@tienne/gestalt 0.108.0 → 0.109.0

package/dist/src/peer/viewer.js

@@ -0,0 +1,249 @@
+import { randomBytes, timingSafeEqual } from 'node:crypto';
+import { createServer } from 'node:http';
+import { renderViewerHtml } from './viewer-html.js';
+import { errMessage } from './errors.js';
+const PAGE_PATH = /^\/s\/([A-Za-z0-9_-]{1,64})\/?$/;
+const EVENTS_PATH = /^\/s\/([A-Za-z0-9_-]{1,64})\/events$/;
+/** SSE 연결이 프록시나 OS에서 놀다 끊기지 않게 보내는 빈 주석 간격 */
+const KEEPALIVE_MS = 15_000;
+/**
+ * 공유 하나에 동시에 붙는 뷰어 상한. 넘으면 429. 뷰어 하나가 붙잡는 메모리는 소켓 버퍼로
+ * 묶여 있지만 연결마다 소켓과 타이머가 생기니 토큰을 아는 쪽이 끝없이 열지 못하게 한다.
+ * 사람이 보는 숫자로는 넉넉하다.
+ */
+export const MAX_VIEWERS_PER_SHARE = 16;
+/**
+ * 실시간 프레임을 쓰기 전에 소켓 버퍼에 이만큼 넘게 밀려 있으면 그 뷰어를 끊는다. 안 읽는
+ * 뷰어 하나가 데몬 메모리를 끝없이 붙잡지 못하게 한다. 이보다 큰 이벤트 하나는 들어가지만
+ * 소켓으로 다 빠지기 전에 다음 프레임이 오면 그때 끊는다. 앞부분은 소켓이 비는 만큼만 꺼내
+ * 보내서 여기에 안 쌓인다. 브라우저는 다시 붙어 Last-Event-ID부터 받는다.
+ */
+export const MAX_LIVE_BACKLOG_BYTES = 8 * 1024 * 1024;
+/** 앞부분을 공유에서 한 번에 꺼내는 양. 소켓이 차면 그 자리에서 멈추므로 대략이면 된다 */
+export const REPLAY_CHUNK_BYTES = 256 * 1024;
+/**
+ * 로컬 뷰어 HTTP 서버. `127.0.0.1`에만 붙는다.
+ *
+ * 같은 머신의 다른 프로세스나 브라우저에 열린 남의 웹페이지도 이 포트에 닿을 수 있다.
+ * 그래서 공유마다 토큰을 주소에 붙이고 없거나 틀리면 401이다. 모르는 공유 id도 401로
+ * 돌려준다 — 404와 401을 나누면 토큰 없이 공유 id가 살아 있는지 떠볼 수 있다.
+ *
+ * Routes:
+ *   GET /s/:id?t=TOKEN          → 뷰어 HTML
+ *   GET /s/:id/events?t=TOKEN   → SSE (line, trimmed, stats, state, closed). 뷰어 상한을 넘으면 429.
+ *                                 closed의 missed는 따라잡는 중에 공유가 종료돼 못 보낸 이벤트 수
+ *   *                           → 404
+ */
+export class ViewerServer {
+    hooks;
+    server = null;
+    open = new Set();
+    viewers = new Map();
+    maxLiveBacklogBytes;
+    constructor(hooks, options = {}) {
+        this.hooks = hooks;
+        this.maxLiveBacklogBytes = options.maxLiveBacklogBytes ?? MAX_LIVE_BACKLOG_BYTES;
+    }
+    start(port = 0) {
+        return new Promise((resolve, reject) => {
+            this.server = createServer((req, res) => {
+                // 핸들러가 던지면 uncaughtException으로 데몬이 죽는다. 요청 대상이 `//[`처럼 URL로
+                // 안 읽히면 new URL이 던지는데 이 포트에 닿는 누구나 그런 요청을 보낼 수 있다
+                try {
+                    this.handle(req, res);
+                }
+                catch (err) {
+                    process.stderr.write(`[peer-viewer] request failed: ${errMessage(err)}\n`);
+                    if (!res.headersSent)
+                        res.writeHead(500, { 'Content-Type': 'text/plain; charset=utf-8' });
+                    res.end('Internal Server Error');
+                }
+            });
+            this.server.once('error', reject);
+            this.server.listen(port, '127.0.0.1', () => {
+                this.server.off('error', reject);
+                this.server.on('error', (err) => {
+                    process.stderr.write(`[peer-viewer] server error: ${err.message}\n`);
+                });
+                resolve(this.port);
+            });
+        });
+    }
+    get port() {
+        const addr = this.server?.address();
+        return addr && typeof addr === 'object' ? addr.port : undefined;
+    }
+    stop() {
+        for (const res of this.open)
+            res.end();
+        this.open.clear();
+        return new Promise((resolve) => {
