@zephyrdeng/pi-review 0.7.1 → 0.8.0

package/dist/ui-server-main.test.js

@@ -0,0 +1,123 @@
+import assert from "node:assert/strict";
+import fs from "node:fs";
+import http from "node:http";
+import os from "node:os";
+import path from "node:path";
+import { fork } from "node:child_process";
+import { fileURLToPath } from "node:url";
+import { test, afterEach } from "vitest";
+// These tests exercise the real detached server process, so they need a
+// fresh `dist/ui-server-main.js` (the module reads its sibling static assets
+// from its own compiled location). `npm test` runs `npm run build` first;
+// run `npm run build` before invoking this file standalone.
+function distEntry() {
+    return fileURLToPath(new URL("../dist/ui-server-main.js", import.meta.url));
+}
+function httpGet(port, requestPath, headers = {}) {
+    return new Promise((resolve, reject) => {
+        const req = http.request({ host: "127.0.0.1", port, path: requestPath, headers }, (res) => {
+            let body = "";
+            res.on("data", (c) => (body += c));
+            res.on("end", () => resolve({ status: res.statusCode ?? 0, headers: res.headers, body }));
+        });
+        req.on("error", reject);
+        req.end();
+    });
+}
+let activeChild;
+let activeDir;
+afterEach(() => {
+    if (activeChild && activeChild.exitCode === null && !activeChild.killed)
+        activeChild.kill("SIGKILL");
+    activeChild = undefined;
+    if (activeDir) {
+        fs.rmSync(activeDir, { recursive: true, force: true });
+        activeDir = undefined;
+    }
+});
+async function spawnServer(opts = {}) {
+    const entry = distEntry();
+    assert.ok(fs.existsSync(entry), "dist/ui-server-main.js is missing — run `npm run build` before this test");
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), "pi-review-ui-main-test-"));
+    activeDir = dir;
+    const eventsPath = path.join(dir, "events.jsonl");
+    const token = `test-token-${Math.random().toString(36).slice(2)}`;
+    fs.writeFileSync(eventsPath, opts.preCompleted
+        ? `${JSON.stringify({ v: 1, runId: "r1", seq: 1, at: 1, type: "panel.completed", meta: { status: "clean" } })}\n`
+        : "");
+    const args = [dir, token, String(opts.ttlMs ?? 900_000), String(opts.ttlCheckIntervalMs ?? 30_000)];
+    const child = fork(entry, args, { stdio: ["ignore", "pipe", "pipe", "ipc"] });
+    activeChild = child;
+    const ready = await new Promise((resolve, reject) => {
+        const timer = setTimeout(() => reject(new Error("server did not send a ready message in time")), 5000);
+        child.once("message", (msg) => {
+            clearTimeout(timer);
+            resolve(msg);
+        });
+        child.once("error", (error) => {
+            clearTimeout(timer);
+            reject(error);
+        });
+        child.once("exit", (code) => {
+            clearTimeout(timer);
+            reject(new Error(`server exited early with code ${code}`));
+        });
+    });
+    assert.equal(ready.ready, true, ready.error);
+    return { child, port: ready.port, token, dir, eventsPath };
+}
+test("ui-server-main serves the dashboard page, static assets, and SSE stream once ready", async () => {
+    const { port, token } = await spawnServer();
+    const page = await httpGet(port, `/run/${token}`, { Host: `127.0.0.1:${port}` });
+    assert.equal(page.status, 200);
+    assert.match(page.body, /pi-review panel/);
+    const clientJs = await httpGet(port, `/run/${token}/static/ui-client.js`, { Host: `127.0.0.1:${port}` });
+    assert.equal(clientJs.status, 200);
+    assert.match(clientJs.body, /EventSource/);
+    const reducerJs = await httpGet(port, `/run/${token}/static/panel-view.js`, { Host: `127.0.0.1:${port}` });
+    assert.equal(reducerJs.status, 200);
+    assert.match(reducerJs.body, /reducePanelEvent/);
+}, 10_000);
+test("every static asset's transitive relative imports are also served (the browser module graph resolves)", async () => {
+    const { port, token } = await spawnServer();
+    const entryPoints = ["ui-client.js", "panel-view.js"];
+    const seen = new Set();
+    const pending = [...entryPoints];
+    while (pending.length > 0) {
+        const name = pending.pop();
+        if (seen.has(name))
+            continue;
+        seen.add(name);
+        const res = await httpGet(port, `/run/${token}/static/${name}`, { Host: `127.0.0.1:${port}` });
+        assert.equal(res.status, 200, `expected /static/${name} to be served (imported by the module graph)`);
+        for (const match of res.body.matchAll(/from\s+"\.\/([^"]+)"/g))
+            pending.push(match[1]);
+    }
+    assert.ok(seen.size >= 3, "expected to discover panel-view.js's transitive import too");
+}, 10_000);
+test("ui-server-main rejects a wrong capability token even once ready", async () => {
+    const { port, token } = await spawnServer();
+    const res = await httpGet(port, `/run/${token}-wrong`, { Host: `127.0.0.1:${port}` });
+    assert.equal(res.status, 404);
+}, 10_000);
+test("ui-server-main removes the run directory on SIGTERM", async () => {
+    const { child, dir } = await spawnServer();
+    assert.ok(fs.existsSync(dir));
+    const exited = new Promise((resolve) => child.once("exit", () => resolve()));
+    child.kill("SIGTERM");
+    await exited;
+    assert.equal(fs.existsSync(dir), false);
+}, 10_000);
+test("ui-server-main self-terminates after the idle TTL once the run has completed", async () => {
+    const { child, dir } = await spawnServer({ preCompleted: true, ttlMs: 30, ttlCheckIntervalMs: 20 });
+    const exit = await new Promise((resolve, reject) => {
+        const timer = setTimeout(() => reject(new Error("server did not self-terminate within the TTL window")), 3000);
+        child.once("exit", (code) => {
+            clearTimeout(timer);
+            resolve({ code });
+        });
+    });
+    assert.equal(exit.code, 0);
+    assert.equal(fs.existsSync(dir), false);
+}, 10_000);
+//# sourceMappingURL=ui-server-main.test.js.map

