@tidegap/cli 0.0.0-stage → 0.19.0

package/dist/ui/clients.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Client token registry for `tidegap ui` (native clients, KTD2).
+ *
+ * A client token (`tgc_…`) lets a browser extension or the Mac app call the
+ * local API across `tidegap ui` restarts. The registry file
+ * `<tidegap home>/ui-clients.json` (mode 0600, written atomically) stores
+ * only the SHA-256 of each token, never the token itself. The server re-reads
+ * the file when it changes on disk, so `tidegap clients add` and `revoke`
+ * apply without a restart.
+ */
+export declare const CLIENTS_FILE = "ui-clients.json";
+export declare const CLIENT_TOKEN_PREFIX = "tgc_";
+export declare const CLIENT_KINDS: readonly ["extension", "macos"];
+export type ClientKind = (typeof CLIENT_KINDS)[number];
+/** Longest client name, in characters. */
+export declare const CLIENT_NAME_MAX = 64;
+/** One registry entry, as stored. */
+export interface ClientEntry {
+    id: string;
+    name: string;
+    kind: ClientKind;
+    token_sha256: string;
+    created_at: string;
+}
+/** What `list` and the API show: the entry without its hash. */
+export type ClientInfo = Omit<ClientEntry, "token_sha256">;
+/** The registry file is unreadable or malformed, or the input is invalid. */
+export declare class ClientRegistryError extends Error {
+    constructor(message: string);
+}
+/** A clean client name, or the error message. */
+export declare function cleanClientName(raw: unknown): string | ClientRegistryError;
+export declare function isClientKind(v: unknown): v is ClientKind;
+export declare class ClientRegistry {
+    readonly path: string;
+    private cache;
+    constructor(stateDir?: string);
+    /**
+     * Every entry. A missing file is zero clients; a malformed one throws
+     * `ClientRegistryError` (the CLI reports it, the server treats it as zero).
+     */
+    load(): ClientEntry[];
+    list(): ClientInfo[];
+    /** Mint a client token. The token is returned once and never stored. */
+    add(input: {
+        name: unknown;
+        kind: unknown;
+    }, now?: Date): {
+        client: ClientInfo;
+        token: string;
+    };
+    /** Remove a client; false when no client has that id. */
+    revoke(id: string): boolean;
+    /**
+     * The client a bearer token belongs to, or `undefined`. Hashes the bearer
+     * once and compares it with every stored hash in constant time, without
+     * stopping at the first match. Never throws: a bad registry means no
+     * clients, so the server stays up.
+     */
+    verify(bearer: string): ClientInfo | undefined;
+    /** Entries re-read only when the file changes (inode, mtime or size). */
+    private cached;
+    private write;
+}
+//# sourceMappingURL=clients.d.ts.map

package/dist/ui/clients.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clients.d.ts","sourceRoot":"","sources":["../../src/ui/clients.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAQH,eAAO,MAAM,YAAY,oBAAoB,CAAC;AAC9C,eAAO,MAAM,mBAAmB,SAAS,CAAC;AAC1C,eAAO,MAAM,YAAY,iCAAkC,CAAC;AAC5D,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AACvD,0CAA0C;AAC1C,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,qCAAqC;AACrC,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,gEAAgE;AAChE,MAAM,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;AAE3D,6EAA6E;AAC7E,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM;CAI5B;AAuBD,iDAAiD;AACjD,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,mBAAmB,CAM1E;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,UAAU,CAExD;AAED,qBAAa,cAAc;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,KAAK,CAAsD;gBAEvD,QAAQ,GAAE,MAA6B;IAInD;;;OAGG;IACH,IAAI,IAAI,WAAW,EAAE;IAqBrB,IAAI,IAAI,UAAU,EAAE;IAIpB,wEAAwE;IACxE,GAAG,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,EAAE,GAAG,GAAE,IAAiB,GAAG;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAiB3G,yDAAyD;IACzD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAQ3B;;;;;OAKG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAU9C,yEAAyE;IACzE,OAAO,CAAC,MAAM;IAoBd,OAAO,CAAC,KAAK;CAiBd"}

