@tidegap/cli 0.0.0-stage → 0.19.0

package/dist/ui/events.js

@@ -0,0 +1,85 @@
+/**
+ * Change feed for `tidegap ui` (KTD10). Polls `PRAGMA data_version`, which moves
+ * when another connection commits (the tick, the MCP server). On a move it
+ * re-lists the ledger and reports the ids whose status, read marker or
+ * scheduled time changed. The server's own writes do not move
+ * `data_version`, so the server calls `emit` itself after a mark-read.
+ */
+export class TaskEvents {
+    store;
+    intervalMs;
+    listeners = new Set();
+    fingerprints;
+    version;
+    timer;
+    constructor(store, intervalMs = 2_000) {
+        this.store = store;
+        this.intervalMs = intervalMs;
+        this.version = store.dataVersion();
+        this.fingerprints = this.snapshot();
+    }
+    start() {
+        if (this.timer)
+            return;
+        this.timer = setInterval(() => this.poll(), this.intervalMs);
+        this.timer.unref();
+    }
+    stop() {
+        if (this.timer)
+            clearInterval(this.timer);
+        this.timer = undefined;
+        this.listeners.clear();
+    }
+    subscribe(fn) {
+        this.listeners.add(fn);
+        return () => this.listeners.delete(fn);
+    }
+    /** Push a change the poller cannot see (the server's own write). */
+    emit(ids) {
+        // Fingerprints stay as they are: re-reading them here could absorb a
+        // tick commit that landed between the write and the next poll. The next
+        // external commit may report these ids once more, which is harmless.
+        for (const fn of this.listeners)
+            fn(ids);
+    }
+    /** One poll step; public so tests need not wait on the timer. */
+    poll() {
+        let v;
+        try {
+            v = this.store.dataVersion();
+        }
+        catch {
+            return;
+        }
+        if (v === this.version)
+            return;
+        let next;
+        try {
+            next = this.snapshot();
+        }
+        catch {
+            // A busy or locked ledger: keep the old version so the next poll retries.
+            return;
+        }
+        this.version = v;
+        const changed = [];
+        for (const [id, fp] of next)
+            if (this.fingerprints.get(id) !== fp)
+                changed.push(id);
+        for (const id of this.fingerprints.keys())
+            if (!next.has(id))
+                changed.push(id);
+        this.fingerprints = next;
+        if (changed.length > 0)
+            for (const fn of this.listeners)
+                fn(changed);
+    }
+    snapshot() {
+        const out = new Map();
+        for (const r of this.store.list()) {
+            out.set(r.taskId, `${r.status}|${r.readAt ?? ""}|${r.scheduledFor ?? ""}|${r.deadline ?? ""}|${r.repeat ?? ""}`);
+        }
+        return out;
+    }
+}
+//# sourceMappingURL=events.js.map

package/dist/ui/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/ui/events.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,MAAM,OAAO,UAAU;IAOF;IACA;IAPF,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAC;IACnD,YAAY,CAAsB;IAClC,OAAO,CAAS;IAChB,KAAK,CAA6B;IAE1C,YACmB,KAAgB,EAChB,aAAa,KAAK;QADlB,UAAK,GAAL,KAAK,CAAW;QAChB,eAAU,GAAV,UAAU,CAAQ;QAEnC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;IACtC,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED,SAAS,CAAC,EAAsB;QAC9B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvB,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,oEAAoE;IACpE,IAAI,CAAC,GAAa;QAChB,qEAAqE;QACrE,wEAAwE;QACxE,qEAAqE;QACrE,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS;YAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IAED,iEAAiE;IACjE,IAAI;QACF,IAAI,CAAS,CAAC;QACd,IAAI,CAAC;YACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO;YAAE,OAAO;QAC/B,IAAI,IAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QACjB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,IAAI;YAAE,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpF,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS;gBAAE,EAAE,CAAC,OAAO,CAAC,CAAC;IACvE,CAAC;IAEO,QAAQ;QACd,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAClC,GAAG,CAAC,GAAG,CACL,CAAC,CAAC,MAAM,EACR,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,IAAI,CAAC,CAAC,YAAY,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAC9F,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/ui/server.d.ts

@@ -0,0 +1,84 @@
+/**
+ * `tidegap ui` HTTP server (KTD8, KTD9). Loopback only. Writes by POST, never
+ * dispatches: actions go through a Scheduler with no adapters, and the
+ * dispatcher (`tidegap tick` or the OpenClaw loop) runs the task.