package/dist/ui-server-main.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-server-main.test.js","sourceRoot":"","sources":["../src/ui-server-main.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAE1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAEzC,wEAAwE;AACxE,6EAA6E;AAC7E,0EAA0E;AAC1E,4DAA4D;AAC5D,SAAS,SAAS;IAChB,OAAO,aAAa,CAAC,IAAI,GAAG,CAAC,2BAA2B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9E,CAAC;AAQD,SAAS,OAAO,CAAC,IAAY,EAAE,WAAmB,EAAE,UAAkC,EAAE;IACtF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;YACxF,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;YACnC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,WAAqC,CAAC;AAC1C,IAAI,SAA6B,CAAC;AAElC,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,WAAW,IAAI,WAAW,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM;QAAE,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrG,WAAW,GAAG,SAAS,CAAC;IACxB,IAAI,SAAS,EAAE,CAAC;QACd,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,SAAS,GAAG,SAAS,CAAC;IACxB,CAAC;AACH,CAAC,CAAC,CAAC;AAUH,KAAK,UAAU,WAAW,CAAC,OAAgF,EAAE;IAC3G,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,0EAA0E,CAAC,CAAC;IAE5G,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAC9E,SAAS,GAAG,GAAG,CAAC;IAChB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,cAAc,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,EAAE,CAAC,aAAa,CACd,UAAU,EACV,IAAI,CAAC,YAAY;QACf,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI;QACjH,CAAC,CAAC,EAAE,CACP,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,MAAM,CAAC,CAAC,CAAC;IACpG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9E,WAAW,GAAG,KAAK,CAAC;IAEpB,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAoD,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrG,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACvG,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;YAC5B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,GAAwD,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAK,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;AAC9D,CAAC;AAED,IAAI,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;IACpG,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC;IAE5C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,QAAQ,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,IAAI,EAAE,EAAE,CAAC,CAAC;IACjF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAE3C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,QAAQ,KAAK,sBAAsB,EAAE,EAAE,IAAI,EAAE,aAAa,IAAI,EAAE,EAAE,CAAC,CAAC;IACzG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAE3C,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,QAAQ,KAAK,uBAAuB,EAAE,EAAE,IAAI,EAAE,aAAa,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3G,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;AACnD,CAAC,EAAE,MAAM,CAAC,CAAC;AAEX,IAAI,CAAC,sGAAsG,EAAE,KAAK,IAAI,EAAE;IACtH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC;IAC5C,MAAM,WAAW,GAAG,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;IAEjC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAG,CAAC;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,QAAQ,KAAK,WAAW,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/F,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,oBAAoB,IAAI,8CAA8C,CAAC,CAAC;QACtG,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,4DAA4D,CAAC,CAAC;AAC1F,CAAC,EAAE,MAAM,CAAC,CAAC;AAEX,IAAI,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;IACjF,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,QAAQ,KAAK,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,IAAI,EAAE,EAAE,CAAC,CAAC;IACtF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC,EAAE,MAAM,CAAC,CAAC;AAEX,IAAI,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;IACrE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC;IAC3C,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAE9B,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACnF,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtB,MAAM,MAAM,CAAC;IACb,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC,EAAE,MAAM,CAAC,CAAC;AAEX,IAAI,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;IAC9F,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,WAAW,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC,CAAC;IAEpG,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1E,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/G,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC,EAAE,MAAM,CAAC,CAAC"}