package/dist/ui/clients.js

@@ -0,0 +1,179 @@
+/**
+ * Client token registry for `tidegap ui` (native clients, KTD2).
+ *
+ * A client token (`tgc_…`) lets a browser extension or the Mac app call the
+ * local API across `tidegap ui` restarts. The registry file
+ * `<tidegap home>/ui-clients.json` (mode 0600, written atomically) stores
+ * only the SHA-256 of each token, never the token itself. The server re-reads
+ * the file when it changes on disk, so `tidegap clients add` and `revoke`
+ * apply without a restart.
+ */
+import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
+import { chmodSync, mkdirSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { resolveTidegapHome, stripControlChars } from "@tidegap/core";
+export const CLIENTS_FILE = "ui-clients.json";
+export const CLIENT_TOKEN_PREFIX = "tgc_";
+export const CLIENT_KINDS = ["extension", "macos"];
+/** Longest client name, in characters. */
+export const CLIENT_NAME_MAX = 64;
+/** The registry file is unreadable or malformed, or the input is invalid. */
+export class ClientRegistryError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ClientRegistryError";
+    }
+}
+function sha256Hex(s) {
+    return createHash("sha256").update(s).digest("hex");
+}
+function info(e) {
+    return { id: e.id, name: e.name, kind: e.kind, created_at: e.created_at };
+}
+function isEntry(v) {
+    if (!v || typeof v !== "object")
+        return false;
+    const e = v;
+    return (typeof e.id === "string" &&
+        typeof e.name === "string" &&
+        typeof e.created_at === "string" &&
+        typeof e.token_sha256 === "string" &&
+        /^[0-9a-f]{64}$/.test(e.token_sha256) &&
+        CLIENT_KINDS.includes(e.kind));
+}
+/** A clean client name, or the error message. */
+export function cleanClientName(raw) {
+    const name = typeof raw === "string" ? stripControlChars(raw).trim() : "";
+    if (name.length === 0 || name.length > CLIENT_NAME_MAX) {
+        return new ClientRegistryError(`name must be 1 to ${CLIENT_NAME_MAX} characters`);
+    }
+    return name;
+}
+export function isClientKind(v) {
+    return CLIENT_KINDS.includes(v);
+}
+export class ClientRegistry {
+    path;
+    cache;
+    constructor(stateDir = resolveTidegapHome()) {
+        this.path = join(stateDir, CLIENTS_FILE);
+    }
+    /**
+     * Every entry. A missing file is zero clients; a malformed one throws
+     * `ClientRegistryError` (the CLI reports it, the server treats it as zero).
+     */
+    load() {
+        let text;
+        try {
+            text = readFileSync(this.path, "utf8");
+        }
+        catch (err) {
+            if (err.code === "ENOENT")
+                return [];
+            throw new ClientRegistryError(`cannot read ${this.path}: ${err.message}`);
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(text);
+        }
+        catch {
+            throw new ClientRegistryError(`${this.path} is not valid JSON; fix or delete it`);
+        }
+        const clients = parsed?.clients;
+        if (parsed?.version !== 1 || !Array.isArray(clients) || !clients.every(isEntry)) {
+            throw new ClientRegistryError(`${this.path} is malformed; fix or delete it`);
+        }
+        return clients;
+    }
+    list() {
+        return this.load().map(info);
+    }
+    /** Mint a client token. The token is returned once and never stored. */
+    add(input, now = new Date()) {
+        const name = cleanClientName(input.name);
+        if (name instanceof ClientRegistryError)
+            throw name;
+        if (!isClientKind(input.kind))
+            throw new ClientRegistryError(`kind must be one of ${CLIENT_KINDS.join(", ")}`);
+        const entries = this.load();
+        const token = `${CLIENT_TOKEN_PREFIX}${randomBytes(32).toString("base64url")}`;
+        const entry = {
+            id: randomBytes(6).toString("hex"),
+            name,
+            kind: input.kind,
+            token_sha256: sha256Hex(token),
+            created_at: now.toISOString(),
+        };
+        this.write([...entries, entry]);
+        return { client: info(entry), token };
+    }
+    /** Remove a client; false when no client has that id. */
+    revoke(id) {
+        const entries = this.load();
+        const rest = entries.filter((e) => e.id !== id);
+        if (rest.length === entries.length)
+            return false;
+        this.write(rest);
+        return true;
+    }
+    /**
+     * The client a bearer token belongs to, or `undefined`. Hashes the bearer
+     * once and compares it with every stored hash in constant time, without
+     * stopping at the first match. Never throws: a bad registry means no
+     * clients, so the server stays up.
+     */
+    verify(bearer) {
+        if (!bearer.startsWith(CLIENT_TOKEN_PREFIX))
+            return undefined;
+        const presented = createHash("sha256").update(bearer).digest();
+        let match;
+        for (const e of this.cached()) {
+            if (timingSafeEqual(presented, Buffer.from(e.token_sha256, "hex")) && !match)
+                match = e;
+        }
+        return match ? info(match) : undefined;
+    }
+    /** Entries re-read only when the file changes (inode, mtime or size). */
+    cached() {
+        let key;
+        try {
+            const st = statSync(this.path);
+            key = `${st.ino}:${st.mtimeMs}:${st.size}`;
+        }
+        catch {
+            this.cache = undefined;
+            return [];
+        }
+        if (this.cache?.key === key)
+            return this.cache.entries;
+        let entries;
+        try {
+            entries = this.load();
+        }
+        catch {
+            entries = [];
+        }
+        this.cache = { key, entries };
+        return entries;
+    }
+    write(clients) {
+        const dir = join(this.path, "..");
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+        const tmp = `${this.path}.${process.pid}.${randomBytes(4).toString("hex")}.tmp`;
+        try {
+            writeFileSync(tmp, `${JSON.stringify({ version: 1, clients }, null, 2)}\n`, { encoding: "utf8", mode: 0o600 });
+            chmodSync(tmp, 0o600);
+            renameSync(tmp, this.path);
+        }
+        catch (err) {
+            try {
+                unlinkSync(tmp);
+            }
+            catch {
+                // nothing to clean up
+            }
+            throw err;
+        }
+    }
+}
+//# sourceMappingURL=clients.js.map