+            if (!this.server) {
+                resolve();
+                return;
+            }
+            this.server.closeAllConnections?.();
+            this.server.close(() => {
+                this.server = null;
+                resolve();
+            });
+        });
+    }
+    handle(req, res) {
+        if (req.method !== 'GET')
+            return plain(res, 405, 'Method Not Allowed');
+        // DNS 리바인딩으로 남의 도메인이 이 포트를 가리키게 해도 Host가 달라서 막힌다
+        if (!this.hostAllowed(req.headers.host))
+            return plain(res, 403, 'Forbidden');
+        const url = new URL(req.url ?? '/', 'http://127.0.0.1');
+        const page = PAGE_PATH.exec(url.pathname);
+        const events = page ? null : EVENTS_PATH.exec(url.pathname);
+        const id = page?.[1] ?? events?.[1];
+        if (!id)
+            return plain(res, 404, 'Not Found');
+        const share = this.hooks.lookup(id);
+        if (!share || !tokenMatches(url.searchParams.get('t'), share.token)) {
+            return plain(res, 401, 'Unauthorized');
+        }
+        if (page)
+            return this.page(res);
+        if ((this.viewers.get(id) ?? 0) >= MAX_VIEWERS_PER_SHARE) {
+            return plain(res, 429, 'Too Many Viewers');
+        }
+        return this.stream(req, res, share.stream);
+    }
+    hostAllowed(host) {
+        if (!host)
+            return false;
+        const port = this.port;
+        return host === `127.0.0.1:${port}` || host === `localhost:${port}`;
+    }
+    page(res) {
+        const nonce = randomBytes(16).toString('base64');
+        res.writeHead(200, {
+            'Content-Type': 'text/html; charset=utf-8',
+            'Content-Security-Policy': [
+                "default-src 'none'",
+                `script-src 'nonce-${nonce}'`,
+                `style-src 'nonce-${nonce}'`,
+                "connect-src 'self'",
+                "base-uri 'none'",
+                "form-action 'none'",
+                "frame-ancestors 'none'",
+            ].join('; '),
+            ...PRIVATE_HEADERS,
+        });
+        res.end(renderViewerHtml(nonce, MAX_VIEWERS_PER_SHARE));
+    }
+    stream(req, res, stream) {
+        const lastId = Number.parseInt(String(req.headers['last-event-id'] ?? '0'), 10);
+        res.writeHead(200, {
+            'Content-Type': 'text/event-stream; charset=utf-8',
+            Connection: 'keep-alive',
+            ...PRIVATE_HEADERS,
+        });
+        res.write(': connected\n\n');
+        this.open.add(res);
+        this.viewers.set(stream.id, (this.viewers.get(stream.id) ?? 0) + 1);
+        this.hooks.onConnect?.(stream.id);
+        const keepalive = setInterval(() => res.write(': ping\n\n'), KEEPALIVE_MS);
+        keepalive.unref();
+        let detached = false;
+        let unsubscribe = () => { };
+        const detach = () => {
+            if (detached)
+                return;
+            detached = true;
+            clearInterval(keepalive);
+            unsubscribe();
+            this.open.delete(res);
+            const left = (this.viewers.get(stream.id) ?? 1) - 1;
+            if (left > 0)
+                this.viewers.set(stream.id, left);
+            else
