_NO_FLICKER toggle
+ * (ADR-095/ADR-097/ADR-098) → caller-supplied opts.env (last-write-wins
+ * for most keys; the default-on CLAUDE_CODE_NO_FLICKER is protected
+ * from accidental caller silent-revert — see opt-out-wins symmetry
+ * below) → SHIPWRIGHT_WEBUI=1 spawn marker (W1, authoritative post-merge)
+ * → strip of parent/child Claude-session identity markers (the
+ * empty-Transcripts fix, 2026-06-13).
+ *
+ * CLAUDE_CODE_NO_FLICKER (ADR-098):
+ *   - Default ON: the key is written as `"1"` into the env map.
+ *     Claude Code renders into the alt-screen buffer (vim/htop-style),
+ *     bypassing per-frame ANSI cursor moves entirely. Required because
+ *     Claude Code 2.1.139 emits ZERO DECSET 2026 / Synchronized Output
+ *     sequences in its main-buffer rendering (empirical: 265 711-byte
+ *     live scrollback, 0 `\x1b[?2026h` / 0 `\x1b[?2026l`, 21 690 raw
+ *     CUP sequences). xterm 6.0's native sync-output honour has
+ *     nothing to batch because the producer never opts in.
+ *     Claude Code Issue #37283 remains open. Docs:
+ *     https://code.claude.com/docs/en/fullscreen.
+ *   - Opt-OUT via SHIPWRIGHT_TERMINAL_NO_FLICKER=0: the key is deleted
+ *     from the env map so the child shell sees whatever (if anything)
+ *     the upstream env set. Useful for users who explicitly want
+ *     Claude in the main buffer (Cmd+F scrollback search, mouse
+ *     capture, etc.) and are willing to accept the visible flicker
+ *     around streaming output.
+ *
+ * Reversion from ADR-097's opt-in default: ADR-097 hypothesised that
+ * xterm 6's DECSET 2026 honour would batch Claude TUI's main-buffer
+ * frames flicker-free. UAT post-Iterate-I falsified the hypothesis;
+ * ADR-098 documents the empirical scrollback investigation. The
+ * default-on stance from ADR-095 is restored verbatim. The
+ * "opt-out wins over caller-env override" semantic (ADR-095, external
+ * code review openai medium, 2026-05-13) is preserved as the
+ * symmetric default-on regression fence.
+ */
+export declare function buildSpawnEnv(baseProcessEnv: Record<string, string | undefined>, callerEnv?: Record<string, string | undefined>): Record<string, string | undefined>;
+//# sourceMappingURL=spawn-env.d.ts.map

package/server/dist/terminal/spawn-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn-env.d.ts","sourceRoot":"","sources":["../../src/terminal/spawn-env.ts"],"names":[],"mappings":"AAWA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAgB,aAAa,CAC3B,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAClD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAC7C,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CA+JpC"}