+ *
+ * Security model:
+ *   - binds 127.0.0.1 only; there is no host option;
+ *   - every `/api/*` request (JSON and SSE) needs `Authorization: Bearer
+ *     <token>`, compared in constant time. Two scopes (native clients KTD3):
+ *     `page`, the random per-run token in the page link, and `client`, a
+ *     long-lived `tgc_` token from the registry (`ui-clients.json`, SHA-256
+ *     only; `tidegap clients`). A client token never reaches `/api/clients*`;
+ *   - a `Host` header whose name is not 127.0.0.1, localhost or [::1] (with
+ *     no port or this server's port) gets 403, which blocks DNS-rebinding
+ *     pages;
+ *   - an `Origin` header, when sent, must name the same loopback host, or be
+ *     a browser extension origin (`chrome-extension://`, `moz-extension://`,
+ *     `safari-web-extension://` plus an id). Any other origin, `null`
+ *     included, gets 403. An extension origin reaches `/api/*` only, and only
+ *     with a client token: the page token from an extension gets 403, and so
+ *     does a static file. The origin only keeps web pages out; the token is
+ *     the authentication;
+ *   - no CORS headers, so other origins cannot read responses;
+ *   - static files come from a fixed map; no request path touches the disk;
+ *   - every write is a POST with the bearer header; routes that read a body
+ *     (create, cancel, reschedule, reply, clients) need `Content-Type:
+ *     application/json` (415 otherwise: a cross-site form cannot send it
+ *     without a preflight, which gets no CORS answer) and at most 64 KiB
+ *     (413); body-less routes (read, unread, run-now, dispatcher/start,
+ *     revoke) refuse a non-empty body (400); bodies are strict JSON objects.
+ *     No cookie is ever set.
+ * The static page holds no data; it reads the token from the URL fragment,
+ * which browsers never send to the server.
+ */
+import { type Server } from "node:http";
+import { type ApiContext } from "./api.js";
+import { type Spawner } from "./dispatcher.js";
+import { TaskEvents } from "./events.js";
+/** Largest POST body read, in bytes. */
+export declare const MAX_BODY_BYTES: number;
+export declare const LOOPBACK = "127.0.0.1";
+/** ES modules of the page (ui v2). Each is listed: no path touches the disk. */
+export declare const UI_MODULES: readonly ["app.js", "api.js", "state.js", "toast.js", "dom.js", "views.js", "row.js", "agenda.js", "detail.js", "journal.js", "timeline.js", "dnd.js", "keys.js", "dialog.js", "clients.js"];
+export declare const STATIC_FILES: Readonly<Record<string, {
+    file: string;
+    type: string;
+}>>;
+/** `packages/cli/ui`, from both `src/ui` (tests) and `dist/ui` (published). */
+export declare function defaultAssetDir(): string;
+export interface UiServerOptions extends Omit<ApiContext, "store" | "dispatcher"> {
+    token: string;
+    /** `tidegap` launcher for Start dispatcher; default: the install step's. */
+    launcher?: string[];
+    /** Inject the dispatcher spawner, liveness probe and log dir (tests). */
+    spawn?: Spawner;
+    isAlive?: (pid: number) => boolean;
+    logDir?: string;
+    /** 0 (default) picks a free port. */
+    port?: number;
+    /** Directory of the client registry (`ui-clients.json`); default: the Tidegap home. */
+    stateDir?: string;
+    assetDir?: string;
+    /** data_version poll interval for the change stream. */
+    pollMs?: number;
+}
+export interface UiServer {
+    port: number;
+    address: string;
+    url: string;
+    server: Server;
+    events: TaskEvents;
+    close(): Promise<void>;
+}
+/**
+ * True when `host` (a Host header, or the host part of an Origin) names a
+ * loopback address with no port or with `port`. Anything else, including a
+ * DNS name that resolves to 127.0.0.1, is refused.