package/dist/ui-server.d.ts

@@ -0,0 +1,42 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+/** Default idle TTL (seconds) the dashboard stays up after the run completes. */
+export declare const DEFAULT_UI_TTL_SECONDS = 900;
+/** Hard safeguard so an orphaned dashboard process never runs forever, even if the run never completes. */
+export declare const MAX_RUN_LIFETIME_MS: number;
+/** High-entropy per-run capability token embedded in the dashboard URL path. */
+export declare function generateCapabilityToken(): string;
+/** Constant-time token comparison; a length mismatch alone must not leak timing. */
+export declare function isValidToken(candidate: string | undefined, expected: string): boolean;
+/** Reject every Host header except loopback names bound to the server's own port. */
+export declare function isAllowedHost(hostHeader: string | undefined, port: number): boolean;
+/** Allow a missing Origin (same-origin GET/EventSource often omit it) or an exact loopback match. */
+export declare function isAllowedOrigin(originHeader: string | undefined, port: number): boolean;
+/** Restrictive headers on every response: no remote assets, no framing, no caching of sensitive state. */
+export declare function securityHeaders(): Record<string, string>;
+/** Create the per-run temp directory with owner-only permissions where supported. */
+export declare function createRunDirectory(runId: string, baseDir?: string): string;
+/** Write the dashboard URL via temp-file + rename so readers never see a partial write. */
+export declare function writeUrlFileAtomic(filePath: string, url: string): void;
+/** One SSE frame: `id:` enables browser Last-Event-ID replay on reconnect. */
+export declare function formatSseEvent(seq: number, event: unknown): string;
+/** Split newline-delimited text into complete lines plus a leftover partial line for the next chunk. */
+export declare function splitCompleteLines(buffered: string, chunk: string): {
+    lines: string[];
+    leftover: string;
+};
+export interface DashboardAsset {
+    contentType: string;
+    body: string;
+}
+export interface DashboardServerContext {
+    token: string;
+    port: number;
+    eventsPath: string;
+    html: string;
+    staticAssets: Record<string, DashboardAsset>;
+    /** Test-only: shrink the tail-poll interval below the 200ms production default. */
+    pollIntervalMs?: number;
+}
+/** Build the dashboard's HTTP request handler. All routes live under /run/:token for one auth boundary. */
+export declare function createDashboardRequestListener(ctx: DashboardServerContext): (req: IncomingMessage, res: ServerResponse) => void;
+//# sourceMappingURL=ui-server.d.ts.map

package/dist/ui-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-server.d.ts","sourceRoot":"","sources":["../src/ui-server.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,iFAAiF;AACjF,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,2GAA2G;AAC3G,eAAO,MAAM,mBAAmB,QAAqB,CAAC;AAEtD,gFAAgF;AAChF,wBAAgB,uBAAuB,IAAI,MAAM,CAEhD;AAED,oFAAoF;AACpF,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAMrF;AAID,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAsBnF;AAED,qGAAqG;AACrG,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAIvF;AAED,0GAA0G;AAC1G,wBAAgB,eAAe,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASxD;AAED,qFAAqF;AACrF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,MAAoB,GAAG,MAAM,CAKvF;AAED,2FAA2F;AAC3F,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAItE;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAElE;AAED,wGAAwG;AACxG,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAKzG;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC7C,mFAAmF;IACnF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AA4FD,2GAA2G;AAC3G,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,sBAAsB,GAC1B,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CA+CrD"}