package/server/dist/terminal/spawn-env.js

@@ -0,0 +1,232 @@
+/*
+ * spawn-env.ts — the pure env-map factory for the embedded-terminal pty.
+ *
+ * Extracted verbatim from `terminal/routes.ts` (which sits at its ADR-103
+ * bloat-exception ceiling) so the empty-Transcripts fix — stripping the
+ * parent/child Claude-session markers — could land without ratcheting that
+ * file. `buildSpawnEnv` is the SOLE place the pty spawn env is built
+ * (`createNodePtySpawnFn` in routes.ts is its only runtime caller); the
+ * unit test lives in `pty-env-flicker.test.ts`.
+ */
+/**
+ * Iterate G (ADR-095), amended Iterate I (ADR-097), restored Iterate J
+ * (ADR-098) — pure helper that builds the env map handed to the spawned
+ * pty. Factored out of `createNodePtySpawnFn` so it can be unit-tested
+ * without the native node-pty binary.
+ *
+ * Layered as: baseProcessEnv → TERM/COLORTERM color overrides (default
+ * truecolor for VS-Code parity, FR-01.44; the legacy ADR-067 16-color
+ * brand clamp only under SHIPWRIGHT_TERMINAL_LEGACY_BRAND_COLORS=1) →
+ * CLAUDE_CODE_NO_FLICKER toggle
+ * (ADR-095/ADR-097/ADR-098) → caller-supplied opts.env (last-write-wins
+ * for most keys; the default-on CLAUDE_CODE_NO_FLICKER is protected
+ * from accidental caller silent-revert — see opt-out-wins symmetry
+ * below) → SHIPWRIGHT_WEBUI=1 spawn marker (W1, authoritative post-merge)
+ * → strip of parent/child Claude-session identity markers (the
+ * empty-Transcripts fix, 2026-06-13).
+ *
+ * CLAUDE_CODE_NO_FLICKER (ADR-098):
+ *   - Default ON: the key is written as `"1"` into the env map.
+ *     Claude Code renders into the alt-screen buffer (vim/htop-style),
+ *     bypassing per-frame ANSI cursor moves entirely. Required because
+ *     Claude Code 2.1.139 emits ZERO DECSET 2026 / Synchronized Output
+ *     sequences in its main-buffer rendering (empirical: 265 711-byte
+ *     live scrollback, 0 `\x1b[?2026h` / 0 `\x1b[?2026l`, 21 690 raw
+ *     CUP sequences). xterm 6.0's native sync-output honour has
+ *     nothing to batch because the producer never opts in.
+ *     Claude Code Issue #37283 remains open. Docs:
+ *     https://code.claude.com/docs/en/fullscreen.
+ *   - Opt-OUT via SHIPWRIGHT_TERMINAL_NO_FLICKER=0: the key is deleted
+ *     from the env map so the child shell sees whatever (if anything)
+ *     the upstream env set. Useful for users who explicitly want
+ *     Claude in the main buffer (Cmd+F scrollback search, mouse
+ *     capture, etc.) and are willing to accept the visible flicker
+ *     around streaming output.
+ *
+ * Reversion from ADR-097's opt-in default: ADR-097 hypothesised that
+ * xterm 6's DECSET 2026 honour would batch Claude TUI's main-buffer
+ * frames flicker-free. UAT post-Iterate-I falsified the hypothesis;
+ * ADR-098 documents the empirical scrollback investigation. The
+ * default-on stance from ADR-095 is restored verbatim. The
+ * "opt-out wins over caller-env override" semantic (ADR-095, external
+ * code review openai medium, 2026-05-13) is preserved as the
+ * symmetric default-on regression fence.
+ */
+export function buildSpawnEnv(baseProcessEnv, callerEnv) {
+    // ┌─ SUPERSEDED (iterate-2026-07-06-terminal-theme-modes / FR-01.44) ─┐
+    // │ The ADR-067 brand-fit rationale below is retained for history     │
+    // │ (Chesterton's Fence) but is NO LONGER the default — see the       │
+    // │ truecolor override further down. It applies ONLY when             │
+    // │ SHIPWRIGHT_TERMINAL_LEGACY_BRAND_COLORS=1 restores the clamp.      │
+    // └───────────────────────────────────────────────────────────────────┘
+    // ADR-067 brand fit on Windows: chalk's `supports-color` package
+    // has a hardcoded Windows branch that returns level 3 (truecolor)
+    // for Windows 10 build ≥14931 — REGARDLESS of TERM, COLORTERM, or
+    // FORCE_COLOR=1. Claude Code uses chalk under ink, so its
+    // "auto mode on" banner emits RGB \x1b[38;2;...m escapes that
+    // bypass our 16-slot xterm theme and render the original neon
+    // yellow on beige.
+    //
+    // The single escape hatch in supports-color:
+    //
+    //   if (env.TERM === 'dumb') { return min; }   // min = FORCE_COLOR || 0
+    //
+    // So `TERM=dumb` + `FORCE_COLOR=1` returns level 1 (16-color),
+    // which falls into our brand theme. Trade-off: ncurses-based tools
+    // (vim, less, htop) also see TERM=dumb and disable their colors;
+    // power users can override per-shell via `$env:TERM = "xterm"`
+    // before invoking those tools. For Claude Code as the primary
+    // workload of this pane, brand consistency wins over vim color.
+    //
+    // Iterate K UAT 2026-05-14: empirically tested `TERM=xterm-256color`
+    // (siteboon-parity) hoping it would unlock Claude/Ink sync-output
+    // emission. Falsified: byte-stream histogram of pre/post scrollback
+    // for the same task showed 0 DECSET 2026 sequences in BOTH eras.
+    // TERM=dumb does NOT block Claude's sync-output. It DOES, however,
+    // suppress PowerShell 7's xterm window manipulation + cursor-shape
+    // + ED2 sequences emitted on each PSReadLine prompt redraw — which
+    // added visible new flicker / minor smearing on Strg+C return to
+    // shell. Keeping TERM=dumb. Real flicker fix is xterm.js side:
+    // scrollOnEraseInDisplay (see EmbeddedTerminal.tsx) — see xtermjs
+    // issue #5620 + maintainer @jerch's diagnosis.
+    // iterate-2026-07-06-terminal-theme-modes (FR-01.44) — SUPERSEDES the
+    // ADR-067 brand-fit clamp above. The clamp existed to force Claude's
+    // colors into a 16-slot BRAND palette on a beige terminal. That goal is
+    // abandoned: the pane is now a FAITHFUL terminal like VS Code's, so
+    // Claude (and vim/htop/less) render their own truecolor themes and the
+    // xterm bg tracks Claude's light/dark theme (client-side, terminal-
+    // theme.ts). Dropping TERM=dumb also re-enables Claude's OSC 11
+    // background query, which xterm.js answers from its theme.background —
+    // so Claude's `auto` theme detects our light/dark bg directly.
+    //
+    // Default = xterm-256color + COLORTERM=truecolor (VS Code sets exactly
+    // TERM=xterm-256color for its integrated terminal). FORCE_COLOR is NOT
+    // set: the pty is a real TTY so chalk/ink detect truecolor natively, and
+    // a FORCE_COLOR cap is what pinned Claude to 16-color before.
+    //
+    // Reversible: SHIPWRIGHT_TERMINAL_LEGACY_BRAND_COLORS=1 restores the old
+    // TERM=dumb / COLORTERM="" / FORCE_COLOR=1 clamp verbatim (instant revert
+    // if the truecolor path regresses, e.g. re-surfaced PowerShell PSReadLine
+    // prompt flicker that TERM=dumb used to suppress — user-UAT verified per
+    // the ADR-098 precedent for this visual class). CLAUDE_CODE_NO_FLICKER
+    // (the real streaming-flicker fix, ADR-095/098) is INDEPENDENT of TERM
