aibroker 0.35.2 → 0.36.0

package/dist/daemon/standup.js

@@ -0,0 +1,141 @@
+/**
+ * daemon/standup.ts — what everyone did, is doing, and is stuck on.
+ *
+ * THE OLDEST MEETING IN SOFTWARE, and it survives because it answers the three
+ * questions a lead cannot get from a repository: what moved, what is moving,
+ * and what is blocked. Two of those are already visible here — the objective a
+ * machine is working to, and the state of its branch. The third is the one that
+ * needs the agent to say something, so the standup asks for it rather than
+ * inferring it, exactly as it would of a person.
+ *
+ * WHY IT IS NOT A MEETING. Nobody attends. It is assembled on a schedule and
+ * delivered wherever the lead is — phone, terminal, task list — because the
+ * whole reason for giving each developer their own machine was that the lead
+ * stopped having to sit and watch. A standup that requires attendance would put
+ * that back.
+ *
+ * WHAT IT DELIBERATELY DOES NOT DO. It does not decide anything. No agent is
+ * appointed to run it, chase people or reprioritise. The scrum master's job
+ * splits cleanly in two: the process half is a schedule and a template, which is
+ * this file; the judgement half is deciding what matters when two things
+ * conflict, which stays with the person. Automating the first is a saving.
+ * Automating the second recreates the supervisor problem this whole design
+ * exists to remove — an agent watching agents, costing a context, becoming the
+ * bottleneck it was meant to relieve.
+ */
+import { loadPeering, peerCall } from "../ipc/peering.js";
+import { machineFacts, branchState } from "./machine.js";
+import { log } from "../core/log.js";
+/**
+ * Collect from every machine, including this one.
+ *
+ * An unreachable machine is REPORTED as unreachable rather than dropped. A
+ * developer missing from a standup and a developer with nothing to say look
+ * identical in a list that omits them, and they want opposite reactions — one
+ * needs chasing, the other does not.
+ */
+export async function collectStandup(repo) {
+    const rows = [];
+    const here = machineFacts();
+    const local = { machine: here.name, reachable: true };
+    if (repo ?? here.workRoot) {
+        const st = branchState((repo ?? here.workRoot));
+        Object.assign(local, {
+            branch: st.branch, head: st.head, dirty: st.dirty, ahead: st.ahead, behind: st.behind, detail: st.error,
+        });
+    }
+    rows.push(local);
+    const { peers } = loadPeering();
+    await Promise.all(peers.map(async (p) => {
+        const r = await peerCall(p, "where", repo ? { repo } : {}, 10_000);
+        if (!r.ok) {
+            rows.push({ machine: p.name, reachable: false, detail: r.error });
+            return;
+        }
+        const c = r.result?.checkout ?? {};
+        rows.push({
+            machine: p.name,
+            reachable: true,
+            branch: c.branch, head: c.head, dirty: c.dirty, ahead: c.ahead, behind: c.behind,
+            detail: c.error,
+        });
+    }));
+    return rows;
+}
+/**
+ * The report, in the shape a person reads at a glance.
+ *
+ * Ordered by what needs attention rather than by machine name: anything
+ * unreachable or blocked first, then work ready to look at, then the rest. A
+ * list sorted alphabetically makes the reader do the triage that the report
+ * exists to save them.
+ */
+export function renderStandup(rows) {
+    const needsAttention = (r) => !r.reachable || !!r.blocked || !!r.detail;
+    const readyToReview = (r) => (r.ahead ?? 0) > 0 && (r.dirty ?? 0) === 0;
+    const sorted = [...rows].sort((a, b) => {
+        const rank = (r) => (needsAttention(r) ? 0 : readyToReview(r) ? 1 : 2);
+        return rank(a) - rank(b);
+    });
+    const lines = [];
+    for (const r of sorted) {
+        if (!r.reachable) {
+            lines.push(`  ✗ ${r.machine} — cannot be reached: ${r.detail ?? "no reason given"}`);
+            continue;
+        }
+        const bits = [];
+        if (r.branch)
+            bits.push(`on ${r.branch}${r.head ? ` at ${r.head}` : ""}`);
+        if (r.dirty)
+            bits.push(`${r.dirty} uncommitted`);
+        if (r.ahead)
+            bits.push(`${r.ahead} to review`);
+        if (r.behind)
+            bits.push(`${r.behind} behind`);
+        if (r.detail)
+            bits.push(r.detail);
+        const mark = readyToReview(r) ? "▲" : "·";
+        lines.push(`  ${mark} ${r.machine}${bits.length ? ` — ${bits.join(", ")}` : " — nothing reported"}`);
+        if (r.objective)
+            lines.push(`      working to: ${r.objective.slice(0, 100)}`);
+        if (r.blocked)
+            lines.push(`      BLOCKED: ${r.blocked}`);
+    }
+    const ready = sorted.filter(readyToReview).length;
+    const stuck = sorted.filter((r) => !r.reachable).length;
+    const head = `standup — ${rows.length} machine${rows.length === 1 ? "" : "s"}` +
+        (ready ? `, ${ready} with work to review` : "") +
+        (stuck ? `, ${stuck} unreachable` : "");
+    return `${head}\n${lines.join("\n")}`;
+}
+let timer = null;
+/**
+ * Run it on a schedule and deliver it.
+ *
+ * Off unless asked for. A report that arrives whether or not anybody wanted it
+ * teaches its reader to skip it, and a standup nobody reads is worse than none
+ * because it looks like oversight.
+ */
+export function startStandup(everyMinutes, deliver, repo) {
+    if (timer)
+        clearInterval(timer);
+    if (everyMinutes <= 0)
+        return;
+    const run = async () => {
+        try {
+            deliver(renderStandup(await collectStandup(repo)));
+        }
+        catch (e) {
+            log(`[standup] could not assemble — ${e.message}`);
+        }
+    };
+    timer = setInterval(() => void run(), everyMinutes * 60_000);
+    timer.unref?.();
+    log(`[standup] every ${everyMinutes} min`);
+}
+export function stopStandup() {
+    if (timer)
+        clearInterval(timer);
+    timer = null;
+}
+//# sourceMappingURL=standup.js.map

