@svenroth-ai/shipwright 0.28.0 → 0.29.0

package/server/dist/core/session-file/probe.js

@@ -0,0 +1,63 @@
+/*
+ * Batched "can this path be opened?" probe behind POST /tasks/:id/session-file/probe.
+ *
+ * The verdict comes from the SAME decision core as the read route (decideSessionFileAccess: realpath
+ * path-guard inside the project root, session evidence outside it, sensitive-location denylist) plus a
+ * handle-based regular-file check. It answers yes/no and a coarse reason ONLY: never content, never a
+ * listing, and a path the session may not see (unevidenced, sensitive, traversal, symlink escape) is
+ * reported as the generic "unavailable" so the probe is no existence oracle beyond the read route.
+ * Read-only (DO-NOT #1); stateless (rule 4): nothing is remembered between calls.
+ */
+import path from "node:path";
+import { decideSessionFileAccess, MAX_PATH_CHARS } from "./access.js";
+import { evidenceKey } from "./evidence.js";
+import { probeRegularFile } from "./safe-read.js";
+export const MAX_PROBE_PATHS = 40;
+function lexicallyInside(roots, abs) {
+    return roots.some((r) => {
+        const rel = path.relative(path.resolve(r), abs);
+        return rel === "" || (rel !== ".." && !rel.startsWith(".." + path.sep) && !path.isAbsolute(rel));
+    });
+}
+/** One evidence scan for the whole batch instead of one per path (a scan is a pass over up to 48 MB). */
+function batchedEvidence(args) {
+    const wanted = args.paths
+        .filter((p) => p && p.length <= MAX_PATH_CHARS && !p.includes("\0") && path.isAbsolute(p))
+        .map((p) => path.resolve(p))
+        .filter((abs) => !lexicallyInside(args.roots, abs));
+    const keys = new Set(wanted.map(evidenceKey));
+    let first = null;
+    return async (candidates) => {
+        if (wanted.length === 0 || !candidates.every((c) => keys.has(evidenceKey(c))))
+            return args.findEvidence(candidates);
+        first ??= args.findEvidence([...new Set(wanted)]);
+        const batch = await first;
+        return { found: new Set(candidates.map(evidenceKey).filter((k) => batch.found.has(k))), incomplete: batch.incomplete };
+    };
+}
+export async function probeOpenable(args) {
+    const findEvidence = batchedEvidence(args);
+    const out = [];
+    for (const requested of args.paths) {
+        const d = await decideSessionFileAccess({ roots: args.roots, requested, findEvidence });
+        if (!d.ok) {
+            out.push({ openable: false, reason: d.status === 404 ? "not_found" : "unavailable" });
+            continue;
+        }
+        if (!args.previewable(d.absolute)) {
+            out.push({ openable: false, reason: "not_previewable" });
+            continue;
+        }
+        const f = await probeRegularFile(d.absolute, args.maxBytes);
+        if (f.kind === "too_large") {
+            out.push({ openable: false, reason: "not_previewable" });
+            continue;
+        }
+        if (f.kind === "file")
+            out.push({ openable: true });
+        else
+            out.push({ openable: false, reason: f.kind === "not_found" ? "not_found" : f.kind === "not_a_file" ? "not_a_file" : "unavailable" });
+    }
+    return out;
+}
+//# sourceMappingURL=probe.js.map

package/server/dist/core/session-file/probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.js","sourceRoot":"","sources":["../../../src/core/session-file/probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAmB,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAgBlC,SAAS,eAAe,CAAC,KAAe,EAAE,GAAW;IACnD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChD,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yGAAyG;AACzG,SAAS,eAAe,CAAC,IAAe;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK;SACtB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,cAAc,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;SACzF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;SAC3B,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9C,IAAI,KAAK,GAAgE,IAAI,CAAC;IAC9E,OAAO,KAAK,EAAE,UAAU,EAAE,EAAE;QAC1B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACpH,KAAK,KAAK,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;IACzH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAe;IACjD,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,MAAM,uBAAuB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;YACtF,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACzD,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC3B,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACzD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;;YAC/C,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;IAC5I,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/core/session-file/safe-read.d.ts