+    // and stays default-on below.
+    const legacyBrandColors = baseProcessEnv.SHIPWRIGHT_TERMINAL_LEGACY_BRAND_COLORS === "1";
+    const env = legacyBrandColors
+        ? {
+            ...baseProcessEnv,
+            TERM: "dumb",
+            COLORTERM: "",
+            FORCE_COLOR: "1",
+        }
+        : {
+            ...baseProcessEnv,
+            TERM: "xterm-256color",
+            COLORTERM: "truecolor",
+        };
+    if (!legacyBrandColors) {
+        // Strip any FORCE_COLOR inherited from the webui server's OWN env — a
+        // stale `FORCE_COLOR=1` (chalk level 1) would pin Claude back to
+        // 16-color and defeat the truecolor path. Deleted (not set to
+        // undefined) so it can't survive a downstream spread. chalk/ink then
+        // detect truecolor from the real TTY + COLORTERM.
+        delete env.FORCE_COLOR;
+    }
+    // Iterate G (ADR-095), restored Iterate J (ADR-098) after the
+    // Iterate I (ADR-097) opt-in attempt was empirically falsified.
+    // Claude TUI flicker workaround: default ON — Claude Code 2.1.139
+    // emits zero DECSET 2026 sequences in its main-buffer rendering, so
+    // xterm 6.0's native Synchronized-Output honour cannot batch frames
+    // the producer never wraps. Opt-OUT via SHIPWRIGHT_TERMINAL_NO_FLICKER=0.
+    const optedOut = baseProcessEnv.SHIPWRIGHT_TERMINAL_NO_FLICKER === "0";
+    if (optedOut) {
+        // Explicit-off path: ensure the key is absent so the child shell
+        // sees whatever (if anything) the upstream env set. We delete
+        // rather than set to undefined because undefined keys can survive
+        // some spread operations in TypeScript erasure paths.
+        delete env.CLAUDE_CODE_NO_FLICKER;
+    }
+    else {
+        env.CLAUDE_CODE_NO_FLICKER = "1";
+    }
+    // Caller-supplied env wins for ALL keys EXCEPT CLAUDE_CODE_NO_FLICKER
+    // when the user has explicitly opted OUT via SHIPWRIGHT_TERMINAL_NO_FLICKER=0.
+    // External code review (openai medium, 2026-05-13) — allowing the
+    // caller to silently re-inject the key would break the documented
+    // opt-out contract. The opt-out wins; the rest of the caller env
+    // still flows through. Symmetric to ADR-097's opt-in-wins fence,
+    // now restored to the ADR-095 default-on stance per ADR-098.
+    if (callerEnv) {
+        for (const [k, v] of Object.entries(callerEnv)) {
+            if (optedOut && k === "CLAUDE_CODE_NO_FLICKER")
+                continue;
+            env[k] = v;
+        }
+    }
+    // WebUI-spawn marker (W1, iterate-2026-07-09; design:
+    // Spec/pipeline-as-campaign-convergence.md §8). Every embedded-terminal pty
+    // is spawned BY the WebUI, so /shipwright-run can branch on this to show the
+    // board-handoff banner instead of the plain-terminal paste card. Set AFTER
+    // the callerEnv merge and unconditionally: a caller can neither override nor
+    // unset it — it is an identity fact about the spawn source, not a tunable.
+    // buildSpawnEnv is the SOLE pty-env chokepoint (ADR-067 shell-only
+    // whitelist), so this is the single place the marker belongs.
+    env.SHIPWRIGHT_WEBUI = "1";
+    // Strip parent/child Claude-session identity markers so the embedded
+    // claude ALWAYS launches as a fresh TOP-LEVEL session. When the webui
+    // server is started from inside a Claude Code session (e.g. claude-vscode),
+    // its process.env carries these markers and the `{ ...baseProcessEnv }`
+    // spread forwards them into every pty. Claude Code 2.1.x, on seeing
+    // CLAUDE_CODE_CHILD_SESSION=1, runs as a CHILD session and SUPPRESSES the
+    // flat ~/.claude/projects/<cwd>/<uuid>.jsonl transcript the Transcripts tab
+    // reads → empty transcript for every embedded session (root-caused
+    // 2026-06-13; pty A/B/C isolation proved CHILD_SESSION=1 alone is the
+    // trigger). Allowlist of identity markers ONLY — auth/config CLAUDE_* vars
+    // pass through; the embedded claude sets its own on boot. Stripped AFTER
+    // the callerEnv merge so neither base nor caller can leak them back.
+    for (const k of PARENT_SESSION_ENV_KEYS)
+        delete env[k];
+    // Strip the webui's OWN operational network vars so a PORT-honouring dev
+    // server started INSIDE the embedded terminal doesn't collide with the
+    // webui itself (F17, deep-audit 2026-07-10). The production launchers
+    // stamp PORT explicitly — start-server-production.sh runs
+    // `PORT="$PORT" nohup node ...` (default 3847), install-windows.ps1's
+    // autostart runs `cmd /c set PORT=3847 && node ...` — so process.env.PORT
+    // is 3847 on a deployed server and the `{ ...baseProcessEnv }` spread
+    // forwarded it into every pty. A nested `npm run dev` (another webui, a
+    // Vite app, any PORT-honouring server) then bound 3847 and clashed.
+    // VITE_PORT + HONO_HOST are the sibling network vars with the same leak.
+    // Deleted AFTER the callerEnv merge (mirroring the parent-session strip
+    // above) so neither the server's own env NOR a caller can leak them; the
+    // child shell gets a clean network slate and the user's dev server picks
+    // its own default port. Deliberately NARROW: only the three network-bind
+    // vars. Audit of config.ts's SHIPWRIGHT_* consumers (the spec's "audit
+    // config.ts consumers" instruction): NO_FLICKER / _LEGACY_BRAND_COLORS are
+    // consumed by THIS helper; SHIPWRIGHT_WEBUI is set on purpose above; the
+    // rest (MAX_CONCURRENT / STATIC_DIR / CLAUDE_PASTES_KEEP_LAST / TERMINAL_WS_
+    // BUFFER_BYTES / _IDLE_TIMEOUT_MS / PTY_SHELL_OVERRIDE / _SCROLLBACK_* /
+    // _SWEEP_* / _HEADLESS_MIRROR) are internal knobs that bind NO port/host, so
+    // none causes the F17 collision and none is stripped. A blanket SHIPWRIGHT_*
+    // sweep would be scope creep that breaks those contracts (Chesterton's
+    // Fence). HOST is intentionally NOT stripped: no webui launcher stamps it
+    // (start-server-production.sh / install-windows.ps1 / dev-restart.js stamp
+    // PORT/VITE_PORT only) and it sits outside the finding's footprint.
+    for (const k of WEBUI_OPERATIONAL_ENV_KEYS)
+        delete env[k];
+    return env;
+}
+/** Claude-session identity markers stripped by {@link buildSpawnEnv}. */
+const PARENT_SESSION_ENV_KEYS = [
+    "CLAUDE_CODE_CHILD_SESSION",
+    "CLAUDE_CODE_SESSION_ID",
+    "CLAUDE_CODE_ENTRYPOINT",
+    "CLAUDECODE",
+];
+/**
+ * The webui's own operational network vars, stripped by {@link buildSpawnEnv}
+ * so a PORT-honouring dev server started in the embedded terminal cannot
+ * inherit the webui's PORT (3847 on a deployed server) and collide with it
+ * (F17). Narrow by design — see the strip-site comment above.
+ */
+const WEBUI_OPERATIONAL_ENV_KEYS = ["PORT", "VITE_PORT", "HONO_HOST"];
+//# sourceMappingURL=spawn-env.js.map