package/dist/daemon/standup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standup.js","sourceRoot":"","sources":["../../src/daemon/standup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAmBrC;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAa;IAChD,MAAM,IAAI,GAAmB,EAAE,CAAC;IAEhC,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACpE,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAE,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE;YACnB,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK;SACxG,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAEjB,MAAM,EAAE,KAAK,EAAE,GAAG,WAAW,EAAE,CAAC;IAChC,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACpB,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACnE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,CAAC,CAAC,IAAI;YACf,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM;YAChF,MAAM,EAAE,CAAC,CAAC,KAAK;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,IAAoB;IAChD,MAAM,cAAc,GAAG,CAAC,CAAe,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACtF,MAAM,aAAa,GAAG,CAAC,CAAe,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IAEtF,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,CAAC,CAAe,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC,CAAC;YACrF,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,CAAC,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC;QACjD,IAAI,CAAC,CAAC,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC;QAC/C,IAAI,CAAC,CAAC,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAC,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC;QACrG,IAAI,CAAC,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;IACxD,MAAM,IAAI,GACR,aAAa,IAAI,CAAC,MAAM,WAAW,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;QACjE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAE1C,OAAO,GAAG,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,IAAI,KAAK,GAA0B,IAAI,CAAC;AAExC;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,YAAoB,EAAE,OAA+B,EAAE,IAAa;IAC/F,IAAI,KAAK;QAAE,aAAa,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,YAAY,IAAI,CAAC;QAAE,OAAO;IAC9B,MAAM,GAAG,GAAG,KAAK,IAAI,EAAE;QACrB,IAAI,CAAC;YACH,OAAO,CAAC,aAAa,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,kCAAmC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC;IACF,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,GAAG,EAAE,EAAE,YAAY,GAAG,MAAM,CAAC,CAAC;IAC7D,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAChB,GAAG,CAAC,mBAAmB,YAAY,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,IAAI,KAAK;QAAE,aAAa,CAAC,KAAK,CAAC,CAAC;IAChC,KAAK,GAAG,IAAI,CAAC;AACf,CAAC"}