+ */
+export declare function isLoopbackHost(host: string, port: number): boolean;
+export type OriginClass = "none" | "loopback" | "extension" | "foreign";
+/** Classify an `Origin` header for a server on `port`. */
+export declare function classifyOrigin(origin: string | undefined, port: number): OriginClass;
+export declare function startUiServer(opts: UiServerOptions): Promise<UiServer>;
+//# sourceMappingURL=server.d.ts.map

package/dist/ui/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/ui/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAIH,OAAO,EAAsC,KAAK,MAAM,EAAuB,MAAM,WAAW,CAAC;AASjG,OAAO,EAA2B,KAAK,UAAU,EAAE,MAAM,UAAU,CAAC;AAEpE,OAAO,EAAqB,KAAK,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,wCAAwC;AACxC,eAAO,MAAM,cAAc,QAAY,CAAC;AAExC,eAAO,MAAM,QAAQ,cAAc,CAAC;AAapC,gFAAgF;AAChF,eAAO,MAAM,UAAU,8LAgBb,CAAC;AAEX,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAKjF,CAAC;AAEF,+EAA+E;AAC/E,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,MAAM,WAAW,eACf,SAAQ,IAAI,CAAC,UAAU,EAAE,OAAO,GAAG,YAAY,CAAC;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,yEAAyE;IACzE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uFAAuF;IACvF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAQD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAIlE;AAKD,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,UAAU,GAAG,WAAW,GAAG,SAAS,CAAC;AAExE,0DAA0D;AAC1D,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,WAAW,CAKpF;AA6DD,wBAAsB,aAAa,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,CAwI5E"}

package/dist/ui/server.js

@@ -0,0 +1,322 @@
+/**
+ * `tidegap ui` HTTP server (KTD8, KTD9). Loopback only. Writes by POST, never
+ * dispatches: actions go through a Scheduler with no adapters, and the
+ * dispatcher (`tidegap tick` or the OpenClaw loop) runs the task.
+ *
+ * Security model:
+ *   - binds 127.0.0.1 only; there is no host option;
+ *   - every `/api/*` request (JSON and SSE) needs `Authorization: Bearer
+ *     <token>`, compared in constant time. Two scopes (native clients KTD3):
+ *     `page`, the random per-run token in the page link, and `client`, a
+ *     long-lived `tgc_` token from the registry (`ui-clients.json`, SHA-256
+ *     only; `tidegap clients`). A client token never reaches `/api/clients*`;
+ *   - a `Host` header whose name is not 127.0.0.1, localhost or [::1] (with
+ *     no port or this server's port) gets 403, which blocks DNS-rebinding
+ *     pages;
+ *   - an `Origin` header, when sent, must name the same loopback host, or be
+ *     a browser extension origin (`chrome-extension://`, `moz-extension://`,
+ *     `safari-web-extension://` plus an id). Any other origin, `null`
+ *     included, gets 403. An extension origin reaches `/api/*` only, and only
+ *     with a client token: the page token from an extension gets 403, and so
+ *     does a static file. The origin only keeps web pages out; the token is
+ *     the authentication;
+ *   - no CORS headers, so other origins cannot read responses;
+ *   - static files come from a fixed map; no request path touches the disk;
+ *   - every write is a POST with the bearer header; routes that read a body
+ *     (create, cancel, reschedule, reply, clients) need `Content-Type:
+ *     application/json` (415 otherwise: a cross-site form cannot send it
+ *     without a preflight, which gets no CORS answer) and at most 64 KiB
+ *     (413); body-less routes (read, unread, run-now, dispatcher/start,
+ *     revoke) refuse a non-empty body (400); bodies are strict JSON objects.
+ *     No cookie is ever set.
+ * The static page holds no data; it reads the token from the URL fragment,
+ * which browsers never send to the server.