@@ -0,0 +1,33 @@
+export type SafeReadResult = {
+    kind: "ok";
+    bytes: Buffer;
+} | {
+    kind: "not_found";
+} | {
+    kind: "not_a_file";
+} | {
+    kind: "too_large";
+    size: number;
+} | {
+    kind: "error";
+    detail: string;
+};
+export type RegularFileProbe = {
+    kind: "file";
+} | {
+    kind: "not_found";
+} | {
+    kind: "not_a_file";
+} | {
+    kind: "too_large";
+} | {
+    kind: "error";
+};
+/**
+ * Existence probe for ONE already-authorised, realpath'd path: a single open, the verdict taken from the
+ * handle (js/file-system-race), nothing read. Same swap guards as readRegularFileCapped.
+ */
+export declare function probeRegularFile(p: string, maxBytes?: number): Promise<RegularFileProbe>;
+/** `p` MUST be the output of realpath(): anything else is treated as an ancestor swap and refused. */
+export declare function readRegularFileCapped(p: string, maxBytes: number): Promise<SafeReadResult>;
+//# sourceMappingURL=safe-read.d.ts.map

package/server/dist/core/session-file/safe-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-read.d.ts","sourceRoot":"","sources":["../../../src/core/session-file/safe-read.ts"],"names":[],"mappings":"AAsBA,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,GACtB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAE7I;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAuB9F;AAED,sGAAsG;AACtG,wBAAsB,qBAAqB,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAiChG"}

package/server/dist/core/session-file/safe-read.js

@@ -0,0 +1,103 @@
+/*
+ * Read ONE regular file with a single open and every check on the open handle
+ * (CodeQL js/file-system-race: a path-based stat followed by a read lets the
+ * file change in between). Read-only (CLAUDE.md DO-NOT #1).
+ *   - O_NOFOLLOW (POSIX) refuses a symlink planted at the final component;
+ *     O_NONBLOCK keeps a FIFO from blocking the open.
+ *   - fh.stat() must say regular file, within `maxBytes`.
+ *   - Windows has no O_NOFOLLOW: a post-open lstat must agree (not a symlink,
+ *     same dev+ino as the handle actually opened).
+ *   - O_NOFOLLOW guards only the LAST component: after the open, the path must
+ *     still resolve to ITSELF (callers pass an already-realpath'd path), which
+ *     catches an ancestor directory swapped for a link since authorization.
+ *     Portable handle-anchored traversal does not exist in Node; this narrows
+ *     the window rather than closing it (recorded residual risk).
+ * No directory is ever listed; a directory fails the isFile() check.
+ */
+import { constants } from "node:fs";
+import { lstat, open, realpath } from "node:fs/promises";
+const FLAGS = constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0) | (constants.O_NONBLOCK ?? 0);
+/**
+ * Existence probe for ONE already-authorised, realpath'd path: a single open, the verdict taken from the
+ * handle (js/file-system-race), nothing read. Same swap guards as readRegularFileCapped.
+ */
+export async function probeRegularFile(p, maxBytes) {
+    let fh;
+    try {
+        fh = await open(p, FLAGS);
+    }
+    catch (err) {
+        const code = err?.code;
+        if (code === "ENOENT" || code === "ENOTDIR")
+            return { kind: "not_found" };
+        if (code === "ELOOP" || code === "EISDIR")
+            return { kind: "not_a_file" };
+        return { kind: "error" };
+    }
+    try {
+        const st = await fh.stat({ bigint: true });
+        if (!st.isFile())
+            return { kind: "not_a_file" };
+        if ((await realpath(p)) !== p)
+            return { kind: "not_a_file" };
+        const link = await lstat(p, { bigint: true });
+        if (link.isSymbolicLink() || link.dev !== st.dev || link.ino !== st.ino)
+            return { kind: "not_a_file" };
+        if (maxBytes !== undefined && st.size > BigInt(maxBytes))
+            return { kind: "too_large" };
+        return { kind: "file" };
+    }
+    catch {
+        return { kind: "error" };
+    }
+    finally {
+        await fh.close().catch(() => { });
+    }
+}
+/** `p` MUST be the output of realpath(): anything else is treated as an ancestor swap and refused. */
+export async function readRegularFileCapped(p, maxBytes) {
+    let fh;
+    try {
+        fh = await open(p, FLAGS);
+    }
+    catch (err) {
+        const code = err?.code;
+        if (code === "ENOENT")
+            return { kind: "not_found" };
+        // ELOOP (symlink under O_NOFOLLOW), EISDIR, EACCES/EPERM: nothing readable here.
+        if (code === "ELOOP" || code === "EISDIR")
+            return { kind: "not_a_file" };
+        return { kind: "error", detail: String(code ?? err).slice(0, 80) };
+    }
+    try {
+        const st = await fh.stat({ bigint: true });
+        if (!st.isFile())
+            return { kind: "not_a_file" };
+        if (st.size > BigInt(maxBytes))
+            return { kind: "too_large", size: Number(st.size) };
+        // realpath on BOTH sides of the lstat narrows the swap-and-restore window (no O_NOFOLLOW on Windows).
+        if ((await realpath(p)) !== p)
+            return { kind: "not_a_file" };
+        const link = await lstat(p, { bigint: true });
+        if (link.isSymbolicLink() || link.dev !== st.dev || link.ino !== st.ino)
+            return { kind: "not_a_file" };
+        if ((await realpath(p)) !== p)
+            return { kind: "not_a_file" };
+        const buf = Buffer.alloc(Number(st.size));
+        let off = 0;
+        while (off < buf.length) {
+            const { bytesRead } = await fh.read(buf, off, buf.length - off, off);
+            if (bytesRead === 0)
+                break;
+            off += bytesRead;
+        }
+        return { kind: "ok", bytes: buf.subarray(0, off) };
+    }
+    catch (err) {
+        return { kind: "error", detail: String(err?.code ?? err).slice(0, 80) };
+    }
+    finally {
+        await fh.close().catch(() => { });
+    }
+}
+//# sourceMappingURL=safe-read.js.map