package/dist/ipc/peering.d.ts

@@ -0,0 +1,103 @@
+/**
+ * ipc/peering.ts — one hub talking to another, across machines.
+ *
+ * WHY PEERS AND NOT REMOTE CLIENTS. The obvious design is to let a session on
+ * another machine dial this hub directly. It does not work: the hub finds
+ * sessions by enumerating terminal panes on its own machine, and a pane on
+ * another machine is not enumerable from here at all. So each machine runs its
+ * own hub, which knows its own panes, and the hubs talk to each other. The
+ * guest is then a first-class participant — its sessions appear in listings,
+ * take messages and can be managed — rather than a special case threaded
+ * through every call site.
+ *
+ * WHY THIS IS DANGEROUS AND WHAT IS DONE ABOUT IT. The local hub listens on a
+ * unix socket, which is protected by file permissions and by not existing
+ * anywhere else. This is a TCP port carrying commands that type into terminals
+ * and drive screens. So:
+ *
+ *   - it is OFF unless configured. There is no default port.
+ *   - it binds one named address. Never 0.0.0.0, which is refused outright
+ *     rather than warned about, because a warning nobody reads is not a control.
+ *   - every request must carry a shared secret, checked before dispatch. A
+ *     connection that can reach the port is not thereby trusted.
+ *   - the secret is generated, never chosen, and stored readable only by its
+ *     owner.
+ *
+ * The intended network is a private overlay — a Tailscale address or a host-only
+ * link to a virtual machine. It is not intended to face anything else, and the
+ * bind check is what keeps that from being a matter of memory.
+ */
+export interface PeerRecord {
+    /** What a person calls it: "guest", "laptop". Used to address its sessions. */
+    name: string;
+    host: string;
+    port: number;
+    /** Shared secret. Presented on every call in both directions. */
+    token: string;
+    lastSeenAt?: number;
+    lastError?: string;
+}
+export interface PeeringConfig {
+    /** This hub's own listener. Absent means it accepts no peers. */
+    listen?: {
+        host: string;
+        port: number;
+        token: string;
+    };
+    /** Hubs this one reaches out to. */
+    peers: PeerRecord[];
+}
+export declare function loadPeering(): PeeringConfig;
+export declare function savePeering(c: PeeringConfig): void;
+export declare function newToken(): string;
+/**
+ * Compare secrets without leaking their contents through timing.
+ *
+ * Overkill for a home network and exactly the sort of thing that is never added
+ * later. Lengths are compared first because timingSafeEqual throws on a
+ * mismatch, and a thrown comparison is a failed comparison here.
+ */
+export declare function tokenMatches(given: unknown, expected: string): boolean;
+/**
+ * Addresses this hub may bind to.
+ *
+ * A wildcard bind is refused rather than discouraged. The port accepts commands
+ * that drive a machine's screen and keyboard; "we meant to change that later"
+ * is how such a thing ends up facing a café network. If someone genuinely wants
+ * it wide they can say so with an explicit address of their own choosing.
+ */
+export declare function rejectWildcard(host: string): string | null;
+/**
+ * The single string that pairs two machines.
+ *
+ * Everything needed to connect, in one blob a person can copy once: where to
+ * call, what secret to present, and what the other side calls itself. Pairing
+ * that takes four fields typed into two machines is pairing that gets done
+ * wrong at least once.
+ */
+export declare function makeInvite(name: string, host: string, port: number, token: string): string;
+export declare function readInvite(blob: string): {
+    name: string;
+    host: string;
+    port: number;
+    token: string;
+};
+/**
+ * Call a method on a peer hub.
+ *
+ * Same NDJSON request/response as the local socket, so a handler cannot tell
+ * where a call came from and does not need to. The token rides in the envelope
+ * rather than a header because there is no header — the protocol is one line of
+ * JSON, and adding a framing layer for one field would be its own bug surface.
+ */
+export declare function peerCall(peer: PeerRecord, method: string, params?: Record<string, unknown>, timeoutMs?: number): Promise<{
+    ok: boolean;
+    result?: any;
+    error?: string;
+}>;
+/** Address a session as `peer/session`, so a name cannot be ambiguous across machines. */
+export declare function splitRemote(target: string): {
+    peer: string;
+    session: string;
+} | null;
+//# sourceMappingURL=peering.d.ts.map

package/dist/ipc/peering.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"peering.d.ts","sourceRoot":"","sources":["../../src/ipc/peering.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAWH,MAAM,WAAW,UAAU;IACzB,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,iEAAiE;IACjE,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,oCAAoC;IACpC,KAAK,EAAE,UAAU,EAAE,CAAC;CACrB;AAOD,wBAAgB,WAAW,IAAI,aAAa,CAU3C;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,aAAa,GAAG,IAAI,CAMlD;AAED,wBAAgB,QAAQ,IAAI,MAAM,CAEjC;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAOtE;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAU1D;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1F;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAMpG;AAED;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CACtB,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,MAAM,EACd,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EACpC,SAAS,SAAS,GACjB,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,GAAG,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAgDxD;AAED,0FAA0F;AAC1F,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAIpF"}