package/server/dist/terminal/spawn-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn-env.js","sourceRoot":"","sources":["../../src/terminal/spawn-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,UAAU,aAAa,CAC3B,cAAkD,EAClD,SAA8C;IAE9C,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,iEAAiE;IACjE,kEAAkE;IAClE,kEAAkE;IAClE,0DAA0D;IAC1D,8DAA8D;IAC9D,8DAA8D;IAC9D,mBAAmB;IACnB,EAAE;IACF,6CAA6C;IAC7C,EAAE;IACF,yEAAyE;IACzE,EAAE;IACF,+DAA+D;IAC/D,mEAAmE;IACnE,iEAAiE;IACjE,+DAA+D;IAC/D,8DAA8D;IAC9D,gEAAgE;IAChE,EAAE;IACF,qEAAqE;IACrE,kEAAkE;IAClE,oEAAoE;IACpE,iEAAiE;IACjE,mEAAmE;IACnE,mEAAmE;IACnE,mEAAmE;IACnE,iEAAiE;IACjE,+DAA+D;IAC/D,kEAAkE;IAClE,+CAA+C;IAC/C,sEAAsE;IACtE,qEAAqE;IACrE,wEAAwE;IACxE,oEAAoE;IACpE,uEAAuE;IACvE,oEAAoE;IACpE,gEAAgE;IAChE,uEAAuE;IACvE,+DAA+D;IAC/D,EAAE;IACF,uEAAuE;IACvE,uEAAuE;IACvE,yEAAyE;IACzE,8DAA8D;IAC9D,EAAE;IACF,yEAAyE;IACzE,0EAA0E;IAC1E,0EAA0E;IAC1E,yEAAyE;IACzE,uEAAuE;IACvE,uEAAuE;IACvE,8BAA8B;IAC9B,MAAM,iBAAiB,GACrB,cAAc,CAAC,uCAAuC,KAAK,GAAG,CAAC;IACjE,MAAM,GAAG,GAAuC,iBAAiB;QAC/D,CAAC,CAAC;YACE,GAAG,cAAc;YACjB,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,EAAE;YACb,WAAW,EAAE,GAAG;SACjB;QACH,CAAC,CAAC;YACE,GAAG,cAAc;YACjB,IAAI,EAAE,gBAAgB;YACtB,SAAS,EAAE,WAAW;SACvB,CAAC;IACN,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,sEAAsE;QACtE,iEAAiE;QACjE,8DAA8D;QAC9D,qEAAqE;QACrE,kDAAkD;QAClD,OAAO,GAAG,CAAC,WAAW,CAAC;IACzB,CAAC;IACD,8DAA8D;IAC9D,gEAAgE;IAChE,kEAAkE;IAClE,oEAAoE;IACpE,oEAAoE;IACpE,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,cAAc,CAAC,8BAA8B,KAAK,GAAG,CAAC;IACvE,IAAI,QAAQ,EAAE,CAAC;QACb,iEAAiE;QACjE,8DAA8D;QAC9D,kEAAkE;QAClE,sDAAsD;QACtD,OAAO,GAAG,CAAC,sBAAsB,CAAC;IACpC,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,sBAAsB,GAAG,GAAG,CAAC;IACnC,CAAC;IACD,sEAAsE;IACtE,+EAA+E;IAC/E,kEAAkE;IAClE,kEAAkE;IAClE,iEAAiE;IACjE,iEAAiE;IACjE,6DAA6D;IAC7D,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/C,IAAI,QAAQ,IAAI,CAAC,KAAK,wBAAwB;gBAAE,SAAS;YACzD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,sDAAsD;IACtD,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,mEAAmE;IACnE,8DAA8D;IAC9D,GAAG,CAAC,gBAAgB,GAAG,GAAG,CAAC;IAC3B,qEAAqE;IACrE,sEAAsE;IACtE,4EAA4E;IAC5E,wEAAwE;IACxE,oEAAoE;IACpE,0EAA0E;IAC1E,4EAA4E;IAC5E,mEAAmE;IACnE,sEAAsE;IACtE,2EAA2E;IAC3E,yEAAyE;IACzE,qEAAqE;IACrE,KAAK,MAAM,CAAC,IAAI,uBAAuB;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IACvD,yEAAyE;IACzE,uEAAuE;IACvE,sEAAsE;IACtE,0DAA0D;IAC1D,sEAAsE;IACtE,0EAA0E;IAC1E,sEAAsE;IACtE,wEAAwE;IACxE,oEAAoE;IACpE,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,uEAAuE;IACvE,2EAA2E;IAC3E,yEAAyE;IACzE,6EAA6E;IAC7E,yEAAyE;IACzE,6EAA6E;IAC7E,6EAA6E;IAC7E,uEAAuE;IACvE,0EAA0E;IAC1E,2EAA2E;IAC3E,oEAAoE;IACpE,KAAK,MAAM,CAAC,IAAI,0BAA0B;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yEAAyE;AACzE,MAAM,uBAAuB,GAAG;IAC9B,2BAA2B;IAC3B,wBAAwB;IACxB,wBAAwB;IACxB,YAAY;CACJ,CAAC;AAEX;;;;;GAKG;AACH,MAAM,0BAA0B,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC"}