package/server/dist/core/session-file/safe-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-read.js","sourceRoot":"","sources":["../../../src/core/session-file/safe-read.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEzD,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;AAW7F;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,CAAS,EAAE,QAAiB;IACjE,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACH,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;QAClD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC1E,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QACzE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAChD,IAAI,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QACvG,IAAI,QAAQ,KAAK,SAAS,IAAI,EAAE,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACvF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,CAAS,EAAE,QAAgB;IACrE,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACH,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;QAClD,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACpD,iFAAiF;QACjF,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QACzE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAChD,IAAI,EAAE,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACpF,sGAAsG;QACtG,IAAI,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QACvG,IAAI,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;YACrE,IAAI,SAAS,KAAK,CAAC;gBAAE,MAAM;YAC3B,GAAG,IAAI,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAE,GAA6B,EAAE,IAAI,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACrG,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,CAAC;AACH,CAAC"}

package/server/dist/core/session-file/sensitive.d.ts

@@ -0,0 +1,5 @@
+type Scope = "project" | "outside";
+/** True when `p` (any separator style, any case) names a credential-bearing location in `scope`. */
+export declare function isSensitivePath(p: string, scope?: Scope): boolean;
+export {};
+//# sourceMappingURL=sensitive.d.ts.map

package/server/dist/core/session-file/sensitive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive.d.ts","sourceRoot":"","sources":["../../../src/core/session-file/sensitive.ts"],"names":[],"mappings":"AAcA,KAAK,KAAK,GAAG,SAAS,GAAG,SAAS,CAAC;AAiBnC,oGAAoG;AACpG,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,GAAE,KAAiB,GAAG,OAAO,CAiB5E"}