package/dist/ipc/peering.js

@@ -0,0 +1,185 @@
+/**
+ * ipc/peering.ts — one hub talking to another, across machines.
+ *
+ * WHY PEERS AND NOT REMOTE CLIENTS. The obvious design is to let a session on
+ * another machine dial this hub directly. It does not work: the hub finds
+ * sessions by enumerating terminal panes on its own machine, and a pane on
+ * another machine is not enumerable from here at all. So each machine runs its
+ * own hub, which knows its own panes, and the hubs talk to each other. The
+ * guest is then a first-class participant — its sessions appear in listings,
+ * take messages and can be managed — rather than a special case threaded
+ * through every call site.
+ *
+ * WHY THIS IS DANGEROUS AND WHAT IS DONE ABOUT IT. The local hub listens on a
+ * unix socket, which is protected by file permissions and by not existing
+ * anywhere else. This is a TCP port carrying commands that type into terminals
+ * and drive screens. So:
+ *
+ *   - it is OFF unless configured. There is no default port.
+ *   - it binds one named address. Never 0.0.0.0, which is refused outright
+ *     rather than warned about, because a warning nobody reads is not a control.
+ *   - every request must carry a shared secret, checked before dispatch. A
+ *     connection that can reach the port is not thereby trusted.
+ *   - the secret is generated, never chosen, and stored readable only by its
+ *     owner.
+ *
+ * The intended network is a private overlay — a Tailscale address or a host-only
+ * link to a virtual machine. It is not intended to face anything else, and the
+ * bind check is what keeps that from being a matter of memory.
+ */
+import { connect } from "node:net";
+import { randomBytes, timingSafeEqual } from "node:crypto";
+import { readFileSync, writeFileSync, existsSync, chmodSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+import { log } from "../core/log.js";
+const CONFIG_FILE = join(homedir(), ".aibroker", "peering.json");
+function ensureDir() {
+    const dir = join(homedir(), ".aibroker");
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+}
+export function loadPeering() {
+    try {
+        if (existsSync(CONFIG_FILE)) {
+            const c = JSON.parse(readFileSync(CONFIG_FILE, "utf8"));
+            return { listen: c.listen, peers: c.peers ?? [] };
+        }
+    }
+    catch (e) {
+        log(`[peer] config unreadable, treating as empty — ${e.message}`);
+    }
+    return { peers: [] };
+}
+export function savePeering(c) {
+    ensureDir();
+    writeFileSync(CONFIG_FILE, JSON.stringify(c, null, 2));
+    // The file holds shared secrets. Anyone who can read it can type into these
+    // machines' terminals, so the permission is part of the design and not tidiness.
+    try {
+        chmodSync(CONFIG_FILE, 0o600);
+    }
+    catch { /* best effort on odd filesystems */ }
+}
+export function newToken() {
+    return randomBytes(32).toString("hex");
+}
+/**
+ * Compare secrets without leaking their contents through timing.
+ *
+ * Overkill for a home network and exactly the sort of thing that is never added
+ * later. Lengths are compared first because timingSafeEqual throws on a
+ * mismatch, and a thrown comparison is a failed comparison here.
+ */
+export function tokenMatches(given, expected) {
+    if (typeof given !== "string" || given.length !== expected.length)
+        return false;
+    try {
+        return timingSafeEqual(Buffer.from(given), Buffer.from(expected));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Addresses this hub may bind to.
+ *
+ * A wildcard bind is refused rather than discouraged. The port accepts commands
+ * that drive a machine's screen and keyboard; "we meant to change that later"
+ * is how such a thing ends up facing a café network. If someone genuinely wants
+ * it wide they can say so with an explicit address of their own choosing.
+ */
+export function rejectWildcard(host) {
+    const wild = ["0.0.0.0", "::", "*", ""];
+    if (wild.includes(host.trim())) {
+        return ("refusing to bind a wildcard address. This port accepts commands that type into " +
+            "terminals and drive the screen, so it must be bound to one named address — " +
+            "a Tailscale address, or the host-only address of a virtual machine.");
+    }
+    return null;
+}
+/**
+ * The single string that pairs two machines.
+ *
+ * Everything needed to connect, in one blob a person can copy once: where to
+ * call, what secret to present, and what the other side calls itself. Pairing
+ * that takes four fields typed into two machines is pairing that gets done
+ * wrong at least once.
+ */
+export function makeInvite(name, host, port, token) {
+    return Buffer.from(JSON.stringify({ v: 1, name, host, port, token })).toString("base64");
+}
+export function readInvite(blob) {
+    const raw = JSON.parse(Buffer.from(blob.trim(), "base64").toString("utf8"));
+    if (raw?.v !== 1 || !raw.host || !raw.port || !raw.token || !raw.name) {
+        throw new Error("that invite is not readable — copy the whole line the other machine printed");
+    }
+    return { name: String(raw.name), host: String(raw.host), port: Number(raw.port), token: String(raw.token) };
+}
+/**
+ * Call a method on a peer hub.
+ *
+ * Same NDJSON request/response as the local socket, so a handler cannot tell
+ * where a call came from and does not need to. The token rides in the envelope
+ * rather than a header because there is no header — the protocol is one line of
+ * JSON, and adding a framing layer for one field would be its own bug surface.
+ */
+export function peerCall(peer, method, params = {}, timeoutMs = 12_000) {
+    return new Promise((resolve) => {
+        const sock = connect({ host: peer.host, port: peer.port });
+        let buf = "";
+        let settled = false;
+        const done = (v) => {
+            if (settled)
+                return;
+            settled = true;
+            try {
+                sock.destroy();
+            }
+            catch { /* already gone */ }
+            resolve(v);
+        };
+        sock.on("connect", () => {
+            sock.write(JSON.stringify({
+                id: `peer-${Date.now()}`,
+                sessionId: "peer",
+                method,
+                params,
+                peerToken: peer.token,
+            }) + "\n");
+        });
+        sock.on("data", (d) => {
+            buf += d.toString();
+            const nl = buf.indexOf("\n");
+            if (nl === -1)
+                return;
+            try {
+                done(JSON.parse(buf.slice(0, nl)));
+            }
+            catch {
+                done({ ok: false, error: "unreadable answer from peer" });
+            }
+        });
+        sock.on("error", (e) => {
+            // Name the common causes rather than surfacing a bare code, because the
+            // three that actually happen have three different fixes.
+            const why = e.code === "ECONNREFUSED"
+                ? "nothing is listening there — is the other machine's daemon running, and is peering switched on?"
+                : e.code === "EHOSTUNREACH" || e.code === "ENETUNREACH"
+                    ? "no route to that address — check the network between the machines"
+                    : e.code === "ETIMEDOUT"
+                        ? "timed out reaching it"
+                        : (e.code ?? e.message);
+            done({ ok: false, error: `${peer.name}: ${why}` });
+        });
+        setTimeout(() => done({ ok: false, error: `${peer.name}: no answer within ${Math.round(timeoutMs / 1000)}s` }), timeoutMs);
+    });
+}
+/** Address a session as `peer/session`, so a name cannot be ambiguous across machines. */
+export function splitRemote(target) {
+    const i = target.indexOf("/");
+    if (i <= 0 || i === target.length - 1)
+        return null;
+    return { peer: target.slice(0, i), session: target.slice(i + 1) };
+}
+//# sourceMappingURL=peering.js.map