package/server/dist/terminal/terminal-reset.d.ts

@@ -0,0 +1,31 @@
+/**
+ * ADR-104 (iterate-20260515-terminal-smear-reset) — derive the
+ * `terminalReset` flag carried by the WS `ready` envelope.
+ *
+ * `true` exactly when this WS attach FRESHLY created the pty
+ * (`ptyExistedBefore === false` — `ptyManager.get` returned undefined
+ * immediately before `spawn`) AND the task already had a Claude session
+ * (`firstJsonlObservedAt` set). That is the "the previous embedded
+ * terminal was lost — a server restart / crash killed the pty
+ * mid-session" signal that drives the EmbeddedTerminal reset banner.
+ *
+ * `false` on first-ever launch (no prior JSONL) and on re-attach to a
+ * still-live pty (navigate-away-and-back never kills the pty, so
+ * `spawn()` returns the existing handle).
+ *
+ * Known false-negative band (code review, ADR-104): `firstJsonlObservedAt`
+ * is read from the in-memory store, which reflects the last value
+ * persisted to `sdk-sessions.json`. It is RESTORED from disk at server
+ * boot, so after a normal restart it is available for any task whose
+ * transcript poll ever persisted it. The narrow miss: a task whose JSONL
+ * first appeared, was observed by a poll, but crashed before the
+ * follow-up `store.persist()` flushed — the field is `undefined` on
+ * reload and the banner does not show. This degrades to the pre-ADR-104
+ * behaviour (no banner) — never a false positive, never a regression —
+ * so the precise (cheap, no-false-positive) `firstJsonlObservedAt`
+ * signal is kept over a live JSONL-path stat. A live stat would also
+ * have to encode the `~/.claude/projects/<cwd>` path and could fire on
+ * a pty that ran a bare shell with no Claude session.
+ */
+export declare function deriveTerminalReset(ptyExistedBefore: boolean, firstJsonlObservedAt: string | null | undefined): boolean;
+//# sourceMappingURL=terminal-reset.d.ts.map

package/server/dist/terminal/terminal-reset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-reset.d.ts","sourceRoot":"","sources":["../../src/terminal/terminal-reset.ts"],"names":[],"mappings":"AAWA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,mBAAmB,CACjC,gBAAgB,EAAE,OAAO,EACzB,oBAAoB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC9C,OAAO,CAET"}

package/server/dist/terminal/terminal-reset.js

@@ -0,0 +1,43 @@
+/*
+ * terminal-reset.ts — pure helper for the `terminalReset` field carried
+ * by the WS `ready` envelope (ADR-104).
+ *
+ * Extracted from `terminal/routes.ts` in iterate-2026-05-27-ws-upgrade-
+ * handler-split (ADR-103 retirement candidate #1). The helper is shared
+ * by `routes.ts` and `ws-upgrade-handler.ts`; living in its own neutral
+ * module avoids a circular dependency between them (external plan
+ * review MED #3 — openrouter/openai, 2026-05-27).
+ */
+/**
+ * ADR-104 (iterate-20260515-terminal-smear-reset) — derive the
+ * `terminalReset` flag carried by the WS `ready` envelope.
+ *
+ * `true` exactly when this WS attach FRESHLY created the pty
+ * (`ptyExistedBefore === false` — `ptyManager.get` returned undefined
+ * immediately before `spawn`) AND the task already had a Claude session
+ * (`firstJsonlObservedAt` set). That is the "the previous embedded
+ * terminal was lost — a server restart / crash killed the pty
+ * mid-session" signal that drives the EmbeddedTerminal reset banner.
+ *
+ * `false` on first-ever launch (no prior JSONL) and on re-attach to a
+ * still-live pty (navigate-away-and-back never kills the pty, so
+ * `spawn()` returns the existing handle).
+ *
+ * Known false-negative band (code review, ADR-104): `firstJsonlObservedAt`
+ * is read from the in-memory store, which reflects the last value
+ * persisted to `sdk-sessions.json`. It is RESTORED from disk at server
+ * boot, so after a normal restart it is available for any task whose
+ * transcript poll ever persisted it. The narrow miss: a task whose JSONL
+ * first appeared, was observed by a poll, but crashed before the
+ * follow-up `store.persist()` flushed — the field is `undefined` on
+ * reload and the banner does not show. This degrades to the pre-ADR-104
+ * behaviour (no banner) — never a false positive, never a regression —
+ * so the precise (cheap, no-false-positive) `firstJsonlObservedAt`
+ * signal is kept over a live JSONL-path stat. A live stat would also
+ * have to encode the `~/.claude/projects/<cwd>` path and could fire on
+ * a pty that ran a bare shell with no Claude session.
+ */
+export function deriveTerminalReset(ptyExistedBefore, firstJsonlObservedAt) {
+    return !ptyExistedBefore && Boolean(firstJsonlObservedAt);
+}
+//# sourceMappingURL=terminal-reset.js.map