package/server/dist/core/session-file/sensitive.js

@@ -0,0 +1,52 @@
+/*
+ * Defence in depth for the session-file route: a path that lives in a
+ * credential-bearing location is refused even when the session evidences it.
+ * The extension allowlist (MIME_BY_EXTENSION) already refuses most key
+ * material; these lists cover the text-shaped secrets that slip through it.
+ *
+ *   "project" scope  — a SMALL list of unmistakable secret names, checked on
+ *                      the project-relative path (so ordinary project files such
+ *                      as locales/en/auth.json or .vscode/mcp.json keep working).
+ *   "outside" scope  — the broad list: a file outside the project is only ever
+ *                      served on session evidence, so false positives are cheap.
+ * Best-effort blocklist, not a boundary: the evidence gate is the boundary.
+ */
+const PROJECT_DIRS = new Set([".ssh", ".gnupg", ".aws"]);
+const PROJECT_NAMES = new Set([".npmrc", ".netrc", ".pypirc", ".git-credentials", ".credentials.json", ".claude.json", "known_hosts", "authorized_keys"]);
+const OUTSIDE_DIRS = new Set([
+    ...PROJECT_DIRS, ".kube", ".azure", ".docker", ".git", "gh", "gcloud", "terraform.d", ".vault", ".config", ".cargo", ".m2",
+    "configstore", ".vercel", ".netlify", ".supabase", "github cli", ".pulumi", ".codex", ".gemini", ".wrangler", ".fly",
+]);
+const OUTSIDE_NAMES = new Set([
+    ...PROJECT_NAMES, "credentials", ".vault-token", "hosts.yml", "application_default_credentials.json", "credentials.tfrc.json",
+    "mcp.json", "credentials.toml", "auth.json", ".yarnrc.yml", "ngrok.yml", "kaggle.json", "oauth_creds.json", "settings.local.json", "token.json", "secrets.json", "secret.json", "consolehost_history.txt", "serviceaccount.json",
+]);
+const KEY_NAME = /^id_(rsa|dsa|ecdsa|ed25519)/;
+// Cloud / OAuth credential files with variable names (service-account-prod.json, client_secret_123.json, *-adminsdk-*.json).
+const CRED_JSON = /^(service[-_]?account.*|client[-_]secret.*|.*-adminsdk-.*)\.json$/;
+/** True when `p` (any separator style, any case) names a credential-bearing location in `scope`. */
+export function isSensitivePath(p, scope = "outside") {
+    const parts = p
+        .replaceAll("\x5c", "/")
+        .split("/")
+        .filter((s) => s.length > 0)
+        .map((s) => s.toLowerCase());
+    if (parts.length === 0)
+        return scope === "outside";
+    const base = parts[parts.length - 1];
+    const dirs = parts.slice(0, -1);
+    if (base.startsWith(".env") || base.endsWith(".env"))
+        return true;
+    if (KEY_NAME.test(base) || (scope === "outside" && CRED_JSON.test(base)))
+        return true;
+    // .git/config can carry a token in a remote URL or an extraheader; the rest of .git stays ordinary in project scope.
+    if (scope === "project" && (base === "config" || base === "config.worktree") && dirs.includes(".git"))
+        return true;
+    if ((scope === "project" ? PROJECT_NAMES : OUTSIDE_NAMES).has(base))
+        return true;
+    if (dirs.some((seg) => (scope === "project" ? PROJECT_DIRS : OUTSIDE_DIRS).has(seg)))
+        return true;
+    // Claude's own settings carry env blocks with API keys.
+    return scope === "outside" && dirs.includes(".claude") && base.startsWith("settings");
+}
+//# sourceMappingURL=sensitive.js.map