+ */
+import { createHash, timingSafeEqual } from "node:crypto";
+import { readFileSync } from "node:fs";
+import { createServer } from "node:http";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { TaskStore } from "@tidegap/core";
+import { resolveLauncher } from "../commands/install.js";
+import { actionScheduler } from "../commands/queue.js";
+import { handleApi, postBodyKind } from "./api.js";
+import { ClientRegistry } from "./clients.js";
+import { DispatcherControl } from "./dispatcher.js";
+import { TaskEvents } from "./events.js";
+/** Largest POST body read, in bytes. */
+export const MAX_BODY_BYTES = 64 * 1024;
+export const LOOPBACK = "127.0.0.1";
+const SECURITY_HEADERS = {
+    "content-security-policy": "default-src 'self'; connect-src 'self'; img-src 'self' data:; frame-ancestors 'none'; base-uri 'none'; form-action 'none'",
+    "x-content-type-options": "nosniff",
+    "referrer-policy": "no-referrer",
+    "cache-control": "no-store",
+};
+const JS = "text/javascript; charset=utf-8";
+const CSS = "text/css; charset=utf-8";
+/** ES modules of the page (ui v2). Each is listed: no path touches the disk. */
+export const UI_MODULES = [
+    "app.js",
+    "api.js",
+    "state.js",
+    "toast.js",
+    "dom.js",
+    "views.js",
+    "row.js",
+    "agenda.js",
+    "detail.js",
+    "journal.js",
+    "timeline.js",
+    "dnd.js",
+    "keys.js",
+    "dialog.js",
+    "clients.js",
+];
+export const STATIC_FILES = {
+    "/": { file: "index.html", type: "text/html; charset=utf-8" },
+    "/tokens.css": { file: "tokens.css", type: CSS },
+    "/app.css": { file: "app.css", type: CSS },
+    ...Object.fromEntries(UI_MODULES.map((f) => [`/${f}`, { file: f, type: JS }])),
+};
+/** `packages/cli/ui`, from both `src/ui` (tests) and `dist/ui` (published). */
+export function defaultAssetDir() {
+    return join(dirname(fileURLToPath(import.meta.url)), "..", "..", "ui");
+}
+function digest(s) {
+    return createHash("sha256").update(s).digest();
+}
+const LOOPBACK_NAMES = new Set([LOOPBACK, "localhost", "[::1]"]);
+/**
+ * True when `host` (a Host header, or the host part of an Origin) names a
+ * loopback address with no port or with `port`. Anything else, including a
+ * DNS name that resolves to 127.0.0.1, is refused.
+ */
+export function isLoopbackHost(host, port) {
+    const m = /^(\[::1\]|[^:]+)(?::(\d+))?$/.exec(host.trim().toLowerCase());
+    if (!m || !LOOPBACK_NAMES.has(m[1]))
+        return false;
+    return m[2] === undefined || Number(m[2]) === port;
+}
+/** A browser extension origin: scheme plus an id, nothing else (KTD3). */
+const EXTENSION_ORIGIN = /^(?:chrome-extension|moz-extension|safari-web-extension):\/\/[a-z0-9-]+$/i;
+/** Classify an `Origin` header for a server on `port`. */
+export function classifyOrigin(origin, port) {
+    if (origin === undefined)
+        return "none";
+    const m = /^http:\/\/([^/]+)$/i.exec(origin);
+    if (m && isLoopbackHost(m[1], port))
+        return "loopback";
+    return EXTENSION_ORIGIN.test(origin) ? "extension" : "foreign";
+}
+/**
+ * `/api/clients` and everything under it: page token only. Splits the path
+ * the way the router does (empty segments dropped), so `/api//clients`
+ * cannot route to the clients handlers past this check.
+ */
+function isClientsRoute(pathname) {
+    const segs = pathname.split("/").filter(Boolean);
+    return segs[0] === "api" && segs[1] === "clients";
+}
+function send(res, status, body, type = "application/json; charset=utf-8") {
+    res.writeHead(status, { ...SECURITY_HEADERS, ...(body === undefined ? {} : { "content-type": type }) });
+    if (body === undefined)
+        res.end();
+    else
+        res.end(typeof body === "string" || Buffer.isBuffer(body) ? body : JSON.stringify(body));
+}
+/** Read a request body, keeping at most `max + 1` bytes; `null` when over `max`. */
+function readBody(req, max) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let size = 0;
+        req.on("data", (chunk) => {
+            size += chunk.length;
+            // Keep draining past the cap so the client can read the 413.