package/dist/ui-server.js

@@ -0,0 +1,233 @@
+// Loopback dashboard HTTP/SSE server (issue #4). Binds only to loopback
+// addresses, protects every run with a high-entropy capability token, and
+// streams the normalized ReviewEvent v1 JSONL artifact so a browser can
+// replay/reconnect without touching the review process directly.
+import crypto from "node:crypto";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+/** Default idle TTL (seconds) the dashboard stays up after the run completes. */
+export const DEFAULT_UI_TTL_SECONDS = 900;
+/** Hard safeguard so an orphaned dashboard process never runs forever, even if the run never completes. */
+export const MAX_RUN_LIFETIME_MS = 2 * 60 * 60 * 1000;
+/** High-entropy per-run capability token embedded in the dashboard URL path. */
+export function generateCapabilityToken() {
+    return crypto.randomBytes(32).toString("base64url");
+}
+/** Constant-time token comparison; a length mismatch alone must not leak timing. */
+export function isValidToken(candidate, expected) {
+    if (!candidate)
+        return false;
+    const a = Buffer.from(candidate);
+    const b = Buffer.from(expected);
+    if (a.length !== b.length)
+        return false;
+    return crypto.timingSafeEqual(a, b);
+}
+const LOOPBACK_HOSTNAMES = new Set(["127.0.0.1", "localhost", "[::1]"]);
+/** Reject every Host header except loopback names bound to the server's own port. */
+export function isAllowedHost(hostHeader, port) {
+    if (!hostHeader)
+        return false;
+    let hostname;
+    let portPart;
+    if (hostHeader.startsWith("[")) {
+        const closeIndex = hostHeader.indexOf("]");
+        if (closeIndex === -1)
+            return false;
+        hostname = hostHeader.slice(0, closeIndex + 1);
+        const rest = hostHeader.slice(closeIndex + 1);
+        portPart = rest.startsWith(":") ? rest.slice(1) : undefined;
+    }
+    else {
+        const colonIndex = hostHeader.lastIndexOf(":");
+        if (colonIndex === -1) {
+            hostname = hostHeader;
+            portPart = undefined;
+        }
+        else {
+            hostname = hostHeader.slice(0, colonIndex);
+            portPart = hostHeader.slice(colonIndex + 1);
+        }
+    }
+    if (!LOOPBACK_HOSTNAMES.has(hostname.toLowerCase()))
+        return false;
+    return portPart === String(port);
+}
+/** Allow a missing Origin (same-origin GET/EventSource often omit it) or an exact loopback match. */
+export function isAllowedOrigin(originHeader, port) {
+    if (originHeader === undefined)
+        return true;
+    const allowed = new Set([`http://127.0.0.1:${port}`, `http://localhost:${port}`, `http://[::1]:${port}`]);
+    return allowed.has(originHeader);
+}
+/** Restrictive headers on every response: no remote assets, no framing, no caching of sensitive state. */
+export function securityHeaders() {
+    return {
+        "Content-Security-Policy": "default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self'; base-uri 'none'; frame-ancestors 'none'; form-action 'none'",
+        "X-Frame-Options": "DENY",
+        "X-Content-Type-Options": "nosniff",
+        "Referrer-Policy": "no-referrer",
+        "Cache-Control": "no-store",
+    };
+}
+/** Create the per-run temp directory with owner-only permissions where supported. */
+export function createRunDirectory(runId, baseDir = os.tmpdir()) {
+    const dir = path.join(baseDir, "pi-review-ui", runId);
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    fs.chmodSync(dir, 0o700);
+    return dir;
+}
+/** Write the dashboard URL via temp-file + rename so readers never see a partial write. */
+export function writeUrlFileAtomic(filePath, url) {
+    const tmpPath = `${filePath}.tmp-${process.pid}`;
+    fs.writeFileSync(tmpPath, `${url}\n`, { mode: 0o600 });
+    fs.renameSync(tmpPath, filePath);
+}
+/** One SSE frame: `id:` enables browser Last-Event-ID replay on reconnect. */
+export function formatSseEvent(seq, event) {
+    return `id: ${seq}\ndata: ${JSON.stringify(event)}\n\n`;
+}
+/** Split newline-delimited text into complete lines plus a leftover partial line for the next chunk. */
+export function splitCompleteLines(buffered, chunk) {
+    const combined = buffered + chunk;
+    const lines = combined.split("\n");
+    const leftover = lines.pop() ?? "";
+    return { lines: lines.filter((line) => line.length > 0), leftover };
+}
+function safePathname(rawUrl) {
+    try {
+        return new URL(rawUrl ?? "/", "http://internal").pathname;
+    }
+    catch {