package/server/dist/core/session-file/sensitive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive.js","sourceRoot":"","sources":["../../../src/core/session-file/sensitive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AACzD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,cAAc,EAAE,aAAa,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAE1J,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,GAAG,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK;IAC1H,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM;CACrH,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,GAAG,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,sCAAsC,EAAE,uBAAuB;IAC7H,UAAU,EAAE,kBAAkB,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,yBAAyB,EAAE,qBAAqB;CACjO,CAAC,CAAC;AACH,MAAM,QAAQ,GAAG,6BAA6B,CAAC;AAC/C,6HAA6H;AAC7H,MAAM,SAAS,GAAG,mEAAmE,CAAC;AAEtF,oGAAoG;AACpG,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,QAAe,SAAS;IACjE,MAAM,KAAK,GAAG,CAAC;SACZ,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC;SACvB,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;SAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,KAAK,SAAS,CAAC;IACnD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAClE,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACtF,qHAAqH;IACrH,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,iBAAiB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACnH,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjF,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClG,wDAAwD;IACxD,OAAO,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AACxF,CAAC"}

package/server/dist/core/session-info/collect.d.ts

@@ -0,0 +1,70 @@
+import type { SessionOutputFile } from "./types.js";
+export interface Notification {
+    /** Timestamp of the record that carried it (to tell a resumed agent from a finished one). */
+    at: string | null;
+    taskId: string;
+    toolUseId: string | null;
+    status: string | null;
+    durationMs: number | null;
+    tokens: number | null;
+    toolUses: number | null;
+}
+export interface AgentToolUse {
+    /** run_in_background: its tool_result is only a launch ack; completion arrives as a task-notification. */
+    background: boolean;
+    prompt: string | null;
+    description: string | null;
+}
+export interface ToolResult {
+    at: string | null;
+    isError: boolean;
+    status: string | null;
+    durationMs: number | null;
+    tokens: number | null;
+    toolUses: number | null;
+}
+export interface Facts {
+    /** tool_use ids with no tool_result yet: a long silent tool call is not a dead agent. */
+    pendingUse: Set<string>;
+    /** tool_use id -> result, for foreground subagents (no task-notification) and failed writes. */
+    toolResults: Map<string, ToolResult>;
+    /** output tool_use id -> output key, so an errored write can be retracted. */
+    outputUses: Map<string, string>;
+    /** Per output key, every write attempt, so a rejected one can be retracted exactly. */
+    outputAttempts: Map<string, {
+        id: string | null;
+        ts: string | null;
+        tool: SessionOutputFile["tool"];
+    }[]>;
+    usage: {
+        tokens: number;
+        model: string | null;
+        at: string | null;
+    } | null;
+    /** Index (line ordinal) of the usage line, to order it against compactions. */
+    usageSeq: number;
+    compactions: {
+        at: string | null;
+        preTokens: number | null;
+        postTokens: number | null;
+        seq: number;
+    }[];
+    bridgeSeen: boolean;
+    outputs: Map<string, SessionOutputFile>;
+    notifications: Map<string, Notification>;
+    agentToolUses: Map<string, AgentToolUse>;
+    firstTs: string | null;
+    lastTs: string | null;
+    lastAssistantText: string | null;
+    model: string | null;
+    seq: number;
+}
+export declare function newFacts(): Facts;
+export declare const TEXT_CAP = 4000;
+export declare function outputKey(p: string): string;
+/** First `<name>…</name>` content, by plain string search — `name` is never a pattern. */
+export declare const tag: (body: string, name: string) => string | null;
+/** Cheap timestamp peek so non-matching lines never reach JSON.parse. */
+export declare function quickTimestamp(line: string): string | null;
+export declare function ingestLine(f: Facts, line: string, agentId: string | null): void;
+//# sourceMappingURL=collect.d.ts.map