+            if (size <= max)
+                chunks.push(chunk);
+        });
+        req.on("end", () => resolve(size > max ? null : Buffer.concat(chunks)));
+        req.on("error", reject);
+    });
+}
+/** KTD9 body rules for one POST route. */
+async function checkBody(req, kind) {
+    if (kind === "json") {
+        const type = (req.headers["content-type"] ?? "").split(";")[0].trim().toLowerCase();
+        if (type !== "application/json") {
+            return { ok: false, status: 415, error: "content-type must be application/json" };
+        }
+    }
+    const raw = await readBody(req, MAX_BODY_BYTES);
+    if (raw === null)
+        return { ok: false, status: 413, error: "body too large" };
+    if (kind === "none") {
+        return raw.length === 0 ? { ok: true, body: {} } : { ok: false, status: 400, error: "this route takes no body" };
+    }
+    if (raw.length === 0)
+        return { ok: true, body: {} };
+    let parsed;
+    try {
+        parsed = JSON.parse(raw.toString("utf8"));
+    }
+    catch {
+        return { ok: false, status: 400, error: "body is not JSON" };
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        return { ok: false, status: 400, error: "body must be a JSON object" };
+    }
+    return { ok: true, body: parsed };
+}
+export async function startUiServer(opts) {
+    const store = new TaskStore({ dbPath: opts.dbPath });
+    const events = new TaskEvents(store, opts.pollMs);
+    // Writes go through a Scheduler built WITHOUT adapters (KTD8): it can
+    // cancel, move, mark run-now and enqueue a reply, never dispatch.
+    const ownScheduler = opts.scheduler === undefined;
+    const scheduler = opts.scheduler ??
+        actionScheduler({ dbPath: opts.dbPath, feed: opts.feed, region: opts.defaultRegion });
+    const dispatcher = new DispatcherControl(store, {
+        launcher: opts.launcher ?? resolveLauncher(undefined, []),
+        dbPath: opts.dbPath,
+        daemonStatus: opts.daemonStatus,
+        ...(opts.spawn ? { spawn: opts.spawn } : {}),
+        ...(opts.isAlive ? { isAlive: opts.isAlive } : {}),
+        ...(opts.logDir ? { logDir: opts.logDir } : {}),
+        ...(opts.now ? { now: opts.now } : {}),
+    });
+    const clients = opts.clients ?? new ClientRegistry(opts.stateDir);
+    const ctx = { ...opts, store, scheduler, dispatcher, clients };
+    const assetDir = opts.assetDir ?? defaultAssetDir();
+    const tokenDigest = digest(opts.token);
+    let port = 0;
+    /** The bearer's scope: the per-run page token, a registry client token, or none. */
+    const scope = (bearer) => {
+        if (bearer === undefined)
+            return undefined;
+        if (timingSafeEqual(digest(bearer), tokenDigest))
+            return "page";
+        return clients.verify(bearer) ? "client" : undefined;
+    };
+    /**
+     * The change stream. For a client token (`clientBearer`), the bearer is
+     * checked again before each event and on each keep-alive: once it is
+     * revoked the stream ends, and a reconnect gets 401.
+     */
+    const openStream = (req, res, clientBearer) => {
+        res.writeHead(200, {
+            ...SECURITY_HEADERS,
+            "content-type": "text/event-stream; charset=utf-8",
+            connection: "keep-alive",
+        });
+        res.write(`event: hello\ndata: {}\n\n`);
+        const valid = () => clientBearer === undefined || clients.verify(clientBearer) !== undefined;
+        let open = true;
+        const end = () => {
+            if (!open)
+                return;
+            open = false;
+            clearInterval(keepAlive);
+            unsubscribe();
+            res.end();
+        };
+        const unsubscribe = events.subscribe((ids) => {
+            if (!valid())
+                return end();
+            res.write(`event: tasks\ndata: ${JSON.stringify({ ids })}\n\n`);
+        });
+        const keepAlive = setInterval(() => (valid() ? res.write(`: keep-alive\n\n`) : end()), 15_000);
+        keepAlive.unref();
+        req.on("close", end);
+    };
+    const server = createServer((req, res) => {
+        void (async () => {
+            if (!isLoopbackHost(req.headers.host ?? "", port))
+                return send(res, 403, { error: "forbidden host" });
+            const origin = classifyOrigin(req.headers.origin, port);
+            if (origin === "foreign")
+                return send(res, 403, { error: "forbidden origin" });
+            const url = new URL(req.url ?? "/", `http://${LOOPBACK}`);
+            const method = req.method ?? "GET";
+            if (url.pathname === "/api" || url.pathname.startsWith("/api/")) {
+                const bearer = /^Bearer (.+)$/.exec(req.headers.authorization ?? "")?.[1];
+                const who = scope(bearer);
+                if (!who)
+                    return send(res, 401, { error: "unauthorized" });
+                // An extension uses a client token; the page token stays in the page.