package/dist/ipc/peering.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peering.js","sourceRoot":"","sources":["../../src/ipc/peering.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAErC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;AAoBjE,SAAS,SAAS;IAChB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAA2B,CAAC;YAClF,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,iDAAkD,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAgB;IAC1C,SAAS,EAAE,CAAC;IACZ,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACvD,4EAA4E;IAC5E,iFAAiF;IACjF,IAAI,CAAC;QAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,oCAAoC,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,QAAQ;IACtB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,QAAgB;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAChF,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/B,OAAO,CACL,iFAAiF;YACjF,6EAA6E;YAC7E,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY,EAAE,IAAY,EAAE,KAAa;IAChF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;AAC9G,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CACtB,IAAgB,EAChB,MAAc,EACd,SAAkC,EAAE,EACpC,SAAS,GAAG,MAAM;IAElB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,CAAC,CAAgD,EAAE,EAAE;YAChE,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC;gBAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;YACpD,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,CAAC;QAEF,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACtB,IAAI,CAAC,KAAK,CACR,IAAI,CAAC,SAAS,CAAC;gBACb,EAAE,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE;gBACxB,SAAS,EAAE,MAAM;gBACjB,MAAM;gBACN,MAAM;gBACN,SAAS,EAAE,IAAI,CAAC,KAAK;aACtB,CAAC,GAAG,IAAI,CACV,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;YACpB,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,EAAE,KAAK,CAAC,CAAC;gBAAE,OAAO;YACtB,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAwB,EAAE,EAAE;YAC5C,wEAAwE;YACxE,yDAAyD;YACzD,MAAM,GAAG,GACP,CAAC,CAAC,IAAI,KAAK,cAAc;gBACvB,CAAC,CAAC,iGAAiG;gBACnG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa;oBACrD,CAAC,CAAC,mEAAmE;oBACrE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW;wBACtB,CAAC,CAAC,uBAAuB;wBACzB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QACH,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,sBAAsB,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IAC7H,CAAC,CAAC,CAAC;AACL,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;AACpE,CAAC"}