package/server/dist/terminal/terminal-reset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-reset.js","sourceRoot":"","sources":["../../src/terminal/terminal-reset.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,mBAAmB,CACjC,gBAAyB,EACzB,oBAA+C;IAE/C,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAC5D,CAAC"}

package/server/dist/terminal/ws-heartbeat.d.ts

@@ -0,0 +1,78 @@
+/** Default heartbeat interval; a dead peer is reaped within ~2-3 intervals. */
+export declare const DEFAULT_HEARTBEAT_MS = 15000;
+/** Floor — guards against a pathological tiny interval pinning the loop. */
+export declare const MIN_HEARTBEAT_MS = 1000;
+/**
+ * Ceiling — a larger interval would silently make the reaper effectively
+ * inert and restore the exact bug this iterate fixes, so a misconfigured
+ * env value is clamped down rather than trusted (internal review #3).
+ */
+export declare const MAX_HEARTBEAT_MS = 300000;
+/**
+ * Consecutive missed pongs tolerated before a socket is reaped. `2` means
+ * the connection survives ONE transient miss — important on OS-sleep
+ * resume, where the server's interval and the peer wake on slightly
+ * different ticks (internal review #2). A truly dead socket is still
+ * reaped within ~2-3 intervals.
+ */
+export declare const DEFAULT_MAX_MISSED_PONGS = 2;
+/**
+ * The slice of a `ws` (ws@8) socket we depend on, surfaced via
+ * `WSContext.raw` (@hono/node-ws). Kept structural so tests can supply a
+ * fake and so a future adapter that does not expose these methods degrades
+ * to a no-op rather than throwing.
+ */
+export interface RawSocketLike {
+    readyState: number;
+    ping(): void;
+    terminate(): void;
+    on(event: "pong", listener: () => void): void;
+    off?(event: "pong", listener: () => void): void;
+}
+export interface HeartbeatMonitor {
+    /** Record a pong from the peer — the connection is alive. */
+    notePong(): void;
+    /**
+     * Decide this interval's action and advance state: `terminate` once the
+     * tolerance of consecutive missed pongs is exhausted, otherwise `ping`.
+     */
+    tick(): "ping" | "terminate";
+}
+/**
+ * Pure liveness state machine. No timers, no sockets — fully unit-testable.
+ * Tracks pings sent since the last pong; a pong resets it. Reaps once that
+ * count reaches `maxMissedPongs`, so a single transient miss is tolerated
+ * at the default (see {@link DEFAULT_MAX_MISSED_PONGS}).
+ */
+export declare function createHeartbeatMonitor(maxMissedPongs?: number): HeartbeatMonitor;
+/**
+ * Resolve the heartbeat interval from the environment. Invalid, absent, or
+ * non-positive values fall back to {@link DEFAULT_HEARTBEAT_MS}; valid
+ * values are clamped up to {@link MIN_HEARTBEAT_MS}.
+ */
+export declare function resolveHeartbeatMs(env: Record<string, string | undefined>): number;
+export interface StartWsHeartbeatOpts {
+    /** Override the resolved interval (tests). */
+    intervalMs?: number;
+    /** Consecutive missed pongs tolerated before reap (tests / tuning). */
+    maxMissedPongs?: number;
+    /** Env source for interval resolution (defaults to `process.env`). */
+    env?: Record<string, string | undefined>;
+    /** Scheduler seams for deterministic tests. */
+    setIntervalFn?: (handler: () => void, ms: number) => ReturnType<typeof setInterval>;
+    clearIntervalFn?: (timer: ReturnType<typeof setInterval>) => void;
+}
+/**
+ * Attach a self-cleaning liveness heartbeat to a WS connection. Returns a
+ * `stop()` for explicit teardown; the loop ALSO self-cleans on the first
+ * tick after `raw.readyState` leaves OPEN, so callers need not wire
+ * `onClose`/`onError`.
+ *
+ * No-ops (returns a no-op `stop`) when the connection does not expose a
+ * pingable raw socket — degrading to the pre-existing close-driven release
+ * with no regression for tests/mocks or alternate adapters.
+ */
+export declare function startWsHeartbeat(ws: {
+    raw?: unknown;
+}, opts?: StartWsHeartbeatOpts): () => void;
+//# sourceMappingURL=ws-heartbeat.d.ts.map