+        return "/";
+    }
+}
+function writeStatus(res, status, headers, body) {
+    res.writeHead(status, { ...securityHeaders(), "Content-Type": "text/plain; charset=utf-8", ...headers });
+    res.end(body);
+}
+function serveEvents(req, res, ctx) {
+    res.writeHead(200, {
+        ...securityHeaders(),
+        "Content-Type": "text/event-stream; charset=utf-8",
+        Connection: "keep-alive",
+    });
+    res.write(":ok\n\n");
+    const lastEventIdHeader = req.headers["last-event-id"];
+    const initialLastSeq = typeof lastEventIdHeader === "string" && /^\d+$/.test(lastEventIdHeader) ? Number(lastEventIdHeader) : 0;
+    let lastSentSeq = initialLastSeq;
+    let leftover = "";
+    const sendLine = (line) => {
+        let parsed;
+        try {
+            parsed = JSON.parse(line);
+        }
+        catch {
+            return;
+        }
+        if (!parsed || typeof parsed.seq !== "number" || parsed.seq <= lastSentSeq)
+            return;
+        lastSentSeq = parsed.seq;
+        res.write(formatSseEvent(parsed.seq, parsed));
+    };
+    const consume = (chunk) => {
+        const { lines, leftover: rest } = splitCompleteLines(leftover, chunk);
+        leftover = rest;
+        for (const line of lines)
+            sendLine(line);
+    };
+    let initial = "";
+    try {
+        initial = fs.readFileSync(ctx.eventsPath, "utf8");
+    }
+    catch {
+        initial = "";
+    }
+    let offset = Buffer.byteLength(initial, "utf8");
+    consume(initial);
+    let stopped = false;
+    const pollIntervalMs = ctx.pollIntervalMs ?? 200;
+    const poll = setInterval(() => {
+        if (stopped)
+            return;
+        fs.stat(ctx.eventsPath, (err, stat) => {
+            if (err || stopped || stat.size <= offset)
+                return;
+            const stream = fs.createReadStream(ctx.eventsPath, { start: offset, end: stat.size - 1, encoding: "utf8" });
+            let buf = "";
+            stream.on("data", (c) => {
+                buf += c;
+            });
+            stream.on("end", () => {
+                offset = stat.size;
+                if (buf)
+                    consume(buf);
+            });
+        });
+    }, pollIntervalMs);
+    const heartbeat = setInterval(() => {
+        try {
+            res.write(":hb\n\n");
+        }
+        catch {
+            /* connection already gone; cleanup runs on the close event */
+        }
+    }, 15000);
+    const cleanup = () => {
+        if (stopped)
+            return;
+        stopped = true;
+        clearInterval(poll);
+        clearInterval(heartbeat);
+    };
+    req.on("close", cleanup);
+    res.on("close", cleanup);
+}
+/** Build the dashboard's HTTP request handler. All routes live under /run/:token for one auth boundary. */
+export function createDashboardRequestListener(ctx) {
+    return (req, res) => {
+        if (!isAllowedHost(req.headers.host, ctx.port)) {
+            writeStatus(res, 400, {}, "bad host");
+            return;
+        }
+        if (!isAllowedOrigin(req.headers.origin, ctx.port)) {
+            writeStatus(res, 403, {}, "bad origin");
+            return;
+        }
+        const method = req.method ?? "GET";
+        if (method !== "GET" && method !== "HEAD") {
+            writeStatus(res, 405, { Allow: "GET, HEAD" }, "method not allowed");
+            return;
+        }
+        const pathname = safePathname(req.url);
+        const match = pathname.match(/^\/run\/([^/]+)((?:\/.*)?)$/);
+        if (!match || !isValidToken(match[1], ctx.token)) {
+            writeStatus(res, 404, {}, "not found");
+            return;
+        }
+        const rest = match[2] || "/";
+        if (rest === "/" || rest === "") {
+            res.writeHead(200, { ...securityHeaders(), "Content-Type": "text/html; charset=utf-8" });
+            res.end(ctx.html);
+            return;
+        }
+        if (rest === "/events") {
+            serveEvents(req, res, ctx);
+            return;
+        }
+        const staticMatch = rest.match(/^\/static\/([^/]+)$/);
+        if (staticMatch) {
+            const asset = ctx.staticAssets[staticMatch[1]];
+            if (!asset) {
+                writeStatus(res, 404, {}, "not found");
+                return;
+            }
+            res.writeHead(200, { ...securityHeaders(), "Content-Type": asset.contentType });
+            res.end(asset.body);
+            return;
+        }
+        writeStatus(res, 404, {}, "not found");
+    };
+}
+//# sourceMappingURL=ui-server.js.map