package/dist/ipc/server.d.ts

@@ -14,6 +14,13 @@ export type IpcHandler = (req: IpcRequest) => Promise<{
 }>;
 export declare class IpcServer {
     private server;
+    /**
+     * The peer listener, if peering is configured. A second server object rather
+     * than a second address on the first, because the two have different trust:
+     * the unix socket is protected by file permissions and everything on it is
+     * already local, while this one must authenticate every request.
+     */
+    private peerServer;
     private readonly handlers;
     private readonly socketPath;
     constructor(socketPath: string);
@@ -25,6 +32,15 @@ export declare class IpcServer {
      * Start listening on the Unix Domain Socket.
      */
     start(): void;
+    /**
+     * The cross-machine door. Closed unless somebody configured it.
+     *
+     * Everything that makes this safe is here rather than spread out: no default
+     * port, no wildcard bind, and a secret checked on every single request before
+     * the method is even looked up. A caller that reached the port has proved
+     * nothing except that it reached the port.
+     */
+    private startPeerListener;
     /**
      * Stop the IPC server.
      */

package/dist/ipc/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/ipc/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,UAAU,EAAe,MAAM,iBAAiB,CAAC;AAK/D,MAAM,MAAM,UAAU,GAAG,CACvB,GAAG,EAAE,UAAU,KACZ,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE3F,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiC;IAC1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAExB,UAAU,EAAE,MAAM;IAI9B;;OAEG;IACH,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,IAAI;IAI7C;;OAEG;IACH,KAAK,IAAI,IAAI;IAqDb;;OAEG;IACH,IAAI,IAAI,IAAI;YAOE,QAAQ;CA0CvB"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/ipc/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,UAAU,EAAe,MAAM,iBAAiB,CAAC;AAM/D,MAAM,MAAM,UAAU,GAAG,CACvB,GAAG,EAAE,UAAU,KACZ,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE3F,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAuB;IACrC;;;;;OAKG;IACH,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiC;IAC1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAExB,UAAU,EAAE,MAAM;IAI9B;;OAEG;IACH,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,IAAI;IAI7C;;OAEG;IACH,KAAK,IAAI,IAAI;IAuDb;;;;;;;OAOG;IACH,OAAO,CAAC,iBAAiB;IA8DzB;;OAEG;IACH,IAAI,IAAI,IAAI;YAQE,QAAQ;CA0CvB"}