+                if (origin === "extension" && who === "page")
+                    return send(res, 403, { error: "forbidden origin" });
+                if (who === "client" && isClientsRoute(url.pathname))
+                    return send(res, 403, { error: "forbidden" });
+                if (url.pathname === "/api/events") {
+                    return method === "GET"
+                        ? openStream(req, res, who === "client" ? bearer : undefined)
+                        : send(res, 405, { error: "method not allowed" });
+                }
+                let body = {};
+                const kind = method === "POST" ? postBodyKind(url.pathname) : undefined;
+                if (kind) {
+                    const checked = await checkBody(req, kind);
+                    if (!checked.ok)
+                        return send(res, checked.status, { error: checked.error });
+                    body = checked.body;
+                }
+                const out = await handleApi(ctx, method, url.pathname, url.searchParams, body);
+                if (out.changedIds)
+                    events.emit(out.changedIds);
+                return send(res, out.status, out.body);
+            }
+            if (origin === "extension")
+                return send(res, 403, { error: "forbidden origin" });
+            const asset = Object.hasOwn(STATIC_FILES, url.pathname) ? STATIC_FILES[url.pathname] : undefined;
+            if (!asset)
+                return send(res, 404, "not found", "text/plain; charset=utf-8");
+            if (method !== "GET" && method !== "HEAD")
+                return send(res, 405, "method not allowed", "text/plain; charset=utf-8");
+            try {
+                return send(res, 200, readFileSync(join(assetDir, asset.file)), asset.type);
+            }
+            catch {
+                return send(res, 404, "not found", "text/plain; charset=utf-8");
+            }
+        })().catch(() => {
+            // No error text in the response: it can carry paths or provider detail.
+            if (!res.headersSent)
+                send(res, 500, { error: "internal error" });
+            else
+                res.end();
+        });
+    });
+    try {
+        await new Promise((resolve, reject) => {
+            server.once("error", reject);
+            server.listen(opts.port ?? 0, LOOPBACK, () => resolve());
+        });
+    }
+    catch (err) {
+        // Port taken (the CLI retries on a free port): release what was opened.
+        if (ownScheduler)
+            scheduler.shutdown();
+        store.close();
+        throw err;
+    }
+    const addr = server.address();
+    port = addr.port;
+    events.start();
+    return {
+        port,
+        address: addr.address,
+        url: `http://${LOOPBACK}:${port}/`,
+        server,
+        events,
+        close: async () => {
+            events.stop();
+            server.closeAllConnections();
+            await new Promise((resolve) => server.close(() => resolve()));
+            if (ownScheduler)
+                scheduler.shutdown();
+            store.close();
+        },
+    };
+}
+//# sourceMappingURL=server.js.map

package/dist/ui/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/ui/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AAEjG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAmB,MAAM,UAAU,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAgB,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,wCAAwC;AACxC,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AAExC,MAAM,CAAC,MAAM,QAAQ,GAAG,WAAW,CAAC;AAEpC,MAAM,gBAAgB,GAA2B;IAC/C,yBAAyB,EACvB,2HAA2H;IAC7H,wBAAwB,EAAE,SAAS;IACnC,iBAAiB,EAAE,aAAa;IAChC,eAAe,EAAE,UAAU;CAC5B,CAAC;AAEF,MAAM,EAAE,GAAG,gCAAgC,CAAC;AAC5C,MAAM,GAAG,GAAG,yBAAyB,CAAC;AAEtC,gFAAgF;AAChF,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,UAAU;IACV,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,WAAW;IACX,WAAW;IACX,YAAY;IACZ,aAAa;IACb,QAAQ;IACR,SAAS;IACT,WAAW;IACX,YAAY;CACJ,CAAC;AAEX,MAAM,CAAC,MAAM,YAAY,GAA6D;IACpF,GAAG,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,0BAA0B,EAAE;IAC7D,aAAa,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE;IAChD,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE;IAC1C,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;CAC/E