package/dist/ui/clients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clients.js","sourceRoot":"","sources":["../../src/ui/clients.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC9G,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEtE,MAAM,CAAC,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAC9C,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAC1C,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,OAAO,CAAU,CAAC;AAE5D,0CAA0C;AAC1C,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAclC,6EAA6E;AAC7E,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,IAAI,CAAC,CAAc;IAC1B,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,OAAO,CAAC,CAAU;IACzB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,CACL,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QACxB,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAC1B,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ;QAClC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;QACpC,YAAkC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAc,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACvD,OAAO,IAAI,mBAAmB,CAAC,qBAAqB,eAAe,aAAa,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAU;IACrC,OAAQ,YAAmC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,OAAO,cAAc;IAChB,IAAI,CAAS;IACd,KAAK,CAAsD;IAEnE,YAAY,WAAmB,kBAAkB,EAAE;QACjD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,IAAI;QACF,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAChE,MAAM,IAAI,mBAAmB,CAAC,eAAe,IAAI,CAAC,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,mBAAmB,CAAC,GAAG,IAAI,CAAC,IAAI,sCAAsC,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,OAAO,GAAI,MAA0D,EAAE,OAAO,CAAC;QACrF,IAAK,MAAuC,EAAE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAClH,MAAM,IAAI,mBAAmB,CAAC,GAAG,IAAI,CAAC,IAAI,iCAAiC,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,wEAAwE;IACxE,GAAG,CAAC,KAAuC,EAAE,MAAY,IAAI,IAAI,EAAE;QACjE,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,IAAI,YAAY,mBAAmB;YAAE,MAAM,IAAI,CAAC;QACpD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/G,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,GAAG,mBAAmB,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/E,MAAM,KAAK,GAAgB;YACzB,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YAClC,IAAI;YACJ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,SAAS,CAAC,KAAK,CAAC;YAC9B,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE;SAC9B,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAChC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;IACxC,CAAC;IAED,yDAAyD;IACzD,MAAM,CAAC,EAAU;QACf,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACjD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,MAAc;QACnB,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9D,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/D,IAAI,KAA8B,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9B,IAAI,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK;gBAAE,KAAK,GAAG,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzC,CAAC;IAED,yEAAyE;IACjE,MAAM;QACZ,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,GAAG,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;YACvB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,EAAE,GAAG,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QACvD,IAAI,OAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,OAAsB;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAChF,IAAI,CAAC;YACH,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/G,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACtB,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,UAAU,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/ui/discovery.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Discovery file for `tidegap ui` (native clients KTD4). While the server
+ * runs, `<tidegap home>/ui.json` (mode 0600) names its pid and port so the
+ * Mac app can find it without the user typing anything. It holds no token.
+ * The file is removed on close only when it still names this process, so a
+ * second server's file is never deleted by the first one.
+ */
+export declare const DISCOVERY_FILE = "ui.json";
+/** Default port of `tidegap ui`; clients look here first. */
+export declare const DEFAULT_UI_PORT = 47821;
+export interface UiDiscovery {
+    version: 1;
+    pid: number;
+    port: number;
+    url: string;
+    started_at: string;
+    cli_version: string;
+}
+export declare function discoveryPath(stateDir: string): string;
+export declare function writeDiscovery(stateDir: string, info: Omit<UiDiscovery, "version">): void;
+/** The discovery record, or `undefined` when the file is missing or malformed. */
+export declare function readDiscovery(stateDir: string): UiDiscovery | undefined;
+/** Remove the file when it names `pid`; leave another server's file alone. */
+export declare function removeDiscovery(stateDir: string, pid?: number): void;
+//# sourceMappingURL=discovery.d.ts.map