package/dist/ipc/server.js

@@ -9,8 +9,16 @@ import { existsSync, unlinkSync } from "node:fs";
 import { log } from "../core/log.js";
 import { sessionRegistry, clientQueues } from "../core/state.js";
 import { aibrokerIdForPane } from "../transport/sync-facade.js";
+import { loadPeering, rejectWildcard, tokenMatches } from "./peering.js";
 export class IpcServer {
     server = null;
+    /**
+     * The peer listener, if peering is configured. A second server object rather
+     * than a second address on the first, because the two have different trust:
+     * the unix socket is protected by file permissions and everything on it is
+     * already local, while this one must authenticate every request.
+     */
+    peerServer = null;
     handlers = new Map();
     socketPath;
     constructor(socketPath) {
@@ -73,12 +81,80 @@ export class IpcServer {
         this.server.on("error", (err) => {
             log(`IPC server error: ${err}`);
         });
+        this.startPeerListener();
+    }
+    /**
+     * The cross-machine door. Closed unless somebody configured it.
+     *
+     * Everything that makes this safe is here rather than spread out: no default
+     * port, no wildcard bind, and a secret checked on every single request before
+     * the method is even looked up. A caller that reached the port has proved
+     * nothing except that it reached the port.
+     */
+    startPeerListener() {
+        let cfg;
+        try {
+            cfg = loadPeering().listen;
+        }
+        catch {
+            return;
+        }
+        if (!cfg?.port || !cfg.host || !cfg.token)
+            return;
+        const refusal = rejectWildcard(cfg.host);
+        if (refusal) {
+            log(`[peer] NOT listening: ${refusal}`);
+            return;
+        }
+        this.peerServer = createServer((socket) => {
+            let buffer = "";
+            socket.on("data", (chunk) => {
+                buffer += chunk.toString();
+                const nl = buffer.indexOf("\n");
+                if (nl === -1)
+                    return;
+                const line = buffer.slice(0, nl);
+                buffer = buffer.slice(nl + 1);
+                const deny = (error) => {
+                    socket.write(JSON.stringify({ id: "unknown", ok: false, error }) + "\n");
+                    socket.end();
+                };
+                let req;
+                try {
+                    req = JSON.parse(line);
+                }
+                catch {
+                    return deny("Invalid JSON");
+                }
+                // Authenticate BEFORE dispatch, and say as little as possible about why.
+                // A caller learning which half of the credential was wrong is a caller
+                // being helped to guess.
+                if (!tokenMatches(req.peerToken, cfg.token)) {
+                    log(`[peer] rejected an unauthenticated request from ${socket.remoteAddress ?? "?"}`);
+                    return deny("not paired with this hub");
+                }
+                this.dispatch(req)
+                    .then((resp) => { socket.write(JSON.stringify(resp) + "\n"); socket.end(); })
+                    .catch((err) => {
+                    socket.write(JSON.stringify({ id: req.id, ok: false, error: err instanceof Error ? err.message : String(err) }) + "\n");
+                    socket.end();
+                });
+            });
+            socket.on("error", () => { });
+        });
+        this.peerServer.listen(cfg.port, cfg.host, () => {
+            log(`[peer] listening on ${cfg.host}:${cfg.port} — paired hubs only`);
+        });
+        this.peerServer.on("error", (err) => {
+            log(`[peer] listener error: ${err}`);
+        });
     }
     /**
      * Stop the IPC server.
      */
     stop() {
         this.server?.close();
+        this.peerServer?.close();
         if (existsSync(this.socketPath)) {
             try {
                 unlinkSync(this.socketPath);