package/server/dist/core/session-info/collect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collect.d.ts","sourceRoot":"","sources":["../../../src/core/session-info/collect.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAIpD,MAAM,WAAW,YAAY;IAC3B,6FAA6F;IAC7F,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,0GAA0G;IAC1G,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,KAAK;IACpB,yFAAyF;IACzF,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,gGAAgG;IAChG,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACrC,8EAA8E;IAC9E,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,uFAAuF;IACvF,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAA;KAAE,EAAE,CAAC,CAAC;IACzG,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1E,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE;QAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvG,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACxC,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACzC,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACzC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wBAAgB,QAAQ,IAAI,KAAK,CAmBhC;AAED,eAAO,MAAM,QAAQ,OAAO,CAAC;AAc7B,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE3C;AAYD,0FAA0F;AAC1F,eAAO,MAAM,GAAG,GAAI,MAAM,MAAM,EAAE,MAAM,MAAM,KAAG,MAAM,GAAG,IAOzD,CAAC;AAuBF,yEAAyE;AACzE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK1D;AAgBD,wBAAgB,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAsH/E"}

package/server/dist/core/session-info/collect.js

@@ -0,0 +1,248 @@
+/*
+ * One-pass fact collector over the lines of ONE session/subagent JSONL.
+ * Pure (string in, facts out) so the same code serves the session file and
+ * every `subagents/agent-*.jsonl`. Cheap `includes()` pre-filters keep the
+ * JSON.parse bill off the (many, large) lines that cannot matter.
+ */
+import path from "node:path";
+const OUTPUT_TOOLS = new Set(["Write", "Edit", "NotebookEdit", "MultiEdit"]);
+export function newFacts() {
+    return {
+        pendingUse: new Set(),
+        toolResults: new Map(),
+        outputUses: new Map(),
+        outputAttempts: new Map(),
+        usage: null,
+        usageSeq: -1,
+        compactions: [],
+        bridgeSeen: false,
+        outputs: new Map(),
+        notifications: new Map(),
+        agentToolUses: new Map(),
+        firstTs: null,
+        lastTs: null,
+        lastAssistantText: null,
+        model: null,
+        seq: 0,
+    };
+}
+export const TEXT_CAP = 4000;
+const capText = (s) => (s && s.length > TEXT_CAP ? `${s.slice(0, TEXT_CAP)}…` : s);
+const num = (v) => (typeof v === "number" && Number.isFinite(v) ? v : null);
+const str = (v) => (typeof v === "string" ? v : null);
+/** Windows-style when the string looks like a drive/UNC path, else POSIX. */
+function normalizeAbsolute(p, cwd) {
+    const isWin = (s) => /^[A-Za-z]:[\\/]/.test(s) || s.startsWith("\\\\");
+    if (isWin(p))
+        return path.win32.normalize(p);
+    if (p.startsWith("/"))
+        return cwd && isWin(cwd) ? null : path.posix.normalize(p);
+    if (!cwd || !(isWin(cwd) || cwd.startsWith("/")))
+        return null; // relative path with no absolute cwd to anchor it — unknowable
+    return isWin(cwd) ? path.win32.resolve(cwd, p) : path.posix.resolve(cwd, p);
+}
+export function outputKey(p) {
+    return /^[A-Za-z]:|^\\\\/.test(p) ? p.toLowerCase() : p;
+}
+function textOf(content) {
+    if (typeof content === "string")
+        return content;
+    if (!Array.isArray(content))
+        return null;
+    const parts = content
+        .filter((b) => !!b && b.type === "text" && typeof b.text === "string")
+        .map((b) => b.text);
+    return parts.length ? parts.join("\n") : null;
+}
+const NOTIF_RE = /<task-notification>([\s\S]*?)<\/task-notification>/g;
+/** First `<name>…</name>` content, by plain string search — `name` is never a pattern. */
+export const tag = (body, name) => {
+    const open = `<${name}>`;
+    const start = body.indexOf(open);
+    if (start < 0)
+        return null;
+    const from = start + open.length;
+    const end = body.indexOf(`</${name}>`, from);
+    return end < 0 ? null : body.slice(from, end).trim();
+};
+function takeNotifications(text, into, at) {
+    for (const m of text.matchAll(NOTIF_RE)) {
+        const body = m[1];
+        const taskId = tag(body, "task-id");
+        if (!taskId)
+            continue;
+        const d = tag(body, "duration_ms");
+        const t = tag(body, "subagent_tokens");
+        const u = tag(body, "tool_uses");
+        // Later notifications win: an agent can be resumed and notify again.
+        into.set(taskId, {
+            at,
+            taskId,
+            toolUseId: tag(body, "tool-use-id"),
+            status: tag(body, "status"),
+            durationMs: d && /^\d+$/.test(d) ? Number(d) : null,
+            tokens: t && /^\d+$/.test(t) ? Number(t) : null,
+            toolUses: u && /^\d+$/.test(u) ? Number(u) : null,
+        });
+    }
+}
+/** Cheap timestamp peek so non-matching lines never reach JSON.parse. */
+export function quickTimestamp(line) {
+    const i = line.lastIndexOf('"timestamp":"');
+    if (i === -1)
+        return null;
+    const j = line.indexOf('"', i + 13);
+    return j === -1 || j - i > 60 ? null : line.slice(i + 13, j);
+}
+function retractAttempt(f, key, id) {
+    const list = (f.outputAttempts.get(key) ?? []).filter((a) => a.id !== id);
+    f.outputAttempts.set(key, list);
+    const out = f.outputs.get(key);
+    if (!out)
+        return;
+    if (!list.length) {
+        f.outputs.delete(key);