package/dist/ui/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../src/ui/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,eAAO,MAAM,cAAc,YAAY,CAAC;AAExC,6DAA6D;AAC7D,eAAO,MAAM,eAAe,QAAQ,CAAC;AAErC,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,CAAC,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,IAAI,CAOzF;AAED,kFAAkF;AAClF,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAOvE;AAED,8EAA8E;AAC9E,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAoB,GAAG,IAAI,CAOjF"}

package/dist/ui/discovery.js

@@ -0,0 +1,46 @@
+/**
+ * Discovery file for `tidegap ui` (native clients KTD4). While the server
+ * runs, `<tidegap home>/ui.json` (mode 0600) names its pid and port so the
+ * Mac app can find it without the user typing anything. It holds no token.
+ * The file is removed on close only when it still names this process, so a
+ * second server's file is never deleted by the first one.
+ */
+import { randomBytes } from "node:crypto";
+import { chmodSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+export const DISCOVERY_FILE = "ui.json";
+/** Default port of `tidegap ui`; clients look here first. */
+export const DEFAULT_UI_PORT = 47821;
+export function discoveryPath(stateDir) {
+    return join(stateDir, DISCOVERY_FILE);
+}
+export function writeDiscovery(stateDir, info) {
+    mkdirSync(stateDir, { recursive: true, mode: 0o700 });
+    const path = discoveryPath(stateDir);
+    const tmp = `${path}.${process.pid}.${randomBytes(4).toString("hex")}.tmp`;
+    writeFileSync(tmp, `${JSON.stringify({ version: 1, ...info }, null, 2)}\n`, { encoding: "utf8", mode: 0o600 });
+    chmodSync(tmp, 0o600);
+    renameSync(tmp, path);
+}
+/** The discovery record, or `undefined` when the file is missing or malformed. */
+export function readDiscovery(stateDir) {
+    try {
+        const d = JSON.parse(readFileSync(discoveryPath(stateDir), "utf8"));
+        return d.version === 1 && Number.isInteger(d.pid) && Number.isInteger(d.port) ? d : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Remove the file when it names `pid`; leave another server's file alone. */
+export function removeDiscovery(stateDir, pid = process.pid) {
+    if (readDiscovery(stateDir)?.pid !== pid)
+        return;
+    try {
+        unlinkSync(discoveryPath(stateDir));
+    }
+    catch {
+        // already gone
+    }
+}
+//# sourceMappingURL=discovery.js.map