package/dist/ui-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-server.js","sourceRoot":"","sources":["../src/ui-server.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,0EAA0E;AAC1E,wEAAwE;AACxE,iEAAiE;AAEjE,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,iFAAiF;AACjF,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C,2GAA2G;AAC3G,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtD,gFAAgF;AAChF,MAAM,UAAU,uBAAuB;IACrC,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACtD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,YAAY,CAAC,SAA6B,EAAE,QAAgB;IAC1E,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAExE,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAAC,UAA8B,EAAE,IAAY;IACxE,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,IAAI,QAAgB,CAAC;IACrB,IAAI,QAA4B,CAAC;IACjC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,UAAU,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;QAC9C,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;YACtB,QAAQ,GAAG,UAAU,CAAC;YACtB,QAAQ,GAAG,SAAS,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;YAC3C,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,OAAO,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,eAAe,CAAC,YAAgC,EAAE,IAAY;IAC5E,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,IAAI,EAAE,EAAE,oBAAoB,IAAI,EAAE,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1G,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AACnC,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,eAAe;IAC7B,OAAO;QACL,yBAAyB,EACvB,0KAA0K;QAC5K,iBAAiB,EAAE,MAAM;QACzB,wBAAwB,EAAE,SAAS;QACnC,iBAAiB,EAAE,aAAa;QAChC,eAAe,EAAE,UAAU;KAC5B,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,UAAkB,EAAE,CAAC,MAAM,EAAE;IAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;IACtD,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,GAAW;IAC9D,MAAM,OAAO,GAAG,GAAG,QAAQ,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IACjD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,KAAc;IACxD,OAAO,OAAO,GAAG,WAAW,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;AAC1D,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,KAAa;IAChE,MAAM,QAAQ,GAAG,QAAQ,GAAG,KAAK,CAAC;IAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IACnC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;AACtE,CAAC;AAiBD,SAAS,YAAY,CAAC,MAA0B;IAC9C,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAmB,EAAE,MAAc,EAAE,OAA+B,EAAE,IAAY;IACrG,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,eAAe,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACzG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,GAAoB,EAAE,GAAmB,EAAE,GAA2B;IACzF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACjB,GAAG,eAAe,EAAE;QACpB,cAAc,EAAE,kCAAkC;QAClD,UAAU,EAAE,YAAY;KACzB,CAAC,CAAC;IACH,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAErB,MAAM,iBAAiB,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACvD,MAAM,cAAc,GAClB,OAAO,iBAAiB,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3G,IAAI,WAAW,GAAG,cAAc,CAAC;IACjC,IAAI,QAAQ,GAAG,EAAE,CAAC;IAElB,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAQ,EAAE;QACtC,IAAI,MAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,IAAI,WAAW;YAAE,OAAO;QACnF,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC;QACzB,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,KAAa,EAAQ,EAAE;QACtC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtE,QAAQ,GAAG,IAAI,CAAC;QAChB,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,EAAE,CAAC;IACf,CAAC;IACD,IAAI,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChD,OAAO,CAAC,OAAO,CAAC,CAAC;IAEjB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,cAAc,GAAG,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC;IACjD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE;QAC5B,IAAI,OAAO;YAAE,OAAO;QACpB,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;YACpC,IAAI,GAAG,IAAI,OAAO,IAAI,IAAI,CAAC,IAAI,IAAI,MAAM;gBAAE,OAAO;YAClD,MAAM,MAAM,GAAG,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5G,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;gBACtB,GAAG,IAAI,CAAC,CAAC;YACX,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACpB,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;gBACnB,IAAI,GAAG;oBAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,cAAc,CAAC,CAAC;IAEnB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QACjC,IAAI,CAAC;YACH,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;QAChE,CAAC;IACH,CAAC,EAAE,KAAK,CAAC,CAAC;IAEV,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,aAAa,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC,CAAC;IACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,8BAA8B,CAC5C,GAA2B;IAE3B,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAClB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QACnC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1C,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,oBAAoB,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QAE7B,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,eAAe,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACzF,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACtD,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,eAAe,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YAChF,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QACD,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;IACzC,CAAC,CAAC;AACJ,CAAC"}

package/dist/ui-server.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ui-server.test.d.ts.map

package/dist/ui-server.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-server.test.d.ts","sourceRoot":"","sources":["../src/ui-server.test.ts"],"names":[],"mappings":""}