package/server/dist/terminal/ws-heartbeat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-heartbeat.d.ts","sourceRoot":"","sources":["../../src/terminal/ws-heartbeat.ts"],"names":[],"mappings":"AAiCA,+EAA+E;AAC/E,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAC3C,4EAA4E;AAC5E,eAAO,MAAM,gBAAgB,OAAQ,CAAC;AACtC;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,SAAU,CAAC;AACxC;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAI1C;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,IAAI,IAAI,CAAC;IACb,SAAS,IAAI,IAAI,CAAC;IAClB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC;IAC9C,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC;CACjD;AAED,MAAM,WAAW,gBAAgB;IAC/B,6DAA6D;IAC7D,QAAQ,IAAI,IAAI,CAAC;IACjB;;;OAGG;IACH,IAAI,IAAI,MAAM,GAAG,WAAW,CAAC;CAC9B;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,cAAc,GAAE,MAAiC,GAChD,gBAAgB,CAYlB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,MAAM,CAMR;AAED,MAAM,WAAW,oBAAoB;IACnC,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,+CAA+C;IAC/C,aAAa,CAAC,EAAE,CACd,OAAO,EAAE,MAAM,IAAI,EACnB,EAAE,EAAE,MAAM,KACP,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;IACpC,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,KAAK,IAAI,CAAC;CACnE;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,EACrB,IAAI,CAAC,EAAE,oBAAoB,GAC1B,MAAM,IAAI,CAsEZ"}

package/server/dist/terminal/ws-heartbeat.js

@@ -0,0 +1,164 @@
+/*
+ * ws-heartbeat.ts — embedded-terminal WebSocket liveness keepalive
+ * (iterate-2026-05-31-terminal-readonly-keepalive).
+ *
+ * WHY THIS EXISTS
+ * ---------------
+ * The terminal writer slot (`pty-manager.ts`) is released ONLY when the
+ * server observes a WS `close`/`error` event (`detachAndCount` in
+ * `ws-upgrade-handler.ts`). A connection that dies UNCLEANLY — OS sleep,
+ * browser/tab crash, or a Tailscale half-open TCP (the prod server binds
+ * the Tailscale IP) — never fires that event, so the writer slot stays
+ * pinned to a dead conn. Every new tab then attaches as `reader` and shows
+ * the false "Read-only — another tab is the active writer" banner. The
+ * backpressure watchdog cannot help: it evicts on `bufferedAmount`
+ * saturation, and an idle dead socket buffers ~0 bytes (in prod it is inert
+ * anyway — the manager's `conn` is a synthetic token with no
+ * `bufferedAmount`).
+ *
+ * This module adds a per-connection WS ping/pong heartbeat. On a missed
+ * pong the dead socket is `terminate()`d; the existing
+ * `onClose → detach → reader-promotion → onPromoteToWriter("writer-promoted")`
+ * chain then frees the slot and promotes the surviving tab to writer —
+ * clearing read-only WITHOUT a manual reload. The browser answers WS pings
+ * automatically (RFC 6455 control frame), so there is no client change.
+ *
+ * COHESION (ADR-101/103): `pty-manager.ts` / `ws-upgrade-handler.ts` /
+ * `terminal/routes.ts` are at-ceiling deep-module exceptions. The
+ * liveness mechanics live HERE as a dedicated neutral module (the
+ * ADR-103-sanctioned shape, cf. `terminal-reset.ts`) so the WS body only
+ * gains a one-line wire. The pure monitor + env resolver are timer- and
+ * socket-free for deterministic unit testing.
+ */
+/** Default heartbeat interval; a dead peer is reaped within ~2-3 intervals. */
+export const DEFAULT_HEARTBEAT_MS = 15_000;
+/** Floor — guards against a pathological tiny interval pinning the loop. */
+export const MIN_HEARTBEAT_MS = 1_000;
+/**
+ * Ceiling — a larger interval would silently make the reaper effectively
+ * inert and restore the exact bug this iterate fixes, so a misconfigured
+ * env value is clamped down rather than trusted (internal review #3).
+ */
+export const MAX_HEARTBEAT_MS = 300_000;
+/**
+ * Consecutive missed pongs tolerated before a socket is reaped. `2` means
+ * the connection survives ONE transient miss — important on OS-sleep
+ * resume, where the server's interval and the peer wake on slightly
+ * different ticks (internal review #2). A truly dead socket is still
+ * reaped within ~2-3 intervals.
+ */
+export const DEFAULT_MAX_MISSED_PONGS = 2;
+/** RFC 6455 OPEN readyState (ws@8 numeric constant). */
+const WS_OPEN = 1;
+/**
+ * Pure liveness state machine. No timers, no sockets — fully unit-testable.
+ * Tracks pings sent since the last pong; a pong resets it. Reaps once that
+ * count reaches `maxMissedPongs`, so a single transient miss is tolerated
+ * at the default (see {@link DEFAULT_MAX_MISSED_PONGS}).
+ */
+export function createHeartbeatMonitor(maxMissedPongs = DEFAULT_MAX_MISSED_PONGS) {
+    let pingsSincePong = 0;
+    return {
+        notePong() {
+            pingsSincePong = 0;
+        },
+        tick() {
+            if (pingsSincePong >= maxMissedPongs)
+                return "terminate";
+            pingsSincePong += 1;
+            return "ping";
+        },
+    };
+}
+/**
+ * Resolve the heartbeat interval from the environment. Invalid, absent, or
+ * non-positive values fall back to {@link DEFAULT_HEARTBEAT_MS}; valid
+ * values are clamped up to {@link MIN_HEARTBEAT_MS}.
+ */
+export function resolveHeartbeatMs(env) {
+    const raw = env.SHIPWRIGHT_TERMINAL_WS_HEARTBEAT_MS;
+    if (raw === undefined)
+        return DEFAULT_HEARTBEAT_MS;
+    const parsed = Number.parseInt(raw, 10);
+    if (!Number.isFinite(parsed) || parsed <= 0)
+        return DEFAULT_HEARTBEAT_MS;
+    return Math.min(Math.max(parsed, MIN_HEARTBEAT_MS), MAX_HEARTBEAT_MS);
+}
+/**
+ * Attach a self-cleaning liveness heartbeat to a WS connection. Returns a
+ * `stop()` for explicit teardown; the loop ALSO self-cleans on the first
+ * tick after `raw.readyState` leaves OPEN, so callers need not wire
+ * `onClose`/`onError`.
+ *
+ * No-ops (returns a no-op `stop`) when the connection does not expose a
+ * pingable raw socket — degrading to the pre-existing close-driven release
+ * with no regression for tests/mocks or alternate adapters.
+ */
+export function startWsHeartbeat(ws, opts) {
+    const candidate = ws?.raw;
+    if (!candidate ||
+        typeof candidate.ping !== "function" ||
+        typeof candidate.terminate !== "function" ||
+        typeof candidate.on !== "function") {
+        return () => undefined;
+    }
+    const raw = candidate;
+    const monitor = createHeartbeatMonitor(opts?.maxMissedPongs);
+    const onPong = () => monitor.notePong();
+    raw.on("pong", onPong);
+    const intervalMs = opts?.intervalMs ?? resolveHeartbeatMs(opts?.env ?? process.env);
+    const setI = opts?.setIntervalFn ?? setInterval;
+    const clearI = opts?.clearIntervalFn ?? clearInterval;
+    let timer = null;
+    let stopped = false;
+    const stop = () => {
+        if (stopped)
+            return;
+        stopped = true;
+        if (timer !== null) {
+            clearI(timer);
+            timer = null;
+        }
+        try {
+            raw.off?.("pong", onPong);
+        }
+        catch {
+            /* ignore */
+        }
+    };
+    timer = setI(() => {
+        if (raw.readyState !== WS_OPEN) {
+            // Socket already closing/closed — the onClose path (if any) owns the
+            // detach; we just release our own timer + listener.
+            stop();
+            return;
+        }
+        const action = monitor.tick();
+        if (action === "terminate") {
+            // Half-open / unresponsive: force the close so the existing
+            // detach → reader-promotion chain runs, then stop ourselves so
+            // terminate() fires EXACTLY ONCE — even if it throws or the
+            // readyState flip is not synchronous (external review: openai
+            // medium, 2026-05-31). Without the explicit stop() the interval
+            // would re-`terminate()` every tick.
+            try {
+                raw.terminate();
+            }
+            catch {
+                /* ignore — we stop the loop regardless */
+            }
+            stop();
+            return;
+        }
+        try {
+            raw.ping();
+        }
+        catch {
+            /* socket mid-close — next tick's readyState guard self-cleans */
+        }
+    }, intervalMs);
+    // Never keep the event loop alive solely for the heartbeat.
+    timer.unref?.();
+    return stop;
+}
+//# sourceMappingURL=ws-heartbeat.js.map