,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACzE,CAAC;AA6BD,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAEjE;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,IAAY;IACvD,MAAM,CAAC,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACzE,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,0EAA0E;AAC1E,MAAM,gBAAgB,GAAG,2EAA2E,CAAC;AAIrG,0DAA0D;AAC1D,MAAM,UAAU,cAAc,CAAC,MAA0B,EAAE,IAAY;IACrE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,MAAM,CAAC,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IACxD,OAAO,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;AACpD,CAAC;AAED,SAAS,IAAI,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAc,EAAE,IAAI,GAAG,iCAAiC;IACzG,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,gBAAgB,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IACxG,IAAI,IAAI,KAAK,SAAS;QAAE,GAAG,CAAC,GAAG,EAAE,CAAC;;QAC7B,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChG,CAAC;AAED,oFAAoF;AACpF,SAAS,QAAQ,CAAC,GAAoB,EAAE,GAAW;IACjD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,6DAA6D;YAC7D,IAAI,IAAI,IAAI,GAAG;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAID,0CAA0C;AAC1C,KAAK,UAAU,SAAS,CAAC,GAAoB,EAAE,IAAqB;IAClE,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrF,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;QACpF,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAChD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC7E,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IACnH,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACpD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAiC,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAqB;IACvD,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAClD,sEAAsE;IACtE,kEAAkE;IAClE,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;IAClD,MAAM,SAAS,GACb,IAAI,CAAC,SAAS;QACd,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IACxF,MAAM,UAAU,GAAG,IAAI,iBAAiB,CAAC,KAAK,EAAE;QAC9C,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAC,SAAS,EAAE,EAAE,CAAC;QACzD,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClE,MAAM,GAAG,GAAe,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,eAAe,EAAE,CAAC;IACpD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,IAAI,GAAG,CAAC,CAAC;IAEb,oFAAoF;IACpF,MAAM,KAAK,GAAG,CAAC,MAA0B,EAAiC,EAAE;QAC1E,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;YAAE,OAAO,MAAM,CAAC;QAChE,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC,CAAC;IAEF;;;;OAIG;IACH,MAAM,UAAU,GAAG,CAAC,GAAoB,EAAE,GAAmB,EAAE,YAAqB,EAAQ,EAAE;QAC5F,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,GAAG,gBAAgB;YACnB,cAAc,EAAE,kCAAkC;YAClD,UAAU,EAAE,YAAY;SACzB,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,SAAS,CAAC;QAC7F,IAAI,IAAI,GAAG,IAAI,CAAC;QAChB,MAAM,GAAG,GAAG,GAAG,EAAE;YACf,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,IAAI,GAAG,KAAK,CAAC;YACb,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,WAAW,EAAE,CAAC;YACd,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE;YAC3C,IAAI,CAAC,KAAK,EAAE;gBAAE,OAAO,GAAG,EAAE,CAAC;YAC3B,GAAG,CAAC,KAAK,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/F,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACtG,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACxD,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC/E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,QAAQ,EAAE,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;YACnC,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChE,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC1E,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC1B,IAAI,CAAC,GAAG;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;gBAC3D,sEAAsE;gBACtE,IAAI,MAAM,KAAK,WAAW,IAAI,GAAG,KAAK,MAAM;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBACnG,IAAI,GAAG,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpG,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;oBACnC,OAAO,MAAM,KAAK,KAAK;wBACrB,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;wBAC7D,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBACtD,CAAC;gBACD,IAAI,IAAI,GAA4B,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACxE,IAAI,IAAI,EAAE,CAAC;oBACT,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;oBAC3C,IAAI,CAAC,OAAO,CAAC,EAAE;wBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC5E,