+        return;
+    }
+    out.firstAt = list[0].ts;
+    out.lastAt = list[list.length - 1].ts;
+    out.tool = list[list.length - 1].tool;
+}
+export function ingestLine(f, line, agentId) {
+    f.seq++;
+    const hasNotif = line.includes("<task-notification>") && line.includes("<task-id>");
+    const mayMatter = hasNotif ||
+        line.includes('"assistant"') ||
+        line.includes('"bridge-session"') ||
+        line.includes('"compact_boundary"') ||
+        line.includes('"tool_result"');
+    const lineTs = quickTimestamp(line);
+    if (lineTs) {
+        if (!f.firstTs)
+            f.firstTs = lineTs;
+        f.lastTs = lineTs;
+    }
+    if (!mayMatter)
+        return;
+    let o;
+    try {
+        const parsed = JSON.parse(line);
+        if (!parsed || typeof parsed !== "object")
+            return;
+        o = parsed;
+    }
+    catch {
+        return; // torn / non-JSON line
+    }
+    const type = o.type;
+    const ts = str(o.timestamp);
+    if (ts) {
+        if (lineTs === null || lineTs !== ts)
+            f.lastTs = ts; // the record's own stamp beats the cheap peek
+        if (!f.firstTs || f.firstTs === lineTs)
+            f.firstTs = ts;
+    }
+    if (type === "bridge-session") {
+        f.bridgeSeen = true;
+        return;
+    }
+    if (type === "attachment")
+        return; // prompt snapshots quote tool docs verbatim; never facts
+    const msg = o.message;
+    if (hasNotif && (type === "user" || type === "queue-operation")) {
+        const text = textOf(msg?.content) ?? str(o.content);
+        if (text)
+            takeNotifications(text, f.notifications, ts);
+    }
+    if (type === "user" && Array.isArray(msg?.content) && line.includes('"tool_result"')) {
+        const tur = (o.toolUseResult ?? {});
+        const single = msg.content.filter((b) => b?.type === "tool_result").length === 1;
+        for (const b of msg.content) {
+            if (!b || b.type !== "tool_result" || !str(b.tool_use_id))
+                continue;
+            const id = b.tool_use_id;
+            // A background launch is acknowledged by an immediate non-error result; it is NOT completion.
+            if (single && (tur.isAsync === true || tur.status === "async_launched"))
+                continue;
+            const isError = b.is_error === true;
+            f.pendingUse.delete(id);
+            f.toolResults.set(id, {
+                at: ts,
+                isError,
+                // toolUseResult describes ONE result; only trust it when the line carries exactly one.
+                status: single ? str(tur.status) : null,
+                durationMs: single ? num(tur.totalDurationMs) : null,
+                tokens: single ? num(tur.totalTokens) : null,
+                toolUses: single ? num(tur.totalToolUseCount) : null,
+            });
+            const key = f.outputUses.get(id);
+            if (isError && key)
+                retractAttempt(f, key, id);
+        }
+        return;
+    }
+    if (type === "system" && o.subtype === "compact_boundary") {
+        const cm = (o.compactMetadata ?? {});
+        f.compactions.push({ at: ts, preTokens: num(cm.preTokens), postTokens: num(cm.postTokens), seq: f.seq });
+        return;
+    }
+    if (type !== "assistant" || !msg || (o.isSidechain === true && agentId === null))
+        return;
+    const model = str(msg.model);
+    const usage = msg.usage;
+    if (model !== "<synthetic>") {
+        if (model)
+            f.model = model;
+        if (usage) {
+            f.usage = {
+                tokens: (num(usage.input_tokens) ?? 0) + (num(usage.cache_read_input_tokens) ?? 0) + (num(usage.cache_creation_input_tokens) ?? 0),
+                model,
+                at: ts,
+            };
+            f.usageSeq = f.seq;
+        }
+    }
+    const content = msg.content;
+    if (!Array.isArray(content))
+        return;
+    let text = null;
+    for (const b of content) {
+        if (!b || typeof b !== "object")
+            continue;
+        if (b.type === "text" && typeof b.text === "string" && b.text.trim())
+            text = b.text;
+        if (b.type !== "tool_use")
+            continue;
+        if (str(b.id))
+            f.pendingUse.add(b.id);
+        const name = str(b.name);
+        const input = (b.input ?? {});
+        if ((name === "Agent" || name === "Task") && str(b.id)) {
+            f.agentToolUses.set(b.id, { background: input.run_in_background === true, prompt: capText(str(input.prompt)), description: capText(str(input.description)) });
+        }
+        else if (name && OUTPUT_TOOLS.has(name)) {
+            const raw = str(input.file_path) ?? str(input.notebook_path);
+            const abs = raw ? normalizeAbsolute(raw, str(o.cwd)) : null;
+            if (!abs)
+                continue;
+            const key = outputKey(abs);
+            const prev = f.outputs.get(key);
+            const tool = name;
+            if (str(b.id))
+                f.outputUses.set(b.id, key);
+            const list = f.outputAttempts.get(key) ?? [];
+            list.push({ id: str(b.id), ts, tool });
+            f.outputAttempts.set(key, list);
+            if (prev) {
+                prev.lastAt = ts ?? prev.lastAt;
+                prev.tool = name;
+            }
+            else {
+                f.outputs.set(key, { path: abs, tool: name, firstAt: ts, lastAt: ts, agentId });
+            }
+        }
+    }
+    if (text)
+        f.lastAssistantText = capText(text);
+}
+//# sourceMappingURL=collect.js.map