package/server/dist/terminal/ws-heartbeat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-heartbeat.js","sourceRoot":"","sources":["../../src/terminal/ws-heartbeat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAC3C,4EAA4E;AAC5E,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AACtC;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACxC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAC1C,wDAAwD;AACxD,MAAM,OAAO,GAAG,CAAC,CAAC;AA0BlB;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,iBAAyB,wBAAwB;IAEjD,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,OAAO;QACL,QAAQ;YACN,cAAc,GAAG,CAAC,CAAC;QACrB,CAAC;QACD,IAAI;YACF,IAAI,cAAc,IAAI,cAAc;gBAAE,OAAO,WAAW,CAAC;YACzD,cAAc,IAAI,CAAC,CAAC;YACpB,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAuC;IAEvC,MAAM,GAAG,GAAG,GAAG,CAAC,mCAAmC,CAAC;IACpD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,oBAAoB,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,oBAAoB,CAAC;IACzE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,CAAC;AACxE,CAAC;AAiBD;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,EAAqB,EACrB,IAA2B;IAE3B,MAAM,SAAS,GAAG,EAAE,EAAE,GAAyC,CAAC;IAChE,IACE,CAAC,SAAS;QACV,OAAO,SAAS,CAAC,IAAI,KAAK,UAAU;QACpC,OAAO,SAAS,CAAC,SAAS,KAAK,UAAU;QACzC,OAAO,SAAS,CAAC,EAAE,KAAK,UAAU,EAClC,CAAC;QACD,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC;IACzB,CAAC;IACD,MAAM,GAAG,GAAG,SAA0B,CAAC;IAEvC,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;IACxC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEvB,MAAM,UAAU,GACd,IAAI,EAAE,UAAU,IAAI,kBAAkB,CAAC,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,IAAI,EAAE,aAAa,IAAI,WAAW,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,EAAE,eAAe,IAAI,aAAa,CAAC;IAEtD,IAAI,KAAK,GAA0C,IAAI,CAAC;IACxD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,CAAC,KAAK,CAAC,CAAC;YACd,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YACH,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE;QAChB,IAAI,GAAG,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YAC/B,qEAAqE;YACrE,oDAAoD;YACpD,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3B,4DAA4D;YAC5D,+DAA+D;YAC/D,4DAA4D;YAC5D,8DAA8D;YAC9D,gEAAgE;YAChE,qCAAqC;YACrC,IAAI,CAAC;gBACH,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,0CAA0C;YAC5C,CAAC;YACD,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,EAAE,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;QACnE,CAAC;IACH,CAAC,EAAE,UAAU,CAAC,CAAC;IACf,4DAA4D;IAC3D,KAAgC,CAAC,KAAK,EAAE,EAAE,CAAC;IAE5C,OAAO,IAAI,CAAC;AACd,CAAC"}