package/dist/ui/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../src/ui/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAC;AAExC,6DAA6D;AAC7D,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC;AAWrC,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,OAAO,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,IAAkC;IACjF,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3E,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/G,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtB,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAyB,CAAC;QAC5F,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IACjH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,MAAc,OAAO,CAAC,GAAG;IACzE,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,GAAG,KAAK,GAAG;QAAE,OAAO;IACjD,IAAI,CAAC;QACH,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;AACH,CAAC"}

package/dist/ui/dispatcher.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Dispatcher state and "Start dispatcher" for `tidegap ui` (ui v2, KTD13).
+ *
+ * The UI server never dispatches a task. When no dispatcher has run lately,
+ * the page can ask the server to start one: the same `tidegap` binary the
+ * install step resolves, spawned detached as `tidegap tick --daemon --interval
+ * 60 --db <ledger>`, with stdout and stderr appended to
+ * `~/.tidegap/logs/ui-tick.log` (directory 0700, file 0600). The child's
+ * pid, log path and start time are kept in ledger meta `ui_dispatcher`. A
+ * start is refused (409) while that child is alive or while any other
+ * ticker ticked within two intervals. The user stops it with `kill <pid>`.
+ *
+ * State: `running` when the UI-started child is alive (its pid exists and it
+ * started or ticked recently, so a recycled pid is not trusted) or a tick ran within
+ * two intervals (300 s when the daemon is installed, else 60 s); `stale`
+ * when a tick ran before that; `never` when no tick was ever recorded.
+ */
+import { type TaskStore } from "@tidegap/core";
+import type { DaemonStatus } from "../platform/index.js";
+export declare const UI_DISPATCHER_META_KEY = "ui_dispatcher";
+/** Tick interval of a dispatcher started from the page, in seconds. */
+export declare const UI_DISPATCHER_INTERVAL_S = 60;
+/** Interval of the installed daemon (`tidegap install` default), in seconds. */
+export declare const DAEMON_INTERVAL_S = 300;
+export interface DispatcherMeta {
+    pid: number;
+    log: string;
+    started_at: string;
+}
+/** Start `argv` detached with output appended to `logPath`; returns the pid. */
+export type Spawner = (argv: string[], logPath: string) => number;
+export interface DispatcherOptions {
+    /** The `tidegap` launcher (`[node, script]` or `[binary]`), from `resolveLauncher`. */
+    launcher: string[];
+    dbPath: string;
+    /** Default `~/.tidegap/logs`. */
+    logDir?: string;
+    spawn?: Spawner;
+    isAlive?: (pid: number) => boolean;
+    daemonStatus: () => DaemonStatus;
+    now?: () => Date;
+}
+export interface DispatcherState {
+    state: "running" | "stale" | "never";
+    last_tick_at: string | null;
+    interval_s: number;
+    ui_child: {
+        pid: number;
+        log: string;
+        started_at: string;
+        alive: boolean;
+    } | null;
+}
+export declare function defaultLogDir(): string;
+/** True when a process with `pid` exists (EPERM still means it exists). */
+export declare function pidAlive(pid: number): boolean;
+export declare const defaultSpawner: Spawner;
+export declare class DispatcherControl {
+    private readonly store;
+    private readonly opts;
+    constructor(store: TaskStore, opts: DispatcherOptions);
+    private meta;
+    private alive;
+    state(): DispatcherState;
+    /**
+     * Spawn the dispatcher. Refused (`ok: false`) when the child started from
+     * the page is alive (`ui_child`), or when another ticker (the installed
+     * daemon, an `tidegap tick` loop, OpenClaw) ticked recently (`ticking`): a
+     * second ticker would only race the first.
+     */
+    start(): {
+        ok: true;
+        meta: DispatcherMeta;
+    } | {
+        ok: false;
+        reason: "ui_child";
+        meta: DispatcherMeta;
+    } | {
+        ok: false;
+        reason: "ticking";
+        last_tick_at: string | null;
+    };
+}
+//# sourceMappingURL=dispatcher.d.ts.map