package/dist/ipc/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/ipc/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAkB,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGjD,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAMhE,MAAM,OAAO,SAAS;IACZ,MAAM,GAAkB,IAAI,CAAC;IACpB,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;IACzC,UAAU,CAAS;IAEpC,YAAY,UAAkB;QAC5B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,EAAE,CAAC,MAAc,EAAE,OAAmB;QACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,wBAAwB;QACxB,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,MAAc,EAAE,EAAE;YAC5C,IAAI,MAAM,GAAG,EAAE,CAAC;YAEhB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAClC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC3B,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,EAAE,KAAK,CAAC,CAAC;oBAAE,OAAO;gBAEtB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAE9B,IAAI,GAAe,CAAC;gBACpB,IAAI,CAAC;oBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;gBACvC,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,OAAO,GAAgB,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;oBACjF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;oBAC7C,MAAM,CAAC,GAAG,EAAE,CAAC;oBACb,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;oBAC/B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;oBAC1C,MAAM,CAAC,GAAG,EAAE,CAAC;gBACf,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACf,MAAM,OAAO,GAAgB;wBAC3B,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACxD,CAAC;oBACF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;oBAC7C,MAAM,CAAC,GAAG,EAAE,CAAC;gBACf,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAkC,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE;YACvC,GAAG,CAAC,2BAA2B,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC9B,GAAG,CAAC,qBAAqB,GAAG,EAAE,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;QACrB,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,GAAe;QACpC,2EAA2E;QAC3E,6EAA6E;QAC7E,4EAA4E;QAC5E,4EAA4E;QAC5E,8EAA8E;QAC9E,mEAAmE;QACnE,IAAI,GAAG,CAAC,QAAQ;YAAE,GAAG,CAAC,cAAc,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC;QAEvF,iCAAiC;QACjC,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACrE,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE;gBACjC,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,IAAI,EAAE,iBAAiB;gBACvB,cAAc,EAAE,GAAG,CAAC,cAAc;gBAClC,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;aACzB,CAAC,CAAC;YACH,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3E,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACd,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACzD,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;YACxD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/ipc/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAkB,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGjD,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAMzE,MAAM,OAAO,SAAS;IACZ,MAAM,GAAkB,IAAI,CAAC;IACrC;;;;;OAKG;IACK,UAAU,GAAkB,IAAI,CAAC;IACxB,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;IACzC,UAAU,CAAS;IAEpC,YAAY,UAAkB;QAC5B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,EAAE,CAAC,MAAc,EAAE,OAAmB;QACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,wBAAwB;QACxB,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,MAAc,EAAE,EAAE;YAC5C,IAAI,MAAM,GAAG,EAAE,CAAC;YAEhB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAClC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC3B,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,EAAE,KAAK,CAAC,CAAC;oBAAE,OAAO;gBAEtB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAE9B,IAAI,GAAe,CAAC;gBACpB,IAAI,CAAC;oBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;gBACvC,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,OAAO,GAAgB,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;oBACjF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;oBAC7C,MAAM,CAAC,GAAG,EAAE,CAAC;oBACb,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;oBAC/B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;oBAC1C,MAAM,CAAC,GAAG,EAAE,CAAC;gBACf,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACf,MAAM,OAAO,GAAgB;wBAC3B,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACxD,CAAC;oBACF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;oBAC7C,MAAM,CAAC,GAAG,EAAE,CAAC;gBACf,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAkC,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE;YACvC,GAAG,CAAC,2BAA2B,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC9B,GAAG,CAAC,qBAAqB,GAAG,EAAE,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;;;OAOG;IACK,iBAAiB;QACvB,IAAI,GAAG,CAAC;QACR,IAAI,CAAC;YACH,GAAG,GAAG,WAAW,EAAE,CAAC,MAAM,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK;YAAE,OAAO;QAElD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,OAAO,EAAE,CAAC;YACZ,GAAG,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QAED,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC,CAAC,MAAc,EAAE,EAAE;YAChD,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAClC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC3B,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,EAAE,KAAK,CAAC,CAAC;oBAAE,OAAO;gBACtB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAE9B,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE;oBAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAwB,CAAC,GAAG,IAAI,CAAC,CAAC;oBAC/F,MAAM,CAAC,GAAG,EAAE,CAAC;gBACf,CAAC,CAAC;gBAEF,IAAI,GAAyC,CAAC;gBAC9C,IAAI,CAAC;oBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzB,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC;gBAC9B,CAAC;gBAED,yEAAyE;gBACzE,uEAAuE;gBACvE,yBAAyB;gBACzB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC5C,GAAG,CAAC,mDAAmD,MAAM,CAAC,aAAa,IAAI,GAAG,EAAE,CAAC,CAAC;oBACtF,OAAO,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBAC1C,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;qBACf,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;qBAC5E,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACb,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;oBACxH,MAAM,CAAC,GAAG,EAAE,CAAC;gBACf,CAAC,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAA8C,CAAC,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE;YAC9C,GAAG,CAAC,uBAAuB,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,qBAAqB,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAClC,GAAG,CAAC,0BAA0B,GAAG,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;QACzB,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,GAAe;QACpC,2EAA2E;QAC3E,6EAA6E;QAC7E,4EAA4E;QAC5E,4EAA4E;QAC5E,8EAA8E;QAC9E,mEAAmE;QACnE,IAAI,GAAG,CAAC,QAAQ;YAAE,GAAG,CAAC,cAAc,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC;QAEvF,iCAAiC;QACjC,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACrE,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE;gBACjC,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,IAAI,EAAE,iBAAiB;gBACvB,cAAc,EAAE,GAAG,CAAC,cAAc;gBAClC,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;aACzB,CAAC,CAAC;YACH,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3E,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACd,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACzD,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;YACxD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}