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;gBACtB,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;gBAC/E,IAAI,GAAG,CAAC,UAAU;oBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAChD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACzC,CAAC;YACD,IAAI,MAAM,KAAK,WAAW;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACjF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjG,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,CAAC,CAAC;YAC5E,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,2BAA2B,CAAC,CAAC;YACpH,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9E,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,CAAC,CAAC;YAClE,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YACd,wEAAwE;YACxE,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;;gBAC7D,GAAG,CAAC,GAAG,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wEAAwE;QACxE,IAAI,YAAY;YAAE,SAAS,CAAC,QAAQ,EAAE,CAAC;QACvC,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;IAC7C,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACjB,MAAM,CAAC,KAAK,EAAE,CAAC;IAEf,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,EAAE,UAAU,QAAQ,IAAI,IAAI,GAAG;QAClC,MAAM;QACN,MAAM;QACN,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC7B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACpE,IAAI,YAAY;gBAAE,SAAS,CAAC,QAAQ,EAAE,CAAC;YACvC,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/ui/summary.d.ts

@@ -0,0 +1,47 @@
+/**
+ * `GET /api/summary` (native clients KTD5): the one answer a compact client
+ * renders. Queue counts, unread count, the next run, the next clean grid
+ * window and, with `since`, the tasks finished after that cursor. The clean
+ * window rule lives here once, so the extension badge and the Mac menu bar
+ * show the same numbers.
+ */
+import type { TaskStore } from "@tidegap/core";
+/** One forecast hour, as `/api/forecast` returns it. */
+export interface ForecastPoint {
+    /** ISO start of the hour. */
+    t: string;
+    g: number;
+    band: string;
+}
+export interface CleanWindow {
+    start: string;
+    end: string;
+    /** `very_clean` when every hour is very clean, else `clean` (or the fallback hour's band). */
+    band: string;
+    /** Lowest intensity in the window, gCO2e/kWh. */
+    g: number;
+    /** True when the window contains now. */
+    now: boolean;
+    /** True when no hour is clean: the window is the single cleanest hour. */
+    fallback: boolean;
+}
+/** Most finished tasks one summary lists. */
+export declare const SUMMARY_FINISHED_MAX = 20;
+export declare const ACTIVE_STATUSES: readonly ["queued", "scheduled", "running", "submitted"];
+/**
+ * The first run of consecutive clean or very clean hours that ends after
+ * `now`. Without one, the cleanest hour that ends after `now`, flagged
+ * `fallback`. `null` when the forecast has no hour after `now`.
+ */
+export declare function nextCleanWindow(points: readonly ForecastPoint[], now: Date): CleanWindow | null;
+export interface SummaryInput {
+    store: TaskStore;
+    region: string;
+    now: Date;
+    /** Forecast points, or `null` when the feed failed. */
+    points: readonly ForecastPoint[] | null;
+    since?: Date;
+}
+/** Assemble the summary body (KTD5). */
+export declare function buildSummary(input: SummaryInput): Record<string, unknown>;
+//# sourceMappingURL=summary.d.ts.map

package/dist/ui/summary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"summary.d.ts","sourceRoot":"","sources":["../../src/ui/summary.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAA0B,SAAS,EAAE,MAAM,eAAe,CAAC;AAIvE,wDAAwD;AACxD,MAAM,WAAW,aAAa;IAC5B,6BAA6B;IAC7B,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,8FAA8F;IAC9F,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,CAAC,EAAE,MAAM,CAAC;IACV,yCAAyC;IACzC,GAAG,EAAE,OAAO,CAAC;IACb,0EAA0E;IAC1E,QAAQ,EAAE,OAAO,CAAC;CACnB;AAID,6CAA6C;AAC7C,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,eAAO,MAAM,eAAe,0DAA2F,CAAC;AAExH;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,EAAE,GAAG,EAAE,IAAI,GAAG,WAAW,GAAG,IAAI,CAmC/F;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,IAAI,CAAC;IACV,uDAAuD;IACvD,MAAM,EAAE,SAAS,aAAa,EAAE,GAAG,IAAI,CAAC;IACxC,KAAK,CAAC,EAAE,IAAI,CAAC;CACd;AAuBD,wCAAwC;AACxC,wBAAgB,YAAY,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsCzE"}