package/dist/ui/dispatcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatcher.d.ts","sourceRoot":"","sources":["../../src/ui/dispatcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,OAAO,EAA0C,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAEvF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,eAAO,MAAM,sBAAsB,kBAAkB,CAAC;AACtD,uEAAuE;AACvE,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAC3C,gFAAgF;AAChF,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAErC,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,gFAAgF;AAChF,MAAM,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;AAElE,MAAM,WAAW,iBAAiB;IAChC,uFAAuF;IACvF,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACnC,YAAY,EAAE,MAAM,YAAY,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;IACrC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;CACnF;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,2EAA2E;AAC3E,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAO7C;AAED,eAAO,MAAM,cAAc,EAAE,OAkB5B,CAAC;AAEF,qBAAa,iBAAiB;IAE1B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBADJ,KAAK,EAAE,SAAS,EAChB,IAAI,EAAE,iBAAiB;IAG1C,OAAO,CAAC,IAAI;IAcZ,OAAO,CAAC,KAAK;IAIb,KAAK,IAAI,eAAe;IAwBxB;;;;;OAKG;IACH,KAAK,IACD;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,cAAc,CAAA;KAAE,GAClC;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,UAAU,CAAC;QAAC,IAAI,EAAE,cAAc,CAAA;KAAE,GACvD;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,SAAS,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE;CAmClE"}