+                this.viewers.delete(stream.id);
+            this.hooks.onDisconnect?.(stream.id);
+        };
+        req.on('close', detach);
+        res.on('close', detach);
+        const onFrame = (frame) => {
+            if (detached)
+                return;
+            if (res.writableLength > this.maxLiveBacklogBytes) {
+                res.destroy();
+                detach();
+                return;
+            }
+            res.write(sseFrame(frame));
+            if (frame.type === 'closed') {
+                res.end();
+                detach();
+            }
+        };
+        // 앞부분은 소켓이 비는 만큼씩 꺼내 쓴다. 다 따라잡으면 이벤트 루프로 돌아가지 않고 바로
+        // subscribe로 붙어서 그 사이에 poll이 끼지 않는다. subscribe가 상태와 통계를 다시 보내
+        // 따라잡는 동안 바뀐 것도 맞춘다. 기다리는 사이 공유가 종료되면 subscribe가 못 보낸 개수를
+        // closed에 실어 보낸다
+        let cursor = Number.isFinite(lastId) && lastId > 0 ? lastId : 0;
+        const pump = () => {
+            if (detached)
+                return;
+            while (!stream.isClosed) {
+                const { dropped, items } = stream.backlogAfter(cursor, REPLAY_CHUNK_BYTES);
+                if (dropped > 0) {
+                    res.write(sseFrame({ type: 'trimmed', dropped }));
+                    cursor += dropped;
+                }
+                if (items.length === 0)
+                    break;
+                for (const item of items) {
+                    cursor = item.seq;
+                    if (!res.write(sseFrame({ type: 'event', ...item }))) {
+                        res.once('drain', pump);
+                        return;
+                    }
+                }
+            }
+            unsubscribe = stream.subscribe(onFrame, cursor);
+            if (detached)
+                unsubscribe();
+        };
+        res.write(sseFrame({ type: 'state', status: stream.currentStatus }));
+        res.write(sseFrame({ type: 'stats', unknownLines: stream.unknownLines }));
+        pump();
+    }
+}
+/**
+ * 뷰어는 디스크에 아무것도 남기지 않아야 한다. 브라우저 캐시도 디스크다.
+ */
+const PRIVATE_HEADERS = {
+    'Cache-Control': 'no-store',
+    'Referrer-Policy': 'no-referrer',
+    'X-Content-Type-Options': 'nosniff',
+};
+function plain(res, status, body) {
+    res.writeHead(status, { 'Content-Type': 'text/plain; charset=utf-8', ...PRIVATE_HEADERS });
+    res.end(body);
+}
+function tokenMatches(given, expected) {
+    if (!given)
+        return false;
+    const a = Buffer.from(given);
+    const b = Buffer.from(expected);
+    return a.length === b.length && timingSafeEqual(a, b);
+}
+function sseFrame(frame) {
+    switch (frame.type) {
+        case 'event':
+            return `id: ${frame.seq}\nevent: line\ndata: ${frame.json}\n\n`;
+        case 'stats':
+            return `event: stats\ndata: ${JSON.stringify({ unknownLines: frame.unknownLines })}\n\n`;
+        case 'state':
+            return `event: state\ndata: ${JSON.stringify({ status: frame.status })}\n\n`;
+        case 'closed':
+            return `event: closed\ndata: ${JSON.stringify({ reason: frame.reason, missed: frame.missed })}\n\n`;
+        case 'trimmed':
+            return `event: trimmed\ndata: ${JSON.stringify({ dropped: frame.dropped })}\n\n`;
+    }
+}
+//# sourceMappingURL=viewer.js.map