package/server/dist/core/session-info/collect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collect.js","sourceRoot":"","sources":["../../../src/core/session-info/collect.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC;AAqD7E,MAAM,UAAU,QAAQ;IACtB,OAAO;QACL,UAAU,EAAE,IAAI,GAAG,EAAE;QACrB,WAAW,EAAE,IAAI,GAAG,EAAE;QACtB,UAAU,EAAE,IAAI,GAAG,EAAE;QACrB,cAAc,EAAE,IAAI,GAAG,EAAE;QACzB,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE,CAAC,CAAC;QACZ,WAAW,EAAE,EAAE;QACf,UAAU,EAAE,KAAK;QACjB,OAAO,EAAE,IAAI,GAAG,EAAE;QAClB,aAAa,EAAE,IAAI,GAAG,EAAE;QACxB,aAAa,EAAE,IAAI,GAAG,EAAE;QACxB,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,IAAI;QACZ,iBAAiB,EAAE,IAAI;QACvB,KAAK,EAAE,IAAI;QACX,GAAG,EAAE,CAAC;KACP,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC;AAC7B,MAAM,OAAO,GAAG,CAAC,CAAgB,EAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjH,MAAM,GAAG,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACpG,MAAM,GAAG,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAE9E,6EAA6E;AAC7E,SAAS,iBAAiB,CAAC,CAAS,EAAE,GAAkB;IACtD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/E,IAAI,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC7C,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACjF,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,+DAA+D;IAC9H,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,CAAS;IACjC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,MAAM,CAAC,OAAgB;IAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO;SAClB,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;SAC1G,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED,MAAM,QAAQ,GAAG,qDAAqD,CAAC;AACvE,0FAA0F;AAC1F,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,IAAY,EAAiB,EAAE;IAC/D,MAAM,IAAI,GAAG,IAAI,IAAI,GAAG,CAAC;IACzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7C,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACvD,CAAC,CAAC;AAEF,SAAS,iBAAiB,CAAC,IAAY,EAAE,IAA+B,EAAE,EAAiB;IACzF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACnB,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACjC,qEAAqE;QACrE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;YACf,EAAE;YACF,MAAM;YACN,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC;YACnC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC3B,UAAU,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACnD,MAAM,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YAC/C,QAAQ,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;SAClD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;IACpC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,cAAc,CAAC,CAAQ,EAAE,GAAW,EAAE,EAAU;IACvD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,OAAO;IACT,CAAC;IACD,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;IAC1B,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,EAAE,CAAC;IACvC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,CAAQ,EAAE,IAAY,EAAE,OAAsB;IACvE,CAAC,CAAC,GAAG,EAAE,CAAC;IACR,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpF,MAAM,SAAS,GACb,QAAQ;QACR,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC;QACnC,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC;IACpB,CAAC;IACD,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,IAAI,CAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO;QAClD,CAAC,GAAG,MAAiC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,uBAAuB;IACjC,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IACpB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5B,IAAI,EAAE,EAAE,CAAC;QACP,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,EAAE;YAAE,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,8CAA8C;QACnG,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM;YAAE,CAAC,CAAC,OAAO,GAAG,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC9B,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC;QACpB,OAAO;IACT,CAAC;IACD,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,CAAC,yDAAyD;IAC5F,MAAM,GAAG,GAAG,CAAC,CAAC,OAA8C,CAAC;IAE7D,IAAI,QAAQ,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,iBAAiB,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,IAAI;YAAE,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACrF,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,EAAE,CAA4B,CAAC;QAC/D,MAAM,MAAM,GAAI,GAAI,CAAC,OAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAA6B,EAAE,IAAI,KAAK,aAAa,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;QAC9H,KAAK,MAAM,CAAC,IAAI,GAAI,CAAC,OAAoC,EAAE,CAAC;YAC1D,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC;gBAAE,SAAS;YACpE,MAAM,EAAE,GAAG,CAAC,CAAC,WAAqB,CAAC;YACnC,8FAA8F;YAC9F,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,gBAAgB,CAAC;gBAAE,SAAS;YAClF,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC;YACpC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACxB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE;gBACpB,EAAE,EAAE,EAAE;gBACN,OAAO;gBACP,uFAAuF;gBACvF,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;gBACvC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI;gBACpD,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC5C,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI;aACrD,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjC,IAAI,OAAO,IAAI,GAAG;gBAAE,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,kBAAkB,EAAE,CAAC;QAC1D,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,eAAe,IAAI,EAAE,CAA4B,CAAC;QAChE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACzG,OAAO;IACT,CAAC;IAED,IAAI,IAAI,KAAK,WAAW,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,CAAC;QAAE,OAAO;IACzF,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,KAA4C,CAAC;IAC/D,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;QAC5B,IAAI,KAAK;YAAE,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;QAC3B,IAAI,KAAK,EAAE,CAAC;YACV,CAAC,CAAC,KAAK,GAAG;gBACR,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC;gBAClI,KAAK;gBACL,EAAE,EAAE,EAAE;aACP,CAAC;YACF,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC;QACrB,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO;IACpC,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,OAAoC,EAAE,CAAC;QACrD,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QAC1C,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QACpF,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;YAAE,SAAS;QACpC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAY,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;QACzD,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACvD,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAY,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,iBAAiB,KAAK,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1K,CAAC;aAAM,IAAI,IAAI,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5D,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,IAAI,GAAG,IAAiC,CAAC;YAC/C,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAY,EAAE,GAAG,CAAC,CAAC;YACrD,MAAM,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAChC,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC;gBAChC,IAAI,CAAC,IAAI,GAAG,IAAiC,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAiC,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC/G,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,IAAI;QAAE,CAAC,CAAC,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC"}