package/dist/ui/dispatcher.js

@@ -0,0 +1,150 @@
+/**
+ * Dispatcher state and "Start dispatcher" for `tidegap ui` (ui v2, KTD13).
+ *
+ * The UI server never dispatches a task. When no dispatcher has run lately,
+ * the page can ask the server to start one: the same `tidegap` binary the
+ * install step resolves, spawned detached as `tidegap tick --daemon --interval
+ * 60 --db <ledger>`, with stdout and stderr appended to
+ * `~/.tidegap/logs/ui-tick.log` (directory 0700, file 0600). The child's
+ * pid, log path and start time are kept in ledger meta `ui_dispatcher`. A
+ * start is refused (409) while that child is alive or while any other
+ * ticker ticked within two intervals. The user stops it with `kill <pid>`.
+ *
+ * State: `running` when the UI-started child is alive (its pid exists and it
+ * started or ticked recently, so a recycled pid is not trusted) or a tick ran within
+ * two intervals (300 s when the daemon is installed, else 60 s); `stale`
+ * when a tick ran before that; `never` when no tick was ever recorded.
+ */
+import { spawn } from "node:child_process";
+import { chmodSync, closeSync, fchmodSync, mkdirSync, openSync } from "node:fs";
+import { join } from "node:path";
+import { LAST_TICK_META_KEY, resolveTidegapHome } from "@tidegap/core";
+export const UI_DISPATCHER_META_KEY = "ui_dispatcher";
+/** Tick interval of a dispatcher started from the page, in seconds. */
+export const UI_DISPATCHER_INTERVAL_S = 60;
+/** Interval of the installed daemon (`tidegap install` default), in seconds. */
+export const DAEMON_INTERVAL_S = 300;
+export function defaultLogDir() {
+    return join(resolveTidegapHome(), "logs");
+}
+/** True when a process with `pid` exists (EPERM still means it exists). */
+export function pidAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (err) {
+        return err.code === "EPERM";
+    }
+}
+export const defaultSpawner = (argv, logPath) => {
+    const fd = openSync(logPath, "a", 0o600);
+    try {
+        // The mode above applies only when the file is created.
+        fchmodSync(fd, 0o600);
+        const child = spawn(argv[0], argv.slice(1), {
+            detached: true,
+            stdio: ["ignore", fd, fd],
+        });
+        child.on("error", () => {
+            // A launch error surfaces as a missing pid below; nothing else to do.
+        });
+        if (child.pid === undefined)
+            throw new Error("could not start the dispatcher");
+        child.unref();
+        return child.pid;
+    }
+    finally {
+        closeSync(fd);
+    }
+};
+export class DispatcherControl {
+    store;
+    opts;
+    constructor(store, opts) {
+        this.store = store;
+        this.opts = opts;
+    }
+    meta() {
+        const raw = this.store.getMeta(UI_DISPATCHER_META_KEY);
+        if (!raw)
+            return undefined;
+        try {
+            const m = JSON.parse(raw);
+            if (typeof m.pid !== "number" || typeof m.log !== "string" || typeof m.started_at !== "string") {
+                return undefined;
+            }
+            return m;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    alive(pid) {
+        return (this.opts.isAlive ?? pidAlive)(pid);
+    }
+    state() {
+        const meta = this.meta();
+        const lastTick = this.store.getMeta(LAST_TICK_META_KEY) ?? null;
+        const interval = this.opts.daemonStatus() === "installed" ? DAEMON_INTERVAL_S : UI_DISPATCHER_INTERVAL_S;
+        const now = (this.opts.now?.() ?? new Date()).getTime();
+        const window = 2 * interval * 1000;
+        const recent = lastTick !== null && now - Date.parse(lastTick) <= window;
+        // A live pid alone is not proof: after a crash or reboot the OS can give
+        // the pid to another process. The child counts as alive while its pid
+        // exists AND it either started recently or a tick ran recently.
+        const child = meta
+            ? {
+                ...meta,
+                alive: this.alive(meta.pid) &&
+                    (recent ||
+                        now - Date.parse(meta.started_at) <= 2 * UI_DISPATCHER_INTERVAL_S * 1000),
+            }
+            : null;
+        const state = child?.alive || recent ? "running" : lastTick !== null ? "stale" : "never";
+        return { state, last_tick_at: lastTick, interval_s: interval, ui_child: child };
+    }
+    /**
+     * Spawn the dispatcher. Refused (`ok: false`) when the child started from
+     * the page is alive (`ui_child`), or when another ticker (the installed
+     * daemon, an `tidegap tick` loop, OpenClaw) ticked recently (`ticking`): a
+     * second ticker would only race the first.
+     */
+    start() {
+        const current = this.state();
+        if (current.ui_child?.alive) {
+            const { alive: _alive, ...meta } = current.ui_child;
+            return { ok: false, reason: "ui_child", meta };
+        }
+        if (current.state === "running") {
+            return { ok: false, reason: "ticking", last_tick_at: current.last_tick_at };
+        }
+        const logDir = this.opts.logDir ?? defaultLogDir();
+        mkdirSync(logDir, { recursive: true, mode: 0o700 });
+        try {
+            chmodSync(logDir, 0o700);
+        }
+        catch {
+            // best-effort on exotic filesystems
+        }
+        const log = join(logDir, "ui-tick.log");
+        const argv = [
+            ...this.opts.launcher,
+            "tick",
+            "--daemon",
+            "--interval",
+            String(UI_DISPATCHER_INTERVAL_S),
+            "--db",
+            this.opts.dbPath,
+        ];
+        const pid = (this.opts.spawn ?? defaultSpawner)(argv, log);
+        const meta = {
+            pid,
+            log,
+            started_at: (this.opts.now?.() ?? new Date()).toISOString(),
+        };
+        this.store.setMeta(UI_DISPATCHER_META_KEY, JSON.stringify(meta));
+        return { ok: true, meta };
+    }
+}
+//# sourceMappingURL=dispatcher.js.map