package/dist/src/peer/viewer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"viewer.js","sourceRoot":"","sources":["../../../src/peer/viewer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAGzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAazC,MAAM,SAAS,GAAG,iCAAiC,CAAC;AACpD,MAAM,WAAW,GAAG,sCAAsC,CAAC;AAE3D,8CAA8C;AAC9C,MAAM,YAAY,GAAG,MAAM,CAAC;AAE5B;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAExC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD,uDAAuD;AACvD,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,GAAG,IAAI,CAAC;AAO7C;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,YAAY;IAOJ;IANX,MAAM,GAAkB,IAAI,CAAC;IAC7B,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjC,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3B,mBAAmB,CAAS;IAE7C,YACmB,KAAkB,EACnC,UAA+B,EAAE;QADhB,UAAK,GAAL,KAAK,CAAa;QAGnC,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,sBAAsB,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,IAAI,GAAG,CAAC;QACZ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACtC,4DAA4D;gBAC5D,kDAAkD;gBAClD,IAAI,CAAC;oBACH,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACxB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC3E,IAAI,CAAC,GAAG,CAAC,WAAW;wBAAE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;oBAC1F,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;gBACzC,IAAI,CAAC,MAAO,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAClC,IAAI,CAAC,MAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;gBACvE,CAAC,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,IAAK,CAAC,CAAC;YACtB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI;QACN,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACpC,OAAO,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;IAED,IAAI;QACF,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI;YAAE,GAAG,CAAC,GAAG,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;gBACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,GAAoB,EAAE,GAAmB;QACtD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAEvE,iDAAiD;QACjD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAE7E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAE7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,qBAAqB,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAEO,WAAW,CAAC,IAAwB;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,OAAO,IAAI,KAAK,aAAa,IAAI,EAAE,IAAI,IAAI,KAAK,aAAa,IAAI,EAAE,CAAC;IACtE,CAAC;IAEO,IAAI,CAAC,GAAmB;QAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACjD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,0BAA0B;YAC1C,yBAAyB,EAAE;gBACzB,oBAAoB;gBACpB,qBAAqB,KAAK,GAAG;gBAC7B,oBAAoB,KAAK,GAAG;gBAC5B,oBAAoB;gBACpB,iBAAiB;gBACjB,oBAAoB;gBACpB,wBAAwB;aACzB,CAAC,IAAI,CAAC,IAAI,CAAC;YACZ,GAAG,eAAe;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC1D,CAAC;IAEO,MAAM,CAAC,GAAoB,EAAE,GAAmB,EAAE,MAAmB;QAC3E,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAChF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,kCAAkC;YAClD,UAAU,EAAE,YAAY;YACxB,GAAG,eAAe;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAElC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;QAC3E,SAAS,CAAC,KAAK,EAAE,CAAC;QAElB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,WAAW,GAAe,GAAG,EAAE,GAAE,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,GAAS,EAAE;YACxB,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,WAAW,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACpD,IAAI,IAAI,GAAG,CAAC;gBAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;;gBAC3C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC;QAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAExB,MAAM,OAAO,GAAG,CAAC,KAAiB,EAAQ,EAAE;YAC1C,IAAI,QAAQ;gBAAE,OAAO;YACrB,IAAI,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAClD,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,EAAE,CAAC;gBACT,OAAO;YACT,CAAC;YACD,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5B,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,MAAM,EAAE,CAAC;YACX,CAAC;QACH,CAAC,CAAC;QAEF,oDAAoD;QACpD,8DAA8D;QAC9D,0DAA0D;QAC1D,iBAAiB;QACjB,IAAI,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,GAAS,EAAE;YACtB,IAAI,QAAQ;gBAAE,OAAO;YACrB,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACxB,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;gBAC3E,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;oBAChB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;oBAClD,MAAM,IAAI,OAAO,CAAC;gBACpB,CAAC;gBACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM;gBAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC;oBAClB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;wBACrD,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;wBACxB,OAAO;oBACT,CAAC;gBACH,CAAC;YACH,CAAC;YACD,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAChD,IAAI,QAAQ;gBAAE,WAAW,EAAE,CAAC;QAC9B,CAAC,CAAC;QAEF,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QACrE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAC1E,IAAI,EAAE,CAAC;IACT,CAAC;CACF;AAED;;GAEG;AACH,MAAM,eAAe,GAAG;IACtB,eAAe,EAAE,UAAU;IAC3B,iBAAiB,EAAE,aAAa;IAChC,wBAAwB,EAAE,SAAS;CAC3B,CAAC;AAEX,SAAS,KAAK,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAY;IAC9D,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,GAAG,eAAe,EAAE,CAAC,CAAC;IAC3F,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,KAAoB,EAAE,QAAgB;IAC1D,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAiB;IACjC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,OAAO;YACV,OAAO,OAAO,KAAK,CAAC,GAAG,wBAAwB,KAAK,CAAC,IAAI,MAAM,CAAC;QAClE,KAAK,OAAO;YACV,OAAO,uBAAuB,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC;QAC3F,KAAK,OAAO;YACV,OAAO,uBAAuB,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC;QAC/E,KAAK,QAAQ;YACX,OAAO,wBAAwB,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC;QACtG,KAAK,SAAS;YACZ,OAAO,yBAAyB,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC;IACrF,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tienne/gestalt",
-  "version": "0.108.0",
+  "version": "0.109.0",
   "description": "TypeScript AI Development Harness - Gestalt psychology-driven requirement clarification",
   "repository": {
     "type": "git",

package/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "gestalt",
-  "version": "0.108.0",
+  "version": "0.109.0",
   "description": "Gestalt psychology-driven AI development harness. Transforms scattered requirements into structured, validated specifications through interactive interviews.",
   "author": {
     "name": "tienne"

package/plugin/.mcp.json

@@ -2,7 +2,7 @@
   "mcpServers": {
     "gestalt": {
       "command": "npx",
-      "args": ["-y", "@tienne/gestalt@0.108.0", "serve"],
+      "args": ["-y", "@tienne/gestalt@0.109.0", "serve"],
       "startup_timeout_sec": 180,
       "tool_timeout_sec": 900
     }

package/plugin/mcp.json

@@ -2,7 +2,7 @@
   "mcpServers": {
     "gestalt": {
       "command": "npx",
-      "args": ["-y", "@tienne/gestalt@0.108.0", "serve"],
+      "args": ["-y", "@tienne/gestalt@0.109.0", "serve"],
       "startup_timeout_sec": 180,
       "tool_timeout_sec": 900
     }