package/dist/ui/dispatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatcher.js","sourceRoot":"","sources":["../../src/ui/dispatcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAChF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAkB,MAAM,eAAe,CAAC;AAIvF,MAAM,CAAC,MAAM,sBAAsB,GAAG,eAAe,CAAC;AACtD,uEAAuE;AACvE,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAC3C,gFAAgF;AAChF,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AA8BrC,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAQ,GAA6B,CAAC,IAAI,KAAK,OAAO,CAAC;IACzD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAY,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;IACvD,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,wDAAwD;QACxD,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACtB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YAC3C,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC;SAC1B,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,sEAAsE;QACxE,CAAC,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC/E,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,GAAG,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,OAAO,iBAAiB;IAET;IACA;IAFnB,YACmB,KAAgB,EAChB,IAAuB;QADvB,UAAK,GAAL,KAAK,CAAW;QAChB,SAAI,GAAJ,IAAI,CAAmB;IACvC,CAAC;IAEI,IAAI;QACV,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QACvD,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;YACrD,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAC/F,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,CAAmB,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,GAAW;QACvB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,IAAI,CAAC;QAChE,MAAM,QAAQ,GACZ,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,wBAAwB,CAAC;QAC1F,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,GAAG,IAAI,CAAC;QACnC,MAAM,MAAM,GAAG,QAAQ,KAAK,IAAI,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC;QACzE,yEAAyE;QACzE,sEAAsE;QACtE,gEAAgE;QAChE,MAAM,KAAK,GAAG,IAAI;YAChB,CAAC,CAAC;gBACE,GAAG,IAAI;gBACP,KAAK,EACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;oBACpB,CAAC,MAAM;wBACL,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,wBAAwB,GAAG,IAAI,CAAC;aAC9E;YACH,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QACzF,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAClF,CAAC;IAED;;;;;OAKG;IACH,KAAK;QAIH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;YAC5B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;YACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACjD,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;QAC9E,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;QACnD,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;QACtC,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG;YACX,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ;YACrB,MAAM;YACN,UAAU;YACV,YAAY;YACZ,MAAM,CAAC,wBAAwB,CAAC;YAChC,MAAM;YACN,IAAI,CAAC,IAAI,CAAC,MAAM;SACjB,CAAC;QACF,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAmB;YAC3B,GAAG;YACH,GAAG;YACH,UAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;SAC5D,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,sBAAsB,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;CACF"}

package/dist/ui/events.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Change feed for `tidegap ui` (KTD10). Polls `PRAGMA data_version`, which moves
+ * when another connection commits (the tick, the MCP server). On a move it
+ * re-lists the ledger and reports the ids whose status, read marker or
+ * scheduled time changed. The server's own writes do not move
+ * `data_version`, so the server calls `emit` itself after a mark-read.
+ */
+import type { TaskStore } from "@tidegap/core";
+export type TaskChangeListener = (ids: string[]) => void;
+export declare class TaskEvents {
+    private readonly store;
+    private readonly intervalMs;
+    private readonly listeners;
+    private fingerprints;
+    private version;
+    private timer;
+    constructor(store: TaskStore, intervalMs?: number);
+    start(): void;
+    stop(): void;
+    subscribe(fn: TaskChangeListener): () => void;
+    /** Push a change the poller cannot see (the server's own write). */
+    emit(ids: string[]): void;
+    /** One poll step; public so tests need not wait on the timer. */
+    poll(): void;
+    private snapshot;
+}
+//# sourceMappingURL=events.d.ts.map

package/dist/ui/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/ui/events.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C,MAAM,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;AAEzD,qBAAa,UAAU;IAOnB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAP7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiC;IAC3D,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,KAAK,CAA6B;gBAGvB,KAAK,EAAE,SAAS,EAChB,UAAU,SAAQ;IAMrC,KAAK,IAAI,IAAI;IAMb,IAAI,IAAI,IAAI;IAMZ,SAAS,CAAC,EAAE,EAAE,kBAAkB,GAAG,MAAM,IAAI;IAK7C,oEAAoE;IACpE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI;IAOzB,iEAAiE;IACjE,IAAI,IAAI,IAAI;IAuBZ,OAAO,CAAC,QAAQ